npm - @rizom/ops - Versions diffs - 0.2.0-alpha.143 → 0.2.0-alpha.144 - Mend

@rizom/ops 0.2.0-alpha.143 → 0.2.0-alpha.144

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-var gZ=Object.defineProperty;var UZ=($)=>$;function IZ($,v){this[$]=UZ.bind(null,v)}var yv=($,v)=>{for(var g in v)gZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:IZ.bind(v,g)})};import{parseArgs as JZ}from"util";var GZ={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function Dz($,v){let g=$[v];return typeof g==="boolean"?g:void 0}function R0($,v){let g=$[v];return typeof g==="string"?g:void 0}function bw($){let{values:v,positionals:g}=JZ({args:$,options:GZ,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:g[0]??"help",args:g.slice(1),flags:{help:Dz(v,"help"),version:Dz(v,"version"),dryRun:Dz(v,"dry-run"),pushTo:R0(v,"push-to"),cohort:R0(v,"cohort"),anchorId:R0(v,"anchor-id"),handle:R0(v,"handle")}}}var K0={name:"@rizom/ops",version:"0.2.0-alpha.143",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^6.0.3"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as cM,mkdirSync as lM,readFileSync as eO,writeFileSync as sO}from"fs";import{dirname as yM,join as xq}from"path";function Qz($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(`${g}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw RangeError(`${g}expected integer >= 0, got ${$}`)}}function o$($,v,g=""){let U=Qz($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function Qr($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function mg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function S0($,v){o$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw RangeError('"digestInto() output" expected to be of length >='+g)}function T0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Fg($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function M$($,v){return $<<v|$>>>32-v>>>0}var OZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function DZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function QZ($){for(let v=0;v<$.length;v++)$[v]=DZ($[v]);return $}var Xz=OZ?($)=>$:QZ,Fw=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),XZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function A0($){if(o$($),Fw)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=XZ[$[g]];return v}var Dr={_0:48,_9:57,A:65,F:70,a:97,f:102};function mw($){if($>=Dr._0&&$<=Dr._9)return $-Dr._0;if($>=Dr.A&&$<=Dr.F)return $-(Dr.A-10);if($>=Dr.a&&$<=Dr.f)return $-(Dr.a-10);return}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(Fw)try{return Uint8Array.fromHex($)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let v=$.length,g=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=mw($.charCodeAt(I)),G=mw($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw RangeError('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function wZ($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function wz($,v=""){if(typeof $==="string")return wZ($);return o$($,void 0,v)}function Nz(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];o$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function H0($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function Yz($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.canXOF=U.canXOF,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Xr($=32){C$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var qz=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Wz{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Qr($),o$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),zv(U)}update($){return mg(this),this.iHash.update($),this}digestInto($){mg(this),S0($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,g,U)=>new Wz(v,g).update(U).digest();return $.create=(v,g)=>new Wz(v,g),$})();function yU($,v,g){if(Qr($),g===void 0)g=new Uint8Array($.outputLen);return dv($,g,v)}var Vz=Uint8Array.of(0),ow=Uint8Array.of();function uz($,v,g,U=32){Qr($),C$(U,"length"),o$(v,void 0,"prk");let r=$.outputLen;if(v.length<r)throw Error('"prk" must be at least HashLen octets');if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=ow;else o$(g,void 0,"info");let J=new Uint8Array(I*r),G=dv.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)Vz[0]=Q+1,z.update(Q===0?ow:O).update(g).update(Vz).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),zv(O,Vz),J.slice(0,U)}var nr=($,v,g,U,r)=>uz($,yU($,v,g),U,r);function xw($,v,g){return $&v^~$&g}function cw($,v,g){return $&v^$&g^v&g}class P0{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=Fg(this.buffer)}update($){mg(this),o$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=Fg($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){mg(this),S0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,zv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=Fg($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var wr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),x$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var n0=BigInt(4294967295),lw=BigInt(32);function NZ($,v=!1){if(v)return{h:Number($&n0),l:Number($>>lw&n0)};return{h:Number($>>lw&n0)|0,l:Number($&n0)|0}}function yw($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=NZ($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var Zz=($,v,g)=>$>>>g,jz=($,v,g)=>$<<32-g|v>>>g,Ig=($,v,g)=>$>>>g|v<<32-g,Jg=($,v,g)=>$<<32-g|v>>>g,dU=($,v,g)=>$<<64-g|v>>>g-32,hU=($,v,g)=>$>>>g-32|v<<64-g;function hv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var dw=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),hw=($,v,g,U)=>v+g+U+($/4294967296|0)|0,pw=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),tw=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,aw=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),ew=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var qZ=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),kr=new Uint32Array(64);class Mz extends P0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)kr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=kr[Q-15],N=kr[Q-2],w=_v(X,7)^_v(X,18)^X>>>3,q=_v(N,17)^_v(N,19)^N>>>10;kr[Q]=q+kr[Q-7]+w+kr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=_v(J,6)^_v(J,11)^_v(J,25),N=O+X+xw(J,G,z)+qZ[Q]+kr[Q]|0,q=(_v(g,2)^_v(g,13)^_v(g,22))+cw(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){zv(kr)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),zv(this.buffer)}}class sw extends Mz{A=wr[0]|0;B=wr[1]|0;C=wr[2]|0;D=wr[3]|0;E=wr[4]|0;F=wr[5]|0;G=wr[6]|0;H=wr[7]|0;constructor(){super(32)}}class WZ extends Mz{A=Nr[0]|0;B=Nr[1]|0;C=Nr[2]|0;D=Nr[3]|0;E=Nr[4]|0;F=Nr[5]|0;G=Nr[6]|0;H=Nr[7]|0;constructor(){super(28)}}var $N=(()=>yw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),VZ=(()=>$N[0])(),uZ=(()=>$N[1])(),Er=new Uint32Array(80),fr=new Uint32Array(80);class pU extends P0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)Er[R]=$.getUint32(v),fr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=Er[R-15]|0,B=fr[R-15]|0,F=Ig(L,B,1)^Ig(L,B,8)^Zz(L,B,7),l=Jg(L,B,1)^Jg(L,B,8)^jz(L,B,7),d=Er[R-2]|0,_=fr[R-2]|0,i=Ig(d,_,19)^dU(d,_,61)^Zz(d,_,6),v$=Jg(d,_,19)^hU(d,_,61)^jz(d,_,6),H=pw(l,v$,fr[R-7],fr[R-16]),K=tw(H,F,i,Er[R-7],Er[R-16]);Er[R]=K|0,fr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=Ig(Q,X,14)^Ig(Q,X,18)^dU(Q,X,41),B=Jg(Q,X,14)^Jg(Q,X,18)^hU(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=aw(S,B,l,uZ[R],fr[R]),_=ew(d,W,L,F,VZ[R],Er[R]),i=d|0,v$=Ig(g,U,28)^dU(g,U,34)^dU(g,U,39),H=Jg(g,U,28)^hU(g,U,34)^hU(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=hv(z|0,O|0,_|0,i|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=dw(i,H,P);g=hw(V,_,v$,K),U=V|0}({h:g,l:U}=hv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=hv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=hv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=hv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=hv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=hv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=hv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=hv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){zv(Er,fr)}destroy(){this.destroyed=!0,zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class vN extends pU{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class ZZ extends pU{Ah=x$[0]|0;Al=x$[1]|0;Bh=x$[2]|0;Bl=x$[3]|0;Ch=x$[4]|0;Cl=x$[5]|0;Dh=x$[6]|0;Dl=x$[7]|0;Eh=x$[8]|0;El=x$[9]|0;Fh=x$[10]|0;Fl=x$[11]|0;Gh=x$[12]|0;Gl=x$[13]|0;Hh=x$[14]|0;Hl=x$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class jZ extends pU{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class MZ extends pU{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var L$=Yz(()=>new sw,qz(1));var k0=Yz(()=>new vN,qz(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L0($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Sz($){if(!L0($))throw TypeError("Uint8Array expected")}function JN($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((g)=>typeof g==="string");else return v.every((g)=>Number.isSafeInteger(g))}function GN($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Br($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aU($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function f0($){if(!Array.isArray($))throw TypeError("array expected")}function B0($,v){if(!JN(!0,v))throw TypeError(`${$}: array of strings expected`)}function Tz($,v){if(!JN(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Rv(...$){let v=(I)=>I,g=(I,J)=>(G)=>I(J(G)),U=$.map((I)=>I.encode).reduceRight(g,v),r=$.map((I)=>I.decode).reduce(g,v);return{encode:U,decode:r}}function Kv($){let v=typeof $==="string"?$.split(""):$,g=v.length;B0("alphabet",v);let U=new Map(v.map((r,I)=>[r,I]));return{encode:(r)=>{return f0(r),r.map((I)=>{if(!Number.isSafeInteger(I)||I<0||I>=g)throw Error(`alphabet.encode: digit index outside alphabet "${I}". Allowed: ${$}`);return v[I]})},decode:(r)=>{return f0(r),r.map((I)=>{Br("alphabet.decode",I);let J=U.get(I);if(J===void 0)throw Error(`Unknown letter: "${I}". Allowed: ${$}`);return J})}}}function Sv($=""){return Br("join",$),{encode:(v)=>{return B0("join.decode",v),v.join($)},decode:(v)=>{return Br("join.decode",v),v.split($)}}}function _0($,v="="){return aU($),Br("padding",v),{encode(g){B0("padding.encode",g);while(g.length*$%8)g.push(v);return g},decode(g){B0("padding.decode",g);let U=g.length;if(U*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;U>0&&g[U-1]===v;U--)if((U-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return g.slice(0,U)}}}function zN($){return GN($),{encode:(v)=>v,decode:(v)=>$(v)}}function rN($,v,g){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(g<2)throw RangeError(`convertRadix: invalid to=${g}, base cannot be less than 2`);if(f0($),!$.length)return[];let U=0,r=[],I=Array.from($,(G)=>{if(aU(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),J=I.length;while(!0){let G=0,z=!0;for(let O=U;O<J;O++){let Q=I[O],X=v*G,N=X+Q;if(!Number.isSafeInteger(N)||X/v!==G||N-Q!==X)throw Error("convertRadix: carry overflow");let w=N/g;G=N%g;let q=Math.floor(w);if(I[O]=q,!Number.isSafeInteger(q)||q*g+G!==N)throw Error("convertRadix: carry overflow");if(!z)continue;else if(!q)U=O;else z=!1}if(r.push(G),z)break}for(let G=0;G<$.length-1&&$[G]===0;G++)r.push(0);return r.reverse()}var ON=($,v)=>v===0?$:ON(v,$%v),C0=($,v)=>$+(v-ON($,v)),E0=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function Rz($,v,g,U){if(f0($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(g<=0||g>32)throw RangeError(`convertRadix2: wrong to=${g}`);if(C0(v,g)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${g} carryBits=${C0(v,g)}`);let r=0,I=0,J=E0[v],G=E0[g]-1,z=[];for(let O of $){if(aU(O),O>=J)throw Error(`convertRadix2: invalid data word=${O} from=${v}`);if(r=r<<v|O,I+v>32)throw Error(`convertRadix2: carry overflow pos=${I} from=${v}`);I+=v;for(;I>=g;I-=g)z.push((r>>I-g&G)>>>0);let Q=E0[I];if(Q===void 0)throw Error("invalid carry");r&=Q-1}if(r=r<<g-I&G,!U&&I>=v)throw Error("Excess padding");if(!U&&r>0)throw Error(`Non-zero padding: ${r}`);if(U&&I>0)z.push(r>>>0);return z}function RZ($){aU($);let v=256;return{encode:(g)=>{if(!L0(g))throw TypeError("radix.encode input should be Uint8Array");return rN(Array.from(g),v,$)},decode:(g)=>{return Tz("radix.decode",g),Uint8Array.from(rN(g,$,v))}}}function nv($,v=!1){if(aU($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(C0(8,$)>32||C0($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(g)=>{if(!L0(g))throw TypeError("radix2.encode input should be Uint8Array");return Rz(Array.from(g),8,$,!v)},decode:(g)=>{return Tz("radix2.decode",g),Uint8Array.from(Rz(g,$,8,v))}}}function gN($){return GN($),function(...v){try{return $.apply(null,v)}catch(g){}}}var lS=Object.freeze(Rv(nv(4),Kv("0123456789ABCDEF"),Sv(""))),yS=Object.freeze(Rv(nv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),_0(5),Sv(""))),dS=Object.freeze(Rv(nv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Sv(""))),hS=Object.freeze(Rv(nv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),_0(5),Sv(""))),pS=Object.freeze(Rv(nv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Sv(""))),tS=Object.freeze(Rv(nv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Sv(""),zN(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),DN=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),KZ=/[\t\n\f\r ]/,QN=($,v)=>{Br("base64",$);let g=v?"base64url":"base64";if($.length>0&&KZ.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:g,lastChunkHandling:"strict"})},Az=Object.freeze(DN?{encode($){return Sz($),$.toBase64()},decode($){return QN($,!1)}}:Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),_0(6),Sv(""))),vv=Object.freeze(Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Sv(""))),aS=Object.freeze(DN?{encode($){return Sz($),$.toBase64({alphabet:"base64url"})},decode($){return QN($,!0)}}:Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),_0(6),Sv(""))),eS=Object.freeze(Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Sv(""))),Hz=($)=>Rv(RZ(58),Kv($),Sv("")),sS=Object.freeze(Hz("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),$T=Object.freeze(Hz("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),vT=Object.freeze(Hz("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Kz=Rv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Sv("")),UN=[996825010,642813549,513874426,1027748829,705979059];function tU($){let v=$>>25,g=($&33554431)<<5;for(let U=0;U<UN.length;U++)if((v>>U&1)===1)g^=UN[U];return g}function IN($,v,g=1){let U=$.length,r=1;for(let I=0;I<U;I++){let J=$.charCodeAt(I);if(J<33||J>126)throw Error(`Invalid prefix (${$})`);r=tU(r)^J>>5}r=tU(r);for(let I=0;I<U;I++)r=tU(r)^$.charCodeAt(I)&31;for(let I of v)r=tU(r)^I;for(let I=0;I<6;I++)r=tU(r);return r^=g,Kz.encode(Rz([r%E0[30]],30,5,!1))}function XN($){let v=$==="bech32"?1:734539939,g=nv(5),U=g.decode,r=g.encode,I=gN(U);function J(X,N,w=90){if(Br("bech32.encode prefix",X),L0(N))N=Array.from(N);Tz("bech32.encode",N);let q=X.length;if(q===0)throw TypeError(`Invalid prefix length ${q}`);let u=q+7+N.length;if(w!==!1&&u>w)throw TypeError(`Length ${u} exceeds limit ${w}`);let W=X.toLowerCase(),S=IN(W,N,v);return`${W}1${Kz.encode(N)}${S}`}function G(X,N=90){Br("bech32.decode input",X);let w=X.length;if(w<8||N!==!1&&w>N)throw TypeError(`invalid string length: ${w} (${X}). Expected (8..${N})`);let q=X.toLowerCase();if(X!==q&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let u=q.lastIndexOf("1");if(u===0||u===-1)throw Error('Letter "1" must be present between prefix and data only');let W=q.slice(0,u),S=q.slice(u+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let R=Kz.decode(S).slice(0,-6),L=IN(W,R,v);if(!S.endsWith(L))throw Error(`Invalid checksum in ${X}: expected "${L}"`);return{prefix:W,words:R}}let z=gN(G);function O(X){let{prefix:N,words:w}=G(X,!1);return{prefix:N,words:w,bytes:U(w)}}function Q(X,N){return J(X,r(N))}return{encode:J,decode:G,encodeFromBytes:Q,decodeToBytes:O,decodeUnsafe:z,fromWords:U,fromWordsUnsafe:I,toWords:r}}var Tv=Object.freeze(XN("bech32")),rT=Object.freeze(XN("bech32m"));var SZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),TZ={encode($){return Sz($),$.toHex()},decode($){return Br("hex",$),Uint8Array.fromHex($)}},gT=Object.freeze(SZ?TZ:Rv(nv(4),Kv("0123456789abcdef"),Sv(""),zN(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function HZ($,v,g,U){Qr($);let r=H0({dkLen:32,asyncTick:10},U),{c:I,dkLen:J,asyncTick:G}=r;if(C$(I,"c"),C$(J,"dkLen"),C$(G,"asyncTick"),I<1)throw Error("iterations (c) must be >= 1");if(J<1)throw Error('"dkLen" must be >= 1');if(J>4294967295*$.outputLen)throw Error("derived key too long");let z=wz(v,"password"),O=wz(g,"salt"),Q=new Uint8Array(J),X=dv.create($,z),N=X._cloneInto().update(O);return{c:I,dkLen:J,asyncTick:G,DK:Q,PRF:X,PRFSalt:N}}function PZ($,v,g,U,r){if($.destroy(),v.destroy(),U)U.destroy();return zv(r),g}function Pz($,v,g,U){let{c:r,dkLen:I,DK:J,PRF:G,PRFSalt:z}=HZ($,v,g,U),O,Q=new Uint8Array(4),X=Fg(Q),N=new Uint8Array(G.outputLen);for(let w=1,q=0;q<I;w++,q+=G.outputLen){let u=J.subarray(q,q+G.outputLen);X.setInt32(0,w,!1),(O=z._cloneInto(O)).update(Q).digestInto(N),u.set(N.subarray(0,u.length));for(let W=1;W<r;W++){G._cloneInto(O).update(N).digestInto(N);for(let S=0;S<u.length;S++)u[S]^=N[S]}}return PZ(G,z,J,O,N)}function wN($,v,g,U,r,I){let J=$[v++]^g[U++],G=$[v++]^g[U++],z=$[v++]^g[U++],O=$[v++]^g[U++],Q=$[v++]^g[U++],X=$[v++]^g[U++],N=$[v++]^g[U++],w=$[v++]^g[U++],q=$[v++]^g[U++],u=$[v++]^g[U++],W=$[v++]^g[U++],S=$[v++]^g[U++],R=$[v++]^g[U++],L=$[v++]^g[U++],B=$[v++]^g[U++],F=$[v++]^g[U++],l=J,d=G,_=z,i=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,k=L,f=B,o=F;for(let e=0;e<8;e+=2)v$^=M$(l+M|0,7),V^=M$(v$+l|0,9),M^=M$(V+v$|0,13),l^=M$(M+V|0,18),j^=M$(H+d|0,7),k^=M$(j+H|0,9),d^=M$(k+j|0,13),H^=M$(d+k|0,18),f^=M$(Z+K|0,7),_^=M$(f+Z|0,9),K^=M$(_+f|0,13),Z^=M$(K+_|0,18),i^=M$(o+A|0,7),P^=M$(i+o|0,9),A^=M$(P+i|0,13),o^=M$(A+P|0,18),d^=M$(l+i|0,7),_^=M$(d+l|0,9),i^=M$(_+d|0,13),l^=M$(i+_|0,18),K^=M$(H+v$|0,7),P^=M$(K+H|0,9),v$^=M$(P+K|0,13),H^=M$(v$+P|0,18),A^=M$(Z+j|0,7),V^=M$(A+Z|0,9),j^=M$(V+A|0,13),Z^=M$(j+V|0,18),M^=M$(o+f|0,7),k^=M$(M+o|0,9),f^=M$(k+M|0,13),o^=M$(f+k|0,18);r[I++]=J+l|0,r[I++]=G+d|0,r[I++]=z+_|0,r[I++]=O+i|0,r[I++]=Q+v$|0,r[I++]=X+H|0,r[I++]=N+K|0,r[I++]=w+P|0,r[I++]=q+V|0,r[I++]=u+j|0,r[I++]=W+Z|0,r[I++]=S+A|0,r[I++]=R+M|0,r[I++]=L+k|0,r[I++]=B+f|0,r[I++]=F+o|0}function nz($,v,g,U,r){let I=U+0,J=U+16*r;for(let G=0;G<16;G++)g[J+G]=$[v+(2*r-1)*16+G];for(let G=0;G<r;G++,I+=16,v+=16){if(wN(g,J,$,v,g,I),G>0)J+=16;wN(g,I,$,v+=16,g,J)}}function nZ($,v,g){let U=H0({dkLen:32,asyncTick:10,maxmem:1073742848},g),{N:r,r:I,p:J,dkLen:G,asyncTick:z,maxmem:O,onProgress:Q}=U;if(C$(r,"N"),C$(I,"r"),C$(J,"p"),C$(G,"dkLen"),C$(z,"asyncTick"),C$(O,"maxmem"),Q!==void 0&&typeof Q!=="function")throw Error("progressCb must be a function");let X=128*I,N=X/4,w=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(J<1||J>(w-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let q=X*(r+J+1);if(q>O)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+q+", maxmem="+O);let u=Pz(L$,$,v,{c:1,dkLen:X*J}),W=T0(u),S=T0(new Uint8Array(X*r)),R=T0(new Uint8Array(X)),L=()=>{};if(Q){let B=2*r*J,F=Math.max(Math.floor(B/1e4),1),l=0;L=()=>{if(l++,Q&&(!(l%F)||l===B))Q(l/B)}}return{N:r,r:I,p:J,dkLen:G,blockSize32:N,V:S,B32:W,B:u,tmp:R,blockMixCb:L,asyncTick:z}}function kZ($,v,g,U,r){let I=Pz(L$,$,g,{c:1,dkLen:v});return zv(g,U,r),I}function kz($,v,g){let{N:U,r,p:I,dkLen:J,blockSize32:G,V:z,B32:O,B:Q,tmp:X,blockMixCb:N}=nZ($,v,g);Xz(O);for(let w=0;w<I;w++){let q=G*w;for(let u=0;u<G;u++)z[u]=O[q+u];for(let u=0,W=0;u<U-1;u++)nz(z,W,z,W+=G,r),N();nz(z,(U-1)*G,O,q,r),N();for(let u=0;u<U;u++){let W=(O[q+G-16]&U-1)>>>0;for(let S=0;S<G;S++)X[S]=O[q+S]^z[W*G+S];nz(X,0,O,q,r),N()}}return Xz(O),kZ($,J,Q,z,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function EZ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function i0($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function og($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function i$($,v,g=""){let U=EZ($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function Ez($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function NN($,v,g=!1){i$($,void 0,"output");let U=v.outputLen;if($.length<U)throw RangeError("digestInto() expects output buffer of length at least "+U);if(g&&!xg($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function iv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fZ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Gg=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),BZ=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var CZ=($)=>{for(let v=0;v<$.length;v++)$[v]=BZ($[v]);return $},Yr=Gg?($)=>$:CZ;function YN($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function qN($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function WN($,v,g){let U=v,r=g||(()=>[]),I=(G,z)=>U(z,...r(G)).update(G).digest(),J=U(new Uint8Array($),...r(new Uint8Array(0)));return I.outputLen=J.outputLen,I.blockLen=J.blockLen,I.create=(G,...z)=>U(G,...z),I}var VN=($,v)=>{function g(U,...r){if(i$(U,void 0,"key"),$.nonceLength!==void 0){let Q=r[0];i$(Q,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let I=$.tagLength;if(I&&r[1]!==void 0)i$(r[1],void 0,"AAD");let J=v(U,...r),G=(Q,X)=>{if(X!==void 0){if(Q!==2)throw Error("cipher output not supported");i$(X,void 0,"output")}},z=!1;return{encrypt(Q,X){if(z)throw Error("cannot encrypt() twice with same key + nonce");return z=!0,i$(Q),G(J.encrypt.length,X),J.encrypt(Q,X)},decrypt(Q,X){if(i$(Q),I&&Q.length<I)throw Error('"ciphertext" expected length bigger than tagLength='+I);return G(J.decrypt.length,X),J.decrypt(Q,X)}}}return Object.assign(g,$),g};function eU($,v,g=!0){if(v===void 0)return new Uint8Array($);if(i$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(g&&!xg(v))throw Error("invalid output, must be aligned");return v}function uN($,v,g){og($),og(v),i0(g);let U=new Uint8Array(16),r=fZ(U);return r.setBigUint64(0,BigInt(v),g),r.setBigUint64(8,BigInt($),g),U}function xg($){return $.byteOffset%4===0}function cg($){return Uint8Array.from(i$($))}var jN=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),LZ=(()=>Yr(pv(jN("expand 16-byte k"))))(),_Z=(()=>Yr(pv(jN("expand 32-byte k"))))();function R$($,v){return $<<v|$>>>32-v}var sU=64,iZ=16,fz=(()=>4294967295)(),ZN=Uint32Array.of();function bZ($,v,g,U,r,I,J,G){let z=r.length,O=new Uint8Array(sU),Q=pv(O),X=Gg&&xg(r)&&xg(I),N=X?pv(r):ZN,w=X?pv(I):ZN;if(!Gg){for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),Yr(Q),J>=fz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}return}for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),J>=fz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);if(X&&u===sU){let W=q/4;if(q%4!==0)throw Error("arx: invalid block position");for(let S=0,R;S<iZ;S++)R=W+S,w[R]=N[R]^Q[S];q+=sU;continue}for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}}function MN($,v){let{allowShortKeys:g,extendNonceFn:U,counterLength:r,counterRight:I,rounds:J}=YN({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return og(r),og(J),i0(I),i0(g),(G,z,O,Q,X=0)=>{i$(G,void 0,"key"),i$(z,void 0,"nonce"),i$(O,void 0,"data");let N=O.length;if(Q=eU(N,Q,!1),og(X),X<0||X>=fz)throw Error("arx: counter overflow");let w=[],q=G.length,u,W;if(q===32)w.push(u=cg(G)),W=_Z;else if(q===16&&g)u=new Uint8Array(32),u.set(G),u.set(G,16),W=LZ,w.push(u);else throw i$(G,32,"arx key"),Error("invalid key size");if(!Gg||!xg(z))w.push(z=cg(z));let S=pv(u);if(U){if(z.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=z.subarray(0,16);if(Gg)U(W,S,pv(B),S);else{let F=Yr(Uint32Array.from(W));U(F,S,pv(B),S),iv(F),Yr(S)}z=z.subarray(16)}else if(!Gg)Yr(S);let R=16-r;if(R!==z.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let B=new Uint8Array(12);B.set(z,I?0:12-z.length),z=B,w.push(z)}let L=Yr(pv(z));try{return bZ($,W,S,L,O,Q,X,J),Q}finally{iv(...w)}}}function l$($,v){return $[v++]&255|($[v++]&255)<<8}class RN{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cg(i$($,32,"key"));let v=l$($,0),g=l$($,2),U=l$($,4),r=l$($,6),I=l$($,8),J=l$($,10),G=l$($,12),z=l$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|g<<3)&8191,this.r[2]=(g>>>10|U<<6)&7939,this.r[3]=(U>>>7|r<<9)&8191,this.r[4]=(r>>>4|I<<12)&255,this.r[5]=I>>>1&8190,this.r[6]=(I>>>14|J<<2)&8191,this.r[7]=(J>>>11|G<<5)&8065,this.r[8]=(G>>>8|z<<8)&8191,this.r[9]=z>>>5&127;for(let O=0;O<8;O++)this.pad[O]=l$($,16+2*O)}process($,v,g=!1){let U=g?0:2048,{h:r,r:I}=this,J=I[0],G=I[1],z=I[2],O=I[3],Q=I[4],X=I[5],N=I[6],w=I[7],q=I[8],u=I[9],W=l$($,v+0),S=l$($,v+2),R=l$($,v+4),L=l$($,v+6),B=l$($,v+8),F=l$($,v+10),l=l$($,v+12),d=l$($,v+14),_=r[0]+(W&8191),i=r[1]+((W>>>13|S<<3)&8191),v$=r[2]+((S>>>10|R<<6)&8191),H=r[3]+((R>>>7|L<<9)&8191),K=r[4]+((L>>>4|B<<12)&8191),P=r[5]+(B>>>1&8191),V=r[6]+((B>>>14|F<<2)&8191),j=r[7]+((F>>>11|l<<5)&8191),Z=r[8]+((l>>>8|d<<8)&8191),A=r[9]+(d>>>5|U),M=0,k=M+_*J+i*(5*u)+v$*(5*q)+H*(5*w)+K*(5*N);M=k>>>13,k&=8191,k+=P*(5*X)+V*(5*Q)+j*(5*O)+Z*(5*z)+A*(5*G),M+=k>>>13,k&=8191;let f=M+_*G+i*J+v$*(5*u)+H*(5*q)+K*(5*w);M=f>>>13,f&=8191,f+=P*(5*N)+V*(5*X)+j*(5*Q)+Z*(5*O)+A*(5*z),M+=f>>>13,f&=8191;let o=M+_*z+i*G+v$*J+H*(5*u)+K*(5*q);M=o>>>13,o&=8191,o+=P*(5*w)+V*(5*N)+j*(5*X)+Z*(5*Q)+A*(5*O),M+=o>>>13,o&=8191;let e=M+_*O+i*z+v$*G+H*J+K*(5*u);M=e>>>13,e&=8191,e+=P*(5*q)+V*(5*w)+j*(5*N)+Z*(5*X)+A*(5*Q),M+=e>>>13,e&=8191;let I$=M+_*Q+i*O+v$*z+H*G+K*J;M=I$>>>13,I$&=8191,I$+=P*(5*u)+V*(5*q)+j*(5*w)+Z*(5*N)+A*(5*X),M+=I$>>>13,I$&=8191;let G$=M+_*X+i*Q+v$*O+H*z+K*G;M=G$>>>13,G$&=8191,G$+=P*J+V*(5*u)+j*(5*q)+Z*(5*w)+A*(5*N),M+=G$>>>13,G$&=8191;let D$=M+_*N+i*X+v$*Q+H*O+K*z;M=D$>>>13,D$&=8191,D$+=P*G+V*J+j*(5*u)+Z*(5*q)+A*(5*w),M+=D$>>>13,D$&=8191;let w$=M+_*w+i*N+v$*X+H*Q+K*O;M=w$>>>13,w$&=8191,w$+=P*z+V*G+j*J+Z*(5*u)+A*(5*q),M+=w$>>>13,w$&=8191;let Q$=M+_*q+i*w+v$*N+H*X+K*Q;M=Q$>>>13,Q$&=8191,Q$+=P*O+V*z+j*G+Z*J+A*(5*u),M+=Q$>>>13,Q$&=8191;let X$=M+_*u+i*q+v$*w+H*N+K*X;M=X$>>>13,X$&=8191,X$+=P*Q+V*O+j*z+Z*G+A*J,M+=X$>>>13,X$&=8191,M=(M<<2)+M|0,M=M+k|0,k=M&8191,M=M>>>13,f+=M,r[0]=k,r[1]=f,r[2]=o,r[3]=e,r[4]=I$,r[5]=G$,r[6]=D$,r[7]=w$,r[8]=Q$,r[9]=X$}finalize(){let{h:$,pad:v}=this,g=new Uint16Array(10),U=$[1]>>>13;$[1]&=8191;for(let J=2;J<10;J++)$[J]+=U,U=$[J]>>>13,$[J]&=8191;$[0]+=U*5,U=$[0]>>>13,$[0]&=8191,$[1]+=U,U=$[1]>>>13,$[1]&=8191,$[2]+=U,g[0]=$[0]+5,U=g[0]>>>13,g[0]&=8191;for(let J=1;J<10;J++)g[J]=$[J]+U,U=g[J]>>>13,g[J]&=8191;g[9]-=8192;let r=(U^1)-1;for(let J=0;J<10;J++)g[J]&=r;r=~r;for(let J=0;J<10;J++)$[J]=$[J]&r|g[J];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let I=$[0]+v[0];$[0]=I&65535;for(let J=1;J<8;J++)I=($[J]+v[J]|0)+(I>>>16)|0,$[J]=I&65535;iv(g)}update($){Ez(this),i$($),$=cg($);let{buffer:v,blockLen:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(g-this.pos,U-r);if(I===g){for(;g<=U-r;r+=g)this.process($,r);continue}if(v.set($.subarray(r,r+I),this.pos),this.pos+=I,r+=I,this.pos===g)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,iv(this.h,this.r,this.buffer,this.pad)}digestInto($){Ez(this),NN($,this),this.finished=!0;let{buffer:v,h:g}=this,{pos:U}=this;if(U){v[U++]=1;for(;U<16;U++)v[U]=0;this.process(v,0,!0)}this.finalize();let r=0;for(let I=0;I<8;I++)$[r++]=g[I]>>>0,$[r++]=g[I]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}}var KN=WN(32,($)=>new RN($));function mZ($,v,g,U,r,I=20){let J=$[0],G=$[1],z=$[2],O=$[3],Q=v[0],X=v[1],N=v[2],w=v[3],q=v[4],u=v[5],W=v[6],S=v[7],R=r,L=g[0],B=g[1],F=g[2],l=J,d=G,_=z,i=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,k=L,f=B,o=F;for(let I$=0;I$<I;I$+=2)l=l+v$|0,M=R$(M^l,16),V=V+M|0,v$=R$(v$^V,12),l=l+v$|0,M=R$(M^l,8),V=V+M|0,v$=R$(v$^V,7),d=d+H|0,k=R$(k^d,16),j=j+k|0,H=R$(H^j,12),d=d+H|0,k=R$(k^d,8),j=j+k|0,H=R$(H^j,7),_=_+K|0,f=R$(f^_,16),Z=Z+f|0,K=R$(K^Z,12),_=_+K|0,f=R$(f^_,8),Z=Z+f|0,K=R$(K^Z,7),i=i+P|0,o=R$(o^i,16),A=A+o|0,P=R$(P^A,12),i=i+P|0,o=R$(o^i,8),A=A+o|0,P=R$(P^A,7),l=l+H|0,o=R$(o^l,16),Z=Z+o|0,H=R$(H^Z,12),l=l+H|0,o=R$(o^l,8),Z=Z+o|0,H=R$(H^Z,7),d=d+K|0,M=R$(M^d,16),A=A+M|0,K=R$(K^A,12),d=d+K|0,M=R$(M^d,8),A=A+M|0,K=R$(K^A,7),_=_+P|0,k=R$(k^_,16),V=V+k|0,P=R$(P^V,12),_=_+P|0,k=R$(k^_,8),V=V+k|0,P=R$(P^V,7),i=i+v$|0,f=R$(f^i,16),j=j+f|0,v$=R$(v$^j,12),i=i+v$|0,f=R$(f^i,8),j=j+f|0,v$=R$(v$^j,7);let e=0;U[e++]=J+l|0,U[e++]=G+d|0,U[e++]=z+_|0,U[e++]=O+i|0,U[e++]=Q+v$|0,U[e++]=X+H|0,U[e++]=N+K|0,U[e++]=w+P|0,U[e++]=q+V|0,U[e++]=u+j|0,U[e++]=W+Z|0,U[e++]=S+A|0,U[e++]=R+M|0,U[e++]=L+k|0,U[e++]=B+f|0,U[e++]=F+o|0}var FZ=MN(mZ,{counterRight:!1,counterLength:4,allowShortKeys:!1});var oZ=new Uint8Array(16),SN=($,v)=>{$.update(v);let g=v.length%16;if(g)$.update(oZ.subarray(g))},xZ=new Uint8Array(32);function TN($,v,g,U,r){if(r!