npm - @rizom/ops - Versions diffs - 0.2.0-alpha.195 → 0.2.0-alpha.197 - Mend

@rizom/ops 0.2.0-alpha.195 → 0.2.0-alpha.197

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-var UZ=Object.defineProperty;var IZ=($)=>$;function JZ($,v){this[$]=IZ.bind(null,v)}var yv=($,v)=>{for(var g in v)UZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:JZ.bind(v,g)})};import{parseArgs as GZ}from"util";var OZ={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function QO($,v){let g=$[v];return typeof g==="boolean"?g:void 0}function R0($,v){let g=$[v];return typeof g==="string"?g:void 0}function mw($){let{values:v,positionals:g}=GZ({args:$,options:OZ,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:g[0]??"help",args:g.slice(1),flags:{help:QO(v,"help"),version:QO(v,"version"),dryRun:QO(v,"dry-run"),pushTo:R0(v,"push-to"),cohort:R0(v,"cohort"),anchorId:R0(v,"anchor-id"),handle:R0(v,"handle")}}}var K0={name:"@rizom/ops",version:"0.2.0-alpha.195",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as lM,mkdirSync as yM,readFileSync as sz,writeFileSync as $8}from"fs";import{dirname as dM,join as cq}from"path";function XO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(`${g}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw RangeError(`${g}expected integer >= 0, got ${$}`)}}function o$($,v,g=""){let U=XO($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",O=U?`length=${r}`:`type=${typeof $}`,z=J+"expected Uint8Array"+G+", got "+O;if(!U)throw TypeError(z);throw RangeError(z)}return $}function Qr($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function mg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function S0($,v){o$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw RangeError('"digestInto() output" expected to be of length >='+g)}function T0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Fg($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function M$($,v){return $<<v|$>>>32-v>>>0}var DZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function QZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function XZ($){for(let v=0;v<$.length;v++)$[v]=QZ($[v]);return $}var wO=DZ?($)=>$:XZ,ow=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),wZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function A0($){if(o$($),ow)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=wZ[$[g]];return v}var Dr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Fw($){if($>=Dr._0&&$<=Dr._9)return $-Dr._0;if($>=Dr.A&&$<=Dr.F)return $-(Dr.A-10);if($>=Dr.a&&$<=Dr.f)return $-(Dr.a-10);return}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(ow)try{return Uint8Array.fromHex($)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let v=$.length,g=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=Fw($.charCodeAt(I)),G=Fw($.charCodeAt(I+1));if(J===void 0||G===void 0){let O=$[I]+$[I+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+I)}U[r]=J*16+G}return U}function NZ($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function NO($,v=""){if(typeof $==="string")return NZ($);return o$($,void 0,v)}function YO(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];o$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function H0($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function qO($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.canXOF=U.canXOF,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Xr($=32){C$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var WO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Qr($),o$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Ov(U)}update($){return mg(this),this.iHash.update($),this}digestInto($){mg(this),S0($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,g,U)=>new VO(v,g).update(U).digest();return $.create=(v,g)=>new VO(v,g),$})();function yU($,v,g){if(Qr($),g===void 0)g=new Uint8Array($.outputLen);return dv($,g,v)}var uO=Uint8Array.of(0),xw=Uint8Array.of();function ZO($,v,g,U=32){Qr($),C$(U,"length"),o$(v,void 0,"prk");let r=$.outputLen;if(v.length<r)throw Error('"prk" must be at least HashLen octets');if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=xw;else o$(g,void 0,"info");let J=new Uint8Array(I*r),G=dv.create($,v),O=G._cloneInto(),z=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)uO[0]=Q+1,O.update(Q===0?xw:z).update(g).update(uO).digestInto(z),J.set(z,r*Q),G._cloneInto(O);return G.destroy(),O.destroy(),Ov(z,uO),J.slice(0,U)}var kr=($,v,g,U,r)=>ZO($,yU($,v,g),U,r);function cw($,v,g){return $&v^~$&g}function lw($,v,g){return $&v^$&g^v&g}class P0{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=Fg(this.buffer)}update($){mg(this),o$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=Fg($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){mg(this),S0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Ov(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=Fg($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,z=this.get();if(O>z.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<O;Q++)J.setUint32(4*Q,z[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var wr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),x$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var k0=BigInt(4294967295),yw=BigInt(32);function YZ($,v=!1){if(v)return{h:Number($&k0),l:Number($>>yw&k0)};return{h:Number($>>yw&k0)|0,l:Number($&k0)|0}}function dw($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=YZ($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var jO=($,v,g)=>$>>>g,MO=($,v,g)=>$<<32-g|v>>>g,Ig=($,v,g)=>$>>>g|v<<32-g,Jg=($,v,g)=>$<<32-g|v>>>g,dU=($,v,g)=>$<<64-g|v>>>g-32,hU=($,v,g)=>$>>>g-32|v<<64-g;function hv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var hw=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),pw=($,v,g,U)=>v+g+U+($/4294967296|0)|0,tw=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),aw=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,ew=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),sw=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var WZ=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nr=new Uint32Array(64);class RO extends P0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)nr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=nr[Q-15],N=nr[Q-2],w=_v(X,7)^_v(X,18)^X>>>3,q=_v(N,17)^_v(N,19)^N>>>10;nr[Q]=q+nr[Q-7]+w+nr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:O,H:z}=this;for(let Q=0;Q<64;Q++){let X=_v(J,6)^_v(J,11)^_v(J,25),N=z+X+cw(J,G,O)+WZ[Q]+nr[Q]|0,q=(_v(g,2)^_v(g,13)^_v(g,22))+lw(g,U,r)|0;z=O,O=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,O=O+this.G|0,z=z+this.H|0,this.set(g,U,r,I,J,G,O,z)}roundClean(){Ov(nr)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class $N extends RO{A=wr[0]|0;B=wr[1]|0;C=wr[2]|0;D=wr[3]|0;E=wr[4]|0;F=wr[5]|0;G=wr[6]|0;H=wr[7]|0;constructor(){super(32)}}class VZ extends RO{A=Nr[0]|0;B=Nr[1]|0;C=Nr[2]|0;D=Nr[3]|0;E=Nr[4]|0;F=Nr[5]|0;G=Nr[6]|0;H=Nr[7]|0;constructor(){super(28)}}var vN=(()=>dw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),uZ=(()=>vN[0])(),ZZ=(()=>vN[1])(),Er=new Uint32Array(80),fr=new Uint32Array(80);class pU extends P0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:O,El:z,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=O|0,this.El=z|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)Er[R]=$.getUint32(v),fr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=Er[R-15]|0,B=fr[R-15]|0,F=Ig(L,B,1)^Ig(L,B,8)^jO(L,B,7),l=Jg(L,B,1)^Jg(L,B,8)^MO(L,B,7),d=Er[R-2]|0,_=fr[R-2]|0,b=Ig(d,_,19)^dU(d,_,61)^jO(d,_,6),v$=Jg(d,_,19)^hU(d,_,61)^MO(d,_,6),H=tw(l,v$,fr[R-7],fr[R-16]),K=aw(H,F,b,Er[R-7],Er[R-16]);Er[R]=K|0,fr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:O,Dl:z,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=Ig(Q,X,14)^Ig(Q,X,18)^dU(Q,X,41),B=Jg(Q,X,14)^Jg(Q,X,18)^hU(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=ew(S,B,l,ZZ[R],fr[R]),_=sw(d,W,L,F,uZ[R],Er[R]),b=d|0,v$=Ig(g,U,28)^dU(g,U,34)^dU(g,U,39),H=Jg(g,U,28)^hU(g,U,34)^hU(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=hv(O|0,z|0,_|0,b|0),O=J|0,z=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=hw(b,H,P);g=pw(V,_,v$,K),U=V|0}({h:g,l:U}=hv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=hv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=hv(this.Ch|0,this.Cl|0,J|0,G|0),{h:O,l:z}=hv(this.Dh|0,this.Dl|0,O|0,z|0),{h:Q,l:X}=hv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=hv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=hv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=hv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,O,z,Q,X,N,w,q,u,W,S)}roundClean(){Ov(Er,fr)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class rN extends pU{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class jZ extends pU{Ah=x$[0]|0;Al=x$[1]|0;Bh=x$[2]|0;Bl=x$[3]|0;Ch=x$[4]|0;Cl=x$[5]|0;Dh=x$[6]|0;Dl=x$[7]|0;Eh=x$[8]|0;El=x$[9]|0;Fh=x$[10]|0;Fl=x$[11]|0;Gh=x$[12]|0;Gl=x$[13]|0;Hh=x$[14]|0;Hl=x$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class MZ extends pU{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class RZ extends pU{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var L$=qO(()=>new $N,WO(1));var n0=qO(()=>new rN,WO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L0($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function TO($){if(!L0($))throw TypeError("Uint8Array expected")}function GN($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((g)=>typeof g==="string");else return v.every((g)=>Number.isSafeInteger(g))}function ON($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Br($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aU($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function f0($){if(!Array.isArray($))throw TypeError("array expected")}function B0($,v){if(!GN(!0,v))throw TypeError(`${$}: array of strings expected`)}function AO($,v){if(!GN(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Rv(...$){let v=(I)=>I,g=(I,J)=>(G)=>I(J(G)),U=$.map((I)=>I.encode).reduceRight(g,v),r=$.map((I)=>I.decode).reduce(g,v);return{encode:U,decode:r}}function Kv($){let v=typeof $==="string"?$.split(""):$,g=v.length;B0("alphabet",v);let U=new Map(v.map((r,I)=>[r,I]));return{encode:(r)=>{return f0(r),r.map((I)=>{if(!Number.isSafeInteger(I)||I<0||I>=g)throw Error(`alphabet.encode: digit index outside alphabet "${I}". Allowed: ${$}`);return v[I]})},decode:(r)=>{return f0(r),r.map((I)=>{Br("alphabet.decode",I);let J=U.get(I);if(J===void 0)throw Error(`Unknown letter: "${I}". Allowed: ${$}`);return J})}}}function Sv($=""){return Br("join",$),{encode:(v)=>{return B0("join.decode",v),v.join($)},decode:(v)=>{return Br("join.decode",v),v.split($)}}}function _0($,v="="){return aU($),Br("padding",v),{encode(g){B0("padding.encode",g);while(g.length*$%8)g.push(v);return g},decode(g){B0("padding.decode",g);let U=g.length;if(U*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;U>0&&g[U-1]===v;U--)if((U-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return g.slice(0,U)}}}function zN($){return ON($),{encode:(v)=>v,decode:(v)=>$(v)}}function gN($,v,g){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(g<2)throw RangeError(`convertRadix: invalid to=${g}, base cannot be less than 2`);if(f0($),!$.length)return[];let U=0,r=[],I=Array.from($,(G)=>{if(aU(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),J=I.length;while(!0){let G=0,O=!0;for(let z=U;z<J;z++){let Q=I[z],X=v*G,N=X+Q;if(!Number.isSafeInteger(N)||X/v!==G||N-Q!==X)throw Error("convertRadix: carry overflow");let w=N/g;G=N%g;let q=Math.floor(w);if(I[z]=q,!Number.isSafeInteger(q)||q*g+G!==N)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!q)U=z;else O=!1}if(r.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)r.push(0);return r.reverse()}var DN=($,v)=>v===0?$:DN(v,$%v),C0=($,v)=>$+(v-DN($,v)),E0=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function KO($,v,g,U){if(f0($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(g<=0||g>32)throw RangeError(`convertRadix2: wrong to=${g}`);if(C0(v,g)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${g} carryBits=${C0(v,g)}`);let r=0,I=0,J=E0[v],G=E0[g]-1,O=[];for(let z of $){if(aU(z),z>=J)throw Error(`convertRadix2: invalid data word=${z} from=${v}`);if(r=r<<v|z,I+v>32)throw Error(`convertRadix2: carry overflow pos=${I} from=${v}`);I+=v;for(;I>=g;I-=g)O.push((r>>I-g&G)>>>0);let Q=E0[I];if(Q===void 0)throw Error("invalid carry");r&=Q-1}if(r=r<<g-I&G,!U&&I>=v)throw Error("Excess padding");if(!U&&r>0)throw Error(`Non-zero padding: ${r}`);if(U&&I>0)O.push(r>>>0);return O}function KZ($){aU($);let v=256;return{encode:(g)=>{if(!L0(g))throw TypeError("radix.encode input should be Uint8Array");return gN(Array.from(g),v,$)},decode:(g)=>{return AO("radix.decode",g),Uint8Array.from(gN(g,$,v))}}}function kv($,v=!1){if(aU($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(C0(8,$)>32||C0($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(g)=>{if(!L0(g))throw TypeError("radix2.encode input should be Uint8Array");return KO(Array.from(g),8,$,!v)},decode:(g)=>{return AO("radix2.decode",g),Uint8Array.from(KO(g,$,8,v))}}}function UN($){return ON($),function(...v){try{return $.apply(null,v)}catch(g){}}}var yS=Object.freeze(Rv(kv(4),Kv("0123456789ABCDEF"),Sv(""))),dS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),_0(5),Sv(""))),hS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Sv(""))),pS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),_0(5),Sv(""))),tS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Sv(""))),aS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Sv(""),zN(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),QN=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),SZ=/[\t\n\f\r ]/,XN=($,v)=>{Br("base64",$);let g=v?"base64url":"base64";if($.length>0&&SZ.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:g,lastChunkHandling:"strict"})},HO=Object.freeze(QN?{encode($){return TO($),$.toBase64()},decode($){return XN($,!1)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),_0(6),Sv(""))),vv=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Sv(""))),eS=Object.freeze(QN?{encode($){return TO($),$.toBase64({alphabet:"base64url"})},decode($){return XN($,!0)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),_0(6),Sv(""))),sS=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Sv(""))),PO=($)=>Rv(KZ(58),Kv($),Sv("")),$T=Object.freeze(PO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),vT=Object.freeze(PO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),rT=Object.freeze(PO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var SO=Rv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Sv("")),IN=[996825010,642813549,513874426,1027748829,705979059];function tU($){let v=$>>25,g=($&33554431)<<5;for(let U=0;U<IN.length;U++)if((v>>U&1)===1)g^=IN[U];return g}function JN($,v,g=1){let U=$.length,r=1;for(let I=0;I<U;I++){let J=$.charCodeAt(I);if(J<33||J>126)throw Error(`Invalid prefix (${$})`);r=tU(r)^J>>5}r=tU(r);for(let I=0;I<U;I++)r=tU(r)^$.charCodeAt(I)&31;for(let I of v)r=tU(r)^I;for(let I=0;I<6;I++)r=tU(r);return r^=g,SO.encode(KO([r%E0[30]],30,5,!1))}function wN($){let v=$==="bech32"?1:734539939,g=kv(5),U=g.decode,r=g.encode,I=UN(U);function J(X,N,w=90){if(Br("bech32.encode prefix",X),L0(N))N=Array.from(N);AO("bech32.encode",N);let q=X.length;if(q===0)throw TypeError(`Invalid prefix length ${q}`);let u=q+7+N.length;if(w!==!1&&u>w)throw TypeError(`Length ${u} exceeds limit ${w}`);let W=X.toLowerCase(),S=JN(W,N,v);return`${W}1${SO.encode(N)}${S}`}function G(X,N=90){Br("bech32.decode input",X);let w=X.length;if(w<8||N!==!1&&w>N)throw TypeError(`invalid string length: ${w} (${X}). Expected (8..${N})`);let q=X.toLowerCase();if(X!==q&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let u=q.lastIndexOf("1");if(u===0||u===-1)throw Error('Letter "1" must be present between prefix and data only');let W=q.slice(0,u),S=q.slice(u+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let R=SO.decode(S).slice(0,-6),L=JN(W,R,v);if(!S.endsWith(L))throw Error(`Invalid checksum in ${X}: expected "${L}"`);return{prefix:W,words:R}}let O=UN(G);function z(X){let{prefix:N,words:w}=G(X,!1);return{prefix:N,words:w,bytes:U(w)}}function Q(X,N){return J(X,r(N))}return{encode:J,decode:G,encodeFromBytes:Q,decodeToBytes:z,decodeUnsafe:O,fromWords:U,fromWordsUnsafe:I,toWords:r}}var Tv=Object.freeze(wN("bech32")),gT=Object.freeze(wN("bech32m"));var TZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),AZ={encode($){return TO($),$.toHex()},decode($){return Br("hex",$),Uint8Array.fromHex($)}},UT=Object.freeze(TZ?AZ:Rv(kv(4),Kv("0123456789abcdef"),Sv(""),zN(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function PZ($,v,g,U){Qr($);let r=H0({dkLen:32,asyncTick:10},U),{c:I,dkLen:J,asyncTick:G}=r;if(C$(I,"c"),C$(J,"dkLen"),C$(G,"asyncTick"),I<1)throw Error("iterations (c) must be >= 1");if(J<1)throw Error('"dkLen" must be >= 1');if(J>4294967295*$.outputLen)throw Error("derived key too long");let O=NO(v,"password"),z=NO(g,"salt"),Q=new Uint8Array(J),X=dv.create($,O),N=X._cloneInto().update(z);return{c:I,dkLen:J,asyncTick:G,DK:Q,PRF:X,PRFSalt:N}}function kZ($,v,g,U,r){if($.destroy(),v.destroy(),U)U.destroy();return Ov(r),g}function kO($,v,g,U){let{c:r,dkLen:I,DK:J,PRF:G,PRFSalt:O}=PZ($,v,g,U),z,Q=new Uint8Array(4),X=Fg(Q),N=new Uint8Array(G.outputLen);for(let w=1,q=0;q<I;w++,q+=G.outputLen){let u=J.subarray(q,q+G.outputLen);X.setInt32(0,w,!1),(z=O._cloneInto(z)).update(Q).digestInto(N),u.set(N.subarray(0,u.length));for(let W=1;W<r;W++){G._cloneInto(z).update(N).digestInto(N);for(let S=0;S<u.length;S++)u[S]^=N[S]}}return kZ(G,O,J,z,N)}function NN($,v,g,U,r,I){let J=$[v++]^g[U++],G=$[v++]^g[U++],O=$[v++]^g[U++],z=$[v++]^g[U++],Q=$[v++]^g[U++],X=$[v++]^g[U++],N=$[v++]^g[U++],w=$[v++]^g[U++],q=$[v++]^g[U++],u=$[v++]^g[U++],W=$[v++]^g[U++],S=$[v++]^g[U++],R=$[v++]^g[U++],L=$[v++]^g[U++],B=$[v++]^g[U++],F=$[v++]^g[U++],l=J,d=G,_=O,b=z,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let e=0;e<8;e+=2)v$^=M$(l+M|0,7),V^=M$(v$+l|0,9),M^=M$(V+v$|0,13),l^=M$(M+V|0,18),j^=M$(H+d|0,7),n^=M$(j+H|0,9),d^=M$(n+j|0,13),H^=M$(d+n|0,18),f^=M$(Z+K|0,7),_^=M$(f+Z|0,9),K^=M$(_+f|0,13),Z^=M$(K+_|0,18),b^=M$(o+A|0,7),P^=M$(b+o|0,9),A^=M$(P+b|0,13),o^=M$(A+P|0,18),d^=M$(l+b|0,7),_^=M$(d+l|0,9),b^=M$(_+d|0,13),l^=M$(b+_|0,18),K^=M$(H+v$|0,7),P^=M$(K+H|0,9),v$^=M$(P+K|0,13),H^=M$(v$+P|0,18),A^=M$(Z+j|0,7),V^=M$(A+Z|0,9),j^=M$(V+A|0,13),Z^=M$(j+V|0,18),M^=M$(o+f|0,7),n^=M$(M+o|0,9),f^=M$(n+M|0,13),o^=M$(f+n|0,18);r[I++]=J+l|0,r[I++]=G+d|0,r[I++]=O+_|0,r[I++]=z+b|0,r[I++]=Q+v$|0,r[I++]=X+H|0,r[I++]=N+K|0,r[I++]=w+P|0,r[I++]=q+V|0,r[I++]=u+j|0,r[I++]=W+Z|0,r[I++]=S+A|0,r[I++]=R+M|0,r[I++]=L+n|0,r[I++]=B+f|0,r[I++]=F+o|0}function nO($,v,g,U,r){let I=U+0,J=U+16*r;for(let G=0;G<16;G++)g[J+G]=$[v+(2*r-1)*16+G];for(let G=0;G<r;G++,I+=16,v+=16){if(NN(g,J,$,v,g,I),G>0)J+=16;NN(g,I,$,v+=16,g,J)}}function nZ($,v,g){let U=H0({dkLen:32,asyncTick:10,maxmem:1073742848},g),{N:r,r:I,p:J,dkLen:G,asyncTick:O,maxmem:z,onProgress:Q}=U;if(C$(r,"N"),C$(I,"r"),C$(J,"p"),C$(G,"dkLen"),C$(O,"asyncTick"),C$(z,"maxmem"),Q!==void 0&&typeof Q!=="function")throw Error("progressCb must be a function");let X=128*I,N=X/4,w=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(J<1||J>(w-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let q=X*(r+J+1);if(q>z)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+q+", maxmem="+z);let u=kO(L$,$,v,{c:1,dkLen:X*J}),W=T0(u),S=T0(new Uint8Array(X*r)),R=T0(new Uint8Array(X)),L=()=>{};if(Q){let B=2*r*J,F=Math.max(Math.floor(B/1e4),1),l=0;L=()=>{if(l++,Q&&(!(l%F)||l===B))Q(l/B)}}return{N:r,r:I,p:J,dkLen:G,blockSize32:N,V:S,B32:W,B:u,tmp:R,blockMixCb:L,asyncTick:O}}function EZ($,v,g,U,r){let I=kO(L$,$,g,{c:1,dkLen:v});return Ov(g,U,r),I}function EO($,v,g){let{N:U,r,p:I,dkLen:J,blockSize32:G,V:O,B32:z,B:Q,tmp:X,blockMixCb:N}=nZ($,v,g);wO(z);for(let w=0;w<I;w++){let q=G*w;for(let u=0;u<G;u++)O[u]=z[q+u];for(let u=0,W=0;u<U-1;u++)nO(O,W,O,W+=G,r),N();nO(O,(U-1)*G,z,q,r),N();for(let u=0;u<U;u++){let W=(z[q+G-16]&U-1)>>>0;for(let S=0;S<G;S++)X[S]=z[q+S]^O[W*G+S];nO(X,0,z,q,r),N()}}return wO(z),EZ($,J,Q,O,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function fZ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function b0($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function og($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,g=""){let U=fZ($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",O=U?`length=${r}`:`type=${typeof $}`,z=J+"expected Uint8Array"+G+", got "+O;if(!U)throw TypeError(z);throw RangeError(z)}return $}function fO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function YN($,v,g=!1){b$($,void 0,"output");let U=v.outputLen;if($.length<U)throw RangeError("digestInto() expects output buffer of length at least "+U);if(g&&!xg($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function BZ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Gg=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),CZ=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var LZ=($)=>{for(let v=0;v<$.length;v++)$[v]=CZ($[v]);return $},Yr=Gg?($)=>$:LZ;function qN($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function WN($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function VN($,v,g){let U=v,r=g||(()=>[]),I=(G,O)=>U(O,...r(G)).update(G).digest(),J=U(new Uint8Array($),...r(new Uint8Array(0)));return I.outputLen=J.outputLen,I.blockLen=J.blockLen,I.create=(G,...O)=>U(G,...O),I}var uN=($,v)=>{function g(U,...r){if(b$(U,void 0,"key"),$.nonceLength!==void 0){let Q=r[0];b$(Q,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let I=$.tagLength;if(I&&r[1]!==void 0)b$(r[1],void 0,"AAD");let J=v(U,...r),G=(Q,X)=>{if(X!==void 0){if(Q!==2)throw Error("cipher output not supported");b$(X,void 0,"output")}},O=!1;return{encrypt(Q,X){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(Q),G(J.encrypt.length,X),J.encrypt(Q,X)},decrypt(Q,X){if(b$(Q),I&&Q.length<I)throw Error('"ciphertext" expected length bigger than tagLength='+I);return G(J.decrypt.length,X),J.decrypt(Q,X)}}}return Object.assign(g,$),g};function eU($,v,g=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(g&&!xg(v))throw Error("invalid output, must be aligned");return v}function ZN($,v,g){og($),og(v),b0(g);let U=new Uint8Array(16),r=BZ(U);return r.setBigUint64(0,BigInt(v),g),r.setBigUint64(8,BigInt($),g),U}function xg($){return $.byteOffset%4===0}function cg($){return Uint8Array.from(b$($))}var MN=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),_Z=(()=>Yr(pv(MN("expand 16-byte k"))))(),bZ=(()=>Yr(pv(MN("expand 32-byte k"))))();function R$($,v){return $<<v|$>>>32-v}var sU=64,iZ=16,BO=(()=>4294967295)(),jN=Uint32Array.of();function mZ($,v,g,U,r,I,J,G){let O=r.length,z=new Uint8Array(sU),Q=pv(z),X=Gg&&xg(r)&&xg(I),N=X?pv(r):jN,w=X?pv(I):jN;if(!Gg){for(let q=0;q<O;J++){if($(v,g,U,Q,J,G),Yr(Q),J>=BO)throw Error("arx: counter overflow");let u=Math.min(sU,O-q);for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^z[W];q+=u}return}for(let q=0;q<O;J++){if($(v,g,U,Q,J,G),J>=BO)throw Error("arx: counter overflow");let u=Math.min(sU,O-q);if(X&&u===sU){let W=q/4;if(q%4!==0)throw Error("arx: invalid block position");for(let S=0,R;S<iZ;S++)R=W+S,w[R]=N[R]^Q[S];q+=sU;continue}for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^z[W];q+=u}}function RN($,v){let{allowShortKeys:g,extendNonceFn:U,counterLength:r,counterRight:I,rounds:J}=qN({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return og(r),og(J),b0(I),b0(g),(G,O,z,Q,X=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(z,void 0,"data");let N=z.length;if(Q=eU(N,Q,!1),og(X),X<0||X>=BO)throw Error("arx: counter overflow");let w=[],q=G.length,u,W;if(q===32)w.push(u=cg(G)),W=bZ;else if(q===16&&g)u=new Uint8Array(32),u.set(G),u.set(G,16),W=_Z,w.push(u);else throw b$(G,32,"arx key"),Error("invalid key size");if(!Gg||!xg(O))w.push(O=cg(O));let S=pv(u);if(U){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=O.subarray(0,16);if(Gg)U(W,S,pv(B),S);else{let F=Yr(Uint32Array.from(W));U(F,S,pv(B),S),bv(F),Yr(S)}O=O.subarray(16)}else if(!Gg)Yr(S);let R=16-r;if(R!==O.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let B=new Uint8Array(12);B.set(O,I?0:12-O.length),O=B,w.push(O)}let L=Yr(pv(O));try{return mZ($,W,S,L,z,Q,X,J),Q}finally{bv(...w)}}}function l$($,v){return $[v++]&255|($[v++]&255)<<8}class KN{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cg(b$($,32,"key"));let v=l$($,0),g=l$($,2),U=l$($,4),r=l$($,6),I=l$($,8),J=l$($,10),G=l$($,12),O=l$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|g<<3)&8191,this.r[2]=(g>>>10|U<<6)&7939,this.r[3]=(U>>>7|r<<9)&8191,this.r[4]=(r>>>4|I<<12)&255,this.r[5]=I>>>1&8190,this.r[6]=(I>>>14|J<<2)&8191,this.r[7]=(J>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let z=0;z<8;z++)this.pad[z]=l$($,16+2*z)}process($,v,g=!1){let U=g?0:2048,{h:r,r:I}=this,J=I[0],G=I[1],O=I[2],z=I[3],Q=I[4],X=I[5],N=I[6],w=I[7],q=I[8],u=I[9],W=l$($,v+0),S=l$($,v+2),R=l$($,v+4),L=l$($,v+6),B=l$($,v+8),F=l$($,v+10),l=l$($,v+12),d=l$($,v+14),_=r[0]+(W&8191),b=r[1]+((W>>>13|S<<3)&8191),v$=r[2]+((S>>>10|R<<6)&8191),H=r[3]+((R>>>7|L<<9)&8191),K=r[4]+((L>>>4|B<<12)&8191),P=r[5]+(B>>>1&8191),V=r[6]+((B>>>14|F<<2)&8191),j=r[7]+((F>>>11|l<<5)&8191),Z=r[8]+((l>>>8|d<<8)&8191),A=r[9]+(d>>>5|U),M=0,n=M+_*J+b*(5*u)+v$*(5*q)+H*(5*w)+K*(5*N);M=n>>>13,n&=8191,n+=P*(5*X)+V*(5*Q)+j*(5*z)+Z*(5*O)+A*(5*G),M+=n>>>13,n&=8191;let f=M+_*G+b*J+v$*(5*u)+H*(5*q)+K*(5*w);M=f>>>13,f&=8191,f+=P*(5*N)+V*(5*X)+j*(5*Q)+Z*(5*z)+A*(5*O),M+=f>>>13,f&=8191;let o=M+_*O+b*G+v$*J+H*(5*u)+K*(5*q);M=o>>>13,o&=8191,o+=P*(5*w)+V*(5*N)+j*(5*X)+Z*(5*Q)+A*(5*z),M+=o>>>13,o&=8191;let e=M+_*z+b*O+v$*G+H*J+K*(5*u);M=e>>>13,e&=8191,e+=P*(5*q)+V*(5*w)+j*(5*N)+Z*(5*X)+A*(5*Q),M+=e>>>13,e&=8191;let I$=M+_*Q+b*z+v$*O+H*G+K*J;M=I$>>>13,I$&=8191,I$+=P*(5*u)+V*(5*q)+j*(5*w)+Z*(5*N)+A*(5*X),M+=I$>>>13,I$&=8191;let G$=M+_*X+b*Q+v$*z+H*O+K*G;M=G$>>>13,G$&=8191,G$+=P*J+V*(5*u)+j*(5*q)+Z*(5*w)+A*(5*N),M+=G$>>>13,G$&=8191;let D$=M+_*N+b*X+v$*Q+H*z+K*O;M=D$>>>13,D$&=8191,D$+=P*G+V*J+j*(5*u)+Z*(5*q)+A*(5*w),M+=D$>>>13,D$&=8191;let w$=M+_*w+b*N+v$*X+H*Q+K*z;M=w$>>>13,w$&=8191,w$+=P*O+V*G+j*J+Z*(5*u)+A*(5*q),M+=w$>>>13,w$&=8191;let Q$=M+_*q+b*w+v$*N+H*X+K*Q;M=Q$>>>13,Q$&=8191,Q$+=P*z+V*O+j*G+Z*J+A*(5*u),M+=Q$>>>13,Q$&=8191;let X$=M+_*u+b*q+v$*w+H*N+K*X;M=X$>>>13,X$&=8191,X$+=P*Q+V*z+j*O+Z*G+A*J,M+=X$>>>13,X$&=8191,M=(M<<2)+M|0,M=M+n|0,n=M&8191,M=M>>>13,f+=M,r[0]=n,r[1]=f,r[2]=o,r[3]=e,r[4]=I$,r[5]=G$,r[6]=D$,r[7]=w$,r[8]=Q$,r[9]=X$}finalize(){let{h:$,pad:v}=this,g=new Uint16Array(10),U=$[1]>>>13;$[1]&=8191;for(let J=2;J<10;J++)$[J]+=U,U=$[J]>>>13,$[J]&=8191;$[0]+=U*5,U=$[0]>>>13,$[0]&=8191,$[1]+=U,U=$[1]>>>13,$[1]&=8191,$[2]+=U,g[0]=$[0]+5,U=g[0]>>>13,g[0]&=8191;for(let J=1;J<10;J++)g[J]=$[J]+U,U=g[J]>>>13,g[J]&=8191;g[9]-=8192;let r=(U^1)-1;for(let J=0;J<10;J++)g[J]&=r;r=~r;for(let J=0;J<10;J++)$[J]=$[J]&r|g[J];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let I=$[0]+v[0];$[0]=I&65535;for(let J=1;J<8;J++)I=($[J]+v[J]|0)+(I>>>16)|0,$[J]=I&65535;bv(g)}update($){fO(this),b$($),$=cg($);let{buffer:v,blockLen:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(g-this.pos,U-r);if(I===g){for(;g<=U-r;r+=g)this.process($,r);continue}if(v.set($.subarray(r,r+I),this.pos),this.pos+=I,r+=I,this.pos===g)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){fO(this),YN($,this),this.finished=!0;let{buffer:v,h:g}=this,{pos:U}=this;if(U){v[U++]=1;for(;U<16;U++)v[U]=0;this.process(v,0,!0)}this.finalize();let r=0;for(let I=0;I<8;I++)$[r++]=g[I]>>>0,$[r++]=g[I]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}}var SN=VN(32,($)=>new KN($));function FZ($,v,g,U,r,I=20){let J=$[0],G=$[1],O=$[2],z=$[3],Q=v[0],X=v[1],N=v[2],w=v[3],q=v[4],u=v[5],W=v[6],S=v[7],R=r,L=g[0],B=g[1],F=g[2],l=J,d=G,_=O,b=z,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let I$=0;I$<I;I$+=2)l=l+v$|0,M=R$(M^l,16),V=V+M|0,v$=R$(v$^V,12),l=l+v$|0,M=R$(M^l,8),V=V+M|0,v$=R$(v$^V,7),d=d+H|0,n=R$(n^d,16),j=j+n|0,H=R$(H^j,12),d=d+H|0,n=R$(n^d,8),j=j+n|0,H=R$(H^j,7),_=_+K|0,f=R$(f^_,16),Z=Z+f|0,K=R$(K^Z,12),_=_+K|0,f=R$(f^_,8),Z=Z+f|0,K=R$(K^Z,7),b=b+P|0,o=R$(o^b,16),A=A+o|0,P=R$(P^A,12),b=b+P|0,o=R$(o^b,8),A=A+o|0,P=R$(P^A,7),l=l+H|0,o=R$(o^l,16),Z=Z+o|0,H=R$(H^Z,12),l=l+H|0,o=R$(o^l,8),Z=Z+o|0,H=R$(H^Z,7),d=d+K|0,M=R$(M^d,16),A=A+M|0,K=R$(K^A,12),d=d+K|0,M=R$(M^d,8),A=A+M|0,K=R$(K^A,7),_=_+P|0,n=R$(n^_,16),V=V+n|0,P=R$(P^V,12),_=_+P|0,n=R$(n^_,8),V=V+n|0,P=R$(P^V,7),b=b+v$|0,f=R$(f^b,16),j=j+f|0,v$=R$(v$^j,12),b=b+v$|0,f=R$(f^b,8),j=j+f|0,v$=R$(v$^j,7);let e=0;U[e++]=J+l|0,U[e++]=G+d|0,U[e++]=O+_|0,U[e++]=z+b|0,U[e++]=Q+v$|0,U[e++]=X+H|0,U[e++]=N+K|0,U[e++]=w+P|0,U[e++]=q+V|0,U[e++]=u+j|0,U[e++]=W+Z|0,U[e++]=S+A|0,U[e++]=R+M|0,U[e++]=L+n|0,U[e++]=B+f|0,U[e++]=F+o|0}var oZ=RN(FZ,{counterRight:!1,counterLength:4,allowShortKeys:!1});var xZ=new Uint8Array(16),TN=($,v)=>{$.update(v);let g=v.length%16;if(g)$.update(xZ.subarray(g))},cZ=new Uint8Array(32);function AN($,v,g,U,r){if(r!