@libp2p/crypto 5.1.19 → 5.1.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/dist/index.min.js +1 -1
  2. package/dist/index.min.js.map +4 -4
  3. package/dist/src/random-bytes.d.ts +2 -0
  4. package/dist/src/random-bytes.d.ts.map +1 -1
  5. package/dist/src/random-bytes.js +3 -2
  6. package/dist/src/random-bytes.js.map +1 -1
  7. package/package.json +5 -5
  8. package/src/random-bytes.ts +3 -2
package/dist/index.min.js CHANGED
@@ -1,5 +1,5 @@
1
1
  (function (root, factory) {(typeof module === 'object' && module.exports) ? module.exports = factory() : root.Libp2PCrypto = factory()}(typeof self !== 'undefined' ? self : this, function () {
2
- "use strict";var Libp2PCrypto=(()=>{var Kn=Object.defineProperty;var Nc=Object.getOwnPropertyDescriptor;var Pc=Object.getOwnPropertyNames;var Mc=Object.prototype.hasOwnProperty;var z=(e,t)=>{for(var r in t)Kn(e,r,{get:t[r],enumerable:!0})},Hc=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of Pc(t))!Mc.call(e,o)&&o!==r&&Kn(e,o,{get:()=>t[o],enumerable:!(n=Nc(t,o))||n.enumerable});return e};var qc=e=>Hc(Kn({},"__esModule",{value:!0}),e);var jd={};z(jd,{hmac:()=>zr,keys:()=>Ms,pbkdf2:()=>qs,randomBytes:()=>vs});var zr={};z(zr,{create:()=>On});function Vc(e){return e.buffer instanceof ArrayBuffer}function ft(e){return Vc(e)?e:e.slice()}var nr=class extends Error{constructor(t="An error occurred while signing a message"){super(t),this.name="SigningError"}},or=class extends Error{constructor(t="An error occurred while verifying a message"){super(t),this.name="VerificationError"}},Vr=class extends Error{constructor(t="Missing Web Crypto API"){super(t),this.name="WebCryptoMissingError"}};var $={get(e=globalThis){let t=e.crypto;if(t?.subtle==null)throw new Vr("Missing Web Crypto API. The most likely cause of this error is that this page is being accessed from an insecure context (i.e. not HTTPS). For more information and possible resolutions see https://github.com/libp2p/js-libp2p/blob/main/packages/crypto/README.md#web-crypto-api");return t}};var js={SHA1:20,SHA256:32,SHA512:64};var zc={SHA1:"SHA-1",SHA256:"SHA-256",SHA512:"SHA-512"},jc=async(e,t)=>{let r=await $.get().subtle.sign({name:"HMAC"},e,ft(t));return new Uint8Array(r,0,r.byteLength)};async function On(e,t){let r=zc[e],n=await $.get().subtle.importKey("raw",ft(t),{name:"HMAC",hash:{name:r}},!1,["sign"]);return{async digest(o){return jc(n,o)},length:js[e]}}var Ms={};z(Ms,{generateEphemeralKeyPair:()=>Rc,generateKeyPair:()=>Cd,generateKeyPairFromSeed:()=>Rd,keyStretcher:()=>Kc,privateKeyFromCryptoKeyPair:()=>qd,privateKeyFromProtobuf:()=>Fd,privateKeyFromRaw:()=>kd,privateKeyToCryptoKeyPair:()=>Hd,privateKeyToProtobuf:()=>Nd,publicKeyFromMultihash:()=>Od,publicKeyFromProtobuf:()=>Ud,publicKeyFromRaw:()=>Kd,publicKeyToProtobuf:()=>ue});var k=class extends Error{static name="InvalidParametersError";constructor(t="Invalid parameters"){super(t),this.name="InvalidParametersError"}},ve=class extends Error{static name="InvalidPublicKeyError";constructor(t="Invalid public key"){super(t),this.name="InvalidPublicKeyError"}},sr=class extends Error{static name="InvalidPrivateKeyError";constructor(t="Invalid private key"){super(t),this.name="InvalidPrivateKeyError"}};var zt=class extends Error{static name="UnsupportedKeyTypeError";constructor(t="Unsupported key type"){super(t),this.name="UnsupportedKeyTypeError"}};var Mn={};z(Mn,{base58btc:()=>ot,base58flickr:()=>Qc});var rl=new Uint8Array(0);function Zs(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Ft(e){if(e instanceof Uint8Array&&e.constructor.name==="Uint8Array")return ae(e);if(e instanceof ArrayBuffer)return new Uint8Array(e);if(ArrayBuffer.isView(e))return ae(new Uint8Array(e.buffer,e.byteOffset,e.byteLength));throw new Error("Unknown type, must be binary type")}function $s(e){return new TextEncoder().encode(e)}function Ys(e){return new TextDecoder().decode(e)}function Zc(e){return e?.buffer instanceof ArrayBuffer}function ae(e){return Zc(e)?e:e.slice()}function $c(e,t){if(e.length>=255)throw new TypeError("Alphabet too long");for(var r=new Uint8Array(256),n=0;n<r.length;n++)r[n]=255;for(var o=0;o<e.length;o++){var s=e.charAt(o),i=s.charCodeAt(0);if(r[i]!==255)throw new TypeError(s+" is ambiguous");r[i]=o}var a=e.length,f=e.charAt(0),c=Math.log(a)/Math.log(256),u=Math.log(256)/Math.log(a);function h(l){if(l instanceof Uint8Array||(ArrayBuffer.isView(l)?l=new Uint8Array(l.buffer,l.byteOffset,l.byteLength):Array.isArray(l)&&(l=Uint8Array.from(l))),!(l instanceof Uint8Array))throw new TypeError("Expected Uint8Array");if(l.length===0)return"";for(var x=0,p=0,b=0,E=l.length;b!==E&&l[b]===0;)b++,x++;for(var A=(E-b)*u+1>>>0,L=new Uint8Array(A);b!==E;){for(var T=l[b],U=0,C=A-1;(T!==0||U<p)&&C!==-1;C--,U++)T+=256*L[C]>>>0,L[C]=T%a>>>0,T=T/a>>>0;if(T!==0)throw new Error("Non-zero carry");p=U,b++}for(var I=A-p;I!==A&&L[I]===0;)I++;for(var O=f.repeat(x);I<A;++I)O+=e.charAt(L[I]);return O}function y(l){if(typeof l!="string")throw new TypeError("Expected String");if(l.length===0)return new Uint8Array;var x=0;if(l[x]!==" "){for(var p=0,b=0;l[x]===f;)p++,x++;for(var E=(l.length-x)*c+1>>>0,A=new Uint8Array(E);l[x];){var L=r[l.charCodeAt(x)];if(L===255)return;for(var T=0,U=E-1;(L!==0||T<b)&&U!==-1;U--,T++)L+=a*A[U]>>>0,A[U]=L%256>>>0,L=L/256>>>0;if(L!==0)throw new Error("Non-zero carry");b=T,x++}if(l[x]!==" "){for(var C=E-b;C!==E&&A[C]===0;)C++;for(var I=new Uint8Array(p+(E-C)),O=p;C!==E;)I[O++]=A[C++];return I}}}function m(l){var x=y(l);if(x)return x;throw new Error(`Non-${t} character`)}return{encode:h,decodeUnsafe:y,decode:m}}var Yc=$c,Gc=Yc,Xs=Gc;var Fn=class{name;prefix;baseEncode;constructor(t,r,n){this.name=t,this.prefix=r,this.baseEncode=n}encode(t){if(t instanceof Uint8Array)return`${this.prefix}${this.baseEncode(t)}`;throw Error("Unknown type, must be binary type")}},kn=class{name;prefix;baseDecode;prefixCodePoint;constructor(t,r,n){this.name=t,this.prefix=r;let o=r.codePointAt(0);if(o===void 0)throw new Error("Invalid prefix character");this.prefixCodePoint=o,this.baseDecode=n}decode(t){if(typeof t=="string"){if(t.codePointAt(0)!==this.prefixCodePoint)throw Error(`Unable to decode multibase string ${JSON.stringify(t)}, ${this.name} decoder only supports inputs prefixed with ${this.prefix}`);return this.baseDecode(t.slice(this.prefix.length))}else throw Error("Can only multibase decode strings")}or(t){return Ws(this,t)}},Nn=class{decoders;constructor(t){this.decoders=t}or(t){return Ws(this,t)}decode(t){let r=t[0],n=this.decoders[r];if(n!=null)return n.decode(t);throw RangeError(`Unable to decode multibase string ${JSON.stringify(t)}, only inputs prefixed with ${Object.keys(this.decoders)} are supported`)}};function Ws(e,t){return new Nn({...e.decoders??{[e.prefix]:e},...t.decoders??{[t.prefix]:t}})}var Pn=class{name;prefix;baseEncode;baseDecode;encoder;decoder;constructor(t,r,n,o){this.name=t,this.prefix=r,this.baseEncode=n,this.baseDecode=o,this.encoder=new Fn(t,r,n),this.decoder=new kn(t,r,o)}encode(t){return this.encoder.encode(t)}decode(t){return this.decoder.decode(t)}};function Be({name:e,prefix:t,encode:r,decode:n}){return new Pn(e,t,r,n)}function jt({name:e,prefix:t,alphabet:r}){let{encode:n,decode:o}=Xs(r,e);return Be({prefix:t,name:e,encode:n,decode:s=>Ft(o(s))})}function Xc(e,t,r,n){let o=e.length;for(;e[o-1]==="=";)--o;let s=new Uint8Array(o*r/8|0),i=0,a=0,f=0;for(let c=0;c<o;++c){let u=t[e[c]];if(u===void 0)throw new SyntaxError(`Non-${n} character`);a=a<<r|u,i+=r,i>=8&&(i-=8,s[f++]=255&a>>i)}if(i>=r||(255&a<<8-i)!==0)throw new SyntaxError("Unexpected end of data");return s}function Wc(e,t,r){let n=t[t.length-1]==="=",o=(1<<r)-1,s="",i=0,a=0;for(let f=0;f<e.length;++f)for(a=a<<8|e[f],i+=8;i>r;)i-=r,s+=t[o&a>>i];if(i!==0&&(s+=t[o&a<<r-i]),n)for(;(s.length*r&7)!==0;)s+="=";return s}function Jc(e){let t={};for(let r=0;r<e.length;++r)t[e[r]]=r;return t}function G({name:e,prefix:t,bitsPerChar:r,alphabet:n}){let o=Jc(n);return Be({prefix:t,name:e,encode(s){return Wc(s,n,r)},decode(s){return Xc(s,o,r,e)}})}var ot=jt({name:"base58btc",prefix:"z",alphabet:"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"}),Qc=jt({name:"base58flickr",prefix:"Z",alphabet:"123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"});var Hn={};z(Hn,{base32:()=>Ie,base32hex:()=>nf,base32hexpad:()=>sf,base32hexpadupper:()=>af,base32hexupper:()=>of,base32pad:()=>ef,base32padupper:()=>rf,base32upper:()=>tf,base32z:()=>cf});var Ie=G({prefix:"b",name:"base32",alphabet:"abcdefghijklmnopqrstuvwxyz234567",bitsPerChar:5}),tf=G({prefix:"B",name:"base32upper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",bitsPerChar:5}),ef=G({prefix:"c",name:"base32pad",alphabet:"abcdefghijklmnopqrstuvwxyz234567=",bitsPerChar:5}),rf=G({prefix:"C",name:"base32padupper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=",bitsPerChar:5}),nf=G({prefix:"v",name:"base32hex",alphabet:"0123456789abcdefghijklmnopqrstuv",bitsPerChar:5}),of=G({prefix:"V",name:"base32hexupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV",bitsPerChar:5}),sf=G({prefix:"t",name:"base32hexpad",alphabet:"0123456789abcdefghijklmnopqrstuv=",bitsPerChar:5}),af=G({prefix:"T",name:"base32hexpadupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV=",bitsPerChar:5}),cf=G({prefix:"h",name:"base32z",alphabet:"ybndrfg8ejkmcpqxot1uwisza345h769",bitsPerChar:5});var qn={};z(qn,{base36:()=>ir,base36upper:()=>ff});var ir=jt({prefix:"k",name:"base36",alphabet:"0123456789abcdefghijklmnopqrstuvwxyz"}),ff=jt({prefix:"K",name:"base36upper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"});var uf=ti,Js=128,hf=127,df=~hf,lf=Math.pow(2,31);function ti(e,t,r){t=t||[],r=r||0;for(var n=r;e>=lf;)t[r++]=e&255|Js,e/=128;for(;e&df;)t[r++]=e&255|Js,e>>>=7;return t[r]=e|0,ti.bytes=r-n+1,t}var pf=Vn,mf=128,Qs=127;function Vn(e,n){var r=0,n=n||0,o=0,s=n,i,a=e.length;do{if(s>=a)throw Vn.bytes=0,new RangeError("Could not decode varint");i=e[s++],r+=o<28?(i&Qs)<<o:(i&Qs)*Math.pow(2,o),o+=7}while(i>=mf);return Vn.bytes=s-n,r}var bf=Math.pow(2,7),yf=Math.pow(2,14),xf=Math.pow(2,21),gf=Math.pow(2,28),wf=Math.pow(2,35),Ef=Math.pow(2,42),Sf=Math.pow(2,49),Af=Math.pow(2,56),vf=Math.pow(2,63),Bf=function(e){return e<bf?1:e<yf?2:e<xf?3:e<gf?4:e<wf?5:e<Ef?6:e<Sf?7:e<Af?8:e<vf?9:10},If={encode:uf,decode:pf,encodingLength:Bf},Tf=If,ar=Tf;function cr(e,t=0){return[ar.decode(e,t),ar.decode.bytes]}function Te(e,t,r=0){return ar.encode(e,t,r),t}function Le(e){return ar.encodingLength(e)}function Dt(e,t){let r=t.byteLength,n=Le(e),o=n+Le(r),s=new Uint8Array(o+r);return Te(e,s,0),Te(r,s,n),s.set(t,o),new _e(e,r,t,s)}function ei(e){let t=Ft(e),[r,n]=cr(t),[o,s]=cr(t.subarray(n)),i=t.subarray(n+s);if(i.byteLength!==o)throw new Error("Incorrect length");return new _e(r,o,i,t)}function ri(e,t){if(e===t)return!0;{let r=t;return e.code===r.code&&e.size===r.size&&r.bytes instanceof Uint8Array&&Zs(e.bytes,r.bytes)}}var _e=class{code;size;digest;bytes;constructor(t,r,n,o){this.code=t,this.size=r,this.digest=ae(n),this.bytes=ae(o)}};function ni(e,t){let{bytes:r,version:n}=e;return n===0?_f(r,zn(e),t??ot.encoder):Df(r,zn(e),t??Ie.encoder)}var oi=new WeakMap;function zn(e){let t=oi.get(e);if(t==null){let r=new Map;return oi.set(e,r),r}return t}var wt=class e{code;version;multihash;bytes;"/";constructor(t,r,n,o){this.code=r,this.version=t,this.multihash=n,this.bytes=ae(o),this["/"]=this.bytes}get asCID(){return this}get byteOffset(){return this.bytes.byteOffset}get byteLength(){return this.bytes.byteLength}toV0(){switch(this.version){case 0:return this;case 1:{let{code:t,multihash:r}=this;if(t!==ur)throw new Error("Cannot convert a non dag-pb CID to CIDv0");if(r.code!==Cf)throw new Error("Cannot convert non sha2-256 multihash CID to CIDv0");return e.createV0(r)}default:throw Error(`Can not convert CID version ${this.version} to version 0. This is a bug please report`)}}toV1(){switch(this.version){case 0:{let{code:t,digest:r}=this.multihash,n=Dt(t,r);return e.createV1(this.code,n)}case 1:return this;default:throw Error(`Can not convert CID version ${this.version} to version 1. This is a bug please report`)}}equals(t){return e.equals(this,t)}static equals(t,r){let n=r;return n!=null&&t.code===n.code&&t.version===n.version&&ri(t.multihash,n.multihash)}toString(t){return ni(this,t)}toJSON(){return{"/":ni(this)}}link(){return this}[Symbol.toStringTag]="CID";[Symbol.for("nodejs.util.inspect.custom")](){return`CID(${this.toString()})`}static asCID(t){if(t==null)return null;let r=t;if(r instanceof e)return r;if(r["/"]!=null&&r["/"]===r.bytes||r.asCID===r){let{version:n,code:o,multihash:s,bytes:i}=r;return new e(n,o,s,i??si(n,o,s.bytes))}else if(r[Rf]===!0){let{version:n,multihash:o,code:s}=r,i=ei(o);return e.create(n,s,i)}else return null}static create(t,r,n){if(typeof r!="number")throw new Error("String codecs are no longer supported");if(!(n.bytes instanceof Uint8Array))throw new Error("Invalid digest");switch(t){case 0:{if(r!==ur)throw new Error(`Version 0 CID must use dag-pb (code: ${ur}) block encoding`);return new e(t,r,n,n.bytes)}case 1:{let o=si(t,r,n.bytes);return new e(t,r,n,o)}default:throw new Error("Invalid version")}}static createV0(t){return e.create(0,ur,t)}static createV1(t,r){return e.create(1,t,r)}static decode(t){let[r,n]=e.decodeFirst(t);if(n.length!==0)throw new Error("Incorrect length");return r}static decodeFirst(t){let r=e.inspectBytes(t),n=r.size-r.multihashSize,o=Ft(t.subarray(n,n+r.multihashSize));if(o.byteLength!==r.multihashSize)throw new Error("Incorrect length");let s=o.subarray(r.multihashSize-r.digestSize),i=new _e(r.multihashCode,r.digestSize,s,o);return[r.version===0?e.createV0(i):e.createV1(r.codec,i),t.subarray(r.size)]}static inspectBytes(t){let r=0,n=()=>{let[h,y]=cr(t.subarray(r));return r+=y,h},o=n(),s=ur;if(o===18?(o=0,r=0):s=n(),o!==0&&o!==1)throw new RangeError(`Invalid CID version ${o}`);let i=r,a=n(),f=n(),c=r+f,u=c-i;return{version:o,codec:s,multihashCode:a,digestSize:f,multihashSize:u,size:c}}static parse(t,r){let[n,o]=Lf(t,r),s=e.decode(o);if(s.version===0&&t[0]!=="Q")throw Error("Version 0 CID string must not include multibase prefix");return zn(s).set(n,t),s}};function Lf(e,t){switch(e[0]){case"Q":{let r=t??ot;return[ot.prefix,r.decode(`${ot.prefix}${e}`)]}case ot.prefix:{let r=t??ot;return[ot.prefix,r.decode(e)]}case Ie.prefix:{let r=t??Ie;return[Ie.prefix,r.decode(e)]}case ir.prefix:{let r=t??ir;return[ir.prefix,r.decode(e)]}default:{if(t==null)throw Error("To parse non base32, base36 or base58btc encoded CID multibase decoder must be provided");return[e[0],t.decode(e)]}}}function _f(e,t,r){let{prefix:n}=r;if(n!==ot.prefix)throw Error(`Cannot string encode V0 in ${r.name} encoding`);let o=t.get(n);if(o==null){let s=r.encode(e).slice(1);return t.set(n,s),s}else return o}function Df(e,t,r){let{prefix:n}=r,o=t.get(n);if(o==null){let s=r.encode(e);return t.set(n,s),s}else return o}var ur=112,Cf=18;function si(e,t,r){let n=Le(e),o=n+Le(t),s=new Uint8Array(o+r.byteLength);return Te(e,s,0),Te(t,s,n),s.set(r,o),s}var Rf=Symbol.for("@ipld/js-cid/CID");var jn={};z(jn,{identity:()=>ce});var ii=0,Uf="identity",ai=Ft;function Kf(e,t){if(t?.truncate!=null&&t.truncate!==e.byteLength){if(t.truncate<0||t.truncate>e.byteLength)throw new Error(`Invalid truncate option, must be less than or equal to ${e.byteLength}`);e=e.subarray(0,t.truncate)}return Dt(ii,ai(e))}var ce={code:ii,name:Uf,encode:ai,digest:Kf};function pt(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}var Zn="1.2.840.10045.3.1.7",$n="1.3.132.0.34",Yn="1.3.132.0.35";async function ci(e="P-256"){let t=await crypto.subtle.generateKey({name:"ECDSA",namedCurve:e},!0,["sign","verify"]);return{publicKey:await crypto.subtle.exportKey("jwk",t.publicKey),privateKey:await crypto.subtle.exportKey("jwk",t.privateKey)}}async function fi(e,t,r){let n=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["sign"]);r?.signal?.throwIfAborted();let o=await crypto.subtle.sign({name:"ECDSA",hash:{name:"SHA-256"}},n,ft(t.subarray()));return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function ui(e,t,r,n){let o=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["verify"]);n?.signal?.throwIfAborted();let s=await crypto.subtle.verify({name:"ECDSA",hash:{name:"SHA-256"}},o,ft(t),ft(r.subarray()));return n?.signal?.throwIfAborted(),s}function kt(e=0){return new Uint8Array(e)}function hr(e=0){return new Uint8Array(e)}function Gn(e,t){t==null&&(t=e.reduce((o,s)=>o+s.length,0));let r=hr(t),n=0;for(let o of e)r.set(o,n),n+=o.length;return r}function hi(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}var li=Symbol.for("@achingbrain/uint8arraylist");function di(e,t){if(t==null||t<0)throw new RangeError("index is out of bounds");let r=0;for(let n of e){let o=r+n.byteLength;if(t<o)return{buf:n,index:t-r};r=o}throw new RangeError("index is out of bounds")}function Zr(e){return!!e?.[li]}var ut=class e{bufs;length;[li]=!0;constructor(...t){this.bufs=[],this.length=0,t.length>0&&this.appendAll(t)}*[Symbol.iterator](){yield*this.bufs}get byteLength(){return this.length}append(...t){this.appendAll(t)}appendAll(t){let r=0;for(let n of t)if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.push(n);else if(Zr(n)){r+=n.byteLength;for(let o of n.bufs)this.bufs.push(o)}else throw new Error("Could not append value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}prepend(...t){this.prependAll(t)}prependAll(t){let r=0;for(let n of t.reverse())if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.unshift(n);else if(Zr(n))r+=n.byteLength,this.bufs.unshift(...n.bufs);else throw new Error("Could not prepend value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}get(t){let r=di(this.bufs,t);return r.buf[r.index]}set(t,r){let n=di(this.bufs,t);n.buf[n.index]=r}write(t,r=0){if(t instanceof Uint8Array)for(let n=0;n<t.length;n++)this.set(r+n,t[n]);else if(Zr(t))for(let n=0;n<t.length;n++)this.set(r+n,t.get(n));else throw new Error("Could not write value, must be an Uint8Array or a Uint8ArrayList")}consume(t){if(t=Math.trunc(t),!(Number.isNaN(t)||t<=0)){if(t===this.byteLength){this.bufs=[],this.length=0;return}for(;this.bufs.length>0;)if(t>=this.bufs[0].byteLength)t-=this.bufs[0].byteLength,this.length-=this.bufs[0].byteLength,this.bufs.shift();else{this.bufs[0]=this.bufs[0].subarray(t),this.length-=t;break}}}slice(t,r){let{bufs:n,length:o}=this._subList(t,r);return Gn(n,o)}subarray(t,r){let{bufs:n,length:o}=this._subList(t,r);return n.length===1?n[0]:Gn(n,o)}sublist(t,r){let{bufs:n,length:o}=this._subList(t,r),s=new e;return s.length=o,s.bufs=n,s}_subList(t,r){if(t=t??0,r=r??this.length,t<0&&(t=this.length+t),r<0&&(r=this.length+r),t<0||r>this.length)throw new RangeError("index is out of bounds");if(t===r)return{bufs:[],length:0};if(t===0&&r===this.length)return{bufs:[...this.bufs],length:this.length};let n=[],o=0;for(let s=0;s<this.bufs.length;s++){let i=this.bufs[s],a=o,f=a+i.byteLength;if(o=f,t>=f)continue;let c=t>=a&&t<f,u=r>a&&r<=f;if(c&&u){if(t===a&&r===f){n.push(i);break}let h=t-a;n.push(i.subarray(h,h+(r-t)));break}if(c){if(t===0){n.push(i);continue}n.push(i.subarray(t-a));continue}if(u){if(r===f){n.push(i);break}n.push(i.subarray(0,r-a));break}n.push(i)}return{bufs:n,length:r-t}}indexOf(t,r=0){if(!Zr(t)&&!(t instanceof Uint8Array))throw new TypeError('The "value" argument must be a Uint8ArrayList or Uint8Array');let n=t instanceof Uint8Array?t:t.subarray();if(r=Number(r??0),isNaN(r)&&(r=0),r<0&&(r=this.length+r),r<0&&(r=0),t.length===0)return r>this.length?this.length:r;let o=n.byteLength;if(o===0)throw new TypeError("search must be at least 1 byte long");let s=256,i=new Int32Array(s);for(let h=0;h<s;h++)i[h]=-1;for(let h=0;h<o;h++)i[n[h]]=h;let a=i,f=this.byteLength-n.byteLength,c=n.byteLength-1,u;for(let h=r;h<=f;h+=u){u=0;for(let y=c;y>=0;y--){let m=this.get(h+y);if(n[y]!==m){u=Math.max(1,y-a[m]);break}}if(u===0)return h}return-1}getInt8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getInt8(0)}setInt8(t,r){let n=hr(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setInt8(0,r),this.write(n,t)}getInt16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt16(0,r)}setInt16(t,r,n){let o=kt(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt16(0,r,n),this.write(o,t)}getInt32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt32(0,r)}setInt32(t,r,n){let o=kt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt32(0,r,n),this.write(o,t)}getBigInt64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigInt64(0,r)}setBigInt64(t,r,n){let o=kt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigInt64(0,r,n),this.write(o,t)}getUint8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getUint8(0)}setUint8(t,r){let n=hr(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setUint8(0,r),this.write(n,t)}getUint16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint16(0,r)}setUint16(t,r,n){let o=kt(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint16(0,r,n),this.write(o,t)}getUint32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint32(0,r)}setUint32(t,r,n){let o=kt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint32(0,r,n),this.write(o,t)}getBigUint64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigUint64(0,r)}setBigUint64(t,r,n){let o=kt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigUint64(0,r,n),this.write(o,t)}getFloat32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat32(0,r)}setFloat32(t,r,n){let o=kt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat32(0,r,n),this.write(o,t)}getFloat64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat64(0,r)}setFloat64(t,r,n){let o=kt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat64(0,r,n),this.write(o,t)}equals(t){if(t==null||!(t instanceof e)||t.bufs.length!==this.bufs.length)return!1;for(let r=0;r<this.bufs.length;r++)if(!hi(this.bufs[r],t.bufs[r]))return!1;return!0}static fromUint8Arrays(t,r){let n=new e;return n.bufs=t,r==null&&(r=t.reduce((o,s)=>o+s.byteLength,0)),n.length=r,n}};var Xn={};z(Xn,{base10:()=>Of});var Of=jt({prefix:"9",name:"base10",alphabet:"0123456789"});var Wn={};z(Wn,{base16:()=>Ff,base16upper:()=>kf});var Ff=G({prefix:"f",name:"base16",alphabet:"0123456789abcdef",bitsPerChar:4}),kf=G({prefix:"F",name:"base16upper",alphabet:"0123456789ABCDEF",bitsPerChar:4});var Jn={};z(Jn,{base2:()=>Nf});var Nf=G({prefix:"0",name:"base2",alphabet:"01",bitsPerChar:1});var Qn={};z(Qn,{base256emoji:()=>Vf});var pi=Array.from("\u{1F680}\u{1FA90}\u2604\u{1F6F0}\u{1F30C}\u{1F311}\u{1F312}\u{1F313}\u{1F314}\u{1F315}\u{1F316}\u{1F317}\u{1F318}\u{1F30D}\u{1F30F}\u{1F30E}\u{1F409}\u2600\u{1F4BB}\u{1F5A5}\u{1F4BE}\u{1F4BF}\u{1F602}\u2764\u{1F60D}\u{1F923}\u{1F60A}\u{1F64F}\u{1F495}\u{1F62D}\u{1F618}\u{1F44D}\u{1F605}\u{1F44F}\u{1F601}\u{1F525}\u{1F970}\u{1F494}\u{1F496}\u{1F499}\u{1F622}\u{1F914}\u{1F606}\u{1F644}\u{1F4AA}\u{1F609}\u263A\u{1F44C}\u{1F917}\u{1F49C}\u{1F614}\u{1F60E}\u{1F607}\u{1F339}\u{1F926}\u{1F389}\u{1F49E}\u270C\u2728\u{1F937}\u{1F631}\u{1F60C}\u{1F338}\u{1F64C}\u{1F60B}\u{1F497}\u{1F49A}\u{1F60F}\u{1F49B}\u{1F642}\u{1F493}\u{1F929}\u{1F604}\u{1F600}\u{1F5A4}\u{1F603}\u{1F4AF}\u{1F648}\u{1F447}\u{1F3B6}\u{1F612}\u{1F92D}\u2763\u{1F61C}\u{1F48B}\u{1F440}\u{1F62A}\u{1F611}\u{1F4A5}\u{1F64B}\u{1F61E}\u{1F629}\u{1F621}\u{1F92A}\u{1F44A}\u{1F973}\u{1F625}\u{1F924}\u{1F449}\u{1F483}\u{1F633}\u270B\u{1F61A}\u{1F61D}\u{1F634}\u{1F31F}\u{1F62C}\u{1F643}\u{1F340}\u{1F337}\u{1F63B}\u{1F613}\u2B50\u2705\u{1F97A}\u{1F308}\u{1F608}\u{1F918}\u{1F4A6}\u2714\u{1F623}\u{1F3C3}\u{1F490}\u2639\u{1F38A}\u{1F498}\u{1F620}\u261D\u{1F615}\u{1F33A}\u{1F382}\u{1F33B}\u{1F610}\u{1F595}\u{1F49D}\u{1F64A}\u{1F639}\u{1F5E3}\u{1F4AB}\u{1F480}\u{1F451}\u{1F3B5}\u{1F91E}\u{1F61B}\u{1F534}\u{1F624}\u{1F33C}\u{1F62B}\u26BD\u{1F919}\u2615\u{1F3C6}\u{1F92B}\u{1F448}\u{1F62E}\u{1F646}\u{1F37B}\u{1F343}\u{1F436}\u{1F481}\u{1F632}\u{1F33F}\u{1F9E1}\u{1F381}\u26A1\u{1F31E}\u{1F388}\u274C\u270A\u{1F44B}\u{1F630}\u{1F928}\u{1F636}\u{1F91D}\u{1F6B6}\u{1F4B0}\u{1F353}\u{1F4A2}\u{1F91F}\u{1F641}\u{1F6A8}\u{1F4A8}\u{1F92C}\u2708\u{1F380}\u{1F37A}\u{1F913}\u{1F619}\u{1F49F}\u{1F331}\u{1F616}\u{1F476}\u{1F974}\u25B6\u27A1\u2753\u{1F48E}\u{1F4B8}\u2B07\u{1F628}\u{1F31A}\u{1F98B}\u{1F637}\u{1F57A}\u26A0\u{1F645}\u{1F61F}\u{1F635}\u{1F44E}\u{1F932}\u{1F920}\u{1F927}\u{1F4CC}\u{1F535}\u{1F485}\u{1F9D0}\u{1F43E}\u{1F352}\u{1F617}\u{1F911}\u{1F30A}\u{1F92F}\u{1F437}\u260E\u{1F4A7}\u{1F62F}\u{1F486}\u{1F446}\u{1F3A4}\u{1F647}\u{1F351}\u2744\u{1F334}\u{1F4A3}\u{1F438}\u{1F48C}\u{1F4CD}\u{1F940}\u{1F922}\u{1F445}\u{1F4A1}\u{1F4A9}\u{1F450}\u{1F4F8}\u{1F47B}\u{1F910}\u{1F92E}\u{1F3BC}\u{1F975}\u{1F6A9}\u{1F34E}\u{1F34A}\u{1F47C}\u{1F48D}\u{1F4E3}\u{1F942}"),Pf=pi.reduce((e,t,r)=>(e[r]=t,e),[]),Mf=pi.reduce((e,t,r)=>{let n=t.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${t}`);return e[n]=r,e},[]);function Hf(e){return e.reduce((t,r)=>(t+=Pf[r],t),"")}function qf(e){let t=[];for(let r of e){let n=r.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${r}`);let o=Mf[n];if(o==null)throw new Error(`Non-base256emoji character: ${r}`);t.push(o)}return new Uint8Array(t)}var Vf=Be({prefix:"\u{1F680}",name:"base256emoji",encode:Hf,decode:qf});var eo={};z(eo,{base64:()=>to,base64pad:()=>zf,base64url:()=>jf,base64urlpad:()=>Zf});var to=G({prefix:"m",name:"base64",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",bitsPerChar:6}),zf=G({prefix:"M",name:"base64pad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",bitsPerChar:6}),jf=G({prefix:"u",name:"base64url",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_",bitsPerChar:6}),Zf=G({prefix:"U",name:"base64urlpad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_=",bitsPerChar:6});var ro={};z(ro,{base8:()=>$f});var $f=G({prefix:"7",name:"base8",alphabet:"01234567",bitsPerChar:3});var no={};z(no,{identity:()=>Yf});var Yf=Be({prefix:"\0",name:"identity",encode:e=>Ys(e),decode:e=>$s(e)});var ql=new TextEncoder,Vl=new TextDecoder;var io={};z(io,{sha256:()=>$r,sha512:()=>Jf});var Wf=20;function so({name:e,code:t,encode:r,minDigestLength:n,maxDigestLength:o}){return new oo(e,t,r,n,o)}var oo=class{name;code;encode;minDigestLength;maxDigestLength;constructor(t,r,n,o,s){this.name=t,this.code=r,this.encode=n,this.minDigestLength=o??Wf,this.maxDigestLength=s}digest(t,r){if(r?.truncate!=null){if(r.truncate<this.minDigestLength)throw new Error(`Invalid truncate option, must be greater than or equal to ${this.minDigestLength}`);if(this.maxDigestLength!=null&&r.truncate>this.maxDigestLength)throw new Error(`Invalid truncate option, must be less than or equal to ${this.maxDigestLength}`)}if(t instanceof Uint8Array){let n=this.encode(t);return n instanceof Uint8Array?mi(n,this.code,r?.truncate):n.then(o=>mi(o,this.code,r?.truncate))}else throw Error("Unknown type, must be binary type")}};function mi(e,t,r){if(r!=null&&r!==e.byteLength){if(r>e.byteLength)throw new Error(`Invalid truncate option, must be less than or equal to ${e.byteLength}`);e=e.subarray(0,r)}return Dt(t,e)}function yi(e){return async t=>new Uint8Array(await crypto.subtle.digest(e,t))}var $r=so({name:"sha2-256",code:18,encode:yi("SHA-256")}),Jf=so({name:"sha2-512",code:19,encode:yi("SHA-512")});var ao={...no,...Jn,...ro,...Xn,...Wn,...Hn,...qn,...Mn,...eo,...Qn},e0={...io,...jn};function Yr(e=0){return new Uint8Array(e)}function gi(e,t,r,n){return{name:e,prefix:t,encoder:{name:e,prefix:t,encode:r},decoder:{decode:n}}}var xi=gi("utf8","u",e=>"u"+new TextDecoder("utf8").decode(e),e=>new TextEncoder().encode(e.substring(1))),co=gi("ascii","a",e=>{let t="a";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return t},e=>{e=e.substring(1);let t=Yr(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}),Qf={utf8:xi,"utf-8":xi,hex:ao.base16,latin1:co,ascii:co,binary:co,...ao},Gr=Qf;function Y(e,t="utf8"){let r=Gr[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.decoder.decode(`${r.prefix}${e}`)}function H(e,t="utf8"){let r=Gr[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.encoder.encode(e).substring(1)}var tu=parseInt("11111",2),fo=parseInt("10000000",2),eu=parseInt("01111111",2),wi={0:dr,1:dr,2:ru,3:su,4:iu,5:ou,6:nu,16:dr,22:dr,48:dr};function yt(e,t={offset:0}){let r=e[t.offset]&tu;if(t.offset++,wi[r]!=null)return wi[r](e,t);throw new Error("No decoder for tag "+r)}function lr(e,t){let r=0;if((e[t.offset]&fo)===fo){let n=e[t.offset]&eu,o="0x";t.offset++;for(let s=0;s<n;s++,t.offset++)o+=e[t.offset].toString(16).padStart(2,"0");r=parseInt(o,16)}else r=e[t.offset],t.offset++;return r}function dr(e,t){lr(e,t);let r=[];for(;!(t.offset>=e.byteLength);){let n=yt(e,t);if(n===null)break;r.push(n)}return r}function ru(e,t){let r=lr(e,t),n=t.offset,o=t.offset+r,s=[];for(let i=n;i<o;i++)i===n&&e[i]===0||s.push(e[i]);return t.offset+=r,Uint8Array.from(s)}function nu(e,t){let r=lr(e,t),n=t.offset+r,o=e[t.offset];t.offset++;let s=0,i=0;o<40?(s=0,i=o):o<80?(s=1,i=o-40):(s=2,i=o-80);let a=`${s}.${i}`,f=[];for(;t.offset<n;){let c=e[t.offset];if(t.offset++,f.push(c&127),c<128){f.reverse();let u=0;for(let h=0;h<f.length;h++)u+=f[h]<<h*7;a+=`.${u}`,f=[]}}return a}function ou(e,t){return t.offset++,null}function su(e,t){let r=lr(e,t),n=e[t.offset];t.offset++;let o=e.subarray(t.offset,t.offset+r-1);if(t.offset+=r,n!