npm - @rizom/ops - Versions diffs - 0.2.0-alpha.177 → 0.2.0-alpha.179 - Mend

@rizom/ops 0.2.0-alpha.177 → 0.2.0-alpha.179

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/dist/brains-ops.js +2 -2
package/dist/index.js +2 -2
package/package.json +1 -1
package/templates/rover-pilot/deploy/scripts/decrypt-user-secrets.ts +35 -15
package/templates/rover-pilot/deploy/scripts/resolve-deploy-handles.ts +0 -1
package/templates/rover-pilot/deploy/scripts/sync-content-repo.ts +51 -47

package/dist/brains-ops.js CHANGED Viewed

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-var gZ=Object.defineProperty;var UZ=($)=>$;function IZ($,v){this[$]=UZ.bind(null,v)}var yv=($,v)=>{for(var g in v)gZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:IZ.bind(v,g)})};import{parseArgs as JZ}from"util";var GZ={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function Qz($,v){let g=$[v];return typeof g==="boolean"?g:void 0}function R0($,v){let g=$[v];return typeof g==="string"?g:void 0}function mw($){let{values:v,positionals:g}=JZ({args:$,options:GZ,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:g[0]??"help",args:g.slice(1),flags:{help:Qz(v,"help"),version:Qz(v,"version"),dryRun:Qz(v,"dry-run"),pushTo:R0(v,"push-to"),cohort:R0(v,"cohort"),anchorId:R0(v,"anchor-id"),handle:R0(v,"handle")}}}var K0={name:"@rizom/ops",version:"0.2.0-alpha.177",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as cM,mkdirSync as lM,readFileSync as sO,writeFileSync as $8}from"fs";import{dirname as yM,join as cq}from"path";function Xz($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(`${g}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw RangeError(`${g}expected integer >= 0, got ${$}`)}}function o$($,v,g=""){let U=Xz($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function Qr($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function mg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function S0($,v){o$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw RangeError('"digestInto() output" expected to be of length >='+g)}function T0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Fg($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function M$($,v){return $<<v|$>>>32-v>>>0}var OZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function DZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function QZ($){for(let v=0;v<$.length;v++)$[v]=DZ($[v]);return $}var wz=OZ?($)=>$:QZ,ow=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),XZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function A0($){if(o$($),ow)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=XZ[$[g]];return v}var Dr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Fw($){if($>=Dr._0&&$<=Dr._9)return $-Dr._0;if($>=Dr.A&&$<=Dr.F)return $-(Dr.A-10);if($>=Dr.a&&$<=Dr.f)return $-(Dr.a-10);return}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(ow)try{return Uint8Array.fromHex($)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let v=$.length,g=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=Fw($.charCodeAt(I)),G=Fw($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw RangeError('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function wZ($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Nz($,v=""){if(typeof $==="string")return wZ($);return o$($,void 0,v)}function Yz(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];o$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function H0($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function qz($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.canXOF=U.canXOF,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Xr($=32){C$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var Wz=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Vz{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Qr($),o$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),zv(U)}update($){return mg(this),this.iHash.update($),this}digestInto($){mg(this),S0($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,g,U)=>new Vz(v,g).update(U).digest();return $.create=(v,g)=>new Vz(v,g),$})();function yU($,v,g){if(Qr($),g===void 0)g=new Uint8Array($.outputLen);return dv($,g,v)}var uz=Uint8Array.of(0),xw=Uint8Array.of();function Zz($,v,g,U=32){Qr($),C$(U,"length"),o$(v,void 0,"prk");let r=$.outputLen;if(v.length<r)throw Error('"prk" must be at least HashLen octets');if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=xw;else o$(g,void 0,"info");let J=new Uint8Array(I*r),G=dv.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)uz[0]=Q+1,z.update(Q===0?xw:O).update(g).update(uz).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),zv(O,uz),J.slice(0,U)}var kr=($,v,g,U,r)=>Zz($,yU($,v,g),U,r);function cw($,v,g){return $&v^~$&g}function lw($,v,g){return $&v^$&g^v&g}class P0{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=Fg(this.buffer)}update($){mg(this),o$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=Fg($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){mg(this),S0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,zv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=Fg($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var wr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),x$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var k0=BigInt(4294967295),yw=BigInt(32);function NZ($,v=!1){if(v)return{h:Number($&k0),l:Number($>>yw&k0)};return{h:Number($>>yw&k0)|0,l:Number($&k0)|0}}function dw($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=NZ($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var jz=($,v,g)=>$>>>g,Mz=($,v,g)=>$<<32-g|v>>>g,Ig=($,v,g)=>$>>>g|v<<32-g,Jg=($,v,g)=>$<<32-g|v>>>g,dU=($,v,g)=>$<<64-g|v>>>g-32,hU=($,v,g)=>$>>>g-32|v<<64-g;function hv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var hw=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),pw=($,v,g,U)=>v+g+U+($/4294967296|0)|0,tw=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),aw=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,ew=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),sw=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var qZ=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nr=new Uint32Array(64);class Rz extends P0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)nr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=nr[Q-15],N=nr[Q-2],w=_v(X,7)^_v(X,18)^X>>>3,q=_v(N,17)^_v(N,19)^N>>>10;nr[Q]=q+nr[Q-7]+w+nr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=_v(J,6)^_v(J,11)^_v(J,25),N=O+X+cw(J,G,z)+qZ[Q]+nr[Q]|0,q=(_v(g,2)^_v(g,13)^_v(g,22))+lw(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){zv(nr)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),zv(this.buffer)}}class $N extends Rz{A=wr[0]|0;B=wr[1]|0;C=wr[2]|0;D=wr[3]|0;E=wr[4]|0;F=wr[5]|0;G=wr[6]|0;H=wr[7]|0;constructor(){super(32)}}class WZ extends Rz{A=Nr[0]|0;B=Nr[1]|0;C=Nr[2]|0;D=Nr[3]|0;E=Nr[4]|0;F=Nr[5]|0;G=Nr[6]|0;H=Nr[7]|0;constructor(){super(28)}}var vN=(()=>dw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),VZ=(()=>vN[0])(),uZ=(()=>vN[1])(),Er=new Uint32Array(80),fr=new Uint32Array(80);class pU extends P0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)Er[R]=$.getUint32(v),fr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=Er[R-15]|0,B=fr[R-15]|0,F=Ig(L,B,1)^Ig(L,B,8)^jz(L,B,7),l=Jg(L,B,1)^Jg(L,B,8)^Mz(L,B,7),d=Er[R-2]|0,_=fr[R-2]|0,b=Ig(d,_,19)^dU(d,_,61)^jz(d,_,6),v$=Jg(d,_,19)^hU(d,_,61)^Mz(d,_,6),H=tw(l,v$,fr[R-7],fr[R-16]),K=aw(H,F,b,Er[R-7],Er[R-16]);Er[R]=K|0,fr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=Ig(Q,X,14)^Ig(Q,X,18)^dU(Q,X,41),B=Jg(Q,X,14)^Jg(Q,X,18)^hU(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=ew(S,B,l,uZ[R],fr[R]),_=sw(d,W,L,F,VZ[R],Er[R]),b=d|0,v$=Ig(g,U,28)^dU(g,U,34)^dU(g,U,39),H=Jg(g,U,28)^hU(g,U,34)^hU(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=hv(z|0,O|0,_|0,b|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=hw(b,H,P);g=pw(V,_,v$,K),U=V|0}({h:g,l:U}=hv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=hv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=hv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=hv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=hv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=hv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=hv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=hv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){zv(Er,fr)}destroy(){this.destroyed=!0,zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class rN extends pU{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class ZZ extends pU{Ah=x$[0]|0;Al=x$[1]|0;Bh=x$[2]|0;Bl=x$[3]|0;Ch=x$[4]|0;Cl=x$[5]|0;Dh=x$[6]|0;Dl=x$[7]|0;Eh=x$[8]|0;El=x$[9]|0;Fh=x$[10]|0;Fl=x$[11]|0;Gh=x$[12]|0;Gl=x$[13]|0;Hh=x$[14]|0;Hl=x$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class jZ extends pU{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class MZ extends pU{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var L$=qz(()=>new $N,Wz(1));var n0=qz(()=>new rN,Wz(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L0($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Tz($){if(!L0($))throw TypeError("Uint8Array expected")}function GN($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((g)=>typeof g==="string");else return v.every((g)=>Number.isSafeInteger(g))}function zN($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Br($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aU($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function f0($){if(!Array.isArray($))throw TypeError("array expected")}function B0($,v){if(!GN(!0,v))throw TypeError(`${$}: array of strings expected`)}function Az($,v){if(!GN(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Rv(...$){let v=(I)=>I,g=(I,J)=>(G)=>I(J(G)),U=$.map((I)=>I.encode).reduceRight(g,v),r=$.map((I)=>I.decode).reduce(g,v);return{encode:U,decode:r}}function Kv($){let v=typeof $==="string"?$.split(""):$,g=v.length;B0("alphabet",v);let U=new Map(v.map((r,I)=>[r,I]));return{encode:(r)=>{return f0(r),r.map((I)=>{if(!Number.isSafeInteger(I)||I<0||I>=g)throw Error(`alphabet.encode: digit index outside alphabet "${I}". Allowed: ${$}`);return v[I]})},decode:(r)=>{return f0(r),r.map((I)=>{Br("alphabet.decode",I);let J=U.get(I);if(J===void 0)throw Error(`Unknown letter: "${I}". Allowed: ${$}`);return J})}}}function Sv($=""){return Br("join",$),{encode:(v)=>{return B0("join.decode",v),v.join($)},decode:(v)=>{return Br("join.decode",v),v.split($)}}}function _0($,v="="){return aU($),Br("padding",v),{encode(g){B0("padding.encode",g);while(g.length*$%8)g.push(v);return g},decode(g){B0("padding.decode",g);let U=g.length;if(U*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;U>0&&g[U-1]===v;U--)if((U-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return g.slice(0,U)}}}function ON($){return zN($),{encode:(v)=>v,decode:(v)=>$(v)}}function gN($,v,g){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(g<2)throw RangeError(`convertRadix: invalid to=${g}, base cannot be less than 2`);if(f0($),!$.length)return[];let U=0,r=[],I=Array.from($,(G)=>{if(aU(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),J=I.length;while(!0){let G=0,z=!0;for(let O=U;O<J;O++){let Q=I[O],X=v*G,N=X+Q;if(!Number.isSafeInteger(N)||X/v!==G||N-Q!==X)throw Error("convertRadix: carry overflow");let w=N/g;G=N%g;let q=Math.floor(w);if(I[O]=q,!Number.isSafeInteger(q)||q*g+G!==N)throw Error("convertRadix: carry overflow");if(!z)continue;else if(!q)U=O;else z=!1}if(r.push(G),z)break}for(let G=0;G<$.length-1&&$[G]===0;G++)r.push(0);return r.reverse()}var DN=($,v)=>v===0?$:DN(v,$%v),C0=($,v)=>$+(v-DN($,v)),E0=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function Kz($,v,g,U){if(f0($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(g<=0||g>32)throw RangeError(`convertRadix2: wrong to=${g}`);if(C0(v,g)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${g} carryBits=${C0(v,g)}`);let r=0,I=0,J=E0[v],G=E0[g]-1,z=[];for(let O of $){if(aU(O),O>=J)throw Error(`convertRadix2: invalid data word=${O} from=${v}`);if(r=r<<v|O,I+v>32)throw Error(`convertRadix2: carry overflow pos=${I} from=${v}`);I+=v;for(;I>=g;I-=g)z.push((r>>I-g&G)>>>0);let Q=E0[I];if(Q===void 0)throw Error("invalid carry");r&=Q-1}if(r=r<<g-I&G,!U&&I>=v)throw Error("Excess padding");if(!U&&r>0)throw Error(`Non-zero padding: ${r}`);if(U&&I>0)z.push(r>>>0);return z}function RZ($){aU($);let v=256;return{encode:(g)=>{if(!L0(g))throw TypeError("radix.encode input should be Uint8Array");return gN(Array.from(g),v,$)},decode:(g)=>{return Az("radix.decode",g),Uint8Array.from(gN(g,$,v))}}}function kv($,v=!1){if(aU($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(C0(8,$)>32||C0($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(g)=>{if(!L0(g))throw TypeError("radix2.encode input should be Uint8Array");return Kz(Array.from(g),8,$,!v)},decode:(g)=>{return Az("radix2.decode",g),Uint8Array.from(Kz(g,$,8,v))}}}function UN($){return zN($),function(...v){try{return $.apply(null,v)}catch(g){}}}var lS=Object.freeze(Rv(kv(4),Kv("0123456789ABCDEF"),Sv(""))),yS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),_0(5),Sv(""))),dS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Sv(""))),hS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),_0(5),Sv(""))),pS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Sv(""))),tS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Sv(""),ON(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),QN=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),KZ=/[\t\n\f\r ]/,XN=($,v)=>{Br("base64",$);let g=v?"base64url":"base64";if($.length>0&&KZ.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:g,lastChunkHandling:"strict"})},Hz=Object.freeze(QN?{encode($){return Tz($),$.toBase64()},decode($){return XN($,!1)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),_0(6),Sv(""))),vv=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Sv(""))),aS=Object.freeze(QN?{encode($){return Tz($),$.toBase64({alphabet:"base64url"})},decode($){return XN($,!0)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),_0(6),Sv(""))),eS=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Sv(""))),Pz=($)=>Rv(RZ(58),Kv($),Sv("")),sS=Object.freeze(Pz("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),$T=Object.freeze(Pz("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),vT=Object.freeze(Pz("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Sz=Rv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Sv("")),IN=[996825010,642813549,513874426,1027748829,705979059];function tU($){let v=$>>25,g=($&33554431)<<5;for(let U=0;U<IN.length;U++)if((v>>U&1)===1)g^=IN[U];return g}function JN($,v,g=1){let U=$.length,r=1;for(let I=0;I<U;I++){let J=$.charCodeAt(I);if(J<33||J>126)throw Error(`Invalid prefix (${$})`);r=tU(r)^J>>5}r=tU(r);for(let I=0;I<U;I++)r=tU(r)^$.charCodeAt(I)&31;for(let I of v)r=tU(r)^I;for(let I=0;I<6;I++)r=tU(r);return r^=g,Sz.encode(Kz([r%E0[30]],30,5,!1))}function wN($){let v=$==="bech32"?1:734539939,g=kv(5),U=g.decode,r=g.encode,I=UN(U);function J(X,N,w=90){if(Br("bech32.encode prefix",X),L0(N))N=Array.from(N);Az("bech32.encode",N);let q=X.length;if(q===0)throw TypeError(`Invalid prefix length ${q}`);let u=q+7+N.length;if(w!==!1&&u>w)throw TypeError(`Length ${u} exceeds limit ${w}`);let W=X.toLowerCase(),S=JN(W,N,v);return`${W}1${Sz.encode(N)}${S}`}function G(X,N=90){Br("bech32.decode input",X);let w=X.length;if(w<8||N!==!1&&w>N)throw TypeError(`invalid string length: ${w} (${X}). Expected (8..${N})`);let q=X.toLowerCase();if(X!==q&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let u=q.lastIndexOf("1");if(u===0||u===-1)throw Error('Letter "1" must be present between prefix and data only');let W=q.slice(0,u),S=q.slice(u+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let R=Sz.decode(S).slice(0,-6),L=JN(W,R,v);if(!S.endsWith(L))throw Error(`Invalid checksum in ${X}: expected "${L}"`);return{prefix:W,words:R}}let z=UN(G);function O(X){let{prefix:N,words:w}=G(X,!1);return{prefix:N,words:w,bytes:U(w)}}function Q(X,N){return J(X,r(N))}return{encode:J,decode:G,encodeFromBytes:Q,decodeToBytes:O,decodeUnsafe:z,fromWords:U,fromWordsUnsafe:I,toWords:r}}var Tv=Object.freeze(wN("bech32")),rT=Object.freeze(wN("bech32m"));var SZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),TZ={encode($){return Tz($),$.toHex()},decode($){return Br("hex",$),Uint8Array.fromHex($)}},gT=Object.freeze(SZ?TZ:Rv(kv(4),Kv("0123456789abcdef"),Sv(""),ON(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function HZ($,v,g,U){Qr($);let r=H0({dkLen:32,asyncTick:10},U),{c:I,dkLen:J,asyncTick:G}=r;if(C$(I,"c"),C$(J,"dkLen"),C$(G,"asyncTick"),I<1)throw Error("iterations (c) must be >= 1");if(J<1)throw Error('"dkLen" must be >= 1');if(J>4294967295*$.outputLen)throw Error("derived key too long");let z=Nz(v,"password"),O=Nz(g,"salt"),Q=new Uint8Array(J),X=dv.create($,z),N=X._cloneInto().update(O);return{c:I,dkLen:J,asyncTick:G,DK:Q,PRF:X,PRFSalt:N}}function PZ($,v,g,U,r){if($.destroy(),v.destroy(),U)U.destroy();return zv(r),g}function kz($,v,g,U){let{c:r,dkLen:I,DK:J,PRF:G,PRFSalt:z}=HZ($,v,g,U),O,Q=new Uint8Array(4),X=Fg(Q),N=new Uint8Array(G.outputLen);for(let w=1,q=0;q<I;w++,q+=G.outputLen){let u=J.subarray(q,q+G.outputLen);X.setInt32(0,w,!1),(O=z._cloneInto(O)).update(Q).digestInto(N),u.set(N.subarray(0,u.length));for(let W=1;W<r;W++){G._cloneInto(O).update(N).digestInto(N);for(let S=0;S<u.length;S++)u[S]^=N[S]}}return PZ(G,z,J,O,N)}function NN($,v,g,U,r,I){let J=$[v++]^g[U++],G=$[v++]^g[U++],z=$[v++]^g[U++],O=$[v++]^g[U++],Q=$[v++]^g[U++],X=$[v++]^g[U++],N=$[v++]^g[U++],w=$[v++]^g[U++],q=$[v++]^g[U++],u=$[v++]^g[U++],W=$[v++]^g[U++],S=$[v++]^g[U++],R=$[v++]^g[U++],L=$[v++]^g[U++],B=$[v++]^g[U++],F=$[v++]^g[U++],l=J,d=G,_=z,b=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let e=0;e<8;e+=2)v$^=M$(l+M|0,7),V^=M$(v$+l|0,9),M^=M$(V+v$|0,13),l^=M$(M+V|0,18),j^=M$(H+d|0,7),n^=M$(j+H|0,9),d^=M$(n+j|0,13),H^=M$(d+n|0,18),f^=M$(Z+K|0,7),_^=M$(f+Z|0,9),K^=M$(_+f|0,13),Z^=M$(K+_|0,18),b^=M$(o+A|0,7),P^=M$(b+o|0,9),A^=M$(P+b|0,13),o^=M$(A+P|0,18),d^=M$(l+b|0,7),_^=M$(d+l|0,9),b^=M$(_+d|0,13),l^=M$(b+_|0,18),K^=M$(H+v$|0,7),P^=M$(K+H|0,9),v$^=M$(P+K|0,13),H^=M$(v$+P|0,18),A^=M$(Z+j|0,7),V^=M$(A+Z|0,9),j^=M$(V+A|0,13),Z^=M$(j+V|0,18),M^=M$(o+f|0,7),n^=M$(M+o|0,9),f^=M$(n+M|0,13),o^=M$(f+n|0,18);r[I++]=J+l|0,r[I++]=G+d|0,r[I++]=z+_|0,r[I++]=O+b|0,r[I++]=Q+v$|0,r[I++]=X+H|0,r[I++]=N+K|0,r[I++]=w+P|0,r[I++]=q+V|0,r[I++]=u+j|0,r[I++]=W+Z|0,r[I++]=S+A|0,r[I++]=R+M|0,r[I++]=L+n|0,r[I++]=B+f|0,r[I++]=F+o|0}function nz($,v,g,U,r){let I=U+0,J=U+16*r;for(let G=0;G<16;G++)g[J+G]=$[v+(2*r-1)*16+G];for(let G=0;G<r;G++,I+=16,v+=16){if(NN(g,J,$,v,g,I),G>0)J+=16;NN(g,I,$,v+=16,g,J)}}function kZ($,v,g){let U=H0({dkLen:32,asyncTick:10,maxmem:1073742848},g),{N:r,r:I,p:J,dkLen:G,asyncTick:z,maxmem:O,onProgress:Q}=U;if(C$(r,"N"),C$(I,"r"),C$(J,"p"),C$(G,"dkLen"),C$(z,"asyncTick"),C$(O,"maxmem"),Q!==void 0&&typeof Q!=="function")throw Error("progressCb must be a function");let X=128*I,N=X/4,w=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(J<1||J>(w-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let q=X*(r+J+1);if(q>O)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+q+", maxmem="+O);let u=kz(L$,$,v,{c:1,dkLen:X*J}),W=T0(u),S=T0(new Uint8Array(X*r)),R=T0(new Uint8Array(X)),L=()=>{};if(Q){let B=2*r*J,F=Math.max(Math.floor(B/1e4),1),l=0;L=()=>{if(l++,Q&&(!(l%F)||l===B))Q(l/B)}}return{N:r,r:I,p:J,dkLen:G,blockSize32:N,V:S,B32:W,B:u,tmp:R,blockMixCb:L,asyncTick:z}}function nZ($,v,g,U,r){let I=kz(L$,$,g,{c:1,dkLen:v});return zv(g,U,r),I}function Ez($,v,g){let{N:U,r,p:I,dkLen:J,blockSize32:G,V:z,B32:O,B:Q,tmp:X,blockMixCb:N}=kZ($,v,g);wz(O);for(let w=0;w<I;w++){let q=G*w;for(let u=0;u<G;u++)z[u]=O[q+u];for(let u=0,W=0;u<U-1;u++)nz(z,W,z,W+=G,r),N();nz(z,(U-1)*G,O,q,r),N();for(let u=0;u<U;u++){let W=(O[q+G-16]&U-1)>>>0;for(let S=0;S<G;S++)X[S]=O[q+S]^z[W*G+S];nz(X,0,O,q,r),N()}}return wz(O),nZ($,J,Q,z,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function EZ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function b0($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function og($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,g=""){let U=EZ($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function fz($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function YN($,v,g=!1){b$($,void 0,"output");let U=v.outputLen;if($.length<U)throw RangeError("digestInto() expects output buffer of length at least "+U);if(g&&!xg($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fZ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Gg=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),BZ=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var CZ=($)=>{for(let v=0;v<$.length;v++)$[v]=BZ($[v]);return $},Yr=Gg?($)=>$:CZ;function qN($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function WN($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function VN($,v,g){let U=v,r=g||(()=>[]),I=(G,z)=>U(z,...r(G)).update(G).digest(),J=U(new Uint8Array($),...r(new Uint8Array(0)));return I.outputLen=J.outputLen,I.blockLen=J.blockLen,I.create=(G,...z)=>U(G,...z),I}var uN=($,v)=>{function g(U,...r){if(b$(U,void 0,"key"),$.nonceLength!==void 0){let Q=r[0];b$(Q,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let I=$.tagLength;if(I&&r[1]!==void 0)b$(r[1],void 0,"AAD");let J=v(U,...r),G=(Q,X)=>{if(X!==void 0){if(Q!==2)throw Error("cipher output not supported");b$(X,void 0,"output")}},z=!1;return{encrypt(Q,X){if(z)throw Error("cannot encrypt() twice with same key + nonce");return z=!0,b$(Q),G(J.encrypt.length,X),J.encrypt(Q,X)},decrypt(Q,X){if(b$(Q),I&&Q.length<I)throw Error('"ciphertext" expected length bigger than tagLength='+I);return G(J.decrypt.length,X),J.decrypt(Q,X)}}}return Object.assign(g,$),g};function eU($,v,g=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(g&&!xg(v))throw Error("invalid output, must be aligned");return v}function ZN($,v,g){og($),og(v),b0(g);let U=new Uint8Array(16),r=fZ(U);return r.setBigUint64(0,BigInt(v),g),r.setBigUint64(8,BigInt($),g),U}function xg($){return $.byteOffset%4===0}function cg($){return Uint8Array.from(b$($))}var MN=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),LZ=(()=>Yr(pv(MN("expand 16-byte k"))))(),_Z=(()=>Yr(pv(MN("expand 32-byte k"))))();function R$($,v){return $<<v|$>>>32-v}var sU=64,bZ=16,Bz=(()=>4294967295)(),jN=Uint32Array.of();function iZ($,v,g,U,r,I,J,G){let z=r.length,O=new Uint8Array(sU),Q=pv(O),X=Gg&&xg(r)&&xg(I),N=X?pv(r):jN,w=X?pv(I):jN;if(!Gg){for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),Yr(Q),J>=Bz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}return}for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),J>=Bz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);if(X&&u===sU){let W=q/4;if(q%4!==0)throw Error("arx: invalid block position");for(let S=0,R;S<bZ;S++)R=W+S,w[R]=N[R]^Q[S];q+=sU;continue}for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}}function RN($,v){let{allowShortKeys:g,extendNonceFn:U,counterLength:r,counterRight:I,rounds:J}=qN({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return og(r),og(J),b0(I),b0(g),(G,z,O,Q,X=0)=>{b$(G,void 0,"key"),b$(z,void 0,"nonce"),b$(O,void 0,"data");let N=O.length;if(Q=eU(N,Q,!1),og(X),X<0||X>=Bz)throw Error("arx: counter overflow");let w=[],q=G.length,u,W;if(q===32)w.push(u=cg(G)),W=_Z;else if(q===16&&g)u=new Uint8Array(32),u.set(G),u.set(G,16),W=LZ,w.push(u);else throw b$(G,32,"arx key"),Error("invalid key size");if(!Gg||!xg(z))w.push(z=cg(z));let S=pv(u);if(U){if(z.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=z.subarray(0,16);if(Gg)U(W,S,pv(B),S);else{let F=Yr(Uint32Array.from(W));U(F,S,pv(B),S),bv(F),Yr(S)}z=z.subarray(16)}else if(!Gg)Yr(S);let R=16-r;if(R!==z.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let B=new Uint8Array(12);B.set(z,I?0:12-z.length),z=B,w.push(z)}let L=Yr(pv(z));try{return iZ($,W,S,L,O,Q,X,J),Q}finally{bv(...w)}}}function l$($,v){return $[v++]&255|($[v++]&255)<<8}class KN{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cg(b$($,32,"key"));let v=l$($,0),g=l$($,2),U=l$($,4),r=l$($,6),I=l$($,8),J=l$($,10),G=l$($,12),z=l$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|g<<3)&8191,this.r[2]=(g>>>10|U<<6)&7939,this.r[3]=(U>>>7|r<<9)&8191,this.r[4]=(r>>>4|I<<12)&255,this.r[5]=I>>>1&8190,this.r[6]=(I>>>14|J<<2)&8191,this.r[7]=(J>>>11|G<<5)&8065,this.r[8]=(G>>>8|z<<8)&8191,this.r[9]=z>>>5&127;for(let O=0;O<8;O++)this.pad[O]=l$($,16+2*O)}process($,v,g=!1){let U=g?0:2048,{h:r,r:I}=this,J=I[0],G=I[1],z=I[2],O=I[3],Q=I[4],X=I[5],N=I[6],w=I[7],q=I[8],u=I[9],W=l$($,v+0),S=l$($,v+2),R=l$($,v+4),L=l$($,v+6),B=l$($,v+8),F=l$($,v+10),l=l$($,v+12),d=l$($,v+14),_=r[0]+(W&8191),b=r[1]+((W>>>13|S<<3)&8191),v$=r[2]+((S>>>10|R<<6)&8191),H=r[3]+((R>>>7|L<<9)&8191),K=r[4]+((L>>>4|B<<12)&8191),P=r[5]+(B>>>1&8191),V=r[6]+((B>>>14|F<<2)&8191),j=r[7]+((F>>>11|l<<5)&8191),Z=r[8]+((l>>>8|d<<8)&8191),A=r[9]+(d>>>5|U),M=0,n=M+_*J+b*(5*u)+v$*(5*q)+H*(5*w)+K*(5*N);M=n>>>13,n&=8191,n+=P*(5*X)+V*(5*Q)+j*(5*O)+Z*(5*z)+A*(5*G),M+=n>>>13,n&=8191;let f=M+_*G+b*J+v$*(5*u)+H*(5*q)+K*(5*w);M=f>>>13,f&=8191,f+=P*(5*N)+V*(5*X)+j*(5*Q)+Z*(5*O)+A*(5*z),M+=f>>>13,f&=8191;let o=M+_*z+b*G+v$*J+H*(5*u)+K*(5*q);M=o>>>13,o&=8191,o+=P*(5*w)+V*(5*N)+j*(5*X)+Z*(5*Q)+A*(5*O),M+=o>>>13,o&=8191;let e=M+_*O+b*z+v$*G+H*J+K*(5*u);M=e>>>13,e&=8191,e+=P*(5*q)+V*(5*w)+j*(5*N)+Z*(5*X)+A*(5*Q),M+=e>>>13,e&=8191;let I$=M+_*Q+b*O+v$*z+H*G+K*J;M=I$>>>13,I$&=8191,I$+=P*(5*u)+V*(5*q)+j*(5*w)+Z*(5*N)+A*(5*X),M+=I$>>>13,I$&=8191;let G$=M+_*X+b*Q+v$*O+H*z+K*G;M=G$>>>13,G$&=8191,G$+=P*J+V*(5*u)+j*(5*q)+Z*(5*w)+A*(5*N),M+=G$>>>13,G$&=8191;let D$=M+_*N+b*X+v$*Q+H*O+K*z;M=D$>>>13,D$&=8191,D$+=P*G+V*J+j*(5*u)+Z*(5*q)+A*(5*w),M+=D$>>>13,D$&=8191;let w$=M+_*w+b*N+v$*X+H*Q+K*O;M=w$>>>13,w$&=8191,w$+=P*z+V*G+j*J+Z*(5*u)+A*(5*q),M+=w$>>>13,w$&=8191;let Q$=M+_*q+b*w+v$*N+H*X+K*Q;M=Q$>>>13,Q$&=8191,Q$+=P*O+V*z+j*G+Z*J+A*(5*u),M+=Q$>>>13,Q$&=8191;let X$=M+_*u+b*q+v$*w+H*N+K*X;M=X$>>>13,X$&=8191,X$+=P*Q+V*O+j*z+Z*G+A*J,M+=X$>>>13,X$&=8191,M=(M<<2)+M|0,M=M+n|0,n=M&8191,M=M>>>13,f+=M,r[0]=n,r[1]=f,r[2]=o,r[3]=e,r[4]=I$,r[5]=G$,r[6]=D$,r[7]=w$,r[8]=Q$,r[9]=X$}finalize(){let{h:$,pad:v}=this,g=new Uint16Array(10),U=$[1]>>>13;$[1]&=8191;for(let J=2;J<10;J++)$[J]+=U,U=$[J]>>>13,$[J]&=8191;$[0]+=U*5,U=$[0]>>>13,$[0]&=8191,$[1]+=U,U=$[1]>>>13,$[1]&=8191,$[2]+=U,g[0]=$[0]+5,U=g[0]>>>13,g[0]&=8191;for(let J=1;J<10;J++)g[J]=$[J]+U,U=g[J]>>>13,g[J]&=8191;g[9]-=8192;let r=(U^1)-1;for(let J=0;J<10;J++)g[J]&=r;r=~r;for(let J=0;J<10;J++)$[J]=$[J]&r|g[J];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let I=$[0]+v[0];$[0]=I&65535;for(let J=1;J<8;J++)I=($[J]+v[J]|0)+(I>>>16)|0,$[J]=I&65535;bv(g)}update($){fz(this),b$($),$=cg($);let{buffer:v,blockLen:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(g-this.pos,U-r);if(I===g){for(;g<=U-r;r+=g)this.process($,r);continue}if(v.set($.subarray(r,r+I),this.pos),this.pos+=I,r+=I,this.pos===g)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){fz(this),YN($,this),this.finished=!0;let{buffer:v,h:g}=this,{pos:U}=this;if(U){v[U++]=1;for(;U<16;U++)v[U]=0;this.process(v,0,!0)}this.finalize();let r=0;for(let I=0;I<8;I++)$[r++]=g[I]>>>0,$[r++]=g[I]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}}var SN=VN(32,($)=>new KN($));function mZ($,v,g,U,r,I=20){let J=$[0],G=$[1],z=$[2],O=$[3],Q=v[0],X=v[1],N=v[2],w=v[3],q=v[4],u=v[5],W=v[6],S=v[7],R=r,L=g[0],B=g[1],F=g[2],l=J,d=G,_=z,b=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let I$=0;I$<I;I$+=2)l=l+v$|0,M=R$(M^l,16),V=V+M|0,v$=R$(v$^V,12),l=l+v$|0,M=R$(M^l,8),V=V+M|0,v$=R$(v$^V,7),d=d+H|0,n=R$(n^d,16),j=j+n|0,H=R$(H^j,12),d=d+H|0,n=R$(n^d,8),j=j+n|0,H=R$(H^j,7),_=_+K|0,f=R$(f^_,16),Z=Z+f|0,K=R$(K^Z,12),_=_+K|0,f=R$(f^_,8),Z=Z+f|0,K=R$(K^Z,7),b=b+P|0,o=R$(o^b,16),A=A+o|0,P=R$(P^A,12),b=b+P|0,o=R$(o^b,8),A=A+o|0,P=R$(P^A,7),l=l+H|0,o=R$(o^l,16),Z=Z+o|0,H=R$(H^Z,12),l=l+H|0,o=R$(o^l,8),Z=Z+o|0,H=R$(H^Z,7),d=d+K|0,M=R$(M^d,16),A=A+M|0,K=R$(K^A,12),d=d+K|0,M=R$(M^d,8),A=A+M|0,K=R$(K^A,7),_=_+P|0,n=R$(n^_,16),V=V+n|0,P=R$(P^V,12),_=_+P|0,n=R$(n^_,8),V=V+n|0,P=R$(P^V,7),b=b+v$|0,f=R$(f^b,16),j=j+f|0,v$=R$(v$^j,12),b=b+v$|0,f=R$(f^b,8),j=j+f|0,v$=R$(v$^j,7);let e=0;U[e++]=J+l|0,U[e++]=G+d|0,U[e++]=z+_|0,U[e++]=O+b|0,U[e++]=Q+v$|0,U[e++]=X+H|0,U[e++]=N+K|0,U[e++]=w+P|0,U[e++]=q+V|0,U[e++]=u+j|0,U[e++]=W+Z|0,U[e++]=S+A|0,U[e++]=R+M|0,U[e++]=L+n|0,U[e++]=B+f|0,U[e++]=F+o|0}var FZ=RN(mZ,{counterRight:!1,counterLength:4,allowShortKeys:!1});var oZ=new Uint8Array(16),TN=($,v)=>{$.update(v);let g=v.length%16;if(g)$.update(oZ.subarray(g))},xZ=new Uint8Array(32);function AN($,v,g,U,r){if(r!