==void 0)i$(r,void 0,"AAD");let I=$(v,g,xZ),J=uN(U.length,r?r.length:0,!0),G=KN.create(I);if(r)SN(G,r);SN(G,U),G.update(J);let z=G.digest();return iv(I,J),z}var cZ=($)=>(v,g,U)=>{return{encrypt(I,J){let G=I.length;J=eU(G+16,J,!1),J.set(I);let z=J.subarray(0,-16);$(v,g,z,z,1);let O=TN($,v,g,z,U);return J.set(O,G),iv(O),J},decrypt(I,J){J=eU(I.length-16,J,!1);let G=I.subarray(0,-16),z=I.subarray(-16),O=TN($,v,g,G,U);if(!qN(z,O))throw iv(O),Error("invalid tag");return J.set(I.subarray(0,-16)),$(v,g,J,J,1),iv(O),J}}},kv=VN({blockSize:64,nonceLength:12,tagLength:16},cZ(FZ));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function lg($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,v=""){if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw Error(`${g}expected integer >= 0, got ${$}`)}}function Y$($,v,g=""){let U=lg($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`;throw Error(J+"expected Uint8Array"+G+", got "+z)}return $}function Ev($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Wr($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function b0($,v){Y$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw Error('"digestInto() output" expected to be of length >='+g)}function m0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function F0($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function bv($,v){return $<<32-v|$>>>v}var lZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function yZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function dZ($){for(let v=0;v<$.length;v++)$[v]=yZ($[v]);return $}var Bz=lZ?($)=>$:dZ,HN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),hZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function zg($){if(Y$($),HN)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=hZ[$[g]];return v}var qr={_0:48,_9:57,A:65,F:70,a:97,f:102};function AN($){if($>=qr._0&&$<=qr._9)return $-qr._0;if($>=qr.A&&$<=qr.F)return $-(qr.A-10);if($>=qr.a&&$<=qr.f)return $-(qr.a-10);return}function Og($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(HN)return Uint8Array.fromHex($);let v=$.length,g=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=AN($.charCodeAt(I)),G=AN($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw Error('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function _$(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];Y$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function yg($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Cr($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var Lr=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Lz=BigInt(0),Cz=BigInt(1);function $I($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw Error(g+"expected boolean, got type="+typeof $)}return $}function PN($){if(typeof $==="bigint"){if(!o0($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function vI($){let v=PN($).toString(16);return v.length&1?"0"+v:v}function nN($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?Lz:BigInt("0x"+$)}function _r($){return nN(zg($))}function ir($){return nN(zg(x0(Y$($)).reverse()))}function dg($,v){m$(v),$=PN($);let g=Og($.toString(16).padStart(v*2,"0"));if(g.length!==v)throw Error("number too large");return g}function rI($,v){return dg($,v).reverse()}function x0($){return Uint8Array.from($)}function br($){return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw Error(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var o0=($)=>typeof $==="bigint"&&Lz<=$;function pZ($,v,g){return o0($)&&o0(v)&&o0(g)&&v<=$&&$<g}function gI($,v,g,U){if(!pZ(v,g,U))throw Error("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function _z($){let v;for(v=0;$>Lz;$>>=Cz,v+=1);return v}var UI=($)=>(Cz<<BigInt($))-Cz;function kN($,v,g){if(m$($,"hashLen"),m$(v,"qByteLen"),typeof g!=="function")throw Error("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,_$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return _$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while(!(R=S(q())))w();return X(),R}}function Dg($,v={},g={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function U(I,J,G){let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw Error(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}function iz($){let v=new WeakMap;return(g,...U)=>{let r=v.get(g);if(r!==void 0)return r;let I=$(g,...U);return v.set(g,I),I}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Dv=BigInt(0),rv=BigInt(1),Qg=BigInt(2),BN=BigInt(3),CN=BigInt(4),LN=BigInt(5),tZ=BigInt(7),_N=BigInt(8),aZ=BigInt(9),iN=BigInt(16);function Ov($,v){let g=$%v;return g>=Dv?g:v+g}function fv($,v,g){let U=$;while(v-- >Dv)U*=U,U%=g;return U}function EN($,v){if($===Dv)throw Error("invert: expected non-zero number");if(v<=Dv)throw Error("invert: expected positive modulus, got "+v);let g=Ov($,v),U=v,r=Dv,I=rv,J=rv,G=Dv;while(g!==Dv){let O=U/g,Q=U%g,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==rv)throw Error("invert: does not exist");return Ov(r,v)}function bz($,v,g){if(!$.eql($.sqr(v),g))throw Error("Cannot find square root")}function bN($,v){let g=($.ORDER+rv)/CN,U=$.pow(v,g);return bz($,U,v),U}function eZ($,v){let g=($.ORDER-LN)/_N,U=$.mul(v,Qg),r=$.pow(U,g),I=$.mul(v,r),J=$.mul($.mul(I,Qg),r),G=$.mul(I,$.sub(J,$.ONE));return bz($,G,v),G}function sZ($){let v=c0($),g=mN($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+tZ)/iN;return(G,z)=>{let O=G.pow(z,J),Q=G.mul(O,U),X=G.mul(O,r),N=G.mul(O,I),w=G.eql(G.sqr(Q),z),q=G.eql(G.sqr(X),z);O=G.cmov(O,Q,w),Q=G.cmov(N,X,q);let u=G.eql(G.sqr(Q),z),W=G.cmov(O,Q,u);return bz(G,W,z),W}}function mN($){if($<BN)throw Error("sqrt is not defined for small field");let v=$-rv,g=0;while(v%Qg===Dv)v/=Qg,g++;let U=Qg,r=c0($);while(fN(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return bN;let I=r.pow(U,v),J=(v+rv)/Qg;return function(z,O){if(z.is0(O))return O;if(fN(z,O)!==1)throw Error("Cannot find square root");let Q=g,X=z.mul(z.ONE,I),N=z.pow(O,v),w=z.pow(O,J);while(!z.eql(N,z.ONE)){if(z.is0(N))return z.ZERO;let q=1,u=z.sqr(N);while(!z.eql(u,z.ONE))if(q++,u=z.sqr(u),q===Q)throw Error("Cannot find square root");let W=rv<<BigInt(Q-q-1),S=z.pow(X,W);Q=q,X=z.sqr(S),N=z.mul(N,X),w=z.mul(w,S)}return w}}function $j($){if($%CN===BN)return bN;if($%_N===LN)return eZ;if($%iN===aZ)return sZ($);return mN($)}var vj=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function mz($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=vj.reduce((U,r)=>{return U[r]="function",U},v);return Dg($,g),$}function rj($,v,g){if(g<Dv)throw Error("invalid exponent, negatives unsupported");if(g===Dv)return $.ONE;if(g===rv)return v;let U=$.ONE,r=v;while(g>Dv){if(g&rv)U=$.mul(U,r);r=$.sqr(r),g>>=rv}return U}function II($,v,g=!1){let U=Array(v.length).fill(g?$.ZERO:void 0),r=v.reduce((J,G,z)=>{if($.is0(G))return J;return U[z]=J,$.mul(J,G)},$.ONE),I=$.inv(r);return v.reduceRight((J,G,z)=>{if($.is0(G))return J;return U[z]=$.mul(J,U[z]),$.mul(J,G)},I),U}function fN($,v){let g=($.ORDER-rv)/Qg,U=$.pow(v,g),r=$.eql(U,$.ONE),I=$.eql(U,$.ZERO),J=$.eql(U,$.neg($.ONE));if(!r&&!I&&!J)throw Error("invalid Legendre symbol result");return r?1:I?0:-1}function gj($,v){if(v!==void 0)m$(v);let g=v!==void 0?v:$.toString(2).length,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}class FN{ORDER;BITS;BYTES;isLE;ZERO=Dv;ONE=rv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Dv)throw Error("invalid field: expected ORDER > 0, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=gj($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Ov($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Dv<=$&&$<this.ORDER}is0($){return $===Dv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&rv)===rv}neg($){return Ov(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Ov($*$,this.ORDER)}add($,v){return Ov($+v,this.ORDER)}sub($,v){return Ov($-v,this.ORDER)}mul($,v){return Ov($*v,this.ORDER)}pow($,v){return rj(this,$,v)}div($,v){return Ov($*EN(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return EN($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=$j(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?rI($,this.BYTES):dg($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if(!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?ir($):_r($);if(J)G=Ov(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return II(this,$)}cmov($,v,g){return g?v:$}}function c0($,v={}){return new FN($,v)}function oN($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function Fz($){let v=oN($);return v+Math.ceil(v/2)}function xN($,v,g=!1){Y$($);let U=$.length,r=oN(v),I=Fz(v);if(U<16||U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?ir($):_r($),G=Ov(J,v-rv)+rv;return g?rI(G,r):dg(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hg=BigInt(0),Xg=BigInt(1);function JI($,v){let g=v.negate();return $?g:v}function lz($,v){let g=II($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function dN($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function oz($,v){dN($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=UI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function cN($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=Xg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var xz=new WeakMap,hN=new WeakMap;function cz($){return hN.get($)||1}function lN($){if($!==hg)throw Error("invalid wNAF")}class yz{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>hg){if(v&Xg)g=g.add(U);U=U.double(),v>>=Xg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=oz(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=oz($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=cN(g,J,I);if(g=G,O)r=r.add(JI(X,v[N]));else U=U.add(JI(Q,v[z]))}return lN(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=oz($,this.bits);for(let I=0;I<r.windows;I++){if(g===hg)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=cN(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return lN(g),U}getPrecomputes($,v,g){let U=xz.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);xz.set(v,U)}}return U}cached($,v,g){let U=cz($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=cz($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){dN(v,this.bits),hN.set($,v),xz.delete($)}hasCache($){return cz($)!==1}}function pN($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>hg||U>hg){if(g&Xg)I=I.add(r);if(U&Xg)J=J.add(r);r=r.double(),g>>=Xg,U>>=Xg}return{p1:I,p2:J}}function yN($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return mz(v),v}else return c0($,{isLE:g})}function tN($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>hg))throw Error(`CURVE.${z} must be positive bigint`)}let r=yN(v.p,g.Fp,U),I=yN(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function l0($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GI=BigInt(0),pg=BigInt(1),y0=BigInt(2);function Uj($){return Dg($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function aN($){let v=Uj($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J||Cr,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?y0**BigInt(254):y0**BigInt(447),q=G?BigInt(8)*y0**BigInt(251)-pg:BigInt(4)*y0**BigInt(445)-pg,u=w+q+pg,W=(V)=>Ov(V,g),S=R(X);function R(V){return rI(W(V),Q)}function L(V){let j=x0(Y$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(ir(j))}function B(V){return ir(r(x0(Y$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===GI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function i(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){gI("u",V,GI,g),gI("scalar",j,w,u);let Z=j,A=V,M=pg,k=GI,f=V,o=pg,e=GI;for(let G$=BigInt(O-1);G$>=GI;G$--){let D$=Z>>G$&pg;e^=D$,{x_2:M,x_3:f}=i(e,M,f),{x_2:k,x_3:o}=i(e,k,o),e=D$;let w$=M+k,Q$=W(w$*w$),X$=M-k,W$=W(X$*X$),P$=Q$-W$,k$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(k$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),k=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=i(e,M,f)),{x_2:k,x_3:o}=i(e,k,o);let I$=I(k);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V=z(Q))=>{return Y$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:l0(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}class dz{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Ev($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Vv(U)}update($){return Wr(this),this.iHash.update($),this}digestInto($){Wr(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tg=($,v,g)=>new dz($,v).update(g).digest();tg.create=($,v)=>new dz($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var eN=($,v)=>($+($>=0?v:-v)/$Y)/v;function Ij($,v,g){let[[U,r],[I,J]]=v,G=eN(J*$,g),z=eN(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<Vr,N=Q<Vr;if(X)O=-O;if(N)Q=-Q;let w=UI(Math.ceil(_z(g)/2))+ag;if(O<Vr||O>=w||Q<Vr||Q>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:O,k2neg:N,k2:Q}}function pz($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function hz($,v){let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if($I(g.lowS,"lowS"),$I(g.prehash,"prehash"),g.format!==void 0)pz(g.format);return g}class sN extends Error{constructor($=""){super($)}}var mr={Err:sN,_tlv:{encode:($,v)=>{let{Err:g}=mr;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=vI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?vI(r.length/2|128):"";return vI($)+I+r+v},decode($,v){let{Err:g}=mr,U=0;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=mr;if($<Vr)throw new v("integer: negative integers are not allowed");let g=vI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=mr;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _r($)}},toSig($){let{Err:v,_int:g,_tlv:U}=mr,r=Y$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=mr,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}},Vr=BigInt(0),ag=BigInt(1),$Y=BigInt(2),d0=BigInt(3),Jj=BigInt(4);function tz($,v={}){let g=tN("weierstrass",$,v),{Fp:U,Fn:r}=g,I=g.CURVE,{h:J,n:G}=I;Dg(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let O=rY(U,r);function Q(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,P,V){let{x:j,y:Z}=P.toAffine(),A=U.toBytes(j);if($I(V,"isCompressed"),V){Q();let M=!U.isOdd(Z);return _$(vY(M),A)}else return _$(Uint8Array.of(4),A,U.toBytes(Z))}function N(K){Y$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=O,j=K.length,Z=K[0],A=K.subarray(1);if(j===P&&(Z===2||Z===3)){let M=U.fromBytes(A);if(!U.isValid(M))throw Error("bad point: is not on curve, wrong x");let k=u(M),f;try{f=U.sqrt(k)}catch(I$){let G$=I$ instanceof Error?": "+I$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}Q();let o=U.isOdd(f);if((Z&1)===1!==o)f=U.neg(f);return{x:M,y:f}}else if(j===V&&Z===4){let M=U.BYTES,k=U.fromBytes(A.subarray(0,M)),f=U.fromBytes(A.subarray(M,M*2));if(!W(k,f))throw Error("bad point: is not on curve");return{x:k,y:f}}else throw Error(`bad point: got length ${j}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||X,q=v.fromBytes||N;function u(K){let P=U.sqr(K),V=U.mul(P,K);return U.add(U.add(V,U.mul(K,I.a)),I.b)}function W(K,P){let V=U.sqr(P),j=u(K);return U.eql(V,j)}if(!W(I.Gx,I.Gy))throw Error("bad curve params: generator point");let S=U.mul(U.pow(I.a,d0),Jj),R=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(S,R)))throw Error("bad curve params: a or b");function L(K,P,V=!1){if(!U.isValid(P)||V&&U.is0(P))throw Error(`bad point coordinate ${K}`);return P}function B(K){if(!(K instanceof i))throw Error("Weierstrass Point expected")}function F(K){if(!z||!z.basises)throw Error("no endo");return Ij(K,z.basises,r.ORDER)}let l=iz((K,P)=>{let{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),k=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:k}}),d=iz((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!U.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!U.isValid(P)||!U.isValid(V))throw Error("bad point: x or y not field elements");if(!W(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,P,V,j,Z){return V=new i(U.mul(V.X,K),V.Y,V.Z),P=JI(j,P),V=JI(Z,V),P.add(V)}class i{static BASE=new i(I.Gx,I.Gy,U.ONE);static ZERO=new i(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(K,P,V){this.X=L("x",K),this.Y=L("y",P,!0),this.Z=L("z",V),Object.freeze(this)}static CURVE(){return I}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!U.isValid(P)||!U.isValid(V))throw Error("invalid affine point");if(K instanceof i)throw Error("projective point not allowed");if(U.is0(P)&&U.is0(V))return i.ZERO;return new i(P,V,U.ONE)}static fromBytes(K){let P=i.fromAffine(q(Y$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return i.fromBytes(Og(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(H.createCache(this,K),!P)this.multiply(d0);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(K)}equals(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,k=U.eql(U.mul(P,M),U.mul(Z,j)),f=U.eql(U.mul(V,M),U.mul(A,j));return k&&f}negate(){return new i(this.X,U.neg(this.Y),this.Z)}double(){let{a:K,b:P}=I,V=U.mul(P,d0),{X:j,Y:Z,Z:A}=this,M=U.ZERO,k=U.ZERO,f=U.ZERO,o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(A,A),G$=U.mul(j,Z);return G$=U.add(G$,G$),f=U.mul(j,A),f=U.add(f,f),M=U.mul(K,f),k=U.mul(V,I$),k=U.add(M,k),M=U.sub(e,k),k=U.add(e,k),k=U.mul(M,k),M=U.mul(G$,M),f=U.mul(V,f),I$=U.mul(K,I$),G$=U.sub(o,I$),G$=U.mul(K,G$),G$=U.add(G$,f),f=U.add(o,o),o=U.add(f,o),o=U.add(o,I$),o=U.mul(o,G$),k=U.add(k,o),I$=U.mul(Z,A),I$=U.add(I$,I$),o=U.mul(I$,G$),M=U.sub(M,o),f=U.mul(I$,e),f=U.add(f,f),f=U.add(f,f),new i(M,k,f)}add(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,k=U.ZERO,f=U.ZERO,o=U.ZERO,e=I.a,I$=U.mul(I.b,d0),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.mul(j,M),Q$=U.add(P,V),X$=U.add(Z,A);Q$=U.mul(Q$,X$),X$=U.add(G$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,j);let W$=U.add(Z,M);return X$=U.mul(X$,W$),W$=U.add(G$,w$),X$=U.sub(X$,W$),W$=U.add(V,j),k=U.add(A,M),W$=U.mul(W$,k),k=U.add(D$,w$),W$=U.sub(W$,k),o=U.mul(e,X$),k=U.mul(I$,w$),o=U.add(k,o),k=U.sub(D$,o),o=U.add(D$,o),f=U.mul(k,o),D$=U.add(G$,G$),D$=U.add(D$,G$),w$=U.mul(e,w$),X$=U.mul(I$,X$),D$=U.add(D$,w$),w$=U.sub(G$,w$),w$=U.mul(e,w$),X$=U.add(X$,w$),G$=U.mul(D$,X$),f=U.add(f,G$),G$=U.mul(W$,X$),k=U.mul(Q$,k),k=U.sub(k,G$),G$=U.mul(Q$,D$),o=U.mul(W$,o),o=U.add(o,G$),new i(k,f,o)}subtract(K){return this.add(K.negate())}is0(){return this.equals(i.ZERO)}multiply(K){let{endo:P}=v;if(!r.isValidNot0(K))throw Error("invalid scalar: out of range");let V,j,Z=(A)=>H.cached(this,A,(M)=>lz(i,M));if(P){let{k1neg:A,k1:M,k2neg:k,k2:f}=F(K),{p:o,f:e}=Z(M),{p:I$,f:G$}=Z(f);j=e.add(G$),V=_(P.beta,o,I$,A,k)}else{let{p:A,f:M}=Z(K);V=A,j=M}return lz(i,[V,j])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!r.isValid(K))throw Error("invalid scalar: out of range");if(K===Vr||V.is0())return i.ZERO;if(K===ag)return V;if(H.hasCache(this))return this.multiply(K);if(P){let{k1neg:j,k1:Z,k2neg:A,k2:M}=F(K),{p1:k,p2:f}=pN(i,V,Z,M);return _(P.beta,k,f,j,A)}else return H.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(J===ag)return!0;if(K)return K(i,this);return H.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(J===ag)return this;if(K)return K(i,this);return this.multiplyUnsafe(J)}isSmallOrder(){return this.multiplyUnsafe(J).is0()}toBytes(K=!0){return $I(K,"isCompressed"),this.assertValidity(),w(i,this,K)}toHex(K=!0){return zg(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=r.BITS,H=new yz(i,v.endo?Math.ceil(v$/2):v$);return i.BASE.precompute(8),i}function vY($){return Uint8Array.of($?2:3)}function rY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function Gj($,v={}){let{Fn:g}=$,U=v.randomBytes||Cr,r=Object.assign(rY($.Fp,g),{seed:Fz(g.ORDER)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w=U(r.seed)){return xN(Y$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r;if(!lg(w))return;if("_lengths"in g&&g._lengths||q===u)return;let S=Y$(w,void 0,"key").length;return S===u||S===W}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=l0(G,z);return Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function az($,v,g={}){Ev(v),Dg(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let U=g.randomBytes||Cr,r=g.hmac||((V,j)=>tg(v,V,j)),{Fp:I,Fn:J}=$,{ORDER:G,BITS:z}=J,{keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w}=Gj($,g),q={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},u=G*$Y<I.ORDER;function W(V){let j=G>>ag;return V>j}function S(V,j){if(!J.isValidNot0(j))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return j}function R(){if(u)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(V,j){pz(j);let Z=w.signature,A=j==="compact"?Z:j==="recovered"?Z+1:void 0;return Y$(V,A)}class B{r;s;recovery;constructor(V,j,Z){if(this.r=S("r",V),this.s=S("s",j),Z!=null){if(R(),![0,1,2,3].includes(Z))throw Error("invalid recovery id");this.recovery=Z}Object.freeze(this)}static fromBytes(V,j=q.format){L(V,j);let Z;if(j==="der"){let{r:f,s:o}=mr.toSig(Y$(V));return new B(f,o)}if(j==="recovered")Z=V[0],j="compact",V=V.subarray(1);let A=w.signature/2,M=V.subarray(0,A),k=V.subarray(A,A*2);return new B(J.fromBytes(M),J.fromBytes(k),Z)}static fromHex(V,j){return this.fromBytes(Og(V),j)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new B(this.r,this.s,V)}recoverPublicKey(V){let{r:j,s:Z}=this,A=this.assertRecovery(),M=A===2||A===3?j+G:j;if(!I.isValid(M))throw Error("invalid recovery id: sig.r+curve.n != R.x");let k=I.toBytes(M),f=$.fromBytes(_$(vY((A&1)===0),k)),o=J.inv(M),e=l(Y$(V,void 0,"msgHash")),I$=J.create(-e*o),G$=J.create(Z*o),D$=$.BASE.multiplyUnsafe(I$).add(f.multiplyUnsafe(G$));if(D$.is0())throw Error("invalid recovery: point at infinify");return D$.assertValidity(),D$}hasHighS(){return W(this.s)}toBytes(V=q.format){if(pz(V),V==="der")return Og(mr.hexFromSig(this));let{r:j,s:Z}=this,A=J.toBytes(j),M=J.toBytes(Z);if(V==="recovered")return R(),_$(Uint8Array.of(this.assertRecovery()),A,M);return _$(A,M)}toHex(V){return zg(this.toBytes(V))}}let F=g.bits2int||function(j){if(j.length>8192)throw Error("input is too large");let Z=_r(j),A=j.length*8-z;return A>0?Z>>BigInt(A):Z},l=g.bits2int_modN||function(j){return J.create(F(j))},d=UI(z);function _(V){return gI("num < 2^"+z,V,Vr,d),J.toBytes(V)}function i(V,j){return Y$(V,void 0,"message"),j?Y$(v(V),void 0,"prehashed message"):V}function v$(V,j,Z){let{lowS:A,prehash:M,extraEntropy:k}=hz(Z,q);V=i(V,M);let f=l(V),o=J.fromBytes(j);if(!J.isValidNot0(o))throw Error("invalid private key");let e=[_(o),_(f)];if(k!=null&&k!