==void 0)b$(r,void 0,"AAD");let I=$(v,g,cZ),J=ZN(U.length,r?r.length:0,!0),G=SN.create(I);if(r)TN(G,r);TN(G,U),G.update(J);let O=G.digest();return bv(I,J),O}var lZ=($)=>(v,g,U)=>{return{encrypt(I,J){let G=I.length;J=eU(G+16,J,!1),J.set(I);let O=J.subarray(0,-16);$(v,g,O,O,1);let z=AN($,v,g,O,U);return J.set(z,G),bv(z),J},decrypt(I,J){J=eU(I.length-16,J,!1);let G=I.subarray(0,-16),O=I.subarray(-16),z=AN($,v,g,G,U);if(!WN(O,z))throw bv(z),Error("invalid tag");return J.set(I.subarray(0,-16)),$(v,g,J,J,1),bv(z),J}}},nv=uN({blockSize:64,nonceLength:12,tagLength:16},lZ(oZ));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function lg($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,v=""){if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw Error(`${g}expected integer >= 0, got ${$}`)}}function Y$($,v,g=""){let U=lg($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",O=U?`length=${r}`:`type=${typeof $}`;throw Error(J+"expected Uint8Array"+G+", got "+O)}return $}function Ev($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Wr($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function i0($,v){Y$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw Error('"digestInto() output" expected to be of length >='+g)}function m0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function F0($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function iv($,v){return $<<32-v|$>>>v}var yZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function dZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function hZ($){for(let v=0;v<$.length;v++)$[v]=dZ($[v]);return $}var CO=yZ?($)=>$:hZ,PN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),pZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function Og($){if(Y$($),PN)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=pZ[$[g]];return v}var qr={_0:48,_9:57,A:65,F:70,a:97,f:102};function HN($){if($>=qr._0&&$<=qr._9)return $-qr._0;if($>=qr.A&&$<=qr.F)return $-(qr.A-10);if($>=qr.a&&$<=qr.f)return $-(qr.a-10);return}function zg($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(PN)return Uint8Array.fromHex($);let v=$.length,g=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=HN($.charCodeAt(I)),G=HN($.charCodeAt(I+1));if(J===void 0||G===void 0){let O=$[I]+$[I+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+I)}U[r]=J*16+G}return U}function _$(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];Y$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function yg($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Cr($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var Lr=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _O=BigInt(0),LO=BigInt(1);function $I($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw Error(g+"expected boolean, got type="+typeof $)}return $}function kN($){if(typeof $==="bigint"){if(!o0($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function vI($){let v=kN($).toString(16);return v.length&1?"0"+v:v}function nN($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_O:BigInt("0x"+$)}function _r($){return nN(Og($))}function br($){return nN(Og(x0(Y$($)).reverse()))}function dg($,v){m$(v),$=kN($);let g=zg($.toString(16).padStart(v*2,"0"));if(g.length!==v)throw Error("number too large");return g}function rI($,v){return dg($,v).reverse()}function x0($){return Uint8Array.from($)}function ir($){return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw Error(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var o0=($)=>typeof $==="bigint"&&_O<=$;function tZ($,v,g){return o0($)&&o0(v)&&o0(g)&&v<=$&&$<g}function gI($,v,g,U){if(!tZ(v,g,U))throw Error("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function bO($){let v;for(v=0;$>_O;$>>=LO,v+=1);return v}var UI=($)=>(LO<<BigInt($))-LO;function EN($,v,g){if(m$($,"hashLen"),m$(v,"qByteLen"),typeof g!=="function")throw Error("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,O=U($),z=U($),Q=0,X=()=>{O.fill(1),z.fill(0),Q=0},N=(...W)=>g(z,_$(O,...W)),w=(W=r)=>{if(z=N(I,W),O=N(),W.length===0)return;z=N(J,W),O=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){O=N();let R=O.slice();S.push(R),W+=O.length}return _$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while(!(R=S(q())))w();return X(),R}}function Dg($,v={},g={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function U(I,J,G){let O=$[I];if(G&&O===void 0)return;let z=typeof O;if(z!==J||O===null)throw Error(`param "${I}" is invalid: expected ${J}, got ${z}`)}let r=(I,J)=>Object.entries(I).forEach(([G,O])=>U(G,O,J));r(v,!1),r(g,!0)}function iO($){let v=new WeakMap;return(g,...U)=>{let r=v.get(g);if(r!==void 0)return r;let I=$(g,...U);return v.set(g,I),I}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Dv=BigInt(0),rv=BigInt(1),Qg=BigInt(2),CN=BigInt(3),LN=BigInt(4),_N=BigInt(5),aZ=BigInt(7),bN=BigInt(8),eZ=BigInt(9),iN=BigInt(16);function zv($,v){let g=$%v;return g>=Dv?g:v+g}function fv($,v,g){let U=$;while(v-- >Dv)U*=U,U%=g;return U}function fN($,v){if($===Dv)throw Error("invert: expected non-zero number");if(v<=Dv)throw Error("invert: expected positive modulus, got "+v);let g=zv($,v),U=v,r=Dv,I=rv,J=rv,G=Dv;while(g!==Dv){let z=U/g,Q=U%g,X=r-J*z,N=I-G*z;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==rv)throw Error("invert: does not exist");return zv(r,v)}function mO($,v,g){if(!$.eql($.sqr(v),g))throw Error("Cannot find square root")}function mN($,v){let g=($.ORDER+rv)/LN,U=$.pow(v,g);return mO($,U,v),U}function sZ($,v){let g=($.ORDER-_N)/bN,U=$.mul(v,Qg),r=$.pow(U,g),I=$.mul(v,r),J=$.mul($.mul(I,Qg),r),G=$.mul(I,$.sub(J,$.ONE));return mO($,G,v),G}function $j($){let v=c0($),g=FN($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+aZ)/iN;return(G,O)=>{let z=G.pow(O,J),Q=G.mul(z,U),X=G.mul(z,r),N=G.mul(z,I),w=G.eql(G.sqr(Q),O),q=G.eql(G.sqr(X),O);z=G.cmov(z,Q,w),Q=G.cmov(N,X,q);let u=G.eql(G.sqr(Q),O),W=G.cmov(z,Q,u);return mO(G,W,O),W}}function FN($){if($<CN)throw Error("sqrt is not defined for small field");let v=$-rv,g=0;while(v%Qg===Dv)v/=Qg,g++;let U=Qg,r=c0($);while(BN(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return mN;let I=r.pow(U,v),J=(v+rv)/Qg;return function(O,z){if(O.is0(z))return z;if(BN(O,z)!==1)throw Error("Cannot find square root");let Q=g,X=O.mul(O.ONE,I),N=O.pow(z,v),w=O.pow(z,J);while(!O.eql(N,O.ONE)){if(O.is0(N))return O.ZERO;let q=1,u=O.sqr(N);while(!O.eql(u,O.ONE))if(q++,u=O.sqr(u),q===Q)throw Error("Cannot find square root");let W=rv<<BigInt(Q-q-1),S=O.pow(X,W);Q=q,X=O.sqr(S),N=O.mul(N,X),w=O.mul(w,S)}return w}}function vj($){if($%LN===CN)return mN;if($%bN===_N)return sZ;if($%iN===eZ)return $j($);return FN($)}var rj=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function FO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=rj.reduce((U,r)=>{return U[r]="function",U},v);return Dg($,g),$}function gj($,v,g){if(g<Dv)throw Error("invalid exponent, negatives unsupported");if(g===Dv)return $.ONE;if(g===rv)return v;let U=$.ONE,r=v;while(g>Dv){if(g&rv)U=$.mul(U,r);r=$.sqr(r),g>>=rv}return U}function II($,v,g=!1){let U=Array(v.length).fill(g?$.ZERO:void 0),r=v.reduce((J,G,O)=>{if($.is0(G))return J;return U[O]=J,$.mul(J,G)},$.ONE),I=$.inv(r);return v.reduceRight((J,G,O)=>{if($.is0(G))return J;return U[O]=$.mul(J,U[O]),$.mul(J,G)},I),U}function BN($,v){let g=($.ORDER-rv)/Qg,U=$.pow(v,g),r=$.eql(U,$.ONE),I=$.eql(U,$.ZERO),J=$.eql(U,$.neg($.ONE));if(!r&&!I&&!J)throw Error("invalid Legendre symbol result");return r?1:I?0:-1}function Uj($,v){if(v!==void 0)m$(v);let g=v!==void 0?v:$.toString(2).length,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}class oN{ORDER;BITS;BYTES;isLE;ZERO=Dv;ONE=rv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Dv)throw Error("invalid field: expected ORDER > 0, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=Uj($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create($){return zv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Dv<=$&&$<this.ORDER}is0($){return $===Dv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&rv)===rv}neg($){return zv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return zv($*$,this.ORDER)}add($,v){return zv($+v,this.ORDER)}sub($,v){return zv($-v,this.ORDER)}mul($,v){return zv($*v,this.ORDER)}pow($,v){return gj(this,$,v)}div($,v){return zv($*fN(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fN($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=vj(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?rI($,this.BYTES):dg($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if(!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let O=new Uint8Array(U);O.set($,r?0:O.length-$.length),$=O}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?br($):_r($);if(J)G=zv(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return II(this,$)}cmov($,v,g){return g?v:$}}function c0($,v={}){return new oN($,v)}function xN($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function oO($){let v=xN($);return v+Math.ceil(v/2)}function cN($,v,g=!1){Y$($);let U=$.length,r=xN(v),I=oO(v);if(U<16||U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?br($):_r($),G=zv(J,v-rv)+rv;return g?rI(G,r):dg(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hg=BigInt(0),Xg=BigInt(1);function JI($,v){let g=v.negate();return $?g:v}function yO($,v){let g=II($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function hN($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function xO($,v){hN($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=UI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function lN($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),O=$>>J;if(G>U)G-=I,O+=Xg;let z=v*U,Q=z+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:O,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:z}}var cO=new WeakMap,pN=new WeakMap;function lO($){return pN.get($)||1}function yN($){if($!==hg)throw Error("invalid wNAF")}class dO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>hg){if(v&Xg)g=g.add(U);U=U.double(),v>>=Xg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=xO(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let O=1;O<U;O++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=xO($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:O,isZero:z,isNeg:Q,isNegF:X,offsetF:N}=lN(g,J,I);if(g=G,z)r=r.add(JI(X,v[N]));else U=U.add(JI(Q,v[O]))}return yN(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=xO($,this.bits);for(let I=0;I<r.windows;I++){if(g===hg)break;let{nextN:J,offset:G,isZero:O,isNeg:z}=lN(g,I,r);if(g=J,O)continue;else{let Q=v[G];U=U.add(z?Q.negate():Q)}}return yN(g),U}getPrecomputes($,v,g){let U=cO.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);cO.set(v,U)}}return U}cached($,v,g){let U=lO($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=lO($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){hN(v,this.bits),pN.set($,v),cO.delete($)}hasCache($){return lO($)!==1}}function tN($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>hg||U>hg){if(g&Xg)I=I.add(r);if(U&Xg)J=J.add(r);r=r.double(),g>>=Xg,U>>=Xg}return{p1:I,p2:J}}function dN($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return FO(v),v}else return c0($,{isLE:g})}function aN($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let z=v[O];if(!(typeof z==="bigint"&&z>hg))throw Error(`CURVE.${O} must be positive bigint`)}let r=dN(v.p,g.Fp,U),I=dN(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!r.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function l0($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GI=BigInt(0),pg=BigInt(1),y0=BigInt(2);function Ij($){return Dg($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eN($){let v=Ij($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let O=J||Cr,z=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?y0**BigInt(254):y0**BigInt(447),q=G?BigInt(8)*y0**BigInt(251)-pg:BigInt(4)*y0**BigInt(445)-pg,u=w+q+pg,W=(V)=>zv(V,g),S=R(X);function R(V){return rI(W(V),Q)}function L(V){let j=x0(Y$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(br(j))}function B(V){return br(r(x0(Y$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===GI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){gI("u",V,GI,g),gI("scalar",j,w,u);let Z=j,A=V,M=pg,n=GI,f=V,o=pg,e=GI;for(let G$=BigInt(z-1);G$>=GI;G$--){let D$=Z>>G$&pg;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V=O(Q))=>{return Y$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:l0(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}class hO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Ev($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Vv(U)}update($){return Wr(this),this.iHash.update($),this}digestInto($){Wr(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tg=($,v,g)=>new hO($,v).update(g).digest();tg.create=($,v)=>new hO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sN=($,v)=>($+($>=0?v:-v)/vY)/v;function Jj($,v,g){let[[U,r],[I,J]]=v,G=sN(J*$,g),O=sN(-r*$,g),z=$-G*U-O*I,Q=-G*r-O*J,X=z<Vr,N=Q<Vr;if(X)z=-z;if(N)Q=-Q;let w=UI(Math.ceil(bO(g)/2))+ag;if(z<Vr||z>=w||Q<Vr||Q>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:z,k2neg:N,k2:Q}}function tO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pO($,v){let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if($I(g.lowS,"lowS"),$I(g.prehash,"prehash"),g.format!==void 0)tO(g.format);return g}class $Y extends Error{constructor($=""){super($)}}var mr={Err:$Y,_tlv:{encode:($,v)=>{let{Err:g}=mr;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=vI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?vI(r.length/2|128):"";return vI($)+I+r+v},decode($,v){let{Err:g}=mr,U=0;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let O=r&127;if(!O)throw new g("tlv.decode(long): indefinite length not supported");if(O>4)throw new g("tlv.decode(long): byte length is too big");let z=v.subarray(U,U+O);if(z.length!==O)throw new g("tlv.decode: length bytes not complete");if(z[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of z)J=J<<8|Q;if(U+=O,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=mr;if($<Vr)throw new v("integer: negative integers are not allowed");let g=vI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=mr;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _r($)}},toSig($){let{Err:v,_int:g,_tlv:U}=mr,r=Y$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=U.decode(2,I),{v:z,l:Q}=U.decode(2,O);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(z)}},hexFromSig($){let{_tlv:v,_int:g}=mr,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}},Vr=BigInt(0),ag=BigInt(1),vY=BigInt(2),d0=BigInt(3),Gj=BigInt(4);function aO($,v={}){let g=aN("weierstrass",$,v),{Fp:U,Fn:r}=g,I=g.CURVE,{h:J,n:G}=I;Dg(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!U.is0(I.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=gY(U,r);function Q(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,P,V){let{x:j,y:Z}=P.toAffine(),A=U.toBytes(j);if($I(V,"isCompressed"),V){Q();let M=!U.isOdd(Z);return _$(rY(M),A)}else return _$(Uint8Array.of(4),A,U.toBytes(Z))}function N(K){Y$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=z,j=K.length,Z=K[0],A=K.subarray(1);if(j===P&&(Z===2||Z===3)){let M=U.fromBytes(A);if(!U.isValid(M))throw Error("bad point: is not on curve, wrong x");let n=u(M),f;try{f=U.sqrt(n)}catch(I$){let G$=I$ instanceof Error?": "+I$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}Q();let o=U.isOdd(f);if((Z&1)===1!==o)f=U.neg(f);return{x:M,y:f}}else if(j===V&&Z===4){let M=U.BYTES,n=U.fromBytes(A.subarray(0,M)),f=U.fromBytes(A.subarray(M,M*2));if(!W(n,f))throw Error("bad point: is not on curve");return{x:n,y:f}}else throw Error(`bad point: got length ${j}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||X,q=v.fromBytes||N;function u(K){let P=U.sqr(K),V=U.mul(P,K);return U.add(U.add(V,U.mul(K,I.a)),I.b)}function W(K,P){let V=U.sqr(P),j=u(K);return U.eql(V,j)}if(!W(I.Gx,I.Gy))throw Error("bad curve params: generator point");let S=U.mul(U.pow(I.a,d0),Gj),R=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(S,R)))throw Error("bad curve params: a or b");function L(K,P,V=!1){if(!U.isValid(P)||V&&U.is0(P))throw Error(`bad point coordinate ${K}`);return P}function B(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function F(K){if(!O||!O.basises)throw Error("no endo");return Jj(K,O.basises,r.ORDER)}let l=iO((K,P)=>{let{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}),d=iO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!U.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!U.isValid(P)||!U.isValid(V))throw Error("bad point: x or y not field elements");if(!W(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,P,V,j,Z){return V=new b(U.mul(V.X,K),V.Y,V.Z),P=JI(j,P),V=JI(Z,V),P.add(V)}class b{static BASE=new b(I.Gx,I.Gy,U.ONE);static ZERO=new b(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(K,P,V){this.X=L("x",K),this.Y=L("y",P,!0),this.Z=L("z",V),Object.freeze(this)}static CURVE(){return I}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!U.isValid(P)||!U.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(U.is0(P)&&U.is0(V))return b.ZERO;return new b(P,V,U.ONE)}static fromBytes(K){let P=b.fromAffine(q(Y$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return b.fromBytes(zg(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(H.createCache(this,K),!P)this.multiply(d0);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(K)}equals(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.eql(U.mul(P,M),U.mul(Z,j)),f=U.eql(U.mul(V,M),U.mul(A,j));return n&&f}negate(){return new b(this.X,U.neg(this.Y),this.Z)}double(){let{a:K,b:P}=I,V=U.mul(P,d0),{X:j,Y:Z,Z:A}=this,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(A,A),G$=U.mul(j,Z);return G$=U.add(G$,G$),f=U.mul(j,A),f=U.add(f,f),M=U.mul(K,f),n=U.mul(V,I$),n=U.add(M,n),M=U.sub(e,n),n=U.add(e,n),n=U.mul(M,n),M=U.mul(G$,M),f=U.mul(V,f),I$=U.mul(K,I$),G$=U.sub(o,I$),G$=U.mul(K,G$),G$=U.add(G$,f),f=U.add(o,o),o=U.add(f,o),o=U.add(o,I$),o=U.mul(o,G$),n=U.add(n,o),I$=U.mul(Z,A),I$=U.add(I$,I$),o=U.mul(I$,G$),M=U.sub(M,o),f=U.mul(I$,e),f=U.add(f,f),f=U.add(f,f),new b(M,n,f)}add(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.ZERO,f=U.ZERO,o=U.ZERO,e=I.a,I$=U.mul(I.b,d0),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.mul(j,M),Q$=U.add(P,V),X$=U.add(Z,A);Q$=U.mul(Q$,X$),X$=U.add(G$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,j);let W$=U.add(Z,M);return X$=U.mul(X$,W$),W$=U.add(G$,w$),X$=U.sub(X$,W$),W$=U.add(V,j),n=U.add(A,M),W$=U.mul(W$,n),n=U.add(D$,w$),W$=U.sub(W$,n),o=U.mul(e,X$),n=U.mul(I$,w$),o=U.add(n,o),n=U.sub(D$,o),o=U.add(D$,o),f=U.mul(n,o),D$=U.add(G$,G$),D$=U.add(D$,G$),w$=U.mul(e,w$),X$=U.mul(I$,X$),D$=U.add(D$,w$),w$=U.sub(G$,w$),w$=U.mul(e,w$),X$=U.add(X$,w$),G$=U.mul(D$,X$),f=U.add(f,G$),G$=U.mul(W$,X$),n=U.mul(Q$,n),n=U.sub(n,G$),G$=U.mul(Q$,D$),o=U.mul(W$,o),o=U.add(o,G$),new b(n,f,o)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:P}=v;if(!r.isValidNot0(K))throw Error("invalid scalar: out of range");let V,j,Z=(A)=>H.cached(this,A,(M)=>yO(b,M));if(P){let{k1neg:A,k1:M,k2neg:n,k2:f}=F(K),{p:o,f:e}=Z(M),{p:I$,f:G$}=Z(f);j=e.add(G$),V=_(P.beta,o,I$,A,n)}else{let{p:A,f:M}=Z(K);V=A,j=M}return yO(b,[V,j])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!r.isValid(K))throw Error("invalid scalar: out of range");if(K===Vr||V.is0())return b.ZERO;if(K===ag)return V;if(H.hasCache(this))return this.multiply(K);if(P){let{k1neg:j,k1:Z,k2neg:A,k2:M}=F(K),{p1:n,p2:f}=tN(b,V,Z,M);return _(P.beta,n,f,j,A)}else return H.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(J===ag)return!0;if(K)return K(b,this);return H.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(J===ag)return this;if(K)return K(b,this);return this.multiplyUnsafe(J)}isSmallOrder(){return this.multiplyUnsafe(J).is0()}toBytes(K=!0){return $I(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return Og(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=r.BITS,H=new dO(b,v.endo?Math.ceil(v$/2):v$);return b.BASE.precompute(8),b}function rY($){return Uint8Array.of($?2:3)}function gY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function Oj($,v={}){let{Fn:g}=$,U=v.randomBytes||Cr,r=Object.assign(gY($.Fp,g),{seed:oO(g.ORDER)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w=U(r.seed)){return cN(Y$(w,r.seed,"seed"),g.ORDER)}function O(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function z(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r;if(!lg(w))return;if("_lengths"in g&&g._lengths||q===u)return;let S=Y$(w,void 0,"key").length;return S===u||S===W}function Q(w,q,u=!0){if(z(w)===!0)throw Error("first arg must be private key");if(z(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=l0(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function eO($,v,g={}){Ev(v),Dg(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let U=g.randomBytes||Cr,r=g.hmac||((V,j)=>tg(v,V,j)),{Fp:I,Fn:J}=$,{ORDER:G,BITS:O}=J,{keygen:z,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w}=Oj($,g),q={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},u=G*vY<I.ORDER;function W(V){let j=G>>ag;return V>j}function S(V,j){if(!J.isValidNot0(j))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return j}function R(){if(u)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(V,j){tO(j);let Z=w.signature,A=j==="compact"?Z:j==="recovered"?Z+1:void 0;return Y$(V,A)}class B{r;s;recovery;constructor(V,j,Z){if(this.r=S("r",V),this.s=S("s",j),Z!=null){if(R(),![0,1,2,3].includes(Z))throw Error("invalid recovery id");this.recovery=Z}Object.freeze(this)}static fromBytes(V,j=q.format){L(V,j);let Z;if(j==="der"){let{r:f,s:o}=mr.toSig(Y$(V));return new B(f,o)}if(j==="recovered")Z=V[0],j="compact",V=V.subarray(1);let A=w.signature/2,M=V.subarray(0,A),n=V.subarray(A,A*2);return new B(J.fromBytes(M),J.fromBytes(n),Z)}static fromHex(V,j){return this.fromBytes(zg(V),j)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new B(this.r,this.s,V)}recoverPublicKey(V){let{r:j,s:Z}=this,A=this.assertRecovery(),M=A===2||A===3?j+G:j;if(!I.isValid(M))throw Error("invalid recovery id: sig.r+curve.n != R.x");let n=I.toBytes(M),f=$.fromBytes(_$(rY((A&1)===0),n)),o=J.inv(M),e=l(Y$(V,void 0,"msgHash")),I$=J.create(-e*o),G$=J.create(Z*o),D$=$.BASE.multiplyUnsafe(I$).add(f.multiplyUnsafe(G$));if(D$.is0())throw Error("invalid recovery: point at infinify");return D$.assertValidity(),D$}hasHighS(){return W(this.s)}toBytes(V=q.format){if(tO(V),V==="der")return zg(mr.hexFromSig(this));let{r:j,s:Z}=this,A=J.toBytes(j),M=J.toBytes(Z);if(V==="recovered")return R(),_$(Uint8Array.of(this.assertRecovery()),A,M);return _$(A,M)}toHex(V){return Og(this.toBytes(V))}}let F=g.bits2int||function(j){if(j.length>8192)throw Error("input is too large");let Z=_r(j),A=j.length*8-O;return A>0?Z>>BigInt(A):Z},l=g.bits2int_modN||function(j){return J.create(F(j))},d=UI(O);function _(V){return gI("num < 2^"+O,V,Vr,d),J.toBytes(V)}function b(V,j){return Y$(V,void 0,"message"),j?Y$(v(V),void 0,"prehashed message"):V}function v$(V,j,Z){let{lowS:A,prehash:M,extraEntropy:n}=pO(Z,q);V=b(V,M);let f=l(V),o=J.fromBytes(j);if(!J.isValidNot0(o))throw Error("invalid private key");let e=[_(o),_(f)];if(n!=null&&n!==!1){let w$=n===!0?U(w.secretKey):n;e.push(Y$(w$,void 0,"extraEntropy"))}let I$=_$(...e),G$=f;function D$(w$){let Q$=F(w$);if(!J.isValidNot0(Q$))return;let X$=J.inv(Q$),W$=$.BASE.multiply(Q$).toAffine(),P$=J.create(W$.x);if(P$===Vr)return;let n$=J.create(X$*J.create(G$+P$*o));if(n$===Vr)return;let a$=(W$.x===P$?0:2)|Number(W$.y&ag),e$=n$;if(A&&W(n$))e$=J.neg(n$),a$^=1;return new B(P$,e$,u?void 0:a$)}return{seed:I$,k2sig:D$}}function H(V,j,Z={}){let{seed:A,k2sig:M}=v$(V,j,Z);return EN(v.outputLen,J.BYTES,r)(A,M).toBytes(Z.format)}function K(V,j,Z,A={}){let{lowS:M,prehash:n,format:f}=pO(A,q);if(Z=Y$(Z,void 0,"publicKey"),j=b(j,n),!lg(V)){let o=V instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+o)}L(V,f);try{let o=B.fromBytes(V,f),e=$.fromBytes(Z);if(M&&o.hasHighS())return!1;let{r:I$,s:G$}=o,D$=l(j),w$=J.inv(G$),Q$=J.create(D$*w$),X$=J.create(I$*w$),W$=$.BASE.multiplyUnsafe(Q$).add(e.multiplyUnsafe(X$));if(W$.is0())return!1;return J.create(W$.x)===I$}catch(o){return!1}}function P(V,j,Z={}){let{prehash:A}=pO(Z,q);return j=b(j,A),B.fromBytes(V,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:z,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w,Point:$,sign:H,verify:K,recoverPublicKey:P,Signature:B,hash:v})}function UY($,v,g){return $&v^~$&g}function IY($,v,g){return $&v^$&g^v&g}class h0{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=F0(this.buffer)}update($){Wr(this),Y$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=F0($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wr(this),i0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Vv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=F0($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,z=this.get();if(O>z.