npm - @rizom/ops - Versions diffs - 0.2.0-alpha.217 → 0.2.0-alpha.218 - Mend

@rizom/ops 0.2.0-alpha.217 → 0.2.0-alpha.218

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-var Jj=Object.defineProperty;var Gj=($)=>$;function zj($,v){this[$]=Gj.bind(null,v)}var lv=($,v)=>{for(var U in v)Jj($,U,{get:v[U],enumerable:!0,configurable:!0,set:zj.bind(v,U)})};import{parseArgs as Oj}from"util";var Dj={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function XO($,v){let U=$[v];return typeof U==="boolean"?U:void 0}function uJ($,v){let U=$[v];return typeof U==="string"?U:void 0}function xw($){let{values:v,positionals:U}=Oj({args:$,options:Dj,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:U[0]??"help",args:U.slice(1),flags:{help:XO(v,"help"),version:XO(v,"version"),dryRun:XO(v,"dry-run"),pushTo:uJ(v,"push-to"),cohort:uJ(v,"cohort"),anchorId:uJ(v,"anchor-id"),handle:uJ(v,"handle")}}}var KJ={name:"@rizom/ops",version:"0.2.0-alpha.217",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as l7,mkdirSync as d7,readFileSync as s8,writeFileSync as $D}from"fs";import{dirname as h7,join as lW}from"path";function NO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function f$($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(`${U}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw RangeError(`${U}expected integer >= 0, got ${$}`)}}function x$($,v,U=""){let I=NO($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let G=U&&`"${U}" `,z=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=G+"expected Uint8Array"+z+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function Xg($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(f$($.outputLen),f$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function FU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function TJ($,v){x$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw RangeError('"digestInto() output" expected to be of length >='+U)}function HJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iU($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function nv($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var Xj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Nj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function wj($){for(let v=0;v<$.length;v++)$[v]=Nj($[v]);return $}var wO=Xj?($)=>$:wj,ow=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),qj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function AJ($){if(x$($),ow)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=qj[$[U]];return v}var Qg={_0:48,_9:57,A:65,F:70,a:97,f:102};function cw($){if($>=Qg._0&&$<=Qg._9)return $-Qg._0;if($>=Qg.A&&$<=Qg.F)return $-(Qg.A-10);if($>=Qg.a&&$<=Qg.f)return $-(Qg.a-10);return}function yI($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(ow)try{return Uint8Array.fromHex($)}catch(g){if(g instanceof SyntaxError)throw RangeError(g.message);throw g}let v=$.length,U=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let G=cw($.charCodeAt(J)),z=cw($.charCodeAt(J+1));if(G===void 0||z===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=G*16+z}return I}function Yj($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function qO($,v=""){if(typeof $==="string")return Yj($);return x$($,void 0,v)}function YO(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];x$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function SJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function WO($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.canXOF=I.canXOF,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function Ng($=32){f$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var rO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Xg($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Ov(I)}update($){return FU(this),this.iHash.update($),this}digestInto($){FU(this),TJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:G}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=G,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,U,I)=>new VO(v,U).update(I).digest();return $.create=(v,U)=>new VO(v,U),$})();function lI($,v,U){if(Xg($),U===void 0)U=new Uint8Array($.outputLen);return dv($,U,v)}var ZO=Uint8Array.of(0),yw=Uint8Array.of();function jO($,v,U,I=32){Xg($),f$(I,"length"),x$(v,void 0,"prk");let g=$.outputLen;if(v.length<g)throw Error('"prk" must be at least HashLen octets');if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=yw;else x$(U,void 0,"info");let G=new Uint8Array(J*g),z=dv.create($,v),O=z._cloneInto(),D=new Uint8Array(z.outputLen);for(let X=0;X<J;X++)ZO[0]=X+1,O.update(X===0?yw:D).update(U).update(ZO).digestInto(D),G.set(D,g*X),z._cloneInto(O);return z.destroy(),O.destroy(),Ov(D,ZO),G.slice(0,I)}var Pg=($,v,U,I,g)=>jO($,lI($,v,U),I,g);function lw($,v,U){return $&v^~$&U}function dw($,v,U){return $&v^$&U^v&U}class kJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iU(this.buffer)}update($){FU(this),x$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let G=Math.min(I-this.pos,g-J);if(G===I){let z=iU($);for(;I<=g-J;J+=I)this.process(z,J);continue}if(U.set($.subarray(J,J+G),this.pos),this.pos+=G,J+=G,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){FU(this),TJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Ov(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let G=iU($),z=this.outputLen;if(z%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=z/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)G.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:G}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=G,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var wg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),qg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),c$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),o$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var PJ=BigInt(4294967295),hw=BigInt(32);function Wj($,v=!1){if(v)return{h:Number($&PJ),l:Number($>>hw&PJ)};return{h:Number($>>hw&PJ)|0,l:Number($&PJ)|0}}function pw($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:G,l:z}=Wj($[J],v);[I[J],g[J]]=[G,z]}return[I,g]}var MO=($,v,U)=>$>>>U,RO=($,v,U)=>$<<32-U|v>>>U,JU=($,v,U)=>$>>>U|v<<32-U,GU=($,v,U)=>$<<32-U|v>>>U,dI=($,v,U)=>$<<64-U|v>>>U-32,hI=($,v,U)=>$>>>U-32|v<<64-U;function hv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var tw=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),aw=($,v,U,I)=>v+U+I+($/4294967296|0)|0,ew=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),sw=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,$q=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),vq=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var Vj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Eg=new Uint32Array(64);class uO extends kJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G,H:z}=this;return[$,v,U,I,g,J,G,z]}set($,v,U,I,g,J,G,z){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=G|0,this.H=z|0}process($,v){for(let X=0;X<16;X++,v+=4)Eg[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=Eg[X-15],q=Eg[X-2],w=nv(N,7)^nv(N,18)^N>>>3,W=nv(q,17)^nv(q,19)^q>>>10;Eg[X]=W+Eg[X-7]+w+Eg[X-16]|0}let{A:U,B:I,C:g,D:J,E:G,F:z,G:O,H:D}=this;for(let X=0;X<64;X++){let N=nv(G,6)^nv(G,11)^nv(G,25),q=D+N+lw(G,z,O)+Vj[X]+Eg[X]|0,W=(nv(U,2)^nv(U,13)^nv(U,22))+dw(U,I,g)|0;D=O,O=z,z=G,G=J+q|0,J=g,g=I,I=U,U=q+W|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,G=G+this.E|0,z=z+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,G,z,O,D)}roundClean(){Ov(Eg)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class gq extends uO{A=wg[0]|0;B=wg[1]|0;C=wg[2]|0;D=wg[3]|0;E=wg[4]|0;F=wg[5]|0;G=wg[6]|0;H=wg[7]|0;constructor(){super(32)}}class Zj extends uO{A=qg[0]|0;B=qg[1]|0;C=qg[2]|0;D=qg[3]|0;E=qg[4]|0;F=qg[5]|0;G=qg[6]|0;H=qg[7]|0;constructor(){super(28)}}var Uq=(()=>pw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),jj=(()=>Uq[0])(),Mj=(()=>Uq[1])(),Bg=new Uint32Array(80),Cg=new Uint32Array(80);class pI extends kJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:G,Dl:z,Eh:O,El:D,Fh:X,Fl:N,Gh:q,Gl:w,Hh:W,Hl:Z}=this;return[$,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z]}set($,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=G|0,this.Dl=z|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=q|0,this.Gl=w|0,this.Hh=W|0,this.Hl=Z|0}process($,v){for(let u=0;u<16;u++,v+=4)Bg[u]=$.getUint32(v),Cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=Bg[u-15]|0,L=Cg[u-15]|0,i=JU(_,L,1)^JU(_,L,8)^MO(_,L,7),y=GU(_,L,1)^GU(_,L,8)^RO(_,L,7),d=Bg[u-2]|0,n=Cg[u-2]|0,b=JU(d,n,19)^dI(d,n,61)^MO(d,n,6),v$=GU(d,n,19)^hI(d,n,61)^RO(d,n,6),S=ew(y,v$,Cg[u-7],Cg[u-16]),K=sw(S,i,b,Bg[u-7],Bg[u-16]);Bg[u]=K|0,Cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:G,Cl:z,Dh:O,Dl:D,Eh:X,El:N,Fh:q,Fl:w,Gh:W,Gl:Z,Hh:r,Hl:T}=this;for(let u=0;u<80;u++){let _=JU(X,N,14)^JU(X,N,18)^dI(X,N,41),L=GU(X,N,14)^GU(X,N,18)^hI(X,N,41),i=X&q^~X&W,y=N&w^~N&Z,d=$q(T,L,y,Mj[u],Cg[u]),n=vq(d,r,_,i,jj[u],Bg[u]),b=d|0,v$=JU(U,I,28)^dI(U,I,34)^dI(U,I,39),S=GU(U,I,28)^hI(U,I,34)^hI(U,I,39),K=U&g^U&G^g&G,k=I&J^I&z^J&z;r=W|0,T=Z|0,W=q|0,Z=w|0,q=X|0,w=N|0,{h:X,l:N}=hv(O|0,D|0,n|0,b|0),O=G|0,D=z|0,G=g|0,z=J|0,g=U|0,J=I|0;let V=tw(b,S,k);U=aw(V,n,v$,K),I=V|0}({h:U,l:I}=hv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=hv(this.Bh|0,this.Bl|0,g|0,J|0),{h:G,l:z}=hv(this.Ch|0,this.Cl|0,G|0,z|0),{h:O,l:D}=hv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=hv(this.Eh|0,this.El|0,X|0,N|0),{h:q,l:w}=hv(this.Fh|0,this.Fl|0,q|0,w|0),{h:W,l:Z}=hv(this.Gh|0,this.Gl|0,W|0,Z|0),{h:r,l:T}=hv(this.Hh|0,this.Hl|0,r|0,T|0),this.set(U,I,g,J,G,z,O,D,X,N,q,w,W,Z,r,T)}roundClean(){Ov(Bg,Cg)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Iq extends pI{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(64)}}class Rj extends pI{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uj extends pI{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Kj extends pI{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var _$=WO(()=>new gq,rO(1));var EJ=WO(()=>new Iq,rO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function _J($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function HO($){if(!_J($))throw TypeError("Uint8Array expected")}function Dq($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((U)=>typeof U==="string");else return v.every((U)=>Number.isSafeInteger(U))}function Qq($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Lg($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aI($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function CJ($){if(!Array.isArray($))throw TypeError("array expected")}function LJ($,v){if(!Dq(!0,v))throw TypeError(`${$}: array of strings expected`)}function AO($,v){if(!Dq(!1,v))throw TypeError(`${$}: array of numbers expected`)}function uv(...$){let v=(J)=>J,U=(J,G)=>(z)=>J(G(z)),I=$.map((J)=>J.encode).reduceRight(U,v),g=$.map((J)=>J.decode).reduce(U,v);return{encode:I,decode:g}}function Kv($){let v=typeof $==="string"?$.split(""):$,U=v.length;LJ("alphabet",v);let I=new Map(v.map((g,J)=>[g,J]));return{encode:(g)=>{return CJ(g),g.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=U)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(g)=>{return CJ(g),g.map((J)=>{Lg("alphabet.decode",J);let G=I.get(J);if(G===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return G})}}}function Tv($=""){return Lg("join",$),{encode:(v)=>{return LJ("join.decode",v),v.join($)},decode:(v)=>{return Lg("join.decode",v),v.split($)}}}function nJ($,v="="){return aI($),Lg("padding",v),{encode(U){LJ("padding.encode",U);while(U.length*$%8)U.push(v);return U},decode(U){LJ("padding.decode",U);let I=U.length;if(I*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;I>0&&U[I-1]===v;I--)if((I-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return U.slice(0,I)}}}function Xq($){return Qq($),{encode:(v)=>v,decode:(v)=>$(v)}}function Jq($,v,U){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(U<2)throw RangeError(`convertRadix: invalid to=${U}, base cannot be less than 2`);if(CJ($),!$.length)return[];let I=0,g=[],J=Array.from($,(z)=>{if(aI(z),z<0||z>=v)throw Error(`invalid integer: ${z}`);return z}),G=J.length;while(!0){let z=0,O=!0;for(let D=I;D<G;D++){let X=J[D],N=v*z,q=N+X;if(!Number.isSafeInteger(q)||N/v!==z||q-X!==N)throw Error("convertRadix: carry overflow");let w=q/U;z=q%U;let W=Math.floor(w);if(J[D]=W,!Number.isSafeInteger(W)||W*U+z!==q)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!W)I=D;else O=!1}if(g.push(z),O)break}for(let z=0;z<$.length-1&&$[z]===0;z++)g.push(0);return g.reverse()}var Nq=($,v)=>v===0?$:Nq(v,$%v),fJ=($,v)=>$+(v-Nq($,v)),BJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function KO($,v,U,I){if(CJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(U<=0||U>32)throw RangeError(`convertRadix2: wrong to=${U}`);if(fJ(v,U)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${U} carryBits=${fJ(v,U)}`);let g=0,J=0,G=BJ[v],z=BJ[U]-1,O=[];for(let D of $){if(aI(D),D>=G)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(g=g<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=U;J-=U)O.push((g>>J-U&z)>>>0);let X=BJ[J];if(X===void 0)throw Error("invalid carry");g&=X-1}if(g=g<<U-J&z,!I&&J>=v)throw Error("Excess padding");if(!I&&g>0)throw Error(`Non-zero padding: ${g}`);if(I&&J>0)O.push(g>>>0);return O}function Tj($){aI($);let v=256;return{encode:(U)=>{if(!_J(U))throw TypeError("radix.encode input should be Uint8Array");return Jq(Array.from(U),v,$)},decode:(U)=>{return AO("radix.decode",U),Uint8Array.from(Jq(U,$,v))}}}function Pv($,v=!1){if(aI($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(fJ(8,$)>32||fJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(U)=>{if(!_J(U))throw TypeError("radix2.encode input should be Uint8Array");return KO(Array.from(U),8,$,!v)},decode:(U)=>{return AO("radix2.decode",U),Uint8Array.from(KO(U,$,8,v))}}}function Gq($){return Qq($),function(...v){try{return $.apply(null,v)}catch(U){}}}var dT=Object.freeze(uv(Pv(4),Kv("0123456789ABCDEF"),Tv(""))),hT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),nJ(5),Tv(""))),pT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Tv(""))),tT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),nJ(5),Tv(""))),aT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Tv(""))),eT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Tv(""),Xq(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),wq=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Hj=/[\t\n\f\r ]/,qq=($,v)=>{Lg("base64",$);let U=v?"base64url":"base64";if($.length>0&&Hj.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:U,lastChunkHandling:"strict"})},SO=Object.freeze(wq?{encode($){return HO($),$.toBase64()},decode($){return qq($,!1)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),nJ(6),Tv(""))),vv=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Tv(""))),sT=Object.freeze(wq?{encode($){return HO($),$.toBase64({alphabet:"base64url"})},decode($){return qq($,!0)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),nJ(6),Tv(""))),$H=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Tv(""))),kO=($)=>uv(Tj(58),Kv($),Tv("")),vH=Object.freeze(kO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),gH=Object.freeze(kO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),UH=Object.freeze(kO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var TO=uv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Tv("")),zq=[996825010,642813549,513874426,1027748829,705979059];function tI($){let v=$>>25,U=($&33554431)<<5;for(let I=0;I<zq.length;I++)if((v>>I&1)===1)U^=zq[I];return U}function Oq($,v,U=1){let I=$.length,g=1;for(let J=0;J<I;J++){let G=$.charCodeAt(J);if(G<33||G>126)throw Error(`Invalid prefix (${$})`);g=tI(g)^G>>5}g=tI(g);for(let J=0;J<I;J++)g=tI(g)^$.charCodeAt(J)&31;for(let J of v)g=tI(g)^J;for(let J=0;J<6;J++)g=tI(g);return g^=U,TO.encode(KO([g%BJ[30]],30,5,!1))}function Yq($){let v=$==="bech32"?1:734539939,U=Pv(5),I=U.decode,g=U.encode,J=Gq(I);function G(N,q,w=90){if(Lg("bech32.encode prefix",N),_J(q))q=Array.from(q);AO("bech32.encode",q);let W=N.length;if(W===0)throw TypeError(`Invalid prefix length ${W}`);let Z=W+7+q.length;if(w!==!1&&Z>w)throw TypeError(`Length ${Z} exceeds limit ${w}`);let r=N.toLowerCase(),T=Oq(r,q,v);return`${r}1${TO.encode(q)}${T}`}function z(N,q=90){Lg("bech32.decode input",N);let w=N.length;if(w<8||q!==!1&&w>q)throw TypeError(`invalid string length: ${w} (${N}). Expected (8..${q})`);let W=N.toLowerCase();if(N!==W&&N!==N.toUpperCase())throw Error("String must be lowercase or uppercase");let Z=W.lastIndexOf("1");if(Z===0||Z===-1)throw Error('Letter "1" must be present between prefix and data only');let r=W.slice(0,Z),T=W.slice(Z+1);if(T.length<6)throw Error("Data must be at least 6 characters long");let u=TO.decode(T).slice(0,-6),_=Oq(r,u,v);if(!T.endsWith(_))throw Error(`Invalid checksum in ${N}: expected "${_}"`);return{prefix:r,words:u}}let O=Gq(z);function D(N){let{prefix:q,words:w}=z(N,!1);return{prefix:q,words:w,bytes:I(w)}}function X(N,q){return G(N,g(q))}return{encode:G,decode:z,encodeFromBytes:X,decodeToBytes:D,decodeUnsafe:O,fromWords:I,fromWordsUnsafe:J,toWords:g}}var Hv=Object.freeze(Yq("bech32")),IH=Object.freeze(Yq("bech32m"));var Aj=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Sj={encode($){return HO($),$.toHex()},decode($){return Lg("hex",$),Uint8Array.fromHex($)}},JH=Object.freeze(Aj?Sj:uv(Pv(4),Kv("0123456789abcdef"),Tv(""),Xq(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Pj($,v,U,I){Xg($);let g=SJ({dkLen:32,asyncTick:10},I),{c:J,dkLen:G,asyncTick:z}=g;if(f$(J,"c"),f$(G,"dkLen"),f$(z,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(G<1)throw Error('"dkLen" must be >= 1');if(G>4294967295*$.outputLen)throw Error("derived key too long");let O=qO(v,"password"),D=qO(U,"salt"),X=new Uint8Array(G),N=dv.create($,O),q=N._cloneInto().update(D);return{c:J,dkLen:G,asyncTick:z,DK:X,PRF:N,PRFSalt:q}}function Ej($,v,U,I,g){if($.destroy(),v.destroy(),I)I.destroy();return Ov(g),U}function PO($,v,U,I){let{c:g,dkLen:J,DK:G,PRF:z,PRFSalt:O}=Pj($,v,U,I),D,X=new Uint8Array(4),N=iU(X),q=new Uint8Array(z.outputLen);for(let w=1,W=0;W<J;w++,W+=z.outputLen){let Z=G.subarray(W,W+z.outputLen);N.setInt32(0,w,!1),(D=O._cloneInto(D)).update(X).digestInto(q),Z.set(q.subarray(0,Z.length));for(let r=1;r<g;r++){z._cloneInto(D).update(q).digestInto(q);for(let T=0;T<Z.length;T++)Z[T]^=q[T]}}return Ej(z,O,G,D,q)}function Wq($,v,U,I,g,J){let G=$[v++]^U[I++],z=$[v++]^U[I++],O=$[v++]^U[I++],D=$[v++]^U[I++],X=$[v++]^U[I++],N=$[v++]^U[I++],q=$[v++]^U[I++],w=$[v++]^U[I++],W=$[v++]^U[I++],Z=$[v++]^U[I++],r=$[v++]^U[I++],T=$[v++]^U[I++],u=$[v++]^U[I++],_=$[v++]^U[I++],L=$[v++]^U[I++],i=$[v++]^U[I++],y=G,d=z,n=O,b=D,v$=X,S=N,K=q,k=w,V=W,M=Z,j=r,A=T,R=u,E=_,C=L,x=i;for(let e=0;e<8;e+=2)v$^=R$(y+R|0,7),V^=R$(v$+y|0,9),R^=R$(V+v$|0,13),y^=R$(R+V|0,18),M^=R$(S+d|0,7),E^=R$(M+S|0,9),d^=R$(E+M|0,13),S^=R$(d+E|0,18),C^=R$(j+K|0,7),n^=R$(C+j|0,9),K^=R$(n+C|0,13),j^=R$(K+n|0,18),b^=R$(x+A|0,7),k^=R$(b+x|0,9),A^=R$(k+b|0,13),x^=R$(A+k|0,18),d^=R$(y+b|0,7),n^=R$(d+y|0,9),b^=R$(n+d|0,13),y^=R$(b+n|0,18),K^=R$(S+v$|0,7),k^=R$(K+S|0,9),v$^=R$(k+K|0,13),S^=R$(v$+k|0,18),A^=R$(j+M|0,7),V^=R$(A+j|0,9),M^=R$(V+A|0,13),j^=R$(M+V|0,18),R^=R$(x+C|0,7),E^=R$(R+x|0,9),C^=R$(E+R|0,13),x^=R$(C+E|0,18);g[J++]=G+y|0,g[J++]=z+d|0,g[J++]=O+n|0,g[J++]=D+b|0,g[J++]=X+v$|0,g[J++]=N+S|0,g[J++]=q+K|0,g[J++]=w+k|0,g[J++]=W+V|0,g[J++]=Z+M|0,g[J++]=r+j|0,g[J++]=T+A|0,g[J++]=u+R|0,g[J++]=_+E|0,g[J++]=L+C|0,g[J++]=i+x|0}function EO($,v,U,I,g){let J=I+0,G=I+16*g;for(let z=0;z<16;z++)U[G+z]=$[v+(2*g-1)*16+z];for(let z=0;z<g;z++,J+=16,v+=16){if(Wq(U,G,$,v,U,J),z>0)G+=16;Wq(U,J,$,v+=16,U,G)}}function Bj($,v,U){let I=SJ({dkLen:32,asyncTick:10,maxmem:1073742848},U),{N:g,r:J,p:G,dkLen:z,asyncTick:O,maxmem:D,onProgress:X}=I;if(f$(g,"N"),f$(J,"r"),f$(G,"p"),f$(z,"dkLen"),f$(O,"asyncTick"),f$(D,"maxmem"),X!==void 0&&typeof X!=="function")throw Error("progressCb must be a function");let N=128*J,q=N/4,w=Math.pow(2,32);if(g<=1||(g&g-1)!==0||g>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(G<1||G>(w-1)*32/N)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(z<1||z>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let W=N*(g+G+1);if(W>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+W+", maxmem="+D);let Z=PO(_$,$,v,{c:1,dkLen:N*G}),r=HJ(Z),T=HJ(new Uint8Array(N*g)),u=HJ(new Uint8Array(N)),_=()=>{};if(X){let L=2*g*G,i=Math.max(Math.floor(L/1e4),1),y=0;_=()=>{if(y++,X&&(!(y%i)||y===L))X(y/L)}}return{N:g,r:J,p:G,dkLen:z,blockSize32:q,V:T,B32:r,B:Z,tmp:u,blockMixCb:_,asyncTick:O}}function Cj($,v,U,I,g){let J=PO(_$,$,U,{c:1,dkLen:v});return Ov(U,I,g),J}function BO($,v,U){let{N:I,r:g,p:J,dkLen:G,blockSize32:z,V:O,B32:D,B:X,tmp:N,blockMixCb:q}=Bj($,v,U);wO(D);for(let w=0;w<J;w++){let W=z*w;for(let Z=0;Z<z;Z++)O[Z]=D[W+Z];for(let Z=0,r=0;Z<I-1;Z++)EO(O,r,O,r+=z,g),q();EO(O,(I-1)*z,D,W,g),q();for(let Z=0;Z<I;Z++){let r=(D[W+z-16]&I-1)>>>0;for(let T=0;T<z;T++)N[T]=D[W+T]^O[r*z+T];EO(N,0,D,W,g),q()}}return wO(D),Cj($,G,X,O,N)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Lj($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function bJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function xU($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,U=""){let I=Lj($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let G=U&&`"${U}" `,z=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=G+"expected Uint8Array"+z+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function CO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function rq($,v,U=!1){b$($,void 0,"output");let I=v.outputLen;if($.length<I)throw RangeError("digestInto() expects output buffer of length at least "+I);if(U&&!cU($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fj($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var zU=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),_j=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var nj=($)=>{for(let v=0;v<$.length;v++)$[v]=_j($[v]);return $},Yg=zU?($)=>$:nj;function Vq($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function Zq($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function jq($,v,U){let I=v,g=U||(()=>[]),J=(z,O)=>I(O,...g(z)).update(z).digest(),G=I(new Uint8Array($),...g(new Uint8Array(0)));return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(z,...O)=>I(z,...O),J}var Mq=($,v)=>{function U(I,...g){if(b$(I,void 0,"key"),$.nonceLength!==void 0){let X=g[0];b$(X,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&g[1]!==void 0)b$(g[1],void 0,"AAD");let G=v(I,...g),z=(X,N)=>{if(N!==void 0){if(X!==2)throw Error("cipher output not supported");b$(N,void 0,"output")}},O=!1;return{encrypt(X,N){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(X),z(G.encrypt.length,N),G.encrypt(X,N)},decrypt(X,N){if(b$(X),J&&X.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return z(G.decrypt.length,N),G.decrypt(X,N)}}}return Object.assign(U,$),U};function eI($,v,U=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(U&&!cU(v))throw Error("invalid output, must be aligned");return v}function Rq($,v,U){xU($),xU(v),bJ(U);let I=new Uint8Array(16),g=fj(I);return g.setBigUint64(0,BigInt(v),U),g.setBigUint64(8,BigInt($),U),I}function cU($){return $.byteOffset%4===0}function oU($){return Uint8Array.from(b$($))}var Kq=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),bj=(()=>Yg(pv(Kq("expand 16-byte k"))))(),mj=(()=>Yg(pv(Kq("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var sI=64,Fj=16,LO=(()=>4294967295)(),uq=Uint32Array.of();function ij($,v,U,I,g,J,G,z){let O=g.length,D=new Uint8Array(sI),X=pv(D),N=zU&&cU(g)&&cU(J),q=N?pv(g):uq,w=N?pv(J):uq;if(!zU){for(let W=0;W<O;G++){if($(v,U,I,X,G,z),Yg(X),G>=LO)throw Error("arx: counter overflow");let Z=Math.min(sI,O-W);for(let r=0,T;r<Z;r++)T=W+r,J[T]=g[T]^D[r];W+=Z}return}for(let W=0;W<O;G++){if($(v,U,I,X,G,z),G>=LO)throw Error("arx: counter overflow");let Z=Math.min(sI,O-W);if(N&&Z===sI){let r=W/4;if(W%4!