diff --git a/backend/pom.xml b/backend/pom.xml
index 8460438..8224613 100644
--- a/backend/pom.xml
+++ b/backend/pom.xml
@@ -45,6 +45,9 @@
${postgresql.version}
+
+ dev.samstevens.totp totp 1.7.1 io.jsonwebtoken jjwt-api ${jjwt.version} io.jsonwebtoken jjwt-impl ${jjwt.version} runtime base path {@code /api/admin/**} 는 SecurityConfig 에서 {@code hasRole("ADMIN")} 로 강제된다.
+ * 대상 사용자의 OTP 시크릿을 폐기하고 등록을 해제(otp_secret=NULL, otp_enabled=false)하여
+ * 다음 로그인 시 OTP_SETUP(QR 재등록) 플로우를 타게 한다.
+ *
+ *
로그인 인증 테이블(esn_user)을 username 기준으로 초기화한다(시스템 관리 화면의 userId == 로그인 username).
+ * 보안 불변: 시크릿/코드는 응답·로그에 노출하지 않는다.
+ */
+@Slf4j
+@RestController
+@RequestMapping("/api/admin/users")
+@RequiredArgsConstructor
+public class AdminOtpController {
+
+ private final UserAuthMapper userMapper;
+
+ /** 관리자 OTP 초기화(다음 로그인 재등록 유도). */
+ @PostMapping("/{username}/otp-reset")
+ public ApiResponse> resetOtp(@PathVariable("username") String username) {
+ userMapper.clearOtp(username);
+ log.info("[otp] admin reset (re-enroll on next login): username={}", username);
+ return ApiResponse.ok(Map.of("result", "ok"));
+ }
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java b/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java
index 54fded8..1a8e05e 100644
--- a/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java
+++ b/backend/src/main/java/com/zioinfo/esn/auth/AuthController.java
@@ -1,7 +1,15 @@
package com.zioinfo.esn.auth;
+import com.zioinfo.esn.auth.dto.ChangePasswordRequest;
+import com.zioinfo.esn.auth.dto.OtpConfirmRequest;
+import com.zioinfo.esn.auth.dto.OtpSetupResponse;
+import com.zioinfo.esn.auth.dto.OtpVerifyRequest;
import com.zioinfo.esn.common.ApiResponse;
+import com.zioinfo.esn.uiws.auth.OtpAuthService;
import com.zioinfo.esn.uiws.auth.TwoFactorService;
+import com.zioinfo.esn.uiws.common.UiwsApiException;
+import com.zioinfo.esn.uiws.common.UiwsErrorCode;
+import jakarta.validation.Valid;
import lombok.RequiredArgsConstructor;
import org.springframework.web.bind.annotation.*;
@@ -9,8 +17,10 @@ import java.util.Map;
/**
* ESN 인증 컨트롤러.
- * - /login: 2FA off 면 { twofa:"false", token, type }, 2FA on 이면 { twofa:"true", verifyToken, step, maskedEmail }.
- * - /verify: (UIWS 2FA 이식) verify-token + 인증코드 → access 토큰 발급.
+ * - /login: 2FA off 면 { twofa:"false", token, type }, 2FA on 이면 OTP({twofa,verifyToken,verifyMethod,...}) 또는 이메일코드.
+ * - /verify: (UIWS 2FA 이식) 이메일 verify-token + 코드 → access 발급.
+ * - /verify-otp: (TOTP 이식) verify-token + 6자리 → access 발급(최초 로그인이면 등록 확정).
+ * - /otp/setup·confirm·disable, /change-password: 마이페이지(본인 access 토큰 필요).
* 기존 클라이언트는 응답에 token 필드가 그대로 존재(2FA off 시) → 회귀 0.
*/
@RestController
@@ -20,24 +30,75 @@ public class AuthController {
private final AuthService authService;
private final TwoFactorService twoFactorService;
+ private final OtpAuthService otpAuthService;
+ private final JwtUtil jwtUtil;
@PostMapping("/login")
public ApiResponse> login(@RequestBody LoginRequest req) {
return ApiResponse.ok(authService.login(req.username(), req.password()));
}
- /** UIWS 2FA 이식: 2차 인증 코드 검증 → access 토큰 발급. */
+ /** UIWS 2FA(이메일코드) 이식: 2차 인증 코드 검증 → access 토큰 발급. */
@PostMapping("/verify")
public ApiResponse> verify(@RequestBody VerifyRequest req) {
return ApiResponse.ok(twoFactorService.verify(req.verifyToken(), req.code()));
}
+ /** TOTP 이식: 로그인 2단계 6자리 검증 → access 토큰 발급(최초 로그인이면 등록 확정). */
+ @PostMapping("/verify-otp")
+ public ApiResponse> verifyOtp(@Valid @RequestBody OtpVerifyRequest req) {
+ return ApiResponse.ok(otpAuthService.verifyOtp(req.verifyToken(), req.code()));
+ }
+
@GetMapping("/me")
public ApiResponse> me(@RequestHeader("Authorization") String header) {
String token = header.replace("Bearer ", "");
return ApiResponse.ok(authService.me(token));
}
+ // ── 마이페이지: OTP 등록/재설정/해제 + 비밀번호 변경 (본인, access 토큰 필요) ──────────
+ // (/api/auth/** 는 permitAll 이라 필터 인증이 없으므로 여기서 access 토큰을 명시 검증.)
+
+ /** 마이페이지 OTP 등록/재설정 시작 → { secret, otpAuthUri, qrImage }(이 응답에서만 시크릿/QR 노출). */
+ @PostMapping("/otp/setup")
+ public ApiResponse otpSetup(@RequestHeader("Authorization") String header) {
+ return ApiResponse.ok(otpAuthService.setup(requireUser(header)));
+ }
+
+ /** 마이페이지 OTP 확인·활성화(앱 6자리 코드). */
+ @PostMapping("/otp/confirm")
+ public ApiResponse> otpConfirm(@RequestHeader("Authorization") String header,
+ @Valid @RequestBody OtpConfirmRequest req) {
+ otpAuthService.confirm(requireUser(header), req.code());
+ return ApiResponse.ok(Map.of("result", "ok"));
+ }
+
+ /** 마이페이지 OTP 해제. */
+ @PostMapping("/otp/disable")
+ public ApiResponse> otpDisable(@RequestHeader("Authorization") String header) {
+ otpAuthService.disable(requireUser(header));
+ return ApiResponse.ok(Map.of("result", "ok"));
+ }
+
+ /** 마이페이지 비밀번호 변경(현재 비번 검증 + BCrypt). 새 비번은 응답/로그 미포함. */
+ @PostMapping("/change-password")
+ public ApiResponse> changePassword(@RequestHeader("Authorization") String header,
+ @Valid @RequestBody ChangePasswordRequest req) {
+ authService.changePassword(requireUser(header), req);
+ return ApiResponse.ok(Map.of("result", "ok"));
+ }
+
+ /**
+ * Authorization 헤더에서 인증 사용자를 해석한다. verify-token(2fa 단계용)은 거부(2FA 우회 차단).
+ */
+ private String requireUser(String header) {
+ String token = header == null ? "" : header.replace("Bearer ", "").trim();
+ if (token.isEmpty() || jwtUtil.isVerifyToken(token) || !jwtUtil.isValid(token)) {
+ throw new UiwsApiException(UiwsErrorCode.UNAUTHORIZED);
+ }
+ return jwtUtil.getUsername(token);
+ }
+
@PostMapping("/logout")
public ApiResponse logout() {
// JWT stateless — 클라이언트에서 토큰 삭제
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java b/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java
index 5245b05..784a0c3 100644
--- a/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java
+++ b/backend/src/main/java/com/zioinfo/esn/auth/AuthService.java
@@ -1,21 +1,26 @@
package com.zioinfo.esn.auth;
+import com.zioinfo.esn.auth.dto.ChangePasswordRequest;
import com.zioinfo.esn.auth.mapper.UserAuthMapper;
+import com.zioinfo.esn.uiws.auth.OtpAuthService;
import com.zioinfo.esn.uiws.auth.TwoFactorService;
import com.zioinfo.esn.uiws.common.UiwsApiException;
import com.zioinfo.esn.uiws.common.UiwsErrorCode;
import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
import java.util.Map;
/**
* ESN 인증 서비스.
* - 기존 단일 JWT 로그인 보존(2FA off 또는 미설정 시 회귀 0).
- * - UIWS 2FA 레이어(이메일 코드) 추가: 2FA on 이면 1차 통과 후 verify-token + 이메일코드 발급.
+ * - UIWS 2FA 레이어 추가: 우선순위 OTP(TOTP) → 이메일코드 → 단일 로그인.
* 실패 누적 max-login-fail 회 시 계정 잠금.
*/
+@Slf4j
@Service
@RequiredArgsConstructor
public class AuthService {
@@ -24,6 +29,7 @@ public class AuthService {
private final PasswordEncoder passwordEncoder;
private final JwtUtil jwtUtil;
private final TwoFactorService twoFactorService;
+ private final OtpAuthService otpAuthService;
/**
* 1차 로그인. 2FA 활성 시 verify-token + 이메일코드 흐름으로 분기,
@@ -48,8 +54,8 @@ public class AuthService {
throw new RuntimeException("ERR-AUTH-003: 승인 대기 중인 계정입니다. 관리자 승인 후 로그인하세요.");
}
if (!passwordEncoder.matches(password, user.getPasswordHash())) {
- // 2FA 활성 시 실패 누적/잠금. 비활성 시 기존 동작(메시지만) 유지.
- if (twoFactorService.isEnabled()) {
+ // 2FA(OTP 또는 이메일) 활성 시 실패 누적/잠금. 비활성 시 기존 동작(메시지만) 유지.
+ if (otpAuthService.isEnabled() || twoFactorService.isEnabled()) {
twoFactorService.recordLoginFailure(username);
EsnUser after = userMapper.findByUsername(username);
if (after != null && Boolean.TRUE.equals(after.getLocked())) {
@@ -59,7 +65,11 @@ public class AuthService {
throw new RuntimeException("ERR-AUTH-002: 비밀번호 불일치");
}
- // 비밀번호 검증 통과
+ // 비밀번호 검증 통과 — 2단계 우선순위: OTP > 이메일코드 > 단일 로그인
+ if (otpAuthService.isEnabled()) {
+ // { twofa:true, verifyToken, verifyMethod:(OTP|OTP_SETUP), secret?, otpAuthUri?, qrImage? }
+ return otpAuthService.beginOtp(user);
+ }
if (twoFactorService.isEnabled()) {
Map step1 = twoFactorService.beginTwoFactor(user);
return Map.of(
@@ -83,4 +93,25 @@ public class AuthService {
"tenant", jwtUtil.getTenant(token) != null ? jwtUtil.getTenant(token) : ""
);
}
+
+ /**
+ * 마이페이지 비밀번호 변경(현재 비밀번호 검증 + BCrypt 저장). UIWS changePassword 미러.
+ * 현재 비번 불일치 → PASSWORD_MISMATCH, 기존과 동일 → PASSWORD_SAME_AS_OLD.
+ * 새 비밀번호 평문은 로그/응답에 절대 기록하지 않는다(보안 불변규칙).
+ */
+ @Transactional
+ public void changePassword(String username, ChangePasswordRequest req) {
+ EsnUser user = userMapper.findByUsername(username);
+ if (user == null) {
+ throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND);
+ }
+ if (!passwordEncoder.matches(req.currentPassword(), user.getPasswordHash())) {
+ throw new UiwsApiException(UiwsErrorCode.PASSWORD_MISMATCH);
+ }
+ if (passwordEncoder.matches(req.newPassword(), user.getPasswordHash())) {
+ throw new UiwsApiException(UiwsErrorCode.PASSWORD_SAME_AS_OLD);
+ }
+ userMapper.updatePasswordByUsername(username, passwordEncoder.encode(req.newPassword()));
+ log.info("[auth] password changed by owner: username={}", username);
+ }
}
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java b/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java
index e54569e..f7100cc 100644
--- a/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java
+++ b/backend/src/main/java/com/zioinfo/esn/auth/EsnUser.java
@@ -30,9 +30,11 @@ public class EsnUser {
private Integer loginFailCount;
/** 계정 잠금 여부(기본 false). */
private Boolean locked;
- /** TOTP 시크릿(UIWS OTP 경로 대비, 현재 이메일 흐름에서는 미사용). */
+ /** TOTP 시크릿(보류/확정 공용). API 응답·로그 미노출. */
@JsonIgnore
private String otpSecret;
+ /** OTP 등록 확정 여부(기본 false). 최초 로그인 verify 성공 시 true. (db/93_auth_otp.sql) */
+ private Boolean otpEnabled;
// ── UIWS 로그인 보조 이식 컬럼 (esn_user ALTER, db/90_uiws_system.sql) ────────
/** 회원가입 승인 여부(기본 true=기존계정). 신규 가입자는 false → ADMIN 승인 전 로그인 차단. */
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/dto/ChangePasswordRequest.java b/backend/src/main/java/com/zioinfo/esn/auth/dto/ChangePasswordRequest.java
new file mode 100644
index 0000000..199fe12
--- /dev/null
+++ b/backend/src/main/java/com/zioinfo/esn/auth/dto/ChangePasswordRequest.java
@@ -0,0 +1,12 @@
+package com.zioinfo.esn.auth.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
+
+/** 마이페이지 비밀번호 변경 요청 — 현재 비밀번호 검증 + 새 비밀번호(BCrypt 저장). */
+public record ChangePasswordRequest(
+ @NotBlank(message = "현재 비밀번호는 필수입니다.") String currentPassword,
+ @NotBlank(message = "새 비밀번호는 필수입니다.")
+ @Size(min = 8, message = "새 비밀번호는 최소 8자입니다.") String newPassword
+) {
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpConfirmRequest.java b/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpConfirmRequest.java
new file mode 100644
index 0000000..0454fa5
--- /dev/null
+++ b/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpConfirmRequest.java
@@ -0,0 +1,7 @@
+package com.zioinfo.esn.auth.dto;
+
+import jakarta.validation.constraints.NotBlank;
+
+/** Authenticator(TOTP) 등록 확인 요청 — 앱에 표시된 6자리 코드. */
+public record OtpConfirmRequest(@NotBlank String code) {
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpSetupResponse.java b/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpSetupResponse.java
new file mode 100644
index 0000000..90b4611
--- /dev/null
+++ b/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpSetupResponse.java
@@ -0,0 +1,13 @@
+package com.zioinfo.esn.auth.dto;
+
+/**
+ * Authenticator(TOTP) 등록 셋업 응답 — UIWS OtpSetupResponse 미러.
+ *
+ * secret : Base32 TOTP 시크릿(수동 입력용)
+ * otpAuthUri : otpauth://totp/... (Authenticator 앱 직접 등록용 URI)
+ * qrImage : data:image/png;base64,... (QR 이미지, <img src> 로 표시)
+ *
+ * 보안 불변: 이 응답(등록 순간)에서만 시크릿/QR 노출. 조회/목록/재조회 응답에 재노출 금지.
