@ghostlytools/cli 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (57) hide show
  1. package/README.md +405 -0
  2. package/SKILL.md +282 -0
  3. package/dist/assets/argon2id-088uQfnH.js +645 -0
  4. package/dist/assets/argon2id-088uQfnH.js.map +1 -0
  5. package/dist/assets/bark_ffi_wasm_bg-Bxru_BVW.wasm +0 -0
  6. package/dist/assets/bark_ffi_wasm_bg-EY2uc0Bx.js +6 -0
  7. package/dist/assets/bark_ffi_wasm_bg-EY2uc0Bx.js.map +1 -0
  8. package/dist/assets/bitcoindevkit_bg-B-iLWrmX.js +6 -0
  9. package/dist/assets/bitcoindevkit_bg-B-iLWrmX.js.map +1 -0
  10. package/dist/assets/bitcoindevkit_bg-CRkZTSbO.wasm +0 -0
  11. package/dist/assets/breez_sdk_spark_wasm_bg.wasm +0 -0
  12. package/dist/assets/endpoint-h3cqRyRz.js +185 -0
  13. package/dist/assets/endpoint-h3cqRyRz.js.map +1 -0
  14. package/dist/assets/fedimintWorker.mjs +95 -0
  15. package/dist/assets/fedimint_client_wasm_bg-BtHHlFpp.js +6 -0
  16. package/dist/assets/fedimint_client_wasm_bg-BtHHlFpp.js.map +1 -0
  17. package/dist/assets/fedimint_client_wasm_bg-DeFtkIv6.wasm +0 -0
  18. package/dist/assets/fileBytes-ByS16quP.js +154 -0
  19. package/dist/assets/fileBytes-ByS16quP.js.map +1 -0
  20. package/dist/assets/fileBytesIdb-COzoilo9.js +230 -0
  21. package/dist/assets/fileBytesIdb-COzoilo9.js.map +1 -0
  22. package/dist/assets/fileBytesOpfs-B27wAMUh.js +145 -0
  23. package/dist/assets/fileBytesOpfs-B27wAMUh.js.map +1 -0
  24. package/dist/assets/ghostly_iroh_web-CPa_YEfb.js +1154 -0
  25. package/dist/assets/ghostly_iroh_web-CPa_YEfb.js.map +1 -0
  26. package/dist/assets/ghostly_iroh_web_bg.wasm +0 -0
  27. package/dist/assets/hyperdhtRelay-BKsFpPjr.js +342 -0
  28. package/dist/assets/hyperdhtRelay-BKsFpPjr.js.map +1 -0
  29. package/dist/assets/legacy_ciphers-JJOu0JXL.js +5185 -0
  30. package/dist/assets/legacy_ciphers-JJOu0JXL.js.map +1 -0
  31. package/dist/assets/mainline-DOncVbJN.js +176 -0
  32. package/dist/assets/mainline-DOncVbJN.js.map +1 -0
  33. package/dist/assets/nacl-fast-CDhNCYHs.js +1512 -0
  34. package/dist/assets/nacl-fast-CDhNCYHs.js.map +1 -0
  35. package/dist/assets/noble_curves-DDWn5AH0.js +2978 -0
  36. package/dist/assets/noble_curves-DDWn5AH0.js.map +1 -0
  37. package/dist/assets/noble_hashes-B7AZyFyS.js +427 -0
  38. package/dist/assets/noble_hashes-B7AZyFyS.js.map +1 -0
  39. package/dist/assets/openpgp-BBFr-zHQ.js +16573 -0
  40. package/dist/assets/openpgp-BBFr-zHQ.js.map +1 -0
  41. package/dist/assets/server-5T5l8hfy.js +28293 -0
  42. package/dist/assets/server-5T5l8hfy.js.map +1 -0
  43. package/dist/assets/sha512-BYId-G-T.js +1034 -0
  44. package/dist/assets/sha512-BYId-G-T.js.map +1 -0
  45. package/dist/assets/src-DptDr2et.js +20971 -0
  46. package/dist/assets/src-DptDr2et.js.map +1 -0
  47. package/dist/assets/storage-Bya5b2Xt.js +1648 -0
  48. package/dist/assets/storage-Bya5b2Xt.js.map +1 -0
  49. package/dist/assets/tree-store-N362nuzZ.js +1031 -0
  50. package/dist/assets/tree-store-N362nuzZ.js.map +1 -0
  51. package/dist/assets/unbzip2-stream-B1C-JX9L.js +681 -0
  52. package/dist/assets/unbzip2-stream-B1C-JX9L.js.map +1 -0
  53. package/dist/assets/web-OUQl4Q7L.js +3802 -0
  54. package/dist/assets/web-OUQl4Q7L.js.map +1 -0
  55. package/dist/ghostly.mjs +17087 -0
  56. package/dist/ghostly.mjs.map +1 -0
  57. package/package.json +76 -0
@@ -0,0 +1,1512 @@
1
+ //#region ../../node_modules/openpgp/dist/lightweight/nacl-fast.mjs
2
+ /*! OpenPGP.js v6.3.2 - 2026-09-24 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
3
+ var globalThis$1 = typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
4
+ var crypto = typeof globalThis$1 === "object" && "crypto" in globalThis$1 ? globalThis$1.crypto : void 0;
5
+ var nacl = {};
6
+ var gf = function(init) {
7
+ var i, r = /* @__PURE__ */ new Float64Array(16);
8
+ if (init) for (i = 0; i < init.length; i++) r[i] = init[i];
9
+ return r;
10
+ };
11
+ var randombytes = function() {
12
+ throw new Error("no PRNG");
13
+ };
14
+ var _9 = /* @__PURE__ */ new Uint8Array(32);
15
+ _9[0] = 9;
16
+ var gf0 = gf();
17
+ var gf1 = gf([1]);
18
+ var _121665 = gf([56129, 1]);
19
+ var D = gf([
20
+ 30883,
21
+ 4953,
22
+ 19914,
23
+ 30187,
24
+ 55467,
25
+ 16705,
26
+ 2637,
27
+ 112,
28
+ 59544,
29
+ 30585,
30
+ 16505,
31
+ 36039,
32
+ 65139,
33
+ 11119,
34
+ 27886,
35
+ 20995
36
+ ]);
37
+ var D2 = gf([
38
+ 61785,
39
+ 9906,
40
+ 39828,
41
+ 60374,
42
+ 45398,
43
+ 33411,
44
+ 5274,
45
+ 224,
46
+ 53552,
47
+ 61171,
48
+ 33010,
49
+ 6542,
50
+ 64743,
51
+ 22239,
52
+ 55772,
53
+ 9222
54
+ ]);
55
+ var X = gf([
56
+ 54554,
57
+ 36645,
58
+ 11616,
59
+ 51542,
60
+ 42930,
61
+ 38181,
62
+ 51040,
63
+ 26924,
64
+ 56412,
65
+ 64982,
66
+ 57905,
67
+ 49316,
68
+ 21502,
69
+ 52590,
70
+ 14035,
71
+ 8553
72
+ ]);
73
+ var Y = gf([
74
+ 26200,
75
+ 26214,
76
+ 26214,
77
+ 26214,
78
+ 26214,
79
+ 26214,
80
+ 26214,
81
+ 26214,
82
+ 26214,
83
+ 26214,
84
+ 26214,
85
+ 26214,
86
+ 26214,
87
+ 26214,
88
+ 26214,
89
+ 26214
90
+ ]);
91
+ var I = gf([
92
+ 41136,
93
+ 18958,
94
+ 6951,
95
+ 50414,
96
+ 58488,
97
+ 44335,
98
+ 6150,
99
+ 12099,
100
+ 55207,
101
+ 15867,
102
+ 153,