==0)throw Error("arx: invalid block position");for(let T=0,u;T<Fj;T++)u=r+T,w[u]=q[u]^X[T];W+=sI;continue}for(let r=0,T;r<Z;r++)T=W+r,J[T]=g[T]^D[r];W+=Z}}function Tq($,v){let{allowShortKeys:U,extendNonceFn:I,counterLength:g,counterRight:J,rounds:G}=Vq({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return xU(g),xU(G),bJ(J),bJ(U),(z,O,D,X,N=0)=>{b$(z,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let q=D.length;if(X=eI(q,X,!1),xU(N),N<0||N>=LO)throw Error("arx: counter overflow");let w=[],W=z.length,Z,r;if(W===32)w.push(Z=oU(z)),r=mj;else if(W===16&&U)Z=new Uint8Array(32),Z.set(z),Z.set(z,16),r=bj,w.push(Z);else throw b$(z,32,"arx key"),Error("invalid key size");if(!zU||!cU(O))w.push(O=oU(O));let T=pv(Z);if(I){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(zU)I(r,T,pv(L),T);else{let i=Yg(Uint32Array.from(r));I(i,T,pv(L),T),bv(i),Yg(T)}O=O.subarray(16)}else if(!zU)Yg(T);let u=16-g;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,w.push(O)}let _=Yg(pv(O));try{return ij($,r,T,_,D,X,N,G),X}finally{bv(...w)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class Hq{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=oU(b$($,32,"key"));let v=y$($,0),U=y$($,2),I=y$($,4),g=y$($,6),J=y$($,8),G=y$($,10),z=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|U<<3)&8191,this.r[2]=(U>>>10|I<<6)&7939,this.r[3]=(I>>>7|g<<9)&8191,this.r[4]=(g>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|G<<2)&8191,this.r[7]=(G>>>11|z<<5)&8065,this.r[8]=(z>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,U=!1){let I=U?0:2048,{h:g,r:J}=this,G=J[0],z=J[1],O=J[2],D=J[3],X=J[4],N=J[5],q=J[6],w=J[7],W=J[8],Z=J[9],r=y$($,v+0),T=y$($,v+2),u=y$($,v+4),_=y$($,v+6),L=y$($,v+8),i=y$($,v+10),y=y$($,v+12),d=y$($,v+14),n=g[0]+(r&8191),b=g[1]+((r>>>13|T<<3)&8191),v$=g[2]+((T>>>10|u<<6)&8191),S=g[3]+((u>>>7|_<<9)&8191),K=g[4]+((_>>>4|L<<12)&8191),k=g[5]+(L>>>1&8191),V=g[6]+((L>>>14|i<<2)&8191),M=g[7]+((i>>>11|y<<5)&8191),j=g[8]+((y>>>8|d<<8)&8191),A=g[9]+(d>>>5|I),R=0,E=R+n*G+b*(5*Z)+v$*(5*W)+S*(5*w)+K*(5*q);R=E>>>13,E&=8191,E+=k*(5*N)+V*(5*X)+M*(5*D)+j*(5*O)+A*(5*z),R+=E>>>13,E&=8191;let C=R+n*z+b*G+v$*(5*Z)+S*(5*W)+K*(5*w);R=C>>>13,C&=8191,C+=k*(5*q)+V*(5*N)+M*(5*X)+j*(5*D)+A*(5*O),R+=C>>>13,C&=8191;let x=R+n*O+b*z+v$*G+S*(5*Z)+K*(5*W);R=x>>>13,x&=8191,x+=k*(5*w)+V*(5*q)+M*(5*N)+j*(5*X)+A*(5*D),R+=x>>>13,x&=8191;let e=R+n*D+b*O+v$*z+S*G+K*(5*Z);R=e>>>13,e&=8191,e+=k*(5*W)+V*(5*w)+M*(5*q)+j*(5*N)+A*(5*X),R+=e>>>13,e&=8191;let J$=R+n*X+b*D+v$*O+S*z+K*G;R=J$>>>13,J$&=8191,J$+=k*(5*Z)+V*(5*W)+M*(5*w)+j*(5*q)+A*(5*N),R+=J$>>>13,J$&=8191;let z$=R+n*N+b*X+v$*D+S*O+K*z;R=z$>>>13,z$&=8191,z$+=k*G+V*(5*Z)+M*(5*W)+j*(5*w)+A*(5*q),R+=z$>>>13,z$&=8191;let Q$=R+n*q+b*N+v$*X+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=k*z+V*G+M*(5*Z)+j*(5*W)+A*(5*w),R+=Q$>>>13,Q$&=8191;let w$=R+n*w+b*q+v$*N+S*X+K*D;R=w$>>>13,w$&=8191,w$+=k*O+V*z+M*G+j*(5*Z)+A*(5*W),R+=w$>>>13,w$&=8191;let X$=R+n*W+b*w+v$*q+S*N+K*X;R=X$>>>13,X$&=8191,X$+=k*D+V*O+M*z+j*G+A*(5*Z),R+=X$>>>13,X$&=8191;let N$=R+n*Z+b*W+v$*w+S*q+K*N;R=N$>>>13,N$&=8191,N$+=k*X+V*D+M*O+j*z+A*G,R+=N$>>>13,N$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,C+=R,g[0]=E,g[1]=C,g[2]=x,g[3]=e,g[4]=J$,g[5]=z$,g[6]=Q$,g[7]=w$,g[8]=X$,g[9]=N$}finalize(){let{h:$,pad:v}=this,U=new Uint16Array(10),I=$[1]>>>13;$[1]&=8191;for(let G=2;G<10;G++)$[G]+=I,I=$[G]>>>13,$[G]&=8191;$[0]+=I*5,I=$[0]>>>13,$[0]&=8191,$[1]+=I,I=$[1]>>>13,$[1]&=8191,$[2]+=I,U[0]=$[0]+5,I=U[0]>>>13,U[0]&=8191;for(let G=1;G<10;G++)U[G]=$[G]+I,I=U[G]>>>13,U[G]&=8191;U[9]-=8192;let g=(I^1)-1;for(let G=0;G<10;G++)U[G]&=g;g=~g;for(let G=0;G<10;G++)$[G]=$[G]&g|U[G];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let G=1;G<8;G++)J=($[G]+v[G]|0)+(J>>>16)|0,$[G]=J&65535;bv(U)}update($){CO(this),b$($),$=oU($);let{buffer:v,blockLen:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(U-this.pos,I-g);if(J===U){for(;U<=I-g;g+=U)this.process($,g);continue}if(v.set($.subarray(g,g+J),this.pos),this.pos+=J,g+=J,this.pos===U)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){CO(this),rq($,this),this.finished=!0;let{buffer:v,h:U}=this,{pos:I}=this;if(I){v[I++]=1;for(;I<16;I++)v[I]=0;this.process(v,0,!0)}this.finalize();let g=0;for(let J=0;J<8;J++)$[g++]=U[J]>>>0,$[g++]=U[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}}var Aq=jq(32,($)=>new Hq($));function xj($,v,U,I,g,J=20){let G=$[0],z=$[1],O=$[2],D=$[3],X=v[0],N=v[1],q=v[2],w=v[3],W=v[4],Z=v[5],r=v[6],T=v[7],u=g,_=U[0],L=U[1],i=U[2],y=G,d=z,n=O,b=D,v$=X,S=N,K=q,k=w,V=W,M=Z,j=r,A=T,R=u,E=_,C=L,x=i;for(let J$=0;J$<J;J$+=2)y=y+v$|0,R=u$(R^y,16),V=V+R|0,v$=u$(v$^V,12),y=y+v$|0,R=u$(R^y,8),V=V+R|0,v$=u$(v$^V,7),d=d+S|0,E=u$(E^d,16),M=M+E|0,S=u$(S^M,12),d=d+S|0,E=u$(E^d,8),M=M+E|0,S=u$(S^M,7),n=n+K|0,C=u$(C^n,16),j=j+C|0,K=u$(K^j,12),n=n+K|0,C=u$(C^n,8),j=j+C|0,K=u$(K^j,7),b=b+k|0,x=u$(x^b,16),A=A+x|0,k=u$(k^A,12),b=b+k|0,x=u$(x^b,8),A=A+x|0,k=u$(k^A,7),y=y+S|0,x=u$(x^y,16),j=j+x|0,S=u$(S^j,12),y=y+S|0,x=u$(x^y,8),j=j+x|0,S=u$(S^j,7),d=d+K|0,R=u$(R^d,16),A=A+R|0,K=u$(K^A,12),d=d+K|0,R=u$(R^d,8),A=A+R|0,K=u$(K^A,7),n=n+k|0,E=u$(E^n,16),V=V+E|0,k=u$(k^V,12),n=n+k|0,E=u$(E^n,8),V=V+E|0,k=u$(k^V,7),b=b+v$|0,C=u$(C^b,16),M=M+C|0,v$=u$(v$^M,12),b=b+v$|0,C=u$(C^b,8),M=M+C|0,v$=u$(v$^M,7);let e=0;I[e++]=G+y|0,I[e++]=z+d|0,I[e++]=O+n|0,I[e++]=D+b|0,I[e++]=X+v$|0,I[e++]=N+S|0,I[e++]=q+K|0,I[e++]=w+k|0,I[e++]=W+V|0,I[e++]=Z+M|0,I[e++]=r+j|0,I[e++]=T+A|0,I[e++]=u+R|0,I[e++]=_+E|0,I[e++]=L+C|0,I[e++]=i+x|0}var cj=Tq(xj,{counterRight:!1,counterLength:4,allowShortKeys:!1});var oj=new Uint8Array(16),Sq=($,v)=>{$.update(v);let U=v.length%16;if(U)$.update(oj.subarray(U))},yj=new Uint8Array(32);function kq($,v,U,I,g){if(g!==void 0)b$(g,void 0,"AAD");let J=$(v,U,yj),G=Rq(I.length,g?g.length:0,!0),z=Aq.create(J);if(g)Sq(z,g);Sq(z,I),z.update(G);let O=z.digest();return bv(J,G),O}var lj=($)=>(v,U,I)=>{return{encrypt(J,G){let z=J.length;G=eI(z+16,G,!1),G.set(J);let O=G.subarray(0,-16);$(v,U,O,O,1);let D=kq($,v,U,O,I);return G.set(D,z),bv(D),G},decrypt(J,G){G=eI(J.length-16,G,!1);let z=J.subarray(0,-16),O=J.subarray(-16),D=kq($,v,U,z,I);if(!Zq(O,D))throw bv(D),Error("invalid tag");return G.set(J.subarray(0,-16)),$(v,U,G,G,1),bv(D),G}}},Ev=Mq({blockSize:64,nonceLength:12,tagLength:16},lj(cj));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function yU($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw Error(`${U}expected integer >= 0, got ${$}`)}}function Y$($,v,U=""){let I=yU($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let G=U&&`"${U}" `,z=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`;throw Error(G+"expected Uint8Array"+z+", got "+O)}return $}function Bv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function rg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function mJ($,v){Y$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw Error('"digestInto() output" expected to be of length >='+U)}function FJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function mv($,v){return $<<32-v|$>>>v}var dj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pj($){for(let v=0;v<$.length;v++)$[v]=hj($[v]);return $}var fO=dj?($)=>$:pj,Eq=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function OU($){if(Y$($),Eq)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=tj[$[U]];return v}var Wg={_0:48,_9:57,A:65,F:70,a:97,f:102};function Pq($){if($>=Wg._0&&$<=Wg._9)return $-Wg._0;if($>=Wg.A&&$<=Wg.F)return $-(Wg.A-10);if($>=Wg.a&&$<=Wg.f)return $-(Wg.a-10);return}function DU($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(Eq)return Uint8Array.fromHex($);let v=$.length,U=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let G=Pq($.charCodeAt(J)),z=Pq($.charCodeAt(J+1));if(G===void 0||z===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=G*16+z}return I}function n$(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];Y$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function lU($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function fg($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var _g=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nO=BigInt(0),_O=BigInt(1);function $0($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw Error(U+"expected boolean, got type="+typeof $)}return $}function Bq($){if(typeof $==="bigint"){if(!xJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function v0($){let v=Bq($).toString(16);return v.length&1?"0"+v:v}function Cq($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?nO:BigInt("0x"+$)}function ng($){return Cq(OU($))}function bg($){return Cq(OU(cJ(Y$($)).reverse()))}function dU($,v){F$(v),$=Bq($);let U=DU($.toString(16).padStart(v*2,"0"));if(U.length!==v)throw Error("number too large");return U}function g0($,v){return dU($,v).reverse()}function cJ($){return Uint8Array.from($)}function mg($){return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw Error(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var xJ=($)=>typeof $==="bigint"&&nO<=$;function aj($,v,U){return xJ($)&&xJ(v)&&xJ(U)&&v<=$&&$<U}function U0($,v,U,I){if(!aj(v,U,I))throw Error("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function bO($){let v;for(v=0;$>nO;$>>=_O,v+=1);return v}var I0=($)=>(_O<<BigInt($))-_O;function Lq($,v,U){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof U!=="function")throw Error("hmacFn must be a function");let I=(r)=>new Uint8Array(r),g=Uint8Array.of(),J=Uint8Array.of(0),G=Uint8Array.of(1),z=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},q=(...r)=>U(D,n$(O,...r)),w=(r=g)=>{if(D=q(J,r),O=q(),r.length===0)return;D=q(G,r),O=q()},W=()=>{if(X++>=z)throw Error("drbg: tried max amount of iterations");let r=0,T=[];while(r<v){O=q();let u=O.slice();T.push(u),r+=O.length}return n$(...T)};return(r,T)=>{N(),w(r);let u=void 0;while(!(u=T(W())))w();return N(),u}}function QU($,v={},U={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function I(J,G,z){let O=$[J];if(z&&O===void 0)return;let D=typeof O;if(D!==G||O===null)throw Error(`param "${J}" is invalid: expected ${G}, got ${D}`)}let g=(J,G)=>Object.entries(J).forEach(([z,O])=>I(z,O,G));g(v,!1),g(U,!0)}function mO($){let v=new WeakMap;return(U,...I)=>{let g=v.get(U);if(g!==void 0)return g;let J=$(U,...I);return v.set(U,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qv=BigInt(0),gv=BigInt(1),XU=BigInt(2),nq=BigInt(3),bq=BigInt(4),mq=BigInt(5),ej=BigInt(7),Fq=BigInt(8),sj=BigInt(9),iq=BigInt(16);function Dv($,v){let U=$%v;return U>=Qv?U:v+U}function Cv($,v,U){let I=$;while(v-- >Qv)I*=I,I%=U;return I}function fq($,v){if($===Qv)throw Error("invert: expected non-zero number");if(v<=Qv)throw Error("invert: expected positive modulus, got "+v);let U=Dv($,v),I=v,g=Qv,J=gv,G=gv,z=Qv;while(U!==Qv){let D=I/U,X=I%U,N=g-G*D,q=J-z*D;I=U,U=X,g=G,J=z,G=N,z=q}if(I!==gv)throw Error("invert: does not exist");return Dv(g,v)}function FO($,v,U){if(!$.eql($.sqr(v),U))throw Error("Cannot find square root")}function xq($,v){let U=($.ORDER+gv)/bq,I=$.pow(v,U);return FO($,I,v),I}function $M($,v){let U=($.ORDER-mq)/Fq,I=$.mul(v,XU),g=$.pow(I,U),J=$.mul(v,g),G=$.mul($.mul(J,XU),g),z=$.mul(J,$.sub(G,$.ONE));return FO($,z,v),z}function vM($){let v=oJ($),U=cq($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),G=($+ej)/iq;return(z,O)=>{let D=z.pow(O,G),X=z.mul(D,I),N=z.mul(D,g),q=z.mul(D,J),w=z.eql(z.sqr(X),O),W=z.eql(z.sqr(N),O);D=z.cmov(D,X,w),X=z.cmov(q,N,W);let Z=z.eql(z.sqr(X),O),r=z.cmov(D,X,Z);return FO(z,r,O),r}}function cq($){if($<nq)throw Error("sqrt is not defined for small field");let v=$-gv,U=0;while(v%XU===Qv)v/=XU,U++;let I=XU,g=oJ($);while(_q(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return xq;let J=g.pow(I,v),G=(v+gv)/XU;return function(O,D){if(O.is0(D))return D;if(_q(O,D)!==1)throw Error("Cannot find square root");let X=U,N=O.mul(O.ONE,J),q=O.pow(D,v),w=O.pow(D,G);while(!O.eql(q,O.ONE)){if(O.is0(q))return O.ZERO;let W=1,Z=O.sqr(q);while(!O.eql(Z,O.ONE))if(W++,Z=O.sqr(Z),W===X)throw Error("Cannot find square root");let r=gv<<BigInt(X-W-1),T=O.pow(N,r);X=W,N=O.sqr(T),q=O.mul(q,N),w=O.mul(w,T)}return w}}function gM($){if($%bq===nq)return xq;if($%Fq===mq)return $M;if($%iq===sj)return vM($);return cq($)}var UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function iO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=UM.reduce((I,g)=>{return I[g]="function",I},v);return QU($,U),$}function IM($,v,U){if(U<Qv)throw Error("invalid exponent, negatives unsupported");if(U===Qv)return $.ONE;if(U===gv)return v;let I=$.ONE,g=v;while(U>Qv){if(U&gv)I=$.mul(I,g);g=$.sqr(g),U>>=gv}return I}function J0($,v,U=!1){let I=Array(v.length).fill(U?$.ZERO:void 0),g=v.reduce((G,z,O)=>{if($.is0(z))return G;return I[O]=G,$.mul(G,z)},$.ONE),J=$.inv(g);return v.reduceRight((G,z,O)=>{if($.is0(z))return G;return I[O]=$.mul(G,I[O]),$.mul(G,z)},J),I}function _q($,v){let U=($.ORDER-gv)/XU,I=$.pow(v,U),g=$.eql(I,$.ONE),J=$.eql(I,$.ZERO),G=$.eql(I,$.neg($.ONE));if(!g&&!J&&!G)throw Error("invalid Legendre symbol result");return g?1:J?0:-1}function JM($,v){if(v!==void 0)F$(v);let U=v!==void 0?v:$.toString(2).length,I=Math.ceil(U/8);return{nBitLength:U,nByteLength:I}}class oq{ORDER;BITS;BYTES;isLE;ZERO=Qv;ONE=gv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Qv)throw Error("invalid field: expected ORDER > 0, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=JM($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Dv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Qv<=$&&$<this.ORDER}is0($){return $===Qv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&gv)===gv}neg($){return Dv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Dv($*$,this.ORDER)}add($,v){return Dv($+v,this.ORDER)}sub($,v){return Dv($-v,this.ORDER)}mul($,v){return Dv($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return Dv($*fq(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fq($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=gM(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g0($,this.BYTES):dU($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:G}=this;if(U){if(!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let z=g?bg($):ng($);if(G)z=Dv(z,J);if(!v){if(!this.isValid(z))throw Error("invalid field element: outside of range 0..ORDER")}return z}invertBatch($){return J0(this,$)}cmov($,v,U){return U?v:$}}function oJ($,v={}){return new oq($,v)}function yq($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function xO($){let v=yq($);return v+Math.ceil(v/2)}function lq($,v,U=!1){Y$($);let I=$.length,g=yq(v),J=xO(v);if(I<16||I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let G=U?bg($):ng($),z=Dv(G,v-gv)+gv;return U?g0(z,g):dU(z,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hU=BigInt(0),NU=BigInt(1);function G0($,v){let U=v.negate();return $?U:v}function lO($,v){let U=J0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function tq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function cO($,v){tq($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=I0($),G=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:G}}function dq($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:G}=U,z=Number($&g),O=$>>G;if(z>I)z-=J,O+=NU;let D=v*I,X=D+Math.abs(z)-1,N=z===0,q=z<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:q,isNegF:w,offsetF:D}}var oO=new WeakMap,aq=new WeakMap;function yO($){return aq.get($)||1}function hq($){if($!==hU)throw Error("invalid wNAF")}class dO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>hU){if(v&NU)U=U.add(I);I=I.double(),v>>=NU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=cO(v,this.bits),g=[],J=$,G=J;for(let z=0;z<U;z++){G=J,g.push(G);for(let O=1;O<I;O++)G=G.add(J),g.push(G);J=G.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=cO($,this.bits);for(let G=0;G<J.windows;G++){let{nextN:z,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:q}=dq(U,G,J);if(U=z,D)g=g.add(G0(N,v[q]));else I=I.add(G0(X,v[O]))}return hq(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=cO($,this.bits);for(let J=0;J<g.windows;J++){if(U===hU)break;let{nextN:G,offset:z,isZero:O,isNeg:D}=dq(U,J,g);if(U=G,O)continue;else{let X=v[z];I=I.add(D?X.negate():X)}}return hq(U),I}getPrecomputes($,v,U){let I=oO.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);oO.set(v,I)}}return I}cached($,v,U){let I=yO($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=yO($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){tq(v,this.bits),aq.set($,v),oO.delete($)}hasCache($){return yO($)!==1}}function eq($,v,U,I){let g=v,J=$.ZERO,G=$.ZERO;while(U>hU||I>hU){if(U&NU)J=J.add(g);if(I&NU)G=G.add(g);g=g.double(),U>>=NU,I>>=NU}return{p1:J,p2:G}}function pq($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return iO(v),v}else return oJ($,{isLE:U})}function sq($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>hU))throw Error(`CURVE.${O} must be positive bigint`)}let g=pq(v.p,U.Fp,I),J=pq(v.n,U.Fn,I),z=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of z)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function yJ($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var z0=BigInt(0),pU=BigInt(1),lJ=BigInt(2);function GM($){return QU($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function $Y($){let v=GM($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:G}=v,z=I==="x25519";if(!z&&I!=="x448")throw Error("invalid type");let O=G||fg,D=z?255:448,X=z?32:56,N=z?BigInt(9):BigInt(5),q=z?BigInt(121665):BigInt(39081),w=z?lJ**BigInt(254):lJ**BigInt(447),W=z?BigInt(8)*lJ**BigInt(251)-pU:BigInt(4)*lJ**BigInt(445)-pU,Z=w+W+pU,r=(V)=>Dv(V,U),T=u(N);function u(V){return g0(r(V),X)}function _(V){let M=cJ(Y$(V,X,"uCoordinate"));if(z)M[31]&=127;return r(bg(M))}function L(V){return bg(g(cJ(Y$(V,X,"scalar"))))}function i(V,M){let j=v$(_(M),L(V));if(j===z0)throw Error("invalid private or public key received");return u(j)}function y(V){return i(V,T)}let d=y,n=i;function b(V,M,j){let A=r(V*(M-j));return M=r(M-A),j=r(j+A),{x_2:M,x_3:j}}function v$(V,M){U0("u",V,z0,U),U0("scalar",M,w,Z);let j=M,A=V,R=pU,E=z0,C=V,x=pU,e=z0;for(let z$=BigInt(D-1);z$>=z0;z$--){let Q$=j>>z$&pU;e^=Q$,{x_2:R,x_3:C}=b(e,R,C),{x_2:E,x_3:x}=b(e,E,x),e=Q$;let w$=R+E,X$=r(w$*w$),N$=R-E,r$=r(N$*N$),k$=X$-r$,E$=C+x,a$=C-x,e$=r(a$*w$),rv=r(E$*N$),ov=e$+rv,yv=e$-rv;C=r(ov*ov),x=r(A*r(yv*yv)),R=r(X$*r$),E=r(k$*(X$+r(q*k$)))}({x_2:R,x_3:C}=b(e,R,C)),{x_2:E,x_3:x}=b(e,E,x);let J$=J(E);return r(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V=O(X))=>{return Y$(V,S.seed,"seed"),V},k={randomSecretKey:K};return Object.freeze({keygen:yJ(K,d),getSharedSecret:n,getPublicKey:d,scalarMult:i,scalarMultBase:y,utils:k,GuBytes:T.slice(),lengths:S})}class hO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Bv($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Vv(I)}update($){return rg(this),this.iHash.update($),this}digestInto($){rg(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:G}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=G,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tU=($,v,U)=>new hO($,v).update(U).digest();tU.create=($,v)=>new hO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vY=($,v)=>($+($>=0?v:-v)/UY)/v;function zM($,v,U){let[[I,g],[J,G]]=v,z=vY(G*$,U),O=vY(-g*$,U),D=$-z*I-O*J,X=-z*g-O*G,N=D<Vg,q=X<Vg;if(N)D=-D;if(q)X=-X;let w=I0(Math.ceil(bO(U)/2))+aU;if(D<Vg||D>=w||X<Vg||X>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:N,k1:D,k2neg:q,k2:X}}function tO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pO($,v){let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if($0(U.lowS,"lowS"),$0(U.prehash,"prehash"),U.format!==void 0)tO(U.format);return U}class gY extends Error{constructor($=""){super($)}}var Fg={Err:gY,_tlv:{encode:($,v)=>{let{Err:U}=Fg;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=v0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?v0(g.length/2|128):"";return v0($)+J+g+v},decode($,v){let{Err:U}=Fg,I=0;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),G=0;if(!J)G=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)G=G<<8|X;if(I+=O,G<128)throw new U("tlv.decode(long): not minimal encoding")}let z=v.subarray(I,I+G);if(z.length!==G)throw new U("tlv.decode: wrong value length");return{v:z,l:v.subarray(I+G)}}},_int:{encode($){let{Err:v}=Fg;if($<Vg)throw new v("integer: negative integers are not allowed");let U=v0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=Fg;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ng($)}},toSig($){let{Err:v,_int:U,_tlv:I}=Fg,g=Y$($,void 0,"signature"),{v:J,l:G}=I.decode(48,g);if(G.length)throw new v("invalid signature: left bytes after parsing");let{v:z,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(z),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=Fg,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}},Vg=BigInt(0),aU=BigInt(1),UY=BigInt(2),dJ=BigInt(3),OM=BigInt(4);function aO($,v={}){let U=sq("weierstrass",$,v),{Fp:I,Fn:g}=U,J=U.CURVE,{h:G,n:z}=J;QU(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=JY(I,g);function X(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(K,k,V){let{x:M,y:j}=k.toAffine(),A=I.toBytes(M);if($0(V,"isCompressed"),V){X();let R=!I.isOdd(j);return n$(IY(R),A)}else return n$(Uint8Array.of(4),A,I.toBytes(j))}function q(K){Y$(K,void 0,"Point");let{publicKey:k,publicKeyUncompressed:V}=D,M=K.length,j=K[0],A=K.subarray(1);if(M===k&&(j===2||j===3)){let R=I.fromBytes(A);if(!I.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=Z(R),C;try{C=I.sqrt(E)}catch(J$){let z$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+z$)}X();let x=I.isOdd(C);if((j&1)===1!==x)C=I.neg(C);return{x:R,y:C}}else if(M===V&&j===4){let R=I.BYTES,E=I.fromBytes(A.subarray(0,R)),C=I.fromBytes(A.subarray(R,R*2));if(!r(E,C))throw Error("bad point: is not on curve");return{x:E,y:C}}else throw Error(`bad point: got length ${M}, expected compressed=${k} or uncompressed=${V}`)}let w=v.toBytes||N,W=v.fromBytes||q;function Z(K){let k=I.sqr(K),V=I.mul(k,K);return I.add(I.add(V,I.mul(K,J.a)),J.b)}function r(K,k){let V=I.sqr(k),M=Z(K);return I.eql(V,M)}if(!r(J.Gx,J.Gy))throw Error("bad curve params: generator point");let T=I.mul(I.pow(J.a,dJ),OM),u=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(T,u)))throw Error("bad curve params: a or b");function _(K,k,V=!1){if(!I.isValid(k)||V&&I.is0(k))throw Error(`bad point coordinate ${K}`);return k}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return zM(K,O.basises,g.ORDER)}let y=mO((K,k)=>{let{X:V,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:V,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(V,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),d=mO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!I.