npm - @rizom/ops - Versions diffs - 0.2.0-alpha.14 → 0.2.0-alpha.16 - Mend

@rizom/ops 0.2.0-alpha.14 → 0.2.0-alpha.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/dist/brains-ops.js +1 -1
package/dist/deploy.js +60 -60
package/dist/index.js +2 -2
package/package.json +1 -1
package/templates/rover-pilot/.github/workflows/reconcile.yml +1 -1
package/templates/rover-pilot/deploy/Caddyfile +1 -1

package/dist/brains-ops.js CHANGED Viewed

@@ -54,7 +54,7 @@ return `+str.trim()+`;
 `).join(`
 `+X),$.push(Q+"m+"+LX.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=QT()+q+" "+$[0]}function QT(){if(R1.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function XT(...$){return process.stderr.write(EX.formatWithOptions(R1.inspectOpts,...$)+`
 `)}function YT($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function UT(){return process.env.DEBUG}function WT($){$.inspectOpts={};let q=Object.keys(R1.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=R1.inspectOpts[q[J]]}LX.exports=_7()(R1);var{formatters:D1}=LX.exports;D1.o=function($){return this.inspectOpts.colors=this.useColors,EX.inspect($,this.inspectOpts).split(`
-`).map((q)=>q.trim()).join(" ")};D1.O=function($){return this.inspectOpts.colors=this.useColors,EX.inspect($,this.inspectOpts)}});var N1=Y0((kx,y7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)y7.exports=U1();else y7.exports=O1()});var H6=Y0((Vp,R6)=>{var mX=Object.prototype.hasOwnProperty,D6=Object.prototype.toString,U6=Object.defineProperty,W6=Object.getOwnPropertyDescriptor,V6=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return D6.call(q)==="[object Array]"},z6=function(q){if(!q||D6.call(q)!=="[object Object]")return!1;var J=mX.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&mX.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||mX.call(q,Q)},M6=function(q,J){if(U6&&J.name==="__proto__")U6(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},K6=function(q,J){if(J==="__proto__"){if(!mX.call(q,J))return;else if(W6)return W6(q,J).value}return q[J]};R6.exports=function $(){var q,J,G,Q,X,Y,U=arguments[0],W=1,V=arguments.length,z=!1;if(typeof U==="boolean")z=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=K6(U,J),Q=K6(q,J),U!==Q){if(z&&Q&&(z6(Q)||(X=V6(Q)))){if(X)X=!1,Y=G&&V6(G)?G:[];else Y=G&&z6(G)?G:{};M6(U,{name:J,newValue:$(z,Y,Q)})}else if(typeof Q<"u")M6(U,{name:J,newValue:Q})}}return U}});import{parseArgs as PH}from"util";var IH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"}};function JY($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function EH($,q){let J=$[q];return typeof J==="string"?J:void 0}function h5($){let{values:q,positionals:J}=PH({args:$,options:IH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:JY(q,"help"),version:JY(q,"version"),dryRun:JY(q,"dry-run"),pushTo:EH(q,"push-to")}}}var q9={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.14",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as zN,mkdirSync as MN,readFileSync as mU,writeFileSync as hU}from"fs";import{dirname as KN,join as pz}from"path";function GY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=GY($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Aq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function J9($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function G9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function D$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var FH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function gH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function _H($){for(let q=0;q<$.length;q++)$[q]=gH($[q]);return $}var QY=FH?($)=>$:_H,p5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),vH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function Q9($){if(u0($),p5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=vH[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function u5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function vG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(p5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=u5($.charCodeAt(X)),U=u5($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function bH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function XY($,q=""){if(typeof $==="string")return bH($);return u0($,void 0,q)}function YY(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function X9($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function UY($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Bq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var WY=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VY{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Aq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),D$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),J9($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Sq=(()=>{let $=(q,J,G)=>new VY(q,J).update(G).digest();return $.create=(q,J)=>new VY(q,J),$})();function bG($,q,J){if(Aq($),J===void 0)J=new Uint8Array($.outputLen);return Sq($,J,q)}var zY=Uint8Array.of(0),l5=Uint8Array.of();function MY($,q,J,G=32){Aq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=l5;else u0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=Sq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)zY[0]=z+1,W.update(z===0?l5:V).update(J).update(zY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),D$(V,zY),Y.slice(0,G)}var yG=($,q,J,G,Q)=>MY($,bG($,q,J),G,Q);function r5($,q,J){return $&q^~$&J}function d5($,q,J){return $&q^$&J^q&J}class Y9{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=C8($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),J9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,D$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Tq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var U9=BigInt(4294967295),i5=BigInt(32);function yH($,q=!1){if(q)return{h:Number($&U9),l:Number($>>i5&U9)};return{h:Number($>>i5&U9)|0,l:Number($&U9)|0}}function c5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=yH($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var KY=($,q,J)=>$>>>J,DY=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,fG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var n5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),o5=($,q,J,G)=>q+J+G+($/4294967296|0)|0,a5=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),s5=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,t5=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),e5=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var fH=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class RY extends Y9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)cq[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=cq[z-15],D=cq[z-2],K=u$(M,7)^u$(M,18)^M>>>3,N=u$(D,17)^u$(D,19)^D>>>10;cq[z]=N+cq[z-7]+K+cq[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=u$(Y,6)^u$(Y,11)^u$(Y,25),D=V+M+r5(Y,U,W)+fH[z]+cq[z]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+d5(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){D$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),D$(this.buffer)}}class $W extends RY{A=Tq[0]|0;B=Tq[1]|0;C=Tq[2]|0;D=Tq[3]|0;E=Tq[4]|0;F=Tq[5]|0;G=Tq[6]|0;H=Tq[7]|0;constructor(){super(32)}}class xH extends RY{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var qW=(()=>c5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),mH=(()=>qW[0])(),hH=(()=>qW[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends Y9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,p=FJ(_,f,1)^FJ(_,f,8)^KY(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^DY(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^kG(m,k,61)^KY(m,k,6),l=gJ(m,k,19)^fG(m,k,61)^DY(m,k,6),v=a5(F,l,oq[T-7],oq[T-16]),P=s5(v,p,y,nq[T-7],nq[T-16]);nq[T]=P|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(z,M,14)^FJ(z,M,18)^kG(z,M,41),f=gJ(z,M,14)^gJ(z,M,18)^fG(z,M,41),p=z&D^~z&N,F=M&K^~M&j,m=t5(A,f,F,hH[T],oq[T]),k=e5(m,w,_,p,mH[T],nq[T]),y=m|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^fG(J,G,34)^fG(J,G,39),P=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,A=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Gq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let Z=n5(y,v,C);J=o5(Z,k,l,P),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Gq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Gq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Gq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Gq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Gq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Gq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,A)}roundClean(){D$(nq,oq)}destroy(){this.destroyed=!0,D$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class JW extends xG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class uH extends xG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class pH extends xG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class lH extends xG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=UY(()=>new $W,WY(1));var W9=UY(()=>new JW,WY(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function D9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function NY($){if(!D9($))throw Error("Uint8Array expected")}function UW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function WW($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function hG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function z9($){if(!Array.isArray($))throw Error("array expected")}function M9($,q){if(!UW(!0,q))throw Error(`${$}: array of strings expected`)}function jY($,q){if(!UW(!1,q))throw Error(`${$}: array of numbers expected`)}function I$(...$){let q=(X)=>X,J=(X,Y)=>(U)=>X(Y(U)),G=$.map((X)=>X.encode).reduceRight(J,q),Q=$.map((X)=>X.decode).reduce(J,q);return{encode:G,decode:Q}}function E$($){let q=typeof $==="string"?$.split(""):$,J=q.length;M9("alphabet",q);let G=new Map(q.map((Q,X)=>[Q,X]));return{encode:(Q)=>{return z9(Q),Q.map((X)=>{if(!Number.isSafeInteger(X)||X<0||X>=J)throw Error(`alphabet.encode: digit index outside alphabet "${X}". Allowed: ${$}`);return q[X]})},decode:(Q)=>{return z9(Q),Q.map((X)=>{aq("alphabet.decode",X);let Y=G.get(X);if(Y===void 0)throw Error(`Unknown letter: "${X}". Allowed: ${$}`);return Y})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return M9("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function R9($,q="="){return hG($),aq("padding",q),{encode(J){M9("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){M9("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function VW($){return WW($),{encode:(q)=>q,decode:(q)=>$(q)}}function GW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(z9($),!$.length)return[];let G=0,Q=[],X=Array.from($,(U)=>{if(hG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),Y=X.length;while(!0){let U=0,W=!0;for(let V=G;V<Y;V++){let z=X[V],M=q*U,D=M+z;if(!Number.isSafeInteger(D)||M/q!==U||D-z!==M)throw Error("convertRadix: carry overflow");let K=D/J;U=D%J;let N=Math.floor(K);if(X[V]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var zW=($,q)=>q===0?$:zW(q,$%q),K9=($,q)=>$+(q-zW($,q)),V9=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function HY($,q,J,G){if(z9($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(K9(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${K9(q,J)}`);let Q=0,X=0,Y=V9[q],U=V9[J]-1,W=[];for(let V of $){if(hG(V),V>=Y)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,X+q>32)throw Error(`convertRadix2: carry overflow pos=${X} from=${q}`);X+=q;for(;X>=J;X-=J)W.push((Q>>X-J&U)>>>0);let z=V9[X];if(z===void 0)throw Error("invalid carry");Q&=z-1}if(Q=Q<<J-X&U,!G&&X>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&X>0)W.push(Q>>>0);return W}function rH($){hG($);let q=256;return{encode:(J)=>{if(!D9(J))throw Error("radix.encode input should be Uint8Array");return GW(Array.from(J),q,$)},decode:(J)=>{return jY("radix.decode",J),Uint8Array.from(GW(J,$,q))}}}function b$($,q=!1){if(hG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(K9(8,$)>32||K9($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!D9(J))throw Error("radix2.encode input should be Uint8Array");return HY(Array.from(J),8,$,!q)},decode:(J)=>{return jY("radix2.decode",J),Uint8Array.from(HY(J,$,8,q))}}}function QW($){return WW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var sL=I$(b$(4),E$("0123456789ABCDEF"),L$("")),tL=I$(b$(5),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),R9(5),L$("")),eL=I$(b$(5),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),$3=I$(b$(5),E$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),R9(5),L$("")),q3=I$(b$(5),E$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),J3=I$(b$(5),E$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),VW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),MW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),KW=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},wY=MW?{encode($){return NY($),$.toBase64()},decode($){return KW($,!1)}}:I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),R9(6),L$("")),p$=I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),G3=MW?{encode($){return NY($),$.toBase64({alphabet:"base64url"})},decode($){return KW($,!0)}}:I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),R9(6),L$("")),Q3=I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),ZY=($)=>I$(rH(58),E$($),L$("")),X3=ZY("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),Y3=ZY("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),U3=ZY("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var OY=I$(E$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),XW=[996825010,642813549,513874426,1027748829,705979059];function mG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<XW.length;G++)if((q>>G&1)===1)J^=XW[G];return J}function YW($,q,J=1){let G=$.length,Q=1;for(let X=0;X<G;X++){let Y=$.charCodeAt(X);if(Y<33||Y>126)throw Error(`Invalid prefix (${$})`);Q=mG(Q)^Y>>5}Q=mG(Q);for(let X=0;X<G;X++)Q=mG(Q)^$.charCodeAt(X)&31;for(let X of q)Q=mG(Q)^X;for(let X=0;X<6;X++)Q=mG(Q);return Q^=J,OY.encode(HY([Q%V9[30]],30,5,!1))}function DW($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,X=QW(G);function Y(M,D,K=90){if(aq("bech32.encode prefix",M),D9(D))D=Array.from(D);jY("bech32.encode",D);let N=M.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+D.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=M.toLowerCase(),A=YW(w,D,q);return`${w}1${OY.encode(D)}${A}`}function U(M,D=90){aq("bech32.decode input",M);let K=M.length;if(K<8||D!==!1&&K>D)throw TypeError(`invalid string length: ${K} (${M}). Expected (8..${D})`);let N=M.toLowerCase();if(M!==N&&M!==M.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),A=N.slice(j+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=OY.decode(A).slice(0,-6),_=YW(w,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${M}: expected "${_}"`);return{prefix:w,words:T}}let W=QW(U);function V(M){let{prefix:D,words:K}=U(M,!1);return{prefix:D,words:K,bytes:G(K)}}function z(M,D){return Y(M,Q(D))}return{encode:Y,decode:U,encodeFromBytes:z,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:X,toWords:Q}}var l$=DW("bech32"),W3=DW("bech32m");var dH=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),iH={encode($){return NY($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},V3=dH?iH:I$(b$(4),E$("0123456789abcdef"),L$(""),VW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function nH($,q,J,G){Aq($);let Q=X9({dkLen:32,asyncTick:10},G),{c:X,dkLen:Y,asyncTick:U}=Q;if(L0(X,"c"),L0(Y,"dkLen"),L0(U,"asyncTick"),X<1)throw Error("iterations (c) must be >= 1");if(Y<1)throw Error('"dkLen" must be >= 1');if(Y>4294967295*$.outputLen)throw Error("derived key too long");let W=XY(q,"password"),V=XY(J,"salt"),z=new Uint8Array(Y),M=Sq.create($,W),D=M._cloneInto().update(V);return{c:X,dkLen:Y,asyncTick:U,DK:z,PRF:M,PRFSalt:D}}function oH($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return D$(Q),J}function AY($,q,J,G){let{c:Q,dkLen:X,DK:Y,PRF:U,PRFSalt:W}=nH($,q,J,G),V,z=new Uint8Array(4),M=C8(z),D=new Uint8Array(U.outputLen);for(let K=1,N=0;N<X;K++,N+=U.outputLen){let j=Y.subarray(N,N+U.outputLen);M.setInt32(0,K,!1),(V=W._cloneInto(V)).update(z).digestInto(D),j.set(D.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(V).update(D).digestInto(D);for(let A=0;A<j.length;A++)j[A]^=D[A]}}return oH(U,W,Y,V,D)}function RW($,q,J,G,Q,X){let Y=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],z=$[q++]^J[G++],M=$[q++]^J[G++],D=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],p=$[q++]^J[G++],F=Y,m=U,k=W,y=V,l=z,v=M,P=D,C=K,Z=N,S=j,E=w,g=A,L=T,b=_,O=f,x=p;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),Z^=N0(l+F|0,9),L^=N0(Z+l|0,13),F^=N0(L+Z|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(E+P|0,7),k^=N0(O+E|0,9),P^=N0(k+O|0,13),E^=N0(P+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),P^=N0(v+l|0,7),C^=N0(P+v|0,9),l^=N0(C+P|0,13),v^=N0(l+C|0,18),g^=N0(E+S|0,7),Z^=N0(g+E|0,9),S^=N0(Z+g|0,13),E^=N0(S+Z|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[X++]=Y+F|0,Q[X++]=U+m|0,Q[X++]=W+k|0,Q[X++]=V+y|0,Q[X++]=z+l|0,Q[X++]=M+v|0,Q[X++]=D+P|0,Q[X++]=K+C|0,Q[X++]=N+Z|0,Q[X++]=j+S|0,Q[X++]=w+E|0,Q[X++]=A+g|0,Q[X++]=T+L|0,Q[X++]=_+b|0,Q[X++]=f+O|0,Q[X++]=p+x|0}function BY($,q,J,G,Q){let X=G+0,Y=G+16*Q;for(let U=0;U<16;U++)J[Y+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,X+=16,q+=16){if(RW(J,Y,$,q,J,X),U>0)Y+=16;RW(J,X,$,q+=16,J,Y)}}function aH($,q,J){let G=X9({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:X,p:Y,dkLen:U,asyncTick:W,maxmem:V,onProgress:z}=G;if(L0(Q,"N"),L0(X,"r"),L0(Y,"p"),L0(U,"dkLen"),L0(W,"asyncTick"),L0(V,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let M=128*X,D=M/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(Y<1||Y>(K-1)*32/M)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=M*(Q+Y+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let j=AY(r0,$,q,{c:1,dkLen:M*Y}),w=G9(j),A=G9(new Uint8Array(M*Q)),T=G9(new Uint8Array(M)),_=()=>{};if(z){let f=2*Q*Y,p=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,z&&(!(F%p)||F===f))z(F/f)}}return{N:Q,r:X,p:Y,dkLen:U,blockSize32:D,V:A,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:W}}function sH($,q,J,G,Q){let X=AY(r0,$,J,{c:1,dkLen:q});return D$(J,G,Q),X}function HW($,q,J){let{N:G,r:Q,p:X,dkLen:Y,blockSize32:U,V:W,B32:V,B:z,tmp:M,blockMixCb:D}=aH($,q,J);QY(V);for(let K=0;K<X;K++){let N=U*K;for(let j=0;j<U;j++)W[j]=V[N+j];for(let j=0,w=0;j<G-1;j++)BY(W,w,W,w+=U,Q),D();BY(W,(G-1)*U,V,N,Q),D();for(let j=0;j<G;j++){let w=(V[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)M[A]=V[N+A]^W[w*U+A];BY(M,0,V,N,Q),D()}}return QY(V),sH($,Y,z,W,M)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function tH($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function H9($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function P8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=tH($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function SY($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function OW($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!I8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function eH($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),$4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var q4=($)=>{for(let q=0;q<$.length;q++)$[q]=$4($[q]);return $},Pq=_J?($)=>$:q4;function NW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function jW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function wW($,q,J){let G=q,Q=J||(()=>[]),X=(U,W)=>G(W,...Q(U)).update(U).digest(),Y=G(new Uint8Array($),...Q(new Uint8Array(0)));return X.outputLen=Y.outputLen,X.blockLen=Y.blockLen,X.create=(U,...W)=>G(U,...W),X}var ZW=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let z=Q[0];b0(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let X=$.tagLength;if(X&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let Y=q(G,...Q),U=(z,M)=>{if(M!==void 0){if(z!==2)throw Error("cipher output not supported");b0(M,void 0,"output")}},W=!1;return{encrypt(z,M){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,b0(z),U(Y.encrypt.length,M),Y.encrypt(z,M)},decrypt(z,M){if(b0(z),X&&z.length<X)throw Error('"ciphertext" expected length bigger than tagLength='+X);return U(Y.decrypt.length,M),Y.decrypt(z,M)}}}return Object.assign(J,$),J};function uG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!I8(q))throw Error("invalid output, must be aligned");return q}function AW($,q,J){P8($),P8(q),H9(J);let G=new Uint8Array(16),Q=eH(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function I8($){return $.byteOffset%4===0}function E8($){return Uint8Array.from(b0($))}var SW=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),J4=(()=>Pq(Qq(SW("expand 16-byte k"))))(),G4=(()=>Pq(Qq(SW("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var pG=64,Q4=16,TY=(()=>4294967295)(),BW=Uint32Array.of();function X4($,q,J,G,Q,X,Y,U){let W=Q.length,V=new Uint8Array(pG),z=Qq(V),M=_J&&I8(Q)&&I8(X),D=M?Qq(Q):BW,K=M?Qq(X):BW;if(!_J){for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Pq(z),Y>=TY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);for(let w=0,A;w<j;w++)A=N+w,X[A]=Q[A]^V[w];N+=j}return}for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Y>=TY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);if(M&&j===pG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<Q4;A++)T=w+A,K[T]=D[T]^z[A];N+=pG;continue}for(let w=0,A;w<j;w++)A=N+w,X[A]=Q[A]^V[w];N+=j}}function TW($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:X,rounds:Y}=NW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return P8(Q),P8(Y),H9(X),H9(J),(U,W,V,z,M=0)=>{b0(U,void 0,"key"),b0(W,void 0,"nonce"),b0(V,void 0,"data");let D=V.length;if(z=uG(D,z,!1),P8(M),M<0||M>=TY)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=E8(U)),w=G4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=J4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!I8(W))K.push(W=E8(W));let A=Qq(j);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=W.subarray(0,16);if(_J)G(w,A,Qq(f),A);else{let p=Pq(Uint32Array.from(w));G(p,A,Qq(f),A),r$(p),Pq(A)}W=W.subarray(16)}else if(!