==0)throw new Error("Unused bits in bit string is unimplemented");return o}function iu(e,t){let r=lr(e,t),n=e.subarray(t.offset,t.offset+r);return t.offset+=r,n}function au(e){let t=e.toString(16);t.length%2===1&&(t="0"+t);let r=new ut;for(let n=0;n<t.length;n+=2)r.append(Uint8Array.from([parseInt(`${t[n]}${t[n+1]}`,16)]));return r}function Xr(e){if(e.byteLength<128)return Uint8Array.from([e.byteLength]);let t=au(e.byteLength);return new ut(Uint8Array.from([t.byteLength|fo]),t)}function ht(e){let t=new ut,r=128;return(e.subarray()[0]&r)===r&&t.append(Uint8Array.from([0])),t.append(e),new ut(Uint8Array.from([2]),Xr(t),t)}function pr(e){let t=Uint8Array.from([0]),r=new ut(t,e);return new ut(Uint8Array.from([3]),Xr(r),r)}function Ei(e){return new ut(Uint8Array.from([4]),Xr(e),e)}function St(e,t=48){let r=new ut;for(let n of e)r.append(n);return new ut(Uint8Array.from([t]),Xr(r),r)}var cu=Uint8Array.from([6,8,42,134,72,206,61,3,1,7]),fu=Uint8Array.from([6,5,43,129,4,0,34]),uu=Uint8Array.from([6,5,43,129,4,0,35]),Si={ext:!0,kty:"EC",crv:"P-256"},Ai={ext:!0,kty:"EC",crv:"P-384"},vi={ext:!0,kty:"EC",crv:"P-521"},De=32,Ce=48,Re=66;function Bi(e){let t=yt(e);return uo(t)}function uo(e){let t=e[1],r=H(t,"base64url"),n=e[2][1][0],o=1,s,i;if(t.byteLength===De)return s=H(n.subarray(o,o+De),"base64url"),i=H(n.subarray(o+De),"base64url"),new Nt({...Si,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===Ce)return s=H(n.subarray(o,o+Ce),"base64url"),i=H(n.subarray(o+Ce),"base64url"),new Nt({...Ai,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===Re)return s=H(n.subarray(o,o+Re),"base64url"),i=H(n.subarray(o+Re),"base64url"),new Nt({...vi,key_ops:["sign"],d:r,x:s,y:i});throw new k(`Private key length was wrong length, got ${t.byteLength}, expected 32, 48 or 66`)}function ho(e){let t=yt(e);return lo(t)}function lo(e){let t=e[1][1][0],r=1,n,o;if(t.byteLength===De*2+1)return n=H(t.subarray(r,r+De),"base64url"),o=H(t.subarray(r+De),"base64url"),new fe({...Si,key_ops:["verify"],x:n,y:o});if(t.byteLength===Ce*2+1)return n=H(t.subarray(r,r+Ce),"base64url"),o=H(t.subarray(r+Ce),"base64url"),new fe({...Ai,key_ops:["verify"],x:n,y:o});if(t.byteLength===Re*2+1)return n=H(t.subarray(r,r+Re),"base64url"),o=H(t.subarray(r+Re),"base64url"),new fe({...vi,key_ops:["verify"],x:n,y:o});throw new k(`coordinates were wrong length, got ${t.byteLength}, expected 65, 97 or 133`)}function Ii(e){return St([ht(Uint8Array.from([1])),Ei(Y(e.d??"","base64url")),St([Li(e.crv)],160),St([pr(new ut(Uint8Array.from([4]),Y(e.x??"","base64url"),Y(e.y??"","base64url")))],161)]).subarray()}function Ti(e){return St([ht(Uint8Array.from([1])),St([Li(e.crv)],160),St([pr(new ut(Uint8Array.from([4]),Y(e.x??"","base64url"),Y(e.y??"","base64url")))],161)]).subarray()}function Li(e){if(e==="P-256")return cu;if(e==="P-384")return fu;if(e==="P-521")return uu;throw new k(`Invalid curve ${e}`)}async function _i(e="P-256"){let t=await ci(e);return new Nt(t.privateKey)}var fe=class{type="ECDSA";jwk;_raw;constructor(t){this.jwk=t}get raw(){return this._raw==null&&(this._raw=Ti(this.jwk)),this._raw}toMultihash(){return ce.digest(ue(this))}toCID(){return wt.createV1(114,this.toMultihash())}toString(){return ot.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}async verify(t,r,n){return ui(this.jwk,r,t,n)}},Nt=class{type="ECDSA";jwk;publicKey;_raw;constructor(t){this.jwk=t,this.publicKey=new fe({crv:t.crv,ext:t.ext,key_ops:["verify"],kty:"EC",x:t.x,y:t.y})}get raw(){return this._raw==null&&(this._raw=Ii(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}async sign(t,r){return fi(this.jwk,t,r)}};function po(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Et(e,t=""){if(typeof e!="number"){let r=t&&`"${t}" `;throw new TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw new RangeError(`${r}expected integer >= 0, got ${e}`)}}function mt(e,t,r=""){let n=po(e),o=e?.length,s=t!==void 0;if(!n||s&&o!==t){let i=r&&`"${r}" `,a=s?` of length ${t}`:"",f=n?`length=${o}`:`type=${typeof e}`,c=i+"expected Uint8Array"+a+", got "+f;throw n?new RangeError(c):new TypeError(c)}return e}function Ue(e){if(typeof e!="function"||typeof e.create!="function")throw new TypeError("Hash must wrapped by utils.createHasher");if(Et(e.outputLen),Et(e.blockLen),e.outputLen<1)throw new Error('"outputLen" must be >= 1');if(e.blockLen<1)throw new Error('"blockLen" must be >= 1')}function Ke(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Wr(e,t){mt(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw new RangeError('"digestInto() output" expected to be of length >='+r)}function bt(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Oe(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function At(e,t){return e<<32-t|e>>>t}function Jr(e,t){return e<<t|e>>>32-t>>>0}var Ci=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",hu=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Qr(e){if(mt(e),Ci)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=hu[e[r]];return t}var Pt={_0:48,_9:57,A:65,F:70,a:97,f:102};function Di(e){if(e>=Pt._0&&e<=Pt._9)return e-Pt._0;if(e>=Pt.A&&e<=Pt.F)return e-(Pt.A-10);if(e>=Pt.a&&e<=Pt.f)return e-(Pt.a-10)}function mr(e){if(typeof e!="string")throw new TypeError("hex string expected, got "+typeof e);if(Ci)try{return Uint8Array.fromHex(e)}catch(o){throw o instanceof SyntaxError?new RangeError(o.message):o}let t=e.length,r=t/2;if(t%2)throw new RangeError("hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(r);for(let o=0,s=0;o<r;o++,s+=2){let i=Di(e.charCodeAt(s)),a=Di(e.charCodeAt(s+1));if(i===void 0||a===void 0){let f=e[s]+e[s+1];throw new RangeError('hex string expected, got non-hex character "'+f+'" at index '+s)}n[o]=i*16+a}return n}function du(e){if(typeof e!="string")throw new TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function mo(e,t=""){return typeof e=="string"?du(e):mt(e,void 0,t)}function bo(...e){let t=0;for(let n=0;n<e.length;n++){let o=e[n];mt(o),t+=o.length}let r=new Uint8Array(t);for(let n=0,o=0;n<e.length;n++){let s=e[n];r.set(s,o),o+=s.length}return r}function Ri(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw new TypeError("options must be object or undefined");return Object.assign(e,t)}function br(e,t={}){let r=(o,s)=>e(s).update(o).digest(),n=e(void 0);return r.outputLen=n.outputLen,r.blockLen=n.blockLen,r.canXOF=n.canXOF,r.create=o=>e(o),Object.assign(r,t),Object.freeze(r)}function tn(e=32){Et(e,"bytesLength");let t=typeof globalThis=="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!="function")throw new Error("crypto.getRandomValues must be defined");if(e>65536)throw new RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var yo=e=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});function en(e,t,r){return e&t^~e&r}function rn(e,t,r){return e&t^e&r^t&r}var he=class{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(t,r,n,o){this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.buffer=new Uint8Array(t),this.view=Oe(this.buffer)}update(t){Ke(this),mt(t);let{view:r,buffer:n,blockLen:o}=this,s=t.length;for(let i=0;i<s;){let a=Math.min(o-this.pos,s-i);if(a===o){let f=Oe(t);for(;o<=s-i;i+=o)this.process(f,i);continue}n.set(t.subarray(i,i+a),this.pos),this.pos+=a,i+=a,this.pos===o&&(this.process(r,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){Ke(this),Wr(t,this),this.finished=!0;let{buffer:r,view:n,blockLen:o,isLE:s}=this,{pos:i}=this;r[i++]=128,bt(this.buffer.subarray(i)),this.padOffset>o-i&&(this.process(n,0),i=0);for(let h=i;h<o;h++)r[h]=0;n.setBigUint64(o-8,BigInt(this.length*8),s),this.process(n,0);let a=Oe(t),f=this.outputLen;if(f%4)throw new Error("_sha2: outputLen must be aligned to 32bit");let c=f/4,u=this.get();if(c>u.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;h<c;h++)a.setUint32(4*h,u[h],s)}digest(){let{buffer:t,outputLen:r}=this;this.digestInto(t);let n=t.slice(0,r);return this.destroy(),n}_cloneInto(t){t||=new this.constructor,t.set(...this.get());let{blockLen:r,buffer:n,length:o,finished:s,destroyed:i,pos:a}=this;return t.destroyed=i,t.finished=s,t.length=o,t.pos=a,o%r&&t.buffer.set(n),t}clone(){return this._cloneInto()}},Mt=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var it=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var nn=BigInt(4294967295),Ui=BigInt(32);function lu(e,t=!1){return t?{h:Number(e&nn),l:Number(e>>Ui&nn)}:{h:Number(e>>Ui&nn)|0,l:Number(e&nn)|0}}function Ki(e,t=!1){let r=e.length,n=new Uint32Array(r),o=new Uint32Array(r);for(let s=0;s<r;s++){let{h:i,l:a}=lu(e[s],t);[n[s],o[s]]=[i,a]}return[n,o]}var xo=(e,t,r)=>e>>>r,go=(e,t,r)=>e<<32-r|t>>>r,de=(e,t,r)=>e>>>r|t<<32-r,le=(e,t,r)=>e<<32-r|t>>>r,yr=(e,t,r)=>e<<64-r|t>>>r-32,xr=(e,t,r)=>e>>>r-32|t<<64-r;function Ct(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var Oi=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Fi=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,ki=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Ni=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,Pi=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),Mi=(e,t,r,n,o,s)=>t+r+n+o+s+(e/2**32|0)|0;var mu=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Zt=new Uint32Array(64),wo=class extends he{constructor(t){super(64,t,8,!1)}get(){let{A:t,B:r,C:n,D:o,E:s,F:i,G:a,H:f}=this;return[t,r,n,o,s,i,a,f]}set(t,r,n,o,s,i,a,f){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0,this.F=i|0,this.G=a|0,this.H=f|0}process(t,r){for(let h=0;h<16;h++,r+=4)Zt[h]=t.getUint32(r,!1);for(let h=16;h<64;h++){let y=Zt[h-15],m=Zt[h-2],l=At(y,7)^At(y,18)^y>>>3,x=At(m,17)^At(m,19)^m>>>10;Zt[h]=x+Zt[h-7]+l+Zt[h-16]|0}let{A:n,B:o,C:s,D:i,E:a,F:f,G:c,H:u}=this;for(let h=0;h<64;h++){let y=At(a,6)^At(a,11)^At(a,25),m=u+y+en(a,f,c)+mu[h]+Zt[h]|0,x=(At(n,2)^At(n,13)^At(n,22))+rn(n,o,s)|0;u=c,c=f,f=a,a=i+m|0,i=s,s=o,o=n,n=m+x|0}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,a=a+this.E|0,f=f+this.F|0,c=c+this.G|0,u=u+this.H|0,this.set(n,o,s,i,a,f,c,u)}roundClean(){bt(Zt)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),bt(this.buffer)}},Eo=class extends wo{A=Mt[0]|0;B=Mt[1]|0;C=Mt[2]|0;D=Mt[3]|0;E=Mt[4]|0;F=Mt[5]|0;G=Mt[6]|0;H=Mt[7]|0;constructor(){super(32)}};var Hi=Ki(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),bu=Hi[0],yu=Hi[1],$t=new Uint32Array(80),Yt=new Uint32Array(80),So=class extends he{constructor(t){super(128,t,16,!1)}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:s,Cl:i,Dh:a,Dl:f,Eh:c,El:u,Fh:h,Fl:y,Gh:m,Gl:l,Hh:x,Hl:p}=this;return[t,r,n,o,s,i,a,f,c,u,h,y,m,l,x,p]}set(t,r,n,o,s,i,a,f,c,u,h,y,m,l,x,p){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=s|0,this.Cl=i|0,this.Dh=a|0,this.Dl=f|0,this.Eh=c|0,this.El=u|0,this.Fh=h|0,this.Fl=y|0,this.Gh=m|0,this.Gl=l|0,this.Hh=x|0,this.Hl=p|0}process(t,r){for(let A=0;A<16;A++,r+=4)$t[A]=t.getUint32(r),Yt[A]=t.getUint32(r+=4);for(let A=16;A<80;A++){let L=$t[A-15]|0,T=Yt[A-15]|0,U=de(L,T,1)^de(L,T,8)^xo(L,T,7),C=le(L,T,1)^le(L,T,8)^go(L,T,7),I=$t[A-2]|0,O=Yt[A-2]|0,V=de(I,O,19)^yr(I,O,61)^xo(I,O,6),F=le(I,O,19)^xr(I,O,61)^go(I,O,6),d=ki(C,F,Yt[A-7],Yt[A-16]),g=Ni(d,U,V,$t[A-7],$t[A-16]);$t[A]=g|0,Yt[A]=d|0}let{Ah:n,Al:o,Bh:s,Bl:i,Ch:a,Cl:f,Dh:c,Dl:u,Eh:h,El:y,Fh:m,Fl:l,Gh:x,Gl:p,Hh:b,Hl:E}=this;for(let A=0;A<80;A++){let L=de(h,y,14)^de(h,y,18)^yr(h,y,41),T=le(h,y,14)^le(h,y,18)^xr(h,y,41),U=h&m^~h&x,C=y&l^~y&p,I=Pi(E,T,C,yu[A],Yt[A]),O=Mi(I,b,L,U,bu[A],$t[A]),V=I|0,F=de(n,o,28)^yr(n,o,34)^yr(n,o,39),d=le(n,o,28)^xr(n,o,34)^xr(n,o,39),g=n&s^n&a^s&a,v=o&i^o&f^i&f;b=x|0,E=p|0,x=m|0,p=l|0,m=h|0,l=y|0,{h,l:y}=Ct(c|0,u|0,O|0,V|0),c=a|0,u=f|0,a=s|0,f=i|0,s=n|0,i=o|0;let S=Oi(V,d,v);n=Fi(S,O,F,g),o=S|0}({h:n,l:o}=Ct(this.Ah|0,this.Al|0,n|0,o|0)),{h:s,l:i}=Ct(this.Bh|0,this.Bl|0,s|0,i|0),{h:a,l:f}=Ct(this.Ch|0,this.Cl|0,a|0,f|0),{h:c,l:u}=Ct(this.Dh|0,this.Dl|0,c|0,u|0),{h,l:y}=Ct(this.Eh|0,this.El|0,h|0,y|0),{h:m,l}=Ct(this.Fh|0,this.Fl|0,m|0,l|0),{h:x,l:p}=Ct(this.Gh|0,this.Gl|0,x|0,p|0),{h:b,l:E}=Ct(this.Hh|0,this.Hl|0,b|0,E|0),this.set(n,o,s,i,a,f,c,u,h,y,m,l,x,p,b,E)}roundClean(){bt($t,Yt)}destroy(){this.destroyed=!0,bt(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},Ao=class extends So{Ah=it[0]|0;Al=it[1]|0;Bh=it[2]|0;Bl=it[3]|0;Ch=it[4]|0;Cl=it[5]|0;Dh=it[6]|0;Dl=it[7]|0;Eh=it[8]|0;El=it[9]|0;Fh=it[10]|0;Fl=it[11]|0;Gh=it[12]|0;Gl=it[13]|0;Hh=it[14]|0;Hl=it[15]|0;constructor(){super(64)}};var Gt=br(()=>new Eo,yo(1));var Fe=br(()=>new Ao,yo(3));var M=(e,t,r)=>mt(e,t,r),Bo=Et,ke=Qr,et=(...e)=>bo(...e),Ne=e=>mr(e),pe=po,gr=e=>tn(e),sn=BigInt(0),vo=BigInt(1);function vt(e,t=""){if(typeof e!="boolean"){let r=t&&`"${t}" `;throw new TypeError(r+"expected boolean, got type="+typeof e)}return e}function an(e){if(typeof e=="bigint"){if(!on(e))throw new RangeError("positive bigint expected, got "+e)}else Bo(e);return e}function Bt(e,t=""){if(typeof e!="number"){let r=t&&`"${t}" `;throw new TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw new RangeError(r+"expected safe integer, got "+e)}}function wr(e){let t=an(e).toString(16);return t.length&1?"0"+t:t}function qi(e){if(typeof e!="string")throw new TypeError("hex string expected, got "+typeof e);return e===""?sn:BigInt("0x"+e)}function me(e){return qi(Qr(e))}function Rt(e){return qi(Qr(Er(mt(e)).reverse()))}function cn(e,t){if(Et(t),t===0)throw new RangeError("zero length");e=an(e);let r=e.toString(16);if(r.length>t*2)throw new RangeError("number too large");return mr(r.padStart(t*2,"0"))}function Io(e,t){return cn(e,t).reverse()}function Vi(e,t){if(e=M(e),t=M(t),e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return r===0}function Er(e){return Uint8Array.from(M(e))}function fn(e){if(typeof e!="string")throw new TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let n=t.charCodeAt(0);if(t.length!==1||n>127)throw new RangeError(`string contains non-ASCII character "${e[r]}" with code ${n} at position ${r}`);return n})}var on=e=>typeof e=="bigint"&&sn<=e;function xu(e,t,r){return on(e)&&on(t)&&on(r)&&t<=e&&e<r}function Pe(e,t,r,n){if(!xu(t,r,n))throw new RangeError("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function Me(e){if(e<sn)throw new Error("expected non-negative bigint, got "+e);let t;for(t=0;e>sn;e>>=vo,t+=1);return t}var Sr=e=>(vo<<BigInt(e))-vo;function zi(e,t,r){if(Et(e,"hashLen"),Et(t,"qByteLen"),typeof r!="function")throw new TypeError("hmacFn must be a function");let n=p=>new Uint8Array(p),o=Uint8Array.of(),s=Uint8Array.of(0),i=Uint8Array.of(1),a=1e3,f=n(e),c=n(e),u=0,h=()=>{f.fill(1),c.fill(0),u=0},y=(...p)=>r(c,et(f,...p)),m=(p=o)=>{c=y(s,p),f=y(),p.length!==0&&(c=y(i,p),f=y())},l=()=>{if(u++>=a)throw new Error("drbg: tried max amount of iterations");let p=0,b=[];for(;p<t;){f=y();let E=f.slice();b.push(E),p+=f.length}return et(...b)};return(p,b)=>{h(),m(p);let E;for(;(E=b(l()))===void 0;)m();return h(),E}}function It(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw new TypeError("expected valid options object");function n(s,i,a){if(!a&&i!=="function"&&!Object.hasOwn(e,s))throw new TypeError(`param "${s}" is invalid: expected own property`);let f=e[s];if(a&&f===void 0)return;let c=typeof f;if(c!==i||f===null)throw new TypeError(`param "${s}" is invalid: expected ${i}, got ${c}`)}let o=(s,i)=>Object.entries(s).forEach(([a,f])=>n(a,f,i));o(t,!1),o(r,!0)}var To=()=>{throw new Error("not implemented")};var at=BigInt(0),X=BigInt(1),be=BigInt(2),Yi=BigInt(3),Gi=BigInt(4),Xi=BigInt(5),gu=BigInt(7),Wi=BigInt(8),wu=BigInt(9),Ji=BigInt(16);function Q(e,t){if(t<=at)throw new Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=at?r:t+r}function Z(e,t,r){if(t<at)throw new Error("pow2: expected non-negative exponent, got "+t);let n=e;for(;t-- >at;)n*=n,n%=r;return n}function ji(e,t){if(e===at)throw new Error("invert: expected non-zero number");if(t<=at)throw new Error("invert: expected positive modulus, got "+t);let r=Q(e,t),n=t,o=at,s=X,i=X,a=at;for(;r!==at;){let c=n/r,u=n-r*c,h=o-i*c,y=s-a*c;n=r,r=u,o=i,s=a,i=h,a=y}if(n!==X)throw new Error("invert: does not exist");return Q(o,t)}function Lo(e,t,r){let n=e;if(!n.eql(n.sqr(t),r))throw new Error("Cannot find square root")}function Qi(e,t){let r=e,n=(r.ORDER+X)/Gi,o=r.pow(t,n);return Lo(r,o,t),o}function Eu(e,t){let r=e,n=(r.ORDER-Xi)/Wi,o=r.mul(t,be),s=r.pow(o,n),i=r.mul(t,s),a=r.mul(r.mul(i,be),s),f=r.mul(i,r.sub(a,r.ONE));return Lo(r,f,t),f}function Su(e){let t=He(e),r=ta(e),n=r(t,t.neg(t.ONE)),o=r(t,n),s=r(t,t.neg(n)),i=(e+gu)/Ji;return((a,f)=>{let c=a,u=c.pow(f,i),h=c.mul(u,n),y=c.mul(u,o),m=c.mul(u,s),l=c.eql(c.sqr(h),f),x=c.eql(c.sqr(y),f);u=c.cmov(u,h,l),h=c.cmov(m,y,x);let p=c.eql(c.sqr(h),f),b=c.cmov(u,h,p);return Lo(c,b,f),b})}function ta(e){if(e<Yi)throw new Error("sqrt is not defined for small field");let t=e-X,r=0;for(;t%be===at;)t/=be,r++;let n=be,o=He(e);for(;Zi(o,n)===1;)if(n++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(r===1)return Qi;let s=o.pow(n,t),i=(t+X)/be;return function(f,c){let u=f;if(u.is0(c))return c;if(Zi(u,c)!==1)throw new Error("Cannot find square root");let h=r,y=u.mul(u.ONE,s),m=u.pow(c,t),l=u.pow(c,i);for(;!u.eql(m,u.ONE);){if(u.is0(m))return u.ZERO;let x=1,p=u.sqr(m);for(;!u.eql(p,u.ONE);)if(x++,p=u.sqr(p),x===h)throw new Error("Cannot find square root");let b=X<<BigInt(h-x-1),E=u.pow(y,b);h=x,y=u.sqr(E),m=u.mul(m,y),l=u.mul(l,E)}return l}}function Au(e){return e%Gi===Yi?Qi:e%Wi===Xi?Eu:e%Ji===wu?Su(e):ta(e)}var Ht=(e,t)=>(Q(e,t)&X)===X,vu=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function _o(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=vu.reduce((n,o)=>(n[o]="function",n),t);if(It(e,r),Bt(e.BYTES,"BYTES"),Bt(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw new Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=X)throw new Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function Bu(e,t,r){let n=e;if(r<at)throw new Error("invalid exponent, negatives unsupported");if(r===at)return n.ONE;if(r===X)return t;let o=n.ONE,s=t;for(;r>at;)r&X&&(o=n.mul(o,s)),s=n.sqr(s),r>>=X;return o}function Ar(e,t,r=!1){let n=e,o=new Array(t.length).fill(r?n.ZERO:void 0),s=t.reduce((a,f,c)=>n.is0(f)?a:(o[c]=a,n.mul(a,f)),n.ONE),i=n.inv(s);return t.reduceRight((a,f,c)=>n.is0(f)?a:(o[c]=n.mul(a,o[c]),n.mul(a,f)),i),o}function Zi(e,t){let r=e,n=(r.ORDER-X)/be,o=r.pow(t,n),s=r.eql(o,r.ONE),i=r.eql(o,r.ZERO),a=r.eql(o,r.neg(r.ONE));if(!s&&!i&&!a)throw new Error("invalid Legendre symbol result");return s?1:i?0:-1}function Iu(e,t){if(t!==void 0&&Bo(t),e<=at)throw new Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw new Error("invalid n length: expected positive bit length, got "+t);let r=Me(e);if(t!==void 0&&t<r)throw new Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let n=t!==void 0?t:r,o=Math.ceil(n/8);return{nBitLength:n,nByteLength:o}}var $i=new WeakMap,un=class{ORDER;BITS;BYTES;isLE;ZERO=at;ONE=X;_lengths;_mod;constructor(t,r={}){if(t<=X)throw new Error("invalid field: expected ORDER > 1, got "+t);let n;this.isLE=!1,r!=null&&typeof r=="object"&&(typeof r.BITS=="number"&&(n=r.BITS),typeof r.sqrt=="function"&&Object.defineProperty(this,"sqrt",{value:r.sqrt,enumerable:!0}),typeof r.isLE=="boolean"&&(this.isLE=r.isLE),r.allowedLengths&&(this._lengths=Object.freeze(r.allowedLengths.slice())),typeof r.modFromBytes=="boolean"&&(this._mod=r.modFromBytes));let{nBitLength:o,nByteLength:s}=Iu(t,n);if(s>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=t,this.BITS=o,this.BYTES=s,Object.freeze(this)}create(t){return Q(t,this.ORDER)}isValid(t){if(typeof t!="bigint")throw new TypeError("invalid field element: expected bigint, got "+typeof t);return at<=t&&t<this.ORDER}is0(t){return t===at}isValidNot0(t){return!this.is0(t)&&this.isValid(t)}isOdd(t){return(t&X)===X}neg(t){return Q(-t,this.ORDER)}eql(t,r){return t===r}sqr(t){return Q(t*t,this.ORDER)}add(t,r){return Q(t+r,this.ORDER)}sub(t,r){return Q(t-r,this.ORDER)}mul(t,r){return Q(t*r,this.ORDER)}pow(t,r){return Bu(this,t,r)}div(t,r){return Q(t*ji(r,this.ORDER),this.ORDER)}sqrN(t){return t*t}addN(t,r){return t+r}subN(t,r){return t-r}mulN(t,r){return t*r}inv(t){return ji(t,this.ORDER)}sqrt(t){let r=$i.get(this);return r||$i.set(this,r=Au(this.ORDER)),r(this,t)}toBytes(t){return this.isLE?Io(t,this.BYTES):cn(t,this.BYTES)}fromBytes(t,r=!1){M(t);let{_lengths:n,BYTES:o,isLE:s,ORDER:i,_mod:a}=this;if(n){if(t.length<1||!n.includes(t.length)||t.length>o)throw new Error("Field.fromBytes: expected "+n+" bytes, got "+t.length);let c=new Uint8Array(o);c.set(t,s?0:c.length-t.length),t=c}if(t.length!==o)throw new Error("Field.fromBytes: expected "+o+" bytes, got "+t.length);let f=s?Rt(t):me(t);if(a&&(f=Q(f,i)),!r&&!this.isValid(f))throw new Error("invalid field element: outside of range 0..ORDER");return f}invertBatch(t){return Ar(this,t)}cmov(t,r,n){return vt(n,"condition"),n?r:t}};Object.freeze(un.prototype);function He(e,t={}){return new un(e,t)}function ea(e){if(typeof e!="bigint")throw new Error("field order must be bigint");if(e<=X)throw new Error("field order must be greater than 1");let t=Me(e-X);return Math.ceil(t/8)}function Do(e){let t=ea(e);return t+Math.ceil(t/2)}function Co(e,t,r=!1){M(e);let n=e.length,o=ea(t),s=Math.max(Do(t),16);if(n<s||n>1024)throw new Error("expected "+s+"-1024 bytes of input, got "+n);let i=r?Rt(e):me(e),a=Q(i,t-X)+X;return r?Io(a,o):cn(a,o)}var qe=BigInt(0),ye=BigInt(1);function vr(e,t){let r=t.negate();return e?r:t}function xe(e,t){let r=Ar(e.Fp,t.map(n=>n.Z));return t.map((n,o)=>e.fromAffine(n.toAffine(r[o])))}function sa(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw new Error("invalid window size, expected [1.."+t+"], got W="+e)}function Ro(e,t){sa(e,t);let r=Math.ceil(t/e)+1,n=2**(e-1),o=2**e,s=Sr(e),i=BigInt(e);return{windows:r,windowSize:n,mask:s,maxNumber:o,shiftBy:i}}function ra(e,t,r){let{windowSize:n,mask:o,maxNumber:s,shiftBy:i}=r,a=Number(e&o),f=e>>i;a>n&&(a-=s,f+=ye);let c=t*n,u=c+Math.abs(a)-1,h=a===0,y=a<0,m=t%2!==0;return{nextN:f,offset:u,isZero:h,isNeg:y,isNegF:m,offsetF:c}}var Uo=new WeakMap,ia=new WeakMap;function Ko(e){return ia.get(e)||1}function na(e){if(e!==qe)throw new Error("invalid wNAF")}var Ve=class{BASE;ZERO;Fn;bits;constructor(t,r){this.BASE=t.BASE,this.ZERO=t.ZERO,this.Fn=t.Fn,this.bits=r}_unsafeLadder(t,r,n=this.ZERO){let o=t;for(;r>qe;)r&ye&&(n=n.add(o)),o=o.double(),r>>=ye;return n}precomputeWindow(t,r){let{windows:n,windowSize:o}=Ro(r,this.bits),s=[],i=t,a=i;for(let f=0;f<n;f++){a=i,s.push(a);for(let c=1;c<o;c++)a=a.add(i),s.push(a);i=a.double()}return s}wNAF(t,r,n){if(!this.Fn.isValid(n))throw new Error("invalid scalar");let o=this.ZERO,s=this.BASE,i=Ro(t,this.bits);for(let a=0;a<i.windows;a++){let{nextN:f,offset:c,isZero:u,isNeg:h,isNegF:y,offsetF:m}=ra(n,a,i);n=f,u?s=s.add(vr(y,r[m])):o=o.add(vr(h,r[c]))}return na(n),{p:o,f:s}}wNAFUnsafe(t,r,n,o=this.ZERO){let s=Ro(t,this.bits);for(let i=0;i<s.windows&&n!==qe;i++){let{nextN:a,offset:f,isZero:c,isNeg:u}=ra(n,i,s);if(n=a,!c){let h=r[f];o=o.add(u?h.negate():h)}}return na(n),o}getPrecomputes(t,r,n){let o=Uo.get(r);return o||(o=this.precomputeWindow(r,t),t!==1&&(typeof n=="function"&&(o=n(o)),Uo.set(r,o))),o}cached(t,r,n){let o=Ko(t);return this.wNAF(o,this.getPrecomputes(o,t,n),r)}unsafe(t,r,n,o){let s=Ko(t);return s===1?this._unsafeLadder(t,r,o):this.wNAFUnsafe(s,this.getPrecomputes(s,t,n),r,o)}createCache(t,r){sa(r,this.bits),ia.set(t,r),Uo.delete(t)}hasCache(t){return Ko(t)!==1}};function aa(e,t,r,n){let o=t,s=e.ZERO,i=e.ZERO;for(;r>qe||n>qe;)r&ye&&(s=s.add(o)),n&ye&&(i=i.add(o)),o=o.double(),r>>=ye,n>>=ye;return{p1:s,p2:i}}function oa(e,t,r){if(t){if(t.ORDER!==e)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return _o(t),t}else return He(e,{isLE:r})}function hn(e,t,r={},n){if(n===void 0&&(n=e==="edwards"),!t||typeof t!="object")throw new Error(`expected valid ${e} CURVE object`);for(let f of["p","n","h"]){let c=t[f];if(!(typeof c=="bigint"&&c>qe))throw new Error(`CURVE.${f} must be positive bigint`)}let o=oa(t.p,r.Fp,n),s=oa(t.n,r.Fn,n),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let f of a)if(!o.isValid(t[f]))throw new Error(`CURVE.${f} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:o,Fn:s}}function dn(e,t){return function(n){let o=e(n);return{secretKey:o,publicKey:t(o)}}}var Xt=BigInt(0),st=BigInt(1),Oo=BigInt(2),Tu=BigInt(8);function Lu(e,t,r,n){let o=e.sqr(r),s=e.sqr(n),i=e.add(e.mul(t.a,o),s),a=e.add(e.ONE,e.mul(t.d,e.mul(o,s)));return e.eql(i,a)}function ca(e,t={}){let r=t,n=hn("edwards",e,r,r.FpFnLE),{Fp:o,Fn:s}=n,i=n.CURVE,{h:a}=i;It(r,{},{uvRatio:"function"});let f=Oo<<BigInt(s.BYTES*8)-st,c=x=>o.create(x),u=r.uvRatio===void 0?(x,p)=>{try{return{isValid:!0,value:o.sqrt(o.div(x,p))}}catch{return{isValid:!1,value:Xt}}}:r.uvRatio;if(!Lu(o,i,i.Gx,i.Gy))throw new Error("bad curve params: generator point");function h(x,p,b=!1){let E=b?st:Xt;return Pe("coordinate "+x,p,E,f),p}function y(x){if(!(x instanceof m))throw new Error("EdwardsPoint expected")}class m{static BASE=new m(i.Gx,i.Gy,st,c(i.Gx*i.Gy));static ZERO=new m(Xt,st,st,Xt);static Fp=o;static Fn=s;X;Y;Z;T;constructor(p,b,E,A){this.X=h("x",p),this.Y=h("y",b),this.Z=h("z",E,!0),this.T=h("t",A),Object.freeze(this)}static CURVE(){return i}static fromAffine(p){if(p instanceof m)throw new Error("extended point not allowed");let{x:b,y:E}=p||{};return h("x",b),h("y",E),new m(b,E,st,c(b*E))}static fromBytes(p,b=!1){let E=o.BYTES,{a:A,d:L}=i;p=Er(M(p,E,"point")),vt(b,"zip215");let T=Er(p),U=p[E-1];T[E-1]=U&-129;let C=Rt(T),I=b?f:o.ORDER;Pe("point.y",C,Xt,I);let O=c(C*C),V=c(O-st),F=c(L*O-A),{isValid:d,value:g}=u(V,F);if(!d)throw new Error("bad point: invalid y coordinate");let v=(g&st)===st,S=(U&128)!==0;if(!b&&g===Xt&&S)throw new Error("bad point: x=0 and x_0=1");return S!==v&&(g=c(-g)),m.fromAffine({x:g,y:C})}static fromHex(p,b=!1){return m.fromBytes(Ne(p),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(p=8,b=!0){return l.createCache(this,p),b||this.multiply(Oo),this}assertValidity(){let p=this,{a:b,d:E}=i;if(p.is0())throw new Error("bad point: ZERO");let{X:A,Y:L,Z:T,T:U}=p,C=c(A*A),I=c(L*L),O=c(T*T),V=c(O*O),F=c(C*b),d=c(O*c(F+I)),g=c(V+c(E*c(C*I)));if(d!==g)throw new Error("bad point: equation left != right (1)");let v=c(A*L),S=c(T*U);if(v!==S)throw new Error("bad point: equation left != right (2)")}equals(p){y(p);let{X:b,Y:E,Z:A}=this,{X:L,Y:T,Z:U}=p,C=c(b*U),I=c(L*A),O=c(E*U),V=c(T*A);return C===I&&O===V}is0(){return this.equals(m.ZERO)}negate(){return new m(c(-this.X),this.Y,this.Z,c(-this.T))}double(){let{a:p}=i,{X:b,Y:E,Z:A}=this,L=c(b*b),T=c(E*E),U=c(Oo*c(A*A)),C=c(p*L),I=b+E,O=c(c(I*I)-L-T),V=C+T,F=V-U,d=C-T,g=c(O*F),v=c(V*d),S=c(O*d),w=c(F*V);return new m(g,v,w,S)}add(p){y(p);let{a:b,d:E}=i,{X:A,Y:L,Z:T,T:U}=this,{X:C,Y:I,Z:O,T:V}=p,F=c(A*C),d=c(L*I),g=c(U*E*V),v=c(T*O),S=c((A+L)*(C+I)-F-d),w=v-g,B=v+g,D=c(d-b*F),_=c(S*w),R=c(B*D),K=c(S*D),P=c(w*B);return new m(_,R,P,K)}subtract(p){return y(p),this.add(p.negate())}multiply(p){if(!s.isValidNot0(p))throw new RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:E}=l.cached(this,p,A=>xe(m,A));return xe(m,[b,E])[0]}multiplyUnsafe(p){if(!s.isValid(p))throw new RangeError("invalid scalar: expected 0 <= sc < curve.n");return p===Xt?m.ZERO:this.is0()||p===st?this:l.unsafe(this,p,b=>xe(m,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return l.unsafe(this,i.n).is0()}toAffine(p){let b=this,E=p,{X:A,Y:L,Z:T}=b,U=b.is0();E==null&&(E=U?Tu:o.inv(T));let C=c(A*E),I=c(L*E),O=o.mul(T,E);if(U)return{x:Xt,y:st};if(O!==st)throw new Error("invZ was invalid");return{x:C,y:I}}clearCofactor(){return a===st?this:this.multiplyUnsafe(a)}toBytes(){let{x:p,y:b}=this.toAffine(),E=o.toBytes(b);return E[E.length-1]|=p&st?128:0,E}toHex(){return ke(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=new Ve(m,s.BITS);return s.BITS>=8&&m.BASE.precompute(8),Object.freeze(m.prototype),Object.freeze(m),m}var ln=class{static BASE;static ZERO;static Fp;static Fn;ep;constructor(t){this.ep=t}static fromBytes(t){To()}static fromHex(t){To()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(t){return this.ep.toAffine(t)}toHex(){return ke(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(t){return this.assertSame(t),this.init(this.ep.add(t.ep))}subtract(t){return this.assertSame(t),this.init(this.ep.subtract(t.ep))}multiply(t){return this.init(this.ep.multiply(t))}multiplyUnsafe(t){return this.init(this.ep.multiplyUnsafe(t))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(t,r){return this.ep.precompute(t,r),this}};function fa(e,t,r={}){if(typeof t!="function")throw new Error('"hash" function param is required');let n=t,o=r;It(o,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",zip215:"boolean",mapToCurve:"function"});let{prehash:s}=o,{BASE:i,Fp:a,Fn:f}=e,c=n.outputLen,u=2*a.BYTES;if(c!==void 0&&(Bt(c,"hash.outputLen"),c!==u))throw new Error(`hash.outputLen must be ${u}, got ${c}`);let h=o.randomBytes===void 0?gr:o.randomBytes,y=o.adjustScalarBytes===void 0?d=>d:o.adjustScalarBytes,m=o.domain===void 0?(d,g,v)=>{if(vt(v,"phflag"),g.length||v)throw new Error("Contexts/pre-hash are not supported");return d}:o.domain;function l(d){return f.create(Rt(d))}function x(d){let g=C.secretKey;M(d,C.secretKey,"secretKey");let v=M(n(d),2*g,"hashedSecretKey"),S=y(v.slice(0,g)),w=v.slice(g,2*g),B=l(S);return{head:S,prefix:w,scalar:B}}function p(d){let{head:g,prefix:v,scalar:S}=x(d),w=i.multiply(S),B=w.toBytes();return{head:g,prefix:v,scalar:S,point:w,pointBytes:B}}function b(d){return p(d).pointBytes}function E(d=Uint8Array.of(),...g){let v=et(...g);return l(n(m(v,M(d,void 0,"context"),!!s)))}function A(d,g,v={}){d=M(d,void 0,"message"),s&&(d=s(d));let{prefix:S,scalar:w,pointBytes:B}=p(g),D=E(v.context,S,d),_=i.multiply(D).toBytes(),R=E(v.context,_,B,d),K=f.create(D+R*w);if(!f.isValid(K))throw new Error("sign failed: invalid s");let P=et(_,f.toBytes(K));return M(P,C.signature,"result")}let L={zip215:o.zip215};function T(d,g,v,S=L){let{context:w}=S,B=S.zip215===void 0?!!L.zip215:S.zip215,D=C.signature;d=M(d,D,"signature"),g=M(g,void 0,"message"),v=M(v,C.publicKey,"publicKey"),B!