+ */
+public record OtpSetupResponse(String secret, String otpAuthUri, String qrImage) {
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpVerifyRequest.java b/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpVerifyRequest.java
new file mode 100644
index 0000000..65c0991
--- /dev/null
+++ b/backend/src/main/java/com/zioinfo/esn/auth/dto/OtpVerifyRequest.java
@@ -0,0 +1,10 @@
+package com.zioinfo.esn.auth.dto;
+
+import jakarta.validation.constraints.NotBlank;
+
+/** 로그인 2단계 TOTP 검증 요청 — { verifyToken, code }. */
+public record OtpVerifyRequest(
+ @NotBlank(message = "verifyToken은 필수입니다.") String verifyToken,
+ @NotBlank(message = "code는 필수입니다.") String code
+) {
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java b/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java
index 9f83a8c..07c5166 100644
--- a/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java
+++ b/backend/src/main/java/com/zioinfo/esn/auth/mapper/UserAuthMapper.java
@@ -29,4 +29,22 @@ public interface UserAuthMapper {
/** 관리자 잠금 해제(실패 카운트/잠금 초기화). */
int unlock(@Param("username") String username);
+
+ /** 임시/신규 비밀번호(BCrypt) 저장 + 잠금/실패카운트 해제. 평문은 절대 저장하지 않는다. */
+ int updatePasswordByUsername(@Param("username") String username,
+ @Param("passwordHash") String passwordHash);
+
+ // ── TOTP(OTP 2차 인증) 이식 (멱등 UPDATE) ────────────────────────────────────
+
+ /** 보류 시크릿 저장(등록 확정 전). otp_enabled 은 건드리지 않는다(verify/confirm 에서 확정). */
+ int updateOtpSecret(@Param("username") String username, @Param("secret") String secret);
+
+ /** 등록 확정: otp_enabled=true (시크릿 유지). */
+ int enableOtp(@Param("username") String username);
+
+ /** 마이페이지 해제: 시크릿 폐기 + otp_enabled=false. */
+ int disableOtp(@Param("username") String username);
+
+ /** 관리자 OTP 초기화: 시크릿 폐기 + otp_enabled=false (다음 로그인 재등록 유도). */
+ int clearOtp(@Param("username") String username);
}
diff --git a/backend/src/main/java/com/zioinfo/esn/config/AdminPasswordSeeder.java b/backend/src/main/java/com/zioinfo/esn/config/AdminPasswordSeeder.java
new file mode 100644
index 0000000..9c29569
--- /dev/null
+++ b/backend/src/main/java/com/zioinfo/esn/config/AdminPasswordSeeder.java
@@ -0,0 +1,130 @@
+package com.zioinfo.esn.config;
+
+import com.zioinfo.esn.auth.mapper.UserAuthMapper;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.ApplicationArguments;
+import org.springframework.boot.ApplicationRunner;
+import org.springframework.core.annotation.Order;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.stereotype.Component;
+
+import javax.crypto.Cipher;
+import javax.crypto.spec.GCMParameterSpec;
+import javax.crypto.spec.SecretKeySpec;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.Arrays;
+import java.util.Base64;
+
+/**
+ * admin 비밀번호 암호화 재시드(UIMS 방식 + 암호화 저장).
+ *
+ * 기동 시 멱등 재시드:
+ *
+ * ADMIN_KEY_FILE(hex 32바이트 키 파일) 로드 → ADMIN_PASSWORD_ENC(base64(nonce12 + ct + tag), AES-256-GCM) 복호
+ * → admin 계정 BCrypt 해시 갱신(하드코딩 admin123 시드를 env 값으로 덮어씀).
+ *
+ *
+ * 안전 규칙:
+ *
+ * env 미설정 / 키 로드 실패 / 복호 실패 시 재시드 스킵 (기동 계속). WARN 로그에 값(평문/키/시크릿) 미기록 .
+ * 새 admin 비밀번호 값은 서버 env 에만 존재 — 코드/DB/로그/응답에 평문 미기재(보안 불변규칙).
+ * 키 값은 별도 파일(root 600)에만 — env/코드/git 에 키 미기재. 여기서는 파일 경로만 읽는다.
+ *
+ *
+ * 스키마 init(schema.sql: admin/admin123 시드) 이후 실행되어 기존 해시를 덮어쓴다(멱등: 매 기동 동일 결과).
+ */
+@Slf4j
+@Component
+@Order(Integer.MIN_VALUE + 10)
+@RequiredArgsConstructor
+public class AdminPasswordSeeder implements ApplicationRunner {
+
+ private static final String ADMIN_USERNAME = "admin";
+ private static final int GCM_TAG_BITS = 128;
+ private static final int NONCE_LEN = 12;
+
+ @Value("${ADMIN_PASSWORD_ENC:}")
+ private String adminPasswordEnc;
+
+ @Value("${ADMIN_KEY_FILE:}")
+ private String adminKeyFile;
+
+ private final UserAuthMapper userMapper;
+ private final PasswordEncoder passwordEncoder;
+
+ @Override
+ public void run(ApplicationArguments args) {
+ if (isBlank(adminPasswordEnc) || isBlank(adminKeyFile)) {
+ log.info("[admin-reseed] ADMIN_PASSWORD_ENC/ADMIN_KEY_FILE 미설정 — 재시드 스킵(기동 계속)");
+ return;
+ }
+ char[] plain = null;
+ byte[] key = null;
+ try {
+ key = loadHexKey(adminKeyFile); // hex 32바이트 → 32B (AES-256)
+ plain = decrypt(adminPasswordEnc, key); // base64(nonce12+ct+tag) → 평문
+ String hash = passwordEncoder.encode(new String(plain));
+ int updated = userMapper.updatePasswordByUsername(ADMIN_USERNAME, hash);
+ if (updated > 0) {
+ log.info("[admin-reseed] admin 비밀번호 env 값으로 재시드 완료(멱등)");
+ } else {
+ log.warn("[admin-reseed] admin 계정 미존재 — 재시드 스킵");
+ }
+ } catch (Exception e) {
+ // 값 미기록: 예외 클래스명만(메시지에 평문/키가 섞일 여지 차단)
+ log.warn("[admin-reseed] 복호/재시드 실패 — 스킵(기동 계속). cause={}", e.getClass().getSimpleName());
+ } finally {
+ if (plain != null) Arrays.fill(plain, '\0');
+ if (key != null) Arrays.fill(key, (byte) 0);
+ }
+ }
+
+ /** 키 파일(hex 문자열, 공백/개행 무시)을 32바이트 키로 로드. 32바이트가 아니면 예외. */
+ private static byte[] loadHexKey(String path) throws Exception {
+ String hex = Files.readString(Path.of(path), StandardCharsets.UTF_8)
+ .replaceAll("\\s", "");
+ byte[] key = hexToBytes(hex);
+ if (key.length != 32) {
+ throw new IllegalStateException("key length != 32 bytes");
+ }
+ return key;
+ }
+
+ /** base64(nonce12 + ciphertext + tag) → AES-256-GCM 복호 평문(char[]). */
+ private static char[] decrypt(String encBase64, byte[] key) throws Exception {
+ byte[] blob = Base64.getDecoder().decode(encBase64.trim());
+ if (blob.length <= NONCE_LEN) {
+ throw new IllegalStateException("cipher blob too short");
+ }
+ byte[] nonce = Arrays.copyOfRange(blob, 0, NONCE_LEN);
+ byte[] ct = Arrays.copyOfRange(blob, NONCE_LEN, blob.length);
+ Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
+ cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(key, "AES"),
+ new GCMParameterSpec(GCM_TAG_BITS, nonce));
+ byte[] out = cipher.doFinal(ct);
+ char[] chars = new String(out, StandardCharsets.UTF_8).toCharArray();
+ Arrays.fill(out, (byte) 0);
+ return chars;
+ }
+
+ private static byte[] hexToBytes(String hex) {
+ int len = hex.length();
+ if (len % 2 != 0) {
+ throw new IllegalStateException("odd hex length");
+ }
+ byte[] out = new byte[len / 2];
+ for (int i = 0; i < len; i += 2) {
+ out[i / 2] = (byte) ((Character.digit(hex.charAt(i), 16) << 4)
+ + Character.digit(hex.charAt(i + 1), 16));
+ }
+ return out;
+ }
+
+ private static boolean isBlank(String s) {
+ return s == null || s.isBlank();
+ }
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/auth/OtpAuthService.java b/backend/src/main/java/com/zioinfo/esn/uiws/auth/OtpAuthService.java
new file mode 100644
index 0000000..ef8f0df
--- /dev/null
+++ b/backend/src/main/java/com/zioinfo/esn/uiws/auth/OtpAuthService.java
@@ -0,0 +1,165 @@
+package com.zioinfo.esn.uiws.auth;
+
+import com.zioinfo.esn.auth.EsnUser;
+import com.zioinfo.esn.auth.JwtUtil;
+import com.zioinfo.esn.auth.dto.OtpSetupResponse;
+import com.zioinfo.esn.auth.mapper.UserAuthMapper;
+import com.zioinfo.esn.uiws.common.UiwsApiException;
+import com.zioinfo.esn.uiws.common.UiwsErrorCode;
+import com.zioinfo.esn.uiws.config.UiwsProperties;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+/**
+ * TOTP(OTP 2차 인증) 오케스트레이션 레이어 — UIWS/OCR 의 OTP 경로 미러.
+ *
+ *
흐름:
+ *
+ * 1차 로그인 성공 → {@link #beginOtp}: verify-token 발급 + (미등록이면 보류 시크릿+QR) 반환.
+ * {@code POST /verify-otp}(verifyToken+code) → {@link #verifyOtp}: 6자리 검증 후 access 발급.
+ * 최초 로그인이면 등록 확정(otp_enabled=true).
+ * 마이페이지: {@link #setup}/{@link #confirm}/{@link #disable}.
+ *
+ *
+ * 보안 불변: 시크릿·QR·otpauth URI 는 setup/OTP_SETUP 응답에서만 노출. 로그에 시크릿/코드 미기록.
+ * 기존 auth(JWT·RBAC) 엔진 교체 없음 — TOTP 레이어만 추가. access 는 ESN JwtUtil(3-클레임) 재사용.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class OtpAuthService {
+
+ private final UserAuthMapper userMapper;
+ private final JwtUtil jwtUtil;
+ private final TotpService totpService;
+ private final UiwsProperties properties;
+
+ /** 로그인 2단계에 OTP 경로를 사용할지. */
+ public boolean isEnabled() {
+ return properties.getAuth().isOtpEnabled();
+ }
+
+ private static boolean blank(String s) {
+ return s == null || s.isBlank();
+ }
+
+ /**
+ * 1차 로그인 성공 후 OTP 2단계 시작.
+ * @return 미등록: { twofa:true, verifyToken, verifyMethod:OTP_SETUP, secret, otpAuthUri, qrImage }
+ * 등록됨: { twofa:true, verifyToken, verifyMethod:OTP }
+ */
+ @Transactional
+ public Map beginOtp(EsnUser user) {
+ long tokenValidity = properties.getAuth().getVerifyTokenValiditySeconds();
+ String verifyToken = jwtUtil.generateVerifyToken(user.getUsername(), tokenValidity);
+ // 성공 시 실패카운트 초기화(잠금 회복)
+ userMapper.resetLoginFail(user.getUsername());
+
+ Map resp = new LinkedHashMap<>();
+ resp.put("twofa", "true");
+ resp.put("verifyToken", verifyToken);
+
+ if (blank(user.getOtpSecret())) {
+ // 미등록 최초 로그인 — 보류 시크릿 발급 + QR(이 응답에서만 노출)
+ String secret = totpService.generateSecret();
+ userMapper.updateOtpSecret(user.getUsername(), secret);
+ resp.put("verifyMethod", "OTP_SETUP");
+ resp.put("secret", secret);
+ resp.put("otpAuthUri", totpService.otpAuthUri(secret, user.getUsername()));
+ resp.put("qrImage", totpService.qrImageDataUri(secret, user.getUsername()));
+ } else {
+ resp.put("verifyMethod", "OTP");
+ }
+ return resp;
+ }
+
+ /**
+ * 2단계 검증: verify-token + 6자리 코드 → access 발급. 최초 로그인이면 등록 확정.
+ * @return { token, type, username, role, tenant }
+ */
+ @Transactional
+ public Map verifyOtp(String verifyToken, String code) {
+ String username = jwtUtil.parseVerifyTokenUsername(verifyToken);
+ if (username == null) {
+ throw new UiwsApiException(UiwsErrorCode.VERIFY_TOKEN_INVALID);
+ }
+ EsnUser user = userMapper.findByUsername(username);
+ if (user == null) {
+ throw new UiwsApiException(UiwsErrorCode.VERIFY_TOKEN_INVALID);
+ }
+ if (Boolean.TRUE.equals(user.getLocked())) {
+ throw new UiwsApiException(UiwsErrorCode.ACCOUNT_LOCKED);
+ }
+ if (!totpService.verify(user.getOtpSecret(), code)) {
+ // OTP 오입력도 실패 카운트에 합산(정책) — 임계 도달 시 잠금.
+ userMapper.incrementLoginFail(username, properties.getAuth().getMaxLoginFail());
+ throw new UiwsApiException(UiwsErrorCode.VERIFY_CODE_INVALID);
+ }
+
+ // 최초 로그인(보류 시크릿) → 등록 확정(멱등)
+ if (!Boolean.TRUE.equals(user.getOtpEnabled())) {
+ userMapper.enableOtp(username);
+ log.info("[otp] enroll confirmed on first login: username={}", username);
+ }
+ userMapper.resetLoginFail(username);
+ userMapper.updateLastLogin(username);
+
+ String access = jwtUtil.generate(user.getUsername(), user.getRole(), user.getTenantCode());
+ Map resp = new LinkedHashMap<>();
+ resp.put("token", access);
+ resp.put("type", "Bearer");
+ resp.put("username", user.getUsername());
+ resp.put("role", user.getRole() == null ? "" : user.getRole());
+ resp.put("tenant", user.getTenantCode() == null ? "" : user.getTenantCode());
+ return resp;
+ }
+
+ /** 마이페이지 OTP 등록/재설정 시작: 새 보류 시크릿 발급(기존 시크릿 무효화) + QR 반환. */
+ @Transactional
+ public OtpSetupResponse setup(String username) {
+ EsnUser user = userMapper.findByUsername(username);
+ if (user == null) {
+ throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND);
+ }
+ String secret = totpService.generateSecret();
+ userMapper.updateOtpSecret(username, secret); // 확정 전엔 otp_enabled 유지(confirm 에서 재확정)
+ log.info("[otp] setup started (new secret issued): username={}", username);
+ return new OtpSetupResponse(
+ secret,
+ totpService.otpAuthUri(secret, username),
+ totpService.qrImageDataUri(secret, username));
+ }
+
+ /** 마이페이지 OTP 확인·활성화: 앱 코드 검증 성공 시 otp_enabled=true. */
+ @Transactional
+ public void confirm(String username, String code) {
+ EsnUser user = userMapper.findByUsername(username);
+ if (user == null) {
+ throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND);
+ }
+ if (blank(user.getOtpSecret())) {
+ throw new UiwsApiException(UiwsErrorCode.OTP_NOT_REGISTERED);
+ }
+ if (!totpService.verify(user.getOtpSecret(), code)) {
+ throw new UiwsApiException(UiwsErrorCode.VERIFY_CODE_INVALID);
+ }
+ userMapper.enableOtp(username);
+ log.info("[otp] enabled via mypage: username={}", username);
+ }
+
+ /** 마이페이지 OTP 해제: 시크릿 폐기 + otp_enabled=false. */
+ @Transactional
+ public void disable(String username) {
+ EsnUser user = userMapper.findByUsername(username);
+ if (user == null) {
+ throw new UiwsApiException(UiwsErrorCode.USER_NOT_FOUND);
+ }
+ userMapper.disableOtp(username);
+ log.info("[otp] disabled via mypage: username={}", username);
+ }
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/auth/TotpService.java b/backend/src/main/java/com/zioinfo/esn/uiws/auth/TotpService.java
new file mode 100644
index 0000000..24c94f7
--- /dev/null
+++ b/backend/src/main/java/com/zioinfo/esn/uiws/auth/TotpService.java
@@ -0,0 +1,81 @@
+package com.zioinfo.esn.uiws.auth;
+
+import dev.samstevens.totp.code.CodeGenerator;
+import dev.samstevens.totp.code.CodeVerifier;
+import dev.samstevens.totp.code.DefaultCodeGenerator;
+import dev.samstevens.totp.code.DefaultCodeVerifier;
+import dev.samstevens.totp.code.HashingAlgorithm;
+import dev.samstevens.totp.exceptions.QrGenerationException;
+import dev.samstevens.totp.qr.QrData;
+import dev.samstevens.totp.qr.QrGenerator;
+import dev.samstevens.totp.qr.ZxingPngQrGenerator;
+import dev.samstevens.totp.secret.DefaultSecretGenerator;
+import dev.samstevens.totp.secret.SecretGenerator;
+import dev.samstevens.totp.time.SystemTimeProvider;
+import dev.samstevens.totp.time.TimeProvider;
+import dev.samstevens.totp.util.Utils;
+import org.springframework.stereotype.Service;
+
+/**
+ * TOTP(RFC 6238, HMAC-SHA1, 30s, 6자리, ±1 윈도우) 코덱 — UIWS TotpService 미러.