_J)Pq(A);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(W,X?0:12-W.length),W=f,K.push(W)}let _=Pq(Qq(W));try{return X4($,w,A,_,V,z,M,Y),z}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class CW{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=E8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),X=d0($,8),Y=d0($,10),U=d0($,12),W=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|X<<12)&255,this.r[5]=X>>>1&8190,this.r[6]=(X>>>14|Y<<2)&8191,this.r[7]=(Y>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=d0($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:X}=this,Y=X[0],U=X[1],W=X[2],V=X[3],z=X[4],M=X[5],D=X[6],K=X[7],N=X[8],j=X[9],w=d0($,q+0),A=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),p=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),P=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),Z=Q[6]+((f>>>14|p<<2)&8191),S=Q[7]+((p>>>11|F<<5)&8191),E=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*Y+y*(5*j)+l*(5*N)+v*(5*K)+P*(5*D);L=b>>>13,b&=8191,b+=C*(5*M)+Z*(5*z)+S*(5*V)+E*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*Y+l*(5*j)+v*(5*N)+P*(5*K);L=O>>>13,O&=8191,O+=C*(5*D)+Z*(5*M)+S*(5*z)+E*(5*V)+g*(5*W),L+=O>>>13,O&=8191;let x=L+k*W+y*U+l*Y+v*(5*j)+P*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+Z*(5*D)+S*(5*M)+E*(5*z)+g*(5*V),L+=x>>>13,x&=8191;let d=L+k*V+y*W+l*U+v*Y+P*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+Z*(5*K)+S*(5*D)+E*(5*M)+g*(5*z),L+=d>>>13,d&=8191;let B=L+k*z+y*V+l*W+v*U+P*Y;L=B>>>13,B&=8191,B+=C*(5*j)+Z*(5*N)+S*(5*K)+E*(5*D)+g*(5*M),L+=B>>>13,B&=8191;let a=L+k*M+y*z+l*V+v*W+P*U;L=a>>>13,a&=8191,a+=C*Y+Z*(5*j)+S*(5*N)+E*(5*K)+g*(5*D),L+=a>>>13,a&=8191;let q0=L+k*D+y*M+l*z+v*V+P*W;L=q0>>>13,q0&=8191,q0+=C*U+Z*Y+S*(5*j)+E*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let X0=L+k*K+y*D+l*M+v*z+P*V;L=X0>>>13,X0&=8191,X0+=C*W+Z*U+S*Y+E*(5*j)+g*(5*N),L+=X0>>>13,X0&=8191;let G0=L+k*N+y*K+l*D+v*M+P*z;L=G0>>>13,G0&=8191,G0+=C*V+Z*W+S*U+E*Y+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*D+P*M;L=t>>>13,t&=8191,t+=C*z+Z*V+S*W+E*U+g*Y,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=X0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let Y=2;Y<10;Y++)$[Y]+=G,G=$[Y]>>>13,$[Y]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let Y=1;Y<10;Y++)J[Y]=$[Y]+G,G=J[Y]>>>13,J[Y]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let Y=0;Y<10;Y++)J[Y]&=Q;Q=~Q;for(let Y=0;Y<10;Y++)$[Y]=$[Y]&Q|J[Y];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let X=$[0]+q[0];$[0]=X&65535;for(let Y=1;Y<8;Y++)X=($[Y]+q[Y]|0)+(X>>>16)|0,$[Y]=X&65535;r$(J)}update($){SY(this),b0($),$=E8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(J-this.pos,G-Q);if(X===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){SY(this),OW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let X=0;X<8;X++)$[Q++]=J[X]>>>0,$[Q++]=J[X]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var PW=wW(32,($)=>new CW($));function Y4($,q,J,G,Q,X=20){let Y=$[0],U=$[1],W=$[2],V=$[3],z=q[0],M=q[1],D=q[2],K=q[3],N=q[4],j=q[5],w=q[6],A=q[7],T=Q,_=J[0],f=J[1],p=J[2],F=Y,m=U,k=W,y=V,l=z,v=M,P=D,C=K,Z=N,S=j,E=w,g=A,L=T,b=_,O=f,x=p;for(let B=0;B<X;B+=2)F=F+l|0,L=j0(L^F,16),Z=Z+L|0,l=j0(l^Z,12),F=F+l|0,L=j0(L^F,8),Z=Z+L|0,l=j0(l^Z,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+P|0,O=j0(O^k,16),E=E+O|0,P=j0(P^E,12),k=k+P|0,O=j0(O^k,8),E=E+O|0,P=j0(P^E,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),E=E+x|0,v=j0(v^E,12),F=F+v|0,x=j0(x^F,8),E=E+x|0,v=j0(v^E,7),m=m+P|0,L=j0(L^m,16),g=g+L|0,P=j0(P^g,12),m=m+P|0,L=j0(L^m,8),g=g+L|0,P=j0(P^g,7),k=k+C|0,b=j0(b^k,16),Z=Z+b|0,C=j0(C^Z,12),k=k+C|0,b=j0(b^k,8),Z=Z+b|0,C=j0(C^Z,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=Y+F|0,G[d++]=U+m|0,G[d++]=W+k|0,G[d++]=V+y|0,G[d++]=z+l|0,G[d++]=M+v|0,G[d++]=D+P|0,G[d++]=K+C|0,G[d++]=N+Z|0,G[d++]=j+S|0,G[d++]=w+E|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=p+x|0}var U4=TW(Y4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var W4=new Uint8Array(16),IW=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(W4.subarray(J))},V4=new Uint8Array(32);function EW($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let X=$(q,J,V4),Y=AW(G.length,Q?Q.length:0,!0),U=PW.create(X);if(Q)IW(U,Q);IW(U,G),U.update(Y);let W=U.digest();return r$(X,Y),W}var z4=($)=>(q,J,G)=>{return{encrypt(X,Y){let U=X.length;Y=uG(U+16,Y,!1),Y.set(X);let W=Y.subarray(0,-16);$(q,J,W,W,1);let V=EW($,q,J,W,G);return Y.set(V,U),r$(V),Y},decrypt(X,Y){Y=uG(X.length-16,Y,!1);let U=X.subarray(0,-16),W=X.subarray(-16),V=EW($,q,J,U,G);if(!jW(W,V))throw r$(V),Error("invalid tag");return Y.set(X.subarray(0,-16)),$(q,J,Y,Y,1),r$(V),Y}}},sq=ZW({blockSize:64,nonceLength:12,tagLength:16},z4(U4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(Y+"expected Uint8Array"+U+", got "+W)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Eq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function O9($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function N9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function A$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function j9($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var M4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function K4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function D4($){for(let q=0;q<$.length;q++)$[q]=K4($[q]);return $}var CY=M4?($)=>$:D4,FW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),R4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),FW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=R4[$[J]];return q}var Iq={_0:48,_9:57,A:65,F:70,a:97,f:102};function LW($){if($>=Iq._0&&$<=Iq._9)return $-Iq._0;if($>=Iq.A&&$<=Iq.F)return $-(Iq.A-10);if($>=Iq.a&&$<=Iq.f)return $-(Iq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(FW)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=LW($.charCodeAt(X)),U=LW($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function F8($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IY=BigInt(0),PY=BigInt(1);function lG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function gW($){if(typeof $==="bigint"){if(!w9($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function rG($){let q=gW($).toString(16);return q.length&1?"0"+q:q}function _W($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?IY:BigInt("0x"+$)}function $J($){return _W(vJ($))}function qJ($){return _W(vJ(Z9(Q0($)).reverse()))}function g8($,q){m0(q),$=gW($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function dG($,q){return g8($,q).reverse()}function Z9($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var w9=($)=>typeof $==="bigint"&&IY<=$;function H4($,q,J){return w9($)&&w9(q)&&w9(J)&&q<=$&&$<J}function iG($,q,J,G){if(!H4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function EY($){let q;for(q=0;$>IY;$>>=PY,q+=1);return q}var cG=($)=>(PY<<BigInt($))-PY;function vW($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,g0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){W=D();let T=W.slice();A.push(T),w+=W.length}return g0(...A)};return(w,A)=>{M(),K(w);let T=void 0;while(!(T=A(N())))K();return M(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(X,Y,U){let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw Error(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}function LY($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let X=$(J,...G);return q.set(J,X),X}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),kW=BigInt(3),fW=BigInt(4),xW=BigInt(5),O4=BigInt(7),mW=BigInt(8),N4=BigInt(9),hW=BigInt(16);function R$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function bW($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=R$($,q),G=q,Q=H$,X=q$,Y=q$,U=H$;while(J!==H$){let V=G/J,z=G%J,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==q$)throw Error("invert: does not exist");return R$(Q,q)}function FY($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function uW($,q){let J=($.ORDER+q$)/fW,G=$.pow(q,J);return FY($,G,q),G}function j4($,q){let J=($.ORDER-xW)/mW,G=$.mul(q,kJ),Q=$.pow(G,J),X=$.mul(q,Q),Y=$.mul($.mul(X,kJ),Q),U=$.mul(X,$.sub(Y,$.ONE));return FY($,U,q),U}function w4($){let q=A9($),J=pW($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+O4)/hW;return(U,W)=>{let V=U.pow(W,Y),z=U.mul(V,G),M=U.mul(V,Q),D=U.mul(V,X),K=U.eql(U.sqr(z),W),N=U.eql(U.sqr(M),W);V=U.cmov(V,z,K),z=U.cmov(D,M,N);let j=U.eql(U.sqr(z),W),w=U.cmov(V,z,j);return FY(U,w,W),w}}function pW($){if($<kW)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=A9($);while(yW(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return uW;let X=Q.pow(G,q),Y=(q+q$)/kJ;return function(W,V){if(W.is0(V))return V;if(yW(W,V)!==1)throw Error("Cannot find square root");let z=J,M=W.mul(W.ONE,X),D=W.pow(V,q),K=W.pow(V,Y);while(!W.eql(D,W.ONE)){if(W.is0(D))return W.ZERO;let N=1,j=W.sqr(D);while(!W.eql(j,W.ONE))if(N++,j=W.sqr(j),N===z)throw Error("Cannot find square root");let w=q$<<BigInt(z-N-1),A=W.pow(M,w);z=N,M=W.sqr(A),D=W.mul(D,M),K=W.mul(K,A)}return K}}function Z4($){if($%fW===kW)return uW;if($%mW===xW)return j4;if($%hW===N4)return w4($);return pW($)}var A4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function gY($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=A4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function B4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function nG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((Y,U,W)=>{if($.is0(U))return Y;return G[W]=Y,$.mul(Y,U)},$.ONE),X=$.inv(Q);return q.reduceRight((Y,U,W)=>{if($.is0(U))return Y;return G[W]=$.mul(Y,G[W]),$.mul(Y,U)},X),G}function yW($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),X=$.eql(G,$.ZERO),Y=$.eql(G,$.neg($.ONE));if(!Q&&!X&&!Y)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function S4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class lW{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=S4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return R$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R$($*$,this.ORDER)}add($,q){return R$($+q,this.ORDER)}sub($,q){return R$($-q,this.ORDER)}mul($,q){return R$($*q,this.ORDER)}pow($,q){return B4(this,$,q)}div($,q){return R$($*bW(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return bW($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=Z4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?dG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(Y)U=R$(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return nG(this,$)}cmov($,q,J){return J?q:$}}function A9($,q={}){return new lW($,q)}function rW($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function _Y($){let q=rW($);return q+Math.ceil(q/2)}function dW($,q,J=!1){Q0($);let G=$.length,Q=rW(q),X=_Y(q);if(G<16||G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?qJ($):$J($),U=R$(Y,q-q$)+q$;return J?dG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function oG($,q){let J=q.negate();return $?J:q}function kY($,q){let J=nG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function oW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function vY($,q){oW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=cG($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function iW($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=fJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var bY=new WeakMap,aW=new WeakMap;function yY($){return aW.get($)||1}function cW($){if($!==_8)throw Error("invalid wNAF")}class fY{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=vY(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=vY($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=iW(J,Y,X);if(J=U,V)Q=Q.add(oG(M,q[D]));else G=G.add(oG(z,q[W]))}return cW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=vY($,this.bits);for(let X=0;X<Q.windows;X++){if(J===_8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=iW(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return cW(J),G}getPrecomputes($,q,J){let G=bY.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);bY.set(q,G)}}return G}cached($,q,J){let G=yY($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=yY($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){oW(q,this.bits),aW.set($,q),bY.delete($)}hasCache($){return yY($)!==1}}function sW($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>_8||G>_8){if(J&fJ)X=X.add(Q);if(G&fJ)Y=Y.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:X,p2:Y}}function nW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return gY(q),q}else return A9($,{isLE:J})}function tW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>_8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=nW(q.p,J.Fp,G),X=nW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function B9($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aG=BigInt(0),v8=BigInt(1),S9=BigInt(2);function T4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eW($){let q=T4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y||tq,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?S9**BigInt(254):S9**BigInt(447),N=U?BigInt(8)*S9**BigInt(251)-v8:BigInt(4)*S9**BigInt(445)-v8,j=K+N+v8,w=(Z)=>R$(Z,J),A=T(M);function T(Z){return dG(w(Z),z)}function _(Z){let S=Z9(Q0(Z,z,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(Z){return qJ(Q(Z9(Q0(Z,z,"scalar"))))}function p(Z,S){let E=l(_(S),f(Z));if(E===aG)throw Error("invalid private or public key received");return T(E)}function F(Z){return p(Z,A)}let m=F,k=p;function y(Z,S,E){let g=w(Z*(S-E));return S=w(S-g),E=w(E+g),{x_2:S,x_3:E}}function l(Z,S){iG("u",Z,aG,J),iG("scalar",S,K,j);let E=S,g=Z,L=v8,b=aG,O=Z,x=v8,d=aG;for(let a=BigInt(V-1);a>=aG;a--){let q0=E>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,P0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(P0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},P=(Z=W(z))=>{return Q0(Z,v.seed,"seed"),Z},C={randomSecretKey:P};return Object.freeze({keygen:B9(P,m),getSharedSecret:k,getPublicKey:m,scalarMult:p,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}class xY{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),A$(G)}update($){return Eq(this),this.iHash.update($),this}digestInto($){Eq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new xY($,q).update(J).digest();b8.create=($,q)=>new xY($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $V=($,q)=>($+($>=0?q:-q)/JV)/q;function C4($,q,J){let[[G,Q],[X,Y]]=q,U=$V(Y*$,J),W=$V(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Lq,D=z<Lq;if(M)V=-V;if(D)z=-z;let K=cG(Math.ceil(EY(J)/2))+y8;if(V<Lq||V>=K||z<Lq||z>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:M,k1:V,k2neg:D,k2:z}}function hY($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function mY($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(lG(J.lowS,"lowS"),lG(J.prehash,"prehash"),J.format!==void 0)hY(J.format);return J}class qV extends Error{constructor($=""){super($)}}var GJ={Err:qV,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=rG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?rG(Q.length/2|128):"";return rG($)+X+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=GJ;if($<Lq)throw new q("integer: negative integers are not allowed");let J=rG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}},Lq=BigInt(0),y8=BigInt(1),JV=BigInt(2),T9=BigInt(3),P4=BigInt(4);function uY($,q={}){let J=tW("weierstrass",$,q),{Fp:G,Fn:Q}=J,X=J.CURVE,{h:Y,n:U}=X;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=QV(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function M(P,C,Z){let{x:S,y:E}=C.toAffine(),g=G.toBytes(S);if(lG(Z,"isCompressed"),Z){z();let L=!G.isOdd(E);return g0(GV(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(E))}function D(P){Q0(P,void 0,"Point");let{publicKey:C,publicKeyUncompressed:Z}=V,S=P.length,E=P[0],g=P.subarray(1);if(S===C&&(E===2||E===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}z();let x=G.isOdd(O);if((E&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&E===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${Z}`)}let K=q.toBytes||M,N=q.fromBytes||D;function j(P){let C=G.sqr(P),Z=G.mul(C,P);return G.add(G.add(Z,G.mul(P,X.a)),X.b)}function w(P,C){let Z=G.sqr(C),S=j(P);return G.eql(Z,S)}if(!w(X.Gx,X.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(X.a,T9),P4),T=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(P,C,Z=!1){if(!G.isValid(C)||Z&&G.is0(C))throw Error(`bad point coordinate ${P}`);return C}function f(P){if(!(P instanceof y))throw Error("Weierstrass Point expected")}function p(P){if(!W||!W.basises)throw Error("no endo");return C4(P,W.basises,Q.ORDER)}let F=LY((P,C)=>{let{X:Z,Y:S,Z:E}=P;if(G.eql(E,G.ONE))return{x:Z,y:S};let g=P.is0();if(C==null)C=g?G.ONE:G.inv(E);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(E,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=LY((P)=>{if(P.is0()){if(q.allowInfinityPoint&&!G.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:C,y:Z}=P.toAffine();if(!G.isValid(C)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!w(C,Z))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(P,C,Z,S,E){return Z=new y(G.mul(Z.X,P),Z.Y,Z.Z),C=oG(S,C),Z=oG(E,Z),C.add(Z)}class y{static BASE=new y(X.Gx,X.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(P,C,Z){this.X=_("x",P),this.Y=_("y",C,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return X}static fromAffine(P){let{x:C,y:Z}=P||{};if(!P||!G.isValid(C)||!G.isValid(Z))throw Error("invalid affine point");if(P instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(Z))return y.ZERO;return new y(C,Z,G.ONE)}static fromBytes(P){let C=y.fromAffine(N(Q0(P,void 0,"point")));return C.assertValidity(),C}static fromHex(P){return y.fromBytes(bJ(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,C=!0){if(v.createCache(this,P),!C)this.multiply(T9);return this}assertValidity(){m(this)}hasEvenY(){let{y:P}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(P)}equals(P){f(P);let{X:C,Y:Z,Z:S}=this,{X:E,Y:g,Z:L}=P,b=G.eql(G.mul(C,L),G.mul(E,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:P,b:C}=X,Z=G.mul(C,T9),{X:S,Y:E,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(E,E),B=G.mul(g,g),a=G.mul(S,E);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(P,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(P,B),a=G.sub(x,B),a=G.mul(P,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(E,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(P){f(P);let{X:C,Y:Z,Z:S}=this,{X:E,Y:g,Z:L}=P,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=X.a,B=G.mul(X.b,T9),a=G.mul(C,E),q0=G.mul(Z,g),X0=G.mul(S,L),G0=G.add(C,Z),t=G.add(E,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(E,L);return t=G.mul(t,O0),O0=G.add(a,X0),t=G.sub(t,O0),O0=G.add(Z,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,X0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,X0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),X0=G.mul(d,X0),t=G.mul(B,t),q0=G.add(q0,X0),X0=G.sub(a,X0),X0=G.mul(d,X0),t=G.add(t,X0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(P){return this.add(P.negate())}is0(){return this.equals(y.ZERO)}multiply(P){let{endo:C}=q;if(!Q.isValidNot0(P))throw Error("invalid scalar: out of range");let Z,S,E=(g)=>v.cached(this,g,(L)=>kY(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=p(P),{p:x,f:d}=E(L),{p:B,f:a}=E(O);S=d.add(a),Z=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=E(P);Z=g,S=L}return kY(y,[Z,S])[0]}multiplyUnsafe(P){let{endo:C}=q,Z=this;if(!Q.isValid(P))throw Error("invalid scalar: out of range");if(P===Lq||Z.is0())return y.ZERO;if(P===y8)return Z;if(v.hasCache(this))return this.multiply(P);if(C){let{k1neg:S,k1:E,k2neg:g,k2:L}=p(P),{p1:b,p2:O}=sW(y,Z,E,L);return k(C.beta,b,O,S,g)}else return v.unsafe(Z,P)}toAffine(P){return F(this,P)}isTorsionFree(){let{isTorsionFree:P}=q;if(Y===y8)return!0;if(P)return P(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:P}=q;if(Y===y8)return this;if(P)return P(y,this);return this.multiplyUnsafe(Y)}isSmallOrder(){return this.multiplyUnsafe(Y).is0()}toBytes(P=!0){return lG(P,"isCompressed"),this.assertValidity(),K(y,this,P)}toHex(P=!0){return vJ(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new fY(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function GV($){return Uint8Array.of($?2:3)}function QV($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function I4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(QV($.Fp,J),{seed:_Y(J.ORDER)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K=G(Q.seed)){return dW(Q0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let A=Q0(K,void 0,"key").length;return A===j||A===w}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=B9(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function pY($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:X,Fn:Y}=$,{ORDER:U,BITS:W}=Y,{keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K}=I4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*JV<X.ORDER;function w(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!Y.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){hY(S);let E=K.signature,g=S==="compact"?E:S==="recovered"?E+1:void 0;return Q0(Z,g)}class f{r;s;recovery;constructor(Z,S,E){if(this.r=A("r",Z),this.s=A("s",S),E!=null){if(T(),![0,1,2,3].includes(E))throw Error("invalid recovery id");this.recovery=E}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let E;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(Z));return new f(O,x)}if(S==="recovered")E=Z[0],S="compact",Z=Z.subarray(1);let g=K.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new f(Y.fromBytes(L),Y.fromBytes(b),E)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new f(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:E}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!X.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=X.toBytes(L),O=$.fromBytes(g0(GV((g&1)===0),b)),x=Y.inv(L),d=F(Q0(Z,void 0,"msgHash")),B=Y.create(-d*x),a=Y.create(E*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(Z=N.format){if(hY(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:E}=this,g=Y.toBytes(S),L=Y.toBytes(E);if(Z==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let p=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let E=$J(S),g=S.length*8-W;return g>0?E>>BigInt(g):E},F=J.bits2int_modN||function(S){return Y.create(p(S))},m=cG(W);function k(Z){return iG("num < 2^"+W,Z,Lq,m),Y.toBytes(Z)}function y(Z,S){return Q0(Z,void 0,"message"),S?Q0(q(Z),void 0,"prehashed message"):Z}function l(Z,S,E){let{lowS:g,prehash:L,extraEntropy:b}=mY(E,N);Z=y(Z,L);let O=F(Z),x=Y.fromBytes(S);if(!Y.