==void 0)b$(r,void 0,"AAD");let I=$(v,g,xZ),J=ZN(U.length,r?r.length:0,!0),G=SN.create(I);if(r)TN(G,r);TN(G,U),G.update(J);let z=G.digest();return bv(I,J),z}var cZ=($)=>(v,g,U)=>{return{encrypt(I,J){let G=I.length;J=eU(G+16,J,!1),J.set(I);let z=J.subarray(0,-16);$(v,g,z,z,1);let O=AN($,v,g,z,U);return J.set(O,G),bv(O),J},decrypt(I,J){J=eU(I.length-16,J,!1);let G=I.subarray(0,-16),z=I.subarray(-16),O=AN($,v,g,G,U);if(!WN(z,O))throw bv(O),Error("invalid tag");return J.set(I.subarray(0,-16)),$(v,g,J,J,1),bv(O),J}}},nv=uN({blockSize:64,nonceLength:12,tagLength:16},cZ(FZ));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function lg($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,v=""){if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw Error(`${g}expected integer >= 0, got ${$}`)}}function Y$($,v,g=""){let U=lg($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`;throw Error(J+"expected Uint8Array"+G+", got "+z)}return $}function Ev($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Wr($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function i0($,v){Y$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw Error('"digestInto() output" expected to be of length >='+g)}function m0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function F0($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function iv($,v){return $<<32-v|$>>>v}var lZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function yZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function dZ($){for(let v=0;v<$.length;v++)$[v]=yZ($[v]);return $}var Cz=lZ?($)=>$:dZ,PN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),hZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function zg($){if(Y$($),PN)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=hZ[$[g]];return v}var qr={_0:48,_9:57,A:65,F:70,a:97,f:102};function HN($){if($>=qr._0&&$<=qr._9)return $-qr._0;if($>=qr.A&&$<=qr.F)return $-(qr.A-10);if($>=qr.a&&$<=qr.f)return $-(qr.a-10);return}function Og($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(PN)return Uint8Array.fromHex($);let v=$.length,g=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=HN($.charCodeAt(I)),G=HN($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw Error('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function _$(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];Y$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function yg($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Cr($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var Lr=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _z=BigInt(0),Lz=BigInt(1);function $I($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw Error(g+"expected boolean, got type="+typeof $)}return $}function kN($){if(typeof $==="bigint"){if(!o0($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function vI($){let v=kN($).toString(16);return v.length&1?"0"+v:v}function nN($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_z:BigInt("0x"+$)}function _r($){return nN(zg($))}function br($){return nN(zg(x0(Y$($)).reverse()))}function dg($,v){m$(v),$=kN($);let g=Og($.toString(16).padStart(v*2,"0"));if(g.length!==v)throw Error("number too large");return g}function rI($,v){return dg($,v).reverse()}function x0($){return Uint8Array.from($)}function ir($){return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw Error(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var o0=($)=>typeof $==="bigint"&&_z<=$;function pZ($,v,g){return o0($)&&o0(v)&&o0(g)&&v<=$&&$<g}function gI($,v,g,U){if(!pZ(v,g,U))throw Error("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function bz($){let v;for(v=0;$>_z;$>>=Lz,v+=1);return v}var UI=($)=>(Lz<<BigInt($))-Lz;function EN($,v,g){if(m$($,"hashLen"),m$(v,"qByteLen"),typeof g!=="function")throw Error("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,_$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return _$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while(!(R=S(q())))w();return X(),R}}function Dg($,v={},g={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function U(I,J,G){let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw Error(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}function iz($){let v=new WeakMap;return(g,...U)=>{let r=v.get(g);if(r!==void 0)return r;let I=$(g,...U);return v.set(g,I),I}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Dv=BigInt(0),rv=BigInt(1),Qg=BigInt(2),CN=BigInt(3),LN=BigInt(4),_N=BigInt(5),tZ=BigInt(7),bN=BigInt(8),aZ=BigInt(9),iN=BigInt(16);function Ov($,v){let g=$%v;return g>=Dv?g:v+g}function fv($,v,g){let U=$;while(v-- >Dv)U*=U,U%=g;return U}function fN($,v){if($===Dv)throw Error("invert: expected non-zero number");if(v<=Dv)throw Error("invert: expected positive modulus, got "+v);let g=Ov($,v),U=v,r=Dv,I=rv,J=rv,G=Dv;while(g!==Dv){let O=U/g,Q=U%g,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==rv)throw Error("invert: does not exist");return Ov(r,v)}function mz($,v,g){if(!$.eql($.sqr(v),g))throw Error("Cannot find square root")}function mN($,v){let g=($.ORDER+rv)/LN,U=$.pow(v,g);return mz($,U,v),U}function eZ($,v){let g=($.ORDER-_N)/bN,U=$.mul(v,Qg),r=$.pow(U,g),I=$.mul(v,r),J=$.mul($.mul(I,Qg),r),G=$.mul(I,$.sub(J,$.ONE));return mz($,G,v),G}function sZ($){let v=c0($),g=FN($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+tZ)/iN;return(G,z)=>{let O=G.pow(z,J),Q=G.mul(O,U),X=G.mul(O,r),N=G.mul(O,I),w=G.eql(G.sqr(Q),z),q=G.eql(G.sqr(X),z);O=G.cmov(O,Q,w),Q=G.cmov(N,X,q);let u=G.eql(G.sqr(Q),z),W=G.cmov(O,Q,u);return mz(G,W,z),W}}function FN($){if($<CN)throw Error("sqrt is not defined for small field");let v=$-rv,g=0;while(v%Qg===Dv)v/=Qg,g++;let U=Qg,r=c0($);while(BN(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return mN;let I=r.pow(U,v),J=(v+rv)/Qg;return function(z,O){if(z.is0(O))return O;if(BN(z,O)!==1)throw Error("Cannot find square root");let Q=g,X=z.mul(z.ONE,I),N=z.pow(O,v),w=z.pow(O,J);while(!z.eql(N,z.ONE)){if(z.is0(N))return z.ZERO;let q=1,u=z.sqr(N);while(!z.eql(u,z.ONE))if(q++,u=z.sqr(u),q===Q)throw Error("Cannot find square root");let W=rv<<BigInt(Q-q-1),S=z.pow(X,W);Q=q,X=z.sqr(S),N=z.mul(N,X),w=z.mul(w,S)}return w}}function $j($){if($%LN===CN)return mN;if($%bN===_N)return eZ;if($%iN===aZ)return sZ($);return FN($)}var vj=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Fz($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=vj.reduce((U,r)=>{return U[r]="function",U},v);return Dg($,g),$}function rj($,v,g){if(g<Dv)throw Error("invalid exponent, negatives unsupported");if(g===Dv)return $.ONE;if(g===rv)return v;let U=$.ONE,r=v;while(g>Dv){if(g&rv)U=$.mul(U,r);r=$.sqr(r),g>>=rv}return U}function II($,v,g=!1){let U=Array(v.length).fill(g?$.ZERO:void 0),r=v.reduce((J,G,z)=>{if($.is0(G))return J;return U[z]=J,$.mul(J,G)},$.ONE),I=$.inv(r);return v.reduceRight((J,G,z)=>{if($.is0(G))return J;return U[z]=$.mul(J,U[z]),$.mul(J,G)},I),U}function BN($,v){let g=($.ORDER-rv)/Qg,U=$.pow(v,g),r=$.eql(U,$.ONE),I=$.eql(U,$.ZERO),J=$.eql(U,$.neg($.ONE));if(!r&&!I&&!J)throw Error("invalid Legendre symbol result");return r?1:I?0:-1}function gj($,v){if(v!==void 0)m$(v);let g=v!==void 0?v:$.toString(2).length,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}class oN{ORDER;BITS;BYTES;isLE;ZERO=Dv;ONE=rv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Dv)throw Error("invalid field: expected ORDER > 0, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=gj($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Ov($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Dv<=$&&$<this.ORDER}is0($){return $===Dv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&rv)===rv}neg($){return Ov(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Ov($*$,this.ORDER)}add($,v){return Ov($+v,this.ORDER)}sub($,v){return Ov($-v,this.ORDER)}mul($,v){return Ov($*v,this.ORDER)}pow($,v){return rj(this,$,v)}div($,v){return Ov($*fN(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fN($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=$j(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?rI($,this.BYTES):dg($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if(!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?br($):_r($);if(J)G=Ov(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return II(this,$)}cmov($,v,g){return g?v:$}}function c0($,v={}){return new oN($,v)}function xN($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function oz($){let v=xN($);return v+Math.ceil(v/2)}function cN($,v,g=!1){Y$($);let U=$.length,r=xN(v),I=oz(v);if(U<16||U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?br($):_r($),G=Ov(J,v-rv)+rv;return g?rI(G,r):dg(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hg=BigInt(0),Xg=BigInt(1);function JI($,v){let g=v.negate();return $?g:v}function yz($,v){let g=II($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function hN($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function xz($,v){hN($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=UI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function lN($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=Xg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var cz=new WeakMap,pN=new WeakMap;function lz($){return pN.get($)||1}function yN($){if($!==hg)throw Error("invalid wNAF")}class dz{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>hg){if(v&Xg)g=g.add(U);U=U.double(),v>>=Xg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=xz(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=xz($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=lN(g,J,I);if(g=G,O)r=r.add(JI(X,v[N]));else U=U.add(JI(Q,v[z]))}return yN(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=xz($,this.bits);for(let I=0;I<r.windows;I++){if(g===hg)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=lN(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return yN(g),U}getPrecomputes($,v,g){let U=cz.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);cz.set(v,U)}}return U}cached($,v,g){let U=lz($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=lz($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){hN(v,this.bits),pN.set($,v),cz.delete($)}hasCache($){return lz($)!==1}}function tN($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>hg||U>hg){if(g&Xg)I=I.add(r);if(U&Xg)J=J.add(r);r=r.double(),g>>=Xg,U>>=Xg}return{p1:I,p2:J}}function dN($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Fz(v),v}else return c0($,{isLE:g})}function aN($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>hg))throw Error(`CURVE.${z} must be positive bigint`)}let r=dN(v.p,g.Fp,U),I=dN(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function l0($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GI=BigInt(0),pg=BigInt(1),y0=BigInt(2);function Uj($){return Dg($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eN($){let v=Uj($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J||Cr,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?y0**BigInt(254):y0**BigInt(447),q=G?BigInt(8)*y0**BigInt(251)-pg:BigInt(4)*y0**BigInt(445)-pg,u=w+q+pg,W=(V)=>Ov(V,g),S=R(X);function R(V){return rI(W(V),Q)}function L(V){let j=x0(Y$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(br(j))}function B(V){return br(r(x0(Y$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===GI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){gI("u",V,GI,g),gI("scalar",j,w,u);let Z=j,A=V,M=pg,n=GI,f=V,o=pg,e=GI;for(let G$=BigInt(O-1);G$>=GI;G$--){let D$=Z>>G$&pg;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V=z(Q))=>{return Y$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:l0(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}class hz{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Ev($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Vv(U)}update($){return Wr(this),this.iHash.update($),this}digestInto($){Wr(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tg=($,v,g)=>new hz($,v).update(g).digest();tg.create=($,v)=>new hz($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sN=($,v)=>($+($>=0?v:-v)/vY)/v;function Ij($,v,g){let[[U,r],[I,J]]=v,G=sN(J*$,g),z=sN(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<Vr,N=Q<Vr;if(X)O=-O;if(N)Q=-Q;let w=UI(Math.ceil(bz(g)/2))+ag;if(O<Vr||O>=w||Q<Vr||Q>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:O,k2neg:N,k2:Q}}function tz($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pz($,v){let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if($I(g.lowS,"lowS"),$I(g.prehash,"prehash"),g.format!==void 0)tz(g.format);return g}class $Y extends Error{constructor($=""){super($)}}var mr={Err:$Y,_tlv:{encode:($,v)=>{let{Err:g}=mr;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=vI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?vI(r.length/2|128):"";return vI($)+I+r+v},decode($,v){let{Err:g}=mr,U=0;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=mr;if($<Vr)throw new v("integer: negative integers are not allowed");let g=vI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=mr;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _r($)}},toSig($){let{Err:v,_int:g,_tlv:U}=mr,r=Y$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=mr,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}},Vr=BigInt(0),ag=BigInt(1),vY=BigInt(2),d0=BigInt(3),Jj=BigInt(4);function az($,v={}){let g=aN("weierstrass",$,v),{Fp:U,Fn:r}=g,I=g.CURVE,{h:J,n:G}=I;Dg(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let O=gY(U,r);function Q(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,P,V){let{x:j,y:Z}=P.toAffine(),A=U.toBytes(j);if($I(V,"isCompressed"),V){Q();let M=!U.isOdd(Z);return _$(rY(M),A)}else return _$(Uint8Array.of(4),A,U.toBytes(Z))}function N(K){Y$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=O,j=K.length,Z=K[0],A=K.subarray(1);if(j===P&&(Z===2||Z===3)){let M=U.fromBytes(A);if(!U.isValid(M))throw Error("bad point: is not on curve, wrong x");let n=u(M),f;try{f=U.sqrt(n)}catch(I$){let G$=I$ instanceof Error?": "+I$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}Q();let o=U.isOdd(f);if((Z&1)===1!==o)f=U.neg(f);return{x:M,y:f}}else if(j===V&&Z===4){let M=U.BYTES,n=U.fromBytes(A.subarray(0,M)),f=U.fromBytes(A.subarray(M,M*2));if(!W(n,f))throw Error("bad point: is not on curve");return{x:n,y:f}}else throw Error(`bad point: got length ${j}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||X,q=v.fromBytes||N;function u(K){let P=U.sqr(K),V=U.mul(P,K);return U.add(U.add(V,U.mul(K,I.a)),I.b)}function W(K,P){let V=U.sqr(P),j=u(K);return U.eql(V,j)}if(!W(I.Gx,I.Gy))throw Error("bad curve params: generator point");let S=U.mul(U.pow(I.a,d0),Jj),R=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(S,R)))throw Error("bad curve params: a or b");function L(K,P,V=!1){if(!U.isValid(P)||V&&U.is0(P))throw Error(`bad point coordinate ${K}`);return P}function B(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function F(K){if(!z||!z.basises)throw Error("no endo");return Ij(K,z.basises,r.ORDER)}let l=iz((K,P)=>{let{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}),d=iz((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!U.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!U.isValid(P)||!U.isValid(V))throw Error("bad point: x or y not field elements");if(!W(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,P,V,j,Z){return V=new b(U.mul(V.X,K),V.Y,V.Z),P=JI(j,P),V=JI(Z,V),P.add(V)}class b{static BASE=new b(I.Gx,I.Gy,U.ONE);static ZERO=new b(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(K,P,V){this.X=L("x",K),this.Y=L("y",P,!0),this.Z=L("z",V),Object.freeze(this)}static CURVE(){return I}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!U.isValid(P)||!U.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(U.is0(P)&&U.is0(V))return b.ZERO;return new b(P,V,U.ONE)}static fromBytes(K){let P=b.fromAffine(q(Y$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return b.fromBytes(Og(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(H.createCache(this,K),!P)this.multiply(d0);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(K)}equals(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.eql(U.mul(P,M),U.mul(Z,j)),f=U.eql(U.mul(V,M),U.mul(A,j));return n&&f}negate(){return new b(this.X,U.neg(this.Y),this.Z)}double(){let{a:K,b:P}=I,V=U.mul(P,d0),{X:j,Y:Z,Z:A}=this,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(A,A),G$=U.mul(j,Z);return G$=U.add(G$,G$),f=U.mul(j,A),f=U.add(f,f),M=U.mul(K,f),n=U.mul(V,I$),n=U.add(M,n),M=U.sub(e,n),n=U.add(e,n),n=U.mul(M,n),M=U.mul(G$,M),f=U.mul(V,f),I$=U.mul(K,I$),G$=U.sub(o,I$),G$=U.mul(K,G$),G$=U.add(G$,f),f=U.add(o,o),o=U.add(f,o),o=U.add(o,I$),o=U.mul(o,G$),n=U.add(n,o),I$=U.mul(Z,A),I$=U.add(I$,I$),o=U.mul(I$,G$),M=U.sub(M,o),f=U.mul(I$,e),f=U.add(f,f),f=U.add(f,f),new b(M,n,f)}add(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.ZERO,f=U.ZERO,o=U.ZERO,e=I.a,I$=U.mul(I.b,d0),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.mul(j,M),Q$=U.add(P,V),X$=U.add(Z,A);Q$=U.mul(Q$,X$),X$=U.add(G$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,j);let W$=U.add(Z,M);return X$=U.mul(X$,W$),W$=U.add(G$,w$),X$=U.sub(X$,W$),W$=U.add(V,j),n=U.add(A,M),W$=U.mul(W$,n),n=U.add(D$,w$),W$=U.sub(W$,n),o=U.mul(e,X$),n=U.mul(I$,w$),o=U.add(n,o),n=U.sub(D$,o),o=U.add(D$,o),f=U.mul(n,o),D$=U.add(G$,G$),D$=U.add(D$,G$),w$=U.mul(e,w$),X$=U.mul(I$,X$),D$=U.add(D$,w$),w$=U.sub(G$,w$),w$=U.mul(e,w$),X$=U.add(X$,w$),G$=U.mul(D$,X$),f=U.add(f,G$),G$=U.mul(W$,X$),n=U.mul(Q$,n),n=U.sub(n,G$),G$=U.mul(Q$,D$),o=U.mul(W$,o),o=U.add(o,G$),new b(n,f,o)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:P}=v;if(!r.isValidNot0(K))throw Error("invalid scalar: out of range");let V,j,Z=(A)=>H.cached(this,A,(M)=>yz(b,M));if(P){let{k1neg:A,k1:M,k2neg:n,k2:f}=F(K),{p:o,f:e}=Z(M),{p:I$,f:G$}=Z(f);j=e.add(G$),V=_(P.beta,o,I$,A,n)}else{let{p:A,f:M}=Z(K);V=A,j=M}return yz(b,[V,j])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!r.isValid(K))throw Error("invalid scalar: out of range");if(K===Vr||V.is0())return b.ZERO;if(K===ag)return V;if(H.hasCache(this))return this.multiply(K);if(P){let{k1neg:j,k1:Z,k2neg:A,k2:M}=F(K),{p1:n,p2:f}=tN(b,V,Z,M);return _(P.beta,n,f,j,A)}else return H.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(J===ag)return!0;if(K)return K(b,this);return H.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(J===ag)return this;if(K)return K(b,this);return this.multiplyUnsafe(J)}isSmallOrder(){return this.multiplyUnsafe(J).is0()}toBytes(K=!0){return $I(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return zg(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=r.BITS,H=new dz(b,v.endo?Math.ceil(v$/2):v$);return b.BASE.precompute(8),b}function rY($){return Uint8Array.of($?2:3)}function gY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function Gj($,v={}){let{Fn:g}=$,U=v.randomBytes||Cr,r=Object.assign(gY($.Fp,g),{seed:oz(g.ORDER)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w=U(r.seed)){return cN(Y$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r;if(!lg(w))return;if("_lengths"in g&&g._lengths||q===u)return;let S=Y$(w,void 0,"key").length;return S===u||S===W}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=l0(G,z);return Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function ez($,v,g={}){Ev(v),Dg(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let U=g.randomBytes||Cr,r=g.hmac||((V,j)=>tg(v,V,j)),{Fp:I,Fn:J}=$,{ORDER:G,BITS:z}=J,{keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w}=Gj($,g),q={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},u=G*vY<I.ORDER;function W(V){let j=G>>ag;return V>j}function S(V,j){if(!J.isValidNot0(j))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return j}function R(){if(u)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(V,j){tz(j);let Z=w.signature,A=j==="compact"?Z:j==="recovered"?Z+1:void 0;return Y$(V,A)}class B{r;s;recovery;constructor(V,j,Z){if(this.r=S("r",V),this.s=S("s",j),Z!=null){if(R(),![0,1,2,3].includes(Z))throw Error("invalid recovery id");this.recovery=Z}Object.freeze(this)}static fromBytes(V,j=q.format){L(V,j);let Z;if(j==="der"){let{r:f,s:o}=mr.toSig(Y$(V));return new B(f,o)}if(j==="recovered")Z=V[0],j="compact",V=V.subarray(1);let A=w.signature/2,M=V.subarray(0,A),n=V.subarray(A,A*2);return new B(J.fromBytes(M),J.fromBytes(n),Z)}static fromHex(V,j){return this.fromBytes(Og(V),j)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new B(this.r,this.s,V)}recoverPublicKey(V){let{r:j,s:Z}=this,A=this.assertRecovery(),M=A===2||A===3?j+G:j;if(!I.isValid(M))throw Error("invalid recovery id: sig.r+curve.n != R.x");let n=I.toBytes(M),f=$.fromBytes(_$(rY((A&1)===0),n)),o=J.inv(M),e=l(Y$(V,void 0,"msgHash")),I$=J.create(-e*o),G$=J.create(Z*o),D$=$.BASE.multiplyUnsafe(I$).add(f.multiplyUnsafe(G$));if(D$.is0())throw Error("invalid recovery: point at infinify");return D$.assertValidity(),D$}hasHighS(){return W(this.s)}toBytes(V=q.format){if(tz(V),V==="der")return Og(mr.hexFromSig(this));let{r:j,s:Z}=this,A=J.toBytes(j),M=J.toBytes(Z);if(V==="recovered")return R(),_$(Uint8Array.of(this.assertRecovery()),A,M);return _$(A,M)}toHex(V){return zg(this.toBytes(V))}}let F=g.bits2int||function(j){if(j.length>8192)throw Error("input is too large");let Z=_r(j),A=j.length*8-z;return A>0?Z>>BigInt(A):Z},l=g.bits2int_modN||function(j){return J.create(F(j))},d=UI(z);function _(V){return gI("num < 2^"+z,V,Vr,d),J.toBytes(V)}function b(V,j){return Y$(V,void 0,"message"),j?Y$(v(V),void 0,"prehashed message"):V}function v$(V,j,Z){let{lowS:A,prehash:M,extraEntropy:n}=pz(Z,q);V=b(V,M);let f=l(V),o=J.fromBytes(j);if(!J.isValidNot0(o))throw Error("invalid private key");let e=[_(o),_(f)];if(n!=null&&n!==!1){let w$=n===!0?U(w.secretKey):n;e.push(Y$(w$,void 0,"extraEntropy"))}let I$=_$(...e),G$=f;function D$(w$){let Q$=F(w$);if(!J.isValidNot0(Q$))return;let X$=J.inv(Q$),W$=$.BASE.multiply(Q$).toAffine(),P$=J.create(W$.x);if(P$===Vr)return;let n$=J.create(X$*J.create(G$+P$*o));if(n$===Vr)return;let a$=(W$.x===P$?0:2)|Number(W$.y&ag),e$=n$;if(A&&W(n$))e$=J.neg(n$),a$^=1;return new B(P$,e$,u?void 0:a$)}return{seed:I$,k2sig:D$}}function H(V,j,Z={}){let{seed:A,k2sig:M}=v$(V,j,Z);return EN(v.outputLen,J.BYTES,r)(A,M).toBytes(Z.format)}function K(V,j,Z,A={}){let{lowS:M,prehash:n,format:f}=pz(A,q);if(Z=Y$(Z,void 0,"publicKey"),j=b(j,n),!lg(V)){let o=V instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+o)}L(V,f);try{let o=B.fromBytes(V,f),e=$.fromBytes(Z);if(M&&o.hasHighS())return!1;let{r:I$,s:G$}=o,D$=l(j),w$=J.inv(G$),Q$=J.create(D$*w$),X$=J.create(I$*w$),W$=$.BASE.multiplyUnsafe(Q$).add(e.multiplyUnsafe(X$));if(W$.is0())return!1;return J.create(W$.x)===I$}catch(o){return!1}}function P(V,j,Z={}){let{prehash:A}=pz(Z,q);return j=b(j,A),B.fromBytes(V,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w,Point:$,sign:H,verify:K,recoverPublicKey:P,Signature:B,hash:v})}function UY($,v,g){return $&v^~$&g}function IY($,v,g){return $&v^$&g^v&g}class h0{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=F0(this.buffer)}update($){Wr(this),Y$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=F0($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wr(this),i0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Vv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=F0($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var ur=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),y$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var p0=BigInt(4294967295),JY=BigInt(32);function zj($,v=!1){if(v)return{h:Number($&p0),l:Number($>>JY&p0)};return{h:Number($>>JY&p0)|0,l:Number($&p0)|0}}function t0($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=zj($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var sz=($,v,g)=>$>>>g,$O=($,v,g)=>$<<32-g|v>>>g,wg=($,v,g)=>$>>>g|v<<32-g,Ng=($,v,g)=>$<<32-g|v>>>g,zI=($,v,g)=>$<<64-g|v>>>g-32,OI=($,v,g)=>$>>>g-32|v<<64-g;var GY=($,v,g)=>$<<g|v>>>32-g,zY=($,v,g)=>v<<g|$>>>32-g,OY=($,v,g)=>v<<g-32|$>>>64-g,DY=($,v,g)=>$<<g-32|v>>>64-g;function tv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var QY=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),XY=($,v,g,U)=>v+g+U+($/4294967296|0)|0,wY=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),NY=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,YY=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),qY=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var Dj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Fr=new Uint32Array(64);class vO extends h0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)Fr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=Fr[Q-15],N=Fr[Q-2],w=iv(X,7)^iv(X,18)^X>>>3,q=iv(N,17)^iv(N,19)^N>>>10;Fr[Q]=q+Fr[Q-7]+w+Fr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=iv(J,6)^iv(J,11)^iv(J,25),N=O+X+UY(J,G,z)+Dj[Q]+Fr[Q]|0,q=(iv(g,2)^iv(g,13)^iv(g,22))+IY(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){Vv(Fr)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class WY extends vO{A=ur[0]|0;B=ur[1]|0;C=ur[2]|0;D=ur[3]|0;E=ur[4]|0;F=ur[5]|0;G=ur[6]|0;H=ur[7]|0;constructor(){super(32)}}class Qj extends vO{A=Zr[0]|0;B=Zr[1]|0;C=Zr[2]|0;D=Zr[3]|0;E=Zr[4]|0;F=Zr[5]|0;G=Zr[6]|0;H=Zr[7]|0;constructor(){super(28)}}var VY=(()=>t0(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),Xj=(()=>VY[0])(),wj=(()=>VY[1])(),or=new Uint32Array(80),xr=new Uint32Array(80);class DI extends h0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)or[R]=$.getUint32(v),xr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=or[R-15]|0,B=xr[R-15]|0,F=wg(L,B,1)^wg(L,B,8)^sz(L,B,7),l=Ng(L,B,1)^Ng(L,B,8)^$O(L,B,7),d=or[R-2]|0,_=xr[R-2]|0,b=wg(d,_,19)^zI(d,_,61)^sz(d,_,6),v$=Ng(d,_,19)^OI(d,_,61)^$O(d,_,6),H=wY(l,v$,xr[R-7],xr[R-16]),K=NY(H,F,b,or[R-7],or[R-16]);or[R]=K|0,xr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=wg(Q,X,14)^wg(Q,X,18)^zI(Q,X,41),B=Ng(Q,X,14)^Ng(Q,X,18)^OI(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=YY(S,B,l,wj[R],xr[R]),_=qY(d,W,L,F,Xj[R],or[R]),b=d|0,v$=wg(g,U,28)^zI(g,U,34)^zI(g,U,39),H=Ng(g,U,28)^OI(g,U,34)^OI(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=tv(z|0,O|0,_|0,b|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=QY(b,H,P);g=XY(V,_,v$,K),U=V|0}({h:g,l:U}=tv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=tv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=tv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=tv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=tv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=tv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=tv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=tv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){Vv(or,xr)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Nj extends DI{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class uY extends DI{Ah=y$[0]|0;Al=y$[1]|0;Bh=y$[2]|0;Bl=y$[3]|0;Ch=y$[4]|0;Cl=y$[5]|0;Dh=y$[6]|0;Dl=y$[7]|0;Eh=y$[8]|0;El=y$[9]|0;Fh=y$[10]|0;Fl=y$[11]|0;Gh=y$[12]|0;Gl=y$[13]|0;Hh=y$[14]|0;Hl=y$[15]|0;constructor(){super(48)}}var gv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Uv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class Yj extends DI{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(28)}}class qj extends DI{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(32)}}var a0=yg(()=>new WY,Lr(1));var ZY=yg(()=>new uY,Lr(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wj=BigInt(1),jY=BigInt(2),Vj=BigInt(3),uj=BigInt(5),UA=BigInt(8),MY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function Zj($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=MY,G=$*$%I*$%I,z=fv(G,jY,I)*G%I,O=fv(z,Wj,I)*$%I,Q=fv(O,uj,I)*O%I,X=fv(Q,v,I)*Q%I,N=fv(X,g,I)*X%I,w=fv(N,U,I)*N%I,q=fv(w,r,I)*w%I,u=fv(q,r,I)*w%I,W=fv(u,v,I)*Q%I;return{pow_p_5_8:fv(W,jY,I)*$%I,b2:G}}function jj($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var RY=(()=>{let $=MY;return eN({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Zj(v);return Ov(fv(g,Vj,$)*U,$)},adjustScalarBytes:jj})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mj=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),Rj=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var Kj=az(Mj),rO=ez(Kj,a0);var Sj=az(Rj),KY=ez(Sj,ZY);function TY($,v,g){if(Ev($),g===void 0)g=new Uint8Array($.outputLen);return tg($,g,v)}var gO=Uint8Array.of(0),SY=Uint8Array.of();function AY($,v,g,U=32){Ev($),m$(U,"length");let r=$.outputLen;if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=SY;else Y$(g,void 0,"info");let J=new Uint8Array(I*r),G=tg.