==void 0&&vt(B,"zip215"),s&&(g=s(g));let _=D/2,R=d.subarray(0,_),K=Rt(d.subarray(_,D)),P,q,N;try{P=e.fromBytes(v,B),q=e.fromBytes(R,B),N=i.multiplyUnsafe(K)}catch{return!1}if(!B&&P.isSmallOrder())return!1;let tt=E(w,R,v,g);return q.add(P.multiplyUnsafe(tt)).subtract(N).clearCofactor().is0()}let U=a.BYTES,C={secretKey:U,publicKey:U,signature:2*U,seed:U};function I(d){return d=d===void 0?h(C.seed):d,M(d,C.seed,"seed")}function O(d){return pe(d)&&d.length===C.secretKey}function V(d,g){try{return!!e.fromBytes(d,g===void 0?L.zip215:g)}catch{return!1}}let F={getExtendedPublicKey:p,randomSecretKey:I,isValidSecretKey:O,isValidPublicKey:V,toMontgomery(d){let{y:g}=e.fromBytes(d),v=C.publicKey,S=v===32;if(!S&&v!==57)throw new Error("only defined for 25519 and 448");let w=S?a.div(st+g,st-g):a.div(g-st,g+st);return a.toBytes(w)},toMontgomerySecret(d){let g=C.secretKey;M(d,g);let v=n(d.subarray(0,g));return y(v).subarray(0,g)}};return Object.freeze(C),Object.freeze(F),Object.freeze({keygen:dn(I,b),getPublicKey:b,sign:A,verify:T,utils:F,Point:e,lengths:C})}function Br(e,t){if(Bt(e),Bt(t),t<0||t>4)throw new Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw new Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let n=t-1;n>=0;n--)r[n]=e&255,e>>>=8;return new Uint8Array(r)}function _u(e,t){let r=new Uint8Array(e.length);for(let n=0;n<e.length;n++)r[n]=e[n]^t[n];return r}function Du(e){if(!pe(e)&&typeof e!="string")throw new Error("DST must be Uint8Array or ascii string");let t=typeof e=="string"?fn(e):e;if(t.length===0)throw new Error("DST must be non-empty");return t}function Fo(e,t,r,n){M(e),Bt(r),t=Du(t),t.length>255&&(t=n(et(fn("H2C-OVERSIZE-DST-"),t)));let{outputLen:o,blockLen:s}=n,i=Math.ceil(r/o);if(r>65535||i>255)throw new Error("expand_message_xmd: invalid lenInBytes");let a=et(t,Br(t.length,1)),f=new Uint8Array(s),c=Br(r,2),u=new Array(i),h=n(et(f,e,c,Br(0,1),a));u[0]=n(et(h,Br(1,1),a));for(let m=1;m<i;m++){let l=[_u(h,u[m-1]),Br(m+1,1),a];u[m]=n(et(...l))}return et(...u).slice(0,r)}var ua="HashToScalar-";var Cu=BigInt(0),qt=BigInt(1),ha=BigInt(2);var Ru=BigInt(5),Uu=BigInt(8),ze=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Mo={p:ze,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:Uu,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")};function Ku(e){let t=BigInt(10),r=BigInt(20),n=BigInt(40),o=BigInt(80),s=ze,a=e*e%s*e%s,f=Z(a,ha,s)*a%s,c=Z(f,qt,s)*e%s,u=Z(c,Ru,s)*c%s,h=Z(u,t,s)*u%s,y=Z(h,r,s)*h%s,m=Z(y,n,s)*y%s,l=Z(m,o,s)*m%s,x=Z(l,o,s)*m%s,p=Z(x,t,s)*u%s;return{pow_p_5_8:Z(p,ha,s)*e%s,b2:a}}function Ou(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var ko=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Ho(e,t){let r=ze,n=Q(t*t*t,r),o=Q(n*n*t,r),s=Ku(e*o).pow_p_5_8,i=Q(e*n*s,r),a=Q(t*i*i,r),f=i,c=Q(i*ko,r),u=a===e,h=a===Q(-e,r),y=a===Q(-e*ko,r);return u&&(i=f),(h||y)&&(i=c),Ht(i,r)&&(i=Q(-i,r)),{isValid:u||h,value:i}}var Jt=ca(Mo,{uvRatio:Ho}),Wt=Jt.Fp,pa=Jt.Fn;function Fu(e){return fa(Jt,Fe,Object.assign({adjustScalarBytes:Ou,zip215:!0},e))}var je=Fu({});var No=ko,ku=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Nu=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),Pu=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Mu=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),da=e=>Ho(qt,e),Hu=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Po=e=>Wt.create(Rt(e)&Hu);function la(e){let{d:t}=Mo,r=ze,n=b=>Wt.create(b),o=n(No*e*e),s=n((o+qt)*Pu),i=BigInt(-1),a=n((i-t*o)*n(o+t)),{isValid:f,value:c}=Ho(s,a),u=n(c*e);Ht(u,r)||(u=n(-u)),f||(c=u),f||(i=o);let h=n(i*(o-qt)*Mu-a),y=c*c,m=n((c+c)*a),l=n(h*ku),x=n(qt-y),p=n(qt+y);return new Jt(n(m*p),n(x*l),n(l*p),n(m*x))}var Qt=class e extends ln{static BASE=new e(Jt.BASE);static ZERO=new e(Jt.ZERO);static Fp=Wt;static Fn=pa;constructor(t){super(t)}static fromAffine(t){return new e(Jt.fromAffine(t))}assertSame(t){if(!(t instanceof e))throw new Error("RistrettoPoint expected")}init(t){return new e(t)}static fromBytes(t){mt(t,32);let{a:r,d:n}=Mo,o=ze,s=L=>Wt.create(L),i=Po(t);if(!Vi(Wt.toBytes(i),t)||Ht(i,o))throw new Error("invalid ristretto255 encoding 1");let a=s(i*i),f=s(qt+r*a),c=s(qt-r*a),u=s(f*f),h=s(c*c),y=s(r*n*u-h),{isValid:m,value:l}=da(s(y*h)),x=s(l*c),p=s(l*x*y),b=s((i+i)*x);Ht(b,o)&&(b=s(-b));let E=s(f*p),A=s(b*E);if(!m||Ht(A,o)||E===Cu)throw new Error("invalid ristretto255 encoding 2");return new e(new Jt(b,E,qt,A))}static fromHex(t){return e.fromBytes(mr(t))}toBytes(){let{X:t,Y:r,Z:n,T:o}=this.ep,s=ze,i=p=>Wt.create(p),a=i(i(n+r)*i(n-r)),f=i(t*r),c=i(f*f),{value:u}=da(i(a*c)),h=i(u*a),y=i(u*f),m=i(h*y*o),l;if(Ht(o*m,s)){let p=i(r*No),b=i(t*No);t=p,r=b,l=i(h*Nu)}else l=y;Ht(t*m,s)&&(r=i(-r));let x=i((n-r)*l);return Ht(x,s)&&(x=i(-x)),Wt.toBytes(x)}equals(t){this.assertSame(t);let{X:r,Y:n}=this.ep,{X:o,Y:s}=t.ep,i=c=>Wt.create(c),a=i(r*s)===i(n*o),f=i(n*s)===i(r*o);return a||f}is0(){return this.equals(e.ZERO)}};Object.freeze(Qt.BASE);Object.freeze(Qt.ZERO);Object.freeze(Qt.prototype);Object.freeze(Qt);var qu=Object.freeze({Point:Qt,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,n=Fo(e,r,64,Fe);return qu.deriveToCurve(n)},hashToScalar(e,t={DST:ua}){let r=Fo(e,t.DST,64,Fe);return pa.create(Rt(r))},deriveToCurve(e){mt(e,64);let t=Po(e.subarray(0,32)),r=la(t),n=Po(e.subarray(32,64)),o=la(n);return new Qt(r.add(o))}});var te=32,xt=64,pn=32;var Ze,ma=(async()=>{try{return await $.get().subtle.generateKey({name:"Ed25519"},!0,["sign","verify"]),!0}catch{return!1}})();function ba(){let e=je.utils.randomSecretKey(),t=je.getPublicKey(e);return{privateKey:wa(e,t),publicKey:t}}function ya(e){if(e.length!==pn)throw new TypeError('"seed" must be 32 bytes in length.');if(!(e instanceof Uint8Array))throw new TypeError('"seed" must be a node.js Buffer, or Uint8Array.');let t=e,r=je.getPublicKey(t);return{privateKey:wa(t,r),publicKey:r}}async function Vu(e,t){let r;e.length===xt?r=e.subarray(0,32):r=e;let n={crv:"Ed25519",kty:"OKP",x:H(e.subarray(32),"base64url"),d:H(r,"base64url"),ext:!0,key_ops:["sign"]},o=await $.get().subtle.importKey("jwk",n,{name:"Ed25519"},!0,["sign"]),s=await $.get().subtle.sign({name:"Ed25519"},o,ft(t instanceof Uint8Array?t:t.subarray()));return new Uint8Array(s,0,s.byteLength)}function zu(e,t){let r=e.subarray(0,pn);return je.sign(t instanceof Uint8Array?t:t.subarray(),r)}async function xa(e,t){return Ze==null&&(Ze=await ma),Ze?Vu(e,t):zu(e,t)}async function ju(e,t,r){if(e.buffer instanceof ArrayBuffer){let n=await $.get().subtle.importKey("raw",e.buffer,{name:"Ed25519"},!1,["verify"]);return await $.get().subtle.verify({name:"Ed25519"},n,ft(t),ft(r instanceof Uint8Array?r:r.subarray()))}throw new TypeError("WebCrypto does not support SharedArrayBuffer for Ed25519 keys")}function Zu(e,t,r){return je.verify(t,r instanceof Uint8Array?r:r.subarray(),e)}async function ga(e,t,r){return Ze==null&&(Ze=await ma),Ze?ju(e,t,r):Zu(e,t,r)}function wa(e,t){let r=new Uint8Array(xt);for(let n=0;n<pn;n++)r[n]=e[n],r[pn+n]=t[n];return r}function $u(e){return e?.buffer instanceof ArrayBuffer}function Sa(e){if($u(e))return e;let t=e.slice();return new Uint8Array(t.buffer,0,t.byteLength)}function ge(e,t){t==null&&(t=e.reduce((o,s)=>o+s.length,0));let r=Yr(t),n=0;for(let o of e)r.set(o,n),n+=o.length;return Sa(r)}function qo(e,t){let r=Y(e,"base64urlpad");if(t!=null){if(r.length>t)throw new Error("byte array longer than desired length");r=ge([new Uint8Array(t-r.length),r])}return r}function $e(e){return e==null?!1:typeof e.then=="function"&&typeof e.catch=="function"&&typeof e.finally=="function"}var Ir=class{type="Ed25519";raw;constructor(t){this.raw=Ye(t,te)}toMultihash(){return ce.digest(ue(this))}toCID(){return wt.createV1(114,this.toMultihash())}toString(){return ot.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}verify(t,r,n){n?.signal?.throwIfAborted();let o=ga(this.raw,r,t);return $e(o)?o.then(s=>(n?.signal?.throwIfAborted(),s)):o}},we=class{type="Ed25519";raw;publicKey;constructor(t,r){this.raw=Ye(t,xt),this.publicKey=new Ir(r)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}sign(t,r){r?.signal?.throwIfAborted();let n=xa(this.raw,t);return $e(n)?n.then(o=>(r?.signal?.throwIfAborted(),o)):(r?.signal?.throwIfAborted(),n)}};function Vo(e){if(e.length>xt){e=Ye(e,xt+te);let n=e.subarray(0,xt),o=e.subarray(xt,e.length);return new we(n,o)}e=Ye(e,xt);let t=e.subarray(0,xt),r=e.subarray(te);return new we(t,r)}function mn(e){return e=Ye(e,te),new Ir(e)}async function Aa(){let{privateKey:e,publicKey:t}=ba();return new we(e,t)}async function va(e){let{privateKey:t,publicKey:r}=ya(e);return new we(t,r)}function Ye(e,t){if(e=Uint8Array.from(e??[]),e.length!==t)throw new k(`Key must be a Uint8Array of length ${t}, got ${e.length}`);return e}function ee(e=0){return new Uint8Array(e)}var Yu=Math.pow(2,7),Gu=Math.pow(2,14),Xu=Math.pow(2,21),Ba=Math.pow(2,28),Ia=Math.pow(2,35),Ta=Math.pow(2,42),La=Math.pow(2,49),dt=128,re=127;function Tr(e){if(e<Yu)return 1;if(e<Gu)return 2;if(e<Xu)return 3;if(e<Ba)return 4;if(e<Ia)return 5;if(e<Ta)return 6;if(e<La)return 7;if(Number.MAX_SAFE_INTEGER!=null&&e>Number.MAX_SAFE_INTEGER)throw new RangeError("Could not encode varint");return 8}function _a(e,t,r=0){switch(Tr(e)){case 8:t[r++]=e&255|dt,e/=128;case 7:t[r++]=e&255|dt,e/=128;case 6:t[r++]=e&255|dt,e/=128;case 5:t[r++]=e&255|dt,e/=128;case 4:t[r++]=e&255|dt,e>>>=7;case 3:t[r++]=e&255|dt,e>>>=7;case 2:t[r++]=e&255|dt,e>>>=7;case 1:{t[r++]=e&255,e>>>=7;break}default:throw new Error("unreachable")}return t}function Da(e,t){let r=e[t],n=0;if(n+=r&re,r<dt||(r=e[t+1],n+=(r&re)<<7,r<dt)||(r=e[t+2],n+=(r&re)<<14,r<dt)||(r=e[t+3],n+=(r&re)<<21,r<dt)||(r=e[t+4],n+=(r&re)*Ba,r<dt)||(r=e[t+5],n+=(r&re)*Ia,r<dt)||(r=e[t+6],n+=(r&re)*Ta,r<dt)||(r=e[t+7],n+=(r&re)*La,r<dt))return n;throw new RangeError("Could not decode varint")}var zo=new Float32Array([-0]),ne=new Uint8Array(zo.buffer);function Ca(e,t,r){zo[0]=e,t[r]=ne[0],t[r+1]=ne[1],t[r+2]=ne[2],t[r+3]=ne[3]}function Ra(e,t){return ne[0]=e[t],ne[1]=e[t+1],ne[2]=e[t+2],ne[3]=e[t+3],zo[0]}var jo=new Float64Array([-0]),ct=new Uint8Array(jo.buffer);function Ua(e,t,r){jo[0]=e,t[r]=ct[0],t[r+1]=ct[1],t[r+2]=ct[2],t[r+3]=ct[3],t[r+4]=ct[4],t[r+5]=ct[5],t[r+6]=ct[6],t[r+7]=ct[7]}function Ka(e,t){return ct[0]=e[t],ct[1]=e[t+1],ct[2]=e[t+2],ct[3]=e[t+3],ct[4]=e[t+4],ct[5]=e[t+5],ct[6]=e[t+6],ct[7]=e[t+7],jo[0]}var Wu=BigInt(Number.MAX_SAFE_INTEGER),Ju=BigInt(Number.MIN_SAFE_INTEGER),gt=class e{lo;hi;constructor(t,r){this.lo=t|0,this.hi=r|0}toNumber(t=!1){if(!t&&this.hi>>>31>0){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(r+n*4294967296)}return this.lo+this.hi*4294967296}toBigInt(t=!1){if(t)return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n);if(this.hi>>>31){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(BigInt(r)+(BigInt(n)<<32n))}return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n)}toString(t=!1){return this.toBigInt(t).toString()}zzEncode(){let t=this.hi>>31;return this.hi=((this.hi<<1|this.lo>>>31)^t)>>>0,this.lo=(this.lo<<1^t)>>>0,this}zzDecode(){let t=-(this.lo&1);return this.lo=((this.lo>>>1|this.hi<<31)^t)>>>0,this.hi=(this.hi>>>1^t)>>>0,this}length(){let t=this.lo,r=(this.lo>>>28|this.hi<<4)>>>0,n=this.hi>>>24;return n===0?r===0?t<16384?t<128?1:2:t<2097152?3:4:r<16384?r<128?5:6:r<2097152?7:8:n<128?9:10}static fromBigInt(t){if(t===0n)return Ee;if(t<Wu&&t>Ju)return this.fromNumber(Number(t));let r=t<0n;r&&(t=-t);let n=t>>32n,o=t-(n<<32n);return r&&(n=~n|0n,o=~o|0n,++o>Oa&&(o=0n,++n>Oa&&(n=0n))),new e(Number(o),Number(n))}static fromNumber(t){if(t===0)return Ee;let r=t<0;r&&(t=-t);let n=t>>>0,o=(t-n)/4294967296>>>0;return r&&(o=~o>>>0,n=~n>>>0,++n>4294967295&&(n=0,++o>4294967295&&(o=0))),new e(n,o)}static from(t){return typeof t=="number"?e.fromNumber(t):typeof t=="bigint"?e.fromBigInt(t):typeof t=="string"?e.fromBigInt(BigInt(t)):t.low!=null||t.high!=null?new e(t.low>>>0,t.high>>>0):Ee}},Ee=new gt(0,0);Ee.toBigInt=function(){return 0n};Ee.zzEncode=Ee.zzDecode=function(){return this};Ee.length=function(){return 1};var Oa=4294967296n;function Fa(e){let t=0,r=0;for(let n=0;n<e.length;++n)r=e.charCodeAt(n),r<128?t+=1:r<2048?t+=2:(r&64512)===55296&&(e.charCodeAt(n+1)&64512)===56320?(++n,t+=4):t+=3;return t}function ka(e,t,r){if(r-t<1)return"";let o,s=[],i=0,a;for(;t<r;)a=e[t++],a<128?s[i++]=a:a>191&&a<224?s[i++]=(a&31)<<6|e[t++]&63:a>239&&a<365?(a=((a&7)<<18|(e[t++]&63)<<12|(e[t++]&63)<<6|e[t++]&63)-65536,s[i++]=55296+(a>>10),s[i++]=56320+(a&1023)):s[i++]=(a&15)<<12|(e[t++]&63)<<6|e[t++]&63,i>8191&&((o??(o=[])).push(String.fromCharCode.apply(String,s)),i=0);return o!=null?(i>0&&o.push(String.fromCharCode.apply(String,s.slice(0,i))),o.join("")):String.fromCharCode.apply(String,s.slice(0,i))}function Zo(e,t,r){let n=r,o,s;for(let i=0;i<e.length;++i)o=e.charCodeAt(i),o<128?t[r++]=o:o<2048?(t[r++]=o>>6|192,t[r++]=o&63|128):(o&64512)===55296&&((s=e.charCodeAt(i+1))&64512)===56320?(o=65536+((o&1023)<<10)+(s&1023),++i,t[r++]=o>>18|240,t[r++]=o>>12&63|128,t[r++]=o>>6&63|128,t[r++]=o&63|128):(t[r++]=o>>12|224,t[r++]=o>>6&63|128,t[r++]=o&63|128);return r-n}function Tt(e,t){return RangeError(`index out of range: ${e.pos} + ${t??1} > ${e.len}`)}function bn(e,t){return(e[t-4]|e[t-3]<<8|e[t-2]<<16|e[t-1]<<24)>>>0}var $o=class{buf;pos;len;_slice=Uint8Array.prototype.subarray;constructor(t){this.buf=t,this.pos=0,this.len=t.length}uint32(){let t=4294967295;if(t=(this.buf[this.pos]&127)>>>0,this.buf[this.pos++]<128||(t=(t|(this.buf[this.pos]&127)<<7)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<14)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<21)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&15)<<28)>>>0,this.buf[this.pos++]<128))return t;if((this.pos+=5)>this.len)throw this.pos=this.len,Tt(this,10);return t}int32(){return this.uint32()|0}sint32(){let t=this.uint32();return t>>>1^-(t&1)|0}bool(){return this.uint32()!==0}fixed32(){if(this.pos+4>this.len)throw Tt(this,4);return bn(this.buf,this.pos+=4)}sfixed32(){if(this.pos+4>this.len)throw Tt(this,4);return bn(this.buf,this.pos+=4)|0}float(){if(this.pos+4>this.len)throw Tt(this,4);let t=Ra(this.buf,this.pos);return this.pos+=4,t}double(){if(this.pos+8>this.len)throw Tt(this,4);let t=Ka(this.buf,this.pos);return this.pos+=8,t}bytes(){let t=this.uint32(),r=this.pos,n=this.pos+t;if(n>this.len)throw Tt(this,t);return this.pos+=t,r===n?new Uint8Array(0):this.buf.subarray(r,n)}string(){let t=this.bytes();return ka(t,0,t.length)}skip(t){if(typeof t=="number"){if(this.pos+t>this.len)throw Tt(this,t);this.pos+=t}else do if(this.pos>=this.len)throw Tt(this);while((this.buf[this.pos++]&128)!==0);return this}skipType(t){switch(t){case 0:this.skip();break;case 1:this.skip(8);break;case 2:this.skip(this.uint32());break;case 3:for(;(t=this.uint32()&7)!==4;)this.skipType(t);break;case 5:this.skip(4);break;default:throw Error(`invalid wire type ${t} at offset ${this.pos}`)}return this}readLongVarint(){let t=new gt(0,0),r=0;if(this.len-this.pos>4){for(;r<4;++r)if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t;if(t.lo=(t.lo|(this.buf[this.pos]&127)<<28)>>>0,t.hi=(t.hi|(this.buf[this.pos]&127)>>4)>>>0,this.buf[this.pos++]<128)return t;r=0}else{for(;r<3;++r){if(this.pos>=this.len)throw Tt(this);if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t}return t.lo=(t.lo|(this.buf[this.pos++]&127)<<r*7)>>>0,t}if(this.len-this.pos>4){for(;r<5;++r)if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}else for(;r<5;++r){if(this.pos>=this.len)throw Tt(this);if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}throw Error("invalid varint encoding")}readFixed64(){if(this.pos+8>this.len)throw Tt(this,8);let t=bn(this.buf,this.pos+=4),r=bn(this.buf,this.pos+=4);return new gt(t,r)}int64(){return this.readLongVarint().toBigInt()}int64Number(){return this.readLongVarint().toNumber()}int64String(){return this.readLongVarint().toString()}uint64(){return this.readLongVarint().toBigInt(!0)}uint64Number(){let t=Da(this.buf,this.pos);return this.pos+=Tr(t),t}uint64String(){return this.readLongVarint().toString(!0)}sint64(){return this.readLongVarint().zzDecode().toBigInt()}sint64Number(){return this.readLongVarint().zzDecode().toNumber()}sint64String(){return this.readLongVarint().zzDecode().toString()}fixed64(){return this.readFixed64().toBigInt()}fixed64Number(){return this.readFixed64().toNumber()}fixed64String(){return this.readFixed64().toString()}sfixed64(){return this.readFixed64().toBigInt()}sfixed64Number(){return this.readFixed64().toNumber()}sfixed64String(){return this.readFixed64().toString()}};function Lr(e){return new $o(e instanceof Uint8Array?e:e.subarray())}function yn(e,t,r){let n=Lr(e);return t.decode(n,void 0,r)}var Jo={};z(Jo,{base10:()=>sh});var kp=new Uint8Array(0);function Pa(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Vt(e){if(e instanceof Uint8Array&&e.constructor.name==="Uint8Array")return e;if(e instanceof ArrayBuffer)return new Uint8Array(e);if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);throw new Error("Unknown type, must be binary type")}function Ma(e){return new TextEncoder().encode(e)}function Ha(e){return new TextDecoder().decode(e)}function Qu(e,t){if(e.length>=255)throw new TypeError("Alphabet too long");for(var r=new Uint8Array(256),n=0;n<r.length;n++)r[n]=255;for(var o=0;o<e.length;o++){var s=e.charAt(o),i=s.charCodeAt(0);if(r[i]!==255)throw new TypeError(s+" is ambiguous");r[i]=o}var a=e.length,f=e.charAt(0),c=Math.log(a)/Math.log(256),u=Math.log(256)/Math.log(a);function h(l){if(l instanceof Uint8Array||(ArrayBuffer.isView(l)?l=new Uint8Array(l.buffer,l.byteOffset,l.byteLength):Array.isArray(l)&&(l=Uint8Array.from(l))),!(l instanceof Uint8Array))throw new TypeError("Expected Uint8Array");if(l.length===0)return"";for(var x=0,p=0,b=0,E=l.length;b!==E&&l[b]===0;)b++,x++;for(var A=(E-b)*u+1>>>0,L=new Uint8Array(A);b!==E;){for(var T=l[b],U=0,C=A-1;(T!==0||U<p)&&C!==-1;C--,U++)T+=256*L[C]>>>0,L[C]=T%a>>>0,T=T/a>>>0;if(T!==0)throw new Error("Non-zero carry");p=U,b++}for(var I=A-p;I!==A&&L[I]===0;)I++;for(var O=f.repeat(x);I<A;++I)O+=e.charAt(L[I]);return O}function y(l){if(typeof l!="string")throw new TypeError("Expected String");if(l.length===0)return new Uint8Array;var x=0;if(l[x]!==" "){for(var p=0,b=0;l[x]===f;)p++,x++;for(var E=(l.length-x)*c+1>>>0,A=new Uint8Array(E);l[x];){var L=r[l.charCodeAt(x)];if(L===255)return;for(var T=0,U=E-1;(L!==0||T<b)&&U!==-1;U--,T++)L+=a*A[U]>>>0,A[U]=L%256>>>0,L=L/256>>>0;if(L!==0)throw new Error("Non-zero carry");b=T,x++}if(l[x]!==" "){for(var C=E-b;C!==E&&A[C]===0;)C++;for(var I=new Uint8Array(p+(E-C)),O=p;C!==E;)I[O++]=A[C++];return I}}}function m(l){var x=y(l);if(x)return x;throw new Error(`Non-${t} character`)}return{encode:h,decodeUnsafe:y,decode:m}}var th=Qu,eh=th,Va=eh;var Yo=class{name;prefix;baseEncode;constructor(t,r,n){this.name=t,this.prefix=r,this.baseEncode=n}encode(t){if(t instanceof Uint8Array)return`${this.prefix}${this.baseEncode(t)}`;throw Error("Unknown type, must be binary type")}},Go=class{name;prefix;baseDecode;prefixCodePoint;constructor(t,r,n){this.name=t,this.prefix=r;let o=r.codePointAt(0);if(o===void 0)throw new Error("Invalid prefix character");this.prefixCodePoint=o,this.baseDecode=n}decode(t){if(typeof t=="string"){if(t.codePointAt(0)!==this.prefixCodePoint)throw Error(`Unable to decode multibase string ${JSON.stringify(t)}, ${this.name} decoder only supports inputs prefixed with ${this.prefix}`);return this.baseDecode(t.slice(this.prefix.length))}else throw Error("Can only multibase decode strings")}or(t){return za(this,t)}},Xo=class{decoders;constructor(t){this.decoders=t}or(t){return za(this,t)}decode(t){let r=t[0],n=this.decoders[r];if(n!=null)return n.decode(t);throw RangeError(`Unable to decode multibase string ${JSON.stringify(t)}, only inputs prefixed with ${Object.keys(this.decoders)} are supported`)}};function za(e,t){return new Xo({...e.decoders??{[e.prefix]:e},...t.decoders??{[t.prefix]:t}})}var Wo=class{name;prefix;baseEncode;baseDecode;encoder;decoder;constructor(t,r,n,o){this.name=t,this.prefix=r,this.baseEncode=n,this.baseDecode=o,this.encoder=new Yo(t,r,n),this.decoder=new Go(t,r,o)}encode(t){return this.encoder.encode(t)}decode(t){return this.decoder.decode(t)}};function Ge({name:e,prefix:t,encode:r,decode:n}){return new Wo(e,t,r,n)}function oe({name:e,prefix:t,alphabet:r}){let{encode:n,decode:o}=Va(r,e);return Ge({prefix:t,name:e,encode:n,decode:s=>Vt(o(s))})}function rh(e,t,r,n){let o=e.length;for(;e[o-1]==="=";)--o;let s=new Uint8Array(o*r/8|0),i=0,a=0,f=0;for(let c=0;c<o;++c){let u=t[e[c]];if(u===void 0)throw new SyntaxError(`Non-${n} character`);a=a<<r|u,i+=r,i>=8&&(i-=8,s[f++]=255&a>>i)}if(i>=r||(255&a<<8-i)!==0)throw new SyntaxError("Unexpected end of data");return s}function nh(e,t,r){let n=t[t.length-1]==="=",o=(1<<r)-1,s="",i=0,a=0;for(let f=0;f<e.length;++f)for(a=a<<8|e[f],i+=8;i>r;)i-=r,s+=t[o&a>>i];if(i!==0&&(s+=t[o&a<<r-i]),n)for(;(s.length*r&7)!==0;)s+="=";return s}function oh(e){let t={};for(let r=0;r<e.length;++r)t[e[r]]=r;return t}function W({name:e,prefix:t,bitsPerChar:r,alphabet:n}){let o=oh(n);return Ge({prefix:t,name:e,encode(s){return nh(s,n,r)},decode(s){return rh(s,o,r,e)}})}var sh=oe({prefix:"9",name:"base10",alphabet:"0123456789"});var Qo={};z(Qo,{base16:()=>ih,base16upper:()=>ah});var ih=W({prefix:"f",name:"base16",alphabet:"0123456789abcdef",bitsPerChar:4}),ah=W({prefix:"F",name:"base16upper",alphabet:"0123456789ABCDEF",bitsPerChar:4});var ts={};z(ts,{base2:()=>ch});var ch=W({prefix:"0",name:"base2",alphabet:"01",bitsPerChar:1});var es={};z(es,{base256emoji:()=>lh});var ja=Array.from("\u{1F680}\u{1FA90}\u2604\u{1F6F0}\u{1F30C}\u{1F311}\u{1F312}\u{1F313}\u{1F314}\u{1F315}\u{1F316}\u{1F317}\u{1F318}\u{1F30D}\u{1F30F}\u{1F30E}\u{1F409}\u2600\u{1F4BB}\u{1F5A5}\u{1F4BE}\u{1F4BF}\u{1F602}\u2764\u{1F60D}\u{1F923}\u{1F60A}\u{1F64F}\u{1F495}\u{1F62D}\u{1F618}\u{1F44D}\u{1F605}\u{1F44F}\u{1F601}\u{1F525}\u{1F970}\u{1F494}\u{1F496}\u{1F499}\u{1F622}\u{1F914}\u{1F606}\u{1F644}\u{1F4AA}\u{1F609}\u263A\u{1F44C}\u{1F917}\u{1F49C}\u{1F614}\u{1F60E}\u{1F607}\u{1F339}\u{1F926}\u{1F389}\u{1F49E}\u270C\u2728\u{1F937}\u{1F631}\u{1F60C}\u{1F338}\u{1F64C}\u{1F60B}\u{1F497}\u{1F49A}\u{1F60F}\u{1F49B}\u{1F642}\u{1F493}\u{1F929}\u{1F604}\u{1F600}\u{1F5A4}\u{1F603}\u{1F4AF}\u{1F648}\u{1F447}\u{1F3B6}\u{1F612}\u{1F92D}\u2763\u{1F61C}\u{1F48B}\u{1F440}\u{1F62A}\u{1F611}\u{1F4A5}\u{1F64B}\u{1F61E}\u{1F629}\u{1F621}\u{1F92A}\u{1F44A}\u{1F973}\u{1F625}\u{1F924}\u{1F449}\u{1F483}\u{1F633}\u270B\u{1F61A}\u{1F61D}\u{1F634}\u{1F31F}\u{1F62C}\u{1F643}\u{1F340}\u{1F337}\u{1F63B}\u{1F613}\u2B50\u2705\u{1F97A}\u{1F308}\u{1F608}\u{1F918}\u{1F4A6}\u2714\u{1F623}\u{1F3C3}\u{1F490}\u2639\u{1F38A}\u{1F498}\u{1F620}\u261D\u{1F615}\u{1F33A}\u{1F382}\u{1F33B}\u{1F610}\u{1F595}\u{1F49D}\u{1F64A}\u{1F639}\u{1F5E3}\u{1F4AB}\u{1F480}\u{1F451}\u{1F3B5}\u{1F91E}\u{1F61B}\u{1F534}\u{1F624}\u{1F33C}\u{1F62B}\u26BD\u{1F919}\u2615\u{1F3C6}\u{1F92B}\u{1F448}\u{1F62E}\u{1F646}\u{1F37B}\u{1F343}\u{1F436}\u{1F481}\u{1F632}\u{1F33F}\u{1F9E1}\u{1F381}\u26A1\u{1F31E}\u{1F388}\u274C\u270A\u{1F44B}\u{1F630}\u{1F928}\u{1F636}\u{1F91D}\u{1F6B6}\u{1F4B0}\u{1F353}\u{1F4A2}\u{1F91F}\u{1F641}\u{1F6A8}\u{1F4A8}\u{1F92C}\u2708\u{1F380}\u{1F37A}\u{1F913}\u{1F619}\u{1F49F}\u{1F331}\u{1F616}\u{1F476}\u{1F974}\u25B6\u27A1\u2753\u{1F48E}\u{1F4B8}\u2B07\u{1F628}\u{1F31A}\u{1F98B}\u{1F637}\u{1F57A}\u26A0\u{1F645}\u{1F61F}\u{1F635}\u{1F44E}\u{1F932}\u{1F920}\u{1F927}\u{1F4CC}\u{1F535}\u{1F485}\u{1F9D0}\u{1F43E}\u{1F352}\u{1F617}\u{1F911}\u{1F30A}\u{1F92F}\u{1F437}\u260E\u{1F4A7}\u{1F62F}\u{1F486}\u{1F446}\u{1F3A4}\u{1F647}\u{1F351}\u2744\u{1F334}\u{1F4A3}\u{1F438}\u{1F48C}\u{1F4CD}\u{1F940}\u{1F922}\u{1F445}\u{1F4A1}\u{1F4A9}\u{1F450}\u{1F4F8}\u{1F47B}\u{1F910}\u{1F92E}\u{1F3BC}\u{1F975}\u{1F6A9}\u{1F34E}\u{1F34A}\u{1F47C}\u{1F48D}\u{1F4E3}\u{1F942}"),fh=ja.reduce((e,t,r)=>(e[r]=t,e),[]),uh=ja.reduce((e,t,r)=>{let n=t.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${t}`);return e[n]=r,e},[]);function hh(e){return e.reduce((t,r)=>(t+=fh[r],t),"")}function dh(e){let t=[];for(let r of e){let n=r.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${r}`);let o=uh[n];if(o==null)throw new Error(`Non-base256emoji character: ${r}`);t.push(o)}return new Uint8Array(t)}var lh=Ge({prefix:"\u{1F680}",name:"base256emoji",encode:hh,decode:dh});var rs={};z(rs,{base32:()=>Xe,base32hex:()=>yh,base32hexpad:()=>gh,base32hexpadupper:()=>wh,base32hexupper:()=>xh,base32pad:()=>mh,base32padupper:()=>bh,base32upper:()=>ph,base32z:()=>Eh});var Xe=W({prefix:"b",name:"base32",alphabet:"abcdefghijklmnopqrstuvwxyz234567",bitsPerChar:5}),ph=W({prefix:"B",name:"base32upper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",bitsPerChar:5}),mh=W({prefix:"c",name:"base32pad",alphabet:"abcdefghijklmnopqrstuvwxyz234567=",bitsPerChar:5}),bh=W({prefix:"C",name:"base32padupper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=",bitsPerChar:5}),yh=W({prefix:"v",name:"base32hex",alphabet:"0123456789abcdefghijklmnopqrstuv",bitsPerChar:5}),xh=W({prefix:"V",name:"base32hexupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV",bitsPerChar:5}),gh=W({prefix:"t",name:"base32hexpad",alphabet:"0123456789abcdefghijklmnopqrstuv=",bitsPerChar:5}),wh=W({prefix:"T",name:"base32hexpadupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV=",bitsPerChar:5}),Eh=W({prefix:"h",name:"base32z",alphabet:"ybndrfg8ejkmcpqxot1uwisza345h769",bitsPerChar:5});var ns={};z(ns,{base36:()=>_r,base36upper:()=>Sh});var _r=oe({prefix:"k",name:"base36",alphabet:"0123456789abcdefghijklmnopqrstuvwxyz"}),Sh=oe({prefix:"K",name:"base36upper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"});var os={};z(os,{base58btc:()=>Ut,base58flickr:()=>Ah});var Ut=oe({name:"base58btc",prefix:"z",alphabet:"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"}),Ah=oe({name:"base58flickr",prefix:"Z",alphabet:"123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"});var ss={};z(ss,{base64:()=>vh,base64pad:()=>Bh,base64url:()=>Ih,base64urlpad:()=>Th});var vh=W({prefix:"m",name:"base64",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",bitsPerChar:6}),Bh=W({prefix:"M",name:"base64pad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",bitsPerChar:6}),Ih=W({prefix:"u",name:"base64url",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_",bitsPerChar:6}),Th=W({prefix:"U",name:"base64urlpad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_=",bitsPerChar:6});var is={};z(is,{base8:()=>Lh});var Lh=W({prefix:"7",name:"base8",alphabet:"01234567",bitsPerChar:3});var as={};z(as,{identity:()=>_h});var _h=Ge({prefix:"\0",name:"identity",encode:e=>Ha(e),decode:e=>Ma(e)});var Qp=new TextEncoder,tm=new TextDecoder;var fs={};z(fs,{identity:()=>Jh});var Rh=Ya,Za=128,Uh=127,Kh=~Uh,Oh=Math.pow(2,31);function Ya(e,t,r){t=t||[],r=r||0;for(var n=r;e>=Oh;)t[r++]=e&255|Za,e/=128;for(;e&Kh;)t[r++]=e&255|Za,e>>>=7;return t[r]=e|0,Ya.bytes=r-n+1,t}var Fh=cs,kh=128,$a=127;function cs(e,n){var r=0,n=n||0,o=0,s=n,i,a=e.length;do{if(s>=a)throw cs.bytes=0,new RangeError("Could not decode varint");i=e[s++],r+=o<28?(i&$a)<<o:(i&$a)*Math.pow(2,o),o+=7}while(i>=kh);return cs.bytes=s-n,r}var Nh=Math.pow(2,7),Ph=Math.pow(2,14),Mh=Math.pow(2,21),Hh=Math.pow(2,28),qh=Math.pow(2,35),Vh=Math.pow(2,42),zh=Math.pow(2,49),jh=Math.pow(2,56),Zh=Math.pow(2,63),$h=function(e){return e<Nh?1:e<Ph?2:e<Mh?3:e<Hh?4:e<qh?5:e<Vh?6:e<zh?7:e<jh?8:e<Zh?9:10},Yh={encode:Rh,decode:Fh,encodingLength:$h},Gh=Yh,Dr=Gh;function Cr(e,t=0){return[Dr.decode(e,t),Dr.decode.bytes]}function We(e,t,r=0){return Dr.encode(e,t,r),t}function Je(e){return Dr.encodingLength(e)}function tr(e,t){let r=t.byteLength,n=Je(e),o=n+Je(r),s=new Uint8Array(o+r);return We(e,s,0),We(r,s,n),s.set(t,o),new Qe(e,r,t,s)}function Ga(e){let t=Vt(e),[r,n]=Cr(t),[o,s]=Cr(t.subarray(n)),i=t.subarray(n+s);if(i.byteLength!==o)throw new Error("Incorrect length");return new Qe(r,o,i,t)}function Xa(e,t){if(e===t)return!0;{let r=t;return e.code===r.code&&e.size===r.size&&r.bytes instanceof Uint8Array&&Pa(e.bytes,r.bytes)}}var Qe=class{code;size;digest;bytes;constructor(t,r,n,o){this.code=t,this.size=r,this.digest=n,this.bytes=o}};var Wa=0,Xh="identity",Ja=Vt;function Wh(e,t){if(t?.truncate!=null&&t.truncate!==e.byteLength){if(t.truncate<0||t.truncate>e.byteLength)throw new Error(`Invalid truncate option, must be less than or equal to ${e.byteLength}`);e=e.subarray(0,t.truncate)}return tr(Wa,Ja(e))}var Jh={code:Wa,name:Xh,encode:Ja,digest:Wh};var ds={};z(ds,{sha256:()=>td,sha512:()=>ed});var Qh=20;function hs({name:e,code:t,encode:r,minDigestLength:n,maxDigestLength:o}){return new us(e,t,r,n,o)}var us=class{name;code;encode;minDigestLength;maxDigestLength;constructor(t,r,n,o,s){this.name=t,this.code=r,this.encode=n,this.minDigestLength=o??Qh,this.maxDigestLength=s}digest(t,r){if(r?.truncate!=null){if(r.truncate<this.minDigestLength)throw new Error(`Invalid truncate option, must be greater than or equal to ${this.minDigestLength}`);if(this.maxDigestLength!=null&&r.truncate>this.maxDigestLength)throw new Error(`Invalid truncate option, must be less than or equal to ${this.maxDigestLength}`)}if(t instanceof Uint8Array){let n=this.encode(t);return n instanceof Uint8Array?Qa(n,this.code,r?.truncate):n.then(o=>Qa(o,this.code,r?.truncate))}else throw Error("Unknown type, must be binary type")}};function Qa(e,t,r){if(r!=null&&r!