103
+ 11085,
104
+ 57099,
105
+ 20417,
106
+ 9344,
107
+ 11139
108
+ ]);
109
+ function ts64(x, i, h, l) {
110
+ x[i] = h >> 24 & 255;
111
+ x[i + 1] = h >> 16 & 255;
112
+ x[i + 2] = h >> 8 & 255;
113
+ x[i + 3] = h & 255;
114
+ x[i + 4] = l >> 24 & 255;
115
+ x[i + 5] = l >> 16 & 255;
116
+ x[i + 6] = l >> 8 & 255;
117
+ x[i + 7] = l & 255;
118
+ }
119
+ function vn(x, xi, y, yi, n) {
120
+ var i, d = 0;
121
+ for (i = 0; i < n; i++) d |= x[xi + i] ^ y[yi + i];
122
+ return (1 & d - 1 >>> 8) - 1;
123
+ }
124
+ function crypto_verify_32(x, xi, y, yi) {
125
+ return vn(x, xi, y, yi, 32);
126
+ }
127
+ function set25519(r, a) {
128
+ var i = 0;
129
+ for (; i < 16; i++) r[i] = a[i] | 0;
130
+ }
131
+ function car25519(o) {
132
+ var i, v, c = 1;
133
+ for (i = 0; i < 16; i++) {
134
+ v = o[i] + c + 65535;
135
+ c = Math.floor(v / 65536);
136
+ o[i] = v - c * 65536;
137
+ }
138
+ o[0] += c - 1 + 37 * (c - 1);
139
+ }
140
+ function sel25519(p, q, b) {
141
+ var t, c = ~(b - 1);
142
+ for (var i = 0; i < 16; i++) {
143
+ t = c & (p[i] ^ q[i]);
144
+ p[i] ^= t;
145
+ q[i] ^= t;
146
+ }
147
+ }
148
+ function pack25519(o, n) {
149
+ var i, j, b;
150
+ var m = gf(), t = gf();
151
+ for (i = 0; i < 16; i++) t[i] = n[i];
152
+ car25519(t);
153
+ car25519(t);
154
+ car25519(t);
155
+ for (j = 0; j < 2; j++) {
156
+ m[0] = t[0] - 65517;
157
+ for (i = 1; i < 15; i++) {
158
+ m[i] = t[i] - 65535 - (m[i - 1] >> 16 & 1);
159
+ m[i - 1] &= 65535;
160
+ }
161
+ m[15] = t[15] - 32767 - (m[14] >> 16 & 1);
162
+ b = m[15] >> 16 & 1;
163
+ m[14] &= 65535;
164
+ sel25519(t, m, 1 - b);
165
+ }
166
+ for (i = 0; i < 16; i++) {
167
+ o[2 * i] = t[i] & 255;
168
+ o[2 * i + 1] = t[i] >> 8;
169
+ }
170
+ }
171
+ function neq25519(a, b) {
172
+ var c = /* @__PURE__ */ new Uint8Array(32), d = /* @__PURE__ */ new Uint8Array(32);
173
+ pack25519(c, a);
174
+ pack25519(d, b);
175
+ return crypto_verify_32(c, 0, d, 0);
176
+ }
177
+ function par25519(a) {
178
+ var d = /* @__PURE__ */ new Uint8Array(32);
179
+ pack25519(d, a);
180
+ return d[0] & 1;
181
+ }
182
+ function unpack25519(o, n) {
183
+ var i = 0;
184
+ for (; i < 16; i++) o[i] = n[2 * i] + (n[2 * i + 1] << 8);
185
+ o[15] &= 32767;
186
+ }
187
+ function A(o, a, b) {
188
+ for (var i = 0; i < 16; i++) o[i] = a[i] + b[i];
189
+ }
190
+ function Z(o, a, b) {
191
+ for (var i = 0; i < 16; i++) o[i] = a[i] - b[i];
192
+ }
193
+ function M(o, a, b) {
194
+ var v, c, t0 = 0, t1 = 0, t2 = 0, t3 = 0, t4 = 0, t5 = 0, t6 = 0, t7 = 0, t8 = 0, t9 = 0, t10 = 0, t11 = 0, t12 = 0, t13 = 0, t14 = 0, t15 = 0, t16 = 0, t17 = 0, t18 = 0, t19 = 0, t20 = 0, t21 = 0, t22 = 0, t23 = 0, t24 = 0, t25 = 0, t26 = 0, t27 = 0, t28 = 0, t29 = 0, t30 = 0, b0 = b[0], b1 = b[1], b2 = b[2], b3 = b[3], b4 = b[4], b5 = b[5], b6 = b[6], b7 = b[7], b8 = b[8], b9 = b[9], b10 = b[10], b11 = b[11], b12 = b[12], b13 = b[13], b14 = b[14], b15 = b[15];
195
+ v = a[0];
196
+ t0 += v * b0;
197
+ t1 += v * b1;
198
+ t2 += v * b2;
199
+ t3 += v * b3;
200
+ t4 += v * b4;
201
+ t5 += v * b5;
202
+ t6 += v * b6;
203
+ t7 += v * b7;
204
+ t8 += v * b8;
205
+ t9 += v * b9;
206
+ t10 += v * b10;
207
+ t11 += v * b11;
208
+ t12 += v * b12;
209
+ t13 += v * b13;
210
+ t14 += v * b14;
211
+ t15 += v * b15;
212
+ v = a[1];
213
+ t1 += v * b0;
214
+ t2 += v * b1;
215
+ t3 += v * b2;
216
+ t4 += v * b3;
217
+ t5 += v * b4;
218
+ t6 += v * b5;
219
+ t7 += v * b6;
220
+ t8 += v * b7;
221
+ t9 += v * b8;
222
+ t10 += v * b9;
223
+ t11 += v * b10;
224
+ t12 += v * b11;
225
+ t13 += v * b12;
226
+ t14 += v * b13;
227
+ t15 += v * b14;
228
+ t16 += v * b15;
229
+ v = a[2];
230
+ t2 += v * b0;
231
+ t3 += v * b1;
232
+ t4 += v * b2;
233
+ t5 += v * b3;
234
+ t6 += v * b4;
235
+ t7 += v * b5;
236
+ t8 += v * b6;
237
+ t9 += v * b7;
238
+ t10 += v * b8;
239
+ t11 += v * b9;
240
+ t12 += v * b10;
241
+ t13 += v * b11;
242
+ t14 += v * b12;
243
+ t15 += v * b13;
244
+ t16 += v * b14;
245
+ t17 += v * b15;
246
+ v = a[3];
247
+ t3 += v * b0;
248
+ t4 += v * b1;
249
+ t5 += v * b2;
250
+ t6 += v * b3;
251
+ t7 += v * b4;
252
+ t8 += v * b5;
253
+ t9 += v * b6;
254
+ t10 += v * b7;
255
+ t11 += v * b8;
256
+ t12 += v * b9;
257
+ t13 += v * b10;
258
+ t14 += v * b11;
259
+ t15 += v * b12;
260
+ t16 += v * b13;
261
+ t17 += v * b14;
262
+ t18 += v * b15;
263
+ v = a[4];
264
+ t4 += v * b0;
265
+ t5 += v * b1;
266
+ t6 += v * b2;
267
+ t7 += v * b3;
268
+ t8 += v * b4;
269
+ t9 += v * b5;
270
+ t10 += v * b6;
271
+ t11 += v * b7;
272
+ t12 += v * b8;
273
+ t13 += v * b9;
274
+ t14 += v * b10;
275
+ t15 += v * b11;
276
+ t16 += v * b12;
277
+ t17 += v * b13;
278
+ t18 += v * b14;
279
+ t19 += v * b15;
280
+ v = a[5];
281
+ t5 += v * b0;
282
+ t6 += v * b1;
283
+ t7 += v * b2;
284
+ t8 += v * b3;
285
+ t9 += v * b4;
286
+ t10 += v * b5;
287
+ t11 += v * b6;
288
+ t12 += v * b7;
289
+ t13 += v * b8;
290
+ t14 += v * b9;
291
+ t15 += v * b10;
292
+ t16 += v * b11;
293
+ t17 += v * b12;
294
+ t18 += v * b13;
295
+ t19 += v * b14;
296
+ t20 += v * b15;
297
+ v = a[6];
298
+ t6 += v * b0;
299
+ t7 += v * b1;
300
+ t8 += v * b2;
301
+ t9 += v * b3;
302
+ t10 += v * b4;
303
+ t11 += v * b5;
304
+ t12 += v * b6;
305
+ t13 += v * b7;
306
+ t14 += v * b8;
307
+ t15 += v * b9;
308
+ t16 += v * b10;
309
+ t17 += v * b11;
310
+ t18 += v * b12;
311
+ t19 += v * b13;
312
+ t20 += v * b14;
313
+ t21 += v * b15;
314
+ v = a[7];
315
+ t7 += v * b0;
316
+ t8 += v * b1;
317
+ t9 += v * b2;
318
+ t10 += v * b3;
319
+ t11 += v * b4;
320
+ t12 += v * b5;
321
+ t13 += v * b6;
322
+ t14 += v * b7;
323
+ t15 += v * b8;
324
+ t16 += v * b9;
325
+ t17 += v * b10;
326
+ t18 += v * b11;
327
+ t19 += v * b12;
328
+ t20 += v * b13;
329
+ t21 += v * b14;
330
+ t22 += v * b15;
331
+ v = a[8];
332
+ t8 += v * b0;
333
+ t9 += v * b1;
334
+ t10 += v * b2;
335
+ t11 += v * b3;
336
+ t12 += v * b4;
337
+ t13 += v * b5;
338
+ t14 += v * b6;
339
+ t15 += v * b7;
340
+ t16 += v * b8;
341
+ t17 += v * b9;
342
+ t18 += v * b10;
343
+ t19 += v * b11;
344
+ t20 += v * b12;
345
+ t21 += v * b13;
346
+ t22 += v * b14;
347
+ t23 += v * b15;
348
+ v = a[9];
349
+ t9 += v * b0;
350
+ t10 += v * b1;
351
+ t11 += v * b2;
352
+ t12 += v * b3;
353
+ t13 += v * b4;
354
+ t14 += v * b5;
355
+ t15 += v * b6;
356
+ t16 += v * b7;
357
+ t17 += v * b8;
358
+ t18 += v * b9;
359
+ t19 += v * b10;
360
+ t20 += v * b11;
361
+ t21 += v * b12;
362
+ t22 += v * b13;
363
+ t23 += v * b14;
364
+ t24 += v * b15;
365
+ v = a[10];
366
+ t10 += v * b0;
367
+ t11 += v * b1;
368
+ t12 += v * b2;
369
+ t13 += v * b3;
370
+ t14 += v * b4;
371
+ t15 += v * b5;
372
+ t16 += v * b6;
373
+ t17 += v * b7;
374
+ t18 += v * b8;
375
+ t19 += v * b9;
376
+ t20 += v * b10;
377
+ t21 += v * b11;
378
+ t22 += v * b12;
379
+ t23 += v * b13;
380
+ t24 += v * b14;
381
+ t25 += v * b15;
382
+ v = a[11];
383
+ t11 += v * b0;
384
+ t12 += v * b1;
385
+ t13 += v * b2;
386
+ t14 += v * b3;
387
+ t15 += v * b4;
388
+ t16 += v * b5;
389
+ t17 += v * b6;
390
+ t18 += v * b7;
391
+ t19 += v * b8;
392
+ t20 += v * b9;
393
+ t21 += v * b10;
394
+ t22 += v * b11;
395
+ t23 += v * b12;
396
+ t24 += v * b13;
397
+ t25 += v * b14;
398
+ t26 += v * b15;
399
+ v = a[12];
400
+ t12 += v * b0;
401
+ t13 += v * b1;
402
+ t14 += v * b2;
403
+ t15 += v * b3;
404
+ t16 += v * b4;
405
+ t17 += v * b5;
406
+ t18 += v * b6;
407
+ t19 += v * b7;
408
+ t20 += v * b8;
409
+ t21 += v * b9;
410
+ t22 += v * b10;
411
+ t23 += v * b11;
412
+ t24 += v * b12;
413
+ t25 += v * b13;
414
+ t26 += v * b14;
415
+ t27 += v * b15;
416
+ v = a[13];
417
+ t13 += v * b0;
418
+ t14 += v * b1;
419
+ t15 += v * b2;
420
+ t16 += v * b3;
421
+ t17 += v * b4;
422
+ t18 += v * b5;
423
+ t19 += v * b6;
424
+ t20 += v * b7;
425
+ t21 += v * b8;
426
+ t22 += v * b9;
427
+ t23 += v * b10;
428
+ t24 += v * b11;
429
+ t25 += v * b12;
430
+ t26 += v * b13;
431
+ t27 += v * b14;
432
+ t28 += v * b15;
433
+ v = a[14];
434
+ t14 += v * b0;
435
+ t15 += v * b1;
436
+ t16 += v * b2;
437
+ t17 += v * b3;
438
+ t18 += v * b4;
439
+ t19 += v * b5;
440
+ t20 += v * b6;
441
+ t21 += v * b7;
442
+ t22 += v * b8;
443
+ t23 += v * b9;
444
+ t24 += v * b10;
445
+ t25 += v * b11;
446
+ t26 += v * b12;
447
+ t27 += v * b13;
448
+ t28 += v * b14;
449
+ t29 += v * b15;
450
+ v = a[15];
451
+ t15 += v * b0;
452
+ t16 += v * b1;
453
+ t17 += v * b2;
454
+ t18 += v * b3;
455
+ t19 += v * b4;
456
+ t20 += v * b5;
457
+ t21 += v * b6;
458
+ t22 += v * b7;
459
+ t23 += v * b8;
460
+ t24 += v * b9;
461
+ t25 += v * b10;
462
+ t26 += v * b11;
463
+ t27 += v * b12;
464
+ t28 += v * b13;
465
+ t29 += v * b14;
466
+ t30 += v * b15;
467
+ t0 += 38 * t16;
468
+ t1 += 38 * t17;
469
+ t2 += 38 * t18;
470
+ t3 += 38 * t19;
471
+ t4 += 38 * t20;
472
+ t5 += 38 * t21;
473
+ t6 += 38 * t22;
474
+ t7 += 38 * t23;
475
+ t8 += 38 * t24;
476
+ t9 += 38 * t25;
477
+ t10 += 38 * t26;
478
+ t11 += 38 * t27;
479
+ t12 += 38 * t28;
480
+ t13 += 38 * t29;
481
+ t14 += 38 * t30;
482
+ c = 1;
483
+ v = t0 + c + 65535;
484
+ c = Math.floor(v / 65536);
485
+ t0 = v - c * 65536;
486
+ v = t1 + c + 65535;
487
+ c = Math.floor(v / 65536);
488
+ t1 = v - c * 65536;
489
+ v = t2 + c + 65535;
490
+ c = Math.floor(v / 65536);
491
+ t2 = v - c * 65536;
492
+ v = t3 + c + 65535;
493
+ c = Math.floor(v / 65536);
494
+ t3 = v - c * 65536;
495
+ v = t4 + c + 65535;
496
+ c = Math.floor(v / 65536);
497
+ t4 = v - c * 65536;
498
+ v = t5 + c + 65535;
499
+ c = Math.floor(v / 65536);
500
+ t5 = v - c * 65536;
501
+ v = t6 + c + 65535;
502
+ c = Math.floor(v / 65536);
503
+ t6 = v - c * 65536;
504
+ v = t7 + c + 65535;
505
+ c = Math.floor(v / 65536);
506
+ t7 = v - c * 65536;
507
+ v = t8 + c + 65535;
508
+ c = Math.floor(v / 65536);
509
+ t8 = v - c * 65536;
510
+ v = t9 + c + 65535;
511
+ c = Math.floor(v / 65536);
512
+ t9 = v - c * 65536;
513
+ v = t10 + c + 65535;
514
+ c = Math.floor(v / 65536);
515
+ t10 = v - c * 65536;
516
+ v = t11 + c + 65535;
517
+ c = Math.floor(v / 65536);
518
+ t11 = v - c * 65536;
519
+ v = t12 + c + 65535;
520
+ c = Math.floor(v / 65536);
521
+ t12 = v - c * 65536;
522
+ v = t13 + c + 65535;
523
+ c = Math.floor(v / 65536);
524
+ t13 = v - c * 65536;
525
+ v = t14 + c + 65535;
526
+ c = Math.floor(v / 65536);
527
+ t14 = v - c * 65536;
528
+ v = t15 + c + 65535;
529
+ c = Math.floor(v / 65536);
530
+ t15 = v - c * 65536;
531
+ t0 += c - 1 + 37 * (c - 1);
532
+ c = 1;
533
+ v = t0 + c + 65535;
534
+ c = Math.floor(v / 65536);
535
+ t0 = v - c * 65536;
536
+ v = t1 + c + 65535;
537
+ c = Math.floor(v / 65536);
538
+ t1 = v - c * 65536;
539
+ v = t2 + c + 65535;
540
+ c = Math.floor(v / 65536);
541
+ t2 = v - c * 65536;
542
+ v = t3 + c + 65535;
543
+ c = Math.floor(v / 65536);
544
+ t3 = v - c * 65536;
545
+ v = t4 + c + 65535;
546
+ c = Math.floor(v / 65536);
547
+ t4 = v - c * 65536;
548
+ v = t5 + c + 65535;
549
+ c = Math.floor(v / 65536);
550
+ t5 = v - c * 65536;
551
+ v = t6 + c + 65535;
552
+ c = Math.floor(v / 65536);
553
+ t6 = v - c * 65536;
554
+ v = t7 + c + 65535;
555
+ c = Math.floor(v / 65536);
556
+ t7 = v - c * 65536;
557
+ v = t8 + c + 65535;
558
+ c = Math.floor(v / 65536);
559
+ t8 = v - c * 65536;
560
+ v = t9 + c + 65535;
561
+ c = Math.floor(v / 65536);
562
+ t9 = v - c * 65536;
563
+ v = t10 + c + 65535;
564
+ c = Math.floor(v / 65536);
565
+ t10 = v - c * 65536;
566
+ v = t11 + c + 65535;
567
+ c = Math.floor(v / 65536);
568
+ t11 = v - c * 65536;
569
+ v = t12 + c + 65535;
570
+ c = Math.floor(v / 65536);
571
+ t12 = v - c * 65536;
572
+ v = t13 + c + 65535;
573
+ c = Math.floor(v / 65536);
574
+ t13 = v - c * 65536;
575
+ v = t14 + c + 65535;
576
+ c = Math.floor(v / 65536);
577
+ t14 = v - c * 65536;
578
+ v = t15 + c + 65535;
579
+ c = Math.floor(v / 65536);
580
+ t15 = v - c * 65536;
581
+ t0 += c - 1 + 37 * (c - 1);
582
+ o[0] = t0;
583
+ o[1] = t1;
584
+ o[2] = t2;
585
+ o[3] = t3;
586
+ o[4] = t4;
587
+ o[5] = t5;
588
+ o[6] = t6;
589
+ o[7] = t7;
590
+ o[8] = t8;
591
+ o[9] = t9;
592
+ o[10] = t10;
593
+ o[11] = t11;
594
+ o[12] = t12;
595
+ o[13] = t13;
596
+ o[14] = t14;
597
+ o[15] = t15;
598
+ }
599
+ function S(o, a) {
600
+ M(o, a, a);
601
+ }
602
+ function inv25519(o, i) {
603
+ var c = gf();
604
+ var a = 0;
605
+ for (; a < 16; a++) c[a] = i[a];
606
+ for (a = 253; a >= 0; a--) {
607
+ S(c, c);
608
+ if (a !== 2 && a !== 4) M(c, c, i);
609
+ }
610
+ for (a = 0; a < 16; a++) o[a] = c[a];
611
+ }
612
+ function pow2523(o, i) {
613
+ var c = gf();
614
+ var a = 0;
615
+ for (; a < 16; a++) c[a] = i[a];
616
+ for (a = 250; a >= 0; a--) {
617
+ S(c, c);
618
+ if (a !== 1) M(c, c, i);
619
+ }
620
+ for (a = 0; a < 16; a++) o[a] = c[a];
621
+ }
622
+ function crypto_scalarmult(q, n, p) {
623
+ var z = /* @__PURE__ */ new Uint8Array(32);
624
+ var x = /* @__PURE__ */ new Float64Array(80), r, i;
625
+ var a = gf(), b = gf(), c = gf(), d = gf(), e = gf(), f = gf();
626
+ for (i = 0; i < 31; i++) z[i] = n[i];
627
+ z[31] = n[31] & 127 | 64;
628
+ z[0] &= 248;
629
+ unpack25519(x, p);
630
+ for (i = 0; i < 16; i++) {
631
+ b[i] = x[i];
632
+ d[i] = a[i] = c[i] = 0;
633
+ }
634
+ a[0] = d[0] = 1;
635
+ for (i = 254; i >= 0; --i) {
636
+ r = z[i >>> 3] >>> (i & 7) & 1;
637
+ sel25519(a, b, r);
638
+ sel25519(c, d, r);
639
+ A(e, a, c);
640
+ Z(a, a, c);
641
+ A(c, b, d);
642
+ Z(b, b, d);
643
+ S(d, e);
644
+ S(f, a);
645
+ M(a, c, a);
646
+ M(c, b, e);
647
+ A(e, a, c);
648
+ Z(a, a, c);
649
+ S(b, a);
650
+ Z(c, d, f);
651
+ M(a, c, _121665);
652
+ A(a, a, d);
653
+ M(c, c, a);
654
+ M(a, d, f);
655
+ M(d, b, x);
656
+ S(b, e);
657
+ sel25519(a, b, r);
658
+ sel25519(c, d, r);
659
+ }
660
+ for (i = 0; i < 16; i++) {
661
+ x[i + 16] = a[i];
662
+ x[i + 32] = c[i];
663
+ x[i + 48] = b[i];
664
+ x[i + 64] = d[i];
665
+ }
666
+ var x32 = x.subarray(32);
667
+ var x16 = x.subarray(16);
668
+ inv25519(x32, x32);
669
+ M(x16, x16, x32);
670
+ pack25519(q, x16);
671
+ return 0;
672
+ }
673
+ function crypto_scalarmult_base(q, n) {
674
+ return crypto_scalarmult(q, n, _9);
675
+ }
676
+ function crypto_box_keypair(y, x) {
677
+ randombytes(x, 32);
678
+ return crypto_scalarmult_base(y, x);
679
+ }
680
+ var K = [
681
+ 1116352408,
682
+ 3609767458,
683
+ 1899447441,
684
+ 602891725,
685
+ 3049323471,
686
+ 3964484399,
687
+ 3921009573,
688
+ 2173295548,
689
+ 961987163,
690
+ 4081628472,
691
+ 1508970993,
692
+ 3053834265,
693
+ 2453635748,
694
+ 2937671579,
695
+ 2870763221,
696
+ 3664609560,
697
+ 3624381080,
698
+ 2734883394,
699
+ 310598401,
700
+ 1164996542,
701
+ 607225278,
702
+ 1323610764,
703
+ 1426881987,
704
+ 3590304994,
705
+ 1925078388,
706
+ 4068182383,
707
+ 2162078206,
708
+ 991336113,
709
+ 2614888103,
710
+ 633803317,
711
+ 3248222580,
712
+ 3479774868,
713
+ 3835390401,
714
+ 2666613458,
715
+ 4022224774,
716
+ 944711139,
717
+ 264347078,
718
+ 2341262773,
719
+ 604807628,
720
+ 2007800933,
721
+ 770255983,
722
+ 1495990901,
723
+ 1249150122,
724
+ 1856431235,
725
+ 1555081692,
726
+ 3175218132,
727
+ 1996064986,
728
+ 2198950837,
729
+ 2554220882,
730
+ 3999719339,
731
+ 2821834349,
732
+ 766784016,
733
+ 2952996808,
734
+ 2566594879,
735
+ 3210313671,
736
+ 3203337956,
737
+ 3336571891,
738
+ 1034457026,
739
+ 3584528711,
740
+ 2466948901,
741
+ 113926993,
742
+ 3758326383,
743
+ 338241895,
744
+ 168717936,
745
+ 666307205,
746
+ 1188179964,
747
+ 773529912,
748
+ 1546045734,
749
+ 1294757372,
750
+ 1522805485,
751
+ 1396182291,
752
+ 2643833823,
753
+ 1695183700,
754
+ 2343527390,
755
+ 1986661051,
756
+ 1014477480,
757
+ 2177026350,
758
+ 1206759142,
759
+ 2456956037,
760
+ 344077627,
761
+ 2730485921,
762
+ 1290863460,
763
+ 2820302411,
764
+ 3158454273,
765
+ 3259730800,
766
+ 3505952657,
767
+ 3345764771,
768
+ 106217008,
769
+ 3516065817,
770
+ 3606008344,
771
+ 3600352804,
772
+ 1432725776,
773
+ 4094571909,
774
+ 1467031594,
775
+ 275423344,
776
+ 851169720,
777
+ 430227734,
778
+ 3100823752,
779
+ 506948616,
780
+ 1363258195,
781
+ 659060556,
782
+ 3750685593,
783
+ 883997877,
784
+ 3785050280,
785
+ 958139571,
786
+ 3318307427,
787
+ 1322822218,
788
+ 3812723403,
789
+ 1537002063,
790
+ 2003034995,
791
+ 1747873779,
792
+ 3602036899,
793
+ 1955562222,
794
+ 1575990012,
795
+ 2024104815,
796
+ 1125592928,
797
+ 2227730452,
798
+ 2716904306,
799
+ 2361852424,
800
+ 442776044,
801
+ 2428436474,
802
+ 593698344,
803
+ 2756734187,
804
+ 3733110249,
805
+ 3204031479,
806
+ 2999351573,
807
+ 3329325298,
808
+ 3815920427,
809
+ 3391569614,
810
+ 3928383900,
811
+ 3515267271,
812
+ 566280711,
813
+ 3940187606,
814
+ 3454069534,
815
+ 4118630271,
816
+ 4000239992,
817
+ 116418474,
818
+ 1914138554,
819
+ 174292421,
820
+ 2731055270,
821
+ 289380356,
822
+ 3203993006,
823
+ 460393269,
824
+ 320620315,
825
+ 685471733,
826
+ 587496836,
827
+ 852142971,
828
+ 1086792851,
829
+ 1017036298,
830
+ 365543100,
831
+ 1126000580,
832
+ 2618297676,
833
+ 1288033470,
834
+ 3409855158,
835
+ 1501505948,
836
+ 4234509866,
837
+ 1607167915,
838
+ 987167468,
839
+ 1816402316,
840
+ 1246189591
841
+ ];
842
+ function crypto_hashblocks_hl(hh, hl, m, n) {
843
+ var wh = /* @__PURE__ */ new Int32Array(16), wl = /* @__PURE__ */ new Int32Array(16), bh0, bh1, bh2, bh3, bh4, bh5, bh6, bh7, bl0, bl1, bl2, bl3, bl4, bl5, bl6, bl7, th, tl, i, j, h, l, a, b, c, d;
844
+ var ah0 = hh[0], ah1 = hh[1], ah2 = hh[2], ah3 = hh[3], ah4 = hh[4], ah5 = hh[5], ah6 = hh[6], ah7 = hh[7], al0 = hl[0], al1 = hl[1], al2 = hl[2], al3 = hl[3], al4 = hl[4], al5 = hl[5], al6 = hl[6], al7 = hl[7];
845
+ var pos = 0;
846
+ while (n >= 128) {
847
+ for (i = 0; i < 16; i++) {
848
+ j = 8 * i + pos;
849
+ wh[i] = m[j + 0] << 24 | m[j + 1] << 16 | m[j + 2] << 8 | m[j + 3];
850
+ wl[i] = m[j + 4] << 24 | m[j + 5] << 16 | m[j + 6] << 8 | m[j + 7];
851
+ }
852
+ for (i = 0; i < 80; i++) {
853
+ bh0 = ah0;
854
+ bh1 = ah1;
855
+ bh2 = ah2;
856
+ bh3 = ah3;
857
+ bh4 = ah4;
858
+ bh5 = ah5;
859
+ bh6 = ah6;
860
+ bh7 = ah7;
861
+ bl0 = al0;
862
+ bl1 = al1;
863
+ bl2 = al2;
864
+ bl3 = al3;
865
+ bl4 = al4;
866
+ bl5 = al5;
867
+ bl6 = al6;
868
+ bl7 = al7;
869
+ h = ah7;
870
+ l = al7;
871
+ a = l & 65535;
872
+ b = l >>> 16;
873
+ c = h & 65535;
874
+ d = h >>> 16;
875
+ h = (ah4 >>> 14 | al4 << 18) ^ (ah4 >>> 18 | al4 << 14) ^ (al4 >>> 9 | ah4 << 23);
876
+ l = (al4 >>> 14 | ah4 << 18) ^ (al4 >>> 18 | ah4 << 14) ^ (ah4 >>> 9 | al4 << 23);
877
+ a += l & 65535;
878
+ b += l >>> 16;
879
+ c += h & 65535;
880
+ d += h >>> 16;
881
+ h = ah4 & ah5 ^ ~ah4 & ah6;
882
+ l = al4 & al5 ^ ~al4 & al6;
883
+ a += l & 65535;
884
+ b += l >>> 16;
885
+ c += h & 65535;
886
+ d += h >>> 16;
887
+ h = K[i * 2];
888
+ l = K[i * 2 + 1];
889
+ a += l & 65535;
890
+ b += l >>> 16;
891
+ c += h & 65535;
892
+ d += h >>> 16;
893
+ h = wh[i % 16];
894
+ l = wl[i % 16];
895
+ a += l & 65535;
896
+ b += l >>> 16;
897
+ c += h & 65535;
898
+ d += h >>> 16;
899
+ b += a >>> 16;
900
+ c += b >>> 16;
901
+ d += c >>> 16;
902
+ th = c & 65535 | d << 16;
903
+ tl = a & 65535 | b << 16;
904
+ h = th;
905
+ l = tl;
906
+ a = l & 65535;
907
+ b = l >>> 16;
908
+ c = h & 65535;
909
+ d = h >>> 16;
910
+ h = (ah0 >>> 28 | al0 << 4) ^ (al0 >>> 2 | ah0 << 30) ^ (al0 >>> 7 | ah0 << 25);
911
+ l = (al0 >>> 28 | ah0 << 4) ^ (ah0 >>> 2 | al0 << 30) ^ (ah0 >>> 7 | al0 << 25);
912
+ a += l & 65535;
913
+ b += l >>> 16;
914
+ c += h & 65535;
915
+ d += h >>> 16;
916
+ h = ah0 & ah1 ^ ah0 & ah2 ^ ah1 & ah2;
917
+ l = al0 & al1 ^ al0 & al2 ^ al1 & al2;
918
+ a += l & 65535;
919
+ b += l >>> 16;
920
+ c += h & 65535;
921
+ d += h >>> 16;
922
+ b += a >>> 16;
923
+ c += b >>> 16;
924
+ d += c >>> 16;
925
+ bh7 = c & 65535 | d << 16;
926
+ bl7 = a & 65535 | b << 16;
927
+ h = bh3;
928
+ l = bl3;
929
+ a = l & 65535;
930
+ b = l >>> 16;
931
+ c = h & 65535;
932
+ d = h >>> 16;
933
+ h = th;
934
+ l = tl;
935
+ a += l & 65535;
936
+ b += l >>> 16;
937
+ c += h & 65535;
938
+ d += h >>> 16;
939
+ b += a >>> 16;
940
+ c += b >>> 16;
941
+ d += c >>> 16;
942
+ bh3 = c & 65535 | d << 16;
943
+ bl3 = a & 65535 | b << 16;
944
+ ah1 = bh0;
945
+ ah2 = bh1;
946
+ ah3 = bh2;
947
+ ah4 = bh3;
948
+ ah5 = bh4;
949
+ ah6 = bh5;
950
+ ah7 = bh6;
951
+ ah0 = bh7;
952
+ al1 = bl0;
953
+ al2 = bl1;
954
+ al3 = bl2;
955
+ al4 = bl3;
956
+ al5 = bl4;
957
+ al6 = bl5;
958
+ al7 = bl6;
959
+ al0 = bl7;
960
+ if (i % 16 === 15) for (j = 0; j < 16; j++) {
961
+ h = wh[j];
962
+ l = wl[j];
963
+ a = l & 65535;
964
+ b = l >>> 16;
965
+ c = h & 65535;
966
+ d = h >>> 16;
967
+ h = wh[(j + 9) % 16];
968
+ l = wl[(j + 9) % 16];
969
+ a += l & 65535;
970
+ b += l >>> 16;
971
+ c += h & 65535;
972
+ d += h >>> 16;
973
+ th = wh[(j + 1) % 16];
974
+ tl = wl[(j + 1) % 16];
975
+ h = (th >>> 1 | tl << 31) ^ (th >>> 8 | tl << 24) ^ th >>> 7;
976
+ l = (tl >>> 1 | th << 31) ^ (tl >>> 8 | th << 24) ^ (tl >>> 7 | th << 25);
977
+ a += l & 65535;
978
+ b += l >>> 16;
979
+ c += h & 65535;
980
+ d += h >>> 16;
981
+ th = wh[(j + 14) % 16];
982
+ tl = wl[(j + 14) % 16];
983
+ h = (th >>> 19 | tl << 13) ^ (tl >>> 29 | th << 3) ^ th >>> 6;
984
+ l = (tl >>> 19 | th << 13) ^ (th >>> 29 | tl << 3) ^ (tl >>> 6 | th << 26);
985
+ a += l & 65535;
986
+ b += l >>> 16;
987
+ c += h & 65535;
988
+ d += h >>> 16;
989
+ b += a >>> 16;
990
+ c += b >>> 16;
991
+ d += c >>> 16;
992
+ wh[j] = c & 65535 | d << 16;
993
+ wl[j] = a & 65535 | b << 16;
994
+ }
995
+ }
996
+ h = ah0;
997
+ l = al0;
998
+ a = l & 65535;
999
+ b = l >>> 16;
1000
+ c = h & 65535;
1001
+ d = h >>> 16;
1002
+ h = hh[0];
1003
+ l = hl[0];
1004
+ a += l & 65535;
1005
+ b += l >>> 16;
1006
+ c += h & 65535;
1007
+ d += h >>> 16;
1008
+ b += a >>> 16;
1009
+ c += b >>> 16;
1010
+ d += c >>> 16;
1011
+ hh[0] = ah0 = c & 65535 | d << 16;
1012
+ hl[0] = al0 = a & 65535 | b << 16;
1013
+ h = ah1;
1014
+ l = al1;
1015
+ a = l & 65535;
1016
+ b = l >>> 16;
1017
+ c = h & 65535;
1018
+ d = h >>> 16;
1019
+ h = hh[1];
1020
+ l = hl[1];
1021
+ a += l & 65535;
1022
+ b += l >>> 16;
1023
+ c += h & 65535;
1024
+ d += h >>> 16;
1025
+ b += a >>> 16;
1026
+ c += b >>> 16;
1027
+ d += c >>> 16;
1028
+ hh[1] = ah1 = c & 65535 | d << 16;
1029
+ hl[1] = al1 = a & 65535 | b << 16;
1030
+ h = ah2;
1031
+ l = al2;
1032
+ a = l & 65535;
1033
+ b = l >>> 16;
1034
+ c = h & 65535;
1035
+ d = h >>> 16;
1036
+ h = hh[2];
1037
+ l = hl[2];
1038
+ a += l & 65535;
1039
+ b += l >>> 16;
1040
+ c += h & 65535;
1041
+ d += h >>> 16;
1042
+ b += a >>> 16;
1043
+ c += b >>> 16;
1044
+ d += c >>> 16;
1045
+ hh[2] = ah2 = c & 65535 | d << 16;
1046
+ hl[2] = al2 = a & 65535 | b << 16;
1047
+ h = ah3;
1048
+ l = al3;
1049
+ a = l & 65535;
1050
+ b = l >>> 16;
1051
+ c = h & 65535;
1052
+ d = h >>> 16;
1053
+ h = hh[3];
1054
+ l = hl[3];
1055
+ a += l & 65535;
1056
+ b += l >>> 16;
1057
+ c += h & 65535;
1058
+ d += h >>> 16;
1059
+ b += a >>> 16;
1060
+ c += b >>> 16;
1061
+ d += c >>> 16;
1062
+ hh[3] = ah3 = c & 65535 | d << 16;
1063
+ hl[3] = al3 = a & 65535 | b << 16;
1064
+ h = ah4;
1065
+ l = al4;
1066
+ a = l & 65535;
1067
+ b = l >>> 16;
1068
+ c = h & 65535;
1069
+ d = h >>> 16;
1070
+ h = hh[4];
1071
+ l = hl[4];
1072
+ a += l & 65535;
1073
+ b += l >>> 16;
1074
+ c += h & 65535;
1075
+ d += h >>> 16;
1076
+ b += a >>> 16;
1077
+ c += b >>> 16;
1078
+ d += c >>> 16;
1079
+ hh[4] = ah4 = c & 65535 | d << 16;
1080
+ hl[4] = al4 = a & 65535 | b << 16;
1081
+ h = ah5;
1082
+ l = al5;
1083
+ a = l & 65535;
1084
+ b = l >>> 16;
1085
+ c = h & 65535;
1086
+ d = h >>> 16;
1087
+ h = hh[5];
1088
+ l = hl[5];
1089
+ a += l & 65535;
1090
+ b += l >>> 16;
1091
+ c += h & 65535;
1092
+ d += h >>> 16;
1093
+ b += a >>> 16;
1094
+ c += b >>> 16;
1095
+ d += c >>> 16;
1096
+ hh[5] = ah5 = c & 65535 | d << 16;
1097
+ hl[5] = al5 = a & 65535 | b << 16;
1098
+ h = ah6;
1099
+ l = al6;
1100
+ a = l & 65535;
1101
+ b = l >>> 16;
1102
+ c = h & 65535;
1103
+ d = h >>> 16;
1104
+ h = hh[6];
1105
+ l = hl[6];
1106
+ a += l & 65535;
1107
+ b += l >>> 16;
1108
+ c += h & 65535;
1109
+ d += h >>> 16;
1110
+ b += a >>> 16;
1111
+ c += b >>> 16;
1112
+ d += c >>> 16;
1113
+ hh[6] = ah6 = c & 65535 | d << 16;
1114
+ hl[6] = al6 = a & 65535 | b << 16;
1115
+ h = ah7;
1116
+ l = al7;
1117
+ a = l & 65535;
1118
+ b = l >>> 16;
1119
+ c = h & 65535;
1120
+ d = h >>> 16;
1121
+ h = hh[7];
1122
+ l = hl[7];
1123
+ a += l & 65535;
1124
+ b += l >>> 16;
1125
+ c += h & 65535;
1126
+ d += h >>> 16;
1127
+ b += a >>> 16;
1128
+ c += b >>> 16;
1129
+ d += c >>> 16;
1130
+ hh[7] = ah7 = c & 65535 | d << 16;
1131
+ hl[7] = al7 = a & 65535 | b << 16;
1132
+ pos += 128;
1133
+ n -= 128;
1134
+ }
1135
+ return n;
1136
+ }
1137
+ function crypto_hash(out, m, n) {
1138
+ var hh = /* @__PURE__ */ new Int32Array(8), hl = /* @__PURE__ */ new Int32Array(8), x = /* @__PURE__ */ new Uint8Array(256), i, b = n;
1139
+ hh[0] = 1779033703;
1140
+ hh[1] = 3144134277;
1141
+ hh[2] = 1013904242;
1142
+ hh[3] = 2773480762;
1143
+ hh[4] = 1359893119;
1144
+ hh[5] = 2600822924;
1145
+ hh[6] = 528734635;
1146
+ hh[7] = 1541459225;
1147
+ hl[0] = 4089235720;
1148
+ hl[1] = 2227873595;
1149
+ hl[2] = 4271175723;
1150
+ hl[3] = 1595750129;
1151
+ hl[4] = 2917565137;
1152
+ hl[5] = 725511199;
1153
+ hl[6] = 4215389547;
1154
+ hl[7] = 327033209;
1155
+ crypto_hashblocks_hl(hh, hl, m, n);
1156
+ n %= 128;
1157
+ for (i = 0; i < n; i++) x[i] = m[b - n + i];
1158
+ x[n] = 128;
1159
+ n = 256 - 128 * (n < 112 ? 1 : 0);
1160
+ x[n - 9] = 0;
1161
+ ts64(x, n - 8, b / 536870912 | 0, b << 3);
1162
+ crypto_hashblocks_hl(hh, hl, x, n);
1163
+ for (i = 0; i < 8; i++) ts64(out, 8 * i, hh[i], hl[i]);
1164
+ return 0;
1165
+ }
1166
+ function add(p, q) {
1167
+ var a = gf(), b = gf(), c = gf(), d = gf(), e = gf(), f = gf(), g = gf(), h = gf(), t = gf();
1168
+ Z(a, p[1], p[0]);
1169