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)gO[0]=Q+1,z.update(Q===0?SY:O).update(g).update(gO).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),Vv(O,gO),J.slice(0,U)}var Tj=BigInt(0),QI=BigInt(1),Aj=BigInt(2),Hj=BigInt(7),Pj=BigInt(256),kj=BigInt(113),kY=[],nY=[],EY=[];for(let $=0,v=QI,g=1,U=0;$<24;$++){[g,U]=[U,(2*g+3*U)%5],kY.push(2*(5*U+g)),nY.push(($+1)*($+2)/2%64);let r=Tj;for(let I=0;I<7;I++)if(v=(v<<QI^(v>>Hj)*kj)%Pj,v&Aj)r^=QI<<(QI<<BigInt(I))-QI;EY.push(r)}var fY=t0(EY,!0),nj=fY[0],Ej=fY[1],HY=($,v,g)=>g>32?OY($,v,g):GY($,v,g),PY=($,v,g)=>g>32?DY($,v,g):zY($,v,g);function fj($,v=24){let g=new Uint32Array(10);for(let U=24-v;U<24;U++){for(let J=0;J<10;J++)g[J]=$[J]^$[J+10]^$[J+20]^$[J+30]^$[J+40];for(let J=0;J<10;J+=2){let G=(J+8)%10,z=(J+2)%10,O=g[z],Q=g[z+1],X=HY(O,Q,1)^g[G],N=PY(O,Q,1)^g[G+1];for(let w=0;w<50;w+=10)$[J+w]^=X,$[J+w+1]^=N}let r=$[2],I=$[3];for(let J=0;J<24;J++){let G=nY[J],z=HY(r,I,G),O=PY(r,I,G),Q=kY[J];r=$[Q],I=$[Q+1],$[Q]=z,$[Q+1]=O}for(let J=0;J<50;J+=10){for(let G=0;G<10;G++)g[G]=$[J+G];for(let G=0;G<10;G++)$[J+G]^=~g[(G+2)%10]&g[(G+4)%10]}$[0]^=nj[U],$[1]^=Ej[U]}Vv(g)}class e0{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,g,U=!1,r=24){if(this.blockLen=$,this.suffix=v,this.outputLen=g,this.enableXOF=U,this.rounds=r,m$(g,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=m0(this.state)}clone(){return this._cloneInto()}keccak(){Cz(this.state32),fj(this.state32,this.rounds),Cz(this.state32),this.posOut=0,this.pos=0}update($){Wr(this),Y$($);let{blockLen:v,state:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(v-this.pos,U-r);for(let J=0;J<I;J++)g[this.pos++]^=$[r++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:g,blockLen:U}=this;if($[g]^=v,(v&128)!==0&&g===U-1)this.keccak();$[U-1]^=128,this.keccak()}writeInto($){Wr(this,!1),Y$($),this.finish();let v=this.state,{blockLen:g}=this;for(let U=0,r=$.length;U<r;){if(this.posOut>=g)this.keccak();let I=Math.min(g-this.posOut,r-U);$.set(v.subarray(this.posOut,this.posOut+I),U),this.posOut+=I,U+=I}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(i0($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:g,outputLen:U,rounds:r,enableXOF:I}=this;return $||=new e0(v,g,U,I,r),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=r,$.suffix=g,$.outputLen=U,$.enableXOF=I,$.destroyed=this.destroyed,$}}var BY=($,v,g,U={})=>yg(()=>new e0(v,$,g),U);var Yg=BY(6,136,32,Lr(8));var CY=BY(6,72,64,Lr(10));var LY=($,v,g,U={})=>yg((r={})=>new e0(v,$,r.dkLen===void 0?g:r.dkLen,!0),U),_Y=LY(31,168,16,Lr(11)),av=LY(31,136,32,Lr(12));function UO($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return UO($),($&$-1)===0&&$!==0}function IO($,v){UO($);let g=0;for(let U=0;U<v;U++,$>>>=1)g=g<<1|$&1;return g}function mY($){return UO($),31-Math.clz32($)}function bY($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let g=mY(v);for(let U=0;U<v;U++){let r=IO(U,g);if(U<r){let I=$[U];$[U]=$[r],$[r]=I}}return $}var JO=($,v)=>{let{N:g,roots:U,dit:r,invertButterflies:I=!1,skipStages:J=0,brp:G=!0}=v,z=mY(g);if(!iY(g))throw Error("FFT: Polynomial size should be power of two");let O=r!==I;return(Q)=>{if(Q.length!==g)throw Error("FFT: wrong Polynomial length");if(r&&G)bY(Q);for(let X=0,N=1;X<z-J;X++){let w=r?X+1+J:z-X,q=1<<w,u=q>>1,W=g>>w;for(let S=0;S<g;S+=q)for(let R=0,L=N++;R<u;R++){let B=I?r?g-L:L:R*W,F=S+R,l=S+R+u,d=U[B],_=Q[l],b=Q[F];if(O){let v$=$.mul(_,d);Q[F]=$.add(b,v$),Q[l]=$.sub(b,v$)}else if(I)Q[F]=$.add(_,b),Q[l]=$.mul($.sub(_,b),d);else Q[F]=$.add(b,_),Q[l]=$.mul($.sub(b,_),d)}}if(!r&&G)bY(Q);return Q}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=Cr;function s0($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function FY($){return Uint8Array.from($)}function qg($,...v){let g=(r)=>typeof r==="number"?r:r.bytesLen,U=v.reduce((r,I)=>r+g(I),0);return{bytesLen:U,encode:(r)=>{let I=new Uint8Array(U);for(let J=0,G=0;J<v.length;J++){let z=v[J],O=g(z),Q=typeof z==="number"?r[J]:z.encode(r[J]);if(Y$(Q,O,$),I.set(Q,G),typeof z!=="number")Q.fill(0);G+=O}return I},decode:(r)=>{Y$(r,U,$);let I=[];for(let J of v){let G=g(J),z=r.subarray(0,G);I.push(typeof J==="number"?z:J.decode(z)),r=r.subarray(G)}return I}}}function $J($,v){let g=v*$.bytesLen;return{bytesLen:g,encode:(U)=>{if(U.length!==v)throw Error(`vecCoder.encode: wrong length=${U.length}. Expected: ${v}`);let r=new Uint8Array(g);for(let I=0,J=0;I<U.length;I++){let G=$.encode(U[I]);r.set(G,J),G.fill(0),J+=G.length}return r},decode:(U)=>{Y$(U,g);let r=[];for(let I=0;I<U.length;I+=$.bytesLen)r.push($.decode(U.subarray(I,I+$.bytesLen)));return r}}}function i$(...$){for(let v of $)if(Array.isArray(v))for(let g of v)g.fill(0);else v.fill(0)}function GO($){return(1<<$)-1}var uA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var oY=($)=>{let{newPoly:v,N:g,Q:U,F:r,ROOT_OF_UNITY:I,brvBits:J,isKyber:G}=$,z=(R,L=U)=>{let B=R%L|0;return(B>=0?B|0:L+B|0)|0},O=(R,L=U)=>{let B=z(R,L)|0;return(B>L>>1?B-L|0:B)|0};function Q(){let R=v(g);for(let L=0;L<g;L++){let B=IO(L,J),F=BigInt(I)**BigInt(B)%BigInt(U);R[L]=Number(F)|0}return R}let X=Q(),N={add:(R,L)=>z((R|0)+(L|0))|0,sub:(R,L)=>z((R|0)-(L|0))|0,mul:(R,L)=>z((R|0)*(L|0))|0,inv:(R)=>{throw Error("not implemented")}},w={N:g,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},q=JO(N,{dit:!1,...w}),u=JO(N,{dit:!0,...w});return{mod:z,smod:O,nttZetas:X,NTT:{encode:(R)=>{return q(R)},decode:(R)=>{u(R);for(let L=0;L<R.length;L++)R[L]=z(r*R[L]);return R}},bitsCoder:(R,L)=>{let B=GO(R),F=R*(g/8);return{bytesLen:F,encode:(l)=>{let d=new Uint8Array(F);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=(L.encode(l[_])&B)<<v$,v$+=R;for(;v$>=8;v$-=8,b>>=8)d[H++]=b&GO(v$)}return d},decode:(l)=>{let d=v(g);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=l[_]<<v$,v$+=8;for(;v$>=R;v$-=R,b>>=R)d[H++]=L.decode(b&B)}return d}}}}},Bj=($)=>(v,g)=>{if(!g)g=$.blockLen;let U=new Uint8Array(v.length+2);U.set(v);let r=v.length,I=new Uint8Array(g),J=$.create({}),G=0,z=0;return{stats:()=>({calls:G,xofs:z}),get:(O,Q)=>{return U[r+0]=O,U[r+1]=Q,J.destroy(),J=$.create({}).update(U),G++,()=>{return z++,J.xofInto(I)}},clean:()=>{J.destroy(),i$(I,U)}}},xY=Bj(_Y);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Iv=256,jr=3329,Cj=3303,Lj=17,{mod:NI,nttZetas:_j,NTT:Wg,bitsCoder:bj}=oY({N:Iv,Q:jr,F:Cj,ROOT_OF_UNITY:Lj,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),zO={512:{N:Iv,Q:jr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Iv,Q:jr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Iv,Q:jr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},ij=($)=>{if($>=12)return{encode:(g)=>g,decode:(g)=>g};let v=2**($-1);return{encode:(g)=>((g<<$)+jr/2)/jr,decode:(g)=>g*jr+v>>>$}},XI=($)=>bj($,ij($));function Vg($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]+v[g])}function mj($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]-v[g])}function Fj($,v,g,U,r){let I=NI(v*U*r+$*g),J=NI($*U+v*g);return{c0:I,c1:J}}function vJ($,v){for(let g=0;g<Iv/2;g++){let U=_j[64+(g>>1)];if(g&1)U=-U;let{c0:r,c1:I}=Fj($[2*g+0],$[2*g+1],v[2*g+0],v[2*g+1],U);$[2*g+0]=r,$[2*g+1]=I}return $}function cY($){let v=new Uint16Array(Iv);for(let g=0;g<Iv;){let U=$();if(U.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;g<Iv&&r+3<=U.length;r+=3){let I=(U[r+0]>>0|U[r+1]<<8)&4095,J=(U[r+1]>>4|U[r+2]<<4)&4095;if(I<jr)v[g++]=I;if(g<Iv&&J<jr)v[g++]=J}}return v}function wI($,v,g,U){let r=$(U*Iv/4,v,g),I=new Uint16Array(Iv),J=m0(r),G=0;for(let z=0,O=0,Q=0,X=0;z<J.length;z++){let N=J[z];for(let w=0;w<32;w++)if(Q+=N&1,N>>=1,G+=1,G===U)X=Q,Q=0;else if(G===2*U)I[O++]=NI(X-Q),Q=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return I}var oj=($)=>{let{K:v,PRF:g,XOF:U,HASH512:r,ETA1:I,ETA2:J,du:G,dv:z}=$,O=XI(1),Q=XI(z),X=XI(G),N=qg("publicKey",$J(XI(12),v),32),w=$J(XI(12),v),q=qg("ciphertext",$J(X,v),Q),u=qg("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:N.bytesLen,cipherText:q.bytesLen},keygen:(W)=>{Y$(W,32,"seed");let S=new Uint8Array(33);S.set(W),S[32]=v;let R=r(S),[L,B]=u.decode(R),F=[],l=[];for(let b=0;b<v;b++)F.push(Wg.encode(wI(g,B,b,I)));let d=U(L);for(let b=0;b<v;b++){let v$=Wg.encode(wI(g,B,v+b,I));for(let H=0;H<v;H++){let K=cY(d.get(H,b));Vg(v$,vJ(K,F[H]))}l.push(v$)}d.clean();let _={publicKey:N.encode([l,L]),secretKey:w.encode(F)};return i$(L,B,F,l,S,R),_},encrypt:(W,S,R)=>{let[L,B]=N.decode(W),F=[];for(let H=0;H<v;H++)F.push(Wg.encode(wI(g,R,H,I)));let l=U(B),d=new Uint16Array(Iv),_=[];for(let H=0;H<v;H++){let K=wI(g,R,v+H,J),P=new Uint16Array(Iv);for(let V=0;V<v;V++){let j=cY(l.get(H,V));Vg(P,vJ(j,F[V]))}Vg(K,Wg.decode(P)),_.push(K),Vg(d,vJ(L[H],F[H])),i$(P)}l.clean();let b=wI(g,R,2*v,J);Vg(b,Wg.decode(d));let v$=O.decode(S);return Vg(v$,b),i$(L,F,d,b),q.encode([_,v$])},decrypt:(W,S)=>{let[R,L]=q.decode(W),B=w.decode(S),F=new Uint16Array(Iv);for(let l=0;l<v;l++)Vg(F,vJ(B[l],Wg.encode(R[l])));return mj(L,Wg.decode(F)),i$(F,B,R),O.encode(L)}}};function OO($){let v=oj($),{HASH256:g,HASH512:U,KDF:r}=$,{secretCoder:I,lengths:J}=v,G=qg("secretKey",J.secretKey,J.publicKey,32,32),z=32,O=64;return{info:{type:"ml-kem"},lengths:{...J,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(Q=ev(64))=>{Y$(Q,64,"seed");let{publicKey:X,secretKey:N}=v.keygen(Q.subarray(0,32)),w=g(X),q=G.encode([N,X,w,Q.subarray(32)]);return i$(N,w),{publicKey:X,secretKey:q}},getPublicKey:(Q)=>{let[X,N,w,q]=G.decode(Q);return Uint8Array.from(N)},encapsulate:(Q,X=ev(32))=>{Y$(Q,J.publicKey,"publicKey"),Y$(X,32,"message");let N=Q.subarray(0,384*$.K),w=I.encode(I.decode(FY(N)));if(!s0(w,N))throw i$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");i$(w);let q=U.create().update(X).update(g(Q)).digest(),u=v.encrypt(Q,X,q.subarray(32,64));return i$(q.subarray(32)),{cipherText:u,sharedSecret:q.subarray(0,32)}},decapsulate:(Q,X)=>{Y$(X,G.bytesLen,"secretKey"),Y$(Q,J.cipherText,"cipherText");let N=G.bytesLen-96,w=N+32,q=g(X.subarray(N/2,w));if(!s0(q,X.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[u,W,S,R]=G.decode(X),L=v.decrypt(Q,u),B=U.create().update(L).update(S).digest(),F=B.subarray(0,32),l=v.encrypt(W,L,B.subarray(32,64)),d=s0(Q,l),_=r.create({dkLen:32}).update(R).update(Q).digest();return i$(L,l,!d?F:_),d?F:_}}}function xj($,v,g){return av.create({dkLen:$}).update(v).update(new Uint8Array([g])).digest()}var DO={HASH256:Yg,HASH512:CY,KDF:av,XOF:xY,PRF:xj},kA=OO({...DO,...zO[512]}),YI=OO({...DO,...zO[768]}),lY=OO({...DO,...zO[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function cj($,v=!1){let{lengths:g,keygen:U}=$;if(v){let I=$.Point.Fn;if(!I)throw Error("No Point.Fn");U=(J=ev(g.seed))=>{Y$(J,g.seed,"seed");let G=I.isLE?br(J):_r(J),z=I.toBytes(I.create(G));return{secretKey:z,publicKey:$.getPublicKey(z)}}}return{lengths:{secretKey:g.secretKey,publicKey:g.publicKey,seed:g.seed},keygen:U,getPublicKey:(r)=>$.getPublicKey(r)}}function QO($,v=!1){let g=cj($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...g.lengths,msg:g.lengths.seed,cipherText:g.lengths.publicKey},keygen:g.keygen,getPublicKey:g.getPublicKey,encapsulate(U,r=ev($.lengths.seed)){let I=this.keygen(r).secretKey,J=this.decapsulate(U,I),G=$.getPublicKey(I);return i$(I),{sharedSecret:J,cipherText:G}},decapsulate(U,r){let I=$.getSharedSecret(r,U);return $.lengths.publicKeyHasPrefix?I.subarray(1):I}}}function qI($,v){return qg(v,...$.map((g)=>{if(typeof g.lengths[v]!=="number")throw Error("wrong length: "+v);return g.lengths[v]}))}function XO($){return(v,g)=>$(v,{dkLen:g})}function lj($,v,...g){let U=qI(g,"seed"),r=qI(g,"publicKey");if($===void 0)$=U.bytesLen;m$($);function I(J){Y$(J,$);let G=U.decode(v(J,U.bytesLen)),z=g.map((X,N)=>X.keygen(G[N])),O=z.map((X)=>X.secretKey),Q=z.map((X)=>X.publicKey);return{secretKey:O,publicKey:Q}}return{info:{lengths:{seed:$,publicKey:r.bytesLen,secretKey:$}},getPublicKey(J){return this.keygen(J).publicKey},keygen(J=ev($)){let{publicKey:G,secretKey:z}=I(J),O=r.encode(G);return i$(G),i$(z),{secretKey:J,publicKey:O}},expandDecapsulationKey:I,realSeedLen:$}}function rJ($,v,g,U,...r){let I=lj($,g,...r),J=qI(r,"cipherText"),G=qI(r,"publicKey"),z=qI(r,"msg");if(v===void 0)v=z.bytesLen;return m$(v),{lengths:{...I.info.lengths,msg:v,msgRand:z.bytesLen,cipherText:J.bytesLen},getPublicKey:I.getPublicKey,keygen:I.keygen,encapsulate(O,Q=ev(z.bytesLen)){let X=G.decode(O),N=z.decode(Q),w=r.map((S,R)=>S.encapsulate(X[R],N[R])),q=w.map((S)=>S.sharedSecret),u=w.map((S)=>S.cipherText),W={sharedSecret:U(X,u,q),cipherText:J.encode(u)};return i$(q,u),W},decapsulate(O,Q){let X=J.decode(O),{publicKey:N,secretKey:w}=I.expandDecapsulationKey(Q),q=r.map((u,W)=>u.decapsulate(X[W],w[W]));return U(N,X,q)}}}function yY($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,XO(U),(I,J,G)=>r(_$(G[0],G[1],J[1],I[1],ir($))),v,g)}var FA=yY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YI,QO(rO,!0),av,Yg),oA=yY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",lY,QO(KY,!0),av,Yg);function yj($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,XO(U),(I,J,G)=>{let z=_$(G[0],G[1],J[0],I[0],J[1],I[1],ir($)),O=32,Q=_$(ir("hybrid_prk"),z),X=TY(r,Q),N=_$(dg(32,2),ir("shared_secret"),ir("")),w=AY(r,X,N,32);return i$(X,N,Q,z),w},v,g)}var dY=QO(RY),xA=yj("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YI,dY,av,a0),dj=(()=>rJ(32,32,XO(av),($,v,g)=>Yg(_$(g[0],g[1],v[1],$[1],ir("\\.//^\\"))),YI,dY))();function hj($,v,g,U){let r=$.Point.Fn;if(!r)throw Error("no Point.Fn");function I(J){let G;for(let Q=0,X=v;;Q=X,X+=v){if(X>J.length)throw Error("rejection sampling failed");if(G=r.fromBytes(J.subarray(Q,X),!0),r.isValidNot0(G))break}let z=r.toBytes(r.create(G)),O=$.getPublicKey(z,!1);return{secretKey:z,publicKey:O}}return{lengths:{secretKey:v,publicKey:g,seed:U,msg:U,cipherText:g},keygen(J=ev(U)){return Y$(J,U,"seed"),I(J)},getPublicKey(J){return $.getPublicKey(J,!1)},encapsulate(J,G=ev(U)){Y$(G,U,"rand");let{secretKey:z}=I(G),O=this.decapsulate(J,z),Q=$.getPublicKey(z,!1);return i$(z),{sharedSecret:O,cipherText:Q}},decapsulate(J,G){return $.getSharedSecret(G,J).subarray(1)}}}function pj($,v,g,U){let{secretKey:r,publicKeyUncompressed:I}=g.lengths;if(!r||!I)throw Error("wrong curve");let J=hj(g,r,I,U),G=64,z=G+U;return rJ(32,32,(O)=>{Y$(O,32);let Q=av(O,{dkLen:z}),X=Q.subarray(0,G),N=Q.subarray(G,z);return _$(X,N)},(O,Q,X)=>Yg(_$(X[0],X[1],Q[1],O[1],ir($))),v,J)}var tj=(()=>pj("MLKEM768-P256",YI,rO,128))();var gJ=dj,hY=tj;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,v,g)=>o$($,v,g),NO=C$,eg=A0,h$=(...$)=>Yz(...$),sg=($)=>lU($),$U=Xz,vU=($)=>Xr($),IJ=BigInt(0),wO=BigInt(1);function Mr($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw TypeError(g+"expected boolean, got type="+typeof $)}return $}function JJ($){if(typeof $==="bigint"){if(!UJ($))throw RangeError("positive bigint expected, got "+$)}else NO($);return $}function sv($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(g+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let g=v&&`"${v}" `;throw RangeError(g+"expected safe integer, got "+$)}}function WI($){let v=JJ($).toString(16);return v.length&1?"0"+v:v}function pY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?IJ:BigInt("0x"+$)}function ug($){return pY(A0($))}function mv($){return pY(A0(cr(o$($)).reverse()))}function GJ($,v){if(C$(v),v===0)throw RangeError("zero length");$=JJ($);let g=$.toString(16);if(g.length>v*2)throw RangeError("number too large");return lU(g.padStart(v*2,"0"))}function VI($,v){return GJ($,v).reverse()}function tY($,v){if($=S$($),v=S$(v),$.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function cr($){return Uint8Array.from(S$($))}function zJ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw RangeError(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var UJ=($)=>typeof $==="bigint"&&IJ<=$;function aj($,v,g){return UJ($)&&UJ(v)&&UJ(g)&&v<=$&&$<g}function Rr($,v,g,U){if(!aj(v,g,U))throw RangeError("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function rU($){if($<IJ)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>IJ;$>>=wO,v+=1);return v}var uI=($)=>(wO<<BigInt($))-wO;function aY($,v,g){if(C$($,"hashLen"),C$(v,"qByteLen"),typeof g!=="function")throw TypeError("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,h$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return h$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while((R=S(q()))===void 0)w();return X(),R}}function Bv($,v={},g={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function U(I,J,G){if(!G&&J!=="function"&&!Object.hasOwn($,I))throw TypeError(`param "${I}" is invalid: expected own property`);let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw TypeError(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}var YO=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),f$=BigInt(1),Zg=BigInt(2),vq=BigInt(3),rq=BigInt(4),gq=BigInt(5),ej=BigInt(7),Uq=BigInt(8),sj=BigInt(9),Iq=BigInt(16);function E$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let g=$%v;return g>=p$?g:v+g}function Cv($,v,g){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let U=$;while(v-- >p$)U*=U,U%=g;return U}function eY($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let g=E$($,v),U=v,r=p$,I=f$,J=f$,G=p$;while(g!==p$){let O=U/g,Q=U-g*O,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==f$)throw Error("invert: does not exist");return E$(r,v)}function qO($,v,g){let U=$;if(!U.eql(U.sqr(v),g))throw Error("Cannot find square root")}function Jq($,v){let g=$,U=(g.ORDER+f$)/rq,r=g.pow(v,U);return qO(g,r,v),r}function $M($,v){let g=$,U=(g.ORDER-gq)/Uq,r=g.mul(v,Zg),I=g.pow(r,U),J=g.mul(v,I),G=g.mul(g.mul(J,Zg),I),z=g.mul(J,g.sub(G,g.ONE));return qO(g,z,v),z}function vM($){let v=OJ($),g=Gq($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+ej)/Iq;return(G,z)=>{let O=G,Q=O.pow(z,J),X=O.mul(Q,U),N=O.mul(Q,r),w=O.mul(Q,I),q=O.eql(O.sqr(X),z),u=O.eql(O.sqr(N),z);Q=O.cmov(Q,X,q),X=O.cmov(w,N,u);let W=O.eql(O.sqr(X),z),S=O.cmov(Q,X,W);return qO(O,S,z),S}}function Gq($){if($<vq)throw Error("sqrt is not defined for small field");let v=$-f$,g=0;while(v%Zg===p$)v/=Zg,g++;let U=Zg,r=OJ($);while(sY(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return Jq;let I=r.pow(U,v),J=(v+f$)/Zg;return function(z,O){let Q=z;if(Q.is0(O))return O;if(sY(Q,O)!==1)throw Error("Cannot find square root");let X=g,N=Q.mul(Q.ONE,I),w=Q.pow(O,v),q=Q.pow(O,J);while(!Q.eql(w,Q.ONE)){if(Q.is0(w))return Q.ZERO;let u=1,W=Q.sqr(w);while(!Q.eql(W,Q.ONE))if(u++,W=Q.sqr(W),u===X)throw Error("Cannot find square root");let S=f$<<BigInt(X-u-1),R=Q.pow(N,S);X=u,N=Q.sqr(R),w=Q.mul(w,N),q=Q.mul(q,R)}return q}}function rM($){if($%rq===vq)return Jq;if($%Uq===gq)return $M;if($%Iq===sj)return vM($);return Gq($)}var Kr=($,v)=>(E$($,v)&f$)===f$,gM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function WO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=gM.reduce((U,r)=>{return U[r]="function",U},v);if(Bv($,g),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=f$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function UM($,v,g){let U=$;if(g<p$)throw Error("invalid exponent, negatives unsupported");if(g===p$)return U.ONE;if(g===f$)return v;let r=U.ONE,I=v;while(g>p$){if(g&f$)r=U.mul(r,I);I=U.sqr(I),g>>=f$}return r}function ZI($,v,g=!1){let U=$,r=Array(v.length).fill(g?U.ZERO:void 0),I=v.reduce((G,z,O)=>{if(U.is0(z))return G;return r[O]=G,U.mul(G,z)},U.ONE),J=U.inv(I);return v.reduceRight((G,z,O)=>{if(U.is0(z))return G;return r[O]=U.mul(G,r[O]),U.mul(G,z)},J),r}function sY($,v){let g=$,U=(g.ORDER-f$)/Zg,r=g.pow(v,U),I=g.eql(r,g.ONE),J=g.eql(r,g.ZERO),G=g.eql(r,g.neg(g.ONE));if(!I&&!J&&!G)throw Error("invalid Legendre symbol result");return I?1:J?0:-1}function IM($,v){if(v!==void 0)NO(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let g=rU($);if(v!==void 0&&v<g)throw Error(`invalid n length: expected bit length (${g}) >= n.length (${v})`);let U=v!==void 0?v:g,r=Math.ceil(U/8);return{nBitLength:U,nByteLength:r}}var $q=new WeakMap;class VO{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=f$;_lengths;_mod;constructor($,v={}){if($<=f$)throw Error("invalid field: expected ORDER > 1, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=IM($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,Object.freeze(this)}create($){return E$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&f$)===f$}neg($){return E$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return E$($*$,this.ORDER)}add($,v){return E$($+v,this.ORDER)}sub($,v){return E$($-v,this.ORDER)}mul($,v){return E$($*v,this.ORDER)}pow($,v){return UM(this,$,v)}div($,v){return E$($*eY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return eY($,this.ORDER)}sqrt($){let v=$q.get(this);if(!v)$q.set(this,v=rM(this.ORDER));return v(this,$)}toBytes($){return this.isLE?VI($,this.BYTES):GJ($,this.BYTES)}fromBytes($,v=!1){S$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if($.length<1||!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?mv($):ug($);if(J)G=E$(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return ZI(this,$)}cmov($,v,g){return Mr(g,"condition"),g?v:$}}Object.freeze(VO.prototype);function OJ($,v={}){return new VO($,v)}function zq($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=f$)throw Error("field order must be greater than 1");let v=rU($-f$);return Math.ceil(v/8)}function uO($){let v=zq($);return v+Math.ceil(v/2)}function Oq($,v,g=!1){S$($);let U=$.length,r=zq(v),I=Math.max(uO(v),16);if(U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?mv($):ug($),G=E$(J,v-f$)+f$;return g?VI(G,r):GJ(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gU=BigInt(0),jg=BigInt(1);function jI($,v){let g=v.negate();return $?g:v}function Mg($,v){let g=ZI($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function wq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function ZO($,v){wq($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=uI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function Dq($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=jg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var jO=new WeakMap,Nq=new WeakMap;function MO($){return Nq.get($)||1}function Qq($){if($!==gU)throw Error("invalid wNAF")}class MI{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>gU){if(v&jg)g=g.add(U);U=U.double(),v>>=jg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=ZO(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=ZO($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=Dq(g,J,I);if(g=G,O)r=r.add(jI(X,v[N]));else U=U.add(jI(Q,v[z]))}return Qq(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=ZO($,this.bits);for(let I=0;I<r.windows;I++){if(g===gU)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=Dq(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return Qq(g),U}getPrecomputes($,v,g){let U=jO.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);jO.set(v,U)}}return U}cached($,v,g){let U=MO($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=MO($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){wq(v,this.bits),Nq.set($,v),jO.delete($)}hasCache($){return MO($)!==1}}function Yq($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>gU||U>gU){if(g&jg)I=I.add(r);if(U&jg)J=J.add(r);r=r.double(),g>>=jg,U>>=jg}return{p1:I,p2:J}}function Xq($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return WO(v),v}else return OJ($,{isLE:g})}function DJ($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>gU))throw Error(`CURVE.${z} must be positive bigint`)}let r=Xq(v.p,g.Fp,U),I=Xq(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function RI($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}function KI($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let g=Array.from({length:v}).fill(0);for(let U=v-1;U>=0;U--)g[U]=$&255,$>>>=8;return new Uint8Array(g)}function JM($,v){let g=new Uint8Array($.length);for(let U=0;U<$.length;U++)g[U]=$[U]^v[U];return g}function GM($){if(!$U($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?zJ($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function RO($,v,g,U){if(S$($),sv(g),v=GM(v),v.length>255)v=U(h$(zJ("H2C-OVERSIZE-DST-"),v));let{outputLen:r,blockLen:I}=U,J=Math.ceil(g/r);if(g>65535||J>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,KI(v.length,1)),z=new Uint8Array(I),O=KI(g,2),Q=Array(J),X=U(h$(z,$,O,KI(0,1),G));Q[0]=U(h$(X,KI(1,1),G));for(let w=1;w<J;w++){let q=[JM(X,Q[w-1]),KI(w+1,1),G];Q[w]=U(h$(...q))}return h$(...Q).slice(0,g)}var qq="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wq=($,v)=>($+($>=0?v:-v)/uq)/v;function zM($,v,g){Rr("scalar",$,$r,g);let[[U,r],[I,J]]=v,G=Wq(J*$,g),z=Wq(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<$r,N=Q<$r;if(X)O=-O;if(N)Q=-Q;let w=uI(Math.ceil(rU(g)/2))+lr;if(O<$r||O>=w||Q<$r||Q>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:O,k2neg:N,k2:Q}}function SO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function KO($,v){Bv($);let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if(Mr(g.lowS,"lowS"),Mr(g.prehash,"prehash"),g.format!==void 0)SO(g.format);return g}class Vq extends Error{constructor($=""){super($)}}var Fv={Err:Vq,_tlv:{encode:($,v)=>{let{Err:g}=Fv;if(sv($,"tag"),$<0||$>255)throw new g("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=WI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?WI(r.length/2|128):"";return WI($)+I+r+v},decode($,v){let{Err:g}=Fv;v=S$(v,void 0,"DER data");let U=0;if($<0||$>255)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=Fv;if(JJ($),$<$r)throw new v("integer: negative integers are not allowed");let g=WI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=Fv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ug($)}},toSig($){let{Err:v,_int:g,_tlv:U}=Fv,r=S$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=Fv,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}};Object.freeze(Fv._tlv);Object.freeze(Fv._int);Object.freeze(Fv);var $r=BigInt(0),lr=BigInt(1),uq=BigInt(2),QJ=BigInt(3),OM=BigInt(4);function Zq($,v={}){let g=DJ("weierstrass",$,v),U=g.Fp,r=g.Fn,I=g.CURVE,{h:J,n:G}=I;Bv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z,allowInfinityPoint:O}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let Q=Mq(U,r);function X(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(H,K,P){if(O&&K.is0())return Uint8Array.of(0);let{x:V,y:j}=K.toAffine(),Z=U.toBytes(V);if(Mr(P,"isCompressed"),P){X();let A=!U.isOdd(j);return h$(jq(A),Z)}else return h$(Uint8Array.of(4),Z,U.toBytes(j))}function w(H){S$(H,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=Q,V=H.length,j=H[0],Z=H.subarray(1);if(O&&V===1&&j===0)return{x:U.ZERO,y:U.ZERO};if(V===K&&(j===2||j===3)){let A=U.fromBytes(Z);if(!U.isValid(A))throw Error("bad point: is not on curve, wrong x");let M=W(A),n;try{n=U.sqrt(M)}catch(e){let I$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+I$)}X();let f=U.isOdd(n);if((j&1)===1!