==e.byteLength){if(r>e.byteLength)throw new Error(`Invalid truncate option, must be less than or equal to ${e.byteLength}`);e=e.subarray(0,r)}return tr(t,e)}function ec(e){return async t=>new Uint8Array(await crypto.subtle.digest(e,t))}var td=hs({name:"sha2-256",code:18,encode:ec("SHA-256")}),ed=hs({name:"sha2-512",code:19,encode:ec("SHA-512")});function rc(e,t){let{bytes:r,version:n}=e;return n===0?nd(r,ls(e),t??Ut.encoder):od(r,ls(e),t??Xe.encoder)}var nc=new WeakMap;function ls(e){let t=nc.get(e);if(t==null){let r=new Map;return nc.set(e,r),r}return t}var gn=class e{code;version;multihash;bytes;"/";constructor(t,r,n,o){this.code=r,this.version=t,this.multihash=n,this.bytes=o,this["/"]=o}get asCID(){return this}get byteOffset(){return this.bytes.byteOffset}get byteLength(){return this.bytes.byteLength}toV0(){switch(this.version){case 0:return this;case 1:{let{code:t,multihash:r}=this;if(t!==Ur)throw new Error("Cannot convert a non dag-pb CID to CIDv0");if(r.code!==sd)throw new Error("Cannot convert non sha2-256 multihash CID to CIDv0");return e.createV0(r)}default:throw Error(`Can not convert CID version ${this.version} to version 0. This is a bug please report`)}}toV1(){switch(this.version){case 0:{let{code:t,digest:r}=this.multihash,n=tr(t,r);return e.createV1(this.code,n)}case 1:return this;default:throw Error(`Can not convert CID version ${this.version} to version 1. This is a bug please report`)}}equals(t){return e.equals(this,t)}static equals(t,r){let n=r;return n!=null&&t.code===n.code&&t.version===n.version&&Xa(t.multihash,n.multihash)}toString(t){return rc(this,t)}toJSON(){return{"/":rc(this)}}link(){return this}[Symbol.toStringTag]="CID";[Symbol.for("nodejs.util.inspect.custom")](){return`CID(${this.toString()})`}static asCID(t){if(t==null)return null;let r=t;if(r instanceof e)return r;if(r["/"]!=null&&r["/"]===r.bytes||r.asCID===r){let{version:n,code:o,multihash:s,bytes:i}=r;return new e(n,o,s,i??oc(n,o,s.bytes))}else if(r[id]===!0){let{version:n,multihash:o,code:s}=r,i=Ga(o);return e.create(n,s,i)}else return null}static create(t,r,n){if(typeof r!="number")throw new Error("String codecs are no longer supported");if(!(n.bytes instanceof Uint8Array))throw new Error("Invalid digest");switch(t){case 0:{if(r!==Ur)throw new Error(`Version 0 CID must use dag-pb (code: ${Ur}) block encoding`);return new e(t,r,n,n.bytes)}case 1:{let o=oc(t,r,n.bytes);return new e(t,r,n,o)}default:throw new Error("Invalid version")}}static createV0(t){return e.create(0,Ur,t)}static createV1(t,r){return e.create(1,t,r)}static decode(t){let[r,n]=e.decodeFirst(t);if(n.length!==0)throw new Error("Incorrect length");return r}static decodeFirst(t){let r=e.inspectBytes(t),n=r.size-r.multihashSize,o=Vt(t.subarray(n,n+r.multihashSize));if(o.byteLength!==r.multihashSize)throw new Error("Incorrect length");let s=o.subarray(r.multihashSize-r.digestSize),i=new Qe(r.multihashCode,r.digestSize,s,o);return[r.version===0?e.createV0(i):e.createV1(r.codec,i),t.subarray(r.size)]}static inspectBytes(t){let r=0,n=()=>{let[h,y]=Cr(t.subarray(r));return r+=y,h},o=n(),s=Ur;if(o===18?(o=0,r=0):s=n(),o!==0&&o!==1)throw new RangeError(`Invalid CID version ${o}`);let i=r,a=n(),f=n(),c=r+f,u=c-i;return{version:o,codec:s,multihashCode:a,digestSize:f,multihashSize:u,size:c}}static parse(t,r){let[n,o]=rd(t,r),s=e.decode(o);if(s.version===0&&t[0]!=="Q")throw Error("Version 0 CID string must not include multibase prefix");return ls(s).set(n,t),s}};function rd(e,t){switch(e[0]){case"Q":{let r=t??Ut;return[Ut.prefix,r.decode(`${Ut.prefix}${e}`)]}case Ut.prefix:{let r=t??Ut;return[Ut.prefix,r.decode(e)]}case Xe.prefix:{let r=t??Xe;return[Xe.prefix,r.decode(e)]}case _r.prefix:{let r=t??_r;return[_r.prefix,r.decode(e)]}default:{if(t==null)throw Error("To parse non base32, base36 or base58btc encoded CID multibase decoder must be provided");return[e[0],t.decode(e)]}}}function nd(e,t,r){let{prefix:n}=r;if(n!==Ut.prefix)throw Error(`Cannot string encode V0 in ${r.name} encoding`);let o=t.get(n);if(o==null){let s=r.encode(e).slice(1);return t.set(n,s),s}else return o}function od(e,t,r){let{prefix:n}=r,o=t.get(n);if(o==null){let s=r.encode(e);return t.set(n,s),s}else return o}var Ur=112,sd=18;function oc(e,t,r){let n=Je(e),o=n+Je(t),s=new Uint8Array(o+r.byteLength);return We(e,s,0),We(t,s,n),s.set(r,o),s}var id=Symbol.for("@ipld/js-cid/CID");var ps={...as,...ts,...is,...Jo,...Qo,...rs,...ns,...os,...ss,...es},Sm={...ds,...fs};function ic(e,t,r,n){return{name:e,prefix:t,encoder:{name:e,prefix:t,encode:r},decoder:{decode:n}}}var sc=ic("utf8","u",e=>"u"+new TextDecoder("utf8").decode(e),e=>new TextEncoder().encode(e.substring(1))),ms=ic("ascii","a",e=>{let t="a";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return t},e=>{e=e.substring(1);let t=ee(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}),ad={utf8:sc,"utf-8":sc,hex:ps.base16,latin1:ms,ascii:ms,binary:ms,...ps},ac=ad;function cc(e,t="utf8"){let r=ac[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.decoder.decode(`${r.prefix}${e}`)}function bs(e){let t=e??8192,r=t>>>1,n,o=t;return function(i){if(i<1||i>r)return ee(i);o+i>t&&(n=ee(t),o=0);let a=n.subarray(o,o+=i);return(o&7)!==0&&(o=(o|7)+1),a}}var Se=class{fn;len;next;val;constructor(t,r,n){this.fn=t,this.len=r,this.next=void 0,this.val=n}};function ys(){}var gs=class{head;tail;len;next;constructor(t){this.head=t.head,this.tail=t.tail,this.len=t.len,this.next=t.states}},cd=bs();function fd(e){return globalThis.Buffer!=null?ee(e):cd(e)}var Or=class{len;head;tail;states;constructor(){this.len=0,this.head=new Se(ys,0,0),this.tail=this.head,this.states=null}_push(t,r,n){return this.tail=this.tail.next=new Se(t,r,n),this.len+=r,this}uint32(t){return this.len+=(this.tail=this.tail.next=new ws((t=t>>>0)<128?1:t<16384?2:t<2097152?3:t<268435456?4:5,t)).len,this}int32(t){return t<0?this._push(wn,10,gt.fromNumber(t)):this.uint32(t)}sint32(t){return this.uint32((t<<1^t>>31)>>>0)}uint64(t){let r=gt.fromBigInt(t);return this._push(wn,r.length(),r)}uint64Number(t){return this._push(_a,Tr(t),t)}uint64String(t){return this.uint64(BigInt(t))}int64(t){return this.uint64(t)}int64Number(t){return this.uint64Number(t)}int64String(t){return this.uint64String(t)}sint64(t){let r=gt.fromBigInt(t).zzEncode();return this._push(wn,r.length(),r)}sint64Number(t){let r=gt.fromNumber(t).zzEncode();return this._push(wn,r.length(),r)}sint64String(t){return this.sint64(BigInt(t))}bool(t){return this._push(xs,1,t?1:0)}fixed32(t){return this._push(Kr,4,t>>>0)}sfixed32(t){return this.fixed32(t)}fixed64(t){let r=gt.fromBigInt(t);return this._push(Kr,4,r.lo)._push(Kr,4,r.hi)}fixed64Number(t){let r=gt.fromNumber(t);return this._push(Kr,4,r.lo)._push(Kr,4,r.hi)}fixed64String(t){return this.fixed64(BigInt(t))}sfixed64(t){return this.fixed64(t)}sfixed64Number(t){return this.fixed64Number(t)}sfixed64String(t){return this.fixed64String(t)}float(t){return this._push(Ca,4,t)}double(t){return this._push(Ua,8,t)}bytes(t){let r=t.length>>>0;return r===0?this._push(xs,1,0):this.uint32(r)._push(hd,r,t)}string(t){let r=Fa(t);return r!==0?this.uint32(r)._push(Zo,r,t):this._push(xs,1,0)}fork(){return this.states=new gs(this),this.head=this.tail=new Se(ys,0,0),this.len=0,this}reset(){return this.states!=null?(this.head=this.states.head,this.tail=this.states.tail,this.len=this.states.len,this.states=this.states.next):(this.head=this.tail=new Se(ys,0,0),this.len=0),this}ldelim(){let t=this.head,r=this.tail,n=this.len;return this.reset().uint32(n),n!==0&&(this.tail.next=t.next,this.tail=r,this.len+=n),this}finish(){let t=this.head.next,r=fd(this.len),n=0;for(;t!=null;)t.fn(t.val,r,n),n+=t.len,t=t.next;return r}};function xs(e,t,r){t[r]=e&255}function ud(e,t,r){for(;e>127;)t[r++]=e&127|128,e>>>=7;t[r]=e}var ws=class extends Se{next;constructor(t,r){super(ud,t,r),this.next=void 0}};function wn(e,t,r){for(;e.hi!==0;)t[r++]=e.lo&127|128,e.lo=(e.lo>>>7|e.hi<<25)>>>0,e.hi>>>=7;for(;e.lo>127;)t[r++]=e.lo&127|128,e.lo=e.lo>>>7;t[r++]=e.lo}function Kr(e,t,r){t[r]=e&255,t[r+1]=e>>>8&255,t[r+2]=e>>>16&255,t[r+3]=e>>>24}function hd(e,t,r){t.set(e,r)}globalThis.Buffer!=null&&(Or.prototype.bytes=function(e){let t=e.length>>>0;return this.uint32(t),t>0&&this._push(dd,t,e),this},Or.prototype.string=function(e){let t=globalThis.Buffer.byteLength(e);return this.uint32(t),t>0&&this._push(ld,t,e),this});function dd(e,t,r){t.set(e,r)}function ld(e,t,r){e.length<40?Zo(e,t,r):t.utf8Write!=null?t.utf8Write(e,r):t.set(cc(e),r)}function Es(){return new Or}function En(e,t){let r=Es();return t.encode(e,r,{lengthDelimited:!1}),r.finish()}function*Sn(e,t,r){let n=Lr(e);yield*t.stream(n,void 0,"$",r)}var An={VARINT:0,BIT64:1,LENGTH_DELIMITED:2,START_GROUP:3,END_GROUP:4,BIT32:5};function vn(e,t,r,n,o){return{name:e,type:t,encode:r,decode:n,stream:o}}function Ss(e){function t(s){if(e[s.toString()]==null)throw new Error("Invalid enum value");return e[s]}let r=function(i,a){let f=t(i);a.int32(f)},n=function(i){let a=i.int32();return t(a)},o=function*(i){let a=i.int32();yield t(a)};return vn("enum",An.VARINT,r,n,o)}function Bn(e,t,r){return vn("message",An.LENGTH_DELIMITED,e,t,r)}var j;(function(e){e.RSA="RSA",e.Ed25519="Ed25519",e.secp256k1="secp256k1",e.ECDSA="ECDSA"})(j||(j={}));var As;(function(e){e[e.RSA=0]="RSA",e[e.Ed25519=1]="Ed25519",e[e.secp256k1=2]="secp256k1",e[e.ECDSA=3]="ECDSA"})(As||(As={}));(function(e){e.codec=()=>Ss(As)})(j||(j={}));var Kt;(function(e){let t;e.codec=()=>(t==null&&(t=Bn((s,i,a={})=>{a.lengthDelimited!==!1&&i.fork(),s.Type!=null&&(i.uint32(8),j.codec().encode(s.Type,i)),s.Data!=null&&(i.uint32(18),i.bytes(s.Data)),a.lengthDelimited!==!1&&i.ldelim()},(s,i,a={})=>{let f={},c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{f.Type=j.codec().decode(s);break}case 2:{f.Data=s.bytes();break}default:{s.skipType(u&7);break}}}return f},function*(s,i,a,f={}){let c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{yield{field:`${a}.Type`,value:j.codec().decode(s)};break}case 2:{yield{field:`${a}.Data`,value:s.bytes()};break}default:{s.skipType(u&7);break}}}})),t);function r(s){return En(s,e.codec())}e.encode=r;function n(s,i){return yn(s,e.codec(),i)}e.decode=n;function o(s,i){return Sn(s,e.codec(),i)}e.stream=o})(Kt||(Kt={}));var Fr;(function(e){let t;e.codec=()=>(t==null&&(t=Bn((s,i,a={})=>{a.lengthDelimited!==!1&&i.fork(),s.Type!=null&&(i.uint32(8),j.codec().encode(s.Type,i)),s.Data!=null&&(i.uint32(18),i.bytes(s.Data)),a.lengthDelimited!==!1&&i.ldelim()},(s,i,a={})=>{let f={},c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{f.Type=j.codec().decode(s);break}case 2:{f.Data=s.bytes();break}default:{s.skipType(u&7);break}}}return f},function*(s,i,a,f={}){let c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{yield{field:`${a}.Type`,value:j.codec().decode(s)};break}case 2:{yield{field:`${a}.Data`,value:s.bytes()};break}default:{s.skipType(u&7);break}}}})),t);function r(s){return En(s,e.codec())}e.encode=r;function n(s,i){return yn(s,e.codec(),i)}e.decode=n;function o(s,i){return Sn(s,e.codec(),i)}e.stream=o})(Fr||(Fr={}));function vs(e){if(isNaN(e)||e<=0)throw new k("random bytes length must be a Number bigger than 0");return tn(e)}var Nr={};z(Nr,{MAX_RSA_KEY_SIZE:()=>Bs,generateRSAKeyPair:()=>Rs,jwkToJWKKeyPair:()=>dc,jwkToPkcs1:()=>yd,jwkToPkix:()=>_s,jwkToRSAPrivateKey:()=>Ln,pkcs1MessageToJwk:()=>Ts,pkcs1MessageToRSAPrivateKey:()=>In,pkcs1ToJwk:()=>bd,pkcs1ToRSAPrivateKey:()=>Ds,pkixMessageToJwk:()=>Ls,pkixMessageToRSAPublicKey:()=>Tn,pkixToJwk:()=>xd,pkixToRSAPublicKey:()=>Cs});var er=class{type="RSA";jwk;_raw;_multihash;constructor(t,r){this.jwk=t,this._multihash=r}get raw(){return this._raw==null&&(this._raw=Nr.jwkToPkix(this.jwk)),this._raw}toMultihash(){return this._multihash}toCID(){return wt.createV1(114,this._multihash)}toString(){return ot.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}verify(t,r,n){return hc(this.jwk,r,t,n)}},kr=class{type="RSA";jwk;_raw;publicKey;constructor(t,r){this.jwk=t,this.publicKey=r}get raw(){return this._raw==null&&(this._raw=Nr.jwkToPkcs1(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}sign(t,r){return uc(this.jwk,t,r)}};var Bs=8192,Is=18,pd=1062,md=Uint8Array.from([48,13,6,9,42,134,72,134,247,13,1,1,1,5,0]);function bd(e){let t=yt(e);return Ts(t)}function Ts(e){return{n:H(e[1],"base64url"),e:H(e[2],"base64url"),d:H(e[3],"base64url"),p:H(e[4],"base64url"),q:H(e[5],"base64url"),dp:H(e[6],"base64url"),dq:H(e[7],"base64url"),qi:H(e[8],"base64url"),kty:"RSA"}}function yd(e){if(e.n==null||e.e==null||e.d==null||e.p==null||e.q==null||e.dp==null||e.dq==null||e.qi==null)throw new k("JWK was missing components");return St([ht(Uint8Array.from([0])),ht(Y(e.n,"base64url")),ht(Y(e.e,"base64url")),ht(Y(e.d,"base64url")),ht(Y(e.p,"base64url")),ht(Y(e.q,"base64url")),ht(Y(e.dp,"base64url")),ht(Y(e.dq,"base64url")),ht(Y(e.qi,"base64url"))]).subarray()}function xd(e){let t=yt(e,{offset:0});return Ls(t)}function Ls(e){let t=yt(e[1],{offset:0});return{kty:"RSA",n:H(t[0],"base64url"),e:H(t[1],"base64url")}}function _s(e){if(e.n==null||e.e==null)throw new k("JWK was missing components");return St([md,pr(St([ht(Y(e.n,"base64url")),ht(Y(e.e,"base64url"))]))]).subarray()}function Ds(e){let t=yt(e);return In(t)}function In(e){let t=Ts(e);return Ln(t)}function Cs(e,t){if(e.byteLength>=pd)throw new ve("Key size is too large");let r=yt(e,{offset:0});return Tn(r,e,t)}function Tn(e,t,r){let n=Ls(e);if(r==null){let o=Gt(Kt.encode({Type:j.RSA,Data:t}));r=Dt(Is,o)}return new er(n,r)}function Ln(e){if(pc(e)>Bs)throw new k("Key size is too large");let t=dc(e),r=Gt(Kt.encode({Type:j.RSA,Data:_s(t.publicKey)})),n=Dt(Is,r);return new kr(t.privateKey,new er(t.publicKey,n))}async function Rs(e){if(e>Bs)throw new k("Key size is too large");let t=await lc(e),r=Gt(Kt.encode({Type:j.RSA,Data:_s(t.publicKey)})),n=Dt(Is,r);return new kr(t.privateKey,new er(t.publicKey,n))}function dc(e){if(e==null)throw new k("Missing key parameter");return{privateKey:e,publicKey:{kty:e.kty,n:e.n,e:e.e}}}var mc="1.2.840.113549.1.1.1";async function lc(e,t){let r=await $.get().subtle.generateKey({name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:new Uint8Array([1,0,1]),hash:{name:"SHA-256"}},!0,["sign","verify"]);t?.signal?.throwIfAborted();let n=await gd(r,t);return{privateKey:n[0],publicKey:n[1]}}async function uc(e,t,r){let n=await $.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["sign"]);r?.signal?.throwIfAborted();let o=await $.get().subtle.sign({name:"RSASSA-PKCS1-v1_5"},n,ft(t instanceof Uint8Array?t:t.subarray()));return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function hc(e,t,r,n){let o=await $.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["verify"]);n?.signal?.throwIfAborted();let s=await $.get().subtle.verify({name:"RSASSA-PKCS1-v1_5"},o,ft(t),ft(r instanceof Uint8Array?r:r.subarray()));return n?.signal?.throwIfAborted(),s}async function gd(e,t){if(e.privateKey==null||e.publicKey==null)throw new k("Private and public key are required");let r=await Promise.all([$.get().subtle.exportKey("jwk",e.privateKey),$.get().subtle.exportKey("jwk",e.publicKey)]);return t?.signal?.throwIfAborted(),r}function pc(e){if(e.kty!=="RSA")throw new k("invalid key type");if(e.n==null)throw new k("invalid key modulus");return Y(e.n,"base64url").length*8}var _n=class{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(t,r){if(Ue(t),mt(r,void 0,"key"),this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,o=new Uint8Array(n);o.set(r.length>n?t.create().update(r).digest():r);for(let s=0;s<o.length;s++)o[s]^=54;this.iHash.update(o),this.oHash=t.create();for(let s=0;s<o.length;s++)o[s]^=106;this.oHash.update(o),bt(o)}update(t){return Ke(this),this.iHash.update(t),this}digestInto(t){Ke(this),Wr(t,this),this.finished=!0;let r=t.subarray(0,this.outputLen);this.iHash.digestInto(r),this.oHash.update(r),this.oHash.digestInto(r),this.destroy()}digest(){let t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||=Object.create(Object.getPrototypeOf(this),{});let{oHash:r,iHash:n,finished:o,destroyed:s,blockLen:i,outputLen:a}=this;return t=t,t.finished=o,t.destroyed=s,t.blockLen=i,t.outputLen=a,t.oHash=r._cloneInto(t.oHash),t.iHash=n._cloneInto(t.iHash),t}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},Dn=(()=>{let e=((t,r,n)=>new _n(t,r).update(n).digest());return e.create=(t,r)=>new _n(t,r),e})();var bc=(e,t)=>(e+(e>=0?t:-t)/yc)/t;function wd(e,t,r){Pe("scalar",e,Ot,r);let[[n,o],[s,i]]=t,a=bc(i*e,r),f=bc(-o*e,r),c=e-a*n-f*s,u=-a*o-f*i,h=c<Ot,y=u<Ot;h&&(c=-c),y&&(u=-u);let m=Sr(Math.ceil(Me(r)/2))+se;if(c<Ot||c>=m||u<Ot||u>=m)throw new Error("splitScalar (endomorphism): failed for k");return{k1neg:h,k1:c,k2neg:y,k2:u}}function Ks(e){if(!["compact","recovered","der"].includes(e))throw new Error('Signature format must be "compact", "recovered", or "der"');return e}function Us(e,t){It(e);let r={};for(let n of Object.keys(t))r[n]=e[n]===void 0?t[n]:e[n];return vt(r.lowS,"lowS"),vt(r.prehash,"prehash"),r.format!==void 0&&Ks(r.format),r}var Os=class extends Error{constructor(t=""){super(t)}},Lt={Err:Os,_tlv:{encode:(e,t)=>{let{Err:r}=Lt;if(Bt(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!="string")throw new TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let n=t.length/2,o=wr(n);if(o.length/2&128)throw new r("tlv.encode: long form length too big");let s=n>127?wr(o.length/2|128):"";return wr(e)+s+o+t},decode(e,t){let{Err:r}=Lt;t=M(t,void 0,"DER data");let n=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");let o=t[n++],s=!!(o&128),i=0;if(!s)i=o;else{let f=o&127;if(!f)throw new r("tlv.decode(long): indefinite length not supported");if(f>4)throw new r("tlv.decode(long): byte length is too big");let c=t.subarray(n,n+f);if(c.length!==f)throw new r("tlv.decode: length bytes not complete");if(c[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of c)i=i<<8|u;if(n+=f,i<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(n,n+i);if(a.length!==i)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+i)}}},_int:{encode(e){let{Err:t}=Lt;if(an(e),e<Ot)throw new t("integer: negative integers are not allowed");let r=wr(e);if(Number.parseInt(r[0],16)&8&&(r="00"+r),r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Lt;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return me(e)}},toSig(e){let{Err:t,_int:r,_tlv:n}=Lt,o=M(e,void 0,"signature"),{v:s,l:i}=n.decode(48,o);if(i.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:f}=n.decode(2,s),{v:c,l:u}=n.decode(2,f);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(c)}},hexFromSig(e){let{_tlv:t,_int:r}=Lt,n=t.encode(2,r.encode(e.r)),o=t.encode(2,r.encode(e.s)),s=n+o;return t.encode(48,s)}};Object.freeze(Lt._tlv);Object.freeze(Lt._int);Object.freeze(Lt);var Ot=BigInt(0),se=BigInt(1),yc=BigInt(2),Cn=BigInt(3),Ed=BigInt(4);function xc(e,t={}){let r=hn("weierstrass",e,t),n=r.Fp,o=r.Fn,s=r.CURVE,{h:i,n:a}=s;It(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:f,allowInfinityPoint:c}=t;if(f&&(!n.is0(s.a)||typeof f.beta!="bigint"||!Array.isArray(f.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');let u=wc(n,o);function h(){if(!n.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function y(F,d,g){if(c&&d.is0())return Uint8Array.of(0);let{x:v,y:S}=d.toAffine(),w=n.toBytes(v);if(vt(g,"isCompressed"),g){h();let B=!n.isOdd(S);return et(gc(B),w)}else return et(Uint8Array.of(4),w,n.toBytes(S))}function m(F){M(F,void 0,"Point");let{publicKey:d,publicKeyUncompressed:g}=u,v=F.length,S=F[0],w=F.subarray(1);if(c&&v===1&&S===0)return{x:n.ZERO,y:n.ZERO};if(v===d&&(S===2||S===3)){let B=n.fromBytes(w);if(!n.isValid(B))throw new Error("bad point: is not on curve, wrong x");let D=p(B),_;try{_=n.sqrt(D)}catch(P){let q=P instanceof Error?": "+P.message:"";throw new Error("bad point: is not on curve, sqrt error"+q)}h();let R=n.isOdd(_);return(S&1)===1!==R&&(_=n.neg(_)),{x:B,y:_}}else if(v===g&&S===4){let B=n.BYTES,D=n.fromBytes(w.subarray(0,B)),_=n.fromBytes(w.subarray(B,B*2));if(!b(D,_))throw new Error("bad point: is not on curve");return{x:D,y:_}}else throw new Error(`bad point: got length ${v}, expected compressed=${d} or uncompressed=${g}`)}let l=t.toBytes===void 0?y:t.toBytes,x=t.fromBytes===void 0?m:t.fromBytes;function p(F){let d=n.sqr(F),g=n.mul(d,F);return n.add(n.add(g,n.mul(F,s.a)),s.b)}function b(F,d){let g=n.sqr(d),v=p(F);return n.eql(g,v)}if(!b(s.Gx,s.Gy))throw new Error("bad curve params: generator point");let E=n.mul(n.pow(s.a,Cn),Ed),A=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(E,A)))throw new Error("bad curve params: a or b");function L(F,d,g=!1){if(!n.isValid(d)||g&&n.is0(d))throw new Error(`bad point coordinate ${F}`);return d}function T(F){if(!(F instanceof I))throw new Error("Weierstrass Point expected")}function U(F){if(!f||!f.basises)throw new Error("no endo");return wd(F,f.basises,o.ORDER)}function C(F,d,g,v,S){return g=new I(n.mul(g.X,F),g.Y,g.Z),d=vr(v,d),g=vr(S,g),d.add(g)}class I{static BASE=new I(s.Gx,s.Gy,n.ONE);static ZERO=new I(n.ZERO,n.ONE,n.ZERO);static Fp=n;static Fn=o;X;Y;Z;constructor(d,g,v){this.X=L("x",d),this.Y=L("y",g,!0),this.Z=L("z",v),Object.freeze(this)}static CURVE(){return s}static fromAffine(d){let{x:g,y:v}=d||{};if(!d||!n.isValid(g)||!n.isValid(v))throw new Error("invalid affine point");if(d instanceof I)throw new Error("projective point not allowed");return n.is0(g)&&n.is0(v)?I.ZERO:new I(g,v,n.ONE)}static fromBytes(d){let g=I.fromAffine(x(M(d,void 0,"point")));return g.assertValidity(),g}static fromHex(d){return I.fromBytes(Ne(d))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(d=8,g=!0){return V.createCache(this,d),g||this.multiply(Cn),this}assertValidity(){let d=this;if(d.is0()){if(t.allowInfinityPoint&&n.is0(d.X)&&n.eql(d.Y,n.ONE)&&n.is0(d.Z))return;throw new Error("bad point: ZERO")}let{x:g,y:v}=d.toAffine();if(!n.isValid(g)||!n.isValid(v))throw new Error("bad point: x or y not field elements");if(!b(g,v))throw new Error("bad point: equation left != right");if(!d.isTorsionFree())throw new Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:d}=this.toAffine();if(!n.isOdd)throw new Error("Field doesn't support isOdd");return!n.isOdd(d)}equals(d){T(d);let{X:g,Y:v,Z:S}=this,{X:w,Y:B,Z:D}=d,_=n.eql(n.mul(g,D),n.mul(w,S)),R=n.eql(n.mul(v,D),n.mul(B,S));return _&&R}negate(){return new I(this.X,n.neg(this.Y),this.Z)}double(){let{a:d,b:g}=s,v=n.mul(g,Cn),{X:S,Y:w,Z:B}=this,D=n.ZERO,_=n.ZERO,R=n.ZERO,K=n.mul(S,S),P=n.mul(w,w),q=n.mul(B,B),N=n.mul(S,w);return N=n.add(N,N),R=n.mul(S,B),R=n.add(R,R),D=n.mul(d,R),_=n.mul(v,q),_=n.add(D,_),D=n.sub(P,_),_=n.add(P,_),_=n.mul(D,_),D=n.mul(N,D),R=n.mul(v,R),q=n.mul(d,q),N=n.sub(K,q),N=n.mul(d,N),N=n.add(N,R),R=n.add(K,K),K=n.add(R,K),K=n.add(K,q),K=n.mul(K,N),_=n.add(_,K),q=n.mul(w,B),q=n.add(q,q),K=n.mul(q,N),D=n.sub(D,K),R=n.mul(q,P),R=n.add(R,R),R=n.add(R,R),new I(D,_,R)}add(d){T(d);let{X:g,Y:v,Z:S}=this,{X:w,Y:B,Z:D}=d,_=n.ZERO,R=n.ZERO,K=n.ZERO,P=s.a,q=n.mul(s.b,Cn),N=n.mul(g,w),tt=n.mul(v,B),rt=n.mul(S,D),nt=n.add(g,v),J=n.add(w,B);nt=n.mul(nt,J),J=n.add(N,tt),nt=n.sub(nt,J),J=n.add(g,S);let lt=n.add(w,D);return J=n.mul(J,lt),lt=n.add(N,rt),J=n.sub(J,lt),lt=n.add(v,S),_=n.add(B,D),lt=n.mul(lt,_),_=n.add(tt,rt),lt=n.sub(lt,_),K=n.mul(P,J),_=n.mul(q,rt),K=n.add(_,K),_=n.sub(tt,K),K=n.add(tt,K),R=n.mul(_,K),tt=n.add(N,N),tt=n.add(tt,N),rt=n.mul(P,rt),J=n.mul(q,J),tt=n.add(tt,rt),rt=n.sub(N,rt),rt=n.mul(P,rt),J=n.add(J,rt),N=n.mul(tt,J),R=n.add(R,N),N=n.mul(lt,J),_=n.mul(nt,_),_=n.sub(_,N),N=n.mul(nt,tt),K=n.mul(lt,K),K=n.add(K,N),new I(_,R,K)}subtract(d){return T(d),this.add(d.negate())}is0(){return this.equals(I.ZERO)}multiply(d){let{endo:g}=t;if(!o.isValidNot0(d))throw new RangeError("invalid scalar: out of range");let v,S,w=B=>V.cached(this,B,D=>xe(I,D));if(g){let{k1neg:B,k1:D,k2neg:_,k2:R}=U(d),{p:K,f:P}=w(D),{p:q,f:N}=w(R);S=P.add(N),v=C(g.beta,K,q,B,_)}else{let{p:B,f:D}=w(d);v=B,S=D}return xe(I,[v,S])[0]}multiplyUnsafe(d){let{endo:g}=t,v=this,S=d;if(!o.isValid(S))throw new RangeError("invalid scalar: out of range");if(S===Ot||v.is0())return I.ZERO;if(S===se)return v;if(V.hasCache(this))return this.multiply(S);if(g){let{k1neg:w,k1:B,k2neg:D,k2:_}=U(S),{p1:R,p2:K}=aa(I,v,B,_);return C(g.beta,R,K,w,D)}else return V.unsafe(v,S)}toAffine(d){let g=this,v=d,{X:S,Y:w,Z:B}=g;if(n.eql(B,n.ONE))return{x:S,y:w};let D=g.is0();v==null&&(v=D?n.ONE:n.inv(B));let _=n.mul(S,v),R=n.mul(w,v),K=n.mul(B,v);if(D)return{x:n.ZERO,y:n.ZERO};if(!n.eql(K,n.ONE))throw new Error("invZ was invalid");return{x:_,y:R}}isTorsionFree(){let{isTorsionFree:d}=t;return i===se?!0:d?d(I,this):V.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:d}=t;return i===se?this:d?d(I,this):this.multiplyUnsafe(i)}isSmallOrder(){return i===se?this.is0():this.clearCofactor().is0()}toBytes(d=!0){return vt(d,"isCompressed"),this.assertValidity(),l(I,this,d)}toHex(d=!0){return ke(this.toBytes(d))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let O=o.BITS,V=new Ve(I,t.endo?Math.ceil(O/2):O);return O>=8&&I.BASE.precompute(8),Object.freeze(I.prototype),Object.freeze(I),I}function gc(e){return Uint8Array.of(e?2:3)}function wc(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function Sd(e,t={}){let{Fn:r}=e,n=t.randomBytes===void 0?gr:t.randomBytes,o=Object.assign(wc(e.Fp,r),{seed:Math.max(Do(r.ORDER),16)});function s(m){try{let l=r.fromBytes(m);return r.isValidNot0(l)}catch{return!1}}function i(m,l){let{publicKey:x,publicKeyUncompressed:p}=o;try{let b=m.length;return l===!0&&b!==x||l===!1&&b!==p?!1:!!e.fromBytes(m)}catch{return!1}}function a(m){return m=m===void 0?n(o.seed):m,Co(M(m,o.seed,"seed"),r.ORDER)}function f(m,l=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(l)}function c(m){let{secretKey:l,publicKey:x,publicKeyUncompressed:p}=o,b=r._lengths;if(!pe(m))return;let E=M(m,void 0,"key").length,A=E===x||E===p,L=E===l||!!b?.includes(E);if(!(A&&L))return A}function u(m,l,x=!0){if(c(m)===!0)throw new Error("first arg must be private key");if(c(l)===!1)throw new Error("second arg must be public key");let p=r.fromBytes(m);return e.fromBytes(l).multiply(p).toBytes(x)}let h={isValidSecretKey:s,isValidPublicKey:i,randomSecretKey:a},y=dn(a,f);return Object.freeze(h),Object.freeze(o),Object.freeze({getPublicKey:f,getSharedSecret:u,keygen:y,Point:e,utils:h,lengths:o})}function Ec(e,t,r={}){let n=t;Ue(n),It(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let o=r.randomBytes===void 0?gr:r.randomBytes,s=r.hmac===void 0?(S,w)=>Dn(n,S,w):r.hmac,{Fp:i,Fn:a}=e,{ORDER:f,BITS:c}=a,{keygen:u,getPublicKey:h,getSharedSecret:y,utils:m,lengths:l}=Sd(e,r),x={prehash:!0,lowS:typeof r.lowS=="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},p=f*yc+se<i.ORDER;function b(S){let w=f>>se;return S>w}function E(S,w){if(!a.isValidNot0(w))throw new Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return w}function A(){if(p)throw new Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(S,w){Ks(w);let B=l.signature,D=w==="compact"?B:w==="recovered"?B+1:void 0;return M(S,D)}class T{r;s;recovery;constructor(w,B,D){if(this.r=E("r",w),this.s=E("s",B),D!=null){if(A(),![0,1,2,3].includes(D))throw new Error("invalid recovery id");this.recovery=D}Object.freeze(this)}static fromBytes(w,B=x.format){L(w,B);let D;if(B==="der"){let{r:P,s:q}=Lt.toSig(M(w));return new T(P,q)}B==="recovered"&&(D=w[0],B="compact",w=w.subarray(1));let _=l.signature/2,R=w.subarray(0,_),K=w.subarray(_,_*2);return new T(a.fromBytes(R),a.fromBytes(K),D)}static fromHex(w,B){return this.fromBytes(Ne(w),B)}assertRecovery(){let{recovery:w}=this;if(w==null)throw new Error("invalid recovery id: must be present");return w}addRecoveryBit(w){return new T(this.r,this.s,w)}recoverPublicKey(w){let{r:B,s:D}=this,_=this.assertRecovery(),R=_===2||_===3?B+f:B;if(!i.isValid(R))throw new Error("invalid recovery id: sig.r+curve.n != R.x");let K=i.toBytes(R),P=e.fromBytes(et(gc((_&1)===0),K)),q=a.inv(R),N=C(M(w,void 0,"msgHash")),tt=a.create(-N*q),rt=a.create(D*q),nt=e.BASE.multiplyUnsafe(tt).add(P.multiplyUnsafe(rt));if(nt.is0())throw new Error("invalid recovery: point at infinify");return nt.assertValidity(),nt}hasHighS(){return b(this.s)}toBytes(w=x.format){if(Ks(w),w==="der")return Ne(Lt.hexFromSig(this));let{r:B,s:D}=this,_=a.toBytes(B),R=a.toBytes(D);return w==="recovered"?(A(),et(Uint8Array.of(this.assertRecovery()),_,R)):et(_,R)}toHex(w){return ke(this.toBytes(w))}}Object.freeze(T.prototype),Object.freeze(T);let U=r.bits2int===void 0?function(w){if(w.length>8192)throw new Error("input is too large");let B=me(w),D=w.length*8-c;return D>0?B>>BigInt(D):B}:r.bits2int,C=r.bits2int_modN===void 0?function(w){return a.create(U(w))}:r.bits2int_modN,I=Sr(c);function O(S){return Pe("num < 2^"+c,S,Ot,I),a.toBytes(S)}function V(S,w){return M(S,void 0,"message"),w?M(n(S),void 0,"prehashed message"):S}function F(S,w,B){let{lowS:D,prehash:_,extraEntropy:R}=Us(B,x);S=V(S,_);let K=C(S),P=a.fromBytes(w);if(!a.isValidNot0(P))throw new Error("invalid private key");let q=[O(P),O(K)];if(R!=null&&R!