@libp2p/crypto 5.1.7-cb1c14e62 → 5.1.7-cf9aab5c8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.min.js +1 -1
- package/dist/index.min.js.map +3 -3
- package/package.json +2 -2
package/dist/index.min.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
(function (root, factory) {(typeof module === 'object' && module.exports) ? module.exports = factory() : root.Libp2PCrypto = factory()}(typeof self !== 'undefined' ? self : this, function () {
|
|
2
|
-
"use strict";var Libp2PCrypto=(()=>{var un=Object.defineProperty;var ca=Object.getOwnPropertyDescriptor;var fa=Object.getOwnPropertyNames;var ua=Object.prototype.hasOwnProperty;var ot=(e,t)=>{for(var r in t)un(e,r,{get:t[r],enumerable:!0})},ha=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of fa(t))!ua.call(e,o)&&o!==r&&un(e,o,{get:()=>t[o],enumerable:!(n=ca(t,o))||n.enumerable});return e};var la=e=>ha(un({},"__esModule",{value:!0}),e);var fu={};ot(fu,{hmac:()=>Lr,keys:()=>ko,pbkdf2:()=>Ho,randomBytes:()=>Ao});var Lr={};ot(Lr,{create:()=>hn});var We=class extends Error{constructor(t="An error occurred while signing a message"){super(t),this.name="SigningError"}},Je=class extends Error{constructor(t="An error occurred while verifying a message"){super(t),this.name="VerificationError"}},Ir=class extends Error{constructor(t="Missing Web Crypto API"){super(t),this.name="WebCryptoMissingError"}};var Mo={get(e=globalThis){let t=e.crypto;if(t?.subtle==null)throw new Ir("Missing Web Crypto API. The most likely cause of this error is that this page is being accessed from an insecure context (i.e. not HTTPS). For more information and possible resolutions see https://github.com/libp2p/js-libp2p/blob/main/packages/crypto/README.md#web-crypto-api");return t}};var Y=Mo;var qo={SHA1:20,SHA256:32,SHA512:64};var da={SHA1:"SHA-1",SHA256:"SHA-256",SHA512:"SHA-512"},pa=async(e,t)=>{let r=await Y.get().subtle.sign({name:"HMAC"},e,t);return new Uint8Array(r,0,r.byteLength)};async function hn(e,t){let r=da[e],n=await Y.get().subtle.importKey("raw",t,{name:"HMAC",hash:{name:r}},!1,["sign"]);return{async digest(o){return pa(n,o)},length:qo[e]}}var ko={};ot(ko,{generateEphemeralKeyPair:()=>ta,generateKeyPair:()=>Xf,generateKeyPairFromSeed:()=>$f,keyStretcher:()=>ra,privateKeyFromCryptoKeyPair:()=>iu,privateKeyFromProtobuf:()=>tu,privateKeyFromRaw:()=>eu,privateKeyToCryptoKeyPair:()=>su,privateKeyToProtobuf:()=>ru,publicKeyFromMultihash:()=>Qf,publicKeyFromProtobuf:()=>Wf,publicKeyFromRaw:()=>Jf,publicKeyToProtobuf:()=>fe});var O=class extends Error{static name="InvalidParametersError";constructor(t="Invalid parameters"){super(t),this.name="InvalidParametersError"}},Se=class extends Error{static name="InvalidPublicKeyError";constructor(t="Invalid public key"){super(t),this.name="InvalidPublicKeyError"}},Qe=class extends Error{static name="InvalidPrivateKeyError";constructor(t="Invalid private key"){super(t),this.name="InvalidPrivateKeyError"}};var Gt=class extends Error{static name="UnsupportedKeyTypeError";constructor(t="Unsupported key type"){super(t),this.name="UnsupportedKeyTypeError"}};var yn={};ot(yn,{base58btc:()=>tt,base58flickr:()=>Ea});var gu=new Uint8Array(0);function Vo(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Dt(e){if(e instanceof Uint8Array&&e.constructor.name==="Uint8Array")return e;if(e instanceof ArrayBuffer)return new Uint8Array(e);if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);throw new Error("Unknown type, must be binary type")}function Fo(e){return new TextEncoder().encode(e)}function Zo(e){return new TextDecoder().decode(e)}function ma(e,t){if(e.length>=255)throw new TypeError("Alphabet too long");for(var r=new Uint8Array(256),n=0;n<r.length;n++)r[n]=255;for(var o=0;o<e.length;o++){var s=e.charAt(o),i=s.charCodeAt(0);if(r[i]!==255)throw new TypeError(s+" is ambiguous");r[i]=o}var a=e.length,c=e.charAt(0),u=Math.log(a)/Math.log(256),d=Math.log(256)/Math.log(a);function h(m){if(m instanceof Uint8Array||(ArrayBuffer.isView(m)?m=new Uint8Array(m.buffer,m.byteOffset,m.byteLength):Array.isArray(m)&&(m=Uint8Array.from(m))),!(m instanceof Uint8Array))throw new TypeError("Expected Uint8Array");if(m.length===0)return"";for(var w=0,x=0,A=0,v=m.length;A!==v&&m[A]===0;)A++,w++;for(var S=(v-A)*d+1>>>0,K=new Uint8Array(S);A!==v;){for(var R=m[A],I=0,k=S-1;(R!==0||I<x)&&k!==-1;k--,I++)R+=256*K[k]>>>0,K[k]=R%a>>>0,R=R/a>>>0;if(R!==0)throw new Error("Non-zero carry");x=I,A++}for(var H=S-x;H!==S&&K[H]===0;)H++;for(var T=c.repeat(w);H<S;++H)T+=e.charAt(K[H]);return T}function f(m){if(typeof m!="string")throw new TypeError("Expected String");if(m.length===0)return new Uint8Array;var w=0;if(m[w]!==" "){for(var x=0,A=0;m[w]===c;)x++,w++;for(var v=(m.length-w)*u+1>>>0,S=new Uint8Array(v);m[w];){var K=r[m.charCodeAt(w)];if(K===255)return;for(var R=0,I=v-1;(K!==0||R<A)&&I!==-1;I--,R++)K+=a*S[I]>>>0,S[I]=K%256>>>0,K=K/256>>>0;if(K!==0)throw new Error("Non-zero carry");A=R,w++}if(m[w]!==" "){for(var k=v-A;k!==v&&S[k]===0;)k++;for(var H=new Uint8Array(x+(v-k)),T=x;k!==v;)H[T++]=S[k++];return H}}}function l(m){var w=f(m);if(w)return w;throw new Error(`Non-${t} character`)}return{encode:h,decodeUnsafe:f,decode:l}}var ya=ma,ba=ya,zo=ba;var ln=class{name;prefix;baseEncode;constructor(t,r,n){this.name=t,this.prefix=r,this.baseEncode=n}encode(t){if(t instanceof Uint8Array)return`${this.prefix}${this.baseEncode(t)}`;throw Error("Unknown type, must be binary type")}},dn=class{name;prefix;baseDecode;prefixCodePoint;constructor(t,r,n){this.name=t,this.prefix=r;let o=r.codePointAt(0);if(o===void 0)throw new Error("Invalid prefix character");this.prefixCodePoint=o,this.baseDecode=n}decode(t){if(typeof t=="string"){if(t.codePointAt(0)!==this.prefixCodePoint)throw Error(`Unable to decode multibase string ${JSON.stringify(t)}, ${this.name} decoder only supports inputs prefixed with ${this.prefix}`);return this.baseDecode(t.slice(this.prefix.length))}else throw Error("Can only multibase decode strings")}or(t){return Go(this,t)}},pn=class{decoders;constructor(t){this.decoders=t}or(t){return Go(this,t)}decode(t){let r=t[0],n=this.decoders[r];if(n!=null)return n.decode(t);throw RangeError(`Unable to decode multibase string ${JSON.stringify(t)}, only inputs prefixed with ${Object.keys(this.decoders)} are supported`)}};function Go(e,t){return new pn({...e.decoders??{[e.prefix]:e},...t.decoders??{[t.prefix]:t}})}var mn=class{name;prefix;baseEncode;baseDecode;encoder;decoder;constructor(t,r,n,o){this.name=t,this.prefix=r,this.baseEncode=n,this.baseDecode=o,this.encoder=new ln(t,r,n),this.decoder=new dn(t,r,o)}encode(t){return this.encoder.encode(t)}decode(t){return this.decoder.decode(t)}};function Be({name:e,prefix:t,encode:r,decode:n}){return new mn(e,t,r,n)}function Yt({name:e,prefix:t,alphabet:r}){let{encode:n,decode:o}=zo(r,e);return Be({prefix:t,name:e,encode:n,decode:s=>Dt(o(s))})}function xa(e,t,r,n){let o=e.length;for(;e[o-1]==="=";)--o;let s=new Uint8Array(o*r/8|0),i=0,a=0,c=0;for(let u=0;u<o;++u){let d=t[e[u]];if(d===void 0)throw new SyntaxError(`Non-${n} character`);a=a<<r|d,i+=r,i>=8&&(i-=8,s[c++]=255&a>>i)}if(i>=r||(255&a<<8-i)!==0)throw new SyntaxError("Unexpected end of data");return s}function wa(e,t,r){let n=t[t.length-1]==="=",o=(1<<r)-1,s="",i=0,a=0;for(let c=0;c<e.length;++c)for(a=a<<8|e[c],i+=8;i>r;)i-=r,s+=t[o&a>>i];if(i!==0&&(s+=t[o&a<<r-i]),n)for(;(s.length*r&7)!==0;)s+="=";return s}function ga(e){let t={};for(let r=0;r<e.length;++r)t[e[r]]=r;return t}function $({name:e,prefix:t,bitsPerChar:r,alphabet:n}){let o=ga(n);return Be({prefix:t,name:e,encode(s){return wa(s,n,r)},decode(s){return xa(s,o,r,e)}})}var tt=Yt({name:"base58btc",prefix:"z",alphabet:"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"}),Ea=Yt({name:"base58flickr",prefix:"Z",alphabet:"123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"});var bn={};ot(bn,{base32:()=>ve,base32hex:()=>va,base32hexpad:()=>Ia,base32hexpadupper:()=>La,base32hexupper:()=>_a,base32pad:()=>Sa,base32padupper:()=>Ba,base32upper:()=>Aa,base32z:()=>Ka});var ve=$({prefix:"b",name:"base32",alphabet:"abcdefghijklmnopqrstuvwxyz234567",bitsPerChar:5}),Aa=$({prefix:"B",name:"base32upper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",bitsPerChar:5}),Sa=$({prefix:"c",name:"base32pad",alphabet:"abcdefghijklmnopqrstuvwxyz234567=",bitsPerChar:5}),Ba=$({prefix:"C",name:"base32padupper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=",bitsPerChar:5}),va=$({prefix:"v",name:"base32hex",alphabet:"0123456789abcdefghijklmnopqrstuv",bitsPerChar:5}),_a=$({prefix:"V",name:"base32hexupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV",bitsPerChar:5}),Ia=$({prefix:"t",name:"base32hexpad",alphabet:"0123456789abcdefghijklmnopqrstuv=",bitsPerChar:5}),La=$({prefix:"T",name:"base32hexpadupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV=",bitsPerChar:5}),Ka=$({prefix:"h",name:"base32z",alphabet:"ybndrfg8ejkmcpqxot1uwisza345h769",bitsPerChar:5});var xn={};ot(xn,{base36:()=>tr,base36upper:()=>Ta});var tr=Yt({prefix:"k",name:"base36",alphabet:"0123456789abcdefghijklmnopqrstuvwxyz"}),Ta=Yt({prefix:"K",name:"base36upper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"});var Da=$o,Yo=128,Ua=127,Ca=~Ua,Ra=Math.pow(2,31);function $o(e,t,r){t=t||[],r=r||0;for(var n=r;e>=Ra;)t[r++]=e&255|Yo,e/=128;for(;e&Ca;)t[r++]=e&255|Yo,e>>>=7;return t[r]=e|0,$o.bytes=r-n+1,t}var Pa=wn,ka=128,Xo=127;function wn(e,n){var r=0,n=n||0,o=0,s=n,i,a=e.length;do{if(s>=a)throw wn.bytes=0,new RangeError("Could not decode varint");i=e[s++],r+=o<28?(i&Xo)<<o:(i&Xo)*Math.pow(2,o),o+=7}while(i>=ka);return wn.bytes=s-n,r}var Ha=Math.pow(2,7),Na=Math.pow(2,14),Oa=Math.pow(2,21),Ma=Math.pow(2,28),qa=Math.pow(2,35),Va=Math.pow(2,42),Fa=Math.pow(2,49),Za=Math.pow(2,56),ja=Math.pow(2,63),za=function(e){return e<Ha?1:e<Na?2:e<Oa?3:e<Ma?4:e<qa?5:e<Va?6:e<Fa?7:e<Za?8:e<ja?9:10},Ga={encode:Da,decode:Pa,encodingLength:za},Ya=Ga,er=Ya;function rr(e,t=0){return[er.decode(e,t),er.decode.bytes]}function _e(e,t,r=0){return er.encode(e,t,r),t}function Ie(e){return er.encodingLength(e)}function At(e,t){let r=t.byteLength,n=Ie(e),o=n+Ie(r),s=new Uint8Array(o+r);return _e(e,s,0),_e(r,s,n),s.set(t,o),new Le(e,r,t,s)}function Wo(e){let t=Dt(e),[r,n]=rr(t),[o,s]=rr(t.subarray(n)),i=t.subarray(n+s);if(i.byteLength!==o)throw new Error("Incorrect length");return new Le(r,o,i,t)}function Jo(e,t){if(e===t)return!0;{let r=t;return e.code===r.code&&e.size===r.size&&r.bytes instanceof Uint8Array&&Vo(e.bytes,r.bytes)}}var Le=class{code;size;digest;bytes;constructor(t,r,n,o){this.code=t,this.size=r,this.digest=n,this.bytes=o}};function Qo(e,t){let{bytes:r,version:n}=e;switch(n){case 0:return $a(r,gn(e),t??tt.encoder);default:return Wa(r,gn(e),t??ve.encoder)}}var ts=new WeakMap;function gn(e){let t=ts.get(e);if(t==null){let r=new Map;return ts.set(e,r),r}return t}var gt=class e{code;version;multihash;bytes;"/";constructor(t,r,n,o){this.code=r,this.version=t,this.multihash=n,this.bytes=o,this["/"]=o}get asCID(){return this}get byteOffset(){return this.bytes.byteOffset}get byteLength(){return this.bytes.byteLength}toV0(){switch(this.version){case 0:return this;case 1:{let{code:t,multihash:r}=this;if(t!==or)throw new Error("Cannot convert a non dag-pb CID to CIDv0");if(r.code!==Ja)throw new Error("Cannot convert non sha2-256 multihash CID to CIDv0");return e.createV0(r)}default:throw Error(`Can not convert CID version ${this.version} to version 0. This is a bug please report`)}}toV1(){switch(this.version){case 0:{let{code:t,digest:r}=this.multihash,n=At(t,r);return e.createV1(this.code,n)}case 1:return this;default:throw Error(`Can not convert CID version ${this.version} to version 1. This is a bug please report`)}}equals(t){return e.equals(this,t)}static equals(t,r){let n=r;return n!=null&&t.code===n.code&&t.version===n.version&&Jo(t.multihash,n.multihash)}toString(t){return Qo(this,t)}toJSON(){return{"/":Qo(this)}}link(){return this}[Symbol.toStringTag]="CID";[Symbol.for("nodejs.util.inspect.custom")](){return`CID(${this.toString()})`}static asCID(t){if(t==null)return null;let r=t;if(r instanceof e)return r;if(r["/"]!=null&&r["/"]===r.bytes||r.asCID===r){let{version:n,code:o,multihash:s,bytes:i}=r;return new e(n,o,s,i??es(n,o,s.bytes))}else if(r[Qa]===!0){let{version:n,multihash:o,code:s}=r,i=Wo(o);return e.create(n,s,i)}else return null}static create(t,r,n){if(typeof r!="number")throw new Error("String codecs are no longer supported");if(!(n.bytes instanceof Uint8Array))throw new Error("Invalid digest");switch(t){case 0:{if(r!==or)throw new Error(`Version 0 CID must use dag-pb (code: ${or}) block encoding`);return new e(t,r,n,n.bytes)}case 1:{let o=es(t,r,n.bytes);return new e(t,r,n,o)}default:throw new Error("Invalid version")}}static createV0(t){return e.create(0,or,t)}static createV1(t,r){return e.create(1,t,r)}static decode(t){let[r,n]=e.decodeFirst(t);if(n.length!==0)throw new Error("Incorrect length");return r}static decodeFirst(t){let r=e.inspectBytes(t),n=r.size-r.multihashSize,o=Dt(t.subarray(n,n+r.multihashSize));if(o.byteLength!==r.multihashSize)throw new Error("Incorrect length");let s=o.subarray(r.multihashSize-r.digestSize),i=new Le(r.multihashCode,r.digestSize,s,o);return[r.version===0?e.createV0(i):e.createV1(r.codec,i),t.subarray(r.size)]}static inspectBytes(t){let r=0,n=()=>{let[h,f]=rr(t.subarray(r));return r+=f,h},o=n(),s=or;if(o===18?(o=0,r=0):s=n(),o!==0&&o!==1)throw new RangeError(`Invalid CID version ${o}`);let i=r,a=n(),c=n(),u=r+c,d=u-i;return{version:o,codec:s,multihashCode:a,digestSize:c,multihashSize:d,size:u}}static parse(t,r){let[n,o]=Xa(t,r),s=e.decode(o);if(s.version===0&&t[0]!=="Q")throw Error("Version 0 CID string must not include multibase prefix");return gn(s).set(n,t),s}};function Xa(e,t){switch(e[0]){case"Q":{let r=t??tt;return[tt.prefix,r.decode(`${tt.prefix}${e}`)]}case tt.prefix:{let r=t??tt;return[tt.prefix,r.decode(e)]}case ve.prefix:{let r=t??ve;return[ve.prefix,r.decode(e)]}case tr.prefix:{let r=t??tr;return[tr.prefix,r.decode(e)]}default:{if(t==null)throw Error("To parse non base32, base36 or base58btc encoded CID multibase decoder must be provided");return[e[0],t.decode(e)]}}}function $a(e,t,r){let{prefix:n}=r;if(n!==tt.prefix)throw Error(`Cannot string encode V0 in ${r.name} encoding`);let o=t.get(n);if(o==null){let s=r.encode(e).slice(1);return t.set(n,s),s}else return o}function Wa(e,t,r){let{prefix:n}=r,o=t.get(n);if(o==null){let s=r.encode(e);return t.set(n,s),s}else return o}var or=112,Ja=18;function es(e,t,r){let n=Ie(e),o=n+Ie(t),s=new Uint8Array(o+r.byteLength);return _e(e,s,0),_e(t,s,n),s.set(r,o),s}var Qa=Symbol.for("@ipld/js-cid/CID");var En={};ot(En,{identity:()=>ae});var rs=0,tc="identity",ns=Dt;function ec(e){return At(rs,ns(e))}var ae={code:rs,name:tc,encode:ns,digest:ec};function st(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Ut(e=0){return new Uint8Array(e)}function mt(e=0){return new Uint8Array(e)}function It(e,t){t==null&&(t=e.reduce((o,s)=>o+s.length,0));let r=mt(t),n=0;for(let o of e)r.set(o,n),n+=o.length;return r}var ss=Symbol.for("@achingbrain/uint8arraylist");function os(e,t){if(t==null||t<0)throw new RangeError("index is out of bounds");let r=0;for(let n of e){let o=r+n.byteLength;if(t<o)return{buf:n,index:t-r};r=o}throw new RangeError("index is out of bounds")}function Tr(e){return!!e?.[ss]}var at=class e{bufs;length;[ss]=!0;constructor(...t){this.bufs=[],this.length=0,t.length>0&&this.appendAll(t)}*[Symbol.iterator](){yield*this.bufs}get byteLength(){return this.length}append(...t){this.appendAll(t)}appendAll(t){let r=0;for(let n of t)if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.push(n);else if(Tr(n))r+=n.byteLength,this.bufs.push(...n.bufs);else throw new Error("Could not append value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}prepend(...t){this.prependAll(t)}prependAll(t){let r=0;for(let n of t.reverse())if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.unshift(n);else if(Tr(n))r+=n.byteLength,this.bufs.unshift(...n.bufs);else throw new Error("Could not prepend value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}get(t){let r=os(this.bufs,t);return r.buf[r.index]}set(t,r){let n=os(this.bufs,t);n.buf[n.index]=r}write(t,r=0){if(t instanceof Uint8Array)for(let n=0;n<t.length;n++)this.set(r+n,t[n]);else if(Tr(t))for(let n=0;n<t.length;n++)this.set(r+n,t.get(n));else throw new Error("Could not write value, must be an Uint8Array or a Uint8ArrayList")}consume(t){if(t=Math.trunc(t),!(Number.isNaN(t)||t<=0)){if(t===this.byteLength){this.bufs=[],this.length=0;return}for(;this.bufs.length>0;)if(t>=this.bufs[0].byteLength)t-=this.bufs[0].byteLength,this.length-=this.bufs[0].byteLength,this.bufs.shift();else{this.bufs[0]=this.bufs[0].subarray(t),this.length-=t;break}}}slice(t,r){let{bufs:n,length:o}=this._subList(t,r);return It(n,o)}subarray(t,r){let{bufs:n,length:o}=this._subList(t,r);return n.length===1?n[0]:It(n,o)}sublist(t,r){let{bufs:n,length:o}=this._subList(t,r),s=new e;return s.length=o,s.bufs=[...n],s}_subList(t,r){if(t=t??0,r=r??this.length,t<0&&(t=this.length+t),r<0&&(r=this.length+r),t<0||r>this.length)throw new RangeError("index is out of bounds");if(t===r)return{bufs:[],length:0};if(t===0&&r===this.length)return{bufs:this.bufs,length:this.length};let n=[],o=0;for(let s=0;s<this.bufs.length;s++){let i=this.bufs[s],a=o,c=a+i.byteLength;if(o=c,t>=c)continue;let u=t>=a&&t<c,d=r>a&&r<=c;if(u&&d){if(t===a&&r===c){n.push(i);break}let h=t-a;n.push(i.subarray(h,h+(r-t)));break}if(u){if(t===0){n.push(i);continue}n.push(i.subarray(t-a));continue}if(d){if(r===c){n.push(i);break}n.push(i.subarray(0,r-a));break}n.push(i)}return{bufs:n,length:r-t}}indexOf(t,r=0){if(!Tr(t)&&!(t instanceof Uint8Array))throw new TypeError('The "value" argument must be a Uint8ArrayList or Uint8Array');let n=t instanceof Uint8Array?t:t.subarray();if(r=Number(r??0),isNaN(r)&&(r=0),r<0&&(r=this.length+r),r<0&&(r=0),t.length===0)return r>this.length?this.length:r;let o=n.byteLength;if(o===0)throw new TypeError("search must be at least 1 byte long");let s=256,i=new Int32Array(s);for(let h=0;h<s;h++)i[h]=-1;for(let h=0;h<o;h++)i[n[h]]=h;let a=i,c=this.byteLength-n.byteLength,u=n.byteLength-1,d;for(let h=r;h<=c;h+=d){d=0;for(let f=u;f>=0;f--){let l=this.get(h+f);if(n[f]!==l){d=Math.max(1,f-a[l]);break}}if(d===0)return h}return-1}getInt8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getInt8(0)}setInt8(t,r){let n=mt(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setInt8(0,r),this.write(n,t)}getInt16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt16(0,r)}setInt16(t,r,n){let o=Ut(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt16(0,r,n),this.write(o,t)}getInt32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt32(0,r)}setInt32(t,r,n){let o=Ut(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt32(0,r,n),this.write(o,t)}getBigInt64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigInt64(0,r)}setBigInt64(t,r,n){let o=Ut(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigInt64(0,r,n),this.write(o,t)}getUint8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getUint8(0)}setUint8(t,r){let n=mt(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setUint8(0,r),this.write(n,t)}getUint16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint16(0,r)}setUint16(t,r,n){let o=Ut(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint16(0,r,n),this.write(o,t)}getUint32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint32(0,r)}setUint32(t,r,n){let o=Ut(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint32(0,r,n),this.write(o,t)}getBigUint64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigUint64(0,r)}setBigUint64(t,r,n){let o=Ut(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigUint64(0,r,n),this.write(o,t)}getFloat32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat32(0,r)}setFloat32(t,r,n){let o=Ut(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat32(0,r,n),this.write(o,t)}getFloat64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat64(0,r)}setFloat64(t,r,n){let o=Ut(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat64(0,r,n),this.write(o,t)}equals(t){if(t==null||!(t instanceof e)||t.bufs.length!==this.bufs.length)return!1;for(let r=0;r<this.bufs.length;r++)if(!st(this.bufs[r],t.bufs[r]))return!1;return!0}static fromUint8Arrays(t,r){let n=new e;return n.bufs=t,r==null&&(r=t.reduce((o,s)=>o+s.byteLength,0)),n.length=r,n}};var An={};ot(An,{base10:()=>rc});var rc=Yt({prefix:"9",name:"base10",alphabet:"0123456789"});var Sn={};ot(Sn,{base16:()=>nc,base16upper:()=>oc});var nc=$({prefix:"f",name:"base16",alphabet:"0123456789abcdef",bitsPerChar:4}),oc=$({prefix:"F",name:"base16upper",alphabet:"0123456789ABCDEF",bitsPerChar:4});var Bn={};ot(Bn,{base2:()=>sc});var sc=$({prefix:"0",name:"base2",alphabet:"01",bitsPerChar:1});var vn={};ot(vn,{base256emoji:()=>uc});var is=Array.from("\u{1F680}\u{1FA90}\u2604\u{1F6F0}\u{1F30C}\u{1F311}\u{1F312}\u{1F313}\u{1F314}\u{1F315}\u{1F316}\u{1F317}\u{1F318}\u{1F30D}\u{1F30F}\u{1F30E}\u{1F409}\u2600\u{1F4BB}\u{1F5A5}\u{1F4BE}\u{1F4BF}\u{1F602}\u2764\u{1F60D}\u{1F923}\u{1F60A}\u{1F64F}\u{1F495}\u{1F62D}\u{1F618}\u{1F44D}\u{1F605}\u{1F44F}\u{1F601}\u{1F525}\u{1F970}\u{1F494}\u{1F496}\u{1F499}\u{1F622}\u{1F914}\u{1F606}\u{1F644}\u{1F4AA}\u{1F609}\u263A\u{1F44C}\u{1F917}\u{1F49C}\u{1F614}\u{1F60E}\u{1F607}\u{1F339}\u{1F926}\u{1F389}\u{1F49E}\u270C\u2728\u{1F937}\u{1F631}\u{1F60C}\u{1F338}\u{1F64C}\u{1F60B}\u{1F497}\u{1F49A}\u{1F60F}\u{1F49B}\u{1F642}\u{1F493}\u{1F929}\u{1F604}\u{1F600}\u{1F5A4}\u{1F603}\u{1F4AF}\u{1F648}\u{1F447}\u{1F3B6}\u{1F612}\u{1F92D}\u2763\u{1F61C}\u{1F48B}\u{1F440}\u{1F62A}\u{1F611}\u{1F4A5}\u{1F64B}\u{1F61E}\u{1F629}\u{1F621}\u{1F92A}\u{1F44A}\u{1F973}\u{1F625}\u{1F924}\u{1F449}\u{1F483}\u{1F633}\u270B\u{1F61A}\u{1F61D}\u{1F634}\u{1F31F}\u{1F62C}\u{1F643}\u{1F340}\u{1F337}\u{1F63B}\u{1F613}\u2B50\u2705\u{1F97A}\u{1F308}\u{1F608}\u{1F918}\u{1F4A6}\u2714\u{1F623}\u{1F3C3}\u{1F490}\u2639\u{1F38A}\u{1F498}\u{1F620}\u261D\u{1F615}\u{1F33A}\u{1F382}\u{1F33B}\u{1F610}\u{1F595}\u{1F49D}\u{1F64A}\u{1F639}\u{1F5E3}\u{1F4AB}\u{1F480}\u{1F451}\u{1F3B5}\u{1F91E}\u{1F61B}\u{1F534}\u{1F624}\u{1F33C}\u{1F62B}\u26BD\u{1F919}\u2615\u{1F3C6}\u{1F92B}\u{1F448}\u{1F62E}\u{1F646}\u{1F37B}\u{1F343}\u{1F436}\u{1F481}\u{1F632}\u{1F33F}\u{1F9E1}\u{1F381}\u26A1\u{1F31E}\u{1F388}\u274C\u270A\u{1F44B}\u{1F630}\u{1F928}\u{1F636}\u{1F91D}\u{1F6B6}\u{1F4B0}\u{1F353}\u{1F4A2}\u{1F91F}\u{1F641}\u{1F6A8}\u{1F4A8}\u{1F92C}\u2708\u{1F380}\u{1F37A}\u{1F913}\u{1F619}\u{1F49F}\u{1F331}\u{1F616}\u{1F476}\u{1F974}\u25B6\u27A1\u2753\u{1F48E}\u{1F4B8}\u2B07\u{1F628}\u{1F31A}\u{1F98B}\u{1F637}\u{1F57A}\u26A0\u{1F645}\u{1F61F}\u{1F635}\u{1F44E}\u{1F932}\u{1F920}\u{1F927}\u{1F4CC}\u{1F535}\u{1F485}\u{1F9D0}\u{1F43E}\u{1F352}\u{1F617}\u{1F911}\u{1F30A}\u{1F92F}\u{1F437}\u260E\u{1F4A7}\u{1F62F}\u{1F486}\u{1F446}\u{1F3A4}\u{1F647}\u{1F351}\u2744\u{1F334}\u{1F4A3}\u{1F438}\u{1F48C}\u{1F4CD}\u{1F940}\u{1F922}\u{1F445}\u{1F4A1}\u{1F4A9}\u{1F450}\u{1F4F8}\u{1F47B}\u{1F910}\u{1F92E}\u{1F3BC}\u{1F975}\u{1F6A9}\u{1F34E}\u{1F34A}\u{1F47C}\u{1F48D}\u{1F4E3}\u{1F942}"),ic=is.reduce((e,t,r)=>(e[r]=t,e),[]),ac=is.reduce((e,t,r)=>{let n=t.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${t}`);return e[n]=r,e},[]);function cc(e){return e.reduce((t,r)=>(t+=ic[r],t),"")}function fc(e){let t=[];for(let r of e){let n=r.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${r}`);let o=ac[n];if(o==null)throw new Error(`Non-base256emoji character: ${r}`);t.push(o)}return new Uint8Array(t)}var uc=Be({prefix:"\u{1F680}",name:"base256emoji",encode:cc,decode:fc});var In={};ot(In,{base64:()=>_n,base64pad:()=>hc,base64url:()=>lc,base64urlpad:()=>dc});var _n=$({prefix:"m",name:"base64",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",bitsPerChar:6}),hc=$({prefix:"M",name:"base64pad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",bitsPerChar:6}),lc=$({prefix:"u",name:"base64url",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_",bitsPerChar:6}),dc=$({prefix:"U",name:"base64urlpad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_=",bitsPerChar:6});var Ln={};ot(Ln,{base8:()=>pc});var pc=$({prefix:"7",name:"base8",alphabet:"01234567",bitsPerChar:3});var Kn={};ot(Kn,{identity:()=>mc});var mc=Be({prefix:"\0",name:"identity",encode:e=>Zo(e),decode:e=>Fo(e)});var nh=new TextEncoder,oh=new TextDecoder;var Un={};ot(Un,{sha256:()=>Dr,sha512:()=>xc});function Dn({name:e,code:t,encode:r}){return new Tn(e,t,r)}var Tn=class{name;code;encode;constructor(t,r,n){this.name=t,this.code=r,this.encode=n}digest(t){if(t instanceof Uint8Array){let r=this.encode(t);return r instanceof Uint8Array?At(this.code,r):r.then(n=>At(this.code,n))}else throw Error("Unknown type, must be binary type")}};function cs(e){return async t=>new Uint8Array(await crypto.subtle.digest(e,t))}var Dr=Dn({name:"sha2-256",code:18,encode:cs("SHA-256")}),xc=Dn({name:"sha2-512",code:19,encode:cs("SHA-512")});var Cn={...Kn,...Bn,...Ln,...An,...Sn,...bn,...xn,...yn,...In,...vn},yh={...Un,...En};function us(e,t,r,n){return{name:e,prefix:t,encoder:{name:e,prefix:t,encode:r},decoder:{decode:n}}}var fs=us("utf8","u",e=>"u"+new TextDecoder("utf8").decode(e),e=>new TextEncoder().encode(e.substring(1))),Rn=us("ascii","a",e=>{let t="a";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return t},e=>{e=e.substring(1);let t=mt(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}),wc={utf8:fs,"utf-8":fs,hex:Cn.base16,latin1:Rn,ascii:Rn,binary:Rn,...Cn},Ur=wc;function z(e,t="utf8"){let r=Ur[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.decoder.decode(`${r.prefix}${e}`)}function M(e,t="utf8"){let r=Ur[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.encoder.encode(e).substring(1)}var gc=parseInt("11111",2),Pn=parseInt("10000000",2),Ec=parseInt("01111111",2),hs={0:sr,1:sr,2:Ac,3:vc,4:_c,5:Bc,6:Sc,16:sr,22:sr,48:sr};function yt(e,t={offset:0}){let r=e[t.offset]&gc;if(t.offset++,hs[r]!=null)return hs[r](e,t);throw new Error("No decoder for tag "+r)}function ir(e,t){let r=0;if((e[t.offset]&Pn)===Pn){let n=e[t.offset]&Ec,o="0x";t.offset++;for(let s=0;s<n;s++,t.offset++)o+=e[t.offset].toString(16).padStart(2,"0");r=parseInt(o,16)}else r=e[t.offset],t.offset++;return r}function sr(e,t){ir(e,t);let r=[];for(;!(t.offset>=e.byteLength);){let n=yt(e,t);if(n===null)break;r.push(n)}return r}function Ac(e,t){let r=ir(e,t),n=t.offset,o=t.offset+r,s=[];for(let i=n;i<o;i++)i===n&&e[i]===0||s.push(e[i]);return t.offset+=r,Uint8Array.from(s)}function Sc(e,t){let r=ir(e,t),n=t.offset+r,o=e[t.offset];t.offset++;let s=0,i=0;o<40?(s=0,i=o):o<80?(s=1,i=o-40):(s=2,i=o-80);let a=`${s}.