+ * 시크릿(OTP_SECRET)은 esn_user 에 저장되어 있다고 가정. issuer 만 ZIOINFO-ESN 로 교체.
+ *
+ * 보안 불변: 시크릿·otpauth URI·QR 은 등록 순간 발급 응답에서만 노출. 로그 기록 금지.
+ */
+@Service
+public class TotpService {
+
+ private final TimeProvider timeProvider = new SystemTimeProvider();
+ private final CodeGenerator codeGenerator = new DefaultCodeGenerator(HashingAlgorithm.SHA1, 6);
+ private final SecretGenerator secretGenerator = new DefaultSecretGenerator();
+ private final CodeVerifier codeVerifier = buildVerifier();
+ private final QrGenerator qrGenerator = new ZxingPngQrGenerator();
+
+ private static final String ISSUER = "ZIOINFO-ESN";
+
+ private CodeVerifier buildVerifier() {
+ DefaultCodeVerifier verifier = new DefaultCodeVerifier(codeGenerator, timeProvider);
+ verifier.setTimePeriod(30);
+ verifier.setAllowedTimePeriodDiscrepancy(1); // ±1 윈도우 허용(시계 오차)
+ return verifier;
+ }
+
+ /** 신규 OTP 시크릿 생성(최초 로그인/마이페이지 OTP 등록용). */
+ public String generateSecret() {
+ return secretGenerator.generate();
+ }
+
+ /** 주어진 시크릿에 대해 사용자 입력 코드가 유효한지 검증. */
+ public boolean verify(String secret, String code) {
+ if (secret == null || secret.isBlank() || code == null || code.isBlank()) {
+ return false;
+ }
+ return codeVerifier.isValidCode(secret, code.trim());
+ }
+
+ /** Authenticator 앱 직접 등록용 otpauth:// URI. */
+ public String otpAuthUri(String secret, String userId) {
+ return buildQrData(secret, userId).getUri();
+ }
+
+ /** QR 이미지(data:image/png;base64,...) — 앱으로 스캔해 등록. */
+ public String qrImageDataUri(String secret, String userId) {
+ try {
+ byte[] image = qrGenerator.generate(buildQrData(secret, userId));
+ return Utils.getDataUriForImage(image, qrGenerator.getImageMimeType());
+ } catch (QrGenerationException e) {
+ throw new IllegalStateException("OTP QR 생성 실패", e);
+ }
+ }
+
+ private QrData buildQrData(String secret, String userId) {
+ return new QrData.Builder()
+ .label(userId)
+ .secret(secret)
+ .issuer(ISSUER)
+ .algorithm(HashingAlgorithm.SHA1)
+ .digits(6)
+ .period(30)
+ .build();
+ }
+}
diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java b/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java
index 08fdecf..9aaca57 100644
--- a/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java
+++ b/backend/src/main/java/com/zioinfo/esn/uiws/common/UiwsErrorCode.java
@@ -37,6 +37,12 @@ public enum UiwsErrorCode {
VERIFY_TOKEN_INVALID("ERR-UIWS-2FA-401", "2차 검증 토큰이 유효하지 않거나 만료되었습니다."),
VERIFY_CODE_INVALID("ERR-UIWS-2FA-401C", "인증 코드가 올바르지 않거나 만료되었습니다."),
ACCOUNT_LOCKED("ERR-UIWS-2FA-LOCK", "로그인 실패 횟수 초과로 계정이 잠겼습니다. 관리자에게 문의하세요."),
+ UNAUTHORIZED("ERR-UIWS-AUTH-401", "인증이 필요합니다."),
+
+ // auth (OTP / mypage)
+ OTP_NOT_REGISTERED("ERR-UIWS-OTP-400", "OTP가 등록되어 있지 않습니다. 먼저 등록을 진행하세요."),
+ PASSWORD_MISMATCH("ERR-UIWS-PW-401", "현재 비밀번호가 일치하지 않습니다."),
+ PASSWORD_SAME_AS_OLD("ERR-UIWS-PW-409", "새 비밀번호가 기존 비밀번호와 동일합니다."),
// system(권한관리) — UIWS system 모듈 이식
DUPLICATE_KEY("ERR-UIWS-SYS-409D", "이미 존재하는 항목입니다."),
diff --git a/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java b/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java
index c52855c..4a20ce2 100644
--- a/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java
+++ b/backend/src/main/java/com/zioinfo/esn/uiws/config/UiwsProperties.java
@@ -24,6 +24,11 @@ public class UiwsProperties {
public static class Auth {
/** 2FA 레이어 on/off. 기본 on(켜짐). off 시 기존 단일 JWT 로그인 흐름 유지(회귀 0). */
private boolean twofaEnabled = true;
+ /**
+ * TOTP(OTP 2차 인증) 레이어 on/off. 기본 on. 활성 시 로그인 2단계가 OTP(등록/검증) 경로를 사용한다.
+ * 우선순위: otpEnabled → OTP, (off 이고 twofaEnabled) → 이메일코드, (둘 다 off) → 단일 로그인.
+ */
+ private boolean otpEnabled = true;
/** 1차 통과 후 verify-token 유효시간(초). 계획서 300(5분). */
private long verifyTokenValiditySeconds = 300;
/** 이메일 인증코드 유효시간(초). 계획서 300(5분). */
diff --git a/backend/src/main/resources/application.yml b/backend/src/main/resources/application.yml
index 120e957..fc1bf63 100644
--- a/backend/src/main/resources/application.yml
+++ b/backend/src/main/resources/application.yml
@@ -23,6 +23,7 @@ spring:
- classpath:db/schema.sql
- classpath:db/90_uiws_system.sql
- classpath:db/91_uiws_port.sql
+ - classpath:db/93_auth_otp.sql
- classpath:db/104_seed_ai_config.sql
web:
resources:
diff --git a/backend/src/main/resources/db/93_auth_otp.sql b/backend/src/main/resources/db/93_auth_otp.sql
new file mode 100644
index 0000000..dfbbb12
--- /dev/null
+++ b/backend/src/main/resources/db/93_auth_otp.sql
@@ -0,0 +1,13 @@
+-- =====================================================================
+-- TOTP(OTP 2차 인증) 이식 — esn_user 멱등 ALTER
+-- =====================================================================
+-- otp_secret 은 db/91_uiws_port.sql 에서 이미 ADD(VARCHAR(255)).
+-- 여기서는 등록 확정 플래그 otp_enabled 만 추가한다.
+-- schema-locations 마지막에 등재(mode=always + continue-on-error) → 멱등 재실행 안전.
+
+ALTER TABLE esn_user ADD COLUMN IF NOT EXISTS otp_enabled BOOLEAN DEFAULT false;
+
+COMMENT ON COLUMN esn_user.otp_secret IS 'TOTP 시크릿(보류/확정 공용). API 응답·로그 미노출.';
+COMMENT ON COLUMN esn_user.otp_enabled IS 'OTP 등록 확정 여부(최초 로그인 verify 성공 시 true).';
+
+-- end 93_auth_otp.sql
diff --git a/backend/src/main/resources/db/ops_otp_reset_all.sql b/backend/src/main/resources/db/ops_otp_reset_all.sql
new file mode 100644
index 0000000..2880cc1
--- /dev/null
+++ b/backend/src/main/resources/db/ops_otp_reset_all.sql
@@ -0,0 +1,18 @@
+-- =====================================================================
+-- [1회 운영 작업] 전 사용자 OTP 초기화 — 멱등
+-- =====================================================================
+-- 목적: 인증 강화 전환 시점에 기존 사용자 OTP 를 초기화한다.
+-- 다음 로그인부터 OTP_SETUP(QR 재등록) 플로우를 타게 한다(UIMS 방식).
+--
+-- ★ 이 파일은 schema-locations 에 등재하지 않는다(자동 재실행 금지).
+-- 운영자가 서버에서 1회 수동 적용:
+-- psql -U esn_user -d esn_db -f db/ops_otp_reset_all.sql
+--
+-- 멱등: 여러 번 실행해도 결과 동일(모두 NULL/false).
+
+UPDATE esn_user
+ SET otp_secret = NULL,
+ otp_enabled = false
+ WHERE otp_secret IS NOT NULL OR otp_enabled IS DISTINCT FROM false;
+
+-- end ops_otp_reset_all.sql
diff --git a/backend/src/main/resources/mapper/UserAuthMapper.xml b/backend/src/main/resources/mapper/UserAuthMapper.xml
index 1837cd2..cbbe625 100644
--- a/backend/src/main/resources/mapper/UserAuthMapper.xml
+++ b/backend/src/main/resources/mapper/UserAuthMapper.xml
@@ -20,6 +20,7 @@
SELECT id, tenant_code, username, password_hash, role, email, phone,
is_active, last_login_at, created_at,
- email_verify_code, email_verify_expire, login_fail_count, locked, otp_secret,
+ email_verify_code, email_verify_expire, login_fail_count, locked, otp_secret, otp_enabled,
approved, display_name, pw_change_yn
FROM esn_user
WHERE username = #{username}
@@ -66,4 +67,33 @@
UPDATE esn_user SET locked = false, login_fail_count = 0 WHERE username = #{username}
+
+
+ UPDATE esn_user
+ SET password_hash = #{passwordHash}, locked = false, login_fail_count = 0
+ WHERE username = #{username}
+
+
+
+
+
+
+ UPDATE esn_user SET otp_secret = #{secret} WHERE username = #{username}
+
+
+
+
+ UPDATE esn_user SET otp_enabled = true WHERE username = #{username}
+
+
+
+
+ UPDATE esn_user SET otp_secret = NULL, otp_enabled = false WHERE username = #{username}
+
+
+
+
+ UPDATE esn_user SET otp_secret = NULL, otp_enabled = false WHERE username = #{username}
+
+
diff --git a/backend/src/main/resources/static/assets/index-COuSklef.js b/backend/src/main/resources/static/assets/index-COuSklef.js
new file mode 100644
index 0000000..d4bd669
--- /dev/null
+++ b/backend/src/main/resources/static/assets/index-COuSklef.js
@@ -0,0 +1,458 @@
+var d1=e=>{throw TypeError(e)};var gy=(e,t,n)=>t.has(e)||d1("Cannot "+n);var N=(e,t,n)=>(gy(e,t,"read from private field"),n?n.call(e):t.get(e)),ne=(e,t,n)=>t.has(e)?d1("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,n),X=(e,t,n,r)=>(gy(e,t,"write to private field"),r?r.call(e,n):t.set(e,n),n),pe=(e,t,n)=>(gy(e,t,"access private method"),n);var af=(e,t,n,r)=>({set _(a){X(e,t,a,n)},get _(){return N(e,t,r)}});(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const a of document.querySelectorAll('link[rel="modulepreload"]'))r(a);new MutationObserver(a=>{for(const i of a)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(a){const i={};return a.integrity&&(i.integrity=a.integrity),a.referrerPolicy&&(i.referrerPolicy=a.referrerPolicy),a.crossOrigin==="use-credentials"?i.credentials="include":a.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(a){if(a.ep)return;a.ep=!0;const i=n(a);fetch(a.href,i)}})();var of=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function Ue(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var qA={exports:{}},Vh={};/**
+ * @license React
+ * react-jsx-runtime.production.js
+ *
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */var HR=Symbol.for("react.transitional.element"),qR=Symbol.for("react.fragment");function FA(e,t,n){var r=null;if(n!==void 0&&(r=""+n),t.key!==void 0&&(r=""+t.key),"key"in t){n={};for(var a in t)a!=="key"&&(n[a]=t[a])}else n=t;return t=n.ref,{$$typeof:HR,type:e,key:r,ref:t!==void 0?t:null,props:n}}Vh.Fragment=qR;Vh.jsx=FA;Vh.jsxs=FA;qA.exports=Vh;var c=qA.exports,GA={exports:{}},ce={};/**
+ * @license React
+ * react.production.js
+ *