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:k,y:V}=K.toAffine();if(!I.isValid(k)||!I.isValid(V))throw Error("bad point: x or y not field elements");if(!r(k,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function n(K,k,V,M,j){return V=new b(I.mul(V.X,K),V.Y,V.Z),k=G0(M,k),V=G0(j,V),k.add(V)}class b{static BASE=new b(J.Gx,J.Gy,I.ONE);static ZERO=new b(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(K,k,V){this.X=_("x",K),this.Y=_("y",k,!0),this.Z=_("z",V),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:k,y:V}=K||{};if(!K||!I.isValid(k)||!I.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(I.is0(k)&&I.is0(V))return b.ZERO;return new b(k,V,I.ONE)}static fromBytes(K){let k=b.fromAffine(W(Y$(K,void 0,"point")));return k.assertValidity(),k}static fromHex(K){return b.fromBytes(DU(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,k=!0){if(S.createCache(this,K),!k)this.multiply(dJ);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(K)}equals(K){L(K);let{X:k,Y:V,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.eql(I.mul(k,R),I.mul(j,M)),C=I.eql(I.mul(V,R),I.mul(A,M));return E&&C}negate(){return new b(this.X,I.neg(this.Y),this.Z)}double(){let{a:K,b:k}=J,V=I.mul(k,dJ),{X:M,Y:j,Z:A}=this,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=I.mul(M,M),e=I.mul(j,j),J$=I.mul(A,A),z$=I.mul(M,j);return z$=I.add(z$,z$),C=I.mul(M,A),C=I.add(C,C),R=I.mul(K,C),E=I.mul(V,J$),E=I.add(R,E),R=I.sub(e,E),E=I.add(e,E),E=I.mul(R,E),R=I.mul(z$,R),C=I.mul(V,C),J$=I.mul(K,J$),z$=I.sub(x,J$),z$=I.mul(K,z$),z$=I.add(z$,C),C=I.add(x,x),x=I.add(C,x),x=I.add(x,J$),x=I.mul(x,z$),E=I.add(E,x),J$=I.mul(j,A),J$=I.add(J$,J$),x=I.mul(J$,z$),R=I.sub(R,x),C=I.mul(J$,e),C=I.add(C,C),C=I.add(C,C),new b(R,E,C)}add(K){L(K);let{X:k,Y:V,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.ZERO,C=I.ZERO,x=I.ZERO,e=J.a,J$=I.mul(J.b,dJ),z$=I.mul(k,j),Q$=I.mul(V,A),w$=I.mul(M,R),X$=I.add(k,V),N$=I.add(j,A);X$=I.mul(X$,N$),N$=I.add(z$,Q$),X$=I.sub(X$,N$),N$=I.add(k,M);let r$=I.add(j,R);return N$=I.mul(N$,r$),r$=I.add(z$,w$),N$=I.sub(N$,r$),r$=I.add(V,M),E=I.add(A,R),r$=I.mul(r$,E),E=I.add(Q$,w$),r$=I.sub(r$,E),x=I.mul(e,N$),E=I.mul(J$,w$),x=I.add(E,x),E=I.sub(Q$,x),x=I.add(Q$,x),C=I.mul(E,x),Q$=I.add(z$,z$),Q$=I.add(Q$,z$),w$=I.mul(e,w$),N$=I.mul(J$,N$),Q$=I.add(Q$,w$),w$=I.sub(z$,w$),w$=I.mul(e,w$),N$=I.add(N$,w$),z$=I.mul(Q$,N$),C=I.add(C,z$),z$=I.mul(r$,N$),E=I.mul(X$,E),E=I.sub(E,z$),z$=I.mul(X$,Q$),x=I.mul(r$,x),x=I.add(x,z$),new b(E,C,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:k}=v;if(!g.isValidNot0(K))throw Error("invalid scalar: out of range");let V,M,j=(A)=>S.cached(this,A,(R)=>lO(b,R));if(k){let{k1neg:A,k1:R,k2neg:E,k2:C}=i(K),{p:x,f:e}=j(R),{p:J$,f:z$}=j(C);M=e.add(z$),V=n(k.beta,x,J$,A,E)}else{let{p:A,f:R}=j(K);V=A,M=R}return lO(b,[V,M])[0]}multiplyUnsafe(K){let{endo:k}=v,V=this;if(!g.isValid(K))throw Error("invalid scalar: out of range");if(K===Vg||V.is0())return b.ZERO;if(K===aU)return V;if(S.hasCache(this))return this.multiply(K);if(k){let{k1neg:M,k1:j,k2neg:A,k2:R}=i(K),{p1:E,p2:C}=eq(b,V,j,R);return n(k.beta,E,C,M,A)}else return S.unsafe(V,K)}toAffine(K){return y(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(G===aU)return!0;if(K)return K(b,this);return S.unsafe(this,z).is0()}clearCofactor(){let{clearCofactor:K}=v;if(G===aU)return this;if(K)return K(b,this);return this.multiplyUnsafe(G)}isSmallOrder(){return this.multiplyUnsafe(G).is0()}toBytes(K=!0){return $0(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return OU(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=g.BITS,S=new dO(b,v.endo?Math.ceil(v$/2):v$);return b.BASE.precompute(8),b}function IY($){return Uint8Array.of($?2:3)}function JY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:U}=$,I=v.randomBytes||fg,g=Object.assign(JY($.Fp,U),{seed:xO(U.ORDER)});function J(w){try{let W=U.fromBytes(w);return U.isValidNot0(W)}catch(W){return!1}}function G(w,W){let{publicKey:Z,publicKeyUncompressed:r}=g;try{let T=w.length;if(W===!0&&T!==Z)return!1;if(W===!1&&T!==r)return!1;return!!$.fromBytes(w)}catch(T){return!1}}function z(w=I(g.seed)){return lq(Y$(w,g.seed,"seed"),U.ORDER)}function O(w,W=!0){return $.BASE.multiply(U.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:Z,publicKeyUncompressed:r}=g;if(!yU(w))return;if("_lengths"in U&&U._lengths||W===Z)return;let T=Y$(w,void 0,"key").length;return T===Z||T===r}function X(w,W,Z=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let r=U.fromBytes(w);return $.fromBytes(W).multiply(r).toBytes(Z)}let N={isValidSecretKey:J,isValidPublicKey:G,randomSecretKey:z},q=yJ(z,O);return Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:q,Point:$,utils:N,lengths:g})}function eO($,v,U={}){Bv(v),QU(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let I=U.randomBytes||fg,g=U.hmac||((V,M)=>tU(v,V,M)),{Fp:J,Fn:G}=$,{ORDER:z,BITS:O}=G,{keygen:D,getPublicKey:X,getSharedSecret:N,utils:q,lengths:w}=DM($,U),W={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},Z=z*UY<J.ORDER;function r(V){let M=z>>aU;return V>M}function T(V,M){if(!G.isValidNot0(M))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return M}function u(){if(Z)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(V,M){tO(M);let j=w.signature,A=M==="compact"?j:M==="recovered"?j+1:void 0;return Y$(V,A)}class L{r;s;recovery;constructor(V,M,j){if(this.r=T("r",V),this.s=T("s",M),j!=null){if(u(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(V,M=W.format){_(V,M);let j;if(M==="der"){let{r:C,s:x}=Fg.toSig(Y$(V));return new L(C,x)}if(M==="recovered")j=V[0],M="compact",V=V.subarray(1);let A=w.signature/2,R=V.subarray(0,A),E=V.subarray(A,A*2);return new L(G.fromBytes(R),G.fromBytes(E),j)}static fromHex(V,M){return this.fromBytes(DU(V),M)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new L(this.r,this.s,V)}recoverPublicKey(V){let{r:M,s:j}=this,A=this.assertRecovery(),R=A===2||A===3?M+z:M;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),C=$.fromBytes(n$(IY((A&1)===0),E)),x=G.inv(R),e=y(Y$(V,void 0,"msgHash")),J$=G.create(-e*x),z$=G.create(j*x),Q$=$.BASE.multiplyUnsafe(J$).add(C.multiplyUnsafe(z$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return r(this.s)}toBytes(V=W.format){if(tO(V),V==="der")return DU(Fg.hexFromSig(this));let{r:M,s:j}=this,A=G.toBytes(M),R=G.toBytes(j);if(V==="recovered")return u(),n$(Uint8Array.of(this.assertRecovery()),A,R);return n$(A,R)}toHex(V){return OU(this.toBytes(V))}}let i=U.bits2int||function(M){if(M.length>8192)throw Error("input is too large");let j=ng(M),A=M.length*8-O;return A>0?j>>BigInt(A):j},y=U.bits2int_modN||function(M){return G.create(i(M))},d=I0(O);function n(V){return U0("num < 2^"+O,V,Vg,d),G.toBytes(V)}function b(V,M){return Y$(V,void 0,"message"),M?Y$(v(V),void 0,"prehashed message"):V}function v$(V,M,j){let{lowS:A,prehash:R,extraEntropy:E}=pO(j,W);V=b(V,R);let C=y(V),x=G.fromBytes(M);if(!G.isValidNot0(x))throw Error("invalid private key");let e=[n(x),n(C)];if(E!=null&&E!==!1){let w$=E===!0?I(w.secretKey):E;e.push(Y$(w$,void 0,"extraEntropy"))}let J$=n$(...e),z$=C;function Q$(w$){let X$=i(w$);if(!G.isValidNot0(X$))return;let N$=G.inv(X$),r$=$.BASE.multiply(X$).toAffine(),k$=G.create(r$.x);if(k$===Vg)return;let E$=G.create(N$*G.create(z$+k$*x));if(E$===Vg)return;let a$=(r$.x===k$?0:2)|Number(r$.y&aU),e$=E$;if(A&&r(E$))e$=G.neg(E$),a$^=1;return new L(k$,e$,Z?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(V,M,j={}){let{seed:A,k2sig:R}=v$(V,M,j);return Lq(v.outputLen,G.BYTES,g)(A,R).toBytes(j.format)}function K(V,M,j,A={}){let{lowS:R,prehash:E,format:C}=pO(A,W);if(j=Y$(j,void 0,"publicKey"),M=b(M,E),!yU(V)){let x=V instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(V,C);try{let x=L.fromBytes(V,C),e=$.fromBytes(j);if(R&&x.hasHighS())return!1;let{r:J$,s:z$}=x,Q$=y(M),w$=G.inv(z$),X$=G.create(Q$*w$),N$=G.create(J$*w$),r$=$.BASE.multiplyUnsafe(X$).add(e.multiplyUnsafe(N$));if(r$.is0())return!1;return G.create(r$.x)===J$}catch(x){return!1}}function k(V,M,j={}){let{prehash:A}=pO(j,W);return M=b(M,A),L.fromBytes(V,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:D,getPublicKey:X,getSharedSecret:N,utils:q,lengths:w,Point:$,sign:S,verify:K,recoverPublicKey:k,Signature:L,hash:v})}function GY($,v,U){return $&v^~$&U}function zY($,v,U){return $&v^$&U^v&U}class hJ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iJ(this.buffer)}update($){rg(this),Y$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let G=Math.min(I-this.pos,g-J);if(G===I){let z=iJ($);for(;I<=g-J;J+=I)this.process(z,J);continue}if(U.set($.subarray(J,J+G),this.pos),this.pos+=G,J+=G,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){rg(this),mJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Vv(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let G=iJ($),z=this.outputLen;if(z%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=z/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)G.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:G}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=G,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Zg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),jg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var pJ=BigInt(4294967295),OY=BigInt(32);function QM($,v=!1){if(v)return{h:Number($&pJ),l:Number($>>OY&pJ)};return{h:Number($>>OY&pJ)|0,l:Number($&pJ)|0}}function tJ($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:G,l:z}=QM($[J],v);[I[J],g[J]]=[G,z]}return[I,g]}var sO=($,v,U)=>$>>>U,$8=($,v,U)=>$<<32-U|v>>>U,wU=($,v,U)=>$>>>U|v<<32-U,qU=($,v,U)=>$<<32-U|v>>>U,O0=($,v,U)=>$<<64-U|v>>>U-32,D0=($,v,U)=>$>>>U-32|v<<64-U;var DY=($,v,U)=>$<<U|v>>>32-U,QY=($,v,U)=>v<<U|$>>>32-U,XY=($,v,U)=>v<<U-32|$>>>64-U,NY=($,v,U)=>$<<U-32|v>>>64-U;function tv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var wY=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),qY=($,v,U,I)=>v+U+I+($/4294967296|0)|0,YY=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),WY=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,rY=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),VY=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var NM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ig=new Uint32Array(64);class v8 extends hJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G,H:z}=this;return[$,v,U,I,g,J,G,z]}set($,v,U,I,g,J,G,z){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=G|0,this.H=z|0}process($,v){for(let X=0;X<16;X++,v+=4)ig[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=ig[X-15],q=ig[X-2],w=mv(N,7)^mv(N,18)^N>>>3,W=mv(q,17)^mv(q,19)^q>>>10;ig[X]=W+ig[X-7]+w+ig[X-16]|0}let{A:U,B:I,C:g,D:J,E:G,F:z,G:O,H:D}=this;for(let X=0;X<64;X++){let N=mv(G,6)^mv(G,11)^mv(G,25),q=D+N+GY(G,z,O)+NM[X]+ig[X]|0,W=(mv(U,2)^mv(U,13)^mv(U,22))+zY(U,I,g)|0;D=O,O=z,z=G,G=J+q|0,J=g,g=I,I=U,U=q+W|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,G=G+this.E|0,z=z+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,G,z,O,D)}roundClean(){Vv(ig)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class ZY extends v8{A=Zg[0]|0;B=Zg[1]|0;C=Zg[2]|0;D=Zg[3]|0;E=Zg[4]|0;F=Zg[5]|0;G=Zg[6]|0;H=Zg[7]|0;constructor(){super(32)}}class wM extends v8{A=jg[0]|0;B=jg[1]|0;C=jg[2]|0;D=jg[3]|0;E=jg[4]|0;F=jg[5]|0;G=jg[6]|0;H=jg[7]|0;constructor(){super(28)}}var jY=(()=>tJ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),qM=(()=>jY[0])(),YM=(()=>jY[1])(),xg=new Uint32Array(80),cg=new Uint32Array(80);class Q0 extends hJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:G,Dl:z,Eh:O,El:D,Fh:X,Fl:N,Gh:q,Gl:w,Hh:W,Hl:Z}=this;return[$,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z]}set($,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=G|0,this.Dl=z|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=q|0,this.Gl=w|0,this.Hh=W|0,this.Hl=Z|0}process($,v){for(let u=0;u<16;u++,v+=4)xg[u]=$.getUint32(v),cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=xg[u-15]|0,L=cg[u-15]|0,i=wU(_,L,1)^wU(_,L,8)^sO(_,L,7),y=qU(_,L,1)^qU(_,L,8)^$8(_,L,7),d=xg[u-2]|0,n=cg[u-2]|0,b=wU(d,n,19)^O0(d,n,61)^sO(d,n,6),v$=qU(d,n,19)^D0(d,n,61)^$8(d,n,6),S=YY(y,v$,cg[u-7],cg[u-16]),K=WY(S,i,b,xg[u-7],xg[u-16]);xg[u]=K|0,cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:G,Cl:z,Dh:O,Dl:D,Eh:X,El:N,Fh:q,Fl:w,Gh:W,Gl:Z,Hh:r,Hl:T}=this;for(let u=0;u<80;u++){let _=wU(X,N,14)^wU(X,N,18)^O0(X,N,41),L=qU(X,N,14)^qU(X,N,18)^D0(X,N,41),i=X&q^~X&W,y=N&w^~N&Z,d=rY(T,L,y,YM[u],cg[u]),n=VY(d,r,_,i,qM[u],xg[u]),b=d|0,v$=wU(U,I,28)^O0(U,I,34)^O0(U,I,39),S=qU(U,I,28)^D0(U,I,34)^D0(U,I,39),K=U&g^U&G^g&G,k=I&J^I&z^J&z;r=W|0,T=Z|0,W=q|0,Z=w|0,q=X|0,w=N|0,{h:X,l:N}=tv(O|0,D|0,n|0,b|0),O=G|0,D=z|0,G=g|0,z=J|0,g=U|0,J=I|0;let V=wY(b,S,k);U=qY(V,n,v$,K),I=V|0}({h:U,l:I}=tv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=tv(this.Bh|0,this.Bl|0,g|0,J|0),{h:G,l:z}=tv(this.Ch|0,this.Cl|0,G|0,z|0),{h:O,l:D}=tv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=tv(this.Eh|0,this.El|0,X|0,N|0),{h:q,l:w}=tv(this.Fh|0,this.Fl|0,q|0,w|0),{h:W,l:Z}=tv(this.Gh|0,this.Gl|0,W|0,Z|0),{h:r,l:T}=tv(this.Hh|0,this.Hl|0,r|0,T|0),this.set(U,I,g,J,G,z,O,D,X,N,q,w,W,Z,r,T)}roundClean(){Vv(xg,cg)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class WM extends Q0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class MY extends Q0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Uv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Iv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class rM extends Q0{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(28)}}class VM extends Q0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(32)}}var aJ=lU(()=>new ZY,_g(1));var RY=lU(()=>new MY,_g(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZM=BigInt(1),uY=BigInt(2),jM=BigInt(3),MM=BigInt(5),GA=BigInt(8),KY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RM($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=KY,z=$*$%J*$%J,O=Cv(z,uY,J)*z%J,D=Cv(O,ZM,J)*$%J,X=Cv(D,MM,J)*D%J,N=Cv(X,v,J)*X%J,q=Cv(N,U,J)*N%J,w=Cv(q,I,J)*q%J,W=Cv(w,g,J)*w%J,Z=Cv(W,g,J)*w%J,r=Cv(Z,v,J)*X%J;return{pow_p_5_8:Cv(r,uY,J)*$%J,b2:z}}function uM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TY=(()=>{let $=KY;return $Y({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=RM(v);return Dv(Cv(U,jM,$)*I,$)},adjustScalarBytes:uM})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TM=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var HM=aO(KM),g8=eO(HM,aJ);var AM=aO(TM),HY=eO(AM,RY);function SY($,v,U){if(Bv($),U===void 0)U=new Uint8Array($.outputLen);return tU($,U,v)}var U8=Uint8Array.of(0),AY=Uint8Array.of();function kY($,v,U,I=32){Bv($),F$(I,"length");let g=$.outputLen;if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=AY;else Y$(U,void 0,"info");let G=new Uint8Array(J*g),z=tU.create($,v),O=z._cloneInto(),D=new Uint8Array(z.outputLen);for(let X=0;X<J;X++)U8[0]=X+1,O.update(X===0?AY:D).update(U).update(U8).digestInto(D),G.set(D,g*X),z._cloneInto(O);return z.destroy(),O.destroy(),Vv(D,U8),G.slice(0,I)}var SM=BigInt(0),X0=BigInt(1),kM=BigInt(2),PM=BigInt(7),EM=BigInt(256),BM=BigInt(113),BY=[],CY=[],LY=[];for(let $=0,v=X0,U=1,I=0;$<24;$++){[U,I]=[I,(2*U+3*I)%5],BY.push(2*(5*I+U)),CY.push(($+1)*($+2)/2%64);let g=SM;for(let J=0;J<7;J++)if(v=(v<<X0^(v>>PM)*BM)%EM,v&kM)g^=X0<<(X0<<BigInt(J))-X0;LY.push(g)}var fY=tJ(LY,!0),CM=fY[0],LM=fY[1],PY=($,v,U)=>U>32?XY($,v,U):DY($,v,U),EY=($,v,U)=>U>32?NY($,v,U):QY($,v,U);function fM($,v=24){let U=new Uint32Array(10);for(let I=24-v;I<24;I++){for(let G=0;G<10;G++)U[G]=$[G]^$[G+10]^$[G+20]^$[G+30]^$[G+40];for(let G=0;G<10;G+=2){let z=(G+8)%10,O=(G+2)%10,D=U[O],X=U[O+1],N=PY(D,X,1)^U[z],q=EY(D,X,1)^U[z+1];for(let w=0;w<50;w+=10)$[G+w]^=N,$[G+w+1]^=q}let g=$[2],J=$[3];for(let G=0;G<24;G++){let z=CY[G],O=PY(g,J,z),D=EY(g,J,z),X=BY[G];g=$[X],J=$[X+1],$[X]=O,$[X+1]=D}for(let G=0;G<50;G+=10){for(let z=0;z<10;z++)U[z]=$[G+z];for(let z=0;z<10;z++)$[G+z]^=~U[(z+2)%10]&U[(z+4)%10]}$[0]^=CM[I],$[1]^=LM[I]}Vv(U)}class eJ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,U,I=!1,g=24){if(this.blockLen=$,this.suffix=v,this.outputLen=U,this.enableXOF=I,this.rounds=g,F$(U,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=FJ(this.state)}clone(){return this._cloneInto()}keccak(){fO(this.state32),fM(this.state32,this.rounds),fO(this.state32),this.posOut=0,this.pos=0}update($){rg(this),Y$($);let{blockLen:v,state:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(v-this.pos,I-g);for(let G=0;G<J;G++)U[this.pos++]^=$[g++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:U,blockLen:I}=this;if($[U]^=v,(v&128)!==0&&U===I-1)this.keccak();$[I-1]^=128,this.keccak()}writeInto($){rg(this,!1),Y$($),this.finish();let v=this.state,{blockLen:U}=this;for(let I=0,g=$.length;I<g;){if(this.posOut>=U)this.keccak();let J=Math.min(U-this.posOut,g-I);$.set(v.subarray(this.posOut,this.posOut+J),I),this.posOut+=J,I+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(mJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:U,outputLen:I,rounds:g,enableXOF:J}=this;return $||=new eJ(v,U,I,J,g),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=g,$.suffix=U,$.outputLen=I,$.enableXOF=J,$.destroyed=this.destroyed,$}}var _Y=($,v,U,I={})=>lU(()=>new eJ(v,$,U),I);var YU=_Y(6,136,32,_g(8));var nY=_Y(6,72,64,_g(10));var bY=($,v,U,I={})=>lU((g={})=>new eJ(v,$,g.dkLen===void 0?U:g.dkLen,!0),I),mY=bY(31,168,16,_g(11)),av=bY(31,136,32,_g(12));function I8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return I8($),($&$-1)===0&&$!==0}function J8($,v){I8($);let U=0;for(let I=0;I<v;I++,$>>>=1)U=U<<1|$&1;return U}function xY($){return I8($),31-Math.clz32($)}function FY($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let U=xY(v);for(let I=0;I<v;I++){let g=J8(I,U);if(I<g){let J=$[I];$[I]=$[g],$[g]=J}}return $}var G8=($,v)=>{let{N:U,roots:I,dit:g,invertButterflies:J=!1,skipStages:G=0,brp:z=!0}=v,O=xY(U);if(!iY(U))throw Error("FFT: Polynomial size should be power of two");let D=g!==J;return(X)=>{if(X.length!==U)throw Error("FFT: wrong Polynomial length");if(g&&z)FY(X);for(let N=0,q=1;N<O-G;N++){let w=g?N+1+G:O-N,W=1<<w,Z=W>>1,r=U>>w;for(let T=0;T<U;T+=W)for(let u=0,_=q++;u<Z;u++){let L=J?g?U-_:_:u*r,i=T+u,y=T+u+Z,d=I[L],n=X[y],b=X[i];if(D){let v$=$.mul(n,d);X[i]=$.add(b,v$),X[y]=$.sub(b,v$)}else if(J)X[i]=$.add(n,b),X[y]=$.mul($.sub(n,b),d);else X[i]=$.add(b,n),X[y]=$.mul($.sub(b,n),d)}}if(!g&&z)FY(X);return X}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=fg;function sJ($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function cY($){return Uint8Array.from($)}function WU($,...v){let U=(g)=>typeof g==="number"?g:g.bytesLen,I=v.reduce((g,J)=>g+U(J),0);return{bytesLen:I,encode:(g)=>{let J=new Uint8Array(I);for(let G=0,z=0;G<v.length;G++){let O=v[G],D=U(O),X=typeof O==="number"?g[G]:O.encode(g[G]);if(Y$(X,D,$),J.set(X,z),typeof O!=="number")X.fill(0);z+=D}return J},decode:(g)=>{Y$(g,I,$);let J=[];for(let G of v){let z=U(G),O=g.subarray(0,z);J.push(typeof G==="number"?O:G.decode(O)),g=g.subarray(z)}return J}}}function $G($,v){let U=v*$.bytesLen;return{bytesLen:U,encode:(I)=>{if(I.length!==v)throw Error(`vecCoder.encode: wrong length=${I.length}. Expected: ${v}`);let g=new Uint8Array(U);for(let J=0,G=0;J<I.length;J++){let z=$.encode(I[J]);g.set(z,G),z.fill(0),G+=z.length}return g},decode:(I)=>{Y$(I,U);let g=[];for(let J=0;J<I.length;J+=$.bytesLen)g.push($.decode(I.subarray(J,J+$.bytesLen)));return g}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let U of v)U.fill(0);else v.fill(0)}function z8($){return(1<<$)-1}var MA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var oY=($)=>{let{newPoly:v,N:U,Q:I,F:g,ROOT_OF_UNITY:J,brvBits:G,isKyber:z}=$,O=(u,_=I)=>{let L=u%_|0;return(L>=0?L|0:_+L|0)|0},D=(u,_=I)=>{let L=O(u,_)|0;return(L>_>>1?L-_|0:L)|0};function X(){let u=v(U);for(let _=0;_<U;_++){let L=J8(_,G),i=BigInt(J)**BigInt(L)%BigInt(I);u[_]=Number(i)|0}return u}let N=X(),q={add:(u,_)=>O((u|0)+(_|0))|0,sub:(u,_)=>O((u|0)-(_|0))|0,mul:(u,_)=>O((u|0)*(_|0))|0,inv:(u)=>{throw Error("not implemented")}},w={N:U,roots:N,invertButterflies:!0,skipStages:z?1:0,brp:!1},W=G8(q,{dit:!1,...w}),Z=G8(q,{dit:!0,...w});return{mod:O,smod:D,nttZetas:N,NTT:{encode:(u)=>{return W(u)},decode:(u)=>{Z(u);for(let _=0;_<u.length;_++)u[_]=O(g*u[_]);return u}},bitsCoder:(u,_)=>{let L=z8(u),i=u*(U/8);return{bytesLen:i,encode:(y)=>{let d=new Uint8Array(i);for(let n=0,b=0,v$=0,S=0;n<y.length;n++){b|=(_.encode(y[n])&L)<<v$,v$+=u;for(;v$>=8;v$-=8,b>>=8)d[S++]=b&z8(v$)}return d},decode:(y)=>{let d=v(U);for(let n=0,b=0,v$=0,S=0;n<y.length;n++){b|=y[n]<<v$,v$+=8;for(;v$>=u;v$-=u,b>>=u)d[S++]=_.decode(b&L)}return d}}}}},_M=($)=>(v,U)=>{if(!U)U=$.blockLen;let I=new Uint8Array(v.length+2);I.set(v);let g=v.length,J=new Uint8Array(U),G=$.create({}),z=0,O=0;return{stats:()=>({calls:z,xofs:O}),get:(D,X)=>{return I[g+0]=D,I[g+1]=X,G.destroy(),G=$.create({}).update(I),z++,()=>{return O++,G.xofInto(J)}},clean:()=>{G.destroy(),m$(J,I)}}},yY=_M(mY);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,Mg=3329,nM=3303,bM=17,{mod:q0,nttZetas:mM,NTT:rU,bitsCoder:FM}=oY({N:Jv,Q:Mg,F:nM,ROOT_OF_UNITY:bM,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),O8={512:{N:Jv,Q:Mg,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:Mg,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:Mg,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iM=($)=>{if($>=12)return{encode:(U)=>U,decode:(U)=>U};let v=2**($-1);return{encode:(U)=>((U<<$)+Mg/2)/Mg,decode:(U)=>U*Mg+v>>>$}},N0=($)=>FM($,iM($));function VU($,v){for(let U=0;U<Jv;U++)$[U]=q0($[U]+v[U])}function xM($,v){for(let U=0;U<Jv;U++)$[U]=q0($[U]-v[U])}function cM($,v,U,I,g){let J=q0(v*I*g+$*U),G=q0($*I+v*U);return{c0:J,c1:G}}function vG($,v){for(let U=0;U<Jv/2;U++){let I=mM[64+(U>>1)];if(U&1)I=-I;let{c0:g,c1:J}=cM($[2*U+0],$[2*U+1],v[2*U+0],v[2*U+1],I);$[2*U+0]=g,$[2*U+1]=J}return $}function lY($){let v=new Uint16Array(Jv);for(let U=0;U<Jv;){let I=$();if(I.length%3)throw Error("SampleNTT: unaligned block");for(let g=0;U<Jv&&g+3<=I.length;g+=3){let J=(I[g+0]>>0|I[g+1]<<8)&4095,G=(I[g+1]>>4|I[g+2]<<4)&4095;if(J<Mg)v[U++]=J;if(U<Jv&&G<Mg)v[U++]=G}}return v}function w0($,v,U,I){let g=$(I*Jv/4,v,U),J=new Uint16Array(Jv),G=FJ(g),z=0;for(let O=0,D=0,X=0,N=0;O<G.length;O++){let q=G[O];for(let w=0;w<32;w++)if(X+=q&1,q>>=1,z+=1,z===I)N=X,X=0;else if(z===2*I)J[D++]=q0(N-X),X=0,z=0}if(z)throw Error(`sampleCBD: leftover bits: ${z}`);return J}var oM=($)=>{let{K:v,PRF:U,XOF:I,HASH512:g,ETA1:J,ETA2:G,du:z,dv:O}=$,D=N0(1),X=N0(O),N=N0(z),q=WU("publicKey",$G(N0(12),v),32),w=$G(N0(12),v),W=WU("ciphertext",$G(N,v),X),Z=WU("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:q.bytesLen,cipherText:W.bytesLen},keygen:(r)=>{Y$(r,32,"seed");let T=new Uint8Array(33);T.set(r),T[32]=v;let u=g(T),[_,L]=Z.decode(u),i=[],y=[];for(let b=0;b<v;b++)i.push(rU.encode(w0(U,L,b,J)));let d=I(_);for(let b=0;b<v;b++){let v$=rU.encode(w0(U,L,v+b,J));for(let S=0;S<v;S++){let K=lY(d.get(S,b));VU(v$,vG(K,i[S]))}y.push(v$)}d.clean();let n={publicKey:q.encode([y,_]),secretKey:w.encode(i)};return m$(_,L,i,y,T,u),n},encrypt:(r,T,u)=>{let[_,L]=q.decode(r),i=[];for(let S=0;S<v;S++)i.push(rU.encode(w0(U,u,S,J)));let y=I(L),d=new Uint16Array(Jv),n=[];for(let S=0;S<v;S++){let K=w0(U,u,v+S,G),k=new Uint16Array(Jv);for(let V=0;V<v;V++){let M=lY(y.get(S,V));VU(k,vG(M,i[V]))}VU(K,rU.decode(k)),n.push(K),VU(d,vG(_[S],i[S])),m$(k)}y.clean();let b=w0(U,u,2*v,G);VU(b,rU.decode(d));let v$=D.decode(T);return VU(v$,b),m$(_,i,d,b),W.encode([n,v$])},decrypt:(r,T)=>{let[u,_]=W.decode(r),L=w.decode(T),i=new Uint16Array(Jv);for(let y=0;y<v;y++)VU(i,vG(L[y],rU.encode(u[y])));return xM(_,rU.decode(i)),m$(i,L,u),D.encode(_)}}};function D8($){let v=oM($),{HASH256:U,HASH512:I,KDF:g}=$,{secretCoder:J,lengths:G}=v,z=WU("secretKey",G.secretKey,G.