${i}`,c=[];for(;t.offset<n;){let u=e[t.offset];if(t.offset++,c.push(u&127),u<128){c.reverse();let d=0;for(let h=0;h<c.length;h++)d+=c[h]<<h*7;a+=`.${d}`,c=[]}}return a}function Bc(e,t){return t.offset++,null}function vc(e,t){let r=ir(e,t),n=e[t.offset];t.offset++;let o=e.subarray(t.offset,t.offset+r-1);if(t.offset+=r,n!==0)throw new Error("Unused bits in bit string is unimplemented");return o}function _c(e,t){let r=ir(e,t),n=e.subarray(t.offset,t.offset+r);return t.offset+=r,n}function Ic(e){let t=e.toString(16);t.length%2===1&&(t="0"+t);let r=new at;for(let n=0;n<t.length;n+=2)r.append(Uint8Array.from([parseInt(`${t[n]}${t[n+1]}`,16)]));return r}function Cr(e){if(e.byteLength<128)return Uint8Array.from([e.byteLength]);let t=Ic(e.byteLength);return new at(Uint8Array.from([t.byteLength|Pn]),t)}function ct(e){let t=new at,r=128;return(e.subarray()[0]&r)===r&&t.append(Uint8Array.from([0])),t.append(e),new at(Uint8Array.from([2]),Cr(t),t)}function ar(e){let t=Uint8Array.from([0]),r=new at(t,e);return new at(Uint8Array.from([3]),Cr(r),r)}function ls(e){return new at(Uint8Array.from([4]),Cr(e),e)}function St(e,t=48){let r=new at;for(let n of e)r.append(n);return new at(Uint8Array.from([t]),Cr(r),r)}var kn="1.2.840.10045.3.1.7",Hn="1.3.132.0.34",Nn="1.3.132.0.35";async function ds(e="P-256"){let t=await crypto.subtle.generateKey({name:"ECDSA",namedCurve:e},!0,["sign","verify"]);return{publicKey:await crypto.subtle.exportKey("jwk",t.publicKey),privateKey:await crypto.subtle.exportKey("jwk",t.privateKey)}}async function ps(e,t,r){let n=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["sign"]);r?.signal?.throwIfAborted();let o=await crypto.subtle.sign({name:"ECDSA",hash:{name:"SHA-256"}},n,t.subarray());return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function ms(e,t,r,n){let o=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["verify"]);n?.signal?.throwIfAborted();let s=await crypto.subtle.verify({name:"ECDSA",hash:{name:"SHA-256"}},o,t,r.subarray());return n?.signal?.throwIfAborted(),s}var Lc=Uint8Array.from([6,8,42,134,72,206,61,3,1,7]),Kc=Uint8Array.from([6,5,43,129,4,0,34]),Tc=Uint8Array.from([6,5,43,129,4,0,35]),ys={ext:!0,kty:"EC",crv:"P-256"},bs={ext:!0,kty:"EC",crv:"P-384"},xs={ext:!0,kty:"EC",crv:"P-521"},Ke=32,Te=48,De=66;function ws(e){let t=yt(e);return On(t)}function On(e){let t=e[1],r=M(t,"base64url"),n=e[2][1][0],o=1,s,i;if(t.byteLength===Ke)return s=M(n.subarray(o,o+Ke),"base64url"),i=M(n.subarray(o+Ke),"base64url"),new Ct({...ys,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===Te)return s=M(n.subarray(o,o+Te),"base64url"),i=M(n.subarray(o+Te),"base64url"),new Ct({...bs,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===De)return s=M(n.subarray(o,o+De),"base64url"),i=M(n.subarray(o+De),"base64url"),new Ct({...xs,key_ops:["sign"],d:r,x:s,y:i});throw new O(`Private key length was wrong length, got ${t.byteLength}, expected 32, 48 or 66`)}function Mn(e){let t=yt(e);return qn(t)}function qn(e){let t=e[1][1][0],r=1,n,o;if(t.byteLength===Ke*2+1)return n=M(t.subarray(r,r+Ke),"base64url"),o=M(t.subarray(r+Ke),"base64url"),new ce({...ys,key_ops:["verify"],x:n,y:o});if(t.byteLength===Te*2+1)return n=M(t.subarray(r,r+Te),"base64url"),o=M(t.subarray(r+Te),"base64url"),new ce({...bs,key_ops:["verify"],x:n,y:o});if(t.byteLength===De*2+1)return n=M(t.subarray(r,r+De),"base64url"),o=M(t.subarray(r+De),"base64url"),new ce({...xs,key_ops:["verify"],x:n,y:o});throw new O(`coordinates were wrong length, got ${t.byteLength}, expected 65, 97 or 133`)}function gs(e){return St([ct(Uint8Array.from([1])),ls(z(e.d??"","base64url")),St([As(e.crv)],160),St([ar(new at(Uint8Array.from([4]),z(e.x??"","base64url"),z(e.y??"","base64url")))],161)]).subarray()}function Es(e){return St([ct(Uint8Array.from([1])),St([As(e.crv)],160),St([ar(new at(Uint8Array.from([4]),z(e.x??"","base64url"),z(e.y??"","base64url")))],161)]).subarray()}function As(e){if(e==="P-256")return Lc;if(e==="P-384")return Kc;if(e==="P-521")return Tc;throw new O(`Invalid curve ${e}`)}async function Ss(e="P-256"){let t=await ds(e);return new Ct(t.privateKey)}var ce=class{type="ECDSA";jwk;_raw;constructor(t){this.jwk=t}get raw(){return this._raw==null&&(this._raw=Es(this.jwk)),this._raw}toMultihash(){return ae.digest(fe(this))}toCID(){return gt.createV1(114,this.toMultihash())}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}async verify(t,r,n){return ms(this.jwk,r,t,n)}},Ct=class{type="ECDSA";jwk;publicKey;_raw;constructor(t){this.jwk=t,this.publicKey=new ce({crv:t.crv,ext:t.ext,key_ops:["verify"],kty:"EC",x:t.x,y:t.y})}get raw(){return this._raw==null&&(this._raw=gs(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}async sign(t,r){return ps(this.jwk,t,r)}};var ue=typeof globalThis=="object"&&"crypto"in globalThis?globalThis.crypto:void 0;function he(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Pt(e){if(!Number.isSafeInteger(e)||e<0)throw new Error("positive integer expected, got "+e)}function X(e,...t){if(!he(e))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw new Error("Uint8Array expected of length "+t+", got length="+e.length)}function Ce(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.createHasher");Pt(e.outputLen),Pt(e.blockLen)}function Re(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function vs(e,t){X(e);let r=t.outputLen;if(e.length<r)throw new Error("digestInto() expects output buffer of length at least "+r)}function ht(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Pe(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Bt(e,t){return e<<32-t|e>>>t}function Rr(e,t){return e<<t|e>>>32-t>>>0}var _s=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",Dc=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Et(e){if(X(e),_s)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=Dc[e[r]];return t}var Rt={_0:48,_9:57,A:65,F:70,a:97,f:102};function Bs(e){if(e>=Rt._0&&e<=Rt._9)return e-Rt._0;if(e>=Rt.A&&e<=Rt.F)return e-(Rt.A-10);if(e>=Rt.a&&e<=Rt.f)return e-(Rt.a-10)}function le(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);if(_s)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw new Error("hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(r);for(let o=0,s=0;o<r;o++,s+=2){let i=Bs(e.charCodeAt(s)),a=Bs(e.charCodeAt(s+1));if(i===void 0||a===void 0){let c=e[s]+e[s+1];throw new Error('hex string expected, got non-hex character "'+c+'" at index '+s)}n[o]=i*16+a}return n}function Pr(e){if(typeof e!="string")throw new Error("string expected");return new Uint8Array(new TextEncoder().encode(e))}function cr(e){return typeof e=="string"&&(e=Pr(e)),X(e),e}function Vn(e){return typeof e=="string"&&(e=Pr(e)),X(e),e}function lt(...e){let t=0;for(let n=0;n<e.length;n++){let o=e[n];X(o),t+=o.length}let r=new Uint8Array(t);for(let n=0,o=0;n<e.length;n++){let s=e[n];r.set(s,o),o+=s.length}return r}function Is(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw new Error("options should be object or undefined");return Object.assign(e,t)}var Ue=class{};function fr(e){let t=n=>e().update(cr(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function de(e=32){if(ue&&typeof ue.getRandomValues=="function")return ue.getRandomValues(new Uint8Array(e));if(ue&&typeof ue.randomBytes=="function")return Uint8Array.from(ue.randomBytes(e));throw new Error("crypto.getRandomValues must be defined")}function Uc(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let o=BigInt(32),s=BigInt(4294967295),i=Number(r>>o&s),a=Number(r&s),c=n?4:0,u=n?0:4;e.setUint32(t+c,i,n),e.setUint32(t+u,a,n)}function kr(e,t,r){return e&t^~e&r}function Hr(e,t,r){return e&t^e&r^t&r}var pe=class extends Ue{constructor(t,r,n,o){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.buffer=new Uint8Array(t),this.view=Pe(this.buffer)}update(t){Re(this),t=cr(t),X(t);let{view:r,buffer:n,blockLen:o}=this,s=t.length;for(let i=0;i<s;){let a=Math.min(o-this.pos,s-i);if(a===o){let c=Pe(t);for(;o<=s-i;i+=o)this.process(c,i);continue}n.set(t.subarray(i,i+a),this.pos),this.pos+=a,i+=a,this.pos===o&&(this.process(r,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){Re(this),vs(t,this),this.finished=!0;let{buffer:r,view:n,blockLen:o,isLE:s}=this,{pos:i}=this;r[i++]=128,ht(this.buffer.subarray(i)),this.padOffset>o-i&&(this.process(n,0),i=0);for(let h=i;h<o;h++)r[h]=0;Uc(n,o-8,BigInt(this.length*8),s),this.process(n,0);let a=Pe(t),c=this.outputLen;if(c%4)throw new Error("_sha2: outputLen should be aligned to 32bit");let u=c/4,d=this.get();if(u>d.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;h<u;h++)a.setUint32(4*h,d[h],s)}digest(){let{buffer:t,outputLen:r}=this;this.digestInto(t);let n=t.slice(0,r);return this.destroy(),n}_cloneInto(t){t||(t=new this.constructor),t.set(...this.get());let{blockLen:r,buffer:n,length:o,finished:s,destroyed:i,pos:a}=this;return t.destroyed=i,t.finished=s,t.length=o,t.pos=a,o%r&&t.buffer.set(n),t}clone(){return this._cloneInto()}},kt=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var rt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Nr=BigInt(4294967295),Ls=BigInt(32);function Cc(e,t=!1){return t?{h:Number(e&Nr),l:Number(e>>Ls&Nr)}:{h:Number(e>>Ls&Nr)|0,l:Number(e&Nr)|0}}function Ks(e,t=!1){let r=e.length,n=new Uint32Array(r),o=new Uint32Array(r);for(let s=0;s<r;s++){let{h:i,l:a}=Cc(e[s],t);[n[s],o[s]]=[i,a]}return[n,o]}var Fn=(e,t,r)=>e>>>r,Zn=(e,t,r)=>e<<32-r|t>>>r,me=(e,t,r)=>e>>>r|t<<32-r,ye=(e,t,r)=>e<<32-r|t>>>r,ur=(e,t,r)=>e<<64-r|t>>>r-32,hr=(e,t,r)=>e>>>r-32|t<<64-r;function Lt(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var Ts=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Ds=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,Us=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Cs=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,Rs=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),Ps=(e,t,r,n,o,s)=>t+r+n+o+s+(e/2**32|0)|0;var Pc=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Xt=new Uint32Array(64),Or=class extends pe{constructor(t=32){super(64,t,8,!1),this.A=kt[0]|0,this.B=kt[1]|0,this.C=kt[2]|0,this.D=kt[3]|0,this.E=kt[4]|0,this.F=kt[5]|0,this.G=kt[6]|0,this.H=kt[7]|0}get(){let{A:t,B:r,C:n,D:o,E:s,F:i,G:a,H:c}=this;return[t,r,n,o,s,i,a,c]}set(t,r,n,o,s,i,a,c){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0,this.F=i|0,this.G=a|0,this.H=c|0}process(t,r){for(let h=0;h<16;h++,r+=4)Xt[h]=t.getUint32(r,!1);for(let h=16;h<64;h++){let f=Xt[h-15],l=Xt[h-2],m=Bt(f,7)^Bt(f,18)^f>>>3,w=Bt(l,17)^Bt(l,19)^l>>>10;Xt[h]=w+Xt[h-7]+m+Xt[h-16]|0}let{A:n,B:o,C:s,D:i,E:a,F:c,G:u,H:d}=this;for(let h=0;h<64;h++){let f=Bt(a,6)^Bt(a,11)^Bt(a,25),l=d+f+kr(a,c,u)+Pc[h]+Xt[h]|0,w=(Bt(n,2)^Bt(n,13)^Bt(n,22))+Hr(n,o,s)|0;d=u,u=c,c=a,a=i+l|0,i=s,s=o,o=n,n=l+w|0}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,a=a+this.E|0,c=c+this.F|0,u=u+this.G|0,d=d+this.H|0,this.set(n,o,s,i,a,c,u,d)}roundClean(){ht(Xt)}destroy(){this.set(0,0,0,0,0,0,0,0),ht(this.buffer)}};var ks=Ks(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),kc=ks[0],Hc=ks[1],$t=new Uint32Array(80),Wt=new Uint32Array(80),Mr=class extends pe{constructor(t=64){super(128,t,16,!1),this.Ah=rt[0]|0,this.Al=rt[1]|0,this.Bh=rt[2]|0,this.Bl=rt[3]|0,this.Ch=rt[4]|0,this.Cl=rt[5]|0,this.Dh=rt[6]|0,this.Dl=rt[7]|0,this.Eh=rt[8]|0,this.El=rt[9]|0,this.Fh=rt[10]|0,this.Fl=rt[11]|0,this.Gh=rt[12]|0,this.Gl=rt[13]|0,this.Hh=rt[14]|0,this.Hl=rt[15]|0}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:s,Cl:i,Dh:a,Dl:c,Eh:u,El:d,Fh:h,Fl:f,Gh:l,Gl:m,Hh:w,Hl:x}=this;return[t,r,n,o,s,i,a,c,u,d,h,f,l,m,w,x]}set(t,r,n,o,s,i,a,c,u,d,h,f,l,m,w,x){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=s|0,this.Cl=i|0,this.Dh=a|0,this.Dl=c|0,this.Eh=u|0,this.El=d|0,this.Fh=h|0,this.Fl=f|0,this.Gh=l|0,this.Gl=m|0,this.Hh=w|0,this.Hl=x|0}process(t,r){for(let S=0;S<16;S++,r+=4)$t[S]=t.getUint32(r),Wt[S]=t.getUint32(r+=4);for(let S=16;S<80;S++){let K=$t[S-15]|0,R=Wt[S-15]|0,I=me(K,R,1)^me(K,R,8)^Fn(K,R,7),k=ye(K,R,1)^ye(K,R,8)^Zn(K,R,7),H=$t[S-2]|0,T=Wt[S-2]|0,y=me(H,T,19)^ur(H,T,61)^Fn(H,T,6),p=ye(H,T,19)^hr(H,T,61)^Zn(H,T,6),E=Us(k,p,Wt[S-7],Wt[S-16]),B=Cs(E,I,y,$t[S-7],$t[S-16]);$t[S]=B|0,Wt[S]=E|0}let{Ah:n,Al:o,Bh:s,Bl:i,Ch:a,Cl:c,Dh:u,Dl:d,Eh:h,El:f,Fh:l,Fl:m,Gh:w,Gl:x,Hh:A,Hl:v}=this;for(let S=0;S<80;S++){let K=me(h,f,14)^me(h,f,18)^ur(h,f,41),R=ye(h,f,14)^ye(h,f,18)^hr(h,f,41),I=h&l^~h&w,k=f&m^~f&x,H=Rs(v,R,k,Hc[S],Wt[S]),T=Ps(H,A,K,I,kc[S],$t[S]),y=H|0,p=me(n,o,28)^ur(n,o,34)^ur(n,o,39),E=ye(n,o,28)^hr(n,o,34)^hr(n,o,39),B=n&s^n&a^s&a,D=o&i^o&c^i&c;A=w|0,v=x|0,w=l|0,x=m|0,l=h|0,m=f|0,{h,l:f}=Lt(u|0,d|0,T|0,y|0),u=a|0,d=c|0,a=s|0,c=i|0,s=n|0,i=o|0;let U=Ts(y,E,D);n=Ds(U,T,p,B),o=U|0}({h:n,l:o}=Lt(this.Ah|0,this.Al|0,n|0,o|0)),{h:s,l:i}=Lt(this.Bh|0,this.Bl|0,s|0,i|0),{h:a,l:c}=Lt(this.Ch|0,this.Cl|0,a|0,c|0),{h:u,l:d}=Lt(this.Dh|0,this.Dl|0,u|0,d|0),{h,l:f}=Lt(this.Eh|0,this.El|0,h|0,f|0),{h:l,l:m}=Lt(this.Fh|0,this.Fl|0,l|0,m|0),{h:w,l:x}=Lt(this.Gh|0,this.Gl|0,w|0,x|0),{h:A,l:v}=Lt(this.Hh|0,this.Hl|0,A|0,v|0),this.set(n,o,s,i,a,c,u,d,h,f,l,m,w,x,A,v)}roundClean(){ht($t,Wt)}destroy(){ht(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var qr=fr(()=>new Or);var Vr=fr(()=>new Mr);var Gn=BigInt(0),zn=BigInt(1);function Ht(e,t){if(typeof t!="boolean")throw new Error(e+" boolean expected, got "+t)}function lr(e){let t=e.toString(16);return t.length&1?"0"+t:t}function Hs(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);return e===""?Gn:BigInt("0x"+e)}function ke(e){return Hs(Et(e))}function Nt(e){return X(e),Hs(Et(Uint8Array.from(e).reverse()))}function Fr(e,t){return le(e.toString(16).padStart(t*2,"0"))}function Ot(e,t){return Fr(e,t).reverse()}function V(e,t,r){let n;if(typeof t=="string")try{n=le(t)}catch(s){throw new Error(e+" must be hex string or Uint8Array, cause: "+s)}else if(he(t))n=Uint8Array.from(t);else throw new Error(e+" must be hex string or Uint8Array");let o=n.length;if(typeof r=="number"&&o!==r)throw new Error(e+" of length "+r+" expected, got "+o);return n}function Ns(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return r===0}var jn=e=>typeof e=="bigint"&&Gn<=e;function Os(e,t,r){return jn(e)&&jn(t)&&jn(r)&&t<=e&&e<r}function Jt(e,t,r,n){if(!Os(t,r,n))throw new Error("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function Zr(e){let t;for(t=0;e>Gn;e>>=zn,t+=1);return t}var Qt=e=>(zn<<BigInt(e))-zn;function Ms(e,t,r){if(typeof e!="number"||e<2)throw new Error("hashLen must be a number");if(typeof t!="number"||t<2)throw new Error("qByteLen must be a number");if(typeof r!="function")throw new Error("hmacFn must be a function");let n=l=>new Uint8Array(l),o=l=>Uint8Array.of(l),s=n(e),i=n(e),a=0,c=()=>{s.fill(1),i.fill(0),a=0},u=(...l)=>r(i,s,...l),d=(l=n(0))=>{i=u(o(0),l),s=u(),l.length!==0&&(i=u(o(1),l),s=u())},h=()=>{if(a++>=1e3)throw new Error("drbg: tried 1000 values");let l=0,m=[];for(;l<t;){s=u();let w=s.slice();m.push(w),l+=s.length}return lt(...m)};return(l,m)=>{c(),d(l);let w;for(;!(w=m(h()));)d();return c(),w}}function te(e,t,r={}){if(!e||typeof e!="object")throw new Error("expected valid options object");function n(o,s,i){let a=e[o];if(i&&a===void 0)return;let c=typeof a;if(c!==s||a===null)throw new Error(`param "${o}" is invalid: expected ${s}, got ${c}`)}Object.entries(t).forEach(([o,s])=>n(o,s,!1)),Object.entries(r).forEach(([o,s])=>n(o,s,!0))}function He(e){let t=new WeakMap;return(r,...n)=>{let o=t.get(r);if(o!==void 0)return o;let s=e(r,...n);return t.set(r,s),s}}var ft=BigInt(0),et=BigInt(1),be=BigInt(2),Fs=BigInt(3),Zs=BigInt(4),js=BigInt(5),Nc=BigInt(7),zs=BigInt(8),Oc=BigInt(9),Gs=BigInt(16);function W(e,t){let r=e%t;return r>=ft?r:t+r}function G(e,t,r){let n=e;for(;t-- >ft;)n*=n,n%=r;return n}function qs(e,t){if(e===ft)throw new Error("invert: expected non-zero number");if(t<=ft)throw new Error("invert: expected positive modulus, got "+t);let r=W(e,t),n=t,o=ft,s=et,i=et,a=ft;for(;r!==ft;){let u=n/r,d=n%r,h=o-i*u,f=s-a*u;n=r,r=d,o=i,s=a,i=h,a=f}if(n!==et)throw new Error("invert: does not exist");return W(o,t)}function Yn(e,t,r){if(!e.eql(e.sqr(t),r))throw new Error("Cannot find square root")}function Ys(e,t){let r=(e.ORDER+et)/Zs,n=e.pow(t,r);return Yn(e,n,t),n}function Mc(e,t){let r=(e.ORDER-js)/zs,n=e.mul(t,be),o=e.pow(n,r),s=e.mul(t,o),i=e.mul(e.mul(s,be),o),a=e.mul(s,e.sub(i,e.ONE));return Yn(e,a,t),a}function qc(e){let t=bt(e),r=Xs(e),n=r(t,t.neg(t.ONE)),o=r(t,n),s=r(t,t.neg(n)),i=(e+Nc)/Gs;return(a,c)=>{let u=a.pow(c,i),d=a.mul(u,n),h=a.mul(u,o),f=a.mul(u,s),l=a.eql(a.sqr(d),c),m=a.eql(a.sqr(h),c);u=a.cmov(u,d,l),d=a.cmov(f,h,m);let w=a.eql(a.sqr(d),c),x=a.cmov(u,d,w);return Yn(a,x,c),x}}function Xs(e){if(e<Fs)throw new Error("sqrt is not defined for small field");let t=e-et,r=0;for(;t%be===ft;)t/=be,r++;let n=be,o=bt(e);for(;Vs(o,n)===1;)if(n++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(r===1)return Ys;let s=o.pow(n,t),i=(t+et)/be;return function(c,u){if(c.is0(u))return u;if(Vs(c,u)!==1)throw new Error("Cannot find square root");let d=r,h=c.mul(c.ONE,s),f=c.pow(u,t),l=c.pow(u,i);for(;!c.eql(f,c.ONE);){if(c.is0(f))return c.ZERO;let m=1,w=c.sqr(f);for(;!c.eql(w,c.ONE);)if(m++,w=c.sqr(w),m===d)throw new Error("Cannot find square root");let x=et<<BigInt(d-m-1),A=c.pow(h,x);d=m,h=c.sqr(A),f=c.mul(f,h),l=c.mul(l,A)}return l}}function Vc(e){return e%Zs===Fs?Ys:e%zs===js?Mc:e%Gs===Oc?qc(e):Xs(e)}var Mt=(e,t)=>(W(e,t)&et)===et,Fc=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Xn(e){let t={ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"},r=Fc.reduce((n,o)=>(n[o]="function",n),t);return te(e,r),e}function Zc(e,t,r){if(r<ft)throw new Error("invalid exponent, negatives unsupported");if(r===ft)return e.ONE;if(r===et)return t;let n=e.ONE,o=t;for(;r>ft;)r&et&&(n=e.mul(n,o)),o=e.sqr(o),r>>=et;return n}function dr(e,t,r=!1){let n=new Array(t.length).fill(r?e.ZERO:void 0),o=t.reduce((i,a,c)=>e.is0(a)?i:(n[c]=i,e.mul(i,a)),e.ONE),s=e.inv(o);return t.reduceRight((i,a,c)=>e.is0(a)?i:(n[c]=e.mul(i,n[c]),e.mul(i,a)),s),n}function Vs(e,t){let r=(e.ORDER-et)/be,n=e.pow(t,r),o=e.eql(n,e.ONE),s=e.eql(n,e.ZERO),i=e.eql(n,e.neg(e.ONE));if(!o&&!s&&!i)throw new Error("invalid Legendre symbol result");return o?1:s?0:-1}function $s(e,t){t!==void 0&&Pt(t);let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function bt(e,t,r=!1,n={}){if(e<=ft)throw new Error("invalid field: expected ORDER > 0, got "+e);let o,s,i=!1,a;if(typeof t=="object"&&t!=null){if(n.sqrt||r)throw new Error("cannot specify opts in two arguments");let f=t;f.BITS&&(o=f.BITS),f.sqrt&&(s=f.sqrt),typeof f.isLE=="boolean"&&(r=f.isLE),typeof f.modOnDecode=="boolean"&&(i=f.modOnDecode),a=f.allowedLengths}else typeof t=="number"&&(o=t),n.sqrt&&(s=n.sqrt);let{nBitLength:c,nByteLength:u}=$s(e,o);if(u>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");let d,h=Object.freeze({ORDER:e,isLE:r,BITS:c,BYTES:u,MASK:Qt(c),ZERO:ft,ONE:et,allowedLengths:a,create:f=>W(f,e),isValid:f=>{if(typeof f!="bigint")throw new Error("invalid field element: expected bigint, got "+typeof f);return ft<=f&&f<e},is0:f=>f===ft,isValidNot0:f=>!h.is0(f)&&h.isValid(f),isOdd:f=>(f&et)===et,neg:f=>W(-f,e),eql:(f,l)=>f===l,sqr:f=>W(f*f,e),add:(f,l)=>W(f+l,e),sub:(f,l)=>W(f-l,e),mul:(f,l)=>W(f*l,e),pow:(f,l)=>Zc(h,f,l),div:(f,l)=>W(f*qs(l,e),e),sqrN:f=>f*f,addN:(f,l)=>f+l,subN:(f,l)=>f-l,mulN:(f,l)=>f*l,inv:f=>qs(f,e),sqrt:s||(f=>(d||(d=Vc(e)),d(h,f))),toBytes:f=>r?Ot(f,u):Fr(f,u),fromBytes:(f,l=!0)=>{if(a){if(!a.includes(f.length)||f.length>u)throw new Error("Field.fromBytes: expected "+a+" bytes, got "+f.length);let w=new Uint8Array(u);w.set(f,r?0:w.length-f.length),f=w}if(f.length!==u)throw new Error("Field.fromBytes: expected "+u+" bytes, got "+f.length);let m=r?Nt(f):ke(f);if(i&&(m=W(m,e)),!l&&!h.isValid(m))throw new Error("invalid field element: outside of range 0..ORDER");return m},invertBatch:f=>dr(h,f),cmov:(f,l,m)=>m?l:f});return Object.freeze(h)}function Ws(e){if(typeof e!="bigint")throw new Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function $n(e){let t=Ws(e);return t+Math.ceil(t/2)}function Wn(e,t,r=!1){let n=e.length,o=Ws(t),s=$n(t);if(n<16||n<s||n>1024)throw new Error("expected "+s+"-1024 bytes of input, got "+n);let i=r?Nt(e):ke(e),a=W(i,t-et)+et;return r?Ot(a,o):Fr(a,o)}var Ne=BigInt(0),xe=BigInt(1);function pr(e,t){let r=t.negate();return e?r:t}function qt(e,t){let r=dr(e.Fp,t.map(n=>n.Z));return t.map((n,o)=>e.fromAffine(n.toAffine(r[o])))}function ei(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw new Error("invalid window size, expected [1.."+t+"], got W="+e)}function Jn(e,t){ei(e,t);let r=Math.ceil(t/e)+1,n=2**(e-1),o=2**e,s=Qt(e),i=BigInt(e);return{windows:r,windowSize:n,mask:s,maxNumber:o,shiftBy:i}}function Js(e,t,r){let{windowSize:n,mask:o,maxNumber:s,shiftBy:i}=r,a=Number(e&o),c=e>>i;a>n&&(a-=s,c+=xe);let u=t*n,d=u+Math.abs(a)-1,h=a===0,f=a<0,l=t%2!==0;return{nextN:c,offset:d,isZero:h,isNeg:f,isNegF:l,offsetF:u}}function jc(e,t){if(!Array.isArray(e))throw new Error("array expected");e.forEach((r,n)=>{if(!(r instanceof t))throw new Error("invalid point at index "+n)})}function zc(e,t){if(!Array.isArray(e))throw new Error("array of scalars expected");e.forEach((r,n)=>{if(!t.isValid(r))throw new Error("invalid scalar at index "+n)})}var Qn=new WeakMap,ri=new WeakMap;function to(e){return ri.get(e)||1}function Qs(e){if(e!==Ne)throw new Error("invalid wNAF")}var Oe=class{constructor(t,r){this.BASE=t.BASE,this.ZERO=t.ZERO,this.Fn=t.Fn,this.bits=r}_unsafeLadder(t,r,n=this.ZERO){let o=t;for(;r>Ne;)r&xe&&(n=n.add(o)),o=o.double(),r>>=xe;return n}precomputeWindow(t,r){let{windows:n,windowSize:o}=Jn(r,this.bits),s=[],i=t,a=i;for(let c=0;c<n;c++){a=i,s.push(a);for(let u=1;u<o;u++)a=a.add(i),s.push(a);i=a.double()}return s}wNAF(t,r,n){if(!this.Fn.isValid(n))throw new Error("invalid scalar");let o=this.ZERO,s=this.BASE,i=Jn(t,this.bits);for(let a=0;a<i.windows;a++){let{nextN:c,offset:u,isZero:d,isNeg:h,isNegF:f,offsetF:l}=Js(n,a,i);n=c,d?s=s.add(pr(f,r[l])):o=o.add(pr(h,r[u]))}return Qs(n),{p:o,f:s}}wNAFUnsafe(t,r,n,o=this.ZERO){let s=Jn(t,this.bits);for(let i=0;i<s.windows&&n!==Ne;i++){let{nextN:a,offset:c,isZero:u,isNeg:d}=Js(n,i,s);if(n=a,!u){let h=r[c];o=o.add(d?h.negate():h)}}return Qs(n),o}getPrecomputes(t,r,n){let o=Qn.get(r);return o||(o=this.precomputeWindow(r,t),t!==1&&(typeof n=="function"&&(o=n(o)),Qn.set(r,o))),o}cached(t,r,n){let o=to(t);return this.wNAF(o,this.getPrecomputes(o,t,n),r)}unsafe(t,r,n,o){let s=to(t);return s===1?this._unsafeLadder(t,r,o):this.wNAFUnsafe(s,this.getPrecomputes(s,t,n),r,o)}createCache(t,r){ei(r,this.bits),ri.set(t,r),Qn.delete(t)}hasCache(t){return to(t)!==1}};function ni(e,t,r,n){let o=t,s=e.ZERO,i=e.ZERO;for(;r>Ne||n>Ne;)r&xe&&(s=s.add(o)),n&xe&&(i=i.add(o)),o=o.double(),r>>=xe,n>>=xe;return{p1:s,p2:i}}function Me(e,t,r,n){jc(r,e),zc(n,t);let o=r.length,s=n.length;if(o!==s)throw new Error("arrays of points and scalars must have equal length");let i=e.ZERO,a=Zr(BigInt(o)),c=1;a>12?c=a-3:a>4?c=a-2:a>0&&(c=2);let u=Qt(c),d=new Array(Number(u)+1).fill(i),h=Math.floor((t.BITS-1)/c)*c,f=i;for(let l=h;l>=0;l-=c){d.fill(i);for(let w=0;w<s;w++){let x=n[w],A=Number(x>>BigInt(l)&u);d[A]=d[A].add(r[w])}let m=i;for(let w=d.length-1,x=i;w>0;w--)x=x.add(d[w]),m=m.add(x);if(f=f.add(m),l!==0)for(let w=0;w<c;w++)f=f.double()}return f}function ti(e,t){if(t){if(t.ORDER!==e)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return Xn(t),t}else return bt(e)}function jr(e,t,r={}){if(!t||typeof t!="object")throw new Error(`expected valid ${e} CURVE object`);for(let a of["p","n","h"]){let c=t[a];if(!(typeof c=="bigint"&&c>Ne))throw new Error(`CURVE.${a} must be positive bigint`)}let n=ti(t.p,r.Fp),o=ti(t.n,r.Fn),i=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let a of i)if(!n.isValid(t[a]))throw new Error(`CURVE.${a} must be valid field element of CURVE.Fp`);return{Fp:n,Fn:o}}var Kt=BigInt(0),Q=BigInt(1),eo=BigInt(2),Gc=BigInt(8);function Yc(e,t,r,n){let o=e.sqr(r),s=e.sqr(n),i=e.add(e.mul(t.a,o),s),a=e.add(e.ONE,e.mul(t.d,e.mul(o,s)));return e.eql(i,a)}function Xc(e,t={}){let{Fp:r,Fn:n}=jr("edwards",e,t),{h:o,n:s}=e;te(t,{},{uvRatio:"function"});let i=eo<<BigInt(n.BYTES*8)-Q,a=w=>r.create(w),c=t.uvRatio||((w,x)=>{try{return{isValid:!0,value:r.sqrt(r.div(w,x))}}catch{return{isValid:!1,value:Kt}}});if(!Yc(r,e,e.Gx,e.Gy))throw new Error("bad curve params: generator point");function u(w,x,A=!1){let v=A?Q:Kt;return Jt("coordinate "+w,x,v,i),x}function d(w){if(!(w instanceof l))throw new Error("ExtendedPoint expected")}let h=He((w,x)=>{let{X:A,Y:v,Z:S}=w,K=w.is0();x==null&&(x=K?Gc:r.inv(S));let R=a(A*x),I=a(v*x),k=r.mul(S,x);if(K)return{x:Kt,y:Q};if(k!==Q)throw new Error("invZ was invalid");return{x:R,y:I}}),f=He(w=>{let{a:x,d:A}=e;if(w.is0())throw new Error("bad point: ZERO");let{X:v,Y:S,Z:K,T:R}=w,I=a(v*v),k=a(S*S),H=a(K*K),T=a(H*H),y=a(I*x),p=a(H*a(y+k)),E=a(T+a(A*a(I*k)));if(p!==E)throw new Error("bad point: equation left != right (1)");let B=a(v*S),D=a(K*R);if(B!==D)throw new Error("bad point: equation left != right (2)");return!0});class l{constructor(x,A,v,S){this.X=u("x",x),this.Y=u("y",A),this.Z=u("z",v,!0),this.T=u("t",S),Object.freeze(this)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}get ex(){return this.X}get ey(){return this.Y}get ez(){return this.Z}get et(){return this.T}static normalizeZ(x){return qt(l,x)}static msm(x,A){return Me(l,n,x,A)}_setWindowSize(x){this.precompute(x)}static fromAffine(x){if(x instanceof l)throw new Error("extended point not allowed");let{x:A,y:v}=x||{};return u("x",A),u("y",v),new l(A,v,Q,a(A*v))}precompute(x=8,A=!0){return m.createCache(this,x),A||this.multiply(eo),this}assertValidity(){f(this)}equals(x){d(x);let{X:A,Y:v,Z:S}=this,{X:K,Y:R,Z:I}=x,k=a(A*I),H=a(K*S),T=a(v*I),y=a(R*S);return k===H&&T===y}is0(){return this.equals(l.ZERO)}negate(){return new l(a(-this.X),this.Y,this.Z,a(-this.T))}double(){let{a:x}=e,{X:A,Y:v,Z:S}=this,K=a(A*A),R=a(v*v),I=a(eo*a(S*S)),k=a(x*K),H=A+v,T=a(a(H*H)-K-R),y=k+R,p=y-I,E=k-R,B=a(T*p),D=a(y*E),U=a(T*E),g=a(p*y);return new l(B,D,g,U)}add(x){d(x);let{a:A,d:v}=e,{X:S,Y:K,Z:R,T:I}=this,{X:k,Y:H,Z:T,T:y}=x,p=a(S*k),E=a(K*H),B=a(I*v*y),D=a(R*T),U=a((S+K)*(k+H)-p-E),g=D-B,b=D+B,_=a(E-A*p),L=a(U*g),C=a(b*_),P=a(U*_),N=a(g*b);return new l(L,C,N,P)}subtract(x){return this.add(x.negate())}multiply(x){let A=x;Jt("scalar",A,Q,s);let{p:v,f:S}=m.cached(this,A,K=>qt(l,K));return qt(l,[v,S])[0]}multiplyUnsafe(x,A=l.ZERO){let v=x;return Jt("scalar",v,Kt,s),v===Kt?l.ZERO:this.is0()||v===Q?this:m.unsafe(this,v,S=>qt(l,S),A)}isSmallOrder(){return this.multiplyUnsafe(o).is0()}isTorsionFree(){return m.unsafe(this,s).is0()}toAffine(x){return h(this,x)}clearCofactor(){return o===Q?this:this.multiplyUnsafe(o)}static fromBytes(x,A=!1){return X(x),l.fromHex(x,A)}static fromHex(x,A=!1){let{d:v,a:S}=e,K=r.BYTES;x=V("pointHex",x,K),Ht("zip215",A);let R=x.slice(),I=x[K-1];R[K-1]=I&-129;let k=Nt(R),H=A?i:r.ORDER;Jt("pointHex.y",k,Kt,H);let T=a(k*k),y=a(T-Q),p=a(v*T-S),{isValid:E,value:B}=c(y,p);if(!E)throw new Error("Point.fromHex: invalid y coordinate");let D=(B&Q)===Q,U=(I&128)!