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */var L0=Symbol.for("react.transitional.element"),FR=Symbol.for("react.portal"),GR=Symbol.for("react.fragment"),KR=Symbol.for("react.strict_mode"),YR=Symbol.for("react.profiler"),VR=Symbol.for("react.consumer"),XR=Symbol.for("react.context"),QR=Symbol.for("react.forward_ref"),WR=Symbol.for("react.suspense"),ZR=Symbol.for("react.memo"),KA=Symbol.for("react.lazy"),JR=Symbol.for("react.activity"),h1=Symbol.iterator;function e$(e){return e===null||typeof e!="object"?null:(e=h1&&e[h1]||e["@@iterator"],typeof e=="function"?e:null)}var YA={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},VA=Object.assign,XA={};function ss(e,t,n){this.props=e,this.context=t,this.refs=XA,this.updater=n||YA}ss.prototype.isReactComponent={};ss.prototype.setState=function(e,t){if(typeof e!="object"&&typeof e!="function"&&e!=null)throw Error("takes an object of state variables to update or a function which returns an object of state variables.");this.updater.enqueueSetState(this,e,t,"setState")};ss.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")};function QA(){}QA.prototype=ss.prototype;function z0(e,t,n){this.props=e,this.context=t,this.refs=XA,this.updater=n||YA}var B0=z0.prototype=new QA;B0.constructor=z0;VA(B0,ss.prototype);B0.isPureReactComponent=!0;var p1=Array.isArray;function Fm(){}var Je={H:null,A:null,T:null,S:null},WA=Object.prototype.hasOwnProperty;function I0(e,t,n){var r=n.ref;return{$$typeof:L0,type:e,key:t,ref:r!==void 0?r:null,props:n}}function t$(e,t){return I0(e.type,t,e.props)}function U0(e){return typeof e=="object"&&e!==null&&e.$$typeof===L0}function n$(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,function(n){return t[n]})}var y1=/\/+/g;function by(e,t){return typeof e=="object"&&e!==null&&e.key!=null?n$(""+e.key):t.toString(36)}function r$(e){switch(e.status){case"fulfilled":return e.value;case"rejected":throw e.reason;default:switch(typeof e.status=="string"?e.then(Fm,Fm):(e.status="pending",e.then(function(t){e.status==="pending"&&(e.status="fulfilled",e.value=t)},function(t){e.status==="pending"&&(e.status="rejected",e.reason=t)})),e.status){case"fulfilled":return e.value;case"rejected":throw e.reason}}throw e}function $o(e,t,n,r,a){var i=typeof e;(i==="undefined"||i==="boolean")&&(e=null);var o=!1;if(e===null)o=!0;else switch(i){case"bigint":case"string":case"number":o=!0;break;case"object":switch(e.$$typeof){case L0:case FR:o=!0;break;case KA:return o=e._init,$o(o(e._payload),t,n,r,a)}}if(o)return a=a(e),o=r===""?"."+by(e,0):r,p1(a)?(n="",o!=null&&(n=o.replace(y1,"$&/")+"/"),$o(a,t,n,"",function(u){return u})):a!=null&&(U0(a)&&(a=t$(a,n+(a.key==null||e&&e.key===a.key?"":(""+a.key).replace(y1,"$&/")+"/")+o)),t.push(a)),1;o=0;var l=r===""?".":r+":";if(p1(e))for(var s=0;s>>1,G=R[q];if(0>>1;qa(J,B))yea(ke,J)?(R[q]=ke,R[ye]=B,q=ye):(R[q]=J,R[K]=B,q=K);else if(yea(ke,B))R[q]=ke,R[ye]=B,q=ye;else break e}}return z}function a(R,z){var B=R.sortIndex-z.sortIndex;return B!==0?B:R.id-z.id}if(e.unstable_now=void 0,typeof performance=="object"&&typeof performance.now=="function"){var i=performance;e.unstable_now=function(){return i.now()}}else{var o=Date,l=o.now();e.unstable_now=function(){return o.now()-l}}var s=[],u=[],d=1,f=null,h=3,p=!1,b=!1,m=!1,g=!1,y=typeof setTimeout=="function"?setTimeout:null,v=typeof clearTimeout=="function"?clearTimeout:null,x=typeof setImmediate<"u"?setImmediate:null;function w(R){for(var z=n(u);z!==null;){if(z.callback===null)r(u);else if(z.startTime<=R)r(u),z.sortIndex=z.expirationTime,t(s,z);else break;z=n(u)}}function S(R){if(m=!1,w(R),!b)if(n(s)!==null)b=!0,O||(O=!0,E());else{var z=n(u);z!==null&&P(S,z.startTime-R)}}var O=!1,A=-1,_=5,T=-1;function M(){return g?!0:!(e.unstable_now()-T<_)}function L(){if(g=!1,O){var R=e.unstable_now();T=R;var z=!0;try{e:{b=!1,m&&(m=!1,v(A),A=-1),p=!0;var B=h;try{t:{for(w(R),f=n(s);f!==null&&!(f.expirationTime>R&&M());){var q=f.callback;if(typeof q=="function"){f.callback=null,h=f.priorityLevel;var G=q(f.expirationTime<=R);if(R=e.unstable_now(),typeof G=="function"){f.callback=G,w(R),z=!0;break t}f===n(s)&&r(s),w(R)}else r(s);f=n(s)}if(f!==null)z=!0;else{var F=n(u);F!==null&&P(S,F.startTime-R),z=!1}}break e}finally{f=null,h=B,p=!1}z=void 0}}finally{z?E():O=!1}}}var E;if(typeof x=="function")E=function(){x(L)};else if(typeof MessageChannel<"u"){var C=new MessageChannel,$=C.port2;C.port1.onmessage=L,E=function(){$.postMessage(null)}}else E=function(){y(L,0)};function P(R,z){A=y(function(){R(e.unstable_now())},z)}e.unstable_IdlePriority=5,e.unstable_ImmediatePriority=1,e.unstable_LowPriority=4,e.unstable_NormalPriority=3,e.unstable_Profiling=null,e.unstable_UserBlockingPriority=2,e.unstable_cancelCallback=function(R){R.callback=null},e.unstable_forceFrameRate=function(R){0>R||125q?(R.sortIndex=B,t(u,R),n(s)===null&&R===n(u)&&(m?(v(A),A=-1):m=!0,P(S,B-q))):(R.sortIndex=G,t(s,R),b||p||(b=!0,O||(O=!0,E()))),R},e.unstable_shouldYield=M,e.unstable_wrapCallback=function(R){var z=h;return function(){var B=h;h=z;try{return R.apply(this,arguments)}finally{h=B}}}})(eE);JA.exports=eE;var o$=JA.exports,tE={exports:{}},tn={};/**
+ * @license React
+ * react-dom.production.js
+ *
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */var l$=j;function nE(e){var t="https://react.dev/errors/"+e;if(1"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(rE)}catch(e){console.error(e)}}rE(),tE.exports=tn;var c$=tE.exports;/**
+ * @license React
+ * react-dom-client.production.js
+ *
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */var Ot=o$,aE=j,f$=c$;function U(e){var t="https://react.dev/errors/"+e;if(1Bo||(e.current=Qm[Bo],Qm[Bo]=null,Bo--)}function Ke(e,t){Bo++,Qm[Bo]=e.current,e.current=t}var Ar=Cr(null),_u=Cr(null),Ya=Cr(null),fd=Cr(null);function dd(e,t){switch(Ke(Ya,t),Ke(_u,e),Ke(Ar,null),t.nodeType){case 9:case 11:e=(e=t.documentElement)&&(e=e.namespaceURI)?jS(e):0;break;default:if(e=t.tagName,t=t.namespaceURI)t=jS(t),e=NT(t,e);else switch(e){case"svg":e=1;break;case"math":e=2;break;default:e=0}}Mt(Ar),Ke(Ar,e)}function Al(){Mt(Ar),Mt(_u),Mt(Ya)}function Wm(e){e.memoizedState!==null&&Ke(fd,e);var t=Ar.current,n=NT(t,e.type);t!==n&&(Ke(_u,e),Ke(Ar,n))}function hd(e){_u.current===e&&(Mt(Ar),Mt(_u)),fd.current===e&&(Mt(fd),zu._currentValue=Fi)}var xy,b1;function Si(e){if(xy===void 0)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);xy=t&&t[1]||"",b1=-1)":-1a||s[r]!==u[a]){var d=`
+`+s[r].replace(" at new "," at ");return e.displayName&&d.includes("")&&(d=d.replace("",e.displayName)),d}while(1<=r&&0<=a);break}}}finally{Sy=!1,Error.prepareStackTrace=n}return(n=e?e.displayName||e.name:"")?Si(n):""}function m$(e,t){switch(e.tag){case 26:case 27:case 5:return Si(e.type);case 16:return Si("Lazy");case 13:return e.child!==t&&t!==null?Si("Suspense Fallback"):Si("Suspense");case 19:return Si("SuspenseList");case 0:case 15:return wy(e.type,!1);case 11:return wy(e.type.render,!1);case 1:return wy(e.type,!0);case 31:return Si("Activity");default:return""}}function x1(e){try{var t="",n=null;do t+=m$(e,n),n=e,e=e.return;while(e);return t}catch(r){return`
+Error generating stack: `+r.message+`
+`+r.stack}}var Zm=Object.prototype.hasOwnProperty,F0=Ot.unstable_scheduleCallback,Oy=Ot.unstable_cancelCallback,v$=Ot.unstable_shouldYield,g$=Ot.unstable_requestPaint,En=Ot.unstable_now,b$=Ot.unstable_getCurrentPriorityLevel,fE=Ot.unstable_ImmediatePriority,dE=Ot.unstable_UserBlockingPriority,pd=Ot.unstable_NormalPriority,x$=Ot.unstable_LowPriority,hE=Ot.unstable_IdlePriority,S$=Ot.log,w$=Ot.unstable_setDisableYieldValue,Rc=null,_n=null;function Ua(e){if(typeof S$=="function"&&w$(e),_n&&typeof _n.setStrictMode=="function")try{_n.setStrictMode(Rc,e)}catch{}}var Tn=Math.clz32?Math.clz32:A$,O$=Math.log,j$=Math.LN2;function A$(e){return e>>>=0,e===0?32:31-(O$(e)/j$|0)|0}var uf=256,cf=262144,ff=4194304;function wi(e){var t=e&42;if(t!==0)return t;switch(e&-e){case 1:return 1;case 2:return 2;case 4:return 4;case 8:return 8;case 16:return 16;case 32:return 32;case 64:return 64;case 128:return 128;case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:return e&261888;case 262144:case 524288:case 1048576:case 2097152:return e&3932160;case 4194304:case 8388608:case 16777216:case 33554432:return e&62914560;case 67108864:return 67108864;case 134217728:return 134217728;case 268435456:return 268435456;case 536870912:return 536870912;case 1073741824:return 0;default:return e}}function Wh(e,t,n){var r=e.pendingLanes;if(r===0)return 0;var a=0,i=e.suspendedLanes,o=e.pingedLanes;e=e.warmLanes;var l=r&134217727;return l!==0?(r=l&~i,r!==0?a=wi(r):(o&=l,o!==0?a=wi(o):n||(n=l&~e,n!==0&&(a=wi(n))))):(l=r&~i,l!==0?a=wi(l):o!==0?a=wi(o):n||(n=r&~e,n!==0&&(a=wi(n)))),a===0?0:t!==0&&t!==a&&!(t&i)&&(i=a&-a,n=t&-t,i>=n||i===32&&(n&4194048)!==0)?t:a}function $c(e,t){return(e.pendingLanes&~(e.suspendedLanes&~e.pingedLanes)&t)===0}function E$(e,t){switch(e){case 1:case 2:case 4:case 8:case 64:return t+250;case 16:case 32:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:return t+5e3;case 4194304:case 8388608:case 16777216:case 33554432:return-1;case 67108864:case 134217728:case 268435456:case 536870912:case 1073741824:return-1;default:return-1}}function pE(){var e=ff;return ff<<=1,!(ff&62914560)&&(ff=4194304),e}function jy(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function Dc(e,t){e.pendingLanes|=t,t!==268435456&&(e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0)}function _$(e,t,n,r,a,i){var o=e.pendingLanes;e.pendingLanes=n,e.suspendedLanes=0,e.pingedLanes=0,e.warmLanes=0,e.expiredLanes&=n,e.entangledLanes&=n,e.errorRecoveryDisabledLanes&=n,e.shellSuspendCounter=0;var l=e.entanglements,s=e.expirationTimes,u=e.hiddenUpdates;for(n=o&~n;0"u")return null;try{return e.activeElement||e.body}catch{return e.body}}var R$=/[\n"\\]/g;function Fn(e){return e.replace(R$,function(t){return"\\"+t.charCodeAt(0).toString(16)+" "})}function tv(e,t,n,r,a,i,o,l){e.name="",o!=null&&typeof o!="function"&&typeof o!="symbol"&&typeof o!="boolean"?e.type=o:e.removeAttribute("type"),t!=null?o==="number"?(t===0&&e.value===""||e.value!=t)&&(e.value=""+Un(t)):e.value!==""+Un(t)&&(e.value=""+Un(t)):o!=="submit"&&o!=="reset"||e.removeAttribute("value"),t!=null?nv(e,o,Un(t)):n!=null?nv(e,o,Un(n)):r!=null&&e.removeAttribute("value"),a==null&&i!=null&&(e.defaultChecked=!!i),a!=null&&(e.checked=a&&typeof a!="function"&&typeof a!="symbol"),l!=null&&typeof l!="function"&&typeof l!="symbol"&&typeof l!="boolean"?e.name=""+Un(l):e.removeAttribute("name")}function OE(e,t,n,r,a,i,o,l){if(i!=null&&typeof i!="function"&&typeof i!="symbol"&&typeof i!="boolean"&&(e.type=i),t!=null||n!=null){if(!(i!=="submit"&&i!=="reset"||t!=null)){ev(e);return}n=n!=null?""+Un(n):"",t=t!=null?""+Un(t):n,l||t===e.value||(e.value=t),e.defaultValue=t}r=r??a,r=typeof r!="function"&&typeof r!="symbol"&&!!r,e.checked=l?e.checked:!!r,e.defaultChecked=!!r,o!=null&&typeof o!="function"&&typeof o!="symbol"&&typeof o!="boolean"&&(e.name=o),ev(e)}function nv(e,t,n){t==="number"&&yd(e.ownerDocument)===e||e.defaultValue===""+n||(e.defaultValue=""+n)}function nl(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a"u"||typeof window.document>"u"||typeof window.document.createElement>"u"),av=!1;if(la)try{var ks={};Object.defineProperty(ks,"passive",{get:function(){av=!0}}),window.addEventListener("test",ks,ks),window.removeEventListener("test",ks,ks)}catch{av=!1}var Ha=null,Q0=null,qf=null;function TE(){if(qf)return qf;var e,t=Q0,n=t.length,r,a="value"in Ha?Ha.value:Ha.textContent,i=a.length;for(e=0;e=su),M1=" ",P1=!1;function NE(e,t){switch(e){case"keyup":return l3.indexOf(t.keyCode)!==-1;case"keydown":return t.keyCode!==229;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function ME(e){return e=e.detail,typeof e=="object"&&"data"in e?e.data:null}var Ho=!1;function u3(e,t){switch(e){case"compositionend":return ME(t);case"keypress":return t.which!==32?null:(P1=!0,M1);case"textInput":return e=t.data,e===M1&&P1?null:e;default:return null}}function c3(e,t){if(Ho)return e==="compositionend"||!Z0&&NE(e,t)?