==!1){let nt=R===!0?o(l.secretKey):R;q.push(M(nt,void 0,"extraEntropy"))}let N=et(...q),tt=K;function rt(nt){let J=U(nt);if(!a.isValidNot0(J))return;let lt=a.inv(J),Ae=e.BASE.multiply(J).toAffine(),rr=a.create(Ae.x);if(rr===Ot)return;let qr=a.create(lt*a.create(tt+rr*P));if(qr===Ot)return;let Vs=(Ae.x===rr?0:2)|Number(Ae.y&se),zs=qr;return D&&b(qr)&&(zs=a.neg(qr),Vs^=1),new T(rr,zs,p?void 0:Vs)}return{seed:N,k2sig:rt}}function d(S,w,B={}){let{seed:D,k2sig:_}=F(S,w,B);return zi(n.outputLen,a.BYTES,s)(D,_).toBytes(B.format)}function g(S,w,B,D={}){let{lowS:_,prehash:R,format:K}=Us(D,x);if(B=M(B,void 0,"publicKey"),w=V(w,R),!pe(S)){let P=S instanceof T?", use sig.toBytes()":"";throw new Error("verify expects Uint8Array signature"+P)}L(S,K);try{let P=T.fromBytes(S,K),q=e.fromBytes(B);if(_&&P.hasHighS())return!1;let{r:N,s:tt}=P,rt=C(w),nt=a.inv(tt),J=a.create(rt*nt),lt=a.create(N*nt),Ae=e.BASE.multiplyUnsafe(J).add(q.multiplyUnsafe(lt));return Ae.is0()?!1:a.create(Ae.x)===N}catch{return!1}}function v(S,w,B={}){let{prehash:D}=Us(B,x);return w=V(w,D),T.fromBytes(S,"recovered").recoverPublicKey(w).toBytes()}return Object.freeze({keygen:u,getPublicKey:h,getSharedSecret:y,utils:m,lengths:l,Point:e,sign:d,verify:g,recoverPublicKey:v,Signature:T,hash:n})}var ks={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},Ad={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]};var Sc=BigInt(2);function vd(e){let t=ks.p,r=BigInt(3),n=BigInt(6),o=BigInt(11),s=BigInt(22),i=BigInt(23),a=BigInt(44),f=BigInt(88),c=e*e*e%t,u=c*c*e%t,h=Z(u,r,t)*u%t,y=Z(h,r,t)*u%t,m=Z(y,Sc,t)*c%t,l=Z(m,o,t)*m%t,x=Z(l,s,t)*l%t,p=Z(x,a,t)*x%t,b=Z(p,f,t)*p%t,E=Z(b,a,t)*x%t,A=Z(E,r,t)*u%t,L=Z(A,i,t)*l%t,T=Z(L,n,t)*c%t,U=Z(T,Sc,t);if(!Fs.eql(Fs.sqr(U),e))throw new Error("Cannot find square root");return U}var Fs=He(ks.p,{sqrt:vd}),Bd=xc(ks,{Fp:Fs,endo:Ad}),_t=Ec(Bd,Gt);var Ac=33,vc=32;function Bc(e,t,r){let n=$r.digest(t instanceof Uint8Array?t:t.subarray());if($e(n))return n.then(({digest:o})=>(r?.signal?.throwIfAborted(),_t.sign(o,e,{prehash:!1,format:"der"}))).catch(o=>{throw o.name==="AbortError"?o:new nr(String(o))});try{return _t.sign(n.digest,e,{prehash:!1,format:"der"})}catch(o){throw new nr(String(o))}}function Ic(e,t,r,n){let o=$r.digest(r instanceof Uint8Array?r:r.subarray());if($e(o))return o.then(({digest:s})=>(n?.signal?.throwIfAborted(),_t.verify(t,s,e,{prehash:!1,format:"der"}))).catch(s=>{throw s.name==="AbortError"?s:new or(String(s))});try{return n?.signal?.throwIfAborted(),_t.verify(t,o.digest,e,{prehash:!1,format:"der"})}catch(s){throw new or(String(s))}}var Pr=class{type="secp256k1";raw;_key;constructor(t){this._key=_c(t),this.raw=Tc(this._key)}toMultihash(){return ce.digest(ue(this))}toCID(){return wt.createV1(114,this.toMultihash())}toString(){return ot.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}verify(t,r,n){return Ic(this._key,r,t,n)}},Mr=class{type="secp256k1";raw;publicKey;constructor(t,r){this.raw=Lc(t),this.publicKey=new Pr(r??Dc(t))}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:pt(this.raw,t.raw)}sign(t,r){return Bc(this.raw,t,r)}};function Ns(e){return new Mr(e)}function Rn(e){return new Pr(e)}async function Cc(){let e=Id();return new Mr(e)}function Tc(e){return _t.Point.fromBytes(e).toBytes()}function Lc(e){try{return _t.getPublicKey(e,!0),e}catch(t){throw new sr(String(t))}}function _c(e){try{return _t.Point.fromBytes(e),e}catch(t){throw new ve(String(t))}}function Dc(e){try{return _t.getPublicKey(e,!0)}catch(t){throw new sr(String(t))}}function Id(){return _t.utils.randomSecretKey()}var Un={"P-256":32,"P-384":48,"P-521":66},Td=Object.keys(Un),Ps=Td.join(" / ");async function Rc(e){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new k(`Unknown curve: ${e}. Must be ${Ps}`);let t=await $.get().subtle.generateKey({name:"ECDH",namedCurve:e},!0,["deriveBits"]),r=async(s,i)=>{let a;i!=null?a=await $.get().subtle.importKey("jwk",_d(e,i),{name:"ECDH",namedCurve:e},!1,["deriveBits"]):a=t.privateKey;let f=await $.get().subtle.importKey("jwk",Uc(e,s),{name:"ECDH",namedCurve:e},!1,[]),c=await $.get().subtle.deriveBits({name:"ECDH",public:f},a,Un[e]*8);return new Uint8Array(c,0,c.byteLength)},n=await $.get().subtle.exportKey("jwk",t.publicKey);return{key:Ld(n),genSharedKey:r}}function Ld(e){if(e.crv==null||e.x==null||e.y==null)throw new k("JWK was missing components");if(e.crv!=="P-256"&&e.crv!=="P-384"&&e.crv!=="P-521")throw new k(`Unknown curve: ${e.crv}. Must be ${Ps}`);let t=Un[e.crv];return ge([Uint8Array.from([4]),qo(e.x,t),qo(e.y,t)],1+t*2)}function Uc(e,t){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new k(`Unknown curve: ${e}. Must be ${Ps}`);let r=Un[e];if(!pt(t.subarray(0,1),Uint8Array.from([4])))throw new k("Cannot unmarshal public key - invalid key format");return{kty:"EC",crv:e,x:H(t.subarray(1,r+1),"base64url"),y:H(t.subarray(1+r),"base64url"),ext:!0}}var _d=(e,t)=>({...Uc(e,t.public),d:H(t.private,"base64url")});var Dd={"AES-128":{ivSize:16,keySize:16},"AES-256":{ivSize:16,keySize:32},Blowfish:{ivSize:8,keySize:32}};async function Kc(e,t,r){if(e!=="AES-128"&&e!=="AES-256"&&e!=="Blowfish")throw new k("Cipher type was missing or unsupported");if(t!=="SHA1"&&t!=="SHA256"&&t!=="SHA512")throw new k("Hash type was missing or unsupported");if(r==null||!(r instanceof Uint8Array))throw new k("Secret was missing or an incorrect type");let n=Dd[e],o=n.keySize,s=n.ivSize,i=20,a=Y("key expansion"),f=2*(s+o+i),c=await On(t,r),u=await c.digest(a),h=[],y=0;for(;y<f;){let E=await c.digest(ge([u,a])),A=E.length;y+A>f&&(A=f-y),h.push(E),y+=A,u=await c.digest(u)}let m=f/2,l=ge(h),x=l.subarray(0,m),p=l.subarray(m,f),b=E=>({iv:E.subarray(0,s),cipherKey:E.subarray(s,s+o),macKey:E.subarray(s+o)});return{k1:b(x),k2:b(p)}}async function Cd(e,t){if(e==="Ed25519")return Aa();if(e==="secp256k1")return Cc();if(e==="RSA")return Rs(Pd(t));if(e==="ECDSA")return _i(Md(t));throw new zt}async function Rd(e,t){if(e!=="Ed25519")throw new zt("Seed key derivation only supported for Ed25519 keys");return va(t)}function Ud(e,t){let{Type:r,Data:n}=Kt.decode(e),o=n??new Uint8Array;switch(r){case j.RSA:return Cs(o,t);case j.Ed25519:return mn(o);case j.secp256k1:return Rn(o);case j.ECDSA:return ho(o);default:throw new zt}}function Kd(e){if(e.byteLength===te)return mn(e);if(e.byteLength===Ac)return Rn(e);let t=yt(e),r=t[1]?.[0];if(r===Zn||r===$n||r===Yn)return lo(t);if(t[0]?.[0]===mc)return Tn(t,e);throw new k("Could not extract public key from raw bytes")}function Od(e){let{Type:t,Data:r}=Kt.decode(e.digest),n=r??new Uint8Array;switch(t){case j.Ed25519:return mn(n);case j.secp256k1:return Rn(n);case j.ECDSA:return ho(n);default:throw new zt}}function ue(e){return Kt.encode({Type:j[e.type],Data:e.raw})}function Fd(e){let t=Fr.decode(e),r=t.Data??new Uint8Array;switch(t.Type){case j.RSA:return Ds(r);case j.Ed25519:return Vo(r);case j.secp256k1:return Ns(r);case j.ECDSA:return Bi(r);default:throw new zt}}function kd(e){if(e.byteLength===xt)return Vo(e);if(e.byteLength===vc)return Ns(e);let t=yt(e),r=t[2]?.[0];if(r===Zn||r===$n||r===Yn)return uo(t);if(t.length>8)return In(t);throw new k("Could not extract private key from raw bytes")}function Nd(e){return Fr.encode({Type:j[e.type],Data:e.raw})}function Pd(e){return e==null?2048:parseInt(e,10)}function Md(e){if(e==="P-256"||e==null)return"P-256";if(e==="P-384")return"P-384";if(e==="P-521")return"P-521";throw new k("Unsupported curve, should be P-256, P-384 or P-521")}async function Hd(e){if(e.type==="RSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["verify"])};if(e.type==="ECDSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"ECDSA",namedCurve:e.jwk.crv??"P-256"},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"ECDSA",namedCurve:e.publicKey.jwk.crv??"P-256"},!0,["verify"])};throw new k("Only RSA and ECDSA keys are supported")}async function qd(e){if(e.privateKey.algorithm.name==="RSASSA-PKCS1-v1_5"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return Ln(t)}if(e.privateKey.algorithm.name==="ECDSA"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return new Nt(t)}throw new k("Only RSA and ECDSA keys are supported")}var Hr=Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),ie=new Uint32Array(80),Hs=class extends he{A=Hr[0]|0;B=Hr[1]|0;C=Hr[2]|0;D=Hr[3]|0;E=Hr[4]|0;constructor(){super(64,20,8,!1)}get(){let{A:t,B:r,C:n,D:o,E:s}=this;return[t,r,n,o,s]}set(t,r,n,o,s){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0}process(t,r){for(let f=0;f<16;f++,r+=4)ie[f]=t.getUint32(r,!1);for(let f=16;f<80;f++)ie[f]=Jr(ie[f-3]^ie[f-8]^ie[f-14]^ie[f-16],1);let{A:n,B:o,C:s,D:i,E:a}=this;for(let f=0;f<80;f++){let c,u;f<20?(c=en(o,s,i),u=1518500249):f<40?(c=o^s^i,u=1859775393):f<60?(c=rn(o,s,i),u=2400959708):(c=o^s^i,u=3395469782);let h=Jr(n,5)+c+a+u+ie[f]|0;a=i,i=s,s=Jr(o,30),o=n,n=h}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,a=a+this.E|0,this.set(n,o,s,i,a)}roundClean(){bt(ie)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0),bt(this.buffer)}},Oc=br(()=>new Hs);function Vd(e,t,r,n){Ue(e);let o=Ri({dkLen:32,asyncTick:10},n),{c:s,dkLen:i,asyncTick:a}=o;if(Et(s,"c"),Et(i,"dkLen"),Et(a,"asyncTick"),s<1)throw new Error("iterations (c) must be >= 1");if(i<1)throw new Error('"dkLen" must be >= 1');if(i>(2**32-1)*e.outputLen)throw new Error("derived key too long");let f=mo(t,"password"),c=mo(r,"salt"),u=new Uint8Array(i),h=Dn.create(e,f),y=h._cloneInto().update(c);return{c:s,dkLen:i,asyncTick:a,DK:u,PRF:h,PRFSalt:y}}function zd(e,t,r,n,o){return e.destroy(),t.destroy(),n&&n.destroy(),bt(o),r}function Fc(e,t,r,n){let{c:o,dkLen:s,DK:i,PRF:a,PRFSalt:f}=Vd(e,t,r,n),c,u=new Uint8Array(4),h=Oe(u),y=new Uint8Array(a.outputLen);for(let m=1,l=0;l<s;m++,l+=a.outputLen){let x=i.subarray(l,l+a.outputLen);h.setInt32(0,m,!1),(c=f._cloneInto(c)).update(u).digestInto(y),x.set(y.subarray(0,x.length));for(let p=1;p<o;p++){a._cloneInto(c).update(y).digestInto(y);for(let b=0;b<x.length;b++)x[b]^=y[b]}}return zd(a,f,i,c,y)}var kc={sha1:Oc,"sha2-256":Gt,"sha2-512":Fe};function qs(e,t,r,n,o){if(o!=="sha1"&&o!=="sha2-256"&&o!=="sha2-512"){let a=Object.keys(kc).join(" / ");throw new k(`Hash '${o}' is unknown or not supported. Must be ${a}`)}let s=kc[o],i=Fc(s,e,t,{c:r,dkLen:n});return to.encode(i).substring(1)}return qc(jd);})();
2
+ "use strict";var Libp2PCrypto=(()=>{var pn=Object.defineProperty;var va=Object.getOwnPropertyDescriptor;var _a=Object.getOwnPropertyNames;var Ia=Object.prototype.hasOwnProperty;var at=(e,t)=>{for(var r in t)pn(e,r,{get:t[r],enumerable:!0})},Ta=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of _a(t))!Ia.call(e,o)&&o!==r&&pn(e,o,{get:()=>t[o],enumerable:!(n=va(t,o))||n.enumerable});return e};var La=e=>Ta(pn({},"__esModule",{value:!0}),e);var Au={};at(Au,{hmac:()=>Tr,keys:()=>Wo,pbkdf2:()=>Qo,randomBytes:()=>Fo});var Tr={};at(Tr,{create:()=>mn});function Ra(e){return e.buffer instanceof ArrayBuffer}function ot(e){return Ra(e)?e:e.slice()}var Ye=class extends Error{constructor(t="An error occurred while signing a message"){super(t),this.name="SigningError"}},$e=class extends Error{constructor(t="An error occurred while verifying a message"){super(t),this.name="VerificationError"}},Ir=class extends Error{constructor(t="Missing Web Crypto API"){super(t),this.name="WebCryptoMissingError"}};var Y={get(e=globalThis){let t=e.crypto;if(t?.subtle==null)throw new Ir("Missing Web Crypto API. The most likely cause of this error is that this page is being accessed from an insecure context (i.e. not HTTPS). For more information and possible resolutions see https://github.com/libp2p/js-libp2p/blob/main/packages/crypto/README.md#web-crypto-api");return t}};var rs={SHA1:20,SHA256:32,SHA512:64};var Da={SHA1:"SHA-1",SHA256:"SHA-256",SHA512:"SHA-512"},Ka=async(e,t)=>{let r=await Y.get().subtle.sign({name:"HMAC"},e,ot(t));return new Uint8Array(r,0,r.byteLength)};async function mn(e,t){let r=Da[e],n=await Y.get().subtle.importKey("raw",ot(t),{name:"HMAC",hash:{name:r}},!1,["sign"]);return{async digest(o){return Ka(n,o)},length:rs[e]}}var Wo={};at(Wo,{generateEphemeralKeyPair:()=>ga,generateKeyPair:()=>fu,generateKeyPairFromSeed:()=>uu,keyStretcher:()=>Ea,privateKeyFromCryptoKeyPair:()=>wu,privateKeyFromProtobuf:()=>pu,privateKeyFromRaw:()=>mu,privateKeyToCryptoKeyPair:()=>gu,privateKeyToProtobuf:()=>yu,publicKeyFromMultihash:()=>du,publicKeyFromProtobuf:()=>lu,publicKeyFromRaw:()=>hu,publicKeyToProtobuf:()=>ae});var k=class extends Error{static name="InvalidParametersError";constructor(t="Invalid parameters"){super(t),this.name="InvalidParametersError"}},we=class extends Error{static name="InvalidPublicKeyError";constructor(t="Invalid public key"){super(t),this.name="InvalidPublicKeyError"}},Ge=class extends Error{static name="InvalidPrivateKeyError";constructor(t="Invalid private key"){super(t),this.name="InvalidPrivateKeyError"}};var Vt=class extends Error{static name="UnsupportedKeyTypeError";constructor(t="Unsupported key type"){super(t),this.name="UnsupportedKeyTypeError"}};var wn={};at(wn,{base58btc:()=>rt,base58flickr:()=>Ha});var Uu=new Uint8Array(0);function ns(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Ot(e){if(e instanceof Uint8Array&&e.constructor.name==="Uint8Array")return oe(e);if(e instanceof ArrayBuffer)return new Uint8Array(e);if(ArrayBuffer.isView(e))return oe(new Uint8Array(e.buffer,e.byteOffset,e.byteLength));throw new Error("Unknown type, must be binary type")}function os(e){return new TextEncoder().encode(e)}function ss(e){return new TextDecoder().decode(e)}function Ca(e){return e?.buffer instanceof ArrayBuffer}function oe(e){return Ca(e)?e:e.slice()}function Ua(e,t){if(e.length>=255)throw new TypeError("Alphabet too long");for(var r=new Uint8Array(256),n=0;n<r.length;n++)r[n]=255;for(var o=0;o<e.length;o++){var s=e.charAt(o),i=s.charCodeAt(0);if(r[i]!==255)throw new TypeError(s+" is ambiguous");r[i]=o}var a=e.length,f=e.charAt(0),c=Math.log(a)/Math.log(256),u=Math.log(256)/Math.log(a);function l(m){if(m instanceof Uint8Array||(ArrayBuffer.isView(m)?m=new Uint8Array(m.buffer,m.byteOffset,m.byteLength):Array.isArray(m)&&(m=Uint8Array.from(m))),!(m instanceof Uint8Array))throw new TypeError("Expected Uint8Array");if(m.length===0)return"";for(var E=0,d=0,y=0,S=m.length;y!==S&&m[y]===0;)y++,E++;for(var v=(S-y)*u+1>>>0,D=new Uint8Array(v);y!==S;){for(var L=m[y],U=0,K=v-1;(L!==0||U<d)&&K!==-1;K--,U++)L+=256*D[K]>>>0,D[K]=L%a>>>0,L=L/a>>>0;if(L!==0)throw new Error("Non-zero carry");d=U,y++}for(var I=v-d;I!==v&&D[I]===0;)I++;for(var F=f.repeat(E);I<v;++I)F+=e.charAt(D[I]);return F}function b(m){if(typeof m!="string")throw new TypeError("Expected String");if(m.length===0)return new Uint8Array;var E=0;if(m[E]!==" "){for(var d=0,y=0;m[E]===f;)d++,E++;for(var S=(m.length-E)*c+1>>>0,v=new Uint8Array(S);m[E];){var D=r[m.charCodeAt(E)];if(D===255)return;for(var L=0,U=S-1;(D!==0||L<y)&&U!==-1;U--,L++)D+=a*v[U]>>>0,v[U]=D%256>>>0,D=D/256>>>0;if(D!==0)throw new Error("Non-zero carry");y=L,E++}if(m[E]!==" "){for(var K=S-y;K!==S&&v[K]===0;)K++;for(var I=new Uint8Array(d+(S-K)),F=d;K!==S;)I[F++]=v[K++];return I}}}function p(m){var E=b(m);if(E)return E;throw new Error(`Non-${t} character`)}return{encode:l,decodeUnsafe:b,decode:p}}var Fa=Ua,Oa=Fa,as=Oa;var yn=class{name;prefix;baseEncode;constructor(t,r,n){this.name=t,this.prefix=r,this.baseEncode=n}encode(t){if(t instanceof Uint8Array)return`${this.prefix}${this.baseEncode(t)}`;throw Error("Unknown type, must be binary type")}},bn=class{name;prefix;baseDecode;prefixCodePoint;constructor(t,r,n){this.name=t,this.prefix=r;let o=r.codePointAt(0);if(o===void 0)throw new Error("Invalid prefix character");this.prefixCodePoint=o,this.baseDecode=n}decode(t){if(typeof t=="string"){if(t.codePointAt(0)!==this.prefixCodePoint)throw Error(`Unable to decode multibase string ${JSON.stringify(t)}, ${this.name} decoder only supports inputs prefixed with ${this.prefix}`);return this.baseDecode(t.slice(this.prefix.length))}else throw Error("Can only multibase decode strings")}or(t){return cs(this,t)}},xn=class{decoders;constructor(t){this.decoders=t}or(t){return cs(this,t)}decode(t){let r=t[0],n=this.decoders[r];if(n!=null)return n.decode(t);throw RangeError(`Unable to decode multibase string ${JSON.stringify(t)}, only inputs prefixed with ${Object.keys(this.decoders)} are supported`)}};function cs(e,t){return new xn({...e.decoders??{[e.prefix]:e},...t.decoders??{[t.prefix]:t}})}var gn=class{name;prefix;baseEncode;baseDecode;encoder;decoder;constructor(t,r,n,o){this.name=t,this.prefix=r,this.baseEncode=n,this.baseDecode=o,this.encoder=new yn(t,r,n),this.decoder=new bn(t,r,o)}encode(t){return this.encoder.encode(t)}decode(t){return this.decoder.decode(t)}};function Ee({name:e,prefix:t,encode:r,decode:n}){return new gn(e,t,r,n)}function jt({name:e,prefix:t,alphabet:r}){let{encode:n,decode:o}=as(r,e);return Ee({prefix:t,name:e,encode:n,decode:s=>Ot(o(s))})}function ka(e,t,r,n){let o=e.length;for(;e[o-1]==="=";)--o;let s=new Uint8Array(o*r/8|0),i=0,a=0,f=0;for(let c=0;c<o;++c){let u=t[e[c]];if(u===void 0)throw new SyntaxError(`Non-${n} character`);a=a<<r|u,i+=r,i>=8&&(i-=8,s[f++]=255&a>>i)}if(i>=r||(255&a<<8-i)!==0)throw new SyntaxError("Unexpected end of data");return s}function Pa(e,t,r){let n=t[t.length-1]==="=",o=(1<<r)-1,s="",i=0,a=0;for(let f=0;f<e.length;++f)for(a=a<<8|e[f],i+=8;i>r;)i-=r,s+=t[o&a>>i];if(i!==0&&(s+=t[o&a<<r-i]),n)for(;(s.length*r&7)!==0;)s+="=";return s}function Na(e){let t={};for(let r=0;r<e.length;++r)t[e[r]]=r;return t}function $({name:e,prefix:t,bitsPerChar:r,alphabet:n}){let o=Na(n);return Ee({prefix:t,name:e,encode(s){return Pa(s,n,r)},decode(s){return ka(s,o,r,e)}})}var rt=jt({name:"base58btc",prefix:"z",alphabet:"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"}),Ha=jt({name:"base58flickr",prefix:"Z",alphabet:"123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"});var En={};at(En,{base32:()=>Se,base32hex:()=>ja,base32hexpad:()=>Za,base32hexpadupper:()=>Ya,base32hexupper:()=>za,base32pad:()=>qa,base32padupper:()=>Va,base32upper:()=>Ma,base32z:()=>$a});var Se=$({prefix:"b",name:"base32",alphabet:"abcdefghijklmnopqrstuvwxyz234567",bitsPerChar:5}),Ma=$({prefix:"B",name:"base32upper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",bitsPerChar:5}),qa=$({prefix:"c",name:"base32pad",alphabet:"abcdefghijklmnopqrstuvwxyz234567=",bitsPerChar:5}),Va=$({prefix:"C",name:"base32padupper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=",bitsPerChar:5}),ja=$({prefix:"v",name:"base32hex",alphabet:"0123456789abcdefghijklmnopqrstuv",bitsPerChar:5}),za=$({prefix:"V",name:"base32hexupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV",bitsPerChar:5}),Za=$({prefix:"t",name:"base32hexpad",alphabet:"0123456789abcdefghijklmnopqrstuv=",bitsPerChar:5}),Ya=$({prefix:"T",name:"base32hexpadupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV=",bitsPerChar:5}),$a=$({prefix:"h",name:"base32z",alphabet:"ybndrfg8ejkmcpqxot1uwisza345h769",bitsPerChar:5});var Sn={};at(Sn,{base36:()=>Xe,base36upper:()=>Ga});var Xe=jt({prefix:"k",name:"base36",alphabet:"0123456789abcdefghijklmnopqrstuvwxyz"}),Ga=jt({prefix:"K",name:"base36upper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"});var Xa=ls,fs=128,Wa=127,Ja=~Wa,Qa=Math.pow(2,31);function ls(e,t,r){t=t||[],r=r||0;for(var n=r;e>=Qa;)t[r++]=e&255|fs,e/=128;for(;e&Ja;)t[r++]=e&255|fs,e>>>=7;return t[r]=e|0,ls.bytes=r-n+1,t}var tc=An,ec=128,us=127;function An(e,n){var r=0,n=n||0,o=0,s=n,i,a=e.length;do{if(s>=a)throw An.bytes=0,new RangeError("Could not decode varint");i=e[s++],r+=o<28?(i&us)<<o:(i&us)*Math.pow(2,o),o+=7}while(i>=ec);return An.bytes=s-n,r}var rc=Math.pow(2,7),nc=Math.pow(2,14),oc=Math.pow(2,21),sc=Math.pow(2,28),ic=Math.pow(2,35),ac=Math.pow(2,42),cc=Math.pow(2,49),fc=Math.pow(2,56),uc=Math.pow(2,63),lc=function(e){return e<rc?1:e<nc?2:e<oc?3:e<sc?4:e<ic?5:e<ac?6:e<cc?7:e<fc?8:e<uc?9:10},hc={encode:Xa,decode:tc,encodingLength:lc},dc=hc,We=dc;function Je(e,t=0){return[We.decode(e,t),We.decode.bytes]}function Ae(e,t,r=0){return We.encode(e,t,r),t}function Be(e){return We.encodingLength(e)}function Rt(e,t){let r=t.byteLength,n=Be(e),o=n+Be(r),s=new Uint8Array(o+r);return Ae(e,s,0),Ae(r,s,n),s.set(t,o),new ve(e,r,t,s)}function hs(e){let t=Ot(e),[r,n]=Je(t),[o,s]=Je(t.subarray(n)),i=t.subarray(n+s);if(i.byteLength!==o)throw new Error("Incorrect length");return new ve(r,o,i,t)}function ds(e,t){if(e===t)return!0;{let r=t;return e.code===r.code&&e.size===r.size&&r.bytes instanceof Uint8Array&&ns(e.bytes,r.bytes)}}var ve=class{code;size;digest;bytes;constructor(t,r,n,o){this.code=t,this.size=r,this.digest=oe(n),this.bytes=oe(o)}};function ps(e,t){let{bytes:r,version:n}=e;return n===0?mc(r,Bn(e),t??rt.encoder):yc(r,Bn(e),t??Se.encoder)}var ms=new WeakMap;function Bn(e){let t=ms.get(e);if(t==null){let r=new Map;return ms.set(e,r),r}return t}var wt=class e{code;version;multihash;bytes;"/";constructor(t,r,n,o){this.code=r,this.version=t,this.multihash=n,this.bytes=oe(o),this["/"]=this.bytes}get asCID(){return this}get byteOffset(){return this.bytes.byteOffset}get byteLength(){return this.bytes.byteLength}toV0(){switch(this.version){case 0:return this;case 1:{let{code:t,multihash:r}=this;if(t!==tr)throw new Error("Cannot convert a non dag-pb CID to CIDv0");if(r.code!==bc)throw new Error("Cannot convert non sha2-256 multihash CID to CIDv0");return e.createV0(r)}default:throw Error(`Can not convert CID version ${this.version} to version 0. This is a bug please report`)}}toV1(){switch(this.version){case 0:{let{code:t,digest:r}=this.multihash,n=Rt(t,r);return e.createV1(this.code,n)}case 1:return this;default:throw Error(`Can not convert CID version ${this.version} to version 1. This is a bug please report`)}}equals(t){return e.equals(this,t)}static equals(t,r){let n=r;return n!=null&&t.code===n.code&&t.version===n.version&&ds(t.multihash,n.multihash)}toString(t){return ps(this,t)}toJSON(){return{"/":ps(this)}}link(){return this}[Symbol.toStringTag]="CID";[Symbol.for("nodejs.util.inspect.custom")](){return`CID(${this.toString()})`}static asCID(t){if(t==null)return null;let r=t;if(r instanceof e)return r;if(r["/"]!=null&&r["/"]===r.bytes||r.asCID===r){let{version:n,code:o,multihash:s,bytes:i}=r;return new e(n,o,s,i??ys(n,o,s.bytes))}else if(r[xc]===!0){let{version:n,multihash:o,code:s}=r,i=hs(o);return e.create(n,s,i)}else return null}static create(t,r,n){if(typeof r!="number")throw new Error("String codecs are no longer supported");if(!(n.bytes instanceof Uint8Array))throw new Error("Invalid digest");switch(t){case 0:{if(r!==tr)throw new Error(`Version 0 CID must use dag-pb (code: ${tr}) block encoding`);return new e(t,r,n,n.bytes)}case 1:{let o=ys(t,r,n.bytes);return new e(t,r,n,o)}default:throw new Error("Invalid version")}}static createV0(t){return e.create(0,tr,t)}static createV1(t,r){return e.create(1,t,r)}static decode(t){let[r,n]=e.decodeFirst(t);if(n.length!==0)throw new Error("Incorrect length");return r}static decodeFirst(t){let r=e.inspectBytes(t),n=r.size-r.multihashSize,o=Ot(t.subarray(n,n+r.multihashSize));if(o.byteLength!==r.multihashSize)throw new Error("Incorrect length");let s=o.subarray(r.multihashSize-r.digestSize),i=new ve(r.multihashCode,r.digestSize,s,o);return[r.version===0?e.createV0(i):e.createV1(r.codec,i),t.subarray(r.size)]}static inspectBytes(t){let r=0,n=()=>{let[l,b]=Je(t.subarray(r));return r+=b,l},o=n(),s=tr;if(o===18?(o=0,r=0):s=n(),o!==0&&o!==1)throw new RangeError(`Invalid CID version ${o}`);let i=r,a=n(),f=n(),c=r+f,u=c-i;return{version:o,codec:s,multihashCode:a,digestSize:f,multihashSize:u,size:c}}static parse(t,r){let[n,o]=pc(t,r),s=e.decode(o);if(s.version===0&&t[0]!=="Q")throw Error("Version 0 CID string must not include multibase prefix");return Bn(s).set(n,t),s}};function pc(e,t){switch(e[0]){case"Q":{let r=t??rt;return[rt.prefix,r.decode(`${rt.prefix}${e}`)]}case rt.prefix:{let r=t??rt;return[rt.prefix,r.decode(e)]}case Se.prefix:{let r=t??Se;return[Se.prefix,r.decode(e)]}case Xe.prefix:{let r=t??Xe;return[Xe.prefix,r.decode(e)]}default:{if(t==null)throw Error("To parse non base32, base36 or base58btc encoded CID multibase decoder must be provided");return[e[0],t.decode(e)]}}}function mc(e,t,r){let{prefix:n}=r;if(n!==rt.prefix)throw Error(`Cannot string encode V0 in ${r.name} encoding`);let o=t.get(n);if(o==null){let s=r.encode(e).slice(1);return t.set(n,s),s}else return o}function yc(e,t,r){let{prefix:n}=r,o=t.get(n);if(o==null){let s=r.encode(e);return t.set(n,s),s}else return o}var tr=112,bc=18;function ys(e,t,r){let n=Be(e),o=n+Be(t),s=new Uint8Array(o+r.byteLength);return Ae(e,s,0),Ae(t,s,n),s.set(r,o),s}var xc=Symbol.for("@ipld/js-cid/CID");var vn={};at(vn,{identity:()=>se});var bs=0,gc="identity",xs=Ot;function wc(e,t){if(t?.truncate!=null&&t.truncate!==e.byteLength){if(t.truncate<0||t.truncate>e.byteLength)throw new Error(`Invalid truncate option, must be less than or equal to ${e.byteLength}`);e=e.subarray(0,t.truncate)}return Rt(bs,xs(e))}var se={code:bs,name:gc,encode:xs,digest:wc};function ct(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}var _n="1.2.840.10045.3.1.7",In="1.3.132.0.34",Tn="1.3.132.0.35";async function gs(e="P-256"){let t=await crypto.subtle.generateKey({name:"ECDSA",namedCurve:e},!0,["sign","verify"]);return{publicKey:await crypto.subtle.exportKey("jwk",t.publicKey),privateKey:await crypto.subtle.exportKey("jwk",t.privateKey)}}async function ws(e,t,r){let n=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["sign"]);r?.signal?.throwIfAborted();let o=await crypto.subtle.sign({name:"ECDSA",hash:{name:"SHA-256"}},n,ot(t.subarray()));return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function Es(e,t,r,n){let o=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["verify"]);n?.signal?.throwIfAborted();let s=await crypto.subtle.verify({name:"ECDSA",hash:{name:"SHA-256"}},o,ot(t),ot(r.subarray()));return n?.signal?.throwIfAborted(),s}function kt(e=0){return new Uint8Array(e)}function yt(e=0){return new Uint8Array(e)}function Ec(e){return e?.buffer instanceof ArrayBuffer}function Ss(e){if(Ec(e))return e;let t=e.slice();return new Uint8Array(t.buffer,0,t.byteLength)}function Dt(e,t){t==null&&(t=e.reduce((o,s)=>o+s.length,0));let r=yt(t),n=0;for(let o of e)r.set(o,n),n+=o.length;return Ss(r)}var Bs=Symbol.for("@achingbrain/uint8arraylist");function As(e,t){if(t==null||t<0)throw new RangeError("index is out of bounds");let r=0;for(let n of e){let o=r+n.byteLength;if(t<o)return{buf:n,index:t-r};r=o}throw new RangeError("index is out of bounds")}function Rr(e){return!!e?.[Bs]}var ut=class e{bufs;length;[Bs]=!0;constructor(...t){this.bufs=[],this.length=0,t.length>0&&this.appendAll(t)}*[Symbol.iterator](){yield*this.bufs}get byteLength(){return this.length}append(...t){this.appendAll(t)}appendAll(t){let r=0;for(let n of t)if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.push(n);else if(Rr(n)){r+=n.byteLength;for(let o of n.bufs)this.bufs.push(o)}else throw new Error("Could not append value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}prepend(...t){this.prependAll(t)}prependAll(t){let r=0;for(let n of t.reverse())if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.unshift(n);else if(Rr(n))r+=n.byteLength,this.bufs.unshift(...n.bufs);else throw new Error("Could not prepend value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}get(t){let r=As(this.bufs,t);return r.buf[r.index]}set(t,r){let n=As(this.bufs,t);n.buf[n.index]=r}write(t,r=0){if(t instanceof Uint8Array)for(let n=0;n<t.length;n++)this.set(r+n,t[n]);else if(Rr(t))for(let n=0;n<t.length;n++)this.set(r+n,t.get(n));else throw new Error("Could not write value, must be an Uint8Array or a Uint8ArrayList")}consume(t){if(t=Math.trunc(t),!(Number.isNaN(t)||t<=0)){if(t===this.byteLength){this.bufs=[],this.length=0;return}for(;this.bufs.length>0;)if(t>=this.bufs[0].byteLength)t-=this.bufs[0].byteLength,this.length-=this.bufs[0].byteLength,this.bufs.shift();else{this.bufs[0]=this.bufs[0].subarray(t),this.length-=t;break}}}slice(t,r){let{bufs:n,length:o}=this._subList(t,r);return Dt(n,o)}subarray(t,r){let{bufs:n,length:o}=this._subList(t,r);return n.length===1?n[0]:Dt(n,o)}sublist(t,r){let{bufs:n,length:o}=this._subList(t,r),s=new e;return s.length=o,s.bufs=n,s}_subList(t,r){if(t=t??0,r=r??this.length,t<0&&(t=this.length+t),r<0&&(r=this.length+r),t<0||r>this.length)throw new RangeError("index is out of bounds");if(t===r)return{bufs:[],length:0};if(t===0&&r===this.length)return{bufs:[...this.bufs],length:this.length};let n=[],o=0;for(let s=0;s<this.bufs.length;s++){let i=this.bufs[s],a=o,f=a+i.byteLength;if(o=f,t>=f)continue;let c=t>=a&&t<f,u=r>a&&r<=f;if(c&&u){if(t===a&&r===f){n.push(i);break}let l=t-a;n.push(i.subarray(l,l+(r-t)));break}if(c){if(t===0){n.push(i);continue}n.push(i.subarray(t-a));continue}if(u){if(r===f){n.push(i);break}n.push(i.subarray(0,r-a));break}n.push(i)}return{bufs:n,length:r-t}}indexOf(t,r=0){if(!Rr(t)&&!(t instanceof Uint8Array))throw new TypeError('The "value" argument must be a Uint8ArrayList or Uint8Array');let n=t instanceof Uint8Array?t:t.subarray();if(r=Number(r??0),isNaN(r)&&(r=0),r<0&&(r=this.length+r),r<0&&(r=0),t.length===0)return r>this.length?this.length:r;let o=n.byteLength;if(o===0)throw new TypeError("search must be at least 1 byte long");let s=256,i=new Int32Array(s);for(let l=0;l<s;l++)i[l]=-1;for(let l=0;l<o;l++)i[n[l]]=l;let a=i,f=this.byteLength-n.byteLength,c=n.byteLength-1,u;for(let l=r;l<=f;l+=u){u=0;for(let b=c;b>=0;b--){let p=this.get(l+b);if(n[b]!==p){u=Math.max(1,b-a[p]);break}}if(u===0)return l}return-1}getInt8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getInt8(0)}setInt8(t,r){let n=yt(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setInt8(0,r),this.write(n,t)}getInt16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt16(0,r)}setInt16(t,r,n){let o=kt(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt16(0,r,n),this.write(o,t)}getInt32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt32(0,r)}setInt32(t,r,n){let o=kt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt32(0,r,n),this.write(o,t)}getBigInt64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigInt64(0,r)}setBigInt64(t,r,n){let o=kt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigInt64(0,r,n),this.write(o,t)}getUint8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getUint8(0)}setUint8(t,r){let n=yt(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setUint8(0,r),this.write(n,t)}getUint16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint16(0,r)}setUint16(t,r,n){let o=kt(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint16(0,r,n),this.write(o,t)}getUint32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint32(0,r)}setUint32(t,r,n){let o=kt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint32(0,r,n),this.write(o,t)}getBigUint64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigUint64(0,r)}setBigUint64(t,r,n){let o=kt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigUint64(0,r,n),this.write(o,t)}getFloat32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat32(0,r)}setFloat32(t,r,n){let o=kt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat32(0,r,n),this.write(o,t)}getFloat64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat64(0,r)}setFloat64(t,r,n){let o=kt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat64(0,r,n),this.write(o,t)}equals(t){if(t==null||!