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<O;Q++)J.setUint32(4*Q,z[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var ur=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),y$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var p0=BigInt(4294967295),JY=BigInt(32);function zj($,v=!1){if(v)return{h:Number($&p0),l:Number($>>JY&p0)};return{h:Number($>>JY&p0)|0,l:Number($&p0)|0}}function t0($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=zj($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var sO=($,v,g)=>$>>>g,$z=($,v,g)=>$<<32-g|v>>>g,wg=($,v,g)=>$>>>g|v<<32-g,Ng=($,v,g)=>$<<32-g|v>>>g,OI=($,v,g)=>$<<64-g|v>>>g-32,zI=($,v,g)=>$>>>g-32|v<<64-g;var GY=($,v,g)=>$<<g|v>>>32-g,OY=($,v,g)=>v<<g|$>>>32-g,zY=($,v,g)=>v<<g-32|$>>>64-g,DY=($,v,g)=>$<<g-32|v>>>64-g;function tv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var QY=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),XY=($,v,g,U)=>v+g+U+($/4294967296|0)|0,wY=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),NY=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,YY=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),qY=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var Qj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Fr=new Uint32Array(64);class vz extends h0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)Fr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=Fr[Q-15],N=Fr[Q-2],w=iv(X,7)^iv(X,18)^X>>>3,q=iv(N,17)^iv(N,19)^N>>>10;Fr[Q]=q+Fr[Q-7]+w+Fr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:O,H:z}=this;for(let Q=0;Q<64;Q++){let X=iv(J,6)^iv(J,11)^iv(J,25),N=z+X+UY(J,G,O)+Qj[Q]+Fr[Q]|0,q=(iv(g,2)^iv(g,13)^iv(g,22))+IY(g,U,r)|0;z=O,O=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,O=O+this.G|0,z=z+this.H|0,this.set(g,U,r,I,J,G,O,z)}roundClean(){Vv(Fr)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class WY extends vz{A=ur[0]|0;B=ur[1]|0;C=ur[2]|0;D=ur[3]|0;E=ur[4]|0;F=ur[5]|0;G=ur[6]|0;H=ur[7]|0;constructor(){super(32)}}class Xj extends vz{A=Zr[0]|0;B=Zr[1]|0;C=Zr[2]|0;D=Zr[3]|0;E=Zr[4]|0;F=Zr[5]|0;G=Zr[6]|0;H=Zr[7]|0;constructor(){super(28)}}var VY=(()=>t0(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),wj=(()=>VY[0])(),Nj=(()=>VY[1])(),or=new Uint32Array(80),xr=new Uint32Array(80);class DI extends h0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:O,El:z,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=O|0,this.El=z|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)or[R]=$.getUint32(v),xr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=or[R-15]|0,B=xr[R-15]|0,F=wg(L,B,1)^wg(L,B,8)^sO(L,B,7),l=Ng(L,B,1)^Ng(L,B,8)^$z(L,B,7),d=or[R-2]|0,_=xr[R-2]|0,b=wg(d,_,19)^OI(d,_,61)^sO(d,_,6),v$=Ng(d,_,19)^zI(d,_,61)^$z(d,_,6),H=wY(l,v$,xr[R-7],xr[R-16]),K=NY(H,F,b,or[R-7],or[R-16]);or[R]=K|0,xr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:O,Dl:z,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=wg(Q,X,14)^wg(Q,X,18)^OI(Q,X,41),B=Ng(Q,X,14)^Ng(Q,X,18)^zI(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=YY(S,B,l,Nj[R],xr[R]),_=qY(d,W,L,F,wj[R],or[R]),b=d|0,v$=wg(g,U,28)^OI(g,U,34)^OI(g,U,39),H=Ng(g,U,28)^zI(g,U,34)^zI(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=tv(O|0,z|0,_|0,b|0),O=J|0,z=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=QY(b,H,P);g=XY(V,_,v$,K),U=V|0}({h:g,l:U}=tv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=tv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=tv(this.Ch|0,this.Cl|0,J|0,G|0),{h:O,l:z}=tv(this.Dh|0,this.Dl|0,O|0,z|0),{h:Q,l:X}=tv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=tv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=tv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=tv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,O,z,Q,X,N,w,q,u,W,S)}roundClean(){Vv(or,xr)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Yj extends DI{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class uY extends DI{Ah=y$[0]|0;Al=y$[1]|0;Bh=y$[2]|0;Bl=y$[3]|0;Ch=y$[4]|0;Cl=y$[5]|0;Dh=y$[6]|0;Dl=y$[7]|0;Eh=y$[8]|0;El=y$[9]|0;Fh=y$[10]|0;Fl=y$[11]|0;Gh=y$[12]|0;Gl=y$[13]|0;Hh=y$[14]|0;Hl=y$[15]|0;constructor(){super(48)}}var gv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Uv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class qj extends DI{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(28)}}class Wj extends DI{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(32)}}var a0=yg(()=>new WY,Lr(1));var ZY=yg(()=>new uY,Lr(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Vj=BigInt(1),jY=BigInt(2),uj=BigInt(3),Zj=BigInt(5),IA=BigInt(8),MY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function jj($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=MY,G=$*$%I*$%I,O=fv(G,jY,I)*G%I,z=fv(O,Vj,I)*$%I,Q=fv(z,Zj,I)*z%I,X=fv(Q,v,I)*Q%I,N=fv(X,g,I)*X%I,w=fv(N,U,I)*N%I,q=fv(w,r,I)*w%I,u=fv(q,r,I)*w%I,W=fv(u,v,I)*Q%I;return{pow_p_5_8:fv(W,jY,I)*$%I,b2:G}}function Mj($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var RY=(()=>{let $=MY;return eN({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=jj(v);return zv(fv(g,uj,$)*U,$)},adjustScalarBytes:Mj})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Rj=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),Kj=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var Sj=aO(Rj),rz=eO(Sj,a0);var Tj=aO(Kj),KY=eO(Tj,ZY);function TY($,v,g){if(Ev($),g===void 0)g=new Uint8Array($.outputLen);return tg($,g,v)}var gz=Uint8Array.of(0),SY=Uint8Array.of();function AY($,v,g,U=32){Ev($),m$(U,"length");let r=$.outputLen;if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=SY;else Y$(g,void 0,"info");let J=new Uint8Array(I*r),G=tg.create($,v),O=G._cloneInto(),z=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)gz[0]=Q+1,O.update(Q===0?SY:z).update(g).update(gz).digestInto(z),J.set(z,r*Q),G._cloneInto(O);return G.destroy(),O.destroy(),Vv(z,gz),J.slice(0,U)}var Aj=BigInt(0),QI=BigInt(1),Hj=BigInt(2),Pj=BigInt(7),kj=BigInt(256),nj=BigInt(113),kY=[],nY=[],EY=[];for(let $=0,v=QI,g=1,U=0;$<24;$++){[g,U]=[U,(2*g+3*U)%5],kY.push(2*(5*U+g)),nY.push(($+1)*($+2)/2%64);let r=Aj;for(let I=0;I<7;I++)if(v=(v<<QI^(v>>Pj)*nj)%kj,v&Hj)r^=QI<<(QI<<BigInt(I))-QI;EY.push(r)}var fY=t0(EY,!0),Ej=fY[0],fj=fY[1],HY=($,v,g)=>g>32?zY($,v,g):GY($,v,g),PY=($,v,g)=>g>32?DY($,v,g):OY($,v,g);function Bj($,v=24){let g=new Uint32Array(10);for(let U=24-v;U<24;U++){for(let J=0;J<10;J++)g[J]=$[J]^$[J+10]^$[J+20]^$[J+30]^$[J+40];for(let J=0;J<10;J+=2){let G=(J+8)%10,O=(J+2)%10,z=g[O],Q=g[O+1],X=HY(z,Q,1)^g[G],N=PY(z,Q,1)^g[G+1];for(let w=0;w<50;w+=10)$[J+w]^=X,$[J+w+1]^=N}let r=$[2],I=$[3];for(let J=0;J<24;J++){let G=nY[J],O=HY(r,I,G),z=PY(r,I,G),Q=kY[J];r=$[Q],I=$[Q+1],$[Q]=O,$[Q+1]=z}for(let J=0;J<50;J+=10){for(let G=0;G<10;G++)g[G]=$[J+G];for(let G=0;G<10;G++)$[J+G]^=~g[(G+2)%10]&g[(G+4)%10]}$[0]^=Ej[U],$[1]^=fj[U]}Vv(g)}class e0{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,g,U=!1,r=24){if(this.blockLen=$,this.suffix=v,this.outputLen=g,this.enableXOF=U,this.rounds=r,m$(g,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=m0(this.state)}clone(){return this._cloneInto()}keccak(){CO(this.state32),Bj(this.state32,this.rounds),CO(this.state32),this.posOut=0,this.pos=0}update($){Wr(this),Y$($);let{blockLen:v,state:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(v-this.pos,U-r);for(let J=0;J<I;J++)g[this.pos++]^=$[r++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:g,blockLen:U}=this;if($[g]^=v,(v&128)!==0&&g===U-1)this.keccak();$[U-1]^=128,this.keccak()}writeInto($){Wr(this,!1),Y$($),this.finish();let v=this.state,{blockLen:g}=this;for(let U=0,r=$.length;U<r;){if(this.posOut>=g)this.keccak();let I=Math.min(g-this.posOut,r-U);$.set(v.subarray(this.posOut,this.posOut+I),U),this.posOut+=I,U+=I}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(i0($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:g,outputLen:U,rounds:r,enableXOF:I}=this;return $||=new e0(v,g,U,I,r),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=r,$.suffix=g,$.outputLen=U,$.enableXOF=I,$.destroyed=this.destroyed,$}}var BY=($,v,g,U={})=>yg(()=>new e0(v,$,g),U);var Yg=BY(6,136,32,Lr(8));var CY=BY(6,72,64,Lr(10));var LY=($,v,g,U={})=>yg((r={})=>new e0(v,$,r.dkLen===void 0?g:r.dkLen,!0),U),_Y=LY(31,168,16,Lr(11)),av=LY(31,136,32,Lr(12));function Uz($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return Uz($),($&$-1)===0&&$!==0}function Iz($,v){Uz($);let g=0;for(let U=0;U<v;U++,$>>>=1)g=g<<1|$&1;return g}function mY($){return Uz($),31-Math.clz32($)}function bY($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let g=mY(v);for(let U=0;U<v;U++){let r=Iz(U,g);if(U<r){let I=$[U];$[U]=$[r],$[r]=I}}return $}var Jz=($,v)=>{let{N:g,roots:U,dit:r,invertButterflies:I=!1,skipStages:J=0,brp:G=!0}=v,O=mY(g);if(!iY(g))throw Error("FFT: Polynomial size should be power of two");let z=r!==I;return(Q)=>{if(Q.length!==g)throw Error("FFT: wrong Polynomial length");if(r&&G)bY(Q);for(let X=0,N=1;X<O-J;X++){let w=r?X+1+J:O-X,q=1<<w,u=q>>1,W=g>>w;for(let S=0;S<g;S+=q)for(let R=0,L=N++;R<u;R++){let B=I?r?g-L:L:R*W,F=S+R,l=S+R+u,d=U[B],_=Q[l],b=Q[F];if(z){let v$=$.mul(_,d);Q[F]=$.add(b,v$),Q[l]=$.sub(b,v$)}else if(I)Q[F]=$.add(_,b),Q[l]=$.mul($.sub(_,b),d);else Q[F]=$.add(b,_),Q[l]=$.mul($.sub(b,_),d)}}if(!r&&G)bY(Q);return Q}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=Cr;function s0($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function FY($){return Uint8Array.from($)}function qg($,...v){let g=(r)=>typeof r==="number"?r:r.bytesLen,U=v.reduce((r,I)=>r+g(I),0);return{bytesLen:U,encode:(r)=>{let I=new Uint8Array(U);for(let J=0,G=0;J<v.length;J++){let O=v[J],z=g(O),Q=typeof O==="number"?r[J]:O.encode(r[J]);if(Y$(Q,z,$),I.set(Q,G),typeof O!=="number")Q.fill(0);G+=z}return I},decode:(r)=>{Y$(r,U,$);let I=[];for(let J of v){let G=g(J),O=r.subarray(0,G);I.push(typeof J==="number"?O:J.decode(O)),r=r.subarray(G)}return I}}}function $J($,v){let g=v*$.bytesLen;return{bytesLen:g,encode:(U)=>{if(U.length!==v)throw Error(`vecCoder.encode: wrong length=${U.length}. Expected: ${v}`);let r=new Uint8Array(g);for(let I=0,J=0;I<U.length;I++){let G=$.encode(U[I]);r.set(G,J),G.fill(0),J+=G.length}return r},decode:(U)=>{Y$(U,g);let r=[];for(let I=0;I<U.length;I+=$.bytesLen)r.push($.decode(U.subarray(I,I+$.bytesLen)));return r}}}function i$(...$){for(let v of $)if(Array.isArray(v))for(let g of v)g.fill(0);else v.fill(0)}function Gz($){return(1<<$)-1}var ZA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var oY=($)=>{let{newPoly:v,N:g,Q:U,F:r,ROOT_OF_UNITY:I,brvBits:J,isKyber:G}=$,O=(R,L=U)=>{let B=R%L|0;return(B>=0?B|0:L+B|0)|0},z=(R,L=U)=>{let B=O(R,L)|0;return(B>L>>1?B-L|0:B)|0};function Q(){let R=v(g);for(let L=0;L<g;L++){let B=Iz(L,J),F=BigInt(I)**BigInt(B)%BigInt(U);R[L]=Number(F)|0}return R}let X=Q(),N={add:(R,L)=>O((R|0)+(L|0))|0,sub:(R,L)=>O((R|0)-(L|0))|0,mul:(R,L)=>O((R|0)*(L|0))|0,inv:(R)=>{throw Error("not implemented")}},w={N:g,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},q=Jz(N,{dit:!1,...w}),u=Jz(N,{dit:!0,...w});return{mod:O,smod:z,nttZetas:X,NTT:{encode:(R)=>{return q(R)},decode:(R)=>{u(R);for(let L=0;L<R.length;L++)R[L]=O(r*R[L]);return R}},bitsCoder:(R,L)=>{let B=Gz(R),F=R*(g/8);return{bytesLen:F,encode:(l)=>{let d=new Uint8Array(F);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=(L.encode(l[_])&B)<<v$,v$+=R;for(;v$>=8;v$-=8,b>>=8)d[H++]=b&Gz(v$)}return d},decode:(l)=>{let d=v(g);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=l[_]<<v$,v$+=8;for(;v$>=R;v$-=R,b>>=R)d[H++]=L.decode(b&B)}return d}}}}},Cj=($)=>(v,g)=>{if(!g)g=$.blockLen;let U=new Uint8Array(v.length+2);U.set(v);let r=v.length,I=new Uint8Array(g),J=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(z,Q)=>{return U[r+0]=z,U[r+1]=Q,J.destroy(),J=$.create({}).update(U),G++,()=>{return O++,J.xofInto(I)}},clean:()=>{J.destroy(),i$(I,U)}}},xY=Cj(_Y);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Iv=256,jr=3329,Lj=3303,_j=17,{mod:NI,nttZetas:bj,NTT:Wg,bitsCoder:ij}=oY({N:Iv,Q:jr,F:Lj,ROOT_OF_UNITY:_j,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),Oz={512:{N:Iv,Q:jr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Iv,Q:jr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Iv,Q:jr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},mj=($)=>{if($>=12)return{encode:(g)=>g,decode:(g)=>g};let v=2**($-1);return{encode:(g)=>((g<<$)+jr/2)/jr,decode:(g)=>g*jr+v>>>$}},XI=($)=>ij($,mj($));function Vg($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]+v[g])}function Fj($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]-v[g])}function oj($,v,g,U,r){let I=NI(v*U*r+$*g),J=NI($*U+v*g);return{c0:I,c1:J}}function vJ($,v){for(let g=0;g<Iv/2;g++){let U=bj[64+(g>>1)];if(g&1)U=-U;let{c0:r,c1:I}=oj($[2*g+0],$[2*g+1],v[2*g+0],v[2*g+1],U);$[2*g+0]=r,$[2*g+1]=I}return $}function cY($){let v=new Uint16Array(Iv);for(let g=0;g<Iv;){let U=$();if(U.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;g<Iv&&r+3<=U.length;r+=3){let I=(U[r+0]>>0|U[r+1]<<8)&4095,J=(U[r+1]>>4|U[r+2]<<4)&4095;if(I<jr)v[g++]=I;if(g<Iv&&J<jr)v[g++]=J}}return v}function wI($,v,g,U){let r=$(U*Iv/4,v,g),I=new Uint16Array(Iv),J=m0(r),G=0;for(let O=0,z=0,Q=0,X=0;O<J.length;O++){let N=J[O];for(let w=0;w<32;w++)if(Q+=N&1,N>>=1,G+=1,G===U)X=Q,Q=0;else if(G===2*U)I[z++]=NI(X-Q),Q=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return I}var xj=($)=>{let{K:v,PRF:g,XOF:U,HASH512:r,ETA1:I,ETA2:J,du:G,dv:O}=$,z=XI(1),Q=XI(O),X=XI(G),N=qg("publicKey",$J(XI(12),v),32),w=$J(XI(12),v),q=qg("ciphertext",$J(X,v),Q),u=qg("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:N.bytesLen,cipherText:q.bytesLen},keygen:(W)=>{Y$(W,32,"seed");let S=new Uint8Array(33);S.set(W),S[32]=v;let R=r(S),[L,B]=u.decode(R),F=[],l=[];for(let b=0;b<v;b++)F.push(Wg.encode(wI(g,B,b,I)));let d=U(L);for(let b=0;b<v;b++){let v$=Wg.encode(wI(g,B,v+b,I));for(let H=0;H<v;H++){let K=cY(d.get(H,b));Vg(v$,vJ(K,F[H]))}l.push(v$)}d.clean();let _={publicKey:N.encode([l,L]),secretKey:w.encode(F)};return i$(L,B,F,l,S,R),_},encrypt:(W,S,R)=>{let[L,B]=N.decode(W),F=[];for(let H=0;H<v;H++)F.push(Wg.encode(wI(g,R,H,I)));let l=U(B),d=new Uint16Array(Iv),_=[];for(let H=0;H<v;H++){let K=wI(g,R,v+H,J),P=new Uint16Array(Iv);for(let V=0;V<v;V++){let j=cY(l.get(H,V));Vg(P,vJ(j,F[V]))}Vg(K,Wg.decode(P)),_.push(K),Vg(d,vJ(L[H],F[H])),i$(P)}l.clean();let b=wI(g,R,2*v,J);Vg(b,Wg.decode(d));let v$=z.decode(S);return Vg(v$,b),i$(L,F,d,b),q.encode([_,v$])},decrypt:(W,S)=>{let[R,L]=q.decode(W),B=w.decode(S),F=new Uint16Array(Iv);for(let l=0;l<v;l++)Vg(F,vJ(B[l],Wg.encode(R[l])));return Fj(L,Wg.decode(F)),i$(F,B,R),z.encode(L)}}};function zz($){let v=xj($),{HASH256:g,HASH512:U,KDF:r}=$,{secretCoder:I,lengths:J}=v,G=qg("secretKey",J.secretKey,J.publicKey,32,32),O=32,z=64;return{info:{type:"ml-kem"},lengths:{...J,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(Q=ev(64))=>{Y$(Q,64,"seed");let{publicKey:X,secretKey:N}=v.keygen(Q.subarray(0,32)),w=g(X),q=G.encode([N,X,w,Q.subarray(32)]);return i$(N,w),{publicKey:X,secretKey:q}},getPublicKey:(Q)=>{let[X,N,w,q]=G.decode(Q);return Uint8Array.from(N)},encapsulate:(Q,X=ev(32))=>{Y$(Q,J.publicKey,"publicKey"),Y$(X,32,"message");let N=Q.subarray(0,384*$.K),w=I.encode(I.decode(FY(N)));if(!s0(w,N))throw i$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");i$(w);let q=U.create().update(X).update(g(Q)).digest(),u=v.encrypt(Q,X,q.subarray(32,64));return i$(q.subarray(32)),{cipherText:u,sharedSecret:q.subarray(0,32)}},decapsulate:(Q,X)=>{Y$(X,G.bytesLen,"secretKey"),Y$(Q,J.cipherText,"cipherText");let N=G.bytesLen-96,w=N+32,q=g(X.subarray(N/2,w));if(!s0(q,X.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[u,W,S,R]=G.decode(X),L=v.decrypt(Q,u),B=U.create().update(L).update(S).digest(),F=B.subarray(0,32),l=v.encrypt(W,L,B.subarray(32,64)),d=s0(Q,l),_=r.create({dkLen:32}).update(R).update(Q).digest();return i$(L,l,!d?F:_),d?F:_}}}function cj($,v,g){return av.create({dkLen:$}).update(v).update(new Uint8Array([g])).digest()}var Dz={HASH256:Yg,HASH512:CY,KDF:av,XOF:xY,PRF:cj},nA=zz({...Dz,...Oz[512]}),YI=zz({...Dz,...Oz[768]}),lY=zz({...Dz,...Oz[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lj($,v=!1){let{lengths:g,keygen:U}=$;if(v){let I=$.Point.Fn;if(!I)throw Error("No Point.Fn");U=(J=ev(g.seed))=>{Y$(J,g.seed,"seed");let G=I.isLE?br(J):_r(J),O=I.toBytes(I.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:g.secretKey,publicKey:g.publicKey,seed:g.seed},keygen:U,getPublicKey:(r)=>$.getPublicKey(r)}}function Qz($,v=!1){let g=lj($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...g.lengths,msg:g.lengths.seed,cipherText:g.lengths.publicKey},keygen:g.keygen,getPublicKey:g.getPublicKey,encapsulate(U,r=ev($.lengths.seed)){let I=this.keygen(r).secretKey,J=this.decapsulate(U,I),G=$.getPublicKey(I);return i$(I),{sharedSecret:J,cipherText:G}},decapsulate(U,r){let I=$.getSharedSecret(r,U);return $.lengths.publicKeyHasPrefix?I.subarray(1):I}}}function qI($,v){return qg(v,...$.map((g)=>{if(typeof g.lengths[v]!=="number")throw Error("wrong length: "+v);return g.lengths[v]}))}function Xz($){return(v,g)=>$(v,{dkLen:g})}function yj($,v,...g){let U=qI(g,"seed"),r=qI(g,"publicKey");if($===void 0)$=U.bytesLen;m$($);function I(J){Y$(J,$);let G=U.decode(v(J,U.bytesLen)),O=g.map((X,N)=>X.keygen(G[N])),z=O.map((X)=>X.secretKey),Q=O.map((X)=>X.publicKey);return{secretKey:z,publicKey:Q}}return{info:{lengths:{seed:$,publicKey:r.bytesLen,secretKey:$}},getPublicKey(J){return this.keygen(J).publicKey},keygen(J=ev($)){let{publicKey:G,secretKey:O}=I(J),z=r.encode(G);return i$(G),i$(O),{secretKey:J,publicKey:z}},expandDecapsulationKey:I,realSeedLen:$}}function rJ($,v,g,U,...r){let I=yj($,g,...r),J=qI(r,"cipherText"),G=qI(r,"publicKey"),O=qI(r,"msg");if(v===void 0)v=O.bytesLen;return m$(v),{lengths:{...I.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:J.bytesLen},getPublicKey:I.getPublicKey,keygen:I.keygen,encapsulate(z,Q=ev(O.bytesLen)){let X=G.decode(z),N=O.decode(Q),w=r.map((S,R)=>S.encapsulate(X[R],N[R])),q=w.map((S)=>S.sharedSecret),u=w.map((S)=>S.cipherText),W={sharedSecret:U(X,u,q),cipherText:J.encode(u)};return i$(q,u),W},decapsulate(z,Q){let X=J.decode(z),{publicKey:N,secretKey:w}=I.expandDecapsulationKey(Q),q=r.map((u,W)=>u.decapsulate(X[W],w[W]));return U(N,X,q)}}}function yY($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,Xz(U),(I,J,G)=>r(_$(G[0],G[1],J[1],I[1],ir($))),v,g)}var oA=yY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YI,Qz(rz,!0),av,Yg),xA=yY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",lY,Qz(KY,!0),av,Yg);function dj($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,Xz(U),(I,J,G)=>{let O=_$(G[0],G[1],J[0],I[0],J[1],I[1],ir($)),z=32,Q=_$(ir("hybrid_prk"),O),X=TY(r,Q),N=_$(dg(32,2),ir("shared_secret"),ir("")),w=AY(r,X,N,32);return i$(X,N,Q,O),w},v,g)}var dY=Qz(RY),cA=dj("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YI,dY,av,a0),hj=(()=>rJ(32,32,Xz(av),($,v,g)=>Yg(_$(g[0],g[1],v[1],$[1],ir("\\.//^\\"))),YI,dY))();function pj($,v,g,U){let r=$.Point.Fn;if(!r)throw Error("no Point.Fn");function I(J){let G;for(let Q=0,X=v;;Q=X,X+=v){if(X>J.length)throw Error("rejection sampling failed");if(G=r.fromBytes(J.subarray(Q,X),!0),r.isValidNot0(G))break}let O=r.toBytes(r.create(G)),z=$.getPublicKey(O,!1);return{secretKey:O,publicKey:z}}return{lengths:{secretKey:v,publicKey:g,seed:U,msg:U,cipherText:g},keygen(J=ev(U)){return Y$(J,U,"seed"),I(J)},getPublicKey(J){return $.getPublicKey(J,!1)},encapsulate(J,G=ev(U)){Y$(G,U,"rand");let{secretKey:O}=I(G),z=this.decapsulate(J,O),Q=$.getPublicKey(O,!1);return i$(O),{sharedSecret:z,cipherText:Q}},decapsulate(J,G){return $.getSharedSecret(G,J).subarray(1)}}}function tj($,v,g,U){let{secretKey:r,publicKeyUncompressed:I}=g.lengths;if(!r||!I)throw Error("wrong curve");let J=pj(g,r,I,U),G=64,O=G+U;return rJ(32,32,(z)=>{Y$(z,32);let Q=av(z,{dkLen:O}),X=Q.subarray(0,G),N=Q.subarray(G,O);return _$(X,N)},(z,Q,X)=>Yg(_$(X[0],X[1],Q[1],z[1],ir($))),v,J)}var aj=(()=>tj("MLKEM768-P256",YI,rz,128))();var gJ=hj,hY=aj;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,v,g)=>o$($,v,g),Nz=C$,eg=A0,h$=(...$)=>YO(...$),sg=($)=>lU($),$U=XO,vU=($)=>Xr($),IJ=BigInt(0),wz=BigInt(1);function Mr($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw TypeError(g+"expected boolean, got type="+typeof $)}return $}function JJ($){if(typeof $==="bigint"){if(!UJ($))throw RangeError("positive bigint expected, got "+$)}else Nz($);return $}function sv($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(g+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let g=v&&`"${v}" `;throw RangeError(g+"expected safe integer, got "+$)}}function WI($){let v=JJ($).toString(16);return v.length&1?"0"+v:v}function pY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?IJ:BigInt("0x"+$)}function ug($){return pY(A0($))}function mv($){return pY(A0(cr(o$($)).reverse()))}function GJ($,v){if(C$(v),v===0)throw RangeError("zero length");$=JJ($);let g=$.toString(16);if(g.length>v*2)throw RangeError("number too large");return lU(g.padStart(v*2,"0"))}function VI($,v){return GJ($,v).reverse()}function tY($,v){if($=S$($),v=S$(v),$.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function cr($){return Uint8Array.from(S$($))}function OJ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw RangeError(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var UJ=($)=>typeof $==="bigint"&&IJ<=$;function ej($,v,g){return UJ($)&&UJ(v)&&UJ(g)&&v<=$&&$<g}function Rr($,v,g,U){if(!ej(v,g,U))throw RangeError("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function rU($){if($<IJ)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>IJ;$>>=wz,v+=1);return v}var uI=($)=>(wz<<BigInt($))-wz;function aY($,v,g){if(C$($,"hashLen"),C$(v,"qByteLen"),typeof g!=="function")throw TypeError("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,O=U($),z=U($),Q=0,X=()=>{O.fill(1),z.fill(0),Q=0},N=(...W)=>g(z,h$(O,...W)),w=(W=r)=>{if(z=N(I,W),O=N(),W.length===0)return;z=N(J,W),O=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){O=N();let R=O.slice();S.push(R),W+=O.length}return h$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while((R=S(q()))===void 0)w();return X(),R}}function Bv($,v={},g={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function U(I,J,G){if(!G&&J!=="function"&&!Object.hasOwn($,I))throw TypeError(`param "${I}" is invalid: expected own property`);let O=$[I];if(G&&O===void 0)return;let z=typeof O;if(z!==J||O===null)throw TypeError(`param "${I}" is invalid: expected ${J}, got ${z}`)}let r=(I,J)=>Object.entries(I).forEach(([G,O])=>U(G,O,J));r(v,!1),r(g,!0)}var Yz=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),f$=BigInt(1),Zg=BigInt(2),vq=BigInt(3),rq=BigInt(4),gq=BigInt(5),sj=BigInt(7),Uq=BigInt(8),$M=BigInt(9),Iq=BigInt(16);function E$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let g=$%v;return g>=p$?g:v+g}function Cv($,v,g){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let U=$;while(v-- >p$)U*=U,U%=g;return U}function eY($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let g=E$($,v),U=v,r=p$,I=f$,J=f$,G=p$;while(g!==p$){let z=U/g,Q=U-g*z,X=r-J*z,N=I-G*z;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==f$)throw Error("invert: does not exist");return E$(r,v)}function qz($,v,g){let U=$;if(!U.eql(U.sqr(v),g))throw Error("Cannot find square root")}function Jq($,v){let g=$,U=(g.ORDER+f$)/rq,r=g.pow(v,U);return qz(g,r,v),r}function vM($,v){let g=$,U=(g.ORDER-gq)/Uq,r=g.mul(v,Zg),I=g.pow(r,U),J=g.mul(v,I),G=g.mul(g.mul(J,Zg),I),O=g.mul(J,g.sub(G,g.ONE));return qz(g,O,v),O}function rM($){let v=zJ($),g=Gq($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+sj)/Iq;return(G,O)=>{let z=G,Q=z.pow(O,J),X=z.mul(Q,U),N=z.mul(Q,r),w=z.mul(Q,I),q=z.eql(z.sqr(X),O),u=z.eql(z.sqr(N),O);Q=z.cmov(Q,X,q),X=z.cmov(w,N,u);let W=z.eql(z.sqr(X),O),S=z.cmov(Q,X,W);return qz(z,S,O),S}}function Gq($){if($<vq)throw Error("sqrt is not defined for small field");let v=$-f$,g=0;while(v%Zg===p$)v/=Zg,g++;let U=Zg,r=zJ($);while(sY(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return Jq;let I=r.pow(U,v),J=(v+f$)/Zg;return function(O,z){let Q=O;if(Q.is0(z))return z;if(sY(Q,z)!==1)throw Error("Cannot find square root");let X=g,N=Q.mul(Q.ONE,I),w=Q.pow(z,v),q=Q.pow(z,J);while(!Q.eql(w,Q.ONE)){if(Q.is0(w))return Q.ZERO;let u=1,W=Q.sqr(w);while(!Q.eql(W,Q.ONE))if(u++,W=Q.sqr(W),u===X)throw Error("Cannot find square root");let S=f$<<BigInt(X-u-1),R=Q.pow(N,S);X=u,N=Q.sqr(R),w=Q.mul(w,N),q=Q.mul(q,R)}return q}}function gM($){if($%rq===vq)return Jq;if($%Uq===gq)return vM;if($%Iq===$M)return rM($);return Gq($)}var Kr=($,v)=>(E$($,v)&f$)===f$,UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Wz($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=UM.reduce((U,r)=>{return U[r]="function",U},v);if(Bv($,g),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=f$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function IM($,v,g){let U=$;if(g<p$)throw Error("invalid exponent, negatives unsupported");if(g===p$)return U.ONE;if(g===f$)return v;let r=U.ONE,I=v;while(g>p$){if(g&f$)r=U.mul(r,I);I=U.sqr(I),g>>=f$}return r}function ZI($,v,g=!1){let U=$,r=Array(v.length).fill(g?U.ZERO:void 0),I=v.reduce((G,O,z)=>{if(U.is0(O))return G;return r[z]=G,U.mul(G,O)},U.ONE),J=U.inv(I);return v.reduceRight((G,O,z)=>{if(U.is0(O))return G;return r[z]=U.mul(G,r[z]),U.mul(G,O)},J),r}function sY($,v){let g=$,U=(g.ORDER-f$)/Zg,r=g.pow(v,U),I=g.eql(r,g.ONE),J=g.eql(r,g.ZERO),G=g.eql(r,g.neg(g.ONE));if(!I&&!J&&!G)throw Error("invalid Legendre symbol result");return I?1:J?0:-1}function JM($,v){if(v!==void 0)Nz(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let g=rU($);if(v!==void 0&&v<g)throw Error(`invalid n length: expected bit length (${g}) >= n.length (${v})`);let U=v!==void 0?v:g,r=Math.ceil(U/8);return{nBitLength:U,nByteLength:r}}var $q=new WeakMap;class Vz{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=f$;_lengths;_mod;constructor($,v={}){if($<=f$)throw Error("invalid field: expected ORDER > 1, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=JM($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,Object.freeze(this)}create($){return E$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&f$)===f$}neg($){return E$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return E$($*$,this.ORDER)}add($,v){return E$($+v,this.ORDER)}sub($,v){return E$($-v,this.ORDER)}mul($,v){return E$($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return E$($*eY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return eY($,this.ORDER)}sqrt($){let v=$q.get(this);if(!v)$q.set(this,v=gM(this.ORDER));return v(this,$)}toBytes($){return this.isLE?VI($,this.BYTES):GJ($,this.BYTES)}fromBytes($,v=!1){S$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if($.length<1||!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let O=new Uint8Array(U);O.set($,r?0:O.length-$.length),$=O}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?mv($):ug($);if(J)G=E$(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return ZI(this,$)}cmov($,v,g){return Mr(g,"condition"),g?v:$}}Object.freeze(Vz.prototype);function zJ($,v={}){return new Vz($,v)}function Oq($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=f$)throw Error("field order must be greater than 1");let v=rU($-f$);return Math.ceil(v/8)}function uz($){let v=Oq($);return v+Math.ceil(v/2)}function zq($,v,g=!1){S$($);let U=$.length,r=Oq(v),I=Math.max(uz(v),16);if(U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?mv($):ug($),G=E$(J,v-f$)+f$;return g?VI(G,r):GJ(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gU=BigInt(0),jg=BigInt(1);function jI($,v){let g=v.negate();return $?g:v}function Mg($,v){let g=ZI($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function wq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function Zz($,v){wq($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=uI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function Dq($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),O=$>>J;if(G>U)G-=I,O+=jg;let z=v*U,Q=z+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:O,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:z}}var jz=new WeakMap,Nq=new WeakMap;function Mz($){return Nq.get($)||1}function Qq($){if($!==gU)throw Error("invalid wNAF")}class MI{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>gU){if(v&jg)g=g.add(U);U=U.double(),v>>=jg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=Zz(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let O=1;O<U;O++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=Zz($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:O,isZero:z,isNeg:Q,isNegF:X,offsetF:N}=Dq(g,J,I);if(g=G,z)r=r.add(jI(X,v[N]));else U=U.add(jI(Q,v[O]))}return Qq(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=Zz($,this.bits);for(let I=0;I<r.windows;I++){if(g===gU)break;let{nextN:J,offset:G,isZero:O,isNeg:z}=Dq(g,I,r);if(g=J,O)continue;else{let Q=v[G];U=U.add(z?Q.negate():Q)}}return Qq(g),U}getPrecomputes($,v,g){let U=jz.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);jz.set(v,U)}}return U}cached($,v,g){let U=Mz($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=Mz($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){wq(v,this.bits),Nq.set($,v),jz.delete($)}hasCache($){return Mz($)!==1}}function Yq($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>gU||U>gU){if(g&jg)I=I.add(r);if(U&jg)J=J.add(r);r=r.double(),g>>=jg,U>>=jg}return{p1:I,p2:J}}function Xq($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Wz(v),v}else return zJ($,{isLE:g})}function DJ($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let z=v[O];if(!