(e=TE(),qf=Q0=Ha=null,Ho=!1,e):null;switch(e){case"paste":return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1=t)return{node:n,offset:t-e};e=r}e:{for(;n;){if(n.nextSibling){n=n.nextSibling;break e}n=n.parentNode}n=void 0}n=L1(n)}}function DE(e,t){return e&&t?e===t?!0:e&&e.nodeType===3?!1:t&&t.nodeType===3?DE(e,t.parentNode):"contains"in e?e.contains(t):e.compareDocumentPosition?!!(e.compareDocumentPosition(t)&16):!1:!1}function kE(e){e=e!=null&&e.ownerDocument!=null&&e.ownerDocument.defaultView!=null?e.ownerDocument.defaultView:window;for(var t=yd(e.document);t instanceof e.HTMLIFrameElement;){try{var n=typeof t.contentWindow.location.href=="string"}catch{n=!1}if(n)e=t.contentWindow;else break;t=yd(e.document)}return t}function J0(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&(t==="input"&&(e.type==="text"||e.type==="search"||e.type==="tel"||e.type==="url"||e.type==="password")||t==="textarea"||e.contentEditable==="true")}var g3=la&&"documentMode"in document&&11>=document.documentMode,qo=null,iv=null,cu=null,ov=!1;function B1(e,t,n){var r=n.window===n?n.document:n.nodeType===9?n:n.ownerDocument;ov||qo==null||qo!==yd(r)||(r=qo,"selectionStart"in r&&J0(r)?r={start:r.selectionStart,end:r.selectionEnd}:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection(),r={anchorNode:r.anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset}),cu&&Nu(cu,r)||(cu=r,r=Rd(iv,"onSelect"),0>=o,a-=o,Sr=1<<32-Tn(t)+a|n<_?(T=A,A=null):T=A.sibling;var M=h(y,A,x[_],w);if(M===null){A===null&&(A=T);break}e&&A&&M.alternate===null&&t(y,A),v=i(M,v,_),O===null?S=M:O.sibling=M,O=M,A=T}if(_===x.length)return n(y,A),Oe&&qr(y,_),S;if(A===null){for(;__?(T=A,A=null):T=A.sibling;var L=h(y,A,M.value,w);if(L===null){A===null&&(A=T);break}e&&A&&L.alternate===null&&t(y,A),v=i(L,v,_),O===null?S=L:O.sibling=L,O=L,A=T}if(M.done)return n(y,A),Oe&&qr(y,_),S;if(A===null){for(;!M.done;_++,M=x.next())M=f(y,M.value,w),M!==null&&(v=i(M,v,_),O===null?S=M:O.sibling=M,O=M);return Oe&&qr(y,_),S}for(A=r(A);!M.done;_++,M=x.next())M=p(A,y,_,M.value,w),M!==null&&(e&&M.alternate!==null&&A.delete(M.key===null?_:M.key),v=i(M,v,_),O===null?S=M:O.sibling=M,O=M);return e&&A.forEach(function(E){return t(y,E)}),Oe&&qr(y,_),S}function g(y,v,x,w){if(typeof x=="object"&&x!==null&&x.type===zo&&x.key===null&&(x=x.props.children),typeof x=="object"&&x!==null){switch(x.$$typeof){case sf:e:{for(var S=x.key;v!==null;){if(v.key===S){if(S=x.type,S===zo){if(v.tag===7){n(y,v.sibling),w=a(v,x.props.children),w.return=y,y=w;break e}}else if(v.elementType===S||typeof S=="object"&&S!==null&&S.$$typeof===ja&&Oi(S)===v.type){n(y,v.sibling),w=a(v,x.props),zs(w,x),w.return=y,y=w;break e}n(y,v);break}else t(y,v);v=v.sibling}x.type===zo?(w=Gi(x.props.children,y.mode,w,x.key),w.return=y,y=w):(w=Gf(x.type,x.key,x.props,null,y.mode,w),zs(w,x),w.return=y,y=w)}return o(y);case eu:e:{for(S=x.key;v!==null;){if(v.key===S)if(v.tag===4&&v.stateNode.containerInfo===x.containerInfo&&v.stateNode.implementation===x.implementation){n(y,v.sibling),w=a(v,x.children||[]),w.return=y,y=w;break e}else{n(y,v);break}else t(y,v);v=v.sibling}w=Ry(x,y.mode,w),w.return=y,y=w}return o(y);case ja:return x=Oi(x),g(y,v,x,w)}if(tu(x))return b(y,v,x,w);if(Ds(x)){if(S=Ds(x),typeof S!="function")throw Error(U(150));return x=S.call(x),m(y,v,x,w)}if(typeof x.then=="function")return g(y,v,yf(x),w);if(x.$$typeof===Xr)return g(y,v,pf(y,x),w);mf(y,x)}return typeof x=="string"&&x!==""||typeof x=="number"||typeof x=="bigint"?(x=""+x,v!==null&&v.tag===6?(n(y,v.sibling),w=a(v,x),w.return=y,y=w):(n(y,v),w=Py(x,y.mode,w),w.return=y,y=w),o(y)):n(y,v)}return function(y,v,x,w){try{Ru=0;var S=g(y,v,x,w);return il=null,S}catch(A){if(A===ds||A===rp)throw A;var O=On(29,A,null,y.mode);return O.lanes=w,O.return=y,O}finally{}}}var eo=WE(!0),ZE=WE(!1),Aa=!1;function sb(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null,lanes:0,hiddenCallbacks:null},callbacks:null}}function hv(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,callbacks:null})}function Xa(e){return{lane:e,tag:0,payload:null,callback:null,next:null}}function Qa(e,t,n){var r=e.updateQueue;if(r===null)return null;if(r=r.shared,_e&2){var a=r.pending;return a===null?t.next=t:(t.next=a.next,a.next=t),r.pending=t,t=vd(e),qE(e,null,n),t}return np(e,r,t,n),vd(e)}function du(e,t,n){if(t=t.updateQueue,t!==null&&(t=t.shared,(n&4194048)!==0)){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,mE(e,n)}}function Dy(e,t){var n=e.updateQueue,r=e.alternate;if(r!==null&&(r=r.updateQueue,n===r)){var a=null,i=null;if(n=n.firstBaseUpdate,n!==null){do{var o={lane:n.lane,tag:n.tag,payload:n.payload,callback:null,next:null};i===null?a=i=o:i=i.next=o,n=n.next}while(n!==null);i===null?a=i=t:i=i.next=t}else a=i=t;n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:i,shared:r.shared,callbacks:r.callbacks},e.updateQueue=n;return}e=n.lastBaseUpdate,e===null?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}var pv=!1;function hu(){if(pv){var e=al;if(e!==null)throw e}}function pu(e,t,n,r){pv=!1;var a=e.updateQueue;Aa=!1;var i=a.firstBaseUpdate,o=a.lastBaseUpdate,l=a.shared.pending;if(l!==null){a.shared.pending=null;var s=l,u=s.next;s.next=null,o===null?i=u:o.next=u,o=s;var d=e.alternate;d!==null&&(d=d.updateQueue,l=d.lastBaseUpdate,l!==o&&(l===null?d.firstBaseUpdate=u:l.next=u,d.lastBaseUpdate=s))}if(i!==null){var f=a.baseState;o=0,d=u=s=null,l=i;do{var h=l.lane&-536870913,p=h!==l.lane;if(p?(Se&h)===h:(r&h)===h){h!==0&&h===Tl&&(pv=!0),d!==null&&(d=d.next={lane:0,tag:l.tag,payload:l.payload,callback:null,next:null});e:{var b=e,m=l;h=t;var g=n;switch(m.tag){case 1:if(b=m.payload,typeof b=="function"){f=b.call(g,f,h);break e}f=b;break e;case 3:b.flags=b.flags&-65537|128;case 0:if(b=m.payload,h=typeof b=="function"?b.call(g,f,h):b,h==null)break e;f=et({},f,h);break e;case 2:Aa=!0}}h=l.callback,h!==null&&(e.flags|=64,p&&(e.flags|=8192),p=a.callbacks,p===null?a.callbacks=[h]:p.push(h))}else p={lane:h,tag:l.tag,payload:l.payload,callback:l.callback,next:null},d===null?(u=d=p,s=f):d=d.next=p,o|=h;if(l=l.next,l===null){if(l=a.shared.pending,l===null)break;p=l,l=p.next,p.next=null,a.lastBaseUpdate=p,a.shared.pending=null}}while(!0);d===null&&(s=f),a.baseState=s,a.firstBaseUpdate=u,a.lastBaseUpdate=d,i===null&&(a.shared.lanes=0),si|=o,e.lanes=o,e.memoizedState=f}}function JE(e,t){if(typeof e!="function")throw Error(U(191,e));e.call(t)}function e_(e,t){var n=e.callbacks;if(n!==null)for(e.callbacks=null,e=0;ei?i:8;var o=ie.T,l={};ie.T=l,Sb(e,!1,t,n);try{var s=a(),u=ie.S;if(u!==null&&u(l,s),s!==null&&typeof s=="object"&&typeof s.then=="function"){var d=_3(s,r);yu(e,t,d,Cn(e))}else yu(e,t,r,Cn(e))}catch(f){yu(e,t,{then:function(){},status:"rejected",reason:f},Cn())}finally{Te.p=i,o!==null&&l.types!==null&&(o.types=l.types),ie.T=o}}function R3(){}function bv(e,t,n,r){if(e.tag!==5)throw Error(U(476));var a=A_(e).queue;j_(e,a,t,Fi,n===null?R3:function(){return E_(e),n(r)})}function A_(e){var t=e.memoizedState;if(t!==null)return t;t={memoizedState:Fi,baseState:Fi,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:ua,lastRenderedState:Fi},next:null};var n={};return t.next={memoizedState:n,baseState:n,baseQueue:null,queue:{pending:null,lanes:0,dispatch:null,lastRenderedReducer:ua,lastRenderedState:n},next:null},e.memoizedState=t,e=e.alternate,e!==null&&(e.memoizedState=t),t}function E_(e){var t=A_(e);t.next===null&&(t=e.alternate.memoizedState),yu(e,t.next.queue,{},Cn())}function xb(){return Ut(zu)}function __(){return ut().memoizedState}function T_(){return ut().memoizedState}function $3(e){for(var t=e.return;t!==null;){switch(t.tag){case 24:case 3:var n=Cn();e=Xa(n);var r=Qa(t,e,n);r!==null&&(fn(r,t,n),du(r,t,n)),t={cache:ib()},e.payload=t;return}t=t.return}}function D3(e,t,n){var r=Cn();n={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null},lp(e)?N_(t,n):(n=tb(e,t,n,r),n!==null&&(fn(n,e,r),M_(n,t,r)))}function C_(e,t,n){var r=Cn();yu(e,t,n,r)}function yu(e,t,n,r){var a={lane:r,revertLane:0,gesture:null,action:n,hasEagerState:!1,eagerState:null,next:null};if(lp(e))N_(t,a);else{var i=e.alternate;if(e.lanes===0&&(i===null||i.lanes===0)&&(i=t.lastRenderedReducer,i!==null))try{var o=t.lastRenderedState,l=i(o,n);if(a.hasEagerState=!0,a.eagerState=l,Mn(l,o))return np(e,t,a,0),qe===null&&tp(),!1}catch{}finally{}if(n=tb(e,t,a,r),n!==null)return fn(n,e,r),M_(n,t,r),!0}return!1}function Sb(e,t,n,r){if(r={lane:2,revertLane:Nb(),gesture:null,action:r,hasEagerState:!1,eagerState:null,next:null},lp(e)){if(t)throw Error(U(479))}else t=tb(e,n,r,2),t!==null&&fn(t,e,2)}function lp(e){var t=e.alternate;return e===he||t!==null&&t===he}function N_(e,t){ol=Od=!0;var n=e.pending;n===null?t.next=t:(t.next=n.next,n.next=t),e.pending=t}function M_(e,t,n){if(n&4194048){var r=t.lanes;r&=e.pendingLanes,n|=r,t.lanes=n,mE(e,n)}}var Du={readContext:Ut,use:ip,useCallback:at,useContext:at,useEffect:at,useImperativeHandle:at,useLayoutEffect:at,useInsertionEffect:at,useMemo:at,useReducer:at,useRef:at,useState:at,useDebugValue:at,useDeferredValue:at,useTransition:at,useSyncExternalStore:at,useId:at,useHostTransitionStatus:at,useFormState:at,useActionState:at,useOptimistic:at,useMemoCache:at,useCacheRefresh:at};Du.useEffectEvent=at;var P_={readContext:Ut,use:ip,useCallback:function(e,t){return Xt().memoizedState=[e,t===void 0?null:t],e},useContext:Ut,useEffect:eS,useImperativeHandle:function(e,t,n){n=n!=null?n.concat([e]):null,Vf(4194308,4,b_.bind(null,t,e),n)},useLayoutEffect:function(e,t){return Vf(4194308,4,e,t)},useInsertionEffect:function(e,t){Vf(4,2,e,t)},useMemo:function(e,t){var n=Xt();t=t===void 0?null:t;var r=e();if(to){Ua(!0);try{e()}finally{Ua(!1)}}return n.memoizedState=[r,t],r},useReducer:function(e,t,n){var r=Xt();if(n!==void 0){var a=n(t);if(to){Ua(!0);try{n(t)}finally{Ua(!1)}}}else a=t;return r.memoizedState=r.baseState=a,e={pending:null,lanes:0,dispatch:null,lastRenderedReducer:e,lastRenderedState:a},r.queue=e,e=e.dispatch=D3.bind(null,he,e),[r.memoizedState,e]},useRef:function(e){var t=Xt();return e={current:e},t.memoizedState=e},useState:function(e){e=vv(e);var t=e.queue,n=C_.bind(null,he,t);return t.dispatch=n,[e.memoizedState,n]},useDebugValue:gb,useDeferredValue:function(e,t){var n=Xt();return bb(n,e,t)},useTransition:function(){var e=vv(!1);return e=j_.bind(null,he,e.queue,!0,!1),Xt().memoizedState=e,[!1,e]},useSyncExternalStore:function(e,t,n){var r=he,a=Xt();if(Oe){if(n===void 0)throw Error(U(407));n=n()}else{if(n=t(),qe===null)throw Error(U(349));Se&127||i_(r,t,n)}a.memoizedState=n;var i={value:n,getSnapshot:t};return a.queue=i,eS(l_.bind(null,r,i,e),[e]),r.flags|=2048,Nl(9,{destroy:void 0},o_.bind(null,r,i,n,t),null),n},useId:function(){var e=Xt(),t=qe.identifierPrefix;if(Oe){var n=wr,r=Sr;n=(r&~(1<<32-Tn(r)-1)).toString(32)+n,t="_"+t+"R_"+n,n=jd++,0<\/script>",i=i.removeChild(i.firstChild);break;case"select":i=typeof r.is=="string"?o.createElement("select",{is:r.is}):o.createElement("select"),r.multiple?i.multiple=!0:r.size&&(i.size=r.size);break;default:i=typeof r.is=="string"?o.createElement(a,{is:r.is}):o.createElement(a)}}i[zt]=t,i[hn]=r;e:for(o=t.child;o!