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let X0=b===!0?G(K.secretKey):b;d.push(Q0(X0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(X0){let G0=p(X0);if(!Y.isValidNot0(G0))return;let t=Y.inv(G0),O0=$.BASE.multiply(G0).toAffine(),Z0=Y.create(O0.x);if(Z0===Lq)return;let P0=Y.create(t*Y.create(a+Z0*x));if(P0===Lq)return;let x0=(O0.x===Z0?0:2)|Number(O0.y&y8),K$=P0;if(g&&w(P0))K$=Y.neg(P0),x0^=1;return new f(Z0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(Z,S,E={}){let{seed:g,k2sig:L}=l(Z,S,E);return vW(q.outputLen,Y.BYTES,Q)(g,L).toBytes(E.format)}function P(Z,S,E,g={}){let{lowS:L,prehash:b,format:O}=mY(g,N);if(E=Q0(E,void 0,"publicKey"),S=y(S,b),!L8(Z)){let x=Z instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(Z,O);try{let x=f.fromBytes(Z,O),d=$.fromBytes(E);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),X0=Y.inv(a),G0=Y.create(q0*X0),t=Y.create(B*X0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return Y.create(O0.x)===B}catch(x){return!1}}function C(Z,S,E={}){let{prehash:g}=mY(E,N);return S=y(S,g),f.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K,Point:$,sign:v,verify:P,recoverPublicKey:C,Signature:f,hash:q})}function XV($,q,J){return $&q^~$&J}function YV($,q,J){return $&q^$&J^q&J}class C9{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=j9(this.buffer)}update($){Eq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=j9($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Eq(this),O9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,A$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=j9($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Fq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),gq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var P9=BigInt(4294967295),UV=BigInt(32);function E4($,q=!1){if(q)return{h:Number($&P9),l:Number($>>UV&P9)};return{h:Number($>>UV&P9)|0,l:Number($&P9)|0}}function I9($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=E4($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var lY=($,q,J)=>$>>>J,rY=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,sG=($,q,J)=>$<<64-J|q>>>J-32,tG=($,q,J)=>$>>>J-32|q<<64-J;var WV=($,q,J)=>$<<J|q>>>32-J,VV=($,q,J)=>q<<J|$>>>32-J,zV=($,q,J)=>q<<J-32|$>>>64-J,MV=($,q,J)=>$<<J-32|q>>>64-J;function Xq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var KV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),DV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,RV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),HV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,OV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),NV=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var F4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class dY extends C9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)QJ[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=QJ[z-15],D=QJ[z-2],K=d$(M,7)^d$(M,18)^M>>>3,N=d$(D,17)^d$(D,19)^D>>>10;QJ[z]=N+QJ[z-7]+K+QJ[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=d$(Y,6)^d$(Y,11)^d$(Y,25),D=V+M+XV(Y,U,W)+F4[z]+QJ[z]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+YV(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){A$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),A$(this.buffer)}}class jV extends dY{A=Fq[0]|0;B=Fq[1]|0;C=Fq[2]|0;D=Fq[3]|0;E=Fq[4]|0;F=Fq[5]|0;G=Fq[6]|0;H=Fq[7]|0;constructor(){super(32)}}class g4 extends dY{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(28)}}var wV=(()=>I9(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),_4=(()=>wV[0])(),v4=(()=>wV[1])(),XJ=new Uint32Array(80),YJ=new Uint32Array(80);class eG extends C9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)XJ[T]=$.getUint32(q),YJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=XJ[T-15]|0,f=YJ[T-15]|0,p=xJ(_,f,1)^xJ(_,f,8)^lY(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^rY(_,f,7),m=XJ[T-2]|0,k=YJ[T-2]|0,y=xJ(m,k,19)^sG(m,k,61)^lY(m,k,6),l=mJ(m,k,19)^tG(m,k,61)^rY(m,k,6),v=RV(F,l,YJ[T-7],YJ[T-16]),P=HV(v,p,y,XJ[T-7],XJ[T-16]);XJ[T]=P|0,YJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=xJ(z,M,14)^xJ(z,M,18)^sG(z,M,41),f=mJ(z,M,14)^mJ(z,M,18)^tG(z,M,41),p=z&D^~z&N,F=M&K^~M&j,m=OV(A,f,F,v4[T],YJ[T]),k=NV(m,w,_,p,_4[T],XJ[T]),y=m|0,l=xJ(J,G,28)^sG(J,G,34)^sG(J,G,39),v=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),P=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,A=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Xq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let Z=KV(y,v,C);J=DV(Z,k,l,P),G=Z|0}({h:J,l:G}=Xq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Xq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Xq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Xq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Xq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Xq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Xq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Xq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,A)}roundClean(){A$(XJ,YJ)}destroy(){A$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class b4 extends eG{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class ZV extends eG{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class y4 extends eG{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class k4 extends eG{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var E9=F8(()=>new jV,eq(1));var AV=F8(()=>new ZV,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var f4=BigInt(1),BV=BigInt(2),x4=BigInt(3),m4=BigInt(5),zF=BigInt(8),SV=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function h4($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=SV,U=$*$%X*$%X,W=k$(U,BV,X)*U%X,V=k$(W,f4,X)*$%X,z=k$(V,m4,X)*V%X,M=k$(z,q,X)*z%X,D=k$(M,J,X)*M%X,K=k$(D,G,X)*D%X,N=k$(K,Q,X)*K%X,j=k$(N,Q,X)*K%X,w=k$(j,q,X)*z%X;return{pow_p_5_8:k$(w,BV,X)*$%X,b2:U}}function u4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TV=(()=>{let $=SV;return eW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=h4(q);return R$(k$(J,x4,$)*G,$)},adjustScalarBytes:u4})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),l4=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var r4=uY(p4),iY=pY(r4,E9);var d4=uY(l4),CV=pY(d4,AV);function IV($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var cY=Uint8Array.of(0),PV=Uint8Array.of();function EV($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=PV;else Q0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=b8.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)cY[0]=z+1,W.update(z===0?PV:V).update(J).update(cY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),A$(V,cY),Y.slice(0,G)}var i4=BigInt(0),$Q=BigInt(1),c4=BigInt(2),n4=BigInt(7),o4=BigInt(256),a4=BigInt(113),gV=[],_V=[],vV=[];for(let $=0,q=$Q,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],gV.push(2*(5*G+J)),_V.push(($+1)*($+2)/2%64);let Q=i4;for(let X=0;X<7;X++)if(q=(q<<$Q^(q>>n4)*a4)%o4,q&c4)Q^=$Q<<($Q<<BigInt(X))-$Q;vV.push(Q)}var bV=I9(vV,!0),s4=bV[0],t4=bV[1],LV=($,q,J)=>J>32?zV($,q,J):WV($,q,J),FV=($,q,J)=>J>32?MV($,q,J):VV($,q,J);function e4($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let Y=0;Y<10;Y++)J[Y]=$[Y]^$[Y+10]^$[Y+20]^$[Y+30]^$[Y+40];for(let Y=0;Y<10;Y+=2){let U=(Y+8)%10,W=(Y+2)%10,V=J[W],z=J[W+1],M=LV(V,z,1)^J[U],D=FV(V,z,1)^J[U+1];for(let K=0;K<50;K+=10)$[Y+K]^=M,$[Y+K+1]^=D}let Q=$[2],X=$[3];for(let Y=0;Y<24;Y++){let U=_V[Y],W=LV(Q,X,U),V=FV(Q,X,U),z=gV[Y];Q=$[z],X=$[z+1],$[z]=W,$[z+1]=V}for(let Y=0;Y<50;Y+=10){for(let U=0;U<10;U++)J[U]=$[Y+U];for(let U=0;U<10;U++)$[Y+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=s4[G],$[1]^=t4[G]}A$(J)}class L9{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=N9(this.state)}clone(){return this._cloneInto()}keccak(){CY(this.state32),e4(this.state32,this.rounds),CY(this.state32),this.posOut=0,this.pos=0}update($){Eq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(q-this.pos,G-Q);for(let Y=0;Y<X;Y++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Eq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let X=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+X),G),this.posOut+=X,G+=X}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(O9($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,A$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:X}=this;return $||=new L9(q,J,G,X,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=X,$.destroyed=this.destroyed,$}}var yV=($,q,J,G={})=>F8(()=>new L9(q,$,J),G);var hJ=yV(6,136,32,eq(8));var kV=yV(6,72,64,eq(10));var fV=($,q,J,G={})=>F8((Q={})=>new L9(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),xV=fV(31,168,16,eq(11)),Yq=fV(31,136,32,eq(12));function nY($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function hV($){return nY($),($&$-1)===0&&$!==0}function oY($,q){nY($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function uV($){return nY($),31-Math.clz32($)}function mV($){let q=$.length;if(q<2||!hV(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=uV(q);for(let G=0;G<q;G++){let Q=oY(G,J);if(G<Q){let X=$[G];$[G]=$[Q],$[Q]=X}}return $}var aY=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:X=!1,skipStages:Y=0,brp:U=!0}=q,W=uV(J);if(!hV(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==X;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)mV(z);for(let M=0,D=1;M<W-Y;M++){let K=Q?M+1+Y:W-M,N=1<<K,j=N>>1,w=J>>K;for(let A=0;A<J;A+=N)for(let T=0,_=D++;T<j;T++){let f=X?Q?J-_:_:T*w,p=A+T,F=A+T+j,m=G[f],k=z[F],y=z[p];if(V){let l=$.mul(k,m);z[p]=$.add(y,l),z[F]=$.sub(y,l)}else if(X)z[p]=$.add(k,y),z[F]=$.mul($.sub(k,y),m);else z[p]=$.add(y,k),z[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)mV(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function F9($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function pV($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,X)=>Q+J(X),0);return{bytesLen:G,encode:(Q)=>{let X=new Uint8Array(G);for(let Y=0,U=0;Y<q.length;Y++){let W=q[Y],V=J(W),z=typeof W==="number"?Q[Y]:W.encode(Q[Y]);if(Q0(z,V,$),X.set(z,U),typeof W!=="number")z.fill(0);U+=V}return X},decode:(Q)=>{Q0(Q,G,$);let X=[];for(let Y of q){let U=J(Y),W=Q.subarray(0,U);X.push(typeof Y==="number"?W:Y.decode(W)),Q=Q.subarray(U)}return X}}}function g9($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let X=0,Y=0;X<G.length;X++){let U=$.encode(G[X]);Q.set(U,Y),U.fill(0),Y+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let X=0;X<G.length;X+=$.bytesLen)Q.push($.decode(G.subarray(X,X+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function sY($){return(1<<$)-1}var CF=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var lV=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:X,brvBits:Y,isKyber:U}=$,W=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},V=(T,_=G)=>{let f=W(T,_)|0;return(f>_>>1?f-_|0:f)|0};function z(){let T=q(J);for(let _=0;_<J;_++){let f=oY(_,Y),p=BigInt(X)**BigInt(f)%BigInt(G);T[_]=Number(p)|0}return T}let M=z(),D={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:M,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=aY(D,{dit:!1,...K}),j=aY(D,{dit:!0,...K});return{mod:W,smod:V,nttZetas:M,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=sY(T),p=T*(J/8);return{bytesLen:p,encode:(F)=>{let m=new Uint8Array(p);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&sY(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},$O=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,X=new Uint8Array(J),Y=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,z)=>{return G[Q+0]=V,G[Q+1]=z,Y.destroy(),Y=$.create({}).update(G),U++,()=>{return W++,Y.xofInto(X)}},clean:()=>{Y.destroy(),y0(X,G)}}},rV=$O(xV);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,_q=3329,qO=3303,JO=17,{mod:GQ,nttZetas:GO,NTT:pJ,bitsCoder:QO}=lV({N:Q$,Q:_q,F:qO,ROOT_OF_UNITY:JO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),tY={512:{N:Q$,Q:_q,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:_q,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:_q,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},XO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+_q/2)/_q,decode:(J)=>J*_q+q>>>$}},qQ=($)=>QO($,XO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]+q[J])}function YO($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]-q[J])}function UO($,q,J,G,Q){let X=GQ(q*G*Q+$*J),Y=GQ($*G+q*J);return{c0:X,c1:Y}}function _9($,q){for(let J=0;J<Q$/2;J++){let G=GO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:X}=UO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=X}return $}function dV($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let X=(G[Q+0]>>0|G[Q+1]<<8)&4095,Y=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(X<_q)q[J++]=X;if(J<Q$&&Y<_q)q[J++]=Y}}return q}function JQ($,q,J,G){let Q=$(G*Q$/4,q,J),X=new Uint16Array(Q$),Y=N9(Q),U=0;for(let W=0,V=0,z=0,M=0;W<Y.length;W++){let D=Y[W];for(let K=0;K<32;K++)if(z+=D&1,D>>=1,U+=1,U===G)M=z,z=0;else if(U===2*G)X[V++]=GQ(M-z),z=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return X}var WO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:X,ETA2:Y,du:U,dv:W}=$,V=qQ(1),z=qQ(W),M=qQ(U),D=uJ("publicKey",g9(qQ(12),q),32),K=g9(qQ(12),q),N=uJ("ciphertext",g9(M,q),z),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let A=new Uint8Array(33);A.set(w),A[32]=q;let T=Q(A),[_,f]=j.decode(T),p=[],F=[];for(let y=0;y<q;y++)p.push(pJ.encode(JQ(J,f,y,X)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(JQ(J,f,q+y,X));for(let v=0;v<q;v++){let P=dV(m.get(v,y));lJ(l,_9(P,p[v]))}F.push(l)}m.clean();let k={publicKey:D.encode([F,_]),secretKey:K.encode(p)};return y0(_,f,p,F,A,T),k},encrypt:(w,A,T)=>{let[_,f]=D.decode(w),p=[];for(let v=0;v<q;v++)p.push(pJ.encode(JQ(J,T,v,X)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let P=JQ(J,T,q+v,Y),C=new Uint16Array(Q$);for(let Z=0;Z<q;Z++){let S=dV(F.get(v,Z));lJ(C,_9(S,p[Z]))}lJ(P,pJ.decode(C)),k.push(P),lJ(m,_9(_[v],p[v])),y0(C)}F.clean();let y=JQ(J,T,2*q,Y);lJ(y,pJ.decode(m));let l=V.decode(A);return lJ(l,y),y0(_,p,m,y),N.encode([k,l])},decrypt:(w,A)=>{let[T,_]=N.decode(w),f=K.decode(A),p=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(p,_9(f[F],pJ.encode(T[F])));return YO(_,pJ.decode(p)),y0(p,f,T),V.encode(_)}}};function eY($){let q=WO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:X,lengths:Y}=q,U=uJ("secretKey",Y.secretKey,Y.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...Y,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(z=Uq(64))=>{Q0(z,64,"seed");let{publicKey:M,secretKey:D}=q.keygen(z.subarray(0,32)),K=J(M),N=U.encode([D,M,K,z.subarray(32)]);return y0(D,K),{publicKey:M,secretKey:N}},getPublicKey:(z)=>{let[M,D,K,N]=U.decode(z);return Uint8Array.from(D)},encapsulate:(z,M=Uq(32))=>{Q0(z,Y.publicKey,"publicKey"),Q0(M,32,"message");let D=z.subarray(0,384*$.K),K=X.encode(X.decode(pV(D)));if(!F9(K,D))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(M).update(J(z)).digest(),j=q.encrypt(z,M,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(z,M)=>{Q0(M,U.bytesLen,"secretKey"),Q0(z,Y.cipherText,"cipherText");let D=U.bytesLen-96,K=D+32,N=J(M.subarray(D/2,K));if(!F9(N,M.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,A,T]=U.decode(M),_=q.decrypt(z,j),f=G.create().update(_).update(A).digest(),p=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=F9(z,F),k=Q.create({dkLen:32}).update(T).update(z).digest();return y0(_,F,!m?p:k),m?p:k}}}function VO($,q,J){return Yq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var $U={HASH256:hJ,HASH512:kV,KDF:Yq,XOF:rV,PRF:VO},kF=eY({...$U,...tY[512]}),QQ=eY({...$U,...tY[768]}),iV=eY({...$U,...tY[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function zO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let X=$.Point.Fn;if(!X)throw Error("No Point.Fn");G=(Y=Uq(J.seed))=>{Q0(Y,J.seed,"seed");let U=X.isLE?qJ(Y):$J(Y),W=X.toBytes(X.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function qU($,q=!1){let J=zO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let X=this.keygen(Q).secretKey,Y=this.decapsulate(G,X),U=$.getPublicKey(X);return y0(X),{sharedSecret:Y,cipherText:U}},decapsulate(G,Q){let X=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?X.subarray(1):X}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function JU($){return(q,J)=>$(q,{dkLen:J})}function MO($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function X(Y){Q0(Y,$);let U=G.decode(q(Y,G.bytesLen)),W=J.map((M,D)=>M.keygen(U[D])),V=W.map((M)=>M.secretKey),z=W.map((M)=>M.publicKey);return{secretKey:V,publicKey:z}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(Y){return this.keygen(Y).publicKey},keygen(Y=Uq($)){let{publicKey:U,secretKey:W}=X(Y),V=Q.encode(U);return y0(U),y0(W),{secretKey:Y,publicKey:V}},expandDecapsulationKey:X,realSeedLen:$}}function v9($,q,J,G,...Q){let X=MO($,J,...Q),Y=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),W=XQ(Q,"msg");if(q===void 0)q=W.bytesLen;return m0(q),{lengths:{...X.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:Y.bytesLen},getPublicKey:X.getPublicKey,keygen:X.keygen,encapsulate(V,z=Uq(W.bytesLen)){let M=U.decode(V),D=W.decode(z),K=Q.map((A,T)=>A.encapsulate(M[T],D[T])),N=K.map((A)=>A.sharedSecret),j=K.map((A)=>A.cipherText),w={sharedSecret:G(M,j,N),cipherText:Y.encode(j)};return y0(N,j),w},decapsulate(V,z){let M=Y.decode(V),{publicKey:D,secretKey:K}=X.expandDecapsulationKey(z),N=Q.map((j,w)=>j.decapsulate(M[w],K[w]));return G(D,M,N)}}}function cV($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,JU(G),(X,Y,U)=>Q(g0(U[0],U[1],Y[1],X[1],JJ($))),q,J)}var cF=cV("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",QQ,qU(iY,!0),Yq,hJ),nF=cV("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",iV,qU(CV,!0),Yq,hJ);function KO($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,JU(G),(X,Y,U)=>{let W=g0(U[0],U[1],Y[0],X[0],Y[1],X[1],JJ($)),V=32,z=g0(JJ("hybrid_prk"),W),M=IV(Q,z),D=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=EV(Q,M,D,32);return y0(M,D,z,W),K},q,J)}var nV=qU(TV),oF=KO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",QQ,nV,Yq,E9),DO=(()=>v9(32,32,JU(Yq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),QQ,nV))();function RO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function X(Y){let U;for(let z=0,M=q;;z=M,M+=q){if(M>Y.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(Y.subarray(z,M),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(Y=Uq(G)){return Q0(Y,G,"seed"),X(Y)},getPublicKey(Y){return $.getPublicKey(Y,!1)},encapsulate(Y,U=Uq(G)){Q0(U,G,"rand");let{secretKey:W}=X(U),V=this.decapsulate(Y,W),z=$.getPublicKey(W,!1);return y0(W),{sharedSecret:V,cipherText:z}},decapsulate(Y,U){return $.getSharedSecret(U,Y).subarray(1)}}}function HO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:X}=J.lengths;if(!Q||!X)throw Error("wrong curve");let Y=RO(J,Q,X,G),U=64,W=U+G;return v9(32,32,(V)=>{Q0(V,32);let z=Yq(V,{dkLen:W}),M=z.subarray(0,U),D=z.subarray(U,W);return g0(M,D)},(V,z,M)=>hJ(g0(M[0],M[1],z[1],V[1],JJ($))),q,Y)}var OO=(()=>HO("MLKEM768-P256",QQ,iY,128))();var GU=DO,oV=OO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var A0=($,q,J)=>u0($,q,J),XU=L0,k8=Q9,n0=(...$)=>YY(...$),f8=($)=>vG($),x8=GY,m8=($)=>Bq($),y9=BigInt(0),QU=BigInt(1);function vq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function k9($){if(typeof $==="bigint"){if(!b9($))throw RangeError("positive bigint expected, got "+$)}else XU($);return $}function Wq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function YQ($){let q=k9($).toString(16);return q.length&1?"0"+q:q}function aV($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?y9:BigInt("0x"+$)}function rJ($){return aV(Q9($))}function i$($){return aV(Q9(UJ(u0($)).reverse()))}function f9($,q){if(L0(q),q===0)throw RangeError("zero length");$=k9($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return vG(J.padStart(q*2,"0"))}function UQ($,q){return f9($,q).reverse()}function sV($,q){if($=A0($),q=A0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(A0($))}function x9($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var b9=($)=>typeof $==="bigint"&&y9<=$;function NO($,q,J){return b9($)&&b9(q)&&b9(J)&&q<=$&&$<J}function bq($,q,J,G){if(!NO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<y9)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>y9;$>>=QU,q+=1);return q}var WQ=($)=>(QU<<BigInt($))-QU;function tV($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,n0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){W=D();let T=W.slice();A.push(T),w+=W.length}return n0(...A)};return(w,A)=>{M(),K(w);let T=void 0;while((T=A(N()))===void 0)K();return M(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(X,Y,U){if(!U&&Y!=="function"&&!Object.hasOwn($,X))throw TypeError(`param "${X}" is invalid: expected own property`);let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw TypeError(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}var YU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),I0=BigInt(1),dJ=BigInt(2),Jz=BigInt(3),Gz=BigInt(4),Qz=BigInt(5),jO=BigInt(7),Xz=BigInt(8),wO=BigInt(9),Yz=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function eV($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,X=I0,Y=I0,U=o0;while(J!==o0){let V=G/J,z=G-J*V,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==I0)throw Error("invert: does not exist");return T0(Q,q)}function UU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function Uz($,q){let J=$,G=(J.ORDER+I0)/Gz,Q=J.pow(q,G);return UU(J,Q,q),Q}function ZO($,q){let J=$,G=(J.ORDER-Qz)/Xz,Q=J.mul(q,dJ),X=J.pow(Q,G),Y=J.mul(q,X),U=J.mul(J.mul(Y,dJ),X),W=J.mul(Y,J.sub(U,J.ONE));return UU(J,W,q),W}function AO($){let q=m9($),J=Wz($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+jO)/Yz;return(U,W)=>{let V=U,z=V.pow(W,Y),M=V.mul(z,G),D=V.mul(z,Q),K=V.mul(z,X),N=V.eql(V.sqr(M),W),j=V.eql(V.sqr(D),W);z=V.cmov(z,M,N),M=V.cmov(K,D,j);let w=V.eql(V.sqr(M),W),A=V.cmov(z,M,w);return UU(V,A,W),A}}function Wz($){if($<Jz)throw Error("sqrt is not defined for small field");let q=$-I0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=m9($);while($z(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return Uz;let X=Q.pow(G,q),Y=(q+I0)/dJ;return function(W,V){let z=W;if(z.is0(V))return V;if($z(z,V)!