npm - @rizom/ops - Versions diffs - 0.2.0-alpha.140 → 0.2.0-alpha.141 - Mend

@rizom/ops 0.2.0-alpha.140 → 0.2.0-alpha.141

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-var $R=Object.defineProperty;var JR=($)=>$;function GR($,J){this[$]=JR.bind(null,J)}var gX=($,J)=>{for(var G in J)$R($,G,{get:J[G],enumerable:!0,configurable:!0,set:GR.bind(J,G)})};import{parseArgs as qR}from"util";var QR={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function VQ($,J){let G=$[J];return typeof G==="boolean"?G:void 0}function OQ($,J){let G=$[J];return typeof G==="string"?G:void 0}function kX($){let{values:J,positionals:G}=qR({args:$,options:QR,allowPositionals:!0});if(J.help)return{command:"help",args:[],flags:{help:!0}};if(J.version)return{command:"version",args:[],flags:{version:!0}};return{command:G[0]??"help",args:G.slice(1),flags:{help:VQ(J,"help"),version:VQ(J,"version"),dryRun:VQ(J,"dry-run"),pushTo:OQ(J,"push-to"),cohort:OQ(J,"cohort"),anchorId:OQ(J,"anchor-id")}}}var eG={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.140",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts,.tsx --max-warnings 0","lint:fix":"eslint . --ext .ts,.tsx --max-warnings 0 --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as u5,mkdirSync as h5,readFileSync as JX,writeFileSync as GX}from"fs";import{dirname as l5,join as mW}from"path";function wQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function z$($,J=""){if(typeof $!=="number"){let G=J&&`"${J}" `;throw TypeError(`${G}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let G=J&&`"${J}" `;throw RangeError(`${G}expected integer >= 0, got ${$}`)}}function A$($,J,G=""){let q=wQ($),Q=$?.length,Y=J!==void 0;if(!q||Y&&Q!==J){let X=G&&`"${G}" `,U=Y?` of length ${J}`:"",W=q?`length=${Q}`:`type=${typeof $}`,M=X+"expected Uint8Array"+U+", got "+W;if(!q)throw TypeError(M);throw RangeError(M)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(z$($.outputLen),z$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function Y8($,J=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(J&&$.finished)throw Error("Hash#digest() has already been called")}function $q($,J){A$($,void 0,"digestInto() output");let G=J.outputLen;if($.length<G)throw RangeError('"digestInto() output" expected to be of length >='+G)}function Jq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function y$(...$){for(let J=0;J<$.length;J++)$[J].fill(0)}function X8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function W0($,J){return $<<32-J|$>>>J}function q$($,J){return $<<J|$>>>32-J>>>0}var XR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function UR($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function WR($){for(let J=0;J<$.length;J++)$[J]=UR($[J]);return $}var NQ=XR?($)=>$:WR,_X=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),MR=Array.from({length:256},($,J)=>J.toString(16).padStart(2,"0"));function Gq($){if(A$($),_X)return $.toHex();let J="";for(let G=0;G<$.length;G++)J+=MR[$[G]];return J}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function FX($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function t8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(_X)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let J=$.length,G=J/2;if(J%2)throw RangeError("hex string expected, got unpadded hex of length "+J);let q=new Uint8Array(G);for(let Q=0,Y=0;Q<G;Q++,Y+=2){let X=FX($.charCodeAt(Y)),U=FX($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+Y)}q[Q]=X*16+U}return q}function zR($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function jQ($,J=""){if(typeof $==="string")return zR($);return A$($,void 0,J)}function DQ(...$){let J=0;for(let q=0;q<$.length;q++){let Q=$[q];A$(Q),J+=Q.length}let G=new Uint8Array(J);for(let q=0,Q=0;q<$.length;q++){let Y=$[q];G.set(Y,Q),Q+=Y.length}return G}function qq($,J){if(J!==void 0&&{}.toString.call(J)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,J)}function HQ($,J={}){let G=(Q,Y)=>$(Y).update(Q).digest(),q=$(void 0);return G.outputLen=q.outputLen,G.blockLen=q.blockLen,G.canXOF=q.canXOF,G.create=(Q)=>$(Q),Object.assign(G,J),Object.freeze(G)}function _0($=32){z$($,"bytesLength");let J=typeof globalThis==="object"?globalThis.crypto:null;if(typeof J?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return J.getRandomValues(new Uint8Array($))}var KQ=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class AQ{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,J){if(F0($),A$(J,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let G=this.blockLen,q=new Uint8Array(G);q.set(J.length>G?$.create().update(J).digest():J);for(let Q=0;Q<q.length;Q++)q[Q]^=54;this.iHash.update(q),this.oHash=$.create();for(let Q=0;Q<q.length;Q++)q[Q]^=106;this.oHash.update(q),y$(q)}update($){return Y8(this),this.iHash.update($),this}digestInto($){Y8(this),$q($,this),this.finished=!0;let J=$.subarray(0,this.outputLen);this.iHash.digestInto(J),this.oHash.update(J),this.oHash.digestInto(J),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:J,iHash:G,finished:q,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=q,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=J._cloneInto($.oHash),$.iHash=G._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var K0=(()=>{let $=(J,G,q)=>new AQ(J,G).update(q).digest();return $.create=(J,G)=>new AQ(J,G),$})();function e8($,J,G){if(F0($),G===void 0)G=new Uint8Array($.outputLen);return K0($,G,J)}var IQ=Uint8Array.of(0),bX=Uint8Array.of();function fQ($,J,G,q=32){F0($),z$(q,"length"),A$(J,void 0,"prk");let Q=$.outputLen;if(J.length<Q)throw Error('"prk" must be at least HashLen octets');if(q>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(q/Q);if(G===void 0)G=bX;else A$(G,void 0,"info");let X=new Uint8Array(Y*Q),U=K0.create($,J),W=U._cloneInto(),M=new Uint8Array(U.outputLen);for(let z=0;z<Y;z++)IQ[0]=z+1,W.update(z===0?bX:M).update(G).update(IQ).digestInto(M),X.set(M,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),y$(M,IQ),X.slice(0,q)}var JJ=($,J,G,q,Q)=>fQ($,e8($,J,G),q,Q);function mX($,J,G){return $&J^~$&G}function xX($,J,G){return $&J^$&G^J&G}class Qq{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,J,G,q){this.blockLen=$,this.outputLen=J,this.padOffset=G,this.isLE=q,this.buffer=new Uint8Array($),this.view=X8(this.buffer)}update($){Y8(this),A$($);let{view:J,buffer:G,blockLen:q}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(q-this.pos,Q-Y);if(X===q){let U=X8($);for(;q<=Q-Y;Y+=q)this.process(U,Y);continue}if(G.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===q)this.process(J,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Y8(this),$q($,this),this.finished=!0;let{buffer:J,view:G,blockLen:q,isLE:Q}=this,{pos:Y}=this;if(J[Y++]=128,y$(this.buffer.subarray(Y)),this.padOffset>q-Y)this.process(G,0),Y=0;for(let z=Y;z<q;z++)J[z]=0;G.setBigUint64(q-8,BigInt(this.length*8),Q),this.process(G,0);let X=X8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,M=this.get();if(W>M.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)X.setUint32(4*z,M[z],Q)}digest(){let{buffer:$,outputLen:J}=this;this.digestInto($);let G=$.slice(0,J);return this.destroy(),G}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:J,buffer:G,length:q,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=q,$.pos=X,q%J)$.buffer.set(G);return $}clone(){return this._cloneInto()}}var b0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),I$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),f$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Yq=BigInt(4294967295),yX=BigInt(32);function RR($,J=!1){if(J)return{h:Number($&Yq),l:Number($>>yX&Yq)};return{h:Number($>>yX&Yq)|0,l:Number($&Yq)|0}}function uX($,J=!1){let G=$.length,q=new Uint32Array(G),Q=new Uint32Array(G);for(let Y=0;Y<G;Y++){let{h:X,l:U}=RR($[Y],J);[q[Y],Q[Y]]=[X,U]}return[q,Q]}var BQ=($,J,G)=>$>>>G,EQ=($,J,G)=>$<<32-G|J>>>G,ZJ=($,J,G)=>$>>>G|J<<32-G,vJ=($,J,G)=>$<<32-G|J>>>G,$G=($,J,G)=>$<<64-G|J>>>G-32,JG=($,J,G)=>$>>>G-32|J<<64-G;function A0($,J,G,q){let Q=(J>>>0)+(q>>>0);return{h:$+G+(Q/4294967296|0)|0,l:Q|0}}var hX=($,J,G)=>($>>>0)+(J>>>0)+(G>>>0),lX=($,J,G,q)=>J+G+q+($/4294967296|0)|0,cX=($,J,G,q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0),dX=($,J,G,q,Q)=>J+G+q+Q+($/4294967296|0)|0,rX=($,J,G,q,Q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0)+(Q>>>0),pX=($,J,G,q,Q,Y)=>J+G+q+Q+Y+($/4294967296|0)|0;var OR=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),GJ=new Uint32Array(64);class CQ extends Qq{constructor($){super(64,$,8,!1)}get(){let{A:$,B:J,C:G,D:q,E:Q,F:Y,G:X,H:U}=this;return[$,J,G,q,Q,Y,X,U]}set($,J,G,q,Q,Y,X,U){this.A=$|0,this.B=J|0,this.C=G|0,this.D=q|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,J){for(let z=0;z<16;z++,J+=4)GJ[z]=$.getUint32(J,!1);for(let z=16;z<64;z++){let R=GJ[z-15],O=GJ[z-2],V=W0(R,7)^W0(R,18)^R>>>3,w=W0(O,17)^W0(O,19)^O>>>10;GJ[z]=w+GJ[z-7]+V+GJ[z-16]|0}let{A:G,B:q,C:Q,D:Y,E:X,F:U,G:W,H:M}=this;for(let z=0;z<64;z++){let R=W0(X,6)^W0(X,11)^W0(X,25),O=M+R+mX(X,U,W)+OR[z]+GJ[z]|0,w=(W0(G,2)^W0(G,13)^W0(G,22))+xX(G,q,Q)|0;M=W,W=U,U=X,X=Y+O|0,Y=Q,Q=q,q=G,G=O+w|0}G=G+this.A|0,q=q+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,M=M+this.H|0,this.set(G,q,Q,Y,X,U,W,M)}roundClean(){y$(GJ)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),y$(this.buffer)}}class nX extends CQ{A=b0[0]|0;B=b0[1]|0;C=b0[2]|0;D=b0[3]|0;E=b0[4]|0;F=b0[5]|0;G=b0[6]|0;H=b0[7]|0;constructor(){super(32)}}class wR extends CQ{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var oX=(()=>uX(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),NR=(()=>oX[0])(),jR=(()=>oX[1])(),qJ=new Uint32Array(80),QJ=new Uint32Array(80);class GG extends Qq{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:J,Bh:G,Bl:q,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:M,Fh:z,Fl:R,Gh:O,Gl:V,Hh:w,Hl:j}=this;return[$,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j]}set($,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j){this.Ah=$|0,this.Al=J|0,this.Bh=G|0,this.Bl=q|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=M|0,this.Fh=z|0,this.Fl=R|0,this.Gh=O|0,this.Gl=V|0,this.Hh=w|0,this.Hl=j|0}process($,J){for(let K=0;K<16;K++,J+=4)qJ[K]=$.getUint32(J),QJ[K]=$.getUint32(J+=4);for(let K=16;K<80;K++){let P=qJ[K-15]|0,k=QJ[K-15]|0,m=ZJ(P,k,1)^ZJ(P,k,8)^BQ(P,k,7),F=vJ(P,k,1)^vJ(P,k,8)^EQ(P,k,7),_=qJ[K-2]|0,v=QJ[K-2]|0,L=ZJ(_,v,19)^$G(_,v,61)^BQ(_,v,6),y=vJ(_,v,19)^JG(_,v,61)^EQ(_,v,6),C=cX(F,y,QJ[K-7],QJ[K-16]),I=dX(C,m,L,qJ[K-7],qJ[K-16]);qJ[K]=I|0,QJ[K]=C|0}let{Ah:G,Al:q,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:M,Eh:z,El:R,Fh:O,Fl:V,Gh:w,Gl:j,Hh:N,Hl:f}=this;for(let K=0;K<80;K++){let P=ZJ(z,R,14)^ZJ(z,R,18)^$G(z,R,41),k=vJ(z,R,14)^vJ(z,R,18)^JG(z,R,41),m=z&O^~z&w,F=R&V^~R&j,_=rX(f,k,F,jR[K],QJ[K]),v=pX(_,N,P,m,NR[K],qJ[K]),L=_|0,y=ZJ(G,q,28)^$G(G,q,34)^$G(G,q,39),C=vJ(G,q,28)^JG(G,q,34)^JG(G,q,39),I=G&Q^G&X^Q&X,S=q&Y^q&U^Y&U;N=w|0,f=j|0,w=O|0,j=V|0,O=z|0,V=R|0,{h:z,l:R}=A0(W|0,M|0,v|0,L|0),W=X|0,M=U|0,X=Q|0,U=Y|0,Q=G|0,Y=q|0;let D=hX(L,C,S);G=lX(D,v,y,I),q=D|0}({h:G,l:q}=A0(this.Ah|0,this.Al|0,G|0,q|0)),{h:Q,l:Y}=A0(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=A0(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:M}=A0(this.Dh|0,this.Dl|0,W|0,M|0),{h:z,l:R}=A0(this.Eh|0,this.El|0,z|0,R|0),{h:O,l:V}=A0(this.Fh|0,this.Fl|0,O|0,V|0),{h:w,l:j}=A0(this.Gh|0,this.Gl|0,w|0,j|0),{h:N,l:f}=A0(this.Hh|0,this.Hl|0,N|0,f|0),this.set(G,q,Q,Y,X,U,W,M,z,R,O,V,w,j,N,f)}roundClean(){y$(qJ,QJ)}destroy(){this.destroyed=!0,y$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class iX extends GG{Ah=f$[0]|0;Al=f$[1]|0;Bh=f$[2]|0;Bl=f$[3]|0;Ch=f$[4]|0;Cl=f$[5]|0;Dh=f$[6]|0;Dl=f$[7]|0;Eh=f$[8]|0;El=f$[9]|0;Fh=f$[10]|0;Fl=f$[11]|0;Gh=f$[12]|0;Gl=f$[13]|0;Hh=f$[14]|0;Hl=f$[15]|0;constructor(){super(64)}}class DR extends GG{Ah=I$[0]|0;Al=I$[1]|0;Bh=I$[2]|0;Bl=I$[3]|0;Ch=I$[4]|0;Cl=I$[5]|0;Dh=I$[6]|0;Dl=I$[7]|0;Eh=I$[8]|0;El=I$[9]|0;Fh=I$[10]|0;Fl=I$[11]|0;Gh=I$[12]|0;Gl=I$[13]|0;Hh=I$[14]|0;Hl=I$[15]|0;constructor(){super(48)}}var v$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),L$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class HR extends GG{Ah=v$[0]|0;Al=v$[1]|0;Bh=v$[2]|0;Bl=v$[3]|0;Ch=v$[4]|0;Cl=v$[5]|0;Dh=v$[6]|0;Dl=v$[7]|0;Eh=v$[8]|0;El=v$[9]|0;Fh=v$[10]|0;Fl=v$[11]|0;Gh=v$[12]|0;Gl=v$[13]|0;Hh=v$[14]|0;Hl=v$[15]|0;constructor(){super(28)}}class KR extends GG{Ah=L$[0]|0;Al=L$[1]|0;Bh=L$[2]|0;Bl=L$[3]|0;Ch=L$[4]|0;Cl=L$[5]|0;Dh=L$[6]|0;Dl=L$[7]|0;Eh=L$[8]|0;El=L$[9]|0;Fh=L$[10]|0;Fl=L$[11]|0;Gh=L$[12]|0;Gl=L$[13]|0;Hh=L$[14]|0;Hl=L$[15]|0;constructor(){super(32)}}var R$=HQ(()=>new nX,KQ(1));var Xq=HQ(()=>new iX,KQ(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Rq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function ZQ($){if(!Rq($))throw Error("Uint8Array expected")}function $9($,J){if(!Array.isArray(J))return!1;if(J.length===0)return!0;if($)return J.every((G)=>typeof G==="string");else return J.every((G)=>Number.isSafeInteger(G))}function J9($){if(typeof $!=="function")throw Error("function expected");return!0}function YJ($,J){if(typeof J!=="string")throw Error(`${$}: string expected`);return!0}function QG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function Wq($){if(!Array.isArray($))throw Error("array expected")}function Mq($,J){if(!$9(!0,J))throw Error(`${$}: array of strings expected`)}function vQ($,J){if(!$9(!1,J))throw Error(`${$}: array of numbers expected`)}function i$(...$){let J=(Y)=>Y,G=(Y,X)=>(U)=>Y(X(U)),q=$.map((Y)=>Y.encode).reduceRight(G,J),Q=$.map((Y)=>Y.decode).reduce(G,J);return{encode:q,decode:Q}}function a$($){let J=typeof $==="string"?$.split(""):$,G=J.length;Mq("alphabet",J);let q=new Map(J.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return Wq(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=G)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return J[Y]})},decode:(Q)=>{return Wq(Q),Q.map((Y)=>{YJ("alphabet.decode",Y);let X=q.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function s$($=""){return YJ("join",$),{encode:(J)=>{return Mq("join.decode",J),J.join($)},decode:(J)=>{return YJ("join.decode",J),J.split($)}}}function Vq($,J="="){return QG($),YJ("padding",J),{encode(G){Mq("padding.encode",G);while(G.length*$%8)G.push(J);return G},decode(G){Mq("padding.decode",G);let q=G.length;if(q*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;q>0&&G[q-1]===J;q--)if((q-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return G.slice(0,q)}}}function G9($){return J9($),{encode:(J)=>J,decode:(J)=>$(J)}}function aX($,J,G){if(J<2)throw Error(`convertRadix: invalid from=${J}, base cannot be less than 2`);if(G<2)throw Error(`convertRadix: invalid to=${G}, base cannot be less than 2`);if(Wq($),!$.length)return[];let q=0,Q=[],Y=Array.from($,(U)=>{if(QG(U),U<0||U>=J)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,W=!0;for(let M=q;M<X;M++){let z=Y[M],R=J*U,O=R+z;if(!Number.isSafeInteger(O)||R/J!==U||O-z!==R)throw Error("convertRadix: carry overflow");let V=O/G;U=O%G;let w=Math.floor(V);if(Y[M]=w,!Number.isSafeInteger(w)||w*G+U!==O)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!w)q=M;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var q9=($,J)=>J===0?$:q9(J,$%J),zq=($,J)=>$+(J-q9($,J)),Uq=(()=>{let $=[];for(let J=0;J<40;J++)$.push(2**J);return $})();function SQ($,J,G,q){if(Wq($),J<=0||J>32)throw Error(`convertRadix2: wrong from=${J}`);if(G<=0||G>32)throw Error(`convertRadix2: wrong to=${G}`);if(zq(J,G)>32)throw Error(`convertRadix2: carry overflow from=${J} to=${G} carryBits=${zq(J,G)}`);let Q=0,Y=0,X=Uq[J],U=Uq[G]-1,W=[];for(let M of $){if(QG(M),M>=X)throw Error(`convertRadix2: invalid data word=${M} from=${J}`);if(Q=Q<<J|M,Y+J>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${J}`);Y+=J;for(;Y>=G;Y-=G)W.push((Q>>Y-G&U)>>>0);let z=Uq[Y];if(z===void 0)throw Error("invalid carry");Q&=z-1}if(Q=Q<<G-Y&U,!q&&Y>=J)throw Error("Excess padding");if(!q&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(q&&Y>0)W.push(Q>>>0);return W}function AR($){QG($);let J=256;return{encode:(G)=>{if(!Rq(G))throw Error("radix.encode input should be Uint8Array");return aX(Array.from(G),J,$)},decode:(G)=>{return vQ("radix.decode",G),Uint8Array.from(aX(G,$,J))}}}function $0($,J=!1){if(QG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(zq(8,$)>32||zq($,8)>32)throw Error("radix2: carry overflow");return{encode:(G)=>{if(!Rq(G))throw Error("radix2.encode input should be Uint8Array");return SQ(Array.from(G),8,$,!J)},decode:(G)=>{return vQ("radix2.decode",G),Uint8Array.from(SQ(G,$,8,J))}}}function sX($){return J9($),function(...J){try{return $.apply(null,J)}catch(G){}}}var KH=i$($0(4),a$("0123456789ABCDEF"),s$("")),AH=i$($0(5),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Vq(5),s$("")),IH=i$($0(5),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),s$("")),fH=i$($0(5),a$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Vq(5),s$("")),BH=i$($0(5),a$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),s$("")),EH=i$($0(5),a$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),s$(""),G9(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),Q9=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Y9=($,J)=>{YJ("base64",$);let G=J?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,q=J?"base64url":"base64";if($.length>0&&!G.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:q,lastChunkHandling:"strict"})},LQ=Q9?{encode($){return ZQ($),$.toBase64()},decode($){return Y9($,!1)}}:i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Vq(6),s$("")),P$=i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),s$("")),CH=Q9?{encode($){return ZQ($),$.toBase64({alphabet:"base64url"})},decode($){return Y9($,!0)}}:i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Vq(6),s$("")),SH=i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),s$("")),PQ=($)=>i$(AR(58),a$($),s$("")),TH=PQ("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),ZH=PQ("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),vH=PQ("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var TQ=i$(a$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),s$("")),tX=[996825010,642813549,513874426,1027748829,705979059];function qG($){let J=$>>25,G=($&33554431)<<5;for(let q=0;q<tX.length;q++)if((J>>q&1)===1)G^=tX[q];return G}function eX($,J,G=1){let q=$.length,Q=1;for(let Y=0;Y<q;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=qG(Q)^X>>5}Q=qG(Q);for(let Y=0;Y<q;Y++)Q=qG(Q)^$.charCodeAt(Y)&31;for(let Y of J)Q=qG(Q)^Y;for(let Y=0;Y<6;Y++)Q=qG(Q);return Q^=G,TQ.encode(SQ([Q%Uq[30]],30,5,!1))}function X9($){let J=$==="bech32"?1:734539939,G=$0(5),q=G.decode,Q=G.encode,Y=sX(q);function X(R,O,V=90){if(YJ("bech32.encode prefix",R),Rq(O))O=Array.from(O);vQ("bech32.encode",O);let w=R.length;if(w===0)throw TypeError(`Invalid prefix length ${w}`);let j=w+7+O.length;if(V!==!1&&j>V)throw TypeError(`Length ${j} exceeds limit ${V}`);let N=R.toLowerCase(),f=eX(N,O,J);return`${N}1${TQ.encode(O)}${f}`}function U(R,O=90){YJ("bech32.decode input",R);let V=R.length;if(V<8||O!==!1&&V>O)throw TypeError(`invalid string length: ${V} (${R}). Expected (8..${O})`);let w=R.toLowerCase();if(R!==w&&R!==R.toUpperCase())throw Error("String must be lowercase or uppercase");let j=w.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let N=w.slice(0,j),f=w.slice(j+1);if(f.length<6)throw Error("Data must be at least 6 characters long");let K=TQ.decode(f).slice(0,-6),P=eX(N,K,J);if(!f.endsWith(P))throw Error(`Invalid checksum in ${R}: expected "${P}"`);return{prefix:N,words:K}}let W=sX(U);function M(R){let{prefix:O,words:V}=U(R,!1);return{prefix:O,words:V,bytes:q(V)}}function z(R,O){return X(R,Q(O))}return{encode:X,decode:U,encodeFromBytes:z,decodeToBytes:M,decodeUnsafe:W,fromWords:q,fromWordsUnsafe:Y,toWords:Q}}var t$=X9("bech32"),LH=X9("bech32m");var IR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),fR={encode($){return ZQ($),$.toHex()},decode($){return YJ("hex",$),Uint8Array.fromHex($)}},PH=IR?fR:i$($0(4),a$("0123456789abcdef"),s$(""),G9(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function ER($,J,G,q){F0($);let Q=qq({dkLen:32,asyncTick:10},q),{c:Y,dkLen:X,asyncTick:U}=Q;if(z$(Y,"c"),z$(X,"dkLen"),z$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let W=jQ(J,"password"),M=jQ(G,"salt"),z=new Uint8Array(X),R=K0.create($,W),O=R._cloneInto().update(M);return{c:Y,dkLen:X,asyncTick:U,DK:z,PRF:R,PRFSalt:O}}function CR($,J,G,q,Q){if($.destroy(),J.destroy(),q)q.destroy();return y$(Q),G}function gQ($,J,G,q){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:W}=ER($,J,G,q),M,z=new Uint8Array(4),R=X8(z),O=new Uint8Array(U.outputLen);for(let V=1,w=0;w<Y;V++,w+=U.outputLen){let j=X.subarray(w,w+U.outputLen);R.setInt32(0,V,!1),(M=W._cloneInto(M)).update(z).digestInto(O),j.set(O.subarray(0,j.length));for(let N=1;N<Q;N++){U._cloneInto(M).update(O).digestInto(O);for(let f=0;f<j.length;f++)j[f]^=O[f]}}return CR(U,W,X,M,O)}function U9($,J,G,q,Q,Y){let X=$[J++]^G[q++],U=$[J++]^G[q++],W=$[J++]^G[q++],M=$[J++]^G[q++],z=$[J++]^G[q++],R=$[J++]^G[q++],O=$[J++]^G[q++],V=$[J++]^G[q++],w=$[J++]^G[q++],j=$[J++]^G[q++],N=$[J++]^G[q++],f=$[J++]^G[q++],K=$[J++]^G[q++],P=$[J++]^G[q++],k=$[J++]^G[q++],m=$[J++]^G[q++],F=X,_=U,v=W,L=M,y=z,C=R,I=O,S=V,D=w,H=j,B=N,E=f,A=K,T=P,Z=k,g=m;for(let x=0;x<8;x+=2)y^=q$(F+A|0,7),D^=q$(y+F|0,9),A^=q$(D+y|0,13),F^=q$(A+D|0,18),H^=q$(C+_|0,7),T^=q$(H+C|0,9),_^=q$(T+H|0,13),C^=q$(_+T|0,18),Z^=q$(B+I|0,7),v^=q$(Z+B|0,9),I^=q$(v+Z|0,13),B^=q$(I+v|0,18),L^=q$(g+E|0,7),S^=q$(L+g|0,9),E^=q$(S+L|0,13),g^=q$(E+S|0,18),_^=q$(F+L|0,7),v^=q$(_+F|0,9),L^=q$(v+_|0,13),F^=q$(L+v|0,18),I^=q$(C+y|0,7),S^=q$(I+C|0,9),y^=q$(S+I|0,13),C^=q$(y+S|0,18),E^=q$(B+H|0,7),D^=q$(E+B|0,9),H^=q$(D+E|0,13),B^=q$(H+D|0,18),A^=q$(g+Z|0,7),T^=q$(A+g|0,9),Z^=q$(T+A|0,13),g^=q$(Z+T|0,18);Q[Y++]=X+F|0,Q[Y++]=U+_|0,Q[Y++]=W+v|0,Q[Y++]=M+L|0,Q[Y++]=z+y|0,Q[Y++]=R+C|0,Q[Y++]=O+I|0,Q[Y++]=V+S|0,Q[Y++]=w+D|0,Q[Y++]=j+H|0,Q[Y++]=N+B|0,Q[Y++]=f+E|0,Q[Y++]=K+A|0,Q[Y++]=P+T|0,Q[Y++]=k+Z|0,Q[Y++]=m+g|0}function kQ($,J,G,q,Q){let Y=q+0,X=q+16*Q;for(let U=0;U<16;U++)G[X+U]=$[J+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,J+=16){if(U9(G,X,$,J,G,Y),U>0)X+=16;U9(G,Y,$,J+=16,G,X)}}function SR($,J,G){let q=qq({dkLen:32,asyncTick:10,maxmem:1073742848},G),{N:Q,r:Y,p:X,dkLen:U,asyncTick:W,maxmem:M,onProgress:z}=q;if(z$(Q,"N"),z$(Y,"r"),z$(X,"p"),z$(U,"dkLen"),z$(W,"asyncTick"),z$(M,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let R=128*Y,O=R/4,V=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>V)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(V-1)*32/R)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(V-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let w=R*(Q+X+1);if(w>M)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+w+", maxmem="+M);let j=gQ(R$,$,J,{c:1,dkLen:R*X}),N=Jq(j),f=Jq(new Uint8Array(R*Q)),K=Jq(new Uint8Array(R)),P=()=>{};if(z){let k=2*Q*X,m=Math.max(Math.floor(k/1e4),1),F=0;P=()=>{if(F++,z&&(!(F%m)||F===k))z(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:O,V:f,B32:N,B:j,tmp:K,blockMixCb:P,asyncTick:W}}function TR($,J,G,q,Q){let Y=gQ(R$,$,G,{c:1,dkLen:J});return y$(G,q,Q),Y}function FQ($,J,G){let{N:q,r:Q,p:Y,dkLen:X,blockSize32:U,V:W,B32:M,B:z,tmp:R,blockMixCb:O}=SR($,J,G);NQ(M);for(let V=0;V<Y;V++){let w=U*V;for(let j=0;j<U;j++)W[j]=M[w+j];for(let j=0,N=0;j<q-1;j++)kQ(W,N,W,N+=U,Q),O();kQ(W,(q-1)*U,M,w,Q),O();for(let j=0;j<q;j++){let N=(M[w+U-16]&q-1)>>>0;for(let f=0;f<U;f++)R[f]=M[w+f]^W[N*U+f];kQ(R,0,M,w,Q),O()}}return NQ(M),TR($,X,z,W,R)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function ZR($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Oq($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function U8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function w$($,J,G=""){let q=ZR($),Q=$?.length,Y=J!==void 0;if(!q||Y&&Q!==J){let X=G&&`"${G}" `,U=Y?` of length ${J}`:"",W=q?`length=${Q}`:`type=${typeof $}`,M=X+"expected Uint8Array"+U+", got "+W;if(!q)throw TypeError(M);throw RangeError(M)}return $}function _Q($,J=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(J&&$.finished)throw Error("Hash#digest() has already been called")}function W9($,J,G=!1){w$($,void 0,"output");let q=J.outputLen;if($.length<q)throw RangeError("digestInto() expects output buffer of length at least "+q);if(G&&!W8($))throw Error("invalid output, must be aligned")}function I0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function M0(...$){for(let J=0;J<$.length;J++)$[J].fill(0)}function vR($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var LJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),LR=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var PR=($)=>{for(let J=0;J<$.length;J++)$[J]=LR($[J]);return $},x0=LJ?($)=>$:PR;function M9($,J){if(J==null||typeof J!=="object")throw Error("options must be defined");return Object.assign($,J)}function z9($,J){if($.length!==J.length)return!1;let G=0;for(let q=0;q<$.length;q++)G|=$[q]^J[q];return G===0}function R9($,J,G){let q=J,Q=G||(()=>[]),Y=(U,W)=>q(W,...Q(U)).update(U).digest(),X=q(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...W)=>q(U,...W),Y}var V9=($,J)=>{function G(q,...Q){if(w$(q,void 0,"key"),$.nonceLength!==void 0){let z=Q[0];w$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)w$(Q[1],void 0,"AAD");let X=J(q,...Q),U=(z,R)=>{if(R!==void 0){if(z!==2)throw Error("cipher output not supported");w$(R,void 0,"output")}},W=!1;return{encrypt(z,R){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,w$(z),U(X.encrypt.length,R),X.encrypt(z,R)},decrypt(z,R){if(w$(z),Y&&z.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,R),X.decrypt(z,R)}}}return Object.assign(G,$),G};function YG($,J,G=!0){if(J===void 0)return new Uint8Array($);if(w$(J,void 0,"output"),J.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+J.length);if(G&&!W8(J))throw Error("invalid output, must be aligned");return J}function O9($,J,G){U8($),U8(J),Oq(G);let q=new Uint8Array(16),Q=vR(q);return Q.setBigUint64(0,BigInt(J),G),Q.setBigUint64(8,BigInt($),G),q}function W8($){return $.byteOffset%4===0}function M8($){return Uint8Array.from(w$($))}var N9=($)=>Uint8Array.from($.split(""),(J)=>J.charCodeAt(0)),gR=(()=>x0(I0(N9("expand 16-byte k"))))(),kR=(()=>x0(I0(N9("expand 32-byte k"))))();function Q$($,J){return $<<J|$>>>32-J}var XG=64,FR=16,bQ=(()=>4294967295)(),w9=Uint32Array.of();function _R($,J,G,q,Q,Y,X,U){let W=Q.length,M=new Uint8Array(XG),z=I0(M),R=LJ&&W8(Q)&&W8(Y),O=R?I0(Q):w9,V=R?I0(Y):w9;if(!LJ){for(let w=0;w<W;X++){if($(J,G,q,z,X,U),x0(z),X>=bQ)throw Error("arx: counter overflow");let j=Math.min(XG,W-w);for(let N=0,f;N<j;N++)f=w+N,Y[f]=Q[f]^M[N];w+=j}return}for(let w=0;w<W;X++){if($(J,G,q,z,X,U),X>=bQ)throw Error("arx: counter overflow");let j=Math.min(XG,W-w);if(R&&j===XG){let N=w/4;if(w%4!==0)throw Error("arx: invalid block position");for(let f=0,K;f<FR;f++)K=N+f,V[K]=O[K]^z[f];w+=XG;continue}for(let N=0,f;N<j;N++)f=w+N,Y[f]=Q[f]^M[N];w+=j}}function j9($,J){let{allowShortKeys:G,extendNonceFn:q,counterLength:Q,counterRight:Y,rounds:X}=M9({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},J);if(typeof $!=="function")throw Error("core must be a function");return U8(Q),U8(X),Oq(Y),Oq(G),(U,W,M,z,R=0)=>{w$(U,void 0,"key"),w$(W,void 0,"nonce"),w$(M,void 0,"data");let O=M.length;if(z=YG(O,z,!1),U8(R),R<0||R>=bQ)throw Error("arx: counter overflow");let V=[],w=U.length,j,N;if(w===32)V.push(j=M8(U)),N=kR;else if(w===16&&G)j=new Uint8Array(32),j.set(U),j.set(U,16),N=gR,V.push(j);else throw w$(U,32,"arx key"),Error("invalid key size");if(!LJ||!W8(W))V.push(W=M8(W));let f=I0(j);if(q){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=W.subarray(0,16);if(LJ)q(N,f,I0(k),f);else{let m=x0(Uint32Array.from(N));q(m,f,I0(k),f),M0(m),x0(f)}W=W.subarray(16)}else if(!LJ)x0(f);let K=16-Q;if(K!==W.length)throw Error(`arx: nonce must be ${K} or 16 bytes`);if(K!==12){let k=new Uint8Array(12);k.set(W,Y?0:12-W.length),W=k,V.push(W)}let P=x0(I0(W));try{return _R($,N,f,P,M,z,R,X),z}finally{M0(...V)}}}function B$($,J){return $[J++]&255|($[J++]&255)<<8}class D9{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=M8(w$($,32,"key"));let J=B$($,0),G=B$($,2),q=B$($,4),Q=B$($,6),Y=B$($,8),X=B$($,10),U=B$($,12),W=B$($,14);this.r[0]=J&8191,this.r[1]=(J>>>13|G<<3)&8191,this.r[2]=(G>>>10|q<<6)&7939,this.r[3]=(q>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let M=0;M<8;M++)this.pad[M]=B$($,16+2*M)}process($,J,G=!1){let q=G?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],W=Y[2],M=Y[3],z=Y[4],R=Y[5],O=Y[6],V=Y[7],w=Y[8],j=Y[9],N=B$($,J+0),f=B$($,J+2),K=B$($,J+4),P=B$($,J+6),k=B$($,J+8),m=B$($,J+10),F=B$($,J+12),_=B$($,J+14),v=Q[0]+(N&8191),L=Q[1]+((N>>>13|f<<3)&8191),y=Q[2]+((f>>>10|K<<6)&8191),C=Q[3]+((K>>>7|P<<9)&8191),I=Q[4]+((P>>>4|k<<12)&8191),S=Q[5]+(k>>>1&8191),D=Q[6]+((k>>>14|m<<2)&8191),H=Q[7]+((m>>>11|F<<5)&8191),B=Q[8]+((F>>>8|_<<8)&8191),E=Q[9]+(_>>>5|q),A=0,T=A+v*X+L*(5*j)+y*(5*w)+C*(5*V)+I*(5*O);A=T>>>13,T&=8191,T+=S*(5*R)+D*(5*z)+H*(5*M)+B*(5*W)+E*(5*U),A+=T>>>13,T&=8191;let Z=A+v*U+L*X+y*(5*j)+C*(5*w)+I*(5*V);A=Z>>>13,Z&=8191,Z+=S*(5*O)+D*(5*R)+H*(5*z)+B*(5*M)+E*(5*W),A+=Z>>>13,Z&=8191;let g=A+v*W+L*U+y*X+C*(5*j)+I*(5*w);A=g>>>13,g&=8191,g+=S*(5*V)+D*(5*O)+H*(5*R)+B*(5*z)+E*(5*M),A+=g>>>13,g&=8191;let x=A+v*M+L*W+y*U+C*X+I*(5*j);A=x>>>13,x&=8191,x+=S*(5*w)+D*(5*V)+H*(5*O)+B*(5*R)+E*(5*z),A+=x>>>13,x&=8191;let l=A+v*z+L*M+y*W+C*U+I*X;A=l>>>13,l&=8191,l+=S*(5*j)+D*(5*w)+H*(5*V)+B*(5*O)+E*(5*R),A+=l>>>13,l&=8191;let d=A+v*R+L*z+y*M+C*W+I*U;A=d>>>13,d&=8191,d+=S*X+D*(5*j)+H*(5*w)+B*(5*V)+E*(5*O),A+=d>>>13,d&=8191;let a=A+v*O+L*R+y*z+C*M+I*W;A=a>>>13,a&=8191,a+=S*U+D*X+H*(5*j)+B*(5*w)+E*(5*V),A+=a>>>13,a&=8191;let e=A+v*V+L*O+y*R+C*z+I*M;A=e>>>13,e&=8191,e+=S*W+D*U+H*X+B*(5*j)+E*(5*w),A+=e>>>13,e&=8191;let s=A+v*w+L*V+y*O+C*R+I*z;A=s>>>13,s&=8191,s+=S*M+D*W+H*U+B*X+E*(5*j),A+=s>>>13,s&=8191;let o=A+v*j+L*w+y*V+C*O+I*R;A=o>>>13,o&=8191,o+=S*z+D*M+H*W+B*U+E*X,A+=o>>>13,o&=8191,A=(A<<2)+A|0,A=A+T|0,T=A&8191,A=A>>>13,Z+=A,Q[0]=T,Q[1]=Z,Q[2]=g,Q[3]=x,Q[4]=l,Q[5]=d,Q[6]=a,Q[7]=e,Q[8]=s,Q[9]=o}finalize(){let{h:$,pad:J}=this,G=new Uint16Array(10),q=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=q,q=$[X]>>>13,$[X]&=8191;$[0]+=q*5,q=$[0]>>>13,$[0]&=8191,$[1]+=q,q=$[1]>>>13,$[1]&=8191,$[2]+=q,G[0]=$[0]+5,q=G[0]>>>13,G[0]&=8191;for(let X=1;X<10;X++)G[X]=$[X]+q,q=G[X]>>>13,G[X]&=8191;G[9]-=8192;let Q=(q^1)-1;for(let X=0;X<10;X++)G[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|G[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+J[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+J[X]|0)+(Y>>>16)|0,$[X]=Y&65535;M0(G)}update($){_Q(this),w$($),$=M8($);let{buffer:J,blockLen:G}=this,q=$.length;for(let Q=0;Q<q;){let Y=Math.min(G-this.pos,q-Q);if(Y===G){for(;G<=q-Q;Q+=G)this.process($,Q);continue}if(J.