==null;){if(o.tag===5||o.tag===6)i.appendChild(o.stateNode);else if(o.tag!==4&&o.tag!==27&&o.child!==null){o.child.return=o,o=o.child;continue}if(o===t)break e;for(;o.sibling===null;){if(o.return===null||o.return===t)break e;o=o.return}o.sibling.return=o.return,o=o.sibling}t.stateNode=i;e:switch(Ht(i,a,r),a){case"button":case"input":case"select":case"textarea":r=!!r.autoFocus;break e;case"img":r=!0;break e;default:r=!1}r&&kr(t)}}return Xe(t),qy(t,t.type,e===null?null:e.memoizedProps,t.pendingProps,n),null;case 6:if(e&&t.stateNode!=null)e.memoizedProps!==r&&kr(t);else{if(typeof r!="string"&&t.stateNode===null)throw Error(U(166));if(e=Ya.current,To(t)){if(e=t.stateNode,n=t.memoizedProps,r=null,a=Bt,a!==null)switch(a.tag){case 27:case 5:r=a.memoizedProps}e[zt]=t,e=!!(e.nodeValue===n||r!==null&&r.suppressHydrationWarning===!0||CT(e.nodeValue,n)),e||oi(t,!0)}else e=$d(e).createTextNode(r),e[zt]=t,t.stateNode=e}return Xe(t),null;case 31:if(n=t.memoizedState,e===null||e.memoizedState!==null){if(r=To(t),n!==null){if(e===null){if(!r)throw Error(U(318));if(e=t.memoizedState,e=e!==null?e.dehydrated:null,!e)throw Error(U(557));e[zt]=t}else Zi(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;Xe(t),e=!1}else n=$y(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=n),e=!0;if(!e)return t.flags&256?(wn(t),t):(wn(t),null);if(t.flags&128)throw Error(U(558))}return Xe(t),null;case 13:if(r=t.memoizedState,e===null||e.memoizedState!==null&&e.memoizedState.dehydrated!==null){if(a=To(t),r!==null&&r.dehydrated!==null){if(e===null){if(!a)throw Error(U(318));if(a=t.memoizedState,a=a!==null?a.dehydrated:null,!a)throw Error(U(317));a[zt]=t}else Zi(),!(t.flags&128)&&(t.memoizedState=null),t.flags|=4;Xe(t),a=!1}else a=$y(),e!==null&&e.memoizedState!==null&&(e.memoizedState.hydrationErrors=a),a=!0;if(!a)return t.flags&256?(wn(t),t):(wn(t),null)}return wn(t),t.flags&128?(t.lanes=n,t):(n=r!==null,e=e!==null&&e.memoizedState!==null,n&&(r=t.child,a=null,r.alternate!==null&&r.alternate.memoizedState!==null&&r.alternate.memoizedState.cachePool!==null&&(a=r.alternate.memoizedState.cachePool.pool),i=null,r.memoizedState!==null&&r.memoizedState.cachePool!==null&&(i=r.memoizedState.cachePool.pool),i!==a&&(r.flags|=2048)),n!==e&&n&&(t.child.flags|=8192),vf(t,t.updateQueue),Xe(t),null);case 4:return Al(),e===null&&Mb(t.stateNode.containerInfo),Xe(t),null;case 10:return ta(t.type),Xe(t),null;case 19:if(Mt(st),r=t.memoizedState,r===null)return Xe(t),null;if(a=(t.flags&128)!==0,i=r.rendering,i===null)if(a)Bs(r,!1);else{if(lt!==0||e!==null&&e.flags&128)for(e=t.child;e!==null;){if(i=wd(e),i!==null){for(t.flags|=128,Bs(r,!1),e=i.updateQueue,t.updateQueue=e,vf(t,e),t.subtreeFlags=0,e=n,n=t.child;n!==null;)FE(n,e),n=n.sibling;return Ke(st,st.current&1|2),Oe&&qr(t,r.treeForkCount),t.child}e=e.sibling}r.tail!==null&&En()>Td&&(t.flags|=128,a=!0,Bs(r,!1),t.lanes=4194304)}else{if(!a)if(e=wd(i),e!==null){if(t.flags|=128,a=!0,e=e.updateQueue,t.updateQueue=e,vf(t,e),Bs(r,!0),r.tail===null&&r.tailMode==="hidden"&&!i.alternate&&!Oe)return Xe(t),null}else 2*En()-r.renderingStartTime>Td&&n!==536870912&&(t.flags|=128,a=!0,Bs(r,!1),t.lanes=4194304);r.isBackwards?(i.sibling=t.child,t.child=i):(e=r.last,e!==null?e.sibling=i:t.child=i,r.last=i)}return r.tail!==null?(e=r.tail,r.rendering=e,r.tail=e.sibling,r.renderingStartTime=En(),e.sibling=null,n=st.current,Ke(st,a?n&1|2:n&1),Oe&&qr(t,r.treeForkCount),e):(Xe(t),null);case 22:case 23:return wn(t),ub(),r=t.memoizedState!==null,e!==null?e.memoizedState!==null!==r&&(t.flags|=8192):r&&(t.flags|=8192),r?n&536870912&&!(t.flags&128)&&(Xe(t),t.subtreeFlags&6&&(t.flags|=8192)):Xe(t),n=t.updateQueue,n!==null&&vf(t,n.retryQueue),n=null,e!==null&&e.memoizedState!==null&&e.memoizedState.cachePool!==null&&(n=e.memoizedState.cachePool.pool),r=null,t.memoizedState!==null&&t.memoizedState.cachePool!==null&&(r=t.memoizedState.cachePool.pool),r!==n&&(t.flags|=2048),e!==null&&Mt(Ki),null;case 24:return n=null,e!==null&&(n=e.memoizedState.cache),t.memoizedState.cache!==n&&(t.flags|=2048),ta(pt),Xe(t),null;case 25:return null;case 30:return null}throw Error(U(156,t.tag))}function I3(e,t){switch(ab(t),t.tag){case 1:return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 3:return ta(pt),Al(),e=t.flags,e&65536&&!(e&128)?(t.flags=e&-65537|128,t):null;case 26:case 27:case 5:return hd(t),null;case 31:if(t.memoizedState!==null){if(wn(t),t.alternate===null)throw Error(U(340));Zi()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 13:if(wn(t),e=t.memoizedState,e!==null&&e.dehydrated!==null){if(t.alternate===null)throw Error(U(340));Zi()}return e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 19:return Mt(st),null;case 4:return Al(),null;case 10:return ta(t.type),null;case 22:case 23:return wn(t),ub(),e!==null&&Mt(Ki),e=t.flags,e&65536?(t.flags=e&-65537|128,t):null;case 24:return ta(pt),null;case 25:return null;default:return null}}function F_(e,t){switch(ab(t),t.tag){case 3:ta(pt),Al();break;case 26:case 27:case 5:hd(t);break;case 4:Al();break;case 31:t.memoizedState!==null&&wn(t);break;case 13:wn(t);break;case 19:Mt(st);break;case 10:ta(t.type);break;case 22:case 23:wn(t),ub(),e!==null&&Mt(Ki);break;case 24:ta(pt)}}function Ic(e,t){try{var n=t.updateQueue,r=n!==null?n.lastEffect:null;if(r!==null){var a=r.next;n=a;do{if((n.tag&e)===e){r=void 0;var i=n.create,o=n.inst;r=i(),o.destroy=r}n=n.next}while(n!==a)}}catch(l){Re(t,t.return,l)}}function li(e,t,n){try{var r=t.updateQueue,a=r!==null?r.lastEffect:null;if(a!==null){var i=a.next;r=i;do{if((r.tag&e)===e){var o=r.inst,l=o.destroy;if(l!==void 0){o.destroy=void 0,a=t;var s=n,u=l;try{u()}catch(d){Re(a,s,d)}}}r=r.next}while(r!==i)}}catch(d){Re(t,t.return,d)}}function G_(e){var t=e.updateQueue;if(t!==null){var n=e.stateNode;try{e_(t,n)}catch(r){Re(e,e.return,r)}}}function K_(e,t,n){n.props=no(e.type,e.memoizedProps),n.state=e.memoizedState;try{n.componentWillUnmount()}catch(r){Re(e,t,r)}}function mu(e,t){try{var n=e.ref;if(n!==null){switch(e.tag){case 26:case 27:case 5:var r=e.stateNode;break;case 30:r=e.stateNode;break;default:r=e.stateNode}typeof n=="function"?e.refCleanup=n(r):n.current=r}}catch(a){Re(e,t,a)}}function Or(e,t){var n=e.ref,r=e.refCleanup;if(n!==null)if(typeof r=="function")try{r()}catch(a){Re(e,t,a)}finally{e.refCleanup=null,e=e.alternate,e!=null&&(e.refCleanup=null)}else if(typeof n=="function")try{n(null)}catch(a){Re(e,t,a)}else n.current=null}function Y_(e){var t=e.type,n=e.memoizedProps,r=e.stateNode;try{e:switch(t){case"button":case"input":case"select":case"textarea":n.autoFocus&&r.focus();break e;case"img":n.src?r.src=n.src:n.srcSet&&(r.srcset=n.srcSet)}}catch(a){Re(e,e.return,a)}}function Fy(e,t,n){try{var r=e.stateNode;s4(r,e.type,n,t),r[hn]=t}catch(a){Re(e,e.return,a)}}function V_(e){return e.tag===5||e.tag===3||e.tag===26||e.tag===27&&ci(e.type)||e.tag===4}function Gy(e){e:for(;;){for(;e.sibling===null;){if(e.return===null||V_(e.return))return null;e=e.return}for(e.sibling.return=e.return,e=e.sibling;e.tag!==5&&e.tag!==6&&e.tag!==18;){if(e.tag===27&&ci(e.type)||e.flags&2||e.child===null||e.tag===4)continue e;e.child.return=e,e=e.child}if(!(e.flags&2))return e.stateNode}}function jv(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?(n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n).insertBefore(e,t):(t=n.nodeType===9?n.body:n.nodeName==="HTML"?n.ownerDocument.body:n,t.appendChild(e),n=n._reactRootContainer,n!=null||t.onclick!==null||(t.onclick=Qr));else if(r!==4&&(r===27&&ci(e.type)&&(n=e.stateNode,t=null),e=e.child,e!==null))for(jv(e,t,n),e=e.sibling;e!==null;)jv(e,t,n),e=e.sibling}function _d(e,t,n){var r=e.tag;if(r===5||r===6)e=e.stateNode,t?n.insertBefore(e,t):n.appendChild(e);else if(r!==4&&(r===27&&ci(e.type)&&(n=e.stateNode),e=e.child,e!==null))for(_d(e,t,n),e=e.sibling;e!==null;)_d(e,t,n),e=e.sibling}function X_(e){var t=e.stateNode,n=e.memoizedProps;try{for(var r=e.type,a=t.attributes;a.length;)t.removeAttributeNode(a[0]);Ht(t,r,n),t[zt]=e,t[hn]=n}catch(i){Re(e,e.return,i)}}var Vr=!1,ht=!1,Ky=!1,hS=typeof WeakSet=="function"?WeakSet:Set,Tt=null;function U3(e,t){if(e=e.containerInfo,Mv=zd,e=kE(e),J0(e)){if("selectionStart"in e)var n={start:e.selectionStart,end:e.selectionEnd};else e:{n=(n=e.ownerDocument)&&n.defaultView||window;var r=n.getSelection&&n.getSelection();if(r&&r.rangeCount!==0){n=r.anchorNode;var a=r.anchorOffset,i=r.focusNode;r=r.focusOffset;try{n.nodeType,i.nodeType}catch{n=null;break e}var o=0,l=-1,s=-1,u=0,d=0,f=e,h=null;t:for(;;){for(var p;f!==n||a!==0&&f.nodeType!==3||(l=o+a),f!==i||r!==0&&f.nodeType!==3||(s=o+r),f.nodeType===3&&(o+=f.nodeValue.length),(p=f.firstChild)!==null;)h=f,f=p;for(;;){if(f===e)break t;if(h===n&&++u===a&&(l=o),h===i&&++d===r&&(s=o),(p=f.nextSibling)!==null)break;f=h,h=f.parentNode}f=p}n=l===-1||s===-1?null:{start:l,end:s}}else n=null}n=n||{start:0,end:0}}else n=null;for(Pv={focusedElem:e,selectionRange:n},zd=!1,Tt=t;Tt!==null;)if(t=Tt,e=t.child,(t.subtreeFlags&1028)!==0&&e!==null)e.return=t,Tt=e;else for(;Tt!==null;){switch(t=Tt,i=t.alternate,e=t.flags,t.tag){case 0:if(e&4&&(e=t.updateQueue,e=e!==null?e.events:null,e!==null))for(n=0;n title"))),Ht(i,r,n),i[zt]=e,Ct(i),r=i;break e;case"link":var o=RS("link","href",a).get(r+(n.href||""));if(o){for(var l=0;lg&&(o=g,g=m,m=o);var y=z1(l,m),v=z1(l,g);if(y&&v&&(p.rangeCount!==1||p.anchorNode!==y.node||p.anchorOffset!==y.offset||p.focusNode!==v.node||p.focusOffset!==v.offset)){var x=f.createRange();x.setStart(y.node,y.offset),p.removeAllRanges(),m>g?(p.addRange(x),p.extend(v.node,v.offset)):(x.setEnd(v.node,v.offset),p.addRange(x))}}}}for(f=[],p=l;p=p.parentNode;)p.nodeType===1&&f.push({element:p,left:p.scrollLeft,top:p.scrollTop});for(typeof l.focus=="function"&&l.focus(),l=0;ln?32:n,ie.T=null,n=_v,_v=null;var i=Za,o=na;if(St=0,Pl=Za=null,na=0,_e&6)throw Error(U(331));var l=_e;if(_e|=4,oT(i.current),rT(i,i.current,o,n),_e=l,Uc(0,!1),_n&&typeof _n.onPostCommitFiberRoot=="function")try{_n.onPostCommitFiberRoot(Rc,i)}catch{}return!0}finally{Te.p=a,ie.T=r,ST(e,t)}}function vS(e,t,n){t=Gn(n,t),t=Sv(e.stateNode,t,2),e=Qa(e,t,2),e!==null&&(Dc(e,2),Nr(e))}function Re(e,t,n){if(e.tag===3)vS(e,e,n);else for(;t!==null;){if(t.tag===3){vS(t,e,n);break}else if(t.tag===1){var r=t.stateNode;if(typeof t.type.getDerivedStateFromError=="function"||typeof r.componentDidCatch=="function"&&(Wa===null||!Wa.has(r))){e=Gn(n,e),n=L_(2),r=Qa(t,n,2),r!