(()=>{function me(i){if(!(typeof i!="string"||i.length>2048||!/^https:\/\/res\.cloudinary\.com\/[A-Za-z0-9_-]+\/image\/upload\/[A-Za-z0-9_.,/-]+$/.test(i)||i.endsWith("/")||i.slice(8).includes("//")||i.split("/").some(e=>e==="."||e==="..")))return i}var be=Object.freeze(["initialising","authenticated","unauthenticated","mfa_required","reauth_required","revoked","unavailable","conflict"]),D=i=>Object.freeze({contractVersion:"1",state:i,account:null,permissions:{summary:[]},assuranceLevel:0,expiresAt:null,nextAction:null});function ae(i,e,f=Date.now()){return i===429||i>=500||!e||typeof e!="object"||e.contractVersion!=="1"||!be.includes(e.state)?D("unavailable"):i===401&&["unauthenticated","revoked"].includes(e.state)?D(e.state):i!==200?D("unavailable"):["unauthenticated","revoked","unavailable","conflict","initialising"].includes(e.state)?D(e.state):["mfa_required","reauth_required"].includes(e.state)?Object.freeze({...D(e.state),nextAction:e.state==="mfa_required"?"mfa":"reauthenticate"}):!e.account||typeof e.account.displayName!="string"||e.account.viewBinding!==void 0&&(typeof e.account.viewBinding!="string"||!/^[A-Za-z0-9_-]{43}$/.test(e.account.viewBinding))||typeof e.account.emailHint!="string"||![1,2].includes(e.assuranceLevel)||!Array.isArray(e.permissions?.summary)||!e.permissions.summary.every(b=>typeof b=="string")||typeof e.expiresAt!="string"||!Number.isFinite(Date.parse(e.expiresAt))||Date.parse(e.expiresAt)<=f||![null,"mfa","reauthenticate"].includes(e.nextAction)?D("unavailable"):Object.freeze({contractVersion:"1",state:e.state,account:{displayName:e.account.displayName,emailHint:e.account.emailHint,...me(e.account.picture)?{picture:e.account.picture}:{},...e.account.viewBinding===void 0?{}:{viewBinding:e.account.viewBinding}},permissions:{summary:[...e.permissions.summary]},assuranceLevel:e.assuranceLevel,expiresAt:e.expiresAt,nextAction:e.nextAction})}function fe(){let i=0,e=D("initialising"),f,b=!1;return{snapshot:()=>e,async refresh(d){if(b)return e;f?.abort();let w=new AbortController;f=w;let L=++i,S;try{let _=await d({signal:w.signal});S=ae(_.status,await _.json())}catch{S=D("unavailable")}return L===i&&!w.signal.aborted&&!b&&(e=S),e},beginLogout(){f?.abort(),i+=1,b=!0,e=D("initialising")},resolveLogout(d){return!b||e.state==="revoked"||(e=D(d===!0?"revoked":"unavailable")),e},invalidate(){f?.abort(),i+=1,b||(e=D("initialising"))}}}var we=Object.freeze({contractVersion:"1",event:"session-invalidated"}),g=()=>new Error("Session temporarily unavailable."),re="__qubicbox_oidc_return=1",xe="/?__qubicbox_logout_return=1";function de({fetchImpl:i=globalThis.fetch,windowObject:e=globalThis.window,documentObject:f=globalThis.document,channelFactory:b=s=>new globalThis.BroadcastChannel(s),setTimer:d=setTimeout,clearTimer:w=clearTimeout,timeoutMs:L=1e4,controlTimeoutMs:S=5e3,invalidationTimeoutMs:_=2e3,pollMs:C=3e4,recoveryMs:N=500,automaticDiscovery:oe=!1,beforeAutomaticNavigation:H}={}){if(H!==void 0&&typeof H!="function"||typeof oe!="boolean"||typeof i!="function"||!Number.isInteger(L)||L<1||L>1e4||!Number.isInteger(S)||S<1||S>5e3||!Number.isInteger(_)||_<500||_>5e3||!Number.isInteger(C)||C<1e4||C>6e4||!Number.isInteger(N)||N<500||N>1e4)throw g();let s=fe(),ne=new Set,M=new Set,c=!1,m=!1,I,U,T,l=0,v,P,F,G,se=0,W=-1/0,Q,ie=-1/0,p=!1,X=!1,Z=0,O=!1,J=!1,q=()=>{let t=s.snapshot().state;t==="authenticated"?J=!0:["initialising","unavailable"].includes(t)||(J=!1);for(let n of ne)try{n()}catch{}},ce=()=>J&&s.snapshot().state==="unavailable",Y=()=>J&&v&&["initialising","unavailable"].includes(s.snapshot().state),k=()=>f?.visibilityState!=="hidden",z=()=>{w(U),U=void 0},K=()=>{w(T),T=void 0};function pe(t){return t.aborted?Promise.reject(g()):f?.readyState!