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===G)this.process(J,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,M0(this.h,this.r,this.buffer,this.pad)}digestInto($){_Q(this),W9($,this),this.finished=!0;let{buffer:J,h:G}=this,{pos:q}=this;if(q){J[q++]=1;for(;q<16;q++)J[q]=0;this.process(J,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=G[Y]>>>0,$[Q++]=G[Y]>>>8}digest(){let{buffer:$,outputLen:J}=this;this.digestInto($);let G=$.slice(0,J);return this.destroy(),G}}var H9=R9(32,($)=>new D9($));function bR($,J,G,q,Q,Y=20){let X=$[0],U=$[1],W=$[2],M=$[3],z=J[0],R=J[1],O=J[2],V=J[3],w=J[4],j=J[5],N=J[6],f=J[7],K=Q,P=G[0],k=G[1],m=G[2],F=X,_=U,v=W,L=M,y=z,C=R,I=O,S=V,D=w,H=j,B=N,E=f,A=K,T=P,Z=k,g=m;for(let l=0;l<Y;l+=2)F=F+y|0,A=Q$(A^F,16),D=D+A|0,y=Q$(y^D,12),F=F+y|0,A=Q$(A^F,8),D=D+A|0,y=Q$(y^D,7),_=_+C|0,T=Q$(T^_,16),H=H+T|0,C=Q$(C^H,12),_=_+C|0,T=Q$(T^_,8),H=H+T|0,C=Q$(C^H,7),v=v+I|0,Z=Q$(Z^v,16),B=B+Z|0,I=Q$(I^B,12),v=v+I|0,Z=Q$(Z^v,8),B=B+Z|0,I=Q$(I^B,7),L=L+S|0,g=Q$(g^L,16),E=E+g|0,S=Q$(S^E,12),L=L+S|0,g=Q$(g^L,8),E=E+g|0,S=Q$(S^E,7),F=F+C|0,g=Q$(g^F,16),B=B+g|0,C=Q$(C^B,12),F=F+C|0,g=Q$(g^F,8),B=B+g|0,C=Q$(C^B,7),_=_+I|0,A=Q$(A^_,16),E=E+A|0,I=Q$(I^E,12),_=_+I|0,A=Q$(A^_,8),E=E+A|0,I=Q$(I^E,7),v=v+S|0,T=Q$(T^v,16),D=D+T|0,S=Q$(S^D,12),v=v+S|0,T=Q$(T^v,8),D=D+T|0,S=Q$(S^D,7),L=L+y|0,Z=Q$(Z^L,16),H=H+Z|0,y=Q$(y^H,12),L=L+y|0,Z=Q$(Z^L,8),H=H+Z|0,y=Q$(y^H,7);let x=0;q[x++]=X+F|0,q[x++]=U+_|0,q[x++]=W+v|0,q[x++]=M+L|0,q[x++]=z+y|0,q[x++]=R+C|0,q[x++]=O+I|0,q[x++]=V+S|0,q[x++]=w+D|0,q[x++]=j+H|0,q[x++]=N+B|0,q[x++]=f+E|0,q[x++]=K+A|0,q[x++]=P+T|0,q[x++]=k+Z|0,q[x++]=m+g|0}var mR=j9(bR,{counterRight:!1,counterLength:4,allowShortKeys:!1});var xR=new Uint8Array(16),K9=($,J)=>{$.update(J);let G=J.length%16;if(G)$.update(xR.subarray(G))},yR=new Uint8Array(32);function A9($,J,G,q,Q){if(Q!==void 0)w$(Q,void 0,"AAD");let Y=$(J,G,yR),X=O9(q.length,Q?Q.length:0,!0),U=H9.create(Y);if(Q)K9(U,Q);K9(U,q),U.update(X);let W=U.digest();return M0(Y,X),W}var uR=($)=>(J,G,q)=>{return{encrypt(Y,X){let U=Y.length;X=YG(U+16,X,!1),X.set(Y);let W=X.subarray(0,-16);$(J,G,W,W,1);let M=A9($,J,G,W,q);return X.set(M,U),M0(M),X},decrypt(Y,X){X=YG(Y.length-16,X,!1);let U=Y.subarray(0,-16),W=Y.subarray(-16),M=A9($,J,G,U,q);if(!z9(W,M))throw M0(M),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(J,G,X,X,1),M0(M),X}}},J0=V9({blockSize:64,nonceLength:12,tagLength:16},uR(mR));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function z8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function H$($,J=""){if(!Number.isSafeInteger($)||$<0){let G=J&&`"${J}" `;throw Error(`${G}expected integer >= 0, got ${$}`)}}function n($,J,G=""){let q=z8($),Q=$?.length,Y=J!==void 0;if(!q||Y&&Q!==J){let X=G&&`"${G}" `,U=Y?` of length ${J}`:"",W=q?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+W)}return $}function G0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");H$($.outputLen),H$($.blockLen)}function u0($,J=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(J&&$.finished)throw Error("Hash#digest() has already been called")}function wq($,J){n($,void 0,"digestInto() output");let G=J.outputLen;if($.length<G)throw Error('"digestInto() output" expected to be of length >='+G)}function Nq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let J=0;J<$.length;J++)$[J].fill(0)}function jq($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function z0($,J){return $<<32-J|$>>>J}var hR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function lR($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function cR($){for(let J=0;J<$.length;J++)$[J]=lR($[J]);return $}var mQ=hR?($)=>$:cR,f9=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),dR=Array.from({length:256},($,J)=>J.toString(16).padStart(2,"0"));function PJ($){if(n($),f9)return $.toHex();let J="";for(let G=0;G<$.length;G++)J+=dR[$[G]];return J}var y0={_0:48,_9:57,A:65,F:70,a:97,f:102};function I9($){if($>=y0._0&&$<=y0._9)return $-y0._0;if($>=y0.A&&$<=y0.F)return $-(y0.A-10);if($>=y0.a&&$<=y0.f)return $-(y0.a-10);return}function gJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(f9)return Uint8Array.fromHex($);let J=$.length,G=J/2;if(J%2)throw Error("hex string expected, got unpadded hex of length "+J);let q=new Uint8Array(G);for(let Q=0,Y=0;Q<G;Q++,Y+=2){let X=I9($.charCodeAt(Y)),U=I9($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+Y)}q[Q]=X*16+U}return q}function V$(...$){let J=0;for(let q=0;q<$.length;q++){let Q=$[q];n(Q),J+=Q.length}let G=new Uint8Array(J);for(let q=0,Q=0;q<$.length;q++){let Y=$[q];G.set(Y,Q),Q+=Y.length}return G}function R8($,J={}){let G=(Q,Y)=>$(Y).update(Q).digest(),q=$(void 0);return G.outputLen=q.outputLen,G.blockLen=q.blockLen,G.create=(Q)=>$(Q),Object.assign(G,J),Object.freeze(G)}function XJ($=32){let J=typeof globalThis==="object"?globalThis.crypto:null;if(typeof J?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return J.getRandomValues(new Uint8Array($))}var UJ=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yQ=BigInt(0),xQ=BigInt(1);function UG($,J=""){if(typeof $!=="boolean"){let G=J&&`"${J}" `;throw Error(G+"expected boolean, got type="+typeof $)}return $}function B9($){if(typeof $==="bigint"){if(!Dq($))throw Error("positive bigint expected, got "+$)}else H$($);return $}function WG($){let J=B9($).toString(16);return J.length&1?"0"+J:J}function E9($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?yQ:BigInt("0x"+$)}function WJ($){return E9(PJ($))}function MJ($){return E9(PJ(Hq(n($)).reverse()))}function V8($,J){H$(J),$=B9($);let G=gJ($.toString(16).padStart(J*2,"0"));if(G.length!==J)throw Error("number too large");return G}function MG($,J){return V8($,J).reverse()}function Hq($){return Uint8Array.from($)}function zJ($){return Uint8Array.from($,(J,G)=>{let q=J.charCodeAt(0);if(J.length!==1||q>127)throw Error(`string contains non-ASCII character "${$[G]}" with code ${q} at position ${G}`);return q})}var Dq=($)=>typeof $==="bigint"&&yQ<=$;function rR($,J,G){return Dq($)&&Dq(J)&&Dq(G)&&J<=$&&$<G}function zG($,J,G,q){if(!rR(J,G,q))throw Error("expected valid "+$+": "+G+" <= n < "+q+", got "+J)}function uQ($){let J;for(J=0;$>yQ;$>>=xQ,J+=1);return J}var RG=($)=>(xQ<<BigInt($))-xQ;function C9($,J,G){if(H$($,"hashLen"),H$(J,"qByteLen"),typeof G!=="function")throw Error("hmacFn must be a function");let q=(N)=>new Uint8Array(N),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=q($),M=q($),z=0,R=()=>{W.fill(1),M.fill(0),z=0},O=(...N)=>G(M,V$(W,...N)),V=(N=Q)=>{if(M=O(Y,N),W=O(),N.length===0)return;M=O(X,N),W=O()},w=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let N=0,f=[];while(N<J){W=O();let K=W.slice();f.push(K),N+=W.length}return V$(...f)};return(N,f)=>{R(),V(N);let K=void 0;while(!(K=f(w())))V();return R(),K}}function kJ($,J={},G={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function q(Y,X,U){let W=$[Y];if(U&&W===void 0)return;let M=typeof W;if(M!==X||W===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${M}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>q(U,W,X));Q(J,!1),Q(G,!0)}function hQ($){let J=new WeakMap;return(G,...q)=>{let Q=J.get(G);if(Q!==void 0)return Q;let Y=$(G,...q);return J.set(G,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var h$=BigInt(0),g$=BigInt(1),FJ=BigInt(2),Z9=BigInt(3),v9=BigInt(4),L9=BigInt(5),pR=BigInt(7),P9=BigInt(8),nR=BigInt(9),g9=BigInt(16);function u$($,J){let G=$%J;return G>=h$?G:J+G}function q0($,J,G){let q=$;while(J-- >h$)q*=q,q%=G;return q}function S9($,J){if($===h$)throw Error("invert: expected non-zero number");if(J<=h$)throw Error("invert: expected positive modulus, got "+J);let G=u$($,J),q=J,Q=h$,Y=g$,X=g$,U=h$;while(G!==h$){let M=q/G,z=q%G,R=Q-X*M,O=Y-U*M;q=G,G=z,Q=X,Y=U,X=R,U=O}if(q!==g$)throw Error("invert: does not exist");return u$(Q,J)}function lQ($,J,G){if(!$.eql($.sqr(J),G))throw Error("Cannot find square root")}function k9($,J){let G=($.ORDER+g$)/v9,q=$.pow(J,G);return lQ($,q,J),q}function oR($,J){let G=($.ORDER-L9)/P9,q=$.mul(J,FJ),Q=$.pow(q,G),Y=$.mul(J,Q),X=$.mul($.mul(Y,FJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return lQ($,U,J),U}function iR($){let J=Kq($),G=F9($),q=G(J,J.neg(J.ONE)),Q=G(J,q),Y=G(J,J.neg(q)),X=($+pR)/g9;return(U,W)=>{let M=U.pow(W,X),z=U.mul(M,q),R=U.mul(M,Q),O=U.mul(M,Y),V=U.eql(U.sqr(z),W),w=U.eql(U.sqr(R),W);M=U.cmov(M,z,V),z=U.cmov(O,R,w);let j=U.eql(U.sqr(z),W),N=U.cmov(M,z,j);return lQ(U,N,W),N}}function F9($){if($<Z9)throw Error("sqrt is not defined for small field");let J=$-g$,G=0;while(J%FJ===h$)J/=FJ,G++;let q=FJ,Q=Kq($);while(T9(Q,q)===1)if(q++>1000)throw Error("Cannot find square root: probably non-prime P");if(G===1)return k9;let Y=Q.pow(q,J),X=(J+g$)/FJ;return function(W,M){if(W.is0(M))return M;if(T9(W,M)!==1)throw Error("Cannot find square root");let z=G,R=W.mul(W.ONE,Y),O=W.pow(M,J),V=W.pow(M,X);while(!W.eql(O,W.ONE)){if(W.is0(O))return W.ZERO;let w=1,j=W.sqr(O);while(!W.eql(j,W.ONE))if(w++,j=W.sqr(j),w===z)throw Error("Cannot find square root");let N=g$<<BigInt(z-w-1),f=W.pow(R,N);z=w,R=W.sqr(f),O=W.mul(O,R),V=W.mul(V,f)}return V}}function aR($){if($%v9===Z9)return k9;if($%P9===L9)return oR;if($%g9===nR)return iR($);return F9($)}var sR=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function cQ($){let J={ORDER:"bigint",BYTES:"number",BITS:"number"},G=sR.reduce((q,Q)=>{return q[Q]="function",q},J);return kJ($,G),$}function tR($,J,G){if(G<h$)throw Error("invalid exponent, negatives unsupported");if(G===h$)return $.ONE;if(G===g$)return J;let q=$.ONE,Q=J;while(G>h$){if(G&g$)q=$.mul(q,Q);Q=$.sqr(Q),G>>=g$}return q}function VG($,J,G=!1){let q=Array(J.length).fill(G?$.ZERO:void 0),Q=J.reduce((X,U,W)=>{if($.is0(U))return X;return q[W]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return J.reduceRight((X,U,W)=>{if($.is0(U))return X;return q[W]=$.mul(X,q[W]),$.mul(X,U)},Y),q}function T9($,J){let G=($.ORDER-g$)/FJ,q=$.pow(J,G),Q=$.eql(q,$.ONE),Y=$.eql(q,$.ZERO),X=$.eql(q,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function eR($,J){if(J!==void 0)H$(J);let G=J!==void 0?J:$.toString(2).length,q=Math.ceil(G/8);return{nBitLength:G,nByteLength:q}}class _9{ORDER;BITS;BYTES;isLE;ZERO=h$;ONE=g$;_lengths;_sqrt;_mod;constructor($,J={}){if($<=h$)throw Error("invalid field: expected ORDER > 0, got "+$);let G=void 0;if(this.isLE=!1,J!=null&&typeof J==="object"){if(typeof J.BITS==="number")G=J.BITS;if(typeof J.sqrt==="function")this.sqrt=J.sqrt;if(typeof J.isLE==="boolean")this.isLE=J.isLE;if(J.allowedLengths)this._lengths=J.allowedLengths?.slice();if(typeof J.modFromBytes==="boolean")this._mod=J.modFromBytes}let{nBitLength:q,nByteLength:Q}=eR($,G);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=q,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return u$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return h$<=$&&$<this.ORDER}is0($){return $===h$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&g$)===g$}neg($){return u$(-$,this.ORDER)}eql($,J){return $===J}sqr($){return u$($*$,this.ORDER)}add($,J){return u$($+J,this.ORDER)}sub($,J){return u$($-J,this.ORDER)}mul($,J){return u$($*J,this.ORDER)}pow($,J){return tR(this,$,J)}div($,J){return u$($*S9(J,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,J){return $+J}subN($,J){return $-J}mulN($,J){return $*J}inv($){return S9($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=aR(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?MG($,this.BYTES):V8($,this.BYTES)}fromBytes($,J=!1){n($);let{_lengths:G,BYTES:q,isLE:Q,ORDER:Y,_mod:X}=this;if(G){if(!G.includes($.length)||$.length>q)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let W=new Uint8Array(q);W.set($,Q?0:W.length-$.length),$=W}if($.length!==q)throw Error("Field.fromBytes: expected "+q+" bytes, got "+$.length);let U=Q?MJ($):WJ($);if(X)U=u$(U,Y);if(!J){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return VG(this,$)}cmov($,J,G){return G?J:$}}function Kq($,J={}){return new _9($,J)}function b9($){if(typeof $!=="bigint")throw Error("field order must be bigint");let J=$.toString(2).length;return Math.ceil(J/8)}function dQ($){let J=b9($);return J+Math.ceil(J/2)}function m9($,J,G=!1){n($);let q=$.length,Q=b9(J),Y=dQ(J);if(q<16||q<Y||q>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+q);let X=G?MJ($):WJ($),U=u$(X,J-g$)+g$;return G?MG(U,Q):V8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O8=BigInt(0),_J=BigInt(1);function OG($,J){let G=J.negate();return $?G:J}function oQ($,J){let G=VG($.Fp,J.map((q)=>q.Z));return J.map((q,Q)=>$.fromAffine(q.toAffine(G[Q])))}function h9($,J){if(!Number.isSafeInteger($)||$<=0||$>J)throw Error("invalid window size, expected [1.."+J+"], got W="+$)}function rQ($,J){h9($,J);let G=Math.ceil(J/$)+1,q=2**($-1),Q=2**$,Y=RG($),X=BigInt($);return{windows:G,windowSize:q,mask:Y,maxNumber:Q,shiftBy:X}}function x9($,J,G){let{windowSize:q,mask:Q,maxNumber:Y,shiftBy:X}=G,U=Number($&Q),W=$>>X;if(U>q)U-=Y,W+=_J;let M=J*q,z=M+Math.abs(U)-1,R=U===0,O=U<0,V=J%2!==0;return{nextN:W,offset:z,isZero:R,isNeg:O,isNegF:V,offsetF:M}}var pQ=new WeakMap,l9=new WeakMap;function nQ($){return l9.get($)||1}function y9($){if($!==O8)throw Error("invalid wNAF")}class iQ{BASE;ZERO;Fn;bits;constructor($,J){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=J}_unsafeLadder($,J,G=this.ZERO){let q=$;while(J>O8){if(J&_J)G=G.add(q);q=q.double(),J>>=_J}return G}precomputeWindow($,J){let{windows:G,windowSize:q}=rQ(J,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<G;U++){X=Y,Q.push(X);for(let W=1;W<q;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,J,G){if(!this.Fn.isValid(G))throw Error("invalid scalar");let q=this.ZERO,Q=this.BASE,Y=rQ($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:M,isNeg:z,isNegF:R,offsetF:O}=x9(G,X,Y);if(G=U,M)Q=Q.add(OG(R,J[O]));else q=q.add(OG(z,J[W]))}return y9(G),{p:q,f:Q}}wNAFUnsafe($,J,G,q=this.ZERO){let Q=rQ($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(G===O8)break;let{nextN:X,offset:U,isZero:W,isNeg:M}=x9(G,Y,Q);if(G=X,W)continue;else{let z=J[U];q=q.add(M?z.negate():z)}}return y9(G),q}getPrecomputes($,J,G){let q=pQ.get(J);if(!q){if(q=this.precomputeWindow(J,$),$!==1){if(typeof G==="function")q=G(q);pQ.set(J,q)}}return q}cached($,J,G){let q=nQ($);return this.wNAF(q,this.getPrecomputes(q,$,G),J)}unsafe($,J,G,q){let Q=nQ($);if(Q===1)return this._unsafeLadder($,J,q);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,G),J,q)}createCache($,J){h9(J,this.bits),l9.set($,J),pQ.delete($)}hasCache($){return nQ($)!==1}}function c9($,J,G,q){let Q=J,Y=$.ZERO,X=$.ZERO;while(G>O8||q>O8){if(G&_J)Y=Y.add(Q);if(q&_J)X=X.add(Q);Q=Q.double(),G>>=_J,q>>=_J}return{p1:Y,p2:X}}function u9($,J,G){if(J){if(J.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return cQ(J),J}else return Kq($,{isLE:G})}function d9($,J,G={},q){if(q===void 0)q=$==="edwards";if(!J||typeof J!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let M=J[W];if(!(typeof M==="bigint"&&M>O8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=u9(J.p,G.Fp,q),Y=u9(J.n,G.Fn,q),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(J[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return J=Object.freeze(Object.assign({},J)),{CURVE:J,Fp:Q,Fn:Y}}function Aq($,J){return function(q){let Q=$(q);return{secretKey:Q,publicKey:J(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wG=BigInt(0),w8=BigInt(1),Iq=BigInt(2);function $7($){return kJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function r9($){let J=$7($),{P:G,type:q,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=J,U=q==="x25519";if(!U&&q!=="x448")throw Error("invalid type");let W=X||XJ,M=U?255:448,z=U?32:56,R=U?BigInt(9):BigInt(5),O=U?BigInt(121665):BigInt(39081),V=U?Iq**BigInt(254):Iq**BigInt(447),w=U?BigInt(8)*Iq**BigInt(251)-w8:BigInt(4)*Iq**BigInt(445)-w8,j=V+w+w8,N=(D)=>u$(D,G),f=K(R);function K(D){return MG(N(D),z)}function P(D){let H=Hq(n(D,z,"uCoordinate"));if(U)H[31]&=127;return N(MJ(H))}function k(D){return MJ(Q(Hq(n(D,z,"scalar"))))}function m(D,H){let B=y(P(H),k(D));if(B===wG)throw Error("invalid private or public key received");return K(B)}function F(D){return m(D,f)}let _=F,v=m;function L(D,H,B){let E=N(D*(H-B));return H=N(H-E),B=N(B+E),{x_2:H,x_3:B}}function y(D,H){zG("u",D,wG,G),zG("scalar",H,V,j);let B=H,E=D,A=w8,T=wG,Z=D,g=w8,x=wG;for(let d=BigInt(M-1);d>=wG;d--){let a=B>>d&w8;x^=a,{x_2:A,x_3:Z}=L(x,A,Z),{x_2:T,x_3:g}=L(x,T,g),x=a;let e=A+T,s=N(e*e),o=A-T,X$=N(o*o),D$=s-X$,d$=Z+g,X0=Z-g,U0=N(X0*e),$J=N(d$*o),a8=U0+$J,s8=U0-$J;Z=N(a8*a8),g=N(E*N(s8*s8)),A=N(s*X$),T=N(D$*(s+N(O*D$)))}({x_2:A,x_3:Z}=L(x,A,Z)),{x_2:T,x_3:g}=L(x,T,g);let l=Y(T);return N(A*l)}let C={secretKey:z,publicKey:z,seed:z},I=(D=W(z))=>{return n(D,C.seed,"seed"),D},S={randomSecretKey:I};return Object.freeze({keygen:Aq(I,_),getSharedSecret:v,getPublicKey:_,scalarMult:m,scalarMultBase:F,utils:S,GuBytes:f.slice(),lengths:C})}class aQ{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,J){if(G0($),n(J,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let G=this.blockLen,q=new Uint8Array(G);q.set(J.length>G?$.create().update(J).digest():J);for(let Q=0;Q<q.length;Q++)q[Q]^=54;this.iHash.update(q),this.oHash=$.create();for(let Q=0;Q<q.length;Q++)q[Q]^=106;this.oHash.update(q),r$(q)}update($){return u0(this),this.iHash.update($),this}digestInto($){u0(this),n($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:J,iHash:G,finished:q,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=q,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=J._cloneInto($.oHash),$.iHash=G._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var N8=($,J,G)=>new aQ($,J).update(G).digest();N8.create=($,J)=>new aQ($,J);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p9=($,J)=>($+($>=0?J:-J)/o9)/J;function J7($,J,G){let[[q,Q],[Y,X]]=J,U=p9(X*$,G),W=p9(-Q*$,G),M=$-U*q-W*Y,z=-U*Q-W*X,R=M<h0,O=z<h0;if(R)M=-M;if(O)z=-z;let V=RG(Math.ceil(uQ(G)/2))+j8;if(M<h0||M>=V||z<h0||z>=V)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:R,k1:M,k2neg:O,k2:z}}function tQ($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function sQ($,J){let G={};for(let q of Object.keys(J))G[q]=$[q]===void 0?J[q]:$[q];if(UG(G.lowS,"lowS"),UG(G.prehash,"prehash"),G.format!==void 0)tQ(G.format);return G}class n9 extends Error{constructor($=""){super($)}}var RJ={Err:n9,_tlv:{encode:($,J)=>{let{Err:G}=RJ;if($<0||$>256)throw new G("tlv.encode: wrong tag");if(J.length&1)throw new G("tlv.encode: unpadded data");let q=J.length/2,Q=WG(q);if(Q.length/2&128)throw new G("tlv.encode: long form length too big");let Y=q>127?WG(Q.length/2|128):"";return WG($)+Y+Q+J},decode($,J){let{Err:G}=RJ,q=0;if($<0||$>256)throw new G("tlv.encode: wrong tag");if(J.length<2||J[q++]!==$)throw new G("tlv.decode: wrong tlv");let Q=J[q++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new G("tlv.decode(long): indefinite length not supported");if(W>4)throw new G("tlv.decode(long): byte length is too big");let M=J.subarray(q,q+W);if(M.length!==W)throw new G("tlv.decode: length bytes not complete");if(M[0]===0)throw new G("tlv.decode(long): zero leftmost byte");for(let z of M)X=X<<8|z;if(q+=W,X<128)throw new G("tlv.decode(long): not minimal encoding")}let U=J.subarray(q,q+X);if(U.length!==X)throw new G("tlv.decode: wrong value length");return{v:U,l:J.subarray(q+X)}}},_int:{encode($){let{Err:J}=RJ;if($<h0)throw new J("integer: negative integers are not allowed");let G=WG($);if(Number.parseInt(G[0],16)&8)G="00"+G;if(G.length&1)throw new J("unexpected DER parsing assertion: unpadded hex");return G},decode($){let{Err:J}=RJ;if($[0]&128)throw new J("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new J("invalid signature integer: unnecessary leading zero");return WJ($)}},toSig($){let{Err:J,_int:G,_tlv:q}=RJ,Q=n($,void 0,"signature"),{v:Y,l:X}=q.decode(48,Q);if(X.length)throw new J("invalid signature: left bytes after parsing");let{v:U,l:W}=q.decode(2,Y),{v:M,l:z}=q.decode(2,W);if(z.length)throw new J("invalid signature: left bytes after parsing");return{r:G.decode(U),s:G.decode(M)}},hexFromSig($){let{_tlv:J,_int:G}=RJ,q=J.encode(2,G.encode($.r)),Q=J.encode(2,G.encode($.s)),Y=q+Q;return J.encode(48,Y)}},h0=BigInt(0),j8=BigInt(1),o9=BigInt(2),fq=BigInt(3),G7=BigInt(4);function eQ($,J={}){let G=d9("weierstrass",$,J),{Fp:q,Fn:Q}=G,Y=G.CURVE,{h:X,n:U}=Y;kJ(J,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=J;if(W){if(!q.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=a9(q,Q);function z(){if(!q.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function R(I,S,D){let{x:H,y:B}=S.toAffine(),E=q.toBytes(H);if(UG(D,"isCompressed"),D){z();let A=!q.isOdd(B);return V$(i9(A),E)}else return V$(Uint8Array.of(4),E,q.toBytes(B))}function O(I){n(I,void 0,"Point");let{publicKey:S,publicKeyUncompressed:D}=M,H=I.length,B=I[0],E=I.subarray(1);if(H===S&&(B===2||B===3)){let A=q.fromBytes(E);if(!q.isValid(A))throw Error("bad point: is not on curve, wrong x");let T=j(A),Z;try{Z=q.sqrt(T)}catch(l){let d=l instanceof Error?": "+l.message:"";throw Error("bad point: is not on curve, sqrt error"+d)}z();let g=q.isOdd(Z);if((B&1)===1!==g)Z=q.neg(Z);return{x:A,y:Z}}else if(H===D&&B===4){let A=q.BYTES,T=q.fromBytes(E.subarray(0,A)),Z=q.fromBytes(E.subarray(A,A*2));if(!N(T,Z))throw Error("bad point: is not on curve");return{x:T,y:Z}}else throw Error(`bad point: got length ${H}, expected compressed=${S} or uncompressed=${D}`)}let V=J.toBytes||R,w=J.fromBytes||O;function j(I){let S=q.sqr(I),D=q.mul(S,I);return q.add(q.add(D,q.mul(I,Y.a)),Y.b)}function N(I,S){let D=q.sqr(S),H=j(I);return q.eql(D,H)}if(!N(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let f=q.mul(q.pow(Y.a,fq),G7),K=q.mul(q.sqr(Y.b),BigInt(27));if(q.is0(q.add(f,K)))throw Error("bad curve params: a or b");function P(I,S,D=!1){if(!q.isValid(S)||D&&q.is0(S))throw Error(`bad point coordinate ${I}`);return S}function k(I){if(!(I instanceof L))throw Error("Weierstrass Point expected")}function m(I){if(!W||!W.basises)throw Error("no endo");return J7(I,W.basises,Q.ORDER)}let F=hQ((I,S)=>{let{X:D,Y:H,Z:B}=I;if(q.eql(B,q.ONE))return{x:D,y:H};let E=I.is0();if(S==null)S=E?q.ONE:q.inv(B);let A=q.mul(D,S),T=q.mul(H,S),Z=q.mul(B,S);if(E)return{x:q.ZERO,y:q.ZERO};if(!q.eql(Z,q.ONE))throw Error("invZ was invalid");return{x:A,y:T}}),_=hQ((I)=>{if(I.is0()){if(J.allowInfinityPoint&&!q.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:S,y:D}=I.toAffine();if(!q.isValid(S)||!q.isValid(D))throw Error("bad point: x or y not field elements");if(!N(S,D))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function v(I,S,D,H,B){return D=new L(q.mul(D.X,I),D.Y,D.Z),S=OG(H,S),D=OG(B,D),S.add(D)}class L{static BASE=new L(Y.Gx,Y.Gy,q.ONE);static ZERO=new L(q.ZERO,q.ONE,q.ZERO);static Fp=q;static Fn=Q;X;Y;Z;constructor(I,S,D){this.X=P("x",I),this.Y=P("y",S,!0),this.Z=P("z",D),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:S,y:D}=I||{};if(!I||!q.isValid(S)||!q.isValid(D))throw Error("invalid affine point");if(I instanceof L)throw Error("projective point not allowed");if(q.is0(S)&&q.is0(D))return L.ZERO;return new L(S,D,q.ONE)}static fromBytes(I){let S=L.fromAffine(w(n(I,void 0,"point")));return S.assertValidity(),S}static fromHex(I){return L.fromBytes(gJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,S=!0){if(C.createCache(this,I),!S)this.multiply(fq);return this}assertValidity(){_(this)}hasEvenY(){let{y:I}=this.toAffine();if(!q.isOdd)throw Error("Field doesn't support isOdd");return!q.isOdd(I)}equals(I){k(I);let{X:S,Y:D,Z:H}=this,{X:B,Y:E,Z:A}=I,T=q.eql(q.mul(S,A),q.mul(B,H)),Z=q.eql(q.mul(D,A),q.mul(E,H));return T&&Z}negate(){return new L(this.X,q.neg(this.Y),this.Z)}double(){let{a:I,b:S}=Y,D=q.mul(S,fq),{X:H,Y:B,Z:E}=this,A=q.ZERO,T=q.ZERO,Z=q.ZERO,g=q.mul(H,H),x=q.mul(B,B),l=q.mul(E,E),d=q.mul(H,B);return d=q.add(d,d),Z=q.mul(H,E),Z=q.add(Z,Z),A=q.mul(I,Z),T=q.mul(D,l),T=q.add(A,T),A=q.sub(x,T),T=q.add(x,T),T=q.mul(A,T),A=q.mul(d,A),Z=q.mul(D,Z),l=q.mul(I,l),d=q.sub(g,l),d=q.mul(I,d),d=q.add(d,Z),Z=q.add(g,g),g=q.add(Z,g),g=q.add(g,l),g=q.mul(g,d),T=q.add(T,g),l=q.mul(B,E),l=q.add(l,l),g=q.mul(l,d),A=q.sub(A,g),Z=q.mul(l,x),Z=q.add(Z,Z),Z=q.add(Z,Z),new L(A,T,Z)}add(I){k(I);let{X:S,Y:D,Z:H}=this,{X:B,Y:E,Z:A}=I,T=q.ZERO,Z=q.ZERO,g=q.ZERO,x=Y.a,l=q.mul(Y.b,fq),d=q.mul(S,B),a=q.mul(D,E),e=q.mul(H,A),s=q.add(S,D),o=q.add(B,E);s=q.mul(s,o),o=q.add(d,a),s=q.sub(s,o),o=q.add(S,H);let X$=q.add(B,A);return o=q.mul(o,X$),X$=q.add(d,e),o=q.sub(o,X$),X$=q.add(D,H),T=q.add(E,A),X$=q.mul(X$,T),T=q.add(a,e),X$=q.sub(X$,T),g=q.mul(x,o),T=q.mul(l,e),g=q.add(T,g),T=q.sub(a,g),g=q.add(a,g),Z=q.mul(T,g),a=q.add(d,d),a=q.add(a,d),e=q.mul(x,e),o=q.mul(l,o),a=q.add(a,e),e=q.sub(d,e),e=q.mul(x,e),o=q.add(o,e),d=q.mul(a,o),Z=q.add(Z,d),d=q.mul(X$,o),T=q.mul(s,T),T=q.sub(T,d),d=q.mul(s,a),g=q.mul(X$,g),g=q.add(g,d),new L(T,Z,g)}subtract(I){return this.add(I.negate())}is0(){return this.equals(L.ZERO)}multiply(I){let{endo:S}=J;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let D,H,B=(E)=>C.cached(this,E,(A)=>oQ(L,A));if(S){let{k1neg:E,k1:A,k2neg:T,k2:Z}=m(I),{p:g,f:x}=B(A),{p:l,f:d}=B(Z);H=x.add(d),D=v(S.beta,g,l,E,T)}else{let{p:E,f:A}=B(I);D=E,H=A}return oQ(L,[D,H])[0]}multiplyUnsafe(I){let{endo:S}=J,D=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===h0||D.is0())return L.ZERO;if(I===j8)return D;if(C.hasCache(this))return this.multiply(I);if(S){let{k1neg:H,k1:B,k2neg:E,k2:A}=m(I),{p1:T,p2:Z}=c9(L,D,B,A);return v(S.beta,T,Z,H,E)}else return C.unsafe(D,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=J;if(X===j8)return!0;if(I)return I(L,this);return C.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=J;if(X===j8)return this;if(I)return I(L,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return UG(I,"isCompressed"),this.assertValidity(),V(L,this,I)}toHex(I=!0){return PJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,C=new iQ(L,J.endo?Math.ceil(y/2):y);return L.BASE.precompute(8),L}function i9($){return Uint8Array.of($?2:3)}function a9($,J){return{secretKey:J.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*J.BYTES}}function q7($,J={}){let{Fn:G}=$,q=J.randomBytes||XJ,Q=Object.assign(a9($.Fp,G),{seed:dQ(G.ORDER)});function Y(V){try{let w=G.fromBytes(V);return G.isValidNot0(w)}catch(w){return!1}}function X(V,w){let{publicKey:j,publicKeyUncompressed:N}=Q;try{let f=V.length;if(w===!0&&f!==j)return!1;if(w===!1&&f!==N)return!1;return!!$.fromBytes(V)}catch(f){return!1}}function U(V=q(Q.seed)){return m9(n(V,Q.seed,"seed"),G.ORDER)}function W(V,w=!0){return $.BASE.multiply(G.fromBytes(V)).toBytes(w)}function M(V){let{secretKey:w,publicKey:j,publicKeyUncompressed:N}=Q;if(!z8(V))return;if("_lengths"in G&&G._lengths||w===j)return;let f=n(V,void 0,"key").length;return f===j||f===N}function z(V,w,j=!0){if(M(V)===!0)throw Error("first arg must be private key");if(M(w)===!1)throw Error("second arg must be public key");let N=G.fromBytes(V);return $.fromBytes(w).multiply(N).toBytes(j)}let R={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},O=Aq(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:O,Point:$,utils:R,lengths:Q})}function $Y($,J,G={}){G0(J),kJ(G,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),G=Object.assign({},G);let q=G.randomBytes||XJ,Q=G.hmac||((D,H)=>N8(J,D,H)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:W}=X,{keygen:M,getPublicKey:z,getSharedSecret:R,utils:O,lengths:V}=q7($,G),w={prehash:!0,lowS:typeof G.lowS==="boolean"?G.lowS:!0,format:"compact",extraEntropy:!1},j=U*o9<Y.ORDER;function N(D){let H=U>>j8;return D>H}function f(D,H){if(!X.isValidNot0(H))throw Error(`invalid signature ${D}: out of range 1..Point.Fn.ORDER`);return H}function K(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function P(D,H){tQ(H);let B=V.signature,E=H==="compact"?B:H==="recovered"?B+1:void 0;return n(D,E)}class k{r;s;recovery;constructor(D,H,B){if(this.r=f("r",D),this.s=f("s",H),B!=null){if(K(),![0,1,2,3].includes(B))throw Error("invalid recovery id");this.recovery=B}Object.freeze(this)}static fromBytes(D,H=w.format){P(D,H);let B;if(H==="der"){let{r:Z,s:g}=RJ.toSig(n(D));return new k(Z,g)}if(H==="recovered")B=D[0],H="compact",D=D.subarray(1);let E=V.signature/2,A=D.subarray(0,E),T=D.subarray(E,E*2);return new k(X.fromBytes(A),X.fromBytes(T),B)}static fromHex(D,H){return this.fromBytes(gJ(D),H)}assertRecovery(){let{recovery:D}=this;if(D==null)throw Error("invalid recovery id: must be present");return D}addRecoveryBit(D){return new k(this.r,this.s,D)}recoverPublicKey(D){let{r:H,s:B}=this,E=this.assertRecovery(),A=E===2||E===3?H+U:H;if(!Y.isValid(A))throw Error("invalid recovery id: sig.r+curve.n != R.x");let T=Y.toBytes(A),Z=$.fromBytes(V$(i9((E&1)===0),T)),g=X.inv(A),x=F(n(D,void 0,"msgHash")),l=X.create(-x*g),d=X.create(B*g),a=$.BASE.multiplyUnsafe(l).add(Z.multiplyUnsafe(d));if(a.is0())throw Error("invalid recovery: point at infinify");return a.assertValidity(),a}hasHighS(){return N(this.s)}toBytes(D=w.format){if(tQ(D),D==="der")return gJ(RJ.hexFromSig(this));let{r:H,s:B}=this,E=X.toBytes(H),A=X.toBytes(B);if(D==="recovered")return K(),V$(Uint8Array.of(this.assertRecovery()),E,A);return V$(E,A)}toHex(D){return PJ(this.toBytes(D))}}let m=G.bits2int||function(H){if(H.length>8192)throw Error("input is too large");let B=WJ(H),E=H.length*8-W;return E>0?B>>BigInt(E):B},F=G.bits2int_modN||function(H){return X.create(m(H))},_=RG(W);function v(D){return zG("num < 2^"+W,D,h0,_),X.toBytes(D)}function L(D,H){return n(D,void 0,"message"),H?n(J(D),void 0,"prehashed message"):D}function y(D,H,B){let{lowS:E,prehash:A,extraEntropy:T}=sQ(B,w);D=L(D,A);let Z=F(D),g=X.fromBytes(H);if(!X.isValidNot0(g))throw Error("invalid private key");let x=[v(g),v(Z)];if(T!=null&&T!==!1){let e=T===!0?q(V.secretKey):T;x.push(n(e,void 0,"extraEntropy"))}let l=V$(...x),d=Z;function a(e){let s=m(e);if(!X.isValidNot0(s))return;let o=X.inv(s),X$=$.BASE.multiply(s).toAffine(),D$=X.create(X$.x);if(D$===h0)return;let d$=X.create(o*X.create(d+D$*g));if(d$===h0)return;let X0=(X$.x===D$?0:2)|Number(X$.y&j8),U0=d$;if(E&&N(d$))U0=X.neg(d$),X0^=1;return new k(D$,U0,j?void 0:X0)}return{seed:l,k2sig:a}}function C(D,H,B={}){let{seed:E,k2sig:A}=y(D,H,B);return C9(J.outputLen,X.BYTES,Q)(E,A).toBytes(B.format)}function I(D,H,B,E={}){let{lowS:A,prehash:T,format:Z}=sQ(E,w);if(B=n(B,void 0,"publicKey"),H=L(H,T),!z8(D)){let g=D instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+g)}P(D,Z);try{let g=k.fromBytes(D,Z),x=$.fromBytes(B);if(A&&g.hasHighS())return!1;let{r:l,s:d}=g,a=F(H),e=X.inv(d),s=X.create(a*e),o=X.create(l*e),X$=$.BASE.multiplyUnsafe(s).add(x.multiplyUnsafe(o));if(X$.is0())return!1;return X.create(X$.x)===l}catch(g){return!1}}function S(D,H,B={}){let{prehash:E}=sQ(B,w);return H=L(H,E),k.fromBytes(D,"recovered").recoverPublicKey(H).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:R,utils:O,lengths:V,Point:$,sign:C,verify:I,recoverPublicKey:S,Signature:k,hash:J})}function s9($,J,G){return $&J^~$&G}function t9($,J,G){return $&J^$&G^J&G}class Bq{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,J,G,q){this.blockLen=$,this.outputLen=J,this.padOffset=G,this.isLE=q,this.buffer=new Uint8Array($),this.view=jq(this.buffer)}update($){u0(this),n($);let{view:J,buffer:G,blockLen:q}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(q-this.pos,Q-Y);if(X===q){let U=jq($);for(;q<=Q-Y;Y+=q)this.process(U,Y);continue}if(G.