==null&&(z_(n,r,t,e),Dc(r,2),Nr(r));break}}t=t.return}}function Vy(e,t,n){var r=e.pingCache;if(r===null){r=e.pingCache=new F3;var a=new Set;r.set(t,a)}else a=r.get(t),a===void 0&&(a=new Set,r.set(t,a));a.has(n)||(_b=!0,a.add(n),e=X3.bind(null,e,t,n),t.then(e,e))}function X3(e,t,n){var r=e.pingCache;r!==null&&r.delete(t),e.pingedLanes|=e.suspendedLanes&n,e.warmLanes&=~n,qe===e&&(Se&n)===n&&(lt===4||lt===3&&(Se&62914560)===Se&&300>En()-sp?!(_e&2)&&Rl(e,0):Tb|=n,Ml===Se&&(Ml=0)),Nr(e)}function OT(e,t){t===0&&(t=pE()),e=yo(e,t),e!==null&&(Dc(e,t),Nr(e))}function Q3(e){var t=e.memoizedState,n=0;t!==null&&(n=t.retryLane),OT(e,n)}function W3(e,t){var n=0;switch(e.tag){case 31:case 13:var r=e.stateNode,a=e.memoizedState;a!==null&&(n=a.retryLane);break;case 19:r=e.stateNode;break;case 22:r=e.stateNode._retryCache;break;default:throw Error(U(314))}r!==null&&r.delete(t),OT(e,n)}function Z3(e,t){return F0(e,t)}var Md=null,ko=null,Cv=!1,Pd=!1,Xy=!1,Ga=0;function Nr(e){e!==ko&&e.next===null&&(ko===null?Md=ko=e:ko=ko.next=e),Pd=!0,Cv||(Cv=!0,e4())}function Uc(e,t){if(!Xy&&Pd){Xy=!0;do for(var n=!1,r=Md;r!==null;){if(e!==0){var a=r.pendingLanes;if(a===0)var i=0;else{var o=r.suspendedLanes,l=r.pingedLanes;i=(1<<31-Tn(42|e)+1)-1,i&=a&~(o&~l),i=i&201326741?i&201326741|1:i?i|2:0}i!==0&&(n=!0,gS(r,i))}else i=Se,i=Wh(r,r===qe?i:0,r.cancelPendingCommit!==null||r.timeoutHandle!==-1),!(i&3)||$c(r,i)||(n=!0,gS(r,i));r=r.next}while(n);Xy=!1}}function J3(){jT()}function jT(){Pd=Cv=!1;var e=0;Ga!==0&&c4()&&(e=Ga);for(var t=En(),n=null,r=Md;r!==null;){var a=r.next,i=AT(r,t);i===0?(r.next=null,n===null?Md=a:n.next=a,a===null&&(ko=n)):(n=r,(e!==0||i&3)&&(Pd=!0)),r=a}St!==0&&St!==5||Uc(e),Ga!==0&&(Ga=0)}function AT(e,t){for(var n=e.suspendedLanes,r=e.pingedLanes,a=e.expirationTimes,i=e.pendingLanes&-62914561;0l)break;var d=s.transferSize,f=s.initiatorType;d&&OS(f)&&(s=s.responseEnd,o+=d*(s"u"?null:document;function $T(e,t,n){var r=ps;if(r&&typeof t=="string"&&t){var a=Fn(t);a='link[rel="'+e+'"][href="'+a+'"]',typeof n=="string"&&(a+='[crossorigin="'+n+'"]'),NS.has(a)||(NS.add(a),e={rel:e,crossOrigin:n,href:t},r.querySelector(a)===null&&(t=r.createElement("link"),Ht(t,"link",e),Ct(t),r.head.appendChild(t)))}}function b4(e){va.D(e),$T("dns-prefetch",e,null)}function x4(e,t){va.C(e,t),$T("preconnect",e,t)}function S4(e,t,n){va.L(e,t,n);var r=ps;if(r&&e&&t){var a='link[rel="preload"][as="'+Fn(t)+'"]';t==="image"&&n&&n.imageSrcSet?(a+='[imagesrcset="'+Fn(n.imageSrcSet)+'"]',typeof n.imageSizes=="string"&&(a+='[imagesizes="'+Fn(n.imageSizes)+'"]')):a+='[href="'+Fn(e)+'"]';var i=a;switch(t){case"style":i=$l(e);break;case"script":i=ys(e)}Jn.has(i)||(e=et({rel:"preload",href:t==="image"&&n&&n.imageSrcSet?void 0:e,as:t},n),Jn.set(i,e),r.querySelector(a)!==null||t==="style"&&r.querySelector(Hc(i))||t==="script"&&r.querySelector(qc(i))||(t=r.createElement("link"),Ht(t,"link",e),Ct(t),r.head.appendChild(t)))}}function w4(e,t){va.m(e,t);var n=ps;if(n&&e){var r=t&&typeof t.as=="string"?t.as:"script",a='link[rel="modulepreload"][as="'+Fn(r)+'"][href="'+Fn(e)+'"]',i=a;switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":i=ys(e)}if(!Jn.has(i)&&(e=et({rel:"modulepreload",href:e},t),Jn.set(i,e),n.querySelector(a)===null)){switch(r){case"audioworklet":case"paintworklet":case"serviceworker":case"sharedworker":case"worker":case"script":if(n.querySelector(qc(i)))return}r=n.createElement("link"),Ht(r,"link",e),Ct(r),n.head.appendChild(r)}}}function O4(e,t,n){va.S(e,t,n);var r=ps;if(r&&e){var a=tl(r).hoistableStyles,i=$l(e);t=t||"default";var o=a.get(i);if(!o){var l={loading:0,preload:null};if(o=r.querySelector(Hc(i)))l.loading=5;else{e=et({rel:"stylesheet",href:e,"data-precedence":t},n),(n=Jn.get(i))&&Pb(e,n);var s=o=r.createElement("link");Ct(s),Ht(s,"link",e),s._p=new Promise(function(u,d){s.onload=u,s.onerror=d}),s.addEventListener("load",function(){l.loading|=1}),s.addEventListener("error",function(){l.loading|=2}),l.loading|=4,Zf(o,t,r)}o={type:"stylesheet",instance:o,count:1,state:l},a.set(i,o)}}}function j4(e,t){va.X(e,t);var n=ps;if(n&&e){var r=tl(n).hoistableScripts,a=ys(e),i=r.get(a);i||(i=n.querySelector(qc(a)),i||(e=et({src:e,async:!0},t),(t=Jn.get(a))&&Rb(e,t),i=n.createElement("script"),Ct(i),Ht(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function A4(e,t){va.M(e,t);var n=ps;if(n&&e){var r=tl(n).hoistableScripts,a=ys(e),i=r.get(a);i||(i=n.querySelector(qc(a)),i||(e=et({src:e,async:!0,type:"module"},t),(t=Jn.get(a))&&Rb(e,t),i=n.createElement("script"),Ct(i),Ht(i,"link",e),n.head.appendChild(i)),i={type:"script",instance:i,count:1,state:null},r.set(a,i))}}function MS(e,t,n,r){var a=(a=Ya.current)?Dd(a):null;if(!a)throw Error(U(446));switch(e){case"meta":case"title":return null;case"style":return typeof n.precedence=="string"&&typeof n.href=="string"?(t=$l(n.href),n=tl(a).hoistableStyles,r=n.get(t),r||(r={type:"style",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};case"link":if(n.rel==="stylesheet"&&typeof n.href=="string"&&typeof n.precedence=="string"){e=$l(n.href);var i=tl(a).hoistableStyles,o=i.get(e);if(o||(a=a.ownerDocument||a,o={type:"stylesheet",instance:null,count:0,state:{loading:0,preload:null}},i.set(e,o),(i=a.querySelector(Hc(e)))&&!i._p&&(o.instance=i,o.state.loading=5),Jn.has(e)||(n={rel:"preload",as:"style",href:n.href,crossOrigin:n.crossOrigin,integrity:n.integrity,media:n.media,hrefLang:n.hrefLang,referrerPolicy:n.referrerPolicy},Jn.set(e,n),i||E4(a,e,n,o.state))),t&&r===null)throw Error(U(528,""));return o}if(t&&r!==null)throw Error(U(529,""));return null;case"script":return t=n.async,n=n.src,typeof n=="string"&&t&&typeof t!="function"&&typeof t!="symbol"?(t=ys(n),n=tl(a).hoistableScripts,r=n.get(t),r||(r={type:"script",instance:null,count:0,state:null},n.set(t,r)),r):{type:"void",instance:null,count:0,state:null};default:throw Error(U(444,e))}}function $l(e){return'href="'+Fn(e)+'"'}function Hc(e){return'link[rel="stylesheet"]['+e+"]"}function DT(e){return et({},e,{"data-precedence":e.precedence,precedence:null})}function E4(e,t,n,r){e.querySelector('link[rel="preload"][as="style"]['+t+"]")?r.loading=1:(t=e.createElement("link"),r.preload=t,t.addEventListener("load",function(){return r.loading|=1}),t.addEventListener("error",function(){return r.loading|=2}),Ht(t,"link",n),Ct(t),e.head.appendChild(t))}function ys(e){return'[src="'+Fn(e)+'"]'}function qc(e){return"script[async]"+e}function PS(e,t,n){if(t.count++,t.instance===null)switch(t.type){case"style":var r=e.querySelector('style[data-href~="'+Fn(n.href)+'"]');if(r)return t.instance=r,Ct(r),r;var a=et({},n,{"data-href":n.href,"data-precedence":n.precedence,href:null,precedence:null});return r=(e.ownerDocument||e).createElement("style"),Ct(r),Ht(r,"style",a),Zf(r,n.precedence,e),t.instance=r;case"stylesheet":a=$l(n.href);var i=e.querySelector(Hc(a));if(i)return t.state.loading|=4,t.instance=i,Ct(i),i;r=DT(n),(a=Jn.get(a))&&Pb(r,a),i=(e.ownerDocument||e).createElement("link"),Ct(i);var o=i;return o._p=new Promise(function(l,s){o.onload=l,o.onerror=s}),Ht(i,"link",r),t.state.loading|=4,Zf(i,n.precedence,e),t.instance=i;case"script":return i=ys(n.src),(a=e.querySelector(qc(i)))?(t.instance=a,Ct(a),a):(r=n,(a=Jn.get(i))&&(r=et({},n),Rb(r,a)),e=e.ownerDocument||e,a=e.createElement("script"),Ct(a),Ht(a,"link",r),e.head.appendChild(a),t.instance=a);case"void":return null;default:throw Error(U(443,t.type))}else t.type==="stylesheet"&&!(t.state.loading&4)&&(r=t.instance,t.state.loading|=4,Zf(r,n.precedence,e));return t.instance}function Zf(e,t,n){for(var r=n.querySelectorAll('link[rel="stylesheet"][data-precedence],style[data-precedence]'),a=r.length?r[r.length-1]:null,i=a,o=0;o title"):null)}function _4(e,t,n){if(n===1||t.itemProp!=null)return!1;switch(e){case"meta":case"title":return!0;case"style":if(typeof t.precedence!="string"||typeof t.href!="string"||t.href==="")break;return!0;case"link":if(typeof t.rel!="string"||typeof t.href!="string"||t.href===""||t.onLoad||t.onError)break;switch(t.rel){case"stylesheet":return e=t.disabled,typeof t.precedence=="string"&&e==null;default:return!0}case"script":if(t.async&&typeof t.async!="function"&&typeof t.async!="symbol"&&!t.onLoad&&!t.onError&&t.src&&typeof t.src=="string")return!0}return!1}function kT(e){return!(e.type==="stylesheet"&&!(e.state.loading&3))}function T4(e,t,n,r){if(n.type==="stylesheet"&&(typeof r.media!="string"||matchMedia(r.media).matches!==!1)&&!(n.state.loading&4)){if(n.instance===null){var a=$l(r.href),i=t.querySelector(Hc(a));if(i){t=i._p,t!==null&&typeof t=="object"&&typeof t.then=="function"&&(e.count++,e=kd.bind(e),t.then(e,e)),n.state.loading|=4,n.instance=i,Ct(i);return}i=t.ownerDocument||t,r=DT(r),(a=Jn.get(a))&&Pb(r,a),i=i.createElement("link"),Ct(i);var o=i;o._p=new Promise(function(l,s){o.onload=l,o.onerror=s}),Ht(i,"link",r),n.instance=i}e.stylesheets===null&&(e.stylesheets=new Map),e.stylesheets.set(n,t),(t=n.state.preload)&&!(n.state.loading&3)&&(e.count++,n=kd.bind(e),t.addEventListener("load",n),t.addEventListener("error",n))}}var tm=0;function C4(e,t){return e.stylesheets&&e.count===0&&ed(e,e.stylesheets),0tm?50:800)+t);return e.unsuspend=n,function(){e.unsuspend=null,clearTimeout(r),clearTimeout(a)}}:null}function kd(){if(this.count--,this.count===0&&(this.imgCount===0||!this.waitingForImages)){if(this.stylesheets)ed(this,this.stylesheets);else if(this.unsuspend){var e=this.unsuspend;this.unsuspend=null,e()}}}var Ld=null;function ed(e,t){e.stylesheets=null,e.unsuspend!==null&&(e.count++,Ld=new Map,t.forEach(N4,e),Ld=null,kd.call(e))}function N4(e,t){if(!(t.state.loading&4)){var n=Ld.get(e);if(n)var r=n.get(null);else{n=new Map,Ld.set(e,n);for(var a=e.querySelectorAll("link[data-precedence],style[data-precedence]"),i=0;i"u"||typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE!="function"))try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(FT)}catch(e){console.error(e)}}FT(),ZA.exports=Xh;var z4=ZA.exports;const GT=j.createContext({theme:"dark",toggle:()=>{},setTheme:()=>{}}),US="esn_theme";function B4(e){document.documentElement.setAttribute("data-theme",e)}function I4({children:e}){const[t,n]=j.useState(()=>localStorage.getItem(US)==="light"?"light":"dark");j.useEffect(()=>{B4(t),localStorage.setItem(US,t)},[t]);const r=i=>n(i),a=()=>n(i=>i==="dark"?"light":"dark");return c.jsx(GT.Provider,{value:{theme:t,toggle:a,setTheme:r},children:e})}function U4(){return j.useContext(GT)}/**
+ * react-router v7.17.0
+ *
+ * Copyright (c) Remix Software Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE.md file in the root directory of this source tree.