==0;if(!A&&B===Kt&&U)throw new Error("Point.fromHex: x=0 and x_0=1");return U!==D&&(B=a(-B)),l.fromAffine({x:B,y:k})}toBytes(){let{x,y:A}=this.toAffine(),v=Ot(A,r.BYTES);return v[v.length-1]|=x&Q?128:0,v}toRawBytes(){return this.toBytes()}toHex(){return Et(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}l.BASE=new l(e.Gx,e.Gy,Q,a(e.Gx*e.Gy)),l.ZERO=new l(Kt,Q,Q,Kt),l.Fp=r,l.Fn=n;let m=new Oe(l,n.BYTES*8);return l}var zr=class{constructor(t){this.ep=t}static fromBytes(t){throw new Error("fromBytes must be implemented by subclass")}static fromHex(t){throw new Error("fromHex must be implemented by subclass")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(t){return this.ep.toAffine(t)}toRawBytes(){return this.toBytes()}toHex(){return Et(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(t){return this.assertSame(t),this.init(this.ep.add(t.ep))}subtract(t){return this.assertSame(t),this.init(this.ep.subtract(t.ep))}multiply(t){return this.init(this.ep.multiply(t))}multiplyUnsafe(t){return this.init(this.ep.multiplyUnsafe(t))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(t,r){return this.init(this.ep.precompute(t,r))}};function $c(e,t,r){if(typeof t!="function")throw new Error('"hash" function param is required');te(r,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",mapToCurve:"function"});let{prehash:n}=r,{BASE:o,Fp:s,Fn:i}=e,a=i.ORDER,c=r.randomBytes||de,u=r.adjustScalarBytes||(p=>p),d=r.domain||((p,E,B)=>{if(Ht("phflag",B),E.length||B)throw new Error("Contexts/pre-hash are not supported");return p});function h(p){return i.create(p)}function f(p){return h(Nt(p))}function l(p){let E=s.BYTES;p=V("private key",p,E);let B=V("hashed private key",t(p),2*E),D=u(B.slice(0,E)),U=B.slice(E,2*E),g=f(D);return{head:D,prefix:U,scalar:g}}function m(p){let{head:E,prefix:B,scalar:D}=l(p),U=o.multiply(D),g=U.toBytes();return{head:E,prefix:B,scalar:D,point:U,pointBytes:g}}function w(p){return m(p).pointBytes}function x(p=Uint8Array.of(),...E){let B=lt(...E);return f(t(d(B,V("context",p),!!n)))}function A(p,E,B={}){p=V("message",p),n&&(p=n(p));let{prefix:D,scalar:U,pointBytes:g}=m(E),b=x(B.context,D,p),_=o.multiply(b).toBytes(),L=x(B.context,_,g,p),C=h(b+L*U);Jt("signature.s",C,Kt,a);let P=s.BYTES,N=lt(_,Ot(C,P));return V("result",N,P*2)}let v={zip215:!0};function S(p,E,B,D=v){let{context:U,zip215:g}=D,b=s.BYTES;p=V("signature",p,2*b),E=V("message",E),B=V("publicKey",B,b),g!==void 0&&Ht("zip215",g),n&&(E=n(E));let _=Nt(p.slice(b,2*b)),L,C,P;try{L=e.fromHex(B,g),C=e.fromHex(p.slice(0,b),g),P=o.multiplyUnsafe(_)}catch{return!1}if(!g&&L.isSmallOrder())return!1;let N=x(U,C.toBytes(),L.toBytes(),E);return C.add(L.multiplyUnsafe(N)).subtract(P).clearCofactor().is0()}o.precompute(8);let K=s.BYTES,R={secret:K,public:K,signature:2*K,seed:K};function I(p=c(R.seed)){return p}let k={getExtendedPublicKey:m,randomSecretKey:I,isValidSecretKey:T,isValidPublicKey:y,randomPrivateKey:I,toMontgomery(p){let{y:E}=e.fromBytes(p),B=K===32;if(!B&&K!==57)throw new Error("only defined for 25519 and 448");let D=B?s.div(Q+E,Q-E):s.div(E-Q,E+Q);return s.toBytes(D)},toMontgomeryPriv(p){X(p,K);let E=t(p.subarray(0,K));return u(E).subarray(0,K)},precompute(p=8,E=e.BASE){return E.precompute(p,!1)}};function H(p){let E=k.randomSecretKey(p);return{secretKey:E,publicKey:w(E)}}function T(p){try{return!!i.fromBytes(p,!1)}catch{return!1}}function y(p,E){try{return!!e.fromBytes(p,E)}catch{return!1}}return Object.freeze({keygen:H,getPublicKey:w,sign:A,verify:S,utils:k,Point:e,info:{type:"edwards",lengths:R}})}function Wc(e){let t={a:e.a,d:e.d,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp,n=bt(t.n,e.nBitLength,!0),o={Fp:r,Fn:n,uvRatio:e.uvRatio},s={randomBytes:e.randomBytes,adjustScalarBytes:e.adjustScalarBytes,domain:e.domain,prehash:e.prehash,mapToCurve:e.mapToCurve};return{CURVE:t,curveOpts:o,hash:e.hash,eddsaOpts:s}}function Jc(e,t){return Object.assign({},t,{ExtendedPoint:t.Point,CURVE:e})}function oi(e){let{CURVE:t,curveOpts:r,hash:n,eddsaOpts:o}=Wc(e),s=Xc(t,r),i=$c(s,n,o);return Jc(e,i)}var Qc=BigInt(0),Vt=BigInt(1),si=BigInt(2),El=BigInt(3),tf=BigInt(5),ef=BigInt(8),mr={p:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:ef,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")};function rf(e){let t=BigInt(10),r=BigInt(20),n=BigInt(40),o=BigInt(80),s=mr.p,a=e*e%s*e%s,c=G(a,si,s)*a%s,u=G(c,Vt,s)*e%s,d=G(u,tf,s)*u%s,h=G(d,t,s)*d%s,f=G(h,r,s)*h%s,l=G(f,n,s)*f%s,m=G(l,o,s)*l%s,w=G(m,o,s)*l%s,x=G(w,t,s)*d%s;return{pow_p_5_8:G(x,si,s)*e%s,b2:a}}function nf(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var ro=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function so(e,t){let r=mr.p,n=W(t*t*t,r),o=W(n*n*t,r),s=rf(e*o).pow_p_5_8,i=W(e*n*s,r),a=W(t*i*i,r),c=i,u=W(i*ro,r),d=a===e,h=a===W(-e,r),f=a===W(-e*ro,r);return d&&(i=c),(h||f)&&(i=u),Mt(i,r)&&(i=W(-i,r)),{isValid:d||h,value:i}}var we=bt(mr.p,{isLE:!0}),of=bt(mr.n,{isLE:!0}),sf={...mr,Fp:we,hash:Vr,adjustScalarBytes:nf,uvRatio:so},nt=oi(sf);var no=ro,af=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),cf=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),ff=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),uf=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),ii=e=>so(Vt,e),hf=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),oo=e=>nt.CURVE.Fp.create(Nt(e)&hf);function ai(e){let{d:t}=nt.CURVE,r=nt.CURVE.Fp.ORDER,n=nt.CURVE.Fp.create,o=n(no*e*e),s=n((o+Vt)*ff),i=BigInt(-1),a=n((i-t*o)*n(o+t)),{isValid:c,value:u}=so(s,a),d=n(u*e);Mt(d,r)||(d=n(-d)),c||(u=d),c||(i=o);let h=n(i*(o-Vt)*uf-a),f=u*u,l=n((u+u)*a),m=n(h*af),w=n(Vt-f),x=n(Vt+f);return new nt.Point(n(l*x),n(w*m),n(m*x),n(l*w))}function lf(e){X(e,64);let t=oo(e.subarray(0,32)),r=ai(t),n=oo(e.subarray(32,64)),o=ai(n);return new Ft(r.add(o))}var Ft=class e extends zr{constructor(t){super(t)}static fromAffine(t){return new e(nt.Point.fromAffine(t))}assertSame(t){if(!(t instanceof e))throw new Error("RistrettoPoint expected")}init(t){return new e(t)}static hashToCurve(t){return lf(V("ristrettoHash",t,64))}static fromBytes(t){X(t,32);let{a:r,d:n}=nt.CURVE,o=we.ORDER,s=we.create,i=oo(t);if(!Ns(Ot(i,32),t)||Mt(i,o))throw new Error("invalid ristretto255 encoding 1");let a=s(i*i),c=s(Vt+r*a),u=s(Vt-r*a),d=s(c*c),h=s(u*u),f=s(r*n*d-h),{isValid:l,value:m}=ii(s(f*h)),w=s(m*u),x=s(m*w*f),A=s((i+i)*w);Mt(A,o)&&(A=s(-A));let v=s(c*x),S=s(A*v);if(!l||Mt(S,o)||v===Qc)throw new Error("invalid ristretto255 encoding 2");return new e(new nt.Point(A,v,Vt,S))}static fromHex(t){return e.fromBytes(V("ristrettoHex",t,32))}static msm(t,r){return Me(e,nt.Point.Fn,t,r)}toBytes(){let{X:t,Y:r,Z:n,T:o}=this.ep,s=we.ORDER,i=we.create,a=i(i(n+r)*i(n-r)),c=i(t*r),u=i(c*c),{value:d}=ii(i(a*u)),h=i(d*a),f=i(d*c),l=i(h*f*o),m;if(Mt(o*l,s)){let x=i(r*no),A=i(t*no);t=x,r=A,m=i(h*cf)}else m=f;Mt(t*l,s)&&(r=i(-r));let w=i((n-r)*m);return Mt(w,s)&&(w=i(-w)),Ot(w,32)}equals(t){this.assertSame(t);let{X:r,Y:n}=this.ep,{X:o,Y:s}=t.ep,i=we.create,a=i(r*s)===i(n*o),c=i(n*s)===i(r*o);return a||c}is0(){return this.equals(e.ZERO)}};Ft.BASE=new Ft(nt.Point.BASE);Ft.ZERO=new Ft(nt.Point.ZERO);Ft.Fp=we;Ft.Fn=of;var ee=32,xt=64,Gr=32;var qe,ci=(async()=>{try{return await Y.get().subtle.generateKey({name:"Ed25519"},!0,["sign","verify"]),!0}catch{return!1}})();function fi(){let e=nt.utils.randomPrivateKey(),t=nt.getPublicKey(e);return{privateKey:di(e,t),publicKey:t}}function ui(e){if(e.length!==Gr)throw new TypeError('"seed" must be 32 bytes in length.');if(!(e instanceof Uint8Array))throw new TypeError('"seed" must be a node.js Buffer, or Uint8Array.');let t=e,r=nt.getPublicKey(t);return{privateKey:di(t,r),publicKey:r}}async function df(e,t){let r;e.length===xt?r=e.subarray(0,32):r=e;let n={crv:"Ed25519",kty:"OKP",x:M(e.subarray(32),"base64url"),d:M(r,"base64url"),ext:!0,key_ops:["sign"]},o=await Y.get().subtle.importKey("jwk",n,{name:"Ed25519"},!0,["sign"]),s=await Y.get().subtle.sign({name:"Ed25519"},o,t instanceof Uint8Array?t:t.subarray());return new Uint8Array(s,0,s.byteLength)}function pf(e,t){let r=e.subarray(0,Gr);return nt.sign(t instanceof Uint8Array?t:t.subarray(),r)}async function hi(e,t){return qe==null&&(qe=await ci),qe?df(e,t):pf(e,t)}async function mf(e,t,r){if(e.buffer instanceof ArrayBuffer){let n=await Y.get().subtle.importKey("raw",e.buffer,{name:"Ed25519"},!1,["verify"]);return await Y.get().subtle.verify({name:"Ed25519"},n,t,r instanceof Uint8Array?r:r.subarray())}throw new TypeError("WebCrypto does not support SharedArrayBuffer for Ed25519 keys")}function yf(e,t,r){return nt.verify(t,r instanceof Uint8Array?r:r.subarray(),e)}async function li(e,t,r){return qe==null&&(qe=await ci),qe?mf(e,t,r):yf(e,t,r)}function di(e,t){let r=new Uint8Array(xt);for(let n=0;n<Gr;n++)r[n]=e[n],r[Gr+n]=t[n];return r}function io(e,t){let r=z(e,"base64urlpad");if(t!=null){if(r.length>t)throw new Error("byte array longer than desired length");r=It([new Uint8Array(t-r.length),r])}return r}function Ve(e){return e==null?!1:typeof e.then=="function"&&typeof e.catch=="function"&&typeof e.finally=="function"}var yr=class{type="Ed25519";raw;constructor(t){this.raw=Fe(t,ee)}toMultihash(){return ae.digest(fe(this))}toCID(){return gt.createV1(114,this.toMultihash())}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}verify(t,r,n){n?.signal?.throwIfAborted();let o=li(this.raw,r,t);return Ve(o)?o.then(s=>(n?.signal?.throwIfAborted(),s)):o}},ge=class{type="Ed25519";raw;publicKey;constructor(t,r){this.raw=Fe(t,xt),this.publicKey=new yr(r)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}sign(t,r){r?.signal?.throwIfAborted();let n=hi(this.raw,t);return Ve(n)?n.then(o=>(r?.signal?.throwIfAborted(),o)):(r?.signal?.throwIfAborted(),n)}};function ao(e){if(e.length>xt){e=Fe(e,xt+ee);let n=e.subarray(0,xt),o=e.subarray(xt,e.length);return new ge(n,o)}e=Fe(e,xt);let t=e.subarray(0,xt),r=e.subarray(ee);return new ge(t,r)}function Yr(e){return e=Fe(e,ee),new yr(e)}async function mi(){let{privateKey:e,publicKey:t}=fi();return new ge(e,t)}async function yi(e){let{privateKey:t,publicKey:r}=ui(e);return new ge(t,r)}function Fe(e,t){if(e=Uint8Array.from(e??[]),e.length!==t)throw new O(`Key must be a Uint8Array of length ${t}, got ${e.length}`);return e}var bf=Math.pow(2,7),xf=Math.pow(2,14),wf=Math.pow(2,21),bi=Math.pow(2,28),xi=Math.pow(2,35),wi=Math.pow(2,42),gi=Math.pow(2,49),ut=128,re=127;function br(e){if(e<bf)return 1;if(e<xf)return 2;if(e<wf)return 3;if(e<bi)return 4;if(e<xi)return 5;if(e<wi)return 6;if(e<gi)return 7;if(Number.MAX_SAFE_INTEGER!=null&&e>Number.MAX_SAFE_INTEGER)throw new RangeError("Could not encode varint");return 8}function Ei(e,t,r=0){switch(br(e)){case 8:t[r++]=e&255|ut,e/=128;case 7:t[r++]=e&255|ut,e/=128;case 6:t[r++]=e&255|ut,e/=128;case 5:t[r++]=e&255|ut,e/=128;case 4:t[r++]=e&255|ut,e>>>=7;case 3:t[r++]=e&255|ut,e>>>=7;case 2:t[r++]=e&255|ut,e>>>=7;case 1:{t[r++]=e&255,e>>>=7;break}default:throw new Error("unreachable")}return t}function Ai(e,t){let r=e[t],n=0;if(n+=r&re,r<ut||(r=e[t+1],n+=(r&re)<<7,r<ut)||(r=e[t+2],n+=(r&re)<<14,r<ut)||(r=e[t+3],n+=(r&re)<<21,r<ut)||(r=e[t+4],n+=(r&re)*bi,r<ut)||(r=e[t+5],n+=(r&re)*xi,r<ut)||(r=e[t+6],n+=(r&re)*wi,r<ut)||(r=e[t+7],n+=(r&re)*gi,r<ut))return n;throw new RangeError("Could not decode varint")}var co=new Float32Array([-0]),ne=new Uint8Array(co.buffer);function Si(e,t,r){co[0]=e,t[r]=ne[0],t[r+1]=ne[1],t[r+2]=ne[2],t[r+3]=ne[3]}function Bi(e,t){return ne[0]=e[t],ne[1]=e[t+1],ne[2]=e[t+2],ne[3]=e[t+3],co[0]}var fo=new Float64Array([-0]),it=new Uint8Array(fo.buffer);function vi(e,t,r){fo[0]=e,t[r]=it[0],t[r+1]=it[1],t[r+2]=it[2],t[r+3]=it[3],t[r+4]=it[4],t[r+5]=it[5],t[r+6]=it[6],t[r+7]=it[7]}function _i(e,t){return it[0]=e[t],it[1]=e[t+1],it[2]=e[t+2],it[3]=e[t+3],it[4]=e[t+4],it[5]=e[t+5],it[6]=e[t+6],it[7]=e[t+7],fo[0]}var gf=BigInt(Number.MAX_SAFE_INTEGER),Ef=BigInt(Number.MIN_SAFE_INTEGER),wt=class e{lo;hi;constructor(t,r){this.lo=t|0,this.hi=r|0}toNumber(t=!1){if(!t&&this.hi>>>31>0){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(r+n*4294967296)}return this.lo+this.hi*4294967296}toBigInt(t=!1){if(t)return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n);if(this.hi>>>31){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(BigInt(r)+(BigInt(n)<<32n))}return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n)}toString(t=!1){return this.toBigInt(t).toString()}zzEncode(){let t=this.hi>>31;return this.hi=((this.hi<<1|this.lo>>>31)^t)>>>0,this.lo=(this.lo<<1^t)>>>0,this}zzDecode(){let t=-(this.lo&1);return this.lo=((this.lo>>>1|this.hi<<31)^t)>>>0,this.hi=(this.hi>>>1^t)>>>0,this}length(){let t=this.lo,r=(this.lo>>>28|this.hi<<4)>>>0,n=this.hi>>>24;return n===0?r===0?t<16384?t<128?1:2:t<2097152?3:4:r<16384?r<128?5:6:r<2097152?7:8:n<128?9:10}static fromBigInt(t){if(t===0n)return Ee;if(t<gf&&t>Ef)return this.fromNumber(Number(t));let r=t<0n;r&&(t=-t);let n=t>>32n,o=t-(n<<32n);return r&&(n=~n|0n,o=~o|0n,++o>Ii&&(o=0n,++n>Ii&&(n=0n))),new e(Number(o),Number(n))}static fromNumber(t){if(t===0)return Ee;let r=t<0;r&&(t=-t);let n=t>>>0,o=(t-n)/4294967296>>>0;return r&&(o=~o>>>0,n=~n>>>0,++n>4294967295&&(n=0,++o>4294967295&&(o=0))),new e(n,o)}static from(t){return typeof t=="number"?e.fromNumber(t):typeof t=="bigint"?e.fromBigInt(t):typeof t=="string"?e.fromBigInt(BigInt(t)):t.low!=null||t.high!=null?new e(t.low>>>0,t.high>>>0):Ee}},Ee=new wt(0,0);Ee.toBigInt=function(){return 0n};Ee.zzEncode=Ee.zzDecode=function(){return this};Ee.length=function(){return 1};var Ii=4294967296n;function Li(e){let t=0,r=0;for(let n=0;n<e.length;++n)r=e.charCodeAt(n),r<128?t+=1:r<2048?t+=2:(r&64512)===55296&&(e.charCodeAt(n+1)&64512)===56320?(++n,t+=4):t+=3;return t}function Ki(e,t,r){if(r-t<1)return"";let o,s=[],i=0,a;for(;t<r;)a=e[t++],a<128?s[i++]=a:a>191&&a<224?s[i++]=(a&31)<<6|e[t++]&63:a>239&&a<365?(a=((a&7)<<18|(e[t++]&63)<<12|(e[t++]&63)<<6|e[t++]&63)-65536,s[i++]=55296+(a>>10),s[i++]=56320+(a&1023)):s[i++]=(a&15)<<12|(e[t++]&63)<<6|e[t++]&63,i>8191&&((o??(o=[])).push(String.fromCharCode.apply(String,s)),i=0);return o!=null?(i>0&&o.push(String.fromCharCode.apply(String,s.slice(0,i))),o.join("")):String.fromCharCode.apply(String,s.slice(0,i))}function uo(e,t,r){let n=r,o,s;for(let i=0;i<e.length;++i)o=e.charCodeAt(i),o<128?t[r++]=o:o<2048?(t[r++]=o>>6|192,t[r++]=o&63|128):(o&64512)===55296&&((s=e.charCodeAt(i+1))&64512)===56320?(o=65536+((o&1023)<<10)+(s&1023),++i,t[r++]=o>>18|240,t[r++]=o>>12&63|128,t[r++]=o>>6&63|128,t[r++]=o&63|128):(t[r++]=o>>12|224,t[r++]=o>>6&63|128,t[r++]=o&63|128);return r-n}function vt(e,t){return RangeError(`index out of range: ${e.pos} + ${t??1} > ${e.len}`)}function Xr(e,t){return(e[t-4]|e[t-3]<<8|e[t-2]<<16|e[t-1]<<24)>>>0}var ho=class{buf;pos;len;_slice=Uint8Array.prototype.subarray;constructor(t){this.buf=t,this.pos=0,this.len=t.length}uint32(){let t=4294967295;if(t=(this.buf[this.pos]&127)>>>0,this.buf[this.pos++]<128||(t=(t|(this.buf[this.pos]&127)<<7)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<14)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<21)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&15)<<28)>>>0,this.buf[this.pos++]<128))return t;if((this.pos+=5)>this.len)throw this.pos=this.len,vt(this,10);return t}int32(){return this.uint32()|0}sint32(){let t=this.uint32();return t>>>1^-(t&1)|0}bool(){return this.uint32()!==0}fixed32(){if(this.pos+4>this.len)throw vt(this,4);return Xr(this.buf,this.pos+=4)}sfixed32(){if(this.pos+4>this.len)throw vt(this,4);return Xr(this.buf,this.pos+=4)|0}float(){if(this.pos+4>this.len)throw vt(this,4);let t=Bi(this.buf,this.pos);return this.pos+=4,t}double(){if(this.pos+8>this.len)throw vt(this,4);let t=_i(this.buf,this.pos);return this.pos+=8,t}bytes(){let t=this.uint32(),r=this.pos,n=this.pos+t;if(n>this.len)throw vt(this,t);return this.pos+=t,r===n?new Uint8Array(0):this.buf.subarray(r,n)}string(){let t=this.bytes();return Ki(t,0,t.length)}skip(t){if(typeof t=="number"){if(this.pos+t>this.len)throw vt(this,t);this.pos+=t}else do if(this.pos>=this.len)throw vt(this);while((this.buf[this.pos++]&128)!==0);return this}skipType(t){switch(t){case 0:this.skip();break;case 1:this.skip(8);break;case 2:this.skip(this.uint32());break;case 3:for(;(t=this.uint32()&7)!==4;)this.skipType(t);break;case 5:this.skip(4);break;default:throw Error(`invalid wire type ${t} at offset ${this.pos}`)}return this}readLongVarint(){let t=new wt(0,0),r=0;if(this.len-this.pos>4){for(;r<4;++r)if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t;if(t.lo=(t.lo|(this.buf[this.pos]&127)<<28)>>>0,t.hi=(t.hi|(this.buf[this.pos]&127)>>4)>>>0,this.buf[this.pos++]<128)return t;r=0}else{for(;r<3;++r){if(this.pos>=this.len)throw vt(this);if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t}return t.lo=(t.lo|(this.buf[this.pos++]&127)<<r*7)>>>0,t}if(this.len-this.pos>4){for(;r<5;++r)if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}else for(;r<5;++r){if(this.pos>=this.len)throw vt(this);if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}throw Error("invalid varint encoding")}readFixed64(){if(this.pos+8>this.len)throw vt(this,8);let t=Xr(this.buf,this.pos+=4),r=Xr(this.buf,this.pos+=4);return new wt(t,r)}int64(){return this.readLongVarint().toBigInt()}int64Number(){return this.readLongVarint().toNumber()}int64String(){return this.readLongVarint().toString()}uint64(){return this.readLongVarint().toBigInt(!0)}uint64Number(){let t=Ai(this.buf,this.pos);return this.pos+=br(t),t}uint64String(){return this.readLongVarint().toString(!0)}sint64(){return this.readLongVarint().zzDecode().toBigInt()}sint64Number(){return this.readLongVarint().zzDecode().toNumber()}sint64String(){return this.readLongVarint().zzDecode().toString()}fixed64(){return this.readFixed64().toBigInt()}fixed64Number(){return this.readFixed64().toNumber()}fixed64String(){return this.readFixed64().toString()}sfixed64(){return this.readFixed64().toBigInt()}sfixed64Number(){return this.readFixed64().toNumber()}sfixed64String(){return this.readFixed64().toString()}};function lo(e){return new ho(e instanceof Uint8Array?e:e.subarray())}function $r(e,t,r){let n=lo(e);return t.decode(n,void 0,r)}function po(e){let t=e??8192,r=t>>>1,n,o=t;return function(i){if(i<1||i>r)return mt(i);o+i>t&&(n=mt(t),o=0);let a=n.subarray(o,o+=i);return(o&7)!==0&&(o=(o|7)+1),a}}var Ae=class{fn;len;next;val;constructor(t,r,n){this.fn=t,this.len=r,this.next=void 0,this.val=n}};function mo(){}var bo=class{head;tail;len;next;constructor(t){this.head=t.head,this.tail=t.tail,this.len=t.len,this.next=t.states}},Af=po();function Sf(e){return globalThis.Buffer!=null?mt(e):Af(e)}var wr=class{len;head;tail;states;constructor(){this.len=0,this.head=new Ae(mo,0,0),this.tail=this.head,this.states=null}_push(t,r,n){return this.tail=this.tail.next=new Ae(t,r,n),this.len+=r,this}uint32(t){return this.len+=(this.tail=this.tail.next=new xo((t=t>>>0)<128?1:t<16384?2:t<2097152?3:t<268435456?4:5,t)).len,this}int32(t){return t<0?this._push(Wr,10,wt.fromNumber(t)):this.uint32(t)}sint32(t){return this.uint32((t<<1^t>>31)>>>0)}uint64(t){let r=wt.fromBigInt(t);return this._push(Wr,r.length(),r)}uint64Number(t){return this._push(Ei,br(t),t)}uint64String(t){return this.uint64(BigInt(t))}int64(t){return this.uint64(t)}int64Number(t){return this.uint64Number(t)}int64String(t){return this.uint64String(t)}sint64(t){let r=wt.fromBigInt(t).zzEncode();return this._push(Wr,r.length(),r)}sint64Number(t){let r=wt.fromNumber(t).zzEncode();return this._push(Wr,r.length(),r)}sint64String(t){return this.sint64(BigInt(t))}bool(t){return this._push(yo,1,t?1:0)}fixed32(t){return this._push(xr,4,t>>>0)}sfixed32(t){return this.fixed32(t)}fixed64(t){let r=wt.fromBigInt(t);return this._push(xr,4,r.lo)._push(xr,4,r.hi)}fixed64Number(t){let r=wt.fromNumber(t);return this._push(xr,4,r.lo)._push(xr,4,r.hi)}fixed64String(t){return this.fixed64(BigInt(t))}sfixed64(t){return this.fixed64(t)}sfixed64Number(t){return this.fixed64Number(t)}sfixed64String(t){return this.fixed64String(t)}float(t){return this._push(Si,4,t)}double(t){return this._push(vi,8,t)}bytes(t){let r=t.length>>>0;return r===0?this._push(yo,1,0):this.uint32(r)._push(vf,r,t)}string(t){let r=Li(t);return r!==0?this.uint32(r)._push(uo,r,t):this._push(yo,1,0)}fork(){return this.states=new bo(this),this.head=this.tail=new Ae(mo,0,0),this.len=0,this}reset(){return this.states!=null?(this.head=this.states.head,this.tail=this.states.tail,this.len=this.states.len,this.states=this.states.next):(this.head=this.tail=new Ae(mo,0,0),this.len=0),this}ldelim(){let t=this.head,r=this.tail,n=this.len;return this.reset().uint32(n),n!==0&&(this.tail.next=t.next,this.tail=r,this.len+=n),this}finish(){let t=this.head.next,r=Sf(this.len),n=0;for(;t!=null;)t.fn(t.val,r,n),n+=t.len,t=t.next;return r}};function yo(e,t,r){t[r]=e&255}function Bf(e,t,r){for(;e>127;)t[r++]=e&127|128,e>>>=7;t[r]=e}var xo=class extends Ae{next;constructor(t,r){super(Bf,t,r),this.next=void 0}};function Wr(e,t,r){for(;e.hi!==0;)t[r++]=e.lo&127|128,e.lo=(e.lo>>>7|e.hi<<25)>>>0,e.hi>>>=7;for(;e.lo>127;)t[r++]=e.lo&127|128,e.lo=e.lo>>>7;t[r++]=e.lo}function xr(e,t,r){t[r]=e&255,t[r+1]=e>>>8&255,t[r+2]=e>>>16&255,t[r+3]=e>>>24}function vf(e,t,r){t.set(e,r)}globalThis.Buffer!=null&&(wr.prototype.bytes=function(e){let t=e.length>>>0;return this.uint32(t),t>0&&this._push(_f,t,e),this},wr.prototype.string=function(e){let t=globalThis.Buffer.byteLength(e);return this.uint32(t),t>0&&this._push(If,t,e),this});function _f(e,t,r){t.set(e,r)}function If(e,t,r){e.length<40?uo(e,t,r):t.utf8Write!=null?t.utf8Write(e,r):t.set(z(e),r)}function wo(){return new wr}function Jr(e,t){let r=wo();return t.encode(e,r,{lengthDelimited:!1}),r.finish()}var Ze;(function(e){e[e.VARINT=0]="VARINT",e[e.BIT64=1]="BIT64",e[e.LENGTH_DELIMITED=2]="LENGTH_DELIMITED",e[e.START_GROUP=3]="START_GROUP",e[e.END_GROUP=4]="END_GROUP",e[e.BIT32=5]="BIT32"})(Ze||(Ze={}));function Qr(e,t,r,n){return{name:e,type:t,encode:r,decode:n}}function go(e){function t(o){if(e[o.toString()]==null)throw new Error("Invalid enum value");return e[o]}let r=function(s,i){let a=t(s);i.int32(a)},n=function(s){let i=s.int32();return t(i)};return Qr("enum",Ze.VARINT,r,n)}function tn(e,t){return Qr("message",Ze.LENGTH_DELIMITED,e,t)}var Z;(function(e){e.RSA="RSA",e.Ed25519="Ed25519",e.secp256k1="secp256k1",e.ECDSA="ECDSA"})(Z||(Z={}));var Eo;(function(e){e[e.RSA=0]="RSA",e[e.Ed25519=1]="Ed25519",e[e.secp256k1=2]="secp256k1",e[e.ECDSA=3]="ECDSA"})(Eo||(Eo={}));(function(e){e.codec=()=>go(Eo)})(Z||(Z={}));var Tt;(function(e){let t;e.codec=()=>(t==null&&(t=tn((r,n,o={})=>{o.lengthDelimited!==!1&&n.fork(),r.Type!=null&&(n.uint32(8),Z.codec().encode(r.Type,n)),r.Data!=null&&(n.uint32(18),n.bytes(r.Data)),o.lengthDelimited!==!1&&n.ldelim()},(r,n,o={})=>{let s={},i=n==null?r.len:r.pos+n;for(;r.pos<i;){let a=r.uint32();switch(a>>>3){case 1:{s.Type=Z.codec().decode(r);break}case 2:{s.Data=r.bytes();break}default:{r.skipType(a&7);break}}}return s})),t),e.encode=r=>Jr(r,e.codec()),e.decode=(r,n)=>$r(r,e.codec(),n)})(Tt||(Tt={}));var gr;(function(e){let t;e.codec=()=>(t==null&&(t=tn((r,n,o={})=>{o.lengthDelimited!==!1&&n.fork(),r.Type!=null&&(n.uint32(8),Z.codec().encode(r.Type,n)),r.Data!=null&&(n.uint32(18),n.bytes(r.Data)),o.lengthDelimited!==!1&&n.ldelim()},(r,n,o={})=>{let s={},i=n==null?r.len:r.pos+n;for(;r.pos<i;){let a=r.uint32();switch(a>>>3){case 1:{s.Type=Z.codec().decode(r);break}case 2:{s.Data=r.bytes();break}default:{r.skipType(a&7);break}}}return s})),t),e.encode=r=>Jr(r,e.codec()),e.decode=(r,n)=>$r(r,e.codec(),n)})(gr||(gr={}));function Ao(e){if(isNaN(e)||e<=0)throw new O("random bytes length must be a Number bigger than 0");return de(e)}var Ar={};ot(Ar,{MAX_RSA_KEY_SIZE:()=>So,generateRSAKeyPair:()=>To,jwkToJWKKeyPair:()=>Ri,jwkToPkcs1:()=>Df,jwkToPkix:()=>Io,jwkToRSAPrivateKey:()=>nn,pkcs1MessageToJwk:()=>vo,pkcs1MessageToRSAPrivateKey:()=>en,pkcs1ToJwk:()=>Tf,pkcs1ToRSAPrivateKey:()=>Lo,pkixMessageToJwk:()=>_o,pkixMessageToRSAPublicKey:()=>rn,pkixToJwk:()=>Uf,pkixToRSAPublicKey:()=>Ko});var je=qr;var ze=class{type="RSA";jwk;_raw;_multihash;constructor(t,r){this.jwk=t,this._multihash=r}get raw(){return this._raw==null&&(this._raw=Ar.jwkToPkix(this.jwk)),this._raw}toMultihash(){return this._multihash}toCID(){return gt.createV1(114,this._multihash)}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}verify(t,r,n){return Ci(this.jwk,r,t,n)}},Er=class{type="RSA";jwk;_raw;publicKey;constructor(t,r){this.jwk=t,this.publicKey=r}get raw(){return this._raw==null&&(this._raw=Ar.jwkToPkcs1(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}sign(t,r){return Ui(this.jwk,t,r)}};var So=8192,Bo=18,Lf=1062,Kf=Uint8Array.from([48,13,6,9,42,134,72,134,247,13,1,1,1,5,0]);function Tf(e){let t=yt(e);return vo(t)}function vo(e){return{n:M(e[1],"base64url"),e:M(e[2],"base64url"),d:M(e[3],"base64url"),p:M(e[4],"base64url"),q:M(e[5],"base64url"),dp:M(e[6],"base64url"),dq:M(e[7],"base64url"),qi:M(e[8],"base64url"),kty:"RSA"}}function Df(e){if(e.n==null||e.e==null||e.d==null||e.p==null||e.q==null||e.dp==null||e.dq==null||e.qi==null)throw new O("JWK was missing components");return St([ct(Uint8Array.from([0])),ct(z(e.n,"base64url")),ct(z(e.e,"base64url")),ct(z(e.d,"base64url")),ct(z(e.p,"base64url")),ct(z(e.q,"base64url")),ct(z(e.dp,"base64url")),ct(z(e.dq,"base64url")),ct(z(e.qi,"base64url"))]).subarray()}function Uf(e){let t=yt(e,{offset:0});return _o(t)}function _o(e){let t=yt(e[1],{offset:0});return{kty:"RSA",n:M(t[0],"base64url"),e:M(t[1],"base64url")}}function Io(e){if(e.n==null||e.e==null)throw new O("JWK was missing components");return St([Kf,ar(St([ct(z(e.n,"base64url")),ct(z(e.e,"base64url"))]))]).subarray()}function Lo(e){let t=yt(e);return en(t)}function en(e){let t=vo(e);return nn(t)}function Ko(e,t){if(e.byteLength>=Lf)throw new Se("Key size is too large");let r=yt(e,{offset:0});return rn(r,e,t)}function rn(e,t,r){let n=_o(e);if(r==null){let o=je(Tt.encode({Type:Z.RSA,Data:t}));r=At(Bo,o)}return new ze(n,r)}function nn(e){if(ki(e)>So)throw new O("Key size is too large");let t=Ri(e),r=je(Tt.encode({Type:Z.RSA,Data:Io(t.publicKey)})),n=At(Bo,r);return new Er(t.privateKey,new ze(t.publicKey,n))}async function To(e){if(e>So)throw new O("Key size is too large");let t=await Pi(e),r=je(Tt.encode({Type:Z.RSA,Data:Io(t.publicKey)})),n=At(Bo,r);return new Er(t.privateKey,new ze(t.publicKey,n))}function Ri(e){if(e==null)throw new O("Missing key parameter");return{privateKey:e,publicKey:{kty:e.kty,n:e.n,e:e.e}}}var Hi="1.2.840.113549.1.1.1";async function Pi(e,t){let r=await Y.get().subtle.generateKey({name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:new Uint8Array([1,0,1]),hash:{name:"SHA-256"}},!0,["sign","verify"]);t?.signal?.throwIfAborted();let n=await Cf(r,t);return{privateKey:n[0],publicKey:n[1]}}async function Ui(e,t,r){let n=await Y.