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...G,seed:64,msg:32,msgRand:32,secretKey:z.bytesLen},keygen:(X=ev(64))=>{Y$(X,64,"seed");let{publicKey:N,secretKey:q}=v.keygen(X.subarray(0,32)),w=U(N),W=z.encode([q,N,w,X.subarray(32)]);return m$(q,w),{publicKey:N,secretKey:W}},getPublicKey:(X)=>{let[N,q,w,W]=z.decode(X);return Uint8Array.from(q)},encapsulate:(X,N=ev(32))=>{Y$(X,G.publicKey,"publicKey"),Y$(N,32,"message");let q=X.subarray(0,384*$.K),w=J.encode(J.decode(cY(q)));if(!sJ(w,q))throw m$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(w);let W=I.create().update(N).update(U(X)).digest(),Z=v.encrypt(X,N,W.subarray(32,64));return m$(W.subarray(32)),{cipherText:Z,sharedSecret:W.subarray(0,32)}},decapsulate:(X,N)=>{Y$(N,z.bytesLen,"secretKey"),Y$(X,G.cipherText,"cipherText");let q=z.bytesLen-96,w=q+32,W=U(N.subarray(q/2,w));if(!sJ(W,N.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[Z,r,T,u]=z.decode(N),_=v.decrypt(X,Z),L=I.create().update(_).update(T).digest(),i=L.subarray(0,32),y=v.encrypt(r,_,L.subarray(32,64)),d=sJ(X,y),n=g.create({dkLen:32}).update(u).update(X).digest();return m$(_,y,!d?i:n),d?i:n}}}function yM($,v,U){return av.create({dkLen:$}).update(v).update(new Uint8Array([U])).digest()}var Q8={HASH256:YU,HASH512:nY,KDF:av,XOF:yY,PRF:yM},BA=D8({...Q8,...O8[512]}),Y0=D8({...Q8,...O8[768]}),dY=D8({...Q8,...O8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lM($,v=!1){let{lengths:U,keygen:I}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");I=(G=ev(U.seed))=>{Y$(G,U.seed,"seed");let z=J.isLE?bg(G):ng(G),O=J.toBytes(J.create(z));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:U.secretKey,publicKey:U.publicKey,seed:U.seed},keygen:I,getPublicKey:(g)=>$.getPublicKey(g)}}function X8($,v=!1){let U=lM($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...U.lengths,msg:U.lengths.seed,cipherText:U.lengths.publicKey},keygen:U.keygen,getPublicKey:U.getPublicKey,encapsulate(I,g=ev($.lengths.seed)){let J=this.keygen(g).secretKey,G=this.decapsulate(I,J),z=$.getPublicKey(J);return m$(J),{sharedSecret:G,cipherText:z}},decapsulate(I,g){let J=$.getSharedSecret(g,I);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function W0($,v){return WU(v,...$.map((U)=>{if(typeof U.lengths[v]!=="number")throw Error("wrong length: "+v);return U.lengths[v]}))}function N8($){return(v,U)=>$(v,{dkLen:U})}function dM($,v,...U){let I=W0(U,"seed"),g=W0(U,"publicKey");if($===void 0)$=I.bytesLen;F$($);function J(G){Y$(G,$);let z=I.decode(v(G,I.bytesLen)),O=U.map((N,q)=>N.keygen(z[q])),D=O.map((N)=>N.secretKey),X=O.map((N)=>N.publicKey);return{secretKey:D,publicKey:X}}return{info:{lengths:{seed:$,publicKey:g.bytesLen,secretKey:$}},getPublicKey(G){return this.keygen(G).publicKey},keygen(G=ev($)){let{publicKey:z,secretKey:O}=J(G),D=g.encode(z);return m$(z),m$(O),{secretKey:G,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function gG($,v,U,I,...g){let J=dM($,U,...g),G=W0(g,"cipherText"),z=W0(g,"publicKey"),O=W0(g,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:G.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,X=ev(O.bytesLen)){let N=z.decode(D),q=O.decode(X),w=g.map((T,u)=>T.encapsulate(N[u],q[u])),W=w.map((T)=>T.sharedSecret),Z=w.map((T)=>T.cipherText),r={sharedSecret:I(N,Z,W),cipherText:G.encode(Z)};return m$(W,Z),r},decapsulate(D,X){let N=G.decode(D),{publicKey:q,secretKey:w}=J.expandDecapsulationKey(X),W=g.map((Z,r)=>Z.decapsulate(N[r],w[r]));return I(q,N,W)}}}function hY($,v,U,I,g){return Bv(I),Bv(g),gG(32,32,N8(I),(J,G,z)=>g(n$(z[0],z[1],G[1],J[1],mg($))),v,U)}var cA=hY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Y0,X8(g8,!0),av,YU),oA=hY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",dY,X8(HY,!0),av,YU);function hM($,v,U,I,g){return Bv(I),Bv(g),gG(32,32,N8(I),(J,G,z)=>{let O=n$(z[0],z[1],G[0],J[0],G[1],J[1],mg($)),D=32,X=n$(mg("hybrid_prk"),O),N=SY(g,X),q=n$(dU(32,2),mg("shared_secret"),mg("")),w=kY(g,N,q,32);return m$(N,q,X,O),w},v,U)}var pY=X8(TY),yA=hM("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Y0,pY,av,aJ),pM=(()=>gG(32,32,N8(av),($,v,U)=>YU(n$(U[0],U[1],v[1],$[1],mg("\\.//^\\"))),Y0,pY))();function tM($,v,U,I){let g=$.Point.Fn;if(!g)throw Error("no Point.Fn");function J(G){let z;for(let X=0,N=v;;X=N,N+=v){if(N>G.length)throw Error("rejection sampling failed");if(z=g.fromBytes(G.subarray(X,N),!0),g.isValidNot0(z))break}let O=g.toBytes(g.create(z)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:U,seed:I,msg:I,cipherText:U},keygen(G=ev(I)){return Y$(G,I,"seed"),J(G)},getPublicKey(G){return $.getPublicKey(G,!1)},encapsulate(G,z=ev(I)){Y$(z,I,"rand");let{secretKey:O}=J(z),D=this.decapsulate(G,O),X=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:X}},decapsulate(G,z){return $.getSharedSecret(z,G).subarray(1)}}}function aM($,v,U,I){let{secretKey:g,publicKeyUncompressed:J}=U.lengths;if(!g||!J)throw Error("wrong curve");let G=tM(U,g,J,I),z=64,O=z+I;return gG(32,32,(D)=>{Y$(D,32);let X=av(D,{dkLen:O}),N=X.subarray(0,z),q=X.subarray(z,O);return n$(N,q)},(D,X,N)=>YU(n$(N[0],N[1],X[1],D[1],mg($))),v,G)}var eM=(()=>aM("MLKEM768-P256",Y0,g8,128))();var UG=pM,tY=eM;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=($,v,U)=>x$($,v,U),q8=f$,eU=AJ,h$=(...$)=>YO(...$),sU=($)=>yI($),$I=NO,vI=($)=>Ng($),JG=BigInt(0),w8=BigInt(1);function Rg($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw TypeError(U+"expected boolean, got type="+typeof $)}return $}function GG($){if(typeof $==="bigint"){if(!IG($))throw RangeError("positive bigint expected, got "+$)}else q8($);return $}function sv($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(U+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let U=v&&`"${v}" `;throw RangeError(U+"expected safe integer, got "+$)}}function r0($){let v=GG($).toString(16);return v.length&1?"0"+v:v}function aY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?JG:BigInt("0x"+$)}function ZU($){return aY(AJ($))}function Fv($){return aY(AJ(og(x$($)).reverse()))}function zG($,v){if(f$(v),v===0)throw RangeError("zero length");$=GG($);let U=$.toString(16);if(U.length>v*2)throw RangeError("number too large");return yI(U.padStart(v*2,"0"))}function V0($,v){return zG($,v).reverse()}function eY($,v){if($=T$($),v=T$(v),$.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function og($){return Uint8Array.from(T$($))}function OG($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw RangeError(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var IG=($)=>typeof $==="bigint"&&JG<=$;function sM($,v,U){return IG($)&&IG(v)&&IG(U)&&v<=$&&$<U}function ug($,v,U,I){if(!sM(v,U,I))throw RangeError("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function gI($){if($<JG)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>JG;$>>=w8,v+=1);return v}var Z0=($)=>(w8<<BigInt($))-w8;function sY($,v,U){if(f$($,"hashLen"),f$(v,"qByteLen"),typeof U!=="function")throw TypeError("hmacFn must be a function");let I=(r)=>new Uint8Array(r),g=Uint8Array.of(),J=Uint8Array.of(0),G=Uint8Array.of(1),z=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},q=(...r)=>U(D,h$(O,...r)),w=(r=g)=>{if(D=q(J,r),O=q(),r.length===0)return;D=q(G,r),O=q()},W=()=>{if(X++>=z)throw Error("drbg: tried max amount of iterations");let r=0,T=[];while(r<v){O=q();let u=O.slice();T.push(u),r+=O.length}return h$(...T)};return(r,T)=>{N(),w(r);let u=void 0;while((u=T(W()))===void 0)w();return N(),u}}function Lv($,v={},U={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function I(J,G,z){if(!z&&G!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(z&&O===void 0)return;let D=typeof O;if(D!==G||O===null)throw TypeError(`param "${J}" is invalid: expected ${G}, got ${D}`)}let g=(J,G)=>Object.entries(J).forEach(([z,O])=>I(z,O,G));g(v,!1),g(U,!0)}var Y8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),C$=BigInt(1),jU=BigInt(2),UW=BigInt(3),IW=BigInt(4),JW=BigInt(5),$7=BigInt(7),GW=BigInt(8),v7=BigInt(9),zW=BigInt(16);function B$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let U=$%v;return U>=p$?U:v+U}function fv($,v,U){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let I=$;while(v-- >p$)I*=I,I%=U;return I}function $W($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let U=B$($,v),I=v,g=p$,J=C$,G=C$,z=p$;while(U!==p$){let D=I/U,X=I-U*D,N=g-G*D,q=J-z*D;I=U,U=X,g=G,J=z,G=N,z=q}if(I!==C$)throw Error("invert: does not exist");return B$(g,v)}function W8($,v,U){let I=$;if(!I.eql(I.sqr(v),U))throw Error("Cannot find square root")}function OW($,v){let U=$,I=(U.ORDER+C$)/IW,g=U.pow(v,I);return W8(U,g,v),g}function g7($,v){let U=$,I=(U.ORDER-JW)/GW,g=U.mul(v,jU),J=U.pow(g,I),G=U.mul(v,J),z=U.mul(U.mul(G,jU),J),O=U.mul(G,U.sub(z,U.ONE));return W8(U,O,v),O}function U7($){let v=DG($),U=DW($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),G=($+$7)/zW;return(z,O)=>{let D=z,X=D.pow(O,G),N=D.mul(X,I),q=D.mul(X,g),w=D.mul(X,J),W=D.eql(D.sqr(N),O),Z=D.eql(D.sqr(q),O);X=D.cmov(X,N,W),N=D.cmov(w,q,Z);let r=D.eql(D.sqr(N),O),T=D.cmov(X,N,r);return W8(D,T,O),T}}function DW($){if($<UW)throw Error("sqrt is not defined for small field");let v=$-C$,U=0;while(v%jU===p$)v/=jU,U++;let I=jU,g=DG($);while(vW(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return OW;let J=g.pow(I,v),G=(v+C$)/jU;return function(O,D){let X=O;if(X.is0(D))return D;if(vW(X,D)!==1)throw Error("Cannot find square root");let N=U,q=X.mul(X.ONE,J),w=X.pow(D,v),W=X.pow(D,G);while(!X.eql(w,X.ONE)){if(X.is0(w))return X.ZERO;let Z=1,r=X.sqr(w);while(!X.eql(r,X.ONE))if(Z++,r=X.sqr(r),Z===N)throw Error("Cannot find square root");let T=C$<<BigInt(N-Z-1),u=X.pow(q,T);N=Z,q=X.sqr(u),w=X.mul(w,q),W=X.mul(W,u)}return W}}function I7($){if($%IW===UW)return OW;if($%GW===JW)return g7;if($%zW===v7)return U7($);return DW($)}var Kg=($,v)=>(B$($,v)&C$)===C$,J7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function r8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=J7.reduce((I,g)=>{return I[g]="function",I},v);if(Lv($,U),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function G7($,v,U){let I=$;if(U<p$)throw Error("invalid exponent, negatives unsupported");if(U===p$)return I.ONE;if(U===C$)return v;let g=I.ONE,J=v;while(U>p$){if(U&C$)g=I.mul(g,J);J=I.sqr(J),U>>=C$}return g}function j0($,v,U=!1){let I=$,g=Array(v.length).fill(U?I.ZERO:void 0),J=v.reduce((z,O,D)=>{if(I.is0(O))return z;return g[D]=z,I.mul(z,O)},I.ONE),G=I.inv(J);return v.reduceRight((z,O,D)=>{if(I.is0(O))return z;return g[D]=I.mul(z,g[D]),I.mul(z,O)},G),g}function vW($,v){let U=$,I=(U.ORDER-C$)/jU,g=U.pow(v,I),J=U.eql(g,U.ONE),G=U.eql(g,U.ZERO),z=U.eql(g,U.neg(U.ONE));if(!J&&!G&&!z)throw Error("invalid Legendre symbol result");return J?1:G?0:-1}function z7($,v){if(v!==void 0)q8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let U=gI($);if(v!==void 0&&v<U)throw Error(`invalid n length: expected bit length (${U}) >= n.length (${v})`);let I=v!==void 0?v:U,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}var gW=new WeakMap;class V8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=C$;_lengths;_mod;constructor($,v={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=z7($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return B$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return B$($*$,this.ORDER)}add($,v){return B$($+v,this.ORDER)}sub($,v){return B$($-v,this.ORDER)}mul($,v){return B$($*v,this.ORDER)}pow($,v){return G7(this,$,v)}div($,v){return B$($*$W(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return $W($,this.ORDER)}sqrt($){let v=gW.get(this);if(!v)gW.set(this,v=I7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?V0($,this.BYTES):zG($,this.BYTES)}fromBytes($,v=!1){T$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:G}=this;if(U){if($.length<1||!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let z=g?Fv($):ZU($);if(G)z=B$(z,J);if(!v){if(!this.isValid(z))throw Error("invalid field element: outside of range 0..ORDER")}return z}invertBatch($){return j0(this,$)}cmov($,v,U){return Rg(U,"condition"),U?v:$}}Object.freeze(V8.prototype);function DG($,v={}){return new V8($,v)}function QW($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let v=gI($-C$);return Math.ceil(v/8)}function Z8($){let v=QW($);return v+Math.ceil(v/2)}function XW($,v,U=!1){T$($);let I=$.length,g=QW(v),J=Math.max(Z8(v),16);if(I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let G=U?Fv($):ZU($),z=B$(G,v-C$)+C$;return U?V0(z,g):zG(z,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UI=BigInt(0),MU=BigInt(1);function M0($,v){let U=v.negate();return $?U:v}function RU($,v){let U=j0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function YW($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function j8($,v){YW($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=Z0($),G=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:G}}function NW($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:G}=U,z=Number($&g),O=$>>G;if(z>I)z-=J,O+=MU;let D=v*I,X=D+Math.abs(z)-1,N=z===0,q=z<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:q,isNegF:w,offsetF:D}}var M8=new WeakMap,WW=new WeakMap;function R8($){return WW.get($)||1}function wW($){if($!==UI)throw Error("invalid wNAF")}class R0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>UI){if(v&MU)U=U.add(I);I=I.double(),v>>=MU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=j8(v,this.bits),g=[],J=$,G=J;for(let z=0;z<U;z++){G=J,g.push(G);for(let O=1;O<I;O++)G=G.add(J),g.push(G);J=G.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=j8($,this.bits);for(let G=0;G<J.windows;G++){let{nextN:z,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:q}=NW(U,G,J);if(U=z,D)g=g.add(M0(N,v[q]));else I=I.add(M0(X,v[O]))}return wW(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=j8($,this.bits);for(let J=0;J<g.windows;J++){if(U===UI)break;let{nextN:G,offset:z,isZero:O,isNeg:D}=NW(U,J,g);if(U=G,O)continue;else{let X=v[z];I=I.add(D?X.negate():X)}}return wW(U),I}getPrecomputes($,v,U){let I=M8.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);M8.set(v,I)}}return I}cached($,v,U){let I=R8($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=R8($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){YW(v,this.bits),WW.set($,v),M8.delete($)}hasCache($){return R8($)!==1}}function rW($,v,U,I){let g=v,J=$.ZERO,G=$.ZERO;while(U>UI||I>UI){if(U&MU)J=J.add(g);if(I&MU)G=G.add(g);g=g.double(),U>>=MU,I>>=MU}return{p1:J,p2:G}}function qW($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return r8(v),v}else return DG($,{isLE:U})}function QG($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>UI))throw Error(`CURVE.${O} must be positive bigint`)}let g=qW(v.p,U.Fp,I),J=qW(v.n,U.Fn,I),z=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of z)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function u0($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}function K0($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let U=Array.from({length:v}).fill(0);for(let I=v-1;I>=0;I--)U[I]=$&255,$>>>=8;return new Uint8Array(U)}function O7($,v){let U=new Uint8Array($.length);for(let I=0;I<$.length;I++)U[I]=$[I]^v[I];return U}function D7($){if(!$I($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?OG($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function u8($,v,U,I){if(T$($),sv(U),v=D7(v),v.length>255)v=I(h$(OG("H2C-OVERSIZE-DST-"),v));let{outputLen:g,blockLen:J}=I,G=Math.ceil(U/g);if(U>65535||G>255)throw Error("expand_message_xmd: invalid lenInBytes");let z=h$(v,K0(v.length,1)),O=new Uint8Array(J),D=K0(U,2),X=Array(G),N=I(h$(O,$,D,K0(0,1),z));X[0]=I(h$(N,K0(1,1),z));for(let w=1;w<G;w++){let W=[O7(N,X[w-1]),K0(w+1,1),z];X[w]=I(h$(...W))}return h$(...X).slice(0,U)}var VW="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZW=($,v)=>($+($>=0?v:-v)/MW)/v;function Q7($,v,U){ug("scalar",$,$g,U);let[[I,g],[J,G]]=v,z=ZW(G*$,U),O=ZW(-g*$,U),D=$-z*I-O*J,X=-z*g-O*G,N=D<$g,q=X<$g;if(N)D=-D;if(q)X=-X;let w=Z0(Math.ceil(gI(U)/2))+yg;if(D<$g||D>=w||X<$g||X>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:N,k1:D,k2neg:q,k2:X}}function T8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function K8($,v){Lv($);let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if(Rg(U.lowS,"lowS"),Rg(U.prehash,"prehash"),U.format!==void 0)T8(U.format);return U}class jW extends Error{constructor($=""){super($)}}var iv={Err:jW,_tlv:{encode:($,v)=>{let{Err:U}=iv;if(sv($,"tag"),$<0||$>255)throw new U("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=r0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?r0(g.length/2|128):"";return r0($)+J+g+v},decode($,v){let{Err:U}=iv;v=T$(v,void 0,"DER data");let I=0;if($<0||$>255)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),G=0;if(!J)G=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)G=G<<8|X;if(I+=O,G<128)throw new U("tlv.decode(long): not minimal encoding")}let z=v.subarray(I,I+G);if(z.length!==G)throw new U("tlv.decode: wrong value length");return{v:z,l:v.subarray(I+G)}}},_int:{encode($){let{Err:v}=iv;if(GG($),$<$g)throw new v("integer: negative integers are not allowed");let U=r0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=iv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ZU($)}},toSig($){let{Err:v,_int:U,_tlv:I}=iv,g=T$($,void 0,"signature"),{v:J,l:G}=I.decode(48,g);if(G.length)throw new v("invalid signature: left bytes after parsing");let{v:z,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(z),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=iv,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}};Object.freeze(iv._tlv);Object.freeze(iv._int);Object.freeze(iv);var $g=BigInt(0),yg=BigInt(1),MW=BigInt(2),XG=BigInt(3),X7=BigInt(4);function RW($,v={}){let U=QG("weierstrass",$,v),I=U.Fp,g=U.Fn,J=U.CURVE,{h:G,n:z}=J;Lv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let X=KW(I,g);function N(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function q(S,K,k){if(D&&K.is0())return Uint8Array.of(0);let{x:V,y:M}=K.toAffine(),j=I.toBytes(V);if(Rg(k,"isCompressed"),k){N();let A=!I.isOdd(M);return h$(uW(A),j)}else return h$(Uint8Array.of(4),j,I.toBytes(M))}function w(S){T$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:k}=X,V=S.length,M=S[0],j=S.subarray(1);if(D&&V===1&&M===0)return{x:I.ZERO,y:I.ZERO};if(V===K&&(M===2||M===3)){let A=I.fromBytes(j);if(!I.isValid(A))throw Error("bad point: is not on curve, wrong x");let R=r(A),E;try{E=I.sqrt(R)}catch(e){let J$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}N();let C=I.isOdd(E);if((M&1)===1!==C)E=I.neg(E);return{x:A,y:E}}else if(V===k&&M===4){let A=I.BYTES,R=I.fromBytes(j.subarray(0,A)),E=I.fromBytes(j.subarray(A,A*2));if(!T(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${k}`)}let W=v.toBytes===void 0?q:v.toBytes,Z=v.fromBytes===void 0?w:v.fromBytes;function r(S){let K=I.sqr(S),k=I.mul(K,S);return I.add(I.add(k,I.mul(S,J.a)),J.b)}function T(S,K){let k=I.sqr(K),V=r(S);return I.eql(k,V)}if(!T(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=I.mul(I.pow(J.a,XG),X7),_=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(u,_)))throw Error("bad curve params: a or b");function L(S,K,k=!1){if(!I.isValid(K)||k&&I.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof n))throw Error("Weierstrass Point expected")}function y(S){if(!O||!O.basises)throw Error("no endo");return Q7(S,O.basises,g.ORDER)}function d(S,K,k,V,M){return k=new n(I.mul(k.X,S),k.Y,k.Z),K=M0(V,K),k=M0(M,k),K.add(k)}class n{static BASE=new n(J.Gx,J.Gy,I.ONE);static ZERO=new n(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(S,K,k){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",k),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:k}=S||{};if(!S||!I.isValid(K)||!I.isValid(k))throw Error("invalid affine point");if(S instanceof n)throw Error("projective point not allowed");if(I.is0(K)&&I.is0(k))return n.ZERO;return new n(K,k,I.ONE)}static fromBytes(S){let K=n.fromAffine(Z(T$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return n.fromBytes(sU(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(v$.createCache(this,S),!K)this.multiply(XG);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&I.is0(S.X)&&I.eql(S.Y,I.ONE)&&I.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:k}=S.toAffine();if(!I.isValid(K)||!I.isValid(k))throw Error("bad point: x or y not field elements");if(!T(K,k))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(S)}equals(S){i(S);let{X:K,Y:k,Z:V}=this,{X:M,Y:j,Z:A}=S,R=I.eql(I.mul(K,A),I.mul(M,V)),E=I.eql(I.mul(k,A),I.mul(j,V));return R&&E}negate(){return new n(this.X,I.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,k=I.mul(K,XG),{X:V,Y:M,Z:j}=this,A=I.ZERO,R=I.ZERO,E=I.ZERO,C=I.mul(V,V),x=I.mul(M,M),e=I.mul(j,j),J$=I.mul(V,M);return J$=I.add(J$,J$),E=I.mul(V,j),E=I.add(E,E),A=I.mul(S,E),R=I.mul(k,e),R=I.add(A,R),A=I.sub(x,R),R=I.add(x,R),R=I.mul(A,R),A=I.mul(J$,A),E=I.mul(k,E),e=I.mul(S,e),J$=I.sub(C,e),J$=I.mul(S,J$),J$=I.add(J$,E),E=I.add(C,C),C=I.add(E,C),C=I.add(C,e),C=I.mul(C,J$),R=I.add(R,C),e=I.mul(M,j),e=I.add(e,e),C=I.mul(e,J$),A=I.sub(A,C),E=I.mul(e,x),E=I.add(E,E),E=I.add(E,E),new n(A,R,E)}add(S){i(S);let{X:K,Y:k,Z:V}=this,{X:M,Y:j,Z:A}=S,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=J.a,e=I.mul(J.b,XG),J$=I.mul(K,M),z$=I.mul(k,j),Q$=I.mul(V,A),w$=I.add(K,k),X$=I.add(M,j);w$=I.mul(w$,X$),X$=I.add(J$,z$),w$=I.sub(w$,X$),X$=I.add(K,V);let N$=I.add(M,A);return X$=I.mul(X$,N$),N$=I.add(J$,Q$),X$=I.sub(X$,N$),N$=I.add(k,V),R=I.add(j,A),N$=I.mul(N$,R),R=I.add(z$,Q$),N$=I.sub(N$,R),C=I.mul(x,X$),R=I.mul(e,Q$),C=I.add(R,C),R=I.sub(z$,C),C=I.add(z$,C),E=I.mul(R,C),z$=I.add(J$,J$),z$=I.add(z$,J$),Q$=I.mul(x,Q$),X$=I.mul(e,X$),z$=I.add(z$,Q$),Q$=I.sub(J$,Q$),Q$=I.mul(x,Q$),X$=I.add(X$,Q$),J$=I.mul(z$,X$),E=I.add(E,J$),J$=I.mul(N$,X$),R=I.mul(w$,R),R=I.sub(R,J$),J$=I.mul(w$,z$),C=I.mul(N$,C),C=I.add(C,J$),new n(R,E,C)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(n.ZERO)}multiply(S){let{endo:K}=v;if(!g.isValidNot0(S))throw RangeError("invalid scalar: out of range");let k,V,M=(j)=>v$.cached(this,j,(A)=>RU(n,A));if(K){let{k1neg:j,k1:A,k2neg:R,k2:E}=y(S),{p:C,f:x}=M(A),{p:e,f:J$}=M(E);V=x.add(J$),k=d(K.beta,C,e,j,R)}else{let{p:j,f:A}=M(S);k=j,V=A}return RU(n,[k,V])[0]}multiplyUnsafe(S){let{endo:K}=v,k=this,V=S;if(!g.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$g||k.is0())return n.ZERO;if(V===yg)return k;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:M,k1:j,k2neg:A,k2:R}=y(V),{p1:E,p2:C}=rW(n,k,j,R);return d(K.beta,E,C,M,A)}else return v$.unsafe(k,V)}toAffine(S){let K=this,k=S,{X:V,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:V,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(V,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(G===yg)return!0;if(S)return S(n,this);return v$.unsafe(this,z).is0()}clearCofactor(){let{clearCofactor:S}=v;if(G===yg)return this;if(S)return S(n,this);return this.multiplyUnsafe(G)}isSmallOrder(){if(G===yg)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return Rg(S,"isCompressed"),this.assertValidity(),W(n,this,S)}toHex(S=!0){return eU(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=g.BITS,v$=new R0(n,v.endo?Math.ceil(b/2):b);if(b>=8)n.BASE.precompute(8);return Object.freeze(n.prototype),Object.freeze(n),n}function uW($){return Uint8Array.of($?2:3)}function KW($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function N7($,v={}){let{Fn:U}=$,I=v.randomBytes===void 0?vI:v.randomBytes,g=Object.assign(KW($.Fp,U),{seed:Math.max(Z8(U.ORDER),16)});function J(w){try{let W=U.fromBytes(w);return U.isValidNot0(W)}catch(W){return!1}}function G(w,W){let{publicKey:Z,publicKeyUncompressed:r}=g;try{let T=w.length;if(W===!0&&T!