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===q)this.process(J,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){u0(this),wq($,this),this.finished=!0;let{buffer:J,view:G,blockLen:q,isLE:Q}=this,{pos:Y}=this;if(J[Y++]=128,r$(this.buffer.subarray(Y)),this.padOffset>q-Y)this.process(G,0),Y=0;for(let z=Y;z<q;z++)J[z]=0;G.setBigUint64(q-8,BigInt(this.length*8),Q),this.process(G,0);let X=jq($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,M=this.get();if(W>M.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)X.setUint32(4*z,M[z],Q)}digest(){let{buffer:$,outputLen:J}=this;this.digestInto($);let G=$.slice(0,J);return this.destroy(),G}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:J,buffer:G,length:q,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=q,$.pos=X,q%J)$.buffer.set(G);return $}clone(){return this._cloneInto()}}var l0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),c0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),E$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),C$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Eq=BigInt(4294967295),e9=BigInt(32);function Q7($,J=!1){if(J)return{h:Number($&Eq),l:Number($>>e9&Eq)};return{h:Number($>>e9&Eq)|0,l:Number($&Eq)|0}}function Cq($,J=!1){let G=$.length,q=new Uint32Array(G),Q=new Uint32Array(G);for(let Y=0;Y<G;Y++){let{h:X,l:U}=Q7($[Y],J);[q[Y],Q[Y]]=[X,U]}return[q,Q]}var JY=($,J,G)=>$>>>G,GY=($,J,G)=>$<<32-G|J>>>G,bJ=($,J,G)=>$>>>G|J<<32-G,mJ=($,J,G)=>$<<32-G|J>>>G,NG=($,J,G)=>$<<64-G|J>>>G-32,jG=($,J,G)=>$>>>G-32|J<<64-G;var $U=($,J,G)=>$<<G|J>>>32-G,JU=($,J,G)=>J<<G|$>>>32-G,GU=($,J,G)=>J<<G-32|$>>>64-G,qU=($,J,G)=>$<<G-32|J>>>64-G;function f0($,J,G,q){let Q=(J>>>0)+(q>>>0);return{h:$+G+(Q/4294967296|0)|0,l:Q|0}}var QU=($,J,G)=>($>>>0)+(J>>>0)+(G>>>0),YU=($,J,G,q)=>J+G+q+($/4294967296|0)|0,XU=($,J,G,q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0),UU=($,J,G,q,Q)=>J+G+q+Q+($/4294967296|0)|0,WU=($,J,G,q,Q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0)+(Q>>>0),MU=($,J,G,q,Q,Y)=>J+G+q+Q+Y+($/4294967296|0)|0;var X7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VJ=new Uint32Array(64);class qY extends Bq{constructor($){super(64,$,8,!1)}get(){let{A:$,B:J,C:G,D:q,E:Q,F:Y,G:X,H:U}=this;return[$,J,G,q,Q,Y,X,U]}set($,J,G,q,Q,Y,X,U){this.A=$|0,this.B=J|0,this.C=G|0,this.D=q|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,J){for(let z=0;z<16;z++,J+=4)VJ[z]=$.getUint32(J,!1);for(let z=16;z<64;z++){let R=VJ[z-15],O=VJ[z-2],V=z0(R,7)^z0(R,18)^R>>>3,w=z0(O,17)^z0(O,19)^O>>>10;VJ[z]=w+VJ[z-7]+V+VJ[z-16]|0}let{A:G,B:q,C:Q,D:Y,E:X,F:U,G:W,H:M}=this;for(let z=0;z<64;z++){let R=z0(X,6)^z0(X,11)^z0(X,25),O=M+R+s9(X,U,W)+X7[z]+VJ[z]|0,w=(z0(G,2)^z0(G,13)^z0(G,22))+t9(G,q,Q)|0;M=W,W=U,U=X,X=Y+O|0,Y=Q,Q=q,q=G,G=O+w|0}G=G+this.A|0,q=q+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,M=M+this.H|0,this.set(G,q,Q,Y,X,U,W,M)}roundClean(){r$(VJ)}destroy(){this.set(0,0,0,0,0,0,0,0),r$(this.buffer)}}class zU extends qY{A=l0[0]|0;B=l0[1]|0;C=l0[2]|0;D=l0[3]|0;E=l0[4]|0;F=l0[5]|0;G=l0[6]|0;H=l0[7]|0;constructor(){super(32)}}class U7 extends qY{A=c0[0]|0;B=c0[1]|0;C=c0[2]|0;D=c0[3]|0;E=c0[4]|0;F=c0[5]|0;G=c0[6]|0;H=c0[7]|0;constructor(){super(28)}}var RU=(()=>Cq(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),W7=(()=>RU[0])(),M7=(()=>RU[1])(),OJ=new Uint32Array(80),wJ=new Uint32Array(80);class DG extends Bq{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:J,Bh:G,Bl:q,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:M,Fh:z,Fl:R,Gh:O,Gl:V,Hh:w,Hl:j}=this;return[$,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j]}set($,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j){this.Ah=$|0,this.Al=J|0,this.Bh=G|0,this.Bl=q|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=M|0,this.Fh=z|0,this.Fl=R|0,this.Gh=O|0,this.Gl=V|0,this.Hh=w|0,this.Hl=j|0}process($,J){for(let K=0;K<16;K++,J+=4)OJ[K]=$.getUint32(J),wJ[K]=$.getUint32(J+=4);for(let K=16;K<80;K++){let P=OJ[K-15]|0,k=wJ[K-15]|0,m=bJ(P,k,1)^bJ(P,k,8)^JY(P,k,7),F=mJ(P,k,1)^mJ(P,k,8)^GY(P,k,7),_=OJ[K-2]|0,v=wJ[K-2]|0,L=bJ(_,v,19)^NG(_,v,61)^JY(_,v,6),y=mJ(_,v,19)^jG(_,v,61)^GY(_,v,6),C=XU(F,y,wJ[K-7],wJ[K-16]),I=UU(C,m,L,OJ[K-7],OJ[K-16]);OJ[K]=I|0,wJ[K]=C|0}let{Ah:G,Al:q,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:M,Eh:z,El:R,Fh:O,Fl:V,Gh:w,Gl:j,Hh:N,Hl:f}=this;for(let K=0;K<80;K++){let P=bJ(z,R,14)^bJ(z,R,18)^NG(z,R,41),k=mJ(z,R,14)^mJ(z,R,18)^jG(z,R,41),m=z&O^~z&w,F=R&V^~R&j,_=WU(f,k,F,M7[K],wJ[K]),v=MU(_,N,P,m,W7[K],OJ[K]),L=_|0,y=bJ(G,q,28)^NG(G,q,34)^NG(G,q,39),C=mJ(G,q,28)^jG(G,q,34)^jG(G,q,39),I=G&Q^G&X^Q&X,S=q&Y^q&U^Y&U;N=w|0,f=j|0,w=O|0,j=V|0,O=z|0,V=R|0,{h:z,l:R}=f0(W|0,M|0,v|0,L|0),W=X|0,M=U|0,X=Q|0,U=Y|0,Q=G|0,Y=q|0;let D=QU(L,C,S);G=YU(D,v,y,I),q=D|0}({h:G,l:q}=f0(this.Ah|0,this.Al|0,G|0,q|0)),{h:Q,l:Y}=f0(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=f0(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:M}=f0(this.Dh|0,this.Dl|0,W|0,M|0),{h:z,l:R}=f0(this.Eh|0,this.El|0,z|0,R|0),{h:O,l:V}=f0(this.Fh|0,this.Fl|0,O|0,V|0),{h:w,l:j}=f0(this.Gh|0,this.Gl|0,w|0,j|0),{h:N,l:f}=f0(this.Hh|0,this.Hl|0,N|0,f|0),this.set(G,q,Q,Y,X,U,W,M,z,R,O,V,w,j,N,f)}roundClean(){r$(OJ,wJ)}destroy(){r$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class z7 extends DG{Ah=C$[0]|0;Al=C$[1]|0;Bh=C$[2]|0;Bl=C$[3]|0;Ch=C$[4]|0;Cl=C$[5]|0;Dh=C$[6]|0;Dl=C$[7]|0;Eh=C$[8]|0;El=C$[9]|0;Fh=C$[10]|0;Fl=C$[11]|0;Gh=C$[12]|0;Gl=C$[13]|0;Hh=C$[14]|0;Hl=C$[15]|0;constructor(){super(64)}}class VU extends DG{Ah=E$[0]|0;Al=E$[1]|0;Bh=E$[2]|0;Bl=E$[3]|0;Ch=E$[4]|0;Cl=E$[5]|0;Dh=E$[6]|0;Dl=E$[7]|0;Eh=E$[8]|0;El=E$[9]|0;Fh=E$[10]|0;Fl=E$[11]|0;Gh=E$[12]|0;Gl=E$[13]|0;Hh=E$[14]|0;Hl=E$[15]|0;constructor(){super(48)}}var k$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),F$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class R7 extends DG{Ah=k$[0]|0;Al=k$[1]|0;Bh=k$[2]|0;Bl=k$[3]|0;Ch=k$[4]|0;Cl=k$[5]|0;Dh=k$[6]|0;Dl=k$[7]|0;Eh=k$[8]|0;El=k$[9]|0;Fh=k$[10]|0;Fl=k$[11]|0;Gh=k$[12]|0;Gl=k$[13]|0;Hh=k$[14]|0;Hl=k$[15]|0;constructor(){super(28)}}class V7 extends DG{Ah=F$[0]|0;Al=F$[1]|0;Bh=F$[2]|0;Bl=F$[3]|0;Ch=F$[4]|0;Cl=F$[5]|0;Dh=F$[6]|0;Dl=F$[7]|0;Eh=F$[8]|0;El=F$[9]|0;Fh=F$[10]|0;Fl=F$[11]|0;Gh=F$[12]|0;Gl=F$[13]|0;Hh=F$[14]|0;Hl=F$[15]|0;constructor(){super(32)}}var Sq=R8(()=>new zU,UJ(1));var OU=R8(()=>new VU,UJ(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O7=BigInt(1),wU=BigInt(2),w7=BigInt(3),N7=BigInt(5),gK=BigInt(8),NU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function j7($){let J=BigInt(10),G=BigInt(20),q=BigInt(40),Q=BigInt(80),Y=NU,U=$*$%Y*$%Y,W=q0(U,wU,Y)*U%Y,M=q0(W,O7,Y)*$%Y,z=q0(M,N7,Y)*M%Y,R=q0(z,J,Y)*z%Y,O=q0(R,G,Y)*R%Y,V=q0(O,q,Y)*O%Y,w=q0(V,Q,Y)*V%Y,j=q0(w,Q,Y)*V%Y,N=q0(j,J,Y)*z%Y;return{pow_p_5_8:q0(N,wU,Y)*$%Y,b2:U}}function D7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var jU=(()=>{let $=NU;return r9({P:$,type:"x25519",powPminus2:(J)=>{let{pow_p_5_8:G,b2:q}=j7(J);return u$(q0(G,w7,$)*q,$)},adjustScalarBytes:D7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),K7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var A7=eQ(H7),QY=$Y(A7,Sq);var I7=eQ(K7),DU=$Y(I7,OU);function KU($,J,G){if(G0($),G===void 0)G=new Uint8Array($.outputLen);return N8($,G,J)}var YY=Uint8Array.of(0),HU=Uint8Array.of();function AU($,J,G,q=32){G0($),H$(q,"length");let Q=$.outputLen;if(q>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(q/Q);if(G===void 0)G=HU;else n(G,void 0,"info");let X=new Uint8Array(Y*Q),U=N8.create($,J),W=U._cloneInto(),M=new Uint8Array(U.outputLen);for(let z=0;z<Y;z++)YY[0]=z+1,W.update(z===0?HU:M).update(G).update(YY).digestInto(M),X.set(M,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),r$(M,YY),X.slice(0,q)}var f7=BigInt(0),HG=BigInt(1),B7=BigInt(2),E7=BigInt(7),C7=BigInt(256),S7=BigInt(113),BU=[],EU=[],CU=[];for(let $=0,J=HG,G=1,q=0;$<24;$++){[G,q]=[q,(2*G+3*q)%5],BU.push(2*(5*q+G)),EU.push(($+1)*($+2)/2%64);let Q=f7;for(let Y=0;Y<7;Y++)if(J=(J<<HG^(J>>E7)*S7)%C7,J&B7)Q^=HG<<(HG<<BigInt(Y))-HG;CU.push(Q)}var SU=Cq(CU,!0),T7=SU[0],Z7=SU[1],IU=($,J,G)=>G>32?GU($,J,G):$U($,J,G),fU=($,J,G)=>G>32?qU($,J,G):JU($,J,G);function v7($,J=24){let G=new Uint32Array(10);for(let q=24-J;q<24;q++){for(let X=0;X<10;X++)G[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,W=(X+2)%10,M=G[W],z=G[W+1],R=IU(M,z,1)^G[U],O=fU(M,z,1)^G[U+1];for(let V=0;V<50;V+=10)$[X+V]^=R,$[X+V+1]^=O}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=EU[X],W=IU(Q,Y,U),M=fU(Q,Y,U),z=BU[X];Q=$[z],Y=$[z+1],$[z]=W,$[z+1]=M}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)G[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~G[(U+2)%10]&G[(U+4)%10]}$[0]^=T7[q],$[1]^=Z7[q]}r$(G)}class Tq{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,J,G,q=!1,Q=24){if(this.blockLen=$,this.suffix=J,this.outputLen=G,this.enableXOF=q,this.rounds=Q,H$(G,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Nq(this.state)}clone(){return this._cloneInto()}keccak(){mQ(this.state32),v7(this.state32,this.rounds),mQ(this.state32),this.posOut=0,this.pos=0}update($){u0(this),n($);let{blockLen:J,state:G}=this,q=$.length;for(let Q=0;Q<q;){let Y=Math.min(J-this.pos,q-Q);for(let X=0;X<Y;X++)G[this.pos++]^=$[Q++];if(this.pos===J)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:J,pos:G,blockLen:q}=this;if($[G]^=J,(J&128)!==0&&G===q-1)this.keccak();$[q-1]^=128,this.keccak()}writeInto($){u0(this,!1),n($),this.finish();let J=this.state,{blockLen:G}=this;for(let q=0,Q=$.length;q<Q;){if(this.posOut>=G)this.keccak();let Y=Math.min(G-this.posOut,Q-q);$.set(J.subarray(this.posOut,this.posOut+Y),q),this.posOut+=Y,q+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return H$($),this.xofInto(new Uint8Array($))}digestInto($){if(wq($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,r$(this.state)}_cloneInto($){let{blockLen:J,suffix:G,outputLen:q,rounds:Q,enableXOF:Y}=this;return $||=new Tq(J,G,q,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=G,$.outputLen=q,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var TU=($,J,G,q={})=>R8(()=>new Tq(J,$,G),q);var xJ=TU(6,136,32,UJ(8));var ZU=TU(6,72,64,UJ(10));var vU=($,J,G,q={})=>R8((Q={})=>new Tq(J,$,Q.dkLen===void 0?G:Q.dkLen,!0),q),LU=vU(31,168,16,UJ(11)),B0=vU(31,136,32,UJ(12));function XY($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function gU($){return XY($),($&$-1)===0&&$!==0}function UY($,J){XY($);let G=0;for(let q=0;q<J;q++,$>>>=1)G=G<<1|$&1;return G}function kU($){return XY($),31-Math.clz32($)}function PU($){let J=$.length;if(J<2||!gU(J))throw Error("n must be a power of 2 and greater than 1. Got "+J);let G=kU(J);for(let q=0;q<J;q++){let Q=UY(q,G);if(q<Q){let Y=$[q];$[q]=$[Q],$[Q]=Y}}return $}var WY=($,J)=>{let{N:G,roots:q,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=J,W=kU(G);if(!gU(G))throw Error("FFT: Polynomial size should be power of two");let M=Q!==Y;return(z)=>{if(z.length!==G)throw Error("FFT: wrong Polynomial length");if(Q&&U)PU(z);for(let R=0,O=1;R<W-X;R++){let V=Q?R+1+X:W-R,w=1<<V,j=w>>1,N=G>>V;for(let f=0;f<G;f+=w)for(let K=0,P=O++;K<j;K++){let k=Y?Q?G-P:P:K*N,m=f+K,F=f+K+j,_=q[k],v=z[F],L=z[m];if(M){let y=$.mul(v,_);z[m]=$.add(L,y),z[F]=$.sub(L,y)}else if(Y)z[m]=$.add(v,L),z[F]=$.mul($.sub(v,L),_);else z[m]=$.add(L,v),z[F]=$.mul($.sub(L,v),_)}}if(!Q&&U)PU(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var E0=XJ;function Zq($,J){if($.length!==J.length)return!1;let G=0;for(let q=0;q<$.length;q++)G|=$[q]^J[q];return G===0}function FU($){return Uint8Array.from($)}function yJ($,...J){let G=(Q)=>typeof Q==="number"?Q:Q.bytesLen,q=J.reduce((Q,Y)=>Q+G(Y),0);return{bytesLen:q,encode:(Q)=>{let Y=new Uint8Array(q);for(let X=0,U=0;X<J.length;X++){let W=J[X],M=G(W),z=typeof W==="number"?Q[X]:W.encode(Q[X]);if(n(z,M,$),Y.set(z,U),typeof W!=="number")z.fill(0);U+=M}return Y},decode:(Q)=>{n(Q,q,$);let Y=[];for(let X of J){let U=G(X),W=Q.subarray(0,U);Y.push(typeof X==="number"?W:X.decode(W)),Q=Q.subarray(U)}return Y}}}function vq($,J){let G=J*$.bytesLen;return{bytesLen:G,encode:(q)=>{if(q.length!==J)throw Error(`vecCoder.encode: wrong length=${q.length}. Expected: ${J}`);let Q=new Uint8Array(G);for(let Y=0,X=0;Y<q.length;Y++){let U=$.encode(q[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(q)=>{n(q,G);let Q=[];for(let Y=0;Y<q.length;Y+=$.bytesLen)Q.push($.decode(q.subarray(Y,Y+$.bytesLen)));return Q}}}function N$(...$){for(let J of $)if(Array.isArray(J))for(let G of J)G.fill(0);else J.fill(0)}function MY($){return(1<<$)-1}var nK=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var _U=($)=>{let{newPoly:J,N:G,Q:q,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,W=(K,P=q)=>{let k=K%P|0;return(k>=0?k|0:P+k|0)|0},M=(K,P=q)=>{let k=W(K,P)|0;return(k>P>>1?k-P|0:k)|0};function z(){let K=J(G);for(let P=0;P<G;P++){let k=UY(P,X),m=BigInt(Y)**BigInt(k)%BigInt(q);K[P]=Number(m)|0}return K}let R=z(),O={add:(K,P)=>W((K|0)+(P|0))|0,sub:(K,P)=>W((K|0)-(P|0))|0,mul:(K,P)=>W((K|0)*(P|0))|0,inv:(K)=>{throw Error("not implemented")}},V={N:G,roots:R,invertButterflies:!0,skipStages:U?1:0,brp:!1},w=WY(O,{dit:!1,...V}),j=WY(O,{dit:!0,...V});return{mod:W,smod:M,nttZetas:R,NTT:{encode:(K)=>{return w(K)},decode:(K)=>{j(K);for(let P=0;P<K.length;P++)K[P]=W(Q*K[P]);return K}},bitsCoder:(K,P)=>{let k=MY(K),m=K*(G/8);return{bytesLen:m,encode:(F)=>{let _=new Uint8Array(m);for(let v=0,L=0,y=0,C=0;v<F.length;v++){L|=(P.encode(F[v])&k)<<y,y+=K;for(;y>=8;y-=8,L>>=8)_[C++]=L&MY(y)}return _},decode:(F)=>{let _=J(G);for(let v=0,L=0,y=0,C=0;v<F.length;v++){L|=F[v]<<y,y+=8;for(;y>=K;y-=K,L>>=K)_[C++]=P.decode(L&k)}return _}}}}},L7=($)=>(J,G)=>{if(!G)G=$.blockLen;let q=new Uint8Array(J.length+2);q.set(J);let Q=J.length,Y=new Uint8Array(G),X=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(M,z)=>{return q[Q+0]=M,q[Q+1]=z,X.destroy(),X=$.create({}).update(q),U++,()=>{return W++,X.xofInto(Y)}},clean:()=>{X.destroy(),N$(Y,q)}}},bU=L7(LU);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var _$=256,d0=3329,P7=3303,g7=17,{mod:IG,nttZetas:k7,NTT:uJ,bitsCoder:F7}=_U({N:_$,Q:d0,F:P7,ROOT_OF_UNITY:g7,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),zY={512:{N:_$,Q:d0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:_$,Q:d0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:_$,Q:d0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},_7=($)=>{if($>=12)return{encode:(G)=>G,decode:(G)=>G};let J=2**($-1);return{encode:(G)=>((G<<$)+d0/2)/d0,decode:(G)=>G*d0+J>>>$}},KG=($)=>F7($,_7($));function hJ($,J){for(let G=0;G<_$;G++)$[G]=IG($[G]+J[G])}function b7($,J){for(let G=0;G<_$;G++)$[G]=IG($[G]-J[G])}function m7($,J,G,q,Q){let Y=IG(J*q*Q+$*G),X=IG($*q+J*G);return{c0:Y,c1:X}}function Lq($,J){for(let G=0;G<_$/2;G++){let q=k7[64+(G>>1)];if(G&1)q=-q;let{c0:Q,c1:Y}=m7($[2*G+0],$[2*G+1],J[2*G+0],J[2*G+1],q);$[2*G+0]=Q,$[2*G+1]=Y}return $}function mU($){let J=new Uint16Array(_$);for(let G=0;G<_$;){let q=$();if(q.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;G<_$&&Q+3<=q.length;Q+=3){let Y=(q[Q+0]>>0|q[Q+1]<<8)&4095,X=(q[Q+1]>>4|q[Q+2]<<4)&4095;if(Y<d0)J[G++]=Y;if(G<_$&&X<d0)J[G++]=X}}return J}function AG($,J,G,q){let Q=$(q*_$/4,J,G),Y=new Uint16Array(_$),X=Nq(Q),U=0;for(let W=0,M=0,z=0,R=0;W<X.length;W++){let O=X[W];for(let V=0;V<32;V++)if(z+=O&1,O>>=1,U+=1,U===q)R=z,z=0;else if(U===2*q)Y[M++]=IG(R-z),z=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var x7=($)=>{let{K:J,PRF:G,XOF:q,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:W}=$,M=KG(1),z=KG(W),R=KG(U),O=yJ("publicKey",vq(KG(12),J),32),V=vq(KG(12),J),w=yJ("ciphertext",vq(R,J),z),j=yJ("seed",32,32);return{secretCoder:V,lengths:{secretKey:V.bytesLen,publicKey:O.bytesLen,cipherText:w.bytesLen},keygen:(N)=>{n(N,32,"seed");let f=new Uint8Array(33);f.set(N),f[32]=J;let K=Q(f),[P,k]=j.decode(K),m=[],F=[];for(let L=0;L<J;L++)m.push(uJ.encode(AG(G,k,L,Y)));let _=q(P);for(let L=0;L<J;L++){let y=uJ.encode(AG(G,k,J+L,Y));for(let C=0;C<J;C++){let I=mU(_.get(C,L));hJ(y,Lq(I,m[C]))}F.push(y)}_.clean();let v={publicKey:O.encode([F,P]),secretKey:V.encode(m)};return N$(P,k,m,F,f,K),v},encrypt:(N,f,K)=>{let[P,k]=O.decode(N),m=[];for(let C=0;C<J;C++)m.push(uJ.encode(AG(G,K,C,Y)));let F=q(k),_=new Uint16Array(_$),v=[];for(let C=0;C<J;C++){let I=AG(G,K,J+C,X),S=new Uint16Array(_$);for(let D=0;D<J;D++){let H=mU(F.get(C,D));hJ(S,Lq(H,m[D]))}hJ(I,uJ.decode(S)),v.push(I),hJ(_,Lq(P[C],m[C])),N$(S)}F.clean();let L=AG(G,K,2*J,X);hJ(L,uJ.decode(_));let y=M.decode(f);return hJ(y,L),N$(P,m,_,L),w.encode([v,y])},decrypt:(N,f)=>{let[K,P]=w.decode(N),k=V.decode(f),m=new Uint16Array(_$);for(let F=0;F<J;F++)hJ(m,Lq(k[F],uJ.encode(K[F])));return b7(P,uJ.decode(m)),N$(m,k,K),M.encode(P)}}};function RY($){let J=x7($),{HASH256:G,HASH512:q,KDF:Q}=$,{secretCoder:Y,lengths:X}=J,U=yJ("secretKey",X.secretKey,X.publicKey,32,32),W=32,M=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(z=E0(64))=>{n(z,64,"seed");let{publicKey:R,secretKey:O}=J.keygen(z.subarray(0,32)),V=G(R),w=U.encode([O,R,V,z.subarray(32)]);return N$(O,V),{publicKey:R,secretKey:w}},getPublicKey:(z)=>{let[R,O,V,w]=U.decode(z);return Uint8Array.from(O)},encapsulate:(z,R=E0(32))=>{n(z,X.publicKey,"publicKey"),n(R,32,"message");let O=z.subarray(0,384*$.K),V=Y.encode(Y.decode(FU(O)));if(!Zq(V,O))throw N$(V),Error("ML-KEM.encapsulate: wrong publicKey modulus");N$(V);let w=q.create().update(R).update(G(z)).digest(),j=J.encrypt(z,R,w.subarray(32,64));return N$(w.subarray(32)),{cipherText:j,sharedSecret:w.subarray(0,32)}},decapsulate:(z,R)=>{n(R,U.bytesLen,"secretKey"),n(z,X.cipherText,"cipherText");let O=U.bytesLen-96,V=O+32,w=G(R.subarray(O/2,V));if(!Zq(w,R.subarray(V,V+32)))throw Error("invalid secretKey: hash check failed");let[j,N,f,K]=U.decode(R),P=J.decrypt(z,j),k=q.create().update(P).update(f).digest(),m=k.subarray(0,32),F=J.encrypt(N,P,k.subarray(32,64)),_=Zq(z,F),v=Q.create({dkLen:32}).update(K).update(z).digest();return N$(P,F,!_?m:v),_?m:v}}}function y7($,J,G){return B0.create({dkLen:$}).update(J).update(new Uint8Array([G])).digest()}var VY={HASH256:xJ,HASH512:ZU,KDF:B0,XOF:bU,PRF:y7},Q6=RY({...VY,...zY[512]}),fG=RY({...VY,...zY[768]}),xU=RY({...VY,...zY[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function u7($,J=!1){let{lengths:G,keygen:q}=$;if(J){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");q=(X=E0(G.seed))=>{n(X,G.seed,"seed");let U=Y.isLE?MJ(X):WJ(X),W=Y.toBytes(Y.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:G.secretKey,publicKey:G.publicKey,seed:G.seed},keygen:q,getPublicKey:(Q)=>$.getPublicKey(Q)}}function OY($,J=!1){let G=u7($,J);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...G.lengths,msg:G.lengths.seed,cipherText:G.lengths.publicKey},keygen:G.keygen,getPublicKey:G.getPublicKey,encapsulate(q,Q=E0($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(q,Y),U=$.getPublicKey(Y);return N$(Y),{sharedSecret:X,cipherText:U}},decapsulate(q,Q){let Y=$.getSharedSecret(Q,q);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function BG($,J){return yJ(J,...$.map((G)=>{if(typeof G.lengths[J]!=="number")throw Error("wrong length: "+J);return G.lengths[J]}))}function wY($){return(J,G)=>$(J,{dkLen:G})}function h7($,J,...G){let q=BG(G,"seed"),Q=BG(G,"publicKey");if($===void 0)$=q.bytesLen;H$($);function Y(X){n(X,$);let U=q.decode(J(X,q.bytesLen)),W=G.map((R,O)=>R.keygen(U[O])),M=W.map((R)=>R.secretKey),z=W.map((R)=>R.publicKey);return{secretKey:M,publicKey:z}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=E0($)){let{publicKey:U,secretKey:W}=Y(X),M=Q.encode(U);return N$(U),N$(W),{secretKey:X,publicKey:M}},expandDecapsulationKey:Y,realSeedLen:$}}function Pq($,J,G,q,...Q){let Y=h7($,G,...Q),X=BG(Q,"cipherText"),U=BG(Q,"publicKey"),W=BG(Q,"msg");if(J===void 0)J=W.bytesLen;return H$(J),{lengths:{...Y.info.lengths,msg:J,msgRand:W.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(M,z=E0(W.bytesLen)){let R=U.decode(M),O=W.decode(z),V=Q.map((f,K)=>f.encapsulate(R[K],O[K])),w=V.map((f)=>f.sharedSecret),j=V.map((f)=>f.cipherText),N={sharedSecret:q(R,j,w),cipherText:X.encode(j)};return N$(w,j),N},decapsulate(M,z){let R=X.decode(M),{publicKey:O,secretKey:V}=Y.expandDecapsulationKey(z),w=Q.map((j,N)=>j.decapsulate(R[N],V[N]));return q(O,R,w)}}}function yU($,J,G,q,Q){return G0(q),G0(Q),Pq(32,32,wY(q),(Y,X,U)=>Q(V$(U[0],U[1],X[1],Y[1],zJ($))),J,G)}var N6=yU("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",fG,OY(QY,!0),B0,xJ),j6=yU("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",xU,OY(DU,!0),B0,xJ);function l7($,J,G,q,Q){return G0(q),G0(Q),Pq(32,32,wY(q),(Y,X,U)=>{let W=V$(U[0],U[1],X[0],Y[0],X[1],Y[1],zJ($)),M=32,z=V$(zJ("hybrid_prk"),W),R=KU(Q,z),O=V$(V8(32,2),zJ("shared_secret"),zJ("")),V=AU(Q,R,O,32);return N$(R,O,z,W),V},J,G)}var uU=OY(jU),D6=l7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",fG,uU,B0,Sq),c7=(()=>Pq(32,32,wY(B0),($,J,G)=>xJ(V$(G[0],G[1],J[1],$[1],zJ("\\.//^\\"))),fG,uU))();function d7($,J,G,q){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let z=0,R=J;;z=R,R+=J){if(R>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(z,R),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),M=$.getPublicKey(W,!1);return{secretKey:W,publicKey:M}}return{lengths:{secretKey:J,publicKey:G,seed:q,msg:q,cipherText:G},keygen(X=E0(q)){return n(X,q,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=E0(q)){n(U,q,"rand");let{secretKey:W}=Y(U),M=this.decapsulate(X,W),z=$.getPublicKey(W,!1);return N$(W),{sharedSecret:M,cipherText:z}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function r7($,J,G,q){let{secretKey:Q,publicKeyUncompressed:Y}=G.lengths;if(!Q||!Y)throw Error("wrong curve");let X=d7(G,Q,Y,q),U=64,W=U+q;return Pq(32,32,(M)=>{n(M,32);let z=B0(M,{dkLen:W}),R=z.subarray(0,U),O=z.subarray(U,W);return V$(R,O)},(M,z,R)=>xJ(V$(R[0],R[1],z[1],M[1],zJ($))),J,X)}var p7=(()=>r7("MLKEM768-P256",fG,QY,128))();var gq=c7,hU=p7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Y$=($,J,G)=>A$($,J,G),jY=z$,D8=Gq,S$=(...$)=>DQ(...$),H8=($)=>t8($),K8=wQ,A8=($)=>_0($),Fq=BigInt(0),NY=BigInt(1);function r0($,J=""){if(typeof $!=="boolean"){let G=J&&`"${J}" `;throw TypeError(G+"expected boolean, got type="+typeof $)}return $}function _q($){if(typeof $==="bigint"){if(!kq($))throw RangeError("positive bigint expected, got "+$)}else jY($);return $}function C0($,J=""){if(typeof $!=="number"){let G=J&&`"${J}" `;throw TypeError(G+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let G=J&&`"${J}" `;throw RangeError(G+"expected safe integer, got "+$)}}function EG($){let J=_q($).toString(16);return J.length&1?"0"+J:J}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?Fq:BigInt("0x"+$)}function lJ($){return lU(Gq($))}function R0($){return lU(Gq(NJ(A$($)).reverse()))}function bq($,J){if(z$(J),J===0)throw RangeError("zero length");$=_q($);let G=$.toString(16);if(G.length>J*2)throw RangeError("number too large");return t8(G.padStart(J*2,"0"))}function CG($,J){return bq($,J).reverse()}function cU($,J){if($=Y$($),J=Y$(J),$.length!==J.length)return!1;let G=0;for(let q=0;q<$.length;q++)G|=$[q]^J[q];return G===0}function NJ($){return Uint8Array.from(Y$($))}function mq($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(J,G)=>{let q=J.charCodeAt(0);if(J.length!==1||q>127)throw RangeError(`string contains non-ASCII character "${$[G]}" with code ${q} at position ${G}`);return q})}var kq=($)=>typeof $==="bigint"&&Fq<=$;function n7($,J,G){return kq($)&&kq(J)&&kq(G)&&J<=$&&$<G}function p0($,J,G,q){if(!n7(J,G,q))throw RangeError("expected valid "+$+": "+G+" <= n < "+q+", got "+J)}function I8($){if($<Fq)throw Error("expected non-negative bigint, got "+$);let J;for(J=0;$>Fq;$>>=NY,J+=1);return J}var SG=($)=>(NY<<BigInt($))-NY;function dU($,J,G){if(z$($,"hashLen"),z$(J,"qByteLen"),typeof G!=="function")throw TypeError("hmacFn must be a function");let q=(N)=>new Uint8Array(N),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=q($),M=q($),z=0,R=()=>{W.fill(1),M.fill(0),z=0},O=(...N)=>G(M,S$(W,...N)),V=(N=Q)=>{if(M=O(Y,N),W=O(),N.length===0)return;M=O(X,N),W=O()},w=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let N=0,f=[];while(N<J){W=O();let K=W.slice();f.push(K),N+=W.length}return S$(...f)};return(N,f)=>{R(),V(N);let K=void 0;while((K=f(w()))===void 0)V();return R(),K}}function Q0($,J={},G={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function q(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let W=$[Y];if(U&&W===void 0)return;let M=typeof W;if(M!==X||W===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${M}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>q(U,W,X));Q(J,!1),Q(G,!0)}var DY=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=BigInt(0),M$=BigInt(1),cJ=BigInt(2),oU=BigInt(3),iU=BigInt(4),aU=BigInt(5),o7=BigInt(7),sU=BigInt(8),i7=BigInt(9),tU=BigInt(16);function U$($,J){if(J<=T$)throw Error("mod: expected positive modulus, got "+J);let G=$%J;return G>=T$?G:J+G}function Y0($,J,G){if(J<T$)throw Error("pow2: expected non-negative exponent, got "+J);let q=$;while(J-- >T$)q*=q,q%=G;return q}function rU($,J){if($===T$)throw Error("invert: expected non-zero number");if(J<=T$)throw Error("invert: expected positive modulus, got "+J);let G=U$($,J),q=J,Q=T$,Y=M$,X=M$,U=T$;while(G!==T$){let M=q/G,z=q-G*M,R=Q-X*M,O=Y-U*M;q=G,G=z,Q=X,Y=U,X=R,U=O}if(q!==M$)throw Error("invert: does not exist");return U$(Q,J)}function HY($,J,G){let q=$;if(!q.eql(q.sqr(J),G))throw Error("Cannot find square root")}function eU($,J){let G=$,q=(G.ORDER+M$)/iU,Q=G.pow(J,q);return HY(G,Q,J),Q}function a7($,J){let G=$,q=(G.ORDER-aU)/sU,Q=G.mul(J,cJ),Y=G.pow(Q,q),X=G.mul(J,Y),U=G.mul(G.mul(X,cJ),Y),W=G.mul(X,G.sub(U,G.ONE));return HY(G,W,J),W}function s7($){let J=xq($),G=$W($),q=G(J,J.neg(J.ONE)),Q=G(J,q),Y=G(J,J.neg(q)),X=($+o7)/tU;return(U,W)=>{let M=U,z=M.pow(W,X),R=M.mul(z,q),O=M.mul(z,Q),V=M.mul(z,Y),w=M.eql(M.sqr(R),W),j=M.eql(M.sqr(O),W);z=M.cmov(z,R,w),R=M.cmov(V,O,j);let N=M.eql(M.sqr(R),W),f=M.cmov(z,R,N);return HY(M,f,W),f}}function $W($){if($<oU)throw Error("sqrt is not defined for small field");let J=$-M$,G=0;while(J%cJ===T$)J/=cJ,G++;let q=cJ,Q=xq($);while(pU(Q,q)===1)if(q++>1000)throw Error("Cannot find square root: probably non-prime P");if(G===1)return eU;let Y=Q.pow(q,J),X=(J+M$)/cJ;return function(W,M){let z=W;if(z.is0(M))return M;if(pU(z,M)!==1)throw Error("Cannot find square root");let R=G,O=z.mul(z.ONE,Y),V=z.pow(M,J),w=z.pow(M,X);while(!z.eql(V,z.ONE)){if(z.is0(V))return z.ZERO;let j=1,N=z.sqr(V);while(!z.eql(N,z.ONE))if(j++,N=z.sqr(N),j===R)throw Error("Cannot find square root");let f=M$<<BigInt(R-j-1),K=z.pow(O,f);R=j,O=z.sqr(K),V=z.mul(V,O),w=z.mul(w,K)}return w}}function t7($){if($%iU===oU)return eU;if($%sU===aU)return a7;if($%tU===i7)return s7($);return $W($)}var n0=($,J)=>(U$($,J)&M$)===M$,e7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function KY($){let J={ORDER:"bigint",BYTES:"number",BITS:"number"},G=e7.reduce((q,Q)=>{return q[Q]="function",q},J);if(Q0($,G),C0($.BYTES,"BYTES"),C0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=M$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function $5($,J,G){let q=$;if(G<T$)throw Error("invalid exponent, negatives unsupported");if(G===T$)return q.ONE;if(G===M$)return J;let Q=q.ONE,Y=J;while(G>T$){if(G&M$)Q=q.mul(Q,Y);Y=q.sqr(Y),G>>=M$}return Q}function TG($,J,G=!1){let q=$,Q=Array(J.length).fill(G?q.ZERO:void 0),Y=J.reduce((U,W,M)=>{if(q.is0(W))return U;return Q[M]=U,q.mul(U,W)},q.ONE),X=q.inv(Y);return J.reduceRight((U,W,M)=>{if(q.is0(W))return U;return Q[M]=q.mul(U,Q[M]),q.mul(U,W)},X),Q}function pU($,J){let G=$,q=(G.ORDER-M$)/cJ,Q=G.pow(J,q),Y=G.eql(Q,G.ONE),X=G.eql(Q,G.ZERO),U=G.eql(Q,G.neg(G.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function J5($,J){if(J!==void 0)jY(J);if($<=T$)throw Error("invalid n length: expected positive n, got "+$);if(J!==void 0&&J<1)throw Error("invalid n length: expected positive bit length, got "+J);let G=I8($);if(J!==void 0&&J<G)throw Error(`invalid n length: expected bit length (${G}) >= n.length (${J})`);let q=J!==void 0?J:G,Q=Math.ceil(q/8);return{nBitLength:q,nByteLength:Q}}var nU=new WeakMap;class AY{ORDER;BITS;BYTES;isLE;ZERO=T$;ONE=M$;_lengths;_mod;constructor($,J={}){if($<=M$)throw Error("invalid field: expected ORDER > 1, got "+$);let G=void 0;if(this.isLE=!1,J!=null&&typeof J==="object"){if(typeof J.BITS==="number")G=J.BITS;if(typeof J.sqrt==="function")Object.defineProperty(this,"sqrt",{value:J.sqrt,enumerable:!0});if(typeof J.isLE==="boolean")this.isLE=J.isLE;if(J.allowedLengths)this._lengths=Object.freeze(J.allowedLengths.slice());if(typeof J.modFromBytes==="boolean")this._mod=J.modFromBytes}let{nBitLength:q,nByteLength:Q}=J5($,G);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=q,this.BYTES=Q,Object.freeze(this)}create($){return U$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return T$<=$&&$<this.ORDER}is0($){return $===T$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&M$)===M$}neg($){return U$(-$,this.ORDER)}eql($,J){return $===J}sqr($){return U$($*$,this.ORDER)}add($,J){return U$($+J,this.ORDER)}sub($,J){return U$($-J,this.ORDER)}mul($,J){return U$($*J,this.ORDER)}pow($,J){return $5(this,$,J)}div($,J){return U$($*rU(J,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,J){return $+J}subN($,J){return $-J}mulN($,J){return $*J}inv($){return rU($,this.ORDER)}sqrt($){let J=nU.get(this);if(!J)nU.set(this,J=t7(this.ORDER));return J(this,$)}toBytes($){return this.isLE?CG($,this.BYTES):bq($,this.BYTES)}fromBytes($,J=!1){Y$($);let{_lengths:G,BYTES:q,isLE:Q,ORDER:Y,_mod:X}=this;if(G){if($.length<1||!G.includes($.length)||$.length>q)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let W=new Uint8Array(q);W.set($,Q?0:W.length-$.length),$=W}if($.length!==q)throw Error("Field.fromBytes: expected "+q+" bytes, got "+$.length);let U=Q?R0($):lJ($);if(X)U=U$(U,Y);if(!J){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return TG(this,$)}cmov($,J,G){return r0(G,"condition"),G?J:$}}Object.freeze(AY.prototype);function xq($,J={}){return new AY($,J)}function JW($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=M$)throw Error("field order must be greater than 1");let J=I8($-M$);return Math.ceil(J/8)}function IY($){let J=JW($);return J+Math.ceil(J/2)}function GW($,J,G=!1){Y$($);let q=$.length,Q=JW(J),Y=Math.max(IY(J),16);if(q<Y||q>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+q);let X=G?R0($):lJ($),U=U$(X,J-M$)+M$;return G?CG(U,Q):bq(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var f8=BigInt(0),dJ=BigInt(1);function ZG($,J){let G=J.negate();return $?G:J}function rJ($,J){let G=TG($.Fp,J.map((q)=>q.Z));return J.map((q,Q)=>$.fromAffine(q.toAffine(G[Q])))}function XW($,J){if(!Number.isSafeInteger($)||$<=0||$>J)throw Error("invalid window size, expected [1.."