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["sign"]);r?.signal?.throwIfAborted();let o=await Y.get().subtle.sign({name:"RSASSA-PKCS1-v1_5"},n,t instanceof Uint8Array?t:t.subarray());return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function Ci(e,t,r,n){let o=await Y.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["verify"]);n?.signal?.throwIfAborted();let s=await Y.get().subtle.verify({name:"RSASSA-PKCS1-v1_5"},o,t,r instanceof Uint8Array?r:r.subarray());return n?.signal?.throwIfAborted(),s}async function Cf(e,t){if(e.privateKey==null||e.publicKey==null)throw new O("Private and public key are required");let r=await Promise.all([Y.get().subtle.exportKey("jwk",e.privateKey),Y.get().subtle.exportKey("jwk",e.publicKey)]);return t?.signal?.throwIfAborted(),r}function ki(e){if(e.kty!=="RSA")throw new O("invalid key type");if(e.n==null)throw new O("invalid key modulus");return z(e.n,"base64url").length*8}var on=class extends Ue{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,Ce(t);let n=cr(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,s=new Uint8Array(o);s.set(n.length>o?t.create().update(n).digest():n);for(let i=0;i<s.length;i++)s[i]^=54;this.iHash.update(s),this.oHash=t.create();for(let i=0;i<s.length;i++)s[i]^=106;this.oHash.update(s),ht(s)}update(t){return Re(this),this.iHash.update(t),this}digestInto(t){Re(this),X(t,this.outputLen),this.finished=!0,this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||(t=Object.create(Object.getPrototypeOf(this),{}));let{oHash:r,iHash:n,finished:o,destroyed:s,blockLen:i,outputLen:a}=this;return t=t,t.finished=o,t.destroyed=s,t.blockLen=i,t.outputLen=a,t.oHash=r._cloneInto(t.oHash),t.iHash=n._cloneInto(t.iHash),t}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},Sr=(e,t,r)=>new on(e,t).update(r).digest();Sr.create=(e,t)=>new on(e,t);var Ni=(e,t)=>(e+(e>=0?t:-t)/Mi)/t;function Rf(e,t,r){let[[n,o],[s,i]]=t,a=Ni(i*e,r),c=Ni(-o*e,r),u=e-a*n-c*s,d=-a*o-c*i,h=u<jt,f=d<jt;h&&(u=-u),f&&(d=-d);let l=Qt(Math.ceil(Zr(r)/2))+Ye;if(u<jt||u>=l||d<jt||d>=l)throw new Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:h,k1:u,k2neg:f,k2:d}}function Oi(e){e.lowS!==void 0&&Ht("lowS",e.lowS),e.prehash!==void 0&&Ht("prehash",e.prehash)}var Do=class extends Error{constructor(t=""){super(t)}},Zt={Err:Do,_tlv:{encode:(e,t)=>{let{Err:r}=Zt;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let n=t.length/2,o=lr(n);if(o.length/2&128)throw new r("tlv.encode: long form length too big");let s=n>127?lr(o.length/2|128):"";return lr(e)+s+o+t},decode(e,t){let{Err:r}=Zt,n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");let o=t[n++],s=!!(o&128),i=0;if(!s)i=o;else{let c=o&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let u=t.subarray(n,n+c);if(u.length!==c)throw new r("tlv.decode: length bytes not complete");if(u[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let d of u)i=i<<8|d;if(n+=c,i<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(n,n+i);if(a.length!==i)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+i)}}},_int:{encode(e){let{Err:t}=Zt;if(e<jt)throw new t("integer: negative integers are not allowed");let r=lr(e);if(Number.parseInt(r[0],16)&8&&(r="00"+r),r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Zt;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return ke(e)}},toSig(e){let{Err:t,_int:r,_tlv:n}=Zt,o=V("signature",e),{v:s,l:i}=n.decode(48,o);if(i.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=n.decode(2,s),{v:u,l:d}=n.decode(2,c);if(d.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(u)}},hexFromSig(e){let{_tlv:t,_int:r}=Zt,n=t.encode(2,r.encode(e.r)),o=t.encode(2,r.encode(e.s)),s=n+o;return t.encode(48,s)}},jt=BigInt(0),Ye=BigInt(1),Mi=BigInt(2),sn=BigInt(3),Pf=BigInt(4);function kf(e,t,r){function n(o){let s=e.sqr(o),i=e.mul(s,o);return e.add(e.add(i,e.mul(o,t)),r)}return n}function Ge(e,t){let{BYTES:r}=e,n;if(typeof t=="bigint")n=t;else{let o=V("private key",t);try{n=e.fromBytes(o)}catch{throw new Error(`invalid private key: expected ui8a of size ${r}, got ${typeof t}`)}}if(!e.isValidNot0(n))throw new Error("invalid private key: out of range [1..N-1]");return n}function Hf(e,t={}){let{Fp:r,Fn:n}=jr("weierstrass",e,t),{h:o,n:s}=e;te(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});let{endo:i}=t;if(i&&(!r.is0(e.a)||typeof i.beta!="bigint"||!Array.isArray(i.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');function a(){if(!r.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function c(T,y,p){let{x:E,y:B}=y.toAffine(),D=r.toBytes(E);if(Ht("isCompressed",p),p){a();let U=!r.isOdd(B);return lt(qi(U),D)}else return lt(Uint8Array.of(4),D,r.toBytes(B))}function u(T){X(T);let y=r.BYTES,p=y+1,E=2*y+1,B=T.length,D=T[0],U=T.subarray(1);if(B===p&&(D===2||D===3)){let g=r.fromBytes(U);if(!r.isValid(g))throw new Error("bad point: is not on curve, wrong x");let b=f(g),_;try{_=r.sqrt(b)}catch(P){let N=P instanceof Error?": "+P.message:"";throw new Error("bad point: is not on curve, sqrt error"+N)}a();let L=r.isOdd(_);return(D&1)===1!==L&&(_=r.neg(_)),{x:g,y:_}}else if(B===E&&D===4){let g=r.fromBytes(U.subarray(y*0,y*1)),b=r.fromBytes(U.subarray(y*1,y*2));if(!l(g,b))throw new Error("bad point: is not on curve");return{x:g,y:b}}else throw new Error(`bad point: got length ${B}, expected compressed=${p} or uncompressed=${E}`)}let d=t.toBytes||c,h=t.fromBytes||u,f=kf(r,e.a,e.b);function l(T,y){let p=r.sqr(y),E=f(T);return r.eql(p,E)}if(!l(e.Gx,e.Gy))throw new Error("bad curve params: generator point");let m=r.mul(r.pow(e.a,sn),Pf),w=r.mul(r.sqr(e.b),BigInt(27));if(r.is0(r.add(m,w)))throw new Error("bad curve params: a or b");function x(T,y,p=!1){if(!r.isValid(y)||p&&r.is0(y))throw new Error(`bad point coordinate ${T}`);return y}function A(T){if(!(T instanceof I))throw new Error("ProjectivePoint expected")}function v(T){if(!i||!i.basises)throw new Error("no endo");return Rf(T,i.basises,n.ORDER)}let S=He((T,y)=>{let{X:p,Y:E,Z:B}=T;if(r.eql(B,r.ONE))return{x:p,y:E};let D=T.is0();y==null&&(y=D?r.ONE:r.inv(B));let U=r.mul(p,y),g=r.mul(E,y),b=r.mul(B,y);if(D)return{x:r.ZERO,y:r.ZERO};if(!r.eql(b,r.ONE))throw new Error("invZ was invalid");return{x:U,y:g}}),K=He(T=>{if(T.is0()){if(t.allowInfinityPoint&&!r.is0(T.Y))return;throw new Error("bad point: ZERO")}let{x:y,y:p}=T.toAffine();if(!r.isValid(y)||!r.isValid(p))throw new Error("bad point: x or y not field elements");if(!l(y,p))throw new Error("bad point: equation left != right");if(!T.isTorsionFree())throw new Error("bad point: not in prime-order subgroup");return!0});function R(T,y,p,E,B){return p=new I(r.mul(p.X,T),p.Y,p.Z),y=pr(E,y),p=pr(B,p),y.add(p)}class I{constructor(y,p,E){this.X=x("x",y),this.Y=x("y",p,!0),this.Z=x("z",E),Object.freeze(this)}static fromAffine(y){let{x:p,y:E}=y||{};if(!y||!r.isValid(p)||!r.isValid(E))throw new Error("invalid affine point");if(y instanceof I)throw new Error("projective point not allowed");return r.is0(p)&&r.is0(E)?I.ZERO:new I(p,E,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}static normalizeZ(y){return qt(I,y)}static fromBytes(y){return X(y),I.fromHex(y)}static fromHex(y){let p=I.fromAffine(h(V("pointHex",y)));return p.assertValidity(),p}static fromPrivateKey(y){return I.BASE.multiply(Ge(n,y))}static msm(y,p){return Me(I,n,y,p)}_setWindowSize(y){this.precompute(y)}precompute(y=8,p=!0){return H.createCache(this,y),p||this.multiply(sn),this}assertValidity(){K(this)}hasEvenY(){let{y}=this.toAffine();if(!r.isOdd)throw new Error("Field doesn't support isOdd");return!r.isOdd(y)}equals(y){A(y);let{X:p,Y:E,Z:B}=this,{X:D,Y:U,Z:g}=y,b=r.eql(r.mul(p,g),r.mul(D,B)),_=r.eql(r.mul(E,g),r.mul(U,B));return b&&_}negate(){return new I(this.X,r.neg(this.Y),this.Z)}double(){let{a:y,b:p}=e,E=r.mul(p,sn),{X:B,Y:D,Z:U}=this,g=r.ZERO,b=r.ZERO,_=r.ZERO,L=r.mul(B,B),C=r.mul(D,D),P=r.mul(U,U),N=r.mul(B,D);return N=r.add(N,N),_=r.mul(B,U),_=r.add(_,_),g=r.mul(y,_),b=r.mul(E,P),b=r.add(g,b),g=r.sub(C,b),b=r.add(C,b),b=r.mul(g,b),g=r.mul(N,g),_=r.mul(E,_),P=r.mul(y,P),N=r.sub(L,P),N=r.mul(y,N),N=r.add(N,_),_=r.add(L,L),L=r.add(_,L),L=r.add(L,P),L=r.mul(L,N),b=r.add(b,L),P=r.mul(D,U),P=r.add(P,P),L=r.mul(P,N),g=r.sub(g,L),_=r.mul(P,C),_=r.add(_,_),_=r.add(_,_),new I(g,b,_)}add(y){A(y);let{X:p,Y:E,Z:B}=this,{X:D,Y:U,Z:g}=y,b=r.ZERO,_=r.ZERO,L=r.ZERO,C=e.a,P=r.mul(e.b,sn),N=r.mul(p,D),j=r.mul(E,U),F=r.mul(B,g),dt=r.add(p,E),q=r.add(D,U);dt=r.mul(dt,q),q=r.add(N,j),dt=r.sub(dt,q),q=r.add(p,B);let J=r.add(D,g);return q=r.mul(q,J),J=r.add(N,F),q=r.sub(q,J),J=r.add(E,B),b=r.add(U,g),J=r.mul(J,b),b=r.add(j,F),J=r.sub(J,b),L=r.mul(C,q),b=r.mul(P,F),L=r.add(b,L),b=r.sub(j,L),L=r.add(j,L),_=r.mul(b,L),j=r.add(N,N),j=r.add(j,N),F=r.mul(C,F),q=r.mul(P,q),j=r.add(j,F),F=r.sub(N,F),F=r.mul(C,F),q=r.add(q,F),N=r.mul(j,q),_=r.add(_,N),N=r.mul(J,q),b=r.mul(dt,b),b=r.sub(b,N),N=r.mul(dt,j),L=r.mul(J,L),L=r.add(L,N),new I(b,_,L)}subtract(y){return this.add(y.negate())}is0(){return this.equals(I.ZERO)}multiply(y){let{endo:p}=t;if(!n.isValidNot0(y))throw new Error("invalid scalar: out of range");let E,B,D=U=>H.cached(this,U,g=>qt(I,g));if(p){let{k1neg:U,k1:g,k2neg:b,k2:_}=v(y),{p:L,f:C}=D(g),{p:P,f:N}=D(_);B=C.add(N),E=R(p.beta,L,P,U,b)}else{let{p:U,f:g}=D(y);E=U,B=g}return qt(I,[E,B])[0]}multiplyUnsafe(y){let{endo:p}=t,E=this;if(!n.isValid(y))throw new Error("invalid scalar: out of range");if(y===jt||E.is0())return I.ZERO;if(y===Ye)return E;if(H.hasCache(this))return this.multiply(y);if(p){let{k1neg:B,k1:D,k2neg:U,k2:g}=v(y),{p1:b,p2:_}=ni(I,E,D,g);return R(p.beta,b,_,B,U)}else return H.unsafe(E,y)}multiplyAndAddUnsafe(y,p,E){let B=this.multiplyUnsafe(p).add(y.multiplyUnsafe(E));return B.is0()?void 0:B}toAffine(y){return S(this,y)}isTorsionFree(){let{isTorsionFree:y}=t;return o===Ye?!0:y?y(I,this):H.unsafe(this,s).is0()}clearCofactor(){let{clearCofactor:y}=t;return o===Ye?this:y?y(I,this):this.multiplyUnsafe(o)}isSmallOrder(){return this.multiplyUnsafe(o).is0()}toBytes(y=!0){return Ht("isCompressed",y),this.assertValidity(),d(I,this,y)}toRawBytes(y=!0){return this.toBytes(y)}toHex(y=!0){return Et(this.toBytes(y))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}I.BASE=new I(e.Gx,e.Gy,r.ONE),I.ZERO=new I(r.ZERO,r.ONE,r.ZERO),I.Fp=r,I.Fn=n;let k=n.BITS,H=new Oe(I,t.endo?Math.ceil(k/2):k);return I}function qi(e){return Uint8Array.of(e?2:3)}function Nf(e,t,r={}){Ce(t),te(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});let n=r.randomBytes||de,o=r.hmac||((g,...b)=>Sr(t,g,lt(...b))),{Fp:s,Fn:i}=e,{ORDER:a,BITS:c}=i,u=$n(a),d={secret:i.BYTES,public:1+s.BYTES,publicUncompressed:1+2*s.BYTES,signature:2*i.BYTES,seed:u};function h(g){let b=a>>Ye;return g>b}function f(g){return h(g)?i.neg(g):g}function l(g,b){if(!i.isValidNot0(b))throw new Error(`invalid signature ${g}: out of range 1..CURVE.n`)}class m{constructor(b,_,L){l("r",b),l("s",_),this.r=b,this.s=_,L!=null&&(this.recovery=L),Object.freeze(this)}static fromBytes(b,_="compact"){if(_==="compact"){let L=i.BYTES;X(b,L*2);let C=b.subarray(0,L),P=b.subarray(L,L*2);return new m(i.fromBytes(C),i.fromBytes(P))}if(_==="der"){X(b);let{r:L,s:C}=Zt.toSig(b);return new m(L,C)}throw new Error("invalid format")}static fromHex(b,_){return this.fromBytes(le(b),_)}addRecoveryBit(b){return new m(this.r,this.s,b)}recoverPublicKey(b){let _=s.ORDER,{r:L,s:C,recovery:P}=this;if(P==null||![0,1,2,3].includes(P))throw new Error("recovery id invalid");if(a*Mi<_&&P>1)throw new Error("recovery id is ambiguous for h>1 curve");let j=P===2||P===3?L+a:L;if(!s.isValid(j))throw new Error("recovery id 2 or 3 invalid");let F=s.toBytes(j),dt=e.fromHex(lt(qi((P&1)===0),F)),q=i.inv(j),J=k(V("msgHash",b)),pt=i.create(-J*q),zt=i.create(C*q),se=e.BASE.multiplyUnsafe(pt).add(dt.multiplyUnsafe(zt));if(se.is0())throw new Error("point at infinify");return se.assertValidity(),se}hasHighS(){return h(this.s)}normalizeS(){return this.hasHighS()?new m(this.r,i.neg(this.s),this.recovery):this}toBytes(b="compact"){if(b==="compact")return lt(i.toBytes(this.r),i.toBytes(this.s));if(b==="der")return le(Zt.hexFromSig(this));throw new Error("invalid format")}toHex(b){return Et(this.toBytes(b))}assertValidity(){}static fromCompact(b){return m.fromBytes(V("sig",b),"compact")}static fromDER(b){return m.fromBytes(V("sig",b),"der")}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return Et(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return Et(this.toBytes("compact"))}}function w(g){try{return!!Ge(i,g)}catch{return!1}}function x(g,b){try{let _=g.length;return b===!0&&_!==d.public||b===!1&&_!==d.publicUncompressed?!1:!!e.fromBytes(g)}catch{return!1}}function A(g=n(u)){return Wn(g,a)}let v={isValidSecretKey:w,isValidPublicKey:x,randomSecretKey:A,isValidPrivateKey:w,randomPrivateKey:A,normPrivateKeyToScalar:g=>Ge(i,g),precompute(g=8,b=e.BASE){return b.precompute(g,!1)}};function S(g,b=!0){return e.BASE.multiply(Ge(i,g)).toBytes(b)}function K(g){if(typeof g=="bigint")return!1;if(g instanceof e)return!0;if(i.allowedLengths||d.secret===d.public)return;let b=V("key",g).length;return b===d.public||b===d.publicUncompressed}function R(g,b,_=!0){if(K(g)===!0)throw new Error("first arg must be private key");if(K(b)===!1)throw new Error("second arg must be public key");let L=Ge(i,g);return e.fromHex(b).multiply(L).toBytes(_)}let I=r.bits2int||function(g){if(g.length>8192)throw new Error("input is too large");let b=ke(g),_=g.length*8-c;return _>0?b>>BigInt(_):b},k=r.bits2int_modN||function(g){return i.create(I(g))},H=Qt(c);function T(g){return Jt("num < 2^"+c,g,jt,H),i.toBytes(g)}function y(g,b,_=p){if(["recovered","canonical"].some(pt=>pt in _))throw new Error("sign() legacy options not supported");let{lowS:L,prehash:C,extraEntropy:P}=_;L==null&&(L=!0),g=V("msgHash",g),Oi(_),C&&(g=V("prehashed msgHash",t(g)));let N=k(g),j=Ge(i,b),F=[T(j),T(N)];if(P!=null&&P!==!1){let pt=P===!0?n(d.secret):P;F.push(V("extraEntropy",pt))}let dt=lt(...F),q=N;function J(pt){let zt=I(pt);if(!i.isValidNot0(zt))return;let se=i.inv(zt),Xe=e.BASE.multiply(zt).toAffine(),ie=i.create(Xe.x);if(ie===jt)return;let $e=i.create(se*i.create(q+ie*j));if($e===jt)return;let No=(Xe.x===ie?0:2)|Number(Xe.y&Ye),Oo=$e;return L&&h($e)&&(Oo=f($e),No^=1),new m(ie,Oo,No)}return{seed:dt,k2sig:J}}let p={lowS:r.lowS,prehash:!1},E={lowS:r.lowS,prehash:!1};function B(g,b,_=p){let{seed:L,k2sig:C}=y(g,b,_);return Ms(t.outputLen,i.BYTES,o)(L,C)}e.BASE.precompute(8);function D(g,b,_,L=E){let C=g;b=V("msgHash",b),_=V("publicKey",_),Oi(L);let{lowS:P,prehash:N,format:j}=L;if("strict"in L)throw new Error("options.strict was renamed to lowS");let F,dt;if(j===void 0){let q=typeof C=="string"||he(C),J=!q&&C!==null&&typeof C=="object"&&typeof C.r=="bigint"&&typeof C.s=="bigint";if(!q&&!J)throw new Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(J)F=new m(C.r,C.s);else if(q){try{F=m.fromDER(C)}catch(pt){if(!(pt instanceof Zt.Err))throw pt}if(!F)try{F=m.fromCompact(C)}catch{return!1}}}else if(j==="compact"||j==="der"){if(typeof C!="string"&&!he(C))throw new Error('"der" / "compact" format expects Uint8Array signature');F=m.fromBytes(V("sig",C),j)}else if(j==="js"){if(!(C instanceof m))throw new Error('"js" format expects Signature instance');F=C}else throw new Error('format must be "compact", "der" or "js"');if(!F)return!1;try{if(dt=e.fromHex(_),P&&F.hasHighS())return!1;N&&(b=t(b));let{r:q,s:J}=F,pt=k(b),zt=i.inv(J),se=i.create(pt*zt),Xe=i.create(q*zt),ie=e.BASE.multiplyUnsafe(se).add(dt.multiplyUnsafe(Xe));return ie.is0()?!1:i.create(ie.x)===q}catch{return!1}}function U(g){let b=v.randomSecretKey(g);return{secretKey:b,publicKey:S(b)}}return Object.freeze({keygen:U,getPublicKey:S,sign:B,verify:D,getSharedSecret:R,utils:v,Point:e,Signature:m,info:{type:"weierstrass",lengths:d,publicKeyHasPrefix:!0}})}function Of(e){let t={a:e.a,b:e.b,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp,n=e.allowedPrivateKeyLengths?Array.from(new Set(e.allowedPrivateKeyLengths.map(i=>Math.ceil(i/2)))):void 0,o=bt(t.n,{BITS:e.nBitLength,allowedLengths:n,modOnDecode:e.wrapPrivateKey}),s={Fp:r,Fn:o,allowInfinityPoint:e.allowInfinityPoint,endo:e.endo,isTorsionFree:e.isTorsionFree,clearCofactor:e.clearCofactor,fromBytes:e.fromBytes,toBytes:e.toBytes};return{CURVE:t,curveOpts:s}}function Mf(e){let{CURVE:t,curveOpts:r}=Of(e),n={hmac:e.hmac,randomBytes:e.randomBytes,lowS:e.lowS,bits2int:e.bits2int,bits2int_modN:e.bits2int_modN};return{CURVE:t,curveOpts:r,hash:e.hash,ecdsaOpts:n}}function qf(e,t){return Object.assign({},t,{ProjectivePoint:t.Point,CURVE:e})}function Vi(e){let{CURVE:t,curveOpts:r,hash:n,ecdsaOpts:o}=Mf(e),s=Hf(t,r),i=Nf(s,n,o);return qf(e,i)}function Fi(e,t){let r=n=>Vi({...e,hash:n});return{...r(t),create:r}}var Co={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},Vf={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]};var Zi=BigInt(2);function Ff(e){let t=Co.p,r=BigInt(3),n=BigInt(6),o=BigInt(11),s=BigInt(22),i=BigInt(23),a=BigInt(44),c=BigInt(88),u=e*e*e%t,d=u*u*e%t,h=G(d,r,t)*d%t,f=G(h,r,t)*d%t,l=G(f,Zi,t)*u%t,m=G(l,o,t)*l%t,w=G(m,s,t)*m%t,x=G(w,a,t)*w%t,A=G(x,c,t)*x%t,v=G(A,a,t)*w%t,S=G(v,r,t)*d%t,K=G(S,i,t)*m%t,R=G(K,n,t)*u%t,I=G(R,Zi,t);if(!Uo.eql(Uo.sqr(I),e))throw new Error("Cannot find square root");return I}var Uo=bt(Co.p,void 0,void 0,{sqrt:Ff}),_t=Fi({...Co,Fp:Uo,lowS:!0,endo:Vf},qr);var ji=33,zi=32;function Gi(e,t,r){let n=Dr.digest(t instanceof Uint8Array?t:t.subarray());if(Ve(n))return n.then(({digest:o})=>(r?.signal?.throwIfAborted(),_t.sign(o,e).toDERRawBytes())).catch(o=>{throw o.name==="AbortError"?o:new We(String(o))});try{return _t.sign(n.digest,e).toDERRawBytes()}catch(o){throw new We(String(o))}}function Yi(e,t,r,n){let o=Dr.digest(r instanceof Uint8Array?r:r.subarray());if(Ve(o))return o.then(({digest:s})=>(n?.signal?.throwIfAborted(),_t.verify(t,s,e))).catch(s=>{throw s.name==="AbortError"?s:new Je(String(s))});try{return n?.signal?.throwIfAborted(),_t.verify(t,o.digest,e)}catch(s){throw new Je(String(s))}}var Br=class{type="secp256k1";raw;_key;constructor(t){this._key=Wi(t),this.raw=Xi(this._key)}toMultihash(){return ae.digest(fe(this))}toCID(){return gt.createV1(114,this.toMultihash())}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}verify(t,r,n){return Yi(this._key,r,t,n)}},vr=class{type="secp256k1";raw;publicKey;constructor(t,r){this.raw=$i(t),this.publicKey=new Br(r??Ji(t))}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:st(this.raw,t.raw)}sign(t,r){return Gi(this.raw,t,r)}};function Ro(e){return new vr(e)}function an(e){return new Br(e)}async function Qi(){let e=Zf();return new vr(e)}function Xi(e){return _t.ProjectivePoint.fromHex(e).toRawBytes(!0)}function $i(e){try{return _t.getPublicKey(e,!0),e}catch(t){throw new Qe(String(t))}}function Wi(e){try{return _t.ProjectivePoint.fromHex(e),e}catch(t){throw new Se(String(t))}}function Ji(e){try{return _t.getPublicKey(e,!0)}catch(t){throw new Qe(String(t))}}function Zf(){return _t.utils.randomPrivateKey()}var cn={"P-256":32,"P-384":48,"P-521":66},jf=Object.keys(cn),Po=jf.join(" / ");async function ta(e){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new O(`Unknown curve: ${e}. Must be ${Po}`);let t=await Y.get().subtle.generateKey({name:"ECDH",namedCurve:e},!0,["deriveBits"]),r=async(s,i)=>{let a;i!=null?a=await Y.get().subtle.importKey("jwk",Gf(e,i),{name:"ECDH",namedCurve:e},!1,["deriveBits"]):a=t.privateKey;let c=await Y.get().subtle.importKey("jwk",ea(e,s),{name:"ECDH",namedCurve:e},!1,[]),u=await Y.get().subtle.deriveBits({name:"ECDH",public:c},a,cn[e]*8);return new Uint8Array(u,0,u.byteLength)},n=await Y.get().subtle.exportKey("jwk",t.publicKey);return{key:zf(n),genSharedKey:r}}function zf(e){if(e.crv==null||e.x==null||e.y==null)throw new O("JWK was missing components");if(e.crv!=="P-256"&&e.crv!=="P-384"&&e.crv!=="P-521")throw new O(`Unknown curve: ${e.crv}. Must be ${Po}`);let t=cn[e.crv];return It([Uint8Array.from([4]),io(e.x,t),io(e.y,t)],1+t*2)}function ea(e,t){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new O(`Unknown curve: ${e}. Must be ${Po}`);let r=cn[e];if(!st(t.subarray(0,1),Uint8Array.from([4])))throw new O("Cannot unmarshal public key - invalid key format");return{kty:"EC",crv:e,x:M(t.subarray(1,r+1),"base64url"),y:M(t.subarray(1+r),"base64url"),ext:!0}}var Gf=(e,t)=>({...ea(e,t.public),d:M(t.private,"base64url")});var Yf={"AES-128":{ivSize:16,keySize:16},"AES-256":{ivSize:16,keySize:32},Blowfish:{ivSize:8,keySize:32}};async function ra(e,t,r){if(e!=="AES-128"&&e!=="AES-256"&&e!=="Blowfish")throw new O("Cipher type was missing or unsupported");if(t!=="SHA1"&&t!=="SHA256"&&t!=="SHA512")throw new O("Hash type was missing or unsupported");if(r==null||!(r instanceof Uint8Array))throw new O("Secret was missing or an incorrect type");let n=Yf[e],o=n.keySize,s=n.ivSize,i=20,a=z("key expansion"),c=2*(s+o+i),u=await hn(t,r),d=await u.digest(a),h=[],f=0;for(;f<c;){let v=await u.digest(It([d,a])),S=v.length;f+S>c&&(S=c-f),h.push(v),f+=S,d=await u.digest(d)}let l=c/2,m=It(h),w=m.subarray(0,l),x=m.subarray(l,c),A=v=>({iv:v.subarray(0,s),cipherKey:v.subarray(s,s+o),macKey:v.subarray(s+o)});return{k1:A(w),k2:A(x)}}async function Xf(e,t){if(e==="Ed25519")return mi();if(e==="secp256k1")return Qi();if(e==="RSA")return To(nu(t));if(e==="ECDSA")return Ss(ou(t));throw new Gt}async function $f(e,t){if(e!=="Ed25519")throw new Gt("Seed key derivation only supported for Ed25519 keys");return yi(t)}function Wf(e,t){let{Type:r,Data:n}=Tt.decode(e),o=n??new Uint8Array;switch(r){case Z.RSA:return Ko(o,t);case Z.Ed25519:return Yr(o);case Z.secp256k1:return an(o);case Z.ECDSA:return Mn(o);default:throw new Gt}}function Jf(e){if(e.byteLength===ee)return Yr(e);if(e.byteLength===ji)return an(e);let t=yt(e),r=t[1]?.[0];if(r===kn||r===Hn||r===Nn)return qn(t);if(t[0]?.[0]===Hi)return rn(t,e);throw new O("Could not extract public key from raw bytes")}function Qf(e){let{Type:t,Data:r}=Tt.decode(e.digest),n=r??new Uint8Array;switch(t){case Z.Ed25519:return Yr(n);case Z.secp256k1:return an(n);case Z.ECDSA:return Mn(n);default:throw new Gt}}function fe(e){return Tt.encode({Type:Z[e.type],Data:e.raw})}function tu(e){let t=gr.decode(e),r=t.Data??new Uint8Array;switch(t.Type){case Z.RSA:return Lo(r);case Z.Ed25519:return ao(r);case Z.secp256k1:return Ro(r);case Z.ECDSA:return ws(r);default:throw new Gt}}function eu(e){if(e.byteLength===xt)return ao(e);if(e.byteLength===zi)return Ro(e);let t=yt(e),r=t[2]?.[0];if(r===kn||r===Hn||r===Nn)return On(t);if(t.length>8)return en(t);throw new O("Could not extract private key from raw bytes")}function ru(e){return gr.encode({Type:Z[e.type],Data:e.raw})}function nu(e){return e==null?2048:parseInt(e,10)}function ou(e){if(e==="P-256"||e==null)return"P-256";if(e==="P-384")return"P-384";if(e==="P-521")return"P-521";throw new O("Unsupported curve, should be P-256, P-384 or P-521")}async function su(e){if(e.type==="RSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["verify"])};if(e.type==="ECDSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"ECDSA",namedCurve:e.jwk.crv??"P-256"},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"ECDSA",namedCurve:e.publicKey.jwk.crv??"P-256"},!0,["verify"])};throw new O("Only RSA and ECDSA keys are supported")}async function iu(e){if(e.privateKey.algorithm.name==="RSASSA-PKCS1-v1_5"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return nn(t)}if(e.privateKey.algorithm.name==="ECDSA"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return new Ct(t)}throw new O("Only RSA and ECDSA keys are supported")}function au(e,t,r,n){Ce(e);let o=Is({dkLen:32,asyncTick:10},n),{c:s,dkLen:i,asyncTick:a}=o;if(Pt(s),Pt(i),Pt(a),s<1)throw new Error("iterations (c) should be >= 1");let c=Vn(t),u=Vn(r),d=new Uint8Array(i),h=Sr.create(e,c),f=h._cloneInto().update(u);return{c:s,dkLen:i,asyncTick:a,DK:d,PRF:h,PRFSalt:f}}function cu(e,t,r,n,o){return e.destroy(),t.destroy(),n&&n.destroy(),ht(o),r}function na(e,t,r,n){let{c:o,dkLen:s,DK:i,PRF:a,PRFSalt:c}=au(e,t,r,n),u,d=new Uint8Array(4),h=Pe(d),f=new Uint8Array(a.outputLen);for(let l=1,m=0;m<s;l++,m+=a.outputLen){let w=i.subarray(m,m+a.outputLen);h.setInt32(0,l,!1),(u=c._cloneInto(u)).update(d).digestInto(f),w.set(f.subarray(0,w.length));for(let x=1;x<o;x++){a._cloneInto(u).update(f).digestInto(f);for(let A=0;A<w.length;A++)w[A]^=f[A]}}return cu(a,c,i,u,f)}var _r=Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),oe=new Uint32Array(80),fn=class extends pe{constructor(){super(64,20,8,!1),this.A=_r[0]|0,this.B=_r[1]|0,this.C=_r[2]|0,this.D=_r[3]|0,this.E=_r[4]|0}get(){let{A:t,B:r,C:n,D:o,E:s}=this;return[t,r,n,o,s]}set(t,r,n,o,s){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0}process(t,r){for(let c=0;c<16;c++,r+=4)oe[c]=t.getUint32(r,!1);for(let c=16;c<80;c++)oe[c]=Rr(oe[c-3]^oe[c-8]^oe[c-14]^oe[c-16],1);let{A:n,B:o,C:s,D:i,E:a}=this;for(let c=0;c<80;c++){let u,d;c<20?(u=kr(o,s,i),d=1518500249):c<40?(u=o^s^i,d=1859775393):c<60?(u=Hr(o,s,i),d=2400959708):(u=o^s^i,d=3395469782);let h=Rr(n,5)+u+a+d+oe[c]|0;a=i,i=s,s=Rr(o,30),o=n,n=h}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,a=a+this.E|0,this.set(n,o,s,i,a)}roundClean(){ht(oe)}destroy(){this.set(0,0,0,0,0),ht(this.buffer)}},oa=fr(()=>new fn);var sa=oa;var ia=Vr;var aa={sha1:sa,"sha2-256":je,"sha2-512":ia};function Ho(e,t,r,n,o){if(o!=="sha1"&&o!=="sha2-256"&&o!=="sha2-512"){let a=Object.keys(aa).join(" / ");throw new O(`Hash '${o}' is unknown or not supported. Must be ${a}`)}let s=aa[o],i=na(s,e,t,{c:r,dkLen:n});return _n.encode(i).substring(1)}return la(fu);})();
|
|
2
|
+