=="loading"&&!H?Promise.resolve():new Promise((n,a)=>{let r=new AbortController,o,u=!1,h=!1,y=R=>{u||(u=!0,w(o),f?.removeEventListener("DOMContentLoaded",A),t.removeEventListener("abort",E),r.abort(),R?a(R):n())},A=()=>{if(!(h||u)){if(h=!0,!H)return y();Promise.resolve().then(()=>{if(r.signal.aborted)throw g();return H(r.signal)}).then(()=>y(),()=>y(g()))}},E=()=>y(g());f?.addEventListener("DOMContentLoaded",A,{once:!0}),t.addEventListener("abort",E,{once:!0}),o=d(E,L),t.aborted?E():f?.readyState!=="loading"&&A()})}function ye(){let t=e?.location;if(!t)throw g();if(t.pathname==="/auth/v1/sign-in")return new URLSearchParams(t.search??"").get("returnTo")??"/";let n=t.search??"",a=`?${re}`,r=`&${re}`;if(n.endsWith(a)||n.endsWith(r)){n=n.slice(0,-re.length-1);try{let o=`${t.pathname}${n}${t.hash??""}`;e.history?.replaceState(e.history.state,"",o)}catch{}}return`${t.pathname}${n}${t.hash??""}`}async function V(t,n,a=!1,r={}){let o=new AbortController;M.add(o);let u,h;try{let y=new Promise((E,R)=>{h=()=>{o.abort(),R(g())},n?.addEventListener("abort",h,{once:!0}),o.signal.addEventListener("abort",()=>R(g()),{once:!0});let B=Date.parse(s.snapshot().expiresAt),ee=t==="invalidation"?_:t==="logout"?S:L,ve=!a&&Number.isFinite(B)?Math.max(1,Math.min(ee,B-Date.now())):ee;u=d(h,ve),n?.aborted&&h()});return await Promise.race([y,(async()=>{let E=await i(`/api/auth/v1/${t}`,{method:a?"POST":"GET",credentials:"same-origin",cache:"no-store",redirect:"error",signal:o.signal,headers:a?{"content-type":"application/json","x-qubicbox-auth":"1"}:{},...a?{body:JSON.stringify(r)}:{}}),R=E.status===204?null:await E.json();return{status:E.status,json:async()=>R}})()])}finally{w(u),n?.removeEventListener("abort",h),o.abort(),M.delete(o)}}function j(t=0){if(m||(z(),!c||p))return;let n=Date.parse(s.snapshot().expiresAt),a=s.snapshot().state,r=a==="authenticated",o=Y();if(!k()&&!r&&!ce()&&!o)return;let u=Math.max(1,500-t),h=r||o?v?u:Math.max(1,Math.min(u,se-Date.now())):a==="unavailable"?Math.min(C,N*2**Math.max(0,Z-1)):C,y=Number.isFinite(n)?Math.max(1,Math.min(h,n-Date.now())):h;U=d(()=>{Number.isFinite(n)&&n<=Date.now()?x({invalidate:!0}):r&&(v||Date.now(){let u;try{u=await V("invalidation",r.signal)}catch{u={status:503,json:async()=>null}}if(!c||p||a!==l)return s.snapshot();if(u.status===204&&s.snapshot().state==="authenticated"&&(W=Date.now()),u.status!==204){let h=await u.json();if(!c||p||a!==l)return s.snapshot();let y=u.status===200&&h?.contractVersion==="1"&&["unauthenticated","revoked"].includes(h.state);a=++l,await s.refresh(async()=>y?u:{status:503,json:async()=>null}),c&&a===l&&(Z=s.snapshot().state==="unavailable"?Math.min(16,Z+1):0,q())}return c&&!p&&a===l&&j(Math.max(0,Date.now()-n)),s.snapshot()})().finally(()=>{P===o&&(P=void 0),G===r&&(G=void 0)});return P=o,o}function x({invalidate:t=!1}={}){if(!c||p)return Promise.resolve(s.snapshot());if(m){if(!k())return Promise.resolve(s.snapshot());m=!1}if(v&&!t)return v;t&&(s.invalidate(),q()),z();let n=++l;G?.abort(),P=void 0;let a=s.refresh(async({signal:r})=>{if(oe&&!X&&!O&&!p&&c&&!r.aborted){X=!0;let u=e?.location;if(!u||typeof u.assign!="function")throw g();let h=await V("bootstrap",r,!0,{returnRoute:ye()});if(r.aborted||!c||p||n!==l)throw g();let y=await h.json();if(h.status===200&&y&&Object.hasOwn(y,"authorizationUrl")){if(Object.keys(y).join(",")!=="authorizationUrl")throw g();let A=new URL(y.authorizationUrl);if(A.protocol!=="https:"||A.username||A.password||A.hash||A.pathname!=="/o/authorize/"||A.searchParams.get("prompt")!=="none"||(await pe(r),r.aborted||!c||p||n!==l))throw g();if(O)return V("session",r);K();let E=n,R=0,B=async()=>{if(!c||p||O||E!==l)return;if(!k()){T=d(B,N);return}T=void 0;let ee=l+1;await x(),R+=1,!(!c||p||O||l!==ee||s.snapshot().state!