(typeof z==="bigint"&&z>gU))throw Error(`CURVE.${O} must be positive bigint`)}let r=Xq(v.p,g.Fp,U),I=Xq(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!r.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function RI($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}function KI($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let g=Array.from({length:v}).fill(0);for(let U=v-1;U>=0;U--)g[U]=$&255,$>>>=8;return new Uint8Array(g)}function GM($,v){let g=new Uint8Array($.length);for(let U=0;U<$.length;U++)g[U]=$[U]^v[U];return g}function OM($){if(!$U($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?OJ($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function Rz($,v,g,U){if(S$($),sv(g),v=OM(v),v.length>255)v=U(h$(OJ("H2C-OVERSIZE-DST-"),v));let{outputLen:r,blockLen:I}=U,J=Math.ceil(g/r);if(g>65535||J>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,KI(v.length,1)),O=new Uint8Array(I),z=KI(g,2),Q=Array(J),X=U(h$(O,$,z,KI(0,1),G));Q[0]=U(h$(X,KI(1,1),G));for(let w=1;w<J;w++){let q=[GM(X,Q[w-1]),KI(w+1,1),G];Q[w]=U(h$(...q))}return h$(...Q).slice(0,g)}var qq="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wq=($,v)=>($+($>=0?v:-v)/uq)/v;function zM($,v,g){Rr("scalar",$,$r,g);let[[U,r],[I,J]]=v,G=Wq(J*$,g),O=Wq(-r*$,g),z=$-G*U-O*I,Q=-G*r-O*J,X=z<$r,N=Q<$r;if(X)z=-z;if(N)Q=-Q;let w=uI(Math.ceil(rU(g)/2))+lr;if(z<$r||z>=w||Q<$r||Q>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:z,k2neg:N,k2:Q}}function Sz($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function Kz($,v){Bv($);let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if(Mr(g.lowS,"lowS"),Mr(g.prehash,"prehash"),g.format!==void 0)Sz(g.format);return g}class Vq extends Error{constructor($=""){super($)}}var Fv={Err:Vq,_tlv:{encode:($,v)=>{let{Err:g}=Fv;if(sv($,"tag"),$<0||$>255)throw new g("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=WI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?WI(r.length/2|128):"";return WI($)+I+r+v},decode($,v){let{Err:g}=Fv;v=S$(v,void 0,"DER data");let U=0;if($<0||$>255)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let O=r&127;if(!O)throw new g("tlv.decode(long): indefinite length not supported");if(O>4)throw new g("tlv.decode(long): byte length is too big");let z=v.subarray(U,U+O);if(z.length!==O)throw new g("tlv.decode: length bytes not complete");if(z[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of z)J=J<<8|Q;if(U+=O,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=Fv;if(JJ($),$<$r)throw new v("integer: negative integers are not allowed");let g=WI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=Fv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ug($)}},toSig($){let{Err:v,_int:g,_tlv:U}=Fv,r=S$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=U.decode(2,I),{v:z,l:Q}=U.decode(2,O);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(z)}},hexFromSig($){let{_tlv:v,_int:g}=Fv,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}};Object.freeze(Fv._tlv);Object.freeze(Fv._int);Object.freeze(Fv);var $r=BigInt(0),lr=BigInt(1),uq=BigInt(2),QJ=BigInt(3),DM=BigInt(4);function Zq($,v={}){let g=DJ("weierstrass",$,v),U=g.Fp,r=g.Fn,I=g.CURVE,{h:J,n:G}=I;Bv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:z}=v;if(O){if(!U.is0(I.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let Q=Mq(U,r);function X(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(H,K,P){if(z&&K.is0())return Uint8Array.of(0);let{x:V,y:j}=K.toAffine(),Z=U.toBytes(V);if(Mr(P,"isCompressed"),P){X();let A=!U.isOdd(j);return h$(jq(A),Z)}else return h$(Uint8Array.of(4),Z,U.toBytes(j))}function w(H){S$(H,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=Q,V=H.length,j=H[0],Z=H.subarray(1);if(z&&V===1&&j===0)return{x:U.ZERO,y:U.ZERO};if(V===K&&(j===2||j===3)){let A=U.fromBytes(Z);if(!U.isValid(A))throw Error("bad point: is not on curve, wrong x");let M=W(A),n;try{n=U.sqrt(M)}catch(e){let I$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+I$)}X();let f=U.isOdd(n);if((j&1)===1!==f)n=U.neg(n);return{x:A,y:n}}else if(V===P&&j===4){let A=U.BYTES,M=U.fromBytes(Z.subarray(0,A)),n=U.fromBytes(Z.subarray(A,A*2));if(!S(M,n))throw Error("bad point: is not on curve");return{x:M,y:n}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let q=v.toBytes===void 0?N:v.toBytes,u=v.fromBytes===void 0?w:v.fromBytes;function W(H){let K=U.sqr(H),P=U.mul(K,H);return U.add(U.add(P,U.mul(H,I.a)),I.b)}function S(H,K){let P=U.sqr(K),V=W(H);return U.eql(P,V)}if(!S(I.Gx,I.Gy))throw Error("bad curve params: generator point");let R=U.mul(U.pow(I.a,QJ),DM),L=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(R,L)))throw Error("bad curve params: a or b");function B(H,K,P=!1){if(!U.isValid(K)||P&&U.is0(K))throw Error(`bad point coordinate ${H}`);return K}function F(H){if(!(H instanceof _))throw Error("Weierstrass Point expected")}function l(H){if(!O||!O.basises)throw Error("no endo");return zM(H,O.basises,r.ORDER)}function d(H,K,P,V,j){return P=new _(U.mul(P.X,H),P.Y,P.Z),K=jI(V,K),P=jI(j,P),K.add(P)}class _{static BASE=new _(I.Gx,I.Gy,U.ONE);static ZERO=new _(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(H,K,P){this.X=B("x",H),this.Y=B("y",K,!0),this.Z=B("z",P),Object.freeze(this)}static CURVE(){return I}static fromAffine(H){let{x:K,y:P}=H||{};if(!H||!U.isValid(K)||!U.isValid(P))throw Error("invalid affine point");if(H instanceof _)throw Error("projective point not allowed");if(U.is0(K)&&U.is0(P))return _.ZERO;return new _(K,P,U.ONE)}static fromBytes(H){let K=_.fromAffine(u(S$(H,void 0,"point")));return K.assertValidity(),K}static fromHex(H){return _.fromBytes(sg(H))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(H=8,K=!0){if(v$.createCache(this,H),!K)this.multiply(QJ);return this}assertValidity(){let H=this;if(H.is0()){if(v.allowInfinityPoint&&U.is0(H.X)&&U.eql(H.Y,U.ONE)&&U.is0(H.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=H.toAffine();if(!U.isValid(K)||!U.isValid(P))throw Error("bad point: x or y not field elements");if(!S(K,P))throw Error("bad point: equation left != right");if(!H.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:H}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(H)}equals(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.eql(U.mul(K,A),U.mul(j,V)),n=U.eql(U.mul(P,A),U.mul(Z,V));return M&&n}negate(){return new _(this.X,U.neg(this.Y),this.Z)}double(){let{a:H,b:K}=I,P=U.mul(K,QJ),{X:V,Y:j,Z}=this,A=U.ZERO,M=U.ZERO,n=U.ZERO,f=U.mul(V,V),o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(V,j);return I$=U.add(I$,I$),n=U.mul(V,Z),n=U.add(n,n),A=U.mul(H,n),M=U.mul(P,e),M=U.add(A,M),A=U.sub(o,M),M=U.add(o,M),M=U.mul(A,M),A=U.mul(I$,A),n=U.mul(P,n),e=U.mul(H,e),I$=U.sub(f,e),I$=U.mul(H,I$),I$=U.add(I$,n),n=U.add(f,f),f=U.add(n,f),f=U.add(f,e),f=U.mul(f,I$),M=U.add(M,f),e=U.mul(j,Z),e=U.add(e,e),f=U.mul(e,I$),A=U.sub(A,f),n=U.mul(e,o),n=U.add(n,n),n=U.add(n,n),new _(A,M,n)}add(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=I.a,e=U.mul(I.b,QJ),I$=U.mul(K,j),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.add(K,P),Q$=U.add(j,Z);w$=U.mul(w$,Q$),Q$=U.add(I$,G$),w$=U.sub(w$,Q$),Q$=U.add(K,V);let X$=U.add(j,A);return Q$=U.mul(Q$,X$),X$=U.add(I$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,V),M=U.add(Z,A),X$=U.mul(X$,M),M=U.add(G$,D$),X$=U.sub(X$,M),f=U.mul(o,Q$),M=U.mul(e,D$),f=U.add(M,f),M=U.sub(G$,f),f=U.add(G$,f),n=U.mul(M,f),G$=U.add(I$,I$),G$=U.add(G$,I$),D$=U.mul(o,D$),Q$=U.mul(e,Q$),G$=U.add(G$,D$),D$=U.sub(I$,D$),D$=U.mul(o,D$),Q$=U.add(Q$,D$),I$=U.mul(G$,Q$),n=U.add(n,I$),I$=U.mul(X$,Q$),M=U.mul(w$,M),M=U.sub(M,I$),I$=U.mul(w$,G$),f=U.mul(X$,f),f=U.add(f,I$),new _(M,n,f)}subtract(H){return F(H),this.add(H.negate())}is0(){return this.equals(_.ZERO)}multiply(H){let{endo:K}=v;if(!r.isValidNot0(H))throw RangeError("invalid scalar: out of range");let P,V,j=(Z)=>v$.cached(this,Z,(A)=>Mg(_,A));if(K){let{k1neg:Z,k1:A,k2neg:M,k2:n}=l(H),{p:f,f:o}=j(A),{p:e,f:I$}=j(n);V=o.add(I$),P=d(K.beta,f,e,Z,M)}else{let{p:Z,f:A}=j(H);P=Z,V=A}return Mg(_,[P,V])[0]}multiplyUnsafe(H){let{endo:K}=v,P=this,V=H;if(!r.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$r||P.is0())return _.ZERO;if(V===lr)return P;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:j,k1:Z,k2neg:A,k2:M}=l(V),{p1:n,p2:f}=Yq(_,P,Z,M);return d(K.beta,n,f,j,A)}else return v$.unsafe(P,V)}toAffine(H){let K=this,P=H,{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}isTorsionFree(){let{isTorsionFree:H}=v;if(J===lr)return!0;if(H)return H(_,this);return v$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:H}=v;if(J===lr)return this;if(H)return H(_,this);return this.multiplyUnsafe(J)}isSmallOrder(){if(J===lr)return this.is0();return this.clearCofactor().is0()}toBytes(H=!0){return Mr(H,"isCompressed"),this.assertValidity(),q(_,this,H)}toHex(H=!0){return eg(this.toBytes(H))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=r.BITS,v$=new MI(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function jq($){return Uint8Array.of($?2:3)}function Mq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function QM($,v={}){let{Fn:g}=$,U=v.randomBytes===void 0?vU:v.randomBytes,r=Object.assign(Mq($.Fp,g),{seed:Math.max(uz(g.ORDER),16)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w){return w=w===void 0?U(r.seed):w,zq(S$(w,r.seed,"seed"),g.ORDER)}function O(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function z(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r,S=g._lengths;if(!$U(w))return;let R=S$(w,void 0,"key").length,L=R===u||R===W,B=R===q||!!S?.includes(R);if(L&&B)return;return L}function Q(w,q,u=!0){if(z(w)===!0)throw Error("first arg must be private key");if(z(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=RI(G,O);return Object.freeze(X),Object.freeze(r),Object.freeze({getPublicKey:O,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function Rq($,v,g={}){let U=v;Qr(U),Bv(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let r=g.randomBytes===void 0?vU:g.randomBytes,I=g.hmac===void 0?(j,Z)=>dv(U,j,Z):g.hmac,{Fp:J,Fn:G}=$,{ORDER:O,BITS:z}=G,{keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q}=QM($,g),u={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},W=O*uq+lr<J.ORDER;function S(j){let Z=O>>lr;return j>Z}function R(j,Z){if(!G.isValidNot0(Z))throw Error(`invalid signature ${j}: out of range 1..Point.Fn.ORDER`);return Z}function L(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(j,Z){Sz(Z);let A=q.signature,M=Z==="compact"?A:Z==="recovered"?A+1:void 0;return S$(j,M)}class F{r;s;recovery;constructor(j,Z,A){if(this.r=R("r",j),this.s=R("s",Z),A!=null){if(L(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(j,Z=u.format){B(j,Z);let A;if(Z==="der"){let{r:o,s:e}=Fv.toSig(S$(j));return new F(o,e)}if(Z==="recovered")A=j[0],Z="compact",j=j.subarray(1);let M=q.signature/2,n=j.subarray(0,M),f=j.subarray(M,M*2);return new F(G.fromBytes(n),G.fromBytes(f),A)}static fromHex(j,Z){return this.fromBytes(sg(j),Z)}assertRecovery(){let{recovery:j}=this;if(j==null)throw Error("invalid recovery id: must be present");return j}addRecoveryBit(j){return new F(this.r,this.s,j)}recoverPublicKey(j){let{r:Z,s:A}=this,M=this.assertRecovery(),n=M===2||M===3?Z+O:Z;if(!J.isValid(n))throw Error("invalid recovery id: sig.r+curve.n != R.x");let f=J.toBytes(n),o=$.fromBytes(h$(jq((M&1)===0),f)),e=G.inv(n),I$=d(S$(j,void 0,"msgHash")),G$=G.create(-I$*e),D$=G.create(A*e),w$=$.BASE.multiplyUnsafe(G$).add(o.multiplyUnsafe(D$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return S(this.s)}toBytes(j=u.format){if(Sz(j),j==="der")return sg(Fv.hexFromSig(this));let{r:Z,s:A}=this,M=G.toBytes(Z),n=G.toBytes(A);if(j==="recovered")return L(),h$(Uint8Array.of(this.assertRecovery()),M,n);return h$(M,n)}toHex(j){return eg(this.toBytes(j))}}Object.freeze(F.prototype),Object.freeze(F);let l=g.bits2int===void 0?function(Z){if(Z.length>8192)throw Error("input is too large");let A=ug(Z),M=Z.length*8-z;return M>0?A>>BigInt(M):A}:g.bits2int,d=g.bits2int_modN===void 0?function(Z){return G.create(l(Z))}:g.bits2int_modN,_=uI(z);function b(j){return Rr("num < 2^"+z,j,$r,_),G.toBytes(j)}function v$(j,Z){return S$(j,void 0,"message"),Z?S$(U(j),void 0,"prehashed message"):j}function H(j,Z,A){let{lowS:M,prehash:n,extraEntropy:f}=Kz(A,u);j=v$(j,n);let o=d(j),e=G.fromBytes(Z);if(!G.isValidNot0(e))throw Error("invalid private key");let I$=[b(e),b(o)];if(f!=null&&f!==!1){let Q$=f===!0?r(q.secretKey):f;I$.push(S$(Q$,void 0,"extraEntropy"))}let G$=h$(...I$),D$=o;function w$(Q$){let X$=l(Q$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),P$=$.BASE.multiply(X$).toAffine(),n$=G.create(P$.x);if(n$===$r)return;let a$=G.create(W$*G.create(D$+n$*e));if(a$===$r)return;let e$=(P$.x===n$?0:2)|Number(P$.y&lr),Wv=a$;if(M&&S(a$))Wv=G.neg(a$),e$^=1;return new F(n$,Wv,W?void 0:e$)}return{seed:G$,k2sig:w$}}function K(j,Z,A={}){let{seed:M,k2sig:n}=H(j,Z,A);return aY(U.outputLen,G.BYTES,I)(M,n).toBytes(A.format)}function P(j,Z,A,M={}){let{lowS:n,prehash:f,format:o}=Kz(M,u);if(A=S$(A,void 0,"publicKey"),Z=v$(Z,f),!$U(j)){let e=j instanceof F?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}B(j,o);try{let e=F.fromBytes(j,o),I$=$.fromBytes(A);if(n&&e.hasHighS())return!1;let{r:G$,s:D$}=e,w$=d(Z),Q$=G.inv(D$),X$=G.create(w$*Q$),W$=G.create(G$*Q$),P$=$.BASE.multiplyUnsafe(X$).add(I$.multiplyUnsafe(W$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(e){return!1}}function V(j,Z,A={}){let{prehash:M}=Kz(A,u);return Z=v$(Z,M),F.fromBytes(j,"recovered").recoverPublicKey(Z).toBytes()}return Object.freeze({keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:F,hash:U})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var XM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var wM=Zq(XM),UU=Rq(wM,L$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yr=BigInt(0),uv=BigInt(1),Tz=BigInt(2),NM=BigInt(8);function YM($,v,g,U){let r=$.sqr(g),I=$.sqr(U),J=$.add($.mul(v.a,r),I),G=$.add($.ONE,$.mul(v.d,$.mul(r,I)));return $.eql(J,G)}function Kq($,v={}){let g=v,U=DJ("edwards",$,g,g.FpFnLE),{Fp:r,Fn:I}=U,J=U.CURVE,{h:G}=J;Bv(g,{},{uvRatio:"function"});let O=Tz<<BigInt(I.BYTES*8)-uv,z=(u)=>r.create(u),Q=g.uvRatio===void 0?(u,W)=>{try{return{isValid:!0,value:r.sqrt(r.div(u,W))}}catch(S){return{isValid:!1,value:yr}}}:g.uvRatio;if(!YM(r,J,J.Gx,J.Gy))throw Error("bad curve params: generator point");function X(u,W,S=!1){let R=S?uv:yr;return Rr("coordinate "+u,W,R,O),W}function N(u){if(!(u instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(J.Gx,J.Gy,uv,z(J.Gx*J.Gy));static ZERO=new w(yr,uv,uv,yr);static Fp=r;static Fn=I;X;Y;Z;T;constructor(u,W,S,R){this.X=X("x",u),this.Y=X("y",W),this.Z=X("z",S,!0),this.T=X("t",R),Object.freeze(this)}static CURVE(){return J}static fromAffine(u){if(u instanceof w)throw Error("extended point not allowed");let{x:W,y:S}=u||{};return X("x",W),X("y",S),new w(W,S,uv,z(W*S))}static fromBytes(u,W=!1){let S=r.BYTES,{a:R,d:L}=J;u=cr(S$(u,S,"point")),Mr(W,"zip215");let B=cr(u),F=u[S-1];B[S-1]=F&-129;let l=mv(B),d=W?O:r.ORDER;Rr("point.y",l,yr,d);let _=z(l*l),b=z(_-uv),v$=z(L*_-R),{isValid:H,value:K}=Q(b,v$);if(!H)throw Error("bad point: invalid y coordinate");let P=(K&uv)===uv,V=(F&128)!==0;if(!W&&K===yr&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=z(-K);return w.fromAffine({x:K,y:l})}static fromHex(u,W=!1){return w.fromBytes(sg(u),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(u=8,W=!0){if(q.createCache(this,u),!W)this.multiply(Tz);return this}assertValidity(){let u=this,{a:W,d:S}=J;if(u.is0())throw Error("bad point: ZERO");let{X:R,Y:L,Z:B,T:F}=u,l=z(R*R),d=z(L*L),_=z(B*B),b=z(_*_),v$=z(l*W),H=z(_*z(v$+d)),K=z(b+z(S*z(l*d)));if(H!==K)throw Error("bad point: equation left != right (1)");let P=z(R*L),V=z(B*F);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(u){N(u);let{X:W,Y:S,Z:R}=this,{X:L,Y:B,Z:F}=u,l=z(W*F),d=z(L*R),_=z(S*F),b=z(B*R);return l===d&&_===b}is0(){return this.equals(w.ZERO)}negate(){return new w(z(-this.X),this.Y,this.Z,z(-this.T))}double(){let{a:u}=J,{X:W,Y:S,Z:R}=this,L=z(W*W),B=z(S*S),F=z(Tz*z(R*R)),l=z(u*L),d=W+S,_=z(z(d*d)-L-B),b=l+B,v$=b-F,H=l-B,K=z(_*v$),P=z(b*H),V=z(_*H),j=z(v$*b);return new w(K,P,j,V)}add(u){N(u);let{a:W,d:S}=J,{X:R,Y:L,Z:B,T:F}=this,{X:l,Y:d,Z:_,T:b}=u,v$=z(R*l),H=z(L*d),K=z(F*S*b),P=z(B*_),V=z((R+L)*(l+d)-v$-H),j=P-K,Z=P+K,A=z(H-W*v$),M=z(V*j),n=z(Z*A),f=z(V*A),o=z(j*Z);return new w(M,n,o,f)}subtract(u){return N(u),this.add(u.negate())}multiply(u){if(!I.isValidNot0(u))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:S}=q.cached(this,u,(R)=>Mg(w,R));return Mg(w,[W,S])[0]}multiplyUnsafe(u){if(!I.isValid(u))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(u===yr)return w.ZERO;if(this.is0()||u===uv)return this;return q.unsafe(this,u,(W)=>Mg(w,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return q.unsafe(this,J.n).is0()}toAffine(u){let W=this,S=u,{X:R,Y:L,Z:B}=W,F=W.is0();if(S==null)S=F?NM:r.inv(B);let l=z(R*S),d=z(L*S),_=r.mul(B,S);if(F)return{x:yr,y:uv};if(_!==uv)throw Error("invZ was invalid");return{x:l,y:d}}clearCofactor(){if(G===uv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:u,y:W}=this.toAffine(),S=r.toBytes(W);return S[S.length-1]|=u&uv?128:0,S}toHex(){return eg(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let q=new MI(w,I.BITS);if(I.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class Az{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){Yz()}static fromHex($){Yz()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eg(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SI=BigInt(0),IU=BigInt(1),XJ=BigInt(2);function qM($){return Bv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Sq($){let v=qM($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let O=J===void 0?vU:J,z=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?XJ**BigInt(254):XJ**BigInt(447),q=G?BigInt(8)*XJ**BigInt(251)-IU:BigInt(4)*XJ**BigInt(445)-IU,u=w+q+IU,W=(V)=>E$(V,g),S=R(X);function R(V){return VI(W(V),Q)}function L(V){let j=cr(S$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(mv(j))}function B(V){return mv(r(cr(S$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===SI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){Rr("u",V,SI,g),Rr("scalar",j,w,u);let Z=j,A=V,M=IU,n=SI,f=V,o=IU,e=SI;for(let G$=BigInt(z-1);G$>=SI;G$--){let D$=Z>>G$&IU;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V)=>{return V=V===void 0?O(Q):V,S$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(H),Object.freeze(P),Object.freeze({keygen:RI(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WM=BigInt(0),Sr=BigInt(1),Tq=BigInt(2),VM=BigInt(3),uM=BigInt(5),ZM=BigInt(8),Kg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),nz=(()=>({p:Kg,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:ZM,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Pq($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=Kg,G=$*$%I*$%I,O=Cv(G,Tq,I)*G%I,z=Cv(O,Sr,I)*$%I,Q=Cv(z,uM,I)*z%I,X=Cv(Q,v,I)*Q%I,N=Cv(X,g,I)*X%I,w=Cv(N,U,I)*N%I,q=Cv(w,r,I)*w%I,u=Cv(q,r,I)*w%I,W=Cv(u,v,I)*Q%I;return{pow_p_5_8:Cv(W,Tq,I)*$%I,b2:G}}function jM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Hz=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Ez($,v){let g=Kg,U=E$(v*v*v,g),r=E$(U*U*v,g),I=Pq($*r).pow_p_5_8,J=E$($*U*I,g),G=E$(v*J*J,g),O=J,z=E$(J*Hz,g),Q=G===$,X=G===E$(-$,g),N=G===E$(-$*Hz,g);if(Q)J=O;if(X||N)J=z;if(Kr(J,g))J=E$(-J,g);return{isValid:Q||X,value:J}}var Rg=Kq(nz,{uvRatio:Ez}),dr=(()=>Rg.Fp)(),kq=(()=>Rg.Fn)();var wJ=(()=>{let $=Kg;return Sq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Pq(v);return E$(Cv(g,VM,$)*U,$)},adjustScalarBytes:jM})})();var Pz=Hz,MM=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),RM=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),KM=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),SM=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Aq=($)=>Ez(Sr,$),TM=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),kz=($)=>dr.create(mv($)&TM);function Hq($){let{d:v}=nz,g=Kg,U=(S)=>dr.create(S),r=U(Pz*$*$),I=U((r+Sr)*KM),J=BigInt(-1),G=U((J-v*r)*U(r+v)),{isValid:O,value:z}=Ez(I,G),Q=U(z*$);if(!Kr(Q,g))Q=U(-Q);if(!O)z=Q;if(!O)J=r;let X=U(J*(r-Sr)*SM-G),N=z*z,w=U((z+z)*G),q=U(X*MM),u=U(Sr-N),W=U(Sr+N);return new Rg(U(w*W),U(u*q),U(q*W),U(w*u))}class Qv extends Az{static BASE=(()=>new Qv(Rg.BASE))();static ZERO=(()=>new Qv(Rg.ZERO))();static Fp=(()=>dr)();static Fn=(()=>kq)();constructor($){super($)}static fromAffine($){return new Qv(Rg.fromAffine($))}assertSame($){if(!($ instanceof Qv))throw Error("RistrettoPoint expected")}init($){return new Qv($)}static fromBytes($){o$($,32);let{a:v,d:g}=nz,U=Kg,r=(L)=>dr.create(L),I=kz($);if(!tY(dr.toBytes(I),$)||Kr(I,U))throw Error("invalid ristretto255 encoding 1");let J=r(I*I),G=r(Sr+v*J),O=r(Sr-v*J),z=r(G*G),Q=r(O*O),X=r(v*g*z-Q),{isValid:N,value:w}=Aq(r(X*Q)),q=r(w*O),u=r(w*q*X),W=r((I+I)*q);if(Kr(W,U))W=r(-W);let S=r(G*u),R=r(W*S);if(!N||Kr(R,U)||S===WM)throw Error("invalid ristretto255 encoding 2");return new Qv(new Rg(W,S,Sr,R))}static fromHex($){return Qv.fromBytes(lU($))}toBytes(){let{X:$,Y:v,Z:g,T:U}=this.ep,r=Kg,I=(u)=>dr.create(u),J=I(I(g+v)*I(g-v)),G=I($*v),O=I(G*G),{value:z}=Aq(I(J*O)),Q=I(z*J),X=I(z*G),N=I(Q*X*U),w;if(Kr(U*N,r)){let u=I(v*Pz),W=I($*Pz);$=u,v=W,w=I(Q*RM)}else w=X;if(Kr($*N,r))v=I(-v);let q=I((g-v)*w);if(Kr(q,r))q=I(-q);return dr.toBytes(q)}equals($){this.assertSame($);let{X:v,Y:g}=this.ep,{X:U,Y:r}=$.ep,I=(O)=>dr.create(O),J=I(v*r)===I(g*U),G=I(g*r)===I(v*U);return J||G}is0(){return this.equals(Qv.ZERO)}}Object.freeze(Qv.BASE);Object.freeze(Qv.ZERO);Object.freeze(Qv.prototype);Object.freeze(Qv);var AM=Object.freeze({Point:Qv,hashToCurve($,v){let g=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,U=Rz($,g,64,n0);return AM.deriveToCurve(U)},hashToScalar($,v={DST:qq}){let g=Rz($,v.DST,64,n0);return kq.create(mv(g))},deriveToCurve($){o$($,64);let v=kz($.subarray(0,32)),g=Hq(v),U=kz($.subarray(32,64)),r=Hq(U);return new Qv(g.add(r))}});var nq=!1,HM=!1;async function Eq($,v){if(HM)return await v();try{return await $()}catch(g){if(g instanceof ReferenceError||g instanceof DOMException&&g.name==="NotSupportedError")return await v();else throw g}}async function NJ($,v){return await Eq(async()=>{let g=fz($)?$:await kM($),U=await crypto.subtle.importKey("raw",nM(v),{name:"X25519"},nq,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:U},g,256))},()=>{if(fz($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMult($,v)})}async function TI($){return await Eq(async()=>{return NJ($,wJ.GuBytes)},()=>{if(fz($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMultBase($)})}var PM=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function kM($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...PM,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},nq,["deriveBits"])}function fz($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function nM($){return $}class Bz{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),fM(Sg($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let g=await this.s.read();if(g.done)return this.buf=Sg($),null;this.buf=g.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Sg(this.transcript)}}}function fM($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function Sg($){let v=$.reduce((r,I)=>r+I.length,0),g=new Uint8Array(v),U=0;for(let r of $)g.set(r,U),U+=r.length;return g}function JU($,...v){return $.pipeThrough(new TransformStream({start(g){for(let U of v)g.enqueue(U)}}))}function YJ($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function Cz($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fq($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function Bq($,v){let g=$.getReader(),U=[],r=0;while(r<v){let{done:O,value:z}=await g.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");U.push(z),r+=z.length}g.releaseLock();let I=Sg(U),J=I.subarray(0,v),G=JU($,I.subarray(v));return{data:J,rest:G}}class vr{args;body;constructor($,v){this.args=$,this.body=v}}async function BM($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let g=v.split(" ");if(g.length<2||g.shift()!=="->")return{next:v};for(let I of g)if(I.length===0)throw Error("invalid stanza");let U=[];for(;;){let I=await $.readLine();if(I===null)throw Error("invalid stanza");let J=vv.decode(I);if(J.length>48)throw Error("invalid stanza");if(U.push(J),J.length<48)break}let r=Sg(U);return{s:new vr(g,r)}}async function Cq($){let v=new Bz($),g=await v.readLine();if(g!=="age-encryption.org/v1")throw Error("invalid version "+(g??"line"));let U=[];for(;;){let{s:r,next:I}=await BM(v);if(r!==void 0){U.push(r);continue}if(!I.startsWith("--- "))throw Error("invalid header");let J=vv.decode(I.slice(4)),{rest:G,transcript:O}=v.close(),z=O.slice(0,O.length-1-I.length+3);return{stanzas:U,headerNoMAC:z,MAC:J,headerSize:O.length,rest:JU($,G)}}}function Lz($){let v=[];v.push(`age-encryption.org/v1