"use strict";var Libp2PCrypto=(()=>{var un=Object.defineProperty;var la=Object.getOwnPropertyDescriptor;var da=Object.getOwnPropertyNames;var pa=Object.prototype.hasOwnProperty;var st=(e,t)=>{for(var r in t)un(e,r,{get:t[r],enumerable:!0})},ma=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of da(t))!pa.call(e,o)&&o!==r&&un(e,o,{get:()=>t[o],enumerable:!(n=la(t,o))||n.enumerable});return e};var ya=e=>ma(un({},"__esModule",{value:!0}),e);var du={};st(du,{hmac:()=>Ir,keys:()=>qo,pbkdf2:()=>Vo,randomBytes:()=>vo});var Ir={};st(Ir,{create:()=>hn});var Ye=class extends Error{constructor(t="An error occurred while signing a message"){super(t),this.name="SigningError"}},Xe=class extends Error{constructor(t="An error occurred while verifying a message"){super(t),this.name="VerificationError"}},_r=class extends Error{constructor(t="Missing Web Crypto API"){super(t),this.name="WebCryptoMissingError"}};var Zo={get(e=globalThis){let t=e.crypto;if(t?.subtle==null)throw new _r("Missing Web Crypto API. The most likely cause of this error is that this page is being accessed from an insecure context (i.e. not HTTPS). For more information and possible resolutions see https://github.com/libp2p/js-libp2p/blob/main/packages/crypto/README.md#web-crypto-api");return t}};var G=Zo;var zo={SHA1:20,SHA256:32,SHA512:64};var ba={SHA1:"SHA-1",SHA256:"SHA-256",SHA512:"SHA-512"},xa=async(e,t)=>{let r=await G.get().subtle.sign({name:"HMAC"},e,t);return new Uint8Array(r,0,r.byteLength)};async function hn(e,t){let r=ba[e],n=await G.get().subtle.importKey("raw",t,{name:"HMAC",hash:{name:r}},!1,["sign"]);return{async digest(o){return xa(n,o)},length:zo[e]}}var qo={};st(qo,{generateEphemeralKeyPair:()=>oa,generateKeyPair:()=>Qf,generateKeyPairFromSeed:()=>tu,keyStretcher:()=>ia,privateKeyFromCryptoKeyPair:()=>uu,privateKeyFromProtobuf:()=>ou,privateKeyFromRaw:()=>su,privateKeyToCryptoKeyPair:()=>fu,privateKeyToProtobuf:()=>iu,publicKeyFromMultihash:()=>nu,publicKeyFromProtobuf:()=>eu,publicKeyFromRaw:()=>ru,publicKeyToProtobuf:()=>ue});var N=class extends Error{static name="InvalidParametersError";constructor(t="Invalid parameters"){super(t),this.name="InvalidParametersError"}},Ee=class extends Error{static name="InvalidPublicKeyError";constructor(t="Invalid public key"){super(t),this.name="InvalidPublicKeyError"}},$e=class extends Error{static name="InvalidPrivateKeyError";constructor(t="Invalid private key"){super(t),this.name="InvalidPrivateKeyError"}};var Yt=class extends Error{static name="UnsupportedKeyTypeError";constructor(t="Unsupported key type"){super(t),this.name="UnsupportedKeyTypeError"}};var yn={};st(yn,{base58btc:()=>tt,base58flickr:()=>va});var Bu=new Uint8Array(0);function Go(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Dt(e){if(e instanceof Uint8Array&&e.constructor.name==="Uint8Array")return e;if(e instanceof ArrayBuffer)return new Uint8Array(e);if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);throw new Error("Unknown type, must be binary type")}function Yo(e){return new TextEncoder().encode(e)}function Xo(e){return new TextDecoder().decode(e)}function ga(e,t){if(e.length>=255)throw new TypeError("Alphabet too long");for(var r=new Uint8Array(256),n=0;n<r.length;n++)r[n]=255;for(var o=0;o<e.length;o++){var s=e.charAt(o),i=s.charCodeAt(0);if(r[i]!==255)throw new TypeError(s+" is ambiguous");r[i]=o}var c=e.length,a=e.charAt(0),u=Math.log(c)/Math.log(256),d=Math.log(256)/Math.log(c);function l(h){if(h instanceof Uint8Array||(ArrayBuffer.isView(h)?h=new Uint8Array(h.buffer,h.byteOffset,h.byteLength):Array.isArray(h)&&(h=Uint8Array.from(h))),!(h instanceof Uint8Array))throw new TypeError("Expected Uint8Array");if(h.length===0)return"";for(var E=0,S=0,b=0,B=h.length;b!==B&&h[b]===0;)b++,E++;for(var g=(B-b)*d+1>>>0,U=new Uint8Array(g);b!==B;){for(var D=h[b],O=0,H=g-1;(D!==0||O<S)&&H!==-1;H--,O++)D+=256*U[H]>>>0,U[H]=D%c>>>0,D=D/c>>>0;if(D!==0)throw new Error("Non-zero carry");S=O,b++}for(var R=g-S;R!==g&&U[R]===0;)R++;for(var w=a.repeat(E);R<g;++R)w+=e.charAt(U[R]);return w}function f(h){if(typeof h!="string")throw new TypeError("Expected String");if(h.length===0)return new Uint8Array;var E=0;if(h[E]!==" "){for(var S=0,b=0;h[E]===a;)S++,E++;for(var B=(h.length-E)*u+1>>>0,g=new Uint8Array(B);h[E];){var U=r[h.charCodeAt(E)];if(U===255)return;for(var D=0,O=B-1;(U!==0||D<b)&&O!==-1;O--,D++)U+=c*g[O]>>>0,g[O]=U%256>>>0,U=U/256>>>0;if(U!==0)throw new Error("Non-zero carry");b=D,E++}if(h[E]!==" "){for(var H=B-b;H!==B&&g[H]===0;)H++;for(var R=new Uint8Array(S+(B-H)),w=S;H!==B;)R[w++]=g[H++];return R}}}function p(h){var E=f(h);if(E)return E;throw new Error(`Non-${t} character`)}return{encode:l,decodeUnsafe:f,decode:p}}var wa=ga,Ea=wa,Wo=Ea;var ln=class{name;prefix;baseEncode;constructor(t,r,n){this.name=t,this.prefix=r,this.baseEncode=n}encode(t){if(t instanceof Uint8Array)return`${this.prefix}${this.baseEncode(t)}`;throw Error("Unknown type, must be binary type")}},dn=class{name;prefix;baseDecode;prefixCodePoint;constructor(t,r,n){this.name=t,this.prefix=r;let o=r.codePointAt(0);if(o===void 0)throw new Error("Invalid prefix character");this.prefixCodePoint=o,this.baseDecode=n}decode(t){if(typeof t=="string"){if(t.codePointAt(0)!==this.prefixCodePoint)throw Error(`Unable to decode multibase string ${JSON.stringify(t)}, ${this.name} decoder only supports inputs prefixed with ${this.prefix}`);return this.baseDecode(t.slice(this.prefix.length))}else throw Error("Can only multibase decode strings")}or(t){return Jo(this,t)}},pn=class{decoders;constructor(t){this.decoders=t}or(t){return Jo(this,t)}decode(t){let r=t[0],n=this.decoders[r];if(n!=null)return n.decode(t);throw RangeError(`Unable to decode multibase string ${JSON.stringify(t)}, only inputs prefixed with ${Object.keys(this.decoders)} are supported`)}};function Jo(e,t){return new pn({...e.decoders??{[e.prefix]:e},...t.decoders??{[t.prefix]:t}})}var mn=class{name;prefix;baseEncode;baseDecode;encoder;decoder;constructor(t,r,n,o){this.name=t,this.prefix=r,this.baseEncode=n,this.baseDecode=o,this.encoder=new ln(t,r,n),this.decoder=new dn(t,r,o)}encode(t){return this.encoder.encode(t)}decode(t){return this.decoder.decode(t)}};function Ae({name:e,prefix:t,encode:r,decode:n}){return new mn(e,t,r,n)}function Xt({name:e,prefix:t,alphabet:r}){let{encode:n,decode:o}=Wo(r,e);return Ae({prefix:t,name:e,encode:n,decode:s=>Dt(o(s))})}function Aa(e,t,r,n){let o=e.length;for(;e[o-1]==="=";)--o;let s=new Uint8Array(o*r/8|0),i=0,c=0,a=0;for(let u=0;u<o;++u){let d=t[e[u]];if(d===void 0)throw new SyntaxError(`Non-${n} character`);c=c<<r|d,i+=r,i>=8&&(i-=8,s[a++]=255&c>>i)}if(i>=r||(255&c<<8-i)!==0)throw new SyntaxError("Unexpected end of data");return s}function Sa(e,t,r){let n=t[t.length-1]==="=",o=(1<<r)-1,s="",i=0,c=0;for(let a=0;a<e.length;++a)for(c=c<<8|e[a],i+=8;i>r;)i-=r,s+=t[o&c>>i];if(i!==0&&(s+=t[o&c<<r-i]),n)for(;(s.length*r&7)!==0;)s+="=";return s}function Ba(e){let t={};for(let r=0;r<e.length;++r)t[e[r]]=r;return t}function W({name:e,prefix:t,bitsPerChar:r,alphabet:n}){let o=Ba(n);return Ae({prefix:t,name:e,encode(s){return Sa(s,n,r)},decode(s){return Aa(s,o,r,e)}})}var tt=Xt({name:"base58btc",prefix:"z",alphabet:"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"}),va=Xt({name:"base58flickr",prefix:"Z",alphabet:"123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"});var bn={};st(bn,{base32:()=>Se,base32hex:()=>La,base32hexpad:()=>Ca,base32hexpadupper:()=>Ta,base32hexupper:()=>Ua,base32pad:()=>Ia,base32padupper:()=>Ka,base32upper:()=>_a,base32z:()=>Da});var Se=W({prefix:"b",name:"base32",alphabet:"abcdefghijklmnopqrstuvwxyz234567",bitsPerChar:5}),_a=W({prefix:"B",name:"base32upper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",bitsPerChar:5}),Ia=W({prefix:"c",name:"base32pad",alphabet:"abcdefghijklmnopqrstuvwxyz234567=",bitsPerChar:5}),Ka=W({prefix:"C",name:"base32padupper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=",bitsPerChar:5}),La=W({prefix:"v",name:"base32hex",alphabet:"0123456789abcdefghijklmnopqrstuv",bitsPerChar:5}),Ua=W({prefix:"V",name:"base32hexupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV",bitsPerChar:5}),Ca=W({prefix:"t",name:"base32hexpad",alphabet:"0123456789abcdefghijklmnopqrstuv=",bitsPerChar:5}),Ta=W({prefix:"T",name:"base32hexpadupper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUV=",bitsPerChar:5}),Da=W({prefix:"h",name:"base32z",alphabet:"ybndrfg8ejkmcpqxot1uwisza345h769",bitsPerChar:5});var xn={};st(xn,{base36:()=>We,base36upper:()=>Ra});var We=Xt({prefix:"k",name:"base36",alphabet:"0123456789abcdefghijklmnopqrstuvwxyz"}),Ra=Xt({prefix:"K",name:"base36upper",alphabet:"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"});var Pa=es,Qo=128,ka=127,Na=~ka,Ha=Math.pow(2,31);function es(e,t,r){t=t||[],r=r||0;for(var n=r;e>=Ha;)t[r++]=e&255|Qo,e/=128;for(;e&Na;)t[r++]=e&255|Qo,e>>>=7;return t[r]=e|0,es.bytes=r-n+1,t}var Oa=gn,Ma=128,ts=127;function gn(e,n){var r=0,n=n||0,o=0,s=n,i,c=e.length;do{if(s>=c)throw gn.bytes=0,new RangeError("Could not decode varint");i=e[s++],r+=o<28?(i&ts)<<o:(i&ts)*Math.pow(2,o),o+=7}while(i>=Ma);return gn.bytes=s-n,r}var qa=Math.pow(2,7),Va=Math.pow(2,14),Fa=Math.pow(2,21),ja=Math.pow(2,28),Za=Math.pow(2,35),za=Math.pow(2,42),Ga=Math.pow(2,49),Ya=Math.pow(2,56),Xa=Math.pow(2,63),$a=function(e){return e<qa?1:e<Va?2:e<Fa?3:e<ja?4:e<Za?5:e<za?6:e<Ga?7:e<Ya?8:e<Xa?9:10},Wa={encode:Pa,decode:Oa,encodingLength:$a},Ja=Wa,Je=Ja;function Qe(e,t=0){return[Je.decode(e,t),Je.decode.bytes]}function Be(e,t,r=0){return Je.encode(e,t,r),t}function ve(e){return Je.encodingLength(e)}function vt(e,t){let r=t.byteLength,n=ve(e),o=n+ve(r),s=new Uint8Array(o+r);return Be(e,s,0),Be(r,s,n),s.set(t,o),new _e(e,r,t,s)}function rs(e){let t=Dt(e),[r,n]=Qe(t),[o,s]=Qe(t.subarray(n)),i=t.subarray(n+s);if(i.byteLength!==o)throw new Error("Incorrect length");return new _e(r,o,i,t)}function ns(e,t){if(e===t)return!0;{let r=t;return e.code===r.code&&e.size===r.size&&r.bytes instanceof Uint8Array&&Go(e.bytes,r.bytes)}}var _e=class{code;size;digest;bytes;constructor(t,r,n,o){this.code=t,this.size=r,this.digest=n,this.bytes=o}};function os(e,t){let{bytes:r,version:n}=e;switch(n){case 0:return tc(r,wn(e),t??tt.encoder);default:return ec(r,wn(e),t??Se.encoder)}}var ss=new WeakMap;function wn(e){let t=ss.get(e);if(t==null){let r=new Map;return ss.set(e,r),r}return t}var St=class e{code;version;multihash;bytes;"/";constructor(t,r,n,o){this.code=r,this.version=t,this.multihash=n,this.bytes=o,this["/"]=o}get asCID(){return this}get byteOffset(){return this.bytes.byteOffset}get byteLength(){return this.bytes.byteLength}toV0(){switch(this.version){case 0:return this;case 1:{let{code:t,multihash:r}=this;if(t!==er)throw new Error("Cannot convert a non dag-pb CID to CIDv0");if(r.code!==rc)throw new Error("Cannot convert non sha2-256 multihash CID to CIDv0");return e.createV0(r)}default:throw Error(`Can not convert CID version ${this.version} to version 0. This is a bug please report`)}}toV1(){switch(this.version){case 0:{let{code:t,digest:r}=this.multihash,n=vt(t,r);return e.createV1(this.code,n)}case 1:return this;default:throw Error(`Can not convert CID version ${this.version} to version 1. This is a bug please report`)}}equals(t){return e.equals(this,t)}static equals(t,r){let n=r;return n!=null&&t.code===n.code&&t.version===n.version&&ns(t.multihash,n.multihash)}toString(t){return os(this,t)}toJSON(){return{"/":os(this)}}link(){return this}[Symbol.toStringTag]="CID";[Symbol.for("nodejs.util.inspect.custom")](){return`CID(${this.toString()})`}static asCID(t){if(t==null)return null;let r=t;if(r instanceof e)return r;if(r["/"]!=null&&r["/"]===r.bytes||r.asCID===r){let{version:n,code:o,multihash:s,bytes:i}=r;return new e(n,o,s,i??is(n,o,s.bytes))}else if(r[nc]===!0){let{version:n,multihash:o,code:s}=r,i=rs(o);return e.create(n,s,i)}else return null}static create(t,r,n){if(typeof r!="number")throw new Error("String codecs are no longer supported");if(!(n.bytes instanceof Uint8Array))throw new Error("Invalid digest");switch(t){case 0:{if(r!==er)throw new Error(`Version 0 CID must use dag-pb (code: ${er}) block encoding`);return new e(t,r,n,n.bytes)}case 1:{let o=is(t,r,n.bytes);return new e(t,r,n,o)}default:throw new Error("Invalid version")}}static createV0(t){return e.create(0,er,t)}static createV1(t,r){return e.create(1,t,r)}static decode(t){let[r,n]=e.decodeFirst(t);if(n.length!==0)throw new Error("Incorrect length");return r}static decodeFirst(t){let r=e.inspectBytes(t),n=r.size-r.multihashSize,o=Dt(t.subarray(n,n+r.multihashSize));if(o.byteLength!==r.multihashSize)throw new Error("Incorrect length");let s=o.subarray(r.multihashSize-r.digestSize),i=new _e(r.multihashCode,r.digestSize,s,o);return[r.version===0?e.createV0(i):e.createV1(r.codec,i),t.subarray(r.size)]}static inspectBytes(t){let r=0,n=()=>{let[l,f]=Qe(t.subarray(r));return r+=f,l},o=n(),s=er;if(o===18?(o=0,r=0):s=n(),o!==0&&o!==1)throw new RangeError(`Invalid CID version ${o}`);let i=r,c=n(),a=n(),u=r+a,d=u-i;return{version:o,codec:s,multihashCode:c,digestSize:a,multihashSize:d,size:u}}static parse(t,r){let[n,o]=Qa(t,r),s=e.decode(o);if(s.version===0&&t[0]!=="Q")throw Error("Version 0 CID string must not include multibase prefix");return wn(s).set(n,t),s}};function Qa(e,t){switch(e[0]){case"Q":{let r=t??tt;return[tt.prefix,r.decode(`${tt.prefix}${e}`)]}case tt.prefix:{let r=t??tt;return[tt.prefix,r.decode(e)]}case Se.prefix:{let r=t??Se;return[Se.prefix,r.decode(e)]}case We.prefix:{let r=t??We;return[We.prefix,r.decode(e)]}default:{if(t==null)throw Error("To parse non base32, base36 or base58btc encoded CID multibase decoder must be provided");return[e[0],t.decode(e)]}}}function tc(e,t,r){let{prefix:n}=r;if(n!==tt.prefix)throw Error(`Cannot string encode V0 in ${r.name} encoding`);let o=t.get(n);if(o==null){let s=r.encode(e).slice(1);return t.set(n,s),s}else return o}function ec(e,t,r){let{prefix:n}=r,o=t.get(n);if(o==null){let s=r.encode(e);return t.set(n,s),s}else return o}var er=112,rc=18;function is(e,t,r){let n=ve(e),o=n+ve(t),s=new Uint8Array(o+r.byteLength);return Be(e,s,0),Be(t,s,n),s.set(r,o),s}var nc=Symbol.for("@ipld/js-cid/CID");var En={};st(En,{identity:()=>ce});var as=0,oc="identity",cs=Dt;function sc(e){return vt(as,cs(e))}var ce={code:as,name:oc,encode:cs,digest:sc};function it(e,t){if(e===t)return!0;if(e.byteLength!==t.byteLength)return!1;for(let r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Rt(e=0){return new Uint8Array(e)}function yt(e=0){return new Uint8Array(e)}function Ut(e,t){t==null&&(t=e.reduce((o,s)=>o+s.length,0));let r=yt(t),n=0;for(let o of e)r.set(o,n),n+=o.length;return r}var us=Symbol.for("@achingbrain/uint8arraylist");function fs(e,t){if(t==null||t<0)throw new RangeError("index is out of bounds");let r=0;for(let n of e){let o=r+n.byteLength;if(t<o)return{buf:n,index:t-r};r=o}throw new RangeError("index is out of bounds")}function Lr(e){return!!e?.[us]}var ct=class e{bufs;length;[us]=!0;constructor(...t){this.bufs=[],this.length=0,t.length>0&&this.appendAll(t)}*[Symbol.iterator](){yield*this.bufs}get byteLength(){return this.length}append(...t){this.appendAll(t)}appendAll(t){let r=0;for(let n of t)if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.push(n);else if(Lr(n))r+=n.byteLength,this.bufs.push(...n.bufs);else throw new Error("Could not append value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}prepend(...t){this.prependAll(t)}prependAll(t){let r=0;for(let n of t.reverse())if(n instanceof Uint8Array)r+=n.byteLength,this.bufs.unshift(n);else if(Lr(n))r+=n.byteLength,this.bufs.unshift(...n.bufs);else throw new Error("Could not prepend value, must be an Uint8Array or a Uint8ArrayList");this.length+=r}get(t){let r=fs(this.bufs,t);return r.buf[r.index]}set(t,r){let n=fs(this.bufs,t);n.buf[n.index]=r}write(t,r=0){if(t instanceof Uint8Array)for(let n=0;n<t.length;n++)this.set(r+n,t[n]);else if(Lr(t))for(let n=0;n<t.length;n++)this.set(r+n,t.get(n));else throw new Error("Could not write value, must be an Uint8Array or a Uint8ArrayList")}consume(t){if(t=Math.trunc(t),!(Number.isNaN(t)||t<=0)){if(t===this.byteLength){this.bufs=[],this.length=0;return}for(;this.bufs.length>0;)if(t>=this.bufs[0].byteLength)t-=this.bufs[0].byteLength,this.length-=this.bufs[0].byteLength,this.bufs.shift();else{this.bufs[0]=this.bufs[0].subarray(t),this.length-=t;break}}}slice(t,r){let{bufs:n,length:o}=this._subList(t,r);return Ut(n,o)}subarray(t,r){let{bufs:n,length:o}=this._subList(t,r);return n.length===1?n[0]:Ut(n,o)}sublist(t,r){let{bufs:n,length:o}=this._subList(t,r),s=new e;return s.length=o,s.bufs=[...n],s}_subList(t,r){if(t=t??0,r=r??this.length,t<0&&(t=this.length+t),r<0&&(r=this.length+r),t<0||r>this.length)throw new RangeError("index is out of bounds");if(t===r)return{bufs:[],length:0};if(t===0&&r===this.length)return{bufs:this.bufs,length:this.length};let n=[],o=0;for(let s=0;s<this.bufs.length;s++){let i=this.bufs[s],c=o,a=c+i.byteLength;if(o=a,t>=a)continue;let u=t>=c&&t<a,d=r>c&&r<=a;if(u&&d){if(t===c&&r===a){n.push(i);break}let l=t-c;n.push(i.subarray(l,l+(r-t)));break}if(u){if(t===0){n.push(i);continue}n.push(i.subarray(t-c));continue}if(d){if(r===a){n.push(i);break}n.push(i.subarray(0,r-c));break}n.push(i)}return{bufs:n,length:r-t}}indexOf(t,r=0){if(!Lr(t)&&!(t instanceof Uint8Array))throw new TypeError('The "value" argument must be a Uint8ArrayList or Uint8Array');let n=t instanceof Uint8Array?t:t.subarray();if(r=Number(r??0),isNaN(r)&&(r=0),r<0&&(r=this.length+r),r<0&&(r=0),t.length===0)return r>this.length?this.length:r;let o=n.byteLength;if(o===0)throw new TypeError("search must be at least 1 byte long");let s=256,i=new Int32Array(s);for(let l=0;l<s;l++)i[l]=-1;for(let l=0;l<o;l++)i[n[l]]=l;let c=i,a=this.byteLength-n.byteLength,u=n.byteLength-1,d;for(let l=r;l<=a;l+=d){d=0;for(let f=u;f>=0;f--){let p=this.get(l+f);if(n[f]!==p){d=Math.max(1,f-c[p]);break}}if(d===0)return l}return-1}getInt8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getInt8(0)}setInt8(t,r){let n=yt(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setInt8(0,r),this.write(n,t)}getInt16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt16(0,r)}setInt16(t,r,n){let o=Rt(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt16(0,r,n),this.write(o,t)}getInt32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getInt32(0,r)}setInt32(t,r,n){let o=Rt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setInt32(0,r,n),this.write(o,t)}getBigInt64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigInt64(0,r)}setBigInt64(t,r,n){let o=Rt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigInt64(0,r,n),this.write(o,t)}getUint8(t){let r=this.subarray(t,t+1);return new DataView(r.buffer,r.byteOffset,r.byteLength).getUint8(0)}setUint8(t,r){let n=yt(1);new DataView(n.buffer,n.byteOffset,n.byteLength).setUint8(0,r),this.write(n,t)}getUint16(t,r){let n=this.subarray(t,t+2);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint16(0,r)}setUint16(t,r,n){let o=Rt(2);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint16(0,r,n),this.write(o,t)}getUint32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getUint32(0,r)}setUint32(t,r,n){let o=Rt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setUint32(0,r,n),this.write(o,t)}getBigUint64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getBigUint64(0,r)}setBigUint64(t,r,n){let o=Rt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setBigUint64(0,r,n),this.write(o,t)}getFloat32(t,r){let n=this.subarray(t,t+4);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat32(0,r)}setFloat32(t,r,n){let o=Rt(4);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat32(0,r,n),this.write(o,t)}getFloat64(t,r){let n=this.subarray(t,t+8);return new DataView(n.buffer,n.byteOffset,n.byteLength).getFloat64(0,r)}setFloat64(t,r,n){let o=Rt(8);new DataView(o.buffer,o.byteOffset,o.byteLength).setFloat64(0,r,n),this.write(o,t)}equals(t){if(t==null||!(t instanceof e)||t.bufs.length!==this.bufs.length)return!1;for(let r=0;r<this.bufs.length;r++)if(!it(this.bufs[r],t.bufs[r]))return!1;return!0}static fromUint8Arrays(t,r){let n=new e;return n.bufs=t,r==null&&(r=t.reduce((o,s)=>o+s.byteLength,0)),n.length=r,n}};var An={};st(An,{base10:()=>ic});var ic=Xt({prefix:"9",name:"base10",alphabet:"0123456789"});var Sn={};st(Sn,{base16:()=>ac,base16upper:()=>cc});var ac=W({prefix:"f",name:"base16",alphabet:"0123456789abcdef",bitsPerChar:4}),cc=W({prefix:"F",name:"base16upper",alphabet:"0123456789ABCDEF",bitsPerChar:4});var Bn={};st(Bn,{base2:()=>fc});var fc=W({prefix:"0",name:"base2",alphabet:"01",bitsPerChar:1});var vn={};st(vn,{base256emoji:()=>pc});var hs=Array.from("\u{1F680}\u{1FA90}\u2604\u{1F6F0}\u{1F30C}\u{1F311}\u{1F312}\u{1F313}\u{1F314}\u{1F315}\u{1F316}\u{1F317}\u{1F318}\u{1F30D}\u{1F30F}\u{1F30E}\u{1F409}\u2600\u{1F4BB}\u{1F5A5}\u{1F4BE}\u{1F4BF}\u{1F602}\u2764\u{1F60D}\u{1F923}\u{1F60A}\u{1F64F}\u{1F495}\u{1F62D}\u{1F618}\u{1F44D}\u{1F605}\u{1F44F}\u{1F601}\u{1F525}\u{1F970}\u{1F494}\u{1F496}\u{1F499}\u{1F622}\u{1F914}\u{1F606}\u{1F644}\u{1F4AA}\u{1F609}\u263A\u{1F44C}\u{1F917}\u{1F49C}\u{1F614}\u{1F60E}\u{1F607}\u{1F339}\u{1F926}\u{1F389}\u{1F49E}\u270C\u2728\u{1F937}\u{1F631}\u{1F60C}\u{1F338}\u{1F64C}\u{1F60B}\u{1F497}\u{1F49A}\u{1F60F}\u{1F49B}\u{1F642}\u{1F493}\u{1F929}\u{1F604}\u{1F600}\u{1F5A4}\u{1F603}\u{1F4AF}\u{1F648}\u{1F447}\u{1F3B6}\u{1F612}\u{1F92D}\u2763\u{1F61C}\u{1F48B}\u{1F440}\u{1F62A}\u{1F611}\u{1F4A5}\u{1F64B}\u{1F61E}\u{1F629}\u{1F621}\u{1F92A}\u{1F44A}\u{1F973}\u{1F625}\u{1F924}\u{1F449}\u{1F483}\u{1F633}\u270B\u{1F61A}\u{1F61D}\u{1F634}\u{1F31F}\u{1F62C}\u{1F643}\u{1F340}\u{1F337}\u{1F63B}\u{1F613}\u2B50\u2705\u{1F97A}\u{1F308}\u{1F608}\u{1F918}\u{1F4A6}\u2714\u{1F623}\u{1F3C3}\u{1F490}\u2639\u{1F38A}\u{1F498}\u{1F620}\u261D\u{1F615}\u{1F33A}\u{1F382}\u{1F33B}\u{1F610}\u{1F595}\u{1F49D}\u{1F64A}\u{1F639}\u{1F5E3}\u{1F4AB}\u{1F480}\u{1F451}\u{1F3B5}\u{1F91E}\u{1F61B}\u{1F534}\u{1F624}\u{1F33C}\u{1F62B}\u26BD\u{1F919}\u2615\u{1F3C6}\u{1F92B}\u{1F448}\u{1F62E}\u{1F646}\u{1F37B}\u{1F343}\u{1F436}\u{1F481}\u{1F632}\u{1F33F}\u{1F9E1}\u{1F381}\u26A1\u{1F31E}\u{1F388}\u274C\u270A\u{1F44B}\u{1F630}\u{1F928}\u{1F636}\u{1F91D}\u{1F6B6}\u{1F4B0}\u{1F353}\u{1F4A2}\u{1F91F}\u{1F641}\u{1F6A8}\u{1F4A8}\u{1F92C}\u2708\u{1F380}\u{1F37A}\u{1F913}\u{1F619}\u{1F49F}\u{1F331}\u{1F616}\u{1F476}\u{1F974}\u25B6\u27A1\u2753\u{1F48E}\u{1F4B8}\u2B07\u{1F628}\u{1F31A}\u{1F98B}\u{1F637}\u{1F57A}\u26A0\u{1F645}\u{1F61F}\u{1F635}\u{1F44E}\u{1F932}\u{1F920}\u{1F927}\u{1F4CC}\u{1F535}\u{1F485}\u{1F9D0}\u{1F43E}\u{1F352}\u{1F617}\u{1F911}\u{1F30A}\u{1F92F}\u{1F437}\u260E\u{1F4A7}\u{1F62F}\u{1F486}\u{1F446}\u{1F3A4}\u{1F647}\u{1F351}\u2744\u{1F334}\u{1F4A3}\u{1F438}\u{1F48C}\u{1F4CD}\u{1F940}\u{1F922}\u{1F445}\u{1F4A1}\u{1F4A9}\u{1F450}\u{1F4F8}\u{1F47B}\u{1F910}\u{1F92E}\u{1F3BC}\u{1F975}\u{1F6A9}\u{1F34E}\u{1F34A}\u{1F47C}\u{1F48D}\u{1F4E3}\u{1F942}"),uc=hs.reduce((e,t,r)=>(e[r]=t,e),[]),hc=hs.reduce((e,t,r)=>{let n=t.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${t}`);return e[n]=r,e},[]);function lc(e){return e.reduce((t,r)=>(t+=uc[r],t),"")}function dc(e){let t=[];for(let r of e){let n=r.codePointAt(0);if(n==null)throw new Error(`Invalid character: ${r}`);let o=hc[n];if(o==null)throw new Error(`Non-base256emoji character: ${r}`);t.push(o)}return new Uint8Array(t)}var pc=Ae({prefix:"\u{1F680}",name:"base256emoji",encode:lc,decode:dc});var In={};st(In,{base64:()=>_n,base64pad:()=>mc,base64url:()=>yc,base64urlpad:()=>bc});var _n=W({prefix:"m",name:"base64",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",bitsPerChar:6}),mc=W({prefix:"M",name:"base64pad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",bitsPerChar:6}),yc=W({prefix:"u",name:"base64url",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_",bitsPerChar:6}),bc=W({prefix:"U",name:"base64urlpad",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_=",bitsPerChar:6});var Kn={};st(Kn,{base8:()=>xc});var xc=W({prefix:"7",name:"base8",alphabet:"01234567",bitsPerChar:3});var Ln={};st(Ln,{identity:()=>gc});var gc=Ae({prefix:"\0",name:"identity",encode:e=>Xo(e),decode:e=>Yo(e)});var ah=new TextEncoder,ch=new TextDecoder;var Tn={};st(Tn,{sha256:()=>Ur,sha512:()=>Ac});function Cn({name:e,code:t,encode:r}){return new Un(e,t,r)}var Un=class{name;code;encode;constructor(t,r,n){this.name=t,this.code=r,this.encode=n}digest(t){if(t instanceof Uint8Array){let r=this.encode(t);return r instanceof Uint8Array?vt(this.code,r):r.then(n=>vt(this.code,n))}else throw Error("Unknown type, must be binary type")}};function ds(e){return async t=>new Uint8Array(await crypto.subtle.digest(e,t))}var Ur=Cn({name:"sha2-256",code:18,encode:ds("SHA-256")}),Ac=Cn({name:"sha2-512",code:19,encode:ds("SHA-512")});var Dn={...Ln,...Bn,...Kn,...An,...Sn,...bn,...xn,...yn,...In,...vn},wh={...Tn,...En};function ms(e,t,r,n){return{name:e,prefix:t,encoder:{name:e,prefix:t,encode:r},decoder:{decode:n}}}var ps=ms("utf8","u",e=>"u"+new TextDecoder("utf8").decode(e),e=>new TextEncoder().encode(e.substring(1))),Rn=ms("ascii","a",e=>{let t="a";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return t},e=>{e=e.substring(1);let t=yt(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}),Sc={utf8:ps,"utf-8":ps,hex:Dn.base16,latin1:Rn,ascii:Rn,binary:Rn,...Dn},Cr=Sc;function Z(e,t="utf8"){let r=Cr[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.decoder.decode(`${r.prefix}${e}`)}function q(e,t="utf8"){let r=Cr[t];if(r==null)throw new Error(`Unsupported encoding "${t}"`);return r.encoder.encode(e).substring(1)}var Bc=parseInt("11111",2),Pn=parseInt("10000000",2),vc=parseInt("01111111",2),ys={0:rr,1:rr,2:_c,3:Lc,4:Uc,5:Kc,6:Ic,16:rr,22:rr,48:rr};function bt(e,t={offset:0}){let r=e[t.offset]&Bc;if(t.offset++,ys[r]!=null)return ys[r](e,t);throw new Error("No decoder for tag "+r)}function nr(e,t){let r=0;if((e[t.offset]&Pn)===Pn){let n=e[t.offset]&vc,o="0x";t.offset++;for(let s=0;s<n;s++,t.offset++)o+=e[t.offset].toString(16).padStart(2,"0");r=parseInt(o,16)}else r=e[t.offset],t.offset++;return r}function rr(e,t){nr(e,t);let r=[];for(;!(t.offset>=e.byteLength);){let n=bt(e,t);if(n===null)break;r.push(n)}return r}function _c(e,t){let r=nr(e,t),n=t.offset,o=t.offset+r,s=[];for(let i=n;i<o;i++)i===n&&e[i]===0||s.push(e[i]);return t.offset+=r,Uint8Array.from(s)}function Ic(e,t){let r=nr(e,t),n=t.offset+r,o=e[t.offset];t.offset++;let s=0,i=0;o<40?(s=0,i=o):o<80?(s=1,i=o-40):(s=2,i=o-80);let c=`${s}.${i}`,a=[];for(;t.offset<n;){let u=e[t.offset];if(t.offset++,a.push(u&127),u<128){a.reverse();let d=0;for(let l=0;l<a.length;l++)d+=a[l]<<l*7;c+=`.${d}`,a=[]}}return c}function Kc(e,t){return t.offset++,null}function Lc(e,t){let r=nr(e,t),n=e[t.offset];t.offset++;let o=e.subarray(t.offset,t.offset+r-1);if(t.offset+=r,n!