+J+"], got W="+$)}function fY($,J){XW($,J);let G=Math.ceil(J/$)+1,q=2**($-1),Q=2**$,Y=SG($),X=BigInt($);return{windows:G,windowSize:q,mask:Y,maxNumber:Q,shiftBy:X}}function qW($,J,G){let{windowSize:q,mask:Q,maxNumber:Y,shiftBy:X}=G,U=Number($&Q),W=$>>X;if(U>q)U-=Y,W+=dJ;let M=J*q,z=M+Math.abs(U)-1,R=U===0,O=U<0,V=J%2!==0;return{nextN:W,offset:z,isZero:R,isNeg:O,isNegF:V,offsetF:M}}var BY=new WeakMap,UW=new WeakMap;function EY($){return UW.get($)||1}function QW($){if($!==f8)throw Error("invalid wNAF")}class vG{BASE;ZERO;Fn;bits;constructor($,J){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=J}_unsafeLadder($,J,G=this.ZERO){let q=$;while(J>f8){if(J&dJ)G=G.add(q);q=q.double(),J>>=dJ}return G}precomputeWindow($,J){let{windows:G,windowSize:q}=fY(J,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<G;U++){X=Y,Q.push(X);for(let W=1;W<q;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,J,G){if(!this.Fn.isValid(G))throw Error("invalid scalar");let q=this.ZERO,Q=this.BASE,Y=fY($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:M,isNeg:z,isNegF:R,offsetF:O}=qW(G,X,Y);if(G=U,M)Q=Q.add(ZG(R,J[O]));else q=q.add(ZG(z,J[W]))}return QW(G),{p:q,f:Q}}wNAFUnsafe($,J,G,q=this.ZERO){let Q=fY($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(G===f8)break;let{nextN:X,offset:U,isZero:W,isNeg:M}=qW(G,Y,Q);if(G=X,W)continue;else{let z=J[U];q=q.add(M?z.negate():z)}}return QW(G),q}getPrecomputes($,J,G){let q=BY.get(J);if(!q){if(q=this.precomputeWindow(J,$),$!==1){if(typeof G==="function")q=G(q);BY.set(J,q)}}return q}cached($,J,G){let q=EY($);return this.wNAF(q,this.getPrecomputes(q,$,G),J)}unsafe($,J,G,q){let Q=EY($);if(Q===1)return this._unsafeLadder($,J,q);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,G),J,q)}createCache($,J){XW(J,this.bits),UW.set($,J),BY.delete($)}hasCache($){return EY($)!==1}}function WW($,J,G,q){let Q=J,Y=$.ZERO,X=$.ZERO;while(G>f8||q>f8){if(G&dJ)Y=Y.add(Q);if(q&dJ)X=X.add(Q);Q=Q.double(),G>>=dJ,q>>=dJ}return{p1:Y,p2:X}}function YW($,J,G){if(J){if(J.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return KY(J),J}else return xq($,{isLE:G})}function yq($,J,G={},q){if(q===void 0)q=$==="edwards";if(!J||typeof J!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let M=J[W];if(!(typeof M==="bigint"&&M>f8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=YW(J.p,G.Fp,q),Y=YW(J.n,G.Fn,q),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(J[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return J=Object.freeze(Object.assign({},J)),{CURVE:J,Fp:Q,Fn:Y}}function LG($,J){return function(q){let Q=$(q);return{secretKey:Q,publicKey:J(Q)}}}function PG($,J){if(C0($),C0(J),J<0||J>4)throw Error("invalid I2OSP length: "+J);if($<0||$>2**(8*J)-1)throw Error("invalid I2OSP input: "+$);let G=Array.from({length:J}).fill(0);for(let q=J-1;q>=0;q--)G[q]=$&255,$>>>=8;return new Uint8Array(G)}function G5($,J){let G=new Uint8Array($.length);for(let q=0;q<$.length;q++)G[q]=$[q]^J[q];return G}function q5($){if(!K8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let J=typeof $==="string"?mq($):$;if(J.length===0)throw Error("DST must be non-empty");return J}function CY($,J,G,q){if(Y$($),C0(G),J=q5(J),J.length>255)J=q(S$(mq("H2C-OVERSIZE-DST-"),J));let{outputLen:Q,blockLen:Y}=q,X=Math.ceil(G/Q);if(G>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=S$(J,PG(J.length,1)),W=new Uint8Array(Y),M=PG(G,2),z=Array(X),R=q(S$(W,$,M,PG(0,1),U));z[0]=q(S$(R,PG(1,1),U));for(let V=1;V<X;V++){let w=[G5(R,z[V-1]),PG(V+1,1),U];z[V]=q(S$(...w))}return S$(...z).slice(0,G)}var MW="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zW=($,J)=>($+($>=0?J:-J)/VW)/J;function Q5($,J,G){p0("scalar",$,S0,G);let[[q,Q],[Y,X]]=J,U=zW(X*$,G),W=zW(-Q*$,G),M=$-U*q-W*Y,z=-U*Q-W*X,R=M<S0,O=z<S0;if(R)M=-M;if(O)z=-z;let V=SG(Math.ceil(I8(G)/2))+jJ;if(M<S0||M>=V||z<S0||z>=V)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:R,k1:M,k2neg:O,k2:z}}function TY($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function SY($,J){Q0($);let G={};for(let q of Object.keys(J))G[q]=$[q]===void 0?J[q]:$[q];if(r0(G.lowS,"lowS"),r0(G.prehash,"prehash"),G.format!==void 0)TY(G.format);return G}class RW extends Error{constructor($=""){super($)}}var V0={Err:RW,_tlv:{encode:($,J)=>{let{Err:G}=V0;if(C0($,"tag"),$<0||$>255)throw new G("tlv.encode: wrong tag");if(typeof J!=="string")throw TypeError('"data" expected string, got type='+typeof J);if(J.length&1)throw new G("tlv.encode: unpadded data");let q=J.length/2,Q=EG(q);if(Q.length/2&128)throw new G("tlv.encode: long form length too big");let Y=q>127?EG(Q.length/2|128):"";return EG($)+Y+Q+J},decode($,J){let{Err:G}=V0;J=Y$(J,void 0,"DER data");let q=0;if($<0||$>255)throw new G("tlv.encode: wrong tag");if(J.length<2||J[q++]!==$)throw new G("tlv.decode: wrong tlv");let Q=J[q++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new G("tlv.decode(long): indefinite length not supported");if(W>4)throw new G("tlv.decode(long): byte length is too big");let M=J.subarray(q,q+W);if(M.length!==W)throw new G("tlv.decode: length bytes not complete");if(M[0]===0)throw new G("tlv.decode(long): zero leftmost byte");for(let z of M)X=X<<8|z;if(q+=W,X<128)throw new G("tlv.decode(long): not minimal encoding")}let U=J.subarray(q,q+X);if(U.length!==X)throw new G("tlv.decode: wrong value length");return{v:U,l:J.subarray(q+X)}}},_int:{encode($){let{Err:J}=V0;if(_q($),$<S0)throw new J("integer: negative integers are not allowed");let G=EG($);if(Number.parseInt(G[0],16)&8)G="00"+G;if(G.length&1)throw new J("unexpected DER parsing assertion: unpadded hex");return G},decode($){let{Err:J}=V0;if($.length<1)throw new J("invalid signature integer: empty");if($[0]&128)throw new J("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new J("invalid signature integer: unnecessary leading zero");return lJ($)}},toSig($){let{Err:J,_int:G,_tlv:q}=V0,Q=Y$($,void 0,"signature"),{v:Y,l:X}=q.decode(48,Q);if(X.length)throw new J("invalid signature: left bytes after parsing");let{v:U,l:W}=q.decode(2,Y),{v:M,l:z}=q.decode(2,W);if(z.length)throw new J("invalid signature: left bytes after parsing");return{r:G.decode(U),s:G.decode(M)}},hexFromSig($){let{_tlv:J,_int:G}=V0,q=J.encode(2,G.encode($.r)),Q=J.encode(2,G.encode($.s)),Y=q+Q;return J.encode(48,Y)}};Object.freeze(V0._tlv);Object.freeze(V0._int);Object.freeze(V0);var S0=BigInt(0),jJ=BigInt(1),VW=BigInt(2),uq=BigInt(3),Y5=BigInt(4);function OW($,J={}){let G=yq("weierstrass",$,J),q=G.Fp,Q=G.Fn,Y=G.CURVE,{h:X,n:U}=Y;Q0(J,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:M}=J;if(W){if(!q.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=NW(q,Q);function R(){if(!q.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function O(C,I,S){if(M&&I.is0())return Uint8Array.of(0);let{x:D,y:H}=I.toAffine(),B=q.toBytes(D);if(r0(S,"isCompressed"),S){R();let E=!q.isOdd(H);return S$(wW(E),B)}else return S$(Uint8Array.of(4),B,q.toBytes(H))}function V(C){Y$(C,void 0,"Point");let{publicKey:I,publicKeyUncompressed:S}=z,D=C.length,H=C[0],B=C.subarray(1);if(M&&D===1&&H===0)return{x:q.ZERO,y:q.ZERO};if(D===I&&(H===2||H===3)){let E=q.fromBytes(B);if(!q.isValid(E))throw Error("bad point: is not on curve, wrong x");let A=N(E),T;try{T=q.sqrt(A)}catch(x){let l=x instanceof Error?": "+x.message:"";throw Error("bad point: is not on curve, sqrt error"+l)}R();let Z=q.isOdd(T);if((H&1)===1!==Z)T=q.neg(T);return{x:E,y:T}}else if(D===S&&H===4){let E=q.BYTES,A=q.fromBytes(B.subarray(0,E)),T=q.fromBytes(B.subarray(E,E*2));if(!f(A,T))throw Error("bad point: is not on curve");return{x:A,y:T}}else throw Error(`bad point: got length ${D}, expected compressed=${I} or uncompressed=${S}`)}let w=J.toBytes===void 0?O:J.toBytes,j=J.fromBytes===void 0?V:J.fromBytes;function N(C){let I=q.sqr(C),S=q.mul(I,C);return q.add(q.add(S,q.mul(C,Y.a)),Y.b)}function f(C,I){let S=q.sqr(I),D=N(C);return q.eql(S,D)}if(!f(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let K=q.mul(q.pow(Y.a,uq),Y5),P=q.mul(q.sqr(Y.b),BigInt(27));if(q.is0(q.add(K,P)))throw Error("bad curve params: a or b");function k(C,I,S=!1){if(!q.isValid(I)||S&&q.is0(I))throw Error(`bad point coordinate ${C}`);return I}function m(C){if(!(C instanceof v))throw Error("Weierstrass Point expected")}function F(C){if(!W||!W.basises)throw Error("no endo");return Q5(C,W.basises,Q.ORDER)}function _(C,I,S,D,H){return S=new v(q.mul(S.X,C),S.Y,S.Z),I=ZG(D,I),S=ZG(H,S),I.add(S)}class v{static BASE=new v(Y.Gx,Y.Gy,q.ONE);static ZERO=new v(q.ZERO,q.ONE,q.ZERO);static Fp=q;static Fn=Q;X;Y;Z;constructor(C,I,S){this.X=k("x",C),this.Y=k("y",I,!0),this.Z=k("z",S),Object.freeze(this)}static CURVE(){return Y}static fromAffine(C){let{x:I,y:S}=C||{};if(!C||!q.isValid(I)||!q.isValid(S))throw Error("invalid affine point");if(C instanceof v)throw Error("projective point not allowed");if(q.is0(I)&&q.is0(S))return v.ZERO;return new v(I,S,q.ONE)}static fromBytes(C){let I=v.fromAffine(j(Y$(C,void 0,"point")));return I.assertValidity(),I}static fromHex(C){return v.fromBytes(H8(C))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(C=8,I=!0){if(y.createCache(this,C),!I)this.multiply(uq);return this}assertValidity(){let C=this;if(C.is0()){if(J.allowInfinityPoint&&q.is0(C.X)&&q.eql(C.Y,q.ONE)&&q.is0(C.Z))return;throw Error("bad point: ZERO")}let{x:I,y:S}=C.toAffine();if(!q.isValid(I)||!q.isValid(S))throw Error("bad point: x or y not field elements");if(!f(I,S))throw Error("bad point: equation left != right");if(!C.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:C}=this.toAffine();if(!q.isOdd)throw Error("Field doesn't support isOdd");return!q.isOdd(C)}equals(C){m(C);let{X:I,Y:S,Z:D}=this,{X:H,Y:B,Z:E}=C,A=q.eql(q.mul(I,E),q.mul(H,D)),T=q.eql(q.mul(S,E),q.mul(B,D));return A&&T}negate(){return new v(this.X,q.neg(this.Y),this.Z)}double(){let{a:C,b:I}=Y,S=q.mul(I,uq),{X:D,Y:H,Z:B}=this,E=q.ZERO,A=q.ZERO,T=q.ZERO,Z=q.mul(D,D),g=q.mul(H,H),x=q.mul(B,B),l=q.mul(D,H);return l=q.add(l,l),T=q.mul(D,B),T=q.add(T,T),E=q.mul(C,T),A=q.mul(S,x),A=q.add(E,A),E=q.sub(g,A),A=q.add(g,A),A=q.mul(E,A),E=q.mul(l,E),T=q.mul(S,T),x=q.mul(C,x),l=q.sub(Z,x),l=q.mul(C,l),l=q.add(l,T),T=q.add(Z,Z),Z=q.add(T,Z),Z=q.add(Z,x),Z=q.mul(Z,l),A=q.add(A,Z),x=q.mul(H,B),x=q.add(x,x),Z=q.mul(x,l),E=q.sub(E,Z),T=q.mul(x,g),T=q.add(T,T),T=q.add(T,T),new v(E,A,T)}add(C){m(C);let{X:I,Y:S,Z:D}=this,{X:H,Y:B,Z:E}=C,A=q.ZERO,T=q.ZERO,Z=q.ZERO,g=Y.a,x=q.mul(Y.b,uq),l=q.mul(I,H),d=q.mul(S,B),a=q.mul(D,E),e=q.add(I,S),s=q.add(H,B);e=q.mul(e,s),s=q.add(l,d),e=q.sub(e,s),s=q.add(I,D);let o=q.add(H,E);return s=q.mul(s,o),o=q.add(l,a),s=q.sub(s,o),o=q.add(S,D),A=q.add(B,E),o=q.mul(o,A),A=q.add(d,a),o=q.sub(o,A),Z=q.mul(g,s),A=q.mul(x,a),Z=q.add(A,Z),A=q.sub(d,Z),Z=q.add(d,Z),T=q.mul(A,Z),d=q.add(l,l),d=q.add(d,l),a=q.mul(g,a),s=q.mul(x,s),d=q.add(d,a),a=q.sub(l,a),a=q.mul(g,a),s=q.add(s,a),l=q.mul(d,s),T=q.add(T,l),l=q.mul(o,s),A=q.mul(e,A),A=q.sub(A,l),l=q.mul(e,d),Z=q.mul(o,Z),Z=q.add(Z,l),new v(A,T,Z)}subtract(C){return m(C),this.add(C.negate())}is0(){return this.equals(v.ZERO)}multiply(C){let{endo:I}=J;if(!Q.isValidNot0(C))throw RangeError("invalid scalar: out of range");let S,D,H=(B)=>y.cached(this,B,(E)=>rJ(v,E));if(I){let{k1neg:B,k1:E,k2neg:A,k2:T}=F(C),{p:Z,f:g}=H(E),{p:x,f:l}=H(T);D=g.add(l),S=_(I.beta,Z,x,B,A)}else{let{p:B,f:E}=H(C);S=B,D=E}return rJ(v,[S,D])[0]}multiplyUnsafe(C){let{endo:I}=J,S=this,D=C;if(!Q.isValid(D))throw RangeError("invalid scalar: out of range");if(D===S0||S.is0())return v.ZERO;if(D===jJ)return S;if(y.hasCache(this))return this.multiply(D);if(I){let{k1neg:H,k1:B,k2neg:E,k2:A}=F(D),{p1:T,p2:Z}=WW(v,S,B,A);return _(I.beta,T,Z,H,E)}else return y.unsafe(S,D)}toAffine(C){let I=this,S=C,{X:D,Y:H,Z:B}=I;if(q.eql(B,q.ONE))return{x:D,y:H};let E=I.is0();if(S==null)S=E?q.ONE:q.inv(B);let A=q.mul(D,S),T=q.mul(H,S),Z=q.mul(B,S);if(E)return{x:q.ZERO,y:q.ZERO};if(!q.eql(Z,q.ONE))throw Error("invZ was invalid");return{x:A,y:T}}isTorsionFree(){let{isTorsionFree:C}=J;if(X===jJ)return!0;if(C)return C(v,this);return y.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:C}=J;if(X===jJ)return this;if(C)return C(v,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===jJ)return this.is0();return this.clearCofactor().is0()}toBytes(C=!0){return r0(C,"isCompressed"),this.assertValidity(),w(v,this,C)}toHex(C=!0){return D8(this.toBytes(C))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let L=Q.BITS,y=new vG(v,J.endo?Math.ceil(L/2):L);if(L>=8)v.BASE.precompute(8);return Object.freeze(v.prototype),Object.freeze(v),v}function wW($){return Uint8Array.of($?2:3)}function NW($,J){return{secretKey:J.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*J.BYTES}}function X5($,J={}){let{Fn:G}=$,q=J.randomBytes===void 0?A8:J.randomBytes,Q=Object.assign(NW($.Fp,G),{seed:Math.max(IY(G.ORDER),16)});function Y(V){try{let w=G.fromBytes(V);return G.isValidNot0(w)}catch(w){return!1}}function X(V,w){let{publicKey:j,publicKeyUncompressed:N}=Q;try{let f=V.length;if(w===!0&&f!==j)return!1;if(w===!1&&f!==N)return!1;return!!$.fromBytes(V)}catch(f){return!1}}function U(V){return V=V===void 0?q(Q.seed):V,GW(Y$(V,Q.seed,"seed"),G.ORDER)}function W(V,w=!0){return $.BASE.multiply(G.fromBytes(V)).toBytes(w)}function M(V){let{secretKey:w,publicKey:j,publicKeyUncompressed:N}=Q,f=G._lengths;if(!K8(V))return;let K=Y$(V,void 0,"key").length,P=K===j||K===N,k=K===w||!!f?.includes(K);if(P&&k)return;return P}function z(V,w,j=!0){if(M(V)===!0)throw Error("first arg must be private key");if(M(w)===!1)throw Error("second arg must be public key");let N=G.fromBytes(V);return $.fromBytes(w).multiply(N).toBytes(j)}let R={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},O=LG(U,W);return Object.freeze(R),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:O,Point:$,utils:R,lengths:Q})}function jW($,J,G={}){let q=J;F0(q),Q0(G,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),G=Object.assign({},G);let Q=G.randomBytes===void 0?A8:G.randomBytes,Y=G.hmac===void 0?(H,B)=>K0(q,H,B):G.hmac,{Fp:X,Fn:U}=$,{ORDER:W,BITS:M}=U,{keygen:z,getPublicKey:R,getSharedSecret:O,utils:V,lengths:w}=X5($,G),j={prehash:!0,lowS:typeof G.lowS==="boolean"?G.lowS:!0,format:"compact",extraEntropy:!1},N=W*VW+jJ<X.ORDER;function f(H){let B=W>>jJ;return H>B}function K(H,B){if(!U.isValidNot0(B))throw Error(`invalid signature ${H}: out of range 1..Point.Fn.ORDER`);return B}function P(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(H,B){TY(B);let E=w.signature,A=B==="compact"?E:B==="recovered"?E+1:void 0;return Y$(H,A)}class m{r;s;recovery;constructor(H,B,E){if(this.r=K("r",H),this.s=K("s",B),E!=null){if(P(),![0,1,2,3].includes(E))throw Error("invalid recovery id");this.recovery=E}Object.freeze(this)}static fromBytes(H,B=j.format){k(H,B);let E;if(B==="der"){let{r:g,s:x}=V0.toSig(Y$(H));return new m(g,x)}if(B==="recovered")E=H[0],B="compact",H=H.subarray(1);let A=w.signature/2,T=H.subarray(0,A),Z=H.subarray(A,A*2);return new m(U.fromBytes(T),U.fromBytes(Z),E)}static fromHex(H,B){return this.fromBytes(H8(H),B)}assertRecovery(){let{recovery:H}=this;if(H==null)throw Error("invalid recovery id: must be present");return H}addRecoveryBit(H){return new m(this.r,this.s,H)}recoverPublicKey(H){let{r:B,s:E}=this,A=this.assertRecovery(),T=A===2||A===3?B+W:B;if(!X.isValid(T))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Z=X.toBytes(T),g=$.fromBytes(S$(wW((A&1)===0),Z)),x=U.inv(T),l=_(Y$(H,void 0,"msgHash")),d=U.create(-l*x),a=U.create(E*x),e=$.BASE.multiplyUnsafe(d).add(g.multiplyUnsafe(a));if(e.is0())throw Error("invalid recovery: point at infinify");return e.assertValidity(),e}hasHighS(){return f(this.s)}toBytes(H=j.format){if(TY(H),H==="der")return H8(V0.hexFromSig(this));let{r:B,s:E}=this,A=U.toBytes(B),T=U.toBytes(E);if(H==="recovered")return P(),S$(Uint8Array.of(this.assertRecovery()),A,T);return S$(A,T)}toHex(H){return D8(this.toBytes(H))}}Object.freeze(m.prototype),Object.freeze(m);let F=G.bits2int===void 0?function(B){if(B.length>8192)throw Error("input is too large");let E=lJ(B),A=B.length*8-M;return A>0?E>>BigInt(A):E}:G.bits2int,_=G.bits2int_modN===void 0?function(B){return U.create(F(B))}:G.bits2int_modN,v=SG(M);function L(H){return p0("num < 2^"+M,H,S0,v),U.toBytes(H)}function y(H,B){return Y$(H,void 0,"message"),B?Y$(q(H),void 0,"prehashed message"):H}function C(H,B,E){let{lowS:A,prehash:T,extraEntropy:Z}=SY(E,j);H=y(H,T);let g=_(H),x=U.fromBytes(B);if(!U.isValidNot0(x))throw Error("invalid private key");let l=[L(x),L(g)];if(Z!=null&&Z!==!1){let s=Z===!0?Q(w.secretKey):Z;l.push(Y$(s,void 0,"extraEntropy"))}let d=S$(...l),a=g;function e(s){let o=F(s);if(!U.isValidNot0(o))return;let X$=U.inv(o),D$=$.BASE.multiply(o).toAffine(),d$=U.create(D$.x);if(d$===S0)return;let X0=U.create(X$*U.create(a+d$*x));if(X0===S0)return;let U0=(D$.x===d$?0:2)|Number(D$.y&jJ),$J=X0;if(A&&f(X0))$J=U.neg(X0),U0^=1;return new m(d$,$J,N?void 0:U0)}return{seed:d,k2sig:e}}function I(H,B,E={}){let{seed:A,k2sig:T}=C(H,B,E);return dU(q.outputLen,U.BYTES,Y)(A,T).toBytes(E.format)}function S(H,B,E,A={}){let{lowS:T,prehash:Z,format:g}=SY(A,j);if(E=Y$(E,void 0,"publicKey"),B=y(B,Z),!K8(H)){let x=H instanceof m?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}k(H,g);try{let x=m.fromBytes(H,g),l=$.fromBytes(E);if(T&&x.hasHighS())return!1;let{r:d,s:a}=x,e=_(B),s=U.inv(a),o=U.create(e*s),X$=U.create(d*s),D$=$.BASE.multiplyUnsafe(o).add(l.multiplyUnsafe(X$));if(D$.is0())return!1;return U.create(D$.x)===d}catch(x){return!1}}function D(H,B,E={}){let{prehash:A}=SY(E,j);return B=y(B,A),m.fromBytes(H,"recovered").recoverPublicKey(B).toBytes()}return Object.freeze({keygen:z,getPublicKey:R,getSharedSecret:O,utils:V,lengths:w,Point:$,sign:I,verify:S,recoverPublicKey:D,Signature:m,hash:q})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var U5=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var W5=OW(U5),B8=jW(W5,R$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var DJ=BigInt(0),p$=BigInt(1),ZY=BigInt(2),M5=BigInt(8);function z5($,J,G,q){let Q=$.sqr(G),Y=$.sqr(q),X=$.add($.mul(J.a,Q),Y),U=$.add($.ONE,$.mul(J.d,$.mul(Q,Y)));return $.eql(X,U)}function DW($,J={}){let G=J,q=yq("edwards",$,G,G.FpFnLE),{Fp:Q,Fn:Y}=q,X=q.CURVE,{h:U}=X;Q0(G,{},{uvRatio:"function"});let W=ZY<<BigInt(Y.BYTES*8)-p$,M=(j)=>Q.create(j),z=G.uvRatio===void 0?(j,N)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,N))}}catch(f){return{isValid:!1,value:DJ}}}:G.uvRatio;if(!z5(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function R(j,N,f=!1){let K=f?p$:DJ;return p0("coordinate "+j,N,K,W),N}function O(j){if(!(j instanceof V))throw Error("EdwardsPoint expected")}class V{static BASE=new V(X.Gx,X.Gy,p$,M(X.Gx*X.Gy));static ZERO=new V(DJ,p$,p$,DJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(j,N,f,K){this.X=R("x",j),this.Y=R("y",N),this.Z=R("z",f,!0),this.T=R("t",K),Object.freeze(this)}static CURVE(){return X}static fromAffine(j){if(j instanceof V)throw Error("extended point not allowed");let{x:N,y:f}=j||{};return R("x",N),R("y",f),new V(N,f,p$,M(N*f))}static fromBytes(j,N=!1){let f=Q.BYTES,{a:K,d:P}=X;j=NJ(Y$(j,f,"point")),r0(N,"zip215");let k=NJ(j),m=j[f-1];k[f-1]=m&-129;let F=R0(k),_=N?W:Q.ORDER;p0("point.y",F,DJ,_);let v=M(F*F),L=M(v-p$),y=M(P*v-K),{isValid:C,value:I}=z(L,y);if(!C)throw Error("bad point: invalid y coordinate");let S=(I&p$)===p$,D=(m&128)!==0;if(!N&&I===DJ&&D)throw Error("bad point: x=0 and x_0=1");if(D!==S)I=M(-I);return V.fromAffine({x:I,y:F})}static fromHex(j,N=!1){return V.fromBytes(H8(j),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,N=!0){if(w.createCache(this,j),!N)this.multiply(ZY);return this}assertValidity(){let j=this,{a:N,d:f}=X;if(j.is0())throw Error("bad point: ZERO");let{X:K,Y:P,Z:k,T:m}=j,F=M(K*K),_=M(P*P),v=M(k*k),L=M(v*v),y=M(F*N),C=M(v*M(y+_)),I=M(L+M(f*M(F*_)));if(C!==I)throw Error("bad point: equation left != right (1)");let S=M(K*P),D=M(k*m);if(S!==D)throw Error("bad point: equation left != right (2)")}equals(j){O(j);let{X:N,Y:f,Z:K}=this,{X:P,Y:k,Z:m}=j,F=M(N*m),_=M(P*K),v=M(f*m),L=M(k*K);return F===_&&v===L}is0(){return this.equals(V.ZERO)}negate(){return new V(M(-this.X),this.Y,this.Z,M(-this.T))}double(){let{a:j}=X,{X:N,Y:f,Z:K}=this,P=M(N*N),k=M(f*f),m=M(ZY*M(K*K)),F=M(j*P),_=N+f,v=M(M(_*_)-P-k),L=F+k,y=L-m,C=F-k,I=M(v*y),S=M(L*C),D=M(v*C),H=M(y*L);return new V(I,S,H,D)}add(j){O(j);let{a:N,d:f}=X,{X:K,Y:P,Z:k,T:m}=this,{X:F,Y:_,Z:v,T:L}=j,y=M(K*F),C=M(P*_),I=M(m*f*L),S=M(k*v),D=M((K+P)*(F+_)-y-C),H=S-I,B=S+I,E=M(C-N*y),A=M(D*H),T=M(B*E),Z=M(D*E),g=M(H*B);return new V(A,T,g,Z)}subtract(j){return O(j),this.add(j.negate())}multiply(j){if(!Y.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f}=w.cached(this,j,(K)=>rJ(V,K));return rJ(V,[N,f])[0]}multiplyUnsafe(j){if(!Y.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===DJ)return V.ZERO;if(this.is0()||j===p$)return this;return w.unsafe(this,j,(N)=>rJ(V,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return w.unsafe(this,X.n).is0()}toAffine(j){let N=this,f=j,{X:K,Y:P,Z:k}=N,m=N.is0();if(f==null)f=m?M5:Q.inv(k);let F=M(K*f),_=M(P*f),v=Q.mul(k,f);if(m)return{x:DJ,y:p$};if(v!==p$)throw Error("invZ was invalid");return{x:F,y:_}}clearCofactor(){if(U===p$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:N}=this.toAffine(),f=Q.toBytes(N);return f[f.length-1]|=j&p$?128:0,f}toHex(){return D8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let w=new vG(V,Y.BITS);if(Y.BITS>=8)V.BASE.precompute(8);return Object.freeze(V.prototype),Object.freeze(V),V}class vY{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){DY()}static fromHex($){DY()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return D8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,J){return this.ep.precompute($,J),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gG=BigInt(0),E8=BigInt(1),hq=BigInt(2);function R5($){return Q0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function HW($){let J=R5($),{P:G,type:q,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=J,U=q==="x25519";if(!U&&q!=="x448")throw Error("invalid type");let W=X===void 0?A8:X,M=U?255:448,z=U?32:56,R=U?BigInt(9):BigInt(5),O=U?BigInt(121665):BigInt(39081),V=U?hq**BigInt(254):hq**BigInt(447),w=U?BigInt(8)*hq**BigInt(251)-E8:BigInt(4)*hq**BigInt(445)-E8,j=V+w+E8,N=(D)=>U$(D,G),f=K(R);function K(D){return CG(N(D),z)}function P(D){let H=NJ(Y$(D,z,"uCoordinate"));if(U)H[31]&=127;return N(R0(H))}function k(D){return R0(Q(NJ(Y$(D,z,"scalar"))))}function m(D,H){let B=y(P(H),k(D));if(B===gG)throw Error("invalid private or public key received");return K(B)}function F(D){return m(D,f)}let _=F,v=m;function L(D,H,B){let E=N(D*(H-B));return H=N(H-E),B=N(B+E),{x_2:H,x_3:B}}function y(D,H){p0("u",D,gG,G),p0("scalar",H,V,j);let B=H,E=D,A=E8,T=gG,Z=D,g=E8,x=gG;for(let d=BigInt(M-1);d>=gG;d--){let a=B>>d&E8;x^=a,{x_2:A,x_3:Z}=L(x,A,Z),{x_2:T,x_3:g}=L(x,T,g),x=a;let e=A+T,s=N(e*e),o=A-T,X$=N(o*o),D$=s-X$,d$=Z+g,X0=Z-g,U0=N(X0*e),$J=N(d$*o),a8=U0+$J,s8=U0-$J;Z=N(a8*a8),g=N(E*N(s8*s8)),A=N(s*X$),T=N(D$*(s+N(O*D$)))}({x_2:A,x_3:Z}=L(x,A,Z)),{x_2:T,x_3:g}=L(x,T,g);let l=Y(T);return N(A*l)}let C={secretKey:z,publicKey:z,seed:z},I=(D)=>{return D=D===void 0?W(z):D,Y$(D,C.seed,"seed"),D},S={randomSecretKey:I};return Object.freeze(C),Object.freeze(S),Object.freeze({keygen:LG(I,_),getSharedSecret:v,getPublicKey:_,scalarMult:m,scalarMultBase:F,utils:S,GuBytes:f.slice(),lengths:C})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var V5=BigInt(0),o0=BigInt(1),KW=BigInt(2),O5=BigInt(3),w5=BigInt(5),N5=BigInt(8),nJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),kY=(()=>({p:nJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:N5,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function fW($){let J=BigInt(10),G=BigInt(20),q=BigInt(40),Q=BigInt(80),Y=nJ,U=$*$%Y*$%Y,W=Y0(U,KW,Y)*U%Y,M=Y0(W,o0,Y)*$%Y,z=Y0(M,w5,Y)*M%Y,R=Y0(z,J,Y)*z%Y,O=Y0(R,G,Y)*R%Y,V=Y0(O,q,Y)*O%Y,w=Y0(V,Q,Y)*V%Y,j=Y0(w,Q,Y)*V%Y,N=Y0(j,J,Y)*z%Y;return{pow_p_5_8:Y0(N,KW,Y)*$%Y,b2:U}}function j5($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var LY=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function FY($,J){let G=nJ,q=U$(J*J*J,G),Q=U$(q*q*J,G),Y=fW($*Q).pow_p_5_8,X=U$($*q*Y,G),U=U$(J*X*X,G),W=X,M=U$(X*LY,G),z=U===$,R=U===U$(-$,G),O=U===U$(-$*LY,G);if(z)X=W;if(R||O)X=M;if(n0(X,G))X=U$(-X,G);return{isValid:z||R,value:X}}var pJ=DW(kY,{uvRatio:FY}),HJ=(()=>pJ.Fp)(),BW=(()=>pJ.Fn)();var lq=(()=>{let $=nJ;return HW({P:$,type:"x25519",powPminus2:(J)=>{let{pow_p_5_8:G,b2:q}=fW(J);return U$(Y0(G,O5,$)*q,$)},adjustScalarBytes:j5})})();var PY=LY,D5=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),H5=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),K5=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),A5=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),AW=($)=>FY(o0,$),I5=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),gY=($)=>HJ.create(R0($)&I5);function IW($){let{d:J}=kY,G=nJ,q=(f)=>HJ.create(f),Q=q(PY*$*$),Y=q((Q+o0)*K5),X=BigInt(-1),U=q((X-J*Q)*q(Q+J)),{isValid:W,value:M}=FY(Y,U),z=q(M*$);if(!n0(z,G))z=q(-z);if(!W)M=z;if(!W)X=Q;let R=q(X*(Q-o0)*A5-U),O=M*M,V=q((M+M)*U),w=q(R*D5),j=q(o0-O),N=q(o0+O);return new pJ(q(V*N),q(j*w),q(w*N),q(V*j))}class l$ extends vY{static BASE=(()=>new l$(pJ.BASE))();static ZERO=(()=>new l$(pJ.ZERO))();static Fp=(()=>HJ)();static Fn=(()=>BW)();constructor($){super($)}static fromAffine($){return new l$(pJ.fromAffine($))}assertSame($){if(!($ instanceof l$))throw Error("RistrettoPoint expected")}init($){return new l$($)}static fromBytes($){A$($,32);let{a:J,d:G}=kY,q=nJ,Q=(P)=>HJ.create(P),Y=gY($);if(!cU(HJ.toBytes(Y),$)||n0(Y,q))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(o0+J*X),W=Q(o0-J*X),M=Q(U*U),z=Q(W*W),R=Q(J*G*M-z),{isValid:O,value:V}=AW(Q(R*z)),w=Q(V*W),j=Q(V*w*R),N=Q((Y+Y)*w);if(n0(N,q))N=Q(-N);let f=Q(U*j),K=Q(N*f);if(!O||n0(K,q)||f===V5)throw Error("invalid ristretto255 encoding 2");return new l$(new pJ(N,f,o0,K))}static fromHex($){return l$.fromBytes(t8($))}toBytes(){let{X:$,Y:J,Z:G,T:q}=this.ep,Q=nJ,Y=(j)=>HJ.create(j),X=Y(Y(G+J)*Y(G-J)),U=Y($*J),W=Y(U*U),{value:M}=AW(Y(X*W)),z=Y(M*X),R=Y(M*U),O=Y(z*R*q),V;if(n0(q*O,Q)){let j=Y(J*PY),N=Y($*PY);$=j,J=N,V=Y(z*H5)}else V=R;if(n0($*O,Q))J=Y(-J);let w=Y((G-J)*V);if(n0(w,Q))w=Y(-w);return HJ.toBytes(w)}equals($){this.assertSame($);let{X:J,Y:G}=this.ep,{X:q,Y:Q}=$.ep,Y=(W)=>HJ.create(W),X=Y(J*Q)===Y(G*q),U=Y(G*Q)===Y(J*q);return X||U}is0(){return this.equals(l$.ZERO)}}Object.freeze(l$.BASE);Object.freeze(l$.ZERO);Object.freeze(l$.prototype);Object.freeze(l$);var f5=Object.freeze({Point:l$,hashToCurve($,J){let G=J?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":J.DST,q=CY($,G,64,Xq);return f5.deriveToCurve(q)},hashToScalar($,J={DST:MW}){let G=CY($,J.DST,64,Xq);return BW.create(R0(G))},deriveToCurve($){A$($,64);let J=gY($.subarray(0,32)),G=IW(J),q=gY($.subarray(32,64)),Q=IW(q);return new l$(G.add(Q))}});var EW=!1,B5=!1;async function CW($,J){if(B5)return await J();try{return await $()}catch(G){if(G instanceof ReferenceError||G instanceof DOMException&&G.name==="NotSupportedError")return await J();else throw G}}async function cq($,J){return await CW(async()=>{let G=_Y($)?$:await C5($),q=await crypto.subtle.importKey("raw",S5(J),{name:"X25519"},EW,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:q},G,256))},()=>{if(_Y($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lq.scalarMult($,J)})}async function kG($){return await CW(async()=>{return cq($,lq.GuBytes)},()=>{if(_Y($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lq.scalarMultBase($)})}var E5=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function C5($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let J=new Uint8Array([...E5,...$]);return crypto.subtle.importKey("pkcs8",J,{name:"X25519"},EW,["deriveBits"])}function _Y($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function S5($){return $}class bY{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let J=this.buf.indexOf(10);if(J>=0)return $.push(this.buf.subarray(0,J)),this.transcript.push(this.buf.subarray(0,J+1)),this.buf=this.buf.subarray(J+1),Z5(oJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let G=await this.s.read();if(G.done)return this.buf=oJ($),null;this.buf=G.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:oJ(this.transcript)}}}function Z5($){return $.forEach((J)=>{if(J<32||J>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function oJ($){let J=$.reduce((Q,Y)=>Q+Y.length,0),G=new Uint8Array(J),q=0;for(let Q of $)G.set(Q,q),q+=Q.length;return G}function C8($,...J){return $.pipeThrough(new TransformStream({start(G){for(let q of J)G.enqueue(q)}}))}function dq($){return new ReadableStream({start(J){J.enqueue($),J.close()}})}async function mY($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function SW($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function TW($,J){let G=$.getReader(),q=[],Q=0;while(Q<J){let{done:W,value:M}=await G.read();if(W)throw Error("stream ended before reading "+J.toString()+" bytes");q.push(M),Q+=M.length}G.releaseLock();let Y=oJ(q),X=Y.subarray(0,J),U=C8($,Y.subarray(J));return{data:X,rest:U}}class T0{args;body;constructor($,J){this.args=$,this.body=J}}async function v5($){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let G=J.split(" ");if(G.length<2||G.shift()!=="->")return{next:J};for(let Y of G)if(Y.length===0)throw Error("invalid stanza");let q=[];for(;;){let Y=await $.readLine();if(Y===null)throw Error("invalid stanza");let X=P$.decode(Y);if(X.length>48)throw Error("invalid stanza");if(q.push(X),X.length<48)break}let Q=oJ(q);return{s:new T0(G,Q)}}async function ZW($){let J=new bY($),G=await J.readLine();if(G!=="age-encryption.org/v1")throw Error("invalid version "+(G??"line"));let q=[];for(;;){let{s:Q,next:Y}=await v5(J);if(Q!==void 0){q.push(Q);continue}if(!Y.startsWith("--- "))throw Error("invalid header");let X=P$.decode(Y.slice(4)),{rest:U,transcript:W}=J.close(),M=W.slice(0,W.length-1-Y.length+3);return{stanzas:q,headerNoMAC:M,MAC:X,headerSize:W.length,rest:C8($,U)}}}function xY($){let J=[];J.push(`age-encryption.org/v1