==Z)return!1;if(W===!1&&T!==r)return!1;return!!$.fromBytes(w)}catch(T){return!1}}function z(w){return w=w===void 0?I(g.seed):w,XW(T$(w,g.seed,"seed"),U.ORDER)}function O(w,W=!0){return $.BASE.multiply(U.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:Z,publicKeyUncompressed:r}=g,T=U._lengths;if(!$I(w))return;let u=T$(w,void 0,"key").length,_=u===Z||u===r,L=u===W||!!T?.includes(u);if(_&&L)return;return _}function X(w,W,Z=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let r=U.fromBytes(w);return $.fromBytes(W).multiply(r).toBytes(Z)}let N={isValidSecretKey:J,isValidPublicKey:G,randomSecretKey:z},q=u0(z,O);return Object.freeze(N),Object.freeze(g),Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:q,Point:$,utils:N,lengths:g})}function TW($,v,U={}){let I=v;Xg(I),Lv(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let g=U.randomBytes===void 0?vI:U.randomBytes,J=U.hmac===void 0?(M,j)=>dv(I,M,j):U.hmac,{Fp:G,Fn:z}=$,{ORDER:O,BITS:D}=z,{keygen:X,getPublicKey:N,getSharedSecret:q,utils:w,lengths:W}=N7($,U),Z={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},r=O*MW+yg<G.ORDER;function T(M){let j=O>>yg;return M>j}function u(M,j){if(!z.isValidNot0(j))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return j}function _(){if(r)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(M,j){T8(j);let A=W.signature,R=j==="compact"?A:j==="recovered"?A+1:void 0;return T$(M,R)}class i{r;s;recovery;constructor(M,j,A){if(this.r=u("r",M),this.s=u("s",j),A!=null){if(_(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(M,j=Z.format){L(M,j);let A;if(j==="der"){let{r:x,s:e}=iv.toSig(T$(M));return new i(x,e)}if(j==="recovered")A=M[0],j="compact",M=M.subarray(1);let R=W.signature/2,E=M.subarray(0,R),C=M.subarray(R,R*2);return new i(z.fromBytes(E),z.fromBytes(C),A)}static fromHex(M,j){return this.fromBytes(sU(M),j)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new i(this.r,this.s,M)}recoverPublicKey(M){let{r:j,s:A}=this,R=this.assertRecovery(),E=R===2||R===3?j+O:j;if(!G.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let C=G.toBytes(E),x=$.fromBytes(h$(uW((R&1)===0),C)),e=z.inv(E),J$=d(T$(M,void 0,"msgHash")),z$=z.create(-J$*e),Q$=z.create(A*e),w$=$.BASE.multiplyUnsafe(z$).add(x.multiplyUnsafe(Q$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return T(this.s)}toBytes(M=Z.format){if(T8(M),M==="der")return sU(iv.hexFromSig(this));let{r:j,s:A}=this,R=z.toBytes(j),E=z.toBytes(A);if(M==="recovered")return _(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(M){return eU(this.toBytes(M))}}Object.freeze(i.prototype),Object.freeze(i);let y=U.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let A=ZU(j),R=j.length*8-D;return R>0?A>>BigInt(R):A}:U.bits2int,d=U.bits2int_modN===void 0?function(j){return z.create(y(j))}:U.bits2int_modN,n=Z0(D);function b(M){return ug("num < 2^"+D,M,$g,n),z.toBytes(M)}function v$(M,j){return T$(M,void 0,"message"),j?T$(I(M),void 0,"prehashed message"):M}function S(M,j,A){let{lowS:R,prehash:E,extraEntropy:C}=K8(A,Z);M=v$(M,E);let x=d(M),e=z.fromBytes(j);if(!z.isValidNot0(e))throw Error("invalid private key");let J$=[b(e),b(x)];if(C!=null&&C!==!1){let X$=C===!0?g(W.secretKey):C;J$.push(T$(X$,void 0,"extraEntropy"))}let z$=h$(...J$),Q$=x;function w$(X$){let N$=y(X$);if(!z.isValidNot0(N$))return;let r$=z.inv(N$),k$=$.BASE.multiply(N$).toAffine(),E$=z.create(k$.x);if(E$===$g)return;let a$=z.create(r$*z.create(Q$+E$*e));if(a$===$g)return;let e$=(k$.x===E$?0:2)|Number(k$.y&yg),rv=a$;if(R&&T(a$))rv=z.neg(a$),e$^=1;return new i(E$,rv,r?void 0:e$)}return{seed:z$,k2sig:w$}}function K(M,j,A={}){let{seed:R,k2sig:E}=S(M,j,A);return sY(I.outputLen,z.BYTES,J)(R,E).toBytes(A.format)}function k(M,j,A,R={}){let{lowS:E,prehash:C,format:x}=K8(R,Z);if(A=T$(A,void 0,"publicKey"),j=v$(j,C),!$I(M)){let e=M instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}L(M,x);try{let e=i.fromBytes(M,x),J$=$.fromBytes(A);if(E&&e.hasHighS())return!1;let{r:z$,s:Q$}=e,w$=d(j),X$=z.inv(Q$),N$=z.create(w$*X$),r$=z.create(z$*X$),k$=$.BASE.multiplyUnsafe(N$).add(J$.multiplyUnsafe(r$));if(k$.is0())return!1;return z.create(k$.x)===z$}catch(e){return!1}}function V(M,j,A={}){let{prehash:R}=K8(A,Z);return j=v$(j,R),i.fromBytes(M,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:X,getPublicKey:N,getSharedSecret:q,utils:w,lengths:W,Point:$,sign:K,verify:k,recoverPublicKey:V,Signature:i,hash:I})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var w7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var q7=RW(w7),II=TW(q7,_$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lg=BigInt(0),Zv=BigInt(1),H8=BigInt(2),Y7=BigInt(8);function W7($,v,U,I){let g=$.sqr(U),J=$.sqr(I),G=$.add($.mul(v.a,g),J),z=$.add($.ONE,$.mul(v.d,$.mul(g,J)));return $.eql(G,z)}function HW($,v={}){let U=v,I=QG("edwards",$,U,U.FpFnLE),{Fp:g,Fn:J}=I,G=I.CURVE,{h:z}=G;Lv(U,{},{uvRatio:"function"});let O=H8<<BigInt(J.BYTES*8)-Zv,D=(Z)=>g.create(Z),X=U.uvRatio===void 0?(Z,r)=>{try{return{isValid:!0,value:g.sqrt(g.div(Z,r))}}catch(T){return{isValid:!1,value:lg}}}:U.uvRatio;if(!W7(g,G,G.Gx,G.Gy))throw Error("bad curve params: generator point");function N(Z,r,T=!1){let u=T?Zv:lg;return ug("coordinate "+Z,r,u,O),r}function q(Z){if(!(Z instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(G.Gx,G.Gy,Zv,D(G.Gx*G.Gy));static ZERO=new w(lg,Zv,Zv,lg);static Fp=g;static Fn=J;X;Y;Z;T;constructor(Z,r,T,u){this.X=N("x",Z),this.Y=N("y",r),this.Z=N("z",T,!0),this.T=N("t",u),Object.freeze(this)}static CURVE(){return G}static fromAffine(Z){if(Z instanceof w)throw Error("extended point not allowed");let{x:r,y:T}=Z||{};return N("x",r),N("y",T),new w(r,T,Zv,D(r*T))}static fromBytes(Z,r=!1){let T=g.BYTES,{a:u,d:_}=G;Z=og(T$(Z,T,"point")),Rg(r,"zip215");let L=og(Z),i=Z[T-1];L[T-1]=i&-129;let y=Fv(L),d=r?O:g.ORDER;ug("point.y",y,lg,d);let n=D(y*y),b=D(n-Zv),v$=D(_*n-u),{isValid:S,value:K}=X(b,v$);if(!S)throw Error("bad point: invalid y coordinate");let k=(K&Zv)===Zv,V=(i&128)!==0;if(!r&&K===lg&&V)throw Error("bad point: x=0 and x_0=1");if(V!==k)K=D(-K);return w.fromAffine({x:K,y})}static fromHex(Z,r=!1){return w.fromBytes(sU(Z),r)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(Z=8,r=!0){if(W.createCache(this,Z),!r)this.multiply(H8);return this}assertValidity(){let Z=this,{a:r,d:T}=G;if(Z.is0())throw Error("bad point: ZERO");let{X:u,Y:_,Z:L,T:i}=Z,y=D(u*u),d=D(_*_),n=D(L*L),b=D(n*n),v$=D(y*r),S=D(n*D(v$+d)),K=D(b+D(T*D(y*d)));if(S!==K)throw Error("bad point: equation left != right (1)");let k=D(u*_),V=D(L*i);if(k!==V)throw Error("bad point: equation left != right (2)")}equals(Z){q(Z);let{X:r,Y:T,Z:u}=this,{X:_,Y:L,Z:i}=Z,y=D(r*i),d=D(_*u),n=D(T*i),b=D(L*u);return y===d&&n===b}is0(){return this.equals(w.ZERO)}negate(){return new w(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:Z}=G,{X:r,Y:T,Z:u}=this,_=D(r*r),L=D(T*T),i=D(H8*D(u*u)),y=D(Z*_),d=r+T,n=D(D(d*d)-_-L),b=y+L,v$=b-i,S=y-L,K=D(n*v$),k=D(b*S),V=D(n*S),M=D(v$*b);return new w(K,k,M,V)}add(Z){q(Z);let{a:r,d:T}=G,{X:u,Y:_,Z:L,T:i}=this,{X:y,Y:d,Z:n,T:b}=Z,v$=D(u*y),S=D(_*d),K=D(i*T*b),k=D(L*n),V=D((u+_)*(y+d)-v$-S),M=k-K,j=k+K,A=D(S-r*v$),R=D(V*M),E=D(j*A),C=D(V*A),x=D(M*j);return new w(R,E,x,C)}subtract(Z){return q(Z),this.add(Z.negate())}multiply(Z){if(!J.isValidNot0(Z))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:r,f:T}=W.cached(this,Z,(u)=>RU(w,u));return RU(w,[r,T])[0]}multiplyUnsafe(Z){if(!J.isValid(Z))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(Z===lg)return w.ZERO;if(this.is0()||Z===Zv)return this;return W.unsafe(this,Z,(r)=>RU(w,r))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return W.unsafe(this,G.n).is0()}toAffine(Z){let r=this,T=Z,{X:u,Y:_,Z:L}=r,i=r.is0();if(T==null)T=i?Y7:g.inv(L);let y=D(u*T),d=D(_*T),n=g.mul(L,T);if(i)return{x:lg,y:Zv};if(n!==Zv)throw Error("invZ was invalid");return{x:y,y:d}}clearCofactor(){if(z===Zv)return this;return this.multiplyUnsafe(z)}toBytes(){let{x:Z,y:r}=this.toAffine(),T=g.toBytes(r);return T[T.length-1]|=Z&Zv?128:0,T}toHex(){return eU(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let W=new R0(w,J.BITS);if(J.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class A8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){Y8()}static fromHex($){Y8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eU(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),JI=BigInt(1),NG=BigInt(2);function r7($){return Lv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function AW($){let v=r7($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:G}=v,z=I==="x25519";if(!z&&I!=="x448")throw Error("invalid type");let O=G===void 0?vI:G,D=z?255:448,X=z?32:56,N=z?BigInt(9):BigInt(5),q=z?BigInt(121665):BigInt(39081),w=z?NG**BigInt(254):NG**BigInt(447),W=z?BigInt(8)*NG**BigInt(251)-JI:BigInt(4)*NG**BigInt(445)-JI,Z=w+W+JI,r=(V)=>B$(V,U),T=u(N);function u(V){return V0(r(V),X)}function _(V){let M=og(T$(V,X,"uCoordinate"));if(z)M[31]&=127;return r(Fv(M))}function L(V){return Fv(g(og(T$(V,X,"scalar"))))}function i(V,M){let j=v$(_(M),L(V));if(j===T0)throw Error("invalid private or public key received");return u(j)}function y(V){return i(V,T)}let d=y,n=i;function b(V,M,j){let A=r(V*(M-j));return M=r(M-A),j=r(j+A),{x_2:M,x_3:j}}function v$(V,M){ug("u",V,T0,U),ug("scalar",M,w,Z);let j=M,A=V,R=JI,E=T0,C=V,x=JI,e=T0;for(let z$=BigInt(D-1);z$>=T0;z$--){let Q$=j>>z$&JI;e^=Q$,{x_2:R,x_3:C}=b(e,R,C),{x_2:E,x_3:x}=b(e,E,x),e=Q$;let w$=R+E,X$=r(w$*w$),N$=R-E,r$=r(N$*N$),k$=X$-r$,E$=C+x,a$=C-x,e$=r(a$*w$),rv=r(E$*N$),ov=e$+rv,yv=e$-rv;C=r(ov*ov),x=r(A*r(yv*yv)),R=r(X$*r$),E=r(k$*(X$+r(q*k$)))}({x_2:R,x_3:C}=b(e,R,C)),{x_2:E,x_3:x}=b(e,E,x);let J$=J(E);return r(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V)=>{return V=V===void 0?O(X):V,T$(V,S.seed,"seed"),V},k={randomSecretKey:K};return Object.freeze(S),Object.freeze(k),Object.freeze({keygen:u0(K,d),getSharedSecret:n,getPublicKey:d,scalarMult:i,scalarMultBase:y,utils:k,GuBytes:T.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var V7=BigInt(0),Tg=BigInt(1),SW=BigInt(2),Z7=BigInt(3),j7=BigInt(5),M7=BigInt(8),KU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),E8=(()=>({p:KU,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:M7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function EW($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=KU,z=$*$%J*$%J,O=fv(z,SW,J)*z%J,D=fv(O,Tg,J)*$%J,X=fv(D,j7,J)*D%J,N=fv(X,v,J)*X%J,q=fv(N,U,J)*N%J,w=fv(q,I,J)*q%J,W=fv(w,g,J)*w%J,Z=fv(W,g,J)*w%J,r=fv(Z,v,J)*X%J;return{pow_p_5_8:fv(r,SW,J)*$%J,b2:z}}function R7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var S8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function B8($,v){let U=KU,I=B$(v*v*v,U),g=B$(I*I*v,U),J=EW($*g).pow_p_5_8,G=B$($*I*J,U),z=B$(v*G*G,U),O=G,D=B$(G*S8,U),X=z===$,N=z===B$(-$,U),q=z===B$(-$*S8,U);if(X)G=O;if(N||q)G=D;if(Kg(G,U))G=B$(-G,U);return{isValid:X||N,value:G}}var uU=HW(E8,{uvRatio:B8}),dg=(()=>uU.Fp)(),BW=(()=>uU.Fn)();var wG=(()=>{let $=KU;return AW({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=EW(v);return B$(fv(U,Z7,$)*I,$)},adjustScalarBytes:R7})})();var k8=S8,u7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),K7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),T7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),H7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),kW=($)=>B8(Tg,$),A7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),P8=($)=>dg.create(Fv($)&A7);function PW($){let{d:v}=E8,U=KU,I=(T)=>dg.create(T),g=I(k8*$*$),J=I((g+Tg)*T7),G=BigInt(-1),z=I((G-v*g)*I(g+v)),{isValid:O,value:D}=B8(J,z),X=I(D*$);if(!Kg(X,U))X=I(-X);if(!O)D=X;if(!O)G=g;let N=I(G*(g-Tg)*H7-z),q=D*D,w=I((D+D)*z),W=I(N*u7),Z=I(Tg-q),r=I(Tg+q);return new uU(I(w*r),I(Z*W),I(W*r),I(w*Z))}class Xv extends A8{static BASE=(()=>new Xv(uU.BASE))();static ZERO=(()=>new Xv(uU.ZERO))();static Fp=(()=>dg)();static Fn=(()=>BW)();constructor($){super($)}static fromAffine($){return new Xv(uU.fromAffine($))}assertSame($){if(!($ instanceof Xv))throw Error("RistrettoPoint expected")}init($){return new Xv($)}static fromBytes($){x$($,32);let{a:v,d:U}=E8,I=KU,g=(_)=>dg.create(_),J=P8($);if(!eY(dg.toBytes(J),$)||Kg(J,I))throw Error("invalid ristretto255 encoding 1");let G=g(J*J),z=g(Tg+v*G),O=g(Tg-v*G),D=g(z*z),X=g(O*O),N=g(v*U*D-X),{isValid:q,value:w}=kW(g(N*X)),W=g(w*O),Z=g(w*W*N),r=g((J+J)*W);if(Kg(r,I))r=g(-r);let T=g(z*Z),u=g(r*T);if(!q||Kg(u,I)||T===V7)throw Error("invalid ristretto255 encoding 2");return new Xv(new uU(r,T,Tg,u))}static fromHex($){return Xv.fromBytes(yI($))}toBytes(){let{X:$,Y:v,Z:U,T:I}=this.ep,g=KU,J=(Z)=>dg.create(Z),G=J(J(U+v)*J(U-v)),z=J($*v),O=J(z*z),{value:D}=kW(J(G*O)),X=J(D*G),N=J(D*z),q=J(X*N*I),w;if(Kg(I*q,g)){let Z=J(v*k8),r=J($*k8);$=Z,v=r,w=J(X*K7)}else w=N;if(Kg($*q,g))v=J(-v);let W=J((U-v)*w);if(Kg(W,g))W=J(-W);return dg.toBytes(W)}equals($){this.assertSame($);let{X:v,Y:U}=this.ep,{X:I,Y:g}=$.ep,J=(O)=>dg.create(O),G=J(v*g)===J(U*I),z=J(U*g)===J(v*I);return G||z}is0(){return this.equals(Xv.ZERO)}}Object.freeze(Xv.BASE);Object.freeze(Xv.ZERO);Object.freeze(Xv.prototype);Object.freeze(Xv);var S7=Object.freeze({Point:Xv,hashToCurve($,v){let U=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,I=u8($,U,64,EJ);return S7.deriveToCurve(I)},hashToScalar($,v={DST:VW}){let U=u8($,v.DST,64,EJ);return BW.create(Fv(U))},deriveToCurve($){x$($,64);let v=P8($.subarray(0,32)),U=PW(v),I=P8($.subarray(32,64)),g=PW(I);return new Xv(U.add(g))}});var CW=!1,k7=!1;async function LW($,v){if(k7)return await v();try{return await $()}catch(U){if(U instanceof ReferenceError||U instanceof DOMException&&U.name==="NotSupportedError")return await v();else throw U}}async function qG($,v){return await LW(async()=>{let U=C8($)?$:await E7($),I=await crypto.subtle.importKey("raw",B7(v),{name:"X25519"},CW,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:I},U,256))},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wG.scalarMult($,v)})}async function H0($){return await LW(async()=>{return qG($,wG.GuBytes)},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wG.scalarMultBase($)})}var P7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function E7($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...P7,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},CW,["deriveBits"])}function C8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function B7($){return $}class L8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),L7(TU($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let U=await this.s.read();if(U.done)return this.buf=TU($),null;this.buf=U.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:TU(this.transcript)}}}function L7($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function TU($){let v=$.reduce((g,J)=>g+J.length,0),U=new Uint8Array(v),I=0;for(let g of $)U.set(g,I),I+=g.length;return U}function GI($,...v){return $.pipeThrough(new TransformStream({start(U){for(let I of v)U.enqueue(I)}}))}function YG($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function f8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fW($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function _W($,v){let U=$.getReader(),I=[],g=0;while(g<v){let{done:O,value:D}=await U.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");I.push(D),g+=D.length}U.releaseLock();let J=TU(I),G=J.subarray(0,v),z=GI($,J.subarray(v));return{data:G,rest:z}}class vg{args;body;constructor($,v){this.args=$,this.body=v}}async function f7($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let U=v.split(" ");if(U.length<2||U.shift()!=="->")return{next:v};for(let J of U)if(J.length===0)throw Error("invalid stanza");let I=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let G=vv.decode(J);if(G.length>48)throw Error("invalid stanza");if(I.push(G),G.length<48)break}let g=TU(I);return{s:new vg(U,g)}}async function nW($){let v=new L8($),U=await v.readLine();if(U!=="age-encryption.org/v1")throw Error("invalid version "+(U??"line"));let I=[];for(;;){let{s:g,next:J}=await f7(v);if(g!==void 0){I.push(g);continue}if(!J.startsWith("--- "))throw Error("invalid header");let G=vv.decode(J.slice(4)),{rest:z,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:I,headerNoMAC:D,MAC:G,headerSize:O.length,rest:GI($,z)}}}function _8($){let v=[];v.push(`age-encryption.org/v1
+var Jj=Object.defineProperty;var Gj=($)=>$;function zj($,v){this[$]=Gj.bind(null,v)}var lv=($,v)=>{for(var U in v)Jj($,U,{get:v[U],enumerable:!0,configurable:!0,set:zj.bind(v,U)})};import{parseArgs as Oj}from"util";var Dj={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function XO($,v){let U=$[v];return typeof U==="boolean"?U:void 0}function uJ($,v){let U=$[v];return typeof U==="string"?U:void 0}function xw($){let{values:v,positionals:U}=Oj({args:$,options:Dj,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:U[0]??"help",args:U.slice(1),flags:{help:XO(v,"help"),version:XO(v,"version"),dryRun:XO(v,"dry-run"),pushTo:uJ(v,"push-to"),cohort:uJ(v,"cohort"),anchorId:uJ(v,"anchor-id"),handle:uJ(v,"handle")}}}var KJ={name:"@rizom/ops",version:"0.2.0-alpha.218",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as l7,mkdirSync as d7,readFileSync as s8,writeFileSync as $D}from"fs";import{dirname as h7,join as lW}from"path";function NO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function f$($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(`${U}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw RangeError(`${U}expected integer >= 0, got ${$}`)}}function x$($,v,U=""){let I=NO($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let G=U&&`"${U}" `,z=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=G+"expected Uint8Array"+z+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function Xg($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(f$($.outputLen),f$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function FU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function TJ($,v){x$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw RangeError('"digestInto() output" expected to be of length >='+U)}function HJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iU($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function nv($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var Xj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Nj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function wj($){for(let v=0;v<$.length;v++)$[v]=Nj($[v]);return $}var wO=Xj?($)=>$:wj,ow=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),qj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function AJ($){if(x$($),ow)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=qj[$[U]];return v}var Qg={_0:48,_9:57,A:65,F:70,a:97,f:102};function cw($){if($>=Qg._0&&$<=Qg._9)return $-Qg._0;if($>=Qg.A&&$<=Qg.F)return $-(Qg.A-10);if($>=Qg.a&&$<=Qg.f)return $-(Qg.a-10);return}function yI($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(ow)try{return Uint8Array.fromHex($)}catch(g){if(g instanceof SyntaxError)throw RangeError(g.message);throw g}let v=$.length,U=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let G=cw($.charCodeAt(J)),z=cw($.charCodeAt(J+1));if(G===void 0||z===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=G*16+z}return I}function Yj($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function qO($,v=""){if(typeof $==="string")return Yj($);return x$($,void 0,v)}function YO(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];x$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function SJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function WO($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.canXOF=I.canXOF,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function Ng($=32){f$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var rO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Xg($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Ov(I)}update($){return FU(this),this.iHash.update($),this}digestInto($){FU(this),TJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:G}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=G,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,U,I)=>new VO(v,U).update(I).digest();return $.create=(v,U)=>new VO(v,U),$})();function lI($,v,U){if(Xg($),U===void 0)U=new Uint8Array($.outputLen);return dv($,U,v)}var ZO=Uint8Array.of(0),yw=Uint8Array.of();function jO($,v,U,I=32){Xg($),f$(I,"length"),x$(v,void 0,"prk");let g=$.outputLen;if(v.length<g)throw Error('"prk" must be at least HashLen octets');if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=yw;else x$(U,void 0,"info");let G=new Uint8Array(J*g),z=dv.create($,v),O=z._cloneInto(),D=new Uint8Array(z.outputLen);for(let X=0;X<J;X++)ZO[0]=X+1,O.update(X===0?yw:D).update(U).update(ZO).digestInto(D),G.set(D,g*X),z._cloneInto(O);return z.destroy(),O.destroy(),Ov(D,ZO),G.slice(0,I)}var Pg=($,v,U,I,g)=>jO($,lI($,v,U),I,g);function lw($,v,U){return $&v^~$&U}function dw($,v,U){return $&v^$&U^v&U}class kJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iU(this.buffer)}update($){FU(this),x$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let G=Math.min(I-this.pos,g-J);if(G===I){let z=iU($);for(;I<=g-J;J+=I)this.process(z,J);continue}if(U.set($.subarray(J,J+G),this.pos),this.pos+=G,J+=G,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){FU(this),TJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Ov(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let G=iU($),z=this.outputLen;if(z%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=z/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)G.