==!1){let w$=k===!0?U(w.secretKey):k;e.push(Y$(w$,void 0,"extraEntropy"))}let I$=_$(...e),G$=f;function D$(w$){let Q$=F(w$);if(!J.isValidNot0(Q$))return;let X$=J.inv(Q$),W$=$.BASE.multiply(Q$).toAffine(),P$=J.create(W$.x);if(P$===Vr)return;let k$=J.create(X$*J.create(G$+P$*o));if(k$===Vr)return;let a$=(W$.x===P$?0:2)|Number(W$.y&ag),e$=k$;if(A&&W(k$))e$=J.neg(k$),a$^=1;return new B(P$,e$,u?void 0:a$)}return{seed:I$,k2sig:D$}}function H(V,j,Z={}){let{seed:A,k2sig:M}=v$(V,j,Z);return kN(v.outputLen,J.BYTES,r)(A,M).toBytes(Z.format)}function K(V,j,Z,A={}){let{lowS:M,prehash:k,format:f}=hz(A,q);if(Z=Y$(Z,void 0,"publicKey"),j=i(j,k),!lg(V)){let o=V instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+o)}L(V,f);try{let o=B.fromBytes(V,f),e=$.fromBytes(Z);if(M&&o.hasHighS())return!1;let{r:I$,s:G$}=o,D$=l(j),w$=J.inv(G$),Q$=J.create(D$*w$),X$=J.create(I$*w$),W$=$.BASE.multiplyUnsafe(Q$).add(e.multiplyUnsafe(X$));if(W$.is0())return!1;return J.create(W$.x)===I$}catch(o){return!1}}function P(V,j,Z={}){let{prehash:A}=hz(Z,q);return j=i(j,A),B.fromBytes(V,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w,Point:$,sign:H,verify:K,recoverPublicKey:P,Signature:B,hash:v})}function gY($,v,g){return $&v^~$&g}function UY($,v,g){return $&v^$&g^v&g}class h0{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=F0(this.buffer)}update($){Wr(this),Y$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=F0($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wr(this),b0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Vv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=F0($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var ur=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),y$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var p0=BigInt(4294967295),IY=BigInt(32);function zj($,v=!1){if(v)return{h:Number($&p0),l:Number($>>IY&p0)};return{h:Number($>>IY&p0)|0,l:Number($&p0)|0}}function t0($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=zj($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var ez=($,v,g)=>$>>>g,sz=($,v,g)=>$<<32-g|v>>>g,wg=($,v,g)=>$>>>g|v<<32-g,Ng=($,v,g)=>$<<32-g|v>>>g,zI=($,v,g)=>$<<64-g|v>>>g-32,OI=($,v,g)=>$>>>g-32|v<<64-g;var JY=($,v,g)=>$<<g|v>>>32-g,GY=($,v,g)=>v<<g|$>>>32-g,zY=($,v,g)=>v<<g-32|$>>>64-g,OY=($,v,g)=>$<<g-32|v>>>64-g;function tv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var DY=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),QY=($,v,g,U)=>v+g+U+($/4294967296|0)|0,XY=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),wY=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,NY=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),YY=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var Dj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Fr=new Uint32Array(64);class $O extends h0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)Fr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=Fr[Q-15],N=Fr[Q-2],w=bv(X,7)^bv(X,18)^X>>>3,q=bv(N,17)^bv(N,19)^N>>>10;Fr[Q]=q+Fr[Q-7]+w+Fr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=bv(J,6)^bv(J,11)^bv(J,25),N=O+X+gY(J,G,z)+Dj[Q]+Fr[Q]|0,q=(bv(g,2)^bv(g,13)^bv(g,22))+UY(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){Vv(Fr)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class qY extends $O{A=ur[0]|0;B=ur[1]|0;C=ur[2]|0;D=ur[3]|0;E=ur[4]|0;F=ur[5]|0;G=ur[6]|0;H=ur[7]|0;constructor(){super(32)}}class Qj extends $O{A=Zr[0]|0;B=Zr[1]|0;C=Zr[2]|0;D=Zr[3]|0;E=Zr[4]|0;F=Zr[5]|0;G=Zr[6]|0;H=Zr[7]|0;constructor(){super(28)}}var WY=(()=>t0(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),Xj=(()=>WY[0])(),wj=(()=>WY[1])(),or=new Uint32Array(80),xr=new Uint32Array(80);class DI extends h0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)or[R]=$.getUint32(v),xr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=or[R-15]|0,B=xr[R-15]|0,F=wg(L,B,1)^wg(L,B,8)^ez(L,B,7),l=Ng(L,B,1)^Ng(L,B,8)^sz(L,B,7),d=or[R-2]|0,_=xr[R-2]|0,i=wg(d,_,19)^zI(d,_,61)^ez(d,_,6),v$=Ng(d,_,19)^OI(d,_,61)^sz(d,_,6),H=XY(l,v$,xr[R-7],xr[R-16]),K=wY(H,F,i,or[R-7],or[R-16]);or[R]=K|0,xr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=wg(Q,X,14)^wg(Q,X,18)^zI(Q,X,41),B=Ng(Q,X,14)^Ng(Q,X,18)^OI(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=NY(S,B,l,wj[R],xr[R]),_=YY(d,W,L,F,Xj[R],or[R]),i=d|0,v$=wg(g,U,28)^zI(g,U,34)^zI(g,U,39),H=Ng(g,U,28)^OI(g,U,34)^OI(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=tv(z|0,O|0,_|0,i|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=DY(i,H,P);g=QY(V,_,v$,K),U=V|0}({h:g,l:U}=tv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=tv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=tv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=tv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=tv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=tv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=tv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=tv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){Vv(or,xr)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Nj extends DI{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class VY extends DI{Ah=y$[0]|0;Al=y$[1]|0;Bh=y$[2]|0;Bl=y$[3]|0;Ch=y$[4]|0;Cl=y$[5]|0;Dh=y$[6]|0;Dl=y$[7]|0;Eh=y$[8]|0;El=y$[9]|0;Fh=y$[10]|0;Fl=y$[11]|0;Gh=y$[12]|0;Gl=y$[13]|0;Hh=y$[14]|0;Hl=y$[15]|0;constructor(){super(48)}}var gv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Uv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class Yj extends DI{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(28)}}class qj extends DI{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(32)}}var a0=yg(()=>new qY,Lr(1));var uY=yg(()=>new VY,Lr(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wj=BigInt(1),ZY=BigInt(2),Vj=BigInt(3),uj=BigInt(5),UA=BigInt(8),jY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function Zj($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=jY,G=$*$%I*$%I,z=fv(G,ZY,I)*G%I,O=fv(z,Wj,I)*$%I,Q=fv(O,uj,I)*O%I,X=fv(Q,v,I)*Q%I,N=fv(X,g,I)*X%I,w=fv(N,U,I)*N%I,q=fv(w,r,I)*w%I,u=fv(q,r,I)*w%I,W=fv(u,v,I)*Q%I;return{pow_p_5_8:fv(W,ZY,I)*$%I,b2:G}}function jj($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var MY=(()=>{let $=jY;return aN({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Zj(v);return Ov(fv(g,Vj,$)*U,$)},adjustScalarBytes:jj})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mj=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),Rj=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var Kj=tz(Mj),vO=az(Kj,a0);var Sj=tz(Rj),RY=az(Sj,uY);function SY($,v,g){if(Ev($),g===void 0)g=new Uint8Array($.outputLen);return tg($,g,v)}var rO=Uint8Array.of(0),KY=Uint8Array.of();function TY($,v,g,U=32){Ev($),m$(U,"length");let r=$.outputLen;if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=KY;else Y$(g,void 0,"info");let J=new Uint8Array(I*r),G=tg.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)rO[0]=Q+1,z.update(Q===0?KY:O).update(g).update(rO).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),Vv(O,rO),J.slice(0,U)}var Tj=BigInt(0),QI=BigInt(1),Aj=BigInt(2),Hj=BigInt(7),Pj=BigInt(256),nj=BigInt(113),PY=[],nY=[],kY=[];for(let $=0,v=QI,g=1,U=0;$<24;$++){[g,U]=[U,(2*g+3*U)%5],PY.push(2*(5*U+g)),nY.push(($+1)*($+2)/2%64);let r=Tj;for(let I=0;I<7;I++)if(v=(v<<QI^(v>>Hj)*nj)%Pj,v&Aj)r^=QI<<(QI<<BigInt(I))-QI;kY.push(r)}var EY=t0(kY,!0),kj=EY[0],Ej=EY[1],AY=($,v,g)=>g>32?zY($,v,g):JY($,v,g),HY=($,v,g)=>g>32?OY($,v,g):GY($,v,g);function fj($,v=24){let g=new Uint32Array(10);for(let U=24-v;U<24;U++){for(let J=0;J<10;J++)g[J]=$[J]^$[J+10]^$[J+20]^$[J+30]^$[J+40];for(let J=0;J<10;J+=2){let G=(J+8)%10,z=(J+2)%10,O=g[z],Q=g[z+1],X=AY(O,Q,1)^g[G],N=HY(O,Q,1)^g[G+1];for(let w=0;w<50;w+=10)$[J+w]^=X,$[J+w+1]^=N}let r=$[2],I=$[3];for(let J=0;J<24;J++){let G=nY[J],z=AY(r,I,G),O=HY(r,I,G),Q=PY[J];r=$[Q],I=$[Q+1],$[Q]=z,$[Q+1]=O}for(let J=0;J<50;J+=10){for(let G=0;G<10;G++)g[G]=$[J+G];for(let G=0;G<10;G++)$[J+G]^=~g[(G+2)%10]&g[(G+4)%10]}$[0]^=kj[U],$[1]^=Ej[U]}Vv(g)}class e0{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,g,U=!1,r=24){if(this.blockLen=$,this.suffix=v,this.outputLen=g,this.enableXOF=U,this.rounds=r,m$(g,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=m0(this.state)}clone(){return this._cloneInto()}keccak(){Bz(this.state32),fj(this.state32,this.rounds),Bz(this.state32),this.posOut=0,this.pos=0}update($){Wr(this),Y$($);let{blockLen:v,state:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(v-this.pos,U-r);for(let J=0;J<I;J++)g[this.pos++]^=$[r++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:g,blockLen:U}=this;if($[g]^=v,(v&128)!==0&&g===U-1)this.keccak();$[U-1]^=128,this.keccak()}writeInto($){Wr(this,!1),Y$($),this.finish();let v=this.state,{blockLen:g}=this;for(let U=0,r=$.length;U<r;){if(this.posOut>=g)this.keccak();let I=Math.min(g-this.posOut,r-U);$.set(v.subarray(this.posOut,this.posOut+I),U),this.posOut+=I,U+=I}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(b0($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:g,outputLen:U,rounds:r,enableXOF:I}=this;return $||=new e0(v,g,U,I,r),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=r,$.suffix=g,$.outputLen=U,$.enableXOF=I,$.destroyed=this.destroyed,$}}var fY=($,v,g,U={})=>yg(()=>new e0(v,$,g),U);var Yg=fY(6,136,32,Lr(8));var BY=fY(6,72,64,Lr(10));var CY=($,v,g,U={})=>yg((r={})=>new e0(v,$,r.dkLen===void 0?g:r.dkLen,!0),U),LY=CY(31,168,16,Lr(11)),av=CY(31,136,32,Lr(12));function gO($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return gO($),($&$-1)===0&&$!==0}function UO($,v){gO($);let g=0;for(let U=0;U<v;U++,$>>>=1)g=g<<1|$&1;return g}function bY($){return gO($),31-Math.clz32($)}function _Y($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let g=bY(v);for(let U=0;U<v;U++){let r=UO(U,g);if(U<r){let I=$[U];$[U]=$[r],$[r]=I}}return $}var IO=($,v)=>{let{N:g,roots:U,dit:r,invertButterflies:I=!1,skipStages:J=0,brp:G=!0}=v,z=bY(g);if(!iY(g))throw Error("FFT: Polynomial size should be power of two");let O=r!==I;return(Q)=>{if(Q.length!==g)throw Error("FFT: wrong Polynomial length");if(r&&G)_Y(Q);for(let X=0,N=1;X<z-J;X++){let w=r?X+1+J:z-X,q=1<<w,u=q>>1,W=g>>w;for(let S=0;S<g;S+=q)for(let R=0,L=N++;R<u;R++){let B=I?r?g-L:L:R*W,F=S+R,l=S+R+u,d=U[B],_=Q[l],i=Q[F];if(O){let v$=$.mul(_,d);Q[F]=$.add(i,v$),Q[l]=$.sub(i,v$)}else if(I)Q[F]=$.add(_,i),Q[l]=$.mul($.sub(_,i),d);else Q[F]=$.add(i,_),Q[l]=$.mul($.sub(i,_),d)}}if(!r&&G)_Y(Q);return Q}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=Cr;function s0($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function mY($){return Uint8Array.from($)}function qg($,...v){let g=(r)=>typeof r==="number"?r:r.bytesLen,U=v.reduce((r,I)=>r+g(I),0);return{bytesLen:U,encode:(r)=>{let I=new Uint8Array(U);for(let J=0,G=0;J<v.length;J++){let z=v[J],O=g(z),Q=typeof z==="number"?r[J]:z.encode(r[J]);if(Y$(Q,O,$),I.set(Q,G),typeof z!=="number")Q.fill(0);G+=O}return I},decode:(r)=>{Y$(r,U,$);let I=[];for(let J of v){let G=g(J),z=r.subarray(0,G);I.push(typeof J==="number"?z:J.decode(z)),r=r.subarray(G)}return I}}}function $J($,v){let g=v*$.bytesLen;return{bytesLen:g,encode:(U)=>{if(U.length!==v)throw Error(`vecCoder.encode: wrong length=${U.length}. Expected: ${v}`);let r=new Uint8Array(g);for(let I=0,J=0;I<U.length;I++){let G=$.encode(U[I]);r.set(G,J),G.fill(0),J+=G.length}return r},decode:(U)=>{Y$(U,g);let r=[];for(let I=0;I<U.length;I+=$.bytesLen)r.push($.decode(U.subarray(I,I+$.bytesLen)));return r}}}function b$(...$){for(let v of $)if(Array.isArray(v))for(let g of v)g.fill(0);else v.fill(0)}function JO($){return(1<<$)-1}var uA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var FY=($)=>{let{newPoly:v,N:g,Q:U,F:r,ROOT_OF_UNITY:I,brvBits:J,isKyber:G}=$,z=(R,L=U)=>{let B=R%L|0;return(B>=0?B|0:L+B|0)|0},O=(R,L=U)=>{let B=z(R,L)|0;return(B>L>>1?B-L|0:B)|0};function Q(){let R=v(g);for(let L=0;L<g;L++){let B=UO(L,J),F=BigInt(I)**BigInt(B)%BigInt(U);R[L]=Number(F)|0}return R}let X=Q(),N={add:(R,L)=>z((R|0)+(L|0))|0,sub:(R,L)=>z((R|0)-(L|0))|0,mul:(R,L)=>z((R|0)*(L|0))|0,inv:(R)=>{throw Error("not implemented")}},w={N:g,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},q=IO(N,{dit:!1,...w}),u=IO(N,{dit:!0,...w});return{mod:z,smod:O,nttZetas:X,NTT:{encode:(R)=>{return q(R)},decode:(R)=>{u(R);for(let L=0;L<R.length;L++)R[L]=z(r*R[L]);return R}},bitsCoder:(R,L)=>{let B=JO(R),F=R*(g/8);return{bytesLen:F,encode:(l)=>{let d=new Uint8Array(F);for(let _=0,i=0,v$=0,H=0;_<l.length;_++){i|=(L.encode(l[_])&B)<<v$,v$+=R;for(;v$>=8;v$-=8,i>>=8)d[H++]=i&JO(v$)}return d},decode:(l)=>{let d=v(g);for(let _=0,i=0,v$=0,H=0;_<l.length;_++){i|=l[_]<<v$,v$+=8;for(;v$>=R;v$-=R,i>>=R)d[H++]=L.decode(i&B)}return d}}}}},Bj=($)=>(v,g)=>{if(!g)g=$.blockLen;let U=new Uint8Array(v.length+2);U.set(v);let r=v.length,I=new Uint8Array(g),J=$.create({}),G=0,z=0;return{stats:()=>({calls:G,xofs:z}),get:(O,Q)=>{return U[r+0]=O,U[r+1]=Q,J.destroy(),J=$.create({}).update(U),G++,()=>{return z++,J.xofInto(I)}},clean:()=>{J.destroy(),b$(I,U)}}},oY=Bj(LY);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Iv=256,jr=3329,Cj=3303,Lj=17,{mod:NI,nttZetas:_j,NTT:Wg,bitsCoder:ij}=FY({N:Iv,Q:jr,F:Cj,ROOT_OF_UNITY:Lj,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),GO={512:{N:Iv,Q:jr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Iv,Q:jr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Iv,Q:jr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},bj=($)=>{if($>=12)return{encode:(g)=>g,decode:(g)=>g};let v=2**($-1);return{encode:(g)=>((g<<$)+jr/2)/jr,decode:(g)=>g*jr+v>>>$}},XI=($)=>ij($,bj($));function Vg($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]+v[g])}function mj($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]-v[g])}function Fj($,v,g,U,r){let I=NI(v*U*r+$*g),J=NI($*U+v*g);return{c0:I,c1:J}}function vJ($,v){for(let g=0;g<Iv/2;g++){let U=_j[64+(g>>1)];if(g&1)U=-U;let{c0:r,c1:I}=Fj($[2*g+0],$[2*g+1],v[2*g+0],v[2*g+1],U);$[2*g+0]=r,$[2*g+1]=I}return $}function xY($){let v=new Uint16Array(Iv);for(let g=0;g<Iv;){let U=$();if(U.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;g<Iv&&r+3<=U.length;r+=3){let I=(U[r+0]>>0|U[r+1]<<8)&4095,J=(U[r+1]>>4|U[r+2]<<4)&4095;if(I<jr)v[g++]=I;if(g<Iv&&J<jr)v[g++]=J}}return v}function wI($,v,g,U){let r=$(U*Iv/4,v,g),I=new Uint16Array(Iv),J=m0(r),G=0;for(let z=0,O=0,Q=0,X=0;z<J.length;z++){let N=J[z];for(let w=0;w<32;w++)if(Q+=N&1,N>>=1,G+=1,G===U)X=Q,Q=0;else if(G===2*U)I[O++]=NI(X-Q),Q=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return I}var oj=($)=>{let{K:v,PRF:g,XOF:U,HASH512:r,ETA1:I,ETA2:J,du:G,dv:z}=$,O=XI(1),Q=XI(z),X=XI(G),N=qg("publicKey",$J(XI(12),v),32),w=$J(XI(12),v),q=qg("ciphertext",$J(X,v),Q),u=qg("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:N.bytesLen,cipherText:q.bytesLen},keygen:(W)=>{Y$(W,32,"seed");let S=new Uint8Array(33);S.set(W),S[32]=v;let R=r(S),[L,B]=u.decode(R),F=[],l=[];for(let i=0;i<v;i++)F.push(Wg.encode(wI(g,B,i,I)));let d=U(L);for(let i=0;i<v;i++){let v$=Wg.encode(wI(g,B,v+i,I));for(let H=0;H<v;H++){let K=xY(d.get(H,i));Vg(v$,vJ(K,F[H]))}l.push(v$)}d.clean();let _={publicKey:N.encode([l,L]),secretKey:w.encode(F)};return b$(L,B,F,l,S,R),_},encrypt:(W,S,R)=>{let[L,B]=N.decode(W),F=[];for(let H=0;H<v;H++)F.push(Wg.encode(wI(g,R,H,I)));let l=U(B),d=new Uint16Array(Iv),_=[];for(let H=0;H<v;H++){let K=wI(g,R,v+H,J),P=new Uint16Array(Iv);for(let V=0;V<v;V++){let j=xY(l.get(H,V));Vg(P,vJ(j,F[V]))}Vg(K,Wg.decode(P)),_.push(K),Vg(d,vJ(L[H],F[H])),b$(P)}l.clean();let i=wI(g,R,2*v,J);Vg(i,Wg.decode(d));let v$=O.decode(S);return Vg(v$,i),b$(L,F,d,i),q.encode([_,v$])},decrypt:(W,S)=>{let[R,L]=q.decode(W),B=w.decode(S),F=new Uint16Array(Iv);for(let l=0;l<v;l++)Vg(F,vJ(B[l],Wg.encode(R[l])));return mj(L,Wg.decode(F)),b$(F,B,R),O.encode(L)}}};function zO($){let v=oj($),{HASH256:g,HASH512:U,KDF:r}=$,{secretCoder:I,lengths:J}=v,G=qg("secretKey",J.secretKey,J.publicKey,32,32),z=32,O=64;return{info:{type:"ml-kem"},lengths:{...J,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(Q=ev(64))=>{Y$(Q,64,"seed");let{publicKey:X,secretKey:N}=v.keygen(Q.subarray(0,32)),w=g(X),q=G.encode([N,X,w,Q.subarray(32)]);return b$(N,w),{publicKey:X,secretKey:q}},getPublicKey:(Q)=>{let[X,N,w,q]=G.decode(Q);return Uint8Array.from(N)},encapsulate:(Q,X=ev(32))=>{Y$(Q,J.publicKey,"publicKey"),Y$(X,32,"message");let N=Q.subarray(0,384*$.K),w=I.encode(I.decode(mY(N)));if(!s0(w,N))throw b$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");b$(w);let q=U.create().update(X).update(g(Q)).digest(),u=v.encrypt(Q,X,q.subarray(32,64));return b$(q.subarray(32)),{cipherText:u,sharedSecret:q.subarray(0,32)}},decapsulate:(Q,X)=>{Y$(X,G.bytesLen,"secretKey"),Y$(Q,J.cipherText,"cipherText");let N=G.bytesLen-96,w=N+32,q=g(X.subarray(N/2,w));if(!s0(q,X.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[u,W,S,R]=G.decode(X),L=v.decrypt(Q,u),B=U.create().update(L).update(S).digest(),F=B.subarray(0,32),l=v.encrypt(W,L,B.subarray(32,64)),d=s0(Q,l),_=r.create({dkLen:32}).update(R).update(Q).digest();return b$(L,l,!d?F:_),d?F:_}}}function xj($,v,g){return av.create({dkLen:$}).update(v).update(new Uint8Array([g])).digest()}var OO={HASH256:Yg,HASH512:BY,KDF:av,XOF:oY,PRF:xj},nA=zO({...OO,...GO[512]}),YI=zO({...OO,...GO[768]}),cY=zO({...OO,...GO[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function cj($,v=!1){let{lengths:g,keygen:U}=$;if(v){let I=$.Point.Fn;if(!I)throw Error("No Point.Fn");U=(J=ev(g.seed))=>{Y$(J,g.seed,"seed");let G=I.isLE?ir(J):_r(J),z=I.toBytes(I.create(G));return{secretKey:z,publicKey:$.getPublicKey(z)}}}return{lengths:{secretKey:g.secretKey,publicKey:g.publicKey,seed:g.seed},keygen:U,getPublicKey:(r)=>$.getPublicKey(r)}}function DO($,v=!1){let g=cj($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...g.lengths,msg:g.lengths.seed,cipherText:g.lengths.publicKey},keygen:g.keygen,getPublicKey:g.getPublicKey,encapsulate(U,r=ev($.lengths.seed)){let I=this.keygen(r).secretKey,J=this.decapsulate(U,I),G=$.getPublicKey(I);return b$(I),{sharedSecret:J,cipherText:G}},decapsulate(U,r){let I=$.getSharedSecret(r,U);return $.lengths.publicKeyHasPrefix?I.subarray(1):I}}}function qI($,v){return qg(v,...$.map((g)=>{if(typeof g.lengths[v]!=="number")throw Error("wrong length: "+v);return g.lengths[v]}))}function QO($){return(v,g)=>$(v,{dkLen:g})}function lj($,v,...g){let U=qI(g,"seed"),r=qI(g,"publicKey");if($===void 0)$=U.bytesLen;m$($);function I(J){Y$(J,$);let G=U.decode(v(J,U.bytesLen)),z=g.map((X,N)=>X.keygen(G[N])),O=z.map((X)=>X.secretKey),Q=z.map((X)=>X.publicKey);return{secretKey:O,publicKey:Q}}return{info:{lengths:{seed:$,publicKey:r.bytesLen,secretKey:$}},getPublicKey(J){return this.keygen(J).publicKey},keygen(J=ev($)){let{publicKey:G,secretKey:z}=I(J),O=r.encode(G);return b$(G),b$(z),{secretKey:J,publicKey:O}},expandDecapsulationKey:I,realSeedLen:$}}function rJ($,v,g,U,...r){let I=lj($,g,...r),J=qI(r,"cipherText"),G=qI(r,"publicKey"),z=qI(r,"msg");if(v===void 0)v=z.bytesLen;return m$(v),{lengths:{...I.info.lengths,msg:v,msgRand:z.bytesLen,cipherText:J.bytesLen},getPublicKey:I.getPublicKey,keygen:I.keygen,encapsulate(O,Q=ev(z.bytesLen)){let X=G.decode(O),N=z.decode(Q),w=r.map((S,R)=>S.encapsulate(X[R],N[R])),q=w.map((S)=>S.sharedSecret),u=w.map((S)=>S.cipherText),W={sharedSecret:U(X,u,q),cipherText:J.encode(u)};return b$(q,u),W},decapsulate(O,Q){let X=J.decode(O),{publicKey:N,secretKey:w}=I.expandDecapsulationKey(Q),q=r.map((u,W)=>u.decapsulate(X[W],w[W]));return U(N,X,q)}}}function lY($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,QO(U),(I,J,G)=>r(_$(G[0],G[1],J[1],I[1],br($))),v,g)}var FA=lY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YI,DO(vO,!0),av,Yg),oA=lY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",cY,DO(RY,!0),av,Yg);function yj($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,QO(U),(I,J,G)=>{let z=_$(G[0],G[1],J[0],I[0],J[1],I[1],br($)),O=32,Q=_$(br("hybrid_prk"),z),X=SY(r,Q),N=_$(dg(32,2),br("shared_secret"),br("")),w=TY(r,X,N,32);return b$(X,N,Q,z),w},v,g)}var yY=DO(MY),xA=yj("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YI,yY,av,a0),dj=(()=>rJ(32,32,QO(av),($,v,g)=>Yg(_$(g[0],g[1],v[1],$[1],br("\\.//^\\"))),YI,yY))();function hj($,v,g,U){let r=$.Point.Fn;if(!r)throw Error("no Point.Fn");function I(J){let G;for(let Q=0,X=v;;Q=X,X+=v){if(X>J.length)throw Error("rejection sampling failed");if(G=r.fromBytes(J.subarray(Q,X),!0),r.isValidNot0(G))break}let z=r.toBytes(r.create(G)),O=$.getPublicKey(z,!1);return{secretKey:z,publicKey:O}}return{lengths:{secretKey:v,publicKey:g,seed:U,msg:U,cipherText:g},keygen(J=ev(U)){return Y$(J,U,"seed"),I(J)},getPublicKey(J){return $.getPublicKey(J,!1)},encapsulate(J,G=ev(U)){Y$(G,U,"rand");let{secretKey:z}=I(G),O=this.decapsulate(J,z),Q=$.getPublicKey(z,!1);return b$(z),{sharedSecret:O,cipherText:Q}},decapsulate(J,G){return $.getSharedSecret(G,J).subarray(1)}}}function pj($,v,g,U){let{secretKey:r,publicKeyUncompressed:I}=g.lengths;if(!r||!I)throw Error("wrong curve");let J=hj(g,r,I,U),G=64,z=G+U;return rJ(32,32,(O)=>{Y$(O,32);let Q=av(O,{dkLen:z}),X=Q.subarray(0,G),N=Q.subarray(G,z);return _$(X,N)},(O,Q,X)=>Yg(_$(X[0],X[1],Q[1],O[1],br($))),v,J)}var tj=(()=>pj("MLKEM768-P256",YI,vO,128))();var gJ=dj,dY=tj;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,v,g)=>o$($,v,g),wO=C$,eg=A0,h$=(...$)=>Nz(...$),sg=($)=>lU($),$U=Qz,vU=($)=>Xr($),IJ=BigInt(0),XO=BigInt(1);function Mr($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw TypeError(g+"expected boolean, got type="+typeof $)}return $}function JJ($){if(typeof $==="bigint"){if(!UJ($))throw RangeError("positive bigint expected, got "+$)}else wO($);return $}function sv($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(g+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let g=v&&`"${v}" `;throw RangeError(g+"expected safe integer, got "+$)}}function WI($){let v=JJ($).toString(16);return v.length&1?"0"+v:v}function hY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?IJ:BigInt("0x"+$)}function ug($){return hY(A0($))}function mv($){return hY(A0(cr(o$($)).reverse()))}function GJ($,v){if(C$(v),v===0)throw RangeError("zero length");$=JJ($);let g=$.toString(16);if(g.length>v*2)throw RangeError("number too large");return lU(g.padStart(v*2,"0"))}function VI($,v){return GJ($,v).reverse()}function pY($,v){if($=S$($),v=S$(v),$.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function cr($){return Uint8Array.from(S$($))}function zJ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw RangeError(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var UJ=($)=>typeof $==="bigint"&&IJ<=$;function aj($,v,g){return UJ($)&&UJ(v)&&UJ(g)&&v<=$&&$<g}function Rr($,v,g,U){if(!aj(v,g,U))throw RangeError("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function rU($){if($<IJ)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>IJ;$>>=XO,v+=1);return v}var uI=($)=>(XO<<BigInt($))-XO;function tY($,v,g){if(C$($,"hashLen"),C$(v,"qByteLen"),typeof g!=="function")throw TypeError("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,h$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return h$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while((R=S(q()))===void 0)w();return X(),R}}function Bv($,v={},g={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function U(I,J,G){if(!G&&J!=="function"&&!Object.hasOwn($,I))throw TypeError(`param "${I}" is invalid: expected own property`);let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw TypeError(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}var NO=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),f$=BigInt(1),Zg=BigInt(2),$q=BigInt(3),vq=BigInt(4),rq=BigInt(5),ej=BigInt(7),gq=BigInt(8),sj=BigInt(9),Uq=BigInt(16);function E$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let g=$%v;return g>=p$?g:v+g}function Cv($,v,g){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let U=$;while(v-- >p$)U*=U,U%=g;return U}function aY($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let g=E$($,v),U=v,r=p$,I=f$,J=f$,G=p$;while(g!==p$){let O=U/g,Q=U-g*O,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==f$)throw Error("invert: does not exist");return E$(r,v)}function YO($,v,g){let U=$;if(!U.eql(U.sqr(v),g))throw Error("Cannot find square root")}function Iq($,v){let g=$,U=(g.ORDER+f$)/vq,r=g.pow(v,U);return YO(g,r,v),r}function $M($,v){let g=$,U=(g.ORDER-rq)/gq,r=g.mul(v,Zg),I=g.pow(r,U),J=g.mul(v,I),G=g.mul(g.mul(J,Zg),I),z=g.mul(J,g.sub(G,g.ONE));return YO(g,z,v),z}function vM($){let v=OJ($),g=Jq($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+ej)/Uq;return(G,z)=>{let O=G,Q=O.pow(z,J),X=O.mul(Q,U),N=O.mul(Q,r),w=O.mul(Q,I),q=O.eql(O.sqr(X),z),u=O.eql(O.sqr(N),z);Q=O.cmov(Q,X,q),X=O.cmov(w,N,u);let W=O.eql(O.sqr(X),z),S=O.cmov(Q,X,W);return YO(O,S,z),S}}function Jq($){if($<$q)throw Error("sqrt is not defined for small field");let v=$-f$,g=0;while(v%Zg===p$)v/=Zg,g++;let U=Zg,r=OJ($);while(eY(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return Iq;let I=r.pow(U,v),J=(v+f$)/Zg;return function(z,O){let Q=z;if(Q.is0(O))return O;if(eY(Q,O)!==1)throw Error("Cannot find square root");let X=g,N=Q.mul(Q.ONE,I),w=Q.pow(O,v),q=Q.pow(O,J);while(!Q.eql(w,Q.ONE)){if(Q.is0(w))return Q.ZERO;let u=1,W=Q.sqr(w);while(!Q.eql(W,Q.ONE))if(u++,W=Q.sqr(W),u===X)throw Error("Cannot find square root");let S=f$<<BigInt(X-u-1),R=Q.pow(N,S);X=u,N=Q.sqr(R),w=Q.mul(w,N),q=Q.mul(q,R)}return q}}function rM($){if($%vq===$q)return Iq;if($%gq===rq)return $M;if($%Uq===sj)return vM($);return Jq($)}var Kr=($,v)=>(E$($,v)&f$)===f$,gM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function qO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=gM.reduce((U,r)=>{return U[r]="function",U},v);if(Bv($,g),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=f$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function UM($,v,g){let U=$;if(g<p$)throw Error("invalid exponent, negatives unsupported");if(g===p$)return U.ONE;if(g===f$)return v;let r=U.ONE,I=v;while(g>p$){if(g&f$)r=U.mul(r,I);I=U.sqr(I),g>>=f$}return r}function ZI($,v,g=!1){let U=$,r=Array(v.length).fill(g?U.ZERO:void 0),I=v.reduce((G,z,O)=>{if(U.is0(z))return G;return r[O]=G,U.mul(G,z)},U.ONE),J=U.inv(I);return v.reduceRight((G,z,O)=>{if(U.is0(z))return G;return r[O]=U.mul(G,r[O]),U.mul(G,z)},J),r}function eY($,v){let g=$,U=(g.ORDER-f$)/Zg,r=g.pow(v,U),I=g.eql(r,g.ONE),J=g.eql(r,g.ZERO),G=g.eql(r,g.neg(g.ONE));if(!I&&!J&&!G)throw Error("invalid Legendre symbol result");return I?1:J?0:-1}function IM($,v){if(v!==void 0)wO(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let g=rU($);if(v!==void 0&&v<g)throw Error(`invalid n length: expected bit length (${g}) >= n.length (${v})`);let U=v!==void 0?v:g,r=Math.ceil(U/8);return{nBitLength:U,nByteLength:r}}var sY=new WeakMap;class WO{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=f$;_lengths;_mod;constructor($,v={}){if($<=f$)throw Error("invalid field: expected ORDER > 1, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=IM($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,Object.freeze(this)}create($){return E$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&f$)===f$}neg($){return E$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return E$($*$,this.ORDER)}add($,v){return E$($+v,this.ORDER)}sub($,v){return E$($-v,this.ORDER)}mul($,v){return E$($*v,this.ORDER)}pow($,v){return UM(this,$,v)}div($,v){return E$($*aY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return aY($,this.ORDER)}sqrt($){let v=sY.get(this);if(!v)sY.set(this,v=rM(this.ORDER));return v(this,$)}toBytes($){return this.isLE?VI($,this.BYTES):GJ($,this.BYTES)}fromBytes($,v=!1){S$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if($.length<1||!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?mv($):ug($);if(J)G=E$(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return ZI(this,$)}cmov($,v,g){return Mr(g,"condition"),g?v:$}}Object.freeze(WO.prototype);function OJ($,v={}){return new WO($,v)}function Gq($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=f$)throw Error("field order must be greater than 1");let v=rU($-f$);return Math.ceil(v/8)}function VO($){let v=Gq($);return v+Math.ceil(v/2)}function zq($,v,g=!1){S$($);let U=$.length,r=Gq(v),I=Math.max(VO(v),16);if(U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?mv($):ug($),G=E$(J,v-f$)+f$;return g?VI(G,r):GJ(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gU=BigInt(0),jg=BigInt(1);function jI($,v){let g=v.negate();return $?g:v}function Mg($,v){let g=ZI($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function Xq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function uO($,v){Xq($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=uI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function Oq($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=jg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var ZO=new WeakMap,wq=new WeakMap;function jO($){return wq.get($)||1}function Dq($){if($!