+var UZ=Object.defineProperty;var IZ=($)=>$;function JZ($,v){this[$]=IZ.bind(null,v)}var yv=($,v)=>{for(var g in v)UZ($,g,{get:v[g],enumerable:!0,configurable:!0,set:JZ.bind(v,g)})};import{parseArgs as GZ}from"util";var OZ={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function QO($,v){let g=$[v];return typeof g==="boolean"?g:void 0}function R0($,v){let g=$[v];return typeof g==="string"?g:void 0}function mw($){let{values:v,positionals:g}=GZ({args:$,options:OZ,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:g[0]??"help",args:g.slice(1),flags:{help:QO(v,"help"),version:QO(v,"version"),dryRun:QO(v,"dry-run"),pushTo:R0(v,"push-to"),cohort:R0(v,"cohort"),anchorId:R0(v,"anchor-id"),handle:R0(v,"handle")}}}var K0={name:"@rizom/ops",version:"0.2.0-alpha.197",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as lM,mkdirSync as yM,readFileSync as sz,writeFileSync as $8}from"fs";import{dirname as dM,join as cq}from"path";function XO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(`${g}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw RangeError(`${g}expected integer >= 0, got ${$}`)}}function o$($,v,g=""){let U=XO($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",O=U?`length=${r}`:`type=${typeof $}`,z=J+"expected Uint8Array"+G+", got "+O;if(!U)throw TypeError(z);throw RangeError(z)}return $}function Qr($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function mg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function S0($,v){o$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw RangeError('"digestInto() output" expected to be of length >='+g)}function T0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Fg($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function M$($,v){return $<<v|$>>>32-v>>>0}var DZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function QZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function XZ($){for(let v=0;v<$.length;v++)$[v]=QZ($[v]);return $}var wO=DZ?($)=>$:XZ,ow=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),wZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function A0($){if(o$($),ow)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=wZ[$[g]];return v}var Dr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Fw($){if($>=Dr._0&&$<=Dr._9)return $-Dr._0;if($>=Dr.A&&$<=Dr.F)return $-(Dr.A-10);if($>=Dr.a&&$<=Dr.f)return $-(Dr.a-10);return}function lU($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(ow)try{return Uint8Array.fromHex($)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let v=$.length,g=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=Fw($.charCodeAt(I)),G=Fw($.charCodeAt(I+1));if(J===void 0||G===void 0){let O=$[I]+$[I+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+I)}U[r]=J*16+G}return U}function NZ($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function NO($,v=""){if(typeof $==="string")return NZ($);return o$($,void 0,v)}function YO(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];o$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function H0($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function qO($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.canXOF=U.canXOF,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Xr($=32){C$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var WO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Qr($),o$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Ov(U)}update($){return mg(this),this.iHash.update($),this}digestInto($){mg(this),S0($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,g,U)=>new VO(v,g).update(U).digest();return $.create=(v,g)=>new VO(v,g),$})();function yU($,v,g){if(Qr($),g===void 0)g=new Uint8Array($.outputLen);return dv($,g,v)}var uO=Uint8Array.of(0),xw=Uint8Array.of();function ZO($,v,g,U=32){Qr($),C$(U,"length"),o$(v,void 0,"prk");let r=$.outputLen;if(v.length<r)throw Error('"prk" must be at least HashLen octets');if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=xw;else o$(g,void 0,"info");let J=new Uint8Array(I*r),G=dv.create($,v),O=G._cloneInto(),z=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)uO[0]=Q+1,O.update(Q===0?xw:z).update(g).update(uO).digestInto(z),J.set(z,r*Q),G._cloneInto(O);return G.destroy(),O.destroy(),Ov(z,uO),J.slice(0,U)}var kr=($,v,g,U,r)=>ZO($,yU($,v,g),U,r);function cw($,v,g){return $&v^~$&g}function lw($,v,g){return $&v^$&g^v&g}class P0{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=Fg(this.buffer)}update($){mg(this),o$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=Fg($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){mg(this),S0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Ov(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=Fg($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,z=this.get();if(O>z.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<O;Q++)J.setUint32(4*Q,z[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var wr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),x$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var k0=BigInt(4294967295),yw=BigInt(32);function YZ($,v=!1){if(v)return{h:Number($&k0),l:Number($>>yw&k0)};return{h:Number($>>yw&k0)|0,l:Number($&k0)|0}}function dw($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=YZ($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var jO=($,v,g)=>$>>>g,MO=($,v,g)=>$<<32-g|v>>>g,Ig=($,v,g)=>$>>>g|v<<32-g,Jg=($,v,g)=>$<<32-g|v>>>g,dU=($,v,g)=>$<<64-g|v>>>g-32,hU=($,v,g)=>$>>>g-32|v<<64-g;function hv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var hw=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),pw=($,v,g,U)=>v+g+U+($/4294967296|0)|0,tw=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),aw=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,ew=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),sw=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var WZ=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nr=new Uint32Array(64);class RO extends P0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)nr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=nr[Q-15],N=nr[Q-2],w=_v(X,7)^_v(X,18)^X>>>3,q=_v(N,17)^_v(N,19)^N>>>10;nr[Q]=q+nr[Q-7]+w+nr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:O,H:z}=this;for(let Q=0;Q<64;Q++){let X=_v(J,6)^_v(J,11)^_v(J,25),N=z+X+cw(J,G,O)+WZ[Q]+nr[Q]|0,q=(_v(g,2)^_v(g,13)^_v(g,22))+lw(g,U,r)|0;z=O,O=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,O=O+this.G|0,z=z+this.H|0,this.set(g,U,r,I,J,G,O,z)}roundClean(){Ov(nr)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class $N extends RO{A=wr[0]|0;B=wr[1]|0;C=wr[2]|0;D=wr[3]|0;E=wr[4]|0;F=wr[5]|0;G=wr[6]|0;H=wr[7]|0;constructor(){super(32)}}class VZ extends RO{A=Nr[0]|0;B=Nr[1]|0;C=Nr[2]|0;D=Nr[3]|0;E=Nr[4]|0;F=Nr[5]|0;G=Nr[6]|0;H=Nr[7]|0;constructor(){super(28)}}var vN=(()=>dw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),uZ=(()=>vN[0])(),ZZ=(()=>vN[1])(),Er=new Uint32Array(80),fr=new Uint32Array(80);class pU extends P0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:O,El:z,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=O|0,this.El=z|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)Er[R]=$.getUint32(v),fr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=Er[R-15]|0,B=fr[R-15]|0,F=Ig(L,B,1)^Ig(L,B,8)^jO(L,B,7),l=Jg(L,B,1)^Jg(L,B,8)^MO(L,B,7),d=Er[R-2]|0,_=fr[R-2]|0,b=Ig(d,_,19)^dU(d,_,61)^jO(d,_,6),v$=Jg(d,_,19)^hU(d,_,61)^MO(d,_,6),H=tw(l,v$,fr[R-7],fr[R-16]),K=aw(H,F,b,Er[R-7],Er[R-16]);Er[R]=K|0,fr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:O,Dl:z,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=Ig(Q,X,14)^Ig(Q,X,18)^dU(Q,X,41),B=Jg(Q,X,14)^Jg(Q,X,18)^hU(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=ew(S,B,l,ZZ[R],fr[R]),_=sw(d,W,L,F,uZ[R],Er[R]),b=d|0,v$=Ig(g,U,28)^dU(g,U,34)^dU(g,U,39),H=Jg(g,U,28)^hU(g,U,34)^hU(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=hv(O|0,z|0,_|0,b|0),O=J|0,z=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=hw(b,H,P);g=pw(V,_,v$,K),U=V|0}({h:g,l:U}=hv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=hv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=hv(this.Ch|0,this.Cl|0,J|0,G|0),{h:O,l:z}=hv(this.Dh|0,this.Dl|0,O|0,z|0),{h:Q,l:X}=hv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=hv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=hv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=hv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,O,z,Q,X,N,w,q,u,W,S)}roundClean(){Ov(Er,fr)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class rN extends pU{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class jZ extends pU{Ah=x$[0]|0;Al=x$[1]|0;Bh=x$[2]|0;Bl=x$[3]|0;Ch=x$[4]|0;Cl=x$[5]|0;Dh=x$[6]|0;Dl=x$[7]|0;Eh=x$[8]|0;El=x$[9]|0;Fh=x$[10]|0;Fl=x$[11]|0;Gh=x$[12]|0;Gl=x$[13]|0;Hh=x$[14]|0;Hl=x$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class MZ extends pU{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class RZ extends pU{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var L$=qO(()=>new $N,WO(1));var n0=qO(()=>new rN,WO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L0($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function TO($){if(!L0($))throw TypeError("Uint8Array expected")}function GN($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((g)=>typeof g==="string");else return v.every((g)=>Number.isSafeInteger(g))}function ON($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Br($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aU($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function f0($){if(!Array.isArray($))throw TypeError("array expected")}function B0($,v){if(!GN(!0,v))throw TypeError(`${$}: array of strings expected`)}function AO($,v){if(!GN(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Rv(...$){let v=(I)=>I,g=(I,J)=>(G)=>I(J(G)),U=$.map((I)=>I.encode).reduceRight(g,v),r=$.map((I)=>I.decode).reduce(g,v);return{encode:U,decode:r}}function Kv($){let v=typeof $==="string"?$.split(""):$,g=v.length;B0("alphabet",v);let U=new Map(v.map((r,I)=>[r,I]));return{encode:(r)=>{return f0(r),r.map((I)=>{if(!Number.isSafeInteger(I)||I<0||I>=g)throw Error(`alphabet.encode: digit index outside alphabet "${I}". Allowed: ${$}`);return v[I]})},decode:(r)=>{return f0(r),r.map((I)=>{Br("alphabet.decode",I);let J=U.get(I);if(J===void 0)throw Error(`Unknown letter: "${I}". Allowed: ${$}`);return J})}}}function Sv($=""){return Br("join",$),{encode:(v)=>{return B0("join.decode",v),v.join($)},decode:(v)=>{return Br("join.decode",v),v.split($)}}}function _0($,v="="){return aU($),Br("padding",v),{encode(g){B0("padding.encode",g);while(g.length*$%8)g.push(v);return g},decode(g){B0("padding.decode",g);let U=g.length;if(U*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;U>0&&g[U-1]===v;U--)if((U-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return g.slice(0,U)}}}function zN($){return ON($),{encode:(v)=>v,decode:(v)=>$(v)}}function gN($,v,g){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(g<2)throw RangeError(`convertRadix: invalid to=${g}, base cannot be less than 2`);if(f0($),!$.length)return[];let U=0,r=[],I=Array.from($,(G)=>{if(aU(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),J=I.length;while(!0){let G=0,O=!0;for(let z=U;z<J;z++){let Q=I[z],X=v*G,N=X+Q;if(!Number.isSafeInteger(N)||X/v!==G||N-Q!==X)throw Error("convertRadix: carry overflow");let w=N/g;G=N%g;let q=Math.floor(w);if(I[z]=q,!Number.isSafeInteger(q)||q*g+G!==N)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!q)U=z;else O=!1}if(r.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)r.push(0);return r.reverse()}var DN=($,v)=>v===0?$:DN(v,$%v),C0=($,v)=>$+(v-DN($,v)),E0=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function KO($,v,g,U){if(f0($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(g<=0||g>32)throw RangeError(`convertRadix2: wrong to=${g}`);if(C0(v,g)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${g} carryBits=${C0(v,g)}`);let r=0,I=0,J=E0[v],G=E0[g]-1,O=[];for(let z of $){if(aU(z),z>=J)throw Error(`convertRadix2: invalid data word=${z} from=${v}`);if(r=r<<v|z,I+v>32)throw Error(`convertRadix2: carry overflow pos=${I} from=${v}`);I+=v;for(;I>=g;I-=g)O.push((r>>I-g&G)>>>0);let Q=E0[I];if(Q===void 0)throw Error("invalid carry");r&=Q-1}if(r=r<<g-I&G,!U&&I>=v)throw Error("Excess padding");if(!U&&r>0)throw Error(`Non-zero padding: ${r}`);if(U&&I>0)O.push(r>>>0);return O}function KZ($){aU($);let v=256;return{encode:(g)=>{if(!L0(g))throw TypeError("radix.encode input should be Uint8Array");return gN(Array.from(g),v,$)},decode:(g)=>{return AO("radix.decode",g),Uint8Array.from(gN(g,$,v))}}}function kv($,v=!1){if(aU($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(C0(8,$)>32||C0($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(g)=>{if(!L0(g))throw TypeError("radix2.encode input should be Uint8Array");return KO(Array.from(g),8,$,!v)},decode:(g)=>{return AO("radix2.decode",g),Uint8Array.from(KO(g,$,8,v))}}}function UN($){return ON($),function(...v){try{return $.apply(null,v)}catch(g){}}}var yS=Object.freeze(Rv(kv(4),Kv("0123456789ABCDEF"),Sv(""))),dS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),_0(5),Sv(""))),hS=Object.freeze(Rv(kv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Sv(""))),pS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),_0(5),Sv(""))),tS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Sv(""))),aS=Object.freeze(Rv(kv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Sv(""),zN(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),QN=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),SZ=/[\t\n\f\r ]/,XN=($,v)=>{Br("base64",$);let g=v?"base64url":"base64";if($.length>0&&SZ.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:g,lastChunkHandling:"strict"})},HO=Object.freeze(QN?{encode($){return TO($),$.toBase64()},decode($){return XN($,!1)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),_0(6),Sv(""))),vv=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Sv(""))),eS=Object.freeze(QN?{encode($){return TO($),$.toBase64({alphabet:"base64url"})},decode($){return XN($,!0)}}:Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),_0(6),Sv(""))),sS=Object.freeze(Rv(kv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Sv(""))),PO=($)=>Rv(KZ(58),Kv($),Sv("")),$T=Object.freeze(PO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),vT=Object.freeze(PO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),rT=Object.freeze(PO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var SO=Rv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Sv("")),IN=[996825010,642813549,513874426,1027748829,705979059];function tU($){let v=$>>25,g=($&33554431)<<5;for(let U=0;U<IN.length;U++)if((v>>U&1)===1)g^=IN[U];return g}function JN($,v,g=1){let U=$.length,r=1;for(let I=0;I<U;I++){let J=$.charCodeAt(I);if(J<33||J>126)throw Error(`Invalid prefix (${$})`);r=tU(r)^J>>5}r=tU(r);for(let I=0;I<U;I++)r=tU(r)^$.charCodeAt(I)&31;for(let I of v)r=tU(r)^I;for(let I=0;I<6;I++)r=tU(r);return r^=g,SO.encode(KO([r%E0[30]],30,5,!1))}function wN($){let v=$==="bech32"?1:734539939,g=kv(5),U=g.decode,r=g.encode,I=UN(U);function J(X,N,w=90){if(Br("bech32.encode prefix",X),L0(N))N=Array.from(N);AO("bech32.encode",N);let q=X.length;if(q===0)throw TypeError(`Invalid prefix length ${q}`);let u=q+7+N.length;if(w!==!1&&u>w)throw TypeError(`Length ${u} exceeds limit ${w}`);let W=X.toLowerCase(),S=JN(W,N,v);return`${W}1${SO.encode(N)}${S}`}function G(X,N=90){Br("bech32.decode input",X);let w=X.length;if(w<8||N!==!1&&w>N)throw TypeError(`invalid string length: ${w} (${X}). Expected (8..${N})`);let q=X.toLowerCase();if(X!==q&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let u=q.lastIndexOf("1");if(u===0||u===-1)throw Error('Letter "1" must be present between prefix and data only');let W=q.slice(0,u),S=q.slice(u+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let R=SO.decode(S).slice(0,-6),L=JN(W,R,v);if(!S.endsWith(L))throw Error(`Invalid checksum in ${X}: expected "${L}"`);return{prefix:W,words:R}}let O=UN(G);function z(X){let{prefix:N,words:w}=G(X,!1);return{prefix:N,words:w,bytes:U(w)}}function Q(X,N){return J(X,r(N))}return{encode:J,decode:G,encodeFromBytes:Q,decodeToBytes:z,decodeUnsafe:O,fromWords:U,fromWordsUnsafe:I,toWords:r}}var Tv=Object.freeze(wN("bech32")),gT=Object.freeze(wN("bech32m"));var TZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),AZ={encode($){return TO($),$.toHex()},decode($){return Br("hex",$),Uint8Array.fromHex($)}},UT=Object.freeze(TZ?AZ:Rv(kv(4),Kv("0123456789abcdef"),Sv(""),zN(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function PZ($,v,g,U){Qr($);let r=H0({dkLen:32,asyncTick:10},U),{c:I,dkLen:J,asyncTick:G}=r;if(C$(I,"c"),C$(J,"dkLen"),C$(G,"asyncTick"),I<1)throw Error("iterations (c) must be >= 1");if(J<1)throw Error('"dkLen" must be >= 1');if(J>4294967295*$.outputLen)throw Error("derived key too long");let O=NO(v,"password"),z=NO(g,"salt"),Q=new Uint8Array(J),X=dv.create($,O),N=X._cloneInto().update(z);return{c:I,dkLen:J,asyncTick:G,DK:Q,PRF:X,PRFSalt:N}}function kZ($,v,g,U,r){if($.destroy(),v.destroy(),U)U.destroy();return Ov(r),g}function kO($,v,g,U){let{c:r,dkLen:I,DK:J,PRF:G,PRFSalt:O}=PZ($,v,g,U),z,Q=new Uint8Array(4),X=Fg(Q),N=new Uint8Array(G.outputLen);for(let w=1,q=0;q<I;w++,q+=G.outputLen){let u=J.subarray(q,q+G.outputLen);X.setInt32(0,w,!1),(z=O._cloneInto(z)).update(Q).digestInto(N),u.set(N.subarray(0,u.length));for(let W=1;W<r;W++){G._cloneInto(z).update(N).digestInto(N);for(let S=0;S<u.length;S++)u[S]^=N[S]}}return kZ(G,O,J,z,N)}function NN($,v,g,U,r,I){let J=$[v++]^g[U++],G=$[v++]^g[U++],O=$[v++]^g[U++],z=$[v++]^g[U++],Q=$[v++]^g[U++],X=$[v++]^g[U++],N=$[v++]^g[U++],w=$[v++]^g[U++],q=$[v++]^g[U++],u=$[v++]^g[U++],W=$[v++]^g[U++],S=$[v++]^g[U++],R=$[v++]^g[U++],L=$[v++]^g[U++],B=$[v++]^g[U++],F=$[v++]^g[U++],l=J,d=G,_=O,b=z,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let e=0;e<8;e+=2)v$^=M$(l+M|0,7),V^=M$(v$+l|0,9),M^=M$(V+v$|0,13),l^=M$(M+V|0,18),j^=M$(H+d|0,7),n^=M$(j+H|0,9),d^=M$(n+j|0,13),H^=M$(d+n|0,18),f^=M$(Z+K|0,7),_^=M$(f+Z|0,9),K^=M$(_+f|0,13),Z^=M$(K+_|0,18),b^=M$(o+A|0,7),P^=M$(b+o|0,9),A^=M$(P+b|0,13),o^=M$(A+P|0,18),d^=M$(l+b|0,7),_^=M$(d+l|0,9),b^=M$(_+d|0,13),l^=M$(b+_|0,18),K^=M$(H+v$|0,7),P^=M$(K+H|0,9),v$^=M$(P+K|0,13),H^=M$(v$+P|0,18),A^=M$(Z+j|0,7),V^=M$(A+Z|0,9),j^=M$(V+A|0,13),Z^=M$(j+V|0,18),M^=M$(o+f|0,7),n^=M$(M+o|0,9),f^=M$(n+M|0,13),o^=M$(f+n|0,18);r[I++]=J+l|0,r[I++]=G+d|0,r[I++]=O+_|0,r[I++]=z+b|0,r[I++]=Q+v$|0,r[I++]=X+H|0,r[I++]=N+K|0,r[I++]=w+P|0,r[I++]=q+V|0,r[I++]=u+j|0,r[I++]=W+Z|0,r[I++]=S+A|0,r[I++]=R+M|0,r[I++]=L+n|0,r[I++]=B+f|0,r[I++]=F+o|0}function nO($,v,g,U,r){let I=U+0,J=U+16*r;for(let G=0;G<16;G++)g[J+G]=$[v+(2*r-1)*16+G];for(let G=0;G<r;G++,I+=16,v+=16){if(NN(g,J,$,v,g,I),G>0)J+=16;NN(g,I,$,v+=16,g,J)}}function nZ($,v,g){let U=H0({dkLen:32,asyncTick:10,maxmem:1073742848},g),{N:r,r:I,p:J,dkLen:G,asyncTick:O,maxmem:z,onProgress:Q}=U;if(C$(r,"N"),C$(I,"r"),C$(J,"p"),C$(G,"dkLen"),C$(O,"asyncTick"),C$(z,"maxmem"),Q!==void 0&&typeof Q!=="function")throw Error("progressCb must be a function");let X=128*I,N=X/4,w=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(J<1||J>(w-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let q=X*(r+J+1);if(q>z)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+q+", maxmem="+z);let u=kO(L$,$,v,{c:1,dkLen:X*J}),W=T0(u),S=T0(new Uint8Array(X*r)),R=T0(new Uint8Array(X)),L=()=>{};if(Q){let B=2*r*J,F=Math.max(Math.floor(B/1e4),1),l=0;L=()=>{if(l++,Q&&(!(l%F)||l===B))Q(l/B)}}return{N:r,r:I,p:J,dkLen:G,blockSize32:N,V:S,B32:W,B:u,tmp:R,blockMixCb:L,asyncTick:O}}function EZ($,v,g,U,r){let I=kO(L$,$,g,{c:1,dkLen:v});return Ov(g,U,r),I}function EO($,v,g){let{N:U,r,p:I,dkLen:J,blockSize32:G,V:O,B32:z,B:Q,tmp:X,blockMixCb:N}=nZ($,v,g);wO(z);for(let w=0;w<I;w++){let q=G*w;for(let u=0;u<G;u++)O[u]=z[q+u];for(let u=0,W=0;u<U-1;u++)nO(O,W,O,W+=G,r),N();nO(O,(U-1)*G,z,q,r),N();for(let u=0;u<U;u++){let W=(z[q+G-16]&U-1)>>>0;for(let S=0;S<G;S++)X[S]=z[q+S]^O[W*G+S];nO(X,0,z,q,r),N()}}return wO(z),EZ($,J,Q,O,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function fZ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function b0($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function og($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,g=""){let U=fZ($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",O=U?`length=${r}`:`type=${typeof $}`,z=J+"expected Uint8Array"+G+", got "+O;if(!U)throw TypeError(z);throw RangeError(z)}return $}function fO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function YN($,v,g=!1){b$($,void 0,"output");let U=v.outputLen;if($.length<U)throw RangeError("digestInto() expects output buffer of length at least "+U);if(g&&!xg($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function BZ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Gg=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),CZ=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var LZ=($)=>{for(let v=0;v<$.length;v++)$[v]=CZ($[v]);return $},Yr=Gg?($)=>$:LZ;function qN($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function WN($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function VN($,v,g){let U=v,r=g||(()=>[]),I=(G,O)=>U(O,...r(G)).update(G).digest(),J=U(new Uint8Array($),...r(new Uint8Array(0)));return I.outputLen=J.outputLen,I.blockLen=J.blockLen,I.create=(G,...O)=>U(G,...O),I}var uN=($,v)=>{function g(U,...r){if(b$(U,void 0,"key"),$.nonceLength!==void 0){let Q=r[0];b$(Q,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let I=$.tagLength;if(I&&r[1]!==void 0)b$(r[1],void 0,"AAD");let J=v(U,...r),G=(Q,X)=>{if(X!==void 0){if(Q!==2)throw Error("cipher output not supported");b$(X,void 0,"output")}},O=!1;return{encrypt(Q,X){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(Q),G(J.encrypt.length,X),J.encrypt(Q,X)},decrypt(Q,X){if(b$(Q),I&&Q.length<I)throw Error('"ciphertext" expected length bigger than tagLength='+I);return G(J.decrypt.length,X),J.decrypt(Q,X)}}}return Object.assign(g,$),g};function eU($,v,g=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(g&&!xg(v))throw Error("invalid output, must be aligned");return v}function ZN($,v,g){og($),og(v),b0(g);let U=new Uint8Array(16),r=BZ(U);return r.setBigUint64(0,BigInt(v),g),r.setBigUint64(8,BigInt($),g),U}function xg($){return $.byteOffset%4===0}function cg($){return Uint8Array.from(b$($))}var MN=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),_Z=(()=>Yr(pv(MN("expand 16-byte k"))))(),bZ=(()=>Yr(pv(MN("expand 32-byte k"))))();function R$($,v){return $<<v|$>>>32-v}var sU=64,iZ=16,BO=(()=>4294967295)(),jN=Uint32Array.of();function mZ($,v,g,U,r,I,J,G){let O=r.length,z=new Uint8Array(sU),Q=pv(z),X=Gg&&xg(r)&&xg(I),N=X?pv(r):jN,w=X?pv(I):jN;if(!Gg){for(let q=0;q<O;J++){if($(v,g,U,Q,J,G),Yr(Q),J>=BO)throw Error("arx: counter overflow");let u=Math.min(sU,O-q);for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^z[W];q+=u}return}for(let q=0;q<O;J++){if($(v,g,U,Q,J,G),J>=BO)throw Error("arx: counter overflow");let u=Math.min(sU,O-q);if(X&&u===sU){let W=q/4;if(q%4!==0)throw Error("arx: invalid block position");for(let S=0,R;S<iZ;S++)R=W+S,w[R]=N[R]^Q[S];q+=sU;continue}for(let W=0,S;W<u;W++)S=q+W,I[S]=r[S]^z[W];q+=u}}function RN($,v){let{allowShortKeys:g,extendNonceFn:U,counterLength:r,counterRight:I,rounds:J}=qN({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return og(r),og(J),b0(I),b0(g),(G,O,z,Q,X=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(z,void 0,"data");let N=z.length;if(Q=eU(N,Q,!1),og(X),X<0||X>=BO)throw Error("arx: counter overflow");let w=[],q=G.length,u,W;if(q===32)w.push(u=cg(G)),W=bZ;else if(q===16&&g)u=new Uint8Array(32),u.set(G),u.set(G,16),W=_Z,w.push(u);else throw b$(G,32,"arx key"),Error("invalid key size");if(!Gg||!xg(O))w.push(O=cg(O));let S=pv(u);if(U){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=O.subarray(0,16);if(Gg)U(W,S,pv(B),S);else{let F=Yr(Uint32Array.from(W));U(F,S,pv(B),S),bv(F),Yr(S)}O=O.subarray(16)}else if(!Gg)Yr(S);let R=16-r;if(R!==O.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let B=new Uint8Array(12);B.set(O,I?0:12-O.length),O=B,w.push(O)}let L=Yr(pv(O));try{return mZ($,W,S,L,z,Q,X,J),Q}finally{bv(...w)}}}function l$($,v){return $[v++]&255|($[v++]&255)<<8}class KN{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cg(b$($,32,"key"));let v=l$($,0),g=l$($,2),U=l$($,4),r=l$($,6),I=l$($,8),J=l$($,10),G=l$($,12),O=l$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|g<<3)&8191,this.r[2]=(g>>>10|U<<6)&7939,this.r[3]=(U>>>7|r<<9)&8191,this.r[4]=(r>>>4|I<<12)&255,this.r[5]=I>>>1&8190,this.r[6]=(I>>>14|J<<2)&8191,this.r[7]=(J>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let z=0;z<8;z++)this.pad[z]=l$($,16+2*z)}process($,v,g=!1){let U=g?0:2048,{h:r,r:I}=this,J=I[0],G=I[1],O=I[2],z=I[3],Q=I[4],X=I[5],N=I[6],w=I[7],q=I[8],u=I[9],W=l$($,v+0),S=l$($,v+2),R=l$($,v+4),L=l$($,v+6),B=l$($,v+8),F=l$($,v+10),l=l$($,v+12),d=l$($,v+14),_=r[0]+(W&8191),b=r[1]+((W>>>13|S<<3)&8191),v$=r[2]+((S>>>10|R<<6)&8191),H=r[3]+((R>>>7|L<<9)&8191),K=r[4]+((L>>>4|B<<12)&8191),P=r[5]+(B>>>1&8191),V=r[6]+((B>>>14|F<<2)&8191),j=r[7]+((F>>>11|l<<5)&8191),Z=r[8]+((l>>>8|d<<8)&8191),A=r[9]+(d>>>5|U),M=0,n=M+_*J+b*(5*u)+v$*(5*q)+H*(5*w)+K*(5*N);M=n>>>13,n&=8191,n+=P*(5*X)+V*(5*Q)+j*(5*z)+Z*(5*O)+A*(5*G),M+=n>>>13,n&=8191;let f=M+_*G+b*J+v$*(5*u)+H*(5*q)+K*(5*w);M=f>>>13,f&=8191,f+=P*(5*N)+V*(5*X)+j*(5*Q)+Z*(5*z)+A*(5*O),M+=f>>>13,f&=8191;let o=M+_*O+b*G+v$*J+H*(5*u)+K*(5*q);M=o>>>13,o&=8191,o+=P*(5*w)+V*(5*N)+j*(5*X)+Z*(5*Q)+A*(5*z),M+=o>>>13,o&=8191;let e=M+_*z+b*O+v$*G+H*J+K*(5*u);M=e>>>13,e&=8191,e+=P*(5*q)+V*(5*w)+j*(5*N)+Z*(5*X)+A*(5*Q),M+=e>>>13,e&=8191;let I$=M+_*Q+b*z+v$*O+H*G+K*J;M=I$>>>13,I$&=8191,I$+=P*(5*u)+V*(5*q)+j*(5*w)+Z*(5*N)+A*(5*X),M+=I$>>>13,I$&=8191;let G$=M+_*X+b*Q+v$*z+H*O+K*G;M=G$>>>13,G$&=8191,G$+=P*J+V*(5*u)+j*(5*q)+Z*(5*w)+A*(5*N),M+=G$>>>13,G$&=8191;let D$=M+_*N+b*X+v$*Q+H*z+K*O;M=D$>>>13,D$&=8191,D$+=P*G+V*J+j*(5*u)+Z*(5*q)+A*(5*w),M+=D$>>>13,D$&=8191;let w$=M+_*w+b*N+v$*X+H*Q+K*z;M=w$>>>13,w$&=8191,w$+=P*O+V*G+j*J+Z*(5*u)+A*(5*q),M+=w$>>>13,w$&=8191;let Q$=M+_*q+b*w+v$*N+H*X+K*Q;M=Q$>>>13,Q$&=8191,Q$+=P*z+V*O+j*G+Z*J+A*(5*u),M+=Q$>>>13,Q$&=8191;let X$=M+_*u+b*q+v$*w+H*N+K*X;M=X$>>>13,X$&=8191,X$+=P*Q+V*z+j*O+Z*G+A*J,M+=X$>>>13,X$&=8191,M=(M<<2)+M|0,M=M+n|0,n=M&8191,M=M>>>13,f+=M,r[0]=n,r[1]=f,r[2]=o,r[3]=e,r[4]=I$,r[5]=G$,r[6]=D$,r[7]=w$,r[8]=Q$,r[9]=X$}finalize(){let{h:$,pad:v}=this,g=new Uint16Array(10),U=$[1]>>>13;$[1]&=8191;for(let J=2;J<10;J++)$[J]+=U,U=$[J]>>>13,$[J]&=8191;$[0]+=U*5,U=$[0]>>>13,$[0]&=8191,$[1]+=U,U=$[1]>>>13,$[1]&=8191,$[2]+=U,g[0]=$[0]+5,U=g[0]>>>13,g[0]&=8191;for(let J=1;J<10;J++)g[J]=$[J]+U,U=g[J]>>>13,g[J]&=8191;g[9]-=8192;let r=(U^1)-1;for(let J=0;J<10;J++)g[J]&=r;r=~r;for(let J=0;J<10;J++)$[J]=$[J]&r|g[J];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let I=$[0]+v[0];$[0]=I&65535;for(let J=1;J<8;J++)I=($[J]+v[J]|0)+(I>>>16)|0,$[J]=I&65535;bv(g)}update($){fO(this),b$($),$=cg($);let{buffer:v,blockLen:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(g-this.pos,U-r);if(I===g){for(;g<=U-r;r+=g)this.process($,r);continue}if(v.set($.subarray(r,r+I),this.pos),this.pos+=I,r+=I,this.pos===g)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){fO(this),YN($,this),this.finished=!0;let{buffer:v,h:g}=this,{pos:U}=this;if(U){v[U++]=1;for(;U<16;U++)v[U]=0;this.process(v,0,!0)}this.finalize();let r=0;for(let I=0;I<8;I++)$[r++]=g[I]>>>0,$[r++]=g[I]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}}var SN=VN(32,($)=>new KN($));function FZ($,v,g,U,r,I=20){let J=$[0],G=$[1],O=$[2],z=$[3],Q=v[0],X=v[1],N=v[2],w=v[3],q=v[4],u=v[5],W=v[6],S=v[7],R=r,L=g[0],B=g[1],F=g[2],l=J,d=G,_=O,b=z,v$=Q,H=X,K=N,P=w,V=q,j=u,Z=W,A=S,M=R,n=L,f=B,o=F;for(let I$=0;I$<I;I$+=2)l=l+v$|0,M=R$(M^l,16),V=V+M|0,v$=R$(v$^V,12),l=l+v$|0,M=R$(M^l,8),V=V+M|0,v$=R$(v$^V,7),d=d+H|0,n=R$(n^d,16),j=j+n|0,H=R$(H^j,12),d=d+H|0,n=R$(n^d,8),j=j+n|0,H=R$(H^j,7),_=_+K|0,f=R$(f^_,16),Z=Z+f|0,K=R$(K^Z,12),_=_+K|0,f=R$(f^_,8),Z=Z+f|0,K=R$(K^Z,7),b=b+P|0,o=R$(o^b,16),A=A+o|0,P=R$(P^A,12),b=b+P|0,o=R$(o^b,8),A=A+o|0,P=R$(P^A,7),l=l+H|0,o=R$(o^l,16),Z=Z+o|0,H=R$(H^Z,12),l=l+H|0,o=R$(o^l,8),Z=Z+o|0,H=R$(H^Z,7),d=d+K|0,M=R$(M^d,16),A=A+M|0,K=R$(K^A,12),d=d+K|0,M=R$(M^d,8),A=A+M|0,K=R$(K^A,7),_=_+P|0,n=R$(n^_,16),V=V+n|0,P=R$(P^V,12),_=_+P|0,n=R$(n^_,8),V=V+n|0,P=R$(P^V,7),b=b+v$|0,f=R$(f^b,16),j=j+f|0,v$=R$(v$^j,12),b=b+v$|0,f=R$(f^b,8),j=j+f|0,v$=R$(v$^j,7);let e=0;U[e++]=J+l|0,U[e++]=G+d|0,U[e++]=O+_|0,U[e++]=z+b|0,U[e++]=Q+v$|0,U[e++]=X+H|0,U[e++]=N+K|0,U[e++]=w+P|0,U[e++]=q+V|0,U[e++]=u+j|0,U[e++]=W+Z|0,U[e++]=S+A|0,U[e++]=R+M|0,U[e++]=L+n|0,U[e++]=B+f|0,U[e++]=F+o|0}var oZ=RN(FZ,{counterRight:!1,counterLength:4,allowShortKeys:!1});var xZ=new Uint8Array(16),TN=($,v)=>{$.update(v);let g=v.length%16;if(g)$.update(xZ.subarray(g))},cZ=new Uint8Array(32);function AN($,v,g,U,r){if(r!==void 0)b$(r,void 0,"AAD");let I=$(v,g,cZ),J=ZN(U.length,r?r.length:0,!0),G=SN.create(I);if(r)TN(G,r);TN(G,U),G.update(J);let O=G.digest();return bv(I,J),O}var lZ=($)=>(v,g,U)=>{return{encrypt(I,J){let G=I.length;J=eU(G+16,J,!1),J.set(I);let O=J.subarray(0,-16);$(v,g,O,O,1);let z=AN($,v,g,O,U);return J.set(z,G),bv(z),J},decrypt(I,J){J=eU(I.length-16,J,!1);let G=I.subarray(0,-16),O=I.subarray(-16),z=AN($,v,g,G,U);if(!WN(O,z))throw bv(z),Error("invalid tag");return J.set(I.subarray(0,-16)),$(v,g,J,J,1),bv(z),J}}},nv=uN({blockSize:64,nonceLength:12,tagLength:16},lZ(oZ));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function lg($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,v=""){if(!Number.isSafeInteger($)||$<0){let g=v&&`"${v}" `;throw Error(`${g}expected integer >= 0, got ${$}`)}}function Y$($,v,g=""){let U=lg($),r=$?.length,I=v!==void 0;if(!U||I&&r!==v){let J=g&&`"${g}" `,G=I?` of length ${v}`:"",O=U?`length=${r}`:`type=${typeof $}`;throw Error(J+"expected Uint8Array"+G+", got "+O)}return $}function Ev($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Wr($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function i0($,v){Y$($,void 0,"digestInto() output");let g=v.outputLen;if($.length<g)throw Error('"digestInto() output" expected to be of length >='+g)}function m0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function F0($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function iv($,v){return $<<32-v|$>>>v}var yZ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function dZ($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function hZ($){for(let v=0;v<$.length;v++)$[v]=dZ($[v]);return $}var CO=yZ?