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:G}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=G,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var wg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),qg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),c$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),o$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var PJ=BigInt(4294967295),hw=BigInt(32);function Wj($,v=!1){if(v)return{h:Number($&PJ),l:Number($>>hw&PJ)};return{h:Number($>>hw&PJ)|0,l:Number($&PJ)|0}}function pw($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:G,l:z}=Wj($[J],v);[I[J],g[J]]=[G,z]}return[I,g]}var MO=($,v,U)=>$>>>U,RO=($,v,U)=>$<<32-U|v>>>U,JU=($,v,U)=>$>>>U|v<<32-U,GU=($,v,U)=>$<<32-U|v>>>U,dI=($,v,U)=>$<<64-U|v>>>U-32,hI=($,v,U)=>$>>>U-32|v<<64-U;function hv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var tw=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),aw=($,v,U,I)=>v+U+I+($/4294967296|0)|0,ew=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),sw=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,$q=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),vq=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var Vj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Eg=new Uint32Array(64);class uO extends kJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G,H:z}=this;return[$,v,U,I,g,J,G,z]}set($,v,U,I,g,J,G,z){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=G|0,this.H=z|0}process($,v){for(let X=0;X<16;X++,v+=4)Eg[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=Eg[X-15],q=Eg[X-2],w=nv(N,7)^nv(N,18)^N>>>3,W=nv(q,17)^nv(q,19)^q>>>10;Eg[X]=W+Eg[X-7]+w+Eg[X-16]|0}let{A:U,B:I,C:g,D:J,E:G,F:z,G:O,H:D}=this;for(let X=0;X<64;X++){let N=nv(G,6)^nv(G,11)^nv(G,25),q=D+N+lw(G,z,O)+Vj[X]+Eg[X]|0,W=(nv(U,2)^nv(U,13)^nv(U,22))+dw(U,I,g)|0;D=O,O=z,z=G,G=J+q|0,J=g,g=I,I=U,U=q+W|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,G=G+this.E|0,z=z+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,G,z,O,D)}roundClean(){Ov(Eg)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class gq extends uO{A=wg[0]|0;B=wg[1]|0;C=wg[2]|0;D=wg[3]|0;E=wg[4]|0;F=wg[5]|0;G=wg[6]|0;H=wg[7]|0;constructor(){super(32)}}class Zj extends uO{A=qg[0]|0;B=qg[1]|0;C=qg[2]|0;D=qg[3]|0;E=qg[4]|0;F=qg[5]|0;G=qg[6]|0;H=qg[7]|0;constructor(){super(28)}}var Uq=(()=>pw(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),jj=(()=>Uq[0])(),Mj=(()=>Uq[1])(),Bg=new Uint32Array(80),Cg=new Uint32Array(80);class pI extends kJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:G,Dl:z,Eh:O,El:D,Fh:X,Fl:N,Gh:q,Gl:w,Hh:W,Hl:Z}=this;return[$,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z]}set($,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=G|0,this.Dl=z|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=q|0,this.Gl=w|0,this.Hh=W|0,this.Hl=Z|0}process($,v){for(let u=0;u<16;u++,v+=4)Bg[u]=$.getUint32(v),Cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=Bg[u-15]|0,L=Cg[u-15]|0,i=JU(_,L,1)^JU(_,L,8)^MO(_,L,7),y=GU(_,L,1)^GU(_,L,8)^RO(_,L,7),d=Bg[u-2]|0,n=Cg[u-2]|0,b=JU(d,n,19)^dI(d,n,61)^MO(d,n,6),v$=GU(d,n,19)^hI(d,n,61)^RO(d,n,6),S=ew(y,v$,Cg[u-7],Cg[u-16]),K=sw(S,i,b,Bg[u-7],Bg[u-16]);Bg[u]=K|0,Cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:G,Cl:z,Dh:O,Dl:D,Eh:X,El:N,Fh:q,Fl:w,Gh:W,Gl:Z,Hh:r,Hl:T}=this;for(let u=0;u<80;u++){let _=JU(X,N,14)^JU(X,N,18)^dI(X,N,41),L=GU(X,N,14)^GU(X,N,18)^hI(X,N,41),i=X&q^~X&W,y=N&w^~N&Z,d=$q(T,L,y,Mj[u],Cg[u]),n=vq(d,r,_,i,jj[u],Bg[u]),b=d|0,v$=JU(U,I,28)^dI(U,I,34)^dI(U,I,39),S=GU(U,I,28)^hI(U,I,34)^hI(U,I,39),K=U&g^U&G^g&G,k=I&J^I&z^J&z;r=W|0,T=Z|0,W=q|0,Z=w|0,q=X|0,w=N|0,{h:X,l:N}=hv(O|0,D|0,n|0,b|0),O=G|0,D=z|0,G=g|0,z=J|0,g=U|0,J=I|0;let V=tw(b,S,k);U=aw(V,n,v$,K),I=V|0}({h:U,l:I}=hv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=hv(this.Bh|0,this.Bl|0,g|0,J|0),{h:G,l:z}=hv(this.Ch|0,this.Cl|0,G|0,z|0),{h:O,l:D}=hv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=hv(this.Eh|0,this.El|0,X|0,N|0),{h:q,l:w}=hv(this.Fh|0,this.Fl|0,q|0,w|0),{h:W,l:Z}=hv(this.Gh|0,this.Gl|0,W|0,Z|0),{h:r,l:T}=hv(this.Hh|0,this.Hl|0,r|0,T|0),this.set(U,I,g,J,G,z,O,D,X,N,q,w,W,Z,r,T)}roundClean(){Ov(Bg,Cg)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Iq extends pI{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(64)}}class Rj extends pI{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uj extends pI{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Kj extends pI{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var _$=WO(()=>new gq,rO(1));var EJ=WO(()=>new Iq,rO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function _J($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function HO($){if(!_J($))throw TypeError("Uint8Array expected")}function Dq($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((U)=>typeof U==="string");else return v.every((U)=>Number.isSafeInteger(U))}function Qq($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Lg($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aI($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function CJ($){if(!Array.isArray($))throw TypeError("array expected")}function LJ($,v){if(!Dq(!0,v))throw TypeError(`${$}: array of strings expected`)}function AO($,v){if(!Dq(!1,v))throw TypeError(`${$}: array of numbers expected`)}function uv(...$){let v=(J)=>J,U=(J,G)=>(z)=>J(G(z)),I=$.map((J)=>J.encode).reduceRight(U,v),g=$.map((J)=>J.decode).reduce(U,v);return{encode:I,decode:g}}function Kv($){let v=typeof $==="string"?$.split(""):$,U=v.length;LJ("alphabet",v);let I=new Map(v.map((g,J)=>[g,J]));return{encode:(g)=>{return CJ(g),g.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=U)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(g)=>{return CJ(g),g.map((J)=>{Lg("alphabet.decode",J);let G=I.get(J);if(G===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return G})}}}function Tv($=""){return Lg("join",$),{encode:(v)=>{return LJ("join.decode",v),v.join($)},decode:(v)=>{return Lg("join.decode",v),v.split($)}}}function nJ($,v="="){return aI($),Lg("padding",v),{encode(U){LJ("padding.encode",U);while(U.length*$%8)U.push(v);return U},decode(U){LJ("padding.decode",U);let I=U.length;if(I*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;I>0&&U[I-1]===v;I--)if((I-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return U.slice(0,I)}}}function Xq($){return Qq($),{encode:(v)=>v,decode:(v)=>$(v)}}function Jq($,v,U){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(U<2)throw RangeError(`convertRadix: invalid to=${U}, base cannot be less than 2`);if(CJ($),!$.length)return[];let I=0,g=[],J=Array.from($,(z)=>{if(aI(z),z<0||z>=v)throw Error(`invalid integer: ${z}`);return z}),G=J.length;while(!0){let z=0,O=!0;for(let D=I;D<G;D++){let X=J[D],N=v*z,q=N+X;if(!Number.isSafeInteger(q)||N/v!==z||q-X!==N)throw Error("convertRadix: carry overflow");let w=q/U;z=q%U;let W=Math.floor(w);if(J[D]=W,!Number.isSafeInteger(W)||W*U+z!==q)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!W)I=D;else O=!1}if(g.push(z),O)break}for(let z=0;z<$.length-1&&$[z]===0;z++)g.push(0);return g.reverse()}var Nq=($,v)=>v===0?$:Nq(v,$%v),fJ=($,v)=>$+(v-Nq($,v)),BJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function KO($,v,U,I){if(CJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(U<=0||U>32)throw RangeError(`convertRadix2: wrong to=${U}`);if(fJ(v,U)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${U} carryBits=${fJ(v,U)}`);let g=0,J=0,G=BJ[v],z=BJ[U]-1,O=[];for(let D of $){if(aI(D),D>=G)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(g=g<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=U;J-=U)O.push((g>>J-U&z)>>>0);let X=BJ[J];if(X===void 0)throw Error("invalid carry");g&=X-1}if(g=g<<U-J&z,!I&&J>=v)throw Error("Excess padding");if(!I&&g>0)throw Error(`Non-zero padding: ${g}`);if(I&&J>0)O.push(g>>>0);return O}function Tj($){aI($);let v=256;return{encode:(U)=>{if(!_J(U))throw TypeError("radix.encode input should be Uint8Array");return Jq(Array.from(U),v,$)},decode:(U)=>{return AO("radix.decode",U),Uint8Array.from(Jq(U,$,v))}}}function Pv($,v=!1){if(aI($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(fJ(8,$)>32||fJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(U)=>{if(!_J(U))throw TypeError("radix2.encode input should be Uint8Array");return KO(Array.from(U),8,$,!v)},decode:(U)=>{return AO("radix2.decode",U),Uint8Array.from(KO(U,$,8,v))}}}function Gq($){return Qq($),function(...v){try{return $.apply(null,v)}catch(U){}}}var dT=Object.freeze(uv(Pv(4),Kv("0123456789ABCDEF"),Tv(""))),hT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),nJ(5),Tv(""))),pT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Tv(""))),tT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),nJ(5),Tv(""))),aT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Tv(""))),eT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Tv(""),Xq(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),wq=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Hj=/[\t\n\f\r ]/,qq=($,v)=>{Lg("base64",$);let U=v?"base64url":"base64";if($.length>0&&Hj.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:U,lastChunkHandling:"strict"})},SO=Object.freeze(wq?{encode($){return HO($),$.toBase64()},decode($){return qq($,!1)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),nJ(6),Tv(""))),vv=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Tv(""))),sT=Object.freeze(wq?{encode($){return HO($),$.toBase64({alphabet:"base64url"})},decode($){return qq($,!0)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),nJ(6),Tv(""))),$H=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Tv(""))),kO=($)=>uv(Tj(58),Kv($),Tv("")),vH=Object.freeze(kO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),gH=Object.freeze(kO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),UH=Object.freeze(kO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var TO=uv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Tv("")),zq=[996825010,642813549,513874426,1027748829,705979059];function tI($){let v=$>>25,U=($&33554431)<<5;for(let I=0;I<zq.length;I++)if((v>>I&1)===1)U^=zq[I];return U}function Oq($,v,U=1){let I=$.length,g=1;for(let J=0;J<I;J++){let G=$.charCodeAt(J);if(G<33||G>126)throw Error(`Invalid prefix (${$})`);g=tI(g)^G>>5}g=tI(g);for(let J=0;J<I;J++)g=tI(g)^$.charCodeAt(J)&31;for(let J of v)g=tI(g)^J;for(let J=0;J<6;J++)g=tI(g);return g^=U,TO.encode(KO([g%BJ[30]],30,5,!1))}function Yq($){let v=$==="bech32"?1:734539939,U=Pv(5),I=U.decode,g=U.encode,J=Gq(I);function G(N,q,w=90){if(Lg("bech32.encode prefix",N),_J(q))q=Array.from(q);AO("bech32.encode",q);let W=N.length;if(W===0)throw TypeError(`Invalid prefix length ${W}`);let Z=W+7+q.length;if(w!==!1&&Z>w)throw TypeError(`Length ${Z} exceeds limit ${w}`);let r=N.toLowerCase(),T=Oq(r,q,v);return`${r}1${TO.encode(q)}${T}`}function z(N,q=90){Lg("bech32.decode input",N);let w=N.length;if(w<8||q!==!1&&w>q)throw TypeError(`invalid string length: ${w} (${N}). Expected (8..${q})`);let W=N.toLowerCase();if(N!==W&&N!==N.toUpperCase())throw Error("String must be lowercase or uppercase");let Z=W.lastIndexOf("1");if(Z===0||Z===-1)throw Error('Letter "1" must be present between prefix and data only');let r=W.slice(0,Z),T=W.slice(Z+1);if(T.length<6)throw Error("Data must be at least 6 characters long");let u=TO.decode(T).slice(0,-6),_=Oq(r,u,v);if(!T.endsWith(_))throw Error(`Invalid checksum in ${N}: expected "${_}"`);return{prefix:r,words:u}}let O=Gq(z);function D(N){let{prefix:q,words:w}=z(N,!1);return{prefix:q,words:w,bytes:I(w)}}function X(N,q){return G(N,g(q))}return{encode:G,decode:z,encodeFromBytes:X,decodeToBytes:D,decodeUnsafe:O,fromWords:I,fromWordsUnsafe:J,toWords:g}}var Hv=Object.freeze(Yq("bech32")),IH=Object.freeze(Yq("bech32m"));var Aj=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Sj={encode($){return HO($),$.toHex()},decode($){return Lg("hex",$),Uint8Array.fromHex($)}},JH=Object.freeze(Aj?Sj:uv(Pv(4),Kv("0123456789abcdef"),Tv(""),Xq(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Pj($,v,U,I){Xg($);let g=SJ({dkLen:32,asyncTick:10},I),{c:J,dkLen:G,asyncTick:z}=g;if(f$(J,"c"),f$(G,"dkLen"),f$(z,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(G<1)throw Error('"dkLen" must be >= 1');if(G>4294967295*$.outputLen)throw Error("derived key too long");let O=qO(v,"password"),D=qO(U,"salt"),X=new Uint8Array(G),N=dv.create($,O),q=N._cloneInto().update(D);return{c:J,dkLen:G,asyncTick:z,DK:X,PRF:N,PRFSalt:q}}function Ej($,v,U,I,g){if($.destroy(),v.destroy(),I)I.destroy();return Ov(g),U}function PO($,v,U,I){let{c:g,dkLen:J,DK:G,PRF:z,PRFSalt:O}=Pj($,v,U,I),D,X=new Uint8Array(4),N=iU(X),q=new Uint8Array(z.outputLen);for(let w=1,W=0;W<J;w++,W+=z.outputLen){let Z=G.subarray(W,W+z.outputLen);N.setInt32(0,w,!1),(D=O._cloneInto(D)).update(X).digestInto(q),Z.set(q.subarray(0,Z.length));for(let r=1;r<g;r++){z._cloneInto(D).update(q).digestInto(q);for(let T=0;T<Z.length;T++)Z[T]^=q[T]}}return Ej(z,O,G,D,q)}function Wq($,v,U,I,g,J){let G=$[v++]^U[I++],z=$[v++]^U[I++],O=$[v++]^U[I++],D=$[v++]^U[I++],X=$[v++]^U[I++],N=$[v++]^U[I++],q=$[v++]^U[I++],w=$[v++]^U[I++],W=$[v++]^U[I++],Z=$[v++]^U[I++],r=$[v++]^U[I++],T=$[v++]^U[I++],u=$[v++]^U[I++],_=$[v++]^U[I++],L=$[v++]^U[I++],i=$[v++]^U[I++],y=G,d=z,n=O,b=D,v$=X,S=N,K=q,k=w,V=W,M=Z,j=r,A=T,R=u,E=_,C=L,x=i;for(let e=0;e<8;e+=2)v$^=R$(y+R|0,7),V^=R$(v$+y|0,9),R^=R$(V+v$|0,13),y^=R$(R+V|0,18),M^=R$(S+d|0,7),E^=R$(M+S|0,9),d^=R$(E+M|0,13),S^=R$(d+E|0,18),C^=R$(j+K|0,7),n^=R$(C+j|0,9),K^=R$(n+C|0,13),j^=R$(K+n|0,18),b^=R$(x+A|0,7),k^=R$(b+x|0,9),A^=R$(k+b|0,13),x^=R$(A+k|0,18),d^=R$(y+b|0,7),n^=R$(d+y|0,9),b^=R$(n+d|0,13),y^=R$(b+n|0,18),K^=R$(S+v$|0,7),k^=R$(K+S|0,9),v$^=R$(k+K|0,13),S^=R$(v$+k|0,18),A^=R$(j+M|0,7),V^=R$(A+j|0,9),M^=R$(V+A|0,13),j^=R$(M+V|0,18),R^=R$(x+C|0,7),E^=R$(R+x|0,9),C^=R$(E+R|0,13),x^=R$(C+E|0,18);g[J++]=G+y|0,g[J++]=z+d|0,g[J++]=O+n|0,g[J++]=D+b|0,g[J++]=X+v$|0,g[J++]=N+S|0,g[J++]=q+K|0,g[J++]=w+k|0,g[J++]=W+V|0,g[J++]=Z+M|0,g[J++]=r+j|0,g[J++]=T+A|0,g[J++]=u+R|0,g[J++]=_+E|0,g[J++]=L+C|0,g[J++]=i+x|0}function EO($,v,U,I,g){let J=I+0,G=I+16*g;for(let z=0;z<16;z++)U[G+z]=$[v+(2*g-1)*16+z];for(let z=0;z<g;z++,J+=16,v+=16){if(Wq(U,G,$,v,U,J),z>0)G+=16;Wq(U,J,$,v+=16,U,G)}}function Bj($,v,U){let I=SJ({dkLen:32,asyncTick:10,maxmem:1073742848},U),{N:g,r:J,p:G,dkLen:z,asyncTick:O,maxmem:D,onProgress:X}=I;if(f$(g,"N"),f$(J,"r"),f$(G,"p"),f$(z,"dkLen"),f$(O,"asyncTick"),f$(D,"maxmem"),X!==void 0&&typeof X!=="function")throw Error("progressCb must be a function");let N=128*J,q=N/4,w=Math.pow(2,32);if(g<=1||(g&g-1)!==0||g>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(G<1||G>(w-1)*32/N)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(z<1||z>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let W=N*(g+G+1);if(W>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+W+", maxmem="+D);let Z=PO(_$,$,v,{c:1,dkLen:N*G}),r=HJ(Z),T=HJ(new Uint8Array(N*g)),u=HJ(new Uint8Array(N)),_=()=>{};if(X){let L=2*g*G,i=Math.max(Math.floor(L/1e4),1),y=0;_=()=>{if(y++,X&&(!(y%i)||y===L))X(y/L)}}return{N:g,r:J,p:G,dkLen:z,blockSize32:q,V:T,B32:r,B:Z,tmp:u,blockMixCb:_,asyncTick:O}}function Cj($,v,U,I,g){let J=PO(_$,$,U,{c:1,dkLen:v});return Ov(U,I,g),J}function BO($,v,U){let{N:I,r:g,p:J,dkLen:G,blockSize32:z,V:O,B32:D,B:X,tmp:N,blockMixCb:q}=Bj($,v,U);wO(D);for(let w=0;w<J;w++){let W=z*w;for(let Z=0;Z<z;Z++)O[Z]=D[W+Z];for(let Z=0,r=0;Z<I-1;Z++)EO(O,r,O,r+=z,g),q();EO(O,(I-1)*z,D,W,g),q();for(let Z=0;Z<I;Z++){let r=(D[W+z-16]&I-1)>>>0;for(let T=0;T<z;T++)N[T]=D[W+T]^O[r*z+T];EO(N,0,D,W,g),q()}}return wO(D),Cj($,G,X,O,N)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Lj($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function bJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function xU($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,U=""){let I=Lj($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let G=U&&`"${U}" `,z=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=G+"expected Uint8Array"+z+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function CO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function rq($,v,U=!1){b$($,void 0,"output");let I=v.outputLen;if($.length<I)throw RangeError("digestInto() expects output buffer of length at least "+I);if(U&&!cU($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fj($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var zU=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),_j=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var nj=($)=>{for(let v=0;v<$.length;v++)$[v]=_j($[v]);return $},Yg=zU?($)=>$:nj;function Vq($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function Zq($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function jq($,v,U){let I=v,g=U||(()=>[]),J=(z,O)=>I(O,...g(z)).update(z).digest(),G=I(new Uint8Array($),...g(new Uint8Array(0)));return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(z,...O)=>I(z,...O),J}var Mq=($,v)=>{function U(I,...g){if(b$(I,void 0,"key"),$.nonceLength!==void 0){let X=g[0];b$(X,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&g[1]!==void 0)b$(g[1],void 0,"AAD");let G=v(I,...g),z=(X,N)=>{if(N!==void 0){if(X!==2)throw Error("cipher output not supported");b$(N,void 0,"output")}},O=!1;return{encrypt(X,N){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(X),z(G.encrypt.length,N),G.encrypt(X,N)},decrypt(X,N){if(b$(X),J&&X.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return z(G.decrypt.length,N),G.decrypt(X,N)}}}return Object.assign(U,$),U};function eI($,v,U=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(U&&!cU(v))throw Error("invalid output, must be aligned");return v}function Rq($,v,U){xU($),xU(v),bJ(U);let I=new Uint8Array(16),g=fj(I);return g.setBigUint64(0,BigInt(v),U),g.setBigUint64(8,BigInt($),U),I}function cU($){return $.byteOffset%4===0}function oU($){return Uint8Array.from(b$($))}var Kq=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),bj=(()=>Yg(pv(Kq("expand 16-byte k"))))(),mj=(()=>Yg(pv(Kq("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var sI=64,Fj=16,LO=(()=>4294967295)(),uq=Uint32Array.of();function ij($,v,U,I,g,J,G,z){let O=g.length,D=new Uint8Array(sI),X=pv(D),N=zU&&cU(g)&&cU(J),q=N?pv(g):uq,w=N?pv(J):uq;if(!zU){for(let W=0;W<O;G++){if($(v,U,I,X,G,z),Yg(X),G>=LO)throw Error("arx: counter overflow");let Z=Math.min(sI,O-W);for(let r=0,T;r<Z;r++)T=W+r,J[T]=g[T]^D[r];W+=Z}return}for(let W=0;W<O;G++){if($(v,U,I,X,G,z),G>=LO)throw Error("arx: counter overflow");let Z=Math.min(sI,O-W);if(N&&Z===sI){let r=W/4;if(W%4!==0)throw Error("arx: invalid block position");for(let T=0,u;T<Fj;T++)u=r+T,w[u]=q[u]^X[T];W+=sI;continue}for(let r=0,T;r<Z;r++)T=W+r,J[T]=g[T]^D[r];W+=Z}}function Tq($,v){let{allowShortKeys:U,extendNonceFn:I,counterLength:g,counterRight:J,rounds:G}=Vq({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return xU(g),xU(G),bJ(J),bJ(U),(z,O,D,X,N=0)=>{b$(z,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let q=D.length;if(X=eI(q,X,!1),xU(N),N<0||N>=LO)throw Error("arx: counter overflow");let w=[],W=z.length,Z,r;if(W===32)w.push(Z=oU(z)),r=mj;else if(W===16&&U)Z=new Uint8Array(32),Z.set(z),Z.set(z,16),r=bj,w.push(Z);else throw b$(z,32,"arx key"),Error("invalid key size");if(!zU||!cU(O))w.push(O=oU(O));let T=pv(Z);if(I){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(zU)I(r,T,pv(L),T);else{let i=Yg(Uint32Array.from(r));I(i,T,pv(L),T),bv(i),Yg(T)}O=O.subarray(16)}else if(!zU)Yg(T);let u=16-g;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,w.push(O)}let _=Yg(pv(O));try{return ij($,r,T,_,D,X,N,G),X}finally{bv(...w)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class Hq{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=oU(b$($,32,"key"));let v=y$($,0),U=y$($,2),I=y$($,4),g=y$($,6),J=y$($,8),G=y$($,10),z=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|U<<3)&8191,this.r[2]=(U>>>10|I<<6)&7939,this.r[3]=(I>>>7|g<<9)&8191,this.r[4]=(g>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|G<<2)&8191,this.r[7]=(G>>>11|z<<5)&8065,this.r[8]=(z>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,U=!1){let I=U?0:2048,{h:g,r:J}=this,G=J[0],z=J[1],O=J[2],D=J[3],X=J[4],N=J[5],q=J[6],w=J[7],W=J[8],Z=J[9],r=y$($,v+0),T=y$($,v+2),u=y$($,v+4),_=y$($,v+6),L=y$($,v+8),i=y$($,v+10),y=y$($,v+12),d=y$($,v+14),n=g[0]+(r&8191),b=g[1]+((r>>>13|T<<3)&8191),v$=g[2]+((T>>>10|u<<6)&8191),S=g[3]+((u>>>7|_<<9)&8191),K=g[4]+((_>>>4|L<<12)&8191),k=g[5]+(L>>>1&8191),V=g[6]+((L>>>14|i<<2)&8191),M=g[7]+((i>>>11|y<<5)&8191),j=g[8]+((y>>>8|d<<8)&8191),A=g[9]+(d>>>5|I),R=0,E=R+n*G+b*(5*Z)+v$*(5*W)+S*(5*w)+K*(5*q);R=E>>>13,E&=8191,E+=k*(5*N)+V*(5*X)+M*(5*D)+j*(5*O)+A*(5*z),R+=E>>>13,E&=8191;let C=R+n*z+b*G+v$*(5*Z)+S*(5*W)+K*(5*w);R=C>>>13,C&=8191,C+=k*(5*q)+V*(5*N)+M*(5*X)+j*(5*D)+A*(5*O),R+=C>>>13,C&=8191;let x=R+n*O+b*z+v$*G+S*(5*Z)+K*(5*W);R=x>>>13,x&=8191,x+=k*(5*w)+V*(5*q)+M*(5*N)+j*(5*X)+A*(5*D),R+=x>>>13,x&=8191;let e=R+n*D+b*O+v$*z+S*G+K*(5*Z);R=e>>>13,e&=8191,e+=k*(5*W)+V*(5*w)+M*(5*q)+j*(5*N)+A*(5*X),R+=e>>>13,e&=8191;let J$=R+n*X+b*D+v$*O+S*z+K*G;R=J$>>>13,J$&=8191,J$+=k*(5*Z)+V*(5*W)+M*(5*w)+j*(5*q)+A*(5*N),R+=J$>>>13,J$&=8191;let z$=R+n*N+b*X+v$*D+S*O+K*z;R=z$>>>13,z$&=8191,z$+=k*G+V*(5*Z)+M*(5*W)+j*(5*w)+A*(5*q),R+=z$>>>13,z$&=8191;let Q$=R+n*q+b*N+v$*X+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=k*z+V*G+M*(5*Z)+j*(5*W)+A*(5*w),R+=Q$>>>13,Q$&=8191;let w$=R+n*w+b*q+v$*N+S*X+K*D;R=w$>>>13,w$&=8191,w$+=k*O+V*z+M*G+j*(5*Z)+A*(5*W),R+=w$>>>13,w$&=8191;let X$=R+n*W+b*w+v$*q+S*N+K*X;R=X$>>>13,X$&=8191,X$+=k*D+V*O+M*z+j*G+A*(5*Z),R+=X$>>>13,X$&=8191;let N$=R+n*Z+b*W+v$*w+S*q+K*N;R=N$>>>13,N$&=8191,N$+=k*X+V*D+M*O+j*z+A*G,R+=N$>>>13,N$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,C+=R,g[0]=E,g[1]=C,g[2]=x,g[3]=e,g[4]=J$,g[5]=z$,g[6]=Q$,g[7]=w$,g[8]=X$,g[9]=N$}finalize(){let{h:$,pad:v}=this,U=new Uint16Array(10),I=$[1]>>>13;$[1]&=8191;for(let G=2;G<10;G++)$[G]+=I,I=$[G]>>>13,$[G]&=8191;$[0]+=I*5,I=$[0]>>>13,$[0]&=8191,$[1]+=I,I=$[1]>>>13,$[1]&=8191,$[2]+=I,U[0]=$[0]+5,I=U[0]>>>13,U[0]&=8191;for(let G=1;G<10;G++)U[G]=$[G]+I,I=U[G]>>>13,U[G]&=8191;U[9]-=8192;let g=(I^1)-1;for(let G=0;G<10;G++)U[G]&=g;g=~g;for(let G=0;G<10;G++)$[G]=$[G]&g|U[G];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let G=1;G<8;G++)J=($[G]+v[G]|0)+(J>>>16)|0,$[G]=J&65535;bv(U)}update($){CO(this),b$($),$=oU($);let{buffer:v,blockLen:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(U-this.pos,I-g);if(J===U){for(;U<=I-g;g+=U)this.process($,g);continue}if(v.set($.subarray(g,g+J),this.pos),this.pos+=J,g+=J,this.pos===U)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){CO(this),rq($,this),this.finished=!0;let{buffer:v,h:U}=this,{pos:I}=this;if(I){v[I++]=1;for(;I<16;I++)v[I]=0;this.process(v,0,!0)}this.finalize();let g=0;for(let J=0;J<8;J++)$[g++]=U[J]>>>0,$[g++]=U[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}}var Aq=jq(32,($)=>new Hq($));function xj($,v,U,I,g,J=20){let G=$[0],z=$[1],O=$[2],D=$[3],X=v[0],N=v[1],q=v[2],w=v[3],W=v[4],Z=v[5],r=v[6],T=v[7],u=g,_=U[0],L=U[1],i=U[2],y=G,d=z,n=O,b=D,v$=X,S=N,K=q,k=w,V=W,M=Z,j=r,A=T,R=u,E=_,C=L,x=i;for(let J$=0;J$<J;J$+=2)y=y+v$|0,R=u$(R^y,16),V=V+R|0,v$=u$(v$^V,12),y=y+v$|0,R=u$(R^y,8),V=V+R|0,v$=u$(v$^V,7),d=d+S|0,E=u$(E^d,16),M=M+E|0,S=u$(S^M,12),d=d+S|0,E=u$(E^d,8),M=M+E|0,S=u$(S^M,7),n=n+K|0,C=u$(C^n,16),j=j+C|0,K=u$(K^j,12),n=n+K|0,C=u$(C^n,8),j=j+C|0,K=u$(K^j,7),b=b+k|0,x=u$(x^b,16),A=A+x|0,k=u$(k^A,12),b=b+k|0,x=u$(x^b,8),A=A+x|0,k=u$(k^A,7),y=y+S|0,x=u$(x^y,16),j=j+x|0,S=u$(S^j,12),y=y+S|0,x=u$(x^y,8),j=j+x|0,S=u$(S^j,7),d=d+K|0,R=u$(R^d,16),A=A+R|0,K=u$(K^A,12),d=d+K|0,R=u$(R^d,8),A=A+R|0,K=u$(K^A,7),n=n+k|0,E=u$(E^n,16),V=V+E|0,k=u$(k^V,12),n=n+k|0,E=u$(E^n,8),V=V+E|0,k=u$(k^V,7),b=b+v$|0,C=u$(C^b,16),M=M+C|0,v$=u$(v$^M,12),b=b+v$|0,C=u$(C^b,8),M=M+C|0,v$=u$(v$^M,7);let e=0;I[e++]=G+y|0,I[e++]=z+d|0,I[e++]=O+n|0,I[e++]=D+b|0,I[e++]=X+v$|0,I[e++]=N+S|0,I[e++]=q+K|0,I[e++]=w+k|0,I[e++]=W+V|0,I[e++]=Z+M|0,I[e++]=r+j|0,I[e++]=T+A|0,I[e++]=u+R|0,I[e++]=_+E|0,I[e++]=L+C|0,I[e++]=i+x|0}var cj=Tq(xj,{counterRight:!1,counterLength:4,allowShortKeys:!1});var oj=new Uint8Array(16),Sq=($,v)=>{$.update(v);let U=v.length%16;if(U)$.update(oj.subarray(U))},yj=new Uint8Array(32);function kq($,v,U,I,g){if(g!==void 0)b$(g,void 0,"AAD");let J=$(v,U,yj),G=Rq(I.length,g?g.length:0,!0),z=Aq.create(J);if(g)Sq(z,g);Sq(z,I),z.update(G);let O=z.digest();return bv(J,G),O}var lj=($)=>(v,U,I)=>{return{encrypt(J,G){let z=J.length;G=eI(z+16,G,!1),G.set(J);let O=G.subarray(0,-16);$(v,U,O,O,1);let D=kq($,v,U,O,I);return G.set(D,z),bv(D),G},decrypt(J,G){G=eI(J.length-16,G,!1);let z=J.subarray(0,-16),O=J.subarray(-16),D=kq($,v,U,z,I);if(!Zq(O,D))throw bv(D),Error("invalid tag");return G.set(J.subarray(0,-16)),$(v,U,G,G,1),bv(D),G}}},Ev=Mq({blockSize:64,nonceLength:12,tagLength:16},lj(cj));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function yU($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw Error(`${U}expected integer >= 0, got ${$}`)}}function Y$($,v,U=""){let I=yU($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let G=U&&`"${U}" `,z=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`;throw Error(G+"expected Uint8Array"+z+", got "+O)}return $}function Bv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function rg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function mJ($,v){Y$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw Error('"digestInto() output" expected to be of length >='+U)}function FJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Vv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function mv($,v){return $<<32-v|$>>>v}var dj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pj($){for(let v=0;v<$.length;v++)$[v]=hj($[v]);return $}var fO=dj?