==1)throw Error("Cannot find square root");let M=J,D=z.mul(z.ONE,X),K=z.pow(V,q),N=z.pow(V,Y);while(!z.eql(K,z.ONE)){if(z.is0(K))return z.ZERO;let j=1,w=z.sqr(K);while(!z.eql(w,z.ONE))if(j++,w=z.sqr(w),j===M)throw Error("Cannot find square root");let A=I0<<BigInt(M-j-1),T=z.pow(D,A);M=j,D=z.sqr(T),K=z.mul(K,D),N=z.mul(N,T)}return N}}function BO($){if($%Gz===Jz)return Uz;if($%Xz===Qz)return ZO;if($%Yz===wO)return AO($);return Wz($)}var yq=($,q)=>(T0($,q)&I0)===I0,SO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function WU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=SO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Wq($.BYTES,"BYTES"),Wq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function TO($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===I0)return q;let Q=G.ONE,X=q;while(J>o0){if(J&I0)Q=G.mul(Q,X);X=G.sqr(X),J>>=I0}return Q}function VQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),X=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),Y=G.inv(X);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},Y),Q}function $z($,q){let J=$,G=(J.ORDER-I0)/dJ,Q=J.pow(q,G),X=J.eql(Q,J.ONE),Y=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!X&&!Y&&!U)throw Error("invalid Legendre symbol result");return X?1:Y?0:-1}function CO($,q){if(q!==void 0)XU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var qz=new WeakMap;class VU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=I0;_lengths;_mod;constructor($,q={}){if($<=I0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=CO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I0)===I0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return TO(this,$,q)}div($,q){return T0($*eV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return eV($,this.ORDER)}sqrt($){let q=qz.get(this);if(!q)qz.set(this,q=BO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?UQ($,this.BYTES):f9($,this.BYTES)}fromBytes($,q=!1){A0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(Y)U=T0(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return VQ(this,$)}cmov($,q,J){return vq(J,"condition"),J?q:$}}Object.freeze(VU.prototype);function m9($,q={}){return new VU($,q)}function Vz($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I0)throw Error("field order must be greater than 1");let q=h8($-I0);return Math.ceil(q/8)}function zU($){let q=Vz($);return q+Math.ceil(q/2)}function zz($,q,J=!1){A0($);let G=$.length,Q=Vz(q),X=Math.max(zU(q),16);if(G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?i$($):rJ($),U=T0(Y,q-I0)+I0;return J?UQ(U,Q):f9(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=VQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function Rz($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function MU($,q){Rz($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=WQ($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function Mz($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=iJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var KU=new WeakMap,Hz=new WeakMap;function DU($){return Hz.get($)||1}function Kz($){if($!==u8)throw Error("invalid wNAF")}class MQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=MU(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=MU($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=Mz(J,Y,X);if(J=U,V)Q=Q.add(zQ(M,q[D]));else G=G.add(zQ(z,q[W]))}return Kz(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=MU($,this.bits);for(let X=0;X<Q.windows;X++){if(J===u8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=Mz(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return Kz(J),G}getPrecomputes($,q,J){let G=KU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);KU.set(q,G)}}return G}cached($,q,J){let G=DU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=DU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){Rz(q,this.bits),Hz.set($,q),KU.delete($)}hasCache($){return DU($)!==1}}function Oz($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>u8||G>u8){if(J&iJ)X=X.add(Q);if(G&iJ)Y=Y.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:X,p2:Y}}function Dz($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return WU(q),q}else return m9($,{isLE:J})}function h9($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>u8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=Dz(q.p,J.Fp,G),X=Dz(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Wq($),Wq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function PO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function IO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?x9($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function RU($,q,J,G){if(A0($),Wq(J),q=IO(q),q.length>255)q=G(n0(x9("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:X}=G,Y=Math.ceil(J/Q);if(J>65535||Y>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,DQ(q.length,1)),W=new Uint8Array(X),V=DQ(J,2),z=Array(Y),M=G(n0(W,$,V,DQ(0,1),U));z[0]=G(n0(M,DQ(1,1),U));for(let K=1;K<Y;K++){let N=[PO(M,z[K-1]),DQ(K+1,1),U];z[K]=G(n0(...N))}return n0(...z).slice(0,J)}var Nz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var jz=($,q)=>($+($>=0?q:-q)/Zz)/q;function EO($,q,J){bq("scalar",$,Vq,J);let[[G,Q],[X,Y]]=q,U=jz(Y*$,J),W=jz(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Vq,D=z<Vq;if(M)V=-V;if(D)z=-z;let K=WQ(Math.ceil(h8(J)/2))+WJ;if(V<Vq||V>=K||z<Vq||z>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:M,k1:V,k2neg:D,k2:z}}function OU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function HU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(vq(J.lowS,"lowS"),vq(J.prehash,"prehash"),J.format!==void 0)OU(J.format);return J}class wz extends Error{constructor($=""){super($)}}var c$={Err:wz,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Wq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=YQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?YQ(Q.length/2|128):"";return YQ($)+X+Q+q},decode($,q){let{Err:J}=c$;q=A0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=c$;if(k9($),$<Vq)throw new q("integer: negative integers are not allowed");let J=YQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=A0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Vq=BigInt(0),WJ=BigInt(1),Zz=BigInt(2),u9=BigInt(3),LO=BigInt(4);function Az($,q={}){let J=h9("weierstrass",$,q),G=J.Fp,Q=J.Fn,X=J.CURVE,{h:Y,n:U}=X;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=Sz(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(v,P,C){if(V&&P.is0())return Uint8Array.of(0);let{x:Z,y:S}=P.toAffine(),E=G.toBytes(Z);if(vq(C,"isCompressed"),C){M();let g=!G.isOdd(S);return n0(Bz(g),E)}else return n0(Uint8Array.of(4),E,G.toBytes(S))}function K(v){A0(v,void 0,"Point");let{publicKey:P,publicKeyUncompressed:C}=z,Z=v.length,S=v[0],E=v.subarray(1);if(V&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===P&&(S===2||S===3)){let g=G.fromBytes(E);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}M();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===C&&S===4){let g=G.BYTES,L=G.fromBytes(E.subarray(0,g)),b=G.fromBytes(E.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${P} or uncompressed=${C}`)}let N=q.toBytes===void 0?D:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let P=G.sqr(v),C=G.mul(P,v);return G.add(G.add(C,G.mul(v,X.a)),X.b)}function A(v,P){let C=G.sqr(P),Z=w(v);return G.eql(C,Z)}if(!A(X.Gx,X.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(X.a,u9),LO),_=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,P,C=!1){if(!G.isValid(P)||C&&G.is0(P))throw Error(`bad point coordinate ${v}`);return P}function p(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return EO(v,W.basises,Q.ORDER)}function m(v,P,C,Z,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),P=zQ(Z,P),C=zQ(S,C),P.add(C)}class k{static BASE=new k(X.Gx,X.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,P,C){this.X=f("x",v),this.Y=f("y",P,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return X}static fromAffine(v){let{x:P,y:C}=v||{};if(!v||!G.isValid(P)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(P)&&G.is0(C))return k.ZERO;return new k(P,C,G.ONE)}static fromBytes(v){let P=k.fromAffine(j(A0(v,void 0,"point")));return P.assertValidity(),P}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,P=!0){if(l.createCache(this,v),!P)this.multiply(u9);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:P,y:C}=v.toAffine();if(!G.isValid(P)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!A(P,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){p(v);let{X:P,Y:C,Z}=this,{X:S,Y:E,Z:g}=v,L=G.eql(G.mul(P,g),G.mul(S,Z)),b=G.eql(G.mul(C,g),G.mul(E,Z));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:P}=X,C=G.mul(P,u9),{X:Z,Y:S,Z:E}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),x=G.mul(S,S),d=G.mul(E,E),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,E),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,E),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){p(v);let{X:P,Y:C,Z}=this,{X:S,Y:E,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=X.a,d=G.mul(X.b,u9),B=G.mul(P,S),a=G.mul(C,E),q0=G.mul(Z,g),X0=G.add(P,C),G0=G.add(S,E);X0=G.mul(X0,G0),G0=G.add(B,a),X0=G.sub(X0,G0),G0=G.add(P,Z);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,Z),L=G.add(E,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(X0,L),L=G.sub(L,B),B=G.mul(X0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return p(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:P}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,Z,S=(E)=>l.cached(this,E,(g)=>cJ(k,g));if(P){let{k1neg:E,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);Z=x.add(B),C=m(P.beta,O,d,E,L)}else{let{p:E,f:g}=S(v);C=E,Z=g}return cJ(k,[C,Z])[0]}multiplyUnsafe(v){let{endo:P}=q,C=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Vq||C.is0())return k.ZERO;if(Z===WJ)return C;if(l.hasCache(this))return this.multiply(Z);if(P){let{k1neg:S,k1:E,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=Oz(k,C,E,L);return m(P.beta,b,O,S,g)}else return l.unsafe(C,Z)}toAffine(v){let P=this,C=v,{X:Z,Y:S,Z:E}=P;if(G.eql(E,G.ONE))return{x:Z,y:S};let g=P.is0();if(C==null)C=g?G.ONE:G.inv(E);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(E,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(Y===WJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(Y===WJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(Y)}isSmallOrder(){if(Y===WJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return vq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new MQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function Bz($){return Uint8Array.of($?2:3)}function Sz($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function FO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(Sz($.Fp,J),{seed:Math.max(zU(J.ORDER),16)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,zz(A0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,A=J._lengths;if(!x8(K))return;let T=A0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!A?.includes(T);if(_&&f)return;return _}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=KQ(U,W);return Object.freeze(M),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function Tz($,q,J={}){let G=q;Aq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,X=J.hmac===void 0?(S,E)=>Sq(G,S,E):J.hmac,{Fp:Y,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N}=FO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=W*Zz+WJ<Y.ORDER;function A(S){let E=W>>WJ;return S>E}function T(S,E){if(!U.isValidNot0(E))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return E}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,E){OU(E);let g=N.signature,L=E==="compact"?g:E==="recovered"?g+1:void 0;return A0(S,L)}class p{r;s;recovery;constructor(S,E,g){if(this.r=T("r",S),this.s=T("s",E),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,E=j.format){f(S,E);let g;if(E==="der"){let{r:x,s:d}=c$.toSig(A0(S));return new p(x,d)}if(E==="recovered")g=S[0],E="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new p(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,E){return this.fromBytes(f8(S),E)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new p(this.r,this.s,S)}recoverPublicKey(S){let{r:E,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?E+W:E;if(!Y.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=Y.toBytes(b),x=$.fromBytes(n0(Bz((L&1)===0),O)),d=U.inv(b),B=m(A0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),X0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(X0.is0())throw Error("invalid recovery: point at infinify");return X0.assertValidity(),X0}hasHighS(){return A(this.s)}toBytes(S=j.format){if(OU(S),S==="der")return f8(c$.hexFromSig(this));let{r:E,s:g}=this,L=U.toBytes(E),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(p.prototype),Object.freeze(p);let F=J.bits2int===void 0?function(E){if(E.length>8192)throw Error("input is too large");let g=rJ(E),L=E.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(E){return U.create(F(E))}:J.bits2int_modN,k=WQ(V);function y(S){return bq("num < 2^"+V,S,Vq,k),U.toBytes(S)}function l(S,E){return A0(S,void 0,"message"),E?A0(G(S),void 0,"prehashed message"):S}function v(S,E,g){let{lowS:L,prehash:b,extraEntropy:O}=HU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(E);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(A0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function X0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),Z0=$.BASE.multiply(t).toAffine(),P0=U.create(Z0.x);if(P0===Vq)return;let x0=U.create(O0*U.create(q0+P0*d));if(x0===Vq)return;let K$=(Z0.x===P0?0:2)|Number(Z0.y&WJ),Jq=x0;if(L&&A(x0))Jq=U.neg(x0),K$^=1;return new p(P0,Jq,w?void 0:K$)}return{seed:a,k2sig:X0}}function P(S,E,g={}){let{seed:L,k2sig:b}=v(S,E,g);return tV(G.outputLen,U.BYTES,X)(L,b).toBytes(g.format)}function C(S,E,g,L={}){let{lowS:b,prehash:O,format:x}=HU(L,j);if(g=A0(g,void 0,"publicKey"),E=l(E,O),!x8(S)){let d=S instanceof p?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=p.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,X0=m(E),G0=U.inv(q0),t=U.create(X0*G0),O0=U.create(a*G0),Z0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(Z0.is0())return!1;return U.create(Z0.x)===a}catch(d){return!1}}function Z(S,E,g={}){let{prehash:L}=HU(g,j);return E=l(E,L),p.fromBytes(S,"recovered").recoverPublicKey(E).toBytes()}return Object.freeze({keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N,Point:$,sign:P,verify:C,recoverPublicKey:Z,Signature:p,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var _O=Az(gO),p8=Tz(_O,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VJ=BigInt(0),B$=BigInt(1),NU=BigInt(2),vO=BigInt(8);function bO($,q,J,G){let Q=$.sqr(J),X=$.sqr(G),Y=$.add($.mul(q.a,Q),X),U=$.add($.ONE,$.mul(q.d,$.mul(Q,X)));return $.eql(Y,U)}function Cz($,q={}){let J=q,G=h9("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:X}=G,Y=G.CURVE,{h:U}=Y;f$(J,{},{uvRatio:"function"});let W=NU<<BigInt(X.BYTES*8)-B$,V=(j)=>Q.create(j),z=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(A){return{isValid:!1,value:VJ}}}:J.uvRatio;if(!bO(Q,Y,Y.Gx,Y.Gy))throw Error("bad curve params: generator point");function M(j,w,A=!1){let T=A?B$:VJ;return bq("coordinate "+j,w,T,W),w}function D(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(Y.Gx,Y.Gy,B$,V(Y.Gx*Y.Gy));static ZERO=new K(VJ,B$,B$,VJ);static Fp=Q;static Fn=X;X;Y;Z;T;constructor(j,w,A,T){this.X=M("x",j),this.Y=M("y",w),this.Z=M("z",A,!0),this.T=M("t",T),Object.freeze(this)}static CURVE(){return Y}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:A}=j||{};return M("x",w),M("y",A),new K(w,A,B$,V(w*A))}static fromBytes(j,w=!1){let A=Q.BYTES,{a:T,d:_}=Y;j=UJ(A0(j,A,"point")),vq(w,"zip215");let f=UJ(j),p=j[A-1];f[A-1]=p&-129;let F=i$(f),m=w?W:Q.ORDER;bq("point.y",F,VJ,m);let k=V(F*F),y=V(k-B$),l=V(_*k-T),{isValid:v,value:P}=z(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(P&B$)===B$,Z=(p&128)!==0;if(!w&&P===VJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==C)P=V(-P);return K.fromAffine({x:P,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(NU);return this}assertValidity(){let j=this,{a:w,d:A}=Y;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:p}=j,F=V(T*T),m=V(_*_),k=V(f*f),y=V(k*k),l=V(F*w),v=V(k*V(l+m)),P=V(y+V(A*V(F*m)));if(v!==P)throw Error("bad point: equation left != right (1)");let C=V(T*_),Z=V(f*p);if(C!==Z)throw Error("bad point: equation left != right (2)")}equals(j){D(j);let{X:w,Y:A,Z:T}=this,{X:_,Y:f,Z:p}=j,F=V(w*p),m=V(_*T),k=V(A*p),y=V(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:j}=Y,{X:w,Y:A,Z:T}=this,_=V(w*w),f=V(A*A),p=V(NU*V(T*T)),F=V(j*_),m=w+A,k=V(V(m*m)-_-f),y=F+f,l=y-p,v=F-f,P=V(k*l),C=V(y*v),Z=V(k*v),S=V(l*y);return new K(P,C,S,Z)}add(j){D(j);let{a:w,d:A}=Y,{X:T,Y:_,Z:f,T:p}=this,{X:F,Y:m,Z:k,T:y}=j,l=V(T*F),v=V(_*m),P=V(p*A*y),C=V(f*k),Z=V((T+_)*(F+m)-l-v),S=C-P,E=C+P,g=V(v-w*l),L=V(Z*S),b=V(E*g),O=V(Z*g),x=V(S*E);return new K(L,b,x,O)}subtract(j){return D(j),this.add(j.negate())}multiply(j){if(!X.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:A}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,A])[0]}multiplyUnsafe(j){if(!X.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===VJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,Y.n).is0()}toAffine(j){let w=this,A=j,{X:T,Y:_,Z:f}=w,p=w.is0();if(A==null)A=p?vO:Q.inv(f);let F=V(T*A),m=V(_*A),k=Q.mul(f,A);if(p)return{x:VJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),A=Q.toBytes(w);return A[A.length-1]|=j&B$?128:0,A}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new MQ(K,X.BITS);if(X.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class jU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){YU()}static fromHex($){YU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RQ=BigInt(0),l8=BigInt(1),p9=BigInt(2);function yO($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Pz($){let q=yO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y===void 0?m8:Y,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?p9**BigInt(254):p9**BigInt(447),N=U?BigInt(8)*p9**BigInt(251)-l8:BigInt(4)*p9**BigInt(445)-l8,j=K+N+l8,w=(Z)=>T0(Z,J),A=T(M);function T(Z){return UQ(w(Z),z)}function _(Z){let S=UJ(A0(Z,z,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(Z){return i$(Q(UJ(A0(Z,z,"scalar"))))}function p(Z,S){let E=l(_(S),f(Z));if(E===RQ)throw Error("invalid private or public key received");return T(E)}function F(Z){return p(Z,A)}let m=F,k=p;function y(Z,S,E){let g=w(Z*(S-E));return S=w(S-g),E=w(E+g),{x_2:S,x_3:E}}function l(Z,S){bq("u",Z,RQ,J),bq("scalar",S,K,j);let E=S,g=Z,L=l8,b=RQ,O=Z,x=l8,d=RQ;for(let a=BigInt(V-1);a>=RQ;a--){let q0=E>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,P0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(P0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},P=(Z)=>{return Z=Z===void 0?W(z):Z,A0(Z,v.seed,"seed"),Z},C={randomSecretKey:P};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:KQ(P,m),getSharedSecret:k,getPublicKey:m,scalarMult:p,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var kO=BigInt(0),kq=BigInt(1),Iz=BigInt(2),fO=BigInt(3),xO=BigInt(5),mO=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),BU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:mO,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Fz($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=oJ,U=$*$%X*$%X,W=x$(U,Iz,X)*U%X,V=x$(W,kq,X)*$%X,z=x$(V,xO,X)*V%X,M=x$(z,q,X)*z%X,D=x$(M,J,X)*M%X,K=x$(D,G,X)*D%X,N=x$(K,Q,X)*K%X,j=x$(N,Q,X)*K%X,w=x$(j,q,X)*z%X;return{pow_p_5_8:x$(w,Iz,X)*$%X,b2:U}}function hO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var wU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function SU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),X=Fz($*Q).pow_p_5_8,Y=T0($*G*X,J),U=T0(q*Y*Y,J),W=Y,V=T0(Y*wU,J),z=U===$,M=U===T0(-$,J),D=U===T0(-$*wU,J);if(z)Y=W;if(M||D)Y=V;if(yq(Y,J))Y=T0(-Y,J);return{isValid:z||M,value:Y}}var nJ=Cz(BU,{uvRatio:SU}),zJ=(()=>nJ.Fp)(),gz=(()=>nJ.Fn)();var l9=(()=>{let $=oJ;return Pz({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=Fz(q);return T0(x$(J,fO,$)*G,$)},adjustScalarBytes:hO})})();var ZU=wU,uO=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),pO=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),lO=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),rO=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Ez=($)=>SU(kq,$),dO=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),AU=($)=>zJ.create(i$($)&dO);function Lz($){let{d:q}=BU,J=oJ,G=(A)=>zJ.create(A),Q=G(ZU*$*$),X=G((Q+kq)*lO),Y=BigInt(-1),U=G((Y-q*Q)*G(Q+q)),{isValid:W,value:V}=SU(X,U),z=G(V*$);if(!yq(z,J))z=G(-z);if(!W)V=z;if(!W)Y=Q;let M=G(Y*(Q-kq)*rO-U),D=V*V,K=G((V+V)*U),N=G(M*uO),j=G(kq-D),w=G(kq+D);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends jU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>zJ)();static Fn=(()=>gz)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=BU,G=oJ,Q=(_)=>zJ.create(_),X=AU($);if(!sV(zJ.toBytes(X),$)||yq(X,G))throw Error("invalid ristretto255 encoding 1");let Y=Q(X*X),U=Q(kq+q*Y),W=Q(kq-q*Y),V=Q(U*U),z=Q(W*W),M=Q(q*J*V-z),{isValid:D,value:K}=Ez(Q(M*z)),N=Q(K*W),j=Q(K*N*M),w=Q((X+X)*N);if(yq(w,G))w=Q(-w);let A=Q(U*j),T=Q(w*A);if(!D||yq(T,G)||A===kO)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,A,kq,T))}static fromHex($){return O$.fromBytes(vG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,X=(j)=>zJ.create(j),Y=X(X(J+q)*X(J-q)),U=X($*q),W=X(U*U),{value:V}=Ez(X(Y*W)),z=X(V*Y),M=X(V*U),D=X(z*M*G),K;if(yq(G*D,Q)){let j=X(q*ZU),w=X($*ZU);$=j,q=w,K=X(z*pO)}else K=M;if(yq($*D,Q))q=X(-q);let N=X((J-q)*K);if(yq(N,Q))N=X(-N);return zJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,X=(W)=>zJ.create(W),Y=X(q*Q)===X(J*G),U=X(J*Q)===X(q*G);return Y||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var iO=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=RU($,J,64,W9);return iO.deriveToCurve(G)},hashToScalar($,q={DST:Nz}){let J=RU($,q.DST,64,W9);return gz.create(i$(J))},deriveToCurve($){u0($,64);let q=AU($.subarray(0,32)),J=Lz(q),G=AU($.subarray(32,64)),Q=Lz(G);return new O$(J.add(Q))}});var _z=!1,cO=!1;async function vz($,q){if(cO)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function CU($,q){return await vz(async()=>{let J=TU($)?$:await oO($),G=await crypto.subtle.importKey("raw",aO(q),{name:"X25519"},_z,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(TU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMult($,q)})}async function PU($){return await vz(async()=>{return CU($,l9.GuBytes)},()=>{if(TU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMultBase($)})}var nO=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function oO($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...nO,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},_z,["deriveBits"])}function TU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function aO($){return $}class bz{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),tO(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function tO($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,X)=>Q+X.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function r9($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function yz($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function kz($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class fq{args;body;constructor($,q){this.args=$,this.body=q}}function IU($){let q=[];q.push(`age-encryption.org/v1