==f)n=U.neg(n);return{x:A,y:n}}else if(V===P&&j===4){let A=U.BYTES,M=U.fromBytes(Z.subarray(0,A)),n=U.fromBytes(Z.subarray(A,A*2));if(!S(M,n))throw Error("bad point: is not on curve");return{x:M,y:n}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let q=v.toBytes===void 0?N:v.toBytes,u=v.fromBytes===void 0?w:v.fromBytes;function W(H){let K=U.sqr(H),P=U.mul(K,H);return U.add(U.add(P,U.mul(H,I.a)),I.b)}function S(H,K){let P=U.sqr(K),V=W(H);return U.eql(P,V)}if(!S(I.Gx,I.Gy))throw Error("bad curve params: generator point");let R=U.mul(U.pow(I.a,QJ),OM),L=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(R,L)))throw Error("bad curve params: a or b");function B(H,K,P=!1){if(!U.isValid(K)||P&&U.is0(K))throw Error(`bad point coordinate ${H}`);return K}function F(H){if(!(H instanceof _))throw Error("Weierstrass Point expected")}function l(H){if(!z||!z.basises)throw Error("no endo");return zM(H,z.basises,r.ORDER)}function d(H,K,P,V,j){return P=new _(U.mul(P.X,H),P.Y,P.Z),K=jI(V,K),P=jI(j,P),K.add(P)}class _{static BASE=new _(I.Gx,I.Gy,U.ONE);static ZERO=new _(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(H,K,P){this.X=B("x",H),this.Y=B("y",K,!0),this.Z=B("z",P),Object.freeze(this)}static CURVE(){return I}static fromAffine(H){let{x:K,y:P}=H||{};if(!H||!U.isValid(K)||!U.isValid(P))throw Error("invalid affine point");if(H instanceof _)throw Error("projective point not allowed");if(U.is0(K)&&U.is0(P))return _.ZERO;return new _(K,P,U.ONE)}static fromBytes(H){let K=_.fromAffine(u(S$(H,void 0,"point")));return K.assertValidity(),K}static fromHex(H){return _.fromBytes(sg(H))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(H=8,K=!0){if(v$.createCache(this,H),!K)this.multiply(QJ);return this}assertValidity(){let H=this;if(H.is0()){if(v.allowInfinityPoint&&U.is0(H.X)&&U.eql(H.Y,U.ONE)&&U.is0(H.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=H.toAffine();if(!U.isValid(K)||!U.isValid(P))throw Error("bad point: x or y not field elements");if(!S(K,P))throw Error("bad point: equation left != right");if(!H.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:H}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(H)}equals(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.eql(U.mul(K,A),U.mul(j,V)),n=U.eql(U.mul(P,A),U.mul(Z,V));return M&&n}negate(){return new _(this.X,U.neg(this.Y),this.Z)}double(){let{a:H,b:K}=I,P=U.mul(K,QJ),{X:V,Y:j,Z}=this,A=U.ZERO,M=U.ZERO,n=U.ZERO,f=U.mul(V,V),o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(V,j);return I$=U.add(I$,I$),n=U.mul(V,Z),n=U.add(n,n),A=U.mul(H,n),M=U.mul(P,e),M=U.add(A,M),A=U.sub(o,M),M=U.add(o,M),M=U.mul(A,M),A=U.mul(I$,A),n=U.mul(P,n),e=U.mul(H,e),I$=U.sub(f,e),I$=U.mul(H,I$),I$=U.add(I$,n),n=U.add(f,f),f=U.add(n,f),f=U.add(f,e),f=U.mul(f,I$),M=U.add(M,f),e=U.mul(j,Z),e=U.add(e,e),f=U.mul(e,I$),A=U.sub(A,f),n=U.mul(e,o),n=U.add(n,n),n=U.add(n,n),new _(A,M,n)}add(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=I.a,e=U.mul(I.b,QJ),I$=U.mul(K,j),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.add(K,P),Q$=U.add(j,Z);w$=U.mul(w$,Q$),Q$=U.add(I$,G$),w$=U.sub(w$,Q$),Q$=U.add(K,V);let X$=U.add(j,A);return Q$=U.mul(Q$,X$),X$=U.add(I$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,V),M=U.add(Z,A),X$=U.mul(X$,M),M=U.add(G$,D$),X$=U.sub(X$,M),f=U.mul(o,Q$),M=U.mul(e,D$),f=U.add(M,f),M=U.sub(G$,f),f=U.add(G$,f),n=U.mul(M,f),G$=U.add(I$,I$),G$=U.add(G$,I$),D$=U.mul(o,D$),Q$=U.mul(e,Q$),G$=U.add(G$,D$),D$=U.sub(I$,D$),D$=U.mul(o,D$),Q$=U.add(Q$,D$),I$=U.mul(G$,Q$),n=U.add(n,I$),I$=U.mul(X$,Q$),M=U.mul(w$,M),M=U.sub(M,I$),I$=U.mul(w$,G$),f=U.mul(X$,f),f=U.add(f,I$),new _(M,n,f)}subtract(H){return F(H),this.add(H.negate())}is0(){return this.equals(_.ZERO)}multiply(H){let{endo:K}=v;if(!r.isValidNot0(H))throw RangeError("invalid scalar: out of range");let P,V,j=(Z)=>v$.cached(this,Z,(A)=>Mg(_,A));if(K){let{k1neg:Z,k1:A,k2neg:M,k2:n}=l(H),{p:f,f:o}=j(A),{p:e,f:I$}=j(n);V=o.add(I$),P=d(K.beta,f,e,Z,M)}else{let{p:Z,f:A}=j(H);P=Z,V=A}return Mg(_,[P,V])[0]}multiplyUnsafe(H){let{endo:K}=v,P=this,V=H;if(!r.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$r||P.is0())return _.ZERO;if(V===lr)return P;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:j,k1:Z,k2neg:A,k2:M}=l(V),{p1:n,p2:f}=Yq(_,P,Z,M);return d(K.beta,n,f,j,A)}else return v$.unsafe(P,V)}toAffine(H){let K=this,P=H,{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}isTorsionFree(){let{isTorsionFree:H}=v;if(J===lr)return!0;if(H)return H(_,this);return v$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:H}=v;if(J===lr)return this;if(H)return H(_,this);return this.multiplyUnsafe(J)}isSmallOrder(){if(J===lr)return this.is0();return this.clearCofactor().is0()}toBytes(H=!0){return Mr(H,"isCompressed"),this.assertValidity(),q(_,this,H)}toHex(H=!0){return eg(this.toBytes(H))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=r.BITS,v$=new MI(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function jq($){return Uint8Array.of($?2:3)}function Mq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:g}=$,U=v.randomBytes===void 0?vU:v.randomBytes,r=Object.assign(Mq($.Fp,g),{seed:Math.max(uO(g.ORDER),16)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w){return w=w===void 0?U(r.seed):w,Oq(S$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r,S=g._lengths;if(!$U(w))return;let R=S$(w,void 0,"key").length,L=R===u||R===W,B=R===q||!!S?.includes(R);if(L&&B)return;return L}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=RI(G,z);return Object.freeze(X),Object.freeze(r),Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function Rq($,v,g={}){let U=v;Qr(U),Bv(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let r=g.randomBytes===void 0?vU:g.randomBytes,I=g.hmac===void 0?(j,Z)=>dv(U,j,Z):g.hmac,{Fp:J,Fn:G}=$,{ORDER:z,BITS:O}=G,{keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q}=DM($,g),u={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},W=z*uq+lr<J.ORDER;function S(j){let Z=z>>lr;return j>Z}function R(j,Z){if(!G.isValidNot0(Z))throw Error(`invalid signature ${j}: out of range 1..Point.Fn.ORDER`);return Z}function L(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(j,Z){SO(Z);let A=q.signature,M=Z==="compact"?A:Z==="recovered"?A+1:void 0;return S$(j,M)}class F{r;s;recovery;constructor(j,Z,A){if(this.r=R("r",j),this.s=R("s",Z),A!=null){if(L(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(j,Z=u.format){B(j,Z);let A;if(Z==="der"){let{r:o,s:e}=Fv.toSig(S$(j));return new F(o,e)}if(Z==="recovered")A=j[0],Z="compact",j=j.subarray(1);let M=q.signature/2,n=j.subarray(0,M),f=j.subarray(M,M*2);return new F(G.fromBytes(n),G.fromBytes(f),A)}static fromHex(j,Z){return this.fromBytes(sg(j),Z)}assertRecovery(){let{recovery:j}=this;if(j==null)throw Error("invalid recovery id: must be present");return j}addRecoveryBit(j){return new F(this.r,this.s,j)}recoverPublicKey(j){let{r:Z,s:A}=this,M=this.assertRecovery(),n=M===2||M===3?Z+z:Z;if(!J.isValid(n))throw Error("invalid recovery id: sig.r+curve.n != R.x");let f=J.toBytes(n),o=$.fromBytes(h$(jq((M&1)===0),f)),e=G.inv(n),I$=d(S$(j,void 0,"msgHash")),G$=G.create(-I$*e),D$=G.create(A*e),w$=$.BASE.multiplyUnsafe(G$).add(o.multiplyUnsafe(D$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return S(this.s)}toBytes(j=u.format){if(SO(j),j==="der")return sg(Fv.hexFromSig(this));let{r:Z,s:A}=this,M=G.toBytes(Z),n=G.toBytes(A);if(j==="recovered")return L(),h$(Uint8Array.of(this.assertRecovery()),M,n);return h$(M,n)}toHex(j){return eg(this.toBytes(j))}}Object.freeze(F.prototype),Object.freeze(F);let l=g.bits2int===void 0?function(Z){if(Z.length>8192)throw Error("input is too large");let A=ug(Z),M=Z.length*8-O;return M>0?A>>BigInt(M):A}:g.bits2int,d=g.bits2int_modN===void 0?function(Z){return G.create(l(Z))}:g.bits2int_modN,_=uI(O);function b(j){return Rr("num < 2^"+O,j,$r,_),G.toBytes(j)}function v$(j,Z){return S$(j,void 0,"message"),Z?S$(U(j),void 0,"prehashed message"):j}function H(j,Z,A){let{lowS:M,prehash:n,extraEntropy:f}=KO(A,u);j=v$(j,n);let o=d(j),e=G.fromBytes(Z);if(!G.isValidNot0(e))throw Error("invalid private key");let I$=[b(e),b(o)];if(f!=null&&f!==!1){let Q$=f===!0?r(q.secretKey):f;I$.push(S$(Q$,void 0,"extraEntropy"))}let G$=h$(...I$),D$=o;function w$(Q$){let X$=l(Q$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),P$=$.BASE.multiply(X$).toAffine(),n$=G.create(P$.x);if(n$===$r)return;let a$=G.create(W$*G.create(D$+n$*e));if(a$===$r)return;let e$=(P$.x===n$?0:2)|Number(P$.y&lr),Wv=a$;if(M&&S(a$))Wv=G.neg(a$),e$^=1;return new F(n$,Wv,W?void 0:e$)}return{seed:G$,k2sig:w$}}function K(j,Z,A={}){let{seed:M,k2sig:n}=H(j,Z,A);return aY(U.outputLen,G.BYTES,I)(M,n).toBytes(A.format)}function P(j,Z,A,M={}){let{lowS:n,prehash:f,format:o}=KO(M,u);if(A=S$(A,void 0,"publicKey"),Z=v$(Z,f),!$U(j)){let e=j instanceof F?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}B(j,o);try{let e=F.fromBytes(j,o),I$=$.fromBytes(A);if(n&&e.hasHighS())return!1;let{r:G$,s:D$}=e,w$=d(Z),Q$=G.inv(D$),X$=G.create(w$*Q$),W$=G.create(G$*Q$),P$=$.BASE.multiplyUnsafe(X$).add(I$.multiplyUnsafe(W$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(e){return!1}}function V(j,Z,A={}){let{prehash:M}=KO(A,u);return Z=v$(Z,M),F.fromBytes(j,"recovered").recoverPublicKey(Z).toBytes()}return Object.freeze({keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:F,hash:U})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var XM=Zq(QM),UU=Rq(XM,L$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yr=BigInt(0),uv=BigInt(1),TO=BigInt(2),wM=BigInt(8);function NM($,v,g,U){let r=$.sqr(g),I=$.sqr(U),J=$.add($.mul(v.a,r),I),G=$.add($.ONE,$.mul(v.d,$.mul(r,I)));return $.eql(J,G)}function Kq($,v={}){let g=v,U=DJ("edwards",$,g,g.FpFnLE),{Fp:r,Fn:I}=U,J=U.CURVE,{h:G}=J;Bv(g,{},{uvRatio:"function"});let z=TO<<BigInt(I.BYTES*8)-uv,O=(u)=>r.create(u),Q=g.uvRatio===void 0?(u,W)=>{try{return{isValid:!0,value:r.sqrt(r.div(u,W))}}catch(S){return{isValid:!1,value:yr}}}:g.uvRatio;if(!NM(r,J,J.Gx,J.Gy))throw Error("bad curve params: generator point");function X(u,W,S=!1){let R=S?uv:yr;return Rr("coordinate "+u,W,R,z),W}function N(u){if(!(u instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(J.Gx,J.Gy,uv,O(J.Gx*J.Gy));static ZERO=new w(yr,uv,uv,yr);static Fp=r;static Fn=I;X;Y;Z;T;constructor(u,W,S,R){this.X=X("x",u),this.Y=X("y",W),this.Z=X("z",S,!0),this.T=X("t",R),Object.freeze(this)}static CURVE(){return J}static fromAffine(u){if(u instanceof w)throw Error("extended point not allowed");let{x:W,y:S}=u||{};return X("x",W),X("y",S),new w(W,S,uv,O(W*S))}static fromBytes(u,W=!1){let S=r.BYTES,{a:R,d:L}=J;u=cr(S$(u,S,"point")),Mr(W,"zip215");let B=cr(u),F=u[S-1];B[S-1]=F&-129;let l=mv(B),d=W?z:r.ORDER;Rr("point.y",l,yr,d);let _=O(l*l),b=O(_-uv),v$=O(L*_-R),{isValid:H,value:K}=Q(b,v$);if(!H)throw Error("bad point: invalid y coordinate");let P=(K&uv)===uv,V=(F&128)!==0;if(!W&&K===yr&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=O(-K);return w.fromAffine({x:K,y:l})}static fromHex(u,W=!1){return w.fromBytes(sg(u),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(u=8,W=!0){if(q.createCache(this,u),!W)this.multiply(TO);return this}assertValidity(){let u=this,{a:W,d:S}=J;if(u.is0())throw Error("bad point: ZERO");let{X:R,Y:L,Z:B,T:F}=u,l=O(R*R),d=O(L*L),_=O(B*B),b=O(_*_),v$=O(l*W),H=O(_*O(v$+d)),K=O(b+O(S*O(l*d)));if(H!==K)throw Error("bad point: equation left != right (1)");let P=O(R*L),V=O(B*F);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(u){N(u);let{X:W,Y:S,Z:R}=this,{X:L,Y:B,Z:F}=u,l=O(W*F),d=O(L*R),_=O(S*F),b=O(B*R);return l===d&&_===b}is0(){return this.equals(w.ZERO)}negate(){return new w(O(-this.X),this.Y,this.Z,O(-this.T))}double(){let{a:u}=J,{X:W,Y:S,Z:R}=this,L=O(W*W),B=O(S*S),F=O(TO*O(R*R)),l=O(u*L),d=W+S,_=O(O(d*d)-L-B),b=l+B,v$=b-F,H=l-B,K=O(_*v$),P=O(b*H),V=O(_*H),j=O(v$*b);return new w(K,P,j,V)}add(u){N(u);let{a:W,d:S}=J,{X:R,Y:L,Z:B,T:F}=this,{X:l,Y:d,Z:_,T:b}=u,v$=O(R*l),H=O(L*d),K=O(F*S*b),P=O(B*_),V=O((R+L)*(l+d)-v$-H),j=P-K,Z=P+K,A=O(H-W*v$),M=O(V*j),n=O(Z*A),f=O(V*A),o=O(j*Z);return new w(M,n,o,f)}subtract(u){return N(u),this.add(u.negate())}multiply(u){if(!I.isValidNot0(u))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:S}=q.cached(this,u,(R)=>Mg(w,R));return Mg(w,[W,S])[0]}multiplyUnsafe(u){if(!I.isValid(u))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(u===yr)return w.ZERO;if(this.is0()||u===uv)return this;return q.unsafe(this,u,(W)=>Mg(w,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return q.unsafe(this,J.n).is0()}toAffine(u){let W=this,S=u,{X:R,Y:L,Z:B}=W,F=W.is0();if(S==null)S=F?wM:r.inv(B);let l=O(R*S),d=O(L*S),_=r.mul(B,S);if(F)return{x:yr,y:uv};if(_!==uv)throw Error("invZ was invalid");return{x:l,y:d}}clearCofactor(){if(G===uv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:u,y:W}=this.toAffine(),S=r.toBytes(W);return S[S.length-1]|=u&uv?128:0,S}toHex(){return eg(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let q=new MI(w,I.BITS);if(I.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class AO{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){YO()}static fromHex($){YO()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eg(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SI=BigInt(0),IU=BigInt(1),XJ=BigInt(2);function YM($){return Bv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Sq($){let v=YM($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J===void 0?vU:J,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?XJ**BigInt(254):XJ**BigInt(447),q=G?BigInt(8)*XJ**BigInt(251)-IU:BigInt(4)*XJ**BigInt(445)-IU,u=w+q+IU,W=(V)=>E$(V,g),S=R(X);function R(V){return VI(W(V),Q)}function L(V){let j=cr(S$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(mv(j))}function B(V){return mv(r(cr(S$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===SI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){Rr("u",V,SI,g),Rr("scalar",j,w,u);let Z=j,A=V,M=IU,n=SI,f=V,o=IU,e=SI;for(let G$=BigInt(O-1);G$>=SI;G$--){let D$=Z>>G$&IU;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V)=>{return V=V===void 0?z(Q):V,S$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(H),Object.freeze(P),Object.freeze({keygen:RI(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qM=BigInt(0),Sr=BigInt(1),Tq=BigInt(2),WM=BigInt(3),VM=BigInt(5),uM=BigInt(8),Kg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),nO=(()=>({p:Kg,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:uM,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Pq($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=Kg,G=$*$%I*$%I,z=Cv(G,Tq,I)*G%I,O=Cv(z,Sr,I)*$%I,Q=Cv(O,VM,I)*O%I,X=Cv(Q,v,I)*Q%I,N=Cv(X,g,I)*X%I,w=Cv(N,U,I)*N%I,q=Cv(w,r,I)*w%I,u=Cv(q,r,I)*w%I,W=Cv(u,v,I)*Q%I;return{pow_p_5_8:Cv(W,Tq,I)*$%I,b2:G}}function ZM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var HO=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function EO($,v){let g=Kg,U=E$(v*v*v,g),r=E$(U*U*v,g),I=Pq($*r).pow_p_5_8,J=E$($*U*I,g),G=E$(v*J*J,g),z=J,O=E$(J*HO,g),Q=G===$,X=G===E$(-$,g),N=G===E$(-$*HO,g);if(Q)J=z;if(X||N)J=O;if(Kr(J,g))J=E$(-J,g);return{isValid:Q||X,value:J}}var Rg=Kq(nO,{uvRatio:EO}),dr=(()=>Rg.Fp)(),kq=(()=>Rg.Fn)();var wJ=(()=>{let $=Kg;return Sq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Pq(v);return E$(Cv(g,WM,$)*U,$)},adjustScalarBytes:ZM})})();var PO=HO,jM=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),MM=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),RM=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),KM=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Aq=($)=>EO(Sr,$),SM=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),kO=($)=>dr.create(mv($)&SM);function Hq($){let{d:v}=nO,g=Kg,U=(S)=>dr.create(S),r=U(PO*$*$),I=U((r+Sr)*RM),J=BigInt(-1),G=U((J-v*r)*U(r+v)),{isValid:z,value:O}=EO(I,G),Q=U(O*$);if(!Kr(Q,g))Q=U(-Q);if(!z)O=Q;if(!z)J=r;let X=U(J*(r-Sr)*KM-G),N=O*O,w=U((O+O)*G),q=U(X*jM),u=U(Sr-N),W=U(Sr+N);return new Rg(U(w*W),U(u*q),U(q*W),U(w*u))}class Qv extends AO{static BASE=(()=>new Qv(Rg.BASE))();static ZERO=(()=>new Qv(Rg.ZERO))();static Fp=(()=>dr)();static Fn=(()=>kq)();constructor($){super($)}static fromAffine($){return new Qv(Rg.fromAffine($))}assertSame($){if(!($ instanceof Qv))throw Error("RistrettoPoint expected")}init($){return new Qv($)}static fromBytes($){o$($,32);let{a:v,d:g}=nO,U=Kg,r=(L)=>dr.create(L),I=kO($);if(!tY(dr.toBytes(I),$)||Kr(I,U))throw Error("invalid ristretto255 encoding 1");let J=r(I*I),G=r(Sr+v*J),z=r(Sr-v*J),O=r(G*G),Q=r(z*z),X=r(v*g*O-Q),{isValid:N,value:w}=Aq(r(X*Q)),q=r(w*z),u=r(w*q*X),W=r((I+I)*q);if(Kr(W,U))W=r(-W);let S=r(G*u),R=r(W*S);if(!N||Kr(R,U)||S===qM)throw Error("invalid ristretto255 encoding 2");return new Qv(new Rg(W,S,Sr,R))}static fromHex($){return Qv.fromBytes(lU($))}toBytes(){let{X:$,Y:v,Z:g,T:U}=this.ep,r=Kg,I=(u)=>dr.create(u),J=I(I(g+v)*I(g-v)),G=I($*v),z=I(G*G),{value:O}=Aq(I(J*z)),Q=I(O*J),X=I(O*G),N=I(Q*X*U),w;if(Kr(U*N,r)){let u=I(v*PO),W=I($*PO);$=u,v=W,w=I(Q*MM)}else w=X;if(Kr($*N,r))v=I(-v);let q=I((g-v)*w);if(Kr(q,r))q=I(-q);return dr.toBytes(q)}equals($){this.assertSame($);let{X:v,Y:g}=this.ep,{X:U,Y:r}=$.ep,I=(z)=>dr.create(z),J=I(v*r)===I(g*U),G=I(g*r)===I(v*U);return J||G}is0(){return this.equals(Qv.ZERO)}}Object.freeze(Qv.BASE);Object.freeze(Qv.ZERO);Object.freeze(Qv.prototype);Object.freeze(Qv);var TM=Object.freeze({Point:Qv,hashToCurve($,v){let g=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,U=RO($,g,64,n0);return TM.deriveToCurve(U)},hashToScalar($,v={DST:qq}){let g=RO($,v.DST,64,n0);return kq.create(mv(g))},deriveToCurve($){o$($,64);let v=kO($.subarray(0,32)),g=Hq(v),U=kO($.subarray(32,64)),r=Hq(U);return new Qv(g.add(r))}});var nq=!1,AM=!1;async function Eq($,v){if(AM)return await v();try{return await $()}catch(g){if(g instanceof ReferenceError||g instanceof DOMException&&g.name==="NotSupportedError")return await v();else throw g}}async function NJ($,v){return await Eq(async()=>{let g=fO($)?$:await PM($),U=await crypto.subtle.importKey("raw",kM(v),{name:"X25519"},nq,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:U},g,256))},()=>{if(fO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMult($,v)})}async function TI($){return await Eq(async()=>{return NJ($,wJ.GuBytes)},()=>{if(fO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMultBase($)})}var HM=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function PM($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...HM,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},nq,["deriveBits"])}function fO($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function kM($){return $}class BO{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),EM(Sg($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let g=await this.s.read();if(g.done)return this.buf=Sg($),null;this.buf=g.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Sg(this.transcript)}}}function EM($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function Sg($){let v=$.reduce((r,I)=>r+I.length,0),g=new Uint8Array(v),U=0;for(let r of $)g.set(r,U),U+=r.length;return g}function JU($,...v){return $.pipeThrough(new TransformStream({start(g){for(let U of v)g.enqueue(U)}}))}function YJ($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function CO($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fq($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function Bq($,v){let g=$.getReader(),U=[],r=0;while(r<v){let{done:z,value:O}=await g.read();if(z)throw Error("stream ended before reading "+v.toString()+" bytes");U.push(O),r+=O.length}g.releaseLock();let I=Sg(U),J=I.subarray(0,v),G=JU($,I.subarray(v));return{data:J,rest:G}}class vr{args;body;constructor($,v){this.args=$,this.body=v}}async function fM($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let g=v.split(" ");if(g.length<2||g.shift()!=="->")return{next:v};for(let I of g)if(I.length===0)throw Error("invalid stanza");let U=[];for(;;){let I=await $.readLine();if(I===null)throw Error("invalid stanza");let J=vv.decode(I);if(J.length>48)throw Error("invalid stanza");if(U.push(J),J.length<48)break}let r=Sg(U);return{s:new vr(g,r)}}async function Cq($){let v=new BO($),g=await v.readLine();if(g!=="age-encryption.org/v1")throw Error("invalid version "+(g??"line"));let U=[];for(;;){let{s:r,next:I}=await fM(v);if(r!==void 0){U.push(r);continue}if(!I.startsWith("--- "))throw Error("invalid header");let J=vv.decode(I.slice(4)),{rest:G,transcript:z}=v.close(),O=z.slice(0,z.length-1-I.length+3);return{stanzas:U,headerNoMAC:O,MAC:J,headerSize:z.length,rest:JU($,G)}}}function LO($){let v=[];v.push(`age-encryption.org/v1
+var gZ=Object.defineProperty;var UZ=($)=>$;function IZ($,v){this[$]=UZ.bind(null,v)}var yv=($,v)=>{for(var g in v)gZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:IZ.bind(v,g)})};import{parseArgs as JZ}from"util";var GZ={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function Qz($,v){let g=$[v];return typeof g==="boolean"?g:void 0}function R0($,v){let g=$[v];return typeof g==="string"?g:void 0}function mw($){let{values:v,positionals:g}=JZ({args:$,options:GZ,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:g[0]??"help",args:g.slice(1),flags:{help:Qz(v,"help"),version:Qz(v,"version"),dryRun:Qz(v,"dry-run"),pushTo:R0(v,"push-to"),cohort:R0(v,"cohort"),anchorId:R0(v,"anchor-id"),handle:R0(v,"handle")}}}var K0={name:"@rizom/ops",version:"0.2.0-alpha.179",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as cM,mkdirSync as lM,readFileSync as sO,writeFileSync as $8}from"fs";import{dirname as yM,join as cq}from"path";function Xz($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(`${g}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw RangeError(`${g}expected integer >= 0, got ${$}`)}}function o$($,v,g=""){let U=Xz($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function Qr($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function mg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function S0($,v){o$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw RangeError('"digestInto() output" expected to be of length >='+g)}function T0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Fg($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function M$($,v){return $<<v|$>>>32-v>>>0}var OZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function DZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function QZ($){for(let v=0;v<$.length;v++)$[v]=DZ($[v]);return $}var wz=OZ?($)=>$:QZ,ow=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),XZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function A0($){if(o$($),ow)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=XZ[$[g]];return v}var Dr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Fw($){if($>=Dr._0&&$<=Dr._9)return $-Dr._0;if($>=Dr.A&&$<=Dr.F)return $-(Dr.A-10);if($>=Dr.a&&$<=Dr.f)return $-(Dr.a-10);return}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(ow)try{return Uint8Array.fromHex($)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let v=$.length,g=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=Fw($.charCodeAt(I)),G=Fw($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw RangeError('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function wZ($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Nz($,v=""){if(typeof $==="string")return wZ($);return o$($,void 0,v)}function Yz(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];o$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function H0($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function qz($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.canXOF=U.canXOF,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Xr($=32){C$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var Wz=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Vz{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Qr($),o$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),zv(U)}update($){return mg(this),this.iHash.update($),this}digestInto($){mg(this),S0($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,g,U)=>new Vz(v,g).update(U).digest();return $.create=(v,g)=>new Vz(v,g),$})();function yU($,v,g){if(Qr($),g===void 0)g=new Uint8Array($.outputLen);return dv($,g,v)}var uz=Uint8Array.of(0),xw=Uint8Array.of();function Zz($,v,g,U=32){Qr($),C$(U,"length"),o$(v,void 0,"prk");let r=$.outputLen;if(v.length<r)throw Error('"prk" must be at least HashLen octets');if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=xw;else o$(g,void 0,"info");let J=new Uint8Array(I*r),G=dv.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)uz[0]=Q+1,z.update(Q===0?xw:O).update(g).update(uz).