($)=>$:hZ,PN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),pZ=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function Og($){if(Y$($),PN)return $.toHex();let v="";for(let g=0;g<$.length;g++)v+=pZ[$[g]];return v}var qr={_0:48,_9:57,A:65,F:70,a:97,f:102};function HN($){if($>=qr._0&&$<=qr._9)return $-qr._0;if($>=qr.A&&$<=qr.F)return $-(qr.A-10);if($>=qr.a&&$<=qr.f)return $-(qr.a-10);return}function zg($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(PN)return Uint8Array.fromHex($);let v=$.length,g=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let U=new Uint8Array(g);for(let r=0,I=0;r<g;r++,I+=2){let J=HN($.charCodeAt(I)),G=HN($.charCodeAt(I+1));if(J===void 0||G===void 0){let O=$[I]+$[I+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+I)}U[r]=J*16+G}return U}function _$(...$){let v=0;for(let U=0;U<$.length;U++){let r=$[U];Y$(r),v+=r.length}let g=new Uint8Array(v);for(let U=0,r=0;U<$.length;U++){let I=$[U];g.set(I,r),r+=I.length}return g}function yg($,v={}){let g=(r,I)=>$(I).update(r).digest(),U=$(void 0);return g.outputLen=U.outputLen,g.blockLen=U.blockLen,g.create=(r)=>$(r),Object.assign(g,v),Object.freeze(g)}function Cr($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var Lr=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _O=BigInt(0),LO=BigInt(1);function $I($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw Error(g+"expected boolean, got type="+typeof $)}return $}function kN($){if(typeof $==="bigint"){if(!o0($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function vI($){let v=kN($).toString(16);return v.length&1?"0"+v:v}function nN($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_O:BigInt("0x"+$)}function _r($){return nN(Og($))}function br($){return nN(Og(x0(Y$($)).reverse()))}function dg($,v){m$(v),$=kN($);let g=zg($.toString(16).padStart(v*2,"0"));if(g.length!==v)throw Error("number too large");return g}function rI($,v){return dg($,v).reverse()}function x0($){return Uint8Array.from($)}function ir($){return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw Error(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var o0=($)=>typeof $==="bigint"&&_O<=$;function tZ($,v,g){return o0($)&&o0(v)&&o0(g)&&v<=$&&$<g}function gI($,v,g,U){if(!tZ(v,g,U))throw Error("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function bO($){let v;for(v=0;$>_O;$>>=LO,v+=1);return v}var UI=($)=>(LO<<BigInt($))-LO;function EN($,v,g){if(m$($,"hashLen"),m$(v,"qByteLen"),typeof g!=="function")throw Error("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,O=U($),z=U($),Q=0,X=()=>{O.fill(1),z.fill(0),Q=0},N=(...W)=>g(z,_$(O,...W)),w=(W=r)=>{if(z=N(I,W),O=N(),W.length===0)return;z=N(J,W),O=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){O=N();let R=O.slice();S.push(R),W+=O.length}return _$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while(!(R=S(q())))w();return X(),R}}function Dg($,v={},g={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function U(I,J,G){let O=$[I];if(G&&O===void 0)return;let z=typeof O;if(z!==J||O===null)throw Error(`param "${I}" is invalid: expected ${J}, got ${z}`)}let r=(I,J)=>Object.entries(I).forEach(([G,O])=>U(G,O,J));r(v,!1),r(g,!0)}function iO($){let v=new WeakMap;return(g,...U)=>{let r=v.get(g);if(r!==void 0)return r;let I=$(g,...U);return v.set(g,I),I}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Dv=BigInt(0),rv=BigInt(1),Qg=BigInt(2),CN=BigInt(3),LN=BigInt(4),_N=BigInt(5),aZ=BigInt(7),bN=BigInt(8),eZ=BigInt(9),iN=BigInt(16);function zv($,v){let g=$%v;return g>=Dv?g:v+g}function fv($,v,g){let U=$;while(v-- >Dv)U*=U,U%=g;return U}function fN($,v){if($===Dv)throw Error("invert: expected non-zero number");if(v<=Dv)throw Error("invert: expected positive modulus, got "+v);let g=zv($,v),U=v,r=Dv,I=rv,J=rv,G=Dv;while(g!==Dv){let z=U/g,Q=U%g,X=r-J*z,N=I-G*z;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==rv)throw Error("invert: does not exist");return zv(r,v)}function mO($,v,g){if(!$.eql($.sqr(v),g))throw Error("Cannot find square root")}function mN($,v){let g=($.ORDER+rv)/LN,U=$.pow(v,g);return mO($,U,v),U}function sZ($,v){let g=($.ORDER-_N)/bN,U=$.mul(v,Qg),r=$.pow(U,g),I=$.mul(v,r),J=$.mul($.mul(I,Qg),r),G=$.mul(I,$.sub(J,$.ONE));return mO($,G,v),G}function $j($){let v=c0($),g=FN($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+aZ)/iN;return(G,O)=>{let z=G.pow(O,J),Q=G.mul(z,U),X=G.mul(z,r),N=G.mul(z,I),w=G.eql(G.sqr(Q),O),q=G.eql(G.sqr(X),O);z=G.cmov(z,Q,w),Q=G.cmov(N,X,q);let u=G.eql(G.sqr(Q),O),W=G.cmov(z,Q,u);return mO(G,W,O),W}}function FN($){if($<CN)throw Error("sqrt is not defined for small field");let v=$-rv,g=0;while(v%Qg===Dv)v/=Qg,g++;let U=Qg,r=c0($);while(BN(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return mN;let I=r.pow(U,v),J=(v+rv)/Qg;return function(O,z){if(O.is0(z))return z;if(BN(O,z)!==1)throw Error("Cannot find square root");let Q=g,X=O.mul(O.ONE,I),N=O.pow(z,v),w=O.pow(z,J);while(!O.eql(N,O.ONE)){if(O.is0(N))return O.ZERO;let q=1,u=O.sqr(N);while(!O.eql(u,O.ONE))if(q++,u=O.sqr(u),q===Q)throw Error("Cannot find square root");let W=rv<<BigInt(Q-q-1),S=O.pow(X,W);Q=q,X=O.sqr(S),N=O.mul(N,X),w=O.mul(w,S)}return w}}function vj($){if($%LN===CN)return mN;if($%bN===_N)return sZ;if($%iN===eZ)return $j($);return FN($)}var rj=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function FO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=rj.reduce((U,r)=>{return U[r]="function",U},v);return Dg($,g),$}function gj($,v,g){if(g<Dv)throw Error("invalid exponent, negatives unsupported");if(g===Dv)return $.ONE;if(g===rv)return v;let U=$.ONE,r=v;while(g>Dv){if(g&rv)U=$.mul(U,r);r=$.sqr(r),g>>=rv}return U}function II($,v,g=!1){let U=Array(v.length).fill(g?$.ZERO:void 0),r=v.reduce((J,G,O)=>{if($.is0(G))return J;return U[O]=J,$.mul(J,G)},$.ONE),I=$.inv(r);return v.reduceRight((J,G,O)=>{if($.is0(G))return J;return U[O]=$.mul(J,U[O]),$.mul(J,G)},I),U}function BN($,v){let g=($.ORDER-rv)/Qg,U=$.pow(v,g),r=$.eql(U,$.ONE),I=$.eql(U,$.ZERO),J=$.eql(U,$.neg($.ONE));if(!r&&!I&&!J)throw Error("invalid Legendre symbol result");return r?1:I?0:-1}function Uj($,v){if(v!==void 0)m$(v);let g=v!==void 0?v:$.toString(2).length,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}class oN{ORDER;BITS;BYTES;isLE;ZERO=Dv;ONE=rv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Dv)throw Error("invalid field: expected ORDER > 0, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=Uj($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create($){return zv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Dv<=$&&$<this.ORDER}is0($){return $===Dv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&rv)===rv}neg($){return zv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return zv($*$,this.ORDER)}add($,v){return zv($+v,this.ORDER)}sub($,v){return zv($-v,this.ORDER)}mul($,v){return zv($*v,this.ORDER)}pow($,v){return gj(this,$,v)}div($,v){return zv($*fN(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fN($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=vj(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?rI($,this.BYTES):dg($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if(!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let O=new Uint8Array(U);O.set($,r?0:O.length-$.length),$=O}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?br($):_r($);if(J)G=zv(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return II(this,$)}cmov($,v,g){return g?v:$}}function c0($,v={}){return new oN($,v)}function xN($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function oO($){let v=xN($);return v+Math.ceil(v/2)}function cN($,v,g=!1){Y$($);let U=$.length,r=xN(v),I=oO(v);if(U<16||U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?br($):_r($),G=zv(J,v-rv)+rv;return g?rI(G,r):dg(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hg=BigInt(0),Xg=BigInt(1);function JI($,v){let g=v.negate();return $?g:v}function yO($,v){let g=II($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function hN($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function xO($,v){hN($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=UI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function lN($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),O=$>>J;if(G>U)G-=I,O+=Xg;let z=v*U,Q=z+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:O,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:z}}var cO=new WeakMap,pN=new WeakMap;function lO($){return pN.get($)||1}function yN($){if($!==hg)throw Error("invalid wNAF")}class dO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>hg){if(v&Xg)g=g.add(U);U=U.double(),v>>=Xg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=xO(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let O=1;O<U;O++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=xO($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:O,isZero:z,isNeg:Q,isNegF:X,offsetF:N}=lN(g,J,I);if(g=G,z)r=r.add(JI(X,v[N]));else U=U.add(JI(Q,v[O]))}return yN(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=xO($,this.bits);for(let I=0;I<r.windows;I++){if(g===hg)break;let{nextN:J,offset:G,isZero:O,isNeg:z}=lN(g,I,r);if(g=J,O)continue;else{let Q=v[G];U=U.add(z?Q.negate():Q)}}return yN(g),U}getPrecomputes($,v,g){let U=cO.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);cO.set(v,U)}}return U}cached($,v,g){let U=lO($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=lO($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){hN(v,this.bits),pN.set($,v),cO.delete($)}hasCache($){return lO($)!==1}}function tN($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>hg||U>hg){if(g&Xg)I=I.add(r);if(U&Xg)J=J.add(r);r=r.double(),g>>=Xg,U>>=Xg}return{p1:I,p2:J}}function dN($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return FO(v),v}else return c0($,{isLE:g})}function aN($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let z=v[O];if(!(typeof z==="bigint"&&z>hg))throw Error(`CURVE.${O} must be positive bigint`)}let r=dN(v.p,g.Fp,U),I=dN(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!r.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function l0($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GI=BigInt(0),pg=BigInt(1),y0=BigInt(2);function Ij($){return Dg($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eN($){let v=Ij($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let O=J||Cr,z=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?y0**BigInt(254):y0**BigInt(447),q=G?BigInt(8)*y0**BigInt(251)-pg:BigInt(4)*y0**BigInt(445)-pg,u=w+q+pg,W=(V)=>zv(V,g),S=R(X);function R(V){return rI(W(V),Q)}function L(V){let j=x0(Y$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(br(j))}function B(V){return br(r(x0(Y$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===GI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){gI("u",V,GI,g),gI("scalar",j,w,u);let Z=j,A=V,M=pg,n=GI,f=V,o=pg,e=GI;for(let G$=BigInt(z-1);G$>=GI;G$--){let D$=Z>>G$&pg;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V=O(Q))=>{return Y$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:l0(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}class hO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Ev($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let g=this.blockLen,U=new Uint8Array(g);U.set(v.length>g?$.create().update(v).digest():v);for(let r=0;r<U.length;r++)U[r]^=54;this.iHash.update(U),this.oHash=$.create();for(let r=0;r<U.length;r++)U[r]^=106;this.oHash.update(U),Vv(U)}update($){return Wr(this),this.iHash.update($),this}digestInto($){Wr(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:g,finished:U,destroyed:r,blockLen:I,outputLen:J}=this;return $=$,$.finished=U,$.destroyed=r,$.blockLen=I,$.outputLen=J,$.oHash=v._cloneInto($.oHash),$.iHash=g._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tg=($,v,g)=>new hO($,v).update(g).digest();tg.create=($,v)=>new hO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sN=($,v)=>($+($>=0?v:-v)/vY)/v;function Jj($,v,g){let[[U,r],[I,J]]=v,G=sN(J*$,g),O=sN(-r*$,g),z=$-G*U-O*I,Q=-G*r-O*J,X=z<Vr,N=Q<Vr;if(X)z=-z;if(N)Q=-Q;let w=UI(Math.ceil(bO(g)/2))+ag;if(z<Vr||z>=w||Q<Vr||Q>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:z,k2neg:N,k2:Q}}function tO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pO($,v){let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if($I(g.lowS,"lowS"),$I(g.prehash,"prehash"),g.format!==void 0)tO(g.format);return g}class $Y extends Error{constructor($=""){super($)}}var mr={Err:$Y,_tlv:{encode:($,v)=>{let{Err:g}=mr;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=vI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?vI(r.length/2|128):"";return vI($)+I+r+v},decode($,v){let{Err:g}=mr,U=0;if($<0||$>256)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let O=r&127;if(!O)throw new g("tlv.decode(long): indefinite length not supported");if(O>4)throw new g("tlv.decode(long): byte length is too big");let z=v.subarray(U,U+O);if(z.length!==O)throw new g("tlv.decode: length bytes not complete");if(z[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of z)J=J<<8|Q;if(U+=O,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=mr;if($<Vr)throw new v("integer: negative integers are not allowed");let g=vI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=mr;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _r($)}},toSig($){let{Err:v,_int:g,_tlv:U}=mr,r=Y$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=U.decode(2,I),{v:z,l:Q}=U.decode(2,O);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(z)}},hexFromSig($){let{_tlv:v,_int:g}=mr,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}},Vr=BigInt(0),ag=BigInt(1),vY=BigInt(2),d0=BigInt(3),Gj=BigInt(4);function aO($,v={}){let g=aN("weierstrass",$,v),{Fp:U,Fn:r}=g,I=g.CURVE,{h:J,n:G}=I;Dg(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!U.is0(I.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=gY(U,r);function Q(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,P,V){let{x:j,y:Z}=P.toAffine(),A=U.toBytes(j);if($I(V,"isCompressed"),V){Q();let M=!U.isOdd(Z);return _$(rY(M),A)}else return _$(Uint8Array.of(4),A,U.toBytes(Z))}function N(K){Y$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=z,j=K.length,Z=K[0],A=K.subarray(1);if(j===P&&(Z===2||Z===3)){let M=U.fromBytes(A);if(!U.isValid(M))throw Error("bad point: is not on curve, wrong x");let n=u(M),f;try{f=U.sqrt(n)}catch(I$){let G$=I$ instanceof Error?": "+I$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}Q();let o=U.isOdd(f);if((Z&1)===1!==o)f=U.neg(f);return{x:M,y:f}}else if(j===V&&Z===4){let M=U.BYTES,n=U.fromBytes(A.subarray(0,M)),f=U.fromBytes(A.subarray(M,M*2));if(!W(n,f))throw Error("bad point: is not on curve");return{x:n,y:f}}else throw Error(`bad point: got length ${j}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||X,q=v.fromBytes||N;function u(K){let P=U.sqr(K),V=U.mul(P,K);return U.add(U.add(V,U.mul(K,I.a)),I.b)}function W(K,P){let V=U.sqr(P),j=u(K);return U.eql(V,j)}if(!W(I.Gx,I.Gy))throw Error("bad curve params: generator point");let S=U.mul(U.pow(I.a,d0),Gj),R=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(S,R)))throw Error("bad curve params: a or b");function L(K,P,V=!1){if(!U.isValid(P)||V&&U.is0(P))throw Error(`bad point coordinate ${K}`);return P}function B(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function F(K){if(!O||!O.basises)throw Error("no endo");return Jj(K,O.basises,r.ORDER)}let l=iO((K,P)=>{let{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}),d=iO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!U.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!U.isValid(P)||!U.isValid(V))throw Error("bad point: x or y not field elements");if(!W(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,P,V,j,Z){return V=new b(U.mul(V.X,K),V.Y,V.Z),P=JI(j,P),V=JI(Z,V),P.add(V)}class b{static BASE=new b(I.Gx,I.Gy,U.ONE);static ZERO=new b(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(K,P,V){this.X=L("x",K),this.Y=L("y",P,!0),this.Z=L("z",V),Object.freeze(this)}static CURVE(){return I}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!U.isValid(P)||!U.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(U.is0(P)&&U.is0(V))return b.ZERO;return new b(P,V,U.ONE)}static fromBytes(K){let P=b.fromAffine(q(Y$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return b.fromBytes(zg(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(H.createCache(this,K),!P)this.multiply(d0);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(K)}equals(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.eql(U.mul(P,M),U.mul(Z,j)),f=U.eql(U.mul(V,M),U.mul(A,j));return n&&f}negate(){return new b(this.X,U.neg(this.Y),this.Z)}double(){let{a:K,b:P}=I,V=U.mul(P,d0),{X:j,Y:Z,Z:A}=this,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(A,A),G$=U.mul(j,Z);return G$=U.add(G$,G$),f=U.mul(j,A),f=U.add(f,f),M=U.mul(K,f),n=U.mul(V,I$),n=U.add(M,n),M=U.sub(e,n),n=U.add(e,n),n=U.mul(M,n),M=U.mul(G$,M),f=U.mul(V,f),I$=U.mul(K,I$),G$=U.sub(o,I$),G$=U.mul(K,G$),G$=U.add(G$,f),f=U.add(o,o),o=U.add(f,o),o=U.add(o,I$),o=U.mul(o,G$),n=U.add(n,o),I$=U.mul(Z,A),I$=U.add(I$,I$),o=U.mul(I$,G$),M=U.sub(M,o),f=U.mul(I$,e),f=U.add(f,f),f=U.add(f,f),new b(M,n,f)}add(K){B(K);let{X:P,Y:V,Z:j}=this,{X:Z,Y:A,Z:M}=K,n=U.ZERO,f=U.ZERO,o=U.ZERO,e=I.a,I$=U.mul(I.b,d0),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.mul(j,M),Q$=U.add(P,V),X$=U.add(Z,A);Q$=U.mul(Q$,X$),X$=U.add(G$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,j);let W$=U.add(Z,M);return X$=U.mul(X$,W$),W$=U.add(G$,w$),X$=U.sub(X$,W$),W$=U.add(V,j),n=U.add(A,M),W$=U.mul(W$,n),n=U.add(D$,w$),W$=U.sub(W$,n),o=U.mul(e,X$),n=U.mul(I$,w$),o=U.add(n,o),n=U.sub(D$,o),o=U.add(D$,o),f=U.mul(n,o),D$=U.add(G$,G$),D$=U.add(D$,G$),w$=U.mul(e,w$),X$=U.mul(I$,X$),D$=U.add(D$,w$),w$=U.sub(G$,w$),w$=U.mul(e,w$),X$=U.add(X$,w$),G$=U.mul(D$,X$),f=U.add(f,G$),G$=U.mul(W$,X$),n=U.mul(Q$,n),n=U.sub(n,G$),G$=U.mul(Q$,D$),o=U.mul(W$,o),o=U.add(o,G$),new b(n,f,o)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:P}=v;if(!r.isValidNot0(K))throw Error("invalid scalar: out of range");let V,j,Z=(A)=>H.cached(this,A,(M)=>yO(b,M));if(P){let{k1neg:A,k1:M,k2neg:n,k2:f}=F(K),{p:o,f:e}=Z(M),{p:I$,f:G$}=Z(f);j=e.add(G$),V=_(P.beta,o,I$,A,n)}else{let{p:A,f:M}=Z(K);V=A,j=M}return yO(b,[V,j])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!r.isValid(K))throw Error("invalid scalar: out of range");if(K===Vr||V.is0())return b.ZERO;if(K===ag)return V;if(H.hasCache(this))return this.multiply(K);if(P){let{k1neg:j,k1:Z,k2neg:A,k2:M}=F(K),{p1:n,p2:f}=tN(b,V,Z,M);return _(P.beta,n,f,j,A)}else return H.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(J===ag)return!0;if(K)return K(b,this);return H.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(J===ag)return this;if(K)return K(b,this);return this.multiplyUnsafe(J)}isSmallOrder(){return this.multiplyUnsafe(J).is0()}toBytes(K=!0){return $I(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return Og(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=r.BITS,H=new dO(b,v.endo?Math.ceil(v$/2):v$);return b.BASE.precompute(8),b}function rY($){return Uint8Array.of($?2:3)}function gY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function Oj($,v={}){let{Fn:g}=$,U=v.randomBytes||Cr,r=Object.assign(gY($.Fp,g),{seed:oO(g.ORDER)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w=U(r.seed)){return cN(Y$(w,r.seed,"seed"),g.ORDER)}function O(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function z(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r;if(!lg(w))return;if("_lengths"in g&&g._lengths||q===u)return;let S=Y$(w,void 0,"key").length;return S===u||S===W}function Q(w,q,u=!0){if(z(w)===!0)throw Error("first arg must be private key");if(z(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=l0(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function eO($,v,g={}){Ev(v),Dg(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let U=g.randomBytes||Cr,r=g.hmac||((V,j)=>tg(v,V,j)),{Fp:I,Fn:J}=$,{ORDER:G,BITS:O}=J,{keygen:z,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w}=Oj($,g),q={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},u=G*vY<I.ORDER;function W(V){let j=G>>ag;return V>j}function S(V,j){if(!J.isValidNot0(j))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return j}function R(){if(u)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(V,j){tO(j);let Z=w.signature,A=j==="compact"?Z:j==="recovered"?Z+1:void 0;return Y$(V,A)}class B{r;s;recovery;constructor(V,j,Z){if(this.r=S("r",V),this.s=S("s",j),Z!=null){if(R(),![0,1,2,3].includes(Z))throw Error("invalid recovery id");this.recovery=Z}Object.freeze(this)}static fromBytes(V,j=q.format){L(V,j);let Z;if(j==="der"){let{r:f,s:o}=mr.toSig(Y$(V));return new B(f,o)}if(j==="recovered")Z=V[0],j="compact",V=V.subarray(1);let A=w.signature/2,M=V.subarray(0,A),n=V.subarray(A,A*2);return new B(J.fromBytes(M),J.fromBytes(n),Z)}static fromHex(V,j){return this.fromBytes(zg(V),j)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new B(this.r,this.s,V)}recoverPublicKey(V){let{r:j,s:Z}=this,A=this.assertRecovery(),M=A===2||A===3?j+G:j;if(!I.isValid(M))throw Error("invalid recovery id: sig.r+curve.n != R.x");let n=I.toBytes(M),f=$.fromBytes(_$(rY((A&1)===0),n)),o=J.inv(M),e=l(Y$(V,void 0,"msgHash")),I$=J.create(-e*o),G$=J.create(Z*o),D$=$.BASE.multiplyUnsafe(I$).add(f.multiplyUnsafe(G$));if(D$.is0())throw Error("invalid recovery: point at infinify");return D$.assertValidity(),D$}hasHighS(){return W(this.s)}toBytes(V=q.format){if(tO(V),V==="der")return zg(mr.hexFromSig(this));let{r:j,s:Z}=this,A=J.toBytes(j),M=J.toBytes(Z);if(V==="recovered")return R(),_$(Uint8Array.of(this.assertRecovery()),A,M);return _$(A,M)}toHex(V){return Og(this.toBytes(V))}}let F=g.bits2int||function(j){if(j.length>8192)throw Error("input is too large");let Z=_r(j),A=j.length*8-O;return A>0?Z>>BigInt(A):Z},l=g.bits2int_modN||function(j){return J.create(F(j))},d=UI(O);function _(V){return gI("num < 2^"+O,V,Vr,d),J.toBytes(V)}function b(V,j){return Y$(V,void 0,"message"),j?Y$(v(V),void 0,"prehashed message"):V}function v$(V,j,Z){let{lowS:A,prehash:M,extraEntropy:n}=pO(Z,q);V=b(V,M);let f=l(V),o=J.fromBytes(j);if(!J.isValidNot0(o))throw Error("invalid private key");let e=[_(o),_(f)];if(n!=null&&n!==!1){let w$=n===!0?U(w.secretKey):n;e.push(Y$(w$,void 0,"extraEntropy"))}let I$=_$(...e),G$=f;function D$(w$){let Q$=F(w$);if(!J.isValidNot0(Q$))return;let X$=J.inv(Q$),W$=$.BASE.multiply(Q$).toAffine(),P$=J.create(W$.x);if(P$===Vr)return;let n$=J.create(X$*J.create(G$+P$*o));if(n$===Vr)return;let a$=(W$.x===P$?0:2)|Number(W$.y&ag),e$=n$;if(A&&W(n$))e$=J.neg(n$),a$^=1;return new B(P$,e$,u?void 0:a$)}return{seed:I$,k2sig:D$}}function H(V,j,Z={}){let{seed:A,k2sig:M}=v$(V,j,Z);return EN(v.outputLen,J.BYTES,r)(A,M).toBytes(Z.format)}function K(V,j,Z,A={}){let{lowS:M,prehash:n,format:f}=pO(A,q);if(Z=Y$(Z,void 0,"publicKey"),j=b(j,n),!lg(V)){let o=V instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+o)}L(V,f);try{let o=B.fromBytes(V,f),e=$.fromBytes(Z);if(M&&o.hasHighS())return!1;let{r:I$,s:G$}=o,D$=l(j),w$=J.inv(G$),Q$=J.create(D$*w$),X$=J.create(I$*w$),W$=$.BASE.multiplyUnsafe(Q$).add(e.multiplyUnsafe(X$));if(W$.is0())return!1;return J.create(W$.x)===I$}catch(o){return!1}}function P(V,j,Z={}){let{prehash:A}=pO(Z,q);return j=b(j,A),B.fromBytes(V,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:z,getPublicKey:Q,getSharedSecret:X,utils:N,lengths:w,Point:$,sign:H,verify:K,recoverPublicKey:P,Signature:B,hash:v})}function UY($,v,g){return $&v^~$&g}function IY($,v,g){return $&v^$&g^v&g}class h0{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,g,U){this.blockLen=$,this.outputLen=v,this.padOffset=g,this.isLE=U,this.buffer=new Uint8Array($),this.view=F0(this.buffer)}update($){Wr(this),Y$($);let{view:v,buffer:g,blockLen:U}=this,r=$.length;for(let I=0;I<r;){let J=Math.min(U-this.pos,r-I);if(J===U){let G=F0($);for(;U<=r-I;I+=U)this.process(G,I);continue}if(g.set($.subarray(I,I+J),this.pos),this.pos+=J,I+=J,this.pos===U)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wr(this),i0($,this),this.finished=!0;let{buffer:v,view:g,blockLen:U,isLE:r}=this,{pos:I}=this;if(v[I++]=128,Vv(this.buffer.subarray(I)),this.padOffset>U-I)this.process(g,0),I=0;for(let Q=I;Q<U;Q++)v[Q]=0;g.setBigUint64(U-8,BigInt(this.length*8),r),this.process(g,0);let J=F0($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,z=this.get();if(O>z.length)throw Error("_sha2: outputLen bigger than state");for(let Q=0;Q<O;Q++)J.setUint32(4*Q,z[Q],r)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let g=$.slice(0,v);return this.destroy(),g}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:g,length:U,finished:r,destroyed:I,pos:J}=this;if($.destroyed=I,$.finished=r,$.length=U,$.pos=J,U%v)$.buffer.set(g);return $}clone(){return this._cloneInto()}}var ur=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zr=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),y$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var p0=BigInt(4294967295),JY=BigInt(32);function zj($,v=!1){if(v)return{h:Number($&p0),l:Number($>>JY&p0)};return{h:Number($>>JY&p0)|0,l:Number($&p0)|0}}function t0($,v=!1){let g=$.length,U=new Uint32Array(g),r=new Uint32Array(g);for(let I=0;I<g;I++){let{h:J,l:G}=zj($[I],v);[U[I],r[I]]=[J,G]}return[U,r]}var sO=($,v,g)=>$>>>g,$z=($,v,g)=>$<<32-g|v>>>g,wg=($,v,g)=>$>>>g|v<<32-g,Ng=($,v,g)=>$<<32-g|v>>>g,OI=($,v,g)=>$<<64-g|v>>>g-32,zI=($,v,g)=>$>>>g-32|v<<64-g;var GY=($,v,g)=>$<<g|v>>>32-g,OY=($,v,g)=>v<<g|$>>>32-g,zY=($,v,g)=>v<<g-32|$>>>64-g,DY=($,v,g)=>$<<g-32|v>>>64-g;function tv($,v,g,U){let r=(v>>>0)+(U>>>0);return{h:$+g+(r/4294967296|0)|0,l:r|0}}var QY=($,v,g)=>($>>>0)+(v>>>0)+(g>>>0),XY=($,v,g,U)=>v+g+U+($/4294967296|0)|0,wY=($,v,g,U)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0),NY=($,v,g,U,r)=>v+g+U+r+($/4294967296|0)|0,YY=($,v,g,U,r)=>($>>>0)+(v>>>0)+(g>>>0)+(U>>>0)+(r>>>0),qY=($,v,g,U,r,I)=>v+g+U+r+I+($/4294967296|0)|0;var Qj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Fr=new Uint32Array(64);class vz extends h0{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:g,D:U,E:r,F:I,G:J,H:G}=this;return[$,v,g,U,r,I,J,G]}set($,v,g,U,r,I,J,G){this.A=$|0,this.B=v|0,this.C=g|0,this.D=U|0,this.E=r|0,this.F=I|0,this.G=J|0,this.H=G|0}process($,v){for(let Q=0;Q<16;Q++,v+=4)Fr[Q]=$.getUint32(v,!1);for(let Q=16;Q<64;Q++){let X=Fr[Q-15],N=Fr[Q-2],w=iv(X,7)^iv(X,18)^X>>>3,q=iv(N,17)^iv(N,19)^N>>>10;Fr[Q]=q+Fr[Q-7]+w+Fr[Q-16]|0}let{A:g,B:U,C:r,D:I,E:J,F:G,G:O,H:z}=this;for(let Q=0;Q<64;Q++){let X=iv(J,6)^iv(J,11)^iv(J,25),N=z+X+UY(J,G,O)+Qj[Q]+Fr[Q]|0,q=(iv(g,2)^iv(g,13)^iv(g,22))+IY(g,U,r)|0;z=O,O=G,G=J,J=I+N|0,I=r,r=U,U=g,g=N+q|0}g=g+this.A|0,U=U+this.B|0,r=r+this.C|0,I=I+this.D|0,J=J+this.E|0,G=G+this.F|0,O=O+this.G|0,z=z+this.H|0,this.set(g,U,r,I,J,G,O,z)}roundClean(){Vv(Fr)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class WY extends vz{A=ur[0]|0;B=ur[1]|0;C=ur[2]|0;D=ur[3]|0;E=ur[4]|0;F=ur[5]|0;G=ur[6]|0;H=ur[7]|0;constructor(){super(32)}}class Xj extends vz{A=Zr[0]|0;B=Zr[1]|0;C=Zr[2]|0;D=Zr[3]|0;E=Zr[4]|0;F=Zr[5]|0;G=Zr[6]|0;H=Zr[7]|0;constructor(){super(28)}}var VY=(()=>t0(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),wj=(()=>VY[0])(),Nj=(()=>VY[1])(),or=new Uint32Array(80),xr=new Uint32Array(80);class DI extends h0{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:g,Bl:U,Ch:r,Cl:I,Dh:J,Dl:G,Eh:O,El:z,Fh:Q,Fl:X,Gh:N,Gl:w,Hh:q,Hl:u}=this;return[$,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u]}set($,v,g,U,r,I,J,G,O,z,Q,X,N,w,q,u){this.Ah=$|0,this.Al=v|0,this.Bh=g|0,this.Bl=U|0,this.Ch=r|0,this.Cl=I|0,this.Dh=J|0,this.Dl=G|0,this.Eh=O|0,this.El=z|0,this.Fh=Q|0,this.Fl=X|0,this.Gh=N|0,this.Gl=w|0,this.Hh=q|0,this.Hl=u|0}process($,v){for(let R=0;R<16;R++,v+=4)or[R]=$.getUint32(v),xr[R]=$.getUint32(v+=4);for(let R=16;R<80;R++){let L=or[R-15]|0,B=xr[R-15]|0,F=wg(L,B,1)^wg(L,B,8)^sO(L,B,7),l=Ng(L,B,1)^Ng(L,B,8)^$z(L,B,7),d=or[R-2]|0,_=xr[R-2]|0,b=wg(d,_,19)^OI(d,_,61)^sO(d,_,6),v$=Ng(d,_,19)^zI(d,_,61)^$z(d,_,6),H=wY(l,v$,xr[R-7],xr[R-16]),K=NY(H,F,b,or[R-7],or[R-16]);or[R]=K|0,xr[R]=H|0}let{Ah:g,Al:U,Bh:r,Bl:I,Ch:J,Cl:G,Dh:O,Dl:z,Eh:Q,El:X,Fh:N,Fl:w,Gh:q,Gl:u,Hh:W,Hl:S}=this;for(let