+`).map((q)=>q.trim()).join(" ")};D1.O=function($){return this.inspectOpts.colors=this.useColors,EX.inspect($,this.inspectOpts)}});var N1=Y0((kx,y7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)y7.exports=U1();else y7.exports=O1()});var H6=Y0((Vp,R6)=>{var mX=Object.prototype.hasOwnProperty,D6=Object.prototype.toString,U6=Object.defineProperty,W6=Object.getOwnPropertyDescriptor,V6=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return D6.call(q)==="[object Array]"},z6=function(q){if(!q||D6.call(q)!=="[object Object]")return!1;var J=mX.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&mX.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||mX.call(q,Q)},M6=function(q,J){if(U6&&J.name==="__proto__")U6(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},K6=function(q,J){if(J==="__proto__"){if(!mX.call(q,J))return;else if(W6)return W6(q,J).value}return q[J]};R6.exports=function $(){var q,J,G,Q,X,Y,U=arguments[0],W=1,V=arguments.length,z=!1;if(typeof U==="boolean")z=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=K6(U,J),Q=K6(q,J),U!==Q){if(z&&Q&&(z6(Q)||(X=V6(Q)))){if(X)X=!1,Y=G&&V6(G)?G:[];else Y=G&&z6(G)?G:{};M6(U,{name:J,newValue:$(z,Y,Q)})}else if(typeof Q<"u")M6(U,{name:J,newValue:Q})}}return U}});import{parseArgs as PH}from"util";var IH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"}};function JY($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function EH($,q){let J=$[q];return typeof J==="string"?J:void 0}function h5($){let{values:q,positionals:J}=PH({args:$,options:IH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:JY(q,"help"),version:JY(q,"version"),dryRun:JY(q,"dry-run"),pushTo:EH(q,"push-to")}}}var q9={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.16",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as zN,mkdirSync as MN,readFileSync as mU,writeFileSync as hU}from"fs";import{dirname as KN,join as pz}from"path";function GY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=GY($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Aq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function J9($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function G9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function D$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var FH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function gH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function _H($){for(let q=0;q<$.length;q++)$[q]=gH($[q]);return $}var QY=FH?($)=>$:_H,p5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),vH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function Q9($){if(u0($),p5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=vH[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function u5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function vG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(p5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=u5($.charCodeAt(X)),U=u5($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function bH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function XY($,q=""){if(typeof $==="string")return bH($);return u0($,void 0,q)}function YY(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function X9($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function UY($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Bq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var WY=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VY{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Aq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),D$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),J9($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Sq=(()=>{let $=(q,J,G)=>new VY(q,J).update(G).digest();return $.create=(q,J)=>new VY(q,J),$})();function bG($,q,J){if(Aq($),J===void 0)J=new Uint8Array($.outputLen);return Sq($,J,q)}var zY=Uint8Array.of(0),l5=Uint8Array.of();function MY($,q,J,G=32){Aq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=l5;else u0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=Sq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)zY[0]=z+1,W.update(z===0?l5:V).update(J).update(zY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),D$(V,zY),Y.slice(0,G)}var yG=($,q,J,G,Q)=>MY($,bG($,q,J),G,Q);function r5($,q,J){return $&q^~$&J}function d5($,q,J){return $&q^$&J^q&J}class Y9{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=C8($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),J9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,D$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Tq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var U9=BigInt(4294967295),i5=BigInt(32);function yH($,q=!1){if(q)return{h:Number($&U9),l:Number($>>i5&U9)};return{h:Number($>>i5&U9)|0,l:Number($&U9)|0}}function c5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=yH($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var KY=($,q,J)=>$>>>J,DY=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,fG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var n5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),o5=($,q,J,G)=>q+J+G+($/4294967296|0)|0,a5=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),s5=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,t5=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),e5=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var fH=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class RY extends Y9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)cq[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=cq[z-15],D=cq[z-2],K=u$(M,7)^u$(M,18)^M>>>3,N=u$(D,17)^u$(D,19)^D>>>10;cq[z]=N+cq[z-7]+K+cq[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=u$(Y,6)^u$(Y,11)^u$(Y,25),D=V+M+r5(Y,U,W)+fH[z]+cq[z]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+d5(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){D$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),D$(this.buffer)}}class $W extends RY{A=Tq[0]|0;B=Tq[1]|0;C=Tq[2]|0;D=Tq[3]|0;E=Tq[4]|0;F=Tq[5]|0;G=Tq[6]|0;H=Tq[7]|0;constructor(){super(32)}}class xH extends RY{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var qW=(()=>c5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),mH=(()=>qW[0])(),hH=(()=>qW[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends Y9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,p=FJ(_,f,1)^FJ(_,f,8)^KY(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^DY(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^kG(m,k,61)^KY(m,k,6),l=gJ(m,k,19)^fG(m,k,61)^DY(m,k,6),v=a5(F,l,oq[T-7],oq[T-16]),P=s5(v,p,y,nq[T-7],nq[T-16]);nq[T]=P|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(z,M,14)^FJ(z,M,18)^kG(z,M,41),f=gJ(z,M,14)^gJ(z,M,18)^fG(z,M,41),p=z&D^~z&N,F=M&K^~M&j,m=t5(A,f,F,hH[T],oq[T]),k=e5(m,w,_,p,mH[T],nq[T]),y=m|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^fG(J,G,34)^fG(J,G,39),P=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,A=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Gq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let Z=n5(y,v,C);J=o5(Z,k,l,P),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Gq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Gq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Gq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Gq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Gq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Gq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,A)}roundClean(){D$(nq,oq)}destroy(){this.destroyed=!0,D$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class JW extends xG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class uH extends xG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class pH extends xG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class lH extends xG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=UY(()=>new $W,WY(1));var W9=UY(()=>new JW,WY(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function D9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function NY($){if(!D9($))throw Error("Uint8Array expected")}function UW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function WW($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function hG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function z9($){if(!Array.isArray($))throw Error("array expected")}function M9($,q){if(!UW(!0,q))throw Error(`${$}: array of strings expected`)}function jY($,q){if(!UW(!1,q))throw Error(`${$}: array of numbers expected`)}function I$(...$){let q=(X)=>X,J=(X,Y)=>(U)=>X(Y(U)),G=$.map((X)=>X.encode).reduceRight(J,q),Q=$.map((X)=>X.decode).reduce(J,q);return{encode:G,decode:Q}}function E$($){let q=typeof $==="string"?$.split(""):$,J=q.length;M9("alphabet",q);let G=new Map(q.map((Q,X)=>[Q,X]));return{encode:(Q)=>{return z9(Q),Q.map((X)=>{if(!Number.isSafeInteger(X)||X<0||X>=J)throw Error(`alphabet.encode: digit index outside alphabet "${X}". Allowed: ${$}`);return q[X]})},decode:(Q)=>{return z9(Q),Q.map((X)=>{aq("alphabet.decode",X);let Y=G.get(X);if(Y===void 0)throw Error(`Unknown letter: "${X}". Allowed: ${$}`);return Y})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return M9("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function R9($,q="="){return hG($),aq("padding",q),{encode(J){M9("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){M9("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function VW($){return WW($),{encode:(q)=>q,decode:(q)=>$(q)}}function GW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(z9($),!$.length)return[];let G=0,Q=[],X=Array.from($,(U)=>{if(hG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),Y=X.length;while(!0){let U=0,W=!0;for(let V=G;V<Y;V++){let z=X[V],M=q*U,D=M+z;if(!Number.isSafeInteger(D)||M/q!==U||D-z!==M)throw Error("convertRadix: carry overflow");let K=D/J;U=D%J;let N=Math.floor(K);if(X[V]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var zW=($,q)=>q===0?$:zW(q,$%q),K9=($,q)=>$+(q-zW($,q)),V9=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function HY($,q,J,G){if(z9($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(K9(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${K9(q,J)}`);let Q=0,X=0,Y=V9[q],U=V9[J]-1,W=[];for(let V of $){if(hG(V),V>=Y)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,X+q>32)throw Error(`convertRadix2: carry overflow pos=${X} from=${q}`);X+=q;for(;X>=J;X-=J)W.push((Q>>X-J&U)>>>0);let z=V9[X];if(z===void 0)throw Error("invalid carry");Q&=z-1}if(Q=Q<<J-X&U,!G&&X>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&X>0)W.push(Q>>>0);return W}function rH($){hG($);let q=256;return{encode:(J)=>{if(!D9(J))throw Error("radix.encode input should be Uint8Array");return GW(Array.from(J),q,$)},decode:(J)=>{return jY("radix.decode",J),Uint8Array.from(GW(J,$,q))}}}function b$($,q=!1){if(hG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(K9(8,$)>32||K9($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!D9(J))throw Error("radix2.encode input should be Uint8Array");return HY(Array.from(J),8,$,!q)},decode:(J)=>{return jY("radix2.decode",J),Uint8Array.from(HY(J,$,8,q))}}}function QW($){return WW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var sL=I$(b$(4),E$("0123456789ABCDEF"),L$("")),tL=I$(b$(5),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),R9(5),L$("")),eL=I$(b$(5),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),$3=I$(b$(5),E$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),R9(5),L$("")),q3=I$(b$(5),E$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),J3=I$(b$(5),E$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),VW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),MW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),KW=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},wY=MW?{encode($){return NY($),$.toBase64()},decode($){return KW($,!1)}}:I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),R9(6),L$("")),p$=I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),G3=MW?{encode($){return NY($),$.toBase64({alphabet:"base64url"})},decode($){return KW($,!0)}}:I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),R9(6),L$("")),Q3=I$(b$(6),E$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),ZY=($)=>I$(rH(58),E$($),L$("")),X3=ZY("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),Y3=ZY("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),U3=ZY("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var OY=I$(E$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),XW=[996825010,642813549,513874426,1027748829,705979059];function mG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<XW.length;G++)if((q>>G&1)===1)J^=XW[G];return J}function YW($,q,J=1){let G=$.length,Q=1;for(let X=0;X<G;X++){let Y=$.charCodeAt(X);if(Y<33||Y>126)throw Error(`Invalid prefix (${$})`);Q=mG(Q)^Y>>5}Q=mG(Q);for(let X=0;X<G;X++)Q=mG(Q)^$.charCodeAt(X)&31;for(let X of q)Q=mG(Q)^X;for(let X=0;X<6;X++)Q=mG(Q);return Q^=J,OY.encode(HY([Q%V9[30]],30,5,!1))}function DW($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,X=QW(G);function Y(M,D,K=90){if(aq("bech32.encode prefix",M),D9(D))D=Array.from(D);jY("bech32.encode",D);let N=M.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+D.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=M.toLowerCase(),A=YW(w,D,q);return`${w}1${OY.encode(D)}${A}`}function U(M,D=90){aq("bech32.decode input",M);let K=M.length;if(K<8||D!==!1&&K>D)throw TypeError(`invalid string length: ${K} (${M}). Expected (8..${D})`);let N=M.toLowerCase();if(M!==N&&M!==M.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),A=N.slice(j+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=OY.decode(A).slice(0,-6),_=YW(w,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${M}: expected "${_}"`);return{prefix:w,words:T}}let W=QW(U);function V(M){let{prefix:D,words:K}=U(M,!1);return{prefix:D,words:K,bytes:G(K)}}function z(M,D){return Y(M,Q(D))}return{encode:Y,decode:U,encodeFromBytes:z,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:X,toWords:Q}}var l$=DW("bech32"),W3=DW("bech32m");var dH=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),iH={encode($){return NY($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},V3=dH?iH:I$(b$(4),E$("0123456789abcdef"),L$(""),VW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function nH($,q,J,G){Aq($);let Q=X9({dkLen:32,asyncTick:10},G),{c:X,dkLen:Y,asyncTick:U}=Q;if(L0(X,"c"),L0(Y,"dkLen"),L0(U,"asyncTick"),X<1)throw Error("iterations (c) must be >= 1");if(Y<1)throw Error('"dkLen" must be >= 1');if(Y>4294967295*$.outputLen)throw Error("derived key too long");let W=XY(q,"password"),V=XY(J,"salt"),z=new Uint8Array(Y),M=Sq.create($,W),D=M._cloneInto().update(V);return{c:X,dkLen:Y,asyncTick:U,DK:z,PRF:M,PRFSalt:D}}function oH($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return D$(Q),J}function AY($,q,J,G){let{c:Q,dkLen:X,DK:Y,PRF:U,PRFSalt:W}=nH($,q,J,G),V,z=new Uint8Array(4),M=C8(z),D=new Uint8Array(U.outputLen);for(let K=1,N=0;N<X;K++,N+=U.outputLen){let j=Y.subarray(N,N+U.outputLen);M.setInt32(0,K,!1),(V=W._cloneInto(V)).update(z).digestInto(D),j.set(D.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(V).update(D).digestInto(D);for(let A=0;A<j.length;A++)j[A]^=D[A]}}return oH(U,W,Y,V,D)}function RW($,q,J,G,Q,X){let Y=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],z=$[q++]^J[G++],M=$[q++]^J[G++],D=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],p=$[q++]^J[G++],F=Y,m=U,k=W,y=V,l=z,v=M,P=D,C=K,Z=N,S=j,E=w,g=A,L=T,b=_,O=f,x=p;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),Z^=N0(l+F|0,9),L^=N0(Z+l|0,13),F^=N0(L+Z|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(E+P|0,7),k^=N0(O+E|0,9),P^=N0(k+O|0,13),E^=N0(P+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),P^=N0(v+l|0,7),C^=N0(P+v|0,9),l^=N0(C+P|0,13),v^=N0(l+C|0,18),g^=N0(E+S|0,7),Z^=N0(g+E|0,9),S^=N0(Z+g|0,13),E^=N0(S+Z|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[X++]=Y+F|0,Q[X++]=U+m|0,Q[X++]=W+k|0,Q[X++]=V+y|0,Q[X++]=z+l|0,Q[X++]=M+v|0,Q[X++]=D+P|0,Q[X++]=K+C|0,Q[X++]=N+Z|0,Q[X++]=j+S|0,Q[X++]=w+E|0,Q[X++]=A+g|0,Q[X++]=T+L|0,Q[X++]=_+b|0,Q[X++]=f+O|0,Q[X++]=p+x|0}function BY($,q,J,G,Q){let X=G+0,Y=G+16*Q;for(let U=0;U<16;U++)J[Y+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,X+=16,q+=16){if(RW(J,Y,$,q,J,X),U>0)Y+=16;RW(J,X,$,q+=16,J,Y)}}function aH($,q,J){let G=X9({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:X,p:Y,dkLen:U,asyncTick:W,maxmem:V,onProgress:z}=G;if(L0(Q,"N"),L0(X,"r"),L0(Y,"p"),L0(U,"dkLen"),L0(W,"asyncTick"),L0(V,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let M=128*X,D=M/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(Y<1||Y>(K-1)*32/M)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=M*(Q+Y+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let j=AY(r0,$,q,{c:1,dkLen:M*Y}),w=G9(j),A=G9(new Uint8Array(M*Q)),T=G9(new Uint8Array(M)),_=()=>{};if(z){let f=2*Q*Y,p=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,z&&(!(F%p)||F===f))z(F/f)}}return{N:Q,r:X,p:Y,dkLen:U,blockSize32:D,V:A,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:W}}function sH($,q,J,G,Q){let X=AY(r0,$,J,{c:1,dkLen:q});return D$(J,G,Q),X}function HW($,q,J){let{N:G,r:Q,p:X,dkLen:Y,blockSize32:U,V:W,B32:V,B:z,tmp:M,blockMixCb:D}=aH($,q,J);QY(V);for(let K=0;K<X;K++){let N=U*K;for(let j=0;j<U;j++)W[j]=V[N+j];for(let j=0,w=0;j<G-1;j++)BY(W,w,W,w+=U,Q),D();BY(W,(G-1)*U,V,N,Q),D();for(let j=0;j<G;j++){let w=(V[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)M[A]=V[N+A]^W[w*U+A];BY(M,0,V,N,Q),D()}}return QY(V),sH($,Y,z,W,M)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function tH($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function H9($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function P8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=tH($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function SY($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function OW($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!I8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function eH($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),$4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var q4=($)=>{for(let q=0;q<$.length;q++)$[q]=$4($[q]);return $},Pq=_J?($)=>$:q4;function NW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function jW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function wW($,q,J){let G=q,Q=J||(()=>[]),X=(U,W)=>G(W,...Q(U)).update(U).digest(),Y=G(new Uint8Array($),...Q(new Uint8Array(0)));return X.outputLen=Y.outputLen,X.blockLen=Y.blockLen,X.create=(U,...W)=>G(U,...W),X}var ZW=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let z=Q[0];b0(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let X=$.tagLength;if(X&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let Y=q(G,...Q),U=(z,M)=>{if(M!==void 0){if(z!==2)throw Error("cipher output not supported");b0(M,void 0,"output")}},W=!1;return{encrypt(z,M){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,b0(z),U(Y.encrypt.length,M),Y.encrypt(z,M)},decrypt(z,M){if(b0(z),X&&z.length<X)throw Error('"ciphertext" expected length bigger than tagLength='+X);return U(Y.decrypt.length,M),Y.decrypt(z,M)}}}return Object.assign(J,$),J};function uG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!I8(q))throw Error("invalid output, must be aligned");return q}function AW($,q,J){P8($),P8(q),H9(J);let G=new Uint8Array(16),Q=eH(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function I8($){return $.byteOffset%4===0}function E8($){return Uint8Array.from(b0($))}var SW=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),J4=(()=>Pq(Qq(SW("expand 16-byte k"))))(),G4=(()=>Pq(Qq(SW("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var pG=64,Q4=16,TY=(()=>4294967295)(),BW=Uint32Array.of();function X4($,q,J,G,Q,X,Y,U){let W=Q.length,V=new Uint8Array(pG),z=Qq(V),M=_J&&I8(Q)&&I8(X),D=M?Qq(Q):BW,K=M?Qq(X):BW;if(!_J){for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Pq(z),Y>=TY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);for(let w=0,A;w<j;w++)A=N+w,X[A]=Q[A]^V[w];N+=j}return}for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Y>=TY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);if(M&&j===pG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<Q4;A++)T=w+A,K[T]=D[T]^z[A];N+=pG;continue}for(let w=0,A;w<j;w++)A=N+w,X[A]=Q[A]^V[w];N+=j}}function TW($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:X,rounds:Y}=NW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return P8(Q),P8(Y),H9(X),H9(J),(U,W,V,z,M=0)=>{b0(U,void 0,"key"),b0(W,void 0,"nonce"),b0(V,void 0,"data");let D=V.length;if(z=uG(D,z,!1),P8(M),M<0||M>=TY)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=E8(U)),w=G4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=J4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!I8(W))K.push(W=E8(W));let A=Qq(j);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=W.subarray(0,16);if(_J)G(w,A,Qq(f),A);else{let p=Pq(Uint32Array.from(w));G(p,A,Qq(f),A),r$(p),Pq(A)}W=W.subarray(16)}else if(!