==0)throw new Error("Unused bits in bit string is unimplemented");return o}function Uc(e,t){let r=nr(e,t),n=e.subarray(t.offset,t.offset+r);return t.offset+=r,n}function Cc(e){let t=e.toString(16);t.length%2===1&&(t="0"+t);let r=new ct;for(let n=0;n<t.length;n+=2)r.append(Uint8Array.from([parseInt(`${t[n]}${t[n+1]}`,16)]));return r}function Tr(e){if(e.byteLength<128)return Uint8Array.from([e.byteLength]);let t=Cc(e.byteLength);return new ct(Uint8Array.from([t.byteLength|Pn]),t)}function ft(e){let t=new ct,r=128;return(e.subarray()[0]&r)===r&&t.append(Uint8Array.from([0])),t.append(e),new ct(Uint8Array.from([2]),Tr(t),t)}function or(e){let t=Uint8Array.from([0]),r=new ct(t,e);return new ct(Uint8Array.from([3]),Tr(r),r)}function bs(e){return new ct(Uint8Array.from([4]),Tr(e),e)}function _t(e,t=48){let r=new ct;for(let n of e)r.append(n);return new ct(Uint8Array.from([t]),Tr(r),r)}var kn="1.2.840.10045.3.1.7",Nn="1.3.132.0.34",Hn="1.3.132.0.35";async function xs(e="P-256"){let t=await crypto.subtle.generateKey({name:"ECDSA",namedCurve:e},!0,["sign","verify"]);return{publicKey:await crypto.subtle.exportKey("jwk",t.publicKey),privateKey:await crypto.subtle.exportKey("jwk",t.privateKey)}}async function gs(e,t,r){let n=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["sign"]);r?.signal?.throwIfAborted();let o=await crypto.subtle.sign({name:"ECDSA",hash:{name:"SHA-256"}},n,t.subarray());return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function ws(e,t,r,n){let o=await crypto.subtle.importKey("jwk",e,{name:"ECDSA",namedCurve:e.crv??"P-256"},!1,["verify"]);n?.signal?.throwIfAborted();let s=await crypto.subtle.verify({name:"ECDSA",hash:{name:"SHA-256"}},o,t,r.subarray());return n?.signal?.throwIfAborted(),s}var Tc=Uint8Array.from([6,8,42,134,72,206,61,3,1,7]),Dc=Uint8Array.from([6,5,43,129,4,0,34]),Rc=Uint8Array.from([6,5,43,129,4,0,35]),Es={ext:!0,kty:"EC",crv:"P-256"},As={ext:!0,kty:"EC",crv:"P-384"},Ss={ext:!0,kty:"EC",crv:"P-521"},Ie=32,Ke=48,Le=66;function Bs(e){let t=bt(e);return On(t)}function On(e){let t=e[1],r=q(t,"base64url"),n=e[2][1][0],o=1,s,i;if(t.byteLength===Ie)return s=q(n.subarray(o,o+Ie),"base64url"),i=q(n.subarray(o+Ie),"base64url"),new Pt({...Es,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===Ke)return s=q(n.subarray(o,o+Ke),"base64url"),i=q(n.subarray(o+Ke),"base64url"),new Pt({...As,key_ops:["sign"],d:r,x:s,y:i});if(t.byteLength===Le)return s=q(n.subarray(o,o+Le),"base64url"),i=q(n.subarray(o+Le),"base64url"),new Pt({...Ss,key_ops:["sign"],d:r,x:s,y:i});throw new N(`Private key length was wrong length, got ${t.byteLength}, expected 32, 48 or 66`)}function Mn(e){let t=bt(e);return qn(t)}function qn(e){let t=e[1][1][0],r=1,n,o;if(t.byteLength===Ie*2+1)return n=q(t.subarray(r,r+Ie),"base64url"),o=q(t.subarray(r+Ie),"base64url"),new fe({...Es,key_ops:["verify"],x:n,y:o});if(t.byteLength===Ke*2+1)return n=q(t.subarray(r,r+Ke),"base64url"),o=q(t.subarray(r+Ke),"base64url"),new fe({...As,key_ops:["verify"],x:n,y:o});if(t.byteLength===Le*2+1)return n=q(t.subarray(r,r+Le),"base64url"),o=q(t.subarray(r+Le),"base64url"),new fe({...Ss,key_ops:["verify"],x:n,y:o});throw new N(`coordinates were wrong length, got ${t.byteLength}, expected 65, 97 or 133`)}function vs(e){return _t([ft(Uint8Array.from([1])),bs(Z(e.d??"","base64url")),_t([Is(e.crv)],160),_t([or(new ct(Uint8Array.from([4]),Z(e.x??"","base64url"),Z(e.y??"","base64url")))],161)]).subarray()}function _s(e){return _t([ft(Uint8Array.from([1])),_t([Is(e.crv)],160),_t([or(new ct(Uint8Array.from([4]),Z(e.x??"","base64url"),Z(e.y??"","base64url")))],161)]).subarray()}function Is(e){if(e==="P-256")return Tc;if(e==="P-384")return Dc;if(e==="P-521")return Rc;throw new N(`Invalid curve ${e}`)}async function Ks(e="P-256"){let t=await xs(e);return new Pt(t.privateKey)}var fe=class{type="ECDSA";jwk;_raw;constructor(t){this.jwk=t}get raw(){return this._raw==null&&(this._raw=_s(this.jwk)),this._raw}toMultihash(){return ce.digest(ue(this))}toCID(){return St.createV1(114,this.toMultihash())}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}async verify(t,r,n){return ws(this.jwk,r,t,n)}},Pt=class{type="ECDSA";jwk;publicKey;_raw;constructor(t){this.jwk=t,this.publicKey=new fe({crv:t.crv,ext:t.ext,key_ops:["verify"],kty:"EC",x:t.x,y:t.y})}get raw(){return this._raw==null&&(this._raw=vs(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}async sign(t,r){return gs(this.jwk,t,r)}};var he=typeof globalThis=="object"&&"crypto"in globalThis?globalThis.crypto:void 0;function Ht(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Nt(e){if(!Number.isSafeInteger(e)||e<0)throw new Error("positive integer expected, got "+e)}function ut(e,...t){if(!Ht(e))throw new Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw new Error("Uint8Array expected of length "+t+", got length="+e.length)}function Ce(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.createHasher");Nt(e.outputLen),Nt(e.blockLen)}function Te(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Us(e,t){ut(e);let r=t.outputLen;if(e.length<r)throw new Error("digestInto() expects output buffer of length at least "+r)}function mt(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function De(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function It(e,t){return e<<32-t|e>>>t}function Dr(e,t){return e<<t|e>>>32-t>>>0}var Cs=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",Pc=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Bt(e){if(ut(e),Cs)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=Pc[e[r]];return t}var kt={_0:48,_9:57,A:65,F:70,a:97,f:102};function Ls(e){if(e>=kt._0&&e<=kt._9)return e-kt._0;if(e>=kt.A&&e<=kt.F)return e-(kt.A-10);if(e>=kt.a&&e<=kt.f)return e-(kt.a-10)}function le(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);if(Cs)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw new Error("hex string expected, got unpadded hex of length "+t);let n=new Uint8Array(r);for(let o=0,s=0;o<r;o++,s+=2){let i=Ls(e.charCodeAt(s)),c=Ls(e.charCodeAt(s+1));if(i===void 0||c===void 0){let a=e[s]+e[s+1];throw new Error('hex string expected, got non-hex character "'+a+'" at index '+s)}n[o]=i*16+c}return n}function Rr(e){if(typeof e!="string")throw new Error("string expected");return new Uint8Array(new TextEncoder().encode(e))}function sr(e){return typeof e=="string"&&(e=Rr(e)),ut(e),e}function Vn(e){return typeof e=="string"&&(e=Rr(e)),ut(e),e}function ht(...e){let t=0;for(let n=0;n<e.length;n++){let o=e[n];ut(o),t+=o.length}let r=new Uint8Array(t);for(let n=0,o=0;n<e.length;n++){let s=e[n];r.set(s,o),o+=s.length}return r}function Ts(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw new Error("options should be object or undefined");return Object.assign(e,t)}var Ue=class{};function ir(e){let t=n=>e().update(sr(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function $t(e=32){if(he&&typeof he.getRandomValues=="function")return he.getRandomValues(new Uint8Array(e));if(he&&typeof he.randomBytes=="function")return Uint8Array.from(he.randomBytes(e));throw new Error("crypto.getRandomValues must be defined")}function kc(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let o=BigInt(32),s=BigInt(4294967295),i=Number(r>>o&s),c=Number(r&s),a=n?4:0,u=n?0:4;e.setUint32(t+a,i,n),e.setUint32(t+u,c,n)}function Pr(e,t,r){return e&t^~e&r}function kr(e,t,r){return e&t^e&r^t&r}var de=class extends Ue{constructor(t,r,n,o){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.buffer=new Uint8Array(t),this.view=De(this.buffer)}update(t){Te(this),t=sr(t),ut(t);let{view:r,buffer:n,blockLen:o}=this,s=t.length;for(let i=0;i<s;){let c=Math.min(o-this.pos,s-i);if(c===o){let a=De(t);for(;o<=s-i;i+=o)this.process(a,i);continue}n.set(t.subarray(i,i+c),this.pos),this.pos+=c,i+=c,this.pos===o&&(this.process(r,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){Te(this),Us(t,this),this.finished=!0;let{buffer:r,view:n,blockLen:o,isLE:s}=this,{pos:i}=this;r[i++]=128,mt(this.buffer.subarray(i)),this.padOffset>o-i&&(this.process(n,0),i=0);for(let l=i;l<o;l++)r[l]=0;kc(n,o-8,BigInt(this.length*8),s),this.process(n,0);let c=De(t),a=this.outputLen;if(a%4)throw new Error("_sha2: outputLen should be aligned to 32bit");let u=a/4,d=this.get();if(u>d.length)throw new Error("_sha2: outputLen bigger than state");for(let l=0;l<u;l++)c.setUint32(4*l,d[l],s)}digest(){let{buffer:t,outputLen:r}=this;this.digestInto(t);let n=t.slice(0,r);return this.destroy(),n}_cloneInto(t){t||(t=new this.constructor),t.set(...this.get());let{blockLen:r,buffer:n,length:o,finished:s,destroyed:i,pos:c}=this;return t.destroyed=i,t.finished=s,t.length=o,t.pos=c,o%r&&t.buffer.set(n),t}clone(){return this._cloneInto()}},Ot=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var nt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Nr=BigInt(4294967295),Ds=BigInt(32);function Nc(e,t=!1){return t?{h:Number(e&Nr),l:Number(e>>Ds&Nr)}:{h:Number(e>>Ds&Nr)|0,l:Number(e&Nr)|0}}function Rs(e,t=!1){let r=e.length,n=new Uint32Array(r),o=new Uint32Array(r);for(let s=0;s<r;s++){let{h:i,l:c}=Nc(e[s],t);[n[s],o[s]]=[i,c]}return[n,o]}var Fn=(e,t,r)=>e>>>r,jn=(e,t,r)=>e<<32-r|t>>>r,pe=(e,t,r)=>e>>>r|t<<32-r,me=(e,t,r)=>e<<32-r|t>>>r,ar=(e,t,r)=>e<<64-r|t>>>r-32,cr=(e,t,r)=>e>>>r-32|t<<64-r;function Ct(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var Ps=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),ks=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,Ns=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Hs=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,Os=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),Ms=(e,t,r,n,o,s)=>t+r+n+o+s+(e/2**32|0)|0;var Oc=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Wt=new Uint32Array(64),Hr=class extends de{constructor(t=32){super(64,t,8,!1),this.A=Ot[0]|0,this.B=Ot[1]|0,this.C=Ot[2]|0,this.D=Ot[3]|0,this.E=Ot[4]|0,this.F=Ot[5]|0,this.G=Ot[6]|0,this.H=Ot[7]|0}get(){let{A:t,B:r,C:n,D:o,E:s,F:i,G:c,H:a}=this;return[t,r,n,o,s,i,c,a]}set(t,r,n,o,s,i,c,a){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0,this.F=i|0,this.G=c|0,this.H=a|0}process(t,r){for(let l=0;l<16;l++,r+=4)Wt[l]=t.getUint32(r,!1);for(let l=16;l<64;l++){let f=Wt[l-15],p=Wt[l-2],h=It(f,7)^It(f,18)^f>>>3,E=It(p,17)^It(p,19)^p>>>10;Wt[l]=E+Wt[l-7]+h+Wt[l-16]|0}let{A:n,B:o,C:s,D:i,E:c,F:a,G:u,H:d}=this;for(let l=0;l<64;l++){let f=It(c,6)^It(c,11)^It(c,25),p=d+f+Pr(c,a,u)+Oc[l]+Wt[l]|0,E=(It(n,2)^It(n,13)^It(n,22))+kr(n,o,s)|0;d=u,u=a,a=c,c=i+p|0,i=s,s=o,o=n,n=p+E|0}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,c=c+this.E|0,a=a+this.F|0,u=u+this.G|0,d=d+this.H|0,this.set(n,o,s,i,c,a,u,d)}roundClean(){mt(Wt)}destroy(){this.set(0,0,0,0,0,0,0,0),mt(this.buffer)}};var qs=Rs(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),Mc=qs[0],qc=qs[1],Jt=new Uint32Array(80),Qt=new Uint32Array(80),Or=class extends de{constructor(t=64){super(128,t,16,!1),this.Ah=nt[0]|0,this.Al=nt[1]|0,this.Bh=nt[2]|0,this.Bl=nt[3]|0,this.Ch=nt[4]|0,this.Cl=nt[5]|0,this.Dh=nt[6]|0,this.Dl=nt[7]|0,this.Eh=nt[8]|0,this.El=nt[9]|0,this.Fh=nt[10]|0,this.Fl=nt[11]|0,this.Gh=nt[12]|0,this.Gl=nt[13]|0,this.Hh=nt[14]|0,this.Hl=nt[15]|0}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:s,Cl:i,Dh:c,Dl:a,Eh:u,El:d,Fh:l,Fl:f,Gh:p,Gl:h,Hh:E,Hl:S}=this;return[t,r,n,o,s,i,c,a,u,d,l,f,p,h,E,S]}set(t,r,n,o,s,i,c,a,u,d,l,f,p,h,E,S){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=s|0,this.Cl=i|0,this.Dh=c|0,this.Dl=a|0,this.Eh=u|0,this.El=d|0,this.Fh=l|0,this.Fl=f|0,this.Gh=p|0,this.Gl=h|0,this.Hh=E|0,this.Hl=S|0}process(t,r){for(let g=0;g<16;g++,r+=4)Jt[g]=t.getUint32(r),Qt[g]=t.getUint32(r+=4);for(let g=16;g<80;g++){let U=Jt[g-15]|0,D=Qt[g-15]|0,O=pe(U,D,1)^pe(U,D,8)^Fn(U,D,7),H=me(U,D,1)^me(U,D,8)^jn(U,D,7),R=Jt[g-2]|0,w=Qt[g-2]|0,K=pe(R,w,19)^ar(R,w,61)^Fn(R,w,6),P=me(R,w,19)^cr(R,w,61)^jn(R,w,6),L=Ns(H,P,Qt[g-7],Qt[g-16]),x=Hs(L,O,K,Jt[g-7],Jt[g-16]);Jt[g]=x|0,Qt[g]=L|0}let{Ah:n,Al:o,Bh:s,Bl:i,Ch:c,Cl:a,Dh:u,Dl:d,Eh:l,El:f,Fh:p,Fl:h,Gh:E,Gl:S,Hh:b,Hl:B}=this;for(let g=0;g<80;g++){let U=pe(l,f,14)^pe(l,f,18)^ar(l,f,41),D=me(l,f,14)^me(l,f,18)^cr(l,f,41),O=l&p^~l&E,H=f&h^~f&S,R=Os(B,D,H,qc[g],Qt[g]),w=Ms(R,b,U,O,Mc[g],Jt[g]),K=R|0,P=pe(n,o,28)^ar(n,o,34)^ar(n,o,39),L=me(n,o,28)^cr(n,o,34)^cr(n,o,39),x=n&s^n&c^s&c,m=o&i^o&a^i&a;b=E|0,B=S|0,E=p|0,S=h|0,p=l|0,h=f|0,{h:l,l:f}=Ct(u|0,d|0,w|0,K|0),u=c|0,d=a|0,c=s|0,a=i|0,s=n|0,i=o|0;let y=Ps(K,L,m);n=ks(y,w,P,x),o=y|0}({h:n,l:o}=Ct(this.Ah|0,this.Al|0,n|0,o|0)),{h:s,l:i}=Ct(this.Bh|0,this.Bl|0,s|0,i|0),{h:c,l:a}=Ct(this.Ch|0,this.Cl|0,c|0,a|0),{h:u,l:d}=Ct(this.Dh|0,this.Dl|0,u|0,d|0),{h:l,l:f}=Ct(this.Eh|0,this.El|0,l|0,f|0),{h:p,l:h}=Ct(this.Fh|0,this.Fl|0,p|0,h|0),{h:E,l:S}=Ct(this.Gh|0,this.Gl|0,E|0,S|0),{h:b,l:B}=Ct(this.Hh|0,this.Hl|0,b|0,B|0),this.set(n,o,s,i,c,a,u,d,l,f,p,h,E,S,b,B)}roundClean(){mt(Jt,Qt)}destroy(){mt(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};var Mr=ir(()=>new Hr);var qr=ir(()=>new Or);var Gn=BigInt(0),zn=BigInt(1);function Mt(e,t=""){if(typeof e!="boolean"){let r=t&&`"${t}"`;throw new Error(r+"expected boolean, got type="+typeof e)}return e}function xt(e,t,r=""){let n=Ht(e),o=e?.length,s=t!==void 0;if(!n||s&&o!==t){let i=r&&`"${r}" `,c=s?` of length ${t}`:"",a=n?`length=${o}`:`type=${typeof e}`;throw new Error(i+"expected Uint8Array"+c+", got "+a)}return e}function fr(e){let t=e.toString(16);return t.length&1?"0"+t:t}function Vs(e){if(typeof e!="string")throw new Error("hex string expected, got "+typeof e);return e===""?Gn:BigInt("0x"+e)}function Re(e){return Vs(Bt(e))}function qt(e){return ut(e),Vs(Bt(Uint8Array.from(e).reverse()))}function Vr(e,t){return le(e.toString(16).padStart(t*2,"0"))}function Yn(e,t){return Vr(e,t).reverse()}function V(e,t,r){let n;if(typeof t=="string")try{n=le(t)}catch(s){throw new Error(e+" must be hex string or Uint8Array, cause: "+s)}else if(Ht(t))n=Uint8Array.from(t);else throw new Error(e+" must be hex string or Uint8Array");let o=n.length;if(typeof r=="number"&&o!==r)throw new Error(e+" of length "+r+" expected, got "+o);return n}function Fs(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return r===0}function Xn(e){return Uint8Array.from(e)}var Zn=e=>typeof e=="bigint"&&Gn<=e;function js(e,t,r){return Zn(e)&&Zn(t)&&Zn(r)&&t<=e&&e<r}function ur(e,t,r,n){if(!js(t,r,n))throw new Error("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function Fr(e){let t;for(t=0;e>Gn;e>>=zn,t+=1);return t}var te=e=>(zn<<BigInt(e))-zn;function Zs(e,t,r){if(typeof e!="number"||e<2)throw new Error("hashLen must be a number");if(typeof t!="number"||t<2)throw new Error("qByteLen must be a number");if(typeof r!="function")throw new Error("hmacFn must be a function");let n=p=>new Uint8Array(p),o=p=>Uint8Array.of(p),s=n(e),i=n(e),c=0,a=()=>{s.fill(1),i.fill(0),c=0},u=(...p)=>r(i,s,...p),d=(p=n(0))=>{i=u(o(0),p),s=u(),p.length!==0&&(i=u(o(1),p),s=u())},l=()=>{if(c++>=1e3)throw new Error("drbg: tried 1000 values");let p=0,h=[];for(;p<t;){s=u();let E=s.slice();h.push(E),p+=s.length}return ht(...h)};return(p,h)=>{a(),d(p);let E;for(;!(E=h(l()));)d();return a(),E}}function ee(e,t,r={}){if(!e||typeof e!="object")throw new Error("expected valid options object");function n(o,s,i){let c=e[o];if(i&&c===void 0)return;let a=typeof c;if(a!==s||c===null)throw new Error(`param "${o}" is invalid: expected ${s}, got ${a}`)}Object.entries(t).forEach(([o,s])=>n(o,s,!1)),Object.entries(r).forEach(([o,s])=>n(o,s,!0))}var $n=()=>{throw new Error("not implemented")};function Pe(e){let t=new WeakMap;return(r,...n)=>{let o=t.get(r);if(o!==void 0)return o;let s=e(r,...n);return t.set(r,s),s}}var lt=BigInt(0),et=BigInt(1),ye=BigInt(2),Ys=BigInt(3),Xs=BigInt(4),$s=BigInt(5),Vc=BigInt(7),Ws=BigInt(8),Fc=BigInt(9),Js=BigInt(16);function J(e,t){let r=e%t;return r>=lt?r:t+r}function z(e,t,r){let n=e;for(;t-- >lt;)n*=n,n%=r;return n}function zs(e,t){if(e===lt)throw new Error("invert: expected non-zero number");if(t<=lt)throw new Error("invert: expected positive modulus, got "+t);let r=J(e,t),n=t,o=lt,s=et,i=et,c=lt;for(;r!==lt;){let u=n/r,d=n%r,l=o-i*u,f=s-c*u;n=r,r=d,o=i,s=c,i=l,c=f}if(n!==et)throw new Error("invert: does not exist");return J(o,t)}function Wn(e,t,r){if(!e.eql(e.sqr(t),r))throw new Error("Cannot find square root")}function Qs(e,t){let r=(e.ORDER+et)/Xs,n=e.pow(t,r);return Wn(e,n,t),n}function jc(e,t){let r=(e.ORDER-$s)/Ws,n=e.mul(t,ye),o=e.pow(n,r),s=e.mul(t,o),i=e.mul(e.mul(s,ye),o),c=e.mul(s,e.sub(i,e.ONE));return Wn(e,c,t),c}function Zc(e){let t=gt(e),r=ti(e),n=r(t,t.neg(t.ONE)),o=r(t,n),s=r(t,t.neg(n)),i=(e+Vc)/Js;return(c,a)=>{let u=c.pow(a,i),d=c.mul(u,n),l=c.mul(u,o),f=c.mul(u,s),p=c.eql(c.sqr(d),a),h=c.eql(c.sqr(l),a);u=c.cmov(u,d,p),d=c.cmov(f,l,h);let E=c.eql(c.sqr(d),a),S=c.cmov(u,d,E);return Wn(c,S,a),S}}function ti(e){if(e<Ys)throw new Error("sqrt is not defined for small field");let t=e-et,r=0;for(;t%ye===lt;)t/=ye,r++;let n=ye,o=gt(e);for(;Gs(o,n)===1;)if(n++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(r===1)return Qs;let s=o.pow(n,t),i=(t+et)/ye;return function(a,u){if(a.is0(u))return u;if(Gs(a,u)!==1)throw new Error("Cannot find square root");let d=r,l=a.mul(a.ONE,s),f=a.pow(u,t),p=a.pow(u,i);for(;!a.eql(f,a.ONE);){if(a.is0(f))return a.ZERO;let h=1,E=a.sqr(f);for(;!a.eql(E,a.ONE);)if(h++,E=a.sqr(E),h===d)throw new Error("Cannot find square root");let S=et<<BigInt(d-h-1),b=a.pow(l,S);d=h,l=a.sqr(b),f=a.mul(f,l),p=a.mul(p,b)}return p}}function zc(e){return e%Xs===Ys?Qs:e%Ws===$s?jc:e%Js===Fc?Zc(e):ti(e)}var Vt=(e,t)=>(J(e,t)&et)===et,Gc=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Jn(e){let t={ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"},r=Gc.reduce((n,o)=>(n[o]="function",n),t);return ee(e,r),e}function Yc(e,t,r){if(r<lt)throw new Error("invalid exponent, negatives unsupported");if(r===lt)return e.ONE;if(r===et)return t;let n=e.ONE,o=t;for(;r>lt;)r&et&&(n=e.mul(n,o)),o=e.sqr(o),r>>=et;return n}function hr(e,t,r=!1){let n=new Array(t.length).fill(r?e.ZERO:void 0),o=t.reduce((i,c,a)=>e.is0(c)?i:(n[a]=i,e.mul(i,c)),e.ONE),s=e.inv(o);return t.reduceRight((i,c,a)=>e.is0(c)?i:(n[a]=e.mul(i,n[a]),e.mul(i,c)),s),n}function Gs(e,t){let r=(e.ORDER-et)/ye,n=e.pow(t,r),o=e.eql(n,e.ONE),s=e.eql(n,e.ZERO),i=e.eql(n,e.neg(e.ONE));if(!o&&!s&&!i)throw new Error("invalid Legendre symbol result");return o?1:s?0:-1}function jr(e,t){t!==void 0&&Nt(t);let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function gt(e,t,r=!1,n={}){if(e<=lt)throw new Error("invalid field: expected ORDER > 0, got "+e);let o,s,i=!1,c;if(typeof t=="object"&&t!=null){if(n.sqrt||r)throw new Error("cannot specify opts in two arguments");let f=t;f.BITS&&(o=f.BITS),f.sqrt&&(s=f.sqrt),typeof f.isLE=="boolean"&&(r=f.isLE),typeof f.modFromBytes=="boolean"&&(i=f.modFromBytes),c=f.allowedLengths}else typeof t=="number"&&(o=t),n.sqrt&&(s=n.sqrt);let{nBitLength:a,nByteLength:u}=jr(e,o);if(u>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");let d,l=Object.freeze({ORDER:e,isLE:r,BITS:a,BYTES:u,MASK:te(a),ZERO:lt,ONE:et,allowedLengths:c,create:f=>J(f,e),isValid:f=>{if(typeof f!="bigint")throw new Error("invalid field element: expected bigint, got "+typeof f);return lt<=f&&f<e},is0:f=>f===lt,isValidNot0:f=>!l.is0(f)&&l.isValid(f),isOdd:f=>(f&et)===et,neg:f=>J(-f,e),eql:(f,p)=>f===p,sqr:f=>J(f*f,e),add:(f,p)=>J(f+p,e),sub:(f,p)=>J(f-p,e),mul:(f,p)=>J(f*p,e),pow:(f,p)=>Yc(l,f,p),div:(f,p)=>J(f*zs(p,e),e),sqrN:f=>f*f,addN:(f,p)=>f+p,subN:(f,p)=>f-p,mulN:(f,p)=>f*p,inv:f=>zs(f,e),sqrt:s||(f=>(d||(d=zc(e)),d(l,f))),toBytes:f=>r?Yn(f,u):Vr(f,u),fromBytes:(f,p=!0)=>{if(c){if(!c.includes(f.length)||f.length>u)throw new Error("Field.fromBytes: expected "+c+" bytes, got "+f.length);let E=new Uint8Array(u);E.set(f,r?0:E.length-f.length),f=E}if(f.length!==u)throw new Error("Field.fromBytes: expected "+u+" bytes, got "+f.length);let h=r?qt(f):Re(f);if(i&&(h=J(h,e)),!p&&!l.isValid(h))throw new Error("invalid field element: outside of range 0..ORDER");return h},invertBatch:f=>hr(l,f),cmov:(f,p,h)=>h?p:f});return Object.freeze(l)}function ei(e){if(typeof e!="bigint")throw new Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function Qn(e){let t=ei(e);return t+Math.ceil(t/2)}function to(e,t,r=!1){let n=e.length,o=ei(t),s=Qn(t);if(n<16||n<s||n>1024)throw new Error("expected "+s+"-1024 bytes of input, got "+n);let i=r?qt(e):Re(e),c=J(i,t-et)+et;return r?Yn(c,o):Vr(c,o)}var ke=BigInt(0),be=BigInt(1);function lr(e,t){let r=t.negate();return e?r:t}function Ft(e,t){let r=hr(e.Fp,t.map(n=>n.Z));return t.map((n,o)=>e.fromAffine(n.toAffine(r[o])))}function si(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw new Error("invalid window size, expected [1.."+t+"], got W="+e)}function eo(e,t){si(e,t);let r=Math.ceil(t/e)+1,n=2**(e-1),o=2**e,s=te(e),i=BigInt(e);return{windows:r,windowSize:n,mask:s,maxNumber:o,shiftBy:i}}function ri(e,t,r){let{windowSize:n,mask:o,maxNumber:s,shiftBy:i}=r,c=Number(e&o),a=e>>i;c>n&&(c-=s,a+=be);let u=t*n,d=u+Math.abs(c)-1,l=c===0,f=c<0,p=t%2!==0;return{nextN:a,offset:d,isZero:l,isNeg:f,isNegF:p,offsetF:u}}function Xc(e,t){if(!Array.isArray(e))throw new Error("array expected");e.forEach((r,n)=>{if(!(r instanceof t))throw new Error("invalid point at index "+n)})}function $c(e,t){if(!Array.isArray(e))throw new Error("array of scalars expected");e.forEach((r,n)=>{if(!t.isValid(r))throw new Error("invalid scalar at index "+n)})}var ro=new WeakMap,ii=new WeakMap;function no(e){return ii.get(e)||1}function ni(e){if(e!==ke)throw new Error("invalid wNAF")}var Ne=class{constructor(t,r){this.BASE=t.BASE,this.ZERO=t.ZERO,this.Fn=t.Fn,this.bits=r}_unsafeLadder(t,r,n=this.ZERO){let o=t;for(;r>ke;)r&be&&(n=n.add(o)),o=o.double(),r>>=be;return n}precomputeWindow(t,r){let{windows:n,windowSize:o}=eo(r,this.bits),s=[],i=t,c=i;for(let a=0;a<n;a++){c=i,s.push(c);for(let u=1;u<o;u++)c=c.add(i),s.push(c);i=c.double()}return s}wNAF(t,r,n){if(!this.Fn.isValid(n))throw new Error("invalid scalar");let o=this.ZERO,s=this.BASE,i=eo(t,this.bits);for(let c=0;c<i.windows;c++){let{nextN:a,offset:u,isZero:d,isNeg:l,isNegF:f,offsetF:p}=ri(n,c,i);n=a,d?s=s.add(lr(f,r[p])):o=o.add(lr(l,r[u]))}return ni(n),{p:o,f:s}}wNAFUnsafe(t,r,n,o=this.ZERO){let s=eo(t,this.bits);for(let i=0;i<s.windows&&n!==ke;i++){let{nextN:c,offset:a,isZero:u,isNeg:d}=ri(n,i,s);if(n=c,!u){let l=r[a];o=o.add(d?l.negate():l)}}return ni(n),o}getPrecomputes(t,r,n){let o=ro.get(r);return o||(o=this.precomputeWindow(r,t),t!==1&&(typeof n=="function"&&(o=n(o)),ro.set(r,o))),o}cached(t,r,n){let o=no(t);return this.wNAF(o,this.getPrecomputes(o,t,n),r)}unsafe(t,r,n,o){let s=no(t);return s===1?this._unsafeLadder(t,r,o):this.wNAFUnsafe(s,this.getPrecomputes(s,t,n),r,o)}createCache(t,r){si(r,this.bits),ii.set(t,r),ro.delete(t)}hasCache(t){return no(t)!==1}};function ai(e,t,r,n){let o=t,s=e.ZERO,i=e.ZERO;for(;r>ke||n>ke;)r&be&&(s=s.add(o)),n&be&&(i=i.add(o)),o=o.double(),r>>=be,n>>=be;return{p1:s,p2:i}}function He(e,t,r,n){Xc(r,e),$c(n,t);let o=r.length,s=n.length;if(o!==s)throw new Error("arrays of points and scalars must have equal length");let i=e.ZERO,c=Fr(BigInt(o)),a=1;c>12?a=c-3:c>4?a=c-2:c>0&&(a=2);let u=te(a),d=new Array(Number(u)+1).fill(i),l=Math.floor((t.BITS-1)/a)*a,f=i;for(let p=l;p>=0;p-=a){d.fill(i);for(let E=0;E<s;E++){let S=n[E],b=Number(S>>BigInt(p)&u);d[b]=d[b].add(r[E])}let h=i;for(let E=d.length-1,S=i;E>0;E--)S=S.add(d[E]),h=h.add(S);if(f=f.add(h),p!==0)for(let E=0;E<a;E++)f=f.double()}return f}function oi(e,t,r){if(t){if(t.ORDER!==e)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return Jn(t),t}else return gt(e,{isLE:r})}function Zr(e,t,r={},n){if(n===void 0&&(n=e==="edwards"),!t||typeof t!="object")throw new Error(`expected valid ${e} CURVE object`);for(let a of["p","n","h"]){let u=t[a];if(!(typeof u=="bigint"&&u>ke))throw new Error(`CURVE.${a} must be positive bigint`)}let o=oi(t.p,r.Fp,n),s=oi(t.n,r.Fn,n),c=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let a of c)if(!o.isValid(t[a]))throw new Error(`CURVE.${a} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:o,Fn:s}}var re=BigInt(0),rt=BigInt(1),oo=BigInt(2),Wc=BigInt(8);function Jc(e,t,r,n){let o=e.sqr(r),s=e.sqr(n),i=e.add(e.mul(t.a,o),s),c=e.add(e.ONE,e.mul(t.d,e.mul(o,s)));return e.eql(i,c)}function Qc(e,t={}){let r=Zr("edwards",e,t,t.FpFnLE),{Fp:n,Fn:o}=r,s=r.CURVE,{h:i}=s;ee(t,{},{uvRatio:"function"});let c=oo<<BigInt(o.BYTES*8)-rt,a=S=>n.create(S),u=t.uvRatio||((S,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(S,b))}}catch{return{isValid:!1,value:re}}});if(!Jc(n,s,s.Gx,s.Gy))throw new Error("bad curve params: generator point");function d(S,b,B=!1){let g=B?rt:re;return ur("coordinate "+S,b,g,c),b}function l(S){if(!(S instanceof h))throw new Error("ExtendedPoint expected")}let f=Pe((S,b)=>{let{X:B,Y:g,Z:U}=S,D=S.is0();b==null&&(b=D?Wc:n.inv(U));let O=a(B*b),H=a(g*b),R=n.mul(U,b);if(D)return{x:re,y:rt};if(R!==rt)throw new Error("invZ was invalid");return{x:O,y:H}}),p=Pe(S=>{let{a:b,d:B}=s;if(S.is0())throw new Error("bad point: ZERO");let{X:g,Y:U,Z:D,T:O}=S,H=a(g*g),R=a(U*U),w=a(D*D),K=a(w*w),P=a(H*b),L=a(w*a(P+R)),x=a(K+a(B*a(H*R)));if(L!==x)throw new Error("bad point: equation left != right (1)");let m=a(g*U),y=a(D*O);if(m!==y)throw new Error("bad point: equation left != right (2)");return!0});class h{constructor(b,B,g,U){this.X=d("x",b),this.Y=d("y",B),this.Z=d("z",g,!0),this.T=d("t",U),Object.freeze(this)}static CURVE(){return s}static fromAffine(b){if(b instanceof h)throw new Error("extended point not allowed");let{x:B,y:g}=b||{};return d("x",B),d("y",g),new h(B,g,rt,a(B*g))}static fromBytes(b,B=!1){let g=n.BYTES,{a:U,d:D}=s;b=Xn(xt(b,g,"point")),Mt(B,"zip215");let O=Xn(b),H=b[g-1];O[g-1]=H&-129;let R=qt(O),w=B?c:n.ORDER;ur("point.y",R,re,w);let K=a(R*R),P=a(K-rt),L=a(D*K-U),{isValid:x,value:m}=u(P,L);if(!x)throw new Error("bad point: invalid y coordinate");let y=(m&rt)===rt,A=(H&128)!==0;if(!B&&m===re&&A)throw new Error("bad point: x=0 and x_0=1");return A!==y&&(m=a(-m)),h.fromAffine({x:m,y:R})}static fromHex(b,B=!1){return h.fromBytes(V("point",b),B)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(b=8,B=!0){return E.createCache(this,b),B||this.multiply(oo),this}assertValidity(){p(this)}equals(b){l(b);let{X:B,Y:g,Z:U}=this,{X:D,Y:O,Z:H}=b,R=a(B*H),w=a(D*U),K=a(g*H),P=a(O*U);return R===w&&K===P}is0(){return this.equals(h.ZERO)}negate(){return new h(a(-this.X),this.Y,this.Z,a(-this.T))}double(){let{a:b}=s,{X:B,Y:g,Z:U}=this,D=a(B*B),O=a(g*g),H=a(oo*a(U*U)),R=a(b*D),w=B+g,K=a(a(w*w)-D-O),P=R+O,L=P-H,x=R-O,m=a(K*L),y=a(P*x),A=a(K*x),v=a(L*P);return new h(m,y,v,A)}add(b){l(b);let{a:B,d:g}=s,{X:U,Y:D,Z:O,T:H}=this,{X:R,Y:w,Z:K,T:P}=b,L=a(U*R),x=a(D*w),m=a(H*g*P),y=a(O*K),A=a((U+D)*(R+w)-L-x),v=y-m,C=y+m,_=a(x-B*L),I=a(A*v),T=a(C*_),k=a(A*_),Y=a(v*C);return new h(I,T,Y,k)}subtract(b){return this.add(b.negate())}multiply(b){if(!o.isValidNot0(b))throw new Error("invalid scalar: expected 1 <= sc < curve.n");let{p:B,f:g}=E.cached(this,b,U=>Ft(h,U));return Ft(h,[B,g])[0]}multiplyUnsafe(b,B=h.ZERO){if(!o.isValid(b))throw new Error("invalid scalar: expected 0 <= sc < curve.n");return b===re?h.ZERO:this.is0()||b===rt?this:E.unsafe(this,b,g=>Ft(h,g),B)}isSmallOrder(){return this.multiplyUnsafe(i).is0()}isTorsionFree(){return E.unsafe(this,s.n).is0()}toAffine(b){return f(this,b)}clearCofactor(){return i===rt?this:this.multiplyUnsafe(i)}toBytes(){let{x:b,y:B}=this.toAffine(),g=n.toBytes(B);return g[g.length-1]|=b&rt?128:0,g}toHex(){return Bt(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get ex(){return this.X}get ey(){return this.Y}get ez(){return this.Z}get et(){return this.T}static normalizeZ(b){return Ft(h,b)}static msm(b,B){return He(h,o,b,B)}_setWindowSize(b){this.precompute(b)}toRawBytes(){return this.toBytes()}}h.BASE=new h(s.Gx,s.Gy,rt,a(s.Gx*s.Gy)),h.ZERO=new h(re,rt,rt,re),h.Fp=n,h.Fn=o;let E=new Ne(h,o.BITS);return h.BASE.precompute(8),h}var zr=class{constructor(t){this.ep=t}static fromBytes(t){$n()}static fromHex(t){$n()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(t){return this.ep.toAffine(t)}toHex(){return Bt(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(t){return this.assertSame(t),this.init(this.ep.add(t.ep))}subtract(t){return this.assertSame(t),this.init(this.ep.subtract(t.ep))}multiply(t){return this.init(this.ep.multiply(t))}multiplyUnsafe(t){return this.init(this.ep.multiplyUnsafe(t))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(t,r){return this.init(this.ep.precompute(t,r))}toRawBytes(){return this.toBytes()}};function tf(e,t,r={}){if(typeof t!