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),zv(O,uz),J.slice(0,U)}var kr=($,v,g,U,r)=>Zz($,yU($,v,g),U,r);function cw($,v,g){return $&v^~$&g}function lw($,v,g){return $&v^$&g^v&g}class P0{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=Fg(this.buffer)}update($){mg(this),o$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=Fg($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){mg(this),S0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,zv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=Fg($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var wr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),x$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var k0=BigInt(4294967295),yw=BigInt(32);function NZ($,v=!1){if(v)return{h:Number($&k0),l:Number($>>yw&k0)};return{h:Number($>>yw&k0)|0,l:Number($&k0)|0}}function dw($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=NZ($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var jz=($,v,g)=>$>>>g,Mz=($,v,g)=>$<<32-g|v>>>g,Ig=($,v,g)=>$>>>g|v<<32-g,Jg=($,v,g)=>$<<32-g|v>>>g,dU=($,v,g)=>$<<64-g|v>>>g-32,hU=($,v,g)=>$>>>g-32|v<<64-g;function hv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var hw=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),pw=($,v,g,U)=>v+g+U+($/4294967296|0)|0,tw=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),aw=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,ew=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),sw=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var qZ=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nr=new Uint32Array(64);class Rz extends P0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)nr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=nr[Q-15],N=nr[Q-2],w=_v(X,7)^_v(X,18)^X>>>3,q=_v(N,17)^_v(N,19)^N>>>10;nr[Q]=q+nr[Q-7]+w+nr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=_v(J,6)^_v(J,11)^_v(J,25),N=O+X+cw(J,G,z)+qZ[Q]+nr[Q]|0,q=(_v(g,2)^_v(g,13)^_v(g,22))+lw(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){zv(nr)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),zv(this.buffer)}}class $N extends Rz{A=wr[0]|0;B=wr[1]|0;C=wr[2]|0;D=wr[3]|0;E=wr[4]|0;F=wr[5]|0;G=wr[6]|0;H=wr[7]|0;constructor(){super(32)}}class WZ extends Rz{A=Nr[0]|0;B=Nr[1]|0;C=Nr[2]|0;D=Nr[3]|0;E=Nr[4]|0;F=Nr[5]|0;G=Nr[6]|0;H=Nr[7]|0;constructor(){super(28)}}var vN=(()=>dw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),VZ=(()=>vN[0])(),uZ=(()=>vN[1])(),Er=new Uint32Array(80),fr=new Uint32Array(80);class pU extends P0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)Er[R]=$.getUint32(v),fr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=Er[R-15]|0,B=fr[R-15]|0,F=Ig(L,B,1)^Ig(L,B,8)^jz(L,B,7),l=Jg(L,B,1)^Jg(L,B,8)^Mz(L,B,7),d=Er[R-2]|0,_=fr[R-2]|0,b=Ig(d,_,19)^dU(d,_,61)^jz(d,_,6),v$=Jg(d,_,19)^hU(d,_,61)^Mz(d,_,6),H=tw(l,v$,fr[R-7],fr[R-16]),K=aw(H,F,b,Er[R-7],Er[R-16]);Er[R]=K|0,fr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=Ig(Q,X,14)^Ig(Q,X,18)^dU(Q,X,41),B=Jg(Q,X,14)^Jg(Q,X,18)^hU(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=ew(S,B,l,uZ[R],fr[R]),_=sw(d,W,L,F,VZ[R],Er[R]),b=d|0,v$=Ig(g,U,28)^dU(g,U,34)^dU(g,U,39),H=Jg(g,U,28)^hU(g,U,34)^hU(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=hv(z|0,O|0,_|0,b|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=hw(b,H,P);g=pw(V,_,v$,K),U=V|0}({h:g,l:U}=hv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=hv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=hv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=hv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=hv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=hv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=hv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=hv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){zv(Er,fr)}destroy(){this.destroyed=!0,zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class rN extends pU{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class ZZ extends pU{Ah=x$[0]|0;Al=x$[1]|0;Bh=x$[2]|0;Bl=x$[3]|0;Ch=x$[4]|0;Cl=x$[5]|0;Dh=x$[6]|0;Dl=x$[7]|0;Eh=x$[8]|0;El=x$[9]|0;Fh=x$[10]|0;Fl=x$[11]|0;Gh=x$[12]|0;Gl=x$[13]|0;Hh=x$[14]|0;Hl=x$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class jZ extends pU{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class MZ extends pU{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var L$=qz(()=>new $N,Wz(1));var n0=qz(()=>new rN,Wz(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L0($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Tz($){if(!L0($))throw TypeError("Uint8Array expected")}function GN($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((g)=>typeof g==="string");else return v.every((g)=>Number.isSafeInteger(g))}function zN($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Br($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aU($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function f0($){if(!Array.isArray($))throw TypeError("array expected")}function B0($,v){if(!GN(!0,v))throw TypeError(`${$}: array of strings expected`)}function Az($,v){if(!GN(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Rv(...$){let v=(I)=>I,g=(I,J)=>(G)=>I(J(G)),U=$.map((I)=>I.encode).reduceRight(g,v),r=$.map((I)=>I.decode).reduce(g,v);return{encode:U,decode:r}}function Kv($){let v=typeof $==="string"?$.split(""):$,g=v.length;B0("alphabet",v);let U=new Map(v.map((r,I)=>[r,I]));return{encode:(r)=>{return f0(r),r.map((I)=>{if(!Number.isSafeInteger(I)||I<0||I>=g)throw Error(`alphabet.encode: digit index outside alphabet "${I}". Allowed: ${$}`);return v[I]})},decode:(r)=>{return f0(r),r.map((I)=>{Br("alphabet.decode",I);let J=U.get(I);if(J===void 0)throw Error(`Unknown letter: "${I}". Allowed: ${$}`);return J})}}}function Sv($=""){return Br("join",$),{encode:(v)=>{return B0("join.decode",v),v.join($)},decode:(v)=>{return Br("join.decode",v),v.split($)}}}function _0($,v="="){return aU($),Br("padding",v),{encode(g){B0("padding.encode",g);while(g.length*$%8)g.push(v);return g},decode(g){B0("padding.decode",g);let U=g.length;if(U*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;U>0&&g[U-1]===v;U--)if((U-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return g.slice(0,U)}}}function ON($){return zN($),{encode:(v)=>v,decode:(v)=>$(v)}}function gN($,v,g){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(g<2)throw RangeError(`convertRadix: invalid to=${g}, base cannot be less than 2`);if(f0($),!$.length)return[];let U=0,r=[],I=Array.from($,(G)=>{if(aU(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),J=I.length;while(!0){let G=0,z=!0;for(let O=U;O<J;O++){let Q=I[O],X=v*G,N=X+Q;if(!Number.isSafeInteger(N)||X/v!==G||N-Q!==X)throw Error("convertRadix: carry overflow");let w=N/g;G=N%g;let q=Math.floor(w);if(I[O]=q,!Number.isSafeInteger(q)||q*g+G!==N)throw Error("convertRadix: carry overflow");if(!z)continue;else if(!q)U=O;else z=!1}if(r.push(G),z)break}for(let G=0;G<$.length-1&&$[G]===0;G++)r.push(0);return r.reverse()}var DN=($,v)=>v===0?$:DN(v,$%v),C0=($,v)=>$+(v-DN($,v)),E0=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function Kz($,v,g,U){if(f0($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(g<=0||g>32)throw RangeError(`convertRadix2: wrong to=${g}`);if(C0(v,g)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${g} carryBits=${C0(v,g)}`);let r=0,I=0,J=E0[v],G=E0[g]-1,z=[];for(let O of $){if(aU(O),O>=J)throw Error(`convertRadix2: invalid data word=${O} from=${v}`);if(r=r<<v|O,I+v>32)throw Error(`convertRadix2: carry overflow pos=${I} from=${v}`);I+=v;for(;I>=g;I-=g)z.push((r>>I-g&G)>>>0);let Q=E0[I];if(Q===void 0)throw Error("invalid carry");r&=Q-1}if(r=r<<g-I&G,!U&&I>=v)throw Error("Excess padding");if(!U&&r>0)throw Error(`Non-zero padding: ${r}`);if(U&&I>0)z.push(r>>>0);return z}function RZ($){aU($);let v=256;return{encode:(g)=>{if(!L0(g))throw TypeError("radix.encode input should be Uint8Array");return gN(Array.from(g),v,$)},decode:(g)=>{return Az("radix.decode",g),Uint8Array.from(gN(g,$,v))}}}function kv($,v=!1){if(aU($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(C0(8,$)>32||C0($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(g)=>{if(!L0(g))throw TypeError("radix2.encode input should be Uint8Array");return Kz(Array.from(g),8,$,!v)},decode:(g)=>{return Az("radix2.decode",g),Uint8Array.from(Kz(g,$,8,v))}}}function UN($){return zN($),function(...v){try{return $.apply(null,v)}catch(g){}}}var lS=Object.freeze(Rv(kv(4),Kv("0123456789ABCDEF"),Sv(""))),yS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),_0(5),Sv(""))),dS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Sv(""))),hS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),_0(5),Sv(""))),pS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Sv(""))),tS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Sv(""),ON(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),QN=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),KZ=/[\t\n\f\r ]/,XN=($,v)=>{Br("base64",$);let g=v?"base64url":"base64";if($.length>0&&KZ.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:g,lastChunkHandling:"strict"})},Hz=Object.freeze(QN?{encode($){return Tz($),$.toBase64()},decode($){return XN($,!1)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),_0(6),Sv(""))),vv=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Sv(""))),aS=Object.freeze(QN?{encode($){return Tz($),$.toBase64({alphabet:"base64url"})},decode($){return XN($,!0)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),_0(6),Sv(""))),eS=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Sv(""))),Pz=($)=>Rv(RZ(58),Kv($),Sv("")),sS=Object.freeze(Pz("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),$T=Object.freeze(Pz("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),vT=Object.freeze(Pz("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Sz=Rv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Sv("")),IN=[996825010,642813549,513874426,1027748829,705979059];function tU($){let v=$>>25,g=($&33554431)<<5;for(let U=0;U<IN.length;U++)if((v>>U&1)===1)g^=IN[U];return g}function JN($,v,g=1){let U=$.length,r=1;for(let I=0;I<U;I++){let J=$.charCodeAt(I);if(J<33||J>126)throw Error(`Invalid prefix (${$})`);r=tU(r)^J>>5}r=tU(r);for(let I=0;I<U;I++)r=tU(r)^$.charCodeAt(I)&31;for(let I of v)r=tU(r)^I;for(let I=0;I<6;I++)r=tU(r);return r^=g,Sz.encode(Kz([r%E0[30]],30,5,!1))}function wN($){let v=$==="bech32"?1:734539939,g=kv(5),U=g.decode,r=g.encode,I=UN(U);function J(X,N,w=90){if(Br("bech32.encode prefix",X),L0(N))N=Array.from(N);Az("bech32.encode",N);let q=X.length;if(q===0)throw TypeError(`Invalid prefix length ${q}`);let u=q+7+N.length;if(w!==!1&&u>w)throw TypeError(`Length ${u} exceeds limit ${w}`);let W=X.toLowerCase(),S=JN(W,N,v);return`${W}1${Sz.encode(N)}${S}`}function G(X,N=90){Br("bech32.decode input",X);let w=X.length;if(w<8||N!==!1&&w>N)throw TypeError(`invalid string length: ${w} (${X}). Expected (8..${N})`);let q=X.toLowerCase();if(X!==q&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let u=q.lastIndexOf("1");if(u===0||u===-1)throw Error('Letter "1" must be present between prefix and data only');let W=q.slice(0,u),S=q.slice(u+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let R=Sz.decode(S).slice(0,-6),L=JN(W,R,v);if(!S.endsWith(L))throw Error(`Invalid checksum in ${X}: expected "${L}"`);return{prefix:W,words:R}}let z=UN(G);function O(X){let{prefix:N,words:w}=G(X,!1);return{prefix:N,words:w,bytes:U(w)}}function Q(X,N){return J(X,r(N))}return{encode:J,decode:G,encodeFromBytes:Q,decodeToBytes:O,decodeUnsafe:z,fromWords:U,fromWordsUnsafe:I,toWords:r}}var Tv=Object.freeze(wN("bech32")),rT=Object.freeze(wN("bech32m"));var SZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),TZ={encode($){return Tz($),$.toHex()},decode($){return Br("hex",$),Uint8Array.fromHex($)}},gT=Object.freeze(SZ?TZ:Rv(kv(4),Kv("0123456789abcdef"),Sv(""),ON(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function HZ($,v,g,U){Qr($);let r=H0({dkLen:32,asyncTick:10},U),{c:I,dkLen:J,asyncTick:G}=r;if(C$(I,"c"),C$(J,"dkLen"),C$(G,"asyncTick"),I<1)throw Error("iterations (c) must be >= 1");if(J<1)throw Error('"dkLen" must be >= 1');if(J>4294967295*$.outputLen)throw Error("derived key too long");let z=Nz(v,"password"),O=Nz(g,"salt"),Q=new Uint8Array(J),X=dv.create($,z),N=X._cloneInto().update(O);return{c:I,dkLen:J,asyncTick:G,DK:Q,PRF:X,PRFSalt:N}}function PZ($,v,g,U,r){if($.destroy(),v.destroy(),U)U.destroy();return zv(r),g}function kz($,v,g,U){let{c:r,dkLen:I,DK:J,PRF:G,PRFSalt:z}=HZ($,v,g,U),O,Q=new Uint8Array(4),X=Fg(Q),N=new Uint8Array(G.outputLen);for(let w=1,q=0;q<I;w++,q+=G.outputLen){let u=J.subarray(q,q+G.outputLen);X.setInt32(0,w,!1),(O=z._cloneInto(O)).update(Q).digestInto(N),u.set(N.subarray(0,u.length));for(let W=1;W<r;W++){G._cloneInto(O).update(N).digestInto(N);for(let S=0;S<u.length;S++)u[S]^=N[S]}}return PZ(G,z,J,O,N)}function NN($,v,g,U,r,I){let J=$[v++]^g[U++],G=$[v++]^g[U++],z=$[v++]^g[U++],O=$[v++]^g[U++],Q=$[v++]^g[U++],X=$[v++]^g[U++],N=$[v++]^g[U++],w=$[v++]^g[U++],q=$[v++]^g[U++],u=$[v++]^g[U++],W=$[v++]^g[U++],S=$[v++]^g[U++],R=$[v++]^g[U++],L=$[v++]^g[U++],B=$[v++]^g[U++],F=$[v++]^g[U++],l=J,d=G,_=z,b=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let e=0;e<8;e+=2)v$^=M$(l+M|0,7),V^=M$(v$+l|0,9),M^=M$(V+v$|0,13),l^=M$(M+V|0,18),j^=M$(H+d|0,7),n^=M$(j+H|0,9),d^=M$(n+j|0,13),H^=M$(d+n|0,18),f^=M$(Z+K|0,7),_^=M$(f+Z|0,9),K^=M$(_+f|0,13),Z^=M$(K+_|0,18),b^=M$(o+A|0,7),P^=M$(b+o|0,9),A^=M$(P+b|0,13),o^=M$(A+P|0,18),d^=M$(l+b|0,7),_^=M$(d+l|0,9),b^=M$(_+d|0,13),l^=M$(b+_|0,18),K^=M$(H+v$|0,7),P^=M$(K+H|0,9),v$^=M$(P+K|0,13),H^=M$(v$+P|0,18),A^=M$(Z+j|0,7),V^=M$(A+Z|0,9),j^=M$(V+A|0,13),Z^=M$(j+V|0,18),M^=M$(o+f|0,7),n^=M$(M+o|0,9),f^=M$(n+M|0,13),o^=M$(f+n|0,18);r[I++]=J+l|0,r[I++]=G+d|0,r[I++]=z+_|0,r[I++]=O+b|0,r[I++]=Q+v$|0,r[I++]=X+H|0,r[I++]=N+K|0,r[I++]=w+P|0,r[I++]=q+V|0,r[I++]=u+j|0,r[I++]=W+Z|0,r[I++]=S+A|0,r[I++]=R+M|0,r[I++]=L+n|0,r[I++]=B+f|0,r[I++]=F+o|0}function nz($,v,g,U,r){let I=U+0,J=U+16*r;for(let G=0;G<16;G++)g[J+G]=$[v+(2*r-1)*16+G];for(let G=0;G<r;G++,I+=16,v+=16){if(NN(g,J,$,v,g,I),G>0)J+=16;NN(g,I,$,v+=16,g,J)}}function kZ($,v,g){let U=H0({dkLen:32,asyncTick:10,maxmem:1073742848},g),{N:r,r:I,p:J,dkLen:G,asyncTick:z,maxmem:O,onProgress:Q}=U;if(C$(r,"N"),C$(I,"r"),C$(J,"p"),C$(G,"dkLen"),C$(z,"asyncTick"),C$(O,"maxmem"),Q!==void 0&&typeof Q!=="function")throw Error("progressCb must be a function");let X=128*I,N=X/4,w=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(J<1||J>(w-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let q=X*(r+J+1);if(q>O)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+q+", maxmem="+O);let u=kz(L$,$,v,{c:1,dkLen:X*J}),W=T0(u),S=T0(new Uint8Array(X*r)),R=T0(new Uint8Array(X)),L=()=>{};if(Q){let B=2*r*J,F=Math.max(Math.floor(B/1e4),1),l=0;L=()=>{if(l++,Q&&(!(l%F)||l===B))Q(l/B)}}return{N:r,r:I,p:J,dkLen:G,blockSize32:N,V:S,B32:W,B:u,tmp:R,blockMixCb:L,asyncTick:z}}function nZ($,v,g,U,r){let I=kz(L$,$,g,{c:1,dkLen:v});return zv(g,U,r),I}function Ez($,v,g){let{N:U,r,p:I,dkLen:J,blockSize32:G,V:z,B32:O,B:Q,tmp:X,blockMixCb:N}=kZ($,v,g);wz(O);for(let w=0;w<I;w++){let q=G*w;for(let u=0;u<G;u++)z[u]=O[q+u];for(let u=0,W=0;u<U-1;u++)nz(z,W,z,W+=G,r),N();nz(z,(U-1)*G,O,q,r),N();for(let u=0;u<U;u++){let W=(O[q+G-16]&U-1)>>>0;for(let S=0;S<G;S++)X[S]=O[q+S]^z[W*G+S];nz(X,0,O,q,r),N()}}return wz(O),nZ($,J,Q,z,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function EZ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function b0($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function og($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,g=""){let U=EZ($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`,O=J+"expected Uint8Array"+G+", got "+z;if(!U)throw TypeError(O);throw RangeError(O)}return $}function fz($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function YN($,v,g=!1){b$($,void 0,"output");let U=v.outputLen;if($.length<U)throw RangeError("digestInto() expects output buffer of length at least "+U);if(g&&!xg($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fZ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Gg=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),BZ=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var CZ=($)=>{for(let v=0;v<$.length;v++)$[v]=BZ($[v]);return $},Yr=Gg?($)=>$:CZ;function qN($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function WN($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function VN($,v,g){let U=v,r=g||(()=>[]),I=(G,z)=>U(z,...r(G)).update(G).digest(),J=U(new Uint8Array($),...r(new Uint8Array(0)));return I.outputLen=J.outputLen,I.blockLen=J.blockLen,I.create=(G,...z)=>U(G,...z),I}var uN=($,v)=>{function g(U,...r){if(b$(U,void 0,"key"),$.nonceLength!==void 0){let Q=r[0];b$(Q,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let I=$.tagLength;if(I&&r[1]!==void 0)b$(r[1],void 0,"AAD");let J=v(U,...r),G=(Q,X)=>{if(X!==void 0){if(Q!==2)throw Error("cipher output not supported");b$(X,void 0,"output")}},z=!1;return{encrypt(Q,X){if(z)throw Error("cannot encrypt() twice with same key + nonce");return z=!0,b$(Q),G(J.encrypt.length,X),J.encrypt(Q,X)},decrypt(Q,X){if(b$(Q),I&&Q.length<I)throw Error('"ciphertext" expected length bigger than tagLength='+I);return G(J.decrypt.length,X),J.decrypt(Q,X)}}}return Object.assign(g,$),g};function eU($,v,g=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(g&&!xg(v))throw Error("invalid output, must be aligned");return v}function ZN($,v,g){og($),og(v),b0(g);let U=new Uint8Array(16),r=fZ(U);return r.setBigUint64(0,BigInt(v),g),r.setBigUint64(8,BigInt($),g),U}function xg($){return $.byteOffset%4===0}function cg($){return Uint8Array.from(b$($))}var MN=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),LZ=(()=>Yr(pv(MN("expand 16-byte k"))))(),_Z=(()=>Yr(pv(MN("expand 32-byte k"))))();function R$($,v){return $<<v|$>>>32-v}var sU=64,bZ=16,Bz=(()=>4294967295)(),jN=Uint32Array.of();function iZ($,v,g,U,r,I,J,G){let z=r.length,O=new Uint8Array(sU),Q=pv(O),X=Gg&&xg(r)&&xg(I),N=X?pv(r):jN,w=X?pv(I):jN;if(!Gg){for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),Yr(Q),J>=Bz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}return}for(let q=0;q<z;J++){if($(v,g,U,Q,J,G),J>=Bz)throw Error("arx: counter overflow");let u=Math.min(sU,z-q);if(X&&u===sU){let W=q/4;if(q%4!==0)throw Error("arx: invalid block position");for(let S=0,R;S<bZ;S++)R=W+S,w[R]=N[R]^Q[S];q+=sU;continue}for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^O[W];q+=u}}function RN($,v){let{allowShortKeys:g,extendNonceFn:U,counterLength:r,counterRight:I,rounds:J}=qN({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return og(r),og(J),b0(I),b0(g),(G,z,O,Q,X=0)=>{b$(G,void 0,"key"),b$(z,void 0,"nonce"),b$(O,void 0,"data");let N=O.length;if(Q=eU(N,Q,!1),og(X),X<0||X>=Bz)throw Error("arx: counter overflow");let w=[],q=G.length,u,W;if(q===32)w.push(u=cg(G)),W=_Z;else if(q===16&&g)u=new Uint8Array(32),u.set(G),u.set(G,16),W=LZ,w.push(u);else throw b$(G,32,"arx key"),Error("invalid key size");if(!Gg||!xg(z))w.push(z=cg(z));let S=pv(u);if(U){if(z.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=z.subarray(0,16);if(Gg)U(W,S,pv(B),S);else{let F=Yr(Uint32Array.from(W));U(F,S,pv(B),S),bv(F),Yr(S)}z=z.subarray(16)}else if(!Gg)Yr(S);let R=16-r;if(R!==z.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let B=new Uint8Array(12);B.set(z,I?0:12-z.length),z=B,w.push(z)}let L=Yr(pv(z));try{return iZ($,W,S,L,O,Q,X,J),Q}finally{bv(...w)}}}function l$($,v){return $[v++]&255|($[v++]&255)<<8}class KN{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cg(b$($,32,"key"));let v=l$($,0),g=l$($,2),U=l$($,4),r=l$($,6),I=l$($,8),J=l$($,10),G=l$($,12),z=l$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|g<<3)&8191,this.r[2]=(g>>>10|U<<6)&7939,this.r[3]=(U>>>7|r<<9)&8191,this.r[4]=(r>>>4|I<<12)&255,this.r[5]=I>>>1&8190,this.r[6]=(I>>>14|J<<2)&8191,this.r[7]=(J>>>11|G<<5)&8065,this.r[8]=(G>>>8|z<<8)&8191,this.r[9]=z>>>5&127;for(let O=0;O<8;O++)this.pad[O]=l$($,16+2*O)}process($,v,g=!1){let U=g?0:2048,{h:r,r:I}=this,J=I[0],G=I[1],z=I[2],O=I[3],Q=I[4],X=I[5],N=I[6],w=I[7],q=I[8],u=I[9],W=l$($,v+0),S=l$($,v+2),R=l$($,v+4),L=l$($,v+6),B=l$($,v+8),F=l$($,v+10),l=l$($,v+12),d=l$($,v+14),_=r[0]+(W&8191),b=r[1]+((W>>>13|S<<3)&8191),v$=r[2]+((S>>>10|R<<6)&8191),H=r[3]+((R>>>7|L<<9)&8191),K=r[4]+((L>>>4|B<<12)&8191),P=r[5]+(B>>>1&8191),V=r[6]+((B>>>14|F<<2)&8191),j=r[7]+((F>>>11|l<<5)&8191),Z=r[8]+((l>>>8|d<<8)&8191),A=r[9]+(d>>>5|U),M=0,n=M+_*J+b*(5*u)+v$*(5*q)+H*(5*w)+K*(5*N);M=n>>>13,n&=8191,n+=P*(5*X)+V*(5*Q)+j*(5*O)+Z*(5*z)+A*(5*G),M+=n>>>13,n&=8191;let f=M+_*G+b*J+v$*(5*u)+H*(5*q)+K*(5*w);M=f>>>13,f&=8191,f+=P*(5*N)+V*(5*X)+j*(5*Q)+Z*(5*O)+A*(5*z),M+=f>>>13,f&=8191;let o=M+_*z+b*G+v$*J+H*(5*u)+K*(5*q);M=o>>>13,o&=8191,o+=P*(5*w)+V*(5*N)+j*(5*X)+Z*(5*Q)+A*(5*O),M+=o>>>13,o&=8191;let e=M+_*O+b*z+v$*G+H*J+K*(5*u);M=e>>>13,e&=8191,e+=P*(5*q)+V*(5*w)+j*(5*N)+Z*(5*X)+A*(5*Q),M+=e>>>13,e&=8191;let I$=M+_*Q+b*O+v$*z+H*G+K*J;M=I$>>>13,I$&=8191,I$+=P*(5*u)+V*(5*q)+j*(5*w)+Z*(5*N)+A*(5*X),M+=I$>>>13,I$&=8191;let G$=M+_*X+b*Q+v$*O+H*z+K*G;M=G$>>>13,G$&=8191,G$+=P*J+V*(5*u)+j*(5*q)+Z*(5*w)+A*(5*N),M+=G$>>>13,G$&=8191;let D$=M+_*N+b*X+v$*Q+H*O+K*z;M=D$>>>13,D$&=8191,D$+=P*G+V*J+j*(5*u)+Z*(5*q)+A*(5*w),M+=D$>>>13,D$&=8191;let w$=M+_*w+b*N+v$*X+H*Q+K*O;M=w$>>>13,w$&=8191,w$+=P*z+V*G+j*J+Z*(5*u)+A*(5*q),M+=w$>>>13,w$&=8191;let Q$=M+_*q+b*w+v$*N+H*X+K*Q;M=Q$>>>13,Q$&=8191,Q$+=P*O+V*z+j*G+Z*J+A*(5*u),M+=Q$>>>13,Q$&=8191;let X$=M+_*u+b*q+v$*w+H*N+K*X;M=X$>>>13,X$&=8191,X$+=P*Q+V*O+j*z+Z*G+A*J,M+=X$>>>13,X$&=8191,M=(M<<2)+M|0,M=M+n|0,n=M&8191,M=M>>>13,f+=M,r[0]=n,r[1]=f,r[2]=o,r[3]=e,r[4]=I$,r[5]=G$,r[6]=D$,r[7]=w$,r[8]=Q$,r[9]=X$}finalize(){let{h:$,pad:v}=this,g=new Uint16Array(10),U=$[1]>>>13;$[1]&=8191;for(let J=2;J<10;J++)$[J]+=U,U=$[J]>>>13,$[J]&=8191;$[0]+=U*5,U=$[0]>>>13,$[0]&=8191,$[1]+=U,U=$[1]>>>13,$[1]&=8191,$[2]+=U,g[0]=$[0]+5,U=g[0]>>>13,g[0]&=8191;for(let J=1;J<10;J++)g[J]=$[J]+U,U=g[J]>>>13,g[J]&=8191;g[9]-=8192;let r=(U^1)-1;for(let J=0;J<10;J++)g[J]&=r;r=~r;for(let J=0;J<10;J++)$[J]=$[J]&r|g[J];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let I=$[0]+v[0];$[0]=I&65535;for(let J=1;J<8;J++)I=($[J]+v[J]|0)+(I>>>16)|0,$[J]=I&65535;bv(g)}update($){fz(this),b$($),$=cg($);let{buffer:v,blockLen:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(g-this.pos,U-r);if(I===g){for(;g<=U-r;r+=g)this.process($,r);continue}if(v.set($.subarray(r,r+I),this.pos),this.pos+=I,r+=I,this.pos===g)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){fz(this),YN($,this),this.finished=!0;let{buffer:v,h:g}=this,{pos:U}=this;if(U){v[U++]=1;for(;U<16;U++)v[U]=0;this.process(v,0,!0)}this.finalize();let r=0;for(let I=0;I<8;I++)$[r++]=g[I]>>>0,$[r++]=g[I]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}}var SN=VN(32,($)=>new KN($));function mZ($,v,g,U,r,I=20){let J=$[0],G=$[1],z=$[2],O=$[3],Q=v[0],X=v[1],N=v[2],w=v[3],q=v[4],u=v[5],W=v[6],S=v[7],R=r,L=g[0],B=g[1],F=g[2],l=J,d=G,_=z,b=O,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let I$=0;I$<I;I$+=2)l=l+v$|0,M=R$(M^l,16),V=V+M|0,v$=R$(v$^V,12),l=l+v$|0,M=R$(M^l,8),V=V+M|0,v$=R$(v$^V,7),d=d+H|0,n=R$(n^d,16),j=j+n|0,H=R$(H^j,12),d=d+H|0,n=R$(n^d,8),j=j+n|0,H=R$(H^j,7),_=_+K|0,f=R$(f^_,16),Z=Z+f|0,K=R$(K^Z,12),_=_+K|0,f=R$(f^_,8),Z=Z+f|0,K=R$(K^Z,7),b=b+P|0,o=R$(o^b,16),A=A+o|0,P=R$(P^A,12),b=b+P|0,o=R$(o^b,8),A=A+o|0,P=R$(P^A,7),l=l+H|0,o=R$(o^l,16),Z=Z+o|0,H=R$(H^Z,12),l=l+H|0,o=R$(o^l,8),Z=Z+o|0,H=R$(H^Z,7),d=d+K|0,M=R$(M^d,16),A=A+M|0,K=R$(K^A,12),d=d+K|0,M=R$(M^d,8),A=A+M|0,K=R$(K^A,7),_=_+P|0,n=R$(n^_,16),V=V+n|0,P=R$(P^V,12),_=_+P|0,n=R$(n^_,8),V=V+n|0,P=R$(P^V,7),b=b+v$|0,f=R$(f^b,16),j=j+f|0,v$=R$(v$^j,12),b=b+v$|0,f=R$(f^b,8),j=j+f|0,v$=R$(v$^j,7);let e=0;U[e++]=J+l|0,U[e++]=G+d|0,U[e++]=z+_|0,U[e++]=O+b|0,U[e++]=Q+v$|0,U[e++]=X+H|0,U[e++]=N+K|0,U[e++]=w+P|0,U[e++]=q+V|0,U[e++]=u+j|0,U[e++]=W+Z|0,U[e++]=S+A|0,U[e++]=R+M|0,U[e++]=L+n|0,U[e++]=B+f|0,U[e++]=F+o|0}var FZ=RN(mZ,{counterRight:!1,counterLength:4,allowShortKeys:!1});var oZ=new Uint8Array(16),TN=($,v)=>{$.update(v);let g=v.length%16;if(g)$.update(oZ.subarray(g))},xZ=new Uint8Array(32);function AN($,v,g,U,r){if(r!==void 0)b$(r,void 0,"AAD");let I=$(v,g,xZ),J=ZN(U.length,r?r.length:0,!0),G=SN.create(I);if(r)TN(G,r);TN(G,U),G.update(J);let z=G.digest();return bv(I,J),z}var cZ=($)=>(v,g,U)=>{return{encrypt(I,J){let G=I.length;J=eU(G+16,J,!1),J.set(I);let z=J.subarray(0,-16);$(v,g,z,z,1);let O=AN($,v,g,z,U);return J.set(O,G),bv(O),J},decrypt(I,J){J=eU(I.length-16,J,!1);let G=I.subarray(0,-16),z=I.subarray(-16),O=AN($,v,g,G,U);if(!WN(z,O))throw bv(O),Error("invalid tag");return J.set(I.subarray(0,-16)),$(v,g,J,J,1),bv(O),J}}},nv=uN({blockSize:64,nonceLength:12,tagLength:16},cZ(FZ));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function lg($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,v=""){if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw Error(`${g}expected integer >= 0, got ${$}`)}}function Y$($,v,g=""){let U=lg($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",z=U?`length=${r}`:`type=${typeof $}`;throw Error(J+"expected Uint8Array"+G+", got "+z)}return $}function Ev($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Wr($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function i0($,v){Y$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw Error('"digestInto() output" expected to be of length >='+g)}function m0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function F0($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function iv($,v){return $<<32-v|$>>>v}var lZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function yZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function dZ($){for(let v=0;v<$.length;v++)$[v]=yZ($[v]);return $}var Cz=lZ?($)=>$:dZ,PN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),hZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function zg($){if(Y$($),PN)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=hZ[$[g]];return v}var qr={_0:48,_9:57,A:65,F:70,a:97,f:102};function HN($){if($>=qr._0&&$<=qr._9)return $-qr._0;if($>=qr.A&&$<=qr.F)return $-(qr.A-10);if($>=qr.a&&$<=qr.f)return $-(qr.a-10);return}function Og($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(PN)return Uint8Array.fromHex($);let v=$.length,g=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=HN($.charCodeAt(I)),G=HN($.charCodeAt(I+1));if(J===void 0||G===void 0){let z=$[I]+$[I+1];throw Error('hex string expected, got non-hex character "'+z+'" at index '+I)}U[r]=J*16+G}return U}function _$(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];Y$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function yg($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Cr($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var Lr=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _z=BigInt(0),Lz=BigInt(1);function $I($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw Error(g+"expected boolean, got type="+typeof $)}return $}function kN($){if(typeof $==="bigint"){if(!o0($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function vI($){let v=kN($).toString(16);return v.length&1?"0"+v:v}function nN($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_z:BigInt("0x"+$)}function _r($){return nN(zg($))}function br($){return nN(zg(x0(Y$($)).reverse()))}function dg($,v){m$(v),$=kN($);let g=Og($.toString(16).padStart(v*2,"0"));if(g.length!==v)throw Error("number too large");return g}function rI($,v){return dg($,v).reverse()}function x0($){return Uint8Array.from($)}function ir($){return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw Error(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var o0=($)=>typeof $==="bigint"&&_z<=$;function pZ($,v,g){return o0($)&&o0(v)&&o0(g)&&v<=$&&$<g}function gI($,v,g,U){if(!pZ(v,g,U))throw Error("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function bz($){let v;for(v=0;$>_z;$>>=Lz,v+=1);return v}var UI=($)=>(Lz<<BigInt($))-Lz;function EN($,v,g){if(m$($,"hashLen"),m$(v,"qByteLen"),typeof g!=="function")throw Error("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,_$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return _$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while(!(R=S(q())))w();return X(),R}}function Dg($,v={},g={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function U(I,J,G){let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw Error(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}function iz($){let v=new WeakMap;return(g,...U)=>{let r=v.get(g);if(r!==void 0)return r;let I=$(g,...U);return v.set(g,I),I}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Dv=BigInt(0),rv=BigInt(1),Qg=BigInt(2),CN=BigInt(3),LN=BigInt(4),_N=BigInt(5),tZ=BigInt(7),bN=BigInt(8),aZ=BigInt(9),iN=BigInt(16);function Ov($,v){let g=$%v;return g>=Dv?g:v+g}function fv($,v,g){let U=$;while(v-- >Dv)U*=U,U%=g;return U}function fN($,v){if($===Dv)throw Error("invert: expected non-zero number");if(v<=Dv)throw Error("invert: expected positive modulus, got "+v);let g=Ov($,v),U=v,r=Dv,I=rv,J=rv,G=Dv;while(g!==Dv){let O=U/g,Q=U%g,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==rv)throw Error("invert: does not exist");return Ov(r,v)}function mz($,v,g){if(!$.eql($.sqr(v),g))throw Error("Cannot find square root")}function mN($,v){let g=($.ORDER+rv)/LN,U=$.pow(v,g);return mz($,U,v),U}function eZ($,v){let g=($.ORDER-_N)/bN,U=$.mul(v,Qg),r=$.pow(U,g),I=$.mul(v,r),J=$.mul($.mul(I,Qg),r),G=$.mul(I,$.sub(J,$.ONE));return mz($,G,v),G}function sZ($){let v=c0($),g=FN($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+tZ)/iN;return(G,z)=>{let O=G.pow(z,J),Q=G.mul(O,U),X=G.mul(O,r),N=G.mul(O,I),w=G.eql(G.sqr(Q),z),q=G.eql(G.sqr(X),z);O=G.cmov(O,Q,w),Q=G.cmov(N,X,q);let u=G.eql(G.sqr(Q),z),W=G.cmov(O,Q,u);return mz(G,W,z),W}}function FN($){if($<CN)throw Error("sqrt is not defined for small field");let v=$-rv,g=0;while(v%Qg===Dv)v/=Qg,g++;let U=Qg,r=c0($);while(BN(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return mN;let I=r.pow(U,v),J=(v+rv)/Qg;return function(z,O){if(z.is0(O))return O;if(BN(z,O)!