_J)Pq(A);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(W,X?0:12-W.length),W=f,K.push(W)}let _=Pq(Qq(W));try{return X4($,w,A,_,V,z,M,Y),z}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class CW{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=E8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),X=d0($,8),Y=d0($,10),U=d0($,12),W=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|X<<12)&255,this.r[5]=X>>>1&8190,this.r[6]=(X>>>14|Y<<2)&8191,this.r[7]=(Y>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=d0($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:X}=this,Y=X[0],U=X[1],W=X[2],V=X[3],z=X[4],M=X[5],D=X[6],K=X[7],N=X[8],j=X[9],w=d0($,q+0),A=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),p=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),P=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),Z=Q[6]+((f>>>14|p<<2)&8191),S=Q[7]+((p>>>11|F<<5)&8191),E=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*Y+y*(5*j)+l*(5*N)+v*(5*K)+P*(5*D);L=b>>>13,b&=8191,b+=C*(5*M)+Z*(5*z)+S*(5*V)+E*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*Y+l*(5*j)+v*(5*N)+P*(5*K);L=O>>>13,O&=8191,O+=C*(5*D)+Z*(5*M)+S*(5*z)+E*(5*V)+g*(5*W),L+=O>>>13,O&=8191;let x=L+k*W+y*U+l*Y+v*(5*j)+P*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+Z*(5*D)+S*(5*M)+E*(5*z)+g*(5*V),L+=x>>>13,x&=8191;let d=L+k*V+y*W+l*U+v*Y+P*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+Z*(5*K)+S*(5*D)+E*(5*M)+g*(5*z),L+=d>>>13,d&=8191;let B=L+k*z+y*V+l*W+v*U+P*Y;L=B>>>13,B&=8191,B+=C*(5*j)+Z*(5*N)+S*(5*K)+E*(5*D)+g*(5*M),L+=B>>>13,B&=8191;let a=L+k*M+y*z+l*V+v*W+P*U;L=a>>>13,a&=8191,a+=C*Y+Z*(5*j)+S*(5*N)+E*(5*K)+g*(5*D),L+=a>>>13,a&=8191;let q0=L+k*D+y*M+l*z+v*V+P*W;L=q0>>>13,q0&=8191,q0+=C*U+Z*Y+S*(5*j)+E*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let X0=L+k*K+y*D+l*M+v*z+P*V;L=X0>>>13,X0&=8191,X0+=C*W+Z*U+S*Y+E*(5*j)+g*(5*N),L+=X0>>>13,X0&=8191;let G0=L+k*N+y*K+l*D+v*M+P*z;L=G0>>>13,G0&=8191,G0+=C*V+Z*W+S*U+E*Y+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*D+P*M;L=t>>>13,t&=8191,t+=C*z+Z*V+S*W+E*U+g*Y,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=X0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let Y=2;Y<10;Y++)$[Y]+=G,G=$[Y]>>>13,$[Y]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let Y=1;Y<10;Y++)J[Y]=$[Y]+G,G=J[Y]>>>13,J[Y]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let Y=0;Y<10;Y++)J[Y]&=Q;Q=~Q;for(let Y=0;Y<10;Y++)$[Y]=$[Y]&Q|J[Y];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let X=$[0]+q[0];$[0]=X&65535;for(let Y=1;Y<8;Y++)X=($[Y]+q[Y]|0)+(X>>>16)|0,$[Y]=X&65535;r$(J)}update($){SY(this),b0($),$=E8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(J-this.pos,G-Q);if(X===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){SY(this),OW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let X=0;X<8;X++)$[Q++]=J[X]>>>0,$[Q++]=J[X]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var PW=wW(32,($)=>new CW($));function Y4($,q,J,G,Q,X=20){let Y=$[0],U=$[1],W=$[2],V=$[3],z=q[0],M=q[1],D=q[2],K=q[3],N=q[4],j=q[5],w=q[6],A=q[7],T=Q,_=J[0],f=J[1],p=J[2],F=Y,m=U,k=W,y=V,l=z,v=M,P=D,C=K,Z=N,S=j,E=w,g=A,L=T,b=_,O=f,x=p;for(let B=0;B<X;B+=2)F=F+l|0,L=j0(L^F,16),Z=Z+L|0,l=j0(l^Z,12),F=F+l|0,L=j0(L^F,8),Z=Z+L|0,l=j0(l^Z,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+P|0,O=j0(O^k,16),E=E+O|0,P=j0(P^E,12),k=k+P|0,O=j0(O^k,8),E=E+O|0,P=j0(P^E,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),E=E+x|0,v=j0(v^E,12),F=F+v|0,x=j0(x^F,8),E=E+x|0,v=j0(v^E,7),m=m+P|0,L=j0(L^m,16),g=g+L|0,P=j0(P^g,12),m=m+P|0,L=j0(L^m,8),g=g+L|0,P=j0(P^g,7),k=k+C|0,b=j0(b^k,16),Z=Z+b|0,C=j0(C^Z,12),k=k+C|0,b=j0(b^k,8),Z=Z+b|0,C=j0(C^Z,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=Y+F|0,G[d++]=U+m|0,G[d++]=W+k|0,G[d++]=V+y|0,G[d++]=z+l|0,G[d++]=M+v|0,G[d++]=D+P|0,G[d++]=K+C|0,G[d++]=N+Z|0,G[d++]=j+S|0,G[d++]=w+E|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=p+x|0}var U4=TW(Y4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var W4=new Uint8Array(16),IW=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(W4.subarray(J))},V4=new Uint8Array(32);function EW($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let X=$(q,J,V4),Y=AW(G.length,Q?Q.length:0,!0),U=PW.create(X);if(Q)IW(U,Q);IW(U,G),U.update(Y);let W=U.digest();return r$(X,Y),W}var z4=($)=>(q,J,G)=>{return{encrypt(X,Y){let U=X.length;Y=uG(U+16,Y,!1),Y.set(X);let W=Y.subarray(0,-16);$(q,J,W,W,1);let V=EW($,q,J,W,G);return Y.set(V,U),r$(V),Y},decrypt(X,Y){Y=uG(X.length-16,Y,!1);let U=X.subarray(0,-16),W=X.subarray(-16),V=EW($,q,J,U,G);if(!jW(W,V))throw r$(V),Error("invalid tag");return Y.set(X.subarray(0,-16)),$(q,J,Y,Y,1),r$(V),Y}}},sq=ZW({blockSize:64,nonceLength:12,tagLength:16},z4(U4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(Y+"expected Uint8Array"+U+", got "+W)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Eq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function O9($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function N9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function A$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function j9($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var M4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function K4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function D4($){for(let q=0;q<$.length;q++)$[q]=K4($[q]);return $}var CY=M4?($)=>$:D4,FW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),R4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),FW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=R4[$[J]];return q}var Iq={_0:48,_9:57,A:65,F:70,a:97,f:102};function LW($){if($>=Iq._0&&$<=Iq._9)return $-Iq._0;if($>=Iq.A&&$<=Iq.F)return $-(Iq.A-10);if($>=Iq.a&&$<=Iq.f)return $-(Iq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(FW)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=LW($.charCodeAt(X)),U=LW($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function F8($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IY=BigInt(0),PY=BigInt(1);function lG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function gW($){if(typeof $==="bigint"){if(!w9($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function rG($){let q=gW($).toString(16);return q.length&1?"0"+q:q}function _W($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?IY:BigInt("0x"+$)}function $J($){return _W(vJ($))}function qJ($){return _W(vJ(Z9(Q0($)).reverse()))}function g8($,q){m0(q),$=gW($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function dG($,q){return g8($,q).reverse()}function Z9($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var w9=($)=>typeof $==="bigint"&&IY<=$;function H4($,q,J){return w9($)&&w9(q)&&w9(J)&&q<=$&&$<J}function iG($,q,J,G){if(!H4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function EY($){let q;for(q=0;$>IY;$>>=PY,q+=1);return q}var cG=($)=>(PY<<BigInt($))-PY;function vW($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,g0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){W=D();let T=W.slice();A.push(T),w+=W.length}return g0(...A)};return(w,A)=>{M(),K(w);let T=void 0;while(!(T=A(N())))K();return M(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(X,Y,U){let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw Error(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}function LY($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let X=$(J,...G);return q.set(J,X),X}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),kW=BigInt(3),fW=BigInt(4),xW=BigInt(5),O4=BigInt(7),mW=BigInt(8),N4=BigInt(9),hW=BigInt(16);function R$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function bW($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=R$($,q),G=q,Q=H$,X=q$,Y=q$,U=H$;while(J!==H$){let V=G/J,z=G%J,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==q$)throw Error("invert: does not exist");return R$(Q,q)}function FY($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function uW($,q){let J=($.ORDER+q$)/fW,G=$.pow(q,J);return FY($,G,q),G}function j4($,q){let J=($.ORDER-xW)/mW,G=$.mul(q,kJ),Q=$.pow(G,J),X=$.mul(q,Q),Y=$.mul($.mul(X,kJ),Q),U=$.mul(X,$.sub(Y,$.ONE));return FY($,U,q),U}function w4($){let q=A9($),J=pW($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+O4)/hW;return(U,W)=>{let V=U.pow(W,Y),z=U.mul(V,G),M=U.mul(V,Q),D=U.mul(V,X),K=U.eql(U.sqr(z),W),N=U.eql(U.sqr(M),W);V=U.cmov(V,z,K),z=U.cmov(D,M,N);let j=U.eql(U.sqr(z),W),w=U.cmov(V,z,j);return FY(U,w,W),w}}function pW($){if($<kW)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=A9($);while(yW(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return uW;let X=Q.pow(G,q),Y=(q+q$)/kJ;return function(W,V){if(W.is0(V))return V;if(yW(W,V)!==1)throw Error("Cannot find square root");let z=J,M=W.mul(W.ONE,X),D=W.pow(V,q),K=W.pow(V,Y);while(!W.eql(D,W.ONE)){if(W.is0(D))return W.ZERO;let N=1,j=W.sqr(D);while(!W.eql(j,W.ONE))if(N++,j=W.sqr(j),N===z)throw Error("Cannot find square root");let w=q$<<BigInt(z-N-1),A=W.pow(M,w);z=N,M=W.sqr(A),D=W.mul(D,M),K=W.mul(K,A)}return K}}function Z4($){if($%fW===kW)return uW;if($%mW===xW)return j4;if($%hW===N4)return w4($);return pW($)}var A4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function gY($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=A4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function B4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function nG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((Y,U,W)=>{if($.is0(U))return Y;return G[W]=Y,$.mul(Y,U)},$.ONE),X=$.inv(Q);return q.reduceRight((Y,U,W)=>{if($.is0(U))return Y;return G[W]=$.mul(Y,G[W]),$.mul(Y,U)},X),G}function yW($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),X=$.eql(G,$.ZERO),Y=$.eql(G,$.neg($.ONE));if(!Q&&!X&&!Y)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function S4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class lW{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=S4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return R$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R$($*$,this.ORDER)}add($,q){return R$($+q,this.ORDER)}sub($,q){return R$($-q,this.ORDER)}mul($,q){return R$($*q,this.ORDER)}pow($,q){return B4(this,$,q)}div($,q){return R$($*bW(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return bW($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=Z4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?dG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(Y)U=R$(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return nG(this,$)}cmov($,q,J){return J?q:$}}function A9($,q={}){return new lW($,q)}function rW($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function _Y($){let q=rW($);return q+Math.ceil(q/2)}function dW($,q,J=!1){Q0($);let G=$.length,Q=rW(q),X=_Y(q);if(G<16||G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?qJ($):$J($),U=R$(Y,q-q$)+q$;return J?dG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function oG($,q){let J=q.negate();return $?J:q}function kY($,q){let J=nG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function oW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function vY($,q){oW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=cG($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function iW($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=fJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var bY=new WeakMap,aW=new WeakMap;function yY($){return aW.get($)||1}function cW($){if($!==_8)throw Error("invalid wNAF")}class fY{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=vY(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=vY($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=iW(J,Y,X);if(J=U,V)Q=Q.add(oG(M,q[D]));else G=G.add(oG(z,q[W]))}return cW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=vY($,this.bits);for(let X=0;X<Q.windows;X++){if(J===_8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=iW(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return cW(J),G}getPrecomputes($,q,J){let G=bY.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);bY.set(q,G)}}return G}cached($,q,J){let G=yY($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=yY($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){oW(q,this.bits),aW.set($,q),bY.delete($)}hasCache($){return yY($)!==1}}function sW($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>_8||G>_8){if(J&fJ)X=X.add(Q);if(G&fJ)Y=Y.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:X,p2:Y}}function nW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return gY(q),q}else return A9($,{isLE:J})}function tW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>_8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=nW(q.p,J.Fp,G),X=nW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function B9($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aG=BigInt(0),v8=BigInt(1),S9=BigInt(2);function T4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eW($){let q=T4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y||tq,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?S9**BigInt(254):S9**BigInt(447),N=U?BigInt(8)*S9**BigInt(251)-v8:BigInt(4)*S9**BigInt(445)-v8,j=K+N+v8,w=(Z)=>R$(Z,J),A=T(M);function T(Z){return dG(w(Z),z)}function _(Z){let S=Z9(Q0(Z,z,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(Z){return qJ(Q(Z9(Q0(Z,z,"scalar"))))}function p(Z,S){let E=l(_(S),f(Z));if(E===aG)throw Error("invalid private or public key received");return T(E)}function F(Z){return p(Z,A)}let m=F,k=p;function y(Z,S,E){let g=w(Z*(S-E));return S=w(S-g),E=w(E+g),{x_2:S,x_3:E}}function l(Z,S){iG("u",Z,aG,J),iG("scalar",S,K,j);let E=S,g=Z,L=v8,b=aG,O=Z,x=v8,d=aG;for(let a=BigInt(V-1);a>=aG;a--){let q0=E>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,P0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(P0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},P=(Z=W(z))=>{return Q0(Z,v.seed,"seed"),Z},C={randomSecretKey:P};return Object.freeze({keygen:B9(P,m),getSharedSecret:k,getPublicKey:m,scalarMult:p,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}class xY{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),A$(G)}update($){return Eq(this),this.iHash.update($),this}digestInto($){Eq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new xY($,q).update(J).digest();b8.create=($,q)=>new xY($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $V=($,q)=>($+($>=0?q:-q)/JV)/q;function C4($,q,J){let[[G,Q],[X,Y]]=q,U=$V(Y*$,J),W=$V(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Lq,D=z<Lq;if(M)V=-V;if(D)z=-z;let K=cG(Math.ceil(EY(J)/2))+y8;if(V<Lq||V>=K||z<Lq||z>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:M,k1:V,k2neg:D,k2:z}}function hY($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function mY($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(lG(J.lowS,"lowS"),lG(J.prehash,"prehash"),J.format!==void 0)hY(J.format);return J}class qV extends Error{constructor($=""){super($)}}var GJ={Err:qV,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=rG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?rG(Q.length/2|128):"";return rG($)+X+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=GJ;if($<Lq)throw new q("integer: negative integers are not allowed");let J=rG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}},Lq=BigInt(0),y8=BigInt(1),JV=BigInt(2),T9=BigInt(3),P4=BigInt(4);function uY($,q={}){let J=tW("weierstrass",$,q),{Fp:G,Fn:Q}=J,X=J.CURVE,{h:Y,n:U}=X;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=QV(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function M(P,C,Z){let{x:S,y:E}=C.toAffine(),g=G.toBytes(S);if(lG(Z,"isCompressed"),Z){z();let L=!G.isOdd(E);return g0(GV(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(E))}function D(P){Q0(P,void 0,"Point");let{publicKey:C,publicKeyUncompressed:Z}=V,S=P.length,E=P[0],g=P.subarray(1);if(S===C&&(E===2||E===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}z();let x=G.isOdd(O);if((E&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&E===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${Z}`)}let K=q.toBytes||M,N=q.fromBytes||D;function j(P){let C=G.sqr(P),Z=G.mul(C,P);return G.add(G.add(Z,G.mul(P,X.a)),X.b)}function w(P,C){let Z=G.sqr(C),S=j(P);return G.eql(Z,S)}if(!w(X.Gx,X.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(X.a,T9),P4),T=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(P,C,Z=!1){if(!G.isValid(C)||Z&&G.is0(C))throw Error(`bad point coordinate ${P}`);return C}function f(P){if(!(P instanceof y))throw Error("Weierstrass Point expected")}function p(P){if(!W||!W.basises)throw Error("no endo");return C4(P,W.basises,Q.ORDER)}let F=LY((P,C)=>{let{X:Z,Y:S,Z:E}=P;if(G.eql(E,G.ONE))return{x:Z,y:S};let g=P.is0();if(C==null)C=g?G.ONE:G.inv(E);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(E,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=LY((P)=>{if(P.is0()){if(q.allowInfinityPoint&&!G.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:C,y:Z}=P.toAffine();if(!G.isValid(C)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!w(C,Z))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(P,C,Z,S,E){return Z=new y(G.mul(Z.X,P),Z.Y,Z.Z),C=oG(S,C),Z=oG(E,Z),C.add(Z)}class y{static BASE=new y(X.Gx,X.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(P,C,Z){this.X=_("x",P),this.Y=_("y",C,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return X}static fromAffine(P){let{x:C,y:Z}=P||{};if(!P||!G.isValid(C)||!G.isValid(Z))throw Error("invalid affine point");if(P instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(Z))return y.ZERO;return new y(C,Z,G.ONE)}static fromBytes(P){let C=y.fromAffine(N(Q0(P,void 0,"point")));return C.assertValidity(),C}static fromHex(P){return y.fromBytes(bJ(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,C=!0){if(v.createCache(this,P),!C)this.multiply(T9);return this}assertValidity(){m(this)}hasEvenY(){let{y:P}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(P)}equals(P){f(P);let{X:C,Y:Z,Z:S}=this,{X:E,Y:g,Z:L}=P,b=G.eql(G.mul(C,L),G.mul(E,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:P,b:C}=X,Z=G.mul(C,T9),{X:S,Y:E,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(E,E),B=G.mul(g,g),a=G.mul(S,E);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(P,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(P,B),a=G.sub(x,B),a=G.mul(P,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(E,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(P){f(P);let{X:C,Y:Z,Z:S}=this,{X:E,Y:g,Z:L}=P,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=X.a,B=G.mul(X.b,T9),a=G.mul(C,E),q0=G.mul(Z,g),X0=G.mul(S,L),G0=G.add(C,Z),t=G.add(E,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(E,L);return t=G.mul(t,O0),O0=G.add(a,X0),t=G.sub(t,O0),O0=G.add(Z,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,X0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,X0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),X0=G.mul(d,X0),t=G.mul(B,t),q0=G.add(q0,X0),X0=G.sub(a,X0),X0=G.mul(d,X0),t=G.add(t,X0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(P){return this.add(P.negate())}is0(){return this.equals(y.ZERO)}multiply(P){let{endo:C}=q;if(!Q.isValidNot0(P))throw Error("invalid scalar: out of range");let Z,S,E=(g)=>v.cached(this,g,(L)=>kY(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=p(P),{p:x,f:d}=E(L),{p:B,f:a}=E(O);S=d.add(a),Z=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=E(P);Z=g,S=L}return kY(y,[Z,S])[0]}multiplyUnsafe(P){let{endo:C}=q,Z=this;if(!Q.isValid(P))throw Error("invalid scalar: out of range");if(P===Lq||Z.is0())return y.ZERO;if(P===y8)return Z;if(v.hasCache(this))return this.multiply(P);if(C){let{k1neg:S,k1:E,k2neg:g,k2:L}=p(P),{p1:b,p2:O}=sW(y,Z,E,L);return k(C.beta,b,O,S,g)}else return v.unsafe(Z,P)}toAffine(P){return F(this,P)}isTorsionFree(){let{isTorsionFree:P}=q;if(Y===y8)return!0;if(P)return P(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:P}=q;if(Y===y8)return this;if(P)return P(y,this);return this.multiplyUnsafe(Y)}isSmallOrder(){return this.multiplyUnsafe(Y).is0()}toBytes(P=!0){return lG(P,"isCompressed"),this.assertValidity(),K(y,this,P)}toHex(P=!0){return vJ(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new fY(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function GV($){return Uint8Array.of($?2:3)}function QV($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function I4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(QV($.Fp,J),{seed:_Y(J.ORDER)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K=G(Q.seed)){return dW(Q0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let A=Q0(K,void 0,"key").length;return A===j||A===w}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=B9(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function pY($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:X,Fn:Y}=$,{ORDER:U,BITS:W}=Y,{keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K}=I4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*JV<X.ORDER;function w(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!Y.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){hY(S);let E=K.signature,g=S==="compact"?E:S==="recovered"?E+1:void 0;return Q0(Z,g)}class f{r;s;recovery;constructor(Z,S,E){if(this.r=A("r",Z),this.s=A("s",S),E!=null){if(T(),![0,1,2,3].includes(E))throw Error("invalid recovery id");this.recovery=E}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let E;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(Z));return new f(O,x)}if(S==="recovered")E=Z[0],S="compact",Z=Z.subarray(1);let g=K.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new f(Y.fromBytes(L),Y.fromBytes(b),E)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new f(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:E}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!X.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=X.toBytes(L),O=$.fromBytes(g0(GV((g&1)===0),b)),x=Y.inv(L),d=F(Q0(Z,void 0,"msgHash")),B=Y.create(-d*x),a=Y.create(E*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(Z=N.format){if(hY(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:E}=this,g=Y.toBytes(S),L=Y.toBytes(E);if(Z==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let p=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let E=$J(S),g=S.length*8-W;return g>0?E>>BigInt(g):E},F=J.bits2int_modN||function(S){return Y.create(p(S))},m=cG(W);function k(Z){return iG("num < 2^"+W,Z,Lq,m),Y.toBytes(Z)}function y(Z,S){return Q0(Z,void 0,"message"),S?Q0(q(Z),void 0,"prehashed message"):Z}function l(Z,S,E){let{lowS:g,prehash:L,extraEntropy:b}=mY(E,N);Z=y(Z,L);let O=F(Z),x=Y.fromBytes(S);if(!Y.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let X0=b===!0?G(K.secretKey):b;d.push(Q0(X0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(X0){let G0=p(X0);if(!Y.isValidNot0(G0))return;let t=Y.inv(G0),O0=$.BASE.multiply(G0).toAffine(),Z0=Y.create(O0.x);if(Z0===Lq)return;let P0=Y.create(t*Y.create(a+Z0*x));if(P0===Lq)return;let x0=(O0.x===Z0?0:2)|Number(O0.y&y8),K$=P0;if(g&&w(P0))K$=Y.neg(P0),x0^=1;return new f(Z0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(Z,S,E={}){let{seed:g,k2sig:L}=l(Z,S,E);return vW(q.outputLen,Y.BYTES,Q)(g,L).toBytes(E.format)}function P(Z,S,E,g={}){let{lowS:L,prehash:b,format:O}=mY(g,N);if(E=Q0(E,void 0,"publicKey"),S=y(S,b),!L8(Z)){let x=Z instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(Z,O);try{let x=f.fromBytes(Z,O),d=$.fromBytes(E);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),X0=Y.inv(a),G0=Y.create(q0*X0),t=Y.create(B*X0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return Y.create(O0.x)===B}catch(x){return!1}}function C(Z,S,E={}){let{prehash:g}=mY(E,N);return S=y(S,g),f.