="function")throw new Error('"hash" function param is required');ee(r,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",mapToCurve:"function"});let{prehash:n}=r,{BASE:o,Fp:s,Fn:i}=e,c=r.randomBytes||$t,a=r.adjustScalarBytes||(w=>w),u=r.domain||((w,K,P)=>{if(Mt(P,"phflag"),K.length||P)throw new Error("Contexts/pre-hash are not supported");return w});function d(w){return i.create(qt(w))}function l(w){let K=g.secretKey;w=V("private key",w,K);let P=V("hashed private key",t(w),2*K),L=a(P.slice(0,K)),x=P.slice(K,2*K),m=d(L);return{head:L,prefix:x,scalar:m}}function f(w){let{head:K,prefix:P,scalar:L}=l(w),x=o.multiply(L),m=x.toBytes();return{head:K,prefix:P,scalar:L,point:x,pointBytes:m}}function p(w){return f(w).pointBytes}function h(w=Uint8Array.of(),...K){let P=ht(...K);return d(t(u(P,V("context",w),!!n)))}function E(w,K,P={}){w=V("message",w),n&&(w=n(w));let{prefix:L,scalar:x,pointBytes:m}=f(K),y=h(P.context,L,w),A=o.multiply(y).toBytes(),v=h(P.context,A,m,w),C=i.create(y+v*x);if(!i.isValid(C))throw new Error("sign failed: invalid s");let _=ht(A,i.toBytes(C));return xt(_,g.signature,"result")}let S={zip215:!0};function b(w,K,P,L=S){let{context:x,zip215:m}=L,y=g.signature;w=V("signature",w,y),K=V("message",K),P=V("publicKey",P,g.publicKey),m!==void 0&&Mt(m,"zip215"),n&&(K=n(K));let A=y/2,v=w.subarray(0,A),C=qt(w.subarray(A,y)),_,I,T;try{_=e.fromBytes(P,m),I=e.fromBytes(v,m),T=o.multiplyUnsafe(C)}catch{return!1}if(!m&&_.isSmallOrder())return!1;let k=h(x,I.toBytes(),_.toBytes(),K);return I.add(_.multiplyUnsafe(k)).subtract(T).clearCofactor().is0()}let B=s.BYTES,g={secretKey:B,publicKey:B,signature:2*B,seed:B};function U(w=c(g.seed)){return xt(w,g.seed,"seed")}function D(w){let K=R.randomSecretKey(w);return{secretKey:K,publicKey:p(K)}}function O(w){return Ht(w)&&w.length===i.BYTES}function H(w,K){try{return!!e.fromBytes(w,K)}catch{return!1}}let R={getExtendedPublicKey:f,randomSecretKey:U,isValidSecretKey:O,isValidPublicKey:H,toMontgomery(w){let{y:K}=e.fromBytes(w),P=g.publicKey,L=P===32;if(!L&&P!==57)throw new Error("only defined for 25519 and 448");let x=L?s.div(rt+K,rt-K):s.div(K-rt,K+rt);return s.toBytes(x)},toMontgomeryPriv(w){let K=g.secretKey;xt(w,K);let P=t(w.subarray(0,K));return a(P).subarray(0,K)},randomPrivateKey:U,precompute(w=8,K=e.BASE){return K.precompute(w,!1)}};return Object.freeze({keygen:D,getPublicKey:p,sign:E,verify:b,utils:R,Point:e,lengths:g})}function ef(e){let t={a:e.a,d:e.d,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp,n=gt(t.n,e.nBitLength,!0),o={Fp:r,Fn:n,uvRatio:e.uvRatio},s={randomBytes:e.randomBytes,adjustScalarBytes:e.adjustScalarBytes,domain:e.domain,prehash:e.prehash,mapToCurve:e.mapToCurve};return{CURVE:t,curveOpts:o,hash:e.hash,eddsaOpts:s}}function rf(e,t){let r=t.Point;return Object.assign({},t,{ExtendedPoint:r,CURVE:e,nBitLength:r.Fn.BITS,nByteLength:r.Fn.BYTES})}function ci(e){let{CURVE:t,curveOpts:r,hash:n,eddsaOpts:o}=ef(e),s=Qc(t,r),i=tf(s,n,o);return rf(e,i)}var nf=BigInt(0),jt=BigInt(1),fi=BigInt(2),vl=BigInt(3),of=BigInt(5),sf=BigInt(8),Oe=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),dr={p:Oe,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:sf,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")};function af(e){let t=BigInt(10),r=BigInt(20),n=BigInt(40),o=BigInt(80),s=Oe,c=e*e%s*e%s,a=z(c,fi,s)*c%s,u=z(a,jt,s)*e%s,d=z(u,of,s)*u%s,l=z(d,t,s)*d%s,f=z(l,r,s)*l%s,p=z(f,n,s)*f%s,h=z(p,o,s)*p%s,E=z(h,o,s)*p%s,S=z(E,t,s)*d%s;return{pow_p_5_8:z(S,fi,s)*e%s,b2:c}}function cf(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var so=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function co(e,t){let r=Oe,n=J(t*t*t,r),o=J(n*n*t,r),s=af(e*o).pow_p_5_8,i=J(e*n*s,r),c=J(t*i*i,r),a=i,u=J(i*so,r),d=c===e,l=c===J(-e,r),f=c===J(-e*so,r);return d&&(i=a),(l||f)&&(i=u),Vt(i,r)&&(i=J(-i,r)),{isValid:d||l,value:i}}var ne=gt(dr.p,{isLE:!0}),ff=gt(dr.n,{isLE:!0}),uf={...dr,Fp:ne,hash:qr,adjustScalarBytes:cf,uvRatio:co},wt=ci(uf);var io=so,hf=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),lf=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),df=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),pf=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),ui=e=>co(jt,e),mf=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),ao=e=>wt.Point.Fp.create(qt(e)&mf);function hi(e){let{d:t}=dr,r=Oe,n=b=>ne.create(b),o=n(io*e*e),s=n((o+jt)*df),i=BigInt(-1),c=n((i-t*o)*n(o+t)),{isValid:a,value:u}=co(s,c),d=n(u*e);Vt(d,r)||(d=n(-d)),a||(u=d),a||(i=o);let l=n(i*(o-jt)*pf-c),f=u*u,p=n((u+u)*c),h=n(l*hf),E=n(jt-f),S=n(jt+f);return new wt.Point(n(p*S),n(E*h),n(h*S),n(p*E))}function yf(e){ut(e,64);let t=ao(e.subarray(0,32)),r=hi(t),n=ao(e.subarray(32,64)),o=hi(n);return new Zt(r.add(o))}var Zt=class e extends zr{constructor(t){super(t)}static fromAffine(t){return new e(wt.Point.fromAffine(t))}assertSame(t){if(!(t instanceof e))throw new Error("RistrettoPoint expected")}init(t){return new e(t)}static hashToCurve(t){return yf(V("ristrettoHash",t,64))}static fromBytes(t){ut(t,32);let{a:r,d:n}=dr,o=Oe,s=U=>ne.create(U),i=ao(t);if(!Fs(ne.toBytes(i),t)||Vt(i,o))throw new Error("invalid ristretto255 encoding 1");let c=s(i*i),a=s(jt+r*c),u=s(jt-r*c),d=s(a*a),l=s(u*u),f=s(r*n*d-l),{isValid:p,value:h}=ui(s(f*l)),E=s(h*u),S=s(h*E*f),b=s((i+i)*E);Vt(b,o)&&(b=s(-b));let B=s(a*S),g=s(b*B);if(!p||Vt(g,o)||B===nf)throw new Error("invalid ristretto255 encoding 2");return new e(new wt.Point(b,B,jt,g))}static fromHex(t){return e.fromBytes(V("ristrettoHex",t,32))}static msm(t,r){return He(e,wt.Point.Fn,t,r)}toBytes(){let{X:t,Y:r,Z:n,T:o}=this.ep,s=Oe,i=S=>ne.create(S),c=i(i(n+r)*i(n-r)),a=i(t*r),u=i(a*a),{value:d}=ui(i(c*u)),l=i(d*c),f=i(d*a),p=i(l*f*o),h;if(Vt(o*p,s)){let S=i(r*io),b=i(t*io);t=S,r=b,h=i(l*lf)}else h=f;Vt(t*p,s)&&(r=i(-r));let E=i((n-r)*h);return Vt(E,s)&&(E=i(-E)),ne.toBytes(E)}equals(t){this.assertSame(t);let{X:r,Y:n}=this.ep,{X:o,Y:s}=t.ep,i=u=>ne.create(u),c=i(r*s)===i(n*o),a=i(n*s)===i(r*o);return c||a}is0(){return this.equals(e.ZERO)}};Zt.BASE=new Zt(wt.Point.BASE);Zt.ZERO=new Zt(wt.Point.ZERO);Zt.Fp=ne;Zt.Fn=ff;var oe=32,Et=64,Gr=32;var Me,li=(async()=>{try{return await G.get().subtle.generateKey({name:"Ed25519"},!0,["sign","verify"]),!0}catch{return!1}})();function di(){let e=wt.utils.randomPrivateKey(),t=wt.getPublicKey(e);return{privateKey:bi(e,t),publicKey:t}}function pi(e){if(e.length!==Gr)throw new TypeError('"seed" must be 32 bytes in length.');if(!(e instanceof Uint8Array))throw new TypeError('"seed" must be a node.js Buffer, or Uint8Array.');let t=e,r=wt.getPublicKey(t);return{privateKey:bi(t,r),publicKey:r}}async function bf(e,t){let r;e.length===Et?r=e.subarray(0,32):r=e;let n={crv:"Ed25519",kty:"OKP",x:q(e.subarray(32),"base64url"),d:q(r,"base64url"),ext:!0,key_ops:["sign"]},o=await G.get().subtle.importKey("jwk",n,{name:"Ed25519"},!0,["sign"]),s=await G.get().subtle.sign({name:"Ed25519"},o,t instanceof Uint8Array?t:t.subarray());return new Uint8Array(s,0,s.byteLength)}function xf(e,t){let r=e.subarray(0,Gr);return wt.sign(t instanceof Uint8Array?t:t.subarray(),r)}async function mi(e,t){return Me==null&&(Me=await li),Me?bf(e,t):xf(e,t)}async function gf(e,t,r){if(e.buffer instanceof ArrayBuffer){let n=await G.get().subtle.importKey("raw",e.buffer,{name:"Ed25519"},!1,["verify"]);return await G.get().subtle.verify({name:"Ed25519"},n,t,r instanceof Uint8Array?r:r.subarray())}throw new TypeError("WebCrypto does not support SharedArrayBuffer for Ed25519 keys")}function wf(e,t,r){return wt.verify(t,r instanceof Uint8Array?r:r.subarray(),e)}async function yi(e,t,r){return Me==null&&(Me=await li),Me?gf(e,t,r):wf(e,t,r)}function bi(e,t){let r=new Uint8Array(Et);for(let n=0;n<Gr;n++)r[n]=e[n],r[Gr+n]=t[n];return r}function fo(e,t){let r=Z(e,"base64urlpad");if(t!=null){if(r.length>t)throw new Error("byte array longer than desired length");r=Ut([new Uint8Array(t-r.length),r])}return r}function qe(e){return e==null?!1:typeof e.then=="function"&&typeof e.catch=="function"&&typeof e.finally=="function"}var pr=class{type="Ed25519";raw;constructor(t){this.raw=Ve(t,oe)}toMultihash(){return ce.digest(ue(this))}toCID(){return St.createV1(114,this.toMultihash())}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}verify(t,r,n){n?.signal?.throwIfAborted();let o=yi(this.raw,r,t);return qe(o)?o.then(s=>(n?.signal?.throwIfAborted(),s)):o}},xe=class{type="Ed25519";raw;publicKey;constructor(t,r){this.raw=Ve(t,Et),this.publicKey=new pr(r)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}sign(t,r){r?.signal?.throwIfAborted();let n=mi(this.raw,t);return qe(n)?n.then(o=>(r?.signal?.throwIfAborted(),o)):(r?.signal?.throwIfAborted(),n)}};function uo(e){if(e.length>Et){e=Ve(e,Et+oe);let n=e.subarray(0,Et),o=e.subarray(Et,e.length);return new xe(n,o)}e=Ve(e,Et);let t=e.subarray(0,Et),r=e.subarray(oe);return new xe(t,r)}function Yr(e){return e=Ve(e,oe),new pr(e)}async function gi(){let{privateKey:e,publicKey:t}=di();return new xe(e,t)}async function wi(e){let{privateKey:t,publicKey:r}=pi(e);return new xe(t,r)}function Ve(e,t){if(e=Uint8Array.from(e??[]),e.length!==t)throw new N(`Key must be a Uint8Array of length ${t}, got ${e.length}`);return e}var Ef=Math.pow(2,7),Af=Math.pow(2,14),Sf=Math.pow(2,21),Ei=Math.pow(2,28),Ai=Math.pow(2,35),Si=Math.pow(2,42),Bi=Math.pow(2,49),dt=128,se=127;function mr(e){if(e<Ef)return 1;if(e<Af)return 2;if(e<Sf)return 3;if(e<Ei)return 4;if(e<Ai)return 5;if(e<Si)return 6;if(e<Bi)return 7;if(Number.MAX_SAFE_INTEGER!=null&&e>Number.MAX_SAFE_INTEGER)throw new RangeError("Could not encode varint");return 8}function vi(e,t,r=0){switch(mr(e)){case 8:t[r++]=e&255|dt,e/=128;case 7:t[r++]=e&255|dt,e/=128;case 6:t[r++]=e&255|dt,e/=128;case 5:t[r++]=e&255|dt,e/=128;case 4:t[r++]=e&255|dt,e>>>=7;case 3:t[r++]=e&255|dt,e>>>=7;case 2:t[r++]=e&255|dt,e>>>=7;case 1:{t[r++]=e&255,e>>>=7;break}default:throw new Error("unreachable")}return t}function _i(e,t){let r=e[t],n=0;if(n+=r&se,r<dt||(r=e[t+1],n+=(r&se)<<7,r<dt)||(r=e[t+2],n+=(r&se)<<14,r<dt)||(r=e[t+3],n+=(r&se)<<21,r<dt)||(r=e[t+4],n+=(r&se)*Ei,r<dt)||(r=e[t+5],n+=(r&se)*Ai,r<dt)||(r=e[t+6],n+=(r&se)*Si,r<dt)||(r=e[t+7],n+=(r&se)*Bi,r<dt))return n;throw new RangeError("Could not decode varint")}var ho=new Float32Array([-0]),ie=new Uint8Array(ho.buffer);function Ii(e,t,r){ho[0]=e,t[r]=ie[0],t[r+1]=ie[1],t[r+2]=ie[2],t[r+3]=ie[3]}function Ki(e,t){return ie[0]=e[t],ie[1]=e[t+1],ie[2]=e[t+2],ie[3]=e[t+3],ho[0]}var lo=new Float64Array([-0]),at=new Uint8Array(lo.buffer);function Li(e,t,r){lo[0]=e,t[r]=at[0],t[r+1]=at[1],t[r+2]=at[2],t[r+3]=at[3],t[r+4]=at[4],t[r+5]=at[5],t[r+6]=at[6],t[r+7]=at[7]}function Ui(e,t){return at[0]=e[t],at[1]=e[t+1],at[2]=e[t+2],at[3]=e[t+3],at[4]=e[t+4],at[5]=e[t+5],at[6]=e[t+6],at[7]=e[t+7],lo[0]}var Bf=BigInt(Number.MAX_SAFE_INTEGER),vf=BigInt(Number.MIN_SAFE_INTEGER),At=class e{lo;hi;constructor(t,r){this.lo=t|0,this.hi=r|0}toNumber(t=!1){if(!t&&this.hi>>>31>0){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(r+n*4294967296)}return this.lo+this.hi*4294967296}toBigInt(t=!1){if(t)return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n);if(this.hi>>>31){let r=~this.lo+1>>>0,n=~this.hi>>>0;return r===0&&(n=n+1>>>0),-(BigInt(r)+(BigInt(n)<<32n))}return BigInt(this.lo>>>0)+(BigInt(this.hi>>>0)<<32n)}toString(t=!1){return this.toBigInt(t).toString()}zzEncode(){let t=this.hi>>31;return this.hi=((this.hi<<1|this.lo>>>31)^t)>>>0,this.lo=(this.lo<<1^t)>>>0,this}zzDecode(){let t=-(this.lo&1);return this.lo=((this.lo>>>1|this.hi<<31)^t)>>>0,this.hi=(this.hi>>>1^t)>>>0,this}length(){let t=this.lo,r=(this.lo>>>28|this.hi<<4)>>>0,n=this.hi>>>24;return n===0?r===0?t<16384?t<128?1:2:t<2097152?3:4:r<16384?r<128?5:6:r<2097152?7:8:n<128?9:10}static fromBigInt(t){if(t===0n)return ge;if(t<Bf&&t>vf)return this.fromNumber(Number(t));let r=t<0n;r&&(t=-t);let n=t>>32n,o=t-(n<<32n);return r&&(n=~n|0n,o=~o|0n,++o>Ci&&(o=0n,++n>Ci&&(n=0n))),new e(Number(o),Number(n))}static fromNumber(t){if(t===0)return ge;let r=t<0;r&&(t=-t);let n=t>>>0,o=(t-n)/4294967296>>>0;return r&&(o=~o>>>0,n=~n>>>0,++n>4294967295&&(n=0,++o>4294967295&&(o=0))),new e(n,o)}static from(t){return typeof t=="number"?e.fromNumber(t):typeof t=="bigint"?e.fromBigInt(t):typeof t=="string"?e.fromBigInt(BigInt(t)):t.low!=null||t.high!=null?new e(t.low>>>0,t.high>>>0):ge}},ge=new At(0,0);ge.toBigInt=function(){return 0n};ge.zzEncode=ge.zzDecode=function(){return this};ge.length=function(){return 1};var Ci=4294967296n;function Ti(e){let t=0,r=0;for(let n=0;n<e.length;++n)r=e.charCodeAt(n),r<128?t+=1:r<2048?t+=2:(r&64512)===55296&&(e.charCodeAt(n+1)&64512)===56320?(++n,t+=4):t+=3;return t}function Di(e,t,r){if(r-t<1)return"";let o,s=[],i=0,c;for(;t<r;)c=e[t++],c<128?s[i++]=c:c>191&&c<224?s[i++]=(c&31)<<6|e[t++]&63:c>239&&c<365?(c=((c&7)<<18|(e[t++]&63)<<12|(e[t++]&63)<<6|e[t++]&63)-65536,s[i++]=55296+(c>>10),s[i++]=56320+(c&1023)):s[i++]=(c&15)<<12|(e[t++]&63)<<6|e[t++]&63,i>8191&&((o??(o=[])).push(String.fromCharCode.apply(String,s)),i=0);return o!=null?(i>0&&o.push(String.fromCharCode.apply(String,s.slice(0,i))),o.join("")):String.fromCharCode.apply(String,s.slice(0,i))}function po(e,t,r){let n=r,o,s;for(let i=0;i<e.length;++i)o=e.charCodeAt(i),o<128?t[r++]=o:o<2048?(t[r++]=o>>6|192,t[r++]=o&63|128):(o&64512)===55296&&((s=e.charCodeAt(i+1))&64512)===56320?(o=65536+((o&1023)<<10)+(s&1023),++i,t[r++]=o>>18|240,t[r++]=o>>12&63|128,t[r++]=o>>6&63|128,t[r++]=o&63|128):(t[r++]=o>>12|224,t[r++]=o>>6&63|128,t[r++]=o&63|128);return r-n}function Kt(e,t){return RangeError(`index out of range: ${e.pos} + ${t??1} > ${e.len}`)}function Xr(e,t){return(e[t-4]|e[t-3]<<8|e[t-2]<<16|e[t-1]<<24)>>>0}var mo=class{buf;pos;len;_slice=Uint8Array.prototype.subarray;constructor(t){this.buf=t,this.pos=0,this.len=t.length}uint32(){let t=4294967295;if(t=(this.buf[this.pos]&127)>>>0,this.buf[this.pos++]<128||(t=(t|(this.buf[this.pos]&127)<<7)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<14)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&127)<<21)>>>0,this.buf[this.pos++]<128)||(t=(t|(this.buf[this.pos]&15)<<28)>>>0,this.buf[this.pos++]<128))return t;if((this.pos+=5)>this.len)throw this.pos=this.len,Kt(this,10);return t}int32(){return this.uint32()|0}sint32(){let t=this.uint32();return t>>>1^-(t&1)|0}bool(){return this.uint32()!==0}fixed32(){if(this.pos+4>this.len)throw Kt(this,4);return Xr(this.buf,this.pos+=4)}sfixed32(){if(this.pos+4>this.len)throw Kt(this,4);return Xr(this.buf,this.pos+=4)|0}float(){if(this.pos+4>this.len)throw Kt(this,4);let t=Ki(this.buf,this.pos);return this.pos+=4,t}double(){if(this.pos+8>this.len)throw Kt(this,4);let t=Ui(this.buf,this.pos);return this.pos+=8,t}bytes(){let t=this.uint32(),r=this.pos,n=this.pos+t;if(n>this.len)throw Kt(this,t);return this.pos+=t,r===n?new Uint8Array(0):this.buf.subarray(r,n)}string(){let t=this.bytes();return Di(t,0,t.length)}skip(t){if(typeof t=="number"){if(this.pos+t>this.len)throw Kt(this,t);this.pos+=t}else do if(this.pos>=this.len)throw Kt(this);while((this.buf[this.pos++]&128)!==0);return this}skipType(t){switch(t){case 0:this.skip();break;case 1:this.skip(8);break;case 2:this.skip(this.uint32());break;case 3:for(;(t=this.uint32()&7)!==4;)this.skipType(t);break;case 5:this.skip(4);break;default:throw Error(`invalid wire type ${t} at offset ${this.pos}`)}return this}readLongVarint(){let t=new At(0,0),r=0;if(this.len-this.pos>4){for(;r<4;++r)if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t;if(t.lo=(t.lo|(this.buf[this.pos]&127)<<28)>>>0,t.hi=(t.hi|(this.buf[this.pos]&127)>>4)>>>0,this.buf[this.pos++]<128)return t;r=0}else{for(;r<3;++r){if(this.pos>=this.len)throw Kt(this);if(t.lo=(t.lo|(this.buf[this.pos]&127)<<r*7)>>>0,this.buf[this.pos++]<128)return t}return t.lo=(t.lo|(this.buf[this.pos++]&127)<<r*7)>>>0,t}if(this.len-this.pos>4){for(;r<5;++r)if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}else for(;r<5;++r){if(this.pos>=this.len)throw Kt(this);if(t.hi=(t.hi|(this.buf[this.pos]&127)<<r*7+3)>>>0,this.buf[this.pos++]<128)return t}throw Error("invalid varint encoding")}readFixed64(){if(this.pos+8>this.len)throw Kt(this,8);let t=Xr(this.buf,this.pos+=4),r=Xr(this.buf,this.pos+=4);return new At(t,r)}int64(){return this.readLongVarint().toBigInt()}int64Number(){return this.readLongVarint().toNumber()}int64String(){return this.readLongVarint().toString()}uint64(){return this.readLongVarint().toBigInt(!0)}uint64Number(){let t=_i(this.buf,this.pos);return this.pos+=mr(t),t}uint64String(){return this.readLongVarint().toString(!0)}sint64(){return this.readLongVarint().zzDecode().toBigInt()}sint64Number(){return this.readLongVarint().zzDecode().toNumber()}sint64String(){return this.readLongVarint().zzDecode().toString()}fixed64(){return this.readFixed64().toBigInt()}fixed64Number(){return this.readFixed64().toNumber()}fixed64String(){return this.readFixed64().toString()}sfixed64(){return this.readFixed64().toBigInt()}sfixed64Number(){return this.readFixed64().toNumber()}sfixed64String(){return this.readFixed64().toString()}};function yo(e){return new mo(e instanceof Uint8Array?e:e.subarray())}function $r(e,t,r){let n=yo(e);return t.decode(n,void 0,r)}function bo(e){let t=e??8192,r=t>>>1,n,o=t;return function(i){if(i<1||i>r)return yt(i);o+i>t&&(n=yt(t),o=0);let c=n.subarray(o,o+=i);return(o&7)!==0&&(o=(o|7)+1),c}}var we=class{fn;len;next;val;constructor(t,r,n){this.fn=t,this.len=r,this.next=void 0,this.val=n}};function xo(){}var wo=class{head;tail;len;next;constructor(t){this.head=t.head,this.tail=t.tail,this.len=t.len,this.next=t.states}},_f=bo();function If(e){return globalThis.Buffer!=null?yt(e):_f(e)}var br=class{len;head;tail;states;constructor(){this.len=0,this.head=new we(xo,0,0),this.tail=this.head,this.states=null}_push(t,r,n){return this.tail=this.tail.next=new we(t,r,n),this.len+=r,this}uint32(t){return this.len+=(this.tail=this.tail.next=new Eo((t=t>>>0)<128?1:t<16384?2:t<2097152?3:t<268435456?4:5,t)).len,this}int32(t){return t<0?this._push(Wr,10,At.fromNumber(t)):this.uint32(t)}sint32(t){return this.uint32((t<<1^t>>31)>>>0)}uint64(t){let r=At.fromBigInt(t);return this._push(Wr,r.length(),r)}uint64Number(t){return this._push(vi,mr(t),t)}uint64String(t){return this.uint64(BigInt(t))}int64(t){return this.uint64(t)}int64Number(t){return this.uint64Number(t)}int64String(t){return this.uint64String(t)}sint64(t){let r=At.fromBigInt(t).zzEncode();return this._push(Wr,r.length(),r)}sint64Number(t){let r=At.fromNumber(t).zzEncode();return this._push(Wr,r.length(),r)}sint64String(t){return this.sint64(BigInt(t))}bool(t){return this._push(go,1,t?1:0)}fixed32(t){return this._push(yr,4,t>>>0)}sfixed32(t){return this.fixed32(t)}fixed64(t){let r=At.fromBigInt(t);return this._push(yr,4,r.lo)._push(yr,4,r.hi)}fixed64Number(t){let r=At.fromNumber(t);return this._push(yr,4,r.lo)._push(yr,4,r.hi)}fixed64String(t){return this.fixed64(BigInt(t))}sfixed64(t){return this.fixed64(t)}sfixed64Number(t){return this.fixed64Number(t)}sfixed64String(t){return this.fixed64String(t)}float(t){return this._push(Ii,4,t)}double(t){return this._push(Li,8,t)}bytes(t){let r=t.length>>>0;return r===0?this._push(go,1,0):this.uint32(r)._push(Lf,r,t)}string(t){let r=Ti(t);return r!==0?this.uint32(r)._push(po,r,t):this._push(go,1,0)}fork(){return this.states=new wo(this),this.head=this.tail=new we(xo,0,0),this.len=0,this}reset(){return this.states!=null?(this.head=this.states.head,this.tail=this.states.tail,this.len=this.states.len,this.states=this.states.next):(this.head=this.tail=new we(xo,0,0),this.len=0),this}ldelim(){let t=this.head,r=this.tail,n=this.len;return this.reset().uint32(n),n!==0&&(this.tail.next=t.next,this.tail=r,this.len+=n),this}finish(){let t=this.head.next,r=If(this.len),n=0;for(;t!=null;)t.fn(t.val,r,n),n+=t.len,t=t.next;return r}};function go(e,t,r){t[r]=e&255}function Kf(e,t,r){for(;e>127;)t[r++]=e&127|128,e>>>=7;t[r]=e}var Eo=class extends we{next;constructor(t,r){super(Kf,t,r),this.next=void 0}};function Wr(e,t,r){for(;e.hi!==0;)t[r++]=e.lo&127|128,e.lo=(e.lo>>>7|e.hi<<25)>>>0,e.hi>>>=7;for(;e.lo>127;)t[r++]=e.lo&127|128,e.lo=e.lo>>>7;t[r++]=e.lo}function yr(e,t,r){t[r]=e&255,t[r+1]=e>>>8&255,t[r+2]=e>>>16&255,t[r+3]=e>>>24}function Lf(e,t,r){t.set(e,r)}globalThis.Buffer!=null&&(br.prototype.bytes=function(e){let t=e.length>>>0;return this.uint32(t),t>0&&this._push(Uf,t,e),this},br.prototype.string=function(e){let t=globalThis.Buffer.byteLength(e);return this.uint32(t),t>0&&this._push(Cf,t,e),this});function Uf(e,t,r){t.set(e,r)}function Cf(e,t,r){e.length<40?po(e,t,r):t.utf8Write!=null?t.utf8Write(e,r):t.set(Z(e),r)}function Ao(){return new br}function Jr(e,t){let r=Ao();return t.encode(e,r,{lengthDelimited:!1}),r.finish()}var Fe;(function(e){e[e.VARINT=0]="VARINT",e[e.BIT64=1]="BIT64",e[e.LENGTH_DELIMITED=2]="LENGTH_DELIMITED",e[e.START_GROUP=3]="START_GROUP",e[e.END_GROUP=4]="END_GROUP",e[e.BIT32=5]="BIT32"})(Fe||(Fe={}));function Qr(e,t,r,n){return{name:e,type:t,encode:r,decode:n}}function So(e){function t(o){if(e[o.toString()]==null)throw new Error("Invalid enum value");return e[o]}let r=function(s,i){let c=t(s);i.int32(c)},n=function(s){let i=s.int32();return t(i)};return Qr("enum",Fe.VARINT,r,n)}function tn(e,t){return Qr("message",Fe.LENGTH_DELIMITED,e,t)}var j;(function(e){e.RSA="RSA",e.Ed25519="Ed25519",e.secp256k1="secp256k1",e.ECDSA="ECDSA"})(j||(j={}));var Bo;(function(e){e[e.RSA=0]="RSA",e[e.Ed25519=1]="Ed25519",e[e.secp256k1=2]="secp256k1",e[e.ECDSA=3]="ECDSA"})(Bo||(Bo={}));(function(e){e.codec=()=>So(Bo)})(j||(j={}));var Tt;(function(e){let t;e.codec=()=>(t==null&&(t=tn((r,n,o={})=>{o.lengthDelimited!==!1&&n.fork(),r.Type!=null&&(n.uint32(8),j.codec().encode(r.Type,n)),r.Data!=null&&(n.uint32(18),n.bytes(r.Data)),o.lengthDelimited!==!1&&n.ldelim()},(r,n,o={})=>{let s={},i=n==null?r.len:r.pos+n;for(;r.pos<i;){let c=r.uint32();switch(c>>>3){case 1:{s.Type=j.codec().decode(r);break}case 2:{s.Data=r.bytes();break}default:{r.skipType(c&7);break}}}return s})),t),e.encode=r=>Jr(r,e.codec()),e.decode=(r,n)=>$r(r,e.codec(),n)})(Tt||(Tt={}));var xr;(function(e){let t;e.codec=()=>(t==null&&(t=tn((r,n,o={})=>{o.lengthDelimited!==!1&&n.fork(),r.Type!=null&&(n.uint32(8),j.codec().encode(r.Type,n)),r.Data!=null&&(n.uint32(18),n.bytes(r.Data)),o.lengthDelimited!==!1&&n.ldelim()},(r,n,o={})=>{let s={},i=n==null?r.len:r.pos+n;for(;r.pos<i;){let c=r.uint32();switch(c>>>3){case 1:{s.Type=j.codec().decode(r);break}case 2:{s.Data=r.bytes();break}default:{r.skipType(c&7);break}}}return s})),t),e.encode=r=>Jr(r,e.codec()),e.decode=(r,n)=>$r(r,e.codec(),n)})(xr||(xr={}));function vo(e){if(isNaN(e)||e<=0)throw new N("random bytes length must be a Number bigger than 0");return $t(e)}var wr={};st(wr,{MAX_RSA_KEY_SIZE:()=>_o,generateRSAKeyPair:()=>Do,jwkToJWKKeyPair:()=>Hi,jwkToPkcs1:()=>Pf,jwkToPkix:()=>Uo,jwkToRSAPrivateKey:()=>nn,pkcs1MessageToJwk:()=>Ko,pkcs1MessageToRSAPrivateKey:()=>en,pkcs1ToJwk:()=>Rf,pkcs1ToRSAPrivateKey:()=>Co,pkixMessageToJwk:()=>Lo,pkixMessageToRSAPublicKey:()=>rn,pkixToJwk:()=>kf,pkixToRSAPublicKey:()=>To});var je=Mr;var Ze=class{type="RSA";jwk;_raw;_multihash;constructor(t,r){this.jwk=t,this._multihash=r}get raw(){return this._raw==null&&(this._raw=wr.jwkToPkix(this.jwk)),this._raw}toMultihash(){return this._multihash}toCID(){return St.createV1(114,this._multihash)}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}verify(t,r,n){return Ni(this.jwk,r,t,n)}},gr=class{type="RSA";jwk;_raw;publicKey;constructor(t,r){this.jwk=t,this.publicKey=r}get raw(){return this._raw==null&&(this._raw=wr.jwkToPkcs1(this.jwk)),this._raw}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}sign(t,r){return ki(this.jwk,t,r)}};var _o=8192,Io=18,Tf=1062,Df=Uint8Array.from([48,13,6,9,42,134,72,134,247,13,1,1,1,5,0]);function Rf(e){let t=bt(e);return Ko(t)}function Ko(e){return{n:q(e[1],"base64url"),e:q(e[2],"base64url"),d:q(e[3],"base64url"),p:q(e[4],"base64url"),q:q(e[5],"base64url"),dp:q(e[6],"base64url"),dq:q(e[7],"base64url"),qi:q(e[8],"base64url"),kty:"RSA"}}function Pf(e){if(e.n==null||e.e==null||e.d==null||e.p==null||e.q==null||e.dp==null||e.dq==null||e.qi==null)throw new N("JWK was missing components");return _t([ft(Uint8Array.from([0])),ft(Z(e.n,"base64url")),ft(Z(e.e,"base64url")),ft(Z(e.d,"base64url")),ft(Z(e.p,"base64url")),ft(Z(e.q,"base64url")),ft(Z(e.dp,"base64url")),ft(Z(e.dq,"base64url")),ft(Z(e.qi,"base64url"))]).subarray()}function kf(e){let t=bt(e,{offset:0});return Lo(t)}function Lo(e){let t=bt(e[1],{offset:0});return{kty:"RSA",n:q(t[0],"base64url"),e:q(t[1],"base64url")}}function Uo(e){if(e.n==null||e.e==null)throw new N("JWK was missing components");return _t([Df,or(_t([ft(Z(e.n,"base64url")),ft(Z(e.e,"base64url"))]))]).subarray()}function Co(e){let t=bt(e);return en(t)}function en(e){let t=Ko(e);return nn(t)}function To(e,t){if(e.byteLength>=Tf)throw new Ee("Key size is too large");let r=bt(e,{offset:0});return rn(r,e,t)}function rn(e,t,r){let n=Lo(e);if(r==null){let o=je(Tt.encode({Type:j.RSA,Data:t}));r=vt(Io,o)}return new Ze(n,r)}function nn(e){if(Mi(e)>_o)throw new N("Key size is too large");let t=Hi(e),r=je(Tt.encode({Type:j.RSA,Data:Uo(t.publicKey)})),n=vt(Io,r);return new gr(t.privateKey,new Ze(t.publicKey,n))}async function Do(e){if(e>_o)throw new N("Key size is too large");let t=await Oi(e),r=je(Tt.encode({Type:j.RSA,Data:Uo(t.publicKey)})),n=vt(Io,r);return new gr(t.privateKey,new Ze(t.publicKey,n))}function Hi(e){if(e==null)throw new N("Missing key parameter");return{privateKey:e,publicKey:{kty:e.kty,n:e.n,e:e.e}}}var qi="1.2.840.113549.1.1.1";async function Oi(e,t){let r=await G.get().subtle.generateKey({name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:new Uint8Array([1,0,1]),hash:{name:"SHA-256"}},!0,["sign","verify"]);t?.signal?.throwIfAborted();let n=await Nf(r,t);return{privateKey:n[0],publicKey:n[1]}}async function ki(e,t,r){let n=await G.