($)=>$:pj,Eq=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function OU($){if(Y$($),Eq)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=tj[$[U]];return v}var Wg={_0:48,_9:57,A:65,F:70,a:97,f:102};function Pq($){if($>=Wg._0&&$<=Wg._9)return $-Wg._0;if($>=Wg.A&&$<=Wg.F)return $-(Wg.A-10);if($>=Wg.a&&$<=Wg.f)return $-(Wg.a-10);return}function DU($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(Eq)return Uint8Array.fromHex($);let v=$.length,U=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let G=Pq($.charCodeAt(J)),z=Pq($.charCodeAt(J+1));if(G===void 0||z===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=G*16+z}return I}function n$(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];Y$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function lU($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function fg($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var _g=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nO=BigInt(0),_O=BigInt(1);function $0($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw Error(U+"expected boolean, got type="+typeof $)}return $}function Bq($){if(typeof $==="bigint"){if(!xJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function v0($){let v=Bq($).toString(16);return v.length&1?"0"+v:v}function Cq($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?nO:BigInt("0x"+$)}function ng($){return Cq(OU($))}function bg($){return Cq(OU(cJ(Y$($)).reverse()))}function dU($,v){F$(v),$=Bq($);let U=DU($.toString(16).padStart(v*2,"0"));if(U.length!==v)throw Error("number too large");return U}function g0($,v){return dU($,v).reverse()}function cJ($){return Uint8Array.from($)}function mg($){return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw Error(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var xJ=($)=>typeof $==="bigint"&&nO<=$;function aj($,v,U){return xJ($)&&xJ(v)&&xJ(U)&&v<=$&&$<U}function U0($,v,U,I){if(!aj(v,U,I))throw Error("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function bO($){let v;for(v=0;$>nO;$>>=_O,v+=1);return v}var I0=($)=>(_O<<BigInt($))-_O;function Lq($,v,U){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof U!=="function")throw Error("hmacFn must be a function");let I=(r)=>new Uint8Array(r),g=Uint8Array.of(),J=Uint8Array.of(0),G=Uint8Array.of(1),z=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},q=(...r)=>U(D,n$(O,...r)),w=(r=g)=>{if(D=q(J,r),O=q(),r.length===0)return;D=q(G,r),O=q()},W=()=>{if(X++>=z)throw Error("drbg: tried max amount of iterations");let r=0,T=[];while(r<v){O=q();let u=O.slice();T.push(u),r+=O.length}return n$(...T)};return(r,T)=>{N(),w(r);let u=void 0;while(!(u=T(W())))w();return N(),u}}function QU($,v={},U={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function I(J,G,z){let O=$[J];if(z&&O===void 0)return;let D=typeof O;if(D!==G||O===null)throw Error(`param "${J}" is invalid: expected ${G}, got ${D}`)}let g=(J,G)=>Object.entries(J).forEach(([z,O])=>I(z,O,G));g(v,!1),g(U,!0)}function mO($){let v=new WeakMap;return(U,...I)=>{let g=v.get(U);if(g!==void 0)return g;let J=$(U,...I);return v.set(U,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qv=BigInt(0),gv=BigInt(1),XU=BigInt(2),nq=BigInt(3),bq=BigInt(4),mq=BigInt(5),ej=BigInt(7),Fq=BigInt(8),sj=BigInt(9),iq=BigInt(16);function Dv($,v){let U=$%v;return U>=Qv?U:v+U}function Cv($,v,U){let I=$;while(v-- >Qv)I*=I,I%=U;return I}function fq($,v){if($===Qv)throw Error("invert: expected non-zero number");if(v<=Qv)throw Error("invert: expected positive modulus, got "+v);let U=Dv($,v),I=v,g=Qv,J=gv,G=gv,z=Qv;while(U!==Qv){let D=I/U,X=I%U,N=g-G*D,q=J-z*D;I=U,U=X,g=G,J=z,G=N,z=q}if(I!==gv)throw Error("invert: does not exist");return Dv(g,v)}function FO($,v,U){if(!$.eql($.sqr(v),U))throw Error("Cannot find square root")}function xq($,v){let U=($.ORDER+gv)/bq,I=$.pow(v,U);return FO($,I,v),I}function $M($,v){let U=($.ORDER-mq)/Fq,I=$.mul(v,XU),g=$.pow(I,U),J=$.mul(v,g),G=$.mul($.mul(J,XU),g),z=$.mul(J,$.sub(G,$.ONE));return FO($,z,v),z}function vM($){let v=oJ($),U=cq($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),G=($+ej)/iq;return(z,O)=>{let D=z.pow(O,G),X=z.mul(D,I),N=z.mul(D,g),q=z.mul(D,J),w=z.eql(z.sqr(X),O),W=z.eql(z.sqr(N),O);D=z.cmov(D,X,w),X=z.cmov(q,N,W);let Z=z.eql(z.sqr(X),O),r=z.cmov(D,X,Z);return FO(z,r,O),r}}function cq($){if($<nq)throw Error("sqrt is not defined for small field");let v=$-gv,U=0;while(v%XU===Qv)v/=XU,U++;let I=XU,g=oJ($);while(_q(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return xq;let J=g.pow(I,v),G=(v+gv)/XU;return function(O,D){if(O.is0(D))return D;if(_q(O,D)!==1)throw Error("Cannot find square root");let X=U,N=O.mul(O.ONE,J),q=O.pow(D,v),w=O.pow(D,G);while(!O.eql(q,O.ONE)){if(O.is0(q))return O.ZERO;let W=1,Z=O.sqr(q);while(!O.eql(Z,O.ONE))if(W++,Z=O.sqr(Z),W===X)throw Error("Cannot find square root");let r=gv<<BigInt(X-W-1),T=O.pow(N,r);X=W,N=O.sqr(T),q=O.mul(q,N),w=O.mul(w,T)}return w}}function gM($){if($%bq===nq)return xq;if($%Fq===mq)return $M;if($%iq===sj)return vM($);return cq($)}var UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function iO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=UM.reduce((I,g)=>{return I[g]="function",I},v);return QU($,U),$}function IM($,v,U){if(U<Qv)throw Error("invalid exponent, negatives unsupported");if(U===Qv)return $.ONE;if(U===gv)return v;let I=$.ONE,g=v;while(U>Qv){if(U&gv)I=$.mul(I,g);g=$.sqr(g),U>>=gv}return I}function J0($,v,U=!1){let I=Array(v.length).fill(U?$.ZERO:void 0),g=v.reduce((G,z,O)=>{if($.is0(z))return G;return I[O]=G,$.mul(G,z)},$.ONE),J=$.inv(g);return v.reduceRight((G,z,O)=>{if($.is0(z))return G;return I[O]=$.mul(G,I[O]),$.mul(G,z)},J),I}function _q($,v){let U=($.ORDER-gv)/XU,I=$.pow(v,U),g=$.eql(I,$.ONE),J=$.eql(I,$.ZERO),G=$.eql(I,$.neg($.ONE));if(!g&&!J&&!G)throw Error("invalid Legendre symbol result");return g?1:J?0:-1}function JM($,v){if(v!==void 0)F$(v);let U=v!==void 0?v:$.toString(2).length,I=Math.ceil(U/8);return{nBitLength:U,nByteLength:I}}class oq{ORDER;BITS;BYTES;isLE;ZERO=Qv;ONE=gv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Qv)throw Error("invalid field: expected ORDER > 0, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=JM($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Dv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Qv<=$&&$<this.ORDER}is0($){return $===Qv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&gv)===gv}neg($){return Dv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Dv($*$,this.ORDER)}add($,v){return Dv($+v,this.ORDER)}sub($,v){return Dv($-v,this.ORDER)}mul($,v){return Dv($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return Dv($*fq(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fq($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=gM(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g0($,this.BYTES):dU($,this.BYTES)}fromBytes($,v=!1){Y$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:G}=this;if(U){if(!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let z=g?bg($):ng($);if(G)z=Dv(z,J);if(!v){if(!this.isValid(z))throw Error("invalid field element: outside of range 0..ORDER")}return z}invertBatch($){return J0(this,$)}cmov($,v,U){return U?v:$}}function oJ($,v={}){return new oq($,v)}function yq($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function xO($){let v=yq($);return v+Math.ceil(v/2)}function lq($,v,U=!1){Y$($);let I=$.length,g=yq(v),J=xO(v);if(I<16||I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let G=U?bg($):ng($),z=Dv(G,v-gv)+gv;return U?g0(z,g):dU(z,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hU=BigInt(0),NU=BigInt(1);function G0($,v){let U=v.negate();return $?U:v}function lO($,v){let U=J0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function tq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function cO($,v){tq($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=I0($),G=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:G}}function dq($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:G}=U,z=Number($&g),O=$>>G;if(z>I)z-=J,O+=NU;let D=v*I,X=D+Math.abs(z)-1,N=z===0,q=z<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:q,isNegF:w,offsetF:D}}var oO=new WeakMap,aq=new WeakMap;function yO($){return aq.get($)||1}function hq($){if($!==hU)throw Error("invalid wNAF")}class dO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>hU){if(v&NU)U=U.add(I);I=I.double(),v>>=NU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=cO(v,this.bits),g=[],J=$,G=J;for(let z=0;z<U;z++){G=J,g.push(G);for(let O=1;O<I;O++)G=G.add(J),g.push(G);J=G.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=cO($,this.bits);for(let G=0;G<J.windows;G++){let{nextN:z,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:q}=dq(U,G,J);if(U=z,D)g=g.add(G0(N,v[q]));else I=I.add(G0(X,v[O]))}return hq(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=cO($,this.bits);for(let J=0;J<g.windows;J++){if(U===hU)break;let{nextN:G,offset:z,isZero:O,isNeg:D}=dq(U,J,g);if(U=G,O)continue;else{let X=v[z];I=I.add(D?X.negate():X)}}return hq(U),I}getPrecomputes($,v,U){let I=oO.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);oO.set(v,I)}}return I}cached($,v,U){let I=yO($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=yO($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){tq(v,this.bits),aq.set($,v),oO.delete($)}hasCache($){return yO($)!==1}}function eq($,v,U,I){let g=v,J=$.ZERO,G=$.ZERO;while(U>hU||I>hU){if(U&NU)J=J.add(g);if(I&NU)G=G.add(g);g=g.double(),U>>=NU,I>>=NU}return{p1:J,p2:G}}function pq($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return iO(v),v}else return oJ($,{isLE:U})}function sq($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>hU))throw Error(`CURVE.${O} must be positive bigint`)}let g=pq(v.p,U.Fp,I),J=pq(v.n,U.Fn,I),z=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of z)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function yJ($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var z0=BigInt(0),pU=BigInt(1),lJ=BigInt(2);function GM($){return QU($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function $Y($){let v=GM($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:G}=v,z=I==="x25519";if(!z&&I!=="x448")throw Error("invalid type");let O=G||fg,D=z?255:448,X=z?32:56,N=z?BigInt(9):BigInt(5),q=z?BigInt(121665):BigInt(39081),w=z?lJ**BigInt(254):lJ**BigInt(447),W=z?BigInt(8)*lJ**BigInt(251)-pU:BigInt(4)*lJ**BigInt(445)-pU,Z=w+W+pU,r=(V)=>Dv(V,U),T=u(N);function u(V){return g0(r(V),X)}function _(V){let M=cJ(Y$(V,X,"uCoordinate"));if(z)M[31]&=127;return r(bg(M))}function L(V){return bg(g(cJ(Y$(V,X,"scalar"))))}function i(V,M){let j=v$(_(M),L(V));if(j===z0)throw Error("invalid private or public key received");return u(j)}function y(V){return i(V,T)}let d=y,n=i;function b(V,M,j){let A=r(V*(M-j));return M=r(M-A),j=r(j+A),{x_2:M,x_3:j}}function v$(V,M){U0("u",V,z0,U),U0("scalar",M,w,Z);let j=M,A=V,R=pU,E=z0,C=V,x=pU,e=z0;for(let z$=BigInt(D-1);z$>=z0;z$--){let Q$=j>>z$&pU;e^=Q$,{x_2:R,x_3:C}=b(e,R,C),{x_2:E,x_3:x}=b(e,E,x),e=Q$;let w$=R+E,X$=r(w$*w$),N$=R-E,r$=r(N$*N$),k$=X$-r$,E$=C+x,a$=C-x,e$=r(a$*w$),rv=r(E$*N$),ov=e$+rv,yv=e$-rv;C=r(ov*ov),x=r(A*r(yv*yv)),R=r(X$*r$),E=r(k$*(X$+r(q*k$)))}({x_2:R,x_3:C}=b(e,R,C)),{x_2:E,x_3:x}=b(e,E,x);let J$=J(E);return r(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V=O(X))=>{return Y$(V,S.seed,"seed"),V},k={randomSecretKey:K};return Object.freeze({keygen:yJ(K,d),getSharedSecret:n,getPublicKey:d,scalarMult:i,scalarMultBase:y,utils:k,GuBytes:T.slice(),lengths:S})}class hO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Bv($),Y$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Vv(I)}update($){return rg(this),this.iHash.update($),this}digestInto($){rg(this),Y$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:G}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=G,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tU=($,v,U)=>new hO($,v).update(U).digest();tU.create=($,v)=>new hO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vY=($,v)=>($+($>=0?v:-v)/UY)/v;function zM($,v,U){let[[I,g],[J,G]]=v,z=vY(G*$,U),O=vY(-g*$,U),D=$-z*I-O*J,X=-z*g-O*G,N=D<Vg,q=X<Vg;if(N)D=-D;if(q)X=-X;let w=I0(Math.ceil(bO(U)/2))+aU;if(D<Vg||D>=w||X<Vg||X>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:N,k1:D,k2neg:q,k2:X}}function tO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pO($,v){let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if($0(U.lowS,"lowS"),$0(U.prehash,"prehash"),U.format!==void 0)tO(U.format);return U}class gY extends Error{constructor($=""){super($)}}var Fg={Err:gY,_tlv:{encode:($,v)=>{let{Err:U}=Fg;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=v0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?v0(g.length/2|128):"";return v0($)+J+g+v},decode($,v){let{Err:U}=Fg,I=0;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),G=0;if(!J)G=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)G=G<<8|X;if(I+=O,G<128)throw new U("tlv.decode(long): not minimal encoding")}let z=v.subarray(I,I+G);if(z.length!==G)throw new U("tlv.decode: wrong value length");return{v:z,l:v.subarray(I+G)}}},_int:{encode($){let{Err:v}=Fg;if($<Vg)throw new v("integer: negative integers are not allowed");let U=v0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=Fg;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ng($)}},toSig($){let{Err:v,_int:U,_tlv:I}=Fg,g=Y$($,void 0,"signature"),{v:J,l:G}=I.decode(48,g);if(G.length)throw new v("invalid signature: left bytes after parsing");let{v:z,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(z),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=Fg,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}},Vg=BigInt(0),aU=BigInt(1),UY=BigInt(2),dJ=BigInt(3),OM=BigInt(4);function aO($,v={}){let U=sq("weierstrass",$,v),{Fp:I,Fn:g}=U,J=U.CURVE,{h:G,n:z}=J;QU(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=JY(I,g);function X(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(K,k,V){let{x:M,y:j}=k.toAffine(),A=I.toBytes(M);if($0(V,"isCompressed"),V){X();let R=!I.isOdd(j);return n$(IY(R),A)}else return n$(Uint8Array.of(4),A,I.toBytes(j))}function q(K){Y$(K,void 0,"Point");let{publicKey:k,publicKeyUncompressed:V}=D,M=K.length,j=K[0],A=K.subarray(1);if(M===k&&(j===2||j===3)){let R=I.fromBytes(A);if(!I.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=Z(R),C;try{C=I.sqrt(E)}catch(J$){let z$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+z$)}X();let x=I.isOdd(C);if((j&1)===1!==x)C=I.neg(C);return{x:R,y:C}}else if(M===V&&j===4){let R=I.BYTES,E=I.fromBytes(A.subarray(0,R)),C=I.fromBytes(A.subarray(R,R*2));if(!r(E,C))throw Error("bad point: is not on curve");return{x:E,y:C}}else throw Error(`bad point: got length ${M}, expected compressed=${k} or uncompressed=${V}`)}let w=v.toBytes||N,W=v.fromBytes||q;function Z(K){let k=I.sqr(K),V=I.mul(k,K);return I.add(I.add(V,I.mul(K,J.a)),J.b)}function r(K,k){let V=I.sqr(k),M=Z(K);return I.eql(V,M)}if(!r(J.Gx,J.Gy))throw Error("bad curve params: generator point");let T=I.mul(I.pow(J.a,dJ),OM),u=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(T,u)))throw Error("bad curve params: a or b");function _(K,k,V=!1){if(!I.isValid(k)||V&&I.is0(k))throw Error(`bad point coordinate ${K}`);return k}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return zM(K,O.basises,g.ORDER)}let y=mO((K,k)=>{let{X:V,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:V,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(V,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),d=mO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!I.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:k,y:V}=K.toAffine();if(!I.isValid(k)||!I.isValid(V))throw Error("bad point: x or y not field elements");if(!r(k,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function n(K,k,V,M,j){return V=new b(I.mul(V.X,K),V.Y,V.Z),k=G0(M,k),V=G0(j,V),k.add(V)}class b{static BASE=new b(J.Gx,J.Gy,I.ONE);static ZERO=new b(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(K,k,V){this.X=_("x",K),this.Y=_("y",k,!0),this.Z=_("z",V),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:k,y:V}=K||{};if(!K||!I.isValid(k)||!I.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(I.is0(k)&&I.is0(V))return b.ZERO;return new b(k,V,I.ONE)}static fromBytes(K){let k=b.fromAffine(W(Y$(K,void 0,"point")));return k.assertValidity(),k}static fromHex(K){return b.fromBytes(DU(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,k=!0){if(S.createCache(this,K),!k)this.multiply(dJ);return this}assertValidity(){d(this)}hasEvenY(){let{y:K}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(K)}equals(K){L(K);let{X:k,Y:V,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.eql(I.mul(k,R),I.mul(j,M)),C=I.eql(I.mul(V,R),I.mul(A,M));return E&&C}negate(){return new b(this.X,I.neg(this.Y),this.Z)}double(){let{a:K,b:k}=J,V=I.mul(k,dJ),{X:M,Y:j,Z:A}=this,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=I.mul(M,M),e=I.mul(j,j),J$=I.mul(A,A),z$=I.mul(M,j);return z$=I.add(z$,z$),C=I.mul(M,A),C=I.add(C,C),R=I.mul(K,C),E=I.mul(V,J$),E=I.add(R,E),R=I.sub(e,E),E=I.add(e,E),E=I.mul(R,E),R=I.mul(z$,R),C=I.mul(V,C),J$=I.mul(K,J$),z$=I.sub(x,J$),z$=I.mul(K,z$),z$=I.add(z$,C),C=I.add(x,x),x=I.add(C,x),x=I.add(x,J$),x=I.mul(x,z$),E=I.add(E,x),J$=I.mul(j,A),J$=I.add(J$,J$),x=I.mul(J$,z$),R=I.sub(R,x),C=I.mul(J$,e),C=I.add(C,C),C=I.add(C,C),new b(R,E,C)}add(K){L(K);let{X:k,Y:V,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.ZERO,C=I.ZERO,x=I.ZERO,e=J.a,J$=I.mul(J.b,dJ),z$=I.mul(k,j),Q$=I.mul(V,A),w$=I.mul(M,R),X$=I.add(k,V),N$=I.add(j,A);X$=I.mul(X$,N$),N$=I.add(z$,Q$),X$=I.sub(X$,N$),N$=I.add(k,M);let r$=I.add(j,R);return N$=I.mul(N$,r$),r$=I.add(z$,w$),N$=I.sub(N$,r$),r$=I.add(V,M),E=I.add(A,R),r$=I.mul(r$,E),E=I.add(Q$,w$),r$=I.sub(r$,E),x=I.mul(e,N$),E=I.mul(J$,w$),x=I.add(E,x),E=I.sub(Q$,x),x=I.add(Q$,x),C=I.mul(E,x),Q$=I.add(z$,z$),Q$=I.add(Q$,z$),w$=I.mul(e,w$),N$=I.mul(J$,N$),Q$=I.add(Q$,w$),w$=I.sub(z$,w$),w$=I.mul(e,w$),N$=I.add(N$,w$),z$=I.mul(Q$,N$),C=I.add(C,z$),z$=I.mul(r$,N$),E=I.mul(X$,E),E=I.sub(E,z$),z$=I.mul(X$,Q$),x=I.mul(r$,x),x=I.add(x,z$),new b(E,C,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:k}=v;if(!g.isValidNot0(K))throw Error("invalid scalar: out of range");let V,M,j=(A)=>S.cached(this,A,(R)=>lO(b,R));if(k){let{k1neg:A,k1:R,k2neg:E,k2:C}=i(K),{p:x,f:e}=j(R),{p:J$,f:z$}=j(C);M=e.add(z$),V=n(k.beta,x,J$,A,E)}else{let{p:A,f:R}=j(K);V=A,M=R}return lO(b,[V,M])[0]}multiplyUnsafe(K){let{endo:k}=v,V=this;if(!g.isValid(K))throw Error("invalid scalar: out of range");if(K===Vg||V.is0())return b.ZERO;if(K===aU)return V;if(S.hasCache(this))return this.multiply(K);if(k){let{k1neg:M,k1:j,k2neg:A,k2:R}=i(K),{p1:E,p2:C}=eq(b,V,j,R);return n(k.beta,E,C,M,A)}else return S.unsafe(V,K)}toAffine(K){return y(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(G===aU)return!0;if(K)return K(b,this);return S.unsafe(this,z).is0()}clearCofactor(){let{clearCofactor:K}=v;if(G===aU)return this;if(K)return K(b,this);return this.multiplyUnsafe(G)}isSmallOrder(){return this.multiplyUnsafe(G).is0()}toBytes(K=!0){return $0(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return OU(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let v$=g.BITS,S=new dO(b,v.endo?Math.ceil(v$/2):v$);return b.BASE.precompute(8),b}function IY($){return Uint8Array.of($?2:3)}function JY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:U}=$,I=v.randomBytes||fg,g=Object.assign(JY($.Fp,U),{seed:xO(U.ORDER)});function J(w){try{let W=U.fromBytes(w);return U.isValidNot0(W)}catch(W){return!1}}function G(w,W){let{publicKey:Z,publicKeyUncompressed:r}=g;try{let T=w.length;if(W===!0&&T!==Z)return!1;if(W===!1&&T!==r)return!1;return!!$.fromBytes(w)}catch(T){return!1}}function z(w=I(g.seed)){return lq(Y$(w,g.seed,"seed"),U.ORDER)}function O(w,W=!0){return $.BASE.multiply(U.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:Z,publicKeyUncompressed:r}=g;if(!yU(w))return;if("_lengths"in U&&U._lengths||W===Z)return;let T=Y$(w,void 0,"key").length;return T===Z||T===r}function X(w,W,Z=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let r=U.fromBytes(w);return $.fromBytes(W).multiply(r).toBytes(Z)}let N={isValidSecretKey:J,isValidPublicKey:G,randomSecretKey:z},q=yJ(z,O);return Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:q,Point:$,utils:N,lengths:g})}function eO($,v,U={}){Bv(v),QU(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let I=U.randomBytes||fg,g=U.hmac||((V,M)=>tU(v,V,M)),{Fp:J,Fn:G}=$,{ORDER:z,BITS:O}=G,{keygen:D,getPublicKey:X,getSharedSecret:N,utils:q,lengths:w}=DM($,U),W={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},Z=z*UY<J.ORDER;function r(V){let M=z>>aU;return V>M}function T(V,M){if(!G.isValidNot0(M))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return M}function u(){if(Z)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(V,M){tO(M);let j=w.signature,A=M==="compact"?j:M==="recovered"?j+1:void 0;return Y$(V,A)}class L{r;s;recovery;constructor(V,M,j){if(this.r=T("r",V),this.s=T("s",M),j!=null){if(u(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(V,M=W.format){_(V,M);let j;if(M==="der"){let{r:C,s:x}=Fg.toSig(Y$(V));return new L(C,x)}if(M==="recovered")j=V[0],M="compact",V=V.subarray(1);let A=w.signature/2,R=V.subarray(0,A),E=V.subarray(A,A*2);return new L(G.fromBytes(R),G.fromBytes(E),j)}static fromHex(V,M){return this.fromBytes(DU(V),M)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new L(this.r,this.s,V)}recoverPublicKey(V){let{r:M,s:j}=this,A=this.assertRecovery(),R=A===2||A===3?M+z:M;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),C=$.fromBytes(n$(IY((A&1)===0),E)),x=G.inv(R),e=y(Y$(V,void 0,"msgHash")),J$=G.create(-e*x),z$=G.create(j*x),Q$=$.BASE.multiplyUnsafe(J$).add(C.multiplyUnsafe(z$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return r(this.s)}toBytes(V=W.format){if(tO(V),V==="der")return DU(Fg.hexFromSig(this));let{r:M,s:j}=this,A=G.toBytes(M),R=G.toBytes(j);if(V==="recovered")return u(),n$(Uint8Array.of(this.assertRecovery()),A,R);return n$(A,R)}toHex(V){return OU(this.toBytes(V))}}let i=U.bits2int||function(M){if(M.length>8192)throw Error("input is too large");let j=ng(M),A=M.length*8-O;return A>0?j>>BigInt(A):j},y=U.bits2int_modN||function(M){return G.create(i(M))},d=I0(O);function n(V){return U0("num < 2^"+O,V,Vg,d),G.toBytes(V)}function b(V,M){return Y$(V,void 0,"message"),M?Y$(v(V),void 0,"prehashed message"):V}function v$(V,M,j){let{lowS:A,prehash:R,extraEntropy:E}=pO(j,W);V=b(V,R);let C=y(V),x=G.fromBytes(M);if(!G.isValidNot0(x))throw Error("invalid private key");let e=[n(x),n(C)];if(E!=null&&E!==!1){let w$=E===!0?I(w.secretKey):E;e.push(Y$(w$,void 0,"extraEntropy"))}let J$=n$(...e),z$=C;function Q$(w$){let X$=i(w$);if(!G.isValidNot0(X$))return;let N$=G.inv(X$),r$=$.BASE.multiply(X$).toAffine(),k$=G.create(r$.x);if(k$===Vg)return;let E$=G.create(N$*G.create(z$+k$*x));if(E$===Vg)return;let a$=(r$.x===k$?0:2)|Number(r$.y&aU),e$=E$;if(A&&r(E$))e$=G.neg(E$),a$^=1;return new L(k$,e$,Z?