+ *
+ * @license MIT
+ */var HS="popstate";function qS(e){return typeof e=="object"&&e!=null&&"pathname"in e&&"search"in e&&"hash"in e&&"state"in e&&"key"in e}function H4(e={}){function t(r,a){var u;let i=(u=a.state)==null?void 0:u.masked,{pathname:o,search:l,hash:s}=i||r.location;return Iv("",{pathname:o,search:l,hash:s},a.state&&a.state.usr||null,a.state&&a.state.key||"default",i?{pathname:r.location.pathname,search:r.location.search,hash:r.location.hash}:void 0)}function n(r,a){return typeof a=="string"?a:Uu(a)}return F4(t,n,null,e)}function rt(e,t){if(e===!1||e===null||typeof e>"u")throw new Error(t)}function fr(e,t){if(!e){typeof console<"u"&&console.warn(t);try{throw new Error(t)}catch{}}}function q4(){return Math.random().toString(36).substring(2,10)}function FS(e,t){return{usr:e.state,key:e.key,idx:t,masked:e.mask?{pathname:e.pathname,search:e.search,hash:e.hash}:void 0}}function Iv(e,t,n=null,r,a){return{pathname:typeof e=="string"?e:e.pathname,search:"",hash:"",...typeof t=="string"?ms(t):t,state:n,key:t&&t.key||r||q4(),mask:a}}function Uu({pathname:e="/",search:t="",hash:n=""}){return t&&t!=="?"&&(e+=t.charAt(0)==="?"?t:"?"+t),n&&n!=="#"&&(e+=n.charAt(0)==="#"?n:"#"+n),e}function ms(e){let t={};if(e){let n=e.indexOf("#");n>=0&&(t.hash=e.substring(n),e=e.substring(0,n));let r=e.indexOf("?");r>=0&&(t.search=e.substring(r),e=e.substring(0,r)),e&&(t.pathname=e)}return t}function F4(e,t,n,r={}){let{window:a=document.defaultView,v5Compat:i=!1}=r,o=a.history,l="POP",s=null,u=d();u==null&&(u=0,o.replaceState({...o.state,idx:u},""));function d(){return(o.state||{idx:null}).idx}function f(){l="POP";let g=d(),y=g==null?null:g-u;u=g,s&&s({action:l,location:m.location,delta:y})}function h(g,y){l="PUSH";let v=qS(g)?g:Iv(m.location,g,y);u=d()+1;let x=FS(v,u),w=m.createHref(v.mask||v);try{o.pushState(x,"",w)}catch(S){if(S instanceof DOMException&&S.name==="DataCloneError")throw S;a.location.assign(w)}i&&s&&s({action:l,location:m.location,delta:1})}function p(g,y){l="REPLACE";let v=qS(g)?g:Iv(m.location,g,y);u=d();let x=FS(v,u),w=m.createHref(v.mask||v);o.replaceState(x,"",w),i&&s&&s({action:l,location:m.location,delta:0})}function b(g){return G4(a,g)}let m={get action(){return l},get location(){return e(a,o)},listen(g){if(s)throw new Error("A history only accepts one active listener");return a.addEventListener(HS,f),s=g,()=>{a.removeEventListener(HS,f),s=null}},createHref(g){return t(a,g)},createURL:b,encodeLocation(g){let y=b(g);return{pathname:y.pathname,search:y.search,hash:y.hash}},push:h,replace:p,go(g){return o.go(g)}};return m}function G4(e,t,n=!1){let r="http://localhost";e&&(r=e.location.origin!=="null"?e.location.origin:e.location.href),rt(r,"No window.location.(origin|href) available to create URL");let a=typeof t=="string"?t:Uu(t);return a=a.replace(/ $/,"%20"),!n&&a.startsWith("//")&&(a=r+a),new URL(a,r)}function KT(e,t,n="/"){return K4(e,t,n,!1)}function K4(e,t,n,r,a){let i=typeof t=="string"?ms(t):t,o=da(i.pathname||"/",n);if(o==null)return null;let l=Y4(e),s=null,u=iD(o);for(let d=0;s==null&&d{let d={relativePath:u===void 0?o.path||"":u,caseSensitive:o.caseSensitive===!0,childrenIndex:l,route:o};if(d.relativePath.startsWith("/")){if(!d.relativePath.startsWith(r)&&s)return;rt(d.relativePath.startsWith(r),`Absolute route path "${d.relativePath}" nested under path "${r}" is not valid. An absolute child route path must start with the combined path of all its parent routes.`),d.relativePath=d.relativePath.slice(r.length)}let f=cr([r,d.relativePath]),h=n.concat(d);o.children&&o.children.length>0&&(rt(o.index!==!0,`Index routes must not have child routes. Please remove all child routes from route path "${f}".`),YT(o.children,t,h,f,s)),!(o.path==null&&!o.index)&&t.push({path:f,score:tD(f,o.index),routesMeta:h})};return e.forEach((o,l)=>{var s;if(o.path===""||!((s=o.path)!=null&&s.includes("?")))i(o,l);else for(let u of VT(o.path))i(o,l,!0,u)}),t}function VT(e){let t=e.split("/");if(t.length===0)return[];let[n,...r]=t,a=n.endsWith("?"),i=n.replace(/\?$/,"");if(r.length===0)return a?[i,""]:[i];let o=VT(r.join("/")),l=[];return l.push(...o.map(s=>s===""?i:[i,s].join("/"))),a&&l.push(...o),l.map(s=>e.startsWith("/")&&s===""?"/":s)}function V4(e){e.sort((t,n)=>t.score!==n.score?n.score-t.score:nD(t.routesMeta.map(r=>r.childrenIndex),n.routesMeta.map(r=>r.childrenIndex)))}var X4=/^:[\w-]+$/,Q4=3,W4=2,Z4=1,J4=10,eD=-2,GS=e=>e==="*";function tD(e,t){let n=e.split("/"),r=n.length;return n.some(GS)&&(r+=eD),t&&(r+=W4),n.filter(a=>!GS(a)).reduce((a,i)=>a+(X4.test(i)?Q4:i===""?Z4:J4),r)}function nD(e,t){return e.length===t.length&&e.slice(0,-1).every((r,a)=>r===t[a])?e[e.length-1]-t[t.length-1]:0}function rD(e,t,n=!1){let{routesMeta:r}=e,a={},i="/",o=[];for(let l=0;l{if(d==="*"){let b=l[h]||"";o=i.slice(0,i.length-b.length).replace(/(.)\/+$/,"$1")}const p=l[h];return f&&!p?u[d]=void 0:u[d]=(p||"").replace(/%2F/g,"/"),u},{}),pathname:i,pathnameBase:o,pattern:e}}function aD(e,t=!1,n=!0){fr(e==="*"||!e.endsWith("*")||e.endsWith("/*"),`Route path "${e}" will be treated as if it were "${e.replace(/\*$/,"/*")}" because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to "${e.replace(/\*$/,"/*")}".`);let r=[],a="^"+e.replace(/\/*\*?$/,"").replace(/^\/*/,"/").replace(/[\\.*+^${}|()[\]]/g,"\\$&").replace(/\/:([\w-]+)(\?)?/g,(o,l,s,u,d)=>{if(r.push({paramName:l,isOptional:s!=null}),s){let f=d.charAt(u+o.length);return f&&f!=="/"?"/([^\\/]*)":"(?:/([^\\/]*))?"}return"/([^\\/]+)"}).replace(/\/([\w-]+)\?(\/|$)/g,"(/$1)?$2");return e.endsWith("*")?(r.push({paramName:"*"}),a+=e==="*"||e==="/*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):n?a+="\\/*$":e!==""&&e!=="/"&&(a+="(?:(?=\\/|$))"),[new RegExp(a,t?void 0:"i"),r]}function iD(e){try{return e.split("/").map(t=>decodeURIComponent(t).replace(/\//g,"%2F")).join("/")}catch(t){return fr(!1,`The URL path "${e}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${t}).`),e}}function da(e,t){if(t==="/")return e;if(!e.toLowerCase().startsWith(t.toLowerCase()))return null;let n=t.endsWith("/")?t.length-1:t.length,r=e.charAt(n);return r&&r!=="/"?null:e.slice(n)||"/"}var oD=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i;function lD(e,t="/"){let{pathname:n,search:r="",hash:a=""}=typeof e=="string"?ms(e):e,i;return n?(n=XT(n),n.startsWith("/")?i=KS(n.substring(1),"/"):i=KS(n,t)):i=t,{pathname:i,search:cD(r),hash:fD(a)}}function KS(e,t){let n=Ud(t).split("/");return e.split("/").forEach(a=>{a===".."?n.length>1&&n.pop():a!=="."&&n.push(a)}),n.length>1?n.join("/"):"/"}function nm(e,t,n,r){return`Cannot include a '${e}' character in a manually specified \`to.${t}\` field [${JSON.stringify(r)}]. Please separate it out to the \`to.${n}\` field. Alternatively you may provide the full path as a string in component.");let{basename:n,navigator:r}=j.useContext(Rn),{hash:a,pathname:i,search:o}=Gc(e,{relative:t}),l=i;return n!=="/"&&(l=i==="/"?n:cr([n,i])),r.createHref({pathname:l,search:o,hash:a})}function gs(){return j.useContext(Fc)!=null}function Mr(){return rt(gs(),"useLocation() may be used only in the context of a component."),j.useContext(Fc).location}var nC="You should call navigate() in a React.useEffect(), not when your component is first rendered.";function rC(e){j.useContext(Rn).static||j.useLayoutEffect(e)}function vo(){let{isDataRoute:e}=j.useContext(pr);return e?zD():jD()}function jD(){rt(gs(),"useNavigate() may be used only in the context of a component.");let e=j.useContext(vs),{basename:t,navigator:n}=j.useContext(Rn),{matches:r}=j.useContext(pr),{pathname:a}=Mr(),i=JSON.stringify(zb(r)),o=j.useRef(!1);return rC(()=>{o.current=!0}),j.useCallback((s,u={})=>{if(fr(o.current,nC),!o.current)return;if(typeof s=="number"){n.go(s);return}let d=hp(s,JSON.parse(i),a,u.relative==="path");e==null&&t!=="/"&&(d.pathname=d.pathname==="/"?t:cr([t,d.pathname])),(u.replace?n.replace:n.push)(d,u.state,u)},[t,n,i,a,e])}var AD=j.createContext(null);function ED(e){let t=j.useContext(pr).outlet;return j.useMemo(()=>t&&j.createElement(AD.Provider,{value:e},t),[t,e])}function Gc(e,{relative:t}={}){let{matches:n}=j.useContext(pr),{pathname:r}=Mr(),a=JSON.stringify(zb(n));return j.useMemo(()=>hp(e,JSON.parse(a),r,t==="path"),[e,a,r,t])}function _D(e,t){return aC(e,t)}function aC(e,t,n){var g;rt(gs(),"useRoutes() may be used only in the context of a component.");let{navigator:r}=j.useContext(Rn),{matches:a}=j.useContext(pr),i=a[a.length-1],o=i?i.params:{},l=i?i.pathname:"/",s=i?i.pathnameBase:"/",u=i&&i.route;{let y=u&&u.path||"";oC(l,!u||y.endsWith("*")||y.endsWith("*?"),`You rendered descendant (or called \`useRoutes()\`) at "${l}" (under ) but the parent route path has no trailing "*". This means if you navigate deeper, the parent won't match anymore and therefore the child routes will never render.
+
+Please change the parent to .`)}let d=Mr(),f;if(t){let y=typeof t=="string"?ms(t):t;rt(s==="/"||((g=y.pathname)==null?void 0:g.startsWith(s)),`When overriding the location using \`\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${s}" but pathname "${y.pathname}" was given in the \`location\` prop.`),f=y}else f=d;let h=f.pathname||"/",p=h;if(s!=="/"){let y=s.replace(/^\//,"").split("/");p="/"+h.replace(/^\//,"").split("/").slice(y.length).join("/")}let b=n&&n.state.matches.length?n.state.matches.map(y=>Object.assign(y,{route:n.manifest[y.route.id]||y.route})):KT(e,{pathname:p});fr(u||b!=null,`No routes matched location "${f.pathname}${f.search}${f.hash}" `),fr(b==null||b[b.length-1].route.element!==void 0||b[b.length-1].route.Component!==void 0||b[b.length-1].route.lazy!==void 0,`Matched leaf route at location "${f.pathname}${f.search}${f.hash}" does not have an element or Component. This means it will render an =0?a=a.slice(0,l+1):a=[a[0]];break}}}}let s=n==null?void 0:n.onError,u=r&&s?(d,f)=>{var h,p;s(d,{location:r.location,params:((p=(h=r.matches)==null?void 0:h[0])==null?void 0:p.params)??{},pattern:pD(r.matches),errorInfo:f})}:void 0;return a.reduceRight((d,f,h)=>{let p,b=!1,m=null,g=null;r&&(p=i&&f.route.id?i[f.route.id]:void 0,m=f.route.errorElement||CD,o&&(l<0&&h===0?(oC("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),b=!0,g=null):l===h&&(b=!0,g=f.route.hydrateFallbackElement||null)));let y=t.concat(a.slice(0,h+1)),v=()=>{let x;return p?x=m:b?x=g:f.route.Component?x=j.createElement(f.route.Component,null):f.route.element?x=f.route.element:x=d,j.createElement(MD,{match:f,routeContext:{outlet:d,matches:y,isDataRoute:r!=null},children:x})};return r&&(f.route.ErrorBoundary||f.route.errorElement||h===0)?j.createElement(iC,{location:r.location,revalidation:r.revalidation,component:m,error:p,children:v(),routeContext:{outlet:null,matches:y,isDataRoute:!0},onError:u}):v()},null)}function Ib(e){return`${e} must be used within a data router. See https://reactrouter.com/en/main/routers/picking-a-router.`}function RD(e){let t=j.useContext(vs);return rt(t,Ib(e)),t}function $D(e){let t=j.useContext(pp);return rt(t,Ib(e)),t}function DD(e){let t=j.useContext(pr);return rt(t,Ib(e)),t}function Ub(e){let t=DD(e),n=t.matches[t.matches.length-1];return rt(n.route.id,`${e} can only be used on routes that contain a unique "id"`),n.route.id}function kD(){return Ub("useRouteId")}function LD(){var r;let e=j.useContext(Bb),t=$D("useRouteError"),n=Ub("useRouteError");return e!==void 0?e:(r=t.errors)==null?void 0:r[n]}function zD(){let{router:e}=RD("useNavigate"),t=Ub("useNavigate"),n=j.useRef(!1);return rC(()=>{n.current=!0}),j.useCallback(async(a,i={})=>{fr(n.current,nC),n.current&&(typeof a=="number"?await e.navigate(a):await e.navigate(a,{fromRouteId:t,...i}))},[e,t])}var YS={};function oC(e,t,n){!t&&!YS[e]&&(YS[e]=!0,fr(!1,n))}j.memo(BD);function BD({routes:e,manifest:t,future:n,state:r,isStatic:a,onError:i}){return aC(e,void 0,{manifest:t,state:r,isStatic:a,onError:i})}function lC({to:e,replace:t,state:n,relative:r}){rt(gs()," may be used only in the context of a component.");let{static:a}=j.useContext(Rn);fr(!a," must not be used on the initial render in a . This is a no-op, but you should modify your code so the is only ever rendered in response to some user interaction or state change.");let{matches:i}=j.useContext(pr),{pathname:o}=Mr(),l=vo(),s=hp(e,zb(i),o,r==="path"),u=JSON.stringify(s);return j.useEffect(()=>{l(JSON.parse(u),{replace:t,state:n,relative:r})},[l,u,r,t,n]),null}function ID(e){return ED(e.context)}function je(e){rt(!1,"A is only ever to be used as the child of element, never rendered directly. Please wrap your in a .")}function UD({basename:e="/",children:t=null,location:n,navigationType:r="POP",navigator:a,static:i=!1,useTransitions:o}){rt(!gs(),"You cannot render a inside another . You should never have more than one in your app.");let l=e.replace(/^\/*/,"/"),s=j.useMemo(()=>({basename:l,navigator:a,static:i,useTransitions:o,future:{}}),[l,a,i,o]);typeof n=="string"&&(n=ms(n));let{pathname:u="/",search:d="",hash:f="",state:h=null,key:p="default",mask:b}=n,m=j.useMemo(()=>{let g=da(u,l);return g==null?null:{location:{pathname:g,search:d,hash:f,state:h,key:p,mask:b},navigationType:r}},[l,u,d,f,h,p,r,b]);return fr(m!=null,` is not able to match the URL "${u}${d}${f}" because it does not start with the basename, so the won't render anything.`),m==null?null:j.createElement(Rn.Provider,{value:s},j.createElement(Fc.Provider,{children:t,value:m}))}function HD({children:e,location:t}){return _D(Uv(e),t)}function Uv(e,t=[]){let n=[];return j.Children.forEach(e,(r,a)=>{if(!j.isValidElement(r))return;let i=[...t,a];if(r.type===j.Fragment){n.push.apply(n,Uv(r.props.children,i));return}rt(r.type===je,`[${typeof r.type=="string"?r.type:r.type.name}] is not a component. All component children of must be a or `),rt(!r.props.index||!r.props.children,"An index route cannot have child routes.");let o={id:r.props.id||i.join("-"),caseSensitive:r.props.caseSensitive,element:r.props.element,Component:r.props.Component,index:r.props.index,path:r.props.path,middleware:r.props.middleware,loader:r.props.loader,action:r.props.action,hydrateFallbackElement:r.props.hydrateFallbackElement,HydrateFallback:r.props.HydrateFallback,errorElement:r.props.errorElement,ErrorBoundary:r.props.ErrorBoundary,hasErrorBoundary:r.props.hasErrorBoundary===!0||r.props.ErrorBoundary!=null||r.props.errorElement!=null,shouldRevalidate:r.props.shouldRevalidate,handle:r.props.handle,lazy:r.props.lazy};r.props.children&&(o.children=Uv(r.props.children,i)),n.push(o)}),n}var nd="get",rd="application/x-www-form-urlencoded";function yp(e){return typeof HTMLElement<"u"&&e instanceof HTMLElement}function qD(e){return yp(e)&&e.tagName.toLowerCase()==="button"}function FD(e){return yp(e)&&e.tagName.toLowerCase()==="form"}function GD(e){return yp(e)&&e.tagName.toLowerCase()==="input"}function KD(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}function YD(e,t){return e.button===0&&(!t||t==="_self")&&!KD(e)}var Of=null;function VD(){if(Of===null)try{new FormData(document.createElement("form"),0),Of=!1}catch{Of=!0}return Of}var XD=new Set(["application/x-www-form-urlencoded","multipart/form-data","text/plain"]);function am(e){return e!=null&&!XD.has(e)?(fr(!1,`"${e}" is not a valid \`encType\` for \`