=="unauthenticated"||R>=10)&&(E=l,T=d(B,N))};return T=d(B,250),u.assign(A.href),{status:200,json:async()=>({contractVersion:"1",state:"initialising"})}}return h}return await V("session",r)}).then(()=>(v===a&&(v=void 0),c&&n===l&&(s.snapshot().state==="authenticated"&&(W=Date.now()),s.snapshot().state!=="initialising"&&K(),Z=s.snapshot().state==="unavailable"?Math.min(16,Z+1):0,se=Date.now()+C,q(),j()),s.snapshot())).finally(()=>{v===a&&(v=void 0)});return v=a,(s.snapshot().state==="authenticated"||Y())&&j(),a}let ue=t=>{let n=Date.now();if(t?.isTrusted!==!0||!["pointerdown","keydown","wheel"].includes(t.type)||!c||m||p||!k()||(O=!0,K(),Q||s.snapshot().state!=="authenticated"||Date.parse(s.snapshot().expiresAt)<=n||n>=ie&&n-ie<6e4))return;ie=n;let a=l,r=(async()=>{try{let o=await V("activity",void 0,!0);if(!c||m||p||a!==l)return;o.status===204?await x():o.status===200&&await x({invalidate:!0})}catch{}})().finally(()=>{Q===r&&(Q=void 0)});Q=r},$=t=>{if(m){if(!k())return;m=!1,x({invalidate:!0});return}if(t?.type==="pageshow"&&t.persisted===!1)return;if(!k()){s.snapshot().state==="authenticated"||ce()?j():z();return}if(v&&s.snapshot().state==="initialising")return;let n=s.snapshot();if(t?.type==="visibilitychange"&&n.state==="authenticated"&&Date.parse(n.expiresAt)>Date.now()&&Date.now()>=W&&Date.now()-W<=2e3){x();return}x({invalidate:!0})},le=t=>{let n=t?.data;n&&Object.keys(n).sort().join(",")==="contractVersion,event"&&n.contractVersion==="1"&&n.event==="session-invalidated"&&(X=!0,x({invalidate:!0}))};return Object.freeze({snapshot:s.snapshot,subscribe(t){if(typeof t!="function")throw g();return ne.add(t),()=>ne.delete(t)},start(){if(c)return v??Promise.resolve(s.snapshot());c=!0;let t=e?.location;if(t?.pathname==="/"&&t.search===xe.slice(1)&&!t.hash){X=!0;try{e.history?.replaceState(e.history.state,"","/")}catch{}}e?.addEventListener("online",$),e?.addEventListener("pageshow",$),f?.addEventListener("visibilitychange",$);for(let n of["pointerdown","keydown","wheel"])f?.addEventListener(n,ue,{passive:!0,capture:!0});try{I=b("qubicbox-auth-ui-v1"),I.addEventListener("message",le)}catch{I=void 0}return x()},suspend(){if(!c||p||m)return s.snapshot();m=!0;let t=++l;z(),G?.abort(),P=void 0;for(let a of M)a.abort();v=void 0,s.invalidate(),q();let n=()=>{if(!(!c||!m||p||t!==l)){if(!k()){U=d(n,N);return}m=!1,x({invalidate:!0})}};return U=d(n,1),s.snapshot()},stop(){c=!1,W=-1/0,J=!1,m=!1,l+=1,z(),K(),e?.removeEventListener("online",$),e?.removeEventListener("pageshow",$),f?.removeEventListener("visibilitychange",$);for(let t of["pointerdown","keydown","wheel"])f?.removeEventListener(t,ue,!0);try{I?.removeEventListener("message",le),I?.close()}catch{}I=void 0;for(let t of M)t.abort();v=void 0,P=void 0,p||s.invalidate(),q()},refresh:x,logout(){if(F)return F;if(!c||s.snapshot().state==="revoked")return Promise.resolve(s.snapshot());p=!0,m=!1,l+=1,z(),K(),s.beginLogout(),q();let t=(async()=>{let n=!1;try{let a=await V("logout",void 0,!0);n=a.status===200&&ae(a.status,await a.json()).state==="revoked"}catch{}if(s.resolveLogout(n),n)try{I?.postMessage(we)}catch{}return q(),s.snapshot()})().finally(()=>{F===t&&(F=void 0)});return F=t,t}})}var te=Symbol.for("@qubicbox/ecosystem-auth/early-session/0.30.46");function he({windowObject:i=globalThis.window,documentObject:e=globalThis.document,clientOptions:f={}}={}){if(!i||e?.documentElement?.getAttribute("data-ecosystem-auth")!=="v1")return;let b=i[te];if(b)return b;let d=de({...f,windowObject:i,documentObject:e,automaticDiscovery:!0}),w=!1,L=!1,S=()=>{w=!0,d.suspend()},_=()=>{!w||L||(w=!1,d.refresh({invalidate:!0}))},C=Object.freeze({client:d,dispose(){L||(L=!0,i.removeEventListener("pagehide",S),i.removeEventListener("pageshow",_),d.stop(),i[te]===C&&delete i[te])}});return Object.defineProperty(i,te,{value:C,configurable:!0}),i.addEventListener("pagehide",S),i.addEventListener("pageshow",_),d.start(),C}he();})();