==gU)throw Error("invalid wNAF")}class MI{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>gU){if(v&jg)g=g.add(U);U=U.double(),v>>=jg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=uO(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=uO($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=Oq(g,J,I);if(g=G,O)r=r.add(jI(X,v[N]));else U=U.add(jI(Q,v[z]))}return Dq(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=uO($,this.bits);for(let I=0;I<r.windows;I++){if(g===gU)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=Oq(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return Dq(g),U}getPrecomputes($,v,g){let U=ZO.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);ZO.set(v,U)}}return U}cached($,v,g){let U=jO($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=jO($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){Xq(v,this.bits),wq.set($,v),ZO.delete($)}hasCache($){return jO($)!==1}}function Nq($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>gU||U>gU){if(g&jg)I=I.add(r);if(U&jg)J=J.add(r);r=r.double(),g>>=jg,U>>=jg}return{p1:I,p2:J}}function Qq($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return qO(v),v}else return OJ($,{isLE:g})}function DJ($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>gU))throw Error(`CURVE.${z} must be positive bigint`)}let r=Qq(v.p,g.Fp,U),I=Qq(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function RI($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}function KI($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let g=Array.from({length:v}).fill(0);for(let U=v-1;U>=0;U--)g[U]=$&255,$>>>=8;return new Uint8Array(g)}function JM($,v){let g=new Uint8Array($.length);for(let U=0;U<$.length;U++)g[U]=$[U]^v[U];return g}function GM($){if(!$U($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?zJ($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function MO($,v,g,U){if(S$($),sv(g),v=GM(v),v.length>255)v=U(h$(zJ("H2C-OVERSIZE-DST-"),v));let{outputLen:r,blockLen:I}=U,J=Math.ceil(g/r);if(g>65535||J>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,KI(v.length,1)),z=new Uint8Array(I),O=KI(g,2),Q=Array(J),X=U(h$(z,$,O,KI(0,1),G));Q[0]=U(h$(X,KI(1,1),G));for(let w=1;w<J;w++){let q=[JM(X,Q[w-1]),KI(w+1,1),G];Q[w]=U(h$(...q))}return h$(...Q).slice(0,g)}var Yq="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qq=($,v)=>($+($>=0?v:-v)/Vq)/v;function zM($,v,g){Rr("scalar",$,$r,g);let[[U,r],[I,J]]=v,G=qq(J*$,g),z=qq(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<$r,N=Q<$r;if(X)O=-O;if(N)Q=-Q;let w=uI(Math.ceil(rU(g)/2))+lr;if(O<$r||O>=w||Q<$r||Q>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:O,k2neg:N,k2:Q}}function KO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function RO($,v){Bv($);let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if(Mr(g.lowS,"lowS"),Mr(g.prehash,"prehash"),g.format!==void 0)KO(g.format);return g}class Wq extends Error{constructor($=""){super($)}}var Fv={Err:Wq,_tlv:{encode:($,v)=>{let{Err:g}=Fv;if(sv($,"tag"),$<0||$>255)throw new g("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=WI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?WI(r.length/2|128):"";return WI($)+I+r+v},decode($,v){let{Err:g}=Fv;v=S$(v,void 0,"DER data");let U=0;if($<0||$>255)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=Fv;if(JJ($),$<$r)throw new v("integer: negative integers are not allowed");let g=WI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=Fv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ug($)}},toSig($){let{Err:v,_int:g,_tlv:U}=Fv,r=S$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=Fv,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}};Object.freeze(Fv._tlv);Object.freeze(Fv._int);Object.freeze(Fv);var $r=BigInt(0),lr=BigInt(1),Vq=BigInt(2),QJ=BigInt(3),OM=BigInt(4);function uq($,v={}){let g=DJ("weierstrass",$,v),U=g.Fp,r=g.Fn,I=g.CURVE,{h:J,n:G}=I;Bv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z,allowInfinityPoint:O}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let Q=jq(U,r);function X(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(H,K,P){if(O&&K.is0())return Uint8Array.of(0);let{x:V,y:j}=K.toAffine(),Z=U.toBytes(V);if(Mr(P,"isCompressed"),P){X();let A=!U.isOdd(j);return h$(Zq(A),Z)}else return h$(Uint8Array.of(4),Z,U.toBytes(j))}function w(H){S$(H,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=Q,V=H.length,j=H[0],Z=H.subarray(1);if(O&&V===1&&j===0)return{x:U.ZERO,y:U.ZERO};if(V===K&&(j===2||j===3)){let A=U.fromBytes(Z);if(!U.isValid(A))throw Error("bad point: is not on curve, wrong x");let M=W(A),k;try{k=U.sqrt(M)}catch(e){let I$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+I$)}X();let f=U.isOdd(k);if((j&1)===1!==f)k=U.neg(k);return{x:A,y:k}}else if(V===P&&j===4){let A=U.BYTES,M=U.fromBytes(Z.subarray(0,A)),k=U.fromBytes(Z.subarray(A,A*2));if(!S(M,k))throw Error("bad point: is not on curve");return{x:M,y:k}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let q=v.toBytes===void 0?N:v.toBytes,u=v.fromBytes===void 0?w:v.fromBytes;function W(H){let K=U.sqr(H),P=U.mul(K,H);return U.add(U.add(P,U.mul(H,I.a)),I.b)}function S(H,K){let P=U.sqr(K),V=W(H);return U.eql(P,V)}if(!S(I.Gx,I.Gy))throw Error("bad curve params: generator point");let R=U.mul(U.pow(I.a,QJ),OM),L=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(R,L)))throw Error("bad curve params: a or b");function B(H,K,P=!1){if(!U.isValid(K)||P&&U.is0(K))throw Error(`bad point coordinate ${H}`);return K}function F(H){if(!(H instanceof _))throw Error("Weierstrass Point expected")}function l(H){if(!z||!z.basises)throw Error("no endo");return zM(H,z.basises,r.ORDER)}function d(H,K,P,V,j){return P=new _(U.mul(P.X,H),P.Y,P.Z),K=jI(V,K),P=jI(j,P),K.add(P)}class _{static BASE=new _(I.Gx,I.Gy,U.ONE);static ZERO=new _(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(H,K,P){this.X=B("x",H),this.Y=B("y",K,!0),this.Z=B("z",P),Object.freeze(this)}static CURVE(){return I}static fromAffine(H){let{x:K,y:P}=H||{};if(!H||!U.isValid(K)||!U.isValid(P))throw Error("invalid affine point");if(H instanceof _)throw Error("projective point not allowed");if(U.is0(K)&&U.is0(P))return _.ZERO;return new _(K,P,U.ONE)}static fromBytes(H){let K=_.fromAffine(u(S$(H,void 0,"point")));return K.assertValidity(),K}static fromHex(H){return _.fromBytes(sg(H))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(H=8,K=!0){if(v$.createCache(this,H),!K)this.multiply(QJ);return this}assertValidity(){let H=this;if(H.is0()){if(v.allowInfinityPoint&&U.is0(H.X)&&U.eql(H.Y,U.ONE)&&U.is0(H.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=H.toAffine();if(!U.isValid(K)||!U.isValid(P))throw Error("bad point: x or y not field elements");if(!S(K,P))throw Error("bad point: equation left != right");if(!H.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:H}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(H)}equals(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.eql(U.mul(K,A),U.mul(j,V)),k=U.eql(U.mul(P,A),U.mul(Z,V));return M&&k}negate(){return new _(this.X,U.neg(this.Y),this.Z)}double(){let{a:H,b:K}=I,P=U.mul(K,QJ),{X:V,Y:j,Z}=this,A=U.ZERO,M=U.ZERO,k=U.ZERO,f=U.mul(V,V),o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(V,j);return I$=U.add(I$,I$),k=U.mul(V,Z),k=U.add(k,k),A=U.mul(H,k),M=U.mul(P,e),M=U.add(A,M),A=U.sub(o,M),M=U.add(o,M),M=U.mul(A,M),A=U.mul(I$,A),k=U.mul(P,k),e=U.mul(H,e),I$=U.sub(f,e),I$=U.mul(H,I$),I$=U.add(I$,k),k=U.add(f,f),f=U.add(k,f),f=U.add(f,e),f=U.mul(f,I$),M=U.add(M,f),e=U.mul(j,Z),e=U.add(e,e),f=U.mul(e,I$),A=U.sub(A,f),k=U.mul(e,o),k=U.add(k,k),k=U.add(k,k),new _(A,M,k)}add(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.ZERO,k=U.ZERO,f=U.ZERO,o=I.a,e=U.mul(I.b,QJ),I$=U.mul(K,j),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.add(K,P),Q$=U.add(j,Z);w$=U.mul(w$,Q$),Q$=U.add(I$,G$),w$=U.sub(w$,Q$),Q$=U.add(K,V);let X$=U.add(j,A);return Q$=U.mul(Q$,X$),X$=U.add(I$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,V),M=U.add(Z,A),X$=U.mul(X$,M),M=U.add(G$,D$),X$=U.sub(X$,M),f=U.mul(o,Q$),M=U.mul(e,D$),f=U.add(M,f),M=U.sub(G$,f),f=U.add(G$,f),k=U.mul(M,f),G$=U.add(I$,I$),G$=U.add(G$,I$),D$=U.mul(o,D$),Q$=U.mul(e,Q$),G$=U.add(G$,D$),D$=U.sub(I$,D$),D$=U.mul(o,D$),Q$=U.add(Q$,D$),I$=U.mul(G$,Q$),k=U.add(k,I$),I$=U.mul(X$,Q$),M=U.mul(w$,M),M=U.sub(M,I$),I$=U.mul(w$,G$),f=U.mul(X$,f),f=U.add(f,I$),new _(M,k,f)}subtract(H){return F(H),this.add(H.negate())}is0(){return this.equals(_.ZERO)}multiply(H){let{endo:K}=v;if(!r.isValidNot0(H))throw RangeError("invalid scalar: out of range");let P,V,j=(Z)=>v$.cached(this,Z,(A)=>Mg(_,A));if(K){let{k1neg:Z,k1:A,k2neg:M,k2:k}=l(H),{p:f,f:o}=j(A),{p:e,f:I$}=j(k);V=o.add(I$),P=d(K.beta,f,e,Z,M)}else{let{p:Z,f:A}=j(H);P=Z,V=A}return Mg(_,[P,V])[0]}multiplyUnsafe(H){let{endo:K}=v,P=this,V=H;if(!r.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$r||P.is0())return _.ZERO;if(V===lr)return P;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:j,k1:Z,k2neg:A,k2:M}=l(V),{p1:k,p2:f}=Nq(_,P,Z,M);return d(K.beta,k,f,j,A)}else return v$.unsafe(P,V)}toAffine(H){let K=this,P=H,{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),k=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:k}}isTorsionFree(){let{isTorsionFree:H}=v;if(J===lr)return!0;if(H)return H(_,this);return v$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:H}=v;if(J===lr)return this;if(H)return H(_,this);return this.multiplyUnsafe(J)}isSmallOrder(){if(J===lr)return this.is0();return this.clearCofactor().is0()}toBytes(H=!0){return Mr(H,"isCompressed"),this.assertValidity(),q(_,this,H)}toHex(H=!0){return eg(this.toBytes(H))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let i=r.BITS,v$=new MI(_,v.endo?Math.ceil(i/2):i);if(i>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function Zq($){return Uint8Array.of($?2:3)}function jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:g}=$,U=v.randomBytes===void 0?vU:v.randomBytes,r=Object.assign(jq($.Fp,g),{seed:Math.max(VO(g.ORDER),16)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w){return w=w===void 0?U(r.seed):w,zq(S$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r,S=g._lengths;if(!$U(w))return;let R=S$(w,void 0,"key").length,L=R===u||R===W,B=R===q||!!S?.includes(R);if(L&&B)return;return L}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=RI(G,z);return Object.freeze(X),Object.freeze(r),Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function Mq($,v,g={}){let U=v;Qr(U),Bv(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let r=g.randomBytes===void 0?vU:g.randomBytes,I=g.hmac===void 0?(j,Z)=>dv(U,j,Z):g.hmac,{Fp:J,Fn:G}=$,{ORDER:z,BITS:O}=G,{keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q}=DM($,g),u={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},W=z*Vq+lr<J.ORDER;function S(j){let Z=z>>lr;return j>Z}function R(j,Z){if(!G.isValidNot0(Z))throw Error(`invalid signature ${j}: out of range 1..Point.Fn.ORDER`);return Z}function L(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(j,Z){KO(Z);let A=q.signature,M=Z==="compact"?A:Z==="recovered"?A+1:void 0;return S$(j,M)}class F{r;s;recovery;constructor(j,Z,A){if(this.r=R("r",j),this.s=R("s",Z),A!=null){if(L(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(j,Z=u.format){B(j,Z);let A;if(Z==="der"){let{r:o,s:e}=Fv.toSig(S$(j));return new F(o,e)}if(Z==="recovered")A=j[0],Z="compact",j=j.subarray(1);let M=q.signature/2,k=j.subarray(0,M),f=j.subarray(M,M*2);return new F(G.fromBytes(k),G.fromBytes(f),A)}static fromHex(j,Z){return this.fromBytes(sg(j),Z)}assertRecovery(){let{recovery:j}=this;if(j==null)throw Error("invalid recovery id: must be present");return j}addRecoveryBit(j){return new F(this.r,this.s,j)}recoverPublicKey(j){let{r:Z,s:A}=this,M=this.assertRecovery(),k=M===2||M===3?Z+z:Z;if(!J.isValid(k))throw Error("invalid recovery id: sig.r+curve.n != R.x");let f=J.toBytes(k),o=$.fromBytes(h$(Zq((M&1)===0),f)),e=G.inv(k),I$=d(S$(j,void 0,"msgHash")),G$=G.create(-I$*e),D$=G.create(A*e),w$=$.BASE.multiplyUnsafe(G$).add(o.multiplyUnsafe(D$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return S(this.s)}toBytes(j=u.format){if(KO(j),j==="der")return sg(Fv.hexFromSig(this));let{r:Z,s:A}=this,M=G.toBytes(Z),k=G.toBytes(A);if(j==="recovered")return L(),h$(Uint8Array.of(this.assertRecovery()),M,k);return h$(M,k)}toHex(j){return eg(this.toBytes(j))}}Object.freeze(F.prototype),Object.freeze(F);let l=g.bits2int===void 0?function(Z){if(Z.length>8192)throw Error("input is too large");let A=ug(Z),M=Z.length*8-O;return M>0?A>>BigInt(M):A}:g.bits2int,d=g.bits2int_modN===void 0?function(Z){return G.create(l(Z))}:g.bits2int_modN,_=uI(O);function i(j){return Rr("num < 2^"+O,j,$r,_),G.toBytes(j)}function v$(j,Z){return S$(j,void 0,"message"),Z?S$(U(j),void 0,"prehashed message"):j}function H(j,Z,A){let{lowS:M,prehash:k,extraEntropy:f}=RO(A,u);j=v$(j,k);let o=d(j),e=G.fromBytes(Z);if(!G.isValidNot0(e))throw Error("invalid private key");let I$=[i(e),i(o)];if(f!=null&&f!==!1){let Q$=f===!0?r(q.secretKey):f;I$.push(S$(Q$,void 0,"extraEntropy"))}let G$=h$(...I$),D$=o;function w$(Q$){let X$=l(Q$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),P$=$.BASE.multiply(X$).toAffine(),k$=G.create(P$.x);if(k$===$r)return;let a$=G.create(W$*G.create(D$+k$*e));if(a$===$r)return;let e$=(P$.x===k$?0:2)|Number(P$.y&lr),Wv=a$;if(M&&S(a$))Wv=G.neg(a$),e$^=1;return new F(k$,Wv,W?void 0:e$)}return{seed:G$,k2sig:w$}}function K(j,Z,A={}){let{seed:M,k2sig:k}=H(j,Z,A);return tY(U.outputLen,G.BYTES,I)(M,k).toBytes(A.format)}function P(j,Z,A,M={}){let{lowS:k,prehash:f,format:o}=RO(M,u);if(A=S$(A,void 0,"publicKey"),Z=v$(Z,f),!$U(j)){let e=j instanceof F?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}B(j,o);try{let e=F.fromBytes(j,o),I$=$.fromBytes(A);if(k&&e.hasHighS())return!1;let{r:G$,s:D$}=e,w$=d(Z),Q$=G.inv(D$),X$=G.create(w$*Q$),W$=G.create(G$*Q$),P$=$.BASE.multiplyUnsafe(X$).add(I$.multiplyUnsafe(W$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(e){return!1}}function V(j,Z,A={}){let{prehash:M}=RO(A,u);return Z=v$(Z,M),F.fromBytes(j,"recovered").recoverPublicKey(Z).toBytes()}return Object.freeze({keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:F,hash:U})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var XM=uq(QM),UU=Mq(XM,L$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yr=BigInt(0),uv=BigInt(1),SO=BigInt(2),wM=BigInt(8);function NM($,v,g,U){let r=$.sqr(g),I=$.sqr(U),J=$.add($.mul(v.a,r),I),G=$.add($.ONE,$.mul(v.d,$.mul(r,I)));return $.eql(J,G)}function Rq($,v={}){let g=v,U=DJ("edwards",$,g,g.FpFnLE),{Fp:r,Fn:I}=U,J=U.CURVE,{h:G}=J;Bv(g,{},{uvRatio:"function"});let z=SO<<BigInt(I.BYTES*8)-uv,O=(u)=>r.create(u),Q=g.uvRatio===void 0?(u,W)=>{try{return{isValid:!0,value:r.sqrt(r.div(u,W))}}catch(S){return{isValid:!1,value:yr}}}:g.uvRatio;if(!NM(r,J,J.Gx,J.Gy))throw Error("bad curve params: generator point");function X(u,W,S=!1){let R=S?uv:yr;return Rr("coordinate "+u,W,R,z),W}function N(u){if(!(u instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(J.Gx,J.Gy,uv,O(J.Gx*J.Gy));static ZERO=new w(yr,uv,uv,yr);static Fp=r;static Fn=I;X;Y;Z;T;constructor(u,W,S,R){this.X=X("x",u),this.Y=X("y",W),this.Z=X("z",S,!0),this.T=X("t",R),Object.freeze(this)}static CURVE(){return J}static fromAffine(u){if(u instanceof w)throw Error("extended point not allowed");let{x:W,y:S}=u||{};return X("x",W),X("y",S),new w(W,S,uv,O(W*S))}static fromBytes(u,W=!1){let S=r.BYTES,{a:R,d:L}=J;u=cr(S$(u,S,"point")),Mr(W,"zip215");let B=cr(u),F=u[S-1];B[S-1]=F&-129;let l=mv(B),d=W?z:r.ORDER;Rr("point.y",l,yr,d);let _=O(l*l),i=O(_-uv),v$=O(L*_-R),{isValid:H,value:K}=Q(i,v$);if(!H)throw Error("bad point: invalid y coordinate");let P=(K&uv)===uv,V=(F&128)!==0;if(!W&&K===yr&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=O(-K);return w.fromAffine({x:K,y:l})}static fromHex(u,W=!1){return w.fromBytes(sg(u),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(u=8,W=!0){if(q.createCache(this,u),!W)this.multiply(SO);return this}assertValidity(){let u=this,{a:W,d:S}=J;if(u.is0())throw Error("bad point: ZERO");let{X:R,Y:L,Z:B,T:F}=u,l=O(R*R),d=O(L*L),_=O(B*B),i=O(_*_),v$=O(l*W),H=O(_*O(v$+d)),K=O(i+O(S*O(l*d)));if(H!==K)throw Error("bad point: equation left != right (1)");let P=O(R*L),V=O(B*F);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(u){N(u);let{X:W,Y:S,Z:R}=this,{X:L,Y:B,Z:F}=u,l=O(W*F),d=O(L*R),_=O(S*F),i=O(B*R);return l===d&&_===i}is0(){return this.equals(w.ZERO)}negate(){return new w(O(-this.X),this.Y,this.Z,O(-this.T))}double(){let{a:u}=J,{X:W,Y:S,Z:R}=this,L=O(W*W),B=O(S*S),F=O(SO*O(R*R)),l=O(u*L),d=W+S,_=O(O(d*d)-L-B),i=l+B,v$=i-F,H=l-B,K=O(_*v$),P=O(i*H),V=O(_*H),j=O(v$*i);return new w(K,P,j,V)}add(u){N(u);let{a:W,d:S}=J,{X:R,Y:L,Z:B,T:F}=this,{X:l,Y:d,Z:_,T:i}=u,v$=O(R*l),H=O(L*d),K=O(F*S*i),P=O(B*_),V=O((R+L)*(l+d)-v$-H),j=P-K,Z=P+K,A=O(H-W*v$),M=O(V*j),k=O(Z*A),f=O(V*A),o=O(j*Z);return new w(M,k,o,f)}subtract(u){return N(u),this.add(u.negate())}multiply(u){if(!I.isValidNot0(u))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:S}=q.cached(this,u,(R)=>Mg(w,R));return Mg(w,[W,S])[0]}multiplyUnsafe(u){if(!I.isValid(u))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(u===yr)return w.ZERO;if(this.is0()||u===uv)return this;return q.unsafe(this,u,(W)=>Mg(w,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return q.unsafe(this,J.n).is0()}toAffine(u){let W=this,S=u,{X:R,Y:L,Z:B}=W,F=W.is0();if(S==null)S=F?wM:r.inv(B);let l=O(R*S),d=O(L*S),_=r.mul(B,S);if(F)return{x:yr,y:uv};if(_!==uv)throw Error("invZ was invalid");return{x:l,y:d}}clearCofactor(){if(G===uv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:u,y:W}=this.toAffine(),S=r.toBytes(W);return S[S.length-1]|=u&uv?128:0,S}toHex(){return eg(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let q=new MI(w,I.BITS);if(I.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class TO{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){NO()}static fromHex($){NO()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eg(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SI=BigInt(0),IU=BigInt(1),XJ=BigInt(2);function YM($){return Bv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Kq($){let v=YM($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J===void 0?vU:J,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?XJ**BigInt(254):XJ**BigInt(447),q=G?BigInt(8)*XJ**BigInt(251)-IU:BigInt(4)*XJ**BigInt(445)-IU,u=w+q+IU,W=(V)=>E$(V,g),S=R(X);function R(V){return VI(W(V),Q)}function L(V){let j=cr(S$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(mv(j))}function B(V){return mv(r(cr(S$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===SI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function i(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){Rr("u",V,SI,g),Rr("scalar",j,w,u);let Z=j,A=V,M=IU,k=SI,f=V,o=IU,e=SI;for(let G$=BigInt(O-1);G$>=SI;G$--){let D$=Z>>G$&IU;e^=D$,{x_2:M,x_3:f}=i(e,M,f),{x_2:k,x_3:o}=i(e,k,o),e=D$;let w$=M+k,Q$=W(w$*w$),X$=M-k,W$=W(X$*X$),P$=Q$-W$,k$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(k$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),k=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=i(e,M,f)),{x_2:k,x_3:o}=i(e,k,o);let I$=I(k);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V)=>{return V=V===void 0?z(Q):V,S$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(H),Object.freeze(P),Object.freeze({keygen:RI(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qM=BigInt(0),Sr=BigInt(1),Sq=BigInt(2),WM=BigInt(3),VM=BigInt(5),uM=BigInt(8),Kg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),nO=(()=>({p:Kg,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:uM,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Hq($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=Kg,G=$*$%I*$%I,z=Cv(G,Sq,I)*G%I,O=Cv(z,Sr,I)*$%I,Q=Cv(O,VM,I)*O%I,X=Cv(Q,v,I)*Q%I,N=Cv(X,g,I)*X%I,w=Cv(N,U,I)*N%I,q=Cv(w,r,I)*w%I,u=Cv(q,r,I)*w%I,W=Cv(u,v,I)*Q%I;return{pow_p_5_8:Cv(W,Sq,I)*$%I,b2:G}}function ZM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var AO=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function kO($,v){let g=Kg,U=E$(v*v*v,g),r=E$(U*U*v,g),I=Hq($*r).pow_p_5_8,J=E$($*U*I,g),G=E$(v*J*J,g),z=J,O=E$(J*AO,g),Q=G===$,X=G===E$(-$,g),N=G===E$(-$*AO,g);if(Q)J=z;if(X||N)J=O;if(Kr(J,g))J=E$(-J,g);return{isValid:Q||X,value:J}}var Rg=Rq(nO,{uvRatio:kO}),dr=(()=>Rg.Fp)(),Pq=(()=>Rg.Fn)();var wJ=(()=>{let $=Kg;return Kq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Hq(v);return E$(Cv(g,WM,$)*U,$)},adjustScalarBytes:ZM})})();var HO=AO,jM=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),MM=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),RM=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),KM=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Tq=($)=>kO(Sr,$),SM=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),PO=($)=>dr.create(mv($)&SM);function Aq($){let{d:v}=nO,g=Kg,U=(S)=>dr.create(S),r=U(HO*$*$),I=U((r+Sr)*RM),J=BigInt(-1),G=U((J-v*r)*U(r+v)),{isValid:z,value:O}=kO(I,G),Q=U(O*$);if(!Kr(Q,g))Q=U(-Q);if(!z)O=Q;if(!z)J=r;let X=U(J*(r-Sr)*KM-G),N=O*O,w=U((O+O)*G),q=U(X*jM),u=U(Sr-N),W=U(Sr+N);return new Rg(U(w*W),U(u*q),U(q*W),U(w*u))}class Qv extends TO{static BASE=(()=>new Qv(Rg.BASE))();static ZERO=(()=>new Qv(Rg.ZERO))();static Fp=(()=>dr)();static Fn=(()=>Pq)();constructor($){super($)}static fromAffine($){return new Qv(Rg.fromAffine($))}assertSame($){if(!($ instanceof Qv))throw Error("RistrettoPoint expected")}init($){return new Qv($)}static fromBytes($){o$($,32);let{a:v,d:g}=nO,U=Kg,r=(L)=>dr.create(L),I=PO($);if(!pY(dr.toBytes(I),$)||Kr(I,U))throw Error("invalid ristretto255 encoding 1");let J=r(I*I),G=r(Sr+v*J),z=r(Sr-v*J),O=r(G*G),Q=r(z*z),X=r(v*g*O-Q),{isValid:N,value:w}=Tq(r(X*Q)),q=r(w*z),u=r(w*q*X),W=r((I+I)*q);if(Kr(W,U))W=r(-W);let S=r(G*u),R=r(W*S);if(!N||Kr(R,U)||S===qM)throw Error("invalid ristretto255 encoding 2");return new Qv(new Rg(W,S,Sr,R))}static fromHex($){return Qv.fromBytes(lU($))}toBytes(){let{X:$,Y:v,Z:g,T:U}=this.ep,r=Kg,I=(u)=>dr.create(u),J=I(I(g+v)*I(g-v)),G=I($*v),z=I(G*G),{value:O}=Tq(I(J*z)),Q=I(O*J),X=I(O*G),N=I(Q*X*U),w;if(Kr(U*N,r)){let u=I(v*HO),W=I($*HO);$=u,v=W,w=I(Q*MM)}else w=X;if(Kr($*N,r))v=I(-v);let q=I((g-v)*w);if(Kr(q,r))q=I(-q);return dr.toBytes(q)}equals($){this.assertSame($);let{X:v,Y:g}=this.ep,{X:U,Y:r}=$.ep,I=(z)=>dr.create(z),J=I(v*r)===I(g*U),G=I(g*r)===I(v*U);return J||G}is0(){return this.equals(Qv.ZERO)}}Object.freeze(Qv.BASE);Object.freeze(Qv.ZERO);Object.freeze(Qv.prototype);Object.freeze(Qv);var TM=Object.freeze({Point:Qv,hashToCurve($,v){let g=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,U=MO($,g,64,k0);return TM.deriveToCurve(U)},hashToScalar($,v={DST:Yq}){let g=MO($,v.DST,64,k0);return Pq.create(mv(g))},deriveToCurve($){o$($,64);let v=PO($.subarray(0,32)),g=Aq(v),U=PO($.subarray(32,64)),r=Aq(U);return new Qv(g.add(r))}});var nq=!1,AM=!1;async function kq($,v){if(AM)return await v();try{return await $()}catch(g){if(g instanceof ReferenceError||g instanceof DOMException&&g.name==="NotSupportedError")return await v();else throw g}}async function NJ($,v){return await kq(async()=>{let g=EO($)?$:await PM($),U=await crypto.subtle.importKey("raw",nM(v),{name:"X25519"},nq,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:U},g,256))},()=>{if(EO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMult($,v)})}async function TI($){return await kq(async()=>{return NJ($,wJ.GuBytes)},()=>{if(EO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMultBase($)})}var HM=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function PM($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...HM,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},nq,["deriveBits"])}function EO($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function nM($){return $}class fO{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),EM(Sg($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let g=await this.s.read();if(g.done)return this.buf=Sg($),null;this.buf=g.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Sg(this.transcript)}}}function EM($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function Sg($){let v=$.reduce((r,I)=>r+I.length,0),g=new Uint8Array(v),U=0;for(let r of $)g.set(r,U),U+=r.length;return g}function JU($,...v){return $.pipeThrough(new TransformStream({start(g){for(let U of v)g.enqueue(U)}}))}function YJ($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function BO($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function Eq($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function fq($,v){let g=$.getReader(),U=[],r=0;while(r<v){let{done:z,value:O}=await g.read();if(z)throw Error("stream ended before reading "+v.toString()+" bytes");U.push(O),r+=O.length}g.releaseLock();let I=Sg(U),J=I.subarray(0,v),G=JU($,I.subarray(v));return{data:J,rest:G}}class vr{args;body;constructor($,v){this.args=$,this.body=v}}async function fM($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let g=v.split(" ");if(g.length<2||g.shift()!=="->")return{next:v};for(let I of g)if(I.length===0)throw Error("invalid stanza");let U=[];for(;;){let I=await $.readLine();if(I===null)throw Error("invalid stanza");let J=vv.decode(I);if(J.length>48)throw Error("invalid stanza");if(U.push(J),J.length<48)break}let r=Sg(U);return{s:new vr(g,r)}}async function Bq($){let v=new fO($),g=await v.readLine();if(g!=="age-encryption.org/v1")throw Error("invalid version "+(g??"line"));let U=[];for(;;){let{s:r,next:I}=await fM(v);if(r!==void 0){U.push(r);continue}if(!I.startsWith("--- "))throw Error("invalid header");let J=vv.decode(I.slice(4)),{rest:G,transcript:z}=v.close(),O=z.slice(0,z.length-1-I.length+3);return{stanzas:U,headerNoMAC:O,MAC:J,headerSize:z.length,rest:JU($,G)}}}function CO($){let v=[];v.push(`age-encryption.org/v1