R=0;R<80;R++){let L=wg(Q,X,14)^wg(Q,X,18)^OI(Q,X,41),B=Ng(Q,X,14)^Ng(Q,X,18)^zI(Q,X,41),F=Q&N^~Q&q,l=X&w^~X&u,d=YY(S,B,l,Nj[R],xr[R]),_=qY(d,W,L,F,wj[R],or[R]),b=d|0,v$=wg(g,U,28)^OI(g,U,34)^OI(g,U,39),H=Ng(g,U,28)^zI(g,U,34)^zI(g,U,39),K=g&r^g&J^r&J,P=U&I^U&G^I&G;W=q|0,S=u|0,q=N|0,u=w|0,N=Q|0,w=X|0,{h:Q,l:X}=tv(O|0,z|0,_|0,b|0),O=J|0,z=G|0,J=r|0,G=I|0,r=g|0,I=U|0;let V=QY(b,H,P);g=XY(V,_,v$,K),U=V|0}({h:g,l:U}=tv(this.Ah|0,this.Al|0,g|0,U|0)),{h:r,l:I}=tv(this.Bh|0,this.Bl|0,r|0,I|0),{h:J,l:G}=tv(this.Ch|0,this.Cl|0,J|0,G|0),{h:O,l:z}=tv(this.Dh|0,this.Dl|0,O|0,z|0),{h:Q,l:X}=tv(this.Eh|0,this.El|0,Q|0,X|0),{h:N,l:w}=tv(this.Fh|0,this.Fl|0,N|0,w|0),{h:q,l:u}=tv(this.Gh|0,this.Gl|0,q|0,u|0),{h:W,l:S}=tv(this.Hh|0,this.Hl|0,W|0,S|0),this.set(g,U,r,I,J,G,O,z,Q,X,N,w,q,u,W,S)}roundClean(){Vv(or,xr)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Yj extends DI{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class uY extends DI{Ah=y$[0]|0;Al=y$[1]|0;Bh=y$[2]|0;Bl=y$[3]|0;Ch=y$[4]|0;Cl=y$[5]|0;Dh=y$[6]|0;Dl=y$[7]|0;Eh=y$[8]|0;El=y$[9]|0;Fh=y$[10]|0;Fl=y$[11]|0;Gh=y$[12]|0;Gl=y$[13]|0;Hh=y$[14]|0;Hl=y$[15]|0;constructor(){super(48)}}var gv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Uv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class qj extends DI{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(28)}}class Wj extends DI{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(32)}}var a0=yg(()=>new WY,Lr(1));var ZY=yg(()=>new uY,Lr(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Vj=BigInt(1),jY=BigInt(2),uj=BigInt(3),Zj=BigInt(5),IA=BigInt(8),MY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function jj($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=MY,G=$*$%I*$%I,O=fv(G,jY,I)*G%I,z=fv(O,Vj,I)*$%I,Q=fv(z,Zj,I)*z%I,X=fv(Q,v,I)*Q%I,N=fv(X,g,I)*X%I,w=fv(N,U,I)*N%I,q=fv(w,r,I)*w%I,u=fv(q,r,I)*w%I,W=fv(u,v,I)*Q%I;return{pow_p_5_8:fv(W,jY,I)*$%I,b2:G}}function Mj($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var RY=(()=>{let $=MY;return eN({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=jj(v);return zv(fv(g,uj,$)*U,$)},adjustScalarBytes:Mj})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Rj=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),Kj=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var Sj=aO(Rj),rz=eO(Sj,a0);var Tj=aO(Kj),KY=eO(Tj,ZY);function TY($,v,g){if(Ev($),g===void 0)g=new Uint8Array($.outputLen);return tg($,g,v)}var gz=Uint8Array.of(0),SY=Uint8Array.of();function AY($,v,g,U=32){Ev($),m$(U,"length");let r=$.outputLen;if(U>255*r)throw Error("Length must be <= 255*HashLen");let I=Math.ceil(U/r);if(g===void 0)g=SY;else Y$(g,void 0,"info");let J=new Uint8Array(I*r),G=tg.create($,v),O=G._cloneInto(),z=new Uint8Array(G.outputLen);for(let Q=0;Q<I;Q++)gz[0]=Q+1,O.update(Q===0?SY:z).update(g).update(gz).digestInto(z),J.set(z,r*Q),G._cloneInto(O);return G.destroy(),O.destroy(),Vv(z,gz),J.slice(0,U)}var Aj=BigInt(0),QI=BigInt(1),Hj=BigInt(2),Pj=BigInt(7),kj=BigInt(256),nj=BigInt(113),kY=[],nY=[],EY=[];for(let $=0,v=QI,g=1,U=0;$<24;$++){[g,U]=[U,(2*g+3*U)%5],kY.push(2*(5*U+g)),nY.push(($+1)*($+2)/2%64);let r=Aj;for(let I=0;I<7;I++)if(v=(v<<QI^(v>>Pj)*nj)%kj,v&Hj)r^=QI<<(QI<<BigInt(I))-QI;EY.push(r)}var fY=t0(EY,!0),Ej=fY[0],fj=fY[1],HY=($,v,g)=>g>32?zY($,v,g):GY($,v,g),PY=($,v,g)=>g>32?DY($,v,g):OY($,v,g);function Bj($,v=24){let g=new Uint32Array(10);for(let U=24-v;U<24;U++){for(let J=0;J<10;J++)g[J]=$[J]^$[J+10]^$[J+20]^$[J+30]^$[J+40];for(let J=0;J<10;J+=2){let G=(J+8)%10,O=(J+2)%10,z=g[O],Q=g[O+1],X=HY(z,Q,1)^g[G],N=PY(z,Q,1)^g[G+1];for(let w=0;w<50;w+=10)$[J+w]^=X,$[J+w+1]^=N}let r=$[2],I=$[3];for(let J=0;J<24;J++){let G=nY[J],O=HY(r,I,G),z=PY(r,I,G),Q=kY[J];r=$[Q],I=$[Q+1],$[Q]=O,$[Q+1]=z}for(let J=0;J<50;J+=10){for(let G=0;G<10;G++)g[G]=$[J+G];for(let G=0;G<10;G++)$[J+G]^=~g[(G+2)%10]&g[(G+4)%10]}$[0]^=Ej[U],$[1]^=fj[U]}Vv(g)}class e0{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,g,U=!1,r=24){if(this.blockLen=$,this.suffix=v,this.outputLen=g,this.enableXOF=U,this.rounds=r,m$(g,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=m0(this.state)}clone(){return this._cloneInto()}keccak(){CO(this.state32),Bj(this.state32,this.rounds),CO(this.state32),this.posOut=0,this.pos=0}update($){Wr(this),Y$($);let{blockLen:v,state:g}=this,U=$.length;for(let r=0;r<U;){let I=Math.min(v-this.pos,U-r);for(let J=0;J<I;J++)g[this.pos++]^=$[r++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:g,blockLen:U}=this;if($[g]^=v,(v&128)!==0&&g===U-1)this.keccak();$[U-1]^=128,this.keccak()}writeInto($){Wr(this,!1),Y$($),this.finish();let v=this.state,{blockLen:g}=this;for(let U=0,r=$.length;U<r;){if(this.posOut>=g)this.keccak();let I=Math.min(g-this.posOut,r-U);$.set(v.subarray(this.posOut,this.posOut+I),U),this.posOut+=I,U+=I}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(i0($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:g,outputLen:U,rounds:r,enableXOF:I}=this;return $||=new e0(v,g,U,I,r),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=r,$.suffix=g,$.outputLen=U,$.enableXOF=I,$.destroyed=this.destroyed,$}}var BY=($,v,g,U={})=>yg(()=>new e0(v,$,g),U);var Yg=BY(6,136,32,Lr(8));var CY=BY(6,72,64,Lr(10));var LY=($,v,g,U={})=>yg((r={})=>new e0(v,$,r.dkLen===void 0?g:r.dkLen,!0),U),_Y=LY(31,168,16,Lr(11)),av=LY(31,136,32,Lr(12));function Uz($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return Uz($),($&$-1)===0&&$!==0}function Iz($,v){Uz($);let g=0;for(let U=0;U<v;U++,$>>>=1)g=g<<1|$&1;return g}function mY($){return Uz($),31-Math.clz32($)}function bY($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let g=mY(v);for(let U=0;U<v;U++){let r=Iz(U,g);if(U<r){let I=$[U];$[U]=$[r],$[r]=I}}return $}var Jz=($,v)=>{let{N:g,roots:U,dit:r,invertButterflies:I=!1,skipStages:J=0,brp:G=!0}=v,O=mY(g);if(!iY(g))throw Error("FFT: Polynomial size should be power of two");let z=r!==I;return(Q)=>{if(Q.length!==g)throw Error("FFT: wrong Polynomial length");if(r&&G)bY(Q);for(let X=0,N=1;X<O-J;X++){let w=r?X+1+J:O-X,q=1<<w,u=q>>1,W=g>>w;for(let S=0;S<g;S+=q)for(let R=0,L=N++;R<u;R++){let B=I?r?g-L:L:R*W,F=S+R,l=S+R+u,d=U[B],_=Q[l],b=Q[F];if(z){let v$=$.mul(_,d);Q[F]=$.add(b,v$),Q[l]=$.sub(b,v$)}else if(I)Q[F]=$.add(_,b),Q[l]=$.mul($.sub(_,b),d);else Q[F]=$.add(b,_),Q[l]=$.mul($.sub(b,_),d)}}if(!r&&G)bY(Q);return Q}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=Cr;function s0($,v){if($.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function FY($){return Uint8Array.from($)}function qg($,...v){let g=(r)=>typeof r==="number"?r:r.bytesLen,U=v.reduce((r,I)=>r+g(I),0);return{bytesLen:U,encode:(r)=>{let I=new Uint8Array(U);for(let J=0,G=0;J<v.length;J++){let O=v[J],z=g(O),Q=typeof O==="number"?r[J]:O.encode(r[J]);if(Y$(Q,z,$),I.set(Q,G),typeof O!=="number")Q.fill(0);G+=z}return I},decode:(r)=>{Y$(r,U,$);let I=[];for(let J of v){let G=g(J),O=r.subarray(0,G);I.push(typeof J==="number"?O:J.decode(O)),r=r.subarray(G)}return I}}}function $J($,v){let g=v*$.bytesLen;return{bytesLen:g,encode:(U)=>{if(U.length!==v)throw Error(`vecCoder.encode: wrong length=${U.length}. Expected: ${v}`);let r=new Uint8Array(g);for(let I=0,J=0;I<U.length;I++){let G=$.encode(U[I]);r.set(G,J),G.fill(0),J+=G.length}return r},decode:(U)=>{Y$(U,g);let r=[];for(let I=0;I<U.length;I+=$.bytesLen)r.push($.decode(U.subarray(I,I+$.bytesLen)));return r}}}function i$(...$){for(let v of $)if(Array.isArray(v))for(let g of v)g.fill(0);else v.fill(0)}function Gz($){return(1<<$)-1}var ZA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var oY=($)=>{let{newPoly:v,N:g,Q:U,F:r,ROOT_OF_UNITY:I,brvBits:J,isKyber:G}=$,O=(R,L=U)=>{let B=R%L|0;return(B>=0?B|0:L+B|0)|0},z=(R,L=U)=>{let B=O(R,L)|0;return(B>L>>1?B-L|0:B)|0};function Q(){let R=v(g);for(let L=0;L<g;L++){let B=Iz(L,J),F=BigInt(I)**BigInt(B)%BigInt(U);R[L]=Number(F)|0}return R}let X=Q(),N={add:(R,L)=>O((R|0)+(L|0))|0,sub:(R,L)=>O((R|0)-(L|0))|0,mul:(R,L)=>O((R|0)*(L|0))|0,inv:(R)=>{throw Error("not implemented")}},w={N:g,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},q=Jz(N,{dit:!1,...w}),u=Jz(N,{dit:!0,...w});return{mod:O,smod:z,nttZetas:X,NTT:{encode:(R)=>{return q(R)},decode:(R)=>{u(R);for(let L=0;L<R.length;L++)R[L]=O(r*R[L]);return R}},bitsCoder:(R,L)=>{let B=Gz(R),F=R*(g/8);return{bytesLen:F,encode:(l)=>{let d=new Uint8Array(F);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=(L.encode(l[_])&B)<<v$,v$+=R;for(;v$>=8;v$-=8,b>>=8)d[H++]=b&Gz(v$)}return d},decode:(l)=>{let d=v(g);for(let _=0,b=0,v$=0,H=0;_<l.length;_++){b|=l[_]<<v$,v$+=8;for(;v$>=R;v$-=R,b>>=R)d[H++]=L.decode(b&B)}return d}}}}},Cj=($)=>(v,g)=>{if(!g)g=$.blockLen;let U=new Uint8Array(v.length+2);U.set(v);let r=v.length,I=new Uint8Array(g),J=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(z,Q)=>{return U[r+0]=z,U[r+1]=Q,J.destroy(),J=$.create({}).update(U),G++,()=>{return O++,J.xofInto(I)}},clean:()=>{J.destroy(),i$(I,U)}}},xY=Cj(_Y);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Iv=256,jr=3329,Lj=3303,_j=17,{mod:NI,nttZetas:bj,NTT:Wg,bitsCoder:ij}=oY({N:Iv,Q:jr,F:Lj,ROOT_OF_UNITY:_j,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),Oz={512:{N:Iv,Q:jr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Iv,Q:jr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Iv,Q:jr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},mj=($)=>{if($>=12)return{encode:(g)=>g,decode:(g)=>g};let v=2**($-1);return{encode:(g)=>((g<<$)+jr/2)/jr,decode:(g)=>g*jr+v>>>$}},XI=($)=>ij($,mj($));function Vg($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]+v[g])}function Fj($,v){for(let g=0;g<Iv;g++)$[g]=NI($[g]-v[g])}function oj($,v,g,U,r){let I=NI(v*U*r+$*g),J=NI($*U+v*g);return{c0:I,c1:J}}function vJ($,v){for(let g=0;g<Iv/2;g++){let U=bj[64+(g>>1)];if(g&1)U=-U;let{c0:r,c1:I}=oj($[2*g+0],$[2*g+1],v[2*g+0],v[2*g+1],U);$[2*g+0]=r,$[2*g+1]=I}return $}function cY($){let v=new Uint16Array(Iv);for(let g=0;g<Iv;){let U=$();if(U.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;g<Iv&&r+3<=U.length;r+=3){let I=(U[r+0]>>0|U[r+1]<<8)&4095,J=(U[r+1]>>4|U[r+2]<<4)&4095;if(I<jr)v[g++]=I;if(g<Iv&&J<jr)v[g++]=J}}return v}function wI($,v,g,U){let r=$(U*Iv/4,v,g),I=new Uint16Array(Iv),J=m0(r),G=0;for(let O=0,z=0,Q=0,X=0;O<J.length;O++){let N=J[O];for(let w=0;w<32;w++)if(Q+=N&1,N>>=1,G+=1,G===U)X=Q,Q=0;else if(G===2*U)I[z++]=NI(X-Q),Q=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return I}var xj=($)=>{let{K:v,PRF:g,XOF:U,HASH512:r,ETA1:I,ETA2:J,du:G,dv:O}=$,z=XI(1),Q=XI(O),X=XI(G),N=qg("publicKey",$J(XI(12),v),32),w=$J(XI(12),v),q=qg("ciphertext",$J(X,v),Q),u=qg("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:N.bytesLen,cipherText:q.bytesLen},keygen:(W)=>{Y$(W,32,"seed");let S=new Uint8Array(33);S.set(W),S[32]=v;let R=r(S),[L,B]=u.decode(R),F=[],l=[];for(let b=0;b<v;b++)F.push(Wg.encode(wI(g,B,b,I)));let d=U(L);for(let b=0;b<v;b++){let v$=Wg.encode(wI(g,B,v+b,I));for(let H=0;H<v;H++){let K=cY(d.get(H,b));Vg(v$,vJ(K,F[H]))}l.push(v$)}d.clean();let _={publicKey:N.encode([l,L]),secretKey:w.encode(F)};return i$(L,B,F,l,S,R),_},encrypt:(W,S,R)=>{let[L,B]=N.decode(W),F=[];for(let H=0;H<v;H++)F.push(Wg.encode(wI(g,R,H,I)));let l=U(B),d=new Uint16Array(Iv),_=[];for(let H=0;H<v;H++){let K=wI(g,R,v+H,J),P=new Uint16Array(Iv);for(let V=0;V<v;V++){let j=cY(l.get(H,V));Vg(P,vJ(j,F[V]))}Vg(K,Wg.decode(P)),_.push(K),Vg(d,vJ(L[H],F[H])),i$(P)}l.clean();let b=wI(g,R,2*v,J);Vg(b,Wg.decode(d));let v$=z.decode(S);return Vg(v$,b),i$(L,F,d,b),q.encode([_,v$])},decrypt:(W,S)=>{let[R,L]=q.decode(W),B=w.decode(S),F=new Uint16Array(Iv);for(let l=0;l<v;l++)Vg(F,vJ(B[l],Wg.encode(R[l])));return Fj(L,Wg.decode(F)),i$(F,B,R),z.encode(L)}}};function zz($){let v=xj($),{HASH256:g,HASH512:U,KDF:r}=$,{secretCoder:I,lengths:J}=v,G=qg("secretKey",J.secretKey,J.publicKey,32,32),O=32,z=64;return{info:{type:"ml-kem"},lengths:{...J,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(Q=ev(64))=>{Y$(Q,64,"seed");let{publicKey:X,secretKey:N}=v.keygen(Q.subarray(0,32)),w=g(X),q=G.encode([N,X,w,Q.subarray(32)]);return i$(N,w),{publicKey:X,secretKey:q}},getPublicKey:(Q)=>{let[X,N,w,q]=G.decode(Q);return Uint8Array.from(N)},encapsulate:(Q,X=ev(32))=>{Y$(Q,J.publicKey,"publicKey"),Y$(X,32,"message");let N=Q.subarray(0,384*$.K),w=I.encode(I.decode(FY(N)));if(!s0(w,N))throw i$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");i$(w);let q=U.create().update(X).update(g(Q)).digest(),u=v.encrypt(Q,X,q.subarray(32,64));return i$(q.subarray(32)),{cipherText:u,sharedSecret:q.subarray(0,32)}},decapsulate:(Q,X)=>{Y$(X,G.bytesLen,"secretKey"),Y$(Q,J.cipherText,"cipherText");let N=G.bytesLen-96,w=N+32,q=g(X.subarray(N/2,w));if(!s0(q,X.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[u,W,S,R]=G.decode(X),L=v.decrypt(Q,u),B=U.create().update(L).update(S).digest(),F=B.subarray(0,32),l=v.encrypt(W,L,B.subarray(32,64)),d=s0(Q,l),_=r.create({dkLen:32}).update(R).update(Q).digest();return i$(L,l,!d?F:_),d?F:_}}}function cj($,v,g){return av.create({dkLen:$}).update(v).update(new Uint8Array([g])).digest()}var Dz={HASH256:Yg,HASH512:CY,KDF:av,XOF:xY,PRF:cj},nA=zz({...Dz,...Oz[512]}),YI=zz({...Dz,...Oz[768]}),lY=zz({...Dz,...Oz[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lj($,v=!1){let{lengths:g,keygen:U}=$;if(v){let I=$.Point.Fn;if(!I)throw Error("No Point.Fn");U=(J=ev(g.seed))=>{Y$(J,g.seed,"seed");let G=I.isLE?br(J):_r(J),O=I.toBytes(I.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:g.secretKey,publicKey:g.publicKey,seed:g.seed},keygen:U,getPublicKey:(r)=>$.getPublicKey(r)}}function Qz($,v=!1){let g=lj($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...g.lengths,msg:g.lengths.seed,cipherText:g.lengths.publicKey},keygen:g.keygen,getPublicKey:g.getPublicKey,encapsulate(U,r=ev($.lengths.seed)){let I=this.keygen(r).secretKey,J=this.decapsulate(U,I),G=$.getPublicKey(I);return i$(I),{sharedSecret:J,cipherText:G}},decapsulate(U,r){let I=$.getSharedSecret(r,U);return $.lengths.publicKeyHasPrefix?I.subarray(1):I}}}function qI($,v){return qg(v,...$.map((g)=>{if(typeof g.lengths[v]!=="number")throw Error("wrong length: "+v);return g.lengths[v]}))}function Xz($){return(v,g)=>$(v,{dkLen:g})}function yj($,v,...g){let U=qI(g,"seed"),r=qI(g,"publicKey");if($===void 0)$=U.bytesLen;m$($);function I(J){Y$(J,$);let G=U.decode(v(J,U.bytesLen)),O=g.map((X,N)=>X.keygen(G[N])),z=O.map((X)=>X.secretKey),Q=O.map((X)=>X.publicKey);return{secretKey:z,publicKey:Q}}return{info:{lengths:{seed:$,publicKey:r.bytesLen,secretKey:$}},getPublicKey(J){return this.keygen(J).publicKey},keygen(J=ev($)){let{publicKey:G,secretKey:O}=I(J),z=r.encode(G);return i$(G),i$(O),{secretKey:J,publicKey:z}},expandDecapsulationKey:I,realSeedLen:$}}function rJ($,v,g,U,...r){let I=yj($,g,...r),J=qI(r,"cipherText"),G=qI(r,"publicKey"),O=qI(r,"msg");if(v===void 0)v=O.bytesLen;return m$(v),{lengths:{...I.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:J.bytesLen},getPublicKey:I.getPublicKey,keygen:I.keygen,encapsulate(z,Q=ev(O.bytesLen)){let X=G.decode(z),N=O.decode(Q),w=r.map((S,R)=>S.encapsulate(X[R],N[R])),q=w.map((S)=>S.sharedSecret),u=w.map((S)=>S.cipherText),W={sharedSecret:U(X,u,q),cipherText:J.encode(u)};return i$(q,u),W},decapsulate(z,Q){let X=J.decode(z),{publicKey:N,secretKey:w}=I.expandDecapsulationKey(Q),q=r.map((u,W)=>u.decapsulate(X[W],w[W]));return U(N,X,q)}}}function yY($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,Xz(U),(I,J,G)=>r(_$(G[0],G[1],J[1],I[1],ir($))),v,g)}var oA=yY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YI,Qz(rz,!0),av,Yg),xA=yY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",lY,Qz(KY,!0),av,Yg);function dj($,v,g,U,r){return Ev(U),Ev(r),rJ(32,32,Xz(U),(I,J,G)=>{let O=_$(G[0],G[1],J[0],I[0],J[1],I[1],ir($)),z=32,Q=_$(ir("hybrid_prk"),O),X=TY(r,Q),N=_$(dg(32,2),ir("shared_secret"),ir("")),w=AY(r,X,N,32);return i$(X,N,Q,O),w},v,g)}var dY=Qz(RY),cA=dj("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YI,dY,av,a0),hj=(()=>rJ(32,32,Xz(av),($,v,g)=>Yg(_$(g[0],g[1],v[1],$[1],ir("\\.//^\\"))),YI,dY))();function pj($,v,g,U){let r=$.Point.Fn;if(!r)throw Error("no Point.Fn");function I(J){let G;for(let Q=0,X=v;;Q=X,X+=v){if(X>J.length)throw Error("rejection sampling failed");if(G=r.fromBytes(J.subarray(Q,X),!0),r.isValidNot0(G))break}let O=r.toBytes(r.create(G)),z=$.getPublicKey(O,!1);return{secretKey:O,publicKey:z}}return{lengths:{secretKey:v,publicKey:g,seed:U,msg:U,cipherText:g},keygen(J=ev(U)){return Y$(J,U,"seed"),I(J)},getPublicKey(J){return $.getPublicKey(J,!1)},encapsulate(J,G=ev(U)){Y$(G,U,"rand");let{secretKey:O}=I(G),z=this.decapsulate(J,O),Q=$.getPublicKey(O,!1);return i$(O),{sharedSecret:z,cipherText:Q}},decapsulate(J,G){return $.getSharedSecret(G,J).subarray(1)}}}function tj($,v,g,U){let{secretKey:r,publicKeyUncompressed:I}=g.lengths;if(!r||!I)throw Error("wrong curve");let J=pj(g,r,I,U),G=64,O=G+U;return rJ(32,32,(z)=>{Y$(z,32);let Q=av(z,{dkLen:O}),X=Q.subarray(0,G),N=Q.subarray(G,O);return _$(X,N)},(z,Q,X)=>Yg(_$(X[0],X[1],Q[1],z[1],ir($))),v,J)}var aj=(()=>tj("MLKEM768-P256",YI,rz,128))();var gJ=hj,hY=aj;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,v,g)=>o$($,v,g),Nz=C$,eg=A0,h$=(...$)=>YO(...$),sg=($)=>lU($),$U=XO,vU=($)=>Xr($),IJ=BigInt(0),wz=BigInt(1);function Mr($,v=""){if(typeof $!=="boolean"){let g=v&&`"${v}" `;throw TypeError(g+"expected boolean, got type="+typeof $)}return $}function JJ($){if(typeof $==="bigint"){if(!UJ($))throw RangeError("positive bigint expected, got "+$)}else Nz($);return $}function sv($,v=""){if(typeof $!=="number"){let g=v&&`"${v}" `;throw TypeError(g+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let g=v&&`"${v}" `;throw RangeError(g+"expected safe integer, got "+$)}}function WI($){let v=JJ($).toString(16);return v.length&1?"0"+v:v}function pY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?IJ:BigInt("0x"+$)}function ug($){return pY(A0($))}function mv($){return pY(A0(cr(o$($)).reverse()))}function GJ($,v){if(C$(v),v===0)throw RangeError("zero length");$=JJ($);let g=$.toString(16);if(g.length>v*2)throw RangeError("number too large");return lU(g.padStart(v*2,"0"))}function VI($,v){return GJ($,v).reverse()}function tY($,v){if($=S$($),v=S$(v),$.length!==v.length)return!1;let g=0;for(let U=0;U<$.length;U++)g|=$[U]^v[U];return g===0}function cr($){return Uint8Array.from(S$($))}function OJ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,g)=>{let U=v.charCodeAt(0);if(v.length!==1||U>127)throw RangeError(`string contains non-ASCII character "${$[g]}" with code ${U} at position ${g}`);return U})}var UJ=($)=>typeof $==="bigint"&&IJ<=$;function ej($,v,g){return UJ($)&&UJ(v)&&UJ(g)&&v<=$&&$<g}function Rr($,v,g,U){if(!ej(v,g,U))throw RangeError("expected valid "+$+": "+g+" <= n < "+U+", got "+v)}function rU($){if($<IJ)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>IJ;$>>=wz,v+=1);return v}var uI=($)=>(wz<<BigInt($))-wz;function aY($,v,g){if(C$($,"hashLen"),C$(v,"qByteLen"),typeof g!=="function")throw TypeError("hmacFn must be a function");let U=(W)=>new Uint8Array(W),r=Uint8Array.of(),I=Uint8Array.of(0),J=Uint8Array.of(1),G=1000,O=U($),z=U($),Q=0,X=()=>{O.fill(1),z.fill(0),Q=0},N=(...W)=>g(z,h$(O,...W)),w=(W=r)=>{if(z=N(I,W),O=N(),W.length===0)return;z=N(J,W),O=N()},q=()=>{if(Q++>=G)throw Error("drbg: tried max amount of iterations");let W=0,S=[];while(W<v){O=N();let R=O.slice();S.push(R),W+=O.length}return h$(...S)};return(W,S)=>{X(),w(W);let R=void 0;while((R=S(q()))===void 0)w();return X(),R}}function Bv($,v={},g={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function U(I,J,G){if(!G&&J!=="function"&&!Object.hasOwn($,I))throw TypeError(`param "${I}" is invalid: expected own property`);let O=$[I];if(G&&O===void 0)return;let z=typeof O;if(z!==J||O===null)throw TypeError(`param "${I}" is invalid: expected ${J}, got ${z}`)}let r=(I,J)=>Object.entries(I).forEach(([G,O])=>U(G,O,J));r(v,!1),r(g,!0)}var Yz=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),f$=BigInt(1),Zg=BigInt(2),vq=BigInt(3),rq=BigInt(4),gq=BigInt(5),sj=BigInt(7),Uq=BigInt(8),$M=BigInt(9),Iq=BigInt(16);function E$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let g=$%v;return g>=p$?g:v+g}function Cv($,v,g){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let U=$;while(v-- >p$)U*=U,U%=g;return U}function eY($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let g=E$($,v),U=v,r=p$,I=f$,J=f$,G=p$;while(g!==p$){let z=U/g,Q=U-g*z,X=r-J*z,N=I-G*z;U=g,g=Q,r=J,I=G,J=X,G=N}if(U!==f$)throw Error("invert: does not exist");return E$(r,v)}function qz($,v,g){let U=$;if(!U.eql(U.sqr(v),g))throw Error("Cannot find square root")}function Jq($,v){let g=$,U=(g.ORDER+f$)/rq,r=g.pow(v,U);return qz(g,r,v),r}function vM($,v){let g=$,U=(g.ORDER-gq)/Uq,r=g.mul(v,Zg),I=g.pow(r,U),J=g.mul(v,I),G=g.mul(g.mul(J,Zg),I),O=g.mul(J,g.sub(G,g.ONE));return qz(g,O,v),O}function rM($){let v=zJ($),g=Gq($),U=g(v,v.neg(v.ONE)),r=g(v,U),I=g(v,v.neg(U)),J=($+sj)/Iq;return(G,O)=>{let z=G,Q=z.pow(O,J),X=z.mul(Q,U),N=z.mul(Q,r),w=z.mul(Q,I),q=z.eql(z.sqr(X),O),u=z.eql(z.sqr(N),O);Q=z.cmov(Q,X,q),X=z.cmov(w,N,u);let W=z.eql(z.sqr(X),O),S=z.cmov(Q,X,W);return qz(z,S,O),S}}function Gq($){if($<vq)throw Error("sqrt is not defined for small field");let v=$-f$,g=0;while(v%Zg===p$)v/=Zg,g++;let U=Zg,r=zJ($);while(sY(r,U)===1)if(U++>1000)throw Error("Cannot find square root: probably non-prime P");if(g===1)return Jq;let I=r.pow(U,v),J=(v+f$)/Zg;return function(O,z){let Q=O;if(Q.is0(z))return z;if(sY(Q,z)!==1)throw Error("Cannot find square root");let X=g,N=Q.mul(Q.ONE,I),w=Q.pow(z,v),q=Q.pow(z,J);while(!Q.eql(w,Q.ONE)){if(Q.is0(w))return Q.ZERO;let u=1,W=Q.sqr(w);while(!Q.eql(W,Q.ONE))if(u++,W=Q.sqr(W),u===X)throw Error("Cannot find square root");let S=f$<<BigInt(X-u-1),R=Q.pow(N,S);X=u,N=Q.sqr(R),w=Q.mul(w,N),q=Q.mul(q,R)}return q}}function gM($){if($%rq===vq)return Jq;if($%Uq===gq)return vM;if($%Iq===$M)return rM($);return Gq($)}var Kr=($,v)=>(E$($,v)&f$)===f$,UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Wz($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},g=UM.reduce((U,r)=>{return U[r]="function",U},v);if(Bv($,g),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=f$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function IM($,v,g){let U=$;if(g<p$)throw Error("invalid exponent, negatives unsupported");if(g===p$)return U.ONE;if(g===f$)return v;let r=U.ONE,I=v;while(g>p$){if(g&f$)r=U.mul(r,I);I=U.sqr(I),g>>=f$}return r}function ZI($,v,g=!1){let U=$,r=Array(v.length).fill(g?U.ZERO:void 0),I=v.reduce((G,O,z)=>{if(U.is0(O))return G;return r[z]=G,U.mul(G,O)},U.ONE),J=U.inv(I);return v.reduceRight((G,O,z)=>{if(U.is0(O))return G;return r[z]=U.mul(G,r[z]),U.mul(G,O)},J),r}function sY($,v){let g=$,U=(g.ORDER-f$)/Zg,r=g.pow(v,U),I=g.eql(r,g.ONE),J=g.eql(r,g.ZERO),G=g.eql(r,g.neg(g.ONE));if(!I&&!J&&!G)throw Error("invalid Legendre symbol result");return I?1:J?0:-1}function JM($,v){if(v!==void 0)Nz(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let g=rU($);if(v!==void 0&&v<g)throw Error(`invalid n length: expected bit length (${g}) >= n.length (${v})`);let U=v!==void 0?v:g,r=Math.ceil(U/8);return{nBitLength:U,nByteLength:r}}var $q=new WeakMap;class Vz{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=f$;_lengths;_mod;constructor($,v={}){if($<=f$)throw Error("invalid field: expected ORDER > 1, got "+$);let g=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")g=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:U,nByteLength:r}=JM($,g);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=U,this.BYTES=r,Object.freeze(this)}create($){return E$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&f$)===f$}neg($){return E$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return E$($*$,this.ORDER)}add($,v){return E$($+v,this.ORDER)}sub($,v){return E$($-v,this.ORDER)}mul($,v){return E$($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return E$($*eY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return eY($,this.ORDER)}sqrt($){let v=$q.get(this);if(!v)$q.set(this,v=gM(this.ORDER));return v(this,$)}toBytes($){return this.isLE?VI($,this.BYTES):GJ($,this.BYTES)}fromBytes($,v=!1){S$($);let{_lengths:g,BYTES:U,isLE:r,ORDER:I,_mod:J}=this;if(g){if($.length<1||!g.includes($.length)||$.length>U)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let O=new Uint8Array(U);O.set($,r?0:O.length-$.length),$=O}if($.length!==U)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let G=r?mv($):ug($);if(J)G=E$(G,I);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return ZI(this,$)}cmov($,v,g){return Mr(g,"condition"),g?v:$}}Object.freeze(Vz.prototype);function zJ($,v={}){return new Vz($,v)}function Oq($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=f$)throw Error("field order must be greater than 1");let v=rU($-f$);return Math.ceil(v/8)}function uz($){let v=Oq($);return v+Math.ceil(v/2)}function zq($,v,g=!1){S$($);let U=$.length,r=Oq(v),I=Math.max(uz(v),16);if(U<I||U>1024)throw Error("expected "+I+"-1024 bytes of input, got "+U);let J=g?mv($):ug($),G=E$(J,v-f$)+f$;return g?VI(G,r):GJ(G,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gU=BigInt(0),jg=BigInt(1);function jI($,v){let g=v.negate();return $?g:v}function Mg($,v){let g=ZI($.Fp,v.map((U)=>U.Z));return v.map((U,r)=>$.fromAffine(U.toAffine(g[r])))}function wq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function Zz($,v){wq($,v);let g=Math.ceil(v/$)+1,U=2**($-1),r=2**$,I=uI($),J=BigInt($);return{windows:g,windowSize:U,mask:I,maxNumber:r,shiftBy:J}}function Dq($,v,g){let{windowSize:U,mask:r,maxNumber:I,shiftBy:J}=g,G=Number($&r),O=$>>J;if(G>U)G-=I,O+=jg;let z=v*U,Q=z+Math.abs(G)-1,X=G===0,N=G<0,w=v%2!==0;return{nextN:O,offset:Q,isZero:X,isNeg:N,isNegF:w,offsetF:z}}var jz=new WeakMap,Nq=new WeakMap;function Mz($){return Nq.get($)||1}function Qq($){if($!==gU)throw Error("invalid wNAF")}class MI{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,g=this.ZERO){let U=$;while(v>gU){if(v&jg)g=g.add(U);U=U.double(),v>>=jg}return g}precomputeWindow($,v){let{windows:g,windowSize:U}=Zz(v,this.bits),r=[],I=$,J=I;for(let G=0;G<g;G++){J=I,r.push(J);for(let O=1;O<U;O++)J=J.add(I),r.push(J);I=J.double()}return r}wNAF($,v,g){if(!this.Fn.isValid(g))throw Error("invalid scalar");let U=this.ZERO,r=this.BASE,I=Zz($,this.bits);for(let J=0;J<I.windows;J++){let{nextN:G,offset:O,isZero:z,isNeg:Q,isNegF:X,offsetF:N}=Dq(g,J,I);if(g=G,z)r=r.add(jI(X,v[N]));else U=U.add(jI(Q,v[O]))}return Qq(g),{p:U,f:r}}wNAFUnsafe($,v,g,U=this.ZERO){let r=Zz($,this.bits);for(let I=0;I<r.windows;I++){if(g===gU)break;let{nextN:J,offset:G,isZero:O,isNeg:z}=Dq(g,I,r);if(g=J,O)continue;else{let Q=v[G];U=U.add(z?Q.negate():Q)}}return Qq(g),U}getPrecomputes($,v,g){let U=jz.get(v);if(!U){if(U=this.precomputeWindow(v,$),$!==1){if(typeof g==="function")U=g(U);jz.set(v,U)}}return U}cached($,v,g){let U=Mz($);return this.wNAF(U,this.getPrecomputes(U,$,g),v)}unsafe($,v,g,U){let r=Mz($);if(r===1)return this._unsafeLadder($,v,U);return this.wNAFUnsafe(r,this.getPrecomputes(r,$,g),v,U)}createCache($,v){wq(v,this.bits),Nq.set($,v),jz.delete($)}hasCache($){return Mz($)!==1}}function Yq($,v,g,U){let r=v,I=$.ZERO,J=$.ZERO;while(g>gU||U>gU){if(g&jg)I=I.add(r);if(U&jg)J=J.add(r);r=r.double(),g>>=jg,U>>=jg}return{p1:I,p2:J}}function Xq($,v,g){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Wz(v),v}else return zJ($,{isLE:g})}function DJ($,v,g={},U){if(U===void 0)U=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let z=v[O];if(!(typeof z==="bigint"&&z>gU))throw Error(`CURVE.${O} must be positive bigint`)}let r=Xq(v.p,g.Fp,U),I=Xq(v.n,g.Fn,U),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!r.