(t instanceof e)||t.bufs.length!==this.bufs.length)return!1;for(let r=0;r<this.bufs.length;r++)if(!ct(this.bufs[r],t.bufs[r]))return!1;return!0}static fromUint8Arrays(t,r){let n=new e;return n.bufs=t,r==null&&(r=t.reduce((o,s)=>o+s.byteLength,0)),n.length=r,n}};var Ln={};at(Ln,{base10:()=>Sc});var Sc=jt({prefix:"9",name:"base10",alphabet:"0123456789"});var Rn={};at(Rn,{base16:()=>Ac,base16upper:()=>Bc});var Ac=$({prefix:"f",name:"base16",alphabet:"0123456789abcdef",bitsPerChar:4}),Bc=$({prefix:"F",name:"base16upper",alphabet:"0123456789ABCDEF",bitsPerChar:4});var Dn={};at(Dn,{base2:()=>vc});var vc=$({prefix:"0",name:"base2",alphabet:"01",bitsPerChar:1});var Kn={};at(Kn,{base256emoji:()=>Rc});var vs=Array.from("\u{1F680}\u{1FA90}\u2604\u{1F6F0}\u{1F30C}\u{1F311}\u{1F312}\u{1F313}\u{1F314}\u{1F315}\u{1F316}\u{1F317}\u{1F318}\u{1F30D}\u{1F30F}\u{1F30E}\u{1F409}\u2600\u{1F4BB}\u{1F5A5}\u{1F4BE}\u{1F4BF}\u{1F602}\u2764\u{1F60D}\u{1F923}\u{1F60A}\u{1F64F}\u{1F495}\u{1F62D}\u{1F618}\u{1F44D}\u{1F605}\u{1F44F}\u{1F601}\u{1F525}\u{1F970}\u{1F494}\u{1F496}\u{1F499}\u{1F622}\u{1F914}\u{1F606}\u{1F644}\u{1F4AA}\u{1F609}\u263A\u{1F44C}\u{1F917}\u{1F49C}\u{1F614}\u{1F60E}\u{1F607}\u{1F339}\u{1F926}\u{1F389}\u{1F49E}\u270C\u2728\u{1F937}\u{1F631}\u{1F60C}\u{1F338}\u{1F64C}\u{1F60B}\u{1F497}\u{1F49A}\u{1F60F}\u{1F49B}\u{1F642}\u{1F493}\u{1F929}\u{1F604}\u{1F600}\u{1F5A4}\u{1F603}\u{1F4AF}\u{1F648}\u{1F447}\u{1F3B6}\u{1F612}\u{1F92D}\u2763\u{1F61C}\u{1F48B}\u{1F440}\u{1F62A}\u{1F611}\u{1F4A5}\u{1F64B}\u{1F61E}\u{1F629}\u{1F621}\u{1F92A}\u{1F44A}\u{1F973}\u{1F625}\u{1F924}\u{1F449}\u{1F483}\u{1F633}\u270B\u{1F61A}\u{1F61D}\u{1F634}\u{1F31F}\u{1F62C}\u{1F643}\u{1F340}\u{1F337}\u{1F63B}\u{1F613}\u2B50\u2705\u{1F97A}\u{1F308}\u{1F608}\u{1F918}\u{1F4A6}\u2714\u{1F623}\u{1F3C3}\u{1F490}\u2639\u{1F38A}\u{1F498}\u{1F620}\u261D\u{1F615}\u{1F33A}\u{1F382}\u{1F33B}\u{1F610}\u{1F595}\u{1F49D}\u{1F64A}\u{1F639}\u{1F5E3}\u{1F4AB}\u{1F480}\u{1F451}\u{1F3B5}\u{1F91E}\u{1F61B}\u{1F534}\u{1F624}\u{1F33C}\u{1F62B}\u26BD\u{1F919}\u2615\u{1F3C6}\u{1F92B}\u{1F448}\u{1F62E}\u{1F646}\u{1F37B}\u{1F343}\u{1F436}\u{1F481}\u{1F632}\u{1F33F}\u{1F9E1}\u{1F381}\u26A1\u{1F31E}\u{1F388}\u274C\u270A\u{1F44B}\u{1F630}\u{1F928}\u{1F636}\u{1F91D}\u{1F6B6}\u{1F4B0}\u{1F353}\u{1F4A2}\u{1F91F}\u{1F641}\u{1F6A8}\u{1F4A8}\u{1F92C}\u2708\u{1F380}\u{1F37A}\u{1F913}\u{1F619}\u{1F49F}\u{1F331}\u{1F616}\u{1F476}\u{1F974}\u25B6\u27A1\u2753\u{1F48E}\u{1F4B8}\u2B07\u{1F628}\u{1F31A}\u{1F98B}\u{1F637}\u{1F57A}\u26A0\u{1F645}\u{1F61F}\u{1F635}\u{1F44E}\u{1F932}\u{1F920}\u{1F927}\u{1F4CC}\u{1F535}\u{1F485}\u{1F9D0}\u{1F43E}\u{1F352}\u{1F617}\u{1F911}\u{1F30A}\u{1F92F}\u{1F437}\u260E\u{1F4A7}\u{1F62F}\u{1F486}\u{1F446}\u{1F3A4}\u{1F647}\u{1F351}\u2744\u{1F334}\u{1F4A3}\u{1F438}\u{1F48C}\u{1F4CD}\u{1F940}\u{1F922}\u{1F445}\u{1F4A1}\u{1F4A9}\u{1F450}\u{1F4F8}\u{1F47B}\u{1F910}\u{1F92E}\u{1F3BC}\u{1F975}\u{1F6A9}\u{1F34E}\u{1F34A}\u{1F47C}\u{1F48D}\u{1F4E3}\u{1F942}"),_c=vs.reduce((e,t,r)=>(e[r]=t,e),[]),Ic=vs.reduce((e,t,r)=>{let n=t.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${t}`);return e[n]=r,e},[]);function Tc(e){return e.reduce((t,r)=>(t+=_c[r],t),"")}function Lc(e){let t=[];for(let r of e){let n=r.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${r}`);let o=Ic[n];if(o==null)throw new Error(`Non-base256emoji character: ${r}`);t.push(o)}return new Uint8Array(t)}var Rc=Ee({prefix:"\u{1F680}",name:"base256emoji",encode:Tc,decode:Lc});var Un={};at(Un,{base64:()=>Cn,base64pad:()=>Dc,base64url:()=>Kc,base64urlpad:()=>Cc});var Cn=$({prefix:"m",name:"base64",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",bitsPerChar:6}),Dc=$({prefix:"M",name:"base64pad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",bitsPerChar:6}),Kc=$({prefix:"u",name:"base64url",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_",bitsPerChar:6}),Cc=$({prefix:"U",name:"base64urlpad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_=",bitsPerChar:6});var Fn={};at(Fn,{base8:()=>Uc});var Uc=$({prefix:"7",name:"base8",alphabet:"01234567",bitsPerChar:3});var On={};at(On,{identity:()=>Fc});var Fc=Ee({prefix:"\0",name:"identity",encode:e=>ss(e),decode:e=>os(e)});var xl=new TextEncoder,gl=new TextDecoder;var Nn={};at(Nn,{sha256:()=>Dr,sha512:()=>Nc});var Pc=20;function Pn({name:e,code:t,encode:r,minDigestLength:n,maxDigestLength:o}){return new kn(e,t,r,n,o)}var kn=class{name;code;encode;minDigestLength;maxDigestLength;constructor(t,r,n,o,s){this.name=t,this.code=r,this.encode=n,this.minDigestLength=o??Pc,this.maxDigestLength=s}digest(t,r){if(r?.truncate!=null){if(r.truncate<this.minDigestLength)throw new Error(`Invalid truncate option, must be greater than or equal to ${this.minDigestLength}`);if(this.maxDigestLength!=null&&r.truncate>this.maxDigestLength)throw new Error(`Invalid truncate option, must be less than or equal to ${this.maxDigestLength}`)}if(t instanceof Uint8Array){let n=this.encode(t);return n instanceof Uint8Array?_s(n,this.code,r?.truncate):n.then(o=>_s(o,this.code,r?.truncate))}else throw Error("Unknown type, must be binary type")}};function _s(e,t,r){if(r!=null&&r!==e.byteLength){if(r>e.byteLength)throw new Error(`Invalid truncate option, must be less than or equal to ${e.byteLength}`);e=e.subarray(0,r)}return Rt(t,e)}function Ts(e){return async t=>new Uint8Array(await crypto.subtle.digest(e,t))}var Dr=Pn({name:"sha2-256",code:18,encode:Ts("SHA-256")}),Nc=Pn({name:"sha2-512",code:19,encode:Ts("SHA-512")});var Hn={...On,...Dn,...Fn,...Ln,...Rn,...En,...Sn,...wn,...Un,...Kn},Dl={...Nn,...vn};function Rs(e,t,r,n){return{name:e,prefix:t,encoder:{name:e,prefix:t,encode:r},decoder:{decode:n}}}var Ls=Rs("utf8","u",e=>"u"+new TextDecoder("utf8").decode(e),e=>new TextEncoder().encode(e.substring(1))),Mn=Rs("ascii","a",e=>{let t="a";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return t},e=>{e=e.substring(1);let t=yt(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}),Hc={utf8:Ls,"utf-8":Ls,hex:Hn.base16,latin1:Mn,ascii:Mn,binary:Mn,...Hn},Kr=Hc;function z(e,t="utf8"){let r=Kr[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.decoder.decode(`${r.prefix}${e}`)}function M(e,t="utf8"){let r=Kr[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.encoder.encode(e).substring(1)}var Mc=parseInt("11111",2),qn=parseInt("10000000",2),qc=parseInt("01111111",2),Ds={0:er,1:er,2:Vc,3:Zc,4:Yc,5:zc,6:jc,16:er,22:er,48:er};function bt(e,t={offset:0}){let r=e[t.offset]&Mc;if(t.offset++,Ds[r]!=null)return Ds[r](e,t);throw new Error("No decoder for tag "+r)}function rr(e,t){let r=0;if((e[t.offset]&qn)===qn){let n=e[t.offset]&qc,o="0x";t.offset++;for(let s=0;s<n;s++,t.offset++)o+=e[t.offset].toString(16).padStart(2,"0");r=parseInt(o,16)}else r=e[t.offset],t.offset++;return r}function er(e,t){rr(e,t);let r=[];for(;!(t.offset>=e.byteLength);){let n=bt(e,t);if(n===null)break;r.push(n)}return r}function Vc(e,t){let r=rr(e,t),n=t.offset,o=t.offset+r,s=[];for(let i=n;i<o;i++)i===n&&e[i]===0||s.push(e[i]);return t.offset+=r,Uint8Array.from(s)}function jc(e,t){let r=rr(e,t),n=t.offset+r,o=e[t.offset];t.offset++;let s=0,i=0;o<40?(s=0,i=o):o<80?(s=1,i=o-40):(s=2,i=o-80);let a=`${s}.${i}`,f=[];for(;t.offset<n;){let c=e[t.offset];if(t.offset++,f.push(c&127),c<128){f.reverse();let u=0;for(let l=0;l<f.length;l++)u+=f[l]<<l*7;a+=`.${u}`,f=[]}}return a}function zc(e,t){return t.offset++,null}function Zc(e,t){let r=rr(e,t),n=e[t.offset];t.offset++;let o=e.subarray(t.offset,t.offset+r-1);if(t.offset+=r,n!==0)throw new Error("Unused bits in bit string is unimplemented");return o}function Yc(e,t){let r=rr(e,t),n=e.subarray(t.offset,t.offset+r);return t.offset+=r,n}function $c(e){let t=e.toString(16);t.length%2===1&&(t="0"+t);let r=new ut;for(let n=0;n<t.length;n+=2)r.append(Uint8Array.from([parseInt(`${t[n]}${t[n+1]}`,16)]));return r}function Cr(e){if(e.byteLength<128)return Uint8Array.from([e.byteLength]);let t=$c(e.byteLength);return new ut(Uint8Array.from([t.byteLength|qn]),t)}function lt(e){let t=new ut,r=128;return(e.subarray()[0]&r)===r&&t.append(Uint8Array.from([0])),t.append(e),new ut(Uint8Array.from([2]),Cr(t),t)}function nr(e){let t=Uint8Array.from([0]),r=new ut(t,e);return new ut(Uint8Array.from([3]),Cr(r),r)}function Ks(e){return new ut(Uint8Array.from([4]),Cr(e),e)}function St(e,t=48){let r=new ut;for(let n of e)r.append(n);return new ut(Uint8Array.from([t]),Cr(r),r)}var Gc=Uint8Array.from([6,8,42,134,72,206,61,3,1,7]),Xc=Uint8Array.from([6,5,43,129,4,0,34]),Wc=Uint8Array.from([6,5,43,129,4,0,35]),Cs={ext:!0,kty:"EC",crv:"P-256"},Us={ext:!0,kty:"EC",crv:"P-384"},Fs={ext:!0,kty:"EC",crv:"P-521"},_e=32,Ie=48,Te=66;function Os(e){let t=bt(e);return Vn(t)}function Vn(e){let t=e[1],r=M(t,"base64url"),n=e[2][1][0],o=1,s,i;if(t.byteLength===_e)return s=M(n.subarray(o,o+_e),"base64url"),i=M(n.subarray(o+_e),"base64url"),new Pt({...Cs,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===Ie)return s=M(n.subarray(o,o+Ie),"base64url"),i=M(n.subarray(o+Ie),"base64url"),new Pt({...Us,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===Te)return s=M(n.subarray(o,o+Te),"base64url"),i=M(n.subarray(o+Te),"base64url"),new Pt({...Fs,key_ops:["sign"],d:r,x:s,y:i});throw new k(`Private key length was wrong length, got ${t.byteLength}, expected 32, 48 or 66`)}function jn(e){let t=bt(e);return zn(t)}function zn(e){let t=e[1][1][0],r=1,n,o;if(t.byteLength===_e*2+1)return n=M(t.subarray(r,r+_e),"base64url"),o=M(t.subarray(r+_e),"base64url"),new ie({...Cs,key_ops:["verify"],x:n,y:o});if(t.byteLength===Ie*2+1)return n=M(t.subarray(r,r+Ie),"base64url"),o=M(t.subarray(r+Ie),"base64url"),new ie({...Us,key_ops:["verify"],x:n,y:o});if(t.byteLength===Te*2+1)return n=M(t.subarray(r,r+Te),"base64url"),o=M(t.subarray(r+Te),"base64url"),new ie({...Fs,key_ops:["verify"],x:n,y:o});throw new k(`coordinates were wrong length, got ${t.byteLength}, expected 65, 97 or 133`)}function ks(e){return St([lt(Uint8Array.from([1])),Ks(z(e.d??"","base64url")),St([Ns(e.crv)],160),St([nr(new ut(Uint8Array.from([4]),z(e.x??"","base64url"),z(e.y??"","base64url")))],161)]).subarray()}function Ps(e){return St([lt(Uint8Array.from([1])),St([Ns(e.crv)],160),St([nr(new ut(Uint8Array.from([4]),z(e.x??"","base64url"),z(e.y??"","base64url")))],161)]).subarray()}function Ns(e){if(e==="P-256")return Gc;if(e==="P-384")return Xc;if(e==="P-521")return Wc;throw new k(`Invalid curve ${e}`)}async function Hs(e="P-256"){let t=await gs(e);return new Pt(t.privateKey)}var ie=class{type="ECDSA";jwk;_raw;constructor(t){this.jwk=t}get raw(){return this._raw==null&&(this._raw=Ps(this.jwk)),this._raw}toMultihash(){return se.digest(ae(this))}toCID(){return wt.createV1(114,this.toMultihash())}toString(){return rt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}async verify(t,r,n){return Es(this.jwk,r,t,n)}},Pt=class{type="ECDSA";jwk;publicKey;_raw;constructor(t){this.jwk=t,this.publicKey=new ie({crv:t.crv,ext:t.ext,key_ops:["verify"],kty:"EC",x:t.x,y:t.y})}get raw(){return this._raw==null&&(this._raw=ks(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}async sign(t,r){return ws(this.jwk,t,r)}};function Zn(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Et(e,t=""){if(typeof e!="number"){let r=t&&`"${t}" `;throw new TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw new RangeError(`${r}expected integer >= 0, got ${e}`)}}function pt(e,t,r=""){let n=Zn(e),o=e?.length,s=t!==void 0;if(!n||s&&o!==t){let i=r&&`"${r}" `,a=s?` of length ${t}`:"",f=n?`length=${o}`:`type=${typeof e}`,c=i+"expected Uint8Array"+a+", got "+f;throw n?new RangeError(c):new TypeError(c)}return e}function Le(e){if(typeof e!="function"||typeof e.create!="function")throw new TypeError("Hash must wrapped by utils.createHasher");if(Et(e.outputLen),Et(e.blockLen),e.outputLen<1)throw new Error('"outputLen" must be >= 1');if(e.blockLen<1)throw new Error('"blockLen" must be >= 1')}function Re(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Ur(e,t){pt(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw new RangeError('"digestInto() output" expected to be of length >='+r)}function mt(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function De(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function At(e,t){return e<<32-t|e>>>t}function Fr(e,t){return e<<t|e>>>32-t>>>0}var qs=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",Jc=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Or(e){if(pt(e),qs)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=Jc[e[r]];return t}var Nt={_0:48,_9:57,A:65,F:70,a:97,f:102};function Ms(e){if(e>=Nt._0&&e<=Nt._9)return e-Nt._0;if(e>=Nt.A&&e<=Nt.F)return e-(Nt.A-10);if(e>=Nt.a&&e<=Nt.f)return e-(Nt.a-10)}function or(e){if(typeof e!="string")throw new TypeError("hex string expected, got "+typeof e);if(qs)try{return Uint8Array.fromHex(e)}catch(o){throw o instanceof SyntaxError?new RangeError(o.message):o}let t=e.length,r=t/2;if(t%2)throw new RangeError("hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(r);for(let o=0,s=0;o<r;o++,s+=2){let i=Ms(e.charCodeAt(s)),a=Ms(e.charCodeAt(s+1));if(i===void 0||a===void 0){let f=e[s]+e[s+1];throw new RangeError('hex string expected, got non-hex character "'+f+'" at index '+s)}n[o]=i*16+a}return n}function Qc(e){if(typeof e!="string")throw new TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function Yn(e,t=""){return typeof e=="string"?Qc(e):pt(e,void 0,t)}function $n(...e){let t=0;for(let n=0;n<e.length;n++){let o=e[n];pt(o),t+=o.length}let r=new Uint8Array(t);for(let n=0,o=0;n<e.length;n++){let s=e[n];r.set(s,o),o+=s.length}return r}function Vs(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw new TypeError("options must be object or undefined");return Object.assign(e,t)}function sr(e,t={}){let r=(o,s)=>e(s).update(o).digest(),n=e(void 0);return r.outputLen=n.outputLen,r.blockLen=n.blockLen,r.canXOF=n.canXOF,r.create=o=>e(o),Object.assign(r,t),Object.freeze(r)}function js(e=32){Et(e,"bytesLength");let t=typeof globalThis=="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!="function")throw new Error("crypto.getRandomValues must be defined");if(e>65536)throw new RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var Gn=e=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});function kr(e,t,r){return e&t^~e&r}function Pr(e,t,r){return e&t^e&r^t&r}var ce=class{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(t,r,n,o){this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.buffer=new Uint8Array(t),this.view=De(this.buffer)}update(t){Re(this),pt(t);let{view:r,buffer:n,blockLen:o}=this,s=t.length;for(let i=0;i<s;){let a=Math.min(o-this.pos,s-i);if(a===o){let f=De(t);for(;o<=s-i;i+=o)this.process(f,i);continue}n.set(t.subarray(i,i+a),this.pos),this.pos+=a,i+=a,this.pos===o&&(this.process(r,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){Re(this),Ur(t,this),this.finished=!0;let{buffer:r,view:n,blockLen:o,isLE:s}=this,{pos:i}=this;r[i++]=128,mt(this.buffer.subarray(i)),this.padOffset>o-i&&(this.process(n,0),i=0);for(let l=i;l<o;l++)r[l]=0;n.setBigUint64(o-8,BigInt(this.length*8),s),this.process(n,0);let a=De(t),f=this.outputLen;if(f%4)throw new Error("_sha2: outputLen must be aligned to 32bit");let c=f/4,u=this.get();if(c>u.length)throw new Error("_sha2: outputLen bigger than state");for(let l=0;l<c;l++)a.setUint32(4*l,u[l],s)}digest(){let{buffer:t,outputLen:r}=this;this.digestInto(t);let n=t.slice(0,r);return this.destroy(),n}_cloneInto(t){t||=new this.constructor,t.set(...this.get());let{blockLen:r,buffer:n,length:o,finished:s,destroyed:i,pos:a}=this;return t.destroyed=i,t.finished=s,t.length=o,t.pos=a,o%r&&t.buffer.set(n),t}clone(){return this._cloneInto()}},Ht=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var st=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Nr=BigInt(4294967295),zs=BigInt(32);function tf(e,t=!1){return t?{h:Number(e&Nr),l:Number(e>>zs&Nr)}:{h:Number(e>>zs&Nr)|0,l:Number(e&Nr)|0}}function Zs(e,t=!1){let r=e.length,n=new Uint32Array(r),o=new Uint32Array(r);for(let s=0;s<r;s++){let{h:i,l:a}=tf(e[s],t);[n[s],o[s]]=[i,a]}return[n,o]}var Xn=(e,t,r)=>e>>>r,Wn=(e,t,r)=>e<<32-r|t>>>r,fe=(e,t,r)=>e>>>r|t<<32-r,ue=(e,t,r)=>e<<32-r|t>>>r,ir=(e,t,r)=>e<<64-r|t>>>r-32,ar=(e,t,r)=>e>>>r-32|t<<64-r;function Kt(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var Ys=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),$s=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,Gs=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Xs=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,Ws=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),Js=(e,t,r,n,o,s)=>t+r+n+o+s+(e/2**32|0)|0;var rf=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),zt=new Uint32Array(64),Jn=class extends ce{constructor(t){super(64,t,8,!1)}get(){let{A:t,B:r,C:n,D:o,E:s,F:i,G:a,H:f}=this;return[t,r,n,o,s,i,a,f]}set(t,r,n,o,s,i,a,f){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0,this.F=i|0,this.G=a|0,this.H=f|0}process(t,r){for(let l=0;l<16;l++,r+=4)zt[l]=t.getUint32(r,!1);for(let l=16;l<64;l++){let b=zt[l-15],p=zt[l-2],m=At(b,7)^At(b,18)^b>>>3,E=At(p,17)^At(p,19)^p>>>10;zt[l]=E+zt[l-7]+m+zt[l-16]|0}let{A:n,B:o,C:s,D:i,E:a,F:f,G:c,H:u}=this;for(let l=0;l<64;l++){let b=At(a,6)^At(a,11)^At(a,25),p=u+b+kr(a,f,c)+rf[l]+zt[l]|0,E=(At(n,2)^At(n,13)^At(n,22))+Pr(n,o,s)|0;u=c,c=f,f=a,a=i+p|0,i=s,s=o,o=n,n=p+E|0}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,a=a+this.E|0,f=f+this.F|0,c=c+this.G|0,u=u+this.H|0,this.set(n,o,s,i,a,f,c,u)}roundClean(){mt(zt)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),mt(this.buffer)}},Qn=class extends Jn{A=Ht[0]|0;B=Ht[1]|0;C=Ht[2]|0;D=Ht[3]|0;E=Ht[4]|0;F=Ht[5]|0;G=Ht[6]|0;H=Ht[7]|0;constructor(){super(32)}};var Qs=Zs(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),nf=Qs[0],of=Qs[1],Zt=new Uint32Array(80),Yt=new Uint32Array(80),to=class extends ce{constructor(t){super(128,t,16,!1)}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:s,Cl:i,Dh:a,Dl:f,Eh:c,El:u,Fh:l,Fl:b,Gh:p,Gl:m,Hh:E,Hl:d}=this;return[t,r,n,o,s,i,a,f,c,u,l,b,p,m,E,d]}set(t,r,n,o,s,i,a,f,c,u,l,b,p,m,E,d){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=s|0,this.Cl=i|0,this.Dh=a|0,this.Dl=f|0,this.Eh=c|0,this.El=u|0,this.Fh=l|0,this.Fl=b|0,this.Gh=p|0,this.Gl=m|0,this.Hh=E|0,this.Hl=d|0}process(t,r){for(let v=0;v<16;v++,r+=4)Zt[v]=t.getUint32(r),Yt[v]=t.getUint32(r+=4);for(let v=16;v<80;v++){let D=Zt[v-15]|0,L=Yt[v-15]|0,U=fe(D,L,1)^fe(D,L,8)^Xn(D,L,7),K=ue(D,L,1)^ue(D,L,8)^Wn(D,L,7),I=Zt[v-2]|0,F=Yt[v-2]|0,V=fe(I,F,19)^ir(I,F,61)^Xn(I,F,6),O=ue(I,F,19)^ar(I,F,61)^Wn(I,F,6),h=Gs(K,O,Yt[v-7],Yt[v-16]),x=Xs(h,U,V,Zt[v-7],Zt[v-16]);Zt[v]=x|0,Yt[v]=h|0}let{Ah:n,Al:o,Bh:s,Bl:i,Ch:a,Cl:f,Dh:c,Dl:u,Eh:l,El:b,Fh:p,Fl:m,Gh:E,Gl:d,Hh:y,Hl:S}=this;for(let v=0;v<80;v++){let D=fe(l,b,14)^fe(l,b,18)^ir(l,b,41),L=ue(l,b,14)^ue(l,b,18)^ar(l,b,41),U=l&p^~l&E,K=b&m^~b&d,I=Ws(S,L,K,of[v],Yt[v]),F=Js(I,y,D,U,nf[v],Zt[v]),V=I|0,O=fe(n,o,28)^ir(n,o,34)^ir(n,o,39),h=ue(n,o,28)^ar(n,o,34)^ar(n,o,39),x=n&s^n&a^s&a,A=o&i^o&f^i&f;y=E|0,S=d|0,E=p|0,d=m|0,p=l|0,m=b|0,{h:l,l:b}=Kt(c|0,u|0,F|0,V|0),c=a|0,u=f|0,a=s|0,f=i|0,s=n|0,i=o|0;let w=Ys(V,h,A);n=$s(w,F,O,x),o=w|0}({h:n,l:o}=Kt(this.Ah|0,this.Al|0,n|0,o|0)),{h:s,l:i}=Kt(this.Bh|0,this.Bl|0,s|0,i|0),{h:a,l:f}=Kt(this.Ch|0,this.Cl|0,a|0,f|0),{h:c,l:u}=Kt(this.Dh|0,this.Dl|0,c|0,u|0),{h:l,l:b}=Kt(this.Eh|0,this.El|0,l|0,b|0),{h:p,l:m}=Kt(this.Fh|0,this.Fl|0,p|0,m|0),{h:E,l:d}=Kt(this.Gh|0,this.Gl|0,E|0,d|0),{h:y,l:S}=Kt(this.Hh|0,this.Hl|0,y|0,S|0),this.set(n,o,s,i,a,f,c,u,l,b,p,m,E,d,y,S)}roundClean(){mt(Zt,Yt)}destroy(){this.destroyed=!0,mt(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},eo=class extends to{Ah=st[0]|0;Al=st[1]|0;Bh=st[2]|0;Bl=st[3]|0;Ch=st[4]|0;Cl=st[5]|0;Dh=st[6]|0;Dl=st[7]|0;Eh=st[8]|0;El=st[9]|0;Fh=st[10]|0;Fl=st[11]|0;Gh=st[12]|0;Gl=st[13]|0;Hh=st[14]|0;Hl=st[15]|0;constructor(){super(64)}};var $t=sr(()=>new Qn,Gn(1));var Ke=sr(()=>new eo,Gn(3));var H=(e,t,r)=>pt(e,t,r),no=Et,Ce=Or,Q=(...e)=>$n(...e),Ue=e=>or(e),le=Zn,cr=e=>js(e),Mr=BigInt(0),ro=BigInt(1);function Bt(e,t=""){if(typeof e!="boolean"){let r=t&&`"${t}" `;throw new TypeError(r+"expected boolean, got type="+typeof e)}return e}function qr(e){if(typeof e=="bigint"){if(!Hr(e))throw new RangeError("positive bigint expected, got "+e)}else no(e);return e}function vt(e,t=""){if(typeof e!="number"){let r=t&&`"${t}" `;throw new TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw new RangeError(r+"expected safe integer, got "+e)}}function fr(e){let t=qr(e).toString(16);return t.length&1?"0"+t:t}function ti(e){if(typeof e!="string")throw new TypeError("hex string expected, got "+typeof e);return e===""?Mr:BigInt("0x"+e)}function he(e){return ti(Or(e))}function Ct(e){return ti(Or(ur(pt(e)).reverse()))}function Vr(e,t){if(Et(t),t===0)throw new RangeError("zero length");e=qr(e);let r=e.toString(16);if(r.length>t*2)throw new RangeError("number too large");return or(r.padStart(t*2,"0"))}function oo(e,t){return Vr(e,t).reverse()}function ei(e,t){if(e=H(e),t=H(t),e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return r===0}function ur(e){return Uint8Array.from(H(e))}function jr(e){if(typeof e!="string")throw new TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let n=t.charCodeAt(0);if(t.length!==1||n>127)throw new RangeError(`string contains non-ASCII character "${e[r]}" with code ${n} at position ${r}`);return n})}var Hr=e=>typeof e=="bigint"&&Mr<=e;function sf(e,t,r){return Hr(e)&&Hr(t)&&Hr(r)&&t<=e&&e<r}function Fe(e,t,r,n){if(!sf(t,r,n))throw new RangeError("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function Oe(e){if(e<Mr)throw new Error("expected non-negative bigint, got "+e);let t;for(t=0;e>Mr;e>>=ro,t+=1);return t}var lr=e=>(ro<<BigInt(e))-ro;function ri(e,t,r){if(Et(e,"hashLen"),Et(t,"qByteLen"),typeof r!="function")throw new TypeError("hmacFn must be a function");let n=d=>new Uint8Array(d),o=Uint8Array.of(),s=Uint8Array.of(0),i=Uint8Array.of(1),a=1e3,f=n(e),c=n(e),u=0,l=()=>{f.fill(1),c.fill(0),u=0},b=(...d)=>r(c,Q(f,...d)),p=(d=o)=>{c=b(s,d),f=b(),d.length!==0&&(c=b(i,d),f=b())},m=()=>{if(u++>=a)throw new Error("drbg: tried max amount of iterations");let d=0,y=[];for(;d<t;){f=b();let S=f.slice();y.push(S),d+=f.length}return Q(...y)};return(d,y)=>{l(),p(d);let S;for(;(S=y(m()))===void 0;)p();return l(),S}}function _t(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw new TypeError("expected valid options object");function n(s,i,a){if(!a&&i!=="function"&&!Object.hasOwn(e,s))throw new TypeError(`param "${s}" is invalid: expected own property`);let f=e[s];if(a&&f===void 0)return;let c=typeof f;if(c!==i||f===null)throw new TypeError(`param "${s}" is invalid: expected ${i}, got ${c}`)}let o=(s,i)=>Object.entries(s).forEach(([a,f])=>n(a,f,i));o(t,!1),o(r,!0)}var so=()=>{throw new Error("not implemented")};var it=BigInt(0),G=BigInt(1),de=BigInt(2),ii=BigInt(3),ai=BigInt(4),ci=BigInt(5),af=BigInt(7),fi=BigInt(8),cf=BigInt(9),ui=BigInt(16);function W(e,t){if(t<=it)throw new Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=it?r:t+r}function Z(e,t,r){if(t<it)throw new Error("pow2: expected non-negative exponent, got "+t);let n=e;for(;t-- >it;)n*=n,n%=r;return n}function ni(e,t){if(e===it)throw new Error("invert: expected non-zero number");if(t<=it)throw new Error("invert: expected positive modulus, got "+t);let r=W(e,t),n=t,o=it,s=G,i=G,a=it;for(;r!==it;){let c=n/r,u=n-r*c,l=o-i*c,b=s-a*c;n=r,r=u,o=i,s=a,i=l,a=b}if(n!==G)throw new Error("invert: does not exist");return W(o,t)}function io(e,t,r){let n=e;if(!n.eql(n.sqr(t),r))throw new Error("Cannot find square root")}function li(e,t){let r=e,n=(r.ORDER+G)/ai,o=r.pow(t,n);return io(r,o,t),o}function ff(e,t){let r=e,n=(r.ORDER-ci)/fi,o=r.mul(t,de),s=r.pow(o,n),i=r.mul(t,s),a=r.mul(r.mul(i,de),s),f=r.mul(i,r.sub(a,r.ONE));return io(r,f,t),f}function uf(e){let t=ke(e),r=hi(e),n=r(t,t.neg(t.ONE)),o=r(t,n),s=r(t,t.neg(n)),i=(e+af)/ui;return((a,f)=>{let c=a,u=c.pow(f,i),l=c.mul(u,n),b=c.mul(u,o),p=c.mul(u,s),m=c.eql(c.sqr(l),f),E=c.eql(c.sqr(b),f);u=c.cmov(u,l,m),l=c.cmov(p,b,E);let d=c.eql(c.sqr(l),f),y=c.cmov(u,l,d);return io(c,y,f),y})}function hi(e){if(e<ii)throw new Error("sqrt is not defined for small field");let t=e-G,r=0;for(;t%de===it;)t/=de,r++;let n=de,o=ke(e);for(;oi(o,n)===1;)if(n++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(r===1)return li;let s=o.pow(n,t),i=(t+G)/de;return function(f,c){let u=f;if(u.is0(c))return c;if(oi(u,c)!==1)throw new Error("Cannot find square root");let l=r,b=u.mul(u.ONE,s),p=u.pow(c,t),m=u.pow(c,i);for(;!u.eql(p,u.ONE);){if(u.is0(p))return u.ZERO;let E=1,d=u.sqr(p);for(;!u.eql(d,u.ONE);)if(E++,d=u.sqr(d),E===l)throw new Error("Cannot find square root");let y=G<<BigInt(l-E-1),S=u.pow(b,y);l=E,b=u.sqr(S),p=u.mul(p,b),m=u.mul(m,S)}return m}}function lf(e){return e%ai===ii?li:e%fi===ci?ff:e%ui===cf?uf(e):hi(e)}var Mt=(e,t)=>(W(e,t)&G)===G,hf=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function ao(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=hf.reduce((n,o)=>(n[o]="function",n),t);if(_t(e,r),vt(e.BYTES,"BYTES"),vt(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw new Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=G)throw new Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function df(e,t,r){let n=e;if(r<it)throw new Error("invalid exponent, negatives unsupported");if(r===it)return n.ONE;if(r===G)return t;let o=n.ONE,s=t;for(;r>it;)r&G&&(o=n.mul(o,s)),s=n.sqr(s),r>>=G;return o}function hr(e,t,r=!1){let n=e,o=new Array(t.length).fill(r?n.ZERO:void 0),s=t.reduce((a,f,c)=>n.is0(f)?a:(o[c]=a,n.mul(a,f)),n.ONE),i=n.inv(s);return t.reduceRight((a,f,c)=>n.is0(f)?a:(o[c]=n.mul(a,o[c]),n.mul(a,f)),i),o}function oi(e,t){let r=e,n=(r.ORDER-G)/de,o=r.pow(t,n),s=r.eql(o,r.ONE),i=r.eql(o,r.ZERO),a=r.eql(o,r.neg(r.ONE));if(!s&&!i&&!a)throw new Error("invalid Legendre symbol result");return s?1:i?0:-1}function pf(e,t){if(t!==void 0&&no(t),e<=it)throw new Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw new Error("invalid n length: expected positive bit length, got "+t);let r=Oe(e);if(t!==void 0&&t<r)throw new Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let n=t!==void 0?t:r,o=Math.ceil(n/8);return{nBitLength:n,nByteLength:o}}var si=new WeakMap,zr=class{ORDER;BITS;BYTES;isLE;ZERO=it;ONE=G;_lengths;_mod;constructor(t,r={}){if(t<=G)throw new Error("invalid field: expected ORDER > 1, got "+t);let n;this.isLE=!1,r!=null&&typeof r=="object"&&(typeof r.BITS=="number"&&(n=r.BITS),typeof r.sqrt=="function"&&Object.defineProperty(this,"sqrt",{value:r.sqrt,enumerable:!0}),typeof r.isLE=="boolean"&&(this.isLE=r.isLE),r.allowedLengths&&(this._lengths=Object.freeze(r.allowedLengths.slice())),typeof r.modFromBytes=="boolean"&&(this._mod=r.modFromBytes));let{nBitLength:o,nByteLength:s}=pf(t,n);if(s>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=t,this.BITS=o,this.BYTES=s,Object.freeze(this)}create(t){return W(t,this.ORDER)}isValid(t){if(typeof t!="bigint")throw new TypeError("invalid field element: expected bigint, got "+typeof t);return it<=t&&t<this.ORDER}is0(t){return t===it}isValidNot0(t){return!this.is0(t)&&this.isValid(t)}isOdd(t){return(t&G)===G}neg(t){return W(-t,this.ORDER)}eql(t,r){return t===r}sqr(t){return W(t*t,this.ORDER)}add(t,r){return W(t+r,this.ORDER)}sub(t,r){return W(t-r,this.ORDER)}mul(t,r){return W(t*r,this.ORDER)}pow(t,r){return df(this,t,r)}div(t,r){return W(t*ni(r,this.ORDER),this.ORDER)}sqrN(t){return t*t}addN(t,r){return t+r}subN(t,r){return t-r}mulN(t,r){return t*r}inv(t){return ni(t,this.ORDER)}sqrt(t){let r=si.get(this);return r||si.set(this,r=lf(this.ORDER)),r(this,t)}toBytes(t){return this.isLE?oo(t,this.BYTES):Vr(t,this.BYTES)}fromBytes(t,r=!1){H(t);let{_lengths:n,BYTES:o,isLE:s,ORDER:i,_mod:a}=this;if(n){if(t.length<1||!n.includes(t.length)||t.length>o)throw new Error("Field.fromBytes: expected "+n+" bytes, got "+t.length);let c=new Uint8Array(o);c.set(t,s?0:c.length-t.length),t=c}if(t.length!==o)throw new Error("Field.fromBytes: expected "+o+" bytes, got "+t.length);let f=s?Ct(t):he(t);if(a&&(f=W(f,i)),!r&&!this.isValid(f))throw new Error("invalid field element: outside of range 0..ORDER");return f}invertBatch(t){return hr(this,t)}cmov(t,r,n){return Bt(n,"condition"),n?r:t}};Object.freeze(zr.prototype);function ke(e,t={}){return new zr(e,t)}function di(e){if(typeof e!="bigint")throw new Error("field order must be bigint");if(e<=G)throw new Error("field order must be greater than 1");let t=Oe(e-G);return Math.ceil(t/8)}function co(e){let t=di(e);return t+Math.ceil(t/2)}function fo(e,t,r=!1){H(e);let n=e.length,o=di(t),s=Math.max(co(t),16);if(n<s||n>1024)throw new Error("expected "+s+"-1024 bytes of input, got "+n);let i=r?Ct(e):he(e),a=W(i,t-G)+G;return r?oo(a,o):Vr(a,o)}var Pe=BigInt(0),pe=BigInt(1);function dr(e,t){let r=t.negate();return e?r:t}function me(e,t){let r=hr(e.Fp,t.map(n=>n.Z));return t.map((n,o)=>e.fromAffine(n.toAffine(r[o])))}function bi(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw new Error("invalid window size, expected [1.."