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(V,M,j={}){let{seed:A,k2sig:R}=v$(V,M,j);return Lq(v.outputLen,G.BYTES,g)(A,R).toBytes(j.format)}function K(V,M,j,A={}){let{lowS:R,prehash:E,format:C}=pO(A,W);if(j=Y$(j,void 0,"publicKey"),M=b(M,E),!yU(V)){let x=V instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(V,C);try{let x=L.fromBytes(V,C),e=$.fromBytes(j);if(R&&x.hasHighS())return!1;let{r:J$,s:z$}=x,Q$=y(M),w$=G.inv(z$),X$=G.create(Q$*w$),N$=G.create(J$*w$),r$=$.BASE.multiplyUnsafe(X$).add(e.multiplyUnsafe(N$));if(r$.is0())return!1;return G.create(r$.x)===J$}catch(x){return!1}}function k(V,M,j={}){let{prehash:A}=pO(j,W);return M=b(M,A),L.fromBytes(V,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:D,getPublicKey:X,getSharedSecret:N,utils:q,lengths:w,Point:$,sign:S,verify:K,recoverPublicKey:k,Signature:L,hash:v})}function GY($,v,U){return $&v^~$&U}function zY($,v,U){return $&v^$&U^v&U}class hJ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iJ(this.buffer)}update($){rg(this),Y$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let G=Math.min(I-this.pos,g-J);if(G===I){let z=iJ($);for(;I<=g-J;J+=I)this.process(z,J);continue}if(U.set($.subarray(J,J+G),this.pos),this.pos+=G,J+=G,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){rg(this),mJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Vv(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let G=iJ($),z=this.outputLen;if(z%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=z/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)G.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:G}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=G,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Zg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),jg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var pJ=BigInt(4294967295),OY=BigInt(32);function QM($,v=!1){if(v)return{h:Number($&pJ),l:Number($>>OY&pJ)};return{h:Number($>>OY&pJ)|0,l:Number($&pJ)|0}}function tJ($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:G,l:z}=QM($[J],v);[I[J],g[J]]=[G,z]}return[I,g]}var sO=($,v,U)=>$>>>U,$8=($,v,U)=>$<<32-U|v>>>U,wU=($,v,U)=>$>>>U|v<<32-U,qU=($,v,U)=>$<<32-U|v>>>U,O0=($,v,U)=>$<<64-U|v>>>U-32,D0=($,v,U)=>$>>>U-32|v<<64-U;var DY=($,v,U)=>$<<U|v>>>32-U,QY=($,v,U)=>v<<U|$>>>32-U,XY=($,v,U)=>v<<U-32|$>>>64-U,NY=($,v,U)=>$<<U-32|v>>>64-U;function tv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var wY=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),qY=($,v,U,I)=>v+U+I+($/4294967296|0)|0,YY=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),WY=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,rY=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),VY=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var NM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ig=new Uint32Array(64);class v8 extends hJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G,H:z}=this;return[$,v,U,I,g,J,G,z]}set($,v,U,I,g,J,G,z){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=G|0,this.H=z|0}process($,v){for(let X=0;X<16;X++,v+=4)ig[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=ig[X-15],q=ig[X-2],w=mv(N,7)^mv(N,18)^N>>>3,W=mv(q,17)^mv(q,19)^q>>>10;ig[X]=W+ig[X-7]+w+ig[X-16]|0}let{A:U,B:I,C:g,D:J,E:G,F:z,G:O,H:D}=this;for(let X=0;X<64;X++){let N=mv(G,6)^mv(G,11)^mv(G,25),q=D+N+GY(G,z,O)+NM[X]+ig[X]|0,W=(mv(U,2)^mv(U,13)^mv(U,22))+zY(U,I,g)|0;D=O,O=z,z=G,G=J+q|0,J=g,g=I,I=U,U=q+W|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,G=G+this.E|0,z=z+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,G,z,O,D)}roundClean(){Vv(ig)}destroy(){this.set(0,0,0,0,0,0,0,0),Vv(this.buffer)}}class ZY extends v8{A=Zg[0]|0;B=Zg[1]|0;C=Zg[2]|0;D=Zg[3]|0;E=Zg[4]|0;F=Zg[5]|0;G=Zg[6]|0;H=Zg[7]|0;constructor(){super(32)}}class wM extends v8{A=jg[0]|0;B=jg[1]|0;C=jg[2]|0;D=jg[3]|0;E=jg[4]|0;F=jg[5]|0;G=jg[6]|0;H=jg[7]|0;constructor(){super(28)}}var jY=(()=>tJ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),qM=(()=>jY[0])(),YM=(()=>jY[1])(),xg=new Uint32Array(80),cg=new Uint32Array(80);class Q0 extends hJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:G,Dl:z,Eh:O,El:D,Fh:X,Fl:N,Gh:q,Gl:w,Hh:W,Hl:Z}=this;return[$,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z]}set($,v,U,I,g,J,G,z,O,D,X,N,q,w,W,Z){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=G|0,this.Dl=z|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=q|0,this.Gl=w|0,this.Hh=W|0,this.Hl=Z|0}process($,v){for(let u=0;u<16;u++,v+=4)xg[u]=$.getUint32(v),cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=xg[u-15]|0,L=cg[u-15]|0,i=wU(_,L,1)^wU(_,L,8)^sO(_,L,7),y=qU(_,L,1)^qU(_,L,8)^$8(_,L,7),d=xg[u-2]|0,n=cg[u-2]|0,b=wU(d,n,19)^O0(d,n,61)^sO(d,n,6),v$=qU(d,n,19)^D0(d,n,61)^$8(d,n,6),S=YY(y,v$,cg[u-7],cg[u-16]),K=WY(S,i,b,xg[u-7],xg[u-16]);xg[u]=K|0,cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:G,Cl:z,Dh:O,Dl:D,Eh:X,El:N,Fh:q,Fl:w,Gh:W,Gl:Z,Hh:r,Hl:T}=this;for(let u=0;u<80;u++){let _=wU(X,N,14)^wU(X,N,18)^O0(X,N,41),L=qU(X,N,14)^qU(X,N,18)^D0(X,N,41),i=X&q^~X&W,y=N&w^~N&Z,d=rY(T,L,y,YM[u],cg[u]),n=VY(d,r,_,i,qM[u],xg[u]),b=d|0,v$=wU(U,I,28)^O0(U,I,34)^O0(U,I,39),S=qU(U,I,28)^D0(U,I,34)^D0(U,I,39),K=U&g^U&G^g&G,k=I&J^I&z^J&z;r=W|0,T=Z|0,W=q|0,Z=w|0,q=X|0,w=N|0,{h:X,l:N}=tv(O|0,D|0,n|0,b|0),O=G|0,D=z|0,G=g|0,z=J|0,g=U|0,J=I|0;let V=wY(b,S,k);U=qY(V,n,v$,K),I=V|0}({h:U,l:I}=tv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=tv(this.Bh|0,this.Bl|0,g|0,J|0),{h:G,l:z}=tv(this.Ch|0,this.Cl|0,G|0,z|0),{h:O,l:D}=tv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=tv(this.Eh|0,this.El|0,X|0,N|0),{h:q,l:w}=tv(this.Fh|0,this.Fl|0,q|0,w|0),{h:W,l:Z}=tv(this.Gh|0,this.Gl|0,W|0,Z|0),{h:r,l:T}=tv(this.Hh|0,this.Hl|0,r|0,T|0),this.set(U,I,g,J,G,z,O,D,X,N,q,w,W,Z,r,T)}roundClean(){Vv(xg,cg)}destroy(){Vv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class WM extends Q0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class MY extends Q0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Uv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Iv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class rM extends Q0{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(28)}}class VM extends Q0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(32)}}var aJ=lU(()=>new ZY,_g(1));var RY=lU(()=>new MY,_g(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZM=BigInt(1),uY=BigInt(2),jM=BigInt(3),MM=BigInt(5),GA=BigInt(8),KY=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RM($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=KY,z=$*$%J*$%J,O=Cv(z,uY,J)*z%J,D=Cv(O,ZM,J)*$%J,X=Cv(D,MM,J)*D%J,N=Cv(X,v,J)*X%J,q=Cv(N,U,J)*N%J,w=Cv(q,I,J)*q%J,W=Cv(w,g,J)*w%J,Z=Cv(W,g,J)*w%J,r=Cv(Z,v,J)*X%J;return{pow_p_5_8:Cv(r,uY,J)*$%J,b2:z}}function uM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TY=(()=>{let $=KY;return $Y({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=RM(v);return Dv(Cv(U,jM,$)*I,$)},adjustScalarBytes:uM})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TM=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var HM=aO(KM),g8=eO(HM,aJ);var AM=aO(TM),HY=eO(AM,RY);function SY($,v,U){if(Bv($),U===void 0)U=new Uint8Array($.outputLen);return tU($,U,v)}var U8=Uint8Array.of(0),AY=Uint8Array.of();function kY($,v,U,I=32){Bv($),F$(I,"length");let g=$.outputLen;if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=AY;else Y$(U,void 0,"info");let G=new Uint8Array(J*g),z=tU.create($,v),O=z._cloneInto(),D=new Uint8Array(z.outputLen);for(let X=0;X<J;X++)U8[0]=X+1,O.update(X===0?AY:D).update(U).update(U8).digestInto(D),G.set(D,g*X),z._cloneInto(O);return z.destroy(),O.destroy(),Vv(D,U8),G.slice(0,I)}var SM=BigInt(0),X0=BigInt(1),kM=BigInt(2),PM=BigInt(7),EM=BigInt(256),BM=BigInt(113),BY=[],CY=[],LY=[];for(let $=0,v=X0,U=1,I=0;$<24;$++){[U,I]=[I,(2*U+3*I)%5],BY.push(2*(5*I+U)),CY.push(($+1)*($+2)/2%64);let g=SM;for(let J=0;J<7;J++)if(v=(v<<X0^(v>>PM)*BM)%EM,v&kM)g^=X0<<(X0<<BigInt(J))-X0;LY.push(g)}var fY=tJ(LY,!0),CM=fY[0],LM=fY[1],PY=($,v,U)=>U>32?XY($,v,U):DY($,v,U),EY=($,v,U)=>U>32?NY($,v,U):QY($,v,U);function fM($,v=24){let U=new Uint32Array(10);for(let I=24-v;I<24;I++){for(let G=0;G<10;G++)U[G]=$[G]^$[G+10]^$[G+20]^$[G+30]^$[G+40];for(let G=0;G<10;G+=2){let z=(G+8)%10,O=(G+2)%10,D=U[O],X=U[O+1],N=PY(D,X,1)^U[z],q=EY(D,X,1)^U[z+1];for(let w=0;w<50;w+=10)$[G+w]^=N,$[G+w+1]^=q}let g=$[2],J=$[3];for(let G=0;G<24;G++){let z=CY[G],O=PY(g,J,z),D=EY(g,J,z),X=BY[G];g=$[X],J=$[X+1],$[X]=O,$[X+1]=D}for(let G=0;G<50;G+=10){for(let z=0;z<10;z++)U[z]=$[G+z];for(let z=0;z<10;z++)$[G+z]^=~U[(z+2)%10]&U[(z+4)%10]}$[0]^=CM[I],$[1]^=LM[I]}Vv(U)}class eJ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,U,I=!1,g=24){if(this.blockLen=$,this.suffix=v,this.outputLen=U,this.enableXOF=I,this.rounds=g,F$(U,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=FJ(this.state)}clone(){return this._cloneInto()}keccak(){fO(this.state32),fM(this.state32,this.rounds),fO(this.state32),this.posOut=0,this.pos=0}update($){rg(this),Y$($);let{blockLen:v,state:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(v-this.pos,I-g);for(let G=0;G<J;G++)U[this.pos++]^=$[g++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:U,blockLen:I}=this;if($[U]^=v,(v&128)!==0&&U===I-1)this.keccak();$[I-1]^=128,this.keccak()}writeInto($){rg(this,!1),Y$($),this.finish();let v=this.state,{blockLen:U}=this;for(let I=0,g=$.length;I<g;){if(this.posOut>=U)this.keccak();let J=Math.min(U-this.posOut,g-I);$.set(v.subarray(this.posOut,this.posOut+J),I),this.posOut+=J,I+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(mJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Vv(this.state)}_cloneInto($){let{blockLen:v,suffix:U,outputLen:I,rounds:g,enableXOF:J}=this;return $||=new eJ(v,U,I,J,g),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=g,$.suffix=U,$.outputLen=I,$.enableXOF=J,$.destroyed=this.destroyed,$}}var _Y=($,v,U,I={})=>lU(()=>new eJ(v,$,U),I);var YU=_Y(6,136,32,_g(8));var nY=_Y(6,72,64,_g(10));var bY=($,v,U,I={})=>lU((g={})=>new eJ(v,$,g.dkLen===void 0?U:g.dkLen,!0),I),mY=bY(31,168,16,_g(11)),av=bY(31,136,32,_g(12));function I8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iY($){return I8($),($&$-1)===0&&$!==0}function J8($,v){I8($);let U=0;for(let I=0;I<v;I++,$>>>=1)U=U<<1|$&1;return U}function xY($){return I8($),31-Math.clz32($)}function FY($){let v=$.length;if(v<2||!iY(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let U=xY(v);for(let I=0;I<v;I++){let g=J8(I,U);if(I<g){let J=$[I];$[I]=$[g],$[g]=J}}return $}var G8=($,v)=>{let{N:U,roots:I,dit:g,invertButterflies:J=!1,skipStages:G=0,brp:z=!0}=v,O=xY(U);if(!iY(U))throw Error("FFT: Polynomial size should be power of two");let D=g!==J;return(X)=>{if(X.length!==U)throw Error("FFT: wrong Polynomial length");if(g&&z)FY(X);for(let N=0,q=1;N<O-G;N++){let w=g?N+1+G:O-N,W=1<<w,Z=W>>1,r=U>>w;for(let T=0;T<U;T+=W)for(let u=0,_=q++;u<Z;u++){let L=J?g?U-_:_:u*r,i=T+u,y=T+u+Z,d=I[L],n=X[y],b=X[i];if(D){let v$=$.mul(n,d);X[i]=$.add(b,v$),X[y]=$.sub(b,v$)}else if(J)X[i]=$.add(n,b),X[y]=$.mul($.sub(n,b),d);else X[i]=$.add(b,n),X[y]=$.mul($.sub(b,n),d)}}if(!g&&z)FY(X);return X}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=fg;function sJ($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function cY($){return Uint8Array.from($)}function WU($,...v){let U=(g)=>typeof g==="number"?g:g.bytesLen,I=v.reduce((g,J)=>g+U(J),0);return{bytesLen:I,encode:(g)=>{let J=new Uint8Array(I);for(let G=0,z=0;G<v.length;G++){let O=v[G],D=U(O),X=typeof O==="number"?g[G]:O.encode(g[G]);if(Y$(X,D,$),J.set(X,z),typeof O!=="number")X.fill(0);z+=D}return J},decode:(g)=>{Y$(g,I,$);let J=[];for(let G of v){let z=U(G),O=g.subarray(0,z);J.push(typeof G==="number"?O:G.decode(O)),g=g.subarray(z)}return J}}}function $G($,v){let U=v*$.bytesLen;return{bytesLen:U,encode:(I)=>{if(I.length!==v)throw Error(`vecCoder.encode: wrong length=${I.length}. Expected: ${v}`);let g=new Uint8Array(U);for(let J=0,G=0;J<I.length;J++){let z=$.encode(I[J]);g.set(z,G),z.fill(0),G+=z.length}return g},decode:(I)=>{Y$(I,U);let g=[];for(let J=0;J<I.length;J+=$.bytesLen)g.push($.decode(I.subarray(J,J+$.bytesLen)));return g}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let U of v)U.fill(0);else v.fill(0)}function z8($){return(1<<$)-1}var MA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var oY=($)=>{let{newPoly:v,N:U,Q:I,F:g,ROOT_OF_UNITY:J,brvBits:G,isKyber:z}=$,O=(u,_=I)=>{let L=u%_|0;return(L>=0?L|0:_+L|0)|0},D=(u,_=I)=>{let L=O(u,_)|0;return(L>_>>1?L-_|0:L)|0};function X(){let u=v(U);for(let _=0;_<U;_++){let L=J8(_,G),i=BigInt(J)**BigInt(L)%BigInt(I);u[_]=Number(i)|0}return u}let N=X(),q={add:(u,_)=>O((u|0)+(_|0))|0,sub:(u,_)=>O((u|0)-(_|0))|0,mul:(u,_)=>O((u|0)*(_|0))|0,inv:(u)=>{throw Error("not implemented")}},w={N:U,roots:N,invertButterflies:!0,skipStages:z?1:0,brp:!1},W=G8(q,{dit:!1,...w}),Z=G8(q,{dit:!0,...w});return{mod:O,smod:D,nttZetas:N,NTT:{encode:(u)=>{return W(u)},decode:(u)=>{Z(u);for(let _=0;_<u.length;_++)u[_]=O(g*u[_]);return u}},bitsCoder:(u,_)=>{let L=z8(u),i=u*(U/8);return{bytesLen:i,encode:(y)=>{let d=new Uint8Array(i);for(let n=0,b=0,v$=0,S=0;n<y.length;n++){b|=(_.encode(y[n])&L)<<v$,v$+=u;for(;v$>=8;v$-=8,b>>=8)d[S++]=b&z8(v$)}return d},decode:(y)=>{let d=v(U);for(let n=0,b=0,v$=0,S=0;n<y.length;n++){b|=y[n]<<v$,v$+=8;for(;v$>=u;v$-=u,b>>=u)d[S++]=_.decode(b&L)}return d}}}}},_M=($)=>(v,U)=>{if(!U)U=$.blockLen;let I=new Uint8Array(v.length+2);I.set(v);let g=v.length,J=new Uint8Array(U),G=$.create({}),z=0,O=0;return{stats:()=>({calls:z,xofs:O}),get:(D,X)=>{return I[g+0]=D,I[g+1]=X,G.destroy(),G=$.create({}).update(I),z++,()=>{return O++,G.xofInto(J)}},clean:()=>{G.destroy(),m$(J,I)}}},yY=_M(mY);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,Mg=3329,nM=3303,bM=17,{mod:q0,nttZetas:mM,NTT:rU,bitsCoder:FM}=oY({N:Jv,Q:Mg,F:nM,ROOT_OF_UNITY:bM,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),O8={512:{N:Jv,Q:Mg,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:Mg,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:Mg,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iM=($)=>{if($>=12)return{encode:(U)=>U,decode:(U)=>U};let v=2**($-1);return{encode:(U)=>((U<<$)+Mg/2)/Mg,decode:(U)=>U*Mg+v>>>$}},N0=($)=>FM($,iM($));function VU($,v){for(let U=0;U<Jv;U++)$[U]=q0($[U]+v[U])}function xM($,v){for(let U=0;U<Jv;U++)$[U]=q0($[U]-v[U])}function cM($,v,U,I,g){let J=q0(v*I*g+$*U),G=q0($*I+v*U);return{c0:J,c1:G}}function vG($,v){for(let U=0;U<Jv/2;U++){let I=mM[64+(U>>1)];if(U&1)I=-I;let{c0:g,c1:J}=cM($[2*U+0],$[2*U+1],v[2*U+0],v[2*U+1],I);$[2*U+0]=g,$[2*U+1]=J}return $}function lY($){let v=new Uint16Array(Jv);for(let U=0;U<Jv;){let I=$();if(I.length%3)throw Error("SampleNTT: unaligned block");for(let g=0;U<Jv&&g+3<=I.length;g+=3){let J=(I[g+0]>>0|I[g+1]<<8)&4095,G=(I[g+1]>>4|I[g+2]<<4)&4095;if(J<Mg)v[U++]=J;if(U<Jv&&G<Mg)v[U++]=G}}return v}function w0($,v,U,I){let g=$(I*Jv/4,v,U),J=new Uint16Array(Jv),G=FJ(g),z=0;for(let O=0,D=0,X=0,N=0;O<G.length;O++){let q=G[O];for(let w=0;w<32;w++)if(X+=q&1,q>>=1,z+=1,z===I)N=X,X=0;else if(z===2*I)J[D++]=q0(N-X),X=0,z=0}if(z)throw Error(`sampleCBD: leftover bits: ${z}`);return J}var oM=($)=>{let{K:v,PRF:U,XOF:I,HASH512:g,ETA1:J,ETA2:G,du:z,dv:O}=$,D=N0(1),X=N0(O),N=N0(z),q=WU("publicKey",$G(N0(12),v),32),w=$G(N0(12),v),W=WU("ciphertext",$G(N,v),X),Z=WU("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:q.bytesLen,cipherText:W.bytesLen},keygen:(r)=>{Y$(r,32,"seed");let T=new Uint8Array(33);T.set(r),T[32]=v;let u=g(T),[_,L]=Z.decode(u),i=[],y=[];for(let b=0;b<v;b++)i.push(rU.encode(w0(U,L,b,J)));let d=I(_);for(let b=0;b<v;b++){let v$=rU.encode(w0(U,L,v+b,J));for(let S=0;S<v;S++){let K=lY(d.get(S,b));VU(v$,vG(K,i[S]))}y.push(v$)}d.clean();let n={publicKey:q.encode([y,_]),secretKey:w.encode(i)};return m$(_,L,i,y,T,u),n},encrypt:(r,T,u)=>{let[_,L]=q.decode(r),i=[];for(let S=0;S<v;S++)i.push(rU.encode(w0(U,u,S,J)));let y=I(L),d=new Uint16Array(Jv),n=[];for(let S=0;S<v;S++){let K=w0(U,u,v+S,G),k=new Uint16Array(Jv);for(let V=0;V<v;V++){let M=lY(y.get(S,V));VU(k,vG(M,i[V]))}VU(K,rU.decode(k)),n.push(K),VU(d,vG(_[S],i[S])),m$(k)}y.clean();let b=w0(U,u,2*v,G);VU(b,rU.decode(d));let v$=D.decode(T);return VU(v$,b),m$(_,i,d,b),W.encode([n,v$])},decrypt:(r,T)=>{let[u,_]=W.decode(r),L=w.decode(T),i=new Uint16Array(Jv);for(let y=0;y<v;y++)VU(i,vG(L[y],rU.encode(u[y])));return xM(_,rU.decode(i)),m$(i,L,u),D.encode(_)}}};function D8($){let v=oM($),{HASH256:U,HASH512:I,KDF:g}=$,{secretCoder:J,lengths:G}=v,z=WU("secretKey",G.secretKey,G.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...G,seed:64,msg:32,msgRand:32,secretKey:z.bytesLen},keygen:(X=ev(64))=>{Y$(X,64,"seed");let{publicKey:N,secretKey:q}=v.keygen(X.subarray(0,32)),w=U(N),W=z.encode([q,N,w,X.subarray(32)]);return m$(q,w),{publicKey:N,secretKey:W}},getPublicKey:(X)=>{let[N,q,w,W]=z.decode(X);return Uint8Array.from(q)},encapsulate:(X,N=ev(32))=>{Y$(X,G.publicKey,"publicKey"),Y$(N,32,"message");let q=X.subarray(0,384*$.K),w=J.encode(J.decode(cY(q)));if(!sJ(w,q))throw m$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(w);let W=I.create().update(N).update(U(X)).digest(),Z=v.encrypt(X,N,W.subarray(32,64));return m$(W.subarray(32)),{cipherText:Z,sharedSecret:W.subarray(0,32)}},decapsulate:(X,N)=>{Y$(N,z.bytesLen,"secretKey"),Y$(X,G.cipherText,"cipherText");let q=z.bytesLen-96,w=q+32,W=U(N.subarray(q/2,w));if(!sJ(W,N.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[Z,r,T,u]=z.decode(N),_=v.decrypt(X,Z),L=I.create().update(_).update(T).digest(),i=L.subarray(0,32),y=v.encrypt(r,_,L.subarray(32,64)),d=sJ(X,y),n=g.create({dkLen:32}).update(u).update(X).digest();return m$(_,y,!d?i:n),d?i:n}}}function yM($,v,U){return av.create({dkLen:$}).update(v).update(new Uint8Array([U])).digest()}var Q8={HASH256:YU,HASH512:nY,KDF:av,XOF:yY,PRF:yM},BA=D8({...Q8,...O8[512]}),Y0=D8({...Q8,...O8[768]}),dY=D8({...Q8,...O8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lM($,v=!1){let{lengths:U,keygen:I}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");I=(G=ev(U.seed))=>{Y$(G,U.seed,"seed");let z=J.isLE?bg(G):ng(G),O=J.toBytes(J.create(z));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:U.secretKey,publicKey:U.publicKey,seed:U.seed},keygen:I,getPublicKey:(g)=>$.getPublicKey(g)}}function X8($,v=!1){let U=lM($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...U.lengths,msg:U.lengths.seed,cipherText:U.lengths.publicKey},keygen:U.keygen,getPublicKey:U.getPublicKey,encapsulate(I,g=ev($.lengths.seed)){let J=this.keygen(g).secretKey,G=this.decapsulate(I,J),z=$.getPublicKey(J);return m$(J),{sharedSecret:G,cipherText:z}},decapsulate(I,g){let J=$.getSharedSecret(g,I);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function W0($,v){return WU(v,...$.map((U)=>{if(typeof U.lengths[v]!=="number")throw Error("wrong length: "+v);return U.lengths[v]}))}function N8($){return(v,U)=>$(v,{dkLen:U})}function dM($,v,...U){let I=W0(U,"seed"),g=W0(U,"publicKey");if($===void 0)$=I.bytesLen;F$($);function J(G){Y$(G,$);let z=I.decode(v(G,I.bytesLen)),O=U.map((N,q)=>N.keygen(z[q])),D=O.map((N)=>N.secretKey),X=O.map((N)=>N.publicKey);return{secretKey:D,publicKey:X}}return{info:{lengths:{seed:$,publicKey:g.bytesLen,secretKey:$}},getPublicKey(G){return this.keygen(G).publicKey},keygen(G=ev($)){let{publicKey:z,secretKey:O}=J(G),D=g.encode(z);return m$(z),m$(O),{secretKey:G,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function gG($,v,U,I,...g){let J=dM($,U,...g),G=W0(g,"cipherText"),z=W0(g,"publicKey"),O=W0(g,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:G.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,X=ev(O.bytesLen)){let N=z.decode(D),q=O.decode(X),w=g.map((T,u)=>T.encapsulate(N[u],q[u])),W=w.map((T)=>T.sharedSecret),Z=w.map((T)=>T.cipherText),r={sharedSecret:I(N,Z,W),cipherText:G.encode(Z)};return m$(W,Z),r},decapsulate(D,X){let N=G.decode(D),{publicKey:q,secretKey:w}=J.expandDecapsulationKey(X),W=g.map((Z,r)=>Z.decapsulate(N[r],w[r]));return I(q,N,W)}}}function hY($,v,U,I,g){return Bv(I),Bv(g),gG(32,32,N8(I),(J,G,z)=>g(n$(z[0],z[1],G[1],J[1],mg($))),v,U)}var cA=hY("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Y0,X8(g8,!0),av,YU),oA=hY("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",dY,X8(HY,!0),av,YU);function hM($,v,U,I,g){return Bv(I),Bv(g),gG(32,32,N8(I),(J,G,z)=>{let O=n$(z[0],z[1],G[0],J[0],G[1],J[1],mg($)),D=32,X=n$(mg("hybrid_prk"),O),N=SY(g,X),q=n$(dU(32,2),mg("shared_secret"),mg("")),w=kY(g,N,q,32);return m$(N,q,X,O),w},v,U)}var pY=X8(TY),yA=hM("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Y0,pY,av,aJ),pM=(()=>gG(32,32,N8(av),($,v,U)=>YU(n$(U[0],U[1],v[1],$[1],mg("\\.//^\\"))),Y0,pY))();function tM($,v,U,I){let g=$.Point.Fn;if(!g)throw Error("no Point.Fn");function J(G){let z;for(let X=0,N=v;;X=N,N+=v){if(N>G.length)throw Error("rejection sampling failed");if(z=g.fromBytes(G.subarray(X,N),!0),g.isValidNot0(z))break}let O=g.toBytes(g.create(z)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:U,seed:I,msg:I,cipherText:U},keygen(G=ev(I)){return Y$(G,I,"seed"),J(G)},getPublicKey(G){return $.getPublicKey(G,!1)},encapsulate(G,z=ev(I)){Y$(z,I,"rand");let{secretKey:O}=J(z),D=this.decapsulate(G,O),X=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:X}},decapsulate(G,z){return $.getSharedSecret(z,G).subarray(1)}}}function aM($,v,U,I){let{secretKey:g,publicKeyUncompressed:J}=U.lengths;if(!g||!J)throw Error("wrong curve");let G=tM(U,g,J,I),z=64,O=z+I;return gG(32,32,(D)=>{Y$(D,32);let X=av(D,{dkLen:O}),N=X.subarray(0,z),q=X.subarray(z,O);return n$(N,q)},(D,X,N)=>YU(n$(N[0],N[1],X[1],D[1],mg($))),v,G)}var eM=(()=>aM("MLKEM768-P256",Y0,g8,128))();var UG=pM,tY=eM;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=($,v,U)=>x$($,v,U),q8=f$,eU=AJ,h$=(...$)=>YO(...$),sU=($)=>yI($),$I=NO,vI=($)=>Ng($),JG=BigInt(0),w8=BigInt(1);function Rg($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw TypeError(U+"expected boolean, got type="+typeof $)}return $}function GG($){if(typeof $==="bigint"){if(!IG($))throw RangeError("positive bigint expected, got "+$)}else q8($);return $}function sv($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(U+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let U=v&&`"${v}" `;throw RangeError(U+"expected safe integer, got "+$)}}function r0($){let v=GG($).toString(16);return v.length&1?"0"+v:v}function aY($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?JG:BigInt("0x"+$)}function ZU($){return aY(AJ($))}function Fv($){return aY(AJ(og(x$($)).reverse()))}function zG($,v){if(f$(v),v===0)throw RangeError("zero length");$=GG($);let U=$.toString(16);if(U.length>v*2)throw RangeError("number too large");return yI(U.padStart(v*2,"0"))}function V0($,v){return zG($,v).reverse()}function eY($,v){if($=T$($),v=T$(v),$.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function og($){return Uint8Array.from(T$($))}function OG($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw RangeError(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var IG=($)=>typeof $==="bigint"&&JG<=$;function sM($,v,U){return IG($)&&IG(v)&&IG(U)&&v<=$&&$<U}function ug($,v,U,I){if(!sM(v,U,I))throw RangeError("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function gI($){if($<JG)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>JG;$>>=w8,v+=1);return v}var Z0=($)=>(w8<<BigInt($))-w8;function sY($,v,U){if(f$($,"hashLen"),f$(v,"qByteLen"),typeof U!=="function")throw TypeError("hmacFn must be a function");let I=(r)=>new Uint8Array(r),g=Uint