+var gZ=Object.defineProperty;var UZ=($)=>$;function IZ($,v){this[$]=UZ.bind(null,v)}var yv=($,v)=>{for(var g in v)gZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:IZ.bind(v,g)})};import{parseArgs as JZ}from"util";var GZ={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function Dz($,v){let g=$[v];return typeof g==="boolean"?g:void 0}function R0($,v){let g=$[v];return typeof g==="string"?g:void 0}function bw($){let{values:v,positionals:g}=JZ({args:$,options:GZ,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:g[0]??"help",args:g.slice(1),flags:{help:Dz(v,"help"),version:Dz(v,"version"),dryRun:Dz(v,"dry-run"),pushTo:R0(v,"push-to"),cohort:R0(v,"cohort"),anchorId:R0(v,"anchor-id"),handle:R0(v,"handle")}}}var K0={name:"@rizom/ops",version:"0.2.0-alpha.144",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^6.0.3"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as cM,mkdirSync as lM,readFileSync as eO,writeFileSync as sO}from"fs";import{dirname as yM,join as xq}from"path";function Qz($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(`${g}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw RangeError(`${g}expected integer >= 0, got ${$}`)}}function o$($,v,g=""){let U=Qz($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function Qr($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function mg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function S0($,v){o$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw RangeError('"digestInto() output" expected to be of length >='+g)}function T0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Fg($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function M$($,v){return $<<v|$>>>32-v>>>0}var OZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function DZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function QZ($){for(let v=0;v<$.length;v++)$[v]=DZ($[v]);return $}var Xz=OZ?($)=>$:QZ,Fw=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),XZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function A0($){if(o$($),Fw)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=XZ[$[g]];return v}var Dr={_0:48,_9:57,A:65,F:70,a:97,f:102};function mw($){if($>=Dr._0&&$<=Dr._9)return $-Dr._0;if($>=Dr.A&&$<=Dr.F)return $-(Dr.A-10);if($>=Dr.a&&$<=Dr.f)return $-(Dr.a-10);return}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(Fw)try{return Uint8Array.fromHex($)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let v=$.length,g=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=mw($.charCodeAt(I)),G=mw($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw RangeError('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function wZ($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function wz($,v=""){if(typeof $==="string")return wZ($);return o$($,void 0,v)}function Nz(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];o$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function H0($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function Yz($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.canXOF=U.canXOF,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Xr($=32){C$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var qz=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Wz{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Qr($),o$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),zv(U)}update($){return mg(this),this.iHash.update($),this}digestInto($){mg(this),S0($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,g,U)=>new Wz(v,g).update(U).digest();return $.create=(v,g)=>new Wz(v,g),$})();function yU($,v,g){if(Qr($),g===void 0)g=new Uint8Array($.outputLen);return dv($,g,v)}var Vz=Uint8Array.of(0),ow=Uint8Array.of();function uz($,v,g,U=32){Qr($),C$(U,"length"),o$(v,void 0,"prk");let r=$.outputLen;if(v.length<r)throw Error('"prk" must be at least HashLen octets');if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=ow;else o$(g,void 0,"info");let J=new Uint8Array(I*r),G=dv.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)Vz[0]=Q+1,z.update(Q===0?ow:O).update(g).update(Vz).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),zv(O,Vz),J.slice(0,U)}var nr=($,v,g,U,r)=>uz($,yU($,v,g),U,r);function xw($,v,g){return $&v^~$&g}function cw($,v,g){return $&v^$&g^v&g}class P0{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=Fg(this.buffer)}update($){mg(this),o$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=Fg($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){mg(this),S0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,zv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=Fg($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var wr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),x$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var n0=BigInt(4294967295),lw=BigInt(32);function NZ($,v=!1){if(v)return{h:Number($&n0),l:Number($>>lw&n0)};return{h:Number($>>lw&n0)|0,l:Number($&n0)|0}}function yw($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=NZ($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var Zz=($,v,g)=>$>>>g,jz=($,v,g)=>$<<32-g|v>>>g,Ig=($,v,g)=>$>>>g|v<<32-g,Jg=($,v,g)=>$<<32-g|v>>>g,dU=($,v,g)=>$<<64-g|v>>>g-32,hU=($,v,g)=>$>>>g-32|v<<64-g;function hv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var dw=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),hw=($,v,g,U)=>v+g+U+($/4294967296|0)|0,pw=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),tw=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,aw=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),ew=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var qZ=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),kr=new Uint32Array(64);class Mz extends P0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)kr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=kr[Q-15],N=kr[Q-2],w=_v(X,7)^_v(X,18)^X>>>3,q=_v(N,17)^_v(N,19)^N>>>10;kr[Q]=q+kr[Q-7]+w+kr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=_v(J,6)^_v(J,11)^_v(J,25),N=O+X+xw(J,G,z)+qZ[Q]+kr[Q]|0,q=(_v(g,2)^_v(g,13)^_v(g,22))+cw(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){zv(kr)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),zv(this.buffer)}}class sw extends Mz{A=wr[0]|0;B=wr[1]|0;C=wr[2]|0;D=wr[3]|0;E=wr[4]|0;F=wr[5]|0;G=wr[6]|0;H=wr[7]|0;constructor(){super(32)}}class WZ extends Mz{A=Nr[0]|0;B=Nr[1]|0;C=Nr[2]|0;D=Nr[3]|0;E=Nr[4]|0;F=Nr[5]|0;G=Nr[6]|0;H=Nr[7]|0;constructor(){super(28)}}var $N=(()=>yw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),VZ=(()=>$N[0])(),uZ=(()=>$N[1])(),Er=new Uint32Array(80),fr=new Uint32Array(80);class pU extends P0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)Er[R]=$.getUint32(v),fr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=Er[R-15]|0,B=fr[R-15]|0,F=Ig(L,B,1)^Ig(L,B,8)^Zz(L,B,7),l=Jg(L,B,1)^Jg(L,B,8)^jz(L,B,7),d=Er[R-2]|0,_=fr[R-2]|0,i=Ig(d,_,19)^dU(d,_,61)^Zz(d,_,6),v$=Jg(d,_,19)^hU(d,_,61)^jz(d,_,6),H=pw(l,v$,fr[R-7],fr[R-16]),K=tw(H,F,i,Er[R-7],Er[R-16]);Er[R]=K|0,fr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=Ig(Q,X,14)^Ig(Q,X,18)^dU(Q,X,41),B=Jg(Q,X,14)^Jg(Q,X,18)^hU(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=aw(S,B,l,uZ[R],fr[R]),_=ew(d,W,L,F,VZ[R],Er[R]),i=d|0,v$=Ig(g,U,28)^dU(g,U,34)^dU(g,U,39),H=Jg(g,U,28)^hU(g,U,34)^hU(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=hv(z|0,O|0,_|0,i|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=dw(i,H,P);g=hw(V,_,v$,K),U=V|0}({h:g,l:U}=hv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=hv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=hv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=hv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=hv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=hv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=hv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=hv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){zv(Er,fr)}destroy(){this.destroyed=!0,zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class vN extends pU{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class ZZ extends pU{Ah=x$[0]|0;Al=x$[1]|0;Bh=x$[2]|0;Bl=x$[3]|0;Ch=x$[4]|0;Cl=x$[5]|0;Dh=x$[6]|0;Dl=x$[7]|0;Eh=x$[8]|0;El=x$[9]|0;Fh=x$[10]|0;Fl=x$[11]|0;Gh=x$[12]|0;Gl=x$[13]|0;Hh=x$[14]|0;Hl=x$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class jZ extends pU{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class MZ extends pU{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var L$=Yz(()=>new sw,qz(1));var k0=Yz(()=>new vN,qz(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L0($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Sz($){if(!L0($))throw TypeError("Uint8Array expected")}function JN($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((g)=>typeof g==="string");else return v.every((g)=>Number.isSafeInteger(g))}function GN($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Br($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aU($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function f0($){if(!Array.isArray($))throw TypeError("array expected")}function B0($,v){if(!JN(!0,v))throw TypeError(`${$}: array of strings expected`)}function Tz($,v){if(!JN(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Rv(...$){let v=(I)=>I,g=(I,J)=>(G)=>I(J(G)),U=$.map((I)=>I.encode).reduceRight(g,v),r=$.map((I)=>I.decode).reduce(g,v);return{encode:U,decode:r}}function Kv($){let v=typeof $==="string"?$.split(""):$,g=v.length;B0("alphabet",v);let U=new Map(v.map((r,I)=>[r,I]));return{encode:(r)=>{return f0(r),r.map((I)=>{if(!Number.isSafeInteger(I)||I<0||I>=g)throw Error(`alphabet.encode: digit index outside alphabet "${I}". Allowed: ${$}`);return v[I]})},decode:(r)=>{return f0(r),r.map((I)=>{Br("alphabet.decode",I);let J=U.get(I);if(J===void 0)throw Error(`Unknown letter: "${I}". Allowed: ${$}`);return J})}}}function Sv($=""){return Br("join",$),{encode:(v)=>{return B0("join.decode",v),v.join($)},decode:(v)=>{return Br("join.decode",v),v.split($)}}}function _0($,v="="){return aU($),Br("padding",v),{encode(g){B0("padding.encode",g);while(g.length*$%8)g.push(v);return g},decode(g){B0("padding.decode",g);let U=g.length;if(U*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;U>0&&g[U-1]===v;U--)if((U-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return g.slice(0,U)}}}function zN($){return GN($),{encode:(v)=>v,decode:(v)=>$(v)}}function rN($,v,g){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(g<2)throw RangeError(`convertRadix: invalid to=${g}, base cannot be less than 2`);if(f0($),!$.length)return[];let U=0,r=[],I=Array.from($,(G)=>{if(aU(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),J=I.length;while(!0){let G=0,z=!0;for(let O=U;O<J;O++){let Q=I[O],X=v*G,N=X+Q;if(!Number.isSafeInteger(N)||X/v!==G||N-Q!==X)throw Error("convertRadix: carry overflow");let w=N/g;G=N%g;let q=Math.floor(w);if(I[O]=q,!Number.isSafeInteger(q)||q*g+G!==N)throw Error("convertRadix: carry overflow");if(!z)continue;else if(!q)U=O;else z=!1}if(r.push(G),z)break}for(let G=0;G<$.length-1&&$[G]===0;G++)r.push(0);return r.reverse()}var ON=($,v)=>v===0?$:ON(v,$%v),C0=($,v)=>$+(v-ON($,v)),E0=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function Rz($,v,g,U){if(f0($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(g<=0||g>32)throw RangeError(`convertRadix2: wrong to=${g}`);if(C0(v,g)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${g} carryBits=${C0(v,g)}`);let r=0,I=0,J=E0[v],G=E0[g]-1,z=[];for(let O of $){if(aU(O),O>=J)throw Error(`convertRadix2: invalid data word=${O} from=${v}`);if(r=r<<v|O,I+v>32)throw Error(`convertRadix2: carry overflow pos=${I} from=${v}`);I+=v;for(;I>=g;I-=g)z.push((r>>I-g&G)>>>0);let Q=E0[I];if(Q===void 0)throw Error("invalid carry");r&=Q-1}if(r=r<<g-I&G,!U&&I>=v)throw Error("Excess padding");if(!U&&r>0)throw Error(`Non-zero padding: ${r}`);if(U&&I>0)z.push(r>>>0);return z}function RZ($){aU($);let v=256;return{encode:(g)=>{if(!L0(g))throw TypeError("radix.encode input should be Uint8Array");return rN(Array.from(g),v,$)},decode:(g)=>{return Tz("radix.decode",g),Uint8Array.from(rN(g,$,v))}}}function nv($,v=!1){if(aU($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(C0(8,$)>32||C0($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(g)=>{if(!L0(g))throw TypeError("radix2.encode input should be Uint8Array");return Rz(Array.from(g),8,$,!v)},decode:(g)=>{return Tz("radix2.decode",g),Uint8Array.from(Rz(g,$,8,v))}}}function gN($){return GN($),function(...v){try{return $.apply(null,v)}catch(g){}}}var lS=Object.freeze(Rv(nv(4),Kv("0123456789ABCDEF"),Sv(""))),yS=Object.freeze(Rv(nv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),_0(5),Sv(""))),dS=Object.freeze(Rv(nv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Sv(""))),hS=Object.freeze(Rv(nv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),_0(5),Sv(""))),pS=Object.freeze(Rv(nv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Sv(""))),tS=Object.freeze(Rv(nv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Sv(""),zN(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),DN=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),KZ=/[\t\n\f\r ]/,QN=($,v)=>{Br("base64",$);let g=v?"base64url":"base64";if($.length>0&&KZ.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:g,lastChunkHandling:"strict"})},Az=Object.freeze(DN?{encode($){return Sz($),$.toBase64()},decode($){return QN($,!1)}}:Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),_0(6),Sv(""))),vv=Object.freeze(Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Sv(""))),aS=Object.freeze(DN?{encode($){return Sz($),$.toBase64({alphabet:"base64url"})},decode($){return QN($,!0)}}:Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),_0(6),Sv(""))),eS=Object.freeze(Rv(nv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Sv(""))),Hz=($)=>Rv(RZ(58),Kv($),Sv("")),sS=Object.freeze(Hz("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),$T=Object.freeze(Hz("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),vT=Object.freeze(Hz("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Kz=Rv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Sv("")),UN=[996825010,642813549,513874426,1027748829,705979059];function tU($){let v=$>>25,g=($&33554431)<<5;for(let U=0;U<UN.length;U++)if((v>>U&1)===1)g^=UN[U];return g}function IN($,v,g=1){let U=$.length,r=1;for(let I=0;I<U;I++){let J=$.charCodeAt(I);if(J<33||J>126)throw Error(`Invalid prefix (${$})`);r=tU(r)^J>>5}r=tU(r);for(let I=0;I<U;I++)r=tU(r)^$.charCodeAt(I)&31;for(let I of v)r=tU(r)^I;for(let I=0;I<6;I++)r=tU(r);return r^=g,Kz.encode(Rz([r%E0[30]],30,5,!1))}function XN($){let v=$==="bech32"?1:734539939,g=nv(5),U=g.decode,r=g.encode,I=gN(U);function J(X,N,w=90){if(Br("bech32.encode prefix",X),L0(N))N=Array.from(N);Tz("bech32.encode",N);let q=X.length;if(q===0)throw TypeError(`Invalid prefix length ${q}`);let u=q+7+N.length;if(w!==!1&&u>w)throw TypeError(`Length ${u} exceeds limit ${w}`);let W=X.toLowerCase(),S=IN(W,N,v);return`${W}1${Kz.encode(N)}${S}`}function G(X,N=90){Br("bech32.decode input",X);let w=X.length;if(w<8||N!==!1&&w>N)throw TypeError(`invalid string length: ${w} (${X}). Expected (8..${N})`);let q=X.toLowerCase();if(X!==q&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let u=q.lastIndexOf("1");if(u===0||u===-1)throw Error('Letter "1" must be present between prefix and data only');let W=q.slice(0,u),S=q.slice(u+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let R=Kz.decode(S).slice(0,-6),L=IN(W,R,v);if(!S.endsWith(L))throw Error(`Invalid checksum in ${X}: expected "${L}"`);return{prefix:W,words:R}}let z=gN(G);function O(X){let{prefix:N,words:w}=G(X,!1);return{prefix:N,words:w,bytes:U(w)}}function Q(X,N){return J(X,r(N))}return{encode:J,decode:G,encodeFromBytes:Q,decodeToBytes:O,decodeUnsafe:z,fromWords:U,fromWordsUnsafe:I,toWords:r}}var Tv=Object.freeze(XN("bech32")),rT=Object.freeze(XN("bech32m"));var SZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),TZ={encode($){return Sz($),$.toHex()},decode($){return Br("hex",$),Uint8Array.fromHex($)}},gT=Object.freeze(SZ?TZ:Rv(nv(4),Kv("0123456789abcdef"),Sv(""),zN(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function HZ($,v,g,U){Qr($);let r=H0({dkLen:32,asyncTick:10},U),{c:I,dkLen:J,asyncTick:G}=r;if(C$(I,"c"),C$(J,"dkLen"),C$(G,"asyncTick"),I<1)throw Error("iterations (c) must be >= 1");if(J<1)throw Error('"dkLen" must be >= 1');if(J>4294967295*$.outputLen)throw Error("derived key too long");let z=wz(v,"password"),O=wz(g,"salt"),Q=new Uint8Array(J),X=dv.create($,z),N=X._cloneInto().update(O);return{c:I,dkLen:J,asyncTick:G,DK:Q,PRF:X,PRFSalt:N}}function PZ($,v,g,U,r){if($.destroy(),v.destroy(),U)U.destroy();return zv(r),g}function Pz($,v,g,U){let{c:r,dkLen:I,DK:J,PRF:G,PRFSalt:z}=HZ($,v,g,U),O,Q=new Uint8Array(4),X=Fg(Q),N=new Uint8Array(G.outputLen);for(let w=1,q=0;q<I;w++,q+=G.outputLen){let u=J.subarray(q,q+G.outputLen);X.setInt32(0,w,!1),(O=z._cloneInto(O)).update(Q).digestInto(N),u.set(N.subarray(0,u.length));for(let W=1;W<r;W++){G._cloneInto(O).update(N).digestInto(N);for(let S=0;S<u.length;S++)u[S]^=N[S]}}return PZ(G,z,J,O,N)}function wN($,v,g,U,r,I){let J=$[v++]^g[U++],G=$[v++]^g[U++],z=$[v++]^g[U++],O=$[v++]^g[U++],Q=$[v++]^g[U++],X=$[v++]^g[U++],N=$[v++]^g[U++],w=$[v++]^g[U++],q=$[v++]^g[U++],u=$[v++]^g[U++],W=$[v++]^g[U++],S=$[v++]^g[U++],R=$[v++]^g[U++],L=$[v++]^g[U++],B=$[v++]^g[U++],F=$[v++]^g[U++],l=J,d=G,_=z,i=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,k=L,f=B,o=F;for(let e=0;e<8;e+=2)v$^=M$(l+M|0,7),V^=M$(v$+l|0,9),M^=M$(V+v$|0,13),l^=M$(M+V|0,18),j^=M$(H+d|0,7),k^=M$(j+H|0,9),d^=M$(k+j|0,13),H^=M$(d+k|0,18),f^=M$(Z+K|0,7),_^=M$(f+Z|0,9),K^=M$(_+f|0,13),Z^=M$(K+_|0,18),i^=M$(o+A|0,7),P^=M$(i+o|0,9),A^=M$(P+i|0,13),o^=M$(A+P|0,18),d^=M$(l+i|0,7),_^=M$(d+l|0,9),i^=M$(_+d|0,13),l^=M$(i+_|0,18),K^=M$(H+v$|0,7),P^=M$(K+H|0,9),v$^=M$(P+K|0,13),H^=M$(v$+P|0,18),A^=M$(Z+j|0,7),V^=M$(A+Z|0,9),j^=M$(V+A|0,13),Z^=M$(j+V|0,18),M^=M$(o+f|0,7),k^=M$(M+o|0,9),f^=M$(k+M|0,13),o^=M$(f+k|0,18);r[I++]=J+l|0,r[I++]=G+d|0,r[I++]=z+_|0,r[I++]=O+i|0,r[I++]=Q+v$|0,r[I++]=X+H|0,r[I++]=N+K|0,r[I++]=w+P|0,r[I++]=q+V|0,r[I++]=u+j|0,r[I++]=W+Z|0,r[I++]=S+A|0,r[I++]=R+M|0,r[I++]=L+k|0,r[I++]=B+f|0,r[I++]=F+o|0}function nz($,v,g,U,r){let I=U+0,J=U+16*r;for(let G=0;G<16;G++)g[J+G]=$[v+(2*r-1)*16+G];for(let G=0;G<r;G++,I+=16,v+=16){if(wN(g,J,$,v,g,I),G>0)J+=16;wN(g,I,$,v+=16,g,J)}}function nZ($,v,g){let U=H0({dkLen:32,asyncTick:10,maxmem:1073742848},g),{N:r,r:I,p:J,dkLen:G,asyncTick:z,maxmem:O,onProgress:Q}=U;if(C$(r,"N"),C$(I,"r"),C$(J,"p"),C$(G,"dkLen"),C$(z,"asyncTick"),C$(O,"maxmem"),Q!==void 0&&typeof Q!=="function")throw Error("progressCb must be a function");let X=128*I,N=X/4,w=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(J<1||J>(w-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let q=X*(r+J+1);if(q>O)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+q+", maxmem="+O);let u=Pz(L$,$,v,{c:1,dkLen:X*J}),W=T0(u),S=T0(new Uint8Array(X*r)),R=T0(new Uint8Array(X)),L=()=>{};if(Q){let B=2*r*J,F=Math.max(Math.floor(B/1e4),1),l=0;L=()=>{if(l++,Q&&(!(l%F)||l===B))Q(l/B)}}return{N:r,r:I,p:J,dkLen:G,blockSize32:N,V:S,B32:W,B:u,tmp:R,blockMixCb:L,asyncTick:z}}function kZ($,v,g,U,r){let I=Pz(L$,$,g,{c:1,dkLen:v});return zv(g,U,r),I}function kz($,v,g){let{N:U,r,p:I,dkLen:J,blockSize32:G,V:z,B32:O,B:Q,tmp:X,blockMixCb:N}=nZ($,v,g);Xz(O);for(let w=0;w<I;w++){let q=G*w;for(let u=0;u<G;u++)z[u]=O[q+u];for(let u=0,W=0;u<U-1;u++)nz(z,W,z,W+=G,r),N();nz(z,(U-1)*G,O,q,r),N();for(let u=0;u<U;u++){let W=(O[q+G-16]&U-1)>>>0;for(let S=0;S<G;S++)X[S]=O[q+S]^z[W*G+S];nz(X,0,O,q,r),N()}}return Xz(O),kZ($,J,Q,z,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function EZ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function i0($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function og($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function i$($,v,g=""){let U=EZ($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function Ez($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function NN($,v,g=!1){i$($,void 0,"output");let U=v.outputLen;if($.length<U)throw RangeError("digestInto() expects output buffer of length at least "+U);if(g&&!xg($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function iv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fZ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Gg=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),BZ=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var CZ=($)=>{for(let v=0;v<$.length;v++)$[v]=BZ($[v]);return $},Yr=Gg?($)=>$:CZ;function YN($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function qN($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function WN($,v,g){let U=v,r=g||(()=>[]),I=(G,z)=>U(z,...r(G)).update(G).digest(),J=U(new Uint8Array($),...r(new Uint8Array(0)));return I.outputLen=J.outputLen,I.blockLen=J.blockLen,I.create=(G,...z)=>U(G,...z),I}var VN=($,v)=>{function g(U,...r){if(i$(U,void 0,"key"),$.nonceLength!==void 0){let Q=r[0];i$(Q,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let I=$.tagLength;if(I&&r[1]!==void 0)i$(r[1],void 0,"AAD");let J=v(U,...r),G=(Q,X)=>{if(X!==void 0){if(Q!==2)throw Error("cipher output not supported");i$(X,void 0,"output")}},z=!1;return{encrypt(Q,X){if(z)throw Error("cannot encrypt() twice with same key + nonce");return z=!0,i$(Q),G(J.encrypt.length,X),J.encrypt(Q,X)},decrypt(Q,X){if(i$(Q),I&&Q.length<I)throw Error('"ciphertext" expected length bigger than tagLength='+I);return G(J.decrypt.length,X),J.decrypt(Q,X)}}}return Object.assign(g,$),g};function eU($,v,g=!0){if(v===void 0)return new Uint8Array($);if(i$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(g&&!xg(v))throw Error("invalid output, must be aligned");return v}function uN($,v,g){og($),og(v),i0(g);let U=new Uint8Array(16),r=fZ(U);return r.setBigUint64(0,BigInt(v),g),r.setBigUint64(8,BigInt($),g),U}function xg($){return $.byteOffset%4===0}function cg($){return Uint8Array.from(i$($))}var jN=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),LZ=(()=>Yr(pv(jN("expand 16-byte k"))))(),_Z=(()=>Yr(pv(jN("expand 32-byte k"))))();function R$($,v){return $<<v|$>>>32-v}var sU=64,iZ=16,fz=(()=>4294967295)(),ZN=Uint32Array.of();function bZ($,v,g,U,r,I,J,G){let z=r.length,O=new Uint8Array(sU),Q=pv(O),X=Gg&&xg(r)&&xg(I),N=X?pv(r):ZN,w=X?pv(I):ZN;if(!Gg){for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),Yr(Q),J>=fz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}return}for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),J>=fz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);if(X&&u===sU){let W=q/4;if(q%4!==0)throw Error("arx: invalid block position");for(let S=0,R;S<iZ;S++)R=W+S,w[R]=N[R]^Q[S];q+=sU;continue}for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}}function MN($,v){let{allowShortKeys:g,extendNonceFn:U,counterLength:r,counterRight:I,rounds:J}=YN({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return og(r),og(J),i0(I),i0(g),(G,z,O,Q,X=0)=>{i$(G,void 0,"key"),i$(z,void 0,"nonce"),i$(O,void 0,"data");let N=O.length;if(Q=eU(N,Q,!1),og(X),X<0||X>=fz)throw Error("arx: counter overflow");let w=[],q=G.length,u,W;if(q===32)w.push(u=cg(G)),W=_Z;else if(q===16&&g)u=new Uint8Array(32),u.set(G),u.set(G,16),W=LZ,w.push(u);else throw i$(G,32,"arx key"),Error("invalid key size");if(!Gg||!xg(z))w.push(z=cg(z));let S=pv(u);if(U){if(z.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=z.subarray(0,16);if(Gg)U(W,S,pv(B),S);else{let F=Yr(Uint32Array.from(W));U(F,S,pv(B),S),iv(F),Yr(S)}z=z.subarray(16)}else if(!Gg)Yr(S);let R=16-r;if(R!==z.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let B=new Uint8Array(12);B.set(z,I?0:12-z.length),z=B,w.push(z)}let L=Yr(pv(z));try{return bZ($,W,S,L,O,Q,X,J),Q}finally{iv(...w)}}}function l$($,v){return $[v++]&255|($[v++]&255)<<8}class RN{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cg(i$($,32,"key"));let v=l$($,0),g=l$($,2),U=l$($,4),r=l$($,6),I=l$($,8),J=l$($,10),G=l$($,12),z=l$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|g<<3)&8191,this.r[2]=(g>>>10|U<<6)&7939,this.r[3]=(U>>>7|r<<9)&8191,this.r[4]=(r>>>4|I<<12)&255,this.r[5]=I>>>1&8190,this.r[6]=(I>>>14|J<<2)&8191,this.r[7]=(J>>>11|G<<5)&8065,this.r[8]=(G>>>8|z<<8)&8191,this.r[9]=z>>>5&127;for(let O=0;O<8;O++)this.pad[O]=l$($,16+2*O)}process($,v,g=!1){let U=g?0:2048,{h:r,r:I}=this,J=I[0],G=I[1],z=I[2],O=I[3],Q=I[4],X=I[5],N=I[6],w=I[7],q=I[8],u=I[9],W=l$($,v+0),S=l$($,v+2),R=l$($,v+4),L=l$($,v+6),B=l$($,v+8),F=l$($,v+10),l=l$($,v+12),d=l$($,v+14),_=r[0]+(W&8191),i=r[1]+((W>>>13|S<<3)&8191),v$=r[2]+((S>>>10|R<<6)&8191),H=r[3]+((R>>>7|L<<9)&8191),K=r[4]+((L>>>4|B<<12)&8191),P=r[5]+(B>>>1&8191),V=r[6]+((B>>>14|F<<2)&8191),j=r[7]+((F>>>11|l<<5)&8191),Z=r[8]+((l>>>8|d<<8)&8191),A=r[9]+(d>>>5|U),M=0,k=M+_*J+i*(5*u)+v$*(5*q)+H*(5*w)+K*(5*N);M=k>>>13,k&=8191,k+=P*(5*X)+V*(5*Q)+j*(5*O)+Z*(5*z)+A*(5*G),M+=k>>>13,k&=8191;let f=M+_*G+i*J+v$*(5*u)+H*(5*q)+K*(5*w);M=f>>>13,f&=8191,f+=P*(5*N)+V*(5*X)+j*(5*Q)+Z*(5*O)+A*(5*z),M+=f>>>13,f&=8191;let o=M+_*z+i*G+v$*J+H*(5*u)+K*(5*q);M=o>>>13,o&=8191,o+=P*(5*w)+V*(5*N)+j*(5*X)+Z*(5*Q)+A*(5*O),M+=o>>>13,o&=8191;let e=M+_*O+i*z+v$*G+H*J+K*(5*u);M=e>>>13,e&=8191,e+=P*(5*q)+V*(5*w)+j*(5*N)+Z*(5*X)+A*(5*Q),M+=e>>>13,e&=8191;let I$=M+_*Q+i*O+v$*z+H*G+K*J;M=I$>>>13,I$&=8191,I$+=P*(5*u)+V*(5*q)+j*(5*w)+Z*(5*N)+A*(5*X),M+=I$>>>13,I$&=8191;let G$=M+_*X+i*Q+v$*O+H*z+K*G;M=G$>>>13,G$&=8191,G$+=P*J+V*(5*u)+j*(5*q)+Z*(5*w)+A*(5*N),M+=G$>>>13,G$&=8191;let D$=M+_*N+i*X+v$*Q+H*O+K*z;M=D$>>>13,D$&=8191,D$+=P*G+V*J+j*(5*u)+Z*(5*q)+A*(5*w),M+=D$>>>13,D$&=8191;let w$=M+_*w+i*N+v$*X+H*Q+K*O;M=w$>>>13,w$&=8191,w$+=P*z+V*G+j*J+Z*(5*u)+A*(5*q),M+=w$>>>13,w$&=8191;let Q$=M+_*q+i*w+v$*N+H*X+K*Q;M=Q$>>>13,Q$&=8191,Q$+=P*O+V*z+j*G+Z*J+A*(5*u),M+=Q$>>>13,Q$&=8191;let X$=M+_*u+i*q+v$*w+H*N+K*X;M=X$>>>13,X$&=8191,X$+=P*Q+V*O+j*z+Z*G+A*J,M+=X$>>>13,X$&=8191,M=(M<<2)+M|0,M=M+k|0,k=M&8191,M=M>>>13,f+=M,r[0]=k,r[1]=f,r[2]=o,r[3]=e,r[4]=I$,r[5]=G$,r[6]=D$,r[7]=w$,r[8]=Q$,r[9]=X$}finalize(){let{h:$,pad:v}=this,g=new Uint16Array(10),U=$[1]>>>13;$[1]&=8191;for(let J=2;J<10;J++)$[J]+=U,U=$[J]>>>13,$[J]&=8191;$[0]+=U*5,U=$[0]>>>13,$[0]&=8191,$[1]+=U,U=$[1]>>>13,$[1]&=8191,$[2]+=U,g[0]=$[0]+5,U=g[0]>>>13,g[0]&=8191;for(let J=1;J<10;J++)g[J]=$[J]+U,U=g[J]>>>13,g[J]&=8191;g[9]-=8192;let r=(U^1)-1;for(let J=0;J<10;J++)g[J]&=r;r=~r;for(let J=0;J<10;J++)$[J]=$[J]&r|g[J];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let I=$[0]+v[0];$[0]=I&65535;for(let J=1;J<8;J++)I=($[J]+v[J]|0)+(I>>>16)|0,$[J]=I&65535;iv(g)}update($){Ez(this),i$($),$=cg($);let{buffer:v,blockLen:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(g-this.pos,U-r);if(I===g){for(;g<=U-r;r+=g)this.process($,r);continue}if(v.set($.subarray(r,r+I),this.pos),this.pos+=I,r+=I,this.pos===g)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,iv(this.h,this.r,this.buffer,this.pad)}digestInto($){Ez(this),NN($,this),this.finished=!0;let{buffer:v,h:g}=this,{pos:U}=this;if(U){v[U++]=1;for(;U<16;U++)v[U]=0;this.process(v,0,!0)}this.finalize();let r=0;for(let I=0;I<8;I++)$[r++]=g[I]>>>0,$[r++]=g[I]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}}var KN=WN(32,($)=>new RN($));function mZ($,v,g,U,r,I=20){let J=$[0],G=$[1],z=$[2],O=$[3],Q=v[0],X=v[1],N=v[2],w=v[3],q=v[4],u=v[5],W=v[6],S=v[7],R=r,L=g[0],B=g[1],F=g[2],l=J,d=G,_=z,i=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,k=L,f=B,o=F;for(let I$=0;I$<I;I$+=2)l=l+v$|0,M=R$(M^l,16),V=V+M|0,v$=R$(v$^V,12),l=l+v$|0,M=R$(M^l,8),V=V+M|0,v$=R$(v$^V,7),d=d+H|0,k=R$(k^d,16),j=j+k|0,H=R$(H^j,12),d=d+H|0,k=R$(k^d,8),j=j+k|0,H=R$(H^j,7),_=_+K|0,f=R$(f^_,16),Z=Z+f|0,K=R$(K^Z,12),_=_+K|0,f=R$(f^_,8),Z=Z+f|0,K=R$(K^Z,7),i=i+P|0,o=R$(o^i,16),A=A+o|0,P=R$(P^A,12),i=i+P|0,o=R$(o^i,8),A=A+o|0,P=R$(P^A,7),l=l+H|0,o=R$(o^l,16),Z=Z+o|0,H=R$(H^Z,12),l=l+H|0,o=R$(o^l,8),Z=Z+o|0,H=R$(H^Z,7),d=d+K|0,M=R$(M^d,16),A=A+M|0,K=R$(K^A,12),d=d+K|0,M=R$(M^d,8),A=A+M|0,K=R$(K^A,7),_=_+P|0,k=R$(k^_,16),V=V+k|0,P=R$(P^V,12),_=_+P|0,k=R$(k^_,8),V=V+k|0,P=R$(P^V,7),i=i+v$|0,f=R$(f^i,16),j=j+f|0,v$=R$(v$^j,12),i=i+v$|0,f=R$(f^i,8),j=j+f|0,v$=R$(v$^j,7);let e=0;U[e++]=J+l|0,U[e++]=G+d|0,U[e++]=z+_|0,U[e++]=O+i|0,U[e++]=Q+v$|0,U[e++]=X+H|0,U[e++]=N+K|0,U[e++]=w+P|0,U[e++]=q+V|0,U[e++]=u+j|0,U[e++]=W+Z|0,U[e++]=S+A|0,U[e++]=R+M|0,U[e++]=L+k|0,U[e++]=B+f|0,U[e++]=F+o|0}var FZ=MN(mZ,{counterRight:!1,counterLength:4,allowShortKeys:!1});var oZ=new Uint8Array(16),SN=($,v)=>{$.update(v);let g=v.length%16;if(g)$.update(oZ.subarray(g))},xZ=new Uint8Array(32);function TN($,v,g,U,r){if(r!