==1)throw Error("Cannot find square root");let Q=g,X=z.mul(z.ONE,I),N=z.pow(O,v),w=z.pow(O,J);while(!z.eql(N,z.ONE)){if(z.is0(N))return z.ZERO;let q=1,u=z.sqr(N);while(!z.eql(u,z.ONE))if(q++,u=z.sqr(u),q===Q)throw Error("Cannot find square root");let W=rv<<BigInt(Q-q-1),S=z.pow(X,W);Q=q,X=z.sqr(S),N=z.mul(N,X),w=z.mul(w,S)}return w}}function $j($){if($%LN===CN)return mN;if($%bN===_N)return eZ;if($%iN===aZ)return sZ($);return FN($)}var vj=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Fz($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=vj.reduce((U,r)=>{return U[r]="function",U},v);return Dg($,g),$}function rj($,v,g){if(g<Dv)throw Error("invalid exponent, negatives unsupported");if(g===Dv)return $.ONE;if(g===rv)return v;let U=$.ONE,r=v;while(g>Dv){if(g&rv)U=$.mul(U,r);r=$.sqr(r),g>>=rv}return U}function II($,v,g=!1){let U=Array(v.length).fill(g?$.ZERO:void 0),r=v.reduce((J,G,z)=>{if($.is0(G))return J;return U[z]=J,$.mul(J,G)},$.ONE),I=$.inv(r);return v.reduceRight((J,G,z)=>{if($.is0(G))return J;return U[z]=$.mul(J,U[z]),$.mul(J,G)},I),U}function BN($,v){let g=($.ORDER-rv)/Qg,U=$.pow(v,g),r=$.eql(U,$.ONE),I=$.eql(U,$.ZERO),J=$.eql(U,$.neg($.ONE));if(!r&&!I&&!J)throw Error("invalid Legendre symbol result");return r?1:I?0:-1}function gj($,v){if(v!==void 0)m$(v);let g=v!==void 0?v:$.toString(2).length,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}class oN{ORDER;BITS;BYTES;isLE;ZERO=Dv;ONE=rv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Dv)throw Error("invalid field: expected ORDER > 0, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=gj($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Ov($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Dv<=$&&$<this.ORDER}is0($){return $===Dv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&rv)===rv}neg($){return Ov(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Ov($*$,this.ORDER)}add($,v){return Ov($+v,this.ORDER)}sub($,v){return Ov($-v,this.ORDER)}mul($,v){return Ov($*v,this.ORDER)}pow($,v){return rj(this,$,v)}div($,v){return Ov($*fN(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fN($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=$j(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?rI($,this.BYTES):dg($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if(!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?br($):_r($);if(J)G=Ov(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return II(this,$)}cmov($,v,g){return g?v:$}}function c0($,v={}){return new oN($,v)}function xN($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function oz($){let v=xN($);return v+Math.ceil(v/2)}function cN($,v,g=!1){Y$($);let U=$.length,r=xN(v),I=oz(v);if(U<16||U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?br($):_r($),G=Ov(J,v-rv)+rv;return g?rI(G,r):dg(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hg=BigInt(0),Xg=BigInt(1);function JI($,v){let g=v.negate();return $?g:v}function yz($,v){let g=II($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function hN($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function xz($,v){hN($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=UI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function lN($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=Xg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var cz=new WeakMap,pN=new WeakMap;function lz($){return pN.get($)||1}function yN($){if($!==hg)throw Error("invalid wNAF")}class dz{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>hg){if(v&Xg)g=g.add(U);U=U.double(),v>>=Xg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=xz(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=xz($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=lN(g,J,I);if(g=G,O)r=r.add(JI(X,v[N]));else U=U.add(JI(Q,v[z]))}return yN(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=xz($,this.bits);for(let I=0;I<r.windows;I++){if(g===hg)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=lN(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return yN(g),U}getPrecomputes($,v,g){let U=cz.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);cz.set(v,U)}}return U}cached($,v,g){let U=lz($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=lz($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){hN(v,this.bits),pN.set($,v),cz.delete($)}hasCache($){return lz($)!==1}}function tN($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>hg||U>hg){if(g&Xg)I=I.add(r);if(U&Xg)J=J.add(r);r=r.double(),g>>=Xg,U>>=Xg}return{p1:I,p2:J}}function dN($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Fz(v),v}else return c0($,{isLE:g})}function aN($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>hg))throw Error(`CURVE.${z} must be positive bigint`)}let r=dN(v.p,g.Fp,U),I=dN(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function l0($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GI=BigInt(0),pg=BigInt(1),y0=BigInt(2);function Uj($){return Dg($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eN($){let v=Uj($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J||Cr,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?y0**BigInt(254):y0**BigInt(447),q=G?BigInt(8)*y0**BigInt(251)-pg:BigInt(4)*y0**BigInt(445)-pg,u=w+q+pg,W=(V)=>Ov(V,g),S=R(X);function R(V){return rI(W(V),Q)}function L(V){let j=x0(Y$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(br(j))}function B(V){return br(r(x0(Y$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===GI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){gI("u",V,GI,g),gI("scalar",j,w,u);let Z=j,A=V,M=pg,n=GI,f=V,o=pg,e=GI;for(let G$=BigInt(O-1);G$>=GI;G$--){let D$=Z>>G$&pg;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V=z(Q))=>{return Y$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:l0(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}class hz{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Ev($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Vv(U)}update($){return Wr(this),this.iHash.update($),this}digestInto($){Wr(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tg=($,v,g)=>new hz($,v).update(g).digest();tg.create=($,v)=>new hz($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sN=($,v)=>($+($>=0?v:-v)/vY)/v;function Ij($,v,g){let[[U,r],[I,J]]=v,G=sN(J*$,g),z=sN(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<Vr,N=Q<Vr;if(X)O=-O;if(N)Q=-Q;let w=UI(Math.ceil(bz(g)/2))+ag;if(O<Vr||O>=w||Q<Vr||Q>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:O,k2neg:N,k2:Q}}function tz($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pz($,v){let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if($I(g.lowS,"lowS"),$I(g.prehash,"prehash"),g.format!==void 0)tz(g.format);return g}class $Y extends Error{constructor($=""){super($)}}var mr={Err:$Y,_tlv:{encode:($,v)=>{let{Err:g}=mr;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=vI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?vI(r.length/2|128):"";return vI($)+I+r+v},decode($,v){let{Err:g}=mr,U=0;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=mr;if($<Vr)throw new v("integer: negative integers are not allowed");let g=vI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=mr;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _r($)}},toSig($){let{Err:v,_int:g,_tlv:U}=mr,r=Y$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=mr,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}},Vr=BigInt(0),ag=BigInt(1),vY=BigInt(2),d0=BigInt(3),Jj=BigInt(4);function az($,v={}){let g=aN("weierstrass",$,v),{Fp:U,Fn:r}=g,I=g.CURVE,{h:J,n:G}=I;Dg(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let O=gY(U,r);function Q(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,P,V){let{x:j,y:Z}=P.toAffine(),A=U.toBytes(j);if($I(V,"isCompressed"),V){Q();let M=!U.isOdd(Z);return _$(rY(M),A)}else return _$(Uint8Array.of(4),A,U.toBytes(Z))}function N(K){Y$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=O,j=K.length,Z=K[0],A=K.subarray(1);if(j===P&&(Z===2||Z===3)){let M=U.fromBytes(A);if(!U.isValid(M))throw Error("bad point: is not on curve, wrong x");let n=u(M),f;try{f=U.sqrt(n)}catch(I$){let G$=I$ instanceof Error?": "+I$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}Q();let o=U.isOdd(f);if((Z&1)===1!==o)f=U.neg(f);return{x:M,y:f}}else if(j===V&&Z===4){let M=U.BYTES,n=U.fromBytes(A.subarray(0,M)),f=U.fromBytes(A.subarray(M,M*2));if(!W(n,f))throw Error("bad point: is not on curve");return{x:n,y:f}}else throw Error(`bad point: got length ${j}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||X,q=v.fromBytes||N;function u(K){let P=U.sqr(K),V=U.mul(P,K);return U.add(U.add(V,U.mul(K,I.a)),I.b)}function W(K,P){let V=U.sqr(P),j=u(K);return U.eql(V,j)}if(!W(I.Gx,I.Gy))throw Error("bad curve params: generator point");let S=U.mul(U.pow(I.a,d0),Jj),R=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(S,R)))throw Error("bad curve params: a or b");function L(K,P,V=!1){if(!U.isValid(P)||V&&U.is0(P))throw Error(`bad point coordinate ${K}`);return P}function B(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function F(K){if(!z||!z.basises)throw Error("no endo");return Ij(K,z.basises,r.ORDER)}let l=iz((K,P)=>{let{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}),d=iz((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!U.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!U.isValid(P)||!U.isValid(V))throw Error("bad point: x or y not field elements");if(!W(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,P,V,j,Z){return V=new b(U.mul(V.X,K),V.Y,V.Z),P=JI(j,P),V=JI(Z,V),P.add(V)}class b{static BASE=new b(I.Gx,I.Gy,U.ONE);static ZERO=new b(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(K,P,V){this.X=L("x",K),this.Y=L("y",P,!0),this.Z=L("z",V),Object.freeze(this)}static CURVE(){return I}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!U.isValid(P)||!U.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(U.is0(P)&&U.is0(V))return b.ZERO;return new b(P,V,U.ONE)}static fromBytes(K){let P=b.fromAffine(q(Y$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return b.fromBytes(Og(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(H.createCache(this,K),!P)this.multiply(d0);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(K)}equals(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.eql(U.mul(P,M),U.mul(Z,j)),f=U.eql(U.mul(V,M),U.mul(A,j));return n&&f}negate(){return new b(this.X,U.neg(this.Y),this.Z)}double(){let{a:K,b:P}=I,V=U.mul(P,d0),{X:j,Y:Z,Z:A}=this,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(A,A),G$=U.mul(j,Z);return G$=U.add(G$,G$),f=U.mul(j,A),f=U.add(f,f),M=U.mul(K,f),n=U.mul(V,I$),n=U.add(M,n),M=U.sub(e,n),n=U.add(e,n),n=U.mul(M,n),M=U.mul(G$,M),f=U.mul(V,f),I$=U.mul(K,I$),G$=U.sub(o,I$),G$=U.mul(K,G$),G$=U.add(G$,f),f=U.add(o,o),o=U.add(f,o),o=U.add(o,I$),o=U.mul(o,G$),n=U.add(n,o),I$=U.mul(Z,A),I$=U.add(I$,I$),o=U.mul(I$,G$),M=U.sub(M,o),f=U.mul(I$,e),f=U.add(f,f),f=U.add(f,f),new b(M,n,f)}add(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.ZERO,f=U.ZERO,o=U.ZERO,e=I.a,I$=U.mul(I.b,d0),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.mul(j,M),Q$=U.add(P,V),X$=U.add(Z,A);Q$=U.mul(Q$,X$),X$=U.add(G$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,j);let W$=U.add(Z,M);return X$=U.mul(X$,W$),W$=U.add(G$,w$),X$=U.sub(X$,W$),W$=U.add(V,j),n=U.add(A,M),W$=U.mul(W$,n),n=U.add(D$,w$),W$=U.sub(W$,n),o=U.mul(e,X$),n=U.mul(I$,w$),o=U.add(n,o),n=U.sub(D$,o),o=U.add(D$,o),f=U.mul(n,o),D$=U.add(G$,G$),D$=U.add(D$,G$),w$=U.mul(e,w$),X$=U.mul(I$,X$),D$=U.add(D$,w$),w$=U.sub(G$,w$),w$=U.mul(e,w$),X$=U.add(X$,w$),G$=U.mul(D$,X$),f=U.add(f,G$),G$=U.mul(W$,X$),n=U.mul(Q$,n),n=U.sub(n,G$),G$=U.mul(Q$,D$),o=U.mul(W$,o),o=U.add(o,G$),new b(n,f,o)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:P}=v;if(!r.isValidNot0(K))throw Error("invalid scalar: out of range");let V,j,Z=(A)=>H.cached(this,A,(M)=>yz(b,M));if(P){let{k1neg:A,k1:M,k2neg:n,k2:f}=F(K),{p:o,f:e}=Z(M),{p:I$,f:G$}=Z(f);j=e.add(G$),V=_(P.beta,o,I$,A,n)}else{let{p:A,f:M}=Z(K);V=A,j=M}return yz(b,[V,j])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!r.isValid(K))throw Error("invalid scalar: out of range");if(K===Vr||V.is0())return b.ZERO;if(K===ag)return V;if(H.hasCache(this))return this.multiply(K);if(P){let{k1neg:j,k1:Z,k2neg:A,k2:M}=F(K),{p1:n,p2:f}=tN(b,V,Z,M);return _(P.beta,n,f,j,A)}else return H.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(J===ag)return!0;if(K)return K(b,this);return H.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(J===ag)return this;if(K)return K(b,this);return this.multiplyUnsafe(J)}isSmallOrder(){return this.multiplyUnsafe(J).is0()}toBytes(K=!0){return $I(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return zg(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=r.BITS,H=new dz(b,v.endo?Math.ceil(v$/2):v$);return b.BASE.precompute(8),b}function rY($){return Uint8Array.of($?2:3)}function gY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function Gj($,v={}){let{Fn:g}=$,U=v.randomBytes||Cr,r=Object.assign(gY($.Fp,g),{seed:oz(g.ORDER)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w=U(r.seed)){return cN(Y$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r;if(!lg(w))return;if("_lengths"in g&&g._lengths||q===u)return;let S=Y$(w,void 0,"key").length;return S===u||S===W}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=l0(G,z);return Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function ez($,v,g={}){Ev(v),Dg(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let U=g.randomBytes||Cr,r=g.hmac||((V,j)=>tg(v,V,j)),{Fp:I,Fn:J}=$,{ORDER:G,BITS:z}=J,{keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w}=Gj($,g),q={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},u=G*vY<I.ORDER;function W(V){let j=G>>ag;return V>j}function S(V,j){if(!J.isValidNot0(j))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return j}function R(){if(u)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(V,j){tz(j);let Z=w.signature,A=j==="compact"?Z:j==="recovered"?Z+1:void 0;return Y$(V,A)}class B{r;s;recovery;constructor(V,j,Z){if(this.r=S("r",V),this.s=S("s",j),Z!=null){if(R(),![0,1,2,3].includes(Z))throw Error("invalid recovery id");this.recovery=Z}Object.freeze(this)}static fromBytes(V,j=q.format){L(V,j);let Z;if(j==="der"){let{r:f,s:o}=mr.toSig(Y$(V));return new B(f,o)}if(j==="recovered")Z=V[0],j="compact",V=V.subarray(1);let A=w.signature/2,M=V.subarray(0,A),n=V.subarray(A,A*2);return new B(J.fromBytes(M),J.fromBytes(n),Z)}static fromHex(V,j){return this.fromBytes(Og(V),j)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new B(this.r,this.s,V)}recoverPublicKey(V){let{r:j,s:Z}=this,A=this.assertRecovery(),M=A===2||A===3?j+G:j;if(!I.isValid(M))throw Error("invalid recovery id: sig.r+curve.n != R.x");let n=I.toBytes(M),f=$.fromBytes(_$(rY((A&1)===0),n)),o=J.inv(M),e=l(Y$(V,void 0,"msgHash")),I$=J.create(-e*o),G$=J.create(Z*o),D$=$.BASE.multiplyUnsafe(I$).add(f.multiplyUnsafe(G$));if(D$.is0())throw Error("invalid recovery: point at infinify");return D$.assertValidity(),D$}hasHighS(){return W(this.s)}toBytes(V=q.format){if(tz(V),V==="der")return Og(mr.hexFromSig(this));let{r:j,s:Z}=this,A=J.toBytes(j),M=J.toBytes(Z);if(V==="recovered")return R(),_$(Uint8Array.of(this.assertRecovery()),A,M);return _$(A,M)}toHex(V){return zg(this.toBytes(V))}}let F=g.bits2int||function(j){if(j.length>8192)throw Error("input is too large");let Z=_r(j),A=j.length*8-z;return A>0?Z>>BigInt(A):Z},l=g.bits2int_modN||function(j){return J.create(F(j))},d=UI(z);function _(V){return gI("num < 2^"+z,V,Vr,d),J.toBytes(V)}function b(V,j){return Y$(V,void 0,"message"),j?Y$(v(V),void 0,"prehashed message"):V}function v$(V,j,Z){let{lowS:A,prehash:M,extraEntropy:n}=pz(Z,q);V=b(V,M);let f=l(V),o=J.fromBytes(j);if(!J.isValidNot0(o))throw Error("invalid private key");let e=[_(o),_(f)];if(n!=null&&n!==!1){let w$=n===!0?U(w.secretKey):n;e.push(Y$(w$,void 0,"extraEntropy"))}let I$=_$(...e),G$=f;function D$(w$){let Q$=F(w$);if(!J.isValidNot0(Q$))return;let X$=J.inv(Q$),W$=$.BASE.multiply(Q$).toAffine(),P$=J.create(W$.x);if(P$===Vr)return;let n$=J.create(X$*J.create(G$+P$*o));if(n$===Vr)return;let a$=(W$.x===P$?0:2)|Number(W$.y&ag),e$=n$;if(A&&W(n$))e$=J.neg(n$),a$^=1;return new B(P$,e$,u?void 0:a$)}return{seed:I$,k2sig:D$}}function H(V,j,Z={}){let{seed:A,k2sig:M}=v$(V,j,Z);return EN(v.outputLen,J.BYTES,r)(A,M).toBytes(Z.format)}function K(V,j,Z,A={}){let{lowS:M,prehash:n,format:f}=pz(A,q);if(Z=Y$(Z,void 0,"publicKey"),j=b(j,n),!lg(V)){let o=V instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+o)}L(V,f);try{let o=B.fromBytes(V,f),e=$.fromBytes(Z);if(M&&o.hasHighS())return!1;let{r:I$,s:G$}=o,D$=l(j),w$=J.inv(G$),Q$=J.create(D$*w$),X$=J.create(I$*w$),W$=$.BASE.multiplyUnsafe(Q$).add(e.multiplyUnsafe(X$));if(W$.is0())return!1;return J.create(W$.x)===I$}catch(o){return!1}}function P(V,j,Z={}){let{prehash:A}=pz(Z,q);return j=b(j,A),B.fromBytes(V,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:O,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w,Point:$,sign:H,verify:K,recoverPublicKey:P,Signature:B,hash:v})}function UY($,v,g){return $&v^~$&g}function IY($,v,g){return $&v^$&g^v&g}class h0{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=F0(this.buffer)}update($){Wr(this),Y$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=F0($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wr(this),i0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Vv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=F0($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let z=G/4,O=this.get();if(z>O.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<z;Q++)J.setUint32(4*Q,O[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var ur=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),y$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var p0=BigInt(4294967295),JY=BigInt(32);function zj($,v=!1){if(v)return{h:Number($&p0),l:Number($>>JY&p0)};return{h:Number($>>JY&p0)|0,l:Number($&p0)|0}}function t0($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=zj($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var sz=($,v,g)=>$>>>g,$O=($,v,g)=>$<<32-g|v>>>g,wg=($,v,g)=>$>>>g|v<<32-g,Ng=($,v,g)=>$<<32-g|v>>>g,zI=($,v,g)=>$<<64-g|v>>>g-32,OI=($,v,g)=>$>>>g-32|v<<64-g;var GY=($,v,g)=>$<<g|v>>>32-g,zY=($,v,g)=>v<<g|$>>>32-g,OY=($,v,g)=>v<<g-32|$>>>64-g,DY=($,v,g)=>$<<g-32|v>>>64-g;function tv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var QY=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),XY=($,v,g,U)=>v+g+U+($/4294967296|0)|0,wY=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),NY=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,YY=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),qY=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var Dj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Fr=new Uint32Array(64);class vO extends h0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)Fr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=Fr[Q-15],N=Fr[Q-2],w=iv(X,7)^iv(X,18)^X>>>3,q=iv(N,17)^iv(N,19)^N>>>10;Fr[Q]=q+Fr[Q-7]+w+Fr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:z,H:O}=this;for(let Q=0;Q<64;Q++){let X=iv(J,6)^iv(J,11)^iv(J,25),N=O+X+UY(J,G,z)+Dj[Q]+Fr[Q]|0,q=(iv(g,2)^iv(g,13)^iv(g,22))+IY(g,U,r)|0;O=z,z=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,z=z+this.G|0,O=O+this.H|0,this.set(g,U,r,I,J,G,z,O)}roundClean(){Vv(Fr)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class WY extends vO{A=ur[0]|0;B=ur[1]|0;C=ur[2]|0;D=ur[3]|0;E=ur[4]|0;F=ur[5]|0;G=ur[6]|0;H=ur[7]|0;constructor(){super(32)}}class Qj extends vO{A=Zr[0]|0;B=Zr[1]|0;C=Zr[2]|0;D=Zr[3]|0;E=Zr[4]|0;F=Zr[5]|0;G=Zr[6]|0;H=Zr[7]|0;constructor(){super(28)}}var VY=(()=>t0(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),Xj=(()=>VY[0])(),wj=(()=>VY[1])(),or=new Uint32Array(80),xr=new Uint32Array(80);class DI extends h0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:z,El:O,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,z,O,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=z|0,this.El=O|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)or[R]=$.getUint32(v),xr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=or[R-15]|0,B=xr[R-15]|0,F=wg(L,B,1)^wg(L,B,8)^sz(L,B,7),l=Ng(L,B,1)^Ng(L,B,8)^$O(L,B,7),d=or[R-2]|0,_=xr[R-2]|0,b=wg(d,_,19)^zI(d,_,61)^sz(d,_,6),v$=Ng(d,_,19)^OI(d,_,61)^$O(d,_,6),H=wY(l,v$,xr[R-7],xr[R-16]),K=NY(H,F,b,or[R-7],or[R-16]);or[R]=K|0,xr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:z,Dl:O,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=wg(Q,X,14)^wg(Q,X,18)^zI(Q,X,41),B=Ng(Q,X,14)^Ng(Q,X,18)^OI(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=YY(S,B,l,wj[R],xr[R]),_=qY(d,W,L,F,Xj[R],or[R]),b=d|0,v$=wg(g,U,28)^zI(g,U,34)^zI(g,U,39),H=Ng(g,U,28)^OI(g,U,34)^OI(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=tv(z|0,O|0,_|0,b|0),z=J|0,O=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=QY(b,H,P);g=XY(V,_,v$,K),U=V|0}({h:g,l:U}=tv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=tv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=tv(this.Ch|0,this.Cl|0,J|0,G|0),{h:z,l:O}=tv(this.Dh|0,this.Dl|0,z|0,O|0),{h:Q,l:X}=tv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=tv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=tv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=tv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,z,O,Q,X,N,w,q,u,W,S)}roundClean(){Vv(or,xr)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Nj extends DI{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class uY extends DI{Ah=y$[0]|0;Al=y$[1]|0;Bh=y$[2]|0;Bl=y$[3]|0;Ch=y$[4]|0;Cl=y$[5]|0;Dh=y$[6]|0;Dl=y$[7]|0;Eh=y$[8]|0;El=y$[9]|0;Fh=y$[10]|0;Fl=y$[11]|0;Gh=y$[12]|0;Gl=y$[13]|0;Hh=y$[14]|0;Hl=y$[15]|0;constructor(){super(48)}}var gv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Uv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class Yj extends DI{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(28)}}class qj extends DI{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(32)}}var a0=yg(()=>new WY,Lr(1));var ZY=yg(()=>new uY,Lr(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wj=BigInt(1),jY=BigInt(2),Vj=BigInt(3),uj=BigInt(5),UA=BigInt(8),MY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function Zj($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=MY,G=$*$%I*$%I,z=fv(G,jY,I)*G%I,O=fv(z,Wj,I)*$%I,Q=fv(O,uj,I)*O%I,X=fv(Q,v,I)*Q%I,N=fv(X,g,I)*X%I,w=fv(N,U,I)*N%I,q=fv(w,r,I)*w%I,u=fv(q,r,I)*w%I,W=fv(u,v,I)*Q%I;return{pow_p_5_8:fv(W,jY,I)*$%I,b2:G}}function jj($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var RY=(()=>{let $=MY;return eN({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Zj(v);return Ov(fv(g,Vj,$)*U,$)},adjustScalarBytes:jj})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mj=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),Rj=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var Kj=az(Mj),rO=ez(Kj,a0);var Sj=az(Rj),KY=ez(Sj,ZY);function TY($,v,g){if(Ev($),g===void 0)g=new Uint8Array($.outputLen);return tg($,g,v)}var gO=Uint8Array.of(0),SY=Uint8Array.of();function AY($,v,g,U=32){Ev($),m$(U,"length");let r=$.outputLen;if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=SY;else Y$(g,void 0,"info");let J=new Uint8Array(I*r),G=tg.create($,v),z=G._cloneInto(),O=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)gO[0]=Q+1,z.update(Q===0?SY:O).update(g).update(gO).digestInto(O),J.set(O,r*Q),G._cloneInto(z);return G.destroy(),z.destroy(),Vv(O,gO),J.slice(0,U)}var Tj=BigInt(0),QI=BigInt(1),Aj=BigInt(2),Hj=BigInt(7),Pj=BigInt(256),kj=BigInt(113),kY=[],nY=[],EY=[];for(let $=0,v=QI,g=1,U=0;$<24;$++){[g,U]=[U,(2*g+3*U)%5],kY.push(2*(5*U+g)),nY.push(($+1)*($+2)/2%64);let r=Tj;for(let I=0;I<7;I++)if(v=(v<<QI^(v>>Hj)*kj)%Pj,v&Aj)r^=QI<<(QI<<BigInt(I))-QI;EY.push(r)}var fY=t0(EY,!0),nj=fY[0],Ej=fY[1],HY=($,v,g)=>g>32?OY($,v,g):GY($,v,g),PY=($,v,g)=>g>32?DY($,v,g):zY($,v,g);function fj($,v=24){let g=new Uint32Array(10);for(let U=24-v;U<24;U++){for(let J=0;J<10;J++)g[J]=$[J]^$[J+10]^$[J+20]^$[J+30]^$[J+40];for(let J=0;J<10;J+=2){let G=(J+8)%10,z=(J+2)%10,O=g[z],Q=g[z+1],X=HY(O,Q,1)^g[G],N=PY(O,Q,1)^g[G+1];for(let w=0;w<50;w+=10)$[J+w]^=X,$[J+w+1]^=N}let r=$[2],I=$[3];for(let J=0;J<24;J++){let G=nY[J],z=HY(r,I,G),O=PY(r,I,G),Q=kY[J];r=$[Q],I=$[Q+1],$[Q]=z,$[Q+1]=O}for(let J=0;J<50;J+=10){for(let G=0;G<10;G++)g[G]=$[J+G];for(let G=0;G<10;G++)$[J+G]^=~g[(G+2)%10]&g[(G+4)%10]}$[0]^=nj[U],$[1]^=Ej[U]}Vv(g)}class e0{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,g,U=!1,r=24){if(this.blockLen=$,this.suffix=v,this.outputLen=g,this.enableXOF=U,this.rounds=r,m$(g,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=m0(this.state)}clone(){return this._cloneInto()}keccak(){Cz(this.state32),fj(this.state32,this.rounds),Cz(this.state32),this.posOut=0,this.pos=0}update($){Wr(this),Y$($);let{blockLen:v,state:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(v-this.pos,U-r);for(let J=0;J<I;J++)g[this.pos++]^=$[r++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:g,blockLen:U}=this;if($[g]^=v,(v&128)!==0&&g===U-1)this.keccak();$[U-1]^=128,this.keccak()}writeInto($){Wr(this,!1),Y$($),this.finish();let v=this.state,{blockLen:g}=this;for(let U=0,r=$.length;U<r;){if(this.posOut>=g)this.keccak();let I=Math.min(g-this.posOut,r-U);$.set(v.subarray(this.posOut,this.posOut+I),U),this.posOut+=I,U+=I}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(i0($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:g,outputLen:U,rounds:r,enableXOF:I}=this;return $||=new e0(v,g,U,I,r),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=r,$.suffix=g,$.outputLen=U,$.enableXOF=I,$.destroyed=this.destroyed,$}}var BY=($,v,g,U={})=>yg(()=>new e0(v,$,g),U);var Yg=BY(6,136,32,Lr(8));var CY=BY(6,72,64,Lr(10));var LY=($,v,g,U={})=>yg((r={})=>new e0(v,$,r.dkLen===void 0?g:r.dkLen,!0),U),_Y=LY(31,168,16,Lr(11)),av=LY(31,136,32,Lr(12));function UO($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return UO($),($&$-1)===0&&$!==0}function IO($,v){UO($);let g=0;for(let U=0;U<v;U++,$>>>=1)g=g<<1|$&1;return g}function mY($){return UO($),31-Math.clz32($)}function bY($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let g=mY(v);for(let U=0;U<v;U++){let r=IO(U,g);if(U<r){let I=$[U];$[U]=$[r],$[r]=I}}return $}var JO=($,v)=>{let{N:g,roots:U,dit:r,invertButterflies:I=!1,skipStages:J=0,brp:G=!0}=v,z=mY(g);if(!iY(g))throw Error("FFT: Polynomial size should be power of two");let O=r!==I;return(Q)=>{if(Q.length!==g)throw Error("FFT: wrong Polynomial length");if(r&&G)bY(Q);for(let X=0,N=1;X<z-J;X++){let w=r?X+1+J:z-X,q=1<<w,u=q>>1,W=g>>w;for(let S=0;S<g;S+=q)for(let R=0,L=N++;R<u;R++){let B=I?r?g-L:L:R*W,F=S+R,l=S+R+u,d=U[B],_=Q[l],b=Q[F];if(O){let v$=$.mul(_,d);Q[F]=$.add(b,v$),Q[l]=$.sub(b,v$)}else if(I)Q[F]=$.add(_,b),Q[l]=$.mul($.sub(_,b),d);else Q[F]=$.add(b,_),Q[l]=$.mul($.sub(b,_),d)}}if(!r&&G)bY(Q);return Q}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=Cr;function s0($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function FY($){return Uint8Array.from($)}function qg($,...v){let g=(r)=>typeof r==="number"?r:r.bytesLen,U=v.reduce((r,I)=>r+g(I),0);return{bytesLen:U,encode:(r)=>{let I=new Uint8Array(U);for(let J=0,G=0;J<v.length;J++){let z=v[J],O=g(z),Q=typeof z==="number"?r[J]:z.encode(r[J]);if(Y$(Q,O,$),I.set(Q,G),typeof z!=="number")Q.fill(0);G+=O}return I},decode:(r)=>{Y$(r,U,$);let I=[];for(let J of v){let G=g(J),z=r.subarray(0,G);I.push(typeof J==="number"?z:J.decode(z)),r=r.subarray(G)}return I}}}function $J($,v){let g=v*$.bytesLen;return{bytesLen:g,encode:(U)=>{if(U.length!==v)throw Error(`vecCoder.encode: wrong length=${U.length}. Expected: ${v}`);let r=new Uint8Array(g);for(let I=0,J=0;I<U.length;I++){let G=$.encode(U[I]);r.set(G,J),G.fill(0),J+=G.length}return r},decode:(U)=>{Y$(U,g);let r=[];for(let I=0;I<U.length;I+=$.bytesLen)r.push($.decode(U.subarray(I,I+$.bytesLen)));return r}}}function i$(...