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K,Point:$,sign:v,verify:P,recoverPublicKey:C,Signature:f,hash:q})}function XV($,q,J){return $&q^~$&J}function YV($,q,J){return $&q^$&J^q&J}class C9{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=j9(this.buffer)}update($){Eq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=j9($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Eq(this),O9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,A$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=j9($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Fq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),gq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var P9=BigInt(4294967295),UV=BigInt(32);function E4($,q=!1){if(q)return{h:Number($&P9),l:Number($>>UV&P9)};return{h:Number($>>UV&P9)|0,l:Number($&P9)|0}}function I9($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=E4($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var lY=($,q,J)=>$>>>J,rY=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,sG=($,q,J)=>$<<64-J|q>>>J-32,tG=($,q,J)=>$>>>J-32|q<<64-J;var WV=($,q,J)=>$<<J|q>>>32-J,VV=($,q,J)=>q<<J|$>>>32-J,zV=($,q,J)=>q<<J-32|$>>>64-J,MV=($,q,J)=>$<<J-32|q>>>64-J;function Xq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var KV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),DV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,RV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),HV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,OV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),NV=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var F4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class dY extends C9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)QJ[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=QJ[z-15],D=QJ[z-2],K=d$(M,7)^d$(M,18)^M>>>3,N=d$(D,17)^d$(D,19)^D>>>10;QJ[z]=N+QJ[z-7]+K+QJ[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=d$(Y,6)^d$(Y,11)^d$(Y,25),D=V+M+XV(Y,U,W)+F4[z]+QJ[z]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+YV(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){A$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),A$(this.buffer)}}class jV extends dY{A=Fq[0]|0;B=Fq[1]|0;C=Fq[2]|0;D=Fq[3]|0;E=Fq[4]|0;F=Fq[5]|0;G=Fq[6]|0;H=Fq[7]|0;constructor(){super(32)}}class g4 extends dY{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(28)}}var wV=(()=>I9(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),_4=(()=>wV[0])(),v4=(()=>wV[1])(),XJ=new Uint32Array(80),YJ=new Uint32Array(80);class eG extends C9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)XJ[T]=$.getUint32(q),YJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=XJ[T-15]|0,f=YJ[T-15]|0,p=xJ(_,f,1)^xJ(_,f,8)^lY(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^rY(_,f,7),m=XJ[T-2]|0,k=YJ[T-2]|0,y=xJ(m,k,19)^sG(m,k,61)^lY(m,k,6),l=mJ(m,k,19)^tG(m,k,61)^rY(m,k,6),v=RV(F,l,YJ[T-7],YJ[T-16]),P=HV(v,p,y,XJ[T-7],XJ[T-16]);XJ[T]=P|0,YJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=xJ(z,M,14)^xJ(z,M,18)^sG(z,M,41),f=mJ(z,M,14)^mJ(z,M,18)^tG(z,M,41),p=z&D^~z&N,F=M&K^~M&j,m=OV(A,f,F,v4[T],YJ[T]),k=NV(m,w,_,p,_4[T],XJ[T]),y=m|0,l=xJ(J,G,28)^sG(J,G,34)^sG(J,G,39),v=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),P=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,A=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Xq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let Z=KV(y,v,C);J=DV(Z,k,l,P),G=Z|0}({h:J,l:G}=Xq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Xq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Xq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Xq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Xq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Xq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Xq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Xq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,A)}roundClean(){A$(XJ,YJ)}destroy(){A$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class b4 extends eG{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class ZV extends eG{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class y4 extends eG{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class k4 extends eG{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var E9=F8(()=>new jV,eq(1));var AV=F8(()=>new ZV,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var f4=BigInt(1),BV=BigInt(2),x4=BigInt(3),m4=BigInt(5),zF=BigInt(8),SV=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function h4($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=SV,U=$*$%X*$%X,W=k$(U,BV,X)*U%X,V=k$(W,f4,X)*$%X,z=k$(V,m4,X)*V%X,M=k$(z,q,X)*z%X,D=k$(M,J,X)*M%X,K=k$(D,G,X)*D%X,N=k$(K,Q,X)*K%X,j=k$(N,Q,X)*K%X,w=k$(j,q,X)*z%X;return{pow_p_5_8:k$(w,BV,X)*$%X,b2:U}}function u4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TV=(()=>{let $=SV;return eW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=h4(q);return R$(k$(J,x4,$)*G,$)},adjustScalarBytes:u4})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),l4=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var r4=uY(p4),iY=pY(r4,E9);var d4=uY(l4),CV=pY(d4,AV);function IV($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var cY=Uint8Array.of(0),PV=Uint8Array.of();function EV($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=PV;else Q0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=b8.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)cY[0]=z+1,W.update(z===0?PV:V).update(J).update(cY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),A$(V,cY),Y.slice(0,G)}var i4=BigInt(0),$Q=BigInt(1),c4=BigInt(2),n4=BigInt(7),o4=BigInt(256),a4=BigInt(113),gV=[],_V=[],vV=[];for(let $=0,q=$Q,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],gV.push(2*(5*G+J)),_V.push(($+1)*($+2)/2%64);let Q=i4;for(let X=0;X<7;X++)if(q=(q<<$Q^(q>>n4)*a4)%o4,q&c4)Q^=$Q<<($Q<<BigInt(X))-$Q;vV.push(Q)}var bV=I9(vV,!0),s4=bV[0],t4=bV[1],LV=($,q,J)=>J>32?zV($,q,J):WV($,q,J),FV=($,q,J)=>J>32?MV($,q,J):VV($,q,J);function e4($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let Y=0;Y<10;Y++)J[Y]=$[Y]^$[Y+10]^$[Y+20]^$[Y+30]^$[Y+40];for(let Y=0;Y<10;Y+=2){let U=(Y+8)%10,W=(Y+2)%10,V=J[W],z=J[W+1],M=LV(V,z,1)^J[U],D=FV(V,z,1)^J[U+1];for(let K=0;K<50;K+=10)$[Y+K]^=M,$[Y+K+1]^=D}let Q=$[2],X=$[3];for(let Y=0;Y<24;Y++){let U=_V[Y],W=LV(Q,X,U),V=FV(Q,X,U),z=gV[Y];Q=$[z],X=$[z+1],$[z]=W,$[z+1]=V}for(let Y=0;Y<50;Y+=10){for(let U=0;U<10;U++)J[U]=$[Y+U];for(let U=0;U<10;U++)$[Y+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=s4[G],$[1]^=t4[G]}A$(J)}class L9{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=N9(this.state)}clone(){return this._cloneInto()}keccak(){CY(this.state32),e4(this.state32,this.rounds),CY(this.state32),this.posOut=0,this.pos=0}update($){Eq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(q-this.pos,G-Q);for(let Y=0;Y<X;Y++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Eq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let X=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+X),G),this.posOut+=X,G+=X}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(O9($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,A$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:X}=this;return $||=new L9(q,J,G,X,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=X,$.destroyed=this.destroyed,$}}var yV=($,q,J,G={})=>F8(()=>new L9(q,$,J),G);var hJ=yV(6,136,32,eq(8));var kV=yV(6,72,64,eq(10));var fV=($,q,J,G={})=>F8((Q={})=>new L9(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),xV=fV(31,168,16,eq(11)),Yq=fV(31,136,32,eq(12));function nY($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function hV($){return nY($),($&$-1)===0&&$!==0}function oY($,q){nY($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function uV($){return nY($),31-Math.clz32($)}function mV($){let q=$.length;if(q<2||!hV(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=uV(q);for(let G=0;G<q;G++){let Q=oY(G,J);if(G<Q){let X=$[G];$[G]=$[Q],$[Q]=X}}return $}var aY=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:X=!1,skipStages:Y=0,brp:U=!0}=q,W=uV(J);if(!hV(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==X;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)mV(z);for(let M=0,D=1;M<W-Y;M++){let K=Q?M+1+Y:W-M,N=1<<K,j=N>>1,w=J>>K;for(let A=0;A<J;A+=N)for(let T=0,_=D++;T<j;T++){let f=X?Q?J-_:_:T*w,p=A+T,F=A+T+j,m=G[f],k=z[F],y=z[p];if(V){let l=$.mul(k,m);z[p]=$.add(y,l),z[F]=$.sub(y,l)}else if(X)z[p]=$.add(k,y),z[F]=$.mul($.sub(k,y),m);else z[p]=$.add(y,k),z[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)mV(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function F9($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function pV($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,X)=>Q+J(X),0);return{bytesLen:G,encode:(Q)=>{let X=new Uint8Array(G);for(let Y=0,U=0;Y<q.length;Y++){let W=q[Y],V=J(W),z=typeof W==="number"?Q[Y]:W.encode(Q[Y]);if(Q0(z,V,$),X.set(z,U),typeof W!=="number")z.fill(0);U+=V}return X},decode:(Q)=>{Q0(Q,G,$);let X=[];for(let Y of q){let U=J(Y),W=Q.subarray(0,U);X.push(typeof Y==="number"?W:Y.decode(W)),Q=Q.subarray(U)}return X}}}function g9($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let X=0,Y=0;X<G.length;X++){let U=$.encode(G[X]);Q.set(U,Y),U.fill(0),Y+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let X=0;X<G.length;X+=$.bytesLen)Q.push($.decode(G.subarray(X,X+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function sY($){return(1<<$)-1}var CF=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var lV=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:X,brvBits:Y,isKyber:U}=$,W=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},V=(T,_=G)=>{let f=W(T,_)|0;return(f>_>>1?f-_|0:f)|0};function z(){let T=q(J);for(let _=0;_<J;_++){let f=oY(_,Y),p=BigInt(X)**BigInt(f)%BigInt(G);T[_]=Number(p)|0}return T}let M=z(),D={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:M,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=aY(D,{dit:!1,...K}),j=aY(D,{dit:!0,...K});return{mod:W,smod:V,nttZetas:M,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=sY(T),p=T*(J/8);return{bytesLen:p,encode:(F)=>{let m=new Uint8Array(p);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&sY(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},$O=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,X=new Uint8Array(J),Y=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,z)=>{return G[Q+0]=V,G[Q+1]=z,Y.destroy(),Y=$.create({}).update(G),U++,()=>{return W++,Y.xofInto(X)}},clean:()=>{Y.destroy(),y0(X,G)}}},rV=$O(xV);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,_q=3329,qO=3303,JO=17,{mod:GQ,nttZetas:GO,NTT:pJ,bitsCoder:QO}=lV({N:Q$,Q:_q,F:qO,ROOT_OF_UNITY:JO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),tY={512:{N:Q$,Q:_q,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:_q,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:_q,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},XO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+_q/2)/_q,decode:(J)=>J*_q+q>>>$}},qQ=($)=>QO($,XO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]+q[J])}function YO($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]-q[J])}function UO($,q,J,G,Q){let X=GQ(q*G*Q+$*J),Y=GQ($*G+q*J);return{c0:X,c1:Y}}function _9($,q){for(let J=0;J<Q$/2;J++){let G=GO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:X}=UO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=X}return $}function dV($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let X=(G[Q+0]>>0|G[Q+1]<<8)&4095,Y=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(X<_q)q[J++]=X;if(J<Q$&&Y<_q)q[J++]=Y}}return q}function JQ($,q,J,G){let Q=$(G*Q$/4,q,J),X=new Uint16Array(Q$),Y=N9(Q),U=0;for(let W=0,V=0,z=0,M=0;W<Y.length;W++){let D=Y[W];for(let K=0;K<32;K++)if(z+=D&1,D>>=1,U+=1,U===G)M=z,z=0;else if(U===2*G)X[V++]=GQ(M-z),z=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return X}var WO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:X,ETA2:Y,du:U,dv:W}=$,V=qQ(1),z=qQ(W),M=qQ(U),D=uJ("publicKey",g9(qQ(12),q),32),K=g9(qQ(12),q),N=uJ("ciphertext",g9(M,q),z),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let A=new Uint8Array(33);A.set(w),A[32]=q;let T=Q(A),[_,f]=j.decode(T),p=[],F=[];for(let y=0;y<q;y++)p.push(pJ.encode(JQ(J,f,y,X)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(JQ(J,f,q+y,X));for(let v=0;v<q;v++){let P=dV(m.get(v,y));lJ(l,_9(P,p[v]))}F.push(l)}m.clean();let k={publicKey:D.encode([F,_]),secretKey:K.encode(p)};return y0(_,f,p,F,A,T),k},encrypt:(w,A,T)=>{let[_,f]=D.decode(w),p=[];for(let v=0;v<q;v++)p.push(pJ.encode(JQ(J,T,v,X)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let P=JQ(J,T,q+v,Y),C=new Uint16Array(Q$);for(let Z=0;Z<q;Z++){let S=dV(F.get(v,Z));lJ(C,_9(S,p[Z]))}lJ(P,pJ.decode(C)),k.push(P),lJ(m,_9(_[v],p[v])),y0(C)}F.clean();let y=JQ(J,T,2*q,Y);lJ(y,pJ.decode(m));let l=V.decode(A);return lJ(l,y),y0(_,p,m,y),N.encode([k,l])},decrypt:(w,A)=>{let[T,_]=N.decode(w),f=K.decode(A),p=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(p,_9(f[F],pJ.encode(T[F])));return YO(_,pJ.decode(p)),y0(p,f,T),V.encode(_)}}};function eY($){let q=WO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:X,lengths:Y}=q,U=uJ("secretKey",Y.secretKey,Y.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...Y,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(z=Uq(64))=>{Q0(z,64,"seed");let{publicKey:M,secretKey:D}=q.keygen(z.subarray(0,32)),K=J(M),N=U.encode([D,M,K,z.subarray(32)]);return y0(D,K),{publicKey:M,secretKey:N}},getPublicKey:(z)=>{let[M,D,K,N]=U.decode(z);return Uint8Array.from(D)},encapsulate:(z,M=Uq(32))=>{Q0(z,Y.publicKey,"publicKey"),Q0(M,32,"message");let D=z.subarray(0,384*$.K),K=X.encode(X.decode(pV(D)));if(!F9(K,D))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(M).update(J(z)).digest(),j=q.encrypt(z,M,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(z,M)=>{Q0(M,U.bytesLen,"secretKey"),Q0(z,Y.cipherText,"cipherText");let D=U.bytesLen-96,K=D+32,N=J(M.subarray(D/2,K));if(!F9(N,M.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,A,T]=U.decode(M),_=q.decrypt(z,j),f=G.create().update(_).update(A).digest(),p=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=F9(z,F),k=Q.create({dkLen:32}).update(T).update(z).digest();return y0(_,F,!m?p:k),m?p:k}}}function VO($,q,J){return Yq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var $U={HASH256:hJ,HASH512:kV,KDF:Yq,XOF:rV,PRF:VO},kF=eY({...$U,...tY[512]}),QQ=eY({...$U,...tY[768]}),iV=eY({...$U,...tY[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function zO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let X=$.Point.Fn;if(!X)throw Error("No Point.Fn");G=(Y=Uq(J.seed))=>{Q0(Y,J.seed,"seed");let U=X.isLE?qJ(Y):$J(Y),W=X.toBytes(X.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function qU($,q=!1){let J=zO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let X=this.keygen(Q).secretKey,Y=this.decapsulate(G,X),U=$.getPublicKey(X);return y0(X),{sharedSecret:Y,cipherText:U}},decapsulate(G,Q){let X=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?X.subarray(1):X}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function JU($){return(q,J)=>$(q,{dkLen:J})}function MO($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function X(Y){Q0(Y,$);let U=G.decode(q(Y,G.bytesLen)),W=J.map((M,D)=>M.keygen(U[D])),V=W.map((M)=>M.secretKey),z=W.map((M)=>M.publicKey);return{secretKey:V,publicKey:z}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(Y){return this.keygen(Y).publicKey},keygen(Y=Uq($)){let{publicKey:U,secretKey:W}=X(Y),V=Q.encode(U);return y0(U),y0(W),{secretKey:Y,publicKey:V}},expandDecapsulationKey:X,realSeedLen:$}}function v9($,q,J,G,...Q){let X=MO($,J,...Q),Y=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),W=XQ(Q,"msg");if(q===void 0)q=W.bytesLen;return m0(q),{lengths:{...X.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:Y.bytesLen},getPublicKey:X.getPublicKey,keygen:X.keygen,encapsulate(V,z=Uq(W.bytesLen)){let M=U.decode(V),D=W.decode(z),K=Q.map((A,T)=>A.encapsulate(M[T],D[T])),N=K.map((A)=>A.sharedSecret),j=K.map((A)=>A.cipherText),w={sharedSecret:G(M,j,N),cipherText:Y.encode(j)};return y0(N,j),w},decapsulate(V,z){let M=Y.decode(V),{publicKey:D,secretKey:K}=X.expandDecapsulationKey(z),N=Q.map((j,w)=>j.decapsulate(M[w],K[w]));return G(D,M,N)}}}function cV($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,JU(G),(X,Y,U)=>Q(g0(U[0],U[1],Y[1],X[1],JJ($))),q,J)}var cF=cV("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",QQ,qU(iY,!0),Yq,hJ),nF=cV("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",iV,qU(CV,!0),Yq,hJ);function KO($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,JU(G),(X,Y,U)=>{let W=g0(U[0],U[1],Y[0],X[0],Y[1],X[1],JJ($)),V=32,z=g0(JJ("hybrid_prk"),W),M=IV(Q,z),D=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=EV(Q,M,D,32);return y0(M,D,z,W),K},q,J)}var nV=qU(TV),oF=KO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",QQ,nV,Yq,E9),DO=(()=>v9(32,32,JU(Yq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),QQ,nV))();function RO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function X(Y){let U;for(let z=0,M=q;;z=M,M+=q){if(M>Y.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(Y.subarray(z,M),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(Y=Uq(G)){return Q0(Y,G,"seed"),X(Y)},getPublicKey(Y){return $.getPublicKey(Y,!1)},encapsulate(Y,U=Uq(G)){Q0(U,G,"rand");let{secretKey:W}=X(U),V=this.decapsulate(Y,W),z=$.getPublicKey(W,!1);return y0(W),{sharedSecret:V,cipherText:z}},decapsulate(Y,U){return $.getSharedSecret(U,Y).subarray(1)}}}function HO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:X}=J.lengths;if(!Q||!X)throw Error("wrong curve");let Y=RO(J,Q,X,G),U=64,W=U+G;return v9(32,32,(V)=>{Q0(V,32);let z=Yq(V,{dkLen:W}),M=z.subarray(0,U),D=z.subarray(U,W);return g0(M,D)},(V,z,M)=>hJ(g0(M[0],M[1],z[1],V[1],JJ($))),q,Y)}var OO=(()=>HO("MLKEM768-P256",QQ,iY,128))();var GU=DO,oV=OO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var A0=($,q,J)=>u0($,q,J),XU=L0,k8=Q9,n0=(...$)=>YY(...$),f8=($)=>vG($),x8=GY,m8=($)=>Bq($),y9=BigInt(0),QU=BigInt(1);function vq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function k9($){if(typeof $==="bigint"){if(!b9($))throw RangeError("positive bigint expected, got "+$)}else XU($);return $}function Wq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function YQ($){let q=k9($).toString(16);return q.length&1?"0"+q:q}function aV($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?y9:BigInt("0x"+$)}function rJ($){return aV(Q9($))}function i$($){return aV(Q9(UJ(u0($)).reverse()))}function f9($,q){if(L0(q),q===0)throw RangeError("zero length");$=k9($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return vG(J.padStart(q*2,"0"))}function UQ($,q){return f9($,q).reverse()}function sV($,q){if($=A0($),q=A0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(A0($))}function x9($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var b9=($)=>typeof $==="bigint"&&y9<=$;function NO($,q,J){return b9($)&&b9(q)&&b9(J)&&q<=$&&$<J}function bq($,q,J,G){if(!NO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<y9)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>y9;$>>=QU,q+=1);return q}var WQ=($)=>(QU<<BigInt($))-QU;function tV($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,n0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){W=D();let T=W.slice();A.push(T),w+=W.length}return n0(...A)};return(w,A)=>{M(),K(w);let T=void 0;while((T=A(N()))===void 0)K();return M(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(X,Y,U){if(!U&&Y!=="function"&&!Object.hasOwn($,X))throw TypeError(`param "${X}" is invalid: expected own property`);let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw TypeError(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}var YU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),I0=BigInt(1),dJ=BigInt(2),Jz=BigInt(3),Gz=BigInt(4),Qz=BigInt(5),jO=BigInt(7),Xz=BigInt(8),wO=BigInt(9),Yz=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function eV($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,X=I0,Y=I0,U=o0;while(J!==o0){let V=G/J,z=G-J*V,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==I0)throw Error("invert: does not exist");return T0(Q,q)}function UU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function Uz($,q){let J=$,G=(J.ORDER+I0)/Gz,Q=J.pow(q,G);return UU(J,Q,q),Q}function ZO($,q){let J=$,G=(J.ORDER-Qz)/Xz,Q=J.mul(q,dJ),X=J.pow(Q,G),Y=J.mul(q,X),U=J.mul(J.mul(Y,dJ),X),W=J.mul(Y,J.sub(U,J.ONE));return UU(J,W,q),W}function AO($){let q=m9($),J=Wz($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+jO)/Yz;return(U,W)=>{let V=U,z=V.pow(W,Y),M=V.mul(z,G),D=V.mul(z,Q),K=V.mul(z,X),N=V.eql(V.sqr(M),W),j=V.eql(V.sqr(D),W);z=V.cmov(z,M,N),M=V.cmov(K,D,j);let w=V.eql(V.sqr(M),W),A=V.cmov(z,M,w);return UU(V,A,W),A}}function Wz($){if($<Jz)throw Error("sqrt is not defined for small field");let q=$-I0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=m9($);while($z(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return Uz;let X=Q.pow(G,q),Y=(q+I0)/dJ;return function(W,V){let z=W;if(z.is0(V))return V;if($z(z,V)!==1)throw Error("Cannot find square root");let M=J,D=z.mul(z.ONE,X),K=z.pow(V,q),N=z.pow(V,Y);while(!z.eql(K,z.ONE)){if(z.is0(K))return z.ZERO;let j=1,w=z.sqr(K);while(!z.eql(w,z.ONE))if(j++,w=z.sqr(w),j===M)throw Error("Cannot find square root");let A=I0<<BigInt(M-j-1),T=z.pow(D,A);M=j,D=z.sqr(T),K=z.mul(K,D),N=z.mul(N,T)}return N}}function BO($){if($%Gz===Jz)return Uz;if($%Xz===Qz)return ZO;if($%Yz===wO)return AO($);return Wz($)}var yq=($,q)=>(T0($,q)&I0)===I0,SO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function WU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=SO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Wq($.BYTES,"BYTES"),Wq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function TO($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===I0)return q;let Q=G.ONE,X=q;while(J>o0){if(J&I0)Q=G.mul(Q,X);X=G.sqr(X),J>>=I0}return Q}function VQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),X=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),Y=G.inv(X);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},Y),Q}function $z($,q){let J=$,G=(J.ORDER-I0)/dJ,Q=J.pow(q,G),X=J.eql(Q,J.ONE),Y=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!X&&!Y&&!U)throw Error("invalid Legendre symbol result");return X?1:Y?0:-1}function CO($,q){if(q!