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["sign"]);r?.signal?.throwIfAborted();let o=await G.get().subtle.sign({name:"RSASSA-PKCS1-v1_5"},n,t instanceof Uint8Array?t:t.subarray());return r?.signal?.throwIfAborted(),new Uint8Array(o,0,o.byteLength)}async function Ni(e,t,r,n){let o=await G.get().subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!1,["verify"]);n?.signal?.throwIfAborted();let s=await G.get().subtle.verify({name:"RSASSA-PKCS1-v1_5"},o,t,r instanceof Uint8Array?r:r.subarray());return n?.signal?.throwIfAborted(),s}async function Nf(e,t){if(e.privateKey==null||e.publicKey==null)throw new N("Private and public key are required");let r=await Promise.all([G.get().subtle.exportKey("jwk",e.privateKey),G.get().subtle.exportKey("jwk",e.publicKey)]);return t?.signal?.throwIfAborted(),r}function Mi(e){if(e.kty!=="RSA")throw new N("invalid key type");if(e.n==null)throw new N("invalid key modulus");return Z(e.n,"base64url").length*8}var on=class extends Ue{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,Ce(t);let n=sr(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,s=new Uint8Array(o);s.set(n.length>o?t.create().update(n).digest():n);for(let i=0;i<s.length;i++)s[i]^=54;this.iHash.update(s),this.oHash=t.create();for(let i=0;i<s.length;i++)s[i]^=106;this.oHash.update(s),mt(s)}update(t){return Te(this),this.iHash.update(t),this}digestInto(t){Te(this),ut(t,this.outputLen),this.finished=!0,this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||(t=Object.create(Object.getPrototypeOf(this),{}));let{oHash:r,iHash:n,finished:o,destroyed:s,blockLen:i,outputLen:c}=this;return t=t,t.finished=o,t.destroyed=s,t.blockLen=i,t.outputLen=c,t.oHash=r._cloneInto(t.oHash),t.iHash=n._cloneInto(t.iHash),t}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},Er=(e,t,r)=>new on(e,t).update(r).digest();Er.create=(e,t)=>new on(e,t);var Vi=(e,t)=>(e+(e>=0?t:-t)/Fi)/t;function Hf(e,t,r){let[[n,o],[s,i]]=t,c=Vi(i*e,r),a=Vi(-o*e,r),u=e-c*n-a*s,d=-c*o-a*i,l=u<Gt,f=d<Gt;l&&(u=-u),f&&(d=-d);let p=te(Math.ceil(Fr(r)/2))+Ge;if(u<Gt||u>=p||d<Gt||d>=p)throw new Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:l,k1:u,k2neg:f,k2:d}}function Po(e){if(!["compact","recovered","der"].includes(e))throw new Error('Signature format must be "compact", "recovered", or "der"');return e}function Ro(e,t){let r={};for(let n of Object.keys(t))r[n]=e[n]===void 0?t[n]:e[n];return Mt(r.lowS,"lowS"),Mt(r.prehash,"prehash"),r.format!==void 0&&Po(r.format),r}var ko=class extends Error{constructor(t=""){super(t)}},zt={Err:ko,_tlv:{encode:(e,t)=>{let{Err:r}=zt;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let n=t.length/2,o=fr(n);if(o.length/2&128)throw new r("tlv.encode: long form length too big");let s=n>127?fr(o.length/2|128):"";return fr(e)+s+o+t},decode(e,t){let{Err:r}=zt,n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");let o=t[n++],s=!!(o&128),i=0;if(!s)i=o;else{let a=o&127;if(!a)throw new r("tlv.decode(long): indefinite length not supported");if(a>4)throw new r("tlv.decode(long): byte length is too big");let u=t.subarray(n,n+a);if(u.length!==a)throw new r("tlv.decode: length bytes not complete");if(u[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let d of u)i=i<<8|d;if(n+=a,i<128)throw new r("tlv.decode(long): not minimal encoding")}let c=t.subarray(n,n+i);if(c.length!==i)throw new r("tlv.decode: wrong value length");return{v:c,l:t.subarray(n+i)}}},_int:{encode(e){let{Err:t}=zt;if(e<Gt)throw new t("integer: negative integers are not allowed");let r=fr(e);if(Number.parseInt(r[0],16)&8&&(r="00"+r),r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=zt;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Re(e)}},toSig(e){let{Err:t,_int:r,_tlv:n}=zt,o=V("signature",e),{v:s,l:i}=n.decode(48,o);if(i.length)throw new t("invalid signature: left bytes after parsing");let{v:c,l:a}=n.decode(2,s),{v:u,l:d}=n.decode(2,a);if(d.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(c),s:r.decode(u)}},hexFromSig(e){let{_tlv:t,_int:r}=zt,n=t.encode(2,r.encode(e.r)),o=t.encode(2,r.encode(e.s)),s=n+o;return t.encode(48,s)}},Gt=BigInt(0),Ge=BigInt(1),Fi=BigInt(2),sn=BigInt(3),Of=BigInt(4);function ze(e,t){let{BYTES:r}=e,n;if(typeof t=="bigint")n=t;else{let o=V("private key",t);try{n=e.fromBytes(o)}catch{throw new Error(`invalid private key: expected ui8a of size ${r}, got ${typeof t}`)}}if(!e.isValidNot0(n))throw new Error("invalid private key: out of range [1..N-1]");return n}function Mf(e,t={}){let r=Zr("weierstrass",e,t),{Fp:n,Fn:o}=r,s=r.CURVE,{h:i,n:c}=s;ee(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});let{endo:a}=t;if(a&&(!n.is0(s.a)||typeof a.beta!="bigint"||!Array.isArray(a.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');let u=Zi(n,o);function d(){if(!n.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function l(L,x,m){let{x:y,y:A}=x.toAffine(),v=n.toBytes(y);if(Mt(m,"isCompressed"),m){d();let C=!n.isOdd(A);return ht(ji(C),v)}else return ht(Uint8Array.of(4),v,n.toBytes(A))}function f(L){xt(L,void 0,"Point");let{publicKey:x,publicKeyUncompressed:m}=u,y=L.length,A=L[0],v=L.subarray(1);if(y===x&&(A===2||A===3)){let C=n.fromBytes(v);if(!n.isValid(C))throw new Error("bad point: is not on curve, wrong x");let _=E(C),I;try{I=n.sqrt(_)}catch(Y){let F=Y instanceof Error?": "+Y.message:"";throw new Error("bad point: is not on curve, sqrt error"+F)}d();let T=n.isOdd(I);return(A&1)===1!==T&&(I=n.neg(I)),{x:C,y:I}}else if(y===m&&A===4){let C=n.BYTES,_=n.fromBytes(v.subarray(0,C)),I=n.fromBytes(v.subarray(C,C*2));if(!S(_,I))throw new Error("bad point: is not on curve");return{x:_,y:I}}else throw new Error(`bad point: got length ${y}, expected compressed=${x} or uncompressed=${m}`)}let p=t.toBytes||l,h=t.fromBytes||f;function E(L){let x=n.sqr(L),m=n.mul(x,L);return n.add(n.add(m,n.mul(L,s.a)),s.b)}function S(L,x){let m=n.sqr(x),y=E(L);return n.eql(m,y)}if(!S(s.Gx,s.Gy))throw new Error("bad curve params: generator point");let b=n.mul(n.pow(s.a,sn),Of),B=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(b,B)))throw new Error("bad curve params: a or b");function g(L,x,m=!1){if(!n.isValid(x)||m&&n.is0(x))throw new Error(`bad point coordinate ${L}`);return x}function U(L){if(!(L instanceof w))throw new Error("ProjectivePoint expected")}function D(L){if(!a||!a.basises)throw new Error("no endo");return Hf(L,a.basises,o.ORDER)}let O=Pe((L,x)=>{let{X:m,Y:y,Z:A}=L;if(n.eql(A,n.ONE))return{x:m,y};let v=L.is0();x==null&&(x=v?n.ONE:n.inv(A));let C=n.mul(m,x),_=n.mul(y,x),I=n.mul(A,x);if(v)return{x:n.ZERO,y:n.ZERO};if(!n.eql(I,n.ONE))throw new Error("invZ was invalid");return{x:C,y:_}}),H=Pe(L=>{if(L.is0()){if(t.allowInfinityPoint&&!n.is0(L.Y))return;throw new Error("bad point: ZERO")}let{x,y:m}=L.toAffine();if(!n.isValid(x)||!n.isValid(m))throw new Error("bad point: x or y not field elements");if(!S(x,m))throw new Error("bad point: equation left != right");if(!L.isTorsionFree())throw new Error("bad point: not in prime-order subgroup");return!0});function R(L,x,m,y,A){return m=new w(n.mul(m.X,L),m.Y,m.Z),x=lr(y,x),m=lr(A,m),x.add(m)}class w{constructor(x,m,y){this.X=g("x",x),this.Y=g("y",m,!0),this.Z=g("z",y),Object.freeze(this)}static CURVE(){return s}static fromAffine(x){let{x:m,y}=x||{};if(!x||!n.isValid(m)||!n.isValid(y))throw new Error("invalid affine point");if(x instanceof w)throw new Error("projective point not allowed");return n.is0(m)&&n.is0(y)?w.ZERO:new w(m,y,n.ONE)}static fromBytes(x){let m=w.fromAffine(h(xt(x,void 0,"point")));return m.assertValidity(),m}static fromHex(x){return w.fromBytes(V("pointHex",x))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(x=8,m=!0){return P.createCache(this,x),m||this.multiply(sn),this}assertValidity(){H(this)}hasEvenY(){let{y:x}=this.toAffine();if(!n.isOdd)throw new Error("Field doesn't support isOdd");return!n.isOdd(x)}equals(x){U(x);let{X:m,Y:y,Z:A}=this,{X:v,Y:C,Z:_}=x,I=n.eql(n.mul(m,_),n.mul(v,A)),T=n.eql(n.mul(y,_),n.mul(C,A));return I&&T}negate(){return new w(this.X,n.neg(this.Y),this.Z)}double(){let{a:x,b:m}=s,y=n.mul(m,sn),{X:A,Y:v,Z:C}=this,_=n.ZERO,I=n.ZERO,T=n.ZERO,k=n.mul(A,A),Y=n.mul(v,v),F=n.mul(C,C),M=n.mul(A,v);return M=n.add(M,M),T=n.mul(A,C),T=n.add(T,T),_=n.mul(x,T),I=n.mul(y,F),I=n.add(_,I),_=n.sub(Y,I),I=n.add(Y,I),I=n.mul(_,I),_=n.mul(M,_),T=n.mul(y,T),F=n.mul(x,F),M=n.sub(k,F),M=n.mul(x,M),M=n.add(M,T),T=n.add(k,k),k=n.add(T,k),k=n.add(k,F),k=n.mul(k,M),I=n.add(I,k),F=n.mul(v,C),F=n.add(F,F),k=n.mul(F,M),_=n.sub(_,k),T=n.mul(F,Y),T=n.add(T,T),T=n.add(T,T),new w(_,I,T)}add(x){U(x);let{X:m,Y:y,Z:A}=this,{X:v,Y:C,Z:_}=x,I=n.ZERO,T=n.ZERO,k=n.ZERO,Y=s.a,F=n.mul(s.b,sn),M=n.mul(m,v),X=n.mul(y,C),Q=n.mul(A,_),pt=n.add(m,y),$=n.add(v,C);pt=n.mul(pt,$),$=n.add(M,X),pt=n.sub(pt,$),$=n.add(m,A);let ot=n.add(v,_);return $=n.mul($,ot),ot=n.add(M,Q),$=n.sub($,ot),ot=n.add(y,A),I=n.add(C,_),ot=n.mul(ot,I),I=n.add(X,Q),ot=n.sub(ot,I),k=n.mul(Y,$),I=n.mul(F,Q),k=n.add(I,k),I=n.sub(X,k),k=n.add(X,k),T=n.mul(I,k),X=n.add(M,M),X=n.add(X,M),Q=n.mul(Y,Q),$=n.mul(F,$),X=n.add(X,Q),Q=n.sub(M,Q),Q=n.mul(Y,Q),$=n.add($,Q),M=n.mul(X,$),T=n.add(T,M),M=n.mul(ot,$),I=n.mul(pt,I),I=n.sub(I,M),M=n.mul(pt,X),k=n.mul(ot,k),k=n.add(k,M),new w(I,T,k)}subtract(x){return this.add(x.negate())}is0(){return this.equals(w.ZERO)}multiply(x){let{endo:m}=t;if(!o.isValidNot0(x))throw new Error("invalid scalar: out of range");let y,A,v=C=>P.cached(this,C,_=>Ft(w,_));if(m){let{k1neg:C,k1:_,k2neg:I,k2:T}=D(x),{p:k,f:Y}=v(_),{p:F,f:M}=v(T);A=Y.add(M),y=R(m.beta,k,F,C,I)}else{let{p:C,f:_}=v(x);y=C,A=_}return Ft(w,[y,A])[0]}multiplyUnsafe(x){let{endo:m}=t,y=this;if(!o.isValid(x))throw new Error("invalid scalar: out of range");if(x===Gt||y.is0())return w.ZERO;if(x===Ge)return y;if(P.hasCache(this))return this.multiply(x);if(m){let{k1neg:A,k1:v,k2neg:C,k2:_}=D(x),{p1:I,p2:T}=ai(w,y,v,_);return R(m.beta,I,T,A,C)}else return P.unsafe(y,x)}multiplyAndAddUnsafe(x,m,y){let A=this.multiplyUnsafe(m).add(x.multiplyUnsafe(y));return A.is0()?void 0:A}toAffine(x){return O(this,x)}isTorsionFree(){let{isTorsionFree:x}=t;return i===Ge?!0:x?x(w,this):P.unsafe(this,c).is0()}clearCofactor(){let{clearCofactor:x}=t;return i===Ge?this:x?x(w,this):this.multiplyUnsafe(i)}isSmallOrder(){return this.multiplyUnsafe(i).is0()}toBytes(x=!0){return Mt(x,"isCompressed"),this.assertValidity(),p(w,this,x)}toHex(x=!0){return Bt(this.toBytes(x))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(x=!0){return this.toBytes(x)}_setWindowSize(x){this.precompute(x)}static normalizeZ(x){return Ft(w,x)}static msm(x,m){return He(w,o,x,m)}static fromPrivateKey(x){return w.BASE.multiply(ze(o,x))}}w.BASE=new w(s.Gx,s.Gy,n.ONE),w.ZERO=new w(n.ZERO,n.ONE,n.ZERO),w.Fp=n,w.Fn=o;let K=o.BITS,P=new Ne(w,t.endo?Math.ceil(K/2):K);return w.BASE.precompute(8),w}function ji(e){return Uint8Array.of(e?2:3)}function Zi(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function qf(e,t={}){let{Fn:r}=e,n=t.randomBytes||$t,o=Object.assign(Zi(e.Fp,r),{seed:Qn(r.ORDER)});function s(p){try{return!!ze(r,p)}catch{return!1}}function i(p,h){let{publicKey:E,publicKeyUncompressed:S}=o;try{let b=p.length;return h===!0&&b!==E||h===!1&&b!==S?!1:!!e.fromBytes(p)}catch{return!1}}function c(p=n(o.seed)){return to(xt(p,o.seed,"seed"),r.ORDER)}function a(p,h=!0){return e.BASE.multiply(ze(r,p)).toBytes(h)}function u(p){let h=c(p);return{secretKey:h,publicKey:a(h)}}function d(p){if(typeof p=="bigint")return!1;if(p instanceof e)return!0;let{secretKey:h,publicKey:E,publicKeyUncompressed:S}=o;if(r.allowedLengths||h===E)return;let b=V("key",p).length;return b===E||b===S}function l(p,h,E=!0){if(d(p)===!0)throw new Error("first arg must be private key");if(d(h)===!1)throw new Error("second arg must be public key");let S=ze(r,p);return e.fromHex(h).multiply(S).toBytes(E)}return Object.freeze({getPublicKey:a,getSharedSecret:l,keygen:u,Point:e,utils:{isValidSecretKey:s,isValidPublicKey:i,randomSecretKey:c,isValidPrivateKey:s,randomPrivateKey:c,normPrivateKeyToScalar:p=>ze(r,p),precompute(p=8,h=e.BASE){return h.precompute(p,!1)}},lengths:o})}function Vf(e,t,r={}){Ce(t),ee(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});let n=r.randomBytes||$t,o=r.hmac||((m,...y)=>Er(t,m,ht(...y))),{Fp:s,Fn:i}=e,{ORDER:c,BITS:a}=i,{keygen:u,getPublicKey:d,getSharedSecret:l,utils:f,lengths:p}=qf(e,r),h={prehash:!1,lowS:typeof r.lowS=="boolean"?r.lowS:!1,format:void 0,extraEntropy:!1},E="compact";function S(m){let y=c>>Ge;return m>y}function b(m,y){if(!i.isValidNot0(y))throw new Error(`invalid signature ${m}: out of range 1..Point.Fn.ORDER`);return y}function B(m,y){Po(y);let A=p.signature,v=y==="compact"?A:y==="recovered"?A+1:void 0;return xt(m,v,`${y} signature`)}class g{constructor(y,A,v){this.r=b("r",y),this.s=b("s",A),v!=null&&(this.recovery=v),Object.freeze(this)}static fromBytes(y,A=E){B(y,A);let v;if(A==="der"){let{r:T,s:k}=zt.toSig(xt(y));return new g(T,k)}A==="recovered"&&(v=y[0],A="compact",y=y.subarray(1));let C=i.BYTES,_=y.subarray(0,C),I=y.subarray(C,C*2);return new g(i.fromBytes(_),i.fromBytes(I),v)}static fromHex(y,A){return this.fromBytes(le(y),A)}addRecoveryBit(y){return new g(this.r,this.s,y)}recoverPublicKey(y){let A=s.ORDER,{r:v,s:C,recovery:_}=this;if(_==null||![0,1,2,3].includes(_))throw new Error("recovery id invalid");if(c*Fi<A&&_>1)throw new Error("recovery id is ambiguous for h>1 curve");let T=_===2||_===3?v+c:v;if(!s.isValid(T))throw new Error("recovery id 2 or 3 invalid");let k=s.toBytes(T),Y=e.fromBytes(ht(ji((_&1)===0),k)),F=i.inv(T),M=D(V("msgHash",y)),X=i.create(-M*F),Q=i.create(C*F),pt=e.BASE.multiplyUnsafe(X).add(Y.multiplyUnsafe(Q));if(pt.is0())throw new Error("point at infinify");return pt.assertValidity(),pt}hasHighS(){return S(this.s)}toBytes(y=E){if(Po(y),y==="der")return le(zt.hexFromSig(this));let A=i.toBytes(this.r),v=i.toBytes(this.s);if(y==="recovered"){if(this.recovery==null)throw new Error("recovery bit must be present");return ht(Uint8Array.of(this.recovery),A,v)}return ht(A,v)}toHex(y){return Bt(this.toBytes(y))}assertValidity(){}static fromCompact(y){return g.fromBytes(V("sig",y),"compact")}static fromDER(y){return g.fromBytes(V("sig",y),"der")}normalizeS(){return this.hasHighS()?new g(this.r,i.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return Bt(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return Bt(this.toBytes("compact"))}}let U=r.bits2int||function(y){if(y.length>8192)throw new Error("input is too large");let A=Re(y),v=y.length*8-a;return v>0?A>>BigInt(v):A},D=r.bits2int_modN||function(y){return i.create(U(y))},O=te(a);function H(m){return ur("num < 2^"+a,m,Gt,O),i.toBytes(m)}function R(m,y){return xt(m,void 0,"message"),y?xt(t(m),void 0,"prehashed message"):m}function w(m,y,A){if(["recovered","canonical"].some(X=>X in A))throw new Error("sign() legacy options not supported");let{lowS:v,prehash:C,extraEntropy:_}=Ro(A,h);m=R(m,C);let I=D(m),T=ze(i,y),k=[H(T),H(I)];if(_!=null&&_!==!1){let X=_===!0?n(p.secretKey):_;k.push(V("extraEntropy",X))}let Y=ht(...k),F=I;function M(X){let Q=U(X);if(!i.isValidNot0(Q))return;let pt=i.inv(Q),$=e.BASE.multiply(Q).toAffine(),ot=i.create($.x);if(ot===Gt)return;let vr=i.create(pt*i.create(F+ot*T));if(vr===Gt)return;let Fo=($.x===ot?0:2)|Number($.y&Ge),jo=vr;return v&&S(vr)&&(jo=i.neg(vr),Fo^=1),new g(ot,jo,Fo)}return{seed:Y,k2sig:M}}function K(m,y,A={}){m=V("message",m);let{seed:v,k2sig:C}=w(m,y,A);return Zs(t.outputLen,i.BYTES,o)(v,C)}function P(m){let y,A=typeof m=="string"||Ht(m),v=!A&&m!==null&&typeof m=="object"&&typeof m.r=="bigint"&&typeof m.s=="bigint";if(!A&&!v)throw new Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(v)y=new g(m.r,m.s);else if(A){try{y=g.fromBytes(V("sig",m),"der")}catch(C){if(!(C instanceof zt.Err))throw C}if(!y)try{y=g.fromBytes(V("sig",m),"compact")}catch{return!1}}return y||!1}function L(m,y,A,v={}){let{lowS:C,prehash:_,format:I}=Ro(v,h);if(A=V("publicKey",A),y=R(V("message",y),_),"strict"in v)throw new Error("options.strict was renamed to lowS");let T=I===void 0?P(m):g.fromBytes(V("sig",m),I);if(T===!1)return!1;try{let k=e.fromBytes(A);if(C&&T.hasHighS())return!1;let{r:Y,s:F}=T,M=D(y),X=i.inv(F),Q=i.create(M*X),pt=i.create(Y*X),$=e.BASE.multiplyUnsafe(Q).add(k.multiplyUnsafe(pt));return $.is0()?!1:i.create($.x)===Y}catch{return!1}}function x(m,y,A={}){let{prehash:v}=Ro(A,h);return y=R(y,v),g.fromBytes(m,"recovered").recoverPublicKey(y).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:l,utils:f,lengths:p,Point:e,sign:K,verify:L,recoverPublicKey:x,Signature:g,hash:t})}function Ff(e){let t={a:e.a,b:e.b,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp,n=e.allowedPrivateKeyLengths?Array.from(new Set(e.allowedPrivateKeyLengths.map(i=>Math.ceil(i/2)))):void 0,o=gt(t.n,{BITS:e.nBitLength,allowedLengths:n,modFromBytes:e.wrapPrivateKey}),s={Fp:r,Fn:o,allowInfinityPoint:e.allowInfinityPoint,endo:e.endo,isTorsionFree:e.isTorsionFree,clearCofactor:e.clearCofactor,fromBytes:e.fromBytes,toBytes:e.toBytes};return{CURVE:t,curveOpts:s}}function jf(e){let{CURVE:t,curveOpts:r}=Ff(e),n={hmac:e.hmac,randomBytes:e.randomBytes,lowS:e.lowS,bits2int:e.bits2int,bits2int_modN:e.bits2int_modN};return{CURVE:t,curveOpts:r,hash:e.hash,ecdsaOpts:n}}function Zf(e,t){let r=t.Point;return Object.assign({},t,{ProjectivePoint:r,CURVE:Object.assign({},e,jr(r.Fn.ORDER,r.Fn.BITS))})}function zi(e){let{CURVE:t,curveOpts:r,hash:n,ecdsaOpts:o}=jf(e),s=Mf(t,r),i=Vf(s,n,o);return Zf(e,i)}function Gi(e,t){let r=n=>zi({...e,hash:n});return{...r(t),create:r}}var Ho={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},zf={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]};var Yi=BigInt(2);function Gf(e){let t=Ho.p,r=BigInt(3),n=BigInt(6),o=BigInt(11),s=BigInt(22),i=BigInt(23),c=BigInt(44),a=BigInt(88),u=e*e*e%t,d=u*u*e%t,l=z(d,r,t)*d%t,f=z(l,r,t)*d%t,p=z(f,Yi,t)*u%t,h=z(p,o,t)*p%t,E=z(h,s,t)*h%t,S=z(E,c,t)*E%t,b=z(S,a,t)*S%t,B=z(b,c,t)*E%t,g=z(B,r,t)*d%t,U=z(g,i,t)*h%t,D=z(U,n,t)*u%t,O=z(D,Yi,t);if(!No.eql(No.sqr(O),e))throw new Error("Cannot find square root");return O}var No=gt(Ho.p,{sqrt:Gf}),Lt=Gi({...Ho,Fp:No,lowS:!0,endo:zf},Mr);var Xi=33,$i=32;function Wi(e,t,r){let n=Ur.digest(t instanceof Uint8Array?t:t.subarray());if(qe(n))return n.then(({digest:o})=>(r?.signal?.throwIfAborted(),Lt.sign(o,e).toDERRawBytes())).catch(o=>{throw o.name==="AbortError"?o:new Ye(String(o))});try{return Lt.sign(n.digest,e).toDERRawBytes()}catch(o){throw new Ye(String(o))}}function Ji(e,t,r,n){let o=Ur.digest(r instanceof Uint8Array?r:r.subarray());if(qe(o))return o.then(({digest:s})=>(n?.signal?.throwIfAborted(),Lt.verify(t,s,e))).catch(s=>{throw s.name==="AbortError"?s:new Xe(String(s))});try{return n?.signal?.throwIfAborted(),Lt.verify(t,o.digest,e)}catch(s){throw new Xe(String(s))}}var Ar=class{type="secp256k1";raw;_key;constructor(t){this._key=ea(t),this.raw=Qi(this._key)}toMultihash(){return ce.digest(ue(this))}toCID(){return St.createV1(114,this.toMultihash())}toString(){return tt.encode(this.toMultihash().bytes).substring(1)}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}verify(t,r,n){return Ji(this._key,r,t,n)}},Sr=class{type="secp256k1";raw;publicKey;constructor(t,r){this.raw=ta(t),this.publicKey=new Ar(r??ra(t))}equals(t){return t==null||!(t.raw instanceof Uint8Array)?!1:it(this.raw,t.raw)}sign(t,r){return Wi(this.raw,t,r)}};function Oo(e){return new Sr(e)}function an(e){return new Ar(e)}async function na(){let e=Yf();return new Sr(e)}function Qi(e){return Lt.ProjectivePoint.fromHex(e).toRawBytes(!0)}function ta(e){try{return Lt.getPublicKey(e,!0),e}catch(t){throw new $e(String(t))}}function ea(e){try{return Lt.ProjectivePoint.fromHex(e),e}catch(t){throw new Ee(String(t))}}function ra(e){try{return Lt.getPublicKey(e,!0)}catch(t){throw new $e(String(t))}}function Yf(){return Lt.utils.randomPrivateKey()}var cn={"P-256":32,"P-384":48,"P-521":66},Xf=Object.keys(cn),Mo=Xf.join(" / ");async function oa(e){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new N(`Unknown curve: ${e}. Must be ${Mo}`);let t=await G.get().subtle.generateKey({name:"ECDH",namedCurve:e},!0,["deriveBits"]),r=async(s,i)=>{let c;i!=null?c=await G.get().subtle.importKey("jwk",Wf(e,i),{name:"ECDH",namedCurve:e},!1,["deriveBits"]):c=t.privateKey;let a=await G.get().subtle.importKey("jwk",sa(e,s),{name:"ECDH",namedCurve:e},!1,[]),u=await G.get().subtle.deriveBits({name:"ECDH",public:a},c,cn[e]*8);return new Uint8Array(u,0,u.byteLength)},n=await G.get().subtle.exportKey("jwk",t.publicKey);return{key:$f(n),genSharedKey:r}}function $f(e){if(e.crv==null||e.x==null||e.y==null)throw new N("JWK was missing components");if(e.crv!=="P-256"&&e.crv!=="P-384"&&e.crv!=="P-521")throw new N(`Unknown curve: ${e.crv}. Must be ${Mo}`);let t=cn[e.crv];return Ut([Uint8Array.from([4]),fo(e.x,t),fo(e.y,t)],1+t*2)}function sa(e,t){if(e!=="P-256"&&e!=="P-384"&&e!=="P-521")throw new N(`Unknown curve: ${e}. Must be ${Mo}`);let r=cn[e];if(!it(t.subarray(0,1),Uint8Array.from([4])))throw new N("Cannot unmarshal public key - invalid key format");return{kty:"EC",crv:e,x:q(t.subarray(1,r+1),"base64url"),y:q(t.subarray(1+r),"base64url"),ext:!0}}var Wf=(e,t)=>({...sa(e,t.public),d:q(t.private,"base64url")});var Jf={"AES-128":{ivSize:16,keySize:16},"AES-256":{ivSize:16,keySize:32},Blowfish:{ivSize:8,keySize:32}};async function ia(e,t,r){if(e!=="AES-128"&&e!=="AES-256"&&e!=="Blowfish")throw new N("Cipher type was missing or unsupported");if(t!=="SHA1"&&t!=="SHA256"&&t!=="SHA512")throw new N("Hash type was missing or unsupported");if(r==null||!(r instanceof Uint8Array))throw new N("Secret was missing or an incorrect type");let n=Jf[e],o=n.keySize,s=n.ivSize,i=20,c=Z("key expansion"),a=2*(s+o+i),u=await hn(t,r),d=await u.digest(c),l=[],f=0;for(;f<a;){let B=await u.digest(Ut([d,c])),g=B.length;f+g>a&&(g=a-f),l.push(B),f+=g,d=await u.digest(d)}let p=a/2,h=Ut(l),E=h.subarray(0,p),S=h.subarray(p,a),b=B=>({iv:B.subarray(0,s),cipherKey:B.subarray(s,s+o),macKey:B.subarray(s+o)});return{k1:b(E),k2:b(S)}}async function Qf(e,t){if(e==="Ed25519")return gi();if(e==="secp256k1")return na();if(e==="RSA")return Do(au(t));if(e==="ECDSA")return Ks(cu(t));throw new Yt}async function tu(e,t){if(e!=="Ed25519")throw new Yt("Seed key derivation only supported for Ed25519 keys");return wi(t)}function eu(e,t){let{Type:r,Data:n}=Tt.decode(e),o=n??new Uint8Array;switch(r){case j.RSA:return To(o,t);case j.Ed25519:return Yr(o);case j.secp256k1:return an(o);case j.ECDSA:return Mn(o);default:throw new Yt}}function ru(e){if(e.byteLength===oe)return Yr(e);if(e.byteLength===Xi)return an(e);let t=bt(e),r=t[1]?.[0];if(r===kn||r===Nn||r===Hn)return qn(t);if(t[0]?.[0]===qi)return rn(t,e);throw new N("Could not extract public key from raw bytes")}function nu(e){let{Type:t,Data:r}=Tt.decode(e.digest),n=r??new Uint8Array;switch(t){case j.Ed25519:return Yr(n);case j.secp256k1:return an(n);case j.ECDSA:return Mn(n);default:throw new Yt}}function ue(e){return Tt.encode({Type:j[e.type],Data:e.raw})}function ou(e){let t=xr.decode(e),r=t.Data??new Uint8Array;switch(t.Type){case j.RSA:return Co(r);case j.Ed25519:return uo(r);case j.secp256k1:return Oo(r);case j.ECDSA:return Bs(r);default:throw new Yt}}function su(e){if(e.byteLength===Et)return uo(e);if(e.byteLength===$i)return Oo(e);let t=bt(e),r=t[2]?.[0];if(r===kn||r===Nn||r===Hn)return On(t);if(t.length>8)return en(t);throw new N("Could not extract private key from raw bytes")}function iu(e){return xr.encode({Type:j[e.type],Data:e.raw})}function au(e){return e==null?2048:parseInt(e,10)}function cu(e){if(e==="P-256"||e==null)return"P-256";if(e==="P-384")return"P-384";if(e==="P-521")return"P-521";throw new N("Unsupported curve, should be P-256, P-384 or P-521")}async function fu(e){if(e.type==="RSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"RSASSA-PKCS1-v1_5",hash:{name:"SHA-256"}},!0,["verify"])};if(e.type==="ECDSA")return{privateKey:await crypto.subtle.importKey("jwk",e.jwk,{name:"ECDSA",namedCurve:e.jwk.crv??"P-256"},!0,["sign"]),publicKey:await crypto.subtle.importKey("jwk",e.publicKey.jwk,{name:"ECDSA",namedCurve:e.publicKey.jwk.crv??"P-256"},!0,["verify"])};throw new N("Only RSA and ECDSA keys are supported")}async function uu(e){if(e.privateKey.algorithm.name==="RSASSA-PKCS1-v1_5"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return nn(t)}if(e.privateKey.algorithm.name==="ECDSA"){let t=await crypto.subtle.exportKey("jwk",e.privateKey);return new Pt(t)}throw new N("Only RSA and ECDSA keys are supported")}function hu(e,t,r,n){Ce(e);let o=Ts({dkLen:32,asyncTick:10},n),{c:s,dkLen:i,asyncTick:c}=o;if(Nt(s),Nt(i),Nt(c),s<1)throw new Error("iterations (c) should be >= 1");let a=Vn(t),u=Vn(r),d=new Uint8Array(i),l=Er.create(e,a),f=l._cloneInto().update(u);return{c:s,dkLen:i,asyncTick:c,DK:d,PRF:l,PRFSalt:f}}function lu(e,t,r,n,o){return e.destroy(),t.destroy(),n&&n.destroy(),mt(o),r}function aa(e,t,r,n){let{c:o,dkLen:s,DK:i,PRF:c,PRFSalt:a}=hu(e,t,r,n),u,d=new Uint8Array(4),l=De(d),f=new Uint8Array(c.outputLen);for(let p=1,h=0;h<s;p++,h+=c.outputLen){let E=i.subarray(h,h+c.outputLen);l.setInt32(0,p,!1),(u=a._cloneInto(u)).update(d).digestInto(f),E.set(f.subarray(0,E.length));for(let S=1;S<o;S++){c._cloneInto(u).update(f).digestInto(f);for(let b=0;b<E.length;b++)E[b]^=f[b]}}return lu(c,a,i,u,f)}var Br=Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),ae=new Uint32Array(80),fn=class extends de{constructor(){super(64,20,8,!1),this.A=Br[0]|0,this.B=Br[1]|0,this.C=Br[2]|0,this.D=Br[3]|0,this.E=Br[4]|0}get(){let{A:t,B:r,C:n,D:o,E:s}=this;return[t,r,n,o,s]}set(t,r,n,o,s){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=s|0}process(t,r){for(let a=0;a<16;a++,r+=4)ae[a]=t.getUint32(r,!1);for(let a=16;a<80;a++)ae[a]=Dr(ae[a-3]^ae[a-8]^ae[a-14]^ae[a-16],1);let{A:n,B:o,C:s,D:i,E:c}=this;for(let a=0;a<80;a++){let u,d;a<20?(u=Pr(o,s,i),d=1518500249):a<40?(u=o^s^i,d=1859775393):a<60?(u=kr(o,s,i),d=2400959708):(u=o^s^i,d=3395469782);let l=Dr(n,5)+u+c+d+ae[a]|0;c=i,i=s,s=Dr(o,30),o=n,n=l}n=n+this.A|0,o=o+this.B|0,s=s+this.C|0,i=i+this.D|0,c=c+this.E|0,this.set(n,o,s,i,c)}roundClean(){mt(ae)}destroy(){this.set(0,0,0,0,0),mt(this.buffer)}},ca=ir(()=>new fn);var fa=ca;var ua=qr;var ha={sha1:fa,"sha2-256":je,"sha2-512":ua};function Vo(e,t,r,n,o){if(o!=="sha1"&&o!=="sha2-256"&&o!=="sha2-512"){let c=Object.keys(ha).join(" / ");throw new N(`Hash '${o}' is unknown or not supported. Must be ${c}`)}let s=ha[o],i=aa(s,e,t,{c:r,dkLen:n});return _n.encode(i).substring(1)}return ya(du);})();
|
|
3
3
|
/*! Bundled license information:
|
|
4
4
|
|
|
5
5
|
@noble/hashes/esm/utils.js:
|