$){for(let v of $)if(Array.isArray(v))for(let g of v)g.fill(0);else v.fill(0)}function GO($){return(1<<$)-1}var uA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var oY=($)=>{let{newPoly:v,N:g,Q:U,F:r,ROOT_OF_UNITY:I,brvBits:J,isKyber:G}=$,z=(R,L=U)=>{let B=R%L|0;return(B>=0?B|0:L+B|0)|0},O=(R,L=U)=>{let B=z(R,L)|0;return(B>L>>1?B-L|0:B)|0};function Q(){let R=v(g);for(let L=0;L<g;L++){let B=IO(L,J),F=BigInt(I)**BigInt(B)%BigInt(U);R[L]=Number(F)|0}return R}let X=Q(),N={add:(R,L)=>z((R|0)+(L|0))|0,sub:(R,L)=>z((R|0)-(L|0))|0,mul:(R,L)=>z((R|0)*(L|0))|0,inv:(R)=>{throw Error("not implemented")}},w={N:g,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},q=JO(N,{dit:!1,...w}),u=JO(N,{dit:!0,...w});return{mod:z,smod:O,nttZetas:X,NTT:{encode:(R)=>{return q(R)},decode:(R)=>{u(R);for(let L=0;L<R.length;L++)R[L]=z(r*R[L]);return R}},bitsCoder:(R,L)=>{let B=GO(R),F=R*(g/8);return{bytesLen:F,encode:(l)=>{let d=new Uint8Array(F);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=(L.encode(l[_])&B)<<v$,v$+=R;for(;v$>=8;v$-=8,b>>=8)d[H++]=b&GO(v$)}return d},decode:(l)=>{let d=v(g);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=l[_]<<v$,v$+=8;for(;v$>=R;v$-=R,b>>=R)d[H++]=L.decode(b&B)}return d}}}}},Bj=($)=>(v,g)=>{if(!g)g=$.blockLen;let U=new Uint8Array(v.length+2);U.set(v);let r=v.length,I=new Uint8Array(g),J=$.create({}),G=0,z=0;return{stats:()=>({calls:G,xofs:z}),get:(O,Q)=>{return U[r+0]=O,U[r+1]=Q,J.destroy(),J=$.create({}).update(U),G++,()=>{return z++,J.xofInto(I)}},clean:()=>{J.destroy(),i$(I,U)}}},xY=Bj(_Y);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Iv=256,jr=3329,Cj=3303,Lj=17,{mod:NI,nttZetas:_j,NTT:Wg,bitsCoder:bj}=oY({N:Iv,Q:jr,F:Cj,ROOT_OF_UNITY:Lj,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),zO={512:{N:Iv,Q:jr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Iv,Q:jr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Iv,Q:jr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},ij=($)=>{if($>=12)return{encode:(g)=>g,decode:(g)=>g};let v=2**($-1);return{encode:(g)=>((g<<$)+jr/2)/jr,decode:(g)=>g*jr+v>>>$}},XI=($)=>bj($,ij($));function Vg($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]+v[g])}function mj($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]-v[g])}function Fj($,v,g,U,r){let I=NI(v*U*r+$*g),J=NI($*U+v*g);return{c0:I,c1:J}}function vJ($,v){for(let g=0;g<Iv/2;g++){let U=_j[64+(g>>1)];if(g&1)U=-U;let{c0:r,c1:I}=Fj($[2*g+0],$[2*g+1],v[2*g+0],v[2*g+1],U);$[2*g+0]=r,$[2*g+1]=I}return $}function cY($){let v=new Uint16Array(Iv);for(let g=0;g<Iv;){let U=$();if(U.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;g<Iv&&r+3<=U.length;r+=3){let I=(U[r+0]>>0|U[r+1]<<8)&4095,J=(U[r+1]>>4|U[r+2]<<4)&4095;if(I<jr)v[g++]=I;if(g<Iv&&J<jr)v[g++]=J}}return v}function wI($,v,g,U){let r=$(U*Iv/4,v,g),I=new Uint16Array(Iv),J=m0(r),G=0;for(let z=0,O=0,Q=0,X=0;z<J.length;z++){let N=J[z];for(let w=0;w<32;w++)if(Q+=N&1,N>>=1,G+=1,G===U)X=Q,Q=0;else if(G===2*U)I[O++]=NI(X-Q),Q=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return I}var oj=($)=>{let{K:v,PRF:g,XOF:U,HASH512:r,ETA1:I,ETA2:J,du:G,dv:z}=$,O=XI(1),Q=XI(z),X=XI(G),N=qg("publicKey",$J(XI(12),v),32),w=$J(XI(12),v),q=qg("ciphertext",$J(X,v),Q),u=qg("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:N.bytesLen,cipherText:q.bytesLen},keygen:(W)=>{Y$(W,32,"seed");let S=new Uint8Array(33);S.set(W),S[32]=v;let R=r(S),[L,B]=u.decode(R),F=[],l=[];for(let b=0;b<v;b++)F.push(Wg.encode(wI(g,B,b,I)));let d=U(L);for(let b=0;b<v;b++){let v$=Wg.encode(wI(g,B,v+b,I));for(let H=0;H<v;H++){let K=cY(d.get(H,b));Vg(v$,vJ(K,F[H]))}l.push(v$)}d.clean();let _={publicKey:N.encode([l,L]),secretKey:w.encode(F)};return i$(L,B,F,l,S,R),_},encrypt:(W,S,R)=>{let[L,B]=N.decode(W),F=[];for(let H=0;H<v;H++)F.push(Wg.encode(wI(g,R,H,I)));let l=U(B),d=new Uint16Array(Iv),_=[];for(let H=0;H<v;H++){let K=wI(g,R,v+H,J),P=new Uint16Array(Iv);for(let V=0;V<v;V++){let j=cY(l.get(H,V));Vg(P,vJ(j,F[V]))}Vg(K,Wg.decode(P)),_.push(K),Vg(d,vJ(L[H],F[H])),i$(P)}l.clean();let b=wI(g,R,2*v,J);Vg(b,Wg.decode(d));let v$=O.decode(S);return Vg(v$,b),i$(L,F,d,b),q.encode([_,v$])},decrypt:(W,S)=>{let[R,L]=q.decode(W),B=w.decode(S),F=new Uint16Array(Iv);for(let l=0;l<v;l++)Vg(F,vJ(B[l],Wg.encode(R[l])));return mj(L,Wg.decode(F)),i$(F,B,R),O.encode(L)}}};function OO($){let v=oj($),{HASH256:g,HASH512:U,KDF:r}=$,{secretCoder:I,lengths:J}=v,G=qg("secretKey",J.secretKey,J.publicKey,32,32),z=32,O=64;return{info:{type:"ml-kem"},lengths:{...J,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(Q=ev(64))=>{Y$(Q,64,"seed");let{publicKey:X,secretKey:N}=v.keygen(Q.subarray(0,32)),w=g(X),q=G.encode([N,X,w,Q.subarray(32)]);return i$(N,w),{publicKey:X,secretKey:q}},getPublicKey:(Q)=>{let[X,N,w,q]=G.decode(Q);return Uint8Array.from(N)},encapsulate:(Q,X=ev(32))=>{Y$(Q,J.publicKey,"publicKey"),Y$(X,32,"message");let N=Q.subarray(0,384*$.K),w=I.encode(I.decode(FY(N)));if(!s0(w,N))throw i$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");i$(w);let q=U.create().update(X).update(g(Q)).digest(),u=v.encrypt(Q,X,q.subarray(32,64));return i$(q.subarray(32)),{cipherText:u,sharedSecret:q.subarray(0,32)}},decapsulate:(Q,X)=>{Y$(X,G.bytesLen,"secretKey"),Y$(Q,J.cipherText,"cipherText");let N=G.bytesLen-96,w=N+32,q=g(X.subarray(N/2,w));if(!s0(q,X.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[u,W,S,R]=G.decode(X),L=v.decrypt(Q,u),B=U.create().update(L).update(S).digest(),F=B.subarray(0,32),l=v.encrypt(W,L,B.subarray(32,64)),d=s0(Q,l),_=r.create({dkLen:32}).update(R).update(Q).digest();return i$(L,l,!d?F:_),d?F:_}}}function xj($,v,g){return av.create({dkLen:$}).update(v).update(new Uint8Array([g])).digest()}var DO={HASH256:Yg,HASH512:CY,KDF:av,XOF:xY,PRF:xj},kA=OO({...DO,...zO[512]}),YI=OO({...DO,...zO[768]}),lY=OO({...DO,...zO[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function cj($,v=!1){let{lengths:g,keygen:U}=$;if(v){let I=$.Point.Fn;if(!I)throw Error("No Point.Fn");U=(J=ev(g.seed))=>{Y$(J,g.seed,"seed");let G=I.isLE?br(J):_r(J),z=I.toBytes(I.create(G));return{secretKey:z,publicKey:$.getPublicKey(z)}}}return{lengths:{secretKey:g.secretKey,publicKey:g.publicKey,seed:g.seed},keygen:U,getPublicKey:(r)=>$.getPublicKey(r)}}function QO($,v=!1){let g=cj($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...g.lengths,msg:g.lengths.seed,cipherText:g.lengths.publicKey},keygen:g.keygen,getPublicKey:g.getPublicKey,encapsulate(U,r=ev($.lengths.seed)){let I=this.keygen(r).secretKey,J=this.decapsulate(U,I),G=$.getPublicKey(I);return i$(I),{sharedSecret:J,cipherText:G}},decapsulate(U,r){let I=$.getSharedSecret(r,U);return $.lengths.publicKeyHasPrefix?I.subarray(1):I}}}function qI($,v){return qg(v,...$.map((g)=>{if(typeof g.lengths[v]!=="number")throw Error("wrong length: "+v);return g.lengths[v]}))}function XO($){return(v,g)=>$(v,{dkLen:g})}function lj($,v,...g){let U=qI(g,"seed"),r=qI(g,"publicKey");if($===void 0)$=U.bytesLen;m$($);function I(J){Y$(J,$);let G=U.decode(v(J,U.bytesLen)),z=g.map((X,N)=>X.keygen(G[N])),O=z.map((X)=>X.secretKey),Q=z.map((X)=>X.publicKey);return{secretKey:O,publicKey:Q}}return{info:{lengths:{seed:$,publicKey:r.bytesLen,secretKey:$}},getPublicKey(J){return this.keygen(J).publicKey},keygen(J=ev($)){let{publicKey:G,secretKey:z}=I(J),O=r.encode(G);return i$(G),i$(z),{secretKey:J,publicKey:O}},expandDecapsulationKey:I,realSeedLen:$}}function rJ($,v,g,U,...r){let I=lj($,g,...r),J=qI(r,"cipherText"),G=qI(r,"publicKey"),z=qI(r,"msg");if(v===void 0)v=z.bytesLen;return m$(v),{lengths:{...I.info.lengths,msg:v,msgRand:z.bytesLen,cipherText:J.bytesLen},getPublicKey:I.getPublicKey,keygen:I.keygen,encapsulate(O,Q=ev(z.bytesLen)){let X=G.decode(O),N=z.decode(Q),w=r.map((S,R)=>S.encapsulate(X[R],N[R])),q=w.map((S)=>S.sharedSecret),u=w.map((S)=>S.cipherText),W={sharedSecret:U(X,u,q),cipherText:J.encode(u)};return i$(q,u),W},decapsulate(O,Q){let X=J.decode(O),{publicKey:N,secretKey:w}=I.expandDecapsulationKey(Q),q=r.map((u,W)=>u.decapsulate(X[W],w[W]));return U(N,X,q)}}}function yY($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,XO(U),(I,J,G)=>r(_$(G[0],G[1],J[1],I[1],ir($))),v,g)}var FA=yY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YI,QO(rO,!0),av,Yg),oA=yY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",lY,QO(KY,!0),av,Yg);function yj($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,XO(U),(I,J,G)=>{let z=_$(G[0],G[1],J[0],I[0],J[1],I[1],ir($)),O=32,Q=_$(ir("hybrid_prk"),z),X=TY(r,Q),N=_$(dg(32,2),ir("shared_secret"),ir("")),w=AY(r,X,N,32);return i$(X,N,Q,z),w},v,g)}var dY=QO(RY),xA=yj("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YI,dY,av,a0),dj=(()=>rJ(32,32,XO(av),($,v,g)=>Yg(_$(g[0],g[1],v[1],$[1],ir("\\.//^\\"))),YI,dY))();function hj($,v,g,U){let r=$.Point.Fn;if(!r)throw Error("no Point.Fn");function I(J){let G;for(let Q=0,X=v;;Q=X,X+=v){if(X>J.length)throw Error("rejection sampling failed");if(G=r.fromBytes(J.subarray(Q,X),!0),r.isValidNot0(G))break}let z=r.toBytes(r.create(G)),O=$.getPublicKey(z,!1);return{secretKey:z,publicKey:O}}return{lengths:{secretKey:v,publicKey:g,seed:U,msg:U,cipherText:g},keygen(J=ev(U)){return Y$(J,U,"seed"),I(J)},getPublicKey(J){return $.getPublicKey(J,!1)},encapsulate(J,G=ev(U)){Y$(G,U,"rand");let{secretKey:z}=I(G),O=this.decapsulate(J,z),Q=$.getPublicKey(z,!1);return i$(z),{sharedSecret:O,cipherText:Q}},decapsulate(J,G){return $.getSharedSecret(G,J).subarray(1)}}}function pj($,v,g,U){let{secretKey:r,publicKeyUncompressed:I}=g.lengths;if(!r||!I)throw Error("wrong curve");let J=hj(g,r,I,U),G=64,z=G+U;return rJ(32,32,(O)=>{Y$(O,32);let Q=av(O,{dkLen:z}),X=Q.subarray(0,G),N=Q.subarray(G,z);return _$(X,N)},(O,Q,X)=>Yg(_$(X[0],X[1],Q[1],O[1],ir($))),v,J)}var tj=(()=>pj("MLKEM768-P256",YI,rO,128))();var gJ=dj,hY=tj;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,v,g)=>o$($,v,g),NO=C$,eg=A0,h$=(...$)=>Yz(...$),sg=($)=>lU($),$U=Xz,vU=($)=>Xr($),IJ=BigInt(0),wO=BigInt(1);function Mr($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw TypeError(g+"expected boolean, got type="+typeof $)}return $}function JJ($){if(typeof $==="bigint"){if(!UJ($))throw RangeError("positive bigint expected, got "+$)}else NO($);return $}function sv($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(g+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let g=v&&`"${v}" `;throw RangeError(g+"expected safe integer, got "+$)}}function WI($){let v=JJ($).toString(16);return v.length&1?"0"+v:v}function pY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?IJ:BigInt("0x"+$)}function ug($){return pY(A0($))}function mv($){return pY(A0(cr(o$($)).reverse()))}function GJ($,v){if(C$(v),v===0)throw RangeError("zero length");$=JJ($);let g=$.toString(16);if(g.length>v*2)throw RangeError("number too large");return lU(g.padStart(v*2,"0"))}function VI($,v){return GJ($,v).reverse()}function tY($,v){if($=S$($),v=S$(v),$.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function cr($){return Uint8Array.from(S$($))}function zJ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw RangeError(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var UJ=($)=>typeof $==="bigint"&&IJ<=$;function aj($,v,g){return UJ($)&&UJ(v)&&UJ(g)&&v<=$&&$<g}function Rr($,v,g,U){if(!aj(v,g,U))throw RangeError("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function rU($){if($<IJ)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>IJ;$>>=wO,v+=1);return v}var uI=($)=>(wO<<BigInt($))-wO;function aY($,v,g){if(C$($,"hashLen"),C$(v,"qByteLen"),typeof g!=="function")throw TypeError("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,z=U($),O=U($),Q=0,X=()=>{z.fill(1),O.fill(0),Q=0},N=(...W)=>g(O,h$(z,...W)),w=(W=r)=>{if(O=N(I,W),z=N(),W.length===0)return;O=N(J,W),z=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){z=N();let R=z.slice();S.push(R),W+=z.length}return h$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while((R=S(q()))===void 0)w();return X(),R}}function Bv($,v={},g={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function U(I,J,G){if(!G&&J!=="function"&&!Object.hasOwn($,I))throw TypeError(`param "${I}" is invalid: expected own property`);let z=$[I];if(G&&z===void 0)return;let O=typeof z;if(O!==J||z===null)throw TypeError(`param "${I}" is invalid: expected ${J}, got ${O}`)}let r=(I,J)=>Object.entries(I).forEach(([G,z])=>U(G,z,J));r(v,!1),r(g,!0)}var YO=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),f$=BigInt(1),Zg=BigInt(2),vq=BigInt(3),rq=BigInt(4),gq=BigInt(5),ej=BigInt(7),Uq=BigInt(8),sj=BigInt(9),Iq=BigInt(16);function E$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let g=$%v;return g>=p$?g:v+g}function Cv($,v,g){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let U=$;while(v-- >p$)U*=U,U%=g;return U}function eY($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let g=E$($,v),U=v,r=p$,I=f$,J=f$,G=p$;while(g!==p$){let O=U/g,Q=U-g*O,X=r-J*O,N=I-G*O;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==f$)throw Error("invert: does not exist");return E$(r,v)}function qO($,v,g){let U=$;if(!U.eql(U.sqr(v),g))throw Error("Cannot find square root")}function Jq($,v){let g=$,U=(g.ORDER+f$)/rq,r=g.pow(v,U);return qO(g,r,v),r}function $M($,v){let g=$,U=(g.ORDER-gq)/Uq,r=g.mul(v,Zg),I=g.pow(r,U),J=g.mul(v,I),G=g.mul(g.mul(J,Zg),I),z=g.mul(J,g.sub(G,g.ONE));return qO(g,z,v),z}function vM($){let v=OJ($),g=Gq($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+ej)/Iq;return(G,z)=>{let O=G,Q=O.pow(z,J),X=O.mul(Q,U),N=O.mul(Q,r),w=O.mul(Q,I),q=O.eql(O.sqr(X),z),u=O.eql(O.sqr(N),z);Q=O.cmov(Q,X,q),X=O.cmov(w,N,u);let W=O.eql(O.sqr(X),z),S=O.cmov(Q,X,W);return qO(O,S,z),S}}function Gq($){if($<vq)throw Error("sqrt is not defined for small field");let v=$-f$,g=0;while(v%Zg===p$)v/=Zg,g++;let U=Zg,r=OJ($);while(sY(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return Jq;let I=r.pow(U,v),J=(v+f$)/Zg;return function(z,O){let Q=z;if(Q.is0(O))return O;if(sY(Q,O)!==1)throw Error("Cannot find square root");let X=g,N=Q.mul(Q.ONE,I),w=Q.pow(O,v),q=Q.pow(O,J);while(!Q.eql(w,Q.ONE)){if(Q.is0(w))return Q.ZERO;let u=1,W=Q.sqr(w);while(!Q.eql(W,Q.ONE))if(u++,W=Q.sqr(W),u===X)throw Error("Cannot find square root");let S=f$<<BigInt(X-u-1),R=Q.pow(N,S);X=u,N=Q.sqr(R),w=Q.mul(w,N),q=Q.mul(q,R)}return q}}function rM($){if($%rq===vq)return Jq;if($%Uq===gq)return $M;if($%Iq===sj)return vM($);return Gq($)}var Kr=($,v)=>(E$($,v)&f$)===f$,gM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function WO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=gM.reduce((U,r)=>{return U[r]="function",U},v);if(Bv($,g),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=f$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function UM($,v,g){let U=$;if(g<p$)throw Error("invalid exponent, negatives unsupported");if(g===p$)return U.ONE;if(g===f$)return v;let r=U.ONE,I=v;while(g>p$){if(g&f$)r=U.mul(r,I);I=U.sqr(I),g>>=f$}return r}function ZI($,v,g=!1){let U=$,r=Array(v.length).fill(g?U.ZERO:void 0),I=v.reduce((G,z,O)=>{if(U.is0(z))return G;return r[O]=G,U.mul(G,z)},U.ONE),J=U.inv(I);return v.reduceRight((G,z,O)=>{if(U.is0(z))return G;return r[O]=U.mul(G,r[O]),U.mul(G,z)},J),r}function sY($,v){let g=$,U=(g.ORDER-f$)/Zg,r=g.pow(v,U),I=g.eql(r,g.ONE),J=g.eql(r,g.ZERO),G=g.eql(r,g.neg(g.ONE));if(!I&&!J&&!G)throw Error("invalid Legendre symbol result");return I?1:J?0:-1}function IM($,v){if(v!==void 0)NO(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let g=rU($);if(v!==void 0&&v<g)throw Error(`invalid n length: expected bit length (${g}) >= n.length (${v})`);let U=v!==void 0?v:g,r=Math.ceil(U/8);return{nBitLength:U,nByteLength:r}}var $q=new WeakMap;class VO{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=f$;_lengths;_mod;constructor($,v={}){if($<=f$)throw Error("invalid field: expected ORDER > 1, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=IM($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,Object.freeze(this)}create($){return E$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&f$)===f$}neg($){return E$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return E$($*$,this.ORDER)}add($,v){return E$($+v,this.ORDER)}sub($,v){return E$($-v,this.ORDER)}mul($,v){return E$($*v,this.ORDER)}pow($,v){return UM(this,$,v)}div($,v){return E$($*eY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return eY($,this.ORDER)}sqrt($){let v=$q.get(this);if(!v)$q.set(this,v=rM(this.ORDER));return v(this,$)}toBytes($){return this.isLE?VI($,this.BYTES):GJ($,this.BYTES)}fromBytes($,v=!1){S$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if($.length<1||!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let z=new Uint8Array(U);z.set($,r?0:z.length-$.length),$=z}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?mv($):ug($);if(J)G=E$(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return ZI(this,$)}cmov($,v,g){return Mr(g,"condition"),g?v:$}}Object.freeze(VO.prototype);function OJ($,v={}){return new VO($,v)}function zq($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=f$)throw Error("field order must be greater than 1");let v=rU($-f$);return Math.ceil(v/8)}function uO($){let v=zq($);return v+Math.ceil(v/2)}function Oq($,v,g=!1){S$($);let U=$.length,r=zq(v),I=Math.max(uO(v),16);if(U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?mv($):ug($),G=E$(J,v-f$)+f$;return g?VI(G,r):GJ(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gU=BigInt(0),jg=BigInt(1);function jI($,v){let g=v.negate();return $?g:v}function Mg($,v){let g=ZI($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function wq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function ZO($,v){wq($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=uI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function Dq($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),z=$>>J;if(G>U)G-=I,z+=jg;let O=v*U,Q=O+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:z,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:O}}var jO=new WeakMap,Nq=new WeakMap;function MO($){return Nq.get($)||1}function Qq($){if($!==gU)throw Error("invalid wNAF")}class MI{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>gU){if(v&jg)g=g.add(U);U=U.double(),v>>=jg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=ZO(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let z=1;z<U;z++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=ZO($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:z,isZero:O,isNeg:Q,isNegF:X,offsetF:N}=Dq(g,J,I);if(g=G,O)r=r.add(jI(X,v[N]));else U=U.add(jI(Q,v[z]))}return Qq(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=ZO($,this.bits);for(let I=0;I<r.windows;I++){if(g===gU)break;let{nextN:J,offset:G,isZero:z,isNeg:O}=Dq(g,I,r);if(g=J,z)continue;else{let Q=v[G];U=U.add(O?Q.negate():Q)}}return Qq(g),U}getPrecomputes($,v,g){let U=jO.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);jO.set(v,U)}}return U}cached($,v,g){let U=MO($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=MO($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){wq(v,this.bits),Nq.set($,v),jO.delete($)}hasCache($){return MO($)!==1}}function Yq($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>gU||U>gU){if(g&jg)I=I.add(r);if(U&jg)J=J.add(r);r=r.double(),g>>=jg,U>>=jg}return{p1:I,p2:J}}function Xq($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return WO(v),v}else return OJ($,{isLE:g})}function DJ($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let z of["p","n","h"]){let O=v[z];if(!(typeof O==="bigint"&&O>gU))throw Error(`CURVE.${z} must be positive bigint`)}let r=Xq(v.p,g.Fp,U),I=Xq(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let z of G)if(!r.isValid(v[z]))throw Error(`CURVE.${z} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function RI($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}function KI($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let g=Array.from({length:v}).fill(0);for(let U=v-1;U>=0;U--)g[U]=$&255,$>>>=8;return new Uint8Array(g)}function JM($,v){let g=new Uint8Array($.length);for(let U=0;U<$.length;U++)g[U]=$[U]^v[U];return g}function GM($){if(!$U($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?zJ($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function RO($,v,g,U){if(S$($),sv(g),v=GM(v),v.length>255)v=U(h$(zJ("H2C-OVERSIZE-DST-"),v));let{outputLen:r,blockLen:I}=U,J=Math.ceil(g/r);if(g>65535||J>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,KI(v.length,1)),z=new Uint8Array(I),O=KI(g,2),Q=Array(J),X=U(h$(z,$,O,KI(0,1),G));Q[0]=U(h$(X,KI(1,1),G));for(let w=1;w<J;w++){let q=[JM(X,Q[w-1]),KI(w+1,1),G];Q[w]=U(h$(...q))}return h$(...Q).slice(0,g)}var qq="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wq=($,v)=>($+($>=0?v:-v)/uq)/v;function zM($,v,g){Rr("scalar",$,$r,g);let[[U,r],[I,J]]=v,G=Wq(J*$,g),z=Wq(-r*$,g),O=$-G*U-z*I,Q=-G*r-z*J,X=O<$r,N=Q<$r;if(X)O=-O;if(N)Q=-Q;let w=uI(Math.ceil(rU(g)/2))+lr;if(O<$r||O>=w||Q<$r||Q>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:O,k2neg:N,k2:Q}}function SO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function KO($,v){Bv($);let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if(Mr(g.lowS,"lowS"),Mr(g.prehash,"prehash"),g.format!==void 0)SO(g.format);return g}class Vq extends Error{constructor($=""){super($)}}var Fv={Err:Vq,_tlv:{encode:($,v)=>{let{Err:g}=Fv;if(sv($,"tag"),$<0||$>255)throw new g("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=WI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?WI(r.length/2|128):"";return WI($)+I+r+v},decode($,v){let{Err:g}=Fv;v=S$(v,void 0,"DER data");let U=0;if($<0||$>255)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let z=r&127;if(!z)throw new g("tlv.decode(long): indefinite length not supported");if(z>4)throw new g("tlv.decode(long): byte length is too big");let O=v.subarray(U,U+z);if(O.length!==z)throw new g("tlv.decode: length bytes not complete");if(O[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of O)J=J<<8|Q;if(U+=z,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=Fv;if(JJ($),$<$r)throw new v("integer: negative integers are not allowed");let g=WI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=Fv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ug($)}},toSig($){let{Err:v,_int:g,_tlv:U}=Fv,r=S$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:z}=U.decode(2,I),{v:O,l:Q}=U.decode(2,z);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(O)}},hexFromSig($){let{_tlv:v,_int:g}=Fv,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}};Object.freeze(Fv._tlv);Object.freeze(Fv._int);Object.freeze(Fv);var $r=BigInt(0),lr=BigInt(1),uq=BigInt(2),QJ=BigInt(3),OM=BigInt(4);function Zq($,v={}){let g=DJ("weierstrass",$,v),U=g.Fp,r=g.Fn,I=g.CURVE,{h:J,n:G}=I;Bv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:z,allowInfinityPoint:O}=v;if(z){if(!U.is0(I.a)||typeof z.beta!=="bigint"||!Array.isArray(z.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let Q=Mq(U,r);function X(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(H,K,P){if(O&&K.is0())return Uint8Array.of(0);let{x:V,y:j}=K.toAffine(),Z=U.toBytes(V);if(Mr(P,"isCompressed"),P){X();let A=!U.isOdd(j);return h$(jq(A),Z)}else return h$(Uint8Array.of(4),Z,U.toBytes(j))}function w(H){S$(H,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=Q,V=H.length,j=H[0],Z=H.subarray(1);if(O&&V===1&&j===0)return{x:U.ZERO,y:U.ZERO};if(V===K&&(j===2||j===3)){let A=U.fromBytes(Z);if(!U.isValid(A))throw Error("bad point: is not on curve, wrong x");let M=W(A),n;try{n=U.sqrt(M)}catch(e){let I$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+I$)}X();let f=U.isOdd(n);if((j&1)===1!==f)n=U.neg(n);return{x:A,y:n}}else if(V===P&&j===4){let A=U.BYTES,M=U.fromBytes(Z.subarray(0,A)),n=U.fromBytes(Z.subarray(A,A*2));if(!S(M,n))throw Error("bad point: is not on curve");return{x:M,y:n}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let q=v.toBytes===void 0?N:v.toBytes,u=v.fromBytes===void 0?w:v.fromBytes;function W(H){let K=U.sqr(H),P=U.mul(K,H);return U.add(U.add(P,U.mul(H,I.a)),I.b)}function S(H,K){let P=U.sqr(K),V=W(H);return U.eql(P,V)}if(!S(I.Gx,I.Gy))throw Error("bad curve params: generator point");let R=U.mul(U.pow(I.a,QJ),OM),L=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(R,L)))throw Error("bad curve params: a or b");function B(H,K,P=!1){if(!U.isValid(K)||P&&U.is0(K))throw Error(`bad point coordinate ${H}`);return K}function F(H){if(!(H instanceof _))throw Error("Weierstrass Point expected")}function l(H){if(!z||!z.basises)throw Error("no endo");return zM(H,z.basises,r.ORDER)}function d(H,K,P,V,j){return P=new _(U.mul(P.X,H),P.Y,P.Z),K=jI(V,K),P=jI(j,P),K.add(P)}class _{static BASE=new _(I.Gx,I.Gy,U.ONE);static ZERO=new _(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(H,K,P){this.X=B("x",H),this.Y=B("y",K,!0),this.Z=B("z",P),Object.freeze(this)}static CURVE(){return I}static fromAffine(H){let{x:K,y:P}=H||{};if(!H||!U.isValid(K)||!U.isValid(P))throw Error("invalid affine point");if(H instanceof _)throw Error("projective point not allowed");if(U.is0(K)&&U.is0(P))return _.ZERO;return new _(K,P,U.ONE)}static fromBytes(H){let K=_.fromAffine(u(S$(H,void 0,"point")));return K.assertValidity(),K}static fromHex(H){return _.fromBytes(sg(H))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(H=8,K=!0){if(v$.createCache(this,H),!K)this.multiply(QJ);return this}assertValidity(){let H=this;if(H.is0()){if(v.allowInfinityPoint&&U.is0(H.X)&&U.eql(H.Y,U.ONE)&&U.is0(H.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=H.toAffine();if(!U.isValid(K)||!U.isValid(P))throw Error("bad point: x or y not field elements");if(!S(K,P))throw Error("bad point: equation left != right");if(!H.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:H}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(H)}equals(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.eql(U.mul(K,A),U.mul(j,V)),n=U.eql(U.mul(P,A),U.mul(Z,V));return M&&n}negate(){return new _(this.X,U.neg(this.Y),this.Z)}double(){let{a:H,b:K}=I,P=U.mul(K,QJ),{X:V,Y:j,Z}=this,A=U.ZERO,M=U.ZERO,n=U.ZERO,f=U.mul(V,V),o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(V,j);return I$=U.add(I$,I$),n=U.mul(V,Z),n=U.add(n,n),A=U.mul(H,n),M=U.mul(P,e),M=U.add(A,M),A=U.sub(o,M),M=U.add(o,M),M=U.mul(A,M),A=U.mul(I$,A),n=U.mul(P,n),e=U.mul(H,e),I$=U.sub(f,e),I$=U.mul(H,I$),I$=U.add(I$,n),n=U.add(f,f),f=U.add(n,f),f=U.add(f,e),f=U.mul(f,I$),M=U.add(M,f),e=U.mul(j,Z),e=U.add(e,e),f=U.mul(e,I$),A=U.sub(A,f),n=U.mul(e,o),n=U.add(n,n),n=U.add(n,n),new _(A,M,n)}add(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=I.a,e=U.mul(I.b,QJ),I$=U.mul(K,j),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.add(K,P),Q$=U.add(j,Z);w$=U.mul(w$,Q$),Q$=U.add(I$,G$),w$=U.sub(w$,Q$),Q$=U.add(K,V);let X$=U.add(j,A);return Q$=U.mul(Q$,X$),X$=U.add(I$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,V),M=U.add(Z,A),X$=U.mul(X$,M),M=U.add(G$,D$),X$=U.sub(X$,M),f=U.mul(o,Q$),M=U.mul(e,D$),f=U.add(M,f),M=U.sub(G$,f),f=U.add(G$,f),n=U.mul(M,f),G$=U.add(I$,I$),G$=U.add(G$,I$),D$=U.mul(o,D$),Q$=U.mul(e,Q$),G$=U.add(G$,D$),D$=U.sub(I$,D$),D$=U.mul(o,D$),Q$=U.add(Q$,D$),I$=U.mul(G$,Q$),n=U.add(n,I$),I$=U.mul(X$,Q$),M=U.mul(w$,M),M=U.sub(M,I$),I$=U.mul(w$,G$),f=U.mul(X$,f),f=U.add(f,I$),new _(M,n,f)}subtract(H){return F(H),this.add(H.negate())}is0(){return this.equals(_.ZERO)}multiply(H){let{endo:K}=v;if(!r.isValidNot0(H))throw RangeError("invalid scalar: out of range");let P,V,j=(Z)=>v$.cached(this,Z,(A)=>Mg(_,A));if(K){let{k1neg:Z,k1:A,k2neg:M,k2:n}=l(H),{p:f,f:o}=j(A),{p:e,f:I$}=j(n);V=o.add(I$),P=d(K.beta,f,e,Z,M)}else{let{p:Z,f:A}=j(H);P=Z,V=A}return Mg(_,[P,V])[0]}multiplyUnsafe(H){let{endo:K}=v,P=this,V=H;if(!r.