==void 0)i$(r,void 0,"AAD");let I=$(v,g,xZ),J=uN(U.length,r?r.length:0,!0),G=KN.create(I);if(r)SN(G,r);SN(G,U),G.update(J);let z=G.digest();return iv(I,J),z}var cZ=($)=>(v,g,U)=>{return{encrypt(I,J){let G=I.length;J=eU(G+16,J,!1),J.set(I);let z=J.subarray(0,-16);$(v,g,z,z,1);let O=TN($,v,g,z,U);return J.set(O,G),iv(O),J},decrypt(I,J){J=eU(I.length-16,J,!1);let G=I.subarray(0,-16),z=I.subarray(-16),O=TN($,v,g,G,U);if(!qN(z,O))throw iv(O),Error("invalid tag");return J.set(I.subarray(0,-16)),$(v,g,J,J,1),iv(O),J}}},kv=VN({blockSize:64,nonceLength:12,tagLength:16},cZ(FZ));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function lg($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,v=""){if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw Error(`${g}expected integer >= 0, got ${$}`)}}function Y$($,v,g=""){let U=lg($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`;throw Error(J+"expected Uint8Array"+G+", got "+z)}return $}function Ev($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Wr($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function b0($,v){Y$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw Error('"digestInto() output" expected to be of length >='+g)}function m0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function F0($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function bv($,v){return $<<32-v|$>>>v}var lZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function yZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function dZ($){for(let v=0;v<$.length;v++)$[v]=yZ($[v]);return $}var Bz=lZ?($)=>$:dZ,HN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),hZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function zg($){if(Y$($),HN)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=hZ[$[g]];return v}var qr={_0:48,_9:57,A:65,F:70,a:97,f:102};function AN($){if($>=qr._0&&$<=qr._9)return $-qr._0;if($>=qr.A&&$<=qr.F)return $-(qr.A-10);if($>=qr.a&&$<=qr.f)return $-(qr.a-10);return}function Og($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(HN)return Uint8Array.fromHex($);let v=$.length,g=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=AN($.charCodeAt(I)),G=AN($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw Error('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function _$(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];Y$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function yg($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Cr($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var Lr=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Lz=BigInt(0),Cz=BigInt(1);function $I($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw Error(g+"expected boolean, got type="+typeof $)}return $}function PN($){if(typeof $==="bigint"){if(!o0($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function vI($){let v=PN($).toString(16);return v.length&1?"0"+v:v}function nN($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?Lz:BigInt("0x"+$)}function _r($){return nN(zg($))}function ir($){return nN(zg(x0(Y$($)).reverse()))}function dg($,v){m$(v),$=PN($);let g=Og($.toString(16).padStart(v*2,"0"));if(g.length!==v)throw Error("number too large");return g}function rI($,v){return dg($,v).reverse()}function x0($){return Uint8Array.from($)}function br($){return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw Error(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var o0=($)=>typeof $==="bigint"&&Lz<=$;function pZ($,v,g){return o0($)&&o0(v)&&o0(g)&&v<=$&&$<g}function gI($,v,g,U){if(!pZ(v,g,U))throw Error("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function _z($){let v;for(v=0;$>Lz;$>>=Cz,v+=1);return v}var UI=($)=>(Cz<<BigInt($))-Cz;function kN($,v,g){if(m$($,"hashLen"),m$(v,"qByteLen"),typeof g!=="function")throw Error("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,_$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return _$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while(!(R=S(q())))w();return X(),R}}function Dg($,v={},g={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function U(I,J,G){let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw Error(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}function iz($){let v=new WeakMap;return(g,...U)=>{let r=v.get(g);if(r!==void 0)return r;let I=$(g,...U);return v.set(g,I),I}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Dv=BigInt(0),rv=BigInt(1),Qg=BigInt(2),BN=BigInt(3),CN=BigInt(4),LN=BigInt(5),tZ=BigInt(7),_N=BigInt(8),aZ=BigInt(9),iN=BigInt(16);function Ov($,v){let g=$%v;return g>=Dv?g:v+g}function fv($,v,g){let U=$;while(v-- >Dv)U*=U,U%=g;return U}function EN($,v){if($===Dv)throw Error("invert: expected non-zero number");if(v<=Dv)throw Error("invert: expected positive modulus, got "+v);let g=Ov($,v),U=v,r=Dv,I=rv,J=rv,G=Dv;while(g!==Dv){let O=U/g,Q=U%g,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==rv)throw Error("invert: does not exist");return Ov(r,v)}function bz($,v,g){if(!$.eql($.sqr(v),g))throw Error("Cannot find square root")}function bN($,v){let g=($.ORDER+rv)/CN,U=$.pow(v,g);return bz($,U,v),U}function eZ($,v){let g=($.ORDER-LN)/_N,U=$.mul(v,Qg),r=$.pow(U,g),I=$.mul(v,r),J=$.mul($.mul(I,Qg),r),G=$.mul(I,$.sub(J,$.ONE));return bz($,G,v),G}function sZ($){let v=c0($),g=mN($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+tZ)/iN;return(G,z)=>{let O=G.pow(z,J),Q=G.mul(O,U),X=G.mul(O,r),N=G.mul(O,I),w=G.eql(G.sqr(Q),z),q=G.eql(G.sqr(X),z);O=G.cmov(O,Q,w),Q=G.cmov(N,X,q);let u=G.eql(G.sqr(Q),z),W=G.cmov(O,Q,u);return bz(G,W,z),W}}function mN($){if($<BN)throw Error("sqrt is not defined for small field");let v=$-rv,g=0;while(v%Qg===Dv)v/=Qg,g++;let U=Qg,r=c0($);while(fN(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return bN;let I=r.pow(U,v),J=(v+rv)/Qg;return function(z,O){if(z.is0(O))return O;if(fN(z,O)!==1)throw Error("Cannot find square root");let Q=g,X=z.mul(z.ONE,I),N=z.pow(O,v),w=z.pow(O,J);while(!z.eql(N,z.ONE)){if(z.is0(N))return z.ZERO;let q=1,u=z.sqr(N);while(!z.eql(u,z.ONE))if(q++,u=z.sqr(u),q===Q)throw Error("Cannot find square root");let W=rv<<BigInt(Q-q-1),S=z.pow(X,W);Q=q,X=z.sqr(S),N=z.mul(N,X),w=z.mul(w,S)}return w}}function $j($){if($%CN===BN)return bN;if($%_N===LN)return eZ;if($%iN===aZ)return sZ($);return mN($)}var vj=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function mz($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=vj.reduce((U,r)=>{return U[r]="function",U},v);return Dg($,g),$}function rj($,v,g){if(g<Dv)throw Error("invalid exponent, negatives unsupported");if(g===Dv)return $.ONE;if(g===rv)return v;let U=$.ONE,r=v;while(g>Dv){if(g&rv)U=$.mul(U,r);r=$.sqr(r),g>>=rv}return U}function II($,v,g=!1){let U=Array(v.length).fill(g?$.ZERO:void 0),r=v.reduce((J,G,z)=>{if($.is0(G))return J;return U[z]=J,$.mul(J,G)},$.ONE),I=$.inv(r);return v.reduceRight((J,G,z)=>{if($.is0(G))return J;return U[z]=$.mul(J,U[z]),$.mul(J,G)},I),U}function fN($,v){let g=($.ORDER-rv)/Qg,U=$.pow(v,g),r=$.eql(U,$.ONE),I=$.eql(U,$.ZERO),J=$.eql(U,$.neg($.ONE));if(!r&&!I&&!J)throw Error("invalid Legendre symbol result");return r?1:I?0:-1}function gj($,v){if(v!==void 0)m$(v);let g=v!==void 0?v:$.toString(2).length,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}class FN{ORDER;BITS;BYTES;isLE;ZERO=Dv;ONE=rv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Dv)throw Error("invalid field: expected ORDER > 0, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=gj($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Ov($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Dv<=$&&$<this.ORDER}is0($){return $===Dv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&rv)===rv}neg($){return Ov(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Ov($*$,this.ORDER)}add($,v){return Ov($+v,this.ORDER)}sub($,v){return Ov($-v,this.ORDER)}mul($,v){return Ov($*v,this.ORDER)}pow($,v){return rj(this,$,v)}div($,v){return Ov($*EN(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return EN($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=$j(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?rI($,this.BYTES):dg($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if(!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?ir($):_r($);if(J)G=Ov(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return II(this,$)}cmov($,v,g){return g?v:$}}function c0($,v={}){return new FN($,v)}function oN($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function Fz($){let v=oN($);return v+Math.ceil(v/2)}function xN($,v,g=!1){Y$($);let U=$.length,r=oN(v),I=Fz(v);if(U<16||U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?ir($):_r($),G=Ov(J,v-rv)+rv;return g?rI(G,r):dg(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hg=BigInt(0),Xg=BigInt(1);function JI($,v){let g=v.negate();return $?g:v}function lz($,v){let g=II($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function dN($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function oz($,v){dN($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=UI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function cN($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=Xg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var xz=new WeakMap,hN=new WeakMap;function cz($){return hN.get($)||1}function lN($){if($!==hg)throw Error("invalid wNAF")}class yz{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>hg){if(v&Xg)g=g.add(U);U=U.double(),v>>=Xg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=oz(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=oz($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=cN(g,J,I);if(g=G,O)r=r.add(JI(X,v[N]));else U=U.add(JI(Q,v[z]))}return lN(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=oz($,this.bits);for(let I=0;I<r.windows;I++){if(g===hg)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=cN(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return lN(g),U}getPrecomputes($,v,g){let U=xz.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);xz.set(v,U)}}return U}cached($,v,g){let U=cz($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=cz($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){dN(v,this.bits),hN.set($,v),xz.delete($)}hasCache($){return cz($)!==1}}function pN($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>hg||U>hg){if(g&Xg)I=I.add(r);if(U&Xg)J=J.add(r);r=r.double(),g>>=Xg,U>>=Xg}return{p1:I,p2:J}}function yN($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return mz(v),v}else return c0($,{isLE:g})}function tN($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>hg))throw Error(`CURVE.${z} must be positive bigint`)}let r=yN(v.p,g.Fp,U),I=yN(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function l0($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GI=BigInt(0),pg=BigInt(1),y0=BigInt(2);function Uj($){return Dg($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function aN($){let v=Uj($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J||Cr,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?y0**BigInt(254):y0**BigInt(447),q=G?BigInt(8)*y0**BigInt(251)-pg:BigInt(4)*y0**BigInt(445)-pg,u=w+q+pg,W=(V)=>Ov(V,g),S=R(X);function R(V){return rI(W(V),Q)}function L(V){let j=x0(Y$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(ir(j))}function B(V){return ir(r(x0(Y$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===GI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function i(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){gI("u",V,GI,g),gI("scalar",j,w,u);let Z=j,A=V,M=pg,k=GI,f=V,o=pg,e=GI;for(let G$=BigInt(O-1);G$>=GI;G$--){let D$=Z>>G$&pg;e^=D$,{x_2:M,x_3:f}=i(e,M,f),{x_2:k,x_3:o}=i(e,k,o),e=D$;let w$=M+k,Q$=W(w$*w$),X$=M-k,W$=W(X$*X$),P$=Q$-W$,k$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(k$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),k=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=i(e,M,f)),{x_2:k,x_3:o}=i(e,k,o);let I$=I(k);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V=z(Q))=>{return Y$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:l0(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}class dz{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Ev($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Vv(U)}update($){return Wr(this),this.iHash.update($),this}digestInto($){Wr(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tg=($,v,g)=>new dz($,v).update(g).digest();tg.create=($,v)=>new dz($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var eN=($,v)=>($+($>=0?v:-v)/$Y)/v;function Ij($,v,g){let[[U,r],[I,J]]=v,G=eN(J*$,g),z=eN(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<Vr,N=Q<Vr;if(X)O=-O;if(N)Q=-Q;let w=UI(Math.ceil(_z(g)/2))+ag;if(O<Vr||O>=w||Q<Vr||Q>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:O,k2neg:N,k2:Q}}function pz($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function hz($,v){let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if($I(g.lowS,"lowS"),$I(g.prehash,"prehash"),g.format!==void 0)pz(g.format);return g}class sN extends Error{constructor($=""){super($)}}var mr={Err:sN,_tlv:{encode:($,v)=>{let{Err:g}=mr;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=vI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?vI(r.length/2|128):"";return vI($)+I+r+v},decode($,v){let{Err:g}=mr,U=0;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=mr;if($<Vr)throw new v("integer: negative integers are not allowed");let g=vI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=mr;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _r($)}},toSig($){let{Err:v,_int:g,_tlv:U}=mr,r=Y$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=mr,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}},Vr=BigInt(0),ag=BigInt(1),$Y=BigInt(2),d0=BigInt(3),Jj=BigInt(4);function tz($,v={}){let g=tN("weierstrass",$,v),{Fp:U,Fn:r}=g,I=g.CURVE,{h:J,n:G}=I;Dg(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let O=rY(U,r);function Q(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,P,V){let{x:j,y:Z}=P.toAffine(),A=U.toBytes(j);if($I(V,"isCompressed"),V){Q();let M=!U.isOdd(Z);return _$(vY(M),A)}else return _$(Uint8Array.of(4),A,U.toBytes(Z))}function N(K){Y$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=O,j=K.length,Z=K[0],A=K.subarray(1);if(j===P&&(Z===2||Z===3)){let M=U.fromBytes(A);if(!U.isValid(M))throw Error("bad point: is not on curve, wrong x");let k=u(M),f;try{f=U.sqrt(k)}catch(I$){let G$=I$ instanceof Error?": "+I$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}Q();let o=U.isOdd(f);if((Z&1)===1!==o)f=U.neg(f);return{x:M,y:f}}else if(j===V&&Z===4){let M=U.BYTES,k=U.fromBytes(A.subarray(0,M)),f=U.fromBytes(A.subarray(M,M*2));if(!W(k,f))throw Error("bad point: is not on curve");return{x:k,y:f}}else throw Error(`bad point: got length ${j}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||X,q=v.fromBytes||N;function u(K){let P=U.sqr(K),V=U.mul(P,K);return U.add(U.add(V,U.mul(K,I.a)),I.b)}function W(K,P){let V=U.sqr(P),j=u(K);return U.eql(V,j)}if(!W(I.Gx,I.Gy))throw Error("bad curve params: generator point");let S=U.mul(U.pow(I.a,d0),Jj),R=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(S,R)))throw Error("bad curve params: a or b");function L(K,P,V=!1){if(!U.isValid(P)||V&&U.is0(P))throw Error(`bad point coordinate ${K}`);return P}function B(K){if(!(K instanceof i))throw Error("Weierstrass Point expected")}function F(K){if(!z||!z.basises)throw Error("no endo");return Ij(K,z.basises,r.ORDER)}let l=iz((K,P)=>{let{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),k=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:k}}),d=iz((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!U.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!U.isValid(P)||!U.isValid(V))throw Error("bad point: x or y not field elements");if(!W(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,P,V,j,Z){return V=new i(U.mul(V.X,K),V.Y,V.Z),P=JI(j,P),V=JI(Z,V),P.add(V)}class i{static BASE=new i(I.Gx,I.Gy,U.ONE);static ZERO=new i(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(K,P,V){this.X=L("x",K),this.Y=L("y",P,!0),this.Z=L("z",V),Object.freeze(this)}static CURVE(){return I}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!U.isValid(P)||!U.isValid(V))throw Error("invalid affine point");if(K instanceof i)throw Error("projective point not allowed");if(U.is0(P)&&U.is0(V))return i.ZERO;return new i(P,V,U.ONE)}static fromBytes(K){let P=i.fromAffine(q(Y$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return i.fromBytes(Og(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(H.createCache(this,K),!P)this.multiply(d0);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(K)}equals(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,k=U.eql(U.mul(P,M),U.mul(Z,j)),f=U.eql(U.mul(V,M),U.mul(A,j));return k&&f}negate(){return new i(this.X,U.neg(this.Y),this.Z)}double(){let{a:K,b:P}=I,V=U.mul(P,d0),{X:j,Y:Z,Z:A}=this,M=U.ZERO,k=U.ZERO,f=U.ZERO,o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(A,A),G$=U.mul(j,Z);return G$=U.add(G$,G$),f=U.mul(j,A),f=U.add(f,f),M=U.mul(K,f),k=U.mul(V,I$),k=U.add(M,k),M=U.sub(e,k),k=U.add(e,k),k=U.mul(M,k),M=U.mul(G$,M),f=U.mul(V,f),I$=U.mul(K,I$),G$=U.sub(o,I$),G$=U.mul(K,G$),G$=U.add(G$,f),f=U.add(o,o),o=U.add(f,o),o=U.add(o,I$),o=U.mul(o,G$),k=U.add(k,o),I$=U.mul(Z,A),I$=U.add(I$,I$),o=U.mul(I$,G$),M=U.sub(M,o),f=U.mul(I$,e),f=U.add(f,f),f=U.add(f,f),new i(M,k,f)}add(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,k=U.ZERO,f=U.ZERO,o=U.ZERO,e=I.a,I$=U.mul(I.b,d0),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.mul(j,M),Q$=U.add(P,V),X$=U.add(Z,A);Q$=U.mul(Q$,X$),X$=U.add(G$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,j);let W$=U.add(Z,M);return X$=U.mul(X$,W$),W$=U.add(G$,w$),X$=U.sub(X$,W$),W$=U.add(V,j),k=U.add(A,M),W$=U.mul(W$,k),k=U.add(D$,w$),W$=U.sub(W$,k),o=U.mul(e,X$),k=U.mul(I$,w$),o=U.add(k,o),k=U.sub(D$,o),o=U.add(D$,o),f=U.mul(k,o),D$=U.add(G$,G$),D$=U.add(D$,G$),w$=U.mul(e,w$),X$=U.mul(I$,X$),D$=U.add(D$,w$),w$=U.sub(G$,w$),w$=U.mul(e,w$),X$=U.add(X$,w$),G$=U.mul(D$,X$),f=U.add(f,G$),G$=U.mul(W$,X$),k=U.mul(Q$,k),k=U.sub(k,G$),G$=U.mul(Q$,D$),o=U.mul(W$,o),o=U.add(o,G$),new i(k,f,o)}subtract(K){return this.add(K.negate())}is0(){return this.equals(i.ZERO)}multiply(K){let{endo:P}=v;if(!r.isValidNot0(K))throw Error("invalid scalar: out of range");let V,j,Z=(A)=>H.cached(this,A,(M)=>lz(i,M));if(P){let{k1neg:A,k1:M,k2neg:k,k2:f}=F(K),{p:o,f:e}=Z(M),{p:I$,f:G$}=Z(f);j=e.add(G$),V=_(P.beta,o,I$,A,k)}else{let{p:A,f:M}=Z(K);V=A,j=M}return lz(i,[V,j])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!r.isValid(K))throw Error("invalid scalar: out of range");if(K===Vr||V.is0())return i.ZERO;if(K===ag)return V;if(H.hasCache(this))return this.multiply(K);if(P){let{k1neg:j,k1:Z,k2neg:A,k2:M}=F(K),{p1:k,p2:f}=pN(i,V,Z,M);return _(P.beta,k,f,j,A)}else return H.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(J===ag)return!0;if(K)return K(i,this);return H.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(J===ag)return this;if(K)return K(i,this);return this.multiplyUnsafe(J)}isSmallOrder(){return this.multiplyUnsafe(J).is0()}toBytes(K=!0){return $I(K,"isCompressed"),this.assertValidity(),w(i,this,K)}toHex(K=!0){return zg(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=r.BITS,H=new yz(i,v.endo?Math.ceil(v$/2):v$);return i.BASE.precompute(8),i}function vY($){return Uint8Array.of($?2:3)}function rY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function Gj($,v={}){let{Fn:g}=$,U=v.randomBytes||Cr,r=Object.assign(rY($.Fp,g),{seed:Fz(g.ORDER)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w=U(r.seed)){return xN(Y$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r;if(!lg(w))return;if("_lengths"in g&&g._lengths||q===u)return;let S=Y$(w,void 0,"key").length;return S===u||S===W}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=l0(G,z);return Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function az($,v,g={}){Ev(v),Dg(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let U=g.randomBytes||Cr,r=g.hmac||((V,j)=>tg(v,V,j)),{Fp:I,Fn:J}=$,{ORDER:G,BITS:z}=J,{keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w}=Gj($,g),q={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},u=G*$Y<I.ORDER;function W(V){let j=G>>ag;return V>j}function S(V,j){if(!J.isValidNot0(j))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return j}function R(){if(u)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(V,j){pz(j);let Z=w.signature,A=j==="compact"?Z:j==="recovered"?Z+1:void 0;return Y$(V,A)}class B{r;s;recovery;constructor(V,j,Z){if(this.r=S("r",V),this.s=S("s",j),Z!=null){if(R(),![0,1,2,3].includes(Z))throw Error("invalid recovery id");this.recovery=Z}Object.freeze(this)}static fromBytes(V,j=q.format){L(V,j);let Z;if(j==="der"){let{r:f,s:o}=mr.toSig(Y$(V));return new B(f,o)}if(j==="recovered")Z=V[0],j="compact",V=V.subarray(1);let A=w.signature/2,M=V.subarray(0,A),k=V.subarray(A,A*2);return new B(J.fromBytes(M),J.fromBytes(k),Z)}static fromHex(V,j){return this.fromBytes(Og(V),j)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new B(this.r,this.s,V)}recoverPublicKey(V){let{r:j,s:Z}=this,A=this.assertRecovery(),M=A===2||A===3?j+G:j;if(!I.isValid(M))throw Error("invalid recovery id: sig.r+curve.n != R.x");let k=I.toBytes(M),f=$.fromBytes(_$(vY((A&1)===0),k)),o=J.inv(M),e=l(Y$(V,void 0,"msgHash")),I$=J.create(-e*o),G$=J.create(Z*o),D$=$.BASE.multiplyUnsafe(I$).add(f.multiplyUnsafe(G$));if(D$.is0())throw Error("invalid recovery: point at infinify");return D$.assertValidity(),D$}hasHighS(){return W(this.s)}toBytes(V=q.format){if(pz(V),V==="der")return Og(mr.hexFromSig(this));let{r:j,s:Z}=this,A=J.toBytes(j),M=J.toBytes(Z);if(V==="recovered")return R(),_$(Uint8Array.of(this.assertRecovery()),A,M);return _$(A,M)}toHex(V){return zg(this.toBytes(V))}}let F=g.bits2int||function(j){if(j.length>8192)throw Error("input is too large");let Z=_r(j),A=j.length*8-z;return A>0?Z>>BigInt(A):Z},l=g.bits2int_modN||function(j){return J.create(F(j))},d=UI(z);function _(V){return gI("num < 2^"+z,V,Vr,d),J.toBytes(V)}function i(V,j){return Y$(V,void 0,"message"),j?Y$(v(V),void 0,"prehashed message"):V}function v$(V,j,Z){let{lowS:A,prehash:M,extraEntropy:k}=hz(Z,q);V=i(V,M);let f=l(V),o=J.fromBytes(j);if(!J.isValidNot0(o))throw Error("invalid private key");let e=[_(o),_(f)];if(k!=null&&k!