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:r,Fn:I}}function RI($,v){return function(U){let r=$(U);return{secretKey:r,publicKey:v(r)}}}function KI($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let g=Array.from({length:v}).fill(0);for(let U=v-1;U>=0;U--)g[U]=$&255,$>>>=8;return new Uint8Array(g)}function GM($,v){let g=new Uint8Array($.length);for(let U=0;U<$.length;U++)g[U]=$[U]^v[U];return g}function OM($){if(!$U($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?OJ($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function Rz($,v,g,U){if(S$($),sv(g),v=OM(v),v.length>255)v=U(h$(OJ("H2C-OVERSIZE-DST-"),v));let{outputLen:r,blockLen:I}=U,J=Math.ceil(g/r);if(g>65535||J>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,KI(v.length,1)),O=new Uint8Array(I),z=KI(g,2),Q=Array(J),X=U(h$(O,$,z,KI(0,1),G));Q[0]=U(h$(X,KI(1,1),G));for(let w=1;w<J;w++){let q=[GM(X,Q[w-1]),KI(w+1,1),G];Q[w]=U(h$(...q))}return h$(...Q).slice(0,g)}var qq="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wq=($,v)=>($+($>=0?v:-v)/uq)/v;function zM($,v,g){Rr("scalar",$,$r,g);let[[U,r],[I,J]]=v,G=Wq(J*$,g),O=Wq(-r*$,g),z=$-G*U-O*I,Q=-G*r-O*J,X=z<$r,N=Q<$r;if(X)z=-z;if(N)Q=-Q;let w=uI(Math.ceil(rU(g)/2))+lr;if(z<$r||z>=w||Q<$r||Q>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:z,k2neg:N,k2:Q}}function Sz($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function Kz($,v){Bv($);let g={};for(let U of Object.keys(v))g[U]=$[U]===void 0?v[U]:$[U];if(Mr(g.lowS,"lowS"),Mr(g.prehash,"prehash"),g.format!==void 0)Sz(g.format);return g}class Vq extends Error{constructor($=""){super($)}}var Fv={Err:Vq,_tlv:{encode:($,v)=>{let{Err:g}=Fv;if(sv($,"tag"),$<0||$>255)throw new g("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new g("tlv.encode: unpadded data");let U=v.length/2,r=WI(U);if(r.length/2&128)throw new g("tlv.encode: long form length too big");let I=U>127?WI(r.length/2|128):"";return WI($)+I+r+v},decode($,v){let{Err:g}=Fv;v=S$(v,void 0,"DER data");let U=0;if($<0||$>255)throw new g("tlv.encode: wrong tag");if(v.length<2||v[U++]!==$)throw new g("tlv.decode: wrong tlv");let r=v[U++],I=!!(r&128),J=0;if(!I)J=r;else{let O=r&127;if(!O)throw new g("tlv.decode(long): indefinite length not supported");if(O>4)throw new g("tlv.decode(long): byte length is too big");let z=v.subarray(U,U+O);if(z.length!==O)throw new g("tlv.decode: length bytes not complete");if(z[0]===0)throw new g("tlv.decode(long): zero leftmost byte");for(let Q of z)J=J<<8|Q;if(U+=O,J<128)throw new g("tlv.decode(long): not minimal encoding")}let G=v.subarray(U,U+J);if(G.length!==J)throw new g("tlv.decode: wrong value length");return{v:G,l:v.subarray(U+J)}}},_int:{encode($){let{Err:v}=Fv;if(JJ($),$<$r)throw new v("integer: negative integers are not allowed");let g=WI($);if(Number.parseInt(g[0],16)&8)g="00"+g;if(g.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return g},decode($){let{Err:v}=Fv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ug($)}},toSig($){let{Err:v,_int:g,_tlv:U}=Fv,r=S$($,void 0,"signature"),{v:I,l:J}=U.decode(48,r);if(J.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=U.decode(2,I),{v:z,l:Q}=U.decode(2,O);if(Q.length)throw new v("invalid signature: left bytes after parsing");return{r:g.decode(G),s:g.decode(z)}},hexFromSig($){let{_tlv:v,_int:g}=Fv,U=v.encode(2,g.encode($.r)),r=v.encode(2,g.encode($.s)),I=U+r;return v.encode(48,I)}};Object.freeze(Fv._tlv);Object.freeze(Fv._int);Object.freeze(Fv);var $r=BigInt(0),lr=BigInt(1),uq=BigInt(2),QJ=BigInt(3),DM=BigInt(4);function Zq($,v={}){let g=DJ("weierstrass",$,v),U=g.Fp,r=g.Fn,I=g.CURVE,{h:J,n:G}=I;Bv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:z}=v;if(O){if(!U.is0(I.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let Q=Mq(U,r);function X(){if(!U.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(H,K,P){if(z&&K.is0())return Uint8Array.of(0);let{x:V,y:j}=K.toAffine(),Z=U.toBytes(V);if(Mr(P,"isCompressed"),P){X();let A=!U.isOdd(j);return h$(jq(A),Z)}else return h$(Uint8Array.of(4),Z,U.toBytes(j))}function w(H){S$(H,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=Q,V=H.length,j=H[0],Z=H.subarray(1);if(z&&V===1&&j===0)return{x:U.ZERO,y:U.ZERO};if(V===K&&(j===2||j===3)){let A=U.fromBytes(Z);if(!U.isValid(A))throw Error("bad point: is not on curve, wrong x");let M=W(A),n;try{n=U.sqrt(M)}catch(e){let I$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+I$)}X();let f=U.isOdd(n);if((j&1)===1!==f)n=U.neg(n);return{x:A,y:n}}else if(V===P&&j===4){let A=U.BYTES,M=U.fromBytes(Z.subarray(0,A)),n=U.fromBytes(Z.subarray(A,A*2));if(!S(M,n))throw Error("bad point: is not on curve");return{x:M,y:n}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let q=v.toBytes===void 0?N:v.toBytes,u=v.fromBytes===void 0?w:v.fromBytes;function W(H){let K=U.sqr(H),P=U.mul(K,H);return U.add(U.add(P,U.mul(H,I.a)),I.b)}function S(H,K){let P=U.sqr(K),V=W(H);return U.eql(P,V)}if(!S(I.Gx,I.Gy))throw Error("bad curve params: generator point");let R=U.mul(U.pow(I.a,QJ),DM),L=U.mul(U.sqr(I.b),BigInt(27));if(U.is0(U.add(R,L)))throw Error("bad curve params: a or b");function B(H,K,P=!1){if(!U.isValid(K)||P&&U.is0(K))throw Error(`bad point coordinate ${H}`);return K}function F(H){if(!(H instanceof _))throw Error("Weierstrass Point expected")}function l(H){if(!O||!O.basises)throw Error("no endo");return zM(H,O.basises,r.ORDER)}function d(H,K,P,V,j){return P=new _(U.mul(P.X,H),P.Y,P.Z),K=jI(V,K),P=jI(j,P),K.add(P)}class _{static BASE=new _(I.Gx,I.Gy,U.ONE);static ZERO=new _(U.ZERO,U.ONE,U.ZERO);static Fp=U;static Fn=r;X;Y;Z;constructor(H,K,P){this.X=B("x",H),this.Y=B("y",K,!0),this.Z=B("z",P),Object.freeze(this)}static CURVE(){return I}static fromAffine(H){let{x:K,y:P}=H||{};if(!H||!U.isValid(K)||!U.isValid(P))throw Error("invalid affine point");if(H instanceof _)throw Error("projective point not allowed");if(U.is0(K)&&U.is0(P))return _.ZERO;return new _(K,P,U.ONE)}static fromBytes(H){let K=_.fromAffine(u(S$(H,void 0,"point")));return K.assertValidity(),K}static fromHex(H){return _.fromBytes(sg(H))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(H=8,K=!0){if(v$.createCache(this,H),!K)this.multiply(QJ);return this}assertValidity(){let H=this;if(H.is0()){if(v.allowInfinityPoint&&U.is0(H.X)&&U.eql(H.Y,U.ONE)&&U.is0(H.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=H.toAffine();if(!U.isValid(K)||!U.isValid(P))throw Error("bad point: x or y not field elements");if(!S(K,P))throw Error("bad point: equation left != right");if(!H.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:H}=this.toAffine();if(!U.isOdd)throw Error("Field doesn't support isOdd");return!U.isOdd(H)}equals(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.eql(U.mul(K,A),U.mul(j,V)),n=U.eql(U.mul(P,A),U.mul(Z,V));return M&&n}negate(){return new _(this.X,U.neg(this.Y),this.Z)}double(){let{a:H,b:K}=I,P=U.mul(K,QJ),{X:V,Y:j,Z}=this,A=U.ZERO,M=U.ZERO,n=U.ZERO,f=U.mul(V,V),o=U.mul(j,j),e=U.mul(Z,Z),I$=U.mul(V,j);return I$=U.add(I$,I$),n=U.mul(V,Z),n=U.add(n,n),A=U.mul(H,n),M=U.mul(P,e),M=U.add(A,M),A=U.sub(o,M),M=U.add(o,M),M=U.mul(A,M),A=U.mul(I$,A),n=U.mul(P,n),e=U.mul(H,e),I$=U.sub(f,e),I$=U.mul(H,I$),I$=U.add(I$,n),n=U.add(f,f),f=U.add(n,f),f=U.add(f,e),f=U.mul(f,I$),M=U.add(M,f),e=U.mul(j,Z),e=U.add(e,e),f=U.mul(e,I$),A=U.sub(A,f),n=U.mul(e,o),n=U.add(n,n),n=U.add(n,n),new _(A,M,n)}add(H){F(H);let{X:K,Y:P,Z:V}=this,{X:j,Y:Z,Z:A}=H,M=U.ZERO,n=U.ZERO,f=U.ZERO,o=I.a,e=U.mul(I.b,QJ),I$=U.mul(K,j),G$=U.mul(P,Z),D$=U.mul(V,A),w$=U.add(K,P),Q$=U.add(j,Z);w$=U.mul(w$,Q$),Q$=U.add(I$,G$),w$=U.sub(w$,Q$),Q$=U.add(K,V);let X$=U.add(j,A);return Q$=U.mul(Q$,X$),X$=U.add(I$,D$),Q$=U.sub(Q$,X$),X$=U.add(P,V),M=U.add(Z,A),X$=U.mul(X$,M),M=U.add(G$,D$),X$=U.sub(X$,M),f=U.mul(o,Q$),M=U.mul(e,D$),f=U.add(M,f),M=U.sub(G$,f),f=U.add(G$,f),n=U.mul(M,f),G$=U.add(I$,I$),G$=U.add(G$,I$),D$=U.mul(o,D$),Q$=U.mul(e,Q$),G$=U.add(G$,D$),D$=U.sub(I$,D$),D$=U.mul(o,D$),Q$=U.add(Q$,D$),I$=U.mul(G$,Q$),n=U.add(n,I$),I$=U.mul(X$,Q$),M=U.mul(w$,M),M=U.sub(M,I$),I$=U.mul(w$,G$),f=U.mul(X$,f),f=U.add(f,I$),new _(M,n,f)}subtract(H){return F(H),this.add(H.negate())}is0(){return this.equals(_.ZERO)}multiply(H){let{endo:K}=v;if(!r.isValidNot0(H))throw RangeError("invalid scalar: out of range");let P,V,j=(Z)=>v$.cached(this,Z,(A)=>Mg(_,A));if(K){let{k1neg:Z,k1:A,k2neg:M,k2:n}=l(H),{p:f,f:o}=j(A),{p:e,f:I$}=j(n);V=o.add(I$),P=d(K.beta,f,e,Z,M)}else{let{p:Z,f:A}=j(H);P=Z,V=A}return Mg(_,[P,V])[0]}multiplyUnsafe(H){let{endo:K}=v,P=this,V=H;if(!r.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$r||P.is0())return _.ZERO;if(V===lr)return P;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:j,k1:Z,k2neg:A,k2:M}=l(V),{p1:n,p2:f}=Yq(_,P,Z,M);return d(K.beta,n,f,j,A)}else return v$.unsafe(P,V)}toAffine(H){let K=this,P=H,{X:V,Y:j,Z}=K;if(U.eql(Z,U.ONE))return{x:V,y:j};let A=K.is0();if(P==null)P=A?U.ONE:U.inv(Z);let M=U.mul(V,P),n=U.mul(j,P),f=U.mul(Z,P);if(A)return{x:U.ZERO,y:U.ZERO};if(!U.eql(f,U.ONE))throw Error("invZ was invalid");return{x:M,y:n}}isTorsionFree(){let{isTorsionFree:H}=v;if(J===lr)return!0;if(H)return H(_,this);return v$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:H}=v;if(J===lr)return this;if(H)return H(_,this);return this.multiplyUnsafe(J)}isSmallOrder(){if(J===lr)return this.is0();return this.clearCofactor().is0()}toBytes(H=!0){return Mr(H,"isCompressed"),this.assertValidity(),q(_,this,H)}toHex(H=!0){return eg(this.toBytes(H))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=r.BITS,v$=new MI(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function jq($){return Uint8Array.of($?2:3)}function Mq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function QM($,v={}){let{Fn:g}=$,U=v.randomBytes===void 0?vU:v.randomBytes,r=Object.assign(Mq($.Fp,g),{seed:Math.max(uz(g.ORDER),16)});function I(w){try{let q=g.fromBytes(w);return g.isValidNot0(q)}catch(q){return!1}}function J(w,q){let{publicKey:u,publicKeyUncompressed:W}=r;try{let S=w.length;if(q===!0&&S!==u)return!1;if(q===!1&&S!==W)return!1;return!!$.fromBytes(w)}catch(S){return!1}}function G(w){return w=w===void 0?U(r.seed):w,zq(S$(w,r.seed,"seed"),g.ORDER)}function O(w,q=!0){return $.BASE.multiply(g.fromBytes(w)).toBytes(q)}function z(w){let{secretKey:q,publicKey:u,publicKeyUncompressed:W}=r,S=g._lengths;if(!$U(w))return;let R=S$(w,void 0,"key").length,L=R===u||R===W,B=R===q||!!S?.includes(R);if(L&&B)return;return L}function Q(w,q,u=!0){if(z(w)===!0)throw Error("first arg must be private key");if(z(q)===!1)throw Error("second arg must be public key");let W=g.fromBytes(w);return $.fromBytes(q).multiply(W).toBytes(u)}let X={isValidSecretKey:I,isValidPublicKey:J,randomSecretKey:G},N=RI(G,O);return Object.freeze(X),Object.freeze(r),Object.freeze({getPublicKey:O,getSharedSecret:Q,keygen:N,Point:$,utils:X,lengths:r})}function Rq($,v,g={}){let U=v;Qr(U),Bv(g,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),g=Object.assign({},g);let r=g.randomBytes===void 0?vU:g.randomBytes,I=g.hmac===void 0?(j,Z)=>dv(U,j,Z):g.hmac,{Fp:J,Fn:G}=$,{ORDER:O,BITS:z}=G,{keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q}=QM($,g),u={prehash:!0,lowS:typeof g.lowS==="boolean"?g.lowS:!0,format:"compact",extraEntropy:!1},W=O*uq+lr<J.ORDER;function S(j){let Z=O>>lr;return j>Z}function R(j,Z){if(!G.isValidNot0(Z))throw Error(`invalid signature ${j}: out of range 1..Point.Fn.ORDER`);return Z}function L(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(j,Z){Sz(Z);let A=q.signature,M=Z==="compact"?A:Z==="recovered"?A+1:void 0;return S$(j,M)}class F{r;s;recovery;constructor(j,Z,A){if(this.r=R("r",j),this.s=R("s",Z),A!=null){if(L(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(j,Z=u.format){B(j,Z);let A;if(Z==="der"){let{r:o,s:e}=Fv.toSig(S$(j));return new F(o,e)}if(Z==="recovered")A=j[0],Z="compact",j=j.subarray(1);let M=q.signature/2,n=j.subarray(0,M),f=j.subarray(M,M*2);return new F(G.fromBytes(n),G.fromBytes(f),A)}static fromHex(j,Z){return this.fromBytes(sg(j),Z)}assertRecovery(){let{recovery:j}=this;if(j==null)throw Error("invalid recovery id: must be present");return j}addRecoveryBit(j){return new F(this.r,this.s,j)}recoverPublicKey(j){let{r:Z,s:A}=this,M=this.assertRecovery(),n=M===2||M===3?Z+O:Z;if(!J.isValid(n))throw Error("invalid recovery id: sig.r+curve.n != R.x");let f=J.toBytes(n),o=$.fromBytes(h$(jq((M&1)===0),f)),e=G.inv(n),I$=d(S$(j,void 0,"msgHash")),G$=G.create(-I$*e),D$=G.create(A*e),w$=$.BASE.multiplyUnsafe(G$).add(o.multiplyUnsafe(D$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return S(this.s)}toBytes(j=u.format){if(Sz(j),j==="der")return sg(Fv.hexFromSig(this));let{r:Z,s:A}=this,M=G.toBytes(Z),n=G.toBytes(A);if(j==="recovered")return L(),h$(Uint8Array.of(this.assertRecovery()),M,n);return h$(M,n)}toHex(j){return eg(this.toBytes(j))}}Object.freeze(F.prototype),Object.freeze(F);let l=g.bits2int===void 0?function(Z){if(Z.length>8192)throw Error("input is too large");let A=ug(Z),M=Z.length*8-z;return M>0?A>>BigInt(M):A}:g.bits2int,d=g.bits2int_modN===void 0?function(Z){return G.create(l(Z))}:g.bits2int_modN,_=uI(z);function b(j){return Rr("num < 2^"+z,j,$r,_),G.toBytes(j)}function v$(j,Z){return S$(j,void 0,"message"),Z?S$(U(j),void 0,"prehashed message"):j}function H(j,Z,A){let{lowS:M,prehash:n,extraEntropy:f}=Kz(A,u);j=v$(j,n);let o=d(j),e=G.fromBytes(Z);if(!G.isValidNot0(e))throw Error("invalid private key");let I$=[b(e),b(o)];if(f!=null&&f!==!1){let Q$=f===!0?r(q.secretKey):f;I$.push(S$(Q$,void 0,"extraEntropy"))}let G$=h$(...I$),D$=o;function w$(Q$){let X$=l(Q$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),P$=$.BASE.multiply(X$).toAffine(),n$=G.create(P$.x);if(n$===$r)return;let a$=G.create(W$*G.create(D$+n$*e));if(a$===$r)return;let e$=(P$.x===n$?0:2)|Number(P$.y&lr),Wv=a$;if(M&&S(a$))Wv=G.neg(a$),e$^=1;return new F(n$,Wv,W?void 0:e$)}return{seed:G$,k2sig:w$}}function K(j,Z,A={}){let{seed:M,k2sig:n}=H(j,Z,A);return aY(U.outputLen,G.BYTES,I)(M,n).toBytes(A.format)}function P(j,Z,A,M={}){let{lowS:n,prehash:f,format:o}=Kz(M,u);if(A=S$(A,void 0,"publicKey"),Z=v$(Z,f),!$U(j)){let e=j instanceof F?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}B(j,o);try{let e=F.fromBytes(j,o),I$=$.fromBytes(A);if(n&&e.hasHighS())return!1;let{r:G$,s:D$}=e,w$=d(Z),Q$=G.inv(D$),X$=G.create(w$*Q$),W$=G.create(G$*Q$),P$=$.BASE.multiplyUnsafe(X$).add(I$.multiplyUnsafe(W$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(e){return!1}}function V(j,Z,A={}){let{prehash:M}=Kz(A,u);return Z=v$(Z,M),F.fromBytes(j,"recovered").recoverPublicKey(Z).toBytes()}return Object.freeze({keygen:Q,getPublicKey:X,getSharedSecret:N,utils:w,lengths:q,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:F,hash:U})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var XM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var wM=Zq(XM),UU=Rq(wM,L$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yr=BigInt(0),uv=BigInt(1),Tz=BigInt(2),NM=BigInt(8);function YM($,v,g,U){let r=$.sqr(g),I=$.sqr(U),J=$.add($.mul(v.a,r),I),G=$.add($.ONE,$.mul(v.d,$.mul(r,I)));return $.eql(J,G)}function Kq($,v={}){let g=v,U=DJ("edwards",$,g,g.FpFnLE),{Fp:r,Fn:I}=U,J=U.CURVE,{h:G}=J;Bv(g,{},{uvRatio:"function"});let O=Tz<<BigInt(I.BYTES*8)-uv,z=(u)=>r.create(u),Q=g.uvRatio===void 0?(u,W)=>{try{return{isValid:!0,value:r.sqrt(r.div(u,W))}}catch(S){return{isValid:!1,value:yr}}}:g.uvRatio;if(!YM(r,J,J.Gx,J.Gy))throw Error("bad curve params: generator point");function X(u,W,S=!1){let R=S?uv:yr;return Rr("coordinate "+u,W,R,O),W}function N(u){if(!(u instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(J.Gx,J.Gy,uv,z(J.Gx*J.Gy));static ZERO=new w(yr,uv,uv,yr);static Fp=r;static Fn=I;X;Y;Z;T;constructor(u,W,S,R){this.X=X("x",u),this.Y=X("y",W),this.Z=X("z",S,!0),this.T=X("t",R),Object.freeze(this)}static CURVE(){return J}static fromAffine(u){if(u instanceof w)throw Error("extended point not allowed");let{x:W,y:S}=u||{};return X("x",W),X("y",S),new w(W,S,uv,z(W*S))}static fromBytes(u,W=!1){let S=r.BYTES,{a:R,d:L}=J;u=cr(S$(u,S,"point")),Mr(W,"zip215");let B=cr(u),F=u[S-1];B[S-1]=F&-129;let l=mv(B),d=W?O:r.ORDER;Rr("point.y",l,yr,d);let _=z(l*l),b=z(_-uv),v$=z(L*_-R),{isValid:H,value:K}=Q(b,v$);if(!H)throw Error("bad point: invalid y coordinate");let P=(K&uv)===uv,V=(F&128)!==0;if(!W&&K===yr&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=z(-K);return w.fromAffine({x:K,y:l})}static fromHex(u,W=!1){return w.fromBytes(sg(u),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(u=8,W=!0){if(q.createCache(this,u),!W)this.multiply(Tz);return this}assertValidity(){let u=this,{a:W,d:S}=J;if(u.is0())throw Error("bad point: ZERO");let{X:R,Y:L,Z:B,T:F}=u,l=z(R*R),d=z(L*L),_=z(B*B),b=z(_*_),v$=z(l*W),H=z(_*z(v$+d)),K=z(b+z(S*z(l*d)));if(H!==K)throw Error("bad point: equation left != right (1)");let P=z(R*L),V=z(B*F);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(u){N(u);let{X:W,Y:S,Z:R}=this,{X:L,Y:B,Z:F}=u,l=z(W*F),d=z(L*R),_=z(S*F),b=z(B*R);return l===d&&_===b}is0(){return this.equals(w.ZERO)}negate(){return new w(z(-this.X),this.Y,this.Z,z(-this.T))}double(){let{a:u}=J,{X:W,Y:S,Z:R}=this,L=z(W*W),B=z(S*S),F=z(Tz*z(R*R)),l=z(u*L),d=W+S,_=z(z(d*d)-L-B),b=l+B,v$=b-F,H=l-B,K=z(_*v$),P=z(b*H),V=z(_*H),j=z(v$*b);return new w(K,P,j,V)}add(u){N(u);let{a:W,d:S}=J,{X:R,Y:L,Z:B,T:F}=this,{X:l,Y:d,Z:_,T:b}=u,v$=z(R*l),H=z(L*d),K=z(F*S*b),P=z(B*_),V=z((R+L)*(l+d)-v$-H),j=P-K,Z=P+K,A=z(H-W*v$),M=z(V*j),n=z(Z*A),f=z(V*A),o=z(j*Z);return new w(M,n,o,f)}subtract(u){return N(u),this.add(u.negate())}multiply(u){if(!I.isValidNot0(u))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:S}=q.cached(this,u,(R)=>Mg(w,R));return Mg(w,[W,S])[0]}multiplyUnsafe(u){if(!I.isValid(u))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(u===yr)return w.ZERO;if(this.is0()||u===uv)return this;return q.unsafe(this,u,(W)=>Mg(w,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return q.unsafe(this,J.n).is0()}toAffine(u){let W=this,S=u,{X:R,Y:L,Z:B}=W,F=W.is0();if(S==null)S=F?NM:r.inv(B);let l=z(R*S),d=z(L*S),_=r.mul(B,S);if(F)return{x:yr,y:uv};if(_!==uv)throw Error("invZ was invalid");return{x:l,y:d}}clearCofactor(){if(G===uv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:u,y:W}=this.toAffine(),S=r.toBytes(W);return S[S.length-1]|=u&uv?128:0,S}toHex(){return eg(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let q=new MI(w,I.BITS);if(I.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class Az{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){Yz()}static fromHex($){Yz()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eg(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SI=BigInt(0),IU=BigInt(1),XJ=BigInt(2);function qM($){return Bv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Sq($){let v=qM($),{P:g,type:U,adjustScalarBytes:r,powPminus2:I,randomBytes:J}=v,G=U==="x25519";if(!G&&U!=="x448")throw Error("invalid type");let O=J===void 0?vU:J,z=G?255:448,Q=G?32:56,X=G?BigInt(9):BigInt(5),N=G?BigInt(121665):BigInt(39081),w=G?XJ**BigInt(254):XJ**BigInt(447),q=G?BigInt(8)*XJ**BigInt(251)-IU:BigInt(4)*XJ**BigInt(445)-IU,u=w+q+IU,W=(V)=>E$(V,g),S=R(X);function R(V){return VI(W(V),Q)}function L(V){let j=cr(S$(V,Q,"uCoordinate"));if(G)j[31]&=127;return W(mv(j))}function B(V){return mv(r(cr(S$(V,Q,"scalar"))))}function F(V,j){let Z=v$(L(j),B(V));if(Z===SI)throw Error("invalid private or public key received");return R(Z)}function l(V){return F(V,S)}let d=l,_=F;function b(V,j,Z){let A=W(V*(j-Z));return j=W(j-A),Z=W(Z+A),{x_2:j,x_3:Z}}function v$(V,j){Rr("u",V,SI,g),Rr("scalar",j,w,u);let Z=j,A=V,M=IU,n=SI,f=V,o=IU,e=SI;for(let G$=BigInt(z-1);G$>=SI;G$--){let D$=Z>>G$&IU;e^=D$,{x_2:M,x_3:f}=b(e,M,f),{x_2:n,x_3:o}=b(e,n,o),e=D$;let w$=M+n,Q$=W(w$*w$),X$=M-n,W$=W(X$*X$),P$=Q$-W$,n$=f+o,a$=f-o,e$=W(a$*w$),Wv=W(n$*X$),cv=e$+Wv,lv=e$-Wv;f=W(cv*cv),o=W(A*W(lv*lv)),M=W(Q$*W$),n=W(P$*(Q$+W(N*P$)))}({x_2:M,x_3:f}=b(e,M,f)),{x_2:n,x_3:o}=b(e,n,o);let I$=I(n);return W(M*I$)}let H={secretKey:Q,publicKey:Q,seed:Q},K=(V)=>{return V=V===void 0?O(Q):V,S$(V,H.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(H),Object.freeze(P),Object.freeze({keygen:RI(K,d),getSharedSecret:_,getPublicKey:d,scalarMult:F,scalarMultBase:l,utils:P,GuBytes:S.slice(),lengths:H})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WM=BigInt(0),Sr=BigInt(1),Tq=BigInt(2),VM=BigInt(3),uM=BigInt(5),ZM=BigInt(8),Kg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),nz=(()=>({p:Kg,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:ZM,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Pq($){let v=BigInt(10),g=BigInt(20),U=BigInt(40),r=BigInt(80),I=Kg,G=$*$%I*$%I,O=Cv(G,Tq,I)*G%I,z=Cv(O,Sr,I)*$%I,Q=Cv(z,uM,I)*z%I,X=Cv(Q,v,I)*Q%I,N=Cv(X,g,I)*X%I,w=Cv(N,U,I)*N%I,q=Cv(w,r,I)*w%I,u=Cv(q,r,I)*w%I,W=Cv(u,v,I)*Q%I;return{pow_p_5_8:Cv(W,Tq,I)*$%I,b2:G}}function jM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Hz=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Ez($,v){let g=Kg,U=E$(v*v*v,g),r=E$(U*U*v,g),I=Pq($*r).pow_p_5_8,J=E$($*U*I,g),G=E$(v*J*J,g),O=J,z=E$(J*Hz,g),Q=G===$,X=G===E$(-$,g),N=G===E$(-$*Hz,g);if(Q)J=O;if(X||N)J=z;if(Kr(J,g))J=E$(-J,g);return{isValid:Q||X,value:J}}var Rg=Kq(nz,{uvRatio:Ez}),dr=(()=>Rg.Fp)(),kq=(()=>Rg.Fn)();var wJ=(()=>{let $=Kg;return Sq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:g,b2:U}=Pq(v);return E$(Cv(g,VM,$)*U,$)},adjustScalarBytes:jM})})();var Pz=Hz,MM=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),RM=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),KM=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),SM=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Aq=($)=>Ez(Sr,$),TM=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),kz=($)=>dr.create(mv($)&TM);function Hq($){let{d:v}=nz,g=Kg,U=(S)=>dr.create(S),r=U(Pz*$*$),I=U((r+Sr)*KM),J=BigInt(-1),G=U((J-v*r)*U(r+v)),{isValid:O,value:z}=Ez(I,G),Q=U(z*$);if(!Kr(Q,g))Q=U(-Q);if(!O)z=Q;if(!O)J=r;let X=U(J*(r-Sr)*SM-G),N=z*z,w=U((z+z)*G),q=U(X*MM),u=U(Sr-N),W=U(Sr+N);return new Rg(U(w*W),U(u*q),U(q*W),U(w*u))}class Qv extends Az{static BASE=(()=>new Qv(Rg.BASE))();static ZERO=(()=>new Qv(Rg.ZERO))();static Fp=(()=>dr)();static Fn=(()=>kq)();constructor($){super($)}static fromAffine($){return new Qv(Rg.fromAffine($))}assertSame($){if(!($ instanceof Qv))throw Error("RistrettoPoint expected")}init($){return new Qv($)}static fromBytes($){o$($,32);let{a:v,d:g}=nz,U=Kg,r=(L)=>dr.create(L),I=kz($);if(!tY(dr.toBytes(I),$)||Kr(I,U))throw Error("invalid ristretto255 encoding 1");let J=r(I*I),G=r(Sr+v*J),O=r(Sr-v*J),z=r(G*G),Q=r(O*O),X=r(v*g*z-Q),{isValid:N,value:w}=Aq(r(X*Q)),q=r(w*O),u=r(w*q*X),W=r((I+I)*q);if(Kr(W,U))W=r(-W);let S=r(G*u),R=r(W*S);if(!N||Kr(R,U)||S===WM)throw Error("invalid ristretto255 encoding 2");return new Qv(new Rg(W,S,Sr,R))}static fromHex($){return Qv.fromBytes(lU($))}toBytes(){let{X:$,Y:v,Z:g,T:U}=this.ep,r=Kg,I=(u)=>dr.create(u),J=I(I(g+v)*I(g-v)),G=I($*v),O=I(G*G),{value:z}=Aq(I(J*O)),Q=I(z*J),X=I(z*G),N=I(Q*X*U),w;if(Kr(U*N,r)){let u=I(v*Pz),W=I($*Pz);$=u,v=W,w=I(Q*RM)}else w=X;if(Kr($*N,r))v=I(-v);let q=I((g-v)*w);if(Kr(q,r))q=I(-q);return dr.toBytes(q)}equals($){this.assertSame($);let{X:v,Y:g}=this.ep,{X:U,Y:r}=$.ep,I=(O)=>dr.create(O),J=I(v*r)===I(g*U),G=I(g*r)===I(v*U);return J||G}is0(){return this.equals(Qv.ZERO)}}Object.freeze(Qv.BASE);Object.freeze(Qv.ZERO);Object.freeze(Qv.prototype);Object.freeze(Qv);var AM=Object.freeze({Point:Qv,hashToCurve($,v){let g=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,U=Rz($,g,64,n0);return AM.deriveToCurve(U)},hashToScalar($,v={DST:qq}){let g=Rz($,v.DST,64,n0);return kq.create(mv(g))},deriveToCurve($){o$($,64);let v=kz($.subarray(0,32)),g=Hq(v),U=kz($.subarray(32,64)),r=Hq(U);return new Qv(g.add(r))}});var nq=!1,HM=!1;async function Eq($,v){if(HM)return await v();try{return await $()}catch(g){if(g instanceof ReferenceError||g instanceof DOMException&&g.name==="NotSupportedError")return await v();else throw g}}async function NJ($,v){return await Eq(async()=>{let g=fz($)?$:await kM($),U=await crypto.subtle.importKey("raw",nM(v),{name:"X25519"},nq,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:U},g,256))},()=>{if(fz($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMult($,v)})}async function TI($){return await Eq(async()=>{return NJ($,wJ.GuBytes)},()=>{if(fz($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wJ.scalarMultBase($)})}var PM=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function kM($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...PM,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},nq,["deriveBits"])}function fz($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function nM($){return $}class Bz{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),fM(Sg($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let g=await this.s.read();if(g.done)return this.buf=Sg($),null;this.buf=g.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Sg(this.transcript)}}}function fM($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function Sg($){let v=$.reduce((r,I)=>r+I.length,0),g=new Uint8Array(v),U=0;for(let r of $)g.set(r,U),U+=r.length;return g}function JU($,...v){return $.pipeThrough(new TransformStream({start(g){for(let U of v)g.enqueue(U)}}))}function YJ($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function Cz($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fq($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function Bq($,v){let g=$.getReader(),U=[],r=0;while(r<v){let{done:O,value:z}=await g.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");U.push(z),r+=z.length}g.releaseLock();let I=Sg(U),J=I.subarray(0,v),G=JU($,I.subarray(v));return{data:J,rest:G}}class vr{args;body;constructor($,v){this.args=$,this.body=v}}async function BM($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let g=v.split(" ");if(g.length<2||g.shift()!=="->")return{next:v};for(let I of g)if(I.length===0)throw Error("invalid stanza");let U=[];for(;;){let I=await $.readLine();if(I===null)throw Error("invalid stanza");let J=vv.decode(I);if(J.length>48)throw Error("invalid stanza");if(U.push(J),J.length<48)break}let r=Sg(U);return{s:new vr(g,r)}}async function Cq($){let v=new Bz($),g=await v.readLine();if(g!=="age-encryption.org/v1")throw Error("invalid version "+(g??"line"));let U=[];for(;;){let{s:r,next:I}=await BM(v);if(r!==void 0){U.push(r);continue}if(!I.startsWith("--- "))throw Error("invalid header");let J=vv.decode(I.slice(4)),{rest:G,transcript:O}=v.close(),z=O.slice(0,O.length-1-I.length+3);return{stanzas:U,headerNoMAC:z,MAC:J,headerSize:O.length,rest:JU($,G)}}}function Lz($){let v=[];v.push(`age-encryption.org/v1
 `);for(let g of $){v.push("-> "+g.args.join(" ")+`
 `);for(let U=0;U<g.body.length;U+=48){let r=U+48;if(r>g.body.length)r=g.body.length;v.push(vv.encode(g.body.subarray(U,r))+`
 `)}if(g.body.length%48===0)v.push(`

package/dist/index.js CHANGED Viewed

@@ -1,5 +1,5 @@
 // @bun
-var Gj=Object.defineProperty;var zj=($)=>$;function Oj($,v){this[$]=zj.bind(null,v)}var dv=($,v)=>{for(var g in v)Gj($,g,{get:v[g],enumerable:!0,configurable:!0,set:Oj.bind(v,g)})};import{access as xR,chmod as b4,mkdir as IW,readFile as GW,writeFile as JW}from"fs/promises";import{dirname as cR,join as i4}from"path";import{fileURLToPath as lR}from"url";var R0={name:"@rizom/ops",version:"0.2.0-alpha.195",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var aw=`ARG BUN_VERSION=1.3.10
+var Gj=Object.defineProperty;var zj=($)=>$;function Oj($,v){this[$]=zj.bind(null,v)}var dv=($,v)=>{for(var g in v)Gj($,g,{get:v[g],enumerable:!0,configurable:!0,set:Oj.bind(v,g)})};import{access as xR,chmod as b4,mkdir as IW,readFile as GW,writeFile as JW}from"fs/promises";import{dirname as cR,join as i4}from"path";import{fileURLToPath as lR}from"url";var R0={name:"@rizom/ops",version:"0.2.0-alpha.197",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var aw=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.195",
+  "version": "0.2.0-alpha.197",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",