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$r||P.is0())return _.ZERO;if(V===lr)return P;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:j,k1:Z,k2neg:A,k2:M}=l(V),{p1:n,p2:f}=Yq(_,P,Z,M);return d(K.beta,n,f,j,A)}else return v$.unsafe(P,V)}toAffine(H){let K=this,P=H,{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}isTorsionFree(){let{isTorsionFree:H}=v;if(J===lr)return!0;if(H)return H(_,this);return v$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:H}=v;if(J===lr)return this;if(H)return H(_,this);return this.multiplyUnsafe(J)}isSmallOrder(){if(J===lr)return this.is0();return this.clearCofactor().is0()}toBytes(H=!0){return Mr(H,"isCompressed"),this.assertValidity(),q(_,this,H)}toHex(H=!0){return eg(this.toBytes(H))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=r.BITS,v$=new MI(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function jq($){return Uint8Array.of($?2:3)}function Mq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:g}=$,U=v.randomBytes===void 0?vU:v.randomBytes,r=Object.assign(Mq($.Fp,g),{seed:Math.max(uO(g.ORDER),16)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w){return w=w===void 0?U(r.seed):w,Oq(S$(w,r.seed,"seed"),g.ORDER)}function z(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function O(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r,S=g._lengths;if(!$U(w))return;let R=S$(w,void 0,"key").length,L=R===u||R===W,B=R===q||!!S?.includes(R);if(L&&B)return;return L}function Q(w,q,u=!0){if(O(w)===!0)throw Error("first arg must be private key");if(O(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=RI(G,z);return Object.freeze(X),Object.freeze(r),Object.freeze({getPublicKey:z,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function Rq($,v,g={}){let U=v;Qr(U),Bv(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let r=g.randomBytes===void 0?vU:g.randomBytes,I=g.hmac===void 0?(j,Z)=>dv(U,j,Z):g.hmac,{Fp:J,Fn:G}=$,{ORDER:z,BITS:O}=G,{keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q}=DM($,g),u={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},W=z*uq+lr<J.ORDER;function S(j){let Z=z>>lr;return j>Z}function R(j,Z){if(!G.isValidNot0(Z))throw Error(`invalid signature ${j}: out of range 1..Point.Fn.ORDER`);return Z}function L(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(j,Z){SO(Z);let A=q.signature,M=Z==="compact"?A:Z==="recovered"?A+1:void 0;return S$(j,M)}class F{r;s;recovery;constructor(j,Z,A){if(this.r=R("r",j),this.s=R("s",Z),A!=null){if(L(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(j,Z=u.format){B(j,Z);let A;if(Z==="der"){let{r:o,s:e}=Fv.toSig(S$(j));return new F(o,e)}if(Z==="recovered")A=j[0],Z="compact",j=j.subarray(1);let M=q.signature/2,n=j.subarray(0,M),f=j.subarray(M,M*2);return new F(G.fromBytes(n),G.fromBytes(f),A)}static fromHex(j,Z){return this.fromBytes(sg(j),Z)}assertRecovery(){let{recovery:j}=this;if(j==null)throw Error("invalid recovery id: must be present");return j}addRecoveryBit(j){return new F(this.r,this.s,j)}recoverPublicKey(j){let{r:Z,s:A}=this,M=this.assertRecovery(),n=M===2||M===3?Z+z:Z;if(!J.isValid(n))throw Error("invalid recovery id: sig.r+curve.n != R.x");let f=J.toBytes(n),o=$.fromBytes(h$(jq((M&1)===0),f)),e=G.inv(n),I$=d(S$(j,void 0,"msgHash")),G$=G.create(-I$*e),D$=G.create(A*e),w$=$.BASE.multiplyUnsafe(G$).add(o.multiplyUnsafe(D$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return S(this.s)}toBytes(j=u.format){if(SO(j),j==="der")return sg(Fv.hexFromSig(this));let{r:Z,s:A}=this,M=G.toBytes(Z),n=G.toBytes(A);if(j==="recovered")return L(),h$(Uint8Array.of(this.assertRecovery()),M,n);return h$(M,n)}toHex(j){return eg(this.toBytes(j))}}Object.freeze(F.prototype),Object.freeze(F);let l=g.bits2int===void 0?function(Z){if(Z.length>8192)throw Error("input is too large");let A=ug(Z),M=Z.length*8-O;return M>0?A>>BigInt(M):A}:g.bits2int,d=g.bits2int_modN===void 0?function(Z){return G.create(l(Z))}:g.bits2int_modN,_=uI(O);function b(j){return Rr("num < 2^"+O,j,$r,_),G.toBytes(j)}function v$(j,Z){return S$(j,void 0,"message"),Z?S$(U(j),void 0,"prehashed message"):j}function H(j,Z,A){let{lowS:M,prehash:n,extraEntropy:f}=KO(A,u);j=v$(j,n);let o=d(j),e=G.fromBytes(Z);if(!G.isValidNot0(e))throw Error("invalid private key");let I$=[b(e),b(o)];if(f!=null&&f!==!1){let Q$=f===!0?r(q.secretKey):f;I$.push(S$(Q$,void 0,"extraEntropy"))}let G$=h$(...I$),D$=o;function w$(Q$){let X$=l(Q$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),P$=$.BASE.multiply(X$).toAffine(),n$=G.create(P$.x);if(n$===$r)return;let a$=G.create(W$*G.create(D$+n$*e));if(a$===$r)return;let e$=(P$.x===n$?0:2)|Number(P$.y&lr),Wv=a$;if(M&&S(a$))Wv=G.neg(a$),e$^=1;return new F(n$,Wv,W?void 0:e$)}return{seed:G$,k2sig:w$}}function K(j,Z,A={}){let{seed:M,k2sig:n}=H(j,Z,A);return aY(U.outputLen,G.BYTES,I)(M,n).toBytes(A.format)}function P(j,Z,A,M={}){let{lowS:n,prehash:f,format:o}=KO(M,u);if(A=S$(A,void 0,"publicKey"),Z=v$(Z,f),!$U(j)){let e=j instanceof F?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}B(j,o);try{let e=F.fromBytes(j,o),I$=$.fromBytes(A);if(n&&e.hasHighS())return!1;let{r:G$,s:D$}=e,w$=d(Z),Q$=G.inv(D$),X$=G.create(w$*Q$),W$=G.create(G$*Q$),P$=$.BASE.multiplyUnsafe(X$).add(I$.multiplyUnsafe(W$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(e){return!1}}function V(j,Z,A={}){let{prehash:M}=KO(A,u);return Z=v$(Z,M),F.fromBytes(j,"recovered").recoverPublicKey(Z).toBytes()}return Object.freeze({keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:F,hash:U})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var XM=Zq(QM),UU=Rq(XM,L$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yr=BigInt(0),uv=BigInt(1),TO=BigInt(2),wM=BigInt(8);function NM($,v,g,U){let r=$.sqr(g),I=$.sqr(U),J=$.add($.mul(v.a,r),I),G=$.add($.ONE,$.mul(v.d,$.mul(r,I)));return $.eql(J,G)}function Kq($,v={}){let g=v,U=DJ("edwards",$,g,g.FpFnLE),{Fp:r,Fn:I}=U,J=U.CURVE,{h:G}=J;Bv(g,{},{uvRatio:"function"});let z=TO<<BigInt(I.BYTES*8)-uv,O=(u)=>r.create(u),Q=g.uvRatio===void 0?(u,W)=>{try{return{isValid:!0,value:r.sqrt(r.div(u,W))}}catch(S){return{isValid:!1,value:yr}}}:g.uvRatio;if(!NM(r,J,J.Gx,J.Gy))throw Error("bad curve params: generator point");function X(u,W,S=!1){let R=S?uv:yr;return Rr("coordinate "+u,W,R,z),W}function N(u){if(!(u instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(J.Gx,J.Gy,uv,O(J.Gx*J.Gy));static ZERO=new w(yr,uv,uv,yr);static Fp=r;static Fn=I;X;Y;Z;T;constructor(u,W,S,R){this.X=X("x",u),this.Y=X("y",W),this.Z=X("z",S,!0),this.T=X("t",R),Object.freeze(this)}static CURVE(){return J}static fromAffine(u){if(u instanceof w)throw Error("extended point not allowed");let{x:W,y:S}=u||{};return X("x",W),X("y",S),new w(W,S,uv,O(W*S))}static fromBytes(u,W=!1){let S=r.BYTES,{a:R,d:L}=J;u=cr(S$(u,S,"point")),Mr(W,"zip215");let B=cr(u),F=u[S-1];B[S-1]=F&-129;let l=mv(B),d=W?z:r.ORDER;Rr("point.y",l,yr,d);let _=O(l*l),b=O(_-uv),v$=O(L*_-R),{isValid:H,value:K}=Q(b,v$);if(!H)throw Error("bad point: invalid y coordinate");let P=(K&uv)===uv,V=(F&128)!==0;if(!W&&K===yr&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=O(-K);return w.fromAffine({x:K,y:l})}static fromHex(u,W=!1){return w.fromBytes(sg(u),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(u=8,W=!0){if(q.createCache(this,u),!W)this.multiply(TO);return this}assertValidity(){let u=this,{a:W,d:S}=J;if(u.is0())throw Error("bad point: ZERO");let{X:R,Y:L,Z:B,T:F}=u,l=O(R*R),d=O(L*L),_=O(B*B),b=O(_*_),v$=O(l*W),H=O(_*O(v$+d)),K=O(b+O(S*O(l*d)));if(H!==K)throw Error("bad point: equation left != right (1)");let P=O(R*L),V=O(B*F);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(u){N(u);let{X:W,Y:S,Z:R}=this,{X:L,Y:B,Z:F}=u,l=O(W*F),d=O(L*R),_=O(S*F),b=O(B*R);return l===d&&_===b}is0(){return this.equals(w.ZERO)}negate(){return new w(O(-this.X),this.Y,this.Z,O(-this.T))}double(){let{a:u}=J,{X:W,Y:S,Z:R}=this,L=O(W*W),B=O(S*S),F=O(TO*O(R*R)),l=O(u*L),d=W+S,_=O(O(d*d)-L-B),b=l+B,v$=b-F,H=l-B,K=O(_*v$),P=O(b*H),V=O(_*H),j=O(v$*b);return new w(K,P,j,V)}add(u){N(u);let{a:W,d:S}=J,{X:R,Y:L,Z:B,T:F}=this,{X:l,Y:d,Z:_,T:b}=u,v$=O(R*l),H=O(L*d),K=O(F*S*b),P=O(B*_),V=O((R+L)*(l+d)-v$-H),j=P-K,Z=P+K,A=O(H-W*v$),M=O(V*j),n=O(Z*A),f=O(V*A),o=O(j*Z);return new w(M,n,o,f)}subtract(u){return N(u),this.add(u.negate())}multiply(u){if(!I.isValidNot0(u))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:S}=q.cached(this,u,(R)=>Mg(w,R));return Mg(w,[W,S])[0]}multiplyUnsafe(u){if(!I.isValid(u))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(u===yr)return w.ZERO;if(this.is0()||u===uv)return this;return q.unsafe(this,u,(W)=>Mg(w,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return q.unsafe(this,J.n).is0()}toAffine(u){let W=this,S=u,{X:R,Y:L,Z:B}=W,F=W.is0();if(S==null)S=F?wM:r.inv(B);let l=O(R*S),d=O(L*S),_=r.mul(B,S);if(F)return{x:yr,y:uv};if(_!==uv)throw Error("invZ was invalid");return{x:l,y:d}}clearCofactor(){if(G===uv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:u,y:W}=this.toAffine(),S=r.toBytes(W);return S[S.length-1]|=u&uv?128:0,S}toHex(){return eg(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let q=new MI(w,I.BITS);if(I.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class AO{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){YO()}static fromHex($){YO()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eg(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SI=BigInt(0),IU=BigInt(1),XJ=BigInt(2);function YM($){return Bv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Sq($){let v=YM($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let z=J===void 0?vU:J,O=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?XJ**BigInt(254):XJ**BigInt(447),q=G?BigInt(8)*XJ**BigInt(251)-IU:BigInt(4)*XJ**BigInt(445)-IU,u=w+q+IU,W=(V)=>E$(V,g),S=R(X);function R(V){return VI(W(V),Q)}function L(V){let j=cr(S$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(mv(j))}function B(V){return mv(r(cr(S$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===SI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){Rr("u",V,SI,g),Rr("scalar",j,w,u);let Z=j,A=V,M=IU,n=SI,f=V,o=IU,e=SI;for(let G$=BigInt(O-1);G$>=SI;G$--){let D$=Z>>G$&IU;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V)=>{return V=V===void 0?z(Q):V,S$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(H),Object.freeze(P),Object.freeze({keygen:RI(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qM=BigInt(0),Sr=BigInt(1),Tq=BigInt(2),WM=BigInt(3),VM=BigInt(5),uM=BigInt(8),Kg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),nO=(()=>({p:Kg,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:uM,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Pq($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=Kg,G=$*$%I*$%I,z=Cv(G,Tq,I)*G%I,O=Cv(z,Sr,I)*$%I,Q=Cv(O,VM,I)*O%I,X=Cv(Q,v,I)*Q%I,N=Cv(X,g,I)*X%I,w=Cv(N,U,I)*N%I,q=Cv(w,r,I)*w%I,u=Cv(q,r,I)*w%I,W=Cv(u,v,I)*Q%I;return{pow_p_5_8:Cv(W,Tq,I)*$%I,b2:G}}function ZM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var HO=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function EO($,v){let g=Kg,U=E$(v*v*v,g),r=E$(U*U*v,g),I=Pq($*r).pow_p_5_8,J=E$($*U*I,g),G=E$(v*J*J,g),z=J,O=E$(J*HO,g),Q=G===$,X=G===E$(-$,g),N=G===E$(-$*HO,g);if(Q)J=z;if(X||N)J=O;if(Kr(J,g))J=E$(-J,g);return{isValid:Q||X,value:J}}var Rg=Kq(nO,{uvRatio:EO}),dr=(()=>Rg.Fp)(),kq=(()=>Rg.Fn)();var wJ=(()=>{let $=Kg;return Sq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Pq(v);return E$(Cv(g,WM,$)*U,$)},adjustScalarBytes:ZM})})();var PO=HO,jM=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),MM=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),RM=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),KM=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Aq=($)=>EO(Sr,$),SM=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),kO=($)=>dr.create(mv($)&SM);function Hq($){let{d:v}=nO,g=Kg,U=(S)=>dr.create(S),r=U(PO*$*$),I=U((r+Sr)*RM),J=BigInt(-1),G=U((J-v*r)*U(r+v)),{isValid:z,value:O}=EO(I,G),Q=U(O*$);if(!Kr(Q,g))Q=U(-Q);if(!z)O=Q;if(!z)J=r;let X=U(J*(r-Sr)*KM-G),N=O*O,w=U((O+O)*G),q=U(X*jM),u=U(Sr-N),W=U(Sr+N);return new Rg(U(w*W),U(u*q),U(q*W),U(w*u))}class Qv extends AO{static BASE=(()=>new Qv(Rg.BASE))();static ZERO=(()=>new Qv(Rg.ZERO))();static Fp=(()=>dr)();static Fn=(()=>kq)();constructor($){super($)}static fromAffine($){return new Qv(Rg.fromAffine($))}assertSame($){if(!($ instanceof Qv))throw Error("RistrettoPoint expected")}init($){return new Qv($)}static fromBytes($){o$($,32);let{a:v,d:g}=nO,U=Kg,r=(L)=>dr.create(L),I=kO($);if(!tY(dr.toBytes(I),$)||Kr(I,U))throw Error("invalid ristretto255 encoding 1");let J=r(I*I),G=r(Sr+v*J),z=r(Sr-v*J),O=r(G*G),Q=r(z*z),X=r(v*g*O-Q),{isValid:N,value:w}=Aq(r(X*Q)),q=r(w*z),u=r(w*q*X),W=r((I+I)*q);if(Kr(W,U))W=r(-W);let S=r(G*u),R=r(W*S);if(!N||Kr(R,U)||S===qM)throw Error("invalid ristretto255 encoding 2");return new Qv(new Rg(W,S,Sr,R))}static fromHex($){return Qv.fromBytes(lU($))}toBytes(){let{X:$,Y:v,Z:g,T:U}=this.ep,r=Kg,I=(u)=>dr.create(u),J=I(I(g+v)*I(g-v)),G=I($*v),z=I(G*G),{value:O}=Aq(I(J*z)),Q=I(O*J),X=I(O*G),N=I(Q*X*U),w;if(Kr(U*N,r)){let u=I(v*PO),W=I($*PO);$=u,v=W,w=I(Q*MM)}else w=X;if(Kr($*N,r))v=I(-v);let q=I((g-v)*w);if(Kr(q,r))q=I(-q);return dr.toBytes(q)}equals($){this.assertSame($);let{X:v,Y:g}=this.ep,{X:U,Y:r}=$.ep,I=(z)=>dr.create(z),J=I(v*r)===I(g*U),G=I(g*r)===I(v*U);return J||G}is0(){return this.equals(Qv.ZERO)}}Object.freeze(Qv.BASE);Object.freeze(Qv.ZERO);Object.freeze(Qv.prototype);Object.freeze(Qv);var TM=Object.freeze({Point:Qv,hashToCurve($,v){let g=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,U=RO($,g,64,n0);return TM.deriveToCurve(U)},hashToScalar($,v={DST:qq}){let g=RO($,v.DST,64,n0);return kq.create(mv(g))},deriveToCurve($){o$($,64);let v=kO($.subarray(0,32)),g=Hq(v),U=kO($.subarray(32,64)),r=Hq(U);return new Qv(g.add(r))}});var nq=!1,AM=!1;async function Eq($,v){if(AM)return await v();try{return await $()}catch(g){if(g instanceof ReferenceError||g instanceof DOMException&&g.name==="NotSupportedError")return await v();else throw g}}async function NJ($,v){return await Eq(async()=>{let g=fO($)?$:await PM($),U=await crypto.subtle.importKey("raw",kM(v),{name:"X25519"},nq,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:U},g,256))},()=>{if(fO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMult($,v)})}async function TI($){return await Eq(async()=>{return NJ($,wJ.GuBytes)},()=>{if(fO($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMultBase($)})}var HM=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function PM($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...HM,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},nq,["deriveBits"])}function fO($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function kM($){return $}class BO{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),EM(Sg($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let g=await this.s.read();if(g.done)return this.buf=Sg($),null;this.buf=g.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Sg(this.transcript)}}}function EM($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function Sg($){let v=$.reduce((r,I)=>r+I.length,0),g=new Uint8Array(v),U=0;for(let r of $)g.set(r,U),U+=r.length;return g}function JU($,...v){return $.pipeThrough(new TransformStream({start(g){for(let U of v)g.enqueue(U)}}))}function YJ($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function CO($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fq($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function Bq($,v){let g=$.getReader(),U=[],r=0;while(r<v){let{done:z,value:O}=await g.read();if(z)throw Error("stream ended before reading "+v.toString()+" bytes");U.push(O),r+=O.length}g.releaseLock();let I=Sg(U),J=I.subarray(0,v),G=JU($,I.subarray(v));return{data:J,rest:G}}class vr{args;body;constructor($,v){this.args=$,this.body=v}}async function fM($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let g=v.split(" ");if(g.length<2||g.shift()!=="->")return{next:v};for(let I of g)if(I.length===0)throw Error("invalid stanza");let U=[];for(;;){let I=await $.readLine();if(I===null)throw Error("invalid stanza");let J=vv.decode(I);if(J.length>48)throw Error("invalid stanza");if(U.push(J),J.length<48)break}let r=Sg(U);return{s:new vr(g,r)}}async function Cq($){let v=new BO($),g=await v.readLine();if(g!=="age-encryption.org/v1")throw Error("invalid version "+(g??"line"));let U=[];for(;;){let{s:r,next:I}=await fM(v);if(r!==void 0){U.push(r);continue}if(!I.startsWith("--- "))throw Error("invalid header");let J=vv.decode(I.slice(4)),{rest:G,transcript:z}=v.close(),O=z.slice(0,z.length-1-I.length+3);return{stanzas:U,headerNoMAC:O,MAC:J,headerSize:z.length,rest:JU($,G)}}}function LO($){let v=[];v.push(`age-encryption.org/v1
 `);for(let g of $){v.push("-> "+g.args.join(" ")+`
 `);for(let U=0;U<g.body.length;U+=48){let r=U+48;if(r>g.body.length)r=g.body.length;v.push(vv.encode(g.body.subarray(U,r))+`
 `)}if(g.body.length%48===0)v.push(`
@@ -267,7 +267,7 @@ volumes:
 volumes:
 `)}function z1($){return aq($,"rover",fw)}function O1($){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let v=PI(fw($)),g=PI(fw(ZJ({serviceName:"rover"})));return v===g}function D1($,v){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let g=v.replace(/\n# AT Protocol publishing\/discovery \(optional, per-user\)\n# Comes from the decrypted users\/<handle>\.secrets\.yaml\.age file when configured\.\n# @sensitive\nATPROTO_APP_PASSWORD=\n/,`
-`);return $===g}function Q1($,v){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let g=v.replace(`writeGitHubEnv("ATPROTO_APP_PASSWORD", secrets["atprotoAppPassword"] ?? "");
+`);return $===g}function Q1($,v){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let g=v.replace(`writeSecretGitHubEnv("ATPROTO_APP_PASSWORD", secrets["atprotoAppPassword"]);
 `,"");return $===g}function X1($){return $.includes('if (eventName !== "push") {')&&$.includes('const currentSha = requireEnv("GITHUB_SHA");')}async function qu($){await wu($,{recursive:!0});let v=Ew($,"views","users.md"),g=!0;try{await v1(v)}catch{g=!1}let U=U1.map(async(r)=>{let I=Ew($,r);await wu(r1(I),{recursive:!0}),await w1(r,I)});if(await Promise.all(U),!g)await mU($)}async function w1($,v){let g=await N1($);try{if(await Nu(v,g,{flag:"wx"}),nw.has($))await kw(v,493);return}catch(G){if(!q1(G,"EEXIST"))throw G}let U=await Yu(v,"utf8");if(U===g){if(nw.has($))await kw(v,493);return}let I=(G1[$]??[]).includes(U),J=$===".env.schema"&&D1(U,g)||$==="deploy/kamal/deploy.yml"&&(z1(U)||O1(U))||$==="deploy/scripts/decrypt-user-secrets.ts"&&Q1(U,g)||$==="deploy/scripts/resolve-deploy-handles.ts"&&X1(U);if(!I&&!J)return;if(await Nu(v,g),nw.has($))await kw(v,493)}async function N1($){if($===".gitignore")return`node_modules/
 .brains-ops/
 users/*.secrets.yaml

package/dist/index.js CHANGED Viewed

@@ -1,5 +1,5 @@
 // @bun
-var Jj=Object.defineProperty;var Gj=($)=>$;function zj($,v){this[$]=Gj.bind(null,v)}var dv=($,v)=>{for(var g in v)Jj($,g,{get:v[g],enumerable:!0,configurable:!0,set:zj.bind(v,g)})};import{access as oR,chmod as b4,mkdir as IW,readFile as GW,writeFile as JW}from"fs/promises";import{dirname as xR,join as i4}from"path";import{fileURLToPath as cR}from"url";var R0={name:"@rizom/ops",version:"0.2.0-alpha.177",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var aw=`ARG BUN_VERSION=1.3.10
+var Jj=Object.defineProperty;var Gj=($)=>$;function zj($,v){this[$]=Gj.bind(null,v)}var dv=($,v)=>{for(var g in v)Jj($,g,{get:v[g],enumerable:!0,configurable:!0,set:zj.bind(v,g)})};import{access as oR,chmod as b4,mkdir as IW,readFile as GW,writeFile as JW}from"fs/promises";import{dirname as xR,join as i4}from"path";import{fileURLToPath as cR}from"url";var R0={name:"@rizom/ops",version:"0.2.0-alpha.179",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var aw=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app
@@ -247,7 +247,7 @@ volumes:
 volumes:
 `)}function pR($){return rN($,"rover",F4)}function tR($){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let v=yU(F4($)),g=yU(F4(K0({serviceName:"rover"})));return v===g}function aR($,v){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let g=v.replace(/\n# AT Protocol publishing\/discovery \(optional, per-user\)\n# Comes from the decrypted users\/<handle>\.secrets\.yaml\.age file when configured\.\n# @sensitive\nATPROTO_APP_PASSWORD=\n/,`
-`);return $===g}function eR($,v){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let g=v.replace(`writeGitHubEnv("ATPROTO_APP_PASSWORD", secrets["atprotoAppPassword"] ?? "");
+`);return $===g}function eR($,v){if($.includes("ATPROTO_APP_PASSWORD"))return!1;let g=v.replace(`writeSecretGitHubEnv("ATPROTO_APP_PASSWORD", secrets["atprotoAppPassword"]);
 `,"");return $===g}function sR($){return $.includes('if (eventName !== "push") {')&&$.includes('const currentSha = requireEnv("GITHUB_SHA");')}async function o4($){await IW($,{recursive:!0});let v=i4($,"views","users.md"),g=!0;try{await oR(v)}catch{g=!1}let U=lR.map(async(r)=>{let I=i4($,r);await IW(xR(I),{recursive:!0}),await $7(r,I)});if(await Promise.all(U),!g)await Wg($)}async function $7($,v){let g=await v7($);try{if(await JW(v,g,{flag:"wx"}),m4.has($))await b4(v,493);return}catch(G){if(!g7(G,"EEXIST"))throw G}let U=await GW(v,"utf8");if(U===g){if(m4.has($))await b4(v,493);return}let I=(hR[$]??[]).includes(U),J=$===".env.schema"&&aR(U,g)||$==="deploy/kamal/deploy.yml"&&(pR(U)||tR(U))||$==="deploy/scripts/decrypt-user-secrets.ts"&&eR(U,g)||$==="deploy/scripts/resolve-deploy-handles.ts"&&sR(U);if(!I&&!J)return;if(await JW(v,g),m4.has($))await b4(v,493)}async function v7($){if($===".gitignore")return`node_modules/
 .brains-ops/
 users/*.secrets.yaml

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.177",
+  "version": "0.2.0-alpha.179",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",

package/templates/rover-pilot/deploy/scripts/decrypt-user-secrets.ts CHANGED Viewed

@@ -18,18 +18,19 @@ const plaintext = await decrypter.decrypt(decoded, "text");
 const secrets = parseFlatYaml(plaintext);
 const pilot = parseFlatYaml(readFileSync("pilot.yaml", "utf8"));
-writeGitHubEnv("AI_API_KEY", secrets["aiApiKey"] ?? "");
-writeGitHubEnv("GIT_SYNC_TOKEN", secrets["gitSyncToken"] ?? "");
-writeGitHubEnv("DISCORD_BOT_TOKEN", secrets["discordBotToken"] ?? "");
-writeGitHubEnv("ATPROTO_APP_PASSWORD", secrets["atprotoAppPassword"] ?? "");
-writeGitHubEnv(
-  "CERTIFICATE_PEM",
-  decodeEscapedSecret(secrets["certificatePem"]),
-);
-writeGitHubEnv(
-  "PRIVATE_KEY_PEM",
-  decodeEscapedSecret(secrets["privateKeyPem"]),
+writeSecretGitHubEnv("AI_API_KEY", secrets["aiApiKey"]);
+writeSecretGitHubEnv("GIT_SYNC_TOKEN", secrets["gitSyncToken"]);
+writeSecretGitHubEnv(
+  "CMS_CONTENT_REPO_PAT",
+  secrets["cmsContentRepoPat"] ?? secrets["gitSyncToken"],
 );
+writeSecretGitHubEnv("DISCORD_BOT_TOKEN", secrets["discordBotToken"]);
+// Per-user AT Protocol publishing credential (optional; from the user's
+// encrypted secrets file). The scaffold wires this so a pilot can publish its
+// brain's agent card to its PDS; a deployment that doesn't publish simply
+// leaves it unset. TLS material (CERTIFICATE_PEM/PRIVATE_KEY_PEM) is handled by
+// the kamal proxy block via shared env, not here.
+writeSecretGitHubEnv("ATPROTO_APP_PASSWORD", secrets["atprotoAppPassword"]);
 writeGitHubOutput(
   "shared_ai_api_key_secret_name",
@@ -39,6 +40,29 @@ writeGitHubOutput(
   "shared_git_sync_token_secret_name",
   requireFlatValue(pilot, "gitSyncToken", "pilot.yaml"),
 );
+writeGitHubOutput(
+  "shared_content_repo_admin_token_secret_name",
+  requireFlatValue(pilot, "contentRepoAdminToken", "pilot.yaml"),
+);
+function writeSecretGitHubEnv(name: string, value: string | undefined): void {
+  if (!value || value.trim().length === 0) {
+    return;
+  }
+  maskGitHubSecret(value);
+  writeGitHubEnv(name, value);
+}
+function maskGitHubSecret(value: string): void {
+  const escaped = value
+    .replace(/%/g, "%25")
+    .replace(/\r/g, "%0D")
+    .replace(/\n/g, "%0A");
+  if (escaped.length > 0 && process.env["GITHUB_ACTIONS"] === "true") {
+    console.log(`::add-mask::${escaped}`);
+  }
+}
 function extractAgeIdentity(contents: string): string {
   const line = contents
@@ -74,10 +98,6 @@ function parseFlatYaml(contents: string): Record<string, string> {
   return result;
 }
-function decodeEscapedSecret(value: string | undefined): string {
-  return value?.replace(/\\n/g, "\n") ?? "";
-}
 function requireFlatValue(
   values: Record<string, string>,
   key: string,

package/templates/rover-pilot/deploy/scripts/resolve-deploy-handles.ts CHANGED Viewed

@@ -43,7 +43,6 @@ const handles = [
       .map((path) => {
         const match =
           path.match(/^users\/([^/]+)\/(?:\.env|brain\.yaml|content\/.*)$/) ??
-          path.match(/^users\/([^/]+)\.yaml$/) ??
           path.match(/^users\/([^/]+)\.secrets\.yaml\.age$/);
         return match?.[1] ?? null;
       })

package/templates/rover-pilot/deploy/scripts/sync-content-repo.ts CHANGED Viewed

@@ -5,53 +5,6 @@ import { dirname, join } from "node:path";
 import { execFileSync } from "node:child_process";
 import { readJsonResponse, requireEnv } from "./helpers";
-const handle = requireEnv("HANDLE");
-const contentRepo = requireEnv("CONTENT_REPO");
-const token = requireEnv("GIT_SYNC_TOKEN");
-const sourceDir = join("users", handle, "content");
-if (!existsSync(sourceDir)) {
-  process.exit(0);
-}
-const { owner, repo } = parseRepoSlug(contentRepo);
-await ensureGitHubRepo({ owner, repo, token });
-const tempRoot = await mkdtemp(join(tmpdir(), "brains-ops-content-"));
-const checkoutDir = join(tempRoot, "repo");
-const remoteUrl = buildAuthenticatedRemoteUrl(owner, repo, token);
-runGit(["clone", remoteUrl, checkoutDir]);
-runGit(["-C", checkoutDir, "checkout", "-B", "main"]);
-const copiedFiles = await copyMissingFiles(sourceDir, checkoutDir);
-if (copiedFiles === 0) {
-  process.exit(0);
-}
-runGit(["-C", checkoutDir, "config", "user.name", "brains-ops[bot]"]);
-runGit([
-  "-C",
-  checkoutDir,
-  "config",
-  "user.email",
-  "41898282+github-actions[bot]@users.noreply.github.com",
-]);
-runGit(["-C", checkoutDir, "add", "."]);
-if (hasNoStagedChanges(checkoutDir)) {
-  process.exit(0);
-}
-runGit([
-  "-C",
-  checkoutDir,
-  "commit",
-  "-m",
-  `chore(content): seed ${handle} anchor profile`,
-]);
-runGit(["-C", checkoutDir, "push", "origin", "HEAD:main"]);
 const STALE_ANCHOR_PROFILE_MARKERS = [
   "name: Your Name Here",
   "Delete this and write your own",
@@ -68,6 +21,55 @@ interface GitHubRepoResponse {
   private?: boolean;
 }
+async function main(): Promise<void> {
+  const handle = requireEnv("HANDLE");
+  const contentRepo = requireEnv("CONTENT_REPO");
+  const token = requireEnv("GIT_SYNC_TOKEN");
+  const sourceDir = join("users", handle, "content");
+  if (!existsSync(sourceDir)) {
+    return;
+  }
+  const { owner, repo } = parseRepoSlug(contentRepo);
+  await ensureGitHubRepo({ owner, repo, token });
+  const tempRoot = await mkdtemp(join(tmpdir(), "brains-ops-content-"));
+  const checkoutDir = join(tempRoot, "repo");
+  const remoteUrl = buildAuthenticatedRemoteUrl(owner, repo, token);
+  runGit(["clone", remoteUrl, checkoutDir]);
+  runGit(["-C", checkoutDir, "checkout", "-B", "main"]);
+  const copiedFiles = await copyMissingFiles(sourceDir, checkoutDir);
+  if (copiedFiles === 0) {
+    return;
+  }
+  runGit(["-C", checkoutDir, "config", "user.name", "brains-ops[bot]"]);
+  runGit([
+    "-C",
+    checkoutDir,
+    "config",
+    "user.email",
+    "41898282+github-actions[bot]@users.noreply.github.com",
+  ]);
+  runGit(["-C", checkoutDir, "add", "."]);
+  if (hasNoStagedChanges(checkoutDir)) {
+    return;
+  }
+  runGit([
+    "-C",
+    checkoutDir,
+    "commit",
+    "-m",
+    `chore(content): seed ${handle} anchor profile`,
+  ]);
+  runGit(["-C", checkoutDir, "push", "origin", "HEAD:main"]);
+}
 async function ensureGitHubRepo(
   options: EnsureGitHubRepoOptions,
 ): Promise<void> {
@@ -177,3 +179,5 @@ function isStaleAnchorProfile(content: string): boolean {
     content.includes(marker),
   );
 }
+await main();