+t+"], got W="+e)}function uo(e,t){bi(e,t);let r=Math.ceil(t/e)+1,n=2**(e-1),o=2**e,s=lr(e),i=BigInt(e);return{windows:r,windowSize:n,mask:s,maxNumber:o,shiftBy:i}}function pi(e,t,r){let{windowSize:n,mask:o,maxNumber:s,shiftBy:i}=r,a=Number(e&o),f=e>>i;a>n&&(a-=s,f+=pe);let c=t*n,u=c+Math.abs(a)-1,l=a===0,b=a<0,p=t%2!==0;return{nextN:f,offset:u,isZero:l,isNeg:b,isNegF:p,offsetF:c}}var lo=new WeakMap,xi=new WeakMap;function ho(e){return xi.get(e)||1}function mi(e){if(e!==Pe)throw new Error("invalid wNAF")}var Ne=class{BASE;ZERO;Fn;bits;constructor(t,r){this.BASE=t.BASE,this.ZERO=t.ZERO,this.Fn=t.Fn,this.bits=r}_unsafeLadder(t,r,n=this.ZERO){let o=t;for(;r>Pe;)r&pe&&(n=n.add(o)),o=o.double(),r>>=pe;return n}precomputeWindow(t,r){let{windows:n,windowSize:o}=uo(r,this.bits),s=[],i=t,a=i;for(let f=0;f<n;f++){a=i,s.push(a);for(let c=1;c<o;c++)a=a.add(i),s.push(a);i=a.double()}return s}wNAF(t,r,n){if(!this.Fn.isValid(n))throw new Error("invalid scalar");let o=this.ZERO,s=this.BASE,i=uo(t,this.bits);for(let a=0;a<i.windows;a++){let{nextN:f,offset:c,isZero:u,isNeg:l,isNegF:b,offsetF:p}=pi(n,a,i);n=f,u?s=s.add(dr(b,r[p])):o=o.add(dr(l,r[c]))}return mi(n),{p:o,f:s}}wNAFUnsafe(t,r,n,o=this.ZERO){let s=uo(t,this.bits);for(let i=0;i<s.windows&&n!==Pe;i++){let{nextN:a,offset:f,isZero:c,isNeg:u}=pi(n,i,s);if(n=a,!c){let l=r[f];o=o.add(u?l.negate():l)}}return mi(n),o}getPrecomputes(t,r,n){let o=lo.get(r);return o||(o=this.precomputeWindow(r,t),t!==1&&(typeof n=="function"&&(o=n(o)),lo.set(r,o))),o}cached(t,r,n){let o=ho(t);return this.wNAF(o,this.getPrecomputes(o,t,n),r)}unsafe(t,r,n,o){let s=ho(t);return s===1?this._unsafeLadder(t,r,o):this.wNAFUnsafe(s,this.getPrecomputes(s,t,n),r,o)}createCache(t,r){bi(r,this.bits),xi.set(t,r),lo.delete(t)}hasCache(t){return ho(t)!==1}};function gi(e,t,r,n){let o=t,s=e.ZERO,i=e.ZERO;for(;r>Pe||n>Pe;)r&pe&&(s=s.add(o)),n&pe&&(i=i.add(o)),o=o.double(),r>>=pe,n>>=pe;return{p1:s,p2:i}}function yi(e,t,r){if(t){if(t.ORDER!==e)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return ao(t),t}else return ke(e,{isLE:r})}function Zr(e,t,r={},n){if(n===void 0&&(n=e==="edwards"),!t||typeof t!="object")throw new Error(`expected valid ${e} CURVE object`);for(let f of["p","n","h"]){let c=t[f];if(!(typeof c=="bigint"&&c>Pe))throw new Error(`CURVE.${f} must be positive bigint`)}let o=yi(t.p,r.Fp,n),s=yi(t.n,r.Fn,n),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let f of a)if(!o.isValid(t[f]))throw new Error(`CURVE.${f} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:o,Fn:s}}function Yr(e,t){return function(n){let o=e(n);return{secretKey:o,publicKey:t(o)}}}var Gt=BigInt(0),nt=BigInt(1),po=BigInt(2),mf=BigInt(8);function yf(e,t,r,n){let o=e.sqr(r),s=e.sqr(n),i=e.add(e.mul(t.a,o),s),a=e.add(e.ONE,e.mul(t.d,e.mul(o,s)));return e.eql(i,a)}function wi(e,t={}){let r=t,n=Zr("edwards",e,r,r.FpFnLE),{Fp:o,Fn:s}=n,i=n.CURVE,{h:a}=i;_t(r,{},{uvRatio:"function"});let f=po<<BigInt(s.BYTES*8)-nt,c=E=>o.create(E),u=r.uvRatio===void 0?(E,d)=>{try{return{isValid:!0,value:o.sqrt(o.div(E,d))}}catch{return{isValid:!1,value:Gt}}}:r.uvRatio;if(!yf(o,i,i.Gx,i.Gy))throw new Error("bad curve params: generator point");function l(E,d,y=!1){let S=y?nt:Gt;return Fe("coordinate "+E,d,S,f),d}function b(E){if(!(E instanceof p))throw new Error("EdwardsPoint expected")}class p{static BASE=new p(i.Gx,i.Gy,nt,c(i.Gx*i.Gy));static ZERO=new p(Gt,nt,nt,Gt);static Fp=o;static Fn=s;X;Y;Z;T;constructor(d,y,S,v){this.X=l("x",d),this.Y=l("y",y),this.Z=l("z",S,!0),this.T=l("t",v),Object.freeze(this)}static CURVE(){return i}static fromAffine(d){if(d instanceof p)throw new Error("extended point not allowed");let{x:y,y:S}=d||{};return l("x",y),l("y",S),new p(y,S,nt,c(y*S))}static fromBytes(d,y=!1){let S=o.BYTES,{a:v,d:D}=i;d=ur(H(d,S,"point")),Bt(y,"zip215");let L=ur(d),U=d[S-1];L[S-1]=U&-129;let K=Ct(L),I=y?f:o.ORDER;Fe("point.y",K,Gt,I);let F=c(K*K),V=c(F-nt),O=c(D*F-v),{isValid:h,value:x}=u(V,O);if(!h)throw new Error("bad point: invalid y coordinate");let A=(x&nt)===nt,w=(U&128)!==0;if(!y&&x===Gt&&w)throw new Error("bad point: x=0 and x_0=1");return w!==A&&(x=c(-x)),p.fromAffine({x,y:K})}static fromHex(d,y=!1){return p.fromBytes(Ue(d),y)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(d=8,y=!0){return m.createCache(this,d),y||this.multiply(po),this}assertValidity(){let d=this,{a:y,d:S}=i;if(d.is0())throw new Error("bad point: ZERO");let{X:v,Y:D,Z:L,T:U}=d,K=c(v*v),I=c(D*D),F=c(L*L),V=c(F*F),O=c(K*y),h=c(F*c(O+I)),x=c(V+c(S*c(K*I)));if(h!==x)throw new Error("bad point: equation left != right (1)");let A=c(v*D),w=c(L*U);if(A!==w)throw new Error("bad point: equation left != right (2)")}equals(d){b(d);let{X:y,Y:S,Z:v}=this,{X:D,Y:L,Z:U}=d,K=c(y*U),I=c(D*v),F=c(S*U),V=c(L*v);return K===I&&F===V}is0(){return this.equals(p.ZERO)}negate(){return new p(c(-this.X),this.Y,this.Z,c(-this.T))}double(){let{a:d}=i,{X:y,Y:S,Z:v}=this,D=c(y*y),L=c(S*S),U=c(po*c(v*v)),K=c(d*D),I=y+S,F=c(c(I*I)-D-L),V=K+L,O=V-U,h=K-L,x=c(F*O),A=c(V*h),w=c(F*h),g=c(O*V);return new p(x,A,g,w)}add(d){b(d);let{a:y,d:S}=i,{X:v,Y:D,Z:L,T:U}=this,{X:K,Y:I,Z:F,T:V}=d,O=c(v*K),h=c(D*I),x=c(U*S*V),A=c(L*F),w=c((v+D)*(K+I)-O-h),g=A-x,B=A+x,T=c(h-y*O),_=c(w*g),R=c(B*T),C=c(w*T),N=c(g*B);return new p(_,R,N,C)}subtract(d){return b(d),this.add(d.negate())}multiply(d){if(!s.isValidNot0(d))throw new RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:y,f:S}=m.cached(this,d,v=>me(p,v));return me(p,[y,S])[0]}multiplyUnsafe(d){if(!s.isValid(d))throw new RangeError("invalid scalar: expected 0 <= sc < curve.n");return d===Gt?p.ZERO:this.is0()||d===nt?this:m.unsafe(this,d,y=>me(p,y))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return m.unsafe(this,i.n).is0()}toAffine(d){let y=this,S=d,{X:v,Y:D,Z:L}=y,U=y.is0();S==null&&(S=U?mf:o.inv(L));let K=c(v*S),I=c(D*S),F=o.mul(L,S);if(U)return{x:Gt,y:nt};if(F!==nt)throw new Error("invZ was invalid");return{x:K,y:I}}clearCofactor(){return a===nt?this:this.multiplyUnsafe(a)}toBytes(){let{x:d,y}=this.toAffine(),S=o.toBytes(y);return S[S.length-1]|=d&nt?128:0,S}toHex(){return Ce(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let m=new Ne(p,s.BITS);return s.BITS>=8&&p.BASE.precompute(8),Object.freeze(p.prototype),Object.freeze(p),p}var $r=class{static BASE;static ZERO;static Fp;static Fn;ep;constructor(t){this.ep=t}static fromBytes(t){so()}static fromHex(t){so()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(t){return this.ep.toAffine(t)}toHex(){return Ce(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(t){return this.assertSame(t),this.init(this.ep.add(t.ep))}subtract(t){return this.assertSame(t),this.init(this.ep.subtract(t.ep))}multiply(t){return this.init(this.ep.multiply(t))}multiplyUnsafe(t){return this.init(this.ep.multiplyUnsafe(t))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(t,r){return this.ep.precompute(t,r),this}};function Ei(e,t,r={}){if(typeof t!="function")throw new Error('"hash" function param is required');let n=t,o=r;_t(o,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",zip215:"boolean",mapToCurve:"function"});let{prehash:s}=o,{BASE:i,Fp:a,Fn:f}=e,c=n.outputLen,u=2*a.BYTES;if(c!==void 0&&(vt(c,"hash.outputLen"),c!==u))throw new Error(`hash.outputLen must be ${u}, got ${c}`);let l=o.randomBytes===void 0?cr:o.randomBytes,b=o.adjustScalarBytes===void 0?h=>h:o.adjustScalarBytes,p=o.domain===void 0?(h,x,A)=>{if(Bt(A,"phflag"),x.length||A)throw new Error("Contexts/pre-hash are not supported");return h}:o.domain;function m(h){return f.create(Ct(h))}function E(h){let x=K.secretKey;H(h,K.secretKey,"secretKey");let A=H(n(h),2*x,"hashedSecretKey"),w=b(A.slice(0,x)),g=A.slice(x,2*x),B=m(w);return{head:w,prefix:g,scalar:B}}function d(h){let{head:x,prefix:A,scalar:w}=E(h),g=i.multiply(w),B=g.toBytes();return{head:x,prefix:A,scalar:w,point:g,pointBytes:B}}function y(h){return d(h).pointBytes}function S(h=Uint8Array.of(),...x){let A=Q(...x);return m(n(p(A,H(h,void 0,"context"),!!s)))}function v(h,x,A={}){h=H(h,void 0,"message"),s&&(h=s(h));let{prefix:w,scalar:g,pointBytes:B}=d(x),T=S(A.context,w,h),_=i.multiply(T).toBytes(),R=S(A.context,_,B,h),C=f.create(T+R*g);if(!f.isValid(C))throw new Error("sign failed: invalid s");let N=Q(_,f.toBytes(C));return H(N,K.signature,"result")}let D={zip215:o.zip215};function L(h,x,A,w=D){let{context:g}=w,B=w.zip215===void 0?!!D.zip215:w.zip215,T=K.signature;h=H(h,T,"signature"),x=H(x,void 0,"message"),A=H(A,K.publicKey,"publicKey"),B!==void 0&&Bt(B,"zip215"),s&&(x=s(x));let _=T/2,R=h.subarray(0,_),C=Ct(h.subarray(_,T)),N,q,P;try{N=e.fromBytes(A,B),q=e.fromBytes(R,B),P=i.multiplyUnsafe(C)}catch{return!1}if(!B&&N.isSmallOrder())return!1;let J=S(g,R,A,x);return q.add(N.multiplyUnsafe(J)).subtract(P).clearCofactor().is0()}let U=a.BYTES,K={secretKey:U,publicKey:U,signature:2*U,seed:U};function I(h){return h=h===void 0?l(K.seed):h,H(h,K.seed,"seed")}function F(h){return le(h)&&h.length===K.secretKey}function V(h,x){try{return!!e.fromBytes(h,x===void 0?D.zip215:x)}catch{return!1}}let O={getExtendedPublicKey:d,randomSecretKey:I,isValidSecretKey:F,isValidPublicKey:V,toMontgomery(h){let{y:x}=e.fromBytes(h),A=K.publicKey,w=A===32;if(!w&&A!==57)throw new Error("only defined for 25519 and 448");let g=w?a.div(nt+x,nt-x):a.div(x-nt,x+nt);return a.toBytes(g)},toMontgomerySecret(h){let x=K.secretKey;H(h,x);let A=n(h.subarray(0,x));return b(A).subarray(0,x)}};return Object.freeze(K),Object.freeze(O),Object.freeze({keygen:Yr(I,y),getPublicKey:y,sign:v,verify:L,utils:O,Point:e,lengths:K})}function pr(e,t){if(vt(e),vt(t),t<0||t>4)throw new Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw new Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let n=t-1;n>=0;n--)r[n]=e&255,e>>>=8;return new Uint8Array(r)}function bf(e,t){let r=new Uint8Array(e.length);for(let n=0;n<e.length;n++)r[n]=e[n]^t[n];return r}function xf(e){if(!le(e)&&typeof e!="string")throw new Error("DST must be Uint8Array or ascii string");let t=typeof e=="string"?jr(e):e;if(t.length===0)throw new Error("DST must be non-empty");return t}function mo(e,t,r,n){H(e),vt(r),t=xf(t),t.length>255&&(t=n(Q(jr("H2C-OVERSIZE-DST-"),t)));let{outputLen:o,blockLen:s}=n,i=Math.ceil(r/o);if(r>65535||i>255)throw new Error("expand_message_xmd: invalid lenInBytes");let a=Q(t,pr(t.length,1)),f=new Uint8Array(s),c=pr(r,2),u=new Array(i),l=n(Q(f,e,c,pr(0,1),a));u[0]=n(Q(l,pr(1,1),a));for(let p=1;p<i;p++){let m=[bf(l,u[p-1]),pr(p+1,1),a];u[p]=n(Q(...m))}return Q(...u).slice(0,r)}var Si="HashToScalar-";var gf=BigInt(0),qt=BigInt(1),Ai=BigInt(2);var wf=BigInt(5),Ef=BigInt(8),He=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),go={p:He,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:Ef,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")};function Sf(e){let t=BigInt(10),r=BigInt(20),n=BigInt(40),o=BigInt(80),s=He,a=e*e%s*e%s,f=Z(a,Ai,s)*a%s,c=Z(f,qt,s)*e%s,u=Z(c,wf,s)*c%s,l=Z(u,t,s)*u%s,b=Z(l,r,s)*l%s,p=Z(b,n,s)*b%s,m=Z(p,o,s)*p%s,E=Z(m,o,s)*p%s,d=Z(E,t,s)*u%s;return{pow_p_5_8:Z(d,Ai,s)*e%s,b2:a}}function Af(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var yo=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function wo(e,t){let r=He,n=W(t*t*t,r),o=W(n*n*t,r),s=Sf(e*o).pow_p_5_8,i=W(e*n*s,r),a=W(t*i*i,r),f=i,c=W(i*yo,r),u=a===e,l=a===W(-e,r),b=a===W(-e*yo,r);return u&&(i=f),(l||b)&&(i=c),Mt(i,r)&&(i=W(-i,r)),{isValid:u||l,value:i}}var Wt=wi(go,{uvRatio:wo}),Xt=Wt.Fp,_i=Wt.Fn;function Bf(e){return Ei(Wt,Ke,Object.assign({adjustScalarBytes:Af,zip215:!0},e))}var Me=Bf({});var bo=yo,vf=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),_f=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),If=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Tf=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Bi=e=>wo(qt,e),Lf=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),xo=e=>Xt.create(Ct(e)&Lf);function vi(e){let{d:t}=go,r=He,n=y=>Xt.create(y),o=n(bo*e*e),s=n((o+qt)*If),i=BigInt(-1),a=n((i-t*o)*n(o+t)),{isValid:f,value:c}=wo(s,a),u=n(c*e);Mt(u,r)||(u=n(-u)),f||(c=u),f||(i=o);let l=n(i*(o-qt)*Tf-a),b=c*c,p=n((c+c)*a),m=n(l*vf),E=n(qt-b),d=n(qt+b);return new Wt(n(p*d),n(E*m),n(m*d),n(p*E))}var Jt=class e extends $r{static BASE=new e(Wt.BASE);static ZERO=new e(Wt.ZERO);static Fp=Xt;static Fn=_i;constructor(t){super(t)}static fromAffine(t){return new e(Wt.fromAffine(t))}assertSame(t){if(!(t instanceof e))throw new Error("RistrettoPoint expected")}init(t){return new e(t)}static fromBytes(t){pt(t,32);let{a:r,d:n}=go,o=He,s=D=>Xt.create(D),i=xo(t);if(!ei(Xt.toBytes(i),t)||Mt(i,o))throw new Error("invalid ristretto255 encoding 1");let a=s(i*i),f=s(qt+r*a),c=s(qt-r*a),u=s(f*f),l=s(c*c),b=s(r*n*u-l),{isValid:p,value:m}=Bi(s(b*l)),E=s(m*c),d=s(m*E*b),y=s((i+i)*E);Mt(y,o)&&(y=s(-y));let S=s(f*d),v=s(y*S);if(!p||Mt(v,o)||S===gf)throw new Error("invalid ristretto255 encoding 2");return new e(new Wt(y,S,qt,v))}static fromHex(t){return e.fromBytes(or(t))}toBytes(){let{X:t,Y:r,Z:n,T:o}=this.ep,s=He,i=d=>Xt.create(d),a=i(i(n+r)*i(n-r)),f=i(t*r),c=i(f*f),{value:u}=Bi(i(a*c)),l=i(u*a),b=i(u*f),p=i(l*b*o),m;if(Mt(o*p,s)){let d=i(r*bo),y=i(t*bo);t=d,r=y,m=i(l*_f)}else m=b;Mt(t*p,s)&&(r=i(-r));let E=i((n-r)*m);return Mt(E,s)&&(E=i(-E)),Xt.toBytes(E)}equals(t){this.assertSame(t);let{X:r,Y:n}=this.ep,{X:o,Y:s}=t.ep,i=c=>Xt.create(c),a=i(r*s)===i(n*o),f=i(n*s)===i(r*o);return a||f}is0(){return this.equals(e.ZERO)}};Object.freeze(Jt.BASE);Object.freeze(Jt.ZERO);Object.freeze(Jt.prototype);Object.freeze(Jt);var Rf=Object.freeze({Point:Jt,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,n=mo(e,r,64,Ke);return Rf.deriveToCurve(n)},hashToScalar(e,t={DST:Si}){let r=mo(e,t.DST,64,Ke);return _i.create(Ct(r))},deriveToCurve(e){pt(e,64);let t=xo(e.subarray(0,32)),r=vi(t),n=xo(e.subarray(32,64)),o=vi(n);return new Jt(r.add(o))}});var Qt=32,xt=64,Gr=32;var qe,Ii=(async()=>{try{return await Y.get().subtle.generateKey({name:"Ed25519"},!0,["sign","verify"]),!0}catch{return!1}})();function Ti(){let e=Me.utils.randomSecretKey(),t=Me.getPublicKey(e);return{privateKey:Ki(e,t),publicKey:t}}function Li(e){if(e.length!==Gr)throw new TypeError('"seed" must be 32 bytes in length.');if(!(e instanceof Uint8Array))throw new TypeError('"seed" must be a node.js Buffer, or Uint8Array.');let t=e,r=Me.getPublicKey(t);return{privateKey:Ki(t,r),publicKey:r}}async function Df(e,t){let r;e.length===xt?r=e.subarray(0,32):r=e;let n={crv:"Ed25519",kty:"OKP",x:M(e.subarray(32),"base64url"),d:M(r,"base64url"),ext:!0,key_ops:["sign"]},o=await Y.get().subtle.importKey("jwk",n,{name:"Ed25519"},!0,["sign"]),s=await Y.get().subtle.sign({name:"Ed25519"},o,ot(t instanceof Uint8Array?t:t.subarray()));return new Uint8Array(s,0,s.byteLength)}function Kf(e,t){let r=e.subarray(0,Gr);return Me.sign(t instanceof Uint8Array?t:t.subarray(),r)}async function Ri(e,t){return qe==null&&(qe=await Ii),qe?Df(e,t):Kf(e,t)}async function Cf(e,t,r){if(e.buffer instanceof ArrayBuffer){let n=await Y.get().subtle.importKey("raw",e.buffer,{name:"Ed25519"},!1,["verify"]);return await Y.get().subtle.verify({name:"Ed25519"},n,ot(t),ot(r instanceof Uint8Array?r:r.subarray()))}throw new TypeError("WebCrypto does not support SharedArrayBuffer for Ed25519 keys")}function Uf(e,t,r){return Me.verify(t,r instanceof Uint8Array?r:r.subarray(),e)}async function Di(e,t,r){return qe==null&&(qe=await Ii),qe?Cf(e,t,r):Uf(e,t,r)}function Ki(e,t){let r=new Uint8Array(xt);for(let n=0;n<Gr;n++)r[n]=e[n],r[Gr+n]=t[n];return r}function Eo(e,t){let r=z(e,"base64urlpad");if(t!=null){if(r.length>t)throw new Error("byte array longer than desired length");r=Dt([new Uint8Array(t-r.length),r])}return r}function Ve(e){return e==null?!1:typeof e.then=="function"&&typeof e.catch=="function"&&typeof e.finally=="function"}var mr=class{type="Ed25519";raw;constructor(t){this.raw=je(t,Qt)}toMultihash(){return se.digest(ae(this))}toCID(){return wt.createV1(114,this.toMultihash())}toString(){return rt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}verify(t,r,n){n?.signal?.throwIfAborted();let o=Di(this.raw,r,t);return Ve(o)?o.then(s=>(n?.signal?.throwIfAborted(),s)):o}},ye=class{type="Ed25519";raw;publicKey;constructor(t,r){this.raw=je(t,xt),this.publicKey=new mr(r)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}sign(t,r){r?.signal?.throwIfAborted();let n=Ri(this.raw,t);return Ve(n)?n.then(o=>(r?.signal?.throwIfAborted(),o)):(r?.signal?.throwIfAborted(),n)}};function So(e){if(e.length>xt){e=je(e,xt+Qt);let n=e.subarray(0,xt),o=e.subarray(xt,e.length);return new ye(n,o)}e=je(e,xt);let t=e.subarray(0,xt),r=e.subarray(Qt);return new ye(t,r)}function Xr(e){return e=je(e,Qt),new mr(e)}async function Ui(){let{privateKey:e,publicKey:t}=Ti();return new ye(e,t)}async function Fi(e){let{privateKey:t,publicKey:r}=Li(e);return new ye(t,r)}function je(e,t){if(e=Uint8Array.from(e??[]),e.length!==t)throw new k(`Key must be a Uint8Array of length ${t}, got ${e.length}`);return e}var Ff=Math.pow(2,7),Of=Math.pow(2,14),kf=Math.pow(2,21),Oi=Math.pow(2,28),ki=Math.pow(2,35),Pi=Math.pow(2,42),Ni=Math.pow(2,49),ht=128,te=127;function yr(e){if(e<Ff)return 1;if(e<Of)return 2;if(e<kf)return 3;if(e<Oi)return 4;if(e<ki)return 5;if(e<Pi)return 6;if(e<Ni)return 7;if(Number.MAX_SAFE_INTEGER!=null&&e>Number.MAX_SAFE_INTEGER)throw new RangeError("Could not encode varint");return 8}function Hi(e,t,r=0){switch(yr(e)){case 8:t[r++]=e&255|ht,e/=128;case 7:t[r++]=e&255|ht,e/=128;case 6:t[r++]=e&255|ht,e/=128;case 5:t[r++]=e&255|ht,e/=128;case 4:t[r++]=e&255|ht,e>>>=7;case 3:t[r++]=e&255|ht,e>>>=7;case 2:t[r++]=e&255|ht,e>>>=7;case 1:{t[r++]=e&255,e>>>=7;break}default:throw new Error("unreachable")}return t}function Mi(e,t){let r=e[t],n=0;if(n+=r&te,r<ht||(r=e[t+1],n+=(r&te)<<7,r<ht)||(r=e[t+2],n+=(r&te)<<14,r<ht)||(r=e[t+3],n+=(r&te)<<21,r<ht)||(r=e[t+4],n+=(r&te)*Oi,r<ht)||(r=e[t+5],n+=(r&te)*ki,r<ht)||(r=e[t+6],n+=(r&te)*Pi,r<ht)||(r=e[t+7],n+=(r&te)*Ni,r<ht))return n;throw new RangeError("Could not decode varint")}var Ao=new Float32Array([-0]),ee=new Uint8Array(Ao.buffer);function qi(e,t,r){Ao[0]=e,t[r]=ee[0],t[r+1]=ee[1],t[r+2]=ee[2],t[r+3]=ee[3]}function Vi(e,t){return ee[0]=e[t],ee[1]=e[t+1],ee[2]=e[t+2],ee[3]=e[t+3],Ao[0]}var Bo=new Float64Array([-0]),ft=new Uint8Array(Bo.buffer);function ji(e,t,r){Bo[0]=e,t[r]=ft[0],t[r+1]=ft[1],t[r+2]=ft[2],t[r+3]=ft[3],t[r+4]=ft[4],t[r+5]=ft[5],t[r+6]=ft[6],t[r+7]=ft[7]}function zi(e,t){return ft[0]=e[t],ft[1]=e[t+1],ft[2]=e[t+2],ft[3]=e[t+3],ft[4]=e[t+4],ft[5]=e[t+5],ft[6]=e[t+6],ft[7]=e[t+7],Bo[0]}var Pf=BigInt(Number.MAX_SAFE_INTEGER),Nf=BigInt(Number.MIN_SAFE_INTEGER),gt=class e{lo;hi;constructor(t,r){this.lo=t|0,this.hi=r|0}toNumber(t=!1){if(!t&&this.hi>>>31>0){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(r+n*4294967296)}return this.lo+this.hi*4294967296}toBigInt(t=!1){if(t)return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n);if(this.hi>>>31){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(BigInt(r)+(BigInt(n)<<32n))}return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n)}toString(t=!1){return this.toBigInt(t).toString()}zzEncode(){let t=this.hi>>31;return this.hi=((this.hi<<1|this.lo>>>31)^t)>>>0,this.lo=(this.lo<<1^t)>>>0,this}zzDecode(){let t=-(this.lo&1);return this.lo=((this.lo>>>1|this.hi<<31)^t)>>>0,this.hi=(this.hi>>>1^t)>>>0,this}length(){let t=this.lo,r=(this.lo>>>28|this.hi<<4)>>>0,n=this.hi>>>24;return n===0?r===0?t<16384?t<128?1:2:t<2097152?3:4:r<16384?r<128?5:6:r<2097152?7:8:n<128?9:10}static fromBigInt(t){if(t===0n)return be;if(t<Pf&&t>Nf)return this.fromNumber(Number(t));let r=t<0n;r&&(t=-t);let n=t>>32n,o=t-(n<<32n);return r&&(n=~n|0n,o=~o|0n,++o>Zi&&(o=0n,++n>Zi&&(n=0n))),new e(Number(o),Number(n))}static fromNumber(t){if(t===0)return be;let r=t<0;r&&(t=-t);let n=t>>>0,o=(t-n)/4294967296>>>0;return r&&(o=~o>>>0,n=~n>>>0,++n>4294967295&&(n=0,++o>4294967295&&(o=0))),new e(n,o)}static from(t){return typeof t=="number"?e.fromNumber(t):typeof t=="bigint"?e.fromBigInt(t):typeof t=="string"?e.fromBigInt(BigInt(t)):t.low!=null||t.high!=null?new e(t.low>>>0,t.high>>>0):be}},be=new gt(0,0);be.toBigInt=function(){return 0n};be.zzEncode=be.zzDecode=function(){return this};be.length=function(){return 1};var Zi=4294967296n;function Yi(e){let t=0,r=0;for(let n=0;n<e.length;++n)r=e.charCodeAt(n),r<128?t+=1:r<2048?t+=2:(r&64512)===55296&&(e.charCodeAt(n+1)&64512)===56320?(++n,t+=4):t+=3;return t}function $i(e,t,r){if(r-t<1)return"";let o,s=[],i=0,a;for(;t<r;)a=e[t++],a<128?s[i++]=a:a>191&&a<224?s[i++]=(a&31)<<6|e[t++]&63:a>239&&a<365?(a=((a&7)<<18|(e[t++]&63)<<12|(e[t++]&63)<<6|e[t++]&63)-65536,s[i++]=55296+(a>>10),s[i++]=56320+(a&1023)):s[i++]=(a&15)<<12|(e[t++]&63)<<6|e[t++]&63,i>8191&&((o??(o=[])).push(String.fromCharCode.apply(String,s)),i=0);return o!=null?(i>0&&o.push(String.fromCharCode.apply(String,s.slice(0,i))),o.join("")):String.fromCharCode.apply(String,s.slice(0,i))}function vo(e,t,r){let n=r,o,s;for(let i=0;i<e.length;++i)o=e.charCodeAt(i),o<128?t[r++]=o:o<2048?(t[r++]=o>>6|192,t[r++]=o&63|128):(o&64512)===55296&&((s=e.charCodeAt(i+1))&64512)===56320?(o=65536+((o&1023)<<10)+(s&1023),++i,t[r++]=o>>18|240,t[r++]=o>>12&63|128,t[r++]=o>>6&63|128,t[r++]=o&63|128):(t[r++]=o>>12|224,t[r++]=o>>6&63|128,t[r++]=o&63|128);return r-n}function It(e,t){return RangeError(`index out of range: ${e.pos} + ${t??1} > ${e.len}`)}function Wr(e,t){return(e[t-4]|e[t-3]<<8|e[t-2]<<16|e[t-1]<<24)>>>0}var _o=class{buf;pos;len;_slice=Uint8Array.prototype.subarray;constructor(t){this.buf=ot(t),this.pos=0,this.len=t.length}uint32(){let t=4294967295;if(t=(this.buf[this.pos]&127)>>>0,this.buf[this.pos++]<128||(t=(t|(this.buf[this.pos]&127)<<7)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<14)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<21)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&15)<<28)>>>0,this.buf[this.pos++]<128))return t;if((this.pos+=5)>this.len)throw this.pos=this.len,It(this,10);return t}int32(){return this.uint32()|0}sint32(){let t=this.uint32();return t>>>1^-(t&1)|0}bool(){return this.uint32()!==0}fixed32(){if(this.pos+4>this.len)throw It(this,4);return Wr(this.buf,this.pos+=4)}sfixed32(){if(this.pos+4>this.len)throw It(this,4);return Wr(this.buf,this.pos+=4)|0}float(){if(this.pos+4>this.len)throw It(this,4);let t=Vi(this.buf,this.pos);return this.pos+=4,t}double(){if(this.pos+8>this.len)throw It(this,4);let t=zi(this.buf,this.pos);return this.pos+=8,t}bytes(){let t=this.uint32(),r=this.pos,n=this.pos+t;if(n>this.len)throw It(this,t);return this.pos+=t,r===n?new Uint8Array(0):this.buf.subarray(r,n)}string(){let t=this.bytes();return $i(t,0,t.length)}skip(t){if(typeof t=="number"){if(this.pos+t>this.len)throw It(this,t);this.pos+=t}else do if(this.pos>=this.len)throw It(this);while((this.buf[this.pos++]&128)!==0);return this}skipType(t){switch(t){case 0:this.skip();break;case 1:this.skip(8);break;case 2:this.skip(this.uint32());break;case 3:for(;(t=this.uint32()&7)!==4;)this.skipType(t);break;case 5:this.skip(4);break;default:throw Error(`invalid wire type ${t} at offset ${this.pos}`)}return this}readLongVarint(){let t=new gt(0,0),r=0;if(this.len-this.pos>4){for(;r<4;++r)if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t;if(t.lo=(t.lo|(this.buf[this.pos]&127)<<28)>>>0,t.hi=(t.hi|(this.buf[this.pos]&127)>>4)>>>0,this.buf[this.pos++]<128)return t;r=0}else{for(;r<3;++r){if(this.pos>=this.len)throw It(this);if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t}return t.lo=(t.lo|(this.buf[this.pos++]&127)<<r*7)>>>0,t}if(this.len-this.pos>4){for(;r<5;++r)if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}else for(;r<5;++r){if(this.pos>=this.len)throw It(this);if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}throw Error("invalid varint encoding")}readFixed64(){if(this.pos+8>this.len)throw It(this,8);let t=Wr(this.buf,this.pos+=4),r=Wr(this.buf,this.pos+=4);return new gt(t,r)}int64(){return this.readLongVarint().toBigInt()}int64Number(){return this.readLongVarint().toNumber()}int64String(){return this.readLongVarint().toString()}uint64(){return this.readLongVarint().toBigInt(!0)}uint64Number(){let t=Mi(this.buf,this.pos);return this.pos+=yr(t),t}uint64String(){return this.readLongVarint().toString(!0)}sint64(){return this.readLongVarint().zzDecode().toBigInt()}sint64Number(){return this.readLongVarint().zzDecode().toNumber()}sint64String(){return this.readLongVarint().zzDecode().toString()}fixed64(){return this.readFixed64().toBigInt()}fixed64Number(){return this.readFixed64().toNumber()}fixed64String(){return this.readFixed64().toString()}sfixed64(){return this.readFixed64().toBigInt()}sfixed64Number(){return this.readFixed64().toNumber()}sfixed64String(){return this.readFixed64().toString()}};function br(e){return new _o(e instanceof Uint8Array?e:e.subarray())}function Jr(e,t,r){let n=br(e);return t.decode(n,void 0,r)}function Io(e){let t=e??8192,r=t>>>1,n,o=t;return function(i){if(i<1||i>r)return yt(i);o+i>t&&(n=yt(t),o=0);let a=n.subarray(o,o+=i);return(o&7)!==0&&(o=(o|7)+1),a}}var xe=class{fn;len;next;val;constructor(t,r,n){this.fn=t,this.len=r,this.next=void 0,this.val=n}};function To(){}var Ro=class{head;tail;len;next;constructor(t){this.head=t.head,this.tail=t.tail,this.len=t.len,this.next=t.states}},Hf=Io();function Mf(e){return globalThis.Buffer!=null?yt(e):Hf(e)}var gr=class{len;head;tail;states;constructor(){this.len=0,this.head=new xe(To,0,0),this.tail=this.head,this.states=null}_push(t,r,n){return this.tail=this.tail.next=new xe(t,r,n),this.len+=r,this}uint32(t){return this.len+=(this.tail=this.tail.next=new Do((t=t>>>0)<128?1:t<16384?2:t<2097152?3:t<268435456?4:5,t)).len,this}int32(t){return t<0?this._push(Qr,10,gt.fromNumber(t)):this.uint32(t)}sint32(t){return this.uint32((t<<1^t>>31)>>>0)}uint64(t){let r=gt.fromBigInt(t);return this._push(Qr,r.length(),r)}uint64Number(t){return this._push(Hi,yr(t),t)}uint64String(t){return this.uint64(BigInt(t))}int64(t){return this.uint64(t)}int64Number(t){return this.uint64Number(t)}int64String(t){return this.uint64String(t)}sint64(t){let r=gt.fromBigInt(t).zzEncode();return this._push(Qr,r.length(),r)}sint64Number(t){let r=gt.fromNumber(t).zzEncode();return this._push(Qr,r.length(),r)}sint64String(t){return this.sint64(BigInt(t))}bool(t){return this._push(Lo,1,t?1:0)}fixed32(t){return this._push(xr,4,t>>>0)}sfixed32(t){return this.fixed32(t)}fixed64(t){let r=gt.fromBigInt(t);return this._push(xr,4,r.lo)._push(xr,4,r.hi)}fixed64Number(t){let r=gt.fromNumber(t);return this._push(xr,4,r.lo)._push(xr,4,r.hi)}fixed64String(t){return this.fixed64(BigInt(t))}sfixed64(t){return this.fixed64(t)}sfixed64Number(t){return this.fixed64Number(t)}sfixed64String(t){return this.fixed64String(t)}float(t){return this._push(qi,4,t)}double(t){return this._push(ji,8,t)}bytes(t){let r=t.length>>>0;return r===0?this._push(Lo,1,0):this.uint32(r)._push(Vf,r,t)}string(t){let r=Yi(t);return r!==0?this.uint32(r)._push(vo,r,t):this._push(Lo,1,0)}fork(){return this.states=new Ro(this),this.head=this.tail=new xe(To,0,0),this.len=0,this}reset(){return this.states!=null?(this.head=this.states.head,this.tail=this.states.tail,this.len=this.states.len,this.states=this.states.next):(this.head=this.tail=new xe(To,0,0),this.len=0),this}ldelim(){let t=this.head,r=this.tail,n=this.len;return this.reset().uint32(n),n!==0&&(this.tail.next=t.next,this.tail=r,this.len+=n),this}finish(){let t=this.head.next,r=Mf(this.len),n=0;for(;t!=null;)t.fn(t.val,r,n),n+=t.len,t=t.next;return r}};function Lo(e,t,r){t[r]=e&255}function qf(e,t,r){for(;e>127;)t[r++]=e&127|128,e>>>=7;t[r]=e}var Do=class extends xe{next;constructor(t,r){super(qf,t,r),this.next=void 0}};function Qr(e,t,r){for(;e.hi!==0;)t[r++]=e.lo&127|128,e.lo=(e.lo>>>7|e.hi<<25)>>>0,e.hi>>>=7;for(;e.lo>127;)t[r++]=e.lo&127|128,e.lo=e.lo>>>7;t[r++]=e.lo}function xr(e,t,r){t[r]=e&255,t[r+1]=e>>>8&255,t[r+2]=e>>>16&255,t[r+3]=e>>>24}function Vf(e,t,r){t.set(e,r)}globalThis.Buffer!=null&&(gr.prototype.bytes=function(e){let t=e.length>>>0;return this.uint32(t),t>0&&this._push(jf,t,e),this},gr.prototype.string=function(e){let t=globalThis.Buffer.byteLength(e);return this.uint32(t),t>0&&this._push(zf,t,e),this});function jf(e,t,r){t.set(e,r)}function zf(e,t,r){e.length<40?vo(e,t,r):t.utf8Write!=null?t.utf8Write(e,r):t.set(z(e),r)}function Ko(){return new gr}function tn(e,t){let r=Ko();return t.encode(e,r,{lengthDelimited:!1}),r.finish()}function*en(e,t,r){let n=br(e);yield*t.stream(n,void 0,"$",r)}var rn={VARINT:0,BIT64:1,LENGTH_DELIMITED:2,START_GROUP:3,END_GROUP:4,BIT32:5};function nn(e,t,r,n,o){return{name:e,type:t,encode:r,decode:n,stream:o}}function Co(e){function t(s){if(e[s.toString()]==null)throw new Error("Invalid enum value");return e[s]}let r=function(i,a){let f=t(i);a.int32(f)},n=function(i){let a=i.int32();return t(a)},o=function*(i){let a=i.int32();yield t(a)};return nn("enum",rn.VARINT,r,n,o)}function on(e,t,r){return nn("message",rn.LENGTH_DELIMITED,e,t,r)}var j;(function(e){e.RSA="RSA",e.Ed25519="Ed25519",e.secp256k1="secp256k1",e.ECDSA="ECDSA"})(j||(j={}));var Uo;(function(e){e[e.RSA=0]="RSA",e[e.Ed25519=1]="Ed25519",e[e.secp256k1=2]="secp256k1",e[e.ECDSA=3]="ECDSA"})(Uo||(Uo={}));(function(e){e.codec=()=>Co(Uo)})(j||(j={}));var Ut;(function(e){let t;e.codec=()=>(t==null&&(t=on((s,i,a={})=>{a.lengthDelimited!==!1&&i.fork(),s.Type!=null&&(i.uint32(8),j.codec().encode(s.Type,i)),s.Data!=null&&(i.uint32(18),i.bytes(s.Data)),a.lengthDelimited!