+ Z(t, q[1], q[0]);
1170
+ M(a, a, t);
1171
+ A(b, p[0], p[1]);
1172
+ A(t, q[0], q[1]);
1173
+ M(b, b, t);
1174
+ M(c, p[3], q[3]);
1175
+ M(c, c, D2);
1176
+ M(d, p[2], q[2]);
1177
+ A(d, d, d);
1178
+ Z(e, b, a);
1179
+ Z(f, d, c);
1180
+ A(g, d, c);
1181
+ A(h, b, a);
1182
+ M(p[0], e, f);
1183
+ M(p[1], h, g);
1184
+ M(p[2], g, f);
1185
+ M(p[3], e, h);
1186
+ }
1187
+ function cswap(p, q, b) {
1188
+ var i = 0;
1189
+ for (; i < 4; i++) sel25519(p[i], q[i], b);
1190
+ }
1191
+ function pack(r, p) {
1192
+ var tx = gf(), ty = gf(), zi = gf();
1193
+ inv25519(zi, p[2]);
1194
+ M(tx, p[0], zi);
1195
+ M(ty, p[1], zi);
1196
+ pack25519(r, ty);
1197
+ r[31] ^= par25519(tx) << 7;
1198
+ }
1199
+ function scalarmult(p, q, s) {
1200
+ var b, i;
1201
+ set25519(p[0], gf0);
1202
+ set25519(p[1], gf1);
1203
+ set25519(p[2], gf1);
1204
+ set25519(p[3], gf0);
1205
+ for (i = 255; i >= 0; --i) {
1206
+ b = s[i / 8 | 0] >> (i & 7) & 1;
1207
+ cswap(p, q, b);
1208
+ add(q, p);
1209
+ add(p, p);
1210
+ cswap(p, q, b);
1211
+ }
1212
+ }
1213
+ function scalarbase(p, s) {
1214
+ var q = [
1215
+ gf(),
1216
+ gf(),
1217
+ gf(),
1218
+ gf()
1219
+ ];
1220
+ set25519(q[0], X);
1221
+ set25519(q[1], Y);
1222
+ set25519(q[2], gf1);
1223
+ M(q[3], X, Y);
1224
+ scalarmult(p, q, s);
1225
+ }
1226
+ function crypto_sign_keypair(pk, sk, seeded) {
1227
+ var d = /* @__PURE__ */ new Uint8Array(64);
1228
+ var p = [
1229
+ gf(),
1230
+ gf(),
1231
+ gf(),
1232
+ gf()
1233
+ ];
1234
+ var i;
1235
+ if (!seeded) randombytes(sk, 32);
1236
+ crypto_hash(d, sk, 32);
1237
+ d[0] &= 248;
1238
+ d[31] &= 127;
1239
+ d[31] |= 64;
1240
+ scalarbase(p, d);
1241
+ pack(pk, p);
1242
+ for (i = 0; i < 32; i++) sk[i + 32] = pk[i];
1243
+ return 0;
1244
+ }
1245
+ var L = new Float64Array([
1246
+ 237,
1247
+ 211,
1248
+ 245,
1249
+ 92,
1250
+ 26,
1251
+ 99,
1252
+ 18,
1253
+ 88,
1254
+ 214,
1255
+ 156,
1256
+ 247,
1257
+ 162,
1258
+ 222,
1259
+ 249,
1260
+ 222,
1261
+ 20,
1262
+ 0,
1263
+ 0,
1264
+ 0,
1265
+ 0,
1266
+ 0,
1267
+ 0,
1268
+ 0,
1269
+ 0,
1270
+ 0,
1271
+ 0,
1272
+ 0,
1273
+ 0,
1274
+ 0,
1275
+ 0,
1276
+ 0,
1277
+ 16
1278
+ ]);
1279
+ function modL(r, x) {
1280
+ var carry, i = 63, j, k;
1281
+ for (; i >= 32; --i) {
1282
+ carry = 0;
1283
+ for (j = i - 32, k = i - 12; j < k; ++j) {
1284
+ x[j] += carry - 16 * x[i] * L[j - (i - 32)];
1285
+ carry = Math.floor((x[j] + 128) / 256);
1286
+ x[j] -= carry * 256;
1287
+ }
1288
+ x[j] += carry;
1289
+ x[i] = 0;
1290
+ }
1291
+ carry = 0;
1292
+ for (j = 0; j < 32; j++) {
1293
+ x[j] += carry - (x[31] >> 4) * L[j];
1294
+ carry = x[j] >> 8;
1295
+ x[j] &= 255;
1296
+ }
1297
+ for (j = 0; j < 32; j++) x[j] -= carry * L[j];
1298
+ for (i = 0; i < 32; i++) {
1299
+ x[i + 1] += x[i] >> 8;
1300
+ r[i] = x[i] & 255;
1301
+ }
1302
+ }
1303
+ function reduce(r) {
1304
+ var x = /* @__PURE__ */ new Float64Array(64), i = 0;
1305
+ for (; i < 64; i++) x[i] = r[i];
1306
+ for (i = 0; i < 64; i++) r[i] = 0;
1307
+ modL(r, x);
1308
+ }
1309
+ function crypto_sign(sm, m, n, sk) {
1310
+ var d = /* @__PURE__ */ new Uint8Array(64), h = /* @__PURE__ */ new Uint8Array(64), r = /* @__PURE__ */ new Uint8Array(64);
1311
+ var i, j, x = /* @__PURE__ */ new Float64Array(64);
1312
+ var p = [
1313
+ gf(),
1314
+ gf(),
1315
+ gf(),
1316
+ gf()
1317
+ ];
1318
+ crypto_hash(d, sk, 32);
1319
+ d[0] &= 248;
1320
+ d[31] &= 127;
1321
+ d[31] |= 64;
1322
+ var smlen = n + 64;
1323
+ for (i = 0; i < n; i++) sm[64 + i] = m[i];
1324
+ for (i = 0; i < 32; i++) sm[32 + i] = d[32 + i];
1325
+ crypto_hash(r, sm.subarray(32), n + 32);
1326
+ reduce(r);
1327
+ scalarbase(p, r);
1328
+ pack(sm, p);
1329
+ for (i = 32; i < 64; i++) sm[i] = sk[i];
1330
+ crypto_hash(h, sm, n + 64);
1331
+ reduce(h);
1332
+ for (i = 0; i < 64; i++) x[i] = 0;
1333
+ for (i = 0; i < 32; i++) x[i] = r[i];
1334
+ for (i = 0; i < 32; i++) for (j = 0; j < 32; j++) x[i + j] += h[i] * d[j];
1335
+ modL(sm.subarray(32), x);
1336
+ return smlen;
1337
+ }
1338
+ function unpackneg(r, p) {
1339
+ var t = gf(), chk = gf(), num = gf(), den = gf(), den2 = gf(), den4 = gf(), den6 = gf();
1340
+ set25519(r[2], gf1);
1341
+ unpack25519(r[1], p);
1342
+ S(num, r[1]);
1343
+ M(den, num, D);
1344
+ Z(num, num, r[2]);
1345
+ A(den, r[2], den);
1346
+ S(den2, den);
1347
+ S(den4, den2);
1348
+ M(den6, den4, den2);
1349
+ M(t, den6, num);
1350
+ M(t, t, den);
1351
+ pow2523(t, t);
1352
+ M(t, t, num);
1353
+ M(t, t, den);
1354
+ M(t, t, den);
1355
+ M(r[0], t, den);
1356
+ S(chk, r[0]);
1357
+ M(chk, chk, den);
1358
+ if (neq25519(chk, num)) M(r[0], r[0], I);
1359
+ S(chk, r[0]);
1360
+ M(chk, chk, den);
1361
+ if (neq25519(chk, num)) return -1;
1362
+ if (par25519(r[0]) === p[31] >> 7) Z(r[0], gf0, r[0]);
1363
+ M(r[3], r[0], r[1]);
1364
+ return 0;
1365
+ }
1366
+ function crypto_sign_open(m, sm, n, pk) {
1367
+ var i;
1368
+ var t = /* @__PURE__ */ new Uint8Array(32), h = /* @__PURE__ */ new Uint8Array(64);
1369
+ var p = [
1370
+ gf(),
1371
+ gf(),
1372
+ gf(),
1373
+ gf()
1374
+ ], q = [
1375
+ gf(),
1376
+ gf(),
1377
+ gf(),
1378
+ gf()
1379
+ ];
1380
+ if (n < 64) return -1;
1381
+ if (unpackneg(q, pk)) return -1;