==!1){let w$=k===!0?U(w.secretKey):k;e.push(Y$(w$,void 0,"extraEntropy"))}let I$=_$(...e),G$=f;function D$(w$){let Q$=F(w$);if(!J.isValidNot0(Q$))return;let X$=J.inv(Q$),W$=$.BASE.multiply(Q$).toAffine(),P$=J.create(W$.x);if(P$===Vr)return;let k$=J.create(X$*J.create(G$+P$*o));if(k$===Vr)return;let a$=(W$.x===P$?0:2)|Number(W$.y&ag),e$=k$;if(A&&W(k$))e$=J.neg(k$),a$^=1;return new B(P$,e$,u?void 0:a$)}return{seed:I$,k2sig:D$}}function H(V,j,Z={}){let{seed:A,k2sig:M}=v$(V,j,Z);return kN(v.outputLen,J.BYTES,r)(A,M).toBytes(Z.format)}function K(V,j,Z,A={}){let{lowS:M,prehash:k,format:f}=hz(A,q);if(Z=Y$(Z,void 0,"publicKey"),j=i(j,k),!lg(V)){let o=V instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+o)}L(V,f);try{let o=B.fromBytes(V,f),e=$.fromBytes(Z);if(M&&o.hasHighS())return!1;let{r:I$,s:G$}=o,D$=l(j),w$=J.inv(G$),Q$=J.create(D$*w$),X$=J.create(I$*w$),W$=$.BASE.multiplyUnsafe(Q$).add(e.multiplyUnsafe(X$));if(W$.is0())return!1;return J.create(W$.x)===I$}catch(o){return!1}}function P(V,j,Z={}){let{prehash:A}=hz(Z,q);return j=i(j,A),B.fromBytes(V,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w,Point:$,sign:H,verify:K,recoverPublicKey:P,Signature:B,hash:v})}function gY($,v,g){return $&v^~$&g}function UY($,v,g){return $&v^$&g^v&g}class h0{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=F0(this.buffer)}update($){Wr(this),Y$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=F0($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wr(this),b0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Vv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=F0($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var ur=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),y$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var p0=BigInt(4294967295),IY=BigInt(32);function zj($,v=!1){if(v)return{h:Number($&p0),l:Number($>>IY&p0)};return{h:Number($>>IY&p0)|0,l:Number($&p0)|0}}function t0($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=zj($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var ez=($,v,g)=>$>>>g,sz=($,v,g)=>$<<32-g|v>>>g,wg=($,v,g)=>$>>>g|v<<32-g,Ng=($,v,g)=>$<<32-g|v>>>g,zI=($,v,g)=>$<<64-g|v>>>g-32,OI=($,v,g)=>$>>>g-32|v<<64-g;var JY=($,v,g)=>$<<g|v>>>32-g,GY=($,v,g)=>v<<g|$>>>32-g,zY=($,v,g)=>v<<g-32|$>>>64-g,OY=($,v,g)=>$<<g-32|v>>>64-g;function tv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var DY=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),QY=($,v,g,U)=>v+g+U+($/4294967296|0)|0,XY=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),wY=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,NY=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),YY=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var Dj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Fr=new Uint32Array(64);class $O extends h0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)Fr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=Fr[Q-15],N=Fr[Q-2],w=bv(X,7)^bv(X,18)^X>>>3,q=bv(N,17)^bv(N,19)^N>>>10;Fr[Q]=q+Fr[Q-7]+w+Fr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=bv(J,6)^bv(J,11)^bv(J,25),N=O+X+gY(J,G,z)+Dj[Q]+Fr[Q]|0,q=(bv(g,2)^bv(g,13)^bv(g,22))+UY(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){Vv(Fr)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class qY extends $O{A=ur[0]|0;B=ur[1]|0;C=ur[2]|0;D=ur[3]|0;E=ur[4]|0;F=ur[5]|0;G=ur[6]|0;H=ur[7]|0;constructor(){super(32)}}class Qj extends $O{A=Zr[0]|0;B=Zr[1]|0;C=Zr[2]|0;D=Zr[3]|0;E=Zr[4]|0;F=Zr[5]|0;G=Zr[6]|0;H=Zr[7]|0;constructor(){super(28)}}var WY=(()=>t0(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),Xj=(()=>WY[0])(),wj=(()=>WY[1])(),or=new Uint32Array(80),xr=new Uint32Array(80);class DI extends h0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)or[R]=$.getUint32(v),xr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=or[R-15]|0,B=xr[R-15]|0,F=wg(L,B,1)^wg(L,B,8)^ez(L,B,7),l=Ng(L,B,1)^Ng(L,B,8)^sz(L,B,7),d=or[R-2]|0,_=xr[R-2]|0,i=wg(d,_,19)^zI(d,_,61)^ez(d,_,6),v$=Ng(d,_,19)^OI(d,_,61)^sz(d,_,6),H=XY(l,v$,xr[R-7],xr[R-16]),K=wY(H,F,i,or[R-7],or[R-16]);or[R]=K|0,xr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=wg(Q,X,14)^wg(Q,X,18)^zI(Q,X,41),B=Ng(Q,X,14)^Ng(Q,X,18)^OI(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=NY(S,B,l,wj[R],xr[R]),_=YY(d,W,L,F,Xj[R],or[R]),i=d|0,v$=wg(g,U,28)^zI(g,U,34)^zI(g,U,39),H=Ng(g,U,28)^OI(g,U,34)^OI(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=tv(z|0,O|0,_|0,i|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=DY(i,H,P);g=QY(V,_,v$,K),U=V|0}({h:g,l:U}=tv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=tv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=tv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=tv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=tv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=tv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=tv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=tv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){Vv(or,xr)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Nj extends DI{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class VY extends DI{Ah=y$[0]|0;Al=y$[1]|0;Bh=y$[2]|0;Bl=y$[3]|0;Ch=y$[4]|0;Cl=y$[5]|0;Dh=y$[6]|0;Dl=y$[7]|0;Eh=y$[8]|0;El=y$[9]|0;Fh=y$[10]|0;Fl=y$[11]|0;Gh=y$[12]|0;Gl=y$[13]|0;Hh=y$[14]|0;Hl=y$[15]|0;constructor(){super(48)}}var gv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Uv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class Yj extends DI{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(28)}}class qj extends DI{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(32)}}var a0=yg(()=>new qY,Lr(1));var uY=yg(()=>new VY,Lr(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wj=BigInt(1),ZY=BigInt(2),Vj=BigInt(3),uj=BigInt(5),UA=BigInt(8),jY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function Zj($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=jY,G=$*$%I*$%I,z=fv(G,ZY,I)*G%I,O=fv(z,Wj,I)*$%I,Q=fv(O,uj,I)*O%I,X=fv(Q,v,I)*Q%I,N=fv(X,g,I)*X%I,w=fv(N,U,I)*N%I,q=fv(w,r,I)*w%I,u=fv(q,r,I)*w%I,W=fv(u,v,I)*Q%I;return{pow_p_5_8:fv(W,ZY,I)*$%I,b2:G}}function jj($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var MY=(()=>{let $=jY;return aN({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Zj(v);return Ov(fv(g,Vj,$)*U,$)},adjustScalarBytes:jj})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mj=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),Rj=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var Kj=tz(Mj),vO=az(Kj,a0);var Sj=tz(Rj),RY=az(Sj,uY);function SY($,v,g){if(Ev($),g===void 0)g=new Uint8Array($.outputLen);return tg($,g,v)}var rO=Uint8Array.of(0),KY=Uint8Array.of();function TY($,v,g,U=32){Ev($),m$(U,"length");let r=$.outputLen;if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=KY;else Y$(g,void 0,"info");let J=new Uint8Array(I*r),G=tg.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)rO[0]=Q+1,z.update(Q===0?KY:O).update(g).update(rO).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),Vv(O,rO),J.slice(0,U)}var Tj=BigInt(0),QI=BigInt(1),Aj=BigInt(2),Hj=BigInt(7),Pj=BigInt(256),nj=BigInt(113),PY=[],nY=[],kY=[];for(let $=0,v=QI,g=1,U=0;$<24;$++){[g,U]=[U,(2*g+3*U)%5],PY.push(2*(5*U+g)),nY.push(($+1)*($+2)/2%64);let r=Tj;for(let I=0;I<7;I++)if(v=(v<<QI^(v>>Hj)*nj)%Pj,v&Aj)r^=QI<<(QI<<BigInt(I))-QI;kY.push(r)}var EY=t0(kY,!0),kj=EY[0],Ej=EY[1],AY=($,v,g)=>g>32?zY($,v,g):JY($,v,g),HY=($,v,g)=>g>32?OY($,v,g):GY($,v,g);function fj($,v=24){let g=new Uint32Array(10);for(let U=24-v;U<24;U++){for(let J=0;J<10;J++)g[J]=$[J]^$[J+10]^$[J+20]^$[J+30]^$[J+40];for(let J=0;J<10;J+=2){let G=(J+8)%10,z=(J+2)%10,O=g[z],Q=g[z+1],X=AY(O,Q,1)^g[G],N=HY(O,Q,1)^g[G+1];for(let w=0;w<50;w+=10)$[J+w]^=X,$[J+w+1]^=N}let r=$[2],I=$[3];for(let J=0;J<24;J++){let G=nY[J],z=AY(r,I,G),O=HY(r,I,G),Q=PY[J];r=$[Q],I=$[Q+1],$[Q]=z,$[Q+1]=O}for(let J=0;J<50;J+=10){for(let G=0;G<10;G++)g[G]=$[J+G];for(let G=0;G<10;G++)$[J+G]^=~g[(G+2)%10]&g[(G+4)%10]}$[0]^=kj[U],$[1]^=Ej[U]}Vv(g)}class e0{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,g,U=!1,r=24){if(this.blockLen=$,this.suffix=v,this.outputLen=g,this.enableXOF=U,this.rounds=r,m$(g,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=m0(this.state)}clone(){return this._cloneInto()}keccak(){Bz(this.state32),fj(this.state32,this.rounds),Bz(this.state32),this.posOut=0,this.pos=0}update($){Wr(this),Y$($);let{blockLen:v,state:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(v-this.pos,U-r);for(let J=0;J<I;J++)g[this.pos++]^=$[r++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:g,blockLen:U}=this;if($[g]^=v,(v&128)!==0&&g===U-1)this.keccak();$[U-1]^=128,this.keccak()}writeInto($){Wr(this,!1),Y$($),this.finish();let v=this.state,{blockLen:g}=this;for(let U=0,r=$.length;U<r;){if(this.posOut>=g)this.keccak();let I=Math.min(g-this.posOut,r-U);$.set(v.subarray(this.posOut,this.posOut+I),U),this.posOut+=I,U+=I}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(b0($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:g,outputLen:U,rounds:r,enableXOF:I}=this;return $||=new e0(v,g,U,I,r),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=r,$.suffix=g,$.outputLen=U,$.enableXOF=I,$.destroyed=this.destroyed,$}}var fY=($,v,g,U={})=>yg(()=>new e0(v,$,g),U);var Yg=fY(6,136,32,Lr(8));var BY=fY(6,72,64,Lr(10));var CY=($,v,g,U={})=>yg((r={})=>new e0(v,$,r.dkLen===void 0?g:r.dkLen,!0),U),LY=CY(31,168,16,Lr(11)),av=CY(31,136,32,Lr(12));function gO($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return gO($),($&$-1)===0&&$!==0}function UO($,v){gO($);let g=0;for(let U=0;U<v;U++,$>>>=1)g=g<<1|$&1;return g}function bY($){return gO($),31-Math.clz32($)}function _Y($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let g=bY(v);for(let U=0;U<v;U++){let r=UO(U,g);if(U<r){let I=$[U];$[U]=$[r],$[r]=I}}return $}var IO=($,v)=>{let{N:g,roots:U,dit:r,invertButterflies:I=!1,skipStages:J=0,brp:G=!0}=v,z=bY(g);if(!iY(g))throw Error("FFT: Polynomial size should be power of two");let O=r!==I;return(Q)=>{if(Q.length!==g)throw Error("FFT: wrong Polynomial length");if(r&&G)_Y(Q);for(let X=0,N=1;X<z-J;X++){let w=r?X+1+J:z-X,q=1<<w,u=q>>1,W=g>>w;for(let S=0;S<g;S+=q)for(let R=0,L=N++;R<u;R++){let B=I?r?g-L:L:R*W,F=S+R,l=S+R+u,d=U[B],_=Q[l],i=Q[F];if(O){let v$=$.mul(_,d);Q[F]=$.add(i,v$),Q[l]=$.sub(i,v$)}else if(I)Q[F]=$.add(_,i),Q[l]=$.mul($.sub(_,i),d);else Q[F]=$.add(i,_),Q[l]=$.mul($.sub(i,_),d)}}if(!r&&G)_Y(Q);return Q}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=Cr;function s0($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function mY($){return Uint8Array.from($)}function qg($,...v){let g=(r)=>typeof r==="number"?r:r.bytesLen,U=v.reduce((r,I)=>r+g(I),0);return{bytesLen:U,encode:(r)=>{let I=new Uint8Array(U);for(let J=0,G=0;J<v.length;J++){let z=v[J],O=g(z),Q=typeof z==="number"?r[J]:z.encode(r[J]);if(Y$(Q,O,$),I.set(Q,G),typeof z!=="number")Q.fill(0);G+=O}return I},decode:(r)=>{Y$(r,U,$);let I=[];for(let J of v){let G=g(J),z=r.subarray(0,G);I.push(typeof J==="number"?z:J.decode(z)),r=r.subarray(G)}return I}}}function $J($,v){let g=v*$.bytesLen;return{bytesLen:g,encode:(U)=>{if(U.length!==v)throw Error(`vecCoder.encode: wrong length=${U.length}. Expected: ${v}`);let r=new Uint8Array(g);for(let I=0,J=0;I<U.length;I++){let G=$.encode(U[I]);r.set(G,J),G.fill(0),J+=G.length}return r},decode:(U)=>{Y$(U,g);let r=[];for(let I=0;I<U.length;I+=$.bytesLen)r.push($.decode(U.subarray(I,I+$.bytesLen)));return r}}}function b$(...$){for(let v of $)if(Array.isArray(v))for(let g of v)g.fill(0);else v.fill(0)}function JO($){return(1<<$)-1}var uA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var FY=($)=>{let{newPoly:v,N:g,Q:U,F:r,ROOT_OF_UNITY:I,brvBits:J,isKyber:G}=$,z=(R,L=U)=>{let B=R%L|0;return(B>=0?B|0:L+B|0)|0},O=(R,L=U)=>{let B=z(R,L)|0;return(B>L>>1?B-L|0:B)|0};function Q(){let R=v(g);for(let L=0;L<g;L++){let B=UO(L,J),F=BigInt(I)**BigInt(B)%BigInt(U);R[L]=Number(F)|0}return R}let X=Q(),N={add:(R,L)=>z((R|0)+(L|0))|0,sub:(R,L)=>z((R|0)-(L|0))|0,mul:(R,L)=>z((R|0)*(L|0))|0,inv:(R)=>{throw Error("not implemented")}},w={N:g,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},q=IO(N,{dit:!1,...w}),u=IO(N,{dit:!0,...w});return{mod:z,smod:O,nttZetas:X,NTT:{encode:(R)=>{return q(R)},decode:(R)=>{u(R);for(let L=0;L<R.length;L++)R[L]=z(r*R[L]);return R}},bitsCoder:(R,L)=>{let B=JO(R),F=R*(g/8);return{bytesLen:F,encode:(l)=>{let d=new Uint8Array(F);for(let _=0,i=0,v$=0,H=0;_<l.length;_++){i|=(L.encode(l[_])&B)<<v$,v$+=R;for(;v$>=8;v$-=8,i>>=8)d[H++]=i&JO(v$)}return d},decode:(l)=>{let d=v(g);for(let _=0,i=0,v$=0,H=0;_<l.length;_++){i|=l[_]<<v$,v$+=8;for(;v$>=R;v$-=R,i>>=R)d[H++]=L.decode(i&B)}return d}}}}},Bj=($)=>(v,g)=>{if(!g)g=$.blockLen;let U=new Uint8Array(v.length+2);U.set(v);let r=v.length,I=new Uint8Array(g),J=$.create({}),G=0,z=0;return{stats:()=>({calls:G,xofs:z}),get:(O,Q)=>{return U[r+0]=O,U[r+1]=Q,J.destroy(),J=$.create({}).update(U),G++,()=>{return z++,J.xofInto(I)}},clean:()=>{J.destroy(),b$(I,U)}}},oY=Bj(LY);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Iv=256,jr=3329,Cj=3303,Lj=17,{mod:NI,nttZetas:_j,NTT:Wg,bitsCoder:ij}=FY({N:Iv,Q:jr,F:Cj,ROOT_OF_UNITY:Lj,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),GO={512:{N:Iv,Q:jr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Iv,Q:jr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Iv,Q:jr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},bj=($)=>{if($>=12)return{encode:(g)=>g,decode:(g)=>g};let v=2**($-1);return{encode:(g)=>((g<<$)+jr/2)/jr,decode:(g)=>g*jr+v>>>$}},XI=($)=>ij($,bj($));function Vg($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]+v[g])}function mj($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]-v[g])}function Fj($,v,g,U,r){let I=NI(v*U*r+$*g),J=NI($*U+v*g);return{c0:I,c1:J}}function vJ($,v){for(let g=0;g<Iv/2;g++){let U=_j[64+(g>>1)];if(g&1)U=-U;let{c0:r,c1:I}=Fj($[2*g+0],$[2*g+1],v[2*g+0],v[2*g+1],U);$[2*g+0]=r,$[2*g+1]=I}return $}function xY($){let v=new Uint16Array(Iv);for(let g=0;g<Iv;){let U=$();if(U.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;g<Iv&&r+3<=U.length;r+=3){let I=(U[r+0]>>0|U[r+1]<<8)&4095,J=(U[r+1]>>4|U[r+2]<<4)&4095;if(I<jr)v[g++]=I;if(g<Iv&&J<jr)v[g++]=J}}return v}function wI($,v,g,U){let r=$(U*Iv/4,v,g),I=new Uint16Array(Iv),J=m0(r),G=0;for(let z=0,O=0,Q=0,X=0;z<J.length;z++){let N=J[z];for(let w=0;w<32;w++)if(Q+=N&1,N>>=1,G+=1,G===U)X=Q,Q=0;else if(G===2*U)I[O++]=NI(X-Q),Q=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return I}var oj=($)=>{let{K:v,PRF:g,XOF:U,HASH512:r,ETA1:I,ETA2:J,du:G,dv:z}=$,O=XI(1),Q=XI(z),X=XI(G),N=qg("publicKey",$J(XI(12),v),32),w=$J(XI(12),v),q=qg("ciphertext",$J(X,v),Q),u=qg("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:N.bytesLen,cipherText:q.bytesLen},keygen:(W)=>{Y$(W,32,"seed");let S=new Uint8Array(33);S.set(W),S[32]=v;let R=r(S),[L,B]=u.decode(R),F=[],l=[];for(let i=0;i<v;i++)F.push(Wg.encode(wI(g,B,i,I)));let d=U(L);for(let i=0;i<v;i++){let v$=Wg.encode(wI(g,B,v+i,I));for(let H=0;H<v;H++){let K=xY(d.get(H,i));Vg(v$,vJ(K,F[H]))}l.push(v$)}d.clean();let _={publicKey:N.encode([l,L]),secretKey:w.encode(F)};return b$(L,B,F,l,S,R),_},encrypt:(W,S,R)=>{let[L,B]=N.decode(W),F=[];for(let H=0;H<v;H++)F.push(Wg.encode(wI(g,R,H,I)));let l=U(B),d=new Uint16Array(Iv),_=[];for(let H=0;H<v;H++){let K=wI(g,R,v+H,J),P=new Uint16Array(Iv);for(let V=0;V<v;V++){let j=xY(l.get(H,V));Vg(P,vJ(j,F[V]))}Vg(K,Wg.decode(P)),_.push(K),Vg(d,vJ(L[H],F[H])),b$(P)}l.clean();let i=wI(g,R,2*v,J);Vg(i,Wg.decode(d));let v$=O.decode(S);return Vg(v$,i),b$(L,F,d,i),q.encode([_,v$])},decrypt:(W,S)=>{let[R,L]=q.decode(W),B=w.decode(S),F=new Uint16Array(Iv);for(let l=0;l<v;l++)Vg(F,vJ(B[l],Wg.encode(R[l])));return mj(L,Wg.decode(F)),b$(F,B,R),O.encode(L)}}};function zO($){let v=oj($),{HASH256:g,HASH512:U,KDF:r}=$,{secretCoder:I,lengths:J}=v,G=qg("secretKey",J.secretKey,J.publicKey,32,32),z=32,O=64;return{info:{type:"ml-kem"},lengths:{...J,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(Q=ev(64))=>{Y$(Q,64,"seed");let{publicKey:X,secretKey:N}=v.keygen(Q.subarray(0,32)),w=g(X),q=G.encode([N,X,w,Q.subarray(32)]);return b$(N,w),{publicKey:X,secretKey:q}},getPublicKey:(Q)=>{let[X,N,w,q]=G.decode(Q);return Uint8Array.from(N)},encapsulate:(Q,X=ev(32))=>{Y$(Q,J.publicKey,"publicKey"),Y$(X,32,"message");let N=Q.subarray(0,384*$.K),w=I.encode(I.decode(mY(N)));if(!s0(w,N))throw b$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");b$(w);let q=U.create().update(X).update(g(Q)).digest(),u=v.encrypt(Q,X,q.subarray(32,64));return b$(q.subarray(32)),{cipherText:u,sharedSecret:q.subarray(0,32)}},decapsulate:(Q,X)=>{Y$(X,G.bytesLen,"secretKey"),Y$(Q,J.cipherText,"cipherText");let N=G.bytesLen-96,w=N+32,q=g(X.subarray(N/2,w));if(!s0(q,X.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[u,W,S,R]=G.decode(X),L=v.decrypt(Q,u),B=U.create().update(L).update(S).digest(),F=B.subarray(0,32),l=v.encrypt(W,L,B.subarray(32,64)),d=s0(Q,l),_=r.create({dkLen:32}).update(R).update(Q).digest();return b$(L,l,!d?F:_),d?F:_}}}function xj($,v,g){return av.create({dkLen:$}).update(v).update(new Uint8Array([g])).digest()}var OO={HASH256:Yg,HASH512:BY,KDF:av,XOF:oY,PRF:xj},nA=zO({...OO,...GO[512]}),YI=zO({...OO,...GO[768]}),cY=zO({...OO,...GO[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function cj($,v=!1){let{lengths:g,keygen:U}=$;if(v){let I=$.Point.Fn;if(!I)throw Error("No Point.Fn");U=(J=ev(g.seed))=>{Y$(J,g.seed,"seed");let G=I.isLE?ir(J):_r(J),z=I.toBytes(I.create(G));return{secretKey:z,publicKey:$.getPublicKey(z)}}}return{lengths:{secretKey:g.secretKey,publicKey:g.publicKey,seed:g.seed},keygen:U,getPublicKey:(r)=>$.getPublicKey(r)}}function DO($,v=!1){let g=cj($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...g.lengths,msg:g.lengths.seed,cipherText:g.lengths.publicKey},keygen:g.keygen,getPublicKey:g.getPublicKey,encapsulate(U,r=ev($.lengths.seed)){let I=this.keygen(r).secretKey,J=this.decapsulate(U,I),G=$.getPublicKey(I);return b$(I),{sharedSecret:J,cipherText:G}},decapsulate(U,r){let I=$.getSharedSecret(r,U);return $.lengths.publicKeyHasPrefix?I.subarray(1):I}}}function qI($,v){return qg(v,...$.map((g)=>{if(typeof g.lengths[v]!=="number")throw Error("wrong length: "+v);return g.lengths[v]}))}function QO($){return(v,g)=>$(v,{dkLen:g})}function lj($,v,...g){let U=qI(g,"seed"),r=qI(g,"publicKey");if($===void 0)$=U.bytesLen;m$($);function I(J){Y$(J,$);let G=U.decode(v(J,U.bytesLen)),z=g.map((X,N)=>X.keygen(G[N])),O=z.map((X)=>X.secretKey),Q=z.map((X)=>X.publicKey);return{secretKey:O,publicKey:Q}}return{info:{lengths:{seed:$,publicKey:r.bytesLen,secretKey:$}},getPublicKey(J){return this.keygen(J).publicKey},keygen(J=ev($)){let{publicKey:G,secretKey:z}=I(J),O=r.encode(G);return b$(G),b$(z),{secretKey:J,publicKey:O}},expandDecapsulationKey:I,realSeedLen:$}}function rJ($,v,g,U,...r){let I=lj($,g,...r),J=qI(r,"cipherText"),G=qI(r,"publicKey"),z=qI(r,"msg");if(v===void 0)v=z.bytesLen;return m$(v),{lengths:{...I.info.lengths,msg:v,msgRand:z.bytesLen,cipherText:J.bytesLen},getPublicKey:I.getPublicKey,keygen:I.keygen,encapsulate(O,Q=ev(z.bytesLen)){let X=G.decode(O),N=z.decode(Q),w=r.map((S,R)=>S.encapsulate(X[R],N[R])),q=w.map((S)=>S.sharedSecret),u=w.map((S)=>S.cipherText),W={sharedSecret:U(X,u,q),cipherText:J.encode(u)};return b$(q,u),W},decapsulate(O,Q){let X=J.decode(O),{publicKey:N,secretKey:w}=I.expandDecapsulationKey(Q),q=r.map((u,W)=>u.decapsulate(X[W],w[W]));return U(N,X,q)}}}function lY($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,QO(U),(I,J,G)=>r(_$(G[0],G[1],J[1],I[1],br($))),v,g)}var FA=lY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YI,DO(vO,!0),av,Yg),oA=lY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",cY,DO(RY,!0),av,Yg);function yj($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,QO(U),(I,J,G)=>{let z=_$(G[0],G[1],J[0],I[0],J[1],I[1],br($)),O=32,Q=_$(br("hybrid_prk"),z),X=SY(r,Q),N=_$(dg(32,2),br("shared_secret"),br("")),w=TY(r,X,N,32);return b$(X,N,Q,z),w},v,g)}var yY=DO(MY),xA=yj("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YI,yY,av,a0),dj=(()=>rJ(32,32,QO(av),($,v,g)=>Yg(_$(g[0],g[1],v[1],$[1],br("\\.//^\\"))),YI,yY))();function hj($,v,g,U){let r=$.Point.Fn;if(!r)throw Error("no Point.Fn");function I(J){let G;for(let Q=0,X=v;;Q=X,X+=v){if(X>J.length)throw Error("rejection sampling failed");if(G=r.fromBytes(J.subarray(Q,X),!0),r.isValidNot0(G))break}let z=r.toBytes(r.create(G)),O=$.getPublicKey(z,!1);return{secretKey:z,publicKey:O}}return{lengths:{secretKey:v,publicKey:g,seed:U,msg:U,cipherText:g},keygen(J=ev(U)){return Y$(J,U,"seed"),I(J)},getPublicKey(J){return $.getPublicKey(J,!1)},encapsulate(J,G=ev(U)){Y$(G,U,"rand");let{secretKey:z}=I(G),O=this.decapsulate(J,z),Q=$.getPublicKey(z,!1);return b$(z),{sharedSecret:O,cipherText:Q}},decapsulate(J,G){return $.getSharedSecret(G,J).subarray(1)}}}function pj($,v,g,U){let{secretKey:r,publicKeyUncompressed:I}=g.lengths;if(!r||!I)throw Error("wrong curve");let J=hj(g,r,I,U),G=64,z=G+U;return rJ(32,32,(O)=>{Y$(O,32);let Q=av(O,{dkLen:z}),X=Q.subarray(0,G),N=Q.subarray(G,z);return _$(X,N)},(O,Q,X)=>Yg(_$(X[0],X[1],Q[1],O[1],br($))),v,J)}var tj=(()=>pj("MLKEM768-P256",YI,vO,128))();var gJ=dj,dY=tj;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,v,g)=>o$($,v,g),wO=C$,eg=A0,h$=(...$)=>Nz(...$),sg=($)=>lU($),$U=Qz,vU=($)=>Xr($),IJ=BigInt(0),XO=BigInt(1);function Mr($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw TypeError(g+"expected boolean, got type="+typeof $)}return $}function JJ($){if(typeof $==="bigint"){if(!UJ($))throw RangeError("positive bigint expected, got "+$)}else wO($);return $}function sv($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(g+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let g=v&&`"${v}" `;throw RangeError(g+"expected safe integer, got "+$)}}function WI($){let v=JJ($).toString(16);return v.length&1?"0"+v:v}function hY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?IJ:BigInt("0x"+$)}function ug($){return hY(A0($))}function mv($){return hY(A0(cr(o$($)).reverse()))}function GJ($,v){if(C$(v),v===0)throw RangeError("zero length");$=JJ($);let g=$.toString(16);if(g.length>v*2)throw RangeError("number too large");return lU(g.padStart(v*2,"0"))}function VI($,v){return GJ($,v).reverse()}function pY($,v){if($=S$($),v=S$(v),$.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function cr($){return Uint8Array.from(S$($))}function zJ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw RangeError(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var UJ=($)=>typeof $==="bigint"&&IJ<=$;function aj($,v,g){return UJ($)&&UJ(v)&&UJ(g)&&v<=$&&$<g}function Rr($,v,g,U){if(!aj(v,g,U))throw RangeError("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function rU($){if($<IJ)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>IJ;$>>=XO,v+=1);return v}var uI=($)=>(XO<<BigInt($))-XO;function tY($,v,g){if(C$($,"hashLen"),C$(v,"qByteLen"),typeof g!=="function")throw TypeError("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,h$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return h$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while((R=S(q()))===void 0)w();return X(),R}}function Bv($,v={},g={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function U(I,J,G){if(!G&&J!=="function"&&!Object.hasOwn($,I))throw TypeError(`param "${I}" is invalid: expected own property`);let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw TypeError(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}var NO=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),f$=BigInt(1),Zg=BigInt(2),$q=BigInt(3),vq=BigInt(4),rq=BigInt(5),ej=BigInt(7),gq=BigInt(8),sj=BigInt(9),Uq=BigInt(16);function E$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let g=$%v;return g>=p$?g:v+g}function Cv($,v,g){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let U=$;while(v-- >p$)U*=U,U%=g;return U}function aY($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let g=E$($,v),U=v,r=p$,I=f$,J=f$,G=p$;while(g!==p$){let O=U/g,Q=U-g*O,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==f$)throw Error("invert: does not exist");return E$(r,v)}function YO($,v,g){let U=$;if(!U.eql(U.sqr(v),g))throw Error("Cannot find square root")}function Iq($,v){let g=$,U=(g.ORDER+f$)/vq,r=g.pow(v,U);return YO(g,r,v),r}function $M($,v){let g=$,U=(g.ORDER-rq)/gq,r=g.mul(v,Zg),I=g.pow(r,U),J=g.mul(v,I),G=g.mul(g.mul(J,Zg),I),z=g.mul(J,g.sub(G,g.ONE));return YO(g,z,v),z}function vM($){let v=OJ($),g=Jq($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+ej)/Uq;return(G,z)=>{let O=G,Q=O.pow(z,J),X=O.mul(Q,U),N=O.mul(Q,r),w=O.mul(Q,I),q=O.eql(O.sqr(X),z),u=O.eql(O.sqr(N),z);Q=O.cmov(Q,X,q),X=O.cmov(w,N,u);let W=O.eql(O.sqr(X),z),S=O.cmov(Q,X,W);return YO(O,S,z),S}}function Jq($){if($<$q)throw Error("sqrt is not defined for small field");let v=$-f$,g=0;while(v%Zg===p$)v/=Zg,g++;let U=Zg,r=OJ($);while(eY(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return Iq;let I=r.pow(U,v),J=(v+f$)/Zg;return function(z,O){let Q=z;if(Q.is0(O))return O;if(eY(Q,O)!==1)throw Error("Cannot find square root");let X=g,N=Q.mul(Q.ONE,I),w=Q.pow(O,v),q=Q.pow(O,J);while(!Q.eql(w,Q.ONE)){if(Q.is0(w))return Q.ZERO;let u=1,W=Q.sqr(w);while(!Q.eql(W,Q.ONE))if(u++,W=Q.sqr(W),u===X)throw Error("Cannot find square root");let S=f$<<BigInt(X-u-1),R=Q.pow(N,S);X=u,N=Q.sqr(R),w=Q.mul(w,N),q=Q.mul(q,R)}return q}}function rM($){if($%vq===$q)return Iq;if($%gq===rq)return $M;if($%Uq===sj)return vM($);return Jq($)}var Kr=($,v)=>(E$($,v)&f$)===f$,gM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function qO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=gM.reduce((U,r)=>{return U[r]="function",U},v);if(Bv($,g),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=f$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function UM($,v,g){let U=$;if(g<p$)throw Error("invalid exponent, negatives unsupported");if(g===p$)return U.ONE;if(g===f$)return v;let r=U.ONE,I=v;while(g>p$){if(g&f$)r=U.mul(r,I);I=U.sqr(I),g>>=f$}return r}function ZI($,v,g=!1){let U=$,r=Array(v.length).fill(g?U.ZERO:void 0),I=v.reduce((G,z,O)=>{if(U.is0(z))return G;return r[O]=G,U.mul(G,z)},U.ONE),J=U.inv(I);return v.reduceRight((G,z,O)=>{if(U.is0(z))return G;return r[O]=U.mul(G,r[O]),U.mul(G,z)},J),r}function eY($,v){let g=$,U=(g.ORDER-f$)/Zg,r=g.pow(v,U),I=g.eql(r,g.ONE),J=g.eql(r,g.ZERO),G=g.eql(r,g.neg(g.ONE));if(!I&&!J&&!G)throw Error("invalid Legendre symbol result");return I?1:J?0:-1}function IM($,v){if(v!==void 0)wO(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let g=rU($);if(v!==void 0&&v<g)throw Error(`invalid n length: expected bit length (${g}) >= n.length (${v})`);let U=v!==void 0?v:g,r=Math.ceil(U/8);return{nBitLength:U,nByteLength:r}}var sY=new WeakMap;class WO{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=f$;_lengths;_mod;constructor($,v={}){if($<=f$)throw Error("invalid field: expected ORDER > 1, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=IM($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,Object.freeze(this)}create($){return E$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&f$)===f$}neg($){return E$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return E$($*$,this.ORDER)}add($,v){return E$($+v,this.ORDER)}sub($,v){return E$($-v,this.ORDER)}mul($,v){return E$($*v,this.ORDER)}pow($,v){return UM(this,$,v)}div($,v){return E$($*aY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return aY($,this.ORDER)}sqrt($){let v=sY.get(this);if(!v)sY.set(this,v=rM(this.ORDER));return v(this,$)}toBytes($){return this.isLE?VI($,this.BYTES):GJ($,this.BYTES)}fromBytes($,v=!1){S$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if($.length<1||!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?mv($):ug($);if(J)G=E$(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return ZI(this,$)}cmov($,v,g){return Mr(g,"condition"),g?v:$}}Object.freeze(WO.prototype);function OJ($,v={}){return new WO($,v)}function Gq($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=f$)throw Error("field order must be greater than 1");let v=rU($-f$);return Math.ceil(v/8)}function VO($){let v=Gq($);return v+Math.ceil(v/2)}function zq($,v,g=!1){S$($);let U=$.length,r=Gq(v),I=Math.max(VO(v),16);if(U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?mv($):ug($),G=E$(J,v-f$)+f$;return g?VI(G,r):GJ(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gU=BigInt(0),jg=BigInt(1);function jI($,v){let g=v.negate();return $?g:v}function Mg($,v){let g=ZI($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function Xq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function uO($,v){Xq($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=uI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function Oq($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=jg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var ZO=new WeakMap,wq=new WeakMap;function jO($){return wq.get($)||1}function Dq($){if($!==gU)throw Error("invalid wNAF")}class MI{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>gU){if(v&jg)g=g.add(U);U=U.double(),v>>=jg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=uO(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=uO($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=Oq(g,J,I);if(g=G,O)r=r.add(jI(X,v[N]));else U=U.add(jI(Q,v[z]))}return Dq(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=uO($,this.bits);for(let I=0;I<r.windows;I++){if(g===gU)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=Oq(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return Dq(g),U}getPrecomputes($,v,g){let U=ZO.