==void 0)XU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var qz=new WeakMap;class VU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=I0;_lengths;_mod;constructor($,q={}){if($<=I0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=CO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I0)===I0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return TO(this,$,q)}div($,q){return T0($*eV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return eV($,this.ORDER)}sqrt($){let q=qz.get(this);if(!q)qz.set(this,q=BO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?UQ($,this.BYTES):f9($,this.BYTES)}fromBytes($,q=!1){A0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(Y)U=T0(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return VQ(this,$)}cmov($,q,J){return vq(J,"condition"),J?q:$}}Object.freeze(VU.prototype);function m9($,q={}){return new VU($,q)}function Vz($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I0)throw Error("field order must be greater than 1");let q=h8($-I0);return Math.ceil(q/8)}function zU($){let q=Vz($);return q+Math.ceil(q/2)}function zz($,q,J=!1){A0($);let G=$.length,Q=Vz(q),X=Math.max(zU(q),16);if(G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?i$($):rJ($),U=T0(Y,q-I0)+I0;return J?UQ(U,Q):f9(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=VQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function Rz($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function MU($,q){Rz($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=WQ($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function Mz($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=iJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var KU=new WeakMap,Hz=new WeakMap;function DU($){return Hz.get($)||1}function Kz($){if($!==u8)throw Error("invalid wNAF")}class MQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=MU(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=MU($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=Mz(J,Y,X);if(J=U,V)Q=Q.add(zQ(M,q[D]));else G=G.add(zQ(z,q[W]))}return Kz(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=MU($,this.bits);for(let X=0;X<Q.windows;X++){if(J===u8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=Mz(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return Kz(J),G}getPrecomputes($,q,J){let G=KU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);KU.set(q,G)}}return G}cached($,q,J){let G=DU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=DU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){Rz(q,this.bits),Hz.set($,q),KU.delete($)}hasCache($){return DU($)!==1}}function Oz($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>u8||G>u8){if(J&iJ)X=X.add(Q);if(G&iJ)Y=Y.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:X,p2:Y}}function Dz($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return WU(q),q}else return m9($,{isLE:J})}function h9($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>u8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=Dz(q.p,J.Fp,G),X=Dz(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Wq($),Wq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function PO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function IO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?x9($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function RU($,q,J,G){if(A0($),Wq(J),q=IO(q),q.length>255)q=G(n0(x9("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:X}=G,Y=Math.ceil(J/Q);if(J>65535||Y>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,DQ(q.length,1)),W=new Uint8Array(X),V=DQ(J,2),z=Array(Y),M=G(n0(W,$,V,DQ(0,1),U));z[0]=G(n0(M,DQ(1,1),U));for(let K=1;K<Y;K++){let N=[PO(M,z[K-1]),DQ(K+1,1),U];z[K]=G(n0(...N))}return n0(...z).slice(0,J)}var Nz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var jz=($,q)=>($+($>=0?q:-q)/Zz)/q;function EO($,q,J){bq("scalar",$,Vq,J);let[[G,Q],[X,Y]]=q,U=jz(Y*$,J),W=jz(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Vq,D=z<Vq;if(M)V=-V;if(D)z=-z;let K=WQ(Math.ceil(h8(J)/2))+WJ;if(V<Vq||V>=K||z<Vq||z>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:M,k1:V,k2neg:D,k2:z}}function OU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function HU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(vq(J.lowS,"lowS"),vq(J.prehash,"prehash"),J.format!==void 0)OU(J.format);return J}class wz extends Error{constructor($=""){super($)}}var c$={Err:wz,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Wq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=YQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?YQ(Q.length/2|128):"";return YQ($)+X+Q+q},decode($,q){let{Err:J}=c$;q=A0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=c$;if(k9($),$<Vq)throw new q("integer: negative integers are not allowed");let J=YQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=A0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Vq=BigInt(0),WJ=BigInt(1),Zz=BigInt(2),u9=BigInt(3),LO=BigInt(4);function Az($,q={}){let J=h9("weierstrass",$,q),G=J.Fp,Q=J.Fn,X=J.CURVE,{h:Y,n:U}=X;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=Sz(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(v,P,C){if(V&&P.is0())return Uint8Array.of(0);let{x:Z,y:S}=P.toAffine(),E=G.toBytes(Z);if(vq(C,"isCompressed"),C){M();let g=!G.isOdd(S);return n0(Bz(g),E)}else return n0(Uint8Array.of(4),E,G.toBytes(S))}function K(v){A0(v,void 0,"Point");let{publicKey:P,publicKeyUncompressed:C}=z,Z=v.length,S=v[0],E=v.subarray(1);if(V&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===P&&(S===2||S===3)){let g=G.fromBytes(E);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}M();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===C&&S===4){let g=G.BYTES,L=G.fromBytes(E.subarray(0,g)),b=G.fromBytes(E.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${P} or uncompressed=${C}`)}let N=q.toBytes===void 0?D:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let P=G.sqr(v),C=G.mul(P,v);return G.add(G.add(C,G.mul(v,X.a)),X.b)}function A(v,P){let C=G.sqr(P),Z=w(v);return G.eql(C,Z)}if(!A(X.Gx,X.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(X.a,u9),LO),_=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,P,C=!1){if(!G.isValid(P)||C&&G.is0(P))throw Error(`bad point coordinate ${v}`);return P}function p(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return EO(v,W.basises,Q.ORDER)}function m(v,P,C,Z,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),P=zQ(Z,P),C=zQ(S,C),P.add(C)}class k{static BASE=new k(X.Gx,X.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,P,C){this.X=f("x",v),this.Y=f("y",P,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return X}static fromAffine(v){let{x:P,y:C}=v||{};if(!v||!G.isValid(P)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(P)&&G.is0(C))return k.ZERO;return new k(P,C,G.ONE)}static fromBytes(v){let P=k.fromAffine(j(A0(v,void 0,"point")));return P.assertValidity(),P}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,P=!0){if(l.createCache(this,v),!P)this.multiply(u9);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:P,y:C}=v.toAffine();if(!G.isValid(P)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!A(P,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){p(v);let{X:P,Y:C,Z}=this,{X:S,Y:E,Z:g}=v,L=G.eql(G.mul(P,g),G.mul(S,Z)),b=G.eql(G.mul(C,g),G.mul(E,Z));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:P}=X,C=G.mul(P,u9),{X:Z,Y:S,Z:E}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),x=G.mul(S,S),d=G.mul(E,E),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,E),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,E),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){p(v);let{X:P,Y:C,Z}=this,{X:S,Y:E,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=X.a,d=G.mul(X.b,u9),B=G.mul(P,S),a=G.mul(C,E),q0=G.mul(Z,g),X0=G.add(P,C),G0=G.add(S,E);X0=G.mul(X0,G0),G0=G.add(B,a),X0=G.sub(X0,G0),G0=G.add(P,Z);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,Z),L=G.add(E,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(X0,L),L=G.sub(L,B),B=G.mul(X0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return p(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:P}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,Z,S=(E)=>l.cached(this,E,(g)=>cJ(k,g));if(P){let{k1neg:E,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);Z=x.add(B),C=m(P.beta,O,d,E,L)}else{let{p:E,f:g}=S(v);C=E,Z=g}return cJ(k,[C,Z])[0]}multiplyUnsafe(v){let{endo:P}=q,C=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Vq||C.is0())return k.ZERO;if(Z===WJ)return C;if(l.hasCache(this))return this.multiply(Z);if(P){let{k1neg:S,k1:E,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=Oz(k,C,E,L);return m(P.beta,b,O,S,g)}else return l.unsafe(C,Z)}toAffine(v){let P=this,C=v,{X:Z,Y:S,Z:E}=P;if(G.eql(E,G.ONE))return{x:Z,y:S};let g=P.is0();if(C==null)C=g?G.ONE:G.inv(E);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(E,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(Y===WJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(Y===WJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(Y)}isSmallOrder(){if(Y===WJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return vq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new MQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function Bz($){return Uint8Array.of($?2:3)}function Sz($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function FO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(Sz($.Fp,J),{seed:Math.max(zU(J.ORDER),16)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,zz(A0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,A=J._lengths;if(!x8(K))return;let T=A0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!A?.includes(T);if(_&&f)return;return _}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=KQ(U,W);return Object.freeze(M),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function Tz($,q,J={}){let G=q;Aq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,X=J.hmac===void 0?(S,E)=>Sq(G,S,E):J.hmac,{Fp:Y,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N}=FO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=W*Zz+WJ<Y.ORDER;function A(S){let E=W>>WJ;return S>E}function T(S,E){if(!U.isValidNot0(E))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return E}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,E){OU(E);let g=N.signature,L=E==="compact"?g:E==="recovered"?g+1:void 0;return A0(S,L)}class p{r;s;recovery;constructor(S,E,g){if(this.r=T("r",S),this.s=T("s",E),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,E=j.format){f(S,E);let g;if(E==="der"){let{r:x,s:d}=c$.toSig(A0(S));return new p(x,d)}if(E==="recovered")g=S[0],E="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new p(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,E){return this.fromBytes(f8(S),E)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new p(this.r,this.s,S)}recoverPublicKey(S){let{r:E,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?E+W:E;if(!Y.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=Y.toBytes(b),x=$.fromBytes(n0(Bz((L&1)===0),O)),d=U.inv(b),B=m(A0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),X0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(X0.is0())throw Error("invalid recovery: point at infinify");return X0.assertValidity(),X0}hasHighS(){return A(this.s)}toBytes(S=j.format){if(OU(S),S==="der")return f8(c$.hexFromSig(this));let{r:E,s:g}=this,L=U.toBytes(E),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(p.prototype),Object.freeze(p);let F=J.bits2int===void 0?function(E){if(E.length>8192)throw Error("input is too large");let g=rJ(E),L=E.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(E){return U.create(F(E))}:J.bits2int_modN,k=WQ(V);function y(S){return bq("num < 2^"+V,S,Vq,k),U.toBytes(S)}function l(S,E){return A0(S,void 0,"message"),E?A0(G(S),void 0,"prehashed message"):S}function v(S,E,g){let{lowS:L,prehash:b,extraEntropy:O}=HU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(E);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(A0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function X0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),Z0=$.BASE.multiply(t).toAffine(),P0=U.create(Z0.x);if(P0===Vq)return;let x0=U.create(O0*U.create(q0+P0*d));if(x0===Vq)return;let K$=(Z0.x===P0?0:2)|Number(Z0.y&WJ),Jq=x0;if(L&&A(x0))Jq=U.neg(x0),K$^=1;return new p(P0,Jq,w?void 0:K$)}return{seed:a,k2sig:X0}}function P(S,E,g={}){let{seed:L,k2sig:b}=v(S,E,g);return tV(G.outputLen,U.BYTES,X)(L,b).toBytes(g.format)}function C(S,E,g,L={}){let{lowS:b,prehash:O,format:x}=HU(L,j);if(g=A0(g,void 0,"publicKey"),E=l(E,O),!x8(S)){let d=S instanceof p?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=p.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,X0=m(E),G0=U.inv(q0),t=U.create(X0*G0),O0=U.create(a*G0),Z0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(Z0.is0())return!1;return U.create(Z0.x)===a}catch(d){return!1}}function Z(S,E,g={}){let{prehash:L}=HU(g,j);return E=l(E,L),p.fromBytes(S,"recovered").recoverPublicKey(E).toBytes()}return Object.freeze({keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N,Point:$,sign:P,verify:C,recoverPublicKey:Z,Signature:p,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var _O=Az(gO),p8=Tz(_O,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VJ=BigInt(0),B$=BigInt(1),NU=BigInt(2),vO=BigInt(8);function bO($,q,J,G){let Q=$.sqr(J),X=$.sqr(G),Y=$.add($.mul(q.a,Q),X),U=$.add($.ONE,$.mul(q.d,$.mul(Q,X)));return $.eql(Y,U)}function Cz($,q={}){let J=q,G=h9("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:X}=G,Y=G.CURVE,{h:U}=Y;f$(J,{},{uvRatio:"function"});let W=NU<<BigInt(X.BYTES*8)-B$,V=(j)=>Q.create(j),z=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(A){return{isValid:!1,value:VJ}}}:J.uvRatio;if(!bO(Q,Y,Y.Gx,Y.Gy))throw Error("bad curve params: generator point");function M(j,w,A=!1){let T=A?B$:VJ;return bq("coordinate "+j,w,T,W),w}function D(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(Y.Gx,Y.Gy,B$,V(Y.Gx*Y.Gy));static ZERO=new K(VJ,B$,B$,VJ);static Fp=Q;static Fn=X;X;Y;Z;T;constructor(j,w,A,T){this.X=M("x",j),this.Y=M("y",w),this.Z=M("z",A,!0),this.T=M("t",T),Object.freeze(this)}static CURVE(){return Y}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:A}=j||{};return M("x",w),M("y",A),new K(w,A,B$,V(w*A))}static fromBytes(j,w=!1){let A=Q.BYTES,{a:T,d:_}=Y;j=UJ(A0(j,A,"point")),vq(w,"zip215");let f=UJ(j),p=j[A-1];f[A-1]=p&-129;let F=i$(f),m=w?W:Q.ORDER;bq("point.y",F,VJ,m);let k=V(F*F),y=V(k-B$),l=V(_*k-T),{isValid:v,value:P}=z(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(P&B$)===B$,Z=(p&128)!==0;if(!w&&P===VJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==C)P=V(-P);return K.fromAffine({x:P,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(NU);return this}assertValidity(){let j=this,{a:w,d:A}=Y;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:p}=j,F=V(T*T),m=V(_*_),k=V(f*f),y=V(k*k),l=V(F*w),v=V(k*V(l+m)),P=V(y+V(A*V(F*m)));if(v!==P)throw Error("bad point: equation left != right (1)");let C=V(T*_),Z=V(f*p);if(C!==Z)throw Error("bad point: equation left != right (2)")}equals(j){D(j);let{X:w,Y:A,Z:T}=this,{X:_,Y:f,Z:p}=j,F=V(w*p),m=V(_*T),k=V(A*p),y=V(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:j}=Y,{X:w,Y:A,Z:T}=this,_=V(w*w),f=V(A*A),p=V(NU*V(T*T)),F=V(j*_),m=w+A,k=V(V(m*m)-_-f),y=F+f,l=y-p,v=F-f,P=V(k*l),C=V(y*v),Z=V(k*v),S=V(l*y);return new K(P,C,S,Z)}add(j){D(j);let{a:w,d:A}=Y,{X:T,Y:_,Z:f,T:p}=this,{X:F,Y:m,Z:k,T:y}=j,l=V(T*F),v=V(_*m),P=V(p*A*y),C=V(f*k),Z=V((T+_)*(F+m)-l-v),S=C-P,E=C+P,g=V(v-w*l),L=V(Z*S),b=V(E*g),O=V(Z*g),x=V(S*E);return new K(L,b,x,O)}subtract(j){return D(j),this.add(j.negate())}multiply(j){if(!X.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:A}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,A])[0]}multiplyUnsafe(j){if(!X.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===VJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,Y.n).is0()}toAffine(j){let w=this,A=j,{X:T,Y:_,Z:f}=w,p=w.is0();if(A==null)A=p?vO:Q.inv(f);let F=V(T*A),m=V(_*A),k=Q.mul(f,A);if(p)return{x:VJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),A=Q.toBytes(w);return A[A.length-1]|=j&B$?128:0,A}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new MQ(K,X.BITS);if(X.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class jU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){YU()}static fromHex($){YU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RQ=BigInt(0),l8=BigInt(1),p9=BigInt(2);function yO($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Pz($){let q=yO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y===void 0?m8:Y,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?p9**BigInt(254):p9**BigInt(447),N=U?BigInt(8)*p9**BigInt(251)-l8:BigInt(4)*p9**BigInt(445)-l8,j=K+N+l8,w=(Z)=>T0(Z,J),A=T(M);function T(Z){return UQ(w(Z),z)}function _(Z){let S=UJ(A0(Z,z,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(Z){return i$(Q(UJ(A0(Z,z,"scalar"))))}function p(Z,S){let E=l(_(S),f(Z));if(E===RQ)throw Error("invalid private or public key received");return T(E)}function F(Z){return p(Z,A)}let m=F,k=p;function y(Z,S,E){let g=w(Z*(S-E));return S=w(S-g),E=w(E+g),{x_2:S,x_3:E}}function l(Z,S){bq("u",Z,RQ,J),bq("scalar",S,K,j);let E=S,g=Z,L=l8,b=RQ,O=Z,x=l8,d=RQ;for(let a=BigInt(V-1);a>=RQ;a--){let q0=E>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,P0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(P0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},P=(Z)=>{return Z=Z===void 0?W(z):Z,A0(Z,v.seed,"seed"),Z},C={randomSecretKey:P};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:KQ(P,m),getSharedSecret:k,getPublicKey:m,scalarMult:p,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var kO=BigInt(0),kq=BigInt(1),Iz=BigInt(2),fO=BigInt(3),xO=BigInt(5),mO=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),BU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:mO,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Fz($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=oJ,U=$*$%X*$%X,W=x$(U,Iz,X)*U%X,V=x$(W,kq,X)*$%X,z=x$(V,xO,X)*V%X,M=x$(z,q,X)*z%X,D=x$(M,J,X)*M%X,K=x$(D,G,X)*D%X,N=x$(K,Q,X)*K%X,j=x$(N,Q,X)*K%X,w=x$(j,q,X)*z%X;return{pow_p_5_8:x$(w,Iz,X)*$%X,b2:U}}function hO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var wU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function SU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),X=Fz($*Q).pow_p_5_8,Y=T0($*G*X,J),U=T0(q*Y*Y,J),W=Y,V=T0(Y*wU,J),z=U===$,M=U===T0(-$,J),D=U===T0(-$*wU,J);if(z)Y=W;if(M||D)Y=V;if(yq(Y,J))Y=T0(-Y,J);return{isValid:z||M,value:Y}}var nJ=Cz(BU,{uvRatio:SU}),zJ=(()=>nJ.Fp)(),gz=(()=>nJ.Fn)();var l9=(()=>{let $=oJ;return Pz({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=Fz(q);return T0(x$(J,fO,$)*G,$)},adjustScalarBytes:hO})})();var ZU=wU,uO=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),pO=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),lO=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),rO=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Ez=($)=>SU(kq,$),dO=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),AU=($)=>zJ.create(i$($)&dO);function Lz($){let{d:q}=BU,J=oJ,G=(A)=>zJ.create(A),Q=G(ZU*$*$),X=G((Q+kq)*lO),Y=BigInt(-1),U=G((Y-q*Q)*G(Q+q)),{isValid:W,value:V}=SU(X,U),z=G(V*$);if(!yq(z,J))z=G(-z);if(!W)V=z;if(!W)Y=Q;let M=G(Y*(Q-kq)*rO-U),D=V*V,K=G((V+V)*U),N=G(M*uO),j=G(kq-D),w=G(kq+D);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends jU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>zJ)();static Fn=(()=>gz)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=BU,G=oJ,Q=(_)=>zJ.create(_),X=AU($);if(!sV(zJ.toBytes(X),$)||yq(X,G))throw Error("invalid ristretto255 encoding 1");let Y=Q(X*X),U=Q(kq+q*Y),W=Q(kq-q*Y),V=Q(U*U),z=Q(W*W),M=Q(q*J*V-z),{isValid:D,value:K}=Ez(Q(M*z)),N=Q(K*W),j=Q(K*N*M),w=Q((X+X)*N);if(yq(w,G))w=Q(-w);let A=Q(U*j),T=Q(w*A);if(!D||yq(T,G)||A===kO)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,A,kq,T))}static fromHex($){return O$.fromBytes(vG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,X=(j)=>zJ.create(j),Y=X(X(J+q)*X(J-q)),U=X($*q),W=X(U*U),{value:V}=Ez(X(Y*W)),z=X(V*Y),M=X(V*U),D=X(z*M*G),K;if(yq(G*D,Q)){let j=X(q*ZU),w=X($*ZU);$=j,q=w,K=X(z*pO)}else K=M;if(yq($*D,Q))q=X(-q);let N=X((J-q)*K);if(yq(N,Q))N=X(-N);return zJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,X=(W)=>zJ.create(W),Y=X(q*Q)===X(J*G),U=X(J*Q)===X(q*G);return Y||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var iO=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=RU($,J,64,W9);return iO.deriveToCurve(G)},hashToScalar($,q={DST:Nz}){let J=RU($,q.DST,64,W9);return gz.create(i$(J))},deriveToCurve($){u0($,64);let q=AU($.subarray(0,32)),J=Lz(q),G=AU($.subarray(32,64)),Q=Lz(G);return new O$(J.add(Q))}});var _z=!1,cO=!1;async function vz($,q){if(cO)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function CU($,q){return await vz(async()=>{let J=TU($)?$:await oO($),G=await crypto.subtle.importKey("raw",aO(q),{name:"X25519"},_z,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(TU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMult($,q)})}async function PU($){return await vz(async()=>{return CU($,l9.GuBytes)},()=>{if(TU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMultBase($)})}var nO=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function oO($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...nO,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},_z,["deriveBits"])}function TU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function aO($){return $}class bz{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),tO(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function tO($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,X)=>Q+X.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function r9($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function yz($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function kz($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class fq{args;body;constructor($,q){this.args=$,this.body=q}}function IU($){let q=[];q.push(`age-encryption.org/v1
 `);for(let J of $){q.push("-> "+J.args.join(" ")+`
 `);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(p$.encode(J.body.subarray(G,Q))+`
 `)}if(J.body.length%48===0)q.push(`