1382
+ for (i = 0; i < n; i++) m[i] = sm[i];
1383
+ for (i = 0; i < 32; i++) m[i + 32] = pk[i];
1384
+ crypto_hash(h, m, n);
1385
+ reduce(h);
1386
+ scalarmult(p, q, h);
1387
+ scalarbase(q, sm.subarray(32));
1388
+ add(p, q);
1389
+ pack(t, p);
1390
+ n -= 64;
1391
+ if (crypto_verify_32(sm, 0, t, 0)) {
1392
+ for (i = 0; i < n; i++) m[i] = 0;
1393
+ return -1;
1394
+ }
1395
+ for (i = 0; i < n; i++) m[i] = sm[i + 64];
1396
+ return n;
1397
+ }
1398
+ var crypto_scalarmult_BYTES = 32;
1399
+ var crypto_scalarmult_SCALARBYTES = 32;
1400
+ var crypto_box_PUBLICKEYBYTES = 32;
1401
+ var crypto_box_SECRETKEYBYTES = 32;
1402
+ var crypto_sign_BYTES = 64;
1403
+ var crypto_sign_PUBLICKEYBYTES = 32;
1404
+ var crypto_sign_SECRETKEYBYTES = 64;
1405
+ var crypto_sign_SEEDBYTES = 32;
1406
+ function checkArrayTypes() {
1407
+ for (var i = 0; i < arguments.length; i++) if (!(arguments[i] instanceof Uint8Array)) throw new TypeError("unexpected type, use Uint8Array");
1408
+ }
1409
+ function cleanup(arr) {
1410
+ for (var i = 0; i < arr.length; i++) arr[i] = 0;
1411
+ }
1412
+ nacl.scalarMult = function(n, p) {
1413
+ checkArrayTypes(n, p);
1414
+ if (n.length !== crypto_scalarmult_SCALARBYTES) throw new Error("bad n size");
1415
+ if (p.length !== crypto_scalarmult_BYTES) throw new Error("bad p size");
1416
+ var q = new Uint8Array(crypto_scalarmult_BYTES);
1417
+ crypto_scalarmult(q, n, p);
1418
+ return q;
1419
+ };
1420
+ nacl.box = {};
1421
+ nacl.box.keyPair = function() {
1422
+ var pk = new Uint8Array(crypto_box_PUBLICKEYBYTES);
1423
+ var sk = new Uint8Array(crypto_box_SECRETKEYBYTES);
1424
+ crypto_box_keypair(pk, sk);
1425
+ return {
1426
+ publicKey: pk,
1427
+ secretKey: sk
1428
+ };
1429
+ };
1430
+ nacl.box.keyPair.fromSecretKey = function(secretKey) {
1431
+ checkArrayTypes(secretKey);
1432
+ if (secretKey.length !== crypto_box_SECRETKEYBYTES) throw new Error("bad secret key size");
1433
+ var pk = new Uint8Array(crypto_box_PUBLICKEYBYTES);
1434
+ crypto_scalarmult_base(pk, secretKey);
1435
+ return {
1436
+ publicKey: pk,
1437
+ secretKey: new Uint8Array(secretKey)
1438
+ };
1439
+ };
1440
+ nacl.sign = function(msg, secretKey) {
1441
+ checkArrayTypes(msg, secretKey);
1442
+ if (secretKey.length !== crypto_sign_SECRETKEYBYTES) throw new Error("bad secret key size");
1443
+ var signedMsg = new Uint8Array(crypto_sign_BYTES + msg.length);
1444
+ crypto_sign(signedMsg, msg, msg.length, secretKey);
1445
+ return signedMsg;
1446
+ };
1447
+ nacl.sign.detached = function(msg, secretKey) {
1448
+ var signedMsg = nacl.sign(msg, secretKey);
1449
+ var sig = new Uint8Array(crypto_sign_BYTES);
1450
+ for (var i = 0; i < sig.length; i++) sig[i] = signedMsg[i];
1451
+ return sig;
1452
+ };
1453
+ nacl.sign.detached.verify = function(msg, sig, publicKey) {
1454
+ checkArrayTypes(msg, sig, publicKey);
1455
+ if (sig.length !== crypto_sign_BYTES) throw new Error("bad signature size");
1456
+ if (publicKey.length !== crypto_sign_PUBLICKEYBYTES) throw new Error("bad public key size");
1457
+ var sm = new Uint8Array(crypto_sign_BYTES + msg.length);
1458
+ var m = new Uint8Array(crypto_sign_BYTES + msg.length);
1459
+ var i = 0;
1460
+ for (; i < crypto_sign_BYTES; i++) sm[i] = sig[i];
1461
+ for (i = 0; i < msg.length; i++) sm[i + crypto_sign_BYTES] = msg[i];
1462
+ return crypto_sign_open(m, sm, sm.length, publicKey) >= 0;
1463
+ };
1464
+ nacl.sign.keyPair = function() {
1465
+ var pk = new Uint8Array(crypto_sign_PUBLICKEYBYTES);
1466
+ var sk = new Uint8Array(crypto_sign_SECRETKEYBYTES);
1467
+ crypto_sign_keypair(pk, sk);
1468
+ return {
1469
+ publicKey: pk,
1470
+ secretKey: sk
1471
+ };
1472
+ };
1473
+ nacl.sign.keyPair.fromSecretKey = function(secretKey) {
1474
+ checkArrayTypes(secretKey);
1475
+ if (secretKey.length !== crypto_sign_SECRETKEYBYTES) throw new Error("bad secret key size");
1476
+ var pk = new Uint8Array(crypto_sign_PUBLICKEYBYTES);
1477
+ for (var i = 0; i < pk.length; i++) pk[i] = secretKey[32 + i];
1478
+ return {
1479
+ publicKey: pk,
1480
+ secretKey: new Uint8Array(secretKey)
1481
+ };
1482
+ };
1483
+ nacl.sign.keyPair.fromSeed = function(seed) {
1484
+ checkArrayTypes(seed);
1485
+ if (seed.length !== crypto_sign_SEEDBYTES) throw new Error("bad seed size");
1486
+ var pk = new Uint8Array(crypto_sign_PUBLICKEYBYTES);
1487
+ var sk = new Uint8Array(crypto_sign_SECRETKEYBYTES);
1488
+ for (var i = 0; i < 32; i++) sk[i] = seed[i];
1489
+ crypto_sign_keypair(pk, sk, true);
1490
+ return {
1491
+ publicKey: pk,
1492
+ secretKey: sk
1493
+ };
1494
+ };
1495
+ nacl.setPRNG = function(fn) {
1496
+ randombytes = fn;
1497
+ };
1498
+ (function() {
1499
+ if (crypto && crypto.getRandomValues) {
1500
+ var QUOTA = 65536;
1501
+ nacl.setPRNG(function(x, n) {
1502
+ var i, v = new Uint8Array(n);
1503
+ for (i = 0; i < n; i += QUOTA) crypto.getRandomValues(v.subarray(i, i + Math.min(n - i, QUOTA)));
1504
+ for (i = 0; i < n; i++) x[i] = v[i];
1505
+ cleanup(v);
1506
+ });
1507
+ }
1508
+ })();
1509
+ //#endregion
1510
+ export { nacl as default };
1511
+
1512
+ //# sourceMappingURL=nacl-fast-CDhNCYHs.js.map