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);ZO.set(v,U)}}return U}cached($,v,g){let U=jO($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=jO($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){Xq(v,this.bits),wq.set($,v),ZO.delete($)}hasCache($){return jO($)!==1}}function Nq($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>gU||U>gU){if(g&jg)I=I.add(r);if(U&jg)J=J.add(r);r=r.double(),g>>=jg,U>>=jg}return{p1:I,p2:J}}function Qq($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return qO(v),v}else return OJ($,{isLE:g})}function DJ($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>gU))throw Error(`CURVE.${z} must be positive bigint`)}let r=Qq(v.p,g.Fp,U),I=Qq(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function RI($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}function KI($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let g=Array.from({length:v}).fill(0);for(let U=v-1;U>=0;U--)g[U]=$&255,$>>>=8;return new Uint8Array(g)}function JM($,v){let g=new Uint8Array($.length);for(let U=0;U<$.length;U++)g[U]=$[U]^v[U];return g}function GM($){if(!$U($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?zJ($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function MO($,v,g,U){if(S$($),sv(g),v=GM(v),v.length>255)v=U(h$(zJ("H2C-OVERSIZE-DST-"),v));let{outputLen:r,blockLen:I}=U,J=Math.ceil(g/r);if(g>65535||J>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,KI(v.length,1)),z=new Uint8Array(I),O=KI(g,2),Q=Array(J),X=U(h$(z,$,O,KI(0,1),G));Q[0]=U(h$(X,KI(1,1),G));for(let w=1;w<J;w++){let q=[JM(X,Q[w-1]),KI(w+1,1),G];Q[w]=U(h$(...q))}return h$(...Q).slice(0,g)}var Yq="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qq=($,v)=>($+($>=0?v:-v)/Vq)/v;function zM($,v,g){Rr("scalar",$,$r,g);let[[U,r],[I,J]]=v,G=qq(J*$,g),z=qq(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<$r,N=Q<$r;if(X)O=-O;if(N)Q=-Q;let w=uI(Math.ceil(rU(g)/2))+lr;if(O<$r||O>=w||Q<$r||Q>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:O,k2neg:N,k2:Q}}function KO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function RO($,v){Bv($);let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if(Mr(g.lowS,"lowS"),Mr(g.prehash,"prehash"),g.format!==void 0)KO(g.format);return g}class Wq extends Error{constructor($=""){super($)}}var Fv={Err:Wq,_tlv:{encode:($,v)=>{let{Err:g}=Fv;if(sv($,"tag"),$<0||$>255)throw new g("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=WI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?WI(r.length/2|128):"";return WI($)+I+r+v},decode($,v){let{Err:g}=Fv;v=S$(v,void 0,"DER data");let U=0;if($<0||$>255)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=Fv;if(JJ($),$<$r)throw new v("integer: negative integers are not allowed");let g=WI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=Fv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ug($)}},toSig($){let{Err:v,_int:g,_tlv:U}=Fv,r=S$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=Fv,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}};Object.freeze(Fv._tlv);Object.freeze(Fv._int);Object.freeze(Fv);var $r=BigInt(0),lr=BigInt(1),Vq=BigInt(2),QJ=BigInt(3),OM=BigInt(4);function uq($,v={}){let g=DJ("weierstrass",$,v),U=g.Fp,r=g.Fn,I=g.CURVE,{h:J,n:G}=I;Bv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z,allowInfinityPoint:O}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let Q=jq(U,r);function X(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(H,K,P){if(O&&K.is0())return Uint8Array.of(0);let{x:V,y:j}=K.toAffine(),Z=U.toBytes(V);if(Mr(P,"isCompressed"),P){X();let A=!U.isOdd(j);return h$(Zq(A),Z)}else return h$(Uint8Array.of(4),Z,U.toBytes(j))}function w(H){S$(H,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=Q,V=H.length,j=H[0],Z=H.subarray(1);if(O&&V===1&&j===0)return{x:U.ZERO,y:U.ZERO};if(V===K&&(j===2||j===3)){let A=U.fromBytes(Z);if(!U.isValid(A))throw Error("bad point: is not on curve, wrong x");let M=W(A),k;try{k=U.sqrt(M)}catch(e){let I$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+I$)}X();let f=U.isOdd(k);if((j&1)===1!==f)k=U.neg(k);return{x:A,y:k}}else if(V===P&&j===4){let A=U.BYTES,M=U.fromBytes(Z.subarray(0,A)),k=U.fromBytes(Z.subarray(A,A*2));if(!S(M,k))throw Error("bad point: is not on curve");return{x:M,y:k}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let q=v.toBytes===void 0?N:v.toBytes,u=v.fromBytes===void 0?w:v.fromBytes;function W(H){let K=U.sqr(H),P=U.mul(K,H);return U.add(U.add(P,U.mul(H,I.a)),I.b)}function S(H,K){let P=U.sqr(K),V=W(H);return U.eql(P,V)}if(!S(I.Gx,I.Gy))throw Error("bad curve params: generator point");let R=U.mul(U.pow(I.a,QJ),OM),L=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(R,L)))throw Error("bad curve params: a or b");function B(H,K,P=!1){if(!U.isValid(K)||P&&U.is0(K))throw Error(`bad point coordinate ${H}`);return K}function F(H){if(!(H instanceof _))throw Error("Weierstrass Point expected")}function l(H){if(!z||!z.basises)throw Error("no endo");return zM(H,z.basises,r.ORDER)}function d(H,K,P,V,j){return P=new _(U.mul(P.X,H),P.Y,P.Z),K=jI(V,K),P=jI(j,P),K.add(P)}class _{static BASE=new _(I.Gx,I.Gy,U.ONE);static ZERO=new _(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(H,K,P){this.X=B("x",H),this.Y=B("y",K,!0),this.Z=B("z",P),Object.freeze(this)}static CURVE(){return I}static fromAffine(H){let{x:K,y:P}=H||{};if(!H||!U.isValid(K)||!U.isValid(P))throw Error("invalid affine point");if(H instanceof _)throw Error("projective point not allowed");if(U.is0(K)&&U.is0(P))return _.ZERO;return new _(K,P,U.ONE)}static fromBytes(H){let K=_.fromAffine(u(S$(H,void 0,"point")));return K.assertValidity(),K}static fromHex(H){return _.fromBytes(sg(H))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(H=8,K=!0){if(v$.createCache(this,H),!K)this.multiply(QJ);return this}assertValidity(){let H=this;if(H.is0()){if(v.allowInfinityPoint&&U.is0(H.X)&&U.eql(H.Y,U.ONE)&&U.is0(H.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=H.toAffine();if(!U.isValid(K)||!U.isValid(P))throw Error("bad point: x or y not field elements");if(!S(K,P))throw Error("bad point: equation left != right");if(!H.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:H}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(H)}equals(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.eql(U.mul(K,A),U.mul(j,V)),k=U.eql(U.mul(P,A),U.mul(Z,V));return M&&k}negate(){return new _(this.X,U.neg(this.Y),this.Z)}double(){let{a:H,b:K}=I,P=U.mul(K,QJ),{X:V,Y:j,Z}=this,A=U.ZERO,M=U.ZERO,k=U.ZERO,f=U.mul(V,V),o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(V,j);return I$=U.add(I$,I$),k=U.mul(V,Z),k=U.add(k,k),A=U.mul(H,k),M=U.mul(P,e),M=U.add(A,M),A=U.sub(o,M),M=U.add(o,M),M=U.mul(A,M),A=U.mul(I$,A),k=U.mul(P,k),e=U.mul(H,e),I$=U.sub(f,e),I$=U.mul(H,I$),I$=U.add(I$,k),k=U.add(f,f),f=U.add(k,f),f=U.add(f,e),f=U.mul(f,I$),M=U.add(M,f),e=U.mul(j,Z),e=U.add(e,e),f=U.mul(e,I$),A=U.sub(A,f),k=U.mul(e,o),k=U.add(k,k),k=U.add(k,k),new _(A,M,k)}add(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.ZERO,k=U.ZERO,f=U.ZERO,o=I.a,e=U.mul(I.b,QJ),I$=U.mul(K,j),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.add(K,P),Q$=U.add(j,Z);w$=U.mul(w$,Q$),Q$=U.add(I$,G$),w$=U.sub(w$,Q$),Q$=U.add(K,V);let X$=U.add(j,A);return Q$=U.mul(Q$,X$),X$=U.add(I$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,V),M=U.add(Z,A),X$=U.mul(X$,M),M=U.add(G$,D$),X$=U.sub(X$,M),f=U.mul(o,Q$),M=U.mul(e,D$),f=U.add(M,f),M=U.sub(G$,f),f=U.add(G$,f),k=U.mul(M,f),G$=U.add(I$,I$),G$=U.add(G$,I$),D$=U.mul(o,D$),Q$=U.mul(e,Q$),G$=U.add(G$,D$),D$=U.sub(I$,D$),D$=U.mul(o,D$),Q$=U.add(Q$,D$),I$=U.mul(G$,Q$),k=U.add(k,I$),I$=U.mul(X$,Q$),M=U.mul(w$,M),M=U.sub(M,I$),I$=U.mul(w$,G$),f=U.mul(X$,f),f=U.add(f,I$),new _(M,k,f)}subtract(H){return F(H),this.add(H.negate())}is0(){return this.equals(_.ZERO)}multiply(H){let{endo:K}=v;if(!r.isValidNot0(H))throw RangeError("invalid scalar: out of range");let P,V,j=(Z)=>v$.cached(this,Z,(A)=>Mg(_,A));if(K){let{k1neg:Z,k1:A,k2neg:M,k2:k}=l(H),{p:f,f:o}=j(A),{p:e,f:I$}=j(k);V=o.add(I$),P=d(K.beta,f,e,Z,M)}else{let{p:Z,f:A}=j(H);P=Z,V=A}return Mg(_,[P,V])[0]}multiplyUnsafe(H){let{endo:K}=v,P=this,V=H;if(!r.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$r||P.is0())return _.ZERO;if(V===lr)return P;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:j,k1:Z,k2neg:A,k2:M}=l(V),{p1:k,p2:f}=Nq(_,P,Z,M);return d(K.beta,k,f,j,A)}else return v$.unsafe(P,V)}toAffine(H){let K=this,P=H,{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),k=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:k}}isTorsionFree(){let{isTorsionFree:H}=v;if(J===lr)return!0;if(H)return H(_,this);return v$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:H}=v;if(J===lr)return this;if(H)return H(_,this);return this.multiplyUnsafe(J)}isSmallOrder(){if(J===lr)return this.is0();return this.clearCofactor().is0()}toBytes(H=!0){return Mr(H,"isCompressed"),this.assertValidity(),q(_,this,H)}toHex(H=!0){return eg(this.toBytes(H))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let i=r.BITS,v$=new MI(_,v.endo?Math.ceil(i/2):i);if(i>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function Zq($){return Uint8Array.of($?2:3)}function jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:g}=$,U=v.randomBytes===void 0?vU:v.randomBytes,r=Object.assign(jq($.Fp,g),{seed:Math.max(VO(g.ORDER),16)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w){return w=w===void 0?U(r.seed):w,zq(S$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r,S=g._lengths;if(!$U(w))return;let R=S$(w,void 0,"key").length,L=R===u||R===W,B=R===q||!!S?.includes(R);if(L&&B)return;return L}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=RI(G,z);return Object.freeze(X),Object.freeze(r),Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function Mq($,v,g={}){let U=v;Qr(U),Bv(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let r=g.randomBytes===void 0?vU:g.randomBytes,I=g.hmac===void 0?(j,Z)=>dv(U,j,Z):g.hmac,{Fp:J,Fn:G}=$,{ORDER:z,BITS:O}=G,{keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q}=DM($,g),u={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},W=z*Vq+lr<J.ORDER;function S(j){let Z=z>>lr;return j>Z}function R(j,Z){if(!G.isValidNot0(Z))throw Error(`invalid signature ${j}: out of range 1..Point.Fn.ORDER`);return Z}function L(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(j,Z){KO(Z);let A=q.signature,M=Z==="compact"?A:Z==="recovered"?A+1:void 0;return S$(j,M)}class F{r;s;recovery;constructor(j,Z,A){if(this.r=R("r",j),this.s=R("s",Z),A!=null){if(L(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(j,Z=u.format){B(j,Z);let A;if(Z==="der"){let{r:o,s:e}=Fv.toSig(S$(j));return new F(o,e)}if(Z==="recovered")A=j[0],Z="compact",j=j.subarray(1);let M=q.signature/2,k=j.subarray(0,M),f=j.subarray(M,M*2);return new F(G.fromBytes(k),G.fromBytes(f),A)}static fromHex(j,Z){return this.fromBytes(sg(j),Z)}assertRecovery(){let{recovery:j}=this;if(j==null)throw Error("invalid recovery id: must be present");return j}addRecoveryBit(j){return new F(this.r,this.s,j)}recoverPublicKey(j){let{r:Z,s:A}=this,M=this.assertRecovery(),k=M===2||M===3?Z+z:Z;if(!J.isValid(k))throw Error("invalid recovery id: sig.r+curve.n != R.x");let f=J.toBytes(k),o=$.fromBytes(h$(Zq((M&1)===0),f)),e=G.inv(k),I$=d(S$(j,void 0,"msgHash")),G$=G.create(-I$*e),D$=G.create(A*e),w$=$.BASE.multiplyUnsafe(G$).add(o.multiplyUnsafe(D$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return S(this.s)}toBytes(j=u.format){if(KO(j),j==="der")return sg(Fv.hexFromSig(this));let{r:Z,s:A}=this,M=G.toBytes(Z),k=G.toBytes(A);if(j==="recovered")return L(),h$(Uint8Array.of(this.assertRecovery()),M,k);return h$(M,k)}toHex(j){return eg(this.toBytes(j))}}Object.freeze(F.prototype),Object.freeze(F);let l=g.bits2int===void 0?function(Z){if(Z.length>8192)throw Error("input is too large");let A=ug(Z),M=Z.length*8-O;return M>0?A>>BigInt(M):A}:g.bits2int,d=g.bits2int_modN===void 0?function(Z){return G.create(l(Z))}:g.bits2int_modN,_=uI(O);function i(j){return Rr("num < 2^"+O,j,$r,_),G.toBytes(j)}function v$(j,Z){return S$(j,void 0,"message"),Z?S$(U(j),void 0,"prehashed message"):j}function H(j,Z,A){let{lowS:M,prehash:k,extraEntropy:f}=RO(A,u);j=v$(j,k);let o=d(j),e=G.fromBytes(Z);if(!G.isValidNot0(e))throw Error("invalid private key");let I$=[i(e),i(o)];if(f!=null&&f!==!1){let Q$=f===!0?r(q.secretKey):f;I$.push(S$(Q$,void 0,"extraEntropy"))}let G$=h$(...I$),D$=o;function w$(Q$){let X$=l(Q$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),P$=$.BASE.multiply(X$).toAffine(),k$=G.create(P$.x);if(k$===$r)return;let a$=G.create(W$*G.create(D$+k$*e));if(a$===$r)return;let e$=(P$.x===k$?0:2)|Number(P$.y&lr),Wv=a$;if(M&&S(a$))Wv=G.neg(a$),e$^=1;return new F(k$,Wv,W?void 0:e$)}return{seed:G$,k2sig:w$}}function K(j,Z,A={}){let{seed:M,k2sig:k}=H(j,Z,A);return tY(U.outputLen,G.BYTES,I)(M,k).toBytes(A.format)}function P(j,Z,A,M={}){let{lowS:k,prehash:f,format:o}=RO(M,u);if(A=S$(A,void 0,"publicKey"),Z=v$(Z,f),!$U(j)){let e=j instanceof F?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}B(j,o);try{let e=F.fromBytes(j,o),I$=$.fromBytes(A);if(k&&e.hasHighS())return!1;let{r:G$,s:D$}=e,w$=d(Z),Q$=G.inv(D$),X$=G.create(w$*Q$),W$=G.create(G$*Q$),P$=$.BASE.multiplyUnsafe(X$).add(I$.multiplyUnsafe(W$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(e){return!1}}function V(j,Z,A={}){let{prehash:M}=RO(A,u);return Z=v$(Z,M),F.fromBytes(j,"recovered").recoverPublicKey(Z).toBytes()}return Object.freeze({keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:F,hash:U})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var XM=uq(QM),UU=Mq(XM,L$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yr=BigInt(0),uv=BigInt(1),SO=BigInt(2),wM=BigInt(8);function NM($,v,g,U){let r=$.sqr(g),I=$.sqr(U),J=$.add($.mul(v.a,r),I),G=$.add($.ONE,$.mul(v.d,$.mul(r,I)));return $.eql(J,G)}function Rq($,v={}){let g=v,U=DJ("edwards",$,g,g.FpFnLE),{Fp:r,Fn:I}=U,J=U.CURVE,{h:G}=J;Bv(g,{},{uvRatio:"function"});let z=SO<<BigInt(I.BYTES*8)-uv,O=(u)=>r.create(u),Q=g.uvRatio===void 0?(u,W)=>{try{return{isValid:!0,value:r.sqrt(r.div(u,W))}}catch(S){return{isValid:!1,value:yr}}}:g.uvRatio;if(!NM(r,J,J.Gx,J.Gy))throw Error("bad curve params: generator point");function X(u,W,S=!1){let R=S?uv:yr;return Rr("coordinate "+u,W,R,z),W}function N(u){if(!(u instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(J.Gx,J.Gy,uv,O(J.Gx*J.Gy));static ZERO=new w(yr,uv,uv,yr);static Fp=r;static Fn=I;X;Y;Z;T;constructor(u,W,S,R){this.X=X("x",u),this.Y=X("y",W),this.Z=X("z",S,!0),this.T=X("t",R),Object.freeze(this)}static CURVE(){return J}static fromAffine(u){if(u instanceof w)throw Error("extended point not allowed");let{x:W,y:S}=u||{};return X("x",W),X("y",S),new w(W,S,uv,O(W*S))}static fromBytes(u,W=!1){let S=r.BYTES,{a:R,d:L}=J;u=cr(S$(u,S,"point")),Mr(W,"zip215");let B=cr(u),F=u[S-1];B[S-1]=F&-129;let l=mv(B),d=W?z:r.ORDER;Rr("point.y",l,yr,d);let _=O(l*l),i=O(_-uv),v$=O(L*_-R),{isValid:H,value:K}=Q(i,v$);if(!H)throw Error("bad point: invalid y coordinate");let P=(K&uv)===uv,V=(F&128)!==0;if(!W&&K===yr&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=O(-K);return w.fromAffine({x:K,y:l})}static fromHex(u,W=!1){return w.fromBytes(sg(u),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(u=8,W=!0){if(q.createCache(this,u),!W)this.multiply(SO);return this}assertValidity(){let u=this,{a:W,d:S}=J;if(u.is0())throw Error("bad point: ZERO");let{X:R,Y:L,Z:B,T:F}=u,l=O(R*R),d=O(L*L),_=O(B*B),i=O(_*_),v$=O(l*W),H=O(_*O(v$+d)),K=O(i+O(S*O(l*d)));if(H!==K)throw Error("bad point: equation left != right (1)");let P=O(R*L),V=O(B*F);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(u){N(u);let{X:W,Y:S,Z:R}=this,{X:L,Y:B,Z:F}=u,l=O(W*F),d=O(L*R),_=O(S*F),i=O(B*R);return l===d&&_===i}is0(){return this.equals(w.ZERO)}negate(){return new w(O(-this.X),this.Y,this.Z,O(-this.T))}double(){let{a:u}=J,{X:W,Y:S,Z:R}=this,L=O(W*W),B=O(S*S),F=O(SO*O(R*R)),l=O(u*L),d=W+S,_=O(O(d*d)-L-B),i=l+B,v$=i-F,H=l-B,K=O(_*v$),P=O(i*H),V=O(_*H),j=O(v$*i);return new w(K,P,j,V)}add(u){N(u);let{a:W,d:S}=J,{X:R,Y:L,Z:B,T:F}=this,{X:l,Y:d,Z:_,T:i}=u,v$=O(R*l),H=O(L*d),K=O(F*S*i),P=O(B*_),V=O((R+L)*(l+d)-v$-H),j=P-K,Z=P+K,A=O(H-W*v$),M=O(V*j),k=O(Z*A),f=O(V*A),o=O(j*Z);return new w(M,k,o,f)}subtract(u){return N(u),this.add(u.negate())}multiply(u){if(!I.isValidNot0(u))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:S}=q.cached(this,u,(R)=>Mg(w,R));return Mg(w,[W,S])[0]}multiplyUnsafe(u){if(!I.isValid(u))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(u===yr)return w.ZERO;if(this.is0()||u===uv)return this;return q.unsafe(this,u,(W)=>Mg(w,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return q.unsafe(this,J.n).is0()}toAffine(u){let W=this,S=u,{X:R,Y:L,Z:B}=W,F=W.is0();if(S==null)S=F?wM:r.inv(B);let l=O(R*S),d=O(L*S),_=r.mul(B,S);if(F)return{x:yr,y:uv};if(_!==uv)throw Error("invZ was invalid");return{x:l,y:d}}clearCofactor(){if(G===uv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:u,y:W}=this.toAffine(),S=r.toBytes(W);return S[S.length-1]|=u&uv?128:0,S}toHex(){return eg(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let q=new MI(w,I.BITS);if(I.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class TO{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){NO()}static fromHex($){NO()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eg(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SI=BigInt(0),IU=BigInt(1),XJ=BigInt(2);function YM($){return Bv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Kq($){let v=YM($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J===void 0?vU:J,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?XJ**BigInt(254):XJ**BigInt(447),q=G?BigInt(8)*XJ**BigInt(251)-IU:BigInt(4)*XJ**BigInt(445)-IU,u=w+q+IU,W=(V)=>E$(V,g),S=R(X);function R(V){return VI(W(V),Q)}function L(V){let j=cr(S$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(mv(j))}function B(V){return mv(r(cr(S$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===SI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function i(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){Rr("u",V,SI,g),Rr("scalar",j,w,u);let Z=j,A=V,M=IU,k=SI,f=V,o=IU,e=SI;for(let G$=BigInt(O-1);G$>=SI;G$--){let D$=Z>>G$&IU;e^=D$,{x_2:M,x_3:f}=i(e,M,f),{x_2:k,x_3:o}=i(e,k,o),e=D$;let w$=M+k,Q$=W(w$*w$),X$=M-k,W$=W(X$*X$),P$=Q$-W$,k$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(k$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),k=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=i(e,M,f)),{x_2:k,x_3:o}=i(e,k,o);let I$=I(k);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V)=>{return V=V===void 0?z(Q):V,S$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(H),Object.freeze(P),Object.freeze({keygen:RI(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qM=BigInt(0),Sr=BigInt(1),Sq=BigInt(2),WM=BigInt(3),VM=BigInt(5),uM=BigInt(8),Kg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),nO=(()=>({p:Kg,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:uM,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Hq($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=Kg,G=$*$%I*$%I,z=Cv(G,Sq,I)*G%I,O=Cv(z,Sr,I)*$%I,Q=Cv(O,VM,I)*O%I,X=Cv(Q,v,I)*Q%I,N=Cv(X,g,I)*X%I,w=Cv(N,U,I)*N%I,q=Cv(w,r,I)*w%I,u=Cv(q,r,I)*w%I,W=Cv(u,v,I)*Q%I;return{pow_p_5_8:Cv(W,Sq,I)*$%I,b2:G}}function ZM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var AO=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function kO($,v){let g=Kg,U=E$(v*v*v,g),r=E$(U*U*v,g),I=Hq($*r).pow_p_5_8,J=E$($*U*I,g),G=E$(v*J*J,g),z=J,O=E$(J*AO,g),Q=G===$,X=G===E$(-$,g),N=G===E$(-$*AO,g);if(Q)J=z;if(X||N)J=O;if(Kr(J,g))J=E$(-J,g);return{isValid:Q||X,value:J}}var Rg=Rq(nO,{uvRatio:kO}),dr=(()=>Rg.Fp)(),Pq=(()=>Rg.Fn)();var wJ=(()=>{let $=Kg;return Kq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Hq(v);return E$(Cv(g,WM,$)*U,$)},adjustScalarBytes:ZM})})();var HO=AO,jM=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),MM=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),RM=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),KM=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Tq=($)=>kO(Sr,$),SM=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),PO=($)=>dr.create(mv($)&SM);function Aq($){let{d:v}=nO,g=Kg,U=(S)=>dr.create(S),r=U(HO*$*$),I=U((r+Sr)*RM),J=BigInt(-1),G=U((J-v*r)*U(r+v)),{isValid:z,value:O}=kO(I,G),Q=U(O*$);if(!Kr(Q,g))Q=U(-Q);if(!z)O=Q;if(!z)J=r;let X=U(J*(r-Sr)*KM-G),N=O*O,w=U((O+O)*G),q=U(X*jM),u=U(Sr-N),W=U(Sr+N);return new Rg(U(w*W),U(u*q),U(q*W),U(w*u))}class Qv extends TO{static BASE=(()=>new Qv(Rg.BASE))();static ZERO=(()=>new Qv(Rg.ZERO))();static Fp=(()=>dr)();static Fn=(()=>Pq)();constructor($){super($)}static fromAffine($){return new Qv(Rg.fromAffine($))}assertSame($){if(!($ instanceof Qv))throw Error("RistrettoPoint expected")}init($){return new Qv($)}static fromBytes($){o$($,32);let{a:v,d:g}=nO,U=Kg,r=(L)=>dr.create(L),I=PO($);if(!pY(dr.toBytes(I),$)||Kr(I,U))throw Error("invalid ristretto255 encoding 1");let J=r(I*I),G=r(Sr+v*J),z=r(Sr-v*J),O=r(G*G),Q=r(z*z),X=r(v*g*O-Q),{isValid:N,value:w}=Tq(r(X*Q)),q=r(w*z),u=r(w*q*X),W=r((I+I)*q);if(Kr(W,U))W=r(-W);let S=r(G*u),R=r(W*S);if(!N||Kr(R,U)||S===qM)throw Error("invalid ristretto255 encoding 2");return new Qv(new Rg(W,S,Sr,R))}static fromHex($){return Qv.fromBytes(lU($))}toBytes(){let{X:$,Y:v,Z:g,T:U}=this.ep,r=Kg,I=(u)=>dr.create(u),J=I(I(g+v)*I(g-v)),G=I($*v),z=I(G*G),{value:O}=Tq(I(J*z)),Q=I(O*J),X=I(O*G),N=I(Q*X*U),w;if(Kr(U*N,r)){let u=I(v*HO),W=I($*HO);$=u,v=W,w=I(Q*MM)}else w=X;if(Kr($*N,r))v=I(-v);let q=I((g-v)*w);if(Kr(q,r))q=I(-q);return dr.toBytes(q)}equals($){this.assertSame($);let{X:v,Y:g}=this.ep,{X:U,Y:r}=$.ep,I=(z)=>dr.create(z),J=I(v*r)===I(g*U),G=I(g*r)===I(v*U);return J||G}is0(){return this.equals(Qv.ZERO)}}Object.freeze(Qv.BASE);Object.freeze(Qv.ZERO);Object.freeze(Qv.prototype);Object.freeze(Qv);var TM=Object.freeze({Point:Qv,hashToCurve($,v){let g=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,U=MO($,g,64,k0);return TM.deriveToCurve(U)},hashToScalar($,v={DST:Yq}){let g=MO($,v.DST,64,k0);return Pq.create(mv(g))},deriveToCurve($){o$($,64);let v=PO($.subarray(0,32)),g=Aq(v),U=PO($.subarray(32,64)),r=Aq(U);return new Qv(g.add(r))}});var nq=!1,AM=!1;async function kq($,v){if(AM)return await v();try{return await $()}catch(g){if(g instanceof ReferenceError||g instanceof DOMException&&g.name==="NotSupportedError")return await v();else throw g}}async function NJ($,v){return await kq(async()=>{let g=EO($)?$:await PM($),U=await crypto.subtle.importKey("raw",nM(v),{name:"X25519"},nq,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:U},g,256))},()=>{if(EO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMult($,v)})}async function TI($){return await kq(async()=>{return NJ($,wJ.GuBytes)},()=>{if(EO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMultBase($)})}var HM=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function PM($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...HM,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},nq,["deriveBits"])}function EO($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function nM($){return $}class fO{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),EM(Sg($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let g=await this.s.read();if(g.done)return this.buf=Sg($),null;this.buf=g.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Sg(this.transcript)}}}function EM($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function Sg($){let v=$.reduce((r,I)=>r+I.length,0),g=new Uint8Array(v),U=0;for(let r of $)g.set(r,U),U+=r.length;return g}function JU($,...v){return $.pipeThrough(new TransformStream({start(g){for(let U of v)g.enqueue(U)}}))}function YJ($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function BO($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function Eq($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function fq($,v){let g=$.getReader(),U=[],r=0;while(r<v){let{done:z,value:O}=await g.read();if(z)throw Error("stream ended before reading "+v.toString()+" bytes");U.push(O),r+=O.length}g.releaseLock();let I=Sg(U),J=I.subarray(0,v),G=JU($,I.subarray(v));return{data:J,rest:G}}class vr{args;body;constructor($,v){this.args=$,this.body=v}}async function fM($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let g=v.split(" ");if(g.length<2||g.shift()!=="->")return{next:v};for(let I of g)if(I.length===0)throw Error("invalid stanza");let U=[];for(;;){let I=await $.readLine();if(I===null)throw Error("invalid stanza");let J=vv.decode(I);if(J.length>48)throw Error("invalid stanza");if(U.push(J),J.length<48)break}let r=Sg(U);return{s:new vr(g,r)}}async function Bq($){let v=new fO($),g=await v.readLine();if(g!=="age-encryption.org/v1")throw Error("invalid version "+(g??"line"));let U=[];for(;;){let{s:r,next:I}=await fM(v);if(r!==void 0){U.push(r);continue}if(!I.startsWith("--- "))throw Error("invalid header");let J=vv.decode(I.slice(4)),{rest:G,transcript:z}=v.close(),O=z.slice(0,z.length-1-I.length+3);return{stanzas:U,headerNoMAC:O,MAC:J,headerSize:z.length,rest:JU($,G)}}}function CO($){let v=[];v.push(`age-encryption.org/v1
 `);for(let g of $){v.push("-> "+g.args.join(" ")+`
 `);for(let U=0;U<g.body.length;U+=48){let r=U+48;if(r>g.body.length)r=g.body.length;v.push(vv.encode(g.body.subarray(U,r))+`
 `)}if(g.body.length%48===0)v.push(`

package/dist/index.js CHANGED Viewed

@@ -1,5 +1,5 @@
 // @bun
-var rZ=Object.defineProperty;var gZ=($)=>$;function UZ($,v){this[$]=gZ.bind(null,v)}var dv=($,v)=>{for(var g in v)rZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:UZ.bind(v,g)})};import{access as iR,chmod as _4,mkdir as gW,readFile as IW,writeFile as UW}from"fs/promises";import{dirname as bR,join as b4}from"path";import{fileURLToPath as mR}from"url";var R0={name:"@rizom/ops",version:"0.2.0-alpha.143",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^6.0.3"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var pw=`ARG BUN_VERSION=1.3.10
+var rZ=Object.defineProperty;var gZ=($)=>$;function UZ($,v){this[$]=gZ.bind(null,v)}var dv=($,v)=>{for(var g in v)rZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:UZ.bind(v,g)})};import{access as iR,chmod as _4,mkdir as gW,readFile as IW,writeFile as UW}from"fs/promises";import{dirname as bR,join as b4}from"path";import{fileURLToPath as mR}from"url";var R0={name:"@rizom/ops",version:"0.2.0-alpha.144",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^6.0.3"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var pw=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.143",
+  "version": "0.2.0-alpha.144",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",