+var $R=Object.defineProperty;var JR=($)=>$;function GR($,J){this[$]=JR.bind(null,J)}var gX=($,J)=>{for(var G in J)$R($,G,{get:J[G],enumerable:!0,configurable:!0,set:GR.bind(J,G)})};import{parseArgs as qR}from"util";var QR={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function VQ($,J){let G=$[J];return typeof G==="boolean"?G:void 0}function OQ($,J){let G=$[J];return typeof G==="string"?G:void 0}function kX($){let{values:J,positionals:G}=qR({args:$,options:QR,allowPositionals:!0});if(J.help)return{command:"help",args:[],flags:{help:!0}};if(J.version)return{command:"version",args:[],flags:{version:!0}};return{command:G[0]??"help",args:G.slice(1),flags:{help:VQ(J,"help"),version:VQ(J,"version"),dryRun:VQ(J,"dry-run"),pushTo:OQ(J,"push-to"),cohort:OQ(J,"cohort"),anchorId:OQ(J,"anchor-id")}}}var eG={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.141",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts,.tsx --max-warnings 0","lint:fix":"eslint . --ext .ts,.tsx --max-warnings 0 --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as u5,mkdirSync as h5,readFileSync as JX,writeFileSync as GX}from"fs";import{dirname as l5,join as mW}from"path";function wQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function z$($,J=""){if(typeof $!=="number"){let G=J&&`"${J}" `;throw TypeError(`${G}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let G=J&&`"${J}" `;throw RangeError(`${G}expected integer >= 0, got ${$}`)}}function A$($,J,G=""){let q=wQ($),Q=$?.length,Y=J!==void 0;if(!q||Y&&Q!==J){let X=G&&`"${G}" `,U=Y?` of length ${J}`:"",W=q?`length=${Q}`:`type=${typeof $}`,M=X+"expected Uint8Array"+U+", got "+W;if(!q)throw TypeError(M);throw RangeError(M)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(z$($.outputLen),z$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function Y8($,J=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(J&&$.finished)throw Error("Hash#digest() has already been called")}function $q($,J){A$($,void 0,"digestInto() output");let G=J.outputLen;if($.length<G)throw RangeError('"digestInto() output" expected to be of length >='+G)}function Jq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function y$(...$){for(let J=0;J<$.length;J++)$[J].fill(0)}function X8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function W0($,J){return $<<32-J|$>>>J}function q$($,J){return $<<J|$>>>32-J>>>0}var XR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function UR($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function WR($){for(let J=0;J<$.length;J++)$[J]=UR($[J]);return $}var NQ=XR?($)=>$:WR,_X=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),MR=Array.from({length:256},($,J)=>J.toString(16).padStart(2,"0"));function Gq($){if(A$($),_X)return $.toHex();let J="";for(let G=0;G<$.length;G++)J+=MR[$[G]];return J}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function FX($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function t8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(_X)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let J=$.length,G=J/2;if(J%2)throw RangeError("hex string expected, got unpadded hex of length "+J);let q=new Uint8Array(G);for(let Q=0,Y=0;Q<G;Q++,Y+=2){let X=FX($.charCodeAt(Y)),U=FX($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+Y)}q[Q]=X*16+U}return q}function zR($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function jQ($,J=""){if(typeof $==="string")return zR($);return A$($,void 0,J)}function DQ(...$){let J=0;for(let q=0;q<$.length;q++){let Q=$[q];A$(Q),J+=Q.length}let G=new Uint8Array(J);for(let q=0,Q=0;q<$.length;q++){let Y=$[q];G.set(Y,Q),Q+=Y.length}return G}function qq($,J){if(J!==void 0&&{}.toString.call(J)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,J)}function HQ($,J={}){let G=(Q,Y)=>$(Y).update(Q).digest(),q=$(void 0);return G.outputLen=q.outputLen,G.blockLen=q.blockLen,G.canXOF=q.canXOF,G.create=(Q)=>$(Q),Object.assign(G,J),Object.freeze(G)}function _0($=32){z$($,"bytesLength");let J=typeof globalThis==="object"?globalThis.crypto:null;if(typeof J?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return J.getRandomValues(new Uint8Array($))}var KQ=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class AQ{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,J){if(F0($),A$(J,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let G=this.blockLen,q=new Uint8Array(G);q.set(J.length>G?$.create().update(J).digest():J);for(let Q=0;Q<q.length;Q++)q[Q]^=54;this.iHash.update(q),this.oHash=$.create();for(let Q=0;Q<q.length;Q++)q[Q]^=106;this.oHash.update(q),y$(q)}update($){return Y8(this),this.iHash.update($),this}digestInto($){Y8(this),$q($,this),this.finished=!0;let J=$.subarray(0,this.outputLen);this.iHash.digestInto(J),this.oHash.update(J),this.oHash.digestInto(J),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:J,iHash:G,finished:q,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=q,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=J._cloneInto($.oHash),$.iHash=G._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var K0=(()=>{let $=(J,G,q)=>new AQ(J,G).update(q).digest();return $.create=(J,G)=>new AQ(J,G),$})();function e8($,J,G){if(F0($),G===void 0)G=new Uint8Array($.outputLen);return K0($,G,J)}var IQ=Uint8Array.of(0),bX=Uint8Array.of();function fQ($,J,G,q=32){F0($),z$(q,"length"),A$(J,void 0,"prk");let Q=$.outputLen;if(J.length<Q)throw Error('"prk" must be at least HashLen octets');if(q>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(q/Q);if(G===void 0)G=bX;else A$(G,void 0,"info");let X=new Uint8Array(Y*Q),U=K0.create($,J),W=U._cloneInto(),M=new Uint8Array(U.outputLen);for(let z=0;z<Y;z++)IQ[0]=z+1,W.update(z===0?bX:M).update(G).update(IQ).digestInto(M),X.set(M,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),y$(M,IQ),X.slice(0,q)}var JJ=($,J,G,q,Q)=>fQ($,e8($,J,G),q,Q);function mX($,J,G){return $&J^~$&G}function xX($,J,G){return $&J^$&G^J&G}class Qq{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,J,G,q){this.blockLen=$,this.outputLen=J,this.padOffset=G,this.isLE=q,this.buffer=new Uint8Array($),this.view=X8(this.buffer)}update($){Y8(this),A$($);let{view:J,buffer:G,blockLen:q}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(q-this.pos,Q-Y);if(X===q){let U=X8($);for(;q<=Q-Y;Y+=q)this.process(U,Y);continue}if(G.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===q)this.process(J,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Y8(this),$q($,this),this.finished=!0;let{buffer:J,view:G,blockLen:q,isLE:Q}=this,{pos:Y}=this;if(J[Y++]=128,y$(this.buffer.subarray(Y)),this.padOffset>q-Y)this.process(G,0),Y=0;for(let z=Y;z<q;z++)J[z]=0;G.setBigUint64(q-8,BigInt(this.length*8),Q),this.process(G,0);let X=X8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,M=this.get();if(W>M.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)X.setUint32(4*z,M[z],Q)}digest(){let{buffer:$,outputLen:J}=this;this.digestInto($);let G=$.slice(0,J);return this.destroy(),G}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:J,buffer:G,length:q,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=q,$.pos=X,q%J)$.buffer.set(G);return $}clone(){return this._cloneInto()}}var b0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),I$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),f$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Yq=BigInt(4294967295),yX=BigInt(32);function RR($,J=!1){if(J)return{h:Number($&Yq),l:Number($>>yX&Yq)};return{h:Number($>>yX&Yq)|0,l:Number($&Yq)|0}}function uX($,J=!1){let G=$.length,q=new Uint32Array(G),Q=new Uint32Array(G);for(let Y=0;Y<G;Y++){let{h:X,l:U}=RR($[Y],J);[q[Y],Q[Y]]=[X,U]}return[q,Q]}var BQ=($,J,G)=>$>>>G,EQ=($,J,G)=>$<<32-G|J>>>G,ZJ=($,J,G)=>$>>>G|J<<32-G,vJ=($,J,G)=>$<<32-G|J>>>G,$G=($,J,G)=>$<<64-G|J>>>G-32,JG=($,J,G)=>$>>>G-32|J<<64-G;function A0($,J,G,q){let Q=(J>>>0)+(q>>>0);return{h:$+G+(Q/4294967296|0)|0,l:Q|0}}var hX=($,J,G)=>($>>>0)+(J>>>0)+(G>>>0),lX=($,J,G,q)=>J+G+q+($/4294967296|0)|0,cX=($,J,G,q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0),dX=($,J,G,q,Q)=>J+G+q+Q+($/4294967296|0)|0,rX=($,J,G,q,Q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0)+(Q>>>0),pX=($,J,G,q,Q,Y)=>J+G+q+Q+Y+($/4294967296|0)|0;var OR=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),GJ=new Uint32Array(64);class CQ extends Qq{constructor($){super(64,$,8,!1)}get(){let{A:$,B:J,C:G,D:q,E:Q,F:Y,G:X,H:U}=this;return[$,J,G,q,Q,Y,X,U]}set($,J,G,q,Q,Y,X,U){this.A=$|0,this.B=J|0,this.C=G|0,this.D=q|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,J){for(let z=0;z<16;z++,J+=4)GJ[z]=$.getUint32(J,!1);for(let z=16;z<64;z++){let R=GJ[z-15],O=GJ[z-2],V=W0(R,7)^W0(R,18)^R>>>3,w=W0(O,17)^W0(O,19)^O>>>10;GJ[z]=w+GJ[z-7]+V+GJ[z-16]|0}let{A:G,B:q,C:Q,D:Y,E:X,F:U,G:W,H:M}=this;for(let z=0;z<64;z++){let R=W0(X,6)^W0(X,11)^W0(X,25),O=M+R+mX(X,U,W)+OR[z]+GJ[z]|0,w=(W0(G,2)^W0(G,13)^W0(G,22))+xX(G,q,Q)|0;M=W,W=U,U=X,X=Y+O|0,Y=Q,Q=q,q=G,G=O+w|0}G=G+this.A|0,q=q+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,M=M+this.H|0,this.set(G,q,Q,Y,X,U,W,M)}roundClean(){y$(GJ)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),y$(this.buffer)}}class nX extends CQ{A=b0[0]|0;B=b0[1]|0;C=b0[2]|0;D=b0[3]|0;E=b0[4]|0;F=b0[5]|0;G=b0[6]|0;H=b0[7]|0;constructor(){super(32)}}class wR extends CQ{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var oX=(()=>uX(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),NR=(()=>oX[0])(),jR=(()=>oX[1])(),qJ=new Uint32Array(80),QJ=new Uint32Array(80);class GG extends Qq{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:J,Bh:G,Bl:q,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:M,Fh:z,Fl:R,Gh:O,Gl:V,Hh:w,Hl:j}=this;return[$,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j]}set($,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j){this.Ah=$|0,this.Al=J|0,this.Bh=G|0,this.Bl=q|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=M|0,this.Fh=z|0,this.Fl=R|0,this.Gh=O|0,this.Gl=V|0,this.Hh=w|0,this.Hl=j|0}process($,J){for(let K=0;K<16;K++,J+=4)qJ[K]=$.getUint32(J),QJ[K]=$.getUint32(J+=4);for(let K=16;K<80;K++){let P=qJ[K-15]|0,k=QJ[K-15]|0,m=ZJ(P,k,1)^ZJ(P,k,8)^BQ(P,k,7),F=vJ(P,k,1)^vJ(P,k,8)^EQ(P,k,7),_=qJ[K-2]|0,v=QJ[K-2]|0,L=ZJ(_,v,19)^$G(_,v,61)^BQ(_,v,6),y=vJ(_,v,19)^JG(_,v,61)^EQ(_,v,6),C=cX(F,y,QJ[K-7],QJ[K-16]),I=dX(C,m,L,qJ[K-7],qJ[K-16]);qJ[K]=I|0,QJ[K]=C|0}let{Ah:G,Al:q,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:M,Eh:z,El:R,Fh:O,Fl:V,Gh:w,Gl:j,Hh:N,Hl:f}=this;for(let K=0;K<80;K++){let P=ZJ(z,R,14)^ZJ(z,R,18)^$G(z,R,41),k=vJ(z,R,14)^vJ(z,R,18)^JG(z,R,41),m=z&O^~z&w,F=R&V^~R&j,_=rX(f,k,F,jR[K],QJ[K]),v=pX(_,N,P,m,NR[K],qJ[K]),L=_|0,y=ZJ(G,q,28)^$G(G,q,34)^$G(G,q,39),C=vJ(G,q,28)^JG(G,q,34)^JG(G,q,39),I=G&Q^G&X^Q&X,S=q&Y^q&U^Y&U;N=w|0,f=j|0,w=O|0,j=V|0,O=z|0,V=R|0,{h:z,l:R}=A0(W|0,M|0,v|0,L|0),W=X|0,M=U|0,X=Q|0,U=Y|0,Q=G|0,Y=q|0;let D=hX(L,C,S);G=lX(D,v,y,I),q=D|0}({h:G,l:q}=A0(this.Ah|0,this.Al|0,G|0,q|0)),{h:Q,l:Y}=A0(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=A0(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:M}=A0(this.Dh|0,this.Dl|0,W|0,M|0),{h:z,l:R}=A0(this.Eh|0,this.El|0,z|0,R|0),{h:O,l:V}=A0(this.Fh|0,this.Fl|0,O|0,V|0),{h:w,l:j}=A0(this.Gh|0,this.Gl|0,w|0,j|0),{h:N,l:f}=A0(this.Hh|0,this.Hl|0,N|0,f|0),this.set(G,q,Q,Y,X,U,W,M,z,R,O,V,w,j,N,f)}roundClean(){y$(qJ,QJ)}destroy(){this.destroyed=!0,y$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class iX extends GG{Ah=f$[0]|0;Al=f$[1]|0;Bh=f$[2]|0;Bl=f$[3]|0;Ch=f$[4]|0;Cl=f$[5]|0;Dh=f$[6]|0;Dl=f$[7]|0;Eh=f$[8]|0;El=f$[9]|0;Fh=f$[10]|0;Fl=f$[11]|0;Gh=f$[12]|0;Gl=f$[13]|0;Hh=f$[14]|0;Hl=f$[15]|0;constructor(){super(64)}}class DR extends GG{Ah=I$[0]|0;Al=I$[1]|0;Bh=I$[2]|0;Bl=I$[3]|0;Ch=I$[4]|0;Cl=I$[5]|0;Dh=I$[6]|0;Dl=I$[7]|0;Eh=I$[8]|0;El=I$[9]|0;Fh=I$[10]|0;Fl=I$[11]|0;Gh=I$[12]|0;Gl=I$[13]|0;Hh=I$[14]|0;Hl=I$[15]|0;constructor(){super(48)}}var v$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),L$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class HR extends GG{Ah=v$[0]|0;Al=v$[1]|0;Bh=v$[2]|0;Bl=v$[3]|0;Ch=v$[4]|0;Cl=v$[5]|0;Dh=v$[6]|0;Dl=v$[7]|0;Eh=v$[8]|0;El=v$[9]|0;Fh=v$[10]|0;Fl=v$[11]|0;Gh=v$[12]|0;Gl=v$[13]|0;Hh=v$[14]|0;Hl=v$[15]|0;constructor(){super(28)}}class KR extends GG{Ah=L$[0]|0;Al=L$[1]|0;Bh=L$[2]|0;Bl=L$[3]|0;Ch=L$[4]|0;Cl=L$[5]|0;Dh=L$[6]|0;Dl=L$[7]|0;Eh=L$[8]|0;El=L$[9]|0;Fh=L$[10]|0;Fl=L$[11]|0;Gh=L$[12]|0;Gl=L$[13]|0;Hh=L$[14]|0;Hl=L$[15]|0;constructor(){super(32)}}var R$=HQ(()=>new nX,KQ(1));var Xq=HQ(()=>new iX,KQ(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Rq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function ZQ($){if(!Rq($))throw Error("Uint8Array expected")}function $9($,J){if(!Array.isArray(J))return!1;if(J.length===0)return!0;if($)return J.every((G)=>typeof G==="string");else return J.every((G)=>Number.isSafeInteger(G))}function J9($){if(typeof $!=="function")throw Error("function expected");return!0}function YJ($,J){if(typeof J!=="string")throw Error(`${$}: string expected`);return!0}function QG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function Wq($){if(!Array.isArray($))throw Error("array expected")}function Mq($,J){if(!$9(!0,J))throw Error(`${$}: array of strings expected`)}function vQ($,J){if(!$9(!1,J))throw Error(`${$}: array of numbers expected`)}function i$(...$){let J=(Y)=>Y,G=(Y,X)=>(U)=>Y(X(U)),q=$.map((Y)=>Y.encode).reduceRight(G,J),Q=$.map((Y)=>Y.decode).reduce(G,J);return{encode:q,decode:Q}}function a$($){let J=typeof $==="string"?$.split(""):$,G=J.length;Mq("alphabet",J);let q=new Map(J.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return Wq(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=G)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return J[Y]})},decode:(Q)=>{return Wq(Q),Q.map((Y)=>{YJ("alphabet.decode",Y);let X=q.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function s$($=""){return YJ("join",$),{encode:(J)=>{return Mq("join.decode",J),J.join($)},decode:(J)=>{return YJ("join.decode",J),J.split($)}}}function Vq($,J="="){return QG($),YJ("padding",J),{encode(G){Mq("padding.encode",G);while(G.length*$%8)G.push(J);return G},decode(G){Mq("padding.decode",G);let q=G.length;if(q*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;q>0&&G[q-1]===J;q--)if((q-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return G.slice(0,q)}}}function G9($){return J9($),{encode:(J)=>J,decode:(J)=>$(J)}}function aX($,J,G){if(J<2)throw Error(`convertRadix: invalid from=${J}, base cannot be less than 2`);if(G<2)throw Error(`convertRadix: invalid to=${G}, base cannot be less than 2`);if(Wq($),!$.length)return[];let q=0,Q=[],Y=Array.from($,(U)=>{if(QG(U),U<0||U>=J)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,W=!0;for(let M=q;M<X;M++){let z=Y[M],R=J*U,O=R+z;if(!Number.isSafeInteger(O)||R/J!==U||O-z!==R)throw Error("convertRadix: carry overflow");let V=O/G;U=O%G;let w=Math.floor(V);if(Y[M]=w,!Number.isSafeInteger(w)||w*G+U!==O)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!w)q=M;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var q9=($,J)=>J===0?$:q9(J,$%J),zq=($,J)=>$+(J-q9($,J)),Uq=(()=>{let $=[];for(let J=0;J<40;J++)$.push(2**J);return $})();function SQ($,J,G,q){if(Wq($),J<=0||J>32)throw Error(`convertRadix2: wrong from=${J}`);if(G<=0||G>32)throw Error(`convertRadix2: wrong to=${G}`);if(zq(J,G)>32)throw Error(`convertRadix2: carry overflow from=${J} to=${G} carryBits=${zq(J,G)}`);let Q=0,Y=0,X=Uq[J],U=Uq[G]-1,W=[];for(let M of $){if(QG(M),M>=X)throw Error(`convertRadix2: invalid data word=${M} from=${J}`);if(Q=Q<<J|M,Y+J>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${J}`);Y+=J;for(;Y>=G;Y-=G)W.push((Q>>Y-G&U)>>>0);let z=Uq[Y];if(z===void 0)throw Error("invalid carry");Q&=z-1}if(Q=Q<<G-Y&U,!q&&Y>=J)throw Error("Excess padding");if(!q&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(q&&Y>0)W.push(Q>>>0);return W}function AR($){QG($);let J=256;return{encode:(G)=>{if(!Rq(G))throw Error("radix.encode input should be Uint8Array");return aX(Array.from(G),J,$)},decode:(G)=>{return vQ("radix.decode",G),Uint8Array.from(aX(G,$,J))}}}function $0($,J=!1){if(QG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(zq(8,$)>32||zq($,8)>32)throw Error("radix2: carry overflow");return{encode:(G)=>{if(!Rq(G))throw Error("radix2.encode input should be Uint8Array");return SQ(Array.from(G),8,$,!J)},decode:(G)=>{return vQ("radix2.decode",G),Uint8Array.from(SQ(G,$,8,J))}}}function sX($){return J9($),function(...J){try{return $.apply(null,J)}catch(G){}}}var KH=i$($0(4),a$("0123456789ABCDEF"),s$("")),AH=i$($0(5),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Vq(5),s$("")),IH=i$($0(5),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),s$("")),fH=i$($0(5),a$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Vq(5),s$("")),BH=i$($0(5),a$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),s$("")),EH=i$($0(5),a$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),s$(""),G9(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),Q9=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Y9=($,J)=>{YJ("base64",$);let G=J?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,q=J?"base64url":"base64";if($.length>0&&!G.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:q,lastChunkHandling:"strict"})},LQ=Q9?{encode($){return ZQ($),$.toBase64()},decode($){return Y9($,!1)}}:i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Vq(6),s$("")),P$=i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),s$("")),CH=Q9?{encode($){return ZQ($),$.toBase64({alphabet:"base64url"})},decode($){return Y9($,!0)}}:i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Vq(6),s$("")),SH=i$($0(6),a$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),s$("")),PQ=($)=>i$(AR(58),a$($),s$("")),TH=PQ("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),ZH=PQ("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),vH=PQ("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var TQ=i$(a$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),s$("")),tX=[996825010,642813549,513874426,1027748829,705979059];function qG($){let J=$>>25,G=($&33554431)<<5;for(let q=0;q<tX.length;q++)if((J>>q&1)===1)G^=tX[q];return G}function eX($,J,G=1){let q=$.length,Q=1;for(let Y=0;Y<q;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=qG(Q)^X>>5}Q=qG(Q);for(let Y=0;Y<q;Y++)Q=qG(Q)^$.charCodeAt(Y)&31;for(let Y of J)Q=qG(Q)^Y;for(let Y=0;Y<6;Y++)Q=qG(Q);return Q^=G,TQ.encode(SQ([Q%Uq[30]],30,5,!1))}function X9($){let J=$==="bech32"?1:734539939,G=$0(5),q=G.decode,Q=G.encode,Y=sX(q);function X(R,O,V=90){if(YJ("bech32.encode prefix",R),Rq(O))O=Array.from(O);vQ("bech32.encode",O);let w=R.length;if(w===0)throw TypeError(`Invalid prefix length ${w}`);let j=w+7+O.length;if(V!==!1&&j>V)throw TypeError(`Length ${j} exceeds limit ${V}`);let N=R.toLowerCase(),f=eX(N,O,J);return`${N}1${TQ.encode(O)}${f}`}function U(R,O=90){YJ("bech32.decode input",R);let V=R.length;if(V<8||O!==!1&&V>O)throw TypeError(`invalid string length: ${V} (${R}). Expected (8..${O})`);let w=R.toLowerCase();if(R!==w&&R!==R.toUpperCase())throw Error("String must be lowercase or uppercase");let j=w.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let N=w.slice(0,j),f=w.slice(j+1);if(f.length<6)throw Error("Data must be at least 6 characters long");let K=TQ.decode(f).slice(0,-6),P=eX(N,K,J);if(!f.endsWith(P))throw Error(`Invalid checksum in ${R}: expected "${P}"`);return{prefix:N,words:K}}let W=sX(U);function M(R){let{prefix:O,words:V}=U(R,!1);return{prefix:O,words:V,bytes:q(V)}}function z(R,O){return X(R,Q(O))}return{encode:X,decode:U,encodeFromBytes:z,decodeToBytes:M,decodeUnsafe:W,fromWords:q,fromWordsUnsafe:Y,toWords:Q}}var t$=X9("bech32"),LH=X9("bech32m");var IR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),fR={encode($){return ZQ($),$.toHex()},decode($){return YJ("hex",$),Uint8Array.fromHex($)}},PH=IR?fR:i$($0(4),a$("0123456789abcdef"),s$(""),G9(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function ER($,J,G,q){F0($);let Q=qq({dkLen:32,asyncTick:10},q),{c:Y,dkLen:X,asyncTick:U}=Q;if(z$(Y,"c"),z$(X,"dkLen"),z$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let W=jQ(J,"password"),M=jQ(G,"salt"),z=new Uint8Array(X),R=K0.create($,W),O=R._cloneInto().update(M);return{c:Y,dkLen:X,asyncTick:U,DK:z,PRF:R,PRFSalt:O}}function CR($,J,G,q,Q){if($.destroy(),J.destroy(),q)q.destroy();return y$(Q),G}function gQ($,J,G,q){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:W}=ER($,J,G,q),M,z=new Uint8Array(4),R=X8(z),O=new Uint8Array(U.outputLen);for(let V=1,w=0;w<Y;V++,w+=U.outputLen){let j=X.subarray(w,w+U.outputLen);R.setInt32(0,V,!1),(M=W._cloneInto(M)).update(z).digestInto(O),j.set(O.subarray(0,j.length));for(let N=1;N<Q;N++){U._cloneInto(M).update(O).digestInto(O);for(let f=0;f<j.length;f++)j[f]^=O[f]}}return CR(U,W,X,M,O)}function U9($,J,G,q,Q,Y){let X=$[J++]^G[q++],U=$[J++]^G[q++],W=$[J++]^G[q++],M=$[J++]^G[q++],z=$[J++]^G[q++],R=$[J++]^G[q++],O=$[J++]^G[q++],V=$[J++]^G[q++],w=$[J++]^G[q++],j=$[J++]^G[q++],N=$[J++]^G[q++],f=$[J++]^G[q++],K=$[J++]^G[q++],P=$[J++]^G[q++],k=$[J++]^G[q++],m=$[J++]^G[q++],F=X,_=U,v=W,L=M,y=z,C=R,I=O,S=V,D=w,H=j,B=N,E=f,A=K,T=P,Z=k,g=m;for(let x=0;x<8;x+=2)y^=q$(F+A|0,7),D^=q$(y+F|0,9),A^=q$(D+y|0,13),F^=q$(A+D|0,18),H^=q$(C+_|0,7),T^=q$(H+C|0,9),_^=q$(T+H|0,13),C^=q$(_+T|0,18),Z^=q$(B+I|0,7),v^=q$(Z+B|0,9),I^=q$(v+Z|0,13),B^=q$(I+v|0,18),L^=q$(g+E|0,7),S^=q$(L+g|0,9),E^=q$(S+L|0,13),g^=q$(E+S|0,18),_^=q$(F+L|0,7),v^=q$(_+F|0,9),L^=q$(v+_|0,13),F^=q$(L+v|0,18),I^=q$(C+y|0,7),S^=q$(I+C|0,9),y^=q$(S+I|0,13),C^=q$(y+S|0,18),E^=q$(B+H|0,7),D^=q$(E+B|0,9),H^=q$(D+E|0,13),B^=q$(H+D|0,18),A^=q$(g+Z|0,7),T^=q$(A+g|0,9),Z^=q$(T+A|0,13),g^=q$(Z+T|0,18);Q[Y++]=X+F|0,Q[Y++]=U+_|0,Q[Y++]=W+v|0,Q[Y++]=M+L|0,Q[Y++]=z+y|0,Q[Y++]=R+C|0,Q[Y++]=O+I|0,Q[Y++]=V+S|0,Q[Y++]=w+D|0,Q[Y++]=j+H|0,Q[Y++]=N+B|0,Q[Y++]=f+E|0,Q[Y++]=K+A|0,Q[Y++]=P+T|0,Q[Y++]=k+Z|0,Q[Y++]=m+g|0}function kQ($,J,G,q,Q){let Y=q+0,X=q+16*Q;for(let U=0;U<16;U++)G[X+U]=$[J+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,J+=16){if(U9(G,X,$,J,G,Y),U>0)X+=16;U9(G,Y,$,J+=16,G,X)}}function SR($,J,G){let q=qq({dkLen:32,asyncTick:10,maxmem:1073742848},G),{N:Q,r:Y,p:X,dkLen:U,asyncTick:W,maxmem:M,onProgress:z}=q;if(z$(Q,"N"),z$(Y,"r"),z$(X,"p"),z$(U,"dkLen"),z$(W,"asyncTick"),z$(M,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let R=128*Y,O=R/4,V=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>V)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(V-1)*32/R)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(V-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let w=R*(Q+X+1);if(w>M)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+w+", maxmem="+M);let j=gQ(R$,$,J,{c:1,dkLen:R*X}),N=Jq(j),f=Jq(new Uint8Array(R*Q)),K=Jq(new Uint8Array(R)),P=()=>{};if(z){let k=2*Q*X,m=Math.max(Math.floor(k/1e4),1),F=0;P=()=>{if(F++,z&&(!(F%m)||F===k))z(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:O,V:f,B32:N,B:j,tmp:K,blockMixCb:P,asyncTick:W}}function TR($,J,G,q,Q){let Y=gQ(R$,$,G,{c:1,dkLen:J});return y$(G,q,Q),Y}function FQ($,J,G){let{N:q,r:Q,p:Y,dkLen:X,blockSize32:U,V:W,B32:M,B:z,tmp:R,blockMixCb:O}=SR($,J,G);NQ(M);for(let V=0;V<Y;V++){let w=U*V;for(let j=0;j<U;j++)W[j]=M[w+j];for(let j=0,N=0;j<q-1;j++)kQ(W,N,W,N+=U,Q),O();kQ(W,(q-1)*U,M,w,Q),O();for(let j=0;j<q;j++){let N=(M[w+U-16]&q-1)>>>0;for(let f=0;f<U;f++)R[f]=M[w+f]^W[N*U+f];kQ(R,0,M,w,Q),O()}}return NQ(M),TR($,X,z,W,R)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function ZR($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Oq($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function U8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function w$($,J,G=""){let q=ZR($),Q=$?.length,Y=J!==void 0;if(!q||Y&&Q!==J){let X=G&&`"${G}" `,U=Y?` of length ${J}`:"",W=q?`length=${Q}`:`type=${typeof $}`,M=X+"expected Uint8Array"+U+", got "+W;if(!q)throw TypeError(M);throw RangeError(M)}return $}function _Q($,J=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(J&&$.finished)throw Error("Hash#digest() has already been called")}function W9($,J,G=!1){w$($,void 0,"output");let q=J.outputLen;if($.length<q)throw RangeError("digestInto() expects output buffer of length at least "+q);if(G&&!W8($))throw Error("invalid output, must be aligned")}function I0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function M0(...$){for(let J=0;J<$.length;J++)$[J].fill(0)}function vR($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var LJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),LR=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var PR=($)=>{for(let J=0;J<$.length;J++)$[J]=LR($[J]);return $},x0=LJ?($)=>$:PR;function M9($,J){if(J==null||typeof J!=="object")throw Error("options must be defined");return Object.assign($,J)}function z9($,J){if($.length!==J.length)return!1;let G=0;for(let q=0;q<$.length;q++)G|=$[q]^J[q];return G===0}function R9($,J,G){let q=J,Q=G||(()=>[]),Y=(U,W)=>q(W,...Q(U)).update(U).digest(),X=q(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...W)=>q(U,...W),Y}var V9=($,J)=>{function G(q,...Q){if(w$(q,void 0,"key"),$.nonceLength!==void 0){let z=Q[0];w$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)w$(Q[1],void 0,"AAD");let X=J(q,...Q),U=(z,R)=>{if(R!==void 0){if(z!==2)throw Error("cipher output not supported");w$(R,void 0,"output")}},W=!1;return{encrypt(z,R){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,w$(z),U(X.encrypt.length,R),X.encrypt(z,R)},decrypt(z,R){if(w$(z),Y&&z.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,R),X.decrypt(z,R)}}}return Object.assign(G,$),G};function YG($,J,G=!0){if(J===void 0)return new Uint8Array($);if(w$(J,void 0,"output"),J.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+J.length);if(G&&!W8(J))throw Error("invalid output, must be aligned");return J}function O9($,J,G){U8($),U8(J),Oq(G);let q=new Uint8Array(16),Q=vR(q);return Q.setBigUint64(0,BigInt(J),G),Q.setBigUint64(8,BigInt($),G),q}function W8($){return $.byteOffset%4===0}function M8($){return Uint8Array.from(w$($))}var N9=($)=>Uint8Array.from($.split(""),(J)=>J.charCodeAt(0)),gR=(()=>x0(I0(N9("expand 16-byte k"))))(),kR=(()=>x0(I0(N9("expand 32-byte k"))))();function Q$($,J){return $<<J|$>>>32-J}var XG=64,FR=16,bQ=(()=>4294967295)(),w9=Uint32Array.of();function _R($,J,G,q,Q,Y,X,U){let W=Q.length,M=new Uint8Array(XG),z=I0(M),R=LJ&&W8(Q)&&W8(Y),O=R?I0(Q):w9,V=R?I0(Y):w9;if(!LJ){for(let w=0;w<W;X++){if($(J,G,q,z,X,U),x0(z),X>=bQ)throw Error("arx: counter overflow");let j=Math.min(XG,W-w);for(let N=0,f;N<j;N++)f=w+N,Y[f]=Q[f]^M[N];w+=j}return}for(let w=0;w<W;X++){if($(J,G,q,z,X,U),X>=bQ)throw Error("arx: counter overflow");let j=Math.min(XG,W-w);if(R&&j===XG){let N=w/4;if(w%4!==0)throw Error("arx: invalid block position");for(let f=0,K;f<FR;f++)K=N+f,V[K]=O[K]^z[f];w+=XG;continue}for(let N=0,f;N<j;N++)f=w+N,Y[f]=Q[f]^M[N];w+=j}}function j9($,J){let{allowShortKeys:G,extendNonceFn:q,counterLength:Q,counterRight:Y,rounds:X}=M9({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},J);if(typeof $!=="function")throw Error("core must be a function");return U8(Q),U8(X),Oq(Y),Oq(G),(U,W,M,z,R=0)=>{w$(U,void 0,"key"),w$(W,void 0,"nonce"),w$(M,void 0,"data");let O=M.length;if(z=YG(O,z,!1),U8(R),R<0||R>=bQ)throw Error("arx: counter overflow");let V=[],w=U.length,j,N;if(w===32)V.push(j=M8(U)),N=kR;else if(w===16&&G)j=new Uint8Array(32),j.set(U),j.set(U,16),N=gR,V.push(j);else throw w$(U,32,"arx key"),Error("invalid key size");if(!LJ||!W8(W))V.push(W=M8(W));let f=I0(j);if(q){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=W.subarray(0,16);if(LJ)q(N,f,I0(k),f);else{let m=x0(Uint32Array.from(N));q(m,f,I0(k),f),M0(m),x0(f)}W=W.subarray(16)}else if(!LJ)x0(f);let K=16-Q;if(K!==W.length)throw Error(`arx: nonce must be ${K} or 16 bytes`);if(K!==12){let k=new Uint8Array(12);k.set(W,Y?0:12-W.length),W=k,V.push(W)}let P=x0(I0(W));try{return _R($,N,f,P,M,z,R,X),z}finally{M0(...V)}}}function B$($,J){return $[J++]&255|($[J++]&255)<<8}class D9{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=M8(w$($,32,"key"));let J=B$($,0),G=B$($,2),q=B$($,4),Q=B$($,6),Y=B$($,8),X=B$($,10),U=B$($,12),W=B$($,14);this.r[0]=J&8191,this.r[1]=(J>>>13|G<<3)&8191,this.r[2]=(G>>>10|q<<6)&7939,this.r[3]=(q>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let M=0;M<8;M++)this.pad[M]=B$($,16+2*M)}process($,J,G=!1){let q=G?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],W=Y[2],M=Y[3],z=Y[4],R=Y[5],O=Y[6],V=Y[7],w=Y[8],j=Y[9],N=B$($,J+0),f=B$($,J+2),K=B$($,J+4),P=B$($,J+6),k=B$($,J+8),m=B$($,J+10),F=B$($,J+12),_=B$($,J+14),v=Q[0]+(N&8191),L=Q[1]+((N>>>13|f<<3)&8191),y=Q[2]+((f>>>10|K<<6)&8191),C=Q[3]+((K>>>7|P<<9)&8191),I=Q[4]+((P>>>4|k<<12)&8191),S=Q[5]+(k>>>1&8191),D=Q[6]+((k>>>14|m<<2)&8191),H=Q[7]+((m>>>11|F<<5)&8191),B=Q[8]+((F>>>8|_<<8)&8191),E=Q[9]+(_>>>5|q),A=0,T=A+v*X+L*(5*j)+y*(5*w)+C*(5*V)+I*(5*O);A=T>>>13,T&=8191,T+=S*(5*R)+D*(5*z)+H*(5*M)+B*(5*W)+E*(5*U),A+=T>>>13,T&=8191;let Z=A+v*U+L*X+y*(5*j)+C*(5*w)+I*(5*V);A=Z>>>13,Z&=8191,Z+=S*(5*O)+D*(5*R)+H*(5*z)+B*(5*M)+E*(5*W),A+=Z>>>13,Z&=8191;let g=A+v*W+L*U+y*X+C*(5*j)+I*(5*w);A=g>>>13,g&=8191,g+=S*(5*V)+D*(5*O)+H*(5*R)+B*(5*z)+E*(5*M),A+=g>>>13,g&=8191;let x=A+v*M+L*W+y*U+C*X+I*(5*j);A=x>>>13,x&=8191,x+=S*(5*w)+D*(5*V)+H*(5*O)+B*(5*R)+E*(5*z),A+=x>>>13,x&=8191;let l=A+v*z+L*M+y*W+C*U+I*X;A=l>>>13,l&=8191,l+=S*(5*j)+D*(5*w)+H*(5*V)+B*(5*O)+E*(5*R),A+=l>>>13,l&=8191;let d=A+v*R+L*z+y*M+C*W+I*U;A=d>>>13,d&=8191,d+=S*X+D*(5*j)+H*(5*w)+B*(5*V)+E*(5*O),A+=d>>>13,d&=8191;let a=A+v*O+L*R+y*z+C*M+I*W;A=a>>>13,a&=8191,a+=S*U+D*X+H*(5*j)+B*(5*w)+E*(5*V),A+=a>>>13,a&=8191;let e=A+v*V+L*O+y*R+C*z+I*M;A=e>>>13,e&=8191,e+=S*W+D*U+H*X+B*(5*j)+E*(5*w),A+=e>>>13,e&=8191;let s=A+v*w+L*V+y*O+C*R+I*z;A=s>>>13,s&=8191,s+=S*M+D*W+H*U+B*X+E*(5*j),A+=s>>>13,s&=8191;let o=A+v*j+L*w+y*V+C*O+I*R;A=o>>>13,o&=8191,o+=S*z+D*M+H*W+B*U+E*X,A+=o>>>13,o&=8191,A=(A<<2)+A|0,A=A+T|0,T=A&8191,A=A>>>13,Z+=A,Q[0]=T,Q[1]=Z,Q[2]=g,Q[3]=x,Q[4]=l,Q[5]=d,Q[6]=a,Q[7]=e,Q[8]=s,Q[9]=o}finalize(){let{h:$,pad:J}=this,G=new Uint16Array(10),q=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=q,q=$[X]>>>13,$[X]&=8191;$[0]+=q*5,q=$[0]>>>13,$[0]&=8191,$[1]+=q,q=$[1]>>>13,$[1]&=8191,$[2]+=q,G[0]=$[0]+5,q=G[0]>>>13,G[0]&=8191;for(let X=1;X<10;X++)G[X]=$[X]+q,q=G[X]>>>13,G[X]&=8191;G[9]-=8192;let Q=(q^1)-1;for(let X=0;X<10;X++)G[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|G[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+J[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+J[X]|0)+(Y>>>16)|0,$[X]=Y&65535;M0(G)}update($){_Q(this),w$($),$=M8($);let{buffer:J,blockLen:G}=this,q=$.length;for(let Q=0;Q<q;){let Y=Math.min(G-this.pos,q-Q);if(Y===G){for(;G<=q-Q;Q+=G)this.process($,Q);continue}if(J.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===G)this.process(J,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,M0(this.h,this.r,this.buffer,this.pad)}digestInto($){_Q(this),W9($,this),this.finished=!0;let{buffer:J,h:G}=this,{pos:q}=this;if(q){J[q++]=1;for(;q<16;q++)J[q]=0;this.process(J,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=G[Y]>>>0,$[Q++]=G[Y]>>>8}digest(){let{buffer:$,outputLen:J}=this;this.digestInto($);let G=$.slice(0,J);return this.destroy(),G}}var H9=R9(32,($)=>new D9($));function bR($,J,G,q,Q,Y=20){let X=$[0],U=$[1],W=$[2],M=$[3],z=J[0],R=J[1],O=J[2],V=J[3],w=J[4],j=J[5],N=J[6],f=J[7],K=Q,P=G[0],k=G[1],m=G[2],F=X,_=U,v=W,L=M,y=z,C=R,I=O,S=V,D=w,H=j,B=N,E=f,A=K,T=P,Z=k,g=m;for(let l=0;l<Y;l+=2)F=F+y|0,A=Q$(A^F,16),D=D+A|0,y=Q$(y^D,12),F=F+y|0,A=Q$(A^F,8),D=D+A|0,y=Q$(y^D,7),_=_+C|0,T=Q$(T^_,16),H=H+T|0,C=Q$(C^H,12),_=_+C|0,T=Q$(T^_,8),H=H+T|0,C=Q$(C^H,7),v=v+I|0,Z=Q$(Z^v,16),B=B+Z|0,I=Q$(I^B,12),v=v+I|0,Z=Q$(Z^v,8),B=B+Z|0,I=Q$(I^B,7),L=L+S|0,g=Q$(g^L,16),E=E+g|0,S=Q$(S^E,12),L=L+S|0,g=Q$(g^L,8),E=E+g|0,S=Q$(S^E,7),F=F+C|0,g=Q$(g^F,16),B=B+g|0,C=Q$(C^B,12),F=F+C|0,g=Q$(g^F,8),B=B+g|0,C=Q$(C^B,7),_=_+I|0,A=Q$(A^_,16),E=E+A|0,I=Q$(I^E,12),_=_+I|0,A=Q$(A^_,8),E=E+A|0,I=Q$(I^E,7),v=v+S|0,T=Q$(T^v,16),D=D+T|0,S=Q$(S^D,12),v=v+S|0,T=Q$(T^v,8),D=D+T|0,S=Q$(S^D,7),L=L+y|0,Z=Q$(Z^L,16),H=H+Z|0,y=Q$(y^H,12),L=L+y|0,Z=Q$(Z^L,8),H=H+Z|0,y=Q$(y^H,7);let x=0;q[x++]=X+F|0,q[x++]=U+_|0,q[x++]=W+v|0,q[x++]=M+L|0,q[x++]=z+y|0,q[x++]=R+C|0,q[x++]=O+I|0,q[x++]=V+S|0,q[x++]=w+D|0,q[x++]=j+H|0,q[x++]=N+B|0,q[x++]=f+E|0,q[x++]=K+A|0,q[x++]=P+T|0,q[x++]=k+Z|0,q[x++]=m+g|0}var mR=j9(bR,{counterRight:!1,counterLength:4,allowShortKeys:!1});var xR=new Uint8Array(16),K9=($,J)=>{$.update(J);let G=J.length%16;if(G)$.update(xR.subarray(G))},yR=new Uint8Array(32);function A9($,J,G,q,Q){if(Q!==void 0)w$(Q,void 0,"AAD");let Y=$(J,G,yR),X=O9(q.length,Q?Q.length:0,!0),U=H9.create(Y);if(Q)K9(U,Q);K9(U,q),U.update(X);let W=U.digest();return M0(Y,X),W}var uR=($)=>(J,G,q)=>{return{encrypt(Y,X){let U=Y.length;X=YG(U+16,X,!1),X.set(Y);let W=X.subarray(0,-16);$(J,G,W,W,1);let M=A9($,J,G,W,q);return X.set(M,U),M0(M),X},decrypt(Y,X){X=YG(Y.length-16,X,!1);let U=Y.subarray(0,-16),W=Y.subarray(-16),M=A9($,J,G,U,q);if(!z9(W,M))throw M0(M),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(J,G,X,X,1),M0(M),X}}},J0=V9({blockSize:64,nonceLength:12,tagLength:16},uR(mR));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function z8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function H$($,J=""){if(!Number.isSafeInteger($)||$<0){let G=J&&`"${J}" `;throw Error(`${G}expected integer >= 0, got ${$}`)}}function n($,J,G=""){let q=z8($),Q=$?.length,Y=J!==void 0;if(!q||Y&&Q!==J){let X=G&&`"${G}" `,U=Y?` of length ${J}`:"",W=q?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+W)}return $}function G0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");H$($.outputLen),H$($.blockLen)}function u0($,J=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(J&&$.finished)throw Error("Hash#digest() has already been called")}function wq($,J){n($,void 0,"digestInto() output");let G=J.outputLen;if($.length<G)throw Error('"digestInto() output" expected to be of length >='+G)}function Nq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let J=0;J<$.length;J++)$[J].fill(0)}function jq($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function z0($,J){return $<<32-J|$>>>J}var hR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function lR($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function cR($){for(let J=0;J<$.length;J++)$[J]=lR($[J]);return $}var mQ=hR?($)=>$:cR,f9=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),dR=Array.from({length:256},($,J)=>J.toString(16).padStart(2,"0"));function PJ($){if(n($),f9)return $.toHex();let J="";for(let G=0;G<$.length;G++)J+=dR[$[G]];return J}var y0={_0:48,_9:57,A:65,F:70,a:97,f:102};function I9($){if($>=y0._0&&$<=y0._9)return $-y0._0;if($>=y0.A&&$<=y0.F)return $-(y0.A-10);if($>=y0.a&&$<=y0.f)return $-(y0.a-10);return}function gJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(f9)return Uint8Array.fromHex($);let J=$.length,G=J/2;if(J%2)throw Error("hex string expected, got unpadded hex of length "+J);let q=new Uint8Array(G);for(let Q=0,Y=0;Q<G;Q++,Y+=2){let X=I9($.charCodeAt(Y)),U=I9($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+Y)}q[Q]=X*16+U}return q}function V$(...$){let J=0;for(let q=0;q<$.length;q++){let Q=$[q];n(Q),J+=Q.length}let G=new Uint8Array(J);for(let q=0,Q=0;q<$.length;q++){let Y=$[q];G.set(Y,Q),Q+=Y.length}return G}function R8($,J={}){let G=(Q,Y)=>$(Y).update(Q).digest(),q=$(void 0);return G.outputLen=q.outputLen,G.blockLen=q.blockLen,G.create=(Q)=>$(Q),Object.assign(G,J),Object.freeze(G)}function XJ($=32){let J=typeof globalThis==="object"?globalThis.crypto:null;if(typeof J?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return J.getRandomValues(new Uint8Array($))}var UJ=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yQ=BigInt(0),xQ=BigInt(1);function UG($,J=""){if(typeof $!=="boolean"){let G=J&&`"${J}" `;throw Error(G+"expected boolean, got type="+typeof $)}return $}function B9($){if(typeof $==="bigint"){if(!Dq($))throw Error("positive bigint expected, got "+$)}else H$($);return $}function WG($){let J=B9($).toString(16);return J.length&1?"0"+J:J}function E9($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?yQ:BigInt("0x"+$)}function WJ($){return E9(PJ($))}function MJ($){return E9(PJ(Hq(n($)).reverse()))}function V8($,J){H$(J),$=B9($);let G=gJ($.toString(16).padStart(J*2,"0"));if(G.length!==J)throw Error("number too large");return G}function MG($,J){return V8($,J).reverse()}function Hq($){return Uint8Array.from($)}function zJ($){return Uint8Array.from($,(J,G)=>{let q=J.charCodeAt(0);if(J.length!==1||q>127)throw Error(`string contains non-ASCII character "${$[G]}" with code ${q} at position ${G}`);return q})}var Dq=($)=>typeof $==="bigint"&&yQ<=$;function rR($,J,G){return Dq($)&&Dq(J)&&Dq(G)&&J<=$&&$<G}function zG($,J,G,q){if(!rR(J,G,q))throw Error("expected valid "+$+": "+G+" <= n < "+q+", got "+J)}function uQ($){let J;for(J=0;$>yQ;$>>=xQ,J+=1);return J}var RG=($)=>(xQ<<BigInt($))-xQ;function C9($,J,G){if(H$($,"hashLen"),H$(J,"qByteLen"),typeof G!=="function")throw Error("hmacFn must be a function");let q=(N)=>new Uint8Array(N),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=q($),M=q($),z=0,R=()=>{W.fill(1),M.fill(0),z=0},O=(...N)=>G(M,V$(W,...N)),V=(N=Q)=>{if(M=O(Y,N),W=O(),N.length===0)return;M=O(X,N),W=O()},w=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let N=0,f=[];while(N<J){W=O();let K=W.slice();f.push(K),N+=W.length}return V$(...f)};return(N,f)=>{R(),V(N);let K=void 0;while(!(K=f(w())))V();return R(),K}}function kJ($,J={},G={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function q(Y,X,U){let W=$[Y];if(U&&W===void 0)return;let M=typeof W;if(M!==X||W===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${M}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>q(U,W,X));Q(J,!1),Q(G,!0)}function hQ($){let J=new WeakMap;return(G,...q)=>{let Q=J.get(G);if(Q!==void 0)return Q;let Y=$(G,...q);return J.set(G,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var h$=BigInt(0),g$=BigInt(1),FJ=BigInt(2),Z9=BigInt(3),v9=BigInt(4),L9=BigInt(5),pR=BigInt(7),P9=BigInt(8),nR=BigInt(9),g9=BigInt(16);function u$($,J){let G=$%J;return G>=h$?G:J+G}function q0($,J,G){let q=$;while(J-- >h$)q*=q,q%=G;return q}function S9($,J){if($===h$)throw Error("invert: expected non-zero number");if(J<=h$)throw Error("invert: expected positive modulus, got "+J);let G=u$($,J),q=J,Q=h$,Y=g$,X=g$,U=h$;while(G!==h$){let M=q/G,z=q%G,R=Q-X*M,O=Y-U*M;q=G,G=z,Q=X,Y=U,X=R,U=O}if(q!==g$)throw Error("invert: does not exist");return u$(Q,J)}function lQ($,J,G){if(!$.eql($.sqr(J),G))throw Error("Cannot find square root")}function k9($,J){let G=($.ORDER+g$)/v9,q=$.pow(J,G);return lQ($,q,J),q}function oR($,J){let G=($.ORDER-L9)/P9,q=$.mul(J,FJ),Q=$.pow(q,G),Y=$.mul(J,Q),X=$.mul($.mul(Y,FJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return lQ($,U,J),U}function iR($){let J=Kq($),G=F9($),q=G(J,J.neg(J.ONE)),Q=G(J,q),Y=G(J,J.neg(q)),X=($+pR)/g9;return(U,W)=>{let M=U.pow(W,X),z=U.mul(M,q),R=U.mul(M,Q),O=U.mul(M,Y),V=U.eql(U.sqr(z),W),w=U.eql(U.sqr(R),W);M=U.cmov(M,z,V),z=U.cmov(O,R,w);let j=U.eql(U.sqr(z),W),N=U.cmov(M,z,j);return lQ(U,N,W),N}}function F9($){if($<Z9)throw Error("sqrt is not defined for small field");let J=$-g$,G=0;while(J%FJ===h$)J/=FJ,G++;let q=FJ,Q=Kq($);while(T9(Q,q)===1)if(q++>1000)throw Error("Cannot find square root: probably non-prime P");if(G===1)return k9;let Y=Q.pow(q,J),X=(J+g$)/FJ;return function(W,M){if(W.is0(M))return M;if(T9(W,M)!==1)throw Error("Cannot find square root");let z=G,R=W.mul(W.ONE,Y),O=W.pow(M,J),V=W.pow(M,X);while(!W.eql(O,W.ONE)){if(W.is0(O))return W.ZERO;let w=1,j=W.sqr(O);while(!W.eql(j,W.ONE))if(w++,j=W.sqr(j),w===z)throw Error("Cannot find square root");let N=g$<<BigInt(z-w-1),f=W.pow(R,N);z=w,R=W.sqr(f),O=W.mul(O,R),V=W.mul(V,f)}return V}}function aR($){if($%v9===Z9)return k9;if($%P9===L9)return oR;if($%g9===nR)return iR($);return F9($)}var sR=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function cQ($){let J={ORDER:"bigint",BYTES:"number",BITS:"number"},G=sR.reduce((q,Q)=>{return q[Q]="function",q},J);return kJ($,G),$}function tR($,J,G){if(G<h$)throw Error("invalid exponent, negatives unsupported");if(G===h$)return $.ONE;if(G===g$)return J;let q=$.ONE,Q=J;while(G>h$){if(G&g$)q=$.mul(q,Q);Q=$.sqr(Q),G>>=g$}return q}function VG($,J,G=!1){let q=Array(J.length).fill(G?$.ZERO:void 0),Q=J.reduce((X,U,W)=>{if($.is0(U))return X;return q[W]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return J.reduceRight((X,U,W)=>{if($.is0(U))return X;return q[W]=$.mul(X,q[W]),$.mul(X,U)},Y),q}function T9($,J){let G=($.ORDER-g$)/FJ,q=$.pow(J,G),Q=$.eql(q,$.ONE),Y=$.eql(q,$.ZERO),X=$.eql(q,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function eR($,J){if(J!==void 0)H$(J);let G=J!==void 0?J:$.toString(2).length,q=Math.ceil(G/8);return{nBitLength:G,nByteLength:q}}class _9{ORDER;BITS;BYTES;isLE;ZERO=h$;ONE=g$;_lengths;_sqrt;_mod;constructor($,J={}){if($<=h$)throw Error("invalid field: expected ORDER > 0, got "+$);let G=void 0;if(this.isLE=!1,J!=null&&typeof J==="object"){if(typeof J.BITS==="number")G=J.BITS;if(typeof J.sqrt==="function")this.sqrt=J.sqrt;if(typeof J.isLE==="boolean")this.isLE=J.isLE;if(J.allowedLengths)this._lengths=J.allowedLengths?.slice();if(typeof J.modFromBytes==="boolean")this._mod=J.modFromBytes}let{nBitLength:q,nByteLength:Q}=eR($,G);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=q,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return u$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return h$<=$&&$<this.ORDER}is0($){return $===h$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&g$)===g$}neg($){return u$(-$,this.ORDER)}eql($,J){return $===J}sqr($){return u$($*$,this.ORDER)}add($,J){return u$($+J,this.ORDER)}sub($,J){return u$($-J,this.ORDER)}mul($,J){return u$($*J,this.ORDER)}pow($,J){return tR(this,$,J)}div($,J){return u$($*S9(J,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,J){return $+J}subN($,J){return $-J}mulN($,J){return $*J}inv($){return S9($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=aR(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?MG($,this.BYTES):V8($,this.BYTES)}fromBytes($,J=!1){n($);let{_lengths:G,BYTES:q,isLE:Q,ORDER:Y,_mod:X}=this;if(G){if(!G.includes($.length)||$.length>q)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let W=new Uint8Array(q);W.set($,Q?0:W.length-$.length),$=W}if($.length!==q)throw Error("Field.fromBytes: expected "+q+" bytes, got "+$.length);let U=Q?MJ($):WJ($);if(X)U=u$(U,Y);if(!J){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return VG(this,$)}cmov($,J,G){return G?J:$}}function Kq($,J={}){return new _9($,J)}function b9($){if(typeof $!=="bigint")throw Error("field order must be bigint");let J=$.toString(2).length;return Math.ceil(J/8)}function dQ($){let J=b9($);return J+Math.ceil(J/2)}function m9($,J,G=!1){n($);let q=$.length,Q=b9(J),Y=dQ(J);if(q<16||q<Y||q>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+q);let X=G?MJ($):WJ($),U=u$(X,J-g$)+g$;return G?MG(U,Q):V8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O8=BigInt(0),_J=BigInt(1);function OG($,J){let G=J.negate();return $?G:J}function oQ($,J){let G=VG($.Fp,J.map((q)=>q.Z));return J.map((q,Q)=>$.fromAffine(q.toAffine(G[Q])))}function h9($,J){if(!Number.isSafeInteger($)||$<=0||$>J)throw Error("invalid window size, expected [1.."+J+"], got W="+$)}function rQ($,J){h9($,J);let G=Math.ceil(J/$)+1,q=2**($-1),Q=2**$,Y=RG($),X=BigInt($);return{windows:G,windowSize:q,mask:Y,maxNumber:Q,shiftBy:X}}function x9($,J,G){let{windowSize:q,mask:Q,maxNumber:Y,shiftBy:X}=G,U=Number($&Q),W=$>>X;if(U>q)U-=Y,W+=_J;let M=J*q,z=M+Math.abs(U)-1,R=U===0,O=U<0,V=J%2!==0;return{nextN:W,offset:z,isZero:R,isNeg:O,isNegF:V,offsetF:M}}var pQ=new WeakMap,l9=new WeakMap;function nQ($){return l9.get($)||1}function y9($){if($!==O8)throw Error("invalid wNAF")}class iQ{BASE;ZERO;Fn;bits;constructor($,J){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=J}_unsafeLadder($,J,G=this.ZERO){let q=$;while(J>O8){if(J&_J)G=G.add(q);q=q.double(),J>>=_J}return G}precomputeWindow($,J){let{windows:G,windowSize:q}=rQ(J,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<G;U++){X=Y,Q.push(X);for(let W=1;W<q;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,J,G){if(!this.Fn.isValid(G))throw Error("invalid scalar");let q=this.ZERO,Q=this.BASE,Y=rQ($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:M,isNeg:z,isNegF:R,offsetF:O}=x9(G,X,Y);if(G=U,M)Q=Q.add(OG(R,J[O]));else q=q.add(OG(z,J[W]))}return y9(G),{p:q,f:Q}}wNAFUnsafe($,J,G,q=this.ZERO){let Q=rQ($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(G===O8)break;let{nextN:X,offset:U,isZero:W,isNeg:M}=x9(G,Y,Q);if(G=X,W)continue;else{let z=J[U];q=q.add(M?z.negate():z)}}return y9(G),q}getPrecomputes($,J,G){let q=pQ.get(J);if(!q){if(q=this.precomputeWindow(J,$),$!==1){if(typeof G==="function")q=G(q);pQ.set(J,q)}}return q}cached($,J,G){let q=nQ($);return this.wNAF(q,this.getPrecomputes(q,$,G),J)}unsafe($,J,G,q){let Q=nQ($);if(Q===1)return this._unsafeLadder($,J,q);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,G),J,q)}createCache($,J){h9(J,this.bits),l9.set($,J),pQ.delete($)}hasCache($){return nQ($)!==1}}function c9($,J,G,q){let Q=J,Y=$.ZERO,X=$.ZERO;while(G>O8||q>O8){if(G&_J)Y=Y.add(Q);if(q&_J)X=X.add(Q);Q=Q.double(),G>>=_J,q>>=_J}return{p1:Y,p2:X}}function u9($,J,G){if(J){if(J.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return cQ(J),J}else return Kq($,{isLE:G})}function d9($,J,G={},q){if(q===void 0)q=$==="edwards";if(!J||typeof J!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let M=J[W];if(!(typeof M==="bigint"&&M>O8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=u9(J.p,G.Fp,q),Y=u9(J.n,G.Fn,q),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(J[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return J=Object.freeze(Object.assign({},J)),{CURVE:J,Fp:Q,Fn:Y}}function Aq($,J){return function(q){let Q=$(q);return{secretKey:Q,publicKey:J(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wG=BigInt(0),w8=BigInt(1),Iq=BigInt(2);function $7($){return kJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function r9($){let J=$7($),{P:G,type:q,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=J,U=q==="x25519";if(!U&&q!=="x448")throw Error("invalid type");let W=X||XJ,M=U?255:448,z=U?32:56,R=U?BigInt(9):BigInt(5),O=U?BigInt(121665):BigInt(39081),V=U?Iq**BigInt(254):Iq**BigInt(447),w=U?BigInt(8)*Iq**BigInt(251)-w8:BigInt(4)*Iq**BigInt(445)-w8,j=V+w+w8,N=(D)=>u$(D,G),f=K(R);function K(D){return MG(N(D),z)}function P(D){let H=Hq(n(D,z,"uCoordinate"));if(U)H[31]&=127;return N(MJ(H))}function k(D){return MJ(Q(Hq(n(D,z,"scalar"))))}function m(D,H){let B=y(P(H),k(D));if(B===wG)throw Error("invalid private or public key received");return K(B)}function F(D){return m(D,f)}let _=F,v=m;function L(D,H,B){let E=N(D*(H-B));return H=N(H-E),B=N(B+E),{x_2:H,x_3:B}}function y(D,H){zG("u",D,wG,G),zG("scalar",H,V,j);let B=H,E=D,A=w8,T=wG,Z=D,g=w8,x=wG;for(let d=BigInt(M-1);d>=wG;d--){let a=B>>d&w8;x^=a,{x_2:A,x_3:Z}=L(x,A,Z),{x_2:T,x_3:g}=L(x,T,g),x=a;let e=A+T,s=N(e*e),o=A-T,X$=N(o*o),D$=s-X$,d$=Z+g,X0=Z-g,U0=N(X0*e),$J=N(d$*o),a8=U0+$J,s8=U0-$J;Z=N(a8*a8),g=N(E*N(s8*s8)),A=N(s*X$),T=N(D$*(s+N(O*D$)))}({x_2:A,x_3:Z}=L(x,A,Z)),{x_2:T,x_3:g}=L(x,T,g);let l=Y(T);return N(A*l)}let C={secretKey:z,publicKey:z,seed:z},I=(D=W(z))=>{return n(D,C.seed,"seed"),D},S={randomSecretKey:I};return Object.freeze({keygen:Aq(I,_),getSharedSecret:v,getPublicKey:_,scalarMult:m,scalarMultBase:F,utils:S,GuBytes:f.slice(),lengths:C})}class aQ{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,J){if(G0($),n(J,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let G=this.blockLen,q=new Uint8Array(G);q.set(J.length>G?$.create().update(J).digest():J);for(let Q=0;Q<q.length;Q++)q[Q]^=54;this.iHash.update(q),this.oHash=$.create();for(let Q=0;Q<q.length;Q++)q[Q]^=106;this.oHash.update(q),r$(q)}update($){return u0(this),this.iHash.update($),this}digestInto($){u0(this),n($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:J,iHash:G,finished:q,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=q,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=J._cloneInto($.oHash),$.iHash=G._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var N8=($,J,G)=>new aQ($,J).update(G).digest();N8.create=($,J)=>new aQ($,J);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p9=($,J)=>($+($>=0?J:-J)/o9)/J;function J7($,J,G){let[[q,Q],[Y,X]]=J,U=p9(X*$,G),W=p9(-Q*$,G),M=$-U*q-W*Y,z=-U*Q-W*X,R=M<h0,O=z<h0;if(R)M=-M;if(O)z=-z;let V=RG(Math.ceil(uQ(G)/2))+j8;if(M<h0||M>=V||z<h0||z>=V)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:R,k1:M,k2neg:O,k2:z}}function tQ($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function sQ($,J){let G={};for(let q of Object.keys(J))G[q]=$[q]===void 0?J[q]:$[q];if(UG(G.lowS,"lowS"),UG(G.prehash,"prehash"),G.format!==void 0)tQ(G.format);return G}class n9 extends Error{constructor($=""){super($)}}var RJ={Err:n9,_tlv:{encode:($,J)=>{let{Err:G}=RJ;if($<0||$>256)throw new G("tlv.encode: wrong tag");if(J.length&1)throw new G("tlv.encode: unpadded data");let q=J.length/2,Q=WG(q);if(Q.length/2&128)throw new G("tlv.encode: long form length too big");let Y=q>127?WG(Q.length/2|128):"";return WG($)+Y+Q+J},decode($,J){let{Err:G}=RJ,q=0;if($<0||$>256)throw new G("tlv.encode: wrong tag");if(J.length<2||J[q++]!==$)throw new G("tlv.decode: wrong tlv");let Q=J[q++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new G("tlv.decode(long): indefinite length not supported");if(W>4)throw new G("tlv.decode(long): byte length is too big");let M=J.subarray(q,q+W);if(M.length!==W)throw new G("tlv.decode: length bytes not complete");if(M[0]===0)throw new G("tlv.decode(long): zero leftmost byte");for(let z of M)X=X<<8|z;if(q+=W,X<128)throw new G("tlv.decode(long): not minimal encoding")}let U=J.subarray(q,q+X);if(U.length!==X)throw new G("tlv.decode: wrong value length");return{v:U,l:J.subarray(q+X)}}},_int:{encode($){let{Err:J}=RJ;if($<h0)throw new J("integer: negative integers are not allowed");let G=WG($);if(Number.parseInt(G[0],16)&8)G="00"+G;if(G.length&1)throw new J("unexpected DER parsing assertion: unpadded hex");return G},decode($){let{Err:J}=RJ;if($[0]&128)throw new J("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new J("invalid signature integer: unnecessary leading zero");return WJ($)}},toSig($){let{Err:J,_int:G,_tlv:q}=RJ,Q=n($,void 0,"signature"),{v:Y,l:X}=q.decode(48,Q);if(X.length)throw new J("invalid signature: left bytes after parsing");let{v:U,l:W}=q.decode(2,Y),{v:M,l:z}=q.decode(2,W);if(z.length)throw new J("invalid signature: left bytes after parsing");return{r:G.decode(U),s:G.decode(M)}},hexFromSig($){let{_tlv:J,_int:G}=RJ,q=J.encode(2,G.encode($.r)),Q=J.encode(2,G.encode($.s)),Y=q+Q;return J.encode(48,Y)}},h0=BigInt(0),j8=BigInt(1),o9=BigInt(2),fq=BigInt(3),G7=BigInt(4);function eQ($,J={}){let G=d9("weierstrass",$,J),{Fp:q,Fn:Q}=G,Y=G.CURVE,{h:X,n:U}=Y;kJ(J,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=J;if(W){if(!q.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=a9(q,Q);function z(){if(!q.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function R(I,S,D){let{x:H,y:B}=S.toAffine(),E=q.toBytes(H);if(UG(D,"isCompressed"),D){z();let A=!q.isOdd(B);return V$(i9(A),E)}else return V$(Uint8Array.of(4),E,q.toBytes(B))}function O(I){n(I,void 0,"Point");let{publicKey:S,publicKeyUncompressed:D}=M,H=I.length,B=I[0],E=I.subarray(1);if(H===S&&(B===2||B===3)){let A=q.fromBytes(E);if(!q.isValid(A))throw Error("bad point: is not on curve, wrong x");let T=j(A),Z;try{Z=q.sqrt(T)}catch(l){let d=l instanceof Error?": "+l.message:"";throw Error("bad point: is not on curve, sqrt error"+d)}z();let g=q.isOdd(Z);if((B&1)===1!==g)Z=q.neg(Z);return{x:A,y:Z}}else if(H===D&&B===4){let A=q.BYTES,T=q.fromBytes(E.subarray(0,A)),Z=q.fromBytes(E.subarray(A,A*2));if(!N(T,Z))throw Error("bad point: is not on curve");return{x:T,y:Z}}else throw Error(`bad point: got length ${H}, expected compressed=${S} or uncompressed=${D}`)}let V=J.toBytes||R,w=J.fromBytes||O;function j(I){let S=q.sqr(I),D=q.mul(S,I);return q.add(q.add(D,q.mul(I,Y.a)),Y.b)}function N(I,S){let D=q.sqr(S),H=j(I);return q.eql(D,H)}if(!N(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let f=q.mul(q.pow(Y.a,fq),G7),K=q.mul(q.sqr(Y.b),BigInt(27));if(q.is0(q.add(f,K)))throw Error("bad curve params: a or b");function P(I,S,D=!1){if(!q.isValid(S)||D&&q.is0(S))throw Error(`bad point coordinate ${I}`);return S}function k(I){if(!(I instanceof L))throw Error("Weierstrass Point expected")}function m(I){if(!W||!W.basises)throw Error("no endo");return J7(I,W.basises,Q.ORDER)}let F=hQ((I,S)=>{let{X:D,Y:H,Z:B}=I;if(q.eql(B,q.ONE))return{x:D,y:H};let E=I.is0();if(S==null)S=E?q.ONE:q.inv(B);let A=q.mul(D,S),T=q.mul(H,S),Z=q.mul(B,S);if(E)return{x:q.ZERO,y:q.ZERO};if(!q.eql(Z,q.ONE))throw Error("invZ was invalid");return{x:A,y:T}}),_=hQ((I)=>{if(I.is0()){if(J.allowInfinityPoint&&!q.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:S,y:D}=I.toAffine();if(!q.isValid(S)||!q.isValid(D))throw Error("bad point: x or y not field elements");if(!N(S,D))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function v(I,S,D,H,B){return D=new L(q.mul(D.X,I),D.Y,D.Z),S=OG(H,S),D=OG(B,D),S.add(D)}class L{static BASE=new L(Y.Gx,Y.Gy,q.ONE);static ZERO=new L(q.ZERO,q.ONE,q.ZERO);static Fp=q;static Fn=Q;X;Y;Z;constructor(I,S,D){this.X=P("x",I),this.Y=P("y",S,!0),this.Z=P("z",D),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:S,y:D}=I||{};if(!I||!q.isValid(S)||!q.isValid(D))throw Error("invalid affine point");if(I instanceof L)throw Error("projective point not allowed");if(q.is0(S)&&q.is0(D))return L.ZERO;return new L(S,D,q.ONE)}static fromBytes(I){let S=L.fromAffine(w(n(I,void 0,"point")));return S.assertValidity(),S}static fromHex(I){return L.fromBytes(gJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,S=!0){if(C.createCache(this,I),!S)this.multiply(fq);return this}assertValidity(){_(this)}hasEvenY(){let{y:I}=this.toAffine();if(!q.isOdd)throw Error("Field doesn't support isOdd");return!q.isOdd(I)}equals(I){k(I);let{X:S,Y:D,Z:H}=this,{X:B,Y:E,Z:A}=I,T=q.eql(q.mul(S,A),q.mul(B,H)),Z=q.eql(q.mul(D,A),q.mul(E,H));return T&&Z}negate(){return new L(this.X,q.neg(this.Y),this.Z)}double(){let{a:I,b:S}=Y,D=q.mul(S,fq),{X:H,Y:B,Z:E}=this,A=q.ZERO,T=q.ZERO,Z=q.ZERO,g=q.mul(H,H),x=q.mul(B,B),l=q.mul(E,E),d=q.mul(H,B);return d=q.add(d,d),Z=q.mul(H,E),Z=q.add(Z,Z),A=q.mul(I,Z),T=q.mul(D,l),T=q.add(A,T),A=q.sub(x,T),T=q.add(x,T),T=q.mul(A,T),A=q.mul(d,A),Z=q.mul(D,Z),l=q.mul(I,l),d=q.sub(g,l),d=q.mul(I,d),d=q.add(d,Z),Z=q.add(g,g),g=q.add(Z,g),g=q.add(g,l),g=q.mul(g,d),T=q.add(T,g),l=q.mul(B,E),l=q.add(l,l),g=q.mul(l,d),A=q.sub(A,g),Z=q.mul(l,x),Z=q.add(Z,Z),Z=q.add(Z,Z),new L(A,T,Z)}add(I){k(I);let{X:S,Y:D,Z:H}=this,{X:B,Y:E,Z:A}=I,T=q.ZERO,Z=q.ZERO,g=q.ZERO,x=Y.a,l=q.mul(Y.b,fq),d=q.mul(S,B),a=q.mul(D,E),e=q.mul(H,A),s=q.add(S,D),o=q.add(B,E);s=q.mul(s,o),o=q.add(d,a),s=q.sub(s,o),o=q.add(S,H);let X$=q.add(B,A);return o=q.mul(o,X$),X$=q.add(d,e),o=q.sub(o,X$),X$=q.add(D,H),T=q.add(E,A),X$=q.mul(X$,T),T=q.add(a,e),X$=q.sub(X$,T),g=q.mul(x,o),T=q.mul(l,e),g=q.add(T,g),T=q.sub(a,g),g=q.add(a,g),Z=q.mul(T,g),a=q.add(d,d),a=q.add(a,d),e=q.mul(x,e),o=q.mul(l,o),a=q.add(a,e),e=q.sub(d,e),e=q.mul(x,e),o=q.add(o,e),d=q.mul(a,o),Z=q.add(Z,d),d=q.mul(X$,o),T=q.mul(s,T),T=q.sub(T,d),d=q.mul(s,a),g=q.mul(X$,g),g=q.add(g,d),new L(T,Z,g)}subtract(I){return this.add(I.negate())}is0(){return this.equals(L.ZERO)}multiply(I){let{endo:S}=J;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let D,H,B=(E)=>C.cached(this,E,(A)=>oQ(L,A));if(S){let{k1neg:E,k1:A,k2neg:T,k2:Z}=m(I),{p:g,f:x}=B(A),{p:l,f:d}=B(Z);H=x.add(d),D=v(S.beta,g,l,E,T)}else{let{p:E,f:A}=B(I);D=E,H=A}return oQ(L,[D,H])[0]}multiplyUnsafe(I){let{endo:S}=J,D=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===h0||D.is0())return L.ZERO;if(I===j8)return D;if(C.hasCache(this))return this.multiply(I);if(S){let{k1neg:H,k1:B,k2neg:E,k2:A}=m(I),{p1:T,p2:Z}=c9(L,D,B,A);return v(S.beta,T,Z,H,E)}else return C.unsafe(D,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=J;if(X===j8)return!0;if(I)return I(L,this);return C.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=J;if(X===j8)return this;if(I)return I(L,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return UG(I,"isCompressed"),this.assertValidity(),V(L,this,I)}toHex(I=!0){return PJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,C=new iQ(L,J.endo?Math.ceil(y/2):y);return L.BASE.precompute(8),L}function i9($){return Uint8Array.of($?2:3)}function a9($,J){return{secretKey:J.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*J.BYTES}}function q7($,J={}){let{Fn:G}=$,q=J.randomBytes||XJ,Q=Object.assign(a9($.Fp,G),{seed:dQ(G.ORDER)});function Y(V){try{let w=G.fromBytes(V);return G.isValidNot0(w)}catch(w){return!1}}function X(V,w){let{publicKey:j,publicKeyUncompressed:N}=Q;try{let f=V.length;if(w===!0&&f!==j)return!1;if(w===!1&&f!==N)return!1;return!!$.fromBytes(V)}catch(f){return!1}}function U(V=q(Q.seed)){return m9(n(V,Q.seed,"seed"),G.ORDER)}function W(V,w=!0){return $.BASE.multiply(G.fromBytes(V)).toBytes(w)}function M(V){let{secretKey:w,publicKey:j,publicKeyUncompressed:N}=Q;if(!z8(V))return;if("_lengths"in G&&G._lengths||w===j)return;let f=n(V,void 0,"key").length;return f===j||f===N}function z(V,w,j=!0){if(M(V)===!0)throw Error("first arg must be private key");if(M(w)===!1)throw Error("second arg must be public key");let N=G.fromBytes(V);return $.fromBytes(w).multiply(N).toBytes(j)}let R={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},O=Aq(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:O,Point:$,utils:R,lengths:Q})}function $Y($,J,G={}){G0(J),kJ(G,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),G=Object.assign({},G);let q=G.randomBytes||XJ,Q=G.hmac||((D,H)=>N8(J,D,H)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:W}=X,{keygen:M,getPublicKey:z,getSharedSecret:R,utils:O,lengths:V}=q7($,G),w={prehash:!0,lowS:typeof G.lowS==="boolean"?G.lowS:!0,format:"compact",extraEntropy:!1},j=U*o9<Y.ORDER;function N(D){let H=U>>j8;return D>H}function f(D,H){if(!X.isValidNot0(H))throw Error(`invalid signature ${D}: out of range 1..Point.Fn.ORDER`);return H}function K(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function P(D,H){tQ(H);let B=V.signature,E=H==="compact"?B:H==="recovered"?B+1:void 0;return n(D,E)}class k{r;s;recovery;constructor(D,H,B){if(this.r=f("r",D),this.s=f("s",H),B!=null){if(K(),![0,1,2,3].includes(B))throw Error("invalid recovery id");this.recovery=B}Object.freeze(this)}static fromBytes(D,H=w.format){P(D,H);let B;if(H==="der"){let{r:Z,s:g}=RJ.toSig(n(D));return new k(Z,g)}if(H==="recovered")B=D[0],H="compact",D=D.subarray(1);let E=V.signature/2,A=D.subarray(0,E),T=D.subarray(E,E*2);return new k(X.fromBytes(A),X.fromBytes(T),B)}static fromHex(D,H){return this.fromBytes(gJ(D),H)}assertRecovery(){let{recovery:D}=this;if(D==null)throw Error("invalid recovery id: must be present");return D}addRecoveryBit(D){return new k(this.r,this.s,D)}recoverPublicKey(D){let{r:H,s:B}=this,E=this.assertRecovery(),A=E===2||E===3?H+U:H;if(!Y.isValid(A))throw Error("invalid recovery id: sig.r+curve.n != R.x");let T=Y.toBytes(A),Z=$.fromBytes(V$(i9((E&1)===0),T)),g=X.inv(A),x=F(n(D,void 0,"msgHash")),l=X.create(-x*g),d=X.create(B*g),a=$.BASE.multiplyUnsafe(l).add(Z.multiplyUnsafe(d));if(a.is0())throw Error("invalid recovery: point at infinify");return a.assertValidity(),a}hasHighS(){return N(this.s)}toBytes(D=w.format){if(tQ(D),D==="der")return gJ(RJ.hexFromSig(this));let{r:H,s:B}=this,E=X.toBytes(H),A=X.toBytes(B);if(D==="recovered")return K(),V$(Uint8Array.of(this.assertRecovery()),E,A);return V$(E,A)}toHex(D){return PJ(this.toBytes(D))}}let m=G.bits2int||function(H){if(H.length>8192)throw Error("input is too large");let B=WJ(H),E=H.length*8-W;return E>0?B>>BigInt(E):B},F=G.bits2int_modN||function(H){return X.create(m(H))},_=RG(W);function v(D){return zG("num < 2^"+W,D,h0,_),X.toBytes(D)}function L(D,H){return n(D,void 0,"message"),H?n(J(D),void 0,"prehashed message"):D}function y(D,H,B){let{lowS:E,prehash:A,extraEntropy:T}=sQ(B,w);D=L(D,A);let Z=F(D),g=X.fromBytes(H);if(!X.isValidNot0(g))throw Error("invalid private key");let x=[v(g),v(Z)];if(T!=null&&T!==!1){let e=T===!0?q(V.secretKey):T;x.push(n(e,void 0,"extraEntropy"))}let l=V$(...x),d=Z;function a(e){let s=m(e);if(!X.isValidNot0(s))return;let o=X.inv(s),X$=$.BASE.multiply(s).toAffine(),D$=X.create(X$.x);if(D$===h0)return;let d$=X.create(o*X.create(d+D$*g));if(d$===h0)return;let X0=(X$.x===D$?0:2)|Number(X$.y&j8),U0=d$;if(E&&N(d$))U0=X.neg(d$),X0^=1;return new k(D$,U0,j?void 0:X0)}return{seed:l,k2sig:a}}function C(D,H,B={}){let{seed:E,k2sig:A}=y(D,H,B);return C9(J.outputLen,X.BYTES,Q)(E,A).toBytes(B.format)}function I(D,H,B,E={}){let{lowS:A,prehash:T,format:Z}=sQ(E,w);if(B=n(B,void 0,"publicKey"),H=L(H,T),!z8(D)){let g=D instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+g)}P(D,Z);try{let g=k.fromBytes(D,Z),x=$.fromBytes(B);if(A&&g.hasHighS())return!1;let{r:l,s:d}=g,a=F(H),e=X.inv(d),s=X.create(a*e),o=X.create(l*e),X$=$.BASE.multiplyUnsafe(s).add(x.multiplyUnsafe(o));if(X$.is0())return!1;return X.create(X$.x)===l}catch(g){return!1}}function S(D,H,B={}){let{prehash:E}=sQ(B,w);return H=L(H,E),k.fromBytes(D,"recovered").recoverPublicKey(H).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:R,utils:O,lengths:V,Point:$,sign:C,verify:I,recoverPublicKey:S,Signature:k,hash:J})}function s9($,J,G){return $&J^~$&G}function t9($,J,G){return $&J^$&G^J&G}class Bq{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,J,G,q){this.blockLen=$,this.outputLen=J,this.padOffset=G,this.isLE=q,this.buffer=new Uint8Array($),this.view=jq(this.buffer)}update($){u0(this),n($);let{view:J,buffer:G,blockLen:q}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(q-this.pos,Q-Y);if(X===q){let U=jq($);for(;q<=Q-Y;Y+=q)this.process(U,Y);continue}if(G.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===q)this.process(J,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){u0(this),wq($,this),this.finished=!0;let{buffer:J,view:G,blockLen:q,isLE:Q}=this,{pos:Y}=this;if(J[Y++]=128,r$(this.buffer.subarray(Y)),this.padOffset>q-Y)this.process(G,0),Y=0;for(let z=Y;z<q;z++)J[z]=0;G.setBigUint64(q-8,BigInt(this.length*8),Q),this.process(G,0);let X=jq($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,M=this.get();if(W>M.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)X.setUint32(4*z,M[z],Q)}digest(){let{buffer:$,outputLen:J}=this;this.digestInto($);let G=$.slice(0,J);return this.destroy(),G}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:J,buffer:G,length:q,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=q,$.pos=X,q%J)$.buffer.set(G);return $}clone(){return this._cloneInto()}}var l0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),c0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),E$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),C$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Eq=BigInt(4294967295),e9=BigInt(32);function Q7($,J=!1){if(J)return{h:Number($&Eq),l:Number($>>e9&Eq)};return{h:Number($>>e9&Eq)|0,l:Number($&Eq)|0}}function Cq($,J=!1){let G=$.length,q=new Uint32Array(G),Q=new Uint32Array(G);for(let Y=0;Y<G;Y++){let{h:X,l:U}=Q7($[Y],J);[q[Y],Q[Y]]=[X,U]}return[q,Q]}var JY=($,J,G)=>$>>>G,GY=($,J,G)=>$<<32-G|J>>>G,bJ=($,J,G)=>$>>>G|J<<32-G,mJ=($,J,G)=>$<<32-G|J>>>G,NG=($,J,G)=>$<<64-G|J>>>G-32,jG=($,J,G)=>$>>>G-32|J<<64-G;var $U=($,J,G)=>$<<G|J>>>32-G,JU=($,J,G)=>J<<G|$>>>32-G,GU=($,J,G)=>J<<G-32|$>>>64-G,qU=($,J,G)=>$<<G-32|J>>>64-G;function f0($,J,G,q){let Q=(J>>>0)+(q>>>0);return{h:$+G+(Q/4294967296|0)|0,l:Q|0}}var QU=($,J,G)=>($>>>0)+(J>>>0)+(G>>>0),YU=($,J,G,q)=>J+G+q+($/4294967296|0)|0,XU=($,J,G,q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0),UU=($,J,G,q,Q)=>J+G+q+Q+($/4294967296|0)|0,WU=($,J,G,q,Q)=>($>>>0)+(J>>>0)+(G>>>0)+(q>>>0)+(Q>>>0),MU=($,J,G,q,Q,Y)=>J+G+q+Q+Y+($/4294967296|0)|0;var X7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VJ=new Uint32Array(64);class qY extends Bq{constructor($){super(64,$,8,!1)}get(){let{A:$,B:J,C:G,D:q,E:Q,F:Y,G:X,H:U}=this;return[$,J,G,q,Q,Y,X,U]}set($,J,G,q,Q,Y,X,U){this.A=$|0,this.B=J|0,this.C=G|0,this.D=q|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,J){for(let z=0;z<16;z++,J+=4)VJ[z]=$.getUint32(J,!1);for(let z=16;z<64;z++){let R=VJ[z-15],O=VJ[z-2],V=z0(R,7)^z0(R,18)^R>>>3,w=z0(O,17)^z0(O,19)^O>>>10;VJ[z]=w+VJ[z-7]+V+VJ[z-16]|0}let{A:G,B:q,C:Q,D:Y,E:X,F:U,G:W,H:M}=this;for(let z=0;z<64;z++){let R=z0(X,6)^z0(X,11)^z0(X,25),O=M+R+s9(X,U,W)+X7[z]+VJ[z]|0,w=(z0(G,2)^z0(G,13)^z0(G,22))+t9(G,q,Q)|0;M=W,W=U,U=X,X=Y+O|0,Y=Q,Q=q,q=G,G=O+w|0}G=G+this.A|0,q=q+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,M=M+this.H|0,this.set(G,q,Q,Y,X,U,W,M)}roundClean(){r$(VJ)}destroy(){this.set(0,0,0,0,0,0,0,0),r$(this.buffer)}}class zU extends qY{A=l0[0]|0;B=l0[1]|0;C=l0[2]|0;D=l0[3]|0;E=l0[4]|0;F=l0[5]|0;G=l0[6]|0;H=l0[7]|0;constructor(){super(32)}}class U7 extends qY{A=c0[0]|0;B=c0[1]|0;C=c0[2]|0;D=c0[3]|0;E=c0[4]|0;F=c0[5]|0;G=c0[6]|0;H=c0[7]|0;constructor(){super(28)}}var RU=(()=>Cq(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),W7=(()=>RU[0])(),M7=(()=>RU[1])(),OJ=new Uint32Array(80),wJ=new Uint32Array(80);class DG extends Bq{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:J,Bh:G,Bl:q,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:M,Fh:z,Fl:R,Gh:O,Gl:V,Hh:w,Hl:j}=this;return[$,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j]}set($,J,G,q,Q,Y,X,U,W,M,z,R,O,V,w,j){this.Ah=$|0,this.Al=J|0,this.Bh=G|0,this.Bl=q|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=M|0,this.Fh=z|0,this.Fl=R|0,this.Gh=O|0,this.Gl=V|0,this.Hh=w|0,this.Hl=j|0}process($,J){for(let K=0;K<16;K++,J+=4)OJ[K]=$.getUint32(J),wJ[K]=$.getUint32(J+=4);for(let K=16;K<80;K++){let P=OJ[K-15]|0,k=wJ[K-15]|0,m=bJ(P,k,1)^bJ(P,k,8)^JY(P,k,7),F=mJ(P,k,1)^mJ(P,k,8)^GY(P,k,7),_=OJ[K-2]|0,v=wJ[K-2]|0,L=bJ(_,v,19)^NG(_,v,61)^JY(_,v,6),y=mJ(_,v,19)^jG(_,v,61)^GY(_,v,6),C=XU(F,y,wJ[K-7],wJ[K-16]),I=UU(C,m,L,OJ[K-7],OJ[K-16]);OJ[K]=I|0,wJ[K]=C|0}let{Ah:G,Al:q,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:M,Eh:z,El:R,Fh:O,Fl:V,Gh:w,Gl:j,Hh:N,Hl:f}=this;for(let K=0;K<80;K++){let P=bJ(z,R,14)^bJ(z,R,18)^NG(z,R,41),k=mJ(z,R,14)^mJ(z,R,18)^jG(z,R,41),m=z&O^~z&w,F=R&V^~R&j,_=WU(f,k,F,M7[K],wJ[K]),v=MU(_,N,P,m,W7[K],OJ[K]),L=_|0,y=bJ(G,q,28)^NG(G,q,34)^NG(G,q,39),C=mJ(G,q,28)^jG(G,q,34)^jG(G,q,39),I=G&Q^G&X^Q&X,S=q&Y^q&U^Y&U;N=w|0,f=j|0,w=O|0,j=V|0,O=z|0,V=R|0,{h:z,l:R}=f0(W|0,M|0,v|0,L|0),W=X|0,M=U|0,X=Q|0,U=Y|0,Q=G|0,Y=q|0;let D=QU(L,C,S);G=YU(D,v,y,I),q=D|0}({h:G,l:q}=f0(this.Ah|0,this.Al|0,G|0,q|0)),{h:Q,l:Y}=f0(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=f0(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:M}=f0(this.Dh|0,this.Dl|0,W|0,M|0),{h:z,l:R}=f0(this.Eh|0,this.El|0,z|0,R|0),{h:O,l:V}=f0(this.Fh|0,this.Fl|0,O|0,V|0),{h:w,l:j}=f0(this.Gh|0,this.Gl|0,w|0,j|0),{h:N,l:f}=f0(this.Hh|0,this.Hl|0,N|0,f|0),this.set(G,q,Q,Y,X,U,W,M,z,R,O,V,w,j,N,f)}roundClean(){r$(OJ,wJ)}destroy(){r$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class z7 extends DG{Ah=C$[0]|0;Al=C$[1]|0;Bh=C$[2]|0;Bl=C$[3]|0;Ch=C$[4]|0;Cl=C$[5]|0;Dh=C$[6]|0;Dl=C$[7]|0;Eh=C$[8]|0;El=C$[9]|0;Fh=C$[10]|0;Fl=C$[11]|0;Gh=C$[12]|0;Gl=C$[13]|0;Hh=C$[14]|0;Hl=C$[15]|0;constructor(){super(64)}}class VU extends DG{Ah=E$[0]|0;Al=E$[1]|0;Bh=E$[2]|0;Bl=E$[3]|0;Ch=E$[4]|0;Cl=E$[5]|0;Dh=E$[6]|0;Dl=E$[7]|0;Eh=E$[8]|0;El=E$[9]|0;Fh=E$[10]|0;Fl=E$[11]|0;Gh=E$[12]|0;Gl=E$[13]|0;Hh=E$[14]|0;Hl=E$[15]|0;constructor(){super(48)}}var k$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),F$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class R7 extends DG{Ah=k$[0]|0;Al=k$[1]|0;Bh=k$[2]|0;Bl=k$[3]|0;Ch=k$[4]|0;Cl=k$[5]|0;Dh=k$[6]|0;Dl=k$[7]|0;Eh=k$[8]|0;El=k$[9]|0;Fh=k$[10]|0;Fl=k$[11]|0;Gh=k$[12]|0;Gl=k$[13]|0;Hh=k$[14]|0;Hl=k$[15]|0;constructor(){super(28)}}class V7 extends DG{Ah=F$[0]|0;Al=F$[1]|0;Bh=F$[2]|0;Bl=F$[3]|0;Ch=F$[4]|0;Cl=F$[5]|0;Dh=F$[6]|0;Dl=F$[7]|0;Eh=F$[8]|0;El=F$[9]|0;Fh=F$[10]|0;Fl=F$[11]|0;Gh=F$[12]|0;Gl=F$[13]|0;Hh=F$[14]|0;Hl=F$[15]|0;constructor(){super(32)}}var Sq=R8(()=>new zU,UJ(1));var OU=R8(()=>new VU,UJ(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O7=BigInt(1),wU=BigInt(2),w7=BigInt(3),N7=BigInt(5),gK=BigInt(8),NU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function j7($){let J=BigInt(10),G=BigInt(20),q=BigInt(40),Q=BigInt(80),Y=NU,U=$*$%Y*$%Y,W=q0(U,wU,Y)*U%Y,M=q0(W,O7,Y)*$%Y,z=q0(M,N7,Y)*M%Y,R=q0(z,J,Y)*z%Y,O=q0(R,G,Y)*R%Y,V=q0(O,q,Y)*O%Y,w=q0(V,Q,Y)*V%Y,j=q0(w,Q,Y)*V%Y,N=q0(j,J,Y)*z%Y;return{pow_p_5_8:q0(N,wU,Y)*$%Y,b2:U}}function D7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var jU=(()=>{let $=NU;return r9({P:$,type:"x25519",powPminus2:(J)=>{let{pow_p_5_8:G,b2:q}=j7(J);return u$(q0(G,w7,$)*q,$)},adjustScalarBytes:D7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),K7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var A7=eQ(H7),QY=$Y(A7,Sq);var I7=eQ(K7),DU=$Y(I7,OU);function KU($,J,G){if(G0($),G===void 0)G=new Uint8Array($.outputLen);return N8($,G,J)}var YY=Uint8Array.of(0),HU=Uint8Array.of();function AU($,J,G,q=32){G0($),H$(q,"length");let Q=$.outputLen;if(q>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(q/Q);if(G===void 0)G=HU;else n(G,void 0,"info");let X=new Uint8Array(Y*Q),U=N8.create($,J),W=U._cloneInto(),M=new Uint8Array(U.outputLen);for(let z=0;z<Y;z++)YY[0]=z+1,W.update(z===0?HU:M).update(G).update(YY).digestInto(M),X.set(M,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),r$(M,YY),X.slice(0,q)}var f7=BigInt(0),HG=BigInt(1),B7=BigInt(2),E7=BigInt(7),C7=BigInt(256),S7=BigInt(113),BU=[],EU=[],CU=[];for(let $=0,J=HG,G=1,q=0;$<24;$++){[G,q]=[q,(2*G+3*q)%5],BU.push(2*(5*q+G)),EU.push(($+1)*($+2)/2%64);let Q=f7;for(let Y=0;Y<7;Y++)if(J=(J<<HG^(J>>E7)*S7)%C7,J&B7)Q^=HG<<(HG<<BigInt(Y))-HG;CU.push(Q)}var SU=Cq(CU,!0),T7=SU[0],Z7=SU[1],IU=($,J,G)=>G>32?GU($,J,G):$U($,J,G),fU=($,J,G)=>G>32?qU($,J,G):JU($,J,G);function v7($,J=24){let G=new Uint32Array(10);for(let q=24-J;q<24;q++){for(let X=0;X<10;X++)G[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,W=(X+2)%10,M=G[W],z=G[W+1],R=IU(M,z,1)^G[U],O=fU(M,z,1)^G[U+1];for(let V=0;V<50;V+=10)$[X+V]^=R,$[X+V+1]^=O}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=EU[X],W=IU(Q,Y,U),M=fU(Q,Y,U),z=BU[X];Q=$[z],Y=$[z+1],$[z]=W,$[z+1]=M}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)G[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~G[(U+2)%10]&G[(U+4)%10]}$[0]^=T7[q],$[1]^=Z7[q]}r$(G)}class Tq{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,J,G,q=!1,Q=24){if(this.blockLen=$,this.suffix=J,this.outputLen=G,this.enableXOF=q,this.rounds=Q,H$(G,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Nq(this.state)}clone(){return this._cloneInto()}keccak(){mQ(this.state32),v7(this.state32,this.rounds),mQ(this.state32),this.posOut=0,this.pos=0}update($){u0(this),n($);let{blockLen:J,state:G}=this,q=$.length;for(let Q=0;Q<q;){let Y=Math.min(J-this.pos,q-Q);for(let X=0;X<Y;X++)G[this.pos++]^=$[Q++];if(this.pos===J)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:J,pos:G,blockLen:q}=this;if($[G]^=J,(J&128)!==0&&G===q-1)this.keccak();$[q-1]^=128,this.keccak()}writeInto($){u0(this,!1),n($),this.finish();let J=this.state,{blockLen:G}=this;for(let q=0,Q=$.length;q<Q;){if(this.posOut>=G)this.keccak();let Y=Math.min(G-this.posOut,Q-q);$.set(J.subarray(this.posOut,this.posOut+Y),q),this.posOut+=Y,q+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return H$($),this.xofInto(new Uint8Array($))}digestInto($){if(wq($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,r$(this.state)}_cloneInto($){let{blockLen:J,suffix:G,outputLen:q,rounds:Q,enableXOF:Y}=this;return $||=new Tq(J,G,q,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=G,$.outputLen=q,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var TU=($,J,G,q={})=>R8(()=>new Tq(J,$,G),q);var xJ=TU(6,136,32,UJ(8));var ZU=TU(6,72,64,UJ(10));var vU=($,J,G,q={})=>R8((Q={})=>new Tq(J,$,Q.dkLen===void 0?G:Q.dkLen,!0),q),LU=vU(31,168,16,UJ(11)),B0=vU(31,136,32,UJ(12));function XY($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function gU($){return XY($),($&$-1)===0&&$!==0}function UY($,J){XY($);let G=0;for(let q=0;q<J;q++,$>>>=1)G=G<<1|$&1;return G}function kU($){return XY($),31-Math.clz32($)}function PU($){let J=$.length;if(J<2||!gU(J))throw Error("n must be a power of 2 and greater than 1. Got "+J);let G=kU(J);for(let q=0;q<J;q++){let Q=UY(q,G);if(q<Q){let Y=$[q];$[q]=$[Q],$[Q]=Y}}return $}var WY=($,J)=>{let{N:G,roots:q,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=J,W=kU(G);if(!gU(G))throw Error("FFT: Polynomial size should be power of two");let M=Q!==Y;return(z)=>{if(z.length!==G)throw Error("FFT: wrong Polynomial length");if(Q&&U)PU(z);for(let R=0,O=1;R<W-X;R++){let V=Q?R+1+X:W-R,w=1<<V,j=w>>1,N=G>>V;for(let f=0;f<G;f+=w)for(let K=0,P=O++;K<j;K++){let k=Y?Q?G-P:P:K*N,m=f+K,F=f+K+j,_=q[k],v=z[F],L=z[m];if(M){let y=$.mul(v,_);z[m]=$.add(L,y),z[F]=$.sub(L,y)}else if(Y)z[m]=$.add(v,L),z[F]=$.mul($.sub(v,L),_);else z[m]=$.add(L,v),z[F]=$.mul($.sub(L,v),_)}}if(!Q&&U)PU(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var E0=XJ;function Zq($,J){if($.length!==J.length)return!1;let G=0;for(let q=0;q<$.length;q++)G|=$[q]^J[q];return G===0}function FU($){return Uint8Array.from($)}function yJ($,...J){let G=(Q)=>typeof Q==="number"?Q:Q.bytesLen,q=J.reduce((Q,Y)=>Q+G(Y),0);return{bytesLen:q,encode:(Q)=>{let Y=new Uint8Array(q);for(let X=0,U=0;X<J.length;X++){let W=J[X],M=G(W),z=typeof W==="number"?Q[X]:W.encode(Q[X]);if(n(z,M,$),Y.set(z,U),typeof W!=="number")z.fill(0);U+=M}return Y},decode:(Q)=>{n(Q,q,$);let Y=[];for(let X of J){let U=G(X),W=Q.subarray(0,U);Y.push(typeof X==="number"?W:X.decode(W)),Q=Q.subarray(U)}return Y}}}function vq($,J){let G=J*$.bytesLen;return{bytesLen:G,encode:(q)=>{if(q.length!==J)throw Error(`vecCoder.encode: wrong length=${q.length}. Expected: ${J}`);let Q=new Uint8Array(G);for(let Y=0,X=0;Y<q.length;Y++){let U=$.encode(q[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(q)=>{n(q,G);let Q=[];for(let Y=0;Y<q.length;Y+=$.bytesLen)Q.push($.decode(q.subarray(Y,Y+$.bytesLen)));return Q}}}function N$(...$){for(let J of $)if(Array.isArray(J))for(let G of J)G.fill(0);else J.fill(0)}function MY($){return(1<<$)-1}var nK=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var _U=($)=>{let{newPoly:J,N:G,Q:q,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,W=(K,P=q)=>{let k=K%P|0;return(k>=0?k|0:P+k|0)|0},M=(K,P=q)=>{let k=W(K,P)|0;return(k>P>>1?k-P|0:k)|0};function z(){let K=J(G);for(let P=0;P<G;P++){let k=UY(P,X),m=BigInt(Y)**BigInt(k)%BigInt(q);K[P]=Number(m)|0}return K}let R=z(),O={add:(K,P)=>W((K|0)+(P|0))|0,sub:(K,P)=>W((K|0)-(P|0))|0,mul:(K,P)=>W((K|0)*(P|0))|0,inv:(K)=>{throw Error("not implemented")}},V={N:G,roots:R,invertButterflies:!0,skipStages:U?1:0,brp:!1},w=WY(O,{dit:!1,...V}),j=WY(O,{dit:!0,...V});return{mod:W,smod:M,nttZetas:R,NTT:{encode:(K)=>{return w(K)},decode:(K)=>{j(K);for(let P=0;P<K.length;P++)K[P]=W(Q*K[P]);return K}},bitsCoder:(K,P)=>{let k=MY(K),m=K*(G/8);return{bytesLen:m,encode:(F)=>{let _=new Uint8Array(m);for(let v=0,L=0,y=0,C=0;v<F.length;v++){L|=(P.encode(F[v])&k)<<y,y+=K;for(;y>=8;y-=8,L>>=8)_[C++]=L&MY(y)}return _},decode:(F)=>{let _=J(G);for(let v=0,L=0,y=0,C=0;v<F.length;v++){L|=F[v]<<y,y+=8;for(;y>=K;y-=K,L>>=K)_[C++]=P.decode(L&k)}return _}}}}},L7=($)=>(J,G)=>{if(!G)G=$.blockLen;let q=new Uint8Array(J.length+2);q.set(J);let Q=J.length,Y=new Uint8Array(G),X=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(M,z)=>{return q[Q+0]=M,q[Q+1]=z,X.destroy(),X=$.create({}).update(q),U++,()=>{return W++,X.xofInto(Y)}},clean:()=>{X.destroy(),N$(Y,q)}}},bU=L7(LU);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var _$=256,d0=3329,P7=3303,g7=17,{mod:IG,nttZetas:k7,NTT:uJ,bitsCoder:F7}=_U({N:_$,Q:d0,F:P7,ROOT_OF_UNITY:g7,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),zY={512:{N:_$,Q:d0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:_$,Q:d0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:_$,Q:d0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},_7=($)=>{if($>=12)return{encode:(G)=>G,decode:(G)=>G};let J=2**($-1);return{encode:(G)=>((G<<$)+d0/2)/d0,decode:(G)=>G*d0+J>>>$}},KG=($)=>F7($,_7($));function hJ($,J){for(let G=0;G<_$;G++)$[G]=IG($[G]+J[G])}function b7($,J){for(let G=0;G<_$;G++)$[G]=IG($[G]-J[G])}function m7($,J,G,q,Q){let Y=IG(J*q*Q+$*G),X=IG($*q+J*G);return{c0:Y,c1:X}}function Lq($,J){for(let G=0;G<_$/2;G++){let q=k7[64+(G>>1)];if(G&1)q=-q;let{c0:Q,c1:Y}=m7($[2*G+0],$[2*G+1],J[2*G+0],J[2*G+1],q);$[2*G+0]=Q,$[2*G+1]=Y}return $}function mU($){let J=new Uint16Array(_$);for(let G=0;G<_$;){let q=$();if(q.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;G<_$&&Q+3<=q.length;Q+=3){let Y=(q[Q+0]>>0|q[Q+1]<<8)&4095,X=(q[Q+1]>>4|q[Q+2]<<4)&4095;if(Y<d0)J[G++]=Y;if(G<_$&&X<d0)J[G++]=X}}return J}function AG($,J,G,q){let Q=$(q*_$/4,J,G),Y=new Uint16Array(_$),X=Nq(Q),U=0;for(let W=0,M=0,z=0,R=0;W<X.length;W++){let O=X[W];for(let V=0;V<32;V++)if(z+=O&1,O>>=1,U+=1,U===q)R=z,z=0;else if(U===2*q)Y[M++]=IG(R-z),z=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var x7=($)=>{let{K:J,PRF:G,XOF:q,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:W}=$,M=KG(1),z=KG(W),R=KG(U),O=yJ("publicKey",vq(KG(12),J),32),V=vq(KG(12),J),w=yJ("ciphertext",vq(R,J),z),j=yJ("seed",32,32);return{secretCoder:V,lengths:{secretKey:V.bytesLen,publicKey:O.bytesLen,cipherText:w.bytesLen},keygen:(N)=>{n(N,32,"seed");let f=new Uint8Array(33);f.set(N),f[32]=J;let K=Q(f),[P,k]=j.decode(K),m=[],F=[];for(let L=0;L<J;L++)m.push(uJ.encode(AG(G,k,L,Y)));let _=q(P);for(let L=0;L<J;L++){let y=uJ.encode(AG(G,k,J+L,Y));for(let C=0;C<J;C++){let I=mU(_.get(C,L));hJ(y,Lq(I,m[C]))}F.push(y)}_.clean();let v={publicKey:O.encode([F,P]),secretKey:V.encode(m)};return N$(P,k,m,F,f,K),v},encrypt:(N,f,K)=>{let[P,k]=O.decode(N),m=[];for(let C=0;C<J;C++)m.push(uJ.encode(AG(G,K,C,Y)));let F=q(k),_=new Uint16Array(_$),v=[];for(let C=0;C<J;C++){let I=AG(G,K,J+C,X),S=new Uint16Array(_$);for(let D=0;D<J;D++){let H=mU(F.get(C,D));hJ(S,Lq(H,m[D]))}hJ(I,uJ.decode(S)),v.push(I),hJ(_,Lq(P[C],m[C])),N$(S)}F.clean();let L=AG(G,K,2*J,X);hJ(L,uJ.decode(_));let y=M.decode(f);return hJ(y,L),N$(P,m,_,L),w.encode([v,y])},decrypt:(N,f)=>{let[K,P]=w.decode(N),k=V.decode(f),m=new Uint16Array(_$);for(let F=0;F<J;F++)hJ(m,Lq(k[F],uJ.encode(K[F])));return b7(P,uJ.decode(m)),N$(m,k,K),M.encode(P)}}};function RY($){let J=x7($),{HASH256:G,HASH512:q,KDF:Q}=$,{secretCoder:Y,lengths:X}=J,U=yJ("secretKey",X.secretKey,X.publicKey,32,32),W=32,M=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(z=E0(64))=>{n(z,64,"seed");let{publicKey:R,secretKey:O}=J.keygen(z.subarray(0,32)),V=G(R),w=U.encode([O,R,V,z.subarray(32)]);return N$(O,V),{publicKey:R,secretKey:w}},getPublicKey:(z)=>{let[R,O,V,w]=U.decode(z);return Uint8Array.from(O)},encapsulate:(z,R=E0(32))=>{n(z,X.publicKey,"publicKey"),n(R,32,"message");let O=z.subarray(0,384*$.K),V=Y.encode(Y.decode(FU(O)));if(!Zq(V,O))throw N$(V),Error("ML-KEM.encapsulate: wrong publicKey modulus");N$(V);let w=q.create().update(R).update(G(z)).digest(),j=J.encrypt(z,R,w.subarray(32,64));return N$(w.subarray(32)),{cipherText:j,sharedSecret:w.subarray(0,32)}},decapsulate:(z,R)=>{n(R,U.bytesLen,"secretKey"),n(z,X.cipherText,"cipherText");let O=U.bytesLen-96,V=O+32,w=G(R.subarray(O/2,V));if(!Zq(w,R.subarray(V,V+32)))throw Error("invalid secretKey: hash check failed");let[j,N,f,K]=U.decode(R),P=J.decrypt(z,j),k=q.create().update(P).update(f).digest(),m=k.subarray(0,32),F=J.encrypt(N,P,k.subarray(32,64)),_=Zq(z,F),v=Q.create({dkLen:32}).update(K).update(z).digest();return N$(P,F,!_?m:v),_?m:v}}}function y7($,J,G){return B0.create({dkLen:$}).update(J).update(new Uint8Array([G])).digest()}var VY={HASH256:xJ,HASH512:ZU,KDF:B0,XOF:bU,PRF:y7},Q6=RY({...VY,...zY[512]}),fG=RY({...VY,...zY[768]}),xU=RY({...VY,...zY[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function u7($,J=!1){let{lengths:G,keygen:q}=$;if(J){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");q=(X=E0(G.seed))=>{n(X,G.seed,"seed");let U=Y.isLE?MJ(X):WJ(X),W=Y.toBytes(Y.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:G.secretKey,publicKey:G.publicKey,seed:G.seed},keygen:q,getPublicKey:(Q)=>$.getPublicKey(Q)}}function OY($,J=!1){let G=u7($,J);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...G.lengths,msg:G.lengths.seed,cipherText:G.lengths.publicKey},keygen:G.keygen,getPublicKey:G.getPublicKey,encapsulate(q,Q=E0($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(q,Y),U=$.getPublicKey(Y);return N$(Y),{sharedSecret:X,cipherText:U}},decapsulate(q,Q){let Y=$.getSharedSecret(Q,q);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function BG($,J){return yJ(J,...$.map((G)=>{if(typeof G.lengths[J]!=="number")throw Error("wrong length: "+J);return G.lengths[J]}))}function wY($){return(J,G)=>$(J,{dkLen:G})}function h7($,J,...G){let q=BG(G,"seed"),Q=BG(G,"publicKey");if($===void 0)$=q.bytesLen;H$($);function Y(X){n(X,$);let U=q.decode(J(X,q.bytesLen)),W=G.map((R,O)=>R.keygen(U[O])),M=W.map((R)=>R.secretKey),z=W.map((R)=>R.publicKey);return{secretKey:M,publicKey:z}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=E0($)){let{publicKey:U,secretKey:W}=Y(X),M=Q.encode(U);return N$(U),N$(W),{secretKey:X,publicKey:M}},expandDecapsulationKey:Y,realSeedLen:$}}function Pq($,J,G,q,...Q){let Y=h7($,G,...Q),X=BG(Q,"cipherText"),U=BG(Q,"publicKey"),W=BG(Q,"msg");if(J===void 0)J=W.bytesLen;return H$(J),{lengths:{...Y.info.lengths,msg:J,msgRand:W.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(M,z=E0(W.bytesLen)){let R=U.decode(M),O=W.decode(z),V=Q.map((f,K)=>f.encapsulate(R[K],O[K])),w=V.map((f)=>f.sharedSecret),j=V.map((f)=>f.cipherText),N={sharedSecret:q(R,j,w),cipherText:X.encode(j)};return N$(w,j),N},decapsulate(M,z){let R=X.decode(M),{publicKey:O,secretKey:V}=Y.expandDecapsulationKey(z),w=Q.map((j,N)=>j.decapsulate(R[N],V[N]));return q(O,R,w)}}}function yU($,J,G,q,Q){return G0(q),G0(Q),Pq(32,32,wY(q),(Y,X,U)=>Q(V$(U[0],U[1],X[1],Y[1],zJ($))),J,G)}var N6=yU("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",fG,OY(QY,!0),B0,xJ),j6=yU("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",xU,OY(DU,!0),B0,xJ);function l7($,J,G,q,Q){return G0(q),G0(Q),Pq(32,32,wY(q),(Y,X,U)=>{let W=V$(U[0],U[1],X[0],Y[0],X[1],Y[1],zJ($)),M=32,z=V$(zJ("hybrid_prk"),W),R=KU(Q,z),O=V$(V8(32,2),zJ("shared_secret"),zJ("")),V=AU(Q,R,O,32);return N$(R,O,z,W),V},J,G)}var uU=OY(jU),D6=l7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",fG,uU,B0,Sq),c7=(()=>Pq(32,32,wY(B0),($,J,G)=>xJ(V$(G[0],G[1],J[1],$[1],zJ("\\.//^\\"))),fG,uU))();function d7($,J,G,q){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let z=0,R=J;;z=R,R+=J){if(R>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(z,R),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),M=$.getPublicKey(W,!1);return{secretKey:W,publicKey:M}}return{lengths:{secretKey:J,publicKey:G,seed:q,msg:q,cipherText:G},keygen(X=E0(q)){return n(X,q,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=E0(q)){n(U,q,"rand");let{secretKey:W}=Y(U),M=this.decapsulate(X,W),z=$.getPublicKey(W,!1);return N$(W),{sharedSecret:M,cipherText:z}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function r7($,J,G,q){let{secretKey:Q,publicKeyUncompressed:Y}=G.lengths;if(!Q||!Y)throw Error("wrong curve");let X=d7(G,Q,Y,q),U=64,W=U+q;return Pq(32,32,(M)=>{n(M,32);let z=B0(M,{dkLen:W}),R=z.subarray(0,U),O=z.subarray(U,W);return V$(R,O)},(M,z,R)=>xJ(V$(R[0],R[1],z[1],M[1],zJ($))),J,X)}var p7=(()=>r7("MLKEM768-P256",fG,QY,128))();var gq=c7,hU=p7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Y$=($,J,G)=>A$($,J,G),jY=z$,D8=Gq,S$=(...$)=>DQ(...$),H8=($)=>t8($),K8=wQ,A8=($)=>_0($),Fq=BigInt(0),NY=BigInt(1);function r0($,J=""){if(typeof $!=="boolean"){let G=J&&`"${J}" `;throw TypeError(G+"expected boolean, got type="+typeof $)}return $}function _q($){if(typeof $==="bigint"){if(!kq($))throw RangeError("positive bigint expected, got "+$)}else jY($);return $}function C0($,J=""){if(typeof $!=="number"){let G=J&&`"${J}" `;throw TypeError(G+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let G=J&&`"${J}" `;throw RangeError(G+"expected safe integer, got "+$)}}function EG($){let J=_q($).toString(16);return J.length&1?"0"+J:J}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?Fq:BigInt("0x"+$)}function lJ($){return lU(Gq($))}function R0($){return lU(Gq(NJ(A$($)).reverse()))}function bq($,J){if(z$(J),J===0)throw RangeError("zero length");$=_q($);let G=$.toString(16);if(G.length>J*2)throw RangeError("number too large");return t8(G.padStart(J*2,"0"))}function CG($,J){return bq($,J).reverse()}function cU($,J){if($=Y$($),J=Y$(J),$.length!==J.length)return!1;let G=0;for(let q=0;q<$.length;q++)G|=$[q]^J[q];return G===0}function NJ($){return Uint8Array.from(Y$($))}function mq($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(J,G)=>{let q=J.charCodeAt(0);if(J.length!==1||q>127)throw RangeError(`string contains non-ASCII character "${$[G]}" with code ${q} at position ${G}`);return q})}var kq=($)=>typeof $==="bigint"&&Fq<=$;function n7($,J,G){return kq($)&&kq(J)&&kq(G)&&J<=$&&$<G}function p0($,J,G,q){if(!n7(J,G,q))throw RangeError("expected valid "+$+": "+G+" <= n < "+q+", got "+J)}function I8($){if($<Fq)throw Error("expected non-negative bigint, got "+$);let J;for(J=0;$>Fq;$>>=NY,J+=1);return J}var SG=($)=>(NY<<BigInt($))-NY;function dU($,J,G){if(z$($,"hashLen"),z$(J,"qByteLen"),typeof G!=="function")throw TypeError("hmacFn must be a function");let q=(N)=>new Uint8Array(N),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=q($),M=q($),z=0,R=()=>{W.fill(1),M.fill(0),z=0},O=(...N)=>G(M,S$(W,...N)),V=(N=Q)=>{if(M=O(Y,N),W=O(),N.length===0)return;M=O(X,N),W=O()},w=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let N=0,f=[];while(N<J){W=O();let K=W.slice();f.push(K),N+=W.length}return S$(...f)};return(N,f)=>{R(),V(N);let K=void 0;while((K=f(w()))===void 0)V();return R(),K}}function Q0($,J={},G={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function q(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let W=$[Y];if(U&&W===void 0)return;let M=typeof W;if(M!==X||W===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${M}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>q(U,W,X));Q(J,!1),Q(G,!0)}var DY=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=BigInt(0),M$=BigInt(1),cJ=BigInt(2),oU=BigInt(3),iU=BigInt(4),aU=BigInt(5),o7=BigInt(7),sU=BigInt(8),i7=BigInt(9),tU=BigInt(16);function U$($,J){if(J<=T$)throw Error("mod: expected positive modulus, got "+J);let G=$%J;return G>=T$?G:J+G}function Y0($,J,G){if(J<T$)throw Error("pow2: expected non-negative exponent, got "+J);let q=$;while(J-- >T$)q*=q,q%=G;return q}function rU($,J){if($===T$)throw Error("invert: expected non-zero number");if(J<=T$)throw Error("invert: expected positive modulus, got "+J);let G=U$($,J),q=J,Q=T$,Y=M$,X=M$,U=T$;while(G!==T$){let M=q/G,z=q-G*M,R=Q-X*M,O=Y-U*M;q=G,G=z,Q=X,Y=U,X=R,U=O}if(q!==M$)throw Error("invert: does not exist");return U$(Q,J)}function HY($,J,G){let q=$;if(!q.eql(q.sqr(J),G))throw Error("Cannot find square root")}function eU($,J){let G=$,q=(G.ORDER+M$)/iU,Q=G.pow(J,q);return HY(G,Q,J),Q}function a7($,J){let G=$,q=(G.ORDER-aU)/sU,Q=G.mul(J,cJ),Y=G.pow(Q,q),X=G.mul(J,Y),U=G.mul(G.mul(X,cJ),Y),W=G.mul(X,G.sub(U,G.ONE));return HY(G,W,J),W}function s7($){let J=xq($),G=$W($),q=G(J,J.neg(J.ONE)),Q=G(J,q),Y=G(J,J.neg(q)),X=($+o7)/tU;return(U,W)=>{let M=U,z=M.pow(W,X),R=M.mul(z,q),O=M.mul(z,Q),V=M.mul(z,Y),w=M.eql(M.sqr(R),W),j=M.eql(M.sqr(O),W);z=M.cmov(z,R,w),R=M.cmov(V,O,j);let N=M.eql(M.sqr(R),W),f=M.cmov(z,R,N);return HY(M,f,W),f}}function $W($){if($<oU)throw Error("sqrt is not defined for small field");let J=$-M$,G=0;while(J%cJ===T$)J/=cJ,G++;let q=cJ,Q=xq($);while(pU(Q,q)===1)if(q++>1000)throw Error("Cannot find square root: probably non-prime P");if(G===1)return eU;let Y=Q.pow(q,J),X=(J+M$)/cJ;return function(W,M){let z=W;if(z.is0(M))return M;if(pU(z,M)!==1)throw Error("Cannot find square root");let R=G,O=z.mul(z.ONE,Y),V=z.pow(M,J),w=z.pow(M,X);while(!z.eql(V,z.ONE)){if(z.is0(V))return z.ZERO;let j=1,N=z.sqr(V);while(!z.eql(N,z.ONE))if(j++,N=z.sqr(N),j===R)throw Error("Cannot find square root");let f=M$<<BigInt(R-j-1),K=z.pow(O,f);R=j,O=z.sqr(K),V=z.mul(V,O),w=z.mul(w,K)}return w}}function t7($){if($%iU===oU)return eU;if($%sU===aU)return a7;if($%tU===i7)return s7($);return $W($)}var n0=($,J)=>(U$($,J)&M$)===M$,e7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function KY($){let J={ORDER:"bigint",BYTES:"number",BITS:"number"},G=e7.reduce((q,Q)=>{return q[Q]="function",q},J);if(Q0($,G),C0($.BYTES,"BYTES"),C0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=M$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function $5($,J,G){let q=$;if(G<T$)throw Error("invalid exponent, negatives unsupported");if(G===T$)return q.ONE;if(G===M$)return J;let Q=q.ONE,Y=J;while(G>T$){if(G&M$)Q=q.mul(Q,Y);Y=q.sqr(Y),G>>=M$}return Q}function TG($,J,G=!1){let q=$,Q=Array(J.length).fill(G?q.ZERO:void 0),Y=J.reduce((U,W,M)=>{if(q.is0(W))return U;return Q[M]=U,q.mul(U,W)},q.ONE),X=q.inv(Y);return J.reduceRight((U,W,M)=>{if(q.is0(W))return U;return Q[M]=q.mul(U,Q[M]),q.mul(U,W)},X),Q}function pU($,J){let G=$,q=(G.ORDER-M$)/cJ,Q=G.pow(J,q),Y=G.eql(Q,G.ONE),X=G.eql(Q,G.ZERO),U=G.eql(Q,G.neg(G.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function J5($,J){if(J!==void 0)jY(J);if($<=T$)throw Error("invalid n length: expected positive n, got "+$);if(J!==void 0&&J<1)throw Error("invalid n length: expected positive bit length, got "+J);let G=I8($);if(J!==void 0&&J<G)throw Error(`invalid n length: expected bit length (${G}) >= n.length (${J})`);let q=J!==void 0?J:G,Q=Math.ceil(q/8);return{nBitLength:q,nByteLength:Q}}var nU=new WeakMap;class AY{ORDER;BITS;BYTES;isLE;ZERO=T$;ONE=M$;_lengths;_mod;constructor($,J={}){if($<=M$)throw Error("invalid field: expected ORDER > 1, got "+$);let G=void 0;if(this.isLE=!1,J!=null&&typeof J==="object"){if(typeof J.BITS==="number")G=J.BITS;if(typeof J.sqrt==="function")Object.defineProperty(this,"sqrt",{value:J.sqrt,enumerable:!0});if(typeof J.isLE==="boolean")this.isLE=J.isLE;if(J.allowedLengths)this._lengths=Object.freeze(J.allowedLengths.slice());if(typeof J.modFromBytes==="boolean")this._mod=J.modFromBytes}let{nBitLength:q,nByteLength:Q}=J5($,G);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=q,this.BYTES=Q,Object.freeze(this)}create($){return U$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return T$<=$&&$<this.ORDER}is0($){return $===T$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&M$)===M$}neg($){return U$(-$,this.ORDER)}eql($,J){return $===J}sqr($){return U$($*$,this.ORDER)}add($,J){return U$($+J,this.ORDER)}sub($,J){return U$($-J,this.ORDER)}mul($,J){return U$($*J,this.ORDER)}pow($,J){return $5(this,$,J)}div($,J){return U$($*rU(J,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,J){return $+J}subN($,J){return $-J}mulN($,J){return $*J}inv($){return rU($,this.ORDER)}sqrt($){let J=nU.get(this);if(!J)nU.set(this,J=t7(this.ORDER));return J(this,$)}toBytes($){return this.isLE?CG($,this.BYTES):bq($,this.BYTES)}fromBytes($,J=!1){Y$($);let{_lengths:G,BYTES:q,isLE:Q,ORDER:Y,_mod:X}=this;if(G){if($.length<1||!G.includes($.length)||$.length>q)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let W=new Uint8Array(q);W.set($,Q?0:W.length-$.length),$=W}if($.length!==q)throw Error("Field.fromBytes: expected "+q+" bytes, got "+$.length);let U=Q?R0($):lJ($);if(X)U=U$(U,Y);if(!J){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return TG(this,$)}cmov($,J,G){return r0(G,"condition"),G?J:$}}Object.freeze(AY.prototype);function xq($,J={}){return new AY($,J)}function JW($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=M$)throw Error("field order must be greater than 1");let J=I8($-M$);return Math.ceil(J/8)}function IY($){let J=JW($);return J+Math.ceil(J/2)}function GW($,J,G=!1){Y$($);let q=$.length,Q=JW(J),Y=Math.max(IY(J),16);if(q<Y||q>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+q);let X=G?R0($):lJ($),U=U$(X,J-M$)+M$;return G?CG(U,Q):bq(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var f8=BigInt(0),dJ=BigInt(1);function ZG($,J){let G=J.negate();return $?G:J}function rJ($,J){let G=TG($.Fp,J.map((q)=>q.Z));return J.map((q,Q)=>$.fromAffine(q.toAffine(G[Q])))}function XW($,J){if(!Number.isSafeInteger($)||$<=0||$>J)throw Error("invalid window size, expected [1.."+J+"], got W="+$)}function fY($,J){XW($,J);let G=Math.ceil(J/$)+1,q=2**($-1),Q=2**$,Y=SG($),X=BigInt($);return{windows:G,windowSize:q,mask:Y,maxNumber:Q,shiftBy:X}}function qW($,J,G){let{windowSize:q,mask:Q,maxNumber:Y,shiftBy:X}=G,U=Number($&Q),W=$>>X;if(U>q)U-=Y,W+=dJ;let M=J*q,z=M+Math.abs(U)-1,R=U===0,O=U<0,V=J%2!==0;return{nextN:W,offset:z,isZero:R,isNeg:O,isNegF:V,offsetF:M}}var BY=new WeakMap,UW=new WeakMap;function EY($){return UW.get($)||1}function QW($){if($!==f8)throw Error("invalid wNAF")}class vG{BASE;ZERO;Fn;bits;constructor($,J){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=J}_unsafeLadder($,J,G=this.ZERO){let q=$;while(J>f8){if(J&dJ)G=G.add(q);q=q.double(),J>>=dJ}return G}precomputeWindow($,J){let{windows:G,windowSize:q}=fY(J,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<G;U++){X=Y,Q.push(X);for(let W=1;W<q;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,J,G){if(!this.Fn.isValid(G))throw Error("invalid scalar");let q=this.ZERO,Q=this.BASE,Y=fY($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:M,isNeg:z,isNegF:R,offsetF:O}=qW(G,X,Y);if(G=U,M)Q=Q.add(ZG(R,J[O]));else q=q.add(ZG(z,J[W]))}return QW(G),{p:q,f:Q}}wNAFUnsafe($,J,G,q=this.ZERO){let Q=fY($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(G===f8)break;let{nextN:X,offset:U,isZero:W,isNeg:M}=qW(G,Y,Q);if(G=X,W)continue;else{let z=J[U];q=q.add(M?z.negate():z)}}return QW(G),q}getPrecomputes($,J,G){let q=BY.get(J);if(!q){if(q=this.precomputeWindow(J,$),$!==1){if(typeof G==="function")q=G(q);BY.set(J,q)}}return q}cached($,J,G){let q=EY($);return this.wNAF(q,this.getPrecomputes(q,$,G),J)}unsafe($,J,G,q){let Q=EY($);if(Q===1)return this._unsafeLadder($,J,q);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,G),J,q)}createCache($,J){XW(J,this.bits),UW.set($,J),BY.delete($)}hasCache($){return EY($)!==1}}function WW($,J,G,q){let Q=J,Y=$.ZERO,X=$.ZERO;while(G>f8||q>f8){if(G&dJ)Y=Y.add(Q);if(q&dJ)X=X.add(Q);Q=Q.double(),G>>=dJ,q>>=dJ}return{p1:Y,p2:X}}function YW($,J,G){if(J){if(J.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return KY(J),J}else return xq($,{isLE:G})}function yq($,J,G={},q){if(q===void 0)q=$==="edwards";if(!J||typeof J!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let M=J[W];if(!(typeof M==="bigint"&&M>f8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=YW(J.p,G.Fp,q),Y=YW(J.n,G.Fn,q),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(J[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return J=Object.freeze(Object.assign({},J)),{CURVE:J,Fp:Q,Fn:Y}}function LG($,J){return function(q){let Q=$(q);return{secretKey:Q,publicKey:J(Q)}}}function PG($,J){if(C0($),C0(J),J<0||J>4)throw Error("invalid I2OSP length: "+J);if($<0||$>2**(8*J)-1)throw Error("invalid I2OSP input: "+$);let G=Array.from({length:J}).fill(0);for(let q=J-1;q>=0;q--)G[q]=$&255,$>>>=8;return new Uint8Array(G)}function G5($,J){let G=new Uint8Array($.length);for(let q=0;q<$.length;q++)G[q]=$[q]^J[q];return G}function q5($){if(!K8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let J=typeof $==="string"?mq($):$;if(J.length===0)throw Error("DST must be non-empty");return J}function CY($,J,G,q){if(Y$($),C0(G),J=q5(J),J.length>255)J=q(S$(mq("H2C-OVERSIZE-DST-"),J));let{outputLen:Q,blockLen:Y}=q,X=Math.ceil(G/Q);if(G>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=S$(J,PG(J.length,1)),W=new Uint8Array(Y),M=PG(G,2),z=Array(X),R=q(S$(W,$,M,PG(0,1),U));z[0]=q(S$(R,PG(1,1),U));for(let V=1;V<X;V++){let w=[G5(R,z[V-1]),PG(V+1,1),U];z[V]=q(S$(...w))}return S$(...z).slice(0,G)}var MW="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zW=($,J)=>($+($>=0?J:-J)/VW)/J;function Q5($,J,G){p0("scalar",$,S0,G);let[[q,Q],[Y,X]]=J,U=zW(X*$,G),W=zW(-Q*$,G),M=$-U*q-W*Y,z=-U*Q-W*X,R=M<S0,O=z<S0;if(R)M=-M;if(O)z=-z;let V=SG(Math.ceil(I8(G)/2))+jJ;if(M<S0||M>=V||z<S0||z>=V)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:R,k1:M,k2neg:O,k2:z}}function TY($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function SY($,J){Q0($);let G={};for(let q of Object.keys(J))G[q]=$[q]===void 0?J[q]:$[q];if(r0(G.lowS,"lowS"),r0(G.prehash,"prehash"),G.format!==void 0)TY(G.format);return G}class RW extends Error{constructor($=""){super($)}}var V0={Err:RW,_tlv:{encode:($,J)=>{let{Err:G}=V0;if(C0($,"tag"),$<0||$>255)throw new G("tlv.encode: wrong tag");if(typeof J!=="string")throw TypeError('"data" expected string, got type='+typeof J);if(J.length&1)throw new G("tlv.encode: unpadded data");let q=J.length/2,Q=EG(q);if(Q.length/2&128)throw new G("tlv.encode: long form length too big");let Y=q>127?EG(Q.length/2|128):"";return EG($)+Y+Q+J},decode($,J){let{Err:G}=V0;J=Y$(J,void 0,"DER data");let q=0;if($<0||$>255)throw new G("tlv.encode: wrong tag");if(J.length<2||J[q++]!==$)throw new G("tlv.decode: wrong tlv");let Q=J[q++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new G("tlv.decode(long): indefinite length not supported");if(W>4)throw new G("tlv.decode(long): byte length is too big");let M=J.subarray(q,q+W);if(M.length!==W)throw new G("tlv.decode: length bytes not complete");if(M[0]===0)throw new G("tlv.decode(long): zero leftmost byte");for(let z of M)X=X<<8|z;if(q+=W,X<128)throw new G("tlv.decode(long): not minimal encoding")}let U=J.subarray(q,q+X);if(U.length!==X)throw new G("tlv.decode: wrong value length");return{v:U,l:J.subarray(q+X)}}},_int:{encode($){let{Err:J}=V0;if(_q($),$<S0)throw new J("integer: negative integers are not allowed");let G=EG($);if(Number.parseInt(G[0],16)&8)G="00"+G;if(G.length&1)throw new J("unexpected DER parsing assertion: unpadded hex");return G},decode($){let{Err:J}=V0;if($.length<1)throw new J("invalid signature integer: empty");if($[0]&128)throw new J("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new J("invalid signature integer: unnecessary leading zero");return lJ($)}},toSig($){let{Err:J,_int:G,_tlv:q}=V0,Q=Y$($,void 0,"signature"),{v:Y,l:X}=q.decode(48,Q);if(X.length)throw new J("invalid signature: left bytes after parsing");let{v:U,l:W}=q.decode(2,Y),{v:M,l:z}=q.decode(2,W);if(z.length)throw new J("invalid signature: left bytes after parsing");return{r:G.decode(U),s:G.decode(M)}},hexFromSig($){let{_tlv:J,_int:G}=V0,q=J.encode(2,G.encode($.r)),Q=J.encode(2,G.encode($.s)),Y=q+Q;return J.encode(48,Y)}};Object.freeze(V0._tlv);Object.freeze(V0._int);Object.freeze(V0);var S0=BigInt(0),jJ=BigInt(1),VW=BigInt(2),uq=BigInt(3),Y5=BigInt(4);function OW($,J={}){let G=yq("weierstrass",$,J),q=G.Fp,Q=G.Fn,Y=G.CURVE,{h:X,n:U}=Y;Q0(J,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:M}=J;if(W){if(!q.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=NW(q,Q);function R(){if(!q.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function O(C,I,S){if(M&&I.is0())return Uint8Array.of(0);let{x:D,y:H}=I.toAffine(),B=q.toBytes(D);if(r0(S,"isCompressed"),S){R();let E=!q.isOdd(H);return S$(wW(E),B)}else return S$(Uint8Array.of(4),B,q.toBytes(H))}function V(C){Y$(C,void 0,"Point");let{publicKey:I,publicKeyUncompressed:S}=z,D=C.length,H=C[0],B=C.subarray(1);if(M&&D===1&&H===0)return{x:q.ZERO,y:q.ZERO};if(D===I&&(H===2||H===3)){let E=q.fromBytes(B);if(!q.isValid(E))throw Error("bad point: is not on curve, wrong x");let A=N(E),T;try{T=q.sqrt(A)}catch(x){let l=x instanceof Error?": "+x.message:"";throw Error("bad point: is not on curve, sqrt error"+l)}R();let Z=q.isOdd(T);if((H&1)===1!==Z)T=q.neg(T);return{x:E,y:T}}else if(D===S&&H===4){let E=q.BYTES,A=q.fromBytes(B.subarray(0,E)),T=q.fromBytes(B.subarray(E,E*2));if(!f(A,T))throw Error("bad point: is not on curve");return{x:A,y:T}}else throw Error(`bad point: got length ${D}, expected compressed=${I} or uncompressed=${S}`)}let w=J.toBytes===void 0?O:J.toBytes,j=J.fromBytes===void 0?V:J.fromBytes;function N(C){let I=q.sqr(C),S=q.mul(I,C);return q.add(q.add(S,q.mul(C,Y.a)),Y.b)}function f(C,I){let S=q.sqr(I),D=N(C);return q.eql(S,D)}if(!f(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let K=q.mul(q.pow(Y.a,uq),Y5),P=q.mul(q.sqr(Y.b),BigInt(27));if(q.is0(q.add(K,P)))throw Error("bad curve params: a or b");function k(C,I,S=!1){if(!q.isValid(I)||S&&q.is0(I))throw Error(`bad point coordinate ${C}`);return I}function m(C){if(!(C instanceof v))throw Error("Weierstrass Point expected")}function F(C){if(!W||!W.basises)throw Error("no endo");return Q5(C,W.basises,Q.ORDER)}function _(C,I,S,D,H){return S=new v(q.mul(S.X,C),S.Y,S.Z),I=ZG(D,I),S=ZG(H,S),I.add(S)}class v{static BASE=new v(Y.Gx,Y.Gy,q.ONE);static ZERO=new v(q.ZERO,q.ONE,q.ZERO);static Fp=q;static Fn=Q;X;Y;Z;constructor(C,I,S){this.X=k("x",C),this.Y=k("y",I,!0),this.Z=k("z",S),Object.freeze(this)}static CURVE(){return Y}static fromAffine(C){let{x:I,y:S}=C||{};if(!C||!q.isValid(I)||!q.isValid(S))throw Error("invalid affine point");if(C instanceof v)throw Error("projective point not allowed");if(q.is0(I)&&q.is0(S))return v.ZERO;return new v(I,S,q.ONE)}static fromBytes(C){let I=v.fromAffine(j(Y$(C,void 0,"point")));return I.assertValidity(),I}static fromHex(C){return v.fromBytes(H8(C))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(C=8,I=!0){if(y.createCache(this,C),!I)this.multiply(uq);return this}assertValidity(){let C=this;if(C.is0()){if(J.allowInfinityPoint&&q.is0(C.X)&&q.eql(C.Y,q.ONE)&&q.is0(C.Z))return;throw Error("bad point: ZERO")}let{x:I,y:S}=C.toAffine();if(!q.isValid(I)||!q.isValid(S))throw Error("bad point: x or y not field elements");if(!f(I,S))throw Error("bad point: equation left != right");if(!C.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:C}=this.toAffine();if(!q.isOdd)throw Error("Field doesn't support isOdd");return!q.isOdd(C)}equals(C){m(C);let{X:I,Y:S,Z:D}=this,{X:H,Y:B,Z:E}=C,A=q.eql(q.mul(I,E),q.mul(H,D)),T=q.eql(q.mul(S,E),q.mul(B,D));return A&&T}negate(){return new v(this.X,q.neg(this.Y),this.Z)}double(){let{a:C,b:I}=Y,S=q.mul(I,uq),{X:D,Y:H,Z:B}=this,E=q.ZERO,A=q.ZERO,T=q.ZERO,Z=q.mul(D,D),g=q.mul(H,H),x=q.mul(B,B),l=q.mul(D,H);return l=q.add(l,l),T=q.mul(D,B),T=q.add(T,T),E=q.mul(C,T),A=q.mul(S,x),A=q.add(E,A),E=q.sub(g,A),A=q.add(g,A),A=q.mul(E,A),E=q.mul(l,E),T=q.mul(S,T),x=q.mul(C,x),l=q.sub(Z,x),l=q.mul(C,l),l=q.add(l,T),T=q.add(Z,Z),Z=q.add(T,Z),Z=q.add(Z,x),Z=q.mul(Z,l),A=q.add(A,Z),x=q.mul(H,B),x=q.add(x,x),Z=q.mul(x,l),E=q.sub(E,Z),T=q.mul(x,g),T=q.add(T,T),T=q.add(T,T),new v(E,A,T)}add(C){m(C);let{X:I,Y:S,Z:D}=this,{X:H,Y:B,Z:E}=C,A=q.ZERO,T=q.ZERO,Z=q.ZERO,g=Y.a,x=q.mul(Y.b,uq),l=q.mul(I,H),d=q.mul(S,B),a=q.mul(D,E),e=q.add(I,S),s=q.add(H,B);e=q.mul(e,s),s=q.add(l,d),e=q.sub(e,s),s=q.add(I,D);let o=q.add(H,E);return s=q.mul(s,o),o=q.add(l,a),s=q.sub(s,o),o=q.add(S,D),A=q.add(B,E),o=q.mul(o,A),A=q.add(d,a),o=q.sub(o,A),Z=q.mul(g,s),A=q.mul(x,a),Z=q.add(A,Z),A=q.sub(d,Z),Z=q.add(d,Z),T=q.mul(A,Z),d=q.add(l,l),d=q.add(d,l),a=q.mul(g,a),s=q.mul(x,s),d=q.add(d,a),a=q.sub(l,a),a=q.mul(g,a),s=q.add(s,a),l=q.mul(d,s),T=q.add(T,l),l=q.mul(o,s),A=q.mul(e,A),A=q.sub(A,l),l=q.mul(e,d),Z=q.mul(o,Z),Z=q.add(Z,l),new v(A,T,Z)}subtract(C){return m(C),this.add(C.negate())}is0(){return this.equals(v.ZERO)}multiply(C){let{endo:I}=J;if(!Q.isValidNot0(C))throw RangeError("invalid scalar: out of range");let S,D,H=(B)=>y.cached(this,B,(E)=>rJ(v,E));if(I){let{k1neg:B,k1:E,k2neg:A,k2:T}=F(C),{p:Z,f:g}=H(E),{p:x,f:l}=H(T);D=g.add(l),S=_(I.beta,Z,x,B,A)}else{let{p:B,f:E}=H(C);S=B,D=E}return rJ(v,[S,D])[0]}multiplyUnsafe(C){let{endo:I}=J,S=this,D=C;if(!Q.isValid(D))throw RangeError("invalid scalar: out of range");if(D===S0||S.is0())return v.ZERO;if(D===jJ)return S;if(y.hasCache(this))return this.multiply(D);if(I){let{k1neg:H,k1:B,k2neg:E,k2:A}=F(D),{p1:T,p2:Z}=WW(v,S,B,A);return _(I.beta,T,Z,H,E)}else return y.unsafe(S,D)}toAffine(C){let I=this,S=C,{X:D,Y:H,Z:B}=I;if(q.eql(B,q.ONE))return{x:D,y:H};let E=I.is0();if(S==null)S=E?q.ONE:q.inv(B);let A=q.mul(D,S),T=q.mul(H,S),Z=q.mul(B,S);if(E)return{x:q.ZERO,y:q.ZERO};if(!q.eql(Z,q.ONE))throw Error("invZ was invalid");return{x:A,y:T}}isTorsionFree(){let{isTorsionFree:C}=J;if(X===jJ)return!0;if(C)return C(v,this);return y.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:C}=J;if(X===jJ)return this;if(C)return C(v,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===jJ)return this.is0();return this.clearCofactor().is0()}toBytes(C=!0){return r0(C,"isCompressed"),this.assertValidity(),w(v,this,C)}toHex(C=!0){return D8(this.toBytes(C))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let L=Q.BITS,y=new vG(v,J.endo?Math.ceil(L/2):L);if(L>=8)v.BASE.precompute(8);return Object.freeze(v.prototype),Object.freeze(v),v}function wW($){return Uint8Array.of($?2:3)}function NW($,J){return{secretKey:J.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*J.BYTES}}function X5($,J={}){let{Fn:G}=$,q=J.randomBytes===void 0?A8:J.randomBytes,Q=Object.assign(NW($.Fp,G),{seed:Math.max(IY(G.ORDER),16)});function Y(V){try{let w=G.fromBytes(V);return G.isValidNot0(w)}catch(w){return!1}}function X(V,w){let{publicKey:j,publicKeyUncompressed:N}=Q;try{let f=V.length;if(w===!0&&f!==j)return!1;if(w===!1&&f!==N)return!1;return!!$.fromBytes(V)}catch(f){return!1}}function U(V){return V=V===void 0?q(Q.seed):V,GW(Y$(V,Q.seed,"seed"),G.ORDER)}function W(V,w=!0){return $.BASE.multiply(G.fromBytes(V)).toBytes(w)}function M(V){let{secretKey:w,publicKey:j,publicKeyUncompressed:N}=Q,f=G._lengths;if(!K8(V))return;let K=Y$(V,void 0,"key").length,P=K===j||K===N,k=K===w||!!f?.includes(K);if(P&&k)return;return P}function z(V,w,j=!0){if(M(V)===!0)throw Error("first arg must be private key");if(M(w)===!1)throw Error("second arg must be public key");let N=G.fromBytes(V);return $.fromBytes(w).multiply(N).toBytes(j)}let R={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},O=LG(U,W);return Object.freeze(R),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:O,Point:$,utils:R,lengths:Q})}function jW($,J,G={}){let q=J;F0(q),Q0(G,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),G=Object.assign({},G);let Q=G.randomBytes===void 0?A8:G.randomBytes,Y=G.hmac===void 0?(H,B)=>K0(q,H,B):G.hmac,{Fp:X,Fn:U}=$,{ORDER:W,BITS:M}=U,{keygen:z,getPublicKey:R,getSharedSecret:O,utils:V,lengths:w}=X5($,G),j={prehash:!0,lowS:typeof G.lowS==="boolean"?G.lowS:!0,format:"compact",extraEntropy:!1},N=W*VW+jJ<X.ORDER;function f(H){let B=W>>jJ;return H>B}function K(H,B){if(!U.isValidNot0(B))throw Error(`invalid signature ${H}: out of range 1..Point.Fn.ORDER`);return B}function P(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(H,B){TY(B);let E=w.signature,A=B==="compact"?E:B==="recovered"?E+1:void 0;return Y$(H,A)}class m{r;s;recovery;constructor(H,B,E){if(this.r=K("r",H),this.s=K("s",B),E!=null){if(P(),![0,1,2,3].includes(E))throw Error("invalid recovery id");this.recovery=E}Object.freeze(this)}static fromBytes(H,B=j.format){k(H,B);let E;if(B==="der"){let{r:g,s:x}=V0.toSig(Y$(H));return new m(g,x)}if(B==="recovered")E=H[0],B="compact",H=H.subarray(1);let A=w.signature/2,T=H.subarray(0,A),Z=H.subarray(A,A*2);return new m(U.fromBytes(T),U.fromBytes(Z),E)}static fromHex(H,B){return this.fromBytes(H8(H),B)}assertRecovery(){let{recovery:H}=this;if(H==null)throw Error("invalid recovery id: must be present");return H}addRecoveryBit(H){return new m(this.r,this.s,H)}recoverPublicKey(H){let{r:B,s:E}=this,A=this.assertRecovery(),T=A===2||A===3?B+W:B;if(!X.isValid(T))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Z=X.toBytes(T),g=$.fromBytes(S$(wW((A&1)===0),Z)),x=U.inv(T),l=_(Y$(H,void 0,"msgHash")),d=U.create(-l*x),a=U.create(E*x),e=$.BASE.multiplyUnsafe(d).add(g.multiplyUnsafe(a));if(e.is0())throw Error("invalid recovery: point at infinify");return e.assertValidity(),e}hasHighS(){return f(this.s)}toBytes(H=j.format){if(TY(H),H==="der")return H8(V0.hexFromSig(this));let{r:B,s:E}=this,A=U.toBytes(B),T=U.toBytes(E);if(H==="recovered")return P(),S$(Uint8Array.of(this.assertRecovery()),A,T);return S$(A,T)}toHex(H){return D8(this.toBytes(H))}}Object.freeze(m.prototype),Object.freeze(m);let F=G.bits2int===void 0?function(B){if(B.length>8192)throw Error("input is too large");let E=lJ(B),A=B.length*8-M;return A>0?E>>BigInt(A):E}:G.bits2int,_=G.bits2int_modN===void 0?function(B){return U.create(F(B))}:G.bits2int_modN,v=SG(M);function L(H){return p0("num < 2^"+M,H,S0,v),U.toBytes(H)}function y(H,B){return Y$(H,void 0,"message"),B?Y$(q(H),void 0,"prehashed message"):H}function C(H,B,E){let{lowS:A,prehash:T,extraEntropy:Z}=SY(E,j);H=y(H,T);let g=_(H),x=U.fromBytes(B);if(!U.isValidNot0(x))throw Error("invalid private key");let l=[L(x),L(g)];if(Z!=null&&Z!==!1){let s=Z===!0?Q(w.secretKey):Z;l.push(Y$(s,void 0,"extraEntropy"))}let d=S$(...l),a=g;function e(s){let o=F(s);if(!U.isValidNot0(o))return;let X$=U.inv(o),D$=$.BASE.multiply(o).toAffine(),d$=U.create(D$.x);if(d$===S0)return;let X0=U.create(X$*U.create(a+d$*x));if(X0===S0)return;let U0=(D$.x===d$?0:2)|Number(D$.y&jJ),$J=X0;if(A&&f(X0))$J=U.neg(X0),U0^=1;return new m(d$,$J,N?void 0:U0)}return{seed:d,k2sig:e}}function I(H,B,E={}){let{seed:A,k2sig:T}=C(H,B,E);return dU(q.outputLen,U.BYTES,Y)(A,T).toBytes(E.format)}function S(H,B,E,A={}){let{lowS:T,prehash:Z,format:g}=SY(A,j);if(E=Y$(E,void 0,"publicKey"),B=y(B,Z),!K8(H)){let x=H instanceof m?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}k(H,g);try{let x=m.fromBytes(H,g),l=$.fromBytes(E);if(T&&x.hasHighS())return!1;let{r:d,s:a}=x,e=_(B),s=U.inv(a),o=U.create(e*s),X$=U.create(d*s),D$=$.BASE.multiplyUnsafe(o).add(l.multiplyUnsafe(X$));if(D$.is0())return!1;return U.create(D$.x)===d}catch(x){return!1}}function D(H,B,E={}){let{prehash:A}=SY(E,j);return B=y(B,A),m.fromBytes(H,"recovered").recoverPublicKey(B).toBytes()}return Object.freeze({keygen:z,getPublicKey:R,getSharedSecret:O,utils:V,lengths:w,Point:$,sign:I,verify:S,recoverPublicKey:D,Signature:m,hash:q})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var U5=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var W5=OW(U5),B8=jW(W5,R$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var DJ=BigInt(0),p$=BigInt(1),ZY=BigInt(2),M5=BigInt(8);function z5($,J,G,q){let Q=$.sqr(G),Y=$.sqr(q),X=$.add($.mul(J.a,Q),Y),U=$.add($.ONE,$.mul(J.d,$.mul(Q,Y)));return $.eql(X,U)}function DW($,J={}){let G=J,q=yq("edwards",$,G,G.FpFnLE),{Fp:Q,Fn:Y}=q,X=q.CURVE,{h:U}=X;Q0(G,{},{uvRatio:"function"});let W=ZY<<BigInt(Y.BYTES*8)-p$,M=(j)=>Q.create(j),z=G.uvRatio===void 0?(j,N)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,N))}}catch(f){return{isValid:!1,value:DJ}}}:G.uvRatio;if(!z5(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function R(j,N,f=!1){let K=f?p$:DJ;return p0("coordinate "+j,N,K,W),N}function O(j){if(!(j instanceof V))throw Error("EdwardsPoint expected")}class V{static BASE=new V(X.Gx,X.Gy,p$,M(X.Gx*X.Gy));static ZERO=new V(DJ,p$,p$,DJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(j,N,f,K){this.X=R("x",j),this.Y=R("y",N),this.Z=R("z",f,!0),this.T=R("t",K),Object.freeze(this)}static CURVE(){return X}static fromAffine(j){if(j instanceof V)throw Error("extended point not allowed");let{x:N,y:f}=j||{};return R("x",N),R("y",f),new V(N,f,p$,M(N*f))}static fromBytes(j,N=!1){let f=Q.BYTES,{a:K,d:P}=X;j=NJ(Y$(j,f,"point")),r0(N,"zip215");let k=NJ(j),m=j[f-1];k[f-1]=m&-129;let F=R0(k),_=N?W:Q.ORDER;p0("point.y",F,DJ,_);let v=M(F*F),L=M(v-p$),y=M(P*v-K),{isValid:C,value:I}=z(L,y);if(!C)throw Error("bad point: invalid y coordinate");let S=(I&p$)===p$,D=(m&128)!==0;if(!N&&I===DJ&&D)throw Error("bad point: x=0 and x_0=1");if(D!==S)I=M(-I);return V.fromAffine({x:I,y:F})}static fromHex(j,N=!1){return V.fromBytes(H8(j),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,N=!0){if(w.createCache(this,j),!N)this.multiply(ZY);return this}assertValidity(){let j=this,{a:N,d:f}=X;if(j.is0())throw Error("bad point: ZERO");let{X:K,Y:P,Z:k,T:m}=j,F=M(K*K),_=M(P*P),v=M(k*k),L=M(v*v),y=M(F*N),C=M(v*M(y+_)),I=M(L+M(f*M(F*_)));if(C!==I)throw Error("bad point: equation left != right (1)");let S=M(K*P),D=M(k*m);if(S!==D)throw Error("bad point: equation left != right (2)")}equals(j){O(j);let{X:N,Y:f,Z:K}=this,{X:P,Y:k,Z:m}=j,F=M(N*m),_=M(P*K),v=M(f*m),L=M(k*K);return F===_&&v===L}is0(){return this.equals(V.ZERO)}negate(){return new V(M(-this.X),this.Y,this.Z,M(-this.T))}double(){let{a:j}=X,{X:N,Y:f,Z:K}=this,P=M(N*N),k=M(f*f),m=M(ZY*M(K*K)),F=M(j*P),_=N+f,v=M(M(_*_)-P-k),L=F+k,y=L-m,C=F-k,I=M(v*y),S=M(L*C),D=M(v*C),H=M(y*L);return new V(I,S,H,D)}add(j){O(j);let{a:N,d:f}=X,{X:K,Y:P,Z:k,T:m}=this,{X:F,Y:_,Z:v,T:L}=j,y=M(K*F),C=M(P*_),I=M(m*f*L),S=M(k*v),D=M((K+P)*(F+_)-y-C),H=S-I,B=S+I,E=M(C-N*y),A=M(D*H),T=M(B*E),Z=M(D*E),g=M(H*B);return new V(A,T,g,Z)}subtract(j){return O(j),this.add(j.negate())}multiply(j){if(!Y.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f}=w.cached(this,j,(K)=>rJ(V,K));return rJ(V,[N,f])[0]}multiplyUnsafe(j){if(!Y.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===DJ)return V.ZERO;if(this.is0()||j===p$)return this;return w.unsafe(this,j,(N)=>rJ(V,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return w.unsafe(this,X.n).is0()}toAffine(j){let N=this,f=j,{X:K,Y:P,Z:k}=N,m=N.is0();if(f==null)f=m?M5:Q.inv(k);let F=M(K*f),_=M(P*f),v=Q.mul(k,f);if(m)return{x:DJ,y:p$};if(v!==p$)throw Error("invZ was invalid");return{x:F,y:_}}clearCofactor(){if(U===p$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:N}=this.toAffine(),f=Q.toBytes(N);return f[f.length-1]|=j&p$?128:0,f}toHex(){return D8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let w=new vG(V,Y.BITS);if(Y.BITS>=8)V.BASE.precompute(8);return Object.freeze(V.prototype),Object.freeze(V),V}class vY{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){DY()}static fromHex($){DY()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return D8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,J){return this.ep.precompute($,J),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gG=BigInt(0),E8=BigInt(1),hq=BigInt(2);function R5($){return Q0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function HW($){let J=R5($),{P:G,type:q,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=J,U=q==="x25519";if(!U&&q!=="x448")throw Error("invalid type");let W=X===void 0?A8:X,M=U?255:448,z=U?32:56,R=U?BigInt(9):BigInt(5),O=U?BigInt(121665):BigInt(39081),V=U?hq**BigInt(254):hq**BigInt(447),w=U?BigInt(8)*hq**BigInt(251)-E8:BigInt(4)*hq**BigInt(445)-E8,j=V+w+E8,N=(D)=>U$(D,G),f=K(R);function K(D){return CG(N(D),z)}function P(D){let H=NJ(Y$(D,z,"uCoordinate"));if(U)H[31]&=127;return N(R0(H))}function k(D){return R0(Q(NJ(Y$(D,z,"scalar"))))}function m(D,H){let B=y(P(H),k(D));if(B===gG)throw Error("invalid private or public key received");return K(B)}function F(D){return m(D,f)}let _=F,v=m;function L(D,H,B){let E=N(D*(H-B));return H=N(H-E),B=N(B+E),{x_2:H,x_3:B}}function y(D,H){p0("u",D,gG,G),p0("scalar",H,V,j);let B=H,E=D,A=E8,T=gG,Z=D,g=E8,x=gG;for(let d=BigInt(M-1);d>=gG;d--){let a=B>>d&E8;x^=a,{x_2:A,x_3:Z}=L(x,A,Z),{x_2:T,x_3:g}=L(x,T,g),x=a;let e=A+T,s=N(e*e),o=A-T,X$=N(o*o),D$=s-X$,d$=Z+g,X0=Z-g,U0=N(X0*e),$J=N(d$*o),a8=U0+$J,s8=U0-$J;Z=N(a8*a8),g=N(E*N(s8*s8)),A=N(s*X$),T=N(D$*(s+N(O*D$)))}({x_2:A,x_3:Z}=L(x,A,Z)),{x_2:T,x_3:g}=L(x,T,g);let l=Y(T);return N(A*l)}let C={secretKey:z,publicKey:z,seed:z},I=(D)=>{return D=D===void 0?W(z):D,Y$(D,C.seed,"seed"),D},S={randomSecretKey:I};return Object.freeze(C),Object.freeze(S),Object.freeze({keygen:LG(I,_),getSharedSecret:v,getPublicKey:_,scalarMult:m,scalarMultBase:F,utils:S,GuBytes:f.slice(),lengths:C})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var V5=BigInt(0),o0=BigInt(1),KW=BigInt(2),O5=BigInt(3),w5=BigInt(5),N5=BigInt(8),nJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),kY=(()=>({p:nJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:N5,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function fW($){let J=BigInt(10),G=BigInt(20),q=BigInt(40),Q=BigInt(80),Y=nJ,U=$*$%Y*$%Y,W=Y0(U,KW,Y)*U%Y,M=Y0(W,o0,Y)*$%Y,z=Y0(M,w5,Y)*M%Y,R=Y0(z,J,Y)*z%Y,O=Y0(R,G,Y)*R%Y,V=Y0(O,q,Y)*O%Y,w=Y0(V,Q,Y)*V%Y,j=Y0(w,Q,Y)*V%Y,N=Y0(j,J,Y)*z%Y;return{pow_p_5_8:Y0(N,KW,Y)*$%Y,b2:U}}function j5($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var LY=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function FY($,J){let G=nJ,q=U$(J*J*J,G),Q=U$(q*q*J,G),Y=fW($*Q).pow_p_5_8,X=U$($*q*Y,G),U=U$(J*X*X,G),W=X,M=U$(X*LY,G),z=U===$,R=U===U$(-$,G),O=U===U$(-$*LY,G);if(z)X=W;if(R||O)X=M;if(n0(X,G))X=U$(-X,G);return{isValid:z||R,value:X}}var pJ=DW(kY,{uvRatio:FY}),HJ=(()=>pJ.Fp)(),BW=(()=>pJ.Fn)();var lq=(()=>{let $=nJ;return HW({P:$,type:"x25519",powPminus2:(J)=>{let{pow_p_5_8:G,b2:q}=fW(J);return U$(Y0(G,O5,$)*q,$)},adjustScalarBytes:j5})})();var PY=LY,D5=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),H5=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),K5=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),A5=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),AW=($)=>FY(o0,$),I5=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),gY=($)=>HJ.create(R0($)&I5);function IW($){let{d:J}=kY,G=nJ,q=(f)=>HJ.create(f),Q=q(PY*$*$),Y=q((Q+o0)*K5),X=BigInt(-1),U=q((X-J*Q)*q(Q+J)),{isValid:W,value:M}=FY(Y,U),z=q(M*$);if(!n0(z,G))z=q(-z);if(!W)M=z;if(!W)X=Q;let R=q(X*(Q-o0)*A5-U),O=M*M,V=q((M+M)*U),w=q(R*D5),j=q(o0-O),N=q(o0+O);return new pJ(q(V*N),q(j*w),q(w*N),q(V*j))}class l$ extends vY{static BASE=(()=>new l$(pJ.BASE))();static ZERO=(()=>new l$(pJ.ZERO))();static Fp=(()=>HJ)();static Fn=(()=>BW)();constructor($){super($)}static fromAffine($){return new l$(pJ.fromAffine($))}assertSame($){if(!($ instanceof l$))throw Error("RistrettoPoint expected")}init($){return new l$($)}static fromBytes($){A$($,32);let{a:J,d:G}=kY,q=nJ,Q=(P)=>HJ.create(P),Y=gY($);if(!cU(HJ.toBytes(Y),$)||n0(Y,q))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(o0+J*X),W=Q(o0-J*X),M=Q(U*U),z=Q(W*W),R=Q(J*G*M-z),{isValid:O,value:V}=AW(Q(R*z)),w=Q(V*W),j=Q(V*w*R),N=Q((Y+Y)*w);if(n0(N,q))N=Q(-N);let f=Q(U*j),K=Q(N*f);if(!O||n0(K,q)||f===V5)throw Error("invalid ristretto255 encoding 2");return new l$(new pJ(N,f,o0,K))}static fromHex($){return l$.fromBytes(t8($))}toBytes(){let{X:$,Y:J,Z:G,T:q}=this.ep,Q=nJ,Y=(j)=>HJ.create(j),X=Y(Y(G+J)*Y(G-J)),U=Y($*J),W=Y(U*U),{value:M}=AW(Y(X*W)),z=Y(M*X),R=Y(M*U),O=Y(z*R*q),V;if(n0(q*O,Q)){let j=Y(J*PY),N=Y($*PY);$=j,J=N,V=Y(z*H5)}else V=R;if(n0($*O,Q))J=Y(-J);let w=Y((G-J)*V);if(n0(w,Q))w=Y(-w);return HJ.toBytes(w)}equals($){this.assertSame($);let{X:J,Y:G}=this.ep,{X:q,Y:Q}=$.ep,Y=(W)=>HJ.create(W),X=Y(J*Q)===Y(G*q),U=Y(G*Q)===Y(J*q);return X||U}is0(){return this.equals(l$.ZERO)}}Object.freeze(l$.BASE);Object.freeze(l$.ZERO);Object.freeze(l$.prototype);Object.freeze(l$);var f5=Object.freeze({Point:l$,hashToCurve($,J){let G=J?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":J.DST,q=CY($,G,64,Xq);return f5.deriveToCurve(q)},hashToScalar($,J={DST:MW}){let G=CY($,J.DST,64,Xq);return BW.create(R0(G))},deriveToCurve($){A$($,64);let J=gY($.subarray(0,32)),G=IW(J),q=gY($.subarray(32,64)),Q=IW(q);return new l$(G.add(Q))}});var EW=!1,B5=!1;async function CW($,J){if(B5)return await J();try{return await $()}catch(G){if(G instanceof ReferenceError||G instanceof DOMException&&G.name==="NotSupportedError")return await J();else throw G}}async function cq($,J){return await CW(async()=>{let G=_Y($)?$:await C5($),q=await crypto.subtle.importKey("raw",S5(J),{name:"X25519"},EW,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:q},G,256))},()=>{if(_Y($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lq.scalarMult($,J)})}async function kG($){return await CW(async()=>{return cq($,lq.GuBytes)},()=>{if(_Y($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lq.scalarMultBase($)})}var E5=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function C5($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let J=new Uint8Array([...E5,...$]);return crypto.subtle.importKey("pkcs8",J,{name:"X25519"},EW,["deriveBits"])}function _Y($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function S5($){return $}class bY{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let J=this.buf.indexOf(10);if(J>=0)return $.push(this.buf.subarray(0,J)),this.transcript.push(this.buf.subarray(0,J+1)),this.buf=this.buf.subarray(J+1),Z5(oJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let G=await this.s.read();if(G.done)return this.buf=oJ($),null;this.buf=G.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:oJ(this.transcript)}}}function Z5($){return $.forEach((J)=>{if(J<32||J>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function oJ($){let J=$.reduce((Q,Y)=>Q+Y.length,0),G=new Uint8Array(J),q=0;for(let Q of $)G.set(Q,q),q+=Q.length;return G}function C8($,...J){return $.pipeThrough(new TransformStream({start(G){for(let q of J)G.enqueue(q)}}))}function dq($){return new ReadableStream({start(J){J.enqueue($),J.close()}})}async function mY($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function SW($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function TW($,J){let G=$.getReader(),q=[],Q=0;while(Q<J){let{done:W,value:M}=await G.read();if(W)throw Error("stream ended before reading "+J.toString()+" bytes");q.push(M),Q+=M.length}G.releaseLock();let Y=oJ(q),X=Y.subarray(0,J),U=C8($,Y.subarray(J));return{data:X,rest:U}}class T0{args;body;constructor($,J){this.args=$,this.body=J}}async function v5($){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let G=J.split(" ");if(G.length<2||G.shift()!=="->")return{next:J};for(let Y of G)if(Y.length===0)throw Error("invalid stanza");let q=[];for(;;){let Y=await $.readLine();if(Y===null)throw Error("invalid stanza");let X=P$.decode(Y);if(X.length>48)throw Error("invalid stanza");if(q.push(X),X.length<48)break}let Q=oJ(q);return{s:new T0(G,Q)}}async function ZW($){let J=new bY($),G=await J.readLine();if(G!=="age-encryption.org/v1")throw Error("invalid version "+(G??"line"));let q=[];for(;;){let{s:Q,next:Y}=await v5(J);if(Q!==void 0){q.push(Q);continue}if(!Y.startsWith("--- "))throw Error("invalid header");let X=P$.decode(Y.slice(4)),{rest:U,transcript:W}=J.close(),M=W.slice(0,W.length-1-Y.length+3);return{stanzas:q,headerNoMAC:M,MAC:X,headerSize:W.length,rest:C8($,U)}}}function xY($){let J=[];J.push(`age-encryption.org/v1
 `);for(let G of $){J.push("-> "+G.args.join(" ")+`
 `);for(let q=0;q<G.body.length;q+=48){let Q=q+48;if(Q>G.body.length)Q=G.body.length;J.push(P$.encode(G.body.subarray(q,Q))+`
 `)}if(G.body.length%48===0)J.push(`

package/dist/index.js CHANGED Viewed

@@ -1,5 +1,5 @@
 // @bun
-var eR=Object.defineProperty;var $z=($)=>$;function Jz($,J){this[$]=$z.bind(null,J)}var lX=($,J)=>{for(var G in J)eR($,G,{get:J[G],enumerable:!0,configurable:!0,set:Jz.bind(J,G)})};import{access as jO,chmod as kQ,mkdir as q9,readFile as Y9,writeFile as Q9}from"fs/promises";import{dirname as DO,join as _Q}from"path";import{fileURLToPath as HO}from"url";var eG={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.140",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts,.tsx --max-warnings 0","lint:fix":"eslint . --ext .ts,.tsx --max-warnings 0 --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var cX=`ARG BUN_VERSION=1.3.10
+var eR=Object.defineProperty;var $z=($)=>$;function Jz($,J){this[$]=$z.bind(null,J)}var lX=($,J)=>{for(var G in J)eR($,G,{get:J[G],enumerable:!0,configurable:!0,set:Jz.bind(J,G)})};import{access as jO,chmod as kQ,mkdir as q9,readFile as Y9,writeFile as Q9}from"fs/promises";import{dirname as DO,join as _Q}from"path";import{fileURLToPath as HO}from"url";var eG={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.141",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts,.tsx --max-warnings 0","lint:fix":"eslint . --ext .ts,.tsx --max-warnings 0 --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var cX=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app

package/package.json CHANGED Viewed

@@ -4,7 +4,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.2.0-alpha.140",
+  "version": "0.2.0-alpha.141",
   "type": "module",
   "exports": {
     ".": {