==!1&&i.ldelim()},(s,i,a={})=>{let f={},c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{f.Type=j.codec().decode(s);break}case 2:{f.Data=s.bytes();break}default:{s.skipType(u&7);break}}}return f},function*(s,i,a,f={}){let c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{yield{field:`${a}.Type`,value:j.codec().decode(s)};break}case 2:{yield{field:`${a}.Data`,value:s.bytes()};break}default:{s.skipType(u&7);break}}}})),t);function r(s){return tn(s,e.codec())}e.encode=r;function n(s,i){return Jr(s,e.codec(),i)}e.decode=n;function o(s,i){return en(s,e.codec(),i)}e.stream=o})(Ut||(Ut={}));var wr;(function(e){let t;e.codec=()=>(t==null&&(t=on((s,i,a={})=>{a.lengthDelimited!==!1&&i.fork(),s.Type!=null&&(i.uint32(8),j.codec().encode(s.Type,i)),s.Data!=null&&(i.uint32(18),i.bytes(s.Data)),a.lengthDelimited!==!1&&i.ldelim()},(s,i,a={})=>{let f={},c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{f.Type=j.codec().decode(s);break}case 2:{f.Data=s.bytes();break}default:{s.skipType(u&7);break}}}return f},function*(s,i,a,f={}){let c=i==null?s.len:s.pos+i;for(;s.pos<c;){let u=s.uint32();switch(u>>>3){case 1:{yield{field:`${a}.Type`,value:j.codec().decode(s)};break}case 2:{yield{field:`${a}.Data`,value:s.bytes()};break}default:{s.skipType(u&7);break}}}})),t);function r(s){return tn(s,e.codec())}e.encode=r;function n(s,i){return Jr(s,e.codec(),i)}e.decode=n;function o(s,i){return en(s,e.codec(),i)}e.stream=o})(wr||(wr={}));function Fo(e){if(isNaN(e)||e<=0)throw new k("random bytes length must be a Number bigger than 0");return crypto.getRandomValues(new Uint8Array(e))}var Sr={};at(Sr,{MAX_RSA_KEY_SIZE:()=>Oo,generateRSAKeyPair:()=>Vo,jwkToJWKKeyPair:()=>Qi,jwkToPkcs1:()=>Gf,jwkToPkix:()=>Ho,jwkToRSAPrivateKey:()=>cn,pkcs1MessageToJwk:()=>Po,pkcs1MessageToRSAPrivateKey:()=>sn,pkcs1ToJwk:()=>$f,pkcs1ToRSAPrivateKey:()=>Mo,pkixMessageToJwk:()=>No,pkixMessageToRSAPublicKey:()=>an,pkixToJwk:()=>Xf,pkixToRSAPublicKey:()=>qo});var ze=class{type="RSA";jwk;_raw;_multihash;constructor(t,r){this.jwk=t,this._multihash=r}get raw(){return this._raw==null&&(this._raw=Sr.jwkToPkix(this.jwk)),this._raw}toMultihash(){return this._multihash}toCID(){return wt.createV1(114,this._multihash)}toString(){return rt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}verify(t,r,n){return Ji(this.jwk,r,t,n)}},Er=class{type="RSA";jwk;_raw;publicKey;constructor(t,r){this.jwk=t,this.publicKey=r}get raw(){return this._raw==null&&(this._raw=Sr.jwkToPkcs1(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}sign(t,r){return Wi(this.jwk,t,r)}};var Oo=8192,ko=18,Zf=1062,Yf=Uint8Array.from([48,13,6,9,42,134,72,134,247,13,1,1,1,5,0]);function $f(e){let t=bt(e);return Po(t)}function Po(e){return{n:M(e[1],"base64url"),e:M(e[2],"base64url"),d:M(e[3],"base64url"),p:M(e[4],"base64url"),q:M(e[5],"base64url"),dp:M(e[6],"base64url"),dq:M(e[7],"base64url"),qi:M(e[8],"base64url"),kty:"RSA"}}function Gf(e){if(e.n==null||e.e==null||e.d==null||e.p==null||e.q==null||e.dp==null||e.dq==null||e.qi==null)throw new k("JWK was missing components");return St([lt(Uint8Array.from([0])),lt(z(e.n,"base64url")),lt(z(e.e,"base64url")),lt(z(e.d,"base64url")),lt(z(e.p,"base64url")),lt(z(e.q,"base64url")),lt(z(e.dp,"base64url")),lt(z(e.dq,"base64url")),lt(z(e.qi,"base64url"))]).subarray()}function Xf(e){let t=bt(e,{offset:0});return No(t)}function No(e){let t=bt(e[1],{offset:0});return{kty:"RSA",n:M(t[0],"base64url"),e:M(t[1],"base64url")}}function Ho(e){if(e.n==null||e.e==null)throw new k("JWK was missing components");return St([Yf,nr(St([lt(z(e.n,"base64url")),lt(z(e.e,"base64url"))]))]).subarray()}function Mo(e){let t=bt(e);return sn(t)}function sn(e){let t=Po(e);return cn(t)}function qo(e,t){if(e.byteLength>=Zf)throw new we("Key size is too large");let r=bt(e,{offset:0});return an(r,e,t)}function an(e,t,r){let n=No(e);if(r==null){let o=$t(Ut.encode({Type:j.RSA,Data:t}));r=Rt(ko,o)}return new ze(n,r)}function cn(e){if(ea(e)>Oo)throw new k("Key size is too large");let t=Qi(e),r=$t(Ut.encode({Type:j.RSA,Data:Ho(t.publicKey)})),n=Rt(ko,r);return new Er(t.privateKey,new ze(t.publicKey,n))}async function Vo(e){if(e>Oo)throw new k("Key size is too large");let t=await ta(e),r=$t(Ut.encode({Type:j.RSA,Data:Ho(t.publicKey)})),n=Rt(ko,r);return new Er(t.privateKey,new ze(t.publicKey,n))}function Qi(e){if(e==null)throw new k("Missing key parameter");return{privateKey:e,publicKey:{kty:e.kty,n:e.n,e:e.e}}}var ra="1.2.840.113549.1.1.1";async function ta(e,t){let r=await Y.get().subtle.generateKey({name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:new Uint8Array([1,0,1]),hash:{name:"SHA-256"}},!0,["sign","verify"]);t?.signal?.throwIfAborted();let n=await Wf(r,t);return{privateKey:n[0],publicKey:n[1]}}async function Wi(e,t,r){let n=await Y.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["sign"]);r?.signal?.throwIfAborted();let o=await Y.get().subtle.sign({name:"RSASSA-PKCS1-v1_5"},n,ot(t instanceof Uint8Array?t:t.subarray()));return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function Ji(e,t,r,n){let o=await Y.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["verify"]);n?.signal?.throwIfAborted();let s=await Y.get().subtle.verify({name:"RSASSA-PKCS1-v1_5"},o,ot(t),ot(r instanceof Uint8Array?r:r.subarray()));return n?.signal?.throwIfAborted(),s}async function Wf(e,t){if(e.privateKey==null||e.publicKey==null)throw new k("Private and public key are required");let r=await Promise.all([Y.get().subtle.exportKey("jwk",e.privateKey),Y.get().subtle.exportKey("jwk",e.publicKey)]);return t?.signal?.throwIfAborted(),r}function ea(e){if(e.kty!=="RSA")throw new k("invalid key type");if(e.n==null)throw new k("invalid key modulus");return z(e.n,"base64url").length*8}var fn=class{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(t,r){if(Le(t),pt(r,void 0,"key"),this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,o=new Uint8Array(n);o.set(r.length>n?t.create().update(r).digest():r);for(let s=0;s<o.length;s++)o[s]^=54;this.iHash.update(o),this.oHash=t.create();for(let s=0;s<o.length;s++)o[s]^=106;this.oHash.update(o),mt(o)}update(t){return Re(this),this.iHash.update(t),this}digestInto(t){Re(this),Ur(t,this),this.finished=!0;let r=t.subarray(0,this.outputLen);this.iHash.digestInto(r),this.oHash.update(r),this.oHash.digestInto(r),this.destroy()}digest(){let t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||=Object.create(Object.getPrototypeOf(this),{});let{oHash:r,iHash:n,finished:o,destroyed:s,blockLen:i,outputLen:a}=this;return t=t,t.finished=o,t.destroyed=s,t.blockLen=i,t.outputLen=a,t.oHash=r._cloneInto(t.oHash),t.iHash=n._cloneInto(t.iHash),t}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},un=(()=>{let e=((t,r,n)=>new fn(t,r).update(n).digest());return e.create=(t,r)=>new fn(t,r),e})();var na=(e,t)=>(e+(e>=0?t:-t)/oa)/t;function Jf(e,t,r){Fe("scalar",e,Ft,r);let[[n,o],[s,i]]=t,a=na(i*e,r),f=na(-o*e,r),c=e-a*n-f*s,u=-a*o-f*i,l=c<Ft,b=u<Ft;l&&(c=-c),b&&(u=-u);let p=lr(Math.ceil(Oe(r)/2))+re;if(c<Ft||c>=p||u<Ft||u>=p)throw new Error("splitScalar (endomorphism): failed for k");return{k1neg:l,k1:c,k2neg:b,k2:u}}function zo(e){if(!["compact","recovered","der"].includes(e))throw new Error('Signature format must be "compact", "recovered", or "der"');return e}function jo(e,t){_t(e);let r={};for(let n of Object.keys(t))r[n]=e[n]===void 0?t[n]:e[n];return Bt(r.lowS,"lowS"),Bt(r.prehash,"prehash"),r.format!==void 0&&zo(r.format),r}var Zo=class extends Error{constructor(t=""){super(t)}},Tt={Err:Zo,_tlv:{encode:(e,t)=>{let{Err:r}=Tt;if(vt(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!="string")throw new TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let n=t.length/2,o=fr(n);if(o.length/2&128)throw new r("tlv.encode: long form length too big");let s=n>127?fr(o.length/2|128):"";return fr(e)+s+o+t},decode(e,t){let{Err:r}=Tt;t=H(t,void 0,"DER data");let n=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");let o=t[n++],s=!!(o&128),i=0;if(!s)i=o;else{let f=o&127;if(!f)throw new r("tlv.decode(long): indefinite length not supported");if(f>4)throw new r("tlv.decode(long): byte length is too big");let c=t.subarray(n,n+f);if(c.length!==f)throw new r("tlv.decode: length bytes not complete");if(c[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of c)i=i<<8|u;if(n+=f,i<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(n,n+i);if(a.length!==i)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+i)}}},_int:{encode(e){let{Err:t}=Tt;if(qr(e),e<Ft)throw new t("integer: negative integers are not allowed");let r=fr(e);if(Number.parseInt(r[0],16)&8&&(r="00"+r),r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Tt;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return he(e)}},toSig(e){let{Err:t,_int:r,_tlv:n}=Tt,o=H(e,void 0,"signature"),{v:s,l:i}=n.decode(48,o);if(i.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:f}=n.decode(2,s),{v:c,l:u}=n.decode(2,f);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(c)}},hexFromSig(e){let{_tlv:t,_int:r}=Tt,n=t.encode(2,r.encode(e.r)),o=t.encode(2,r.encode(e.s)),s=n+o;return t.encode(48,s)}};Object.freeze(Tt._tlv);Object.freeze(Tt._int);Object.freeze(Tt);var Ft=BigInt(0),re=BigInt(1),oa=BigInt(2),ln=BigInt(3),Qf=BigInt(4);function sa(e,t={}){let r=Zr("weierstrass",e,t),n=r.Fp,o=r.Fn,s=r.CURVE,{h:i,n:a}=s;_t(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:f,allowInfinityPoint:c}=t;if(f&&(!n.is0(s.a)||typeof f.beta!="bigint"||!Array.isArray(f.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');let u=aa(n,o);function l(){if(!n.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function b(O,h,x){if(c&&h.is0())return Uint8Array.of(0);let{x:A,y:w}=h.toAffine(),g=n.toBytes(A);if(Bt(x,"isCompressed"),x){l();let B=!n.isOdd(w);return Q(ia(B),g)}else return Q(Uint8Array.of(4),g,n.toBytes(w))}function p(O){H(O,void 0,"Point");let{publicKey:h,publicKeyUncompressed:x}=u,A=O.length,w=O[0],g=O.subarray(1);if(c&&A===1&&w===0)return{x:n.ZERO,y:n.ZERO};if(A===h&&(w===2||w===3)){let B=n.fromBytes(g);if(!n.isValid(B))throw new Error("bad point: is not on curve, wrong x");let T=d(B),_;try{_=n.sqrt(T)}catch(N){let q=N instanceof Error?": "+N.message:"";throw new Error("bad point: is not on curve, sqrt error"+q)}l();let R=n.isOdd(_);return(w&1)===1!==R&&(_=n.neg(_)),{x:B,y:_}}else if(A===x&&w===4){let B=n.BYTES,T=n.fromBytes(g.subarray(0,B)),_=n.fromBytes(g.subarray(B,B*2));if(!y(T,_))throw new Error("bad point: is not on curve");return{x:T,y:_}}else throw new Error(`bad point: got length ${A}, expected compressed=${h} or uncompressed=${x}`)}let m=t.toBytes===void 0?b:t.toBytes,E=t.fromBytes===void 0?p:t.fromBytes;function d(O){let h=n.sqr(O),x=n.mul(h,O);return n.add(n.add(x,n.mul(O,s.a)),s.b)}function y(O,h){let x=n.sqr(h),A=d(O);return n.eql(x,A)}if(!y(s.Gx,s.Gy))throw new Error("bad curve params: generator point");let S=n.mul(n.pow(s.a,ln),Qf),v=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(S,v)))throw new Error("bad curve params: a or b");function D(O,h,x=!1){if(!n.isValid(h)||x&&n.is0(h))throw new Error(`bad point coordinate ${O}`);return h}function L(O){if(!(O instanceof I))throw new Error("Weierstrass Point expected")}function U(O){if(!f||!f.basises)throw new Error("no endo");return Jf(O,f.basises,o.ORDER)}function K(O,h,x,A,w){return x=new I(n.mul(x.X,O),x.Y,x.Z),h=dr(A,h),x=dr(w,x),h.add(x)}class I{static BASE=new I(s.Gx,s.Gy,n.ONE);static ZERO=new I(n.ZERO,n.ONE,n.ZERO);static Fp=n;static Fn=o;X;Y;Z;constructor(h,x,A){this.X=D("x",h),this.Y=D("y",x,!0),this.Z=D("z",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(h){let{x,y:A}=h||{};if(!h||!n.isValid(x)||!n.isValid(A))throw new Error("invalid affine point");if(h instanceof I)throw new Error("projective point not allowed");return n.is0(x)&&n.is0(A)?I.ZERO:new I(x,A,n.ONE)}static fromBytes(h){let x=I.fromAffine(E(H(h,void 0,"point")));return x.assertValidity(),x}static fromHex(h){return I.fromBytes(Ue(h))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(h=8,x=!0){return V.createCache(this,h),x||this.multiply(ln),this}assertValidity(){let h=this;if(h.is0()){if(t.allowInfinityPoint&&n.is0(h.X)&&n.eql(h.Y,n.ONE)&&n.is0(h.Z))return;throw new Error("bad point: ZERO")}let{x,y:A}=h.toAffine();if(!n.isValid(x)||!n.isValid(A))throw new Error("bad point: x or y not field elements");if(!y(x,A))throw new Error("bad point: equation left != right");if(!h.isTorsionFree())throw new Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:h}=this.toAffine();if(!n.isOdd)throw new Error("Field doesn't support isOdd");return!n.isOdd(h)}equals(h){L(h);let{X:x,Y:A,Z:w}=this,{X:g,Y:B,Z:T}=h,_=n.eql(n.mul(x,T),n.mul(g,w)),R=n.eql(n.mul(A,T),n.mul(B,w));return _&&R}negate(){return new I(this.X,n.neg(this.Y),this.Z)}double(){let{a:h,b:x}=s,A=n.mul(x,ln),{X:w,Y:g,Z:B}=this,T=n.ZERO,_=n.ZERO,R=n.ZERO,C=n.mul(w,w),N=n.mul(g,g),q=n.mul(B,B),P=n.mul(w,g);return P=n.add(P,P),R=n.mul(w,B),R=n.add(R,R),T=n.mul(h,R),_=n.mul(A,q),_=n.add(T,_),T=n.sub(N,_),_=n.add(N,_),_=n.mul(T,_),T=n.mul(P,T),R=n.mul(A,R),q=n.mul(h,q),P=n.sub(C,q),P=n.mul(h,P),P=n.add(P,R),R=n.add(C,C),C=n.add(R,C),C=n.add(C,q),C=n.mul(C,P),_=n.add(_,C),q=n.mul(g,B),q=n.add(q,q),C=n.mul(q,P),T=n.sub(T,C),R=n.mul(q,N),R=n.add(R,R),R=n.add(R,R),new I(T,_,R)}add(h){L(h);let{X:x,Y:A,Z:w}=this,{X:g,Y:B,Z:T}=h,_=n.ZERO,R=n.ZERO,C=n.ZERO,N=s.a,q=n.mul(s.b,ln),P=n.mul(x,g),J=n.mul(A,B),tt=n.mul(w,T),et=n.add(x,A),X=n.add(g,B);et=n.mul(et,X),X=n.add(P,J),et=n.sub(et,X),X=n.add(x,w);let dt=n.add(g,T);return X=n.mul(X,dt),dt=n.add(P,tt),X=n.sub(X,dt),dt=n.add(A,w),_=n.add(B,T),dt=n.mul(dt,_),_=n.add(J,tt),dt=n.sub(dt,_),C=n.mul(N,X),_=n.mul(q,tt),C=n.add(_,C),_=n.sub(J,C),C=n.add(J,C),R=n.mul(_,C),J=n.add(P,P),J=n.add(J,P),tt=n.mul(N,tt),X=n.mul(q,X),J=n.add(J,tt),tt=n.sub(P,tt),tt=n.mul(N,tt),X=n.add(X,tt),P=n.mul(J,X),R=n.add(R,P),P=n.mul(dt,X),_=n.mul(et,_),_=n.sub(_,P),P=n.mul(et,J),C=n.mul(dt,C),C=n.add(C,P),new I(_,R,C)}subtract(h){return L(h),this.add(h.negate())}is0(){return this.equals(I.ZERO)}multiply(h){let{endo:x}=t;if(!o.isValidNot0(h))throw new RangeError("invalid scalar: out of range");let A,w,g=B=>V.cached(this,B,T=>me(I,T));if(x){let{k1neg:B,k1:T,k2neg:_,k2:R}=U(h),{p:C,f:N}=g(T),{p:q,f:P}=g(R);w=N.add(P),A=K(x.beta,C,q,B,_)}else{let{p:B,f:T}=g(h);A=B,w=T}return me(I,[A,w])[0]}multiplyUnsafe(h){let{endo:x}=t,A=this,w=h;if(!o.isValid(w))throw new RangeError("invalid scalar: out of range");if(w===Ft||A.is0())return I.ZERO;if(w===re)return A;if(V.hasCache(this))return this.multiply(w);if(x){let{k1neg:g,k1:B,k2neg:T,k2:_}=U(w),{p1:R,p2:C}=gi(I,A,B,_);return K(x.beta,R,C,g,T)}else return V.unsafe(A,w)}toAffine(h){let x=this,A=h,{X:w,Y:g,Z:B}=x;if(n.eql(B,n.ONE))return{x:w,y:g};let T=x.is0();A==null&&(A=T?n.ONE:n.inv(B));let _=n.mul(w,A),R=n.mul(g,A),C=n.mul(B,A);if(T)return{x:n.ZERO,y:n.ZERO};if(!n.eql(C,n.ONE))throw new Error("invZ was invalid");return{x:_,y:R}}isTorsionFree(){let{isTorsionFree:h}=t;return i===re?!0:h?h(I,this):V.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:h}=t;return i===re?this:h?h(I,this):this.multiplyUnsafe(i)}isSmallOrder(){return i===re?this.is0():this.clearCofactor().is0()}toBytes(h=!0){return Bt(h,"isCompressed"),this.assertValidity(),m(I,this,h)}toHex(h=!0){return Ce(this.toBytes(h))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let F=o.BITS,V=new Ne(I,t.endo?Math.ceil(F/2):F);return F>=8&&I.BASE.precompute(8),Object.freeze(I.prototype),Object.freeze(I),I}function ia(e){return Uint8Array.of(e?2:3)}function aa(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function tu(e,t={}){let{Fn:r}=e,n=t.randomBytes===void 0?cr:t.randomBytes,o=Object.assign(aa(e.Fp,r),{seed:Math.max(co(r.ORDER),16)});function s(p){try{let m=r.fromBytes(p);return r.isValidNot0(m)}catch{return!1}}function i(p,m){let{publicKey:E,publicKeyUncompressed:d}=o;try{let y=p.length;return m===!0&&y!==E||m===!1&&y!==d?!1:!!e.fromBytes(p)}catch{return!1}}function a(p){return p=p===void 0?n(o.seed):p,fo(H(p,o.seed,"seed"),r.ORDER)}function f(p,m=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(m)}function c(p){let{secretKey:m,publicKey:E,publicKeyUncompressed:d}=o,y=r._lengths;if(!le(p))return;let S=H(p,void 0,"key").length,v=S===E||S===d,D=S===m||!!y?.includes(S);if(!(v&&D))return v}function u(p,m,E=!0){if(c(p)===!0)throw new Error("first arg must be private key");if(c(m)===!1)throw new Error("second arg must be public key");let d=r.fromBytes(p);return e.fromBytes(m).multiply(d).toBytes(E)}let l={isValidSecretKey:s,isValidPublicKey:i,randomSecretKey:a},b=Yr(a,f);return Object.freeze(l),Object.freeze(o),Object.freeze({getPublicKey:f,getSharedSecret:u,keygen:b,Point:e,utils:l,lengths:o})}function ca(e,t,r={}){let n=t;Le(n),_t(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let o=r.randomBytes===void 0?cr:r.randomBytes,s=r.hmac===void 0?(w,g)=>un(n,w,g):r.hmac,{Fp:i,Fn:a}=e,{ORDER:f,BITS:c}=a,{keygen:u,getPublicKey:l,getSharedSecret:b,utils:p,lengths:m}=tu(e,r),E={prehash:!0,lowS:typeof r.lowS=="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},d=f*oa+re<i.ORDER;function y(w){let g=f>>re;return w>g}function S(w,g){if(!a.isValidNot0(g))throw new Error(`invalid signature ${w}: out of range 1..Point.Fn.ORDER`);return g}function v(){if(d)throw new Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(w,g){zo(g);let B=m.signature,T=g==="compact"?B:g==="recovered"?B+1:void 0;return H(w,T)}class L{r;s;recovery;constructor(g,B,T){if(this.r=S("r",g),this.s=S("s",B),T!=null){if(v(),![0,1,2,3].includes(T))throw new Error("invalid recovery id");this.recovery=T}Object.freeze(this)}static fromBytes(g,B=E.format){D(g,B);let T;if(B==="der"){let{r:N,s:q}=Tt.toSig(H(g));return new L(N,q)}B==="recovered"&&(T=g[0],B="compact",g=g.subarray(1));let _=m.signature/2,R=g.subarray(0,_),C=g.subarray(_,_*2);return new L(a.fromBytes(R),a.fromBytes(C),T)}static fromHex(g,B){return this.fromBytes(Ue(g),B)}assertRecovery(){let{recovery:g}=this;if(g==null)throw new Error("invalid recovery id: must be present");return g}addRecoveryBit(g){return new L(this.r,this.s,g)}recoverPublicKey(g){let{r:B,s:T}=this,_=this.assertRecovery(),R=_===2||_===3?B+f:B;if(!i.isValid(R))throw new Error("invalid recovery id: sig.r+curve.n != R.x");let C=i.toBytes(R),N=e.fromBytes(Q(ia((_&1)===0),C)),q=a.inv(R),P=K(H(g,void 0,"msgHash")),J=a.create(-P*q),tt=a.create(T*q),et=e.BASE.multiplyUnsafe(J).add(N.multiplyUnsafe(tt));if(et.is0())throw new Error("invalid recovery: point at infinify");return et.assertValidity(),et}hasHighS(){return y(this.s)}toBytes(g=E.format){if(zo(g),g==="der")return Ue(Tt.hexFromSig(this));let{r:B,s:T}=this,_=a.toBytes(B),R=a.toBytes(T);return g==="recovered"?(v(),Q(Uint8Array.of(this.assertRecovery()),_,R)):Q(_,R)}toHex(g){return Ce(this.toBytes(g))}}Object.freeze(L.prototype),Object.freeze(L);let U=r.bits2int===void 0?function(g){if(g.length>8192)throw new Error("input is too large");let B=he(g),T=g.length*8-c;return T>0?B>>BigInt(T):B}:r.bits2int,K=r.bits2int_modN===void 0?function(g){return a.create(U(g))}:r.bits2int_modN,I=lr(c);function F(w){return Fe("num < 2^"+c,w,Ft,I),a.toBytes(w)}function V(w,g){return H(w,void 0,"message"),g?H(n(w),void 0,"prehashed message"):w}function O(w,g,B){let{lowS:T,prehash:_,extraEntropy:R}=jo(B,E);w=V(w,_);let C=K(w),N=a.fromBytes(g);if(!a.isValidNot0(N))throw new Error("invalid private key");let q=[F(N),F(C)];if(R!=null&&R!==!1){let et=R===!0?o(m.secretKey):R;q.push(H(et,void 0,"extraEntropy"))}let P=Q(...q),J=C;function tt(et){let X=U(et);if(!a.isValidNot0(X))return;let dt=a.inv(X),ge=e.BASE.multiply(X).toAffine(),Ze=a.create(ge.x);if(Ze===Ft)return;let _r=a.create(dt*a.create(J+Ze*N));if(_r===Ft)return;let ts=(ge.x===Ze?0:2)|Number(ge.y&re),es=_r;return T&&y(_r)&&(es=a.neg(_r),ts^=1),new L(Ze,es,d?void 0:ts)}return{seed:P,k2sig:tt}}function h(w,g,B={}){let{seed:T,k2sig:_}=O(w,g,B);return ri(n.outputLen,a.BYTES,s)(T,_).toBytes(B.format)}function x(w,g,B,T={}){let{lowS:_,prehash:R,format:C}=jo(T,E);if(B=H(B,void 0,"publicKey"),g=V(g,R),!le(w)){let N=w instanceof L?", use sig.toBytes()":"";throw new Error("verify expects Uint8Array signature"+N)}D(w,C);try{let N=L.fromBytes(w,C),q=e.fromBytes(B);if(_&&N.hasHighS())return!1;let{r:P,s:J}=N,tt=K(g),et=a.inv(J),X=a.create(tt*et),dt=a.create(P*et),ge=e.BASE.multiplyUnsafe(X).add(q.multiplyUnsafe(dt));return ge.is0()?!1:a.create(ge.x)===P}catch{return!1}}function A(w,g,B={}){let{prehash:T}=jo(B,E);return g=V(g,T),L.fromBytes(w,"recovered").recoverPublicKey(g).toBytes()}return Object.freeze({keygen:u,getPublicKey:l,getSharedSecret:b,utils:p,lengths:m,Point:e,sign:h,verify:x,recoverPublicKey:A,Signature:L,hash:n})}var $o={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},eu={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]};var fa=BigInt(2);function ru(e){let t=$o.p,r=BigInt(3),n=BigInt(6),o=BigInt(11),s=BigInt(22),i=BigInt(23),a=BigInt(44),f=BigInt(88),c=e*e*e%t,u=c*c*e%t,l=Z(u,r,t)*u%t,b=Z(l,r,t)*u%t,p=Z(b,fa,t)*c%t,m=Z(p,o,t)*p%t,E=Z(m,s,t)*m%t,d=Z(E,a,t)*E%t,y=Z(d,f,t)*d%t,S=Z(y,a,t)*E%t,v=Z(S,r,t)*u%t,D=Z(v,i,t)*m%t,L=Z(D,n,t)*c%t,U=Z(L,fa,t);if(!Yo.eql(Yo.sqr(U),e))throw new Error("Cannot find square root");return U}var Yo=ke($o.p,{sqrt:ru}),nu=sa($o,{Fp:Yo,endo:eu}),Lt=ca(nu,$t);var ua=33,la=32;function ha(e,t,r){let n=Dr.digest(t instanceof Uint8Array?t:t.subarray());if(Ve(n))return n.then(({digest:o})=>(r?.signal?.throwIfAborted(),Lt.sign(o,e,{prehash:!1,format:"der"}))).catch(o=>{throw o.name==="AbortError"?o:new Ye(String(o))});try{return Lt.sign(n.digest,e,{prehash:!1,format:"der"})}catch(o){throw new Ye(String(o))}}function da(e,t,r,n){let o=Dr.digest(r instanceof Uint8Array?r:r.subarray());if(Ve(o))return o.then(({digest:s})=>(n?.signal?.throwIfAborted(),Lt.verify(t,s,e,{prehash:!1,format:"der"}))).catch(s=>{throw s.name==="AbortError"?s:new $e(String(s))});try{return n?.signal?.throwIfAborted(),Lt.verify(t,o.digest,e,{prehash:!1,format:"der"})}catch(s){throw new $e(String(s))}}var Ar=class{type="secp256k1";raw;_key;constructor(t){this._key=ya(t),this.raw=pa(this._key)}toMultihash(){return se.digest(ae(this))}toCID(){return wt.createV1(114,this.toMultihash())}toString(){return rt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}verify(t,r,n){return da(this._key,r,t,n)}},Br=class{type="secp256k1";raw;publicKey;constructor(t,r){this.raw=ma(t),this.publicKey=new Ar(r??ba(t))}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:ct(this.raw,t.raw)}sign(t,r){return ha(this.raw,t,r)}};function Go(e){return new Br(e)}function hn(e){return new Ar(e)}async function xa(){let e=ou();return new Br(e)}function pa(e){return Lt.Point.fromBytes(e).toBytes()}function ma(e){try{return Lt.getPublicKey(e,!0),e}catch(t){throw new Ge(String(t))}}function ya(e){try{return Lt.Point.fromBytes(e),e}catch(t){throw new we(String(t))}}function ba(e){try{return Lt.getPublicKey(e,!0)}catch(t){throw new Ge(String(t))}}function ou(){return Lt.utils.randomSecretKey()}var dn={"P-256":32,"P-384":48,"P-521":66},su=Object.keys(dn),Xo=su.join(" / ");async function ga(e){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new k(`Unknown curve: ${e}. Must be ${Xo}`);let t=await Y.get().subtle.generateKey({name:"ECDH",namedCurve:e},!0,["deriveBits"]),r=async(s,i)=>{let a;i!=null?a=await Y.get().subtle.importKey("jwk",au(e,i),{name:"ECDH",namedCurve:e},!1,["deriveBits"]):a=t.privateKey;let f=await Y.get().subtle.importKey("jwk",wa(e,s),{name:"ECDH",namedCurve:e},!1,[]),c=await Y.get().subtle.deriveBits({name:"ECDH",public:f},a,dn[e]*8);return new Uint8Array(c,0,c.byteLength)},n=await Y.get().subtle.exportKey("jwk",t.publicKey);return{key:iu(n),genSharedKey:r}}function iu(e){if(e.crv==null||e.x==null||e.y==null)throw new k("JWK was missing components");if(e.crv!=="P-256"&&e.crv!=="P-384"&&e.crv!=="P-521")throw new k(`Unknown curve: ${e.crv}. Must be ${Xo}`);let t=dn[e.crv];return Dt([Uint8Array.from([4]),Eo(e.x,t),Eo(e.y,t)],1+t*2)}function wa(e,t){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new k(`Unknown curve: ${e}. Must be ${Xo}`);let r=dn[e];if(!ct(t.subarray(0,1),Uint8Array.from([4])))throw new k("Cannot unmarshal public key - invalid key format");return{kty:"EC",crv:e,x:M(t.subarray(1,r+1),"base64url"),y:M(t.subarray(1+r),"base64url"),ext:!0}}var au=(e,t)=>({...wa(e,t.public),d:M(t.private,"base64url")});var cu={"AES-128":{ivSize:16,keySize:16},"AES-256":{ivSize:16,keySize:32},Blowfish:{ivSize:8,keySize:32}};async function Ea(e,t,r){if(e!=="AES-128"&&e!=="AES-256"&&e!=="Blowfish")throw new k("Cipher type was missing or unsupported");if(t!=="SHA1"&&t!=="SHA256"&&t!=="SHA512")throw new k("Hash type was missing or unsupported");if(r==null||!(r instanceof Uint8Array))throw new k("Secret was missing or an incorrect type");let n=cu[e],o=n.keySize,s=n.ivSize,i=20,a=z("key expansion"),f=2*(s+o+i),c=await mn(t,r),u=await c.digest(a),l=[],b=0;for(;b<f;){let S=await c.digest(Dt([u,a])),v=S.length;b+v>f&&(v=f-b),l.push(S),b+=v,u=await c.digest(u)}let p=f/2,m=Dt(l),E=m.subarray(0,p),d=m.subarray(p,f),y=S=>({iv:S.subarray(0,s),cipherKey:S.subarray(s,s+o),macKey:S.subarray(s+o)});return{k1:y(E),k2:y(d)}}async function fu(e,t){if(e==="Ed25519")return Ui();if(e==="secp256k1")return xa();if(e==="RSA")return Vo(bu(t));if(e==="ECDSA")return Hs(xu(t));throw new Vt}async function uu(e,t){if(e!=="Ed25519")throw new Vt("Seed key derivation only supported for Ed25519 keys");return Fi(t)}function lu(e,t){let{Type:r,Data:n}=Ut.decode(e),o=n??new Uint8Array;switch(r){case j.RSA:return qo(o,t);case j.Ed25519:return Xr(o);case j.secp256k1:return hn(o);case j.ECDSA:return jn(o);default:throw new Vt}}function hu(e){if(e.byteLength===Qt)return Xr(e);if(e.byteLength===ua)return hn(e);let t=bt(e),r=t[1]?.[0];if(r===_n||r===In||r===Tn)return zn(t);if(t[0]?.[0]===ra)return an(t,e);throw new k("Could not extract public key from raw bytes")}function du(e){let{Type:t,Data:r}=Ut.decode(e.digest),n=r??new Uint8Array;switch(t){case j.Ed25519:return Xr(n);case j.secp256k1:return hn(n);case j.ECDSA:return jn(n);default:throw new Vt}}function ae(e){return Ut.encode({Type:j[e.type],Data:e.raw})}function pu(e){let t=wr.decode(e),r=t.Data??new Uint8Array;switch(t.Type){case j.RSA:return Mo(r);case j.Ed25519:return So(r);case j.secp256k1:return Go(r);case j.ECDSA:return Os(r);default:throw new Vt}}function mu(e){if(e.byteLength===xt)return So(e);if(e.byteLength===la)return Go(e);let t=bt(e),r=t[2]?.[0];if(r===_n||r===In||r===Tn)return Vn(t);if(t.length>8)return sn(t);throw new k("Could not extract private key from raw bytes")}function yu(e){return wr.encode({Type:j[e.type],Data:e.raw})}function bu(e){return e==null?2048:parseInt(e,10)}function xu(e){if(e==="P-256"||e==null)return"P-256";if(e==="P-384")return"P-384";if(e==="P-521")return"P-521";throw new k("Unsupported curve, should be P-256, P-384 or P-521")}async function gu(e){if(e.type==="RSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["verify"])};if(e.type==="ECDSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"ECDSA",namedCurve:e.jwk.crv??"P-256"},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"ECDSA",namedCurve:e.publicKey.jwk.crv??"P-256"},!0,["verify"])};throw new k("Only RSA and ECDSA keys are supported")}async function wu(e){if(e.privateKey.algorithm.name==="RSASSA-PKCS1-v1_5"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return cn(t)}if(e.privateKey.algorithm.name==="ECDSA"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return new Pt(t)}throw new k("Only RSA and ECDSA keys are supported")}var vr=Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),ne=new Uint32Array(80),Jo=class extends ce{A=vr[0]|0;B=vr[1]|0;C=vr[2]|0;D=vr[3]|0;E=vr[4]|0;constructor(){super(64,20,8,!1)}get(){let{A:t,B:r,C:n,D:o,E:s}=this;return[t,r,n,o,s]}set(t,r,n,o,s){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0}process(t,r){for(let f=0;f<16;f++,r+=4)ne[f]=t.getUint32(r,!1);for(let f=16;f<80;f++)ne[f]=Fr(ne[f-3]^ne[f-8]^ne[f-14]^ne[f-16],1);let{A:n,B:o,C:s,D:i,E:a}=this;for(let f=0;f<80;f++){let c,u;f<20?(c=kr(o,s,i),u=1518500249):f<40?(c=o^s^i,u=1859775393):f<60?(c=Pr(o,s,i),u=2400959708):(c=o^s^i,u=3395469782);let l=Fr(n,5)+c+a+u+ne[f]|0;a=i,i=s,s=Fr(o,30),o=n,n=l}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,a=a+this.E|0,this.set(n,o,s,i,a)}roundClean(){mt(ne)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0),mt(this.buffer)}},Sa=sr(()=>new Jo);function Eu(e,t,r,n){Le(e);let o=Vs({dkLen:32,asyncTick:10},n),{c:s,dkLen:i,asyncTick:a}=o;if(Et(s,"c"),Et(i,"dkLen"),Et(a,"asyncTick"),s<1)throw new Error("iterations (c) must be >= 1");if(i<1)throw new Error('"dkLen" must be >= 1');if(i>(2**32-1)*e.outputLen)throw new Error("derived key too long");let f=Yn(t,"password"),c=Yn(r,"salt"),u=new Uint8Array(i),l=un.create(e,f),b=l._cloneInto().update(c);return{c:s,dkLen:i,asyncTick:a,DK:u,PRF:l,PRFSalt:b}}function Su(e,t,r,n,o){return e.destroy(),t.destroy(),n&&n.destroy(),mt(o),r}function Aa(e,t,r,n){let{c:o,dkLen:s,DK:i,PRF:a,PRFSalt:f}=Eu(e,t,r,n),c,u=new Uint8Array(4),l=De(u),b=new Uint8Array(a.outputLen);for(let p=1,m=0;m<s;p++,m+=a.outputLen){let E=i.subarray(m,m+a.outputLen);l.setInt32(0,p,!1),(c=f._cloneInto(c)).update(u).digestInto(b),E.set(b.subarray(0,E.length));for(let d=1;d<o;d++){a._cloneInto(c).update(b).digestInto(b);for(let y=0;y<E.length;y++)E[y]^=b[y]}}return Su(a,f,i,c,b)}var Ba={sha1:Sa,"sha2-256":$t,"sha2-512":Ke};function Qo(e,t,r,n,o){if(o!=="sha1"&&o!=="sha2-256"&&o!=="sha2-512"){let a=Object.keys(Ba).join(" / ");throw new k(`Hash '${o}' is unknown or not supported. Must be ${a}`)}let s=Ba[o],i=Aa(s,e,t,{c:r,dkLen:n});return Cn.encode(i).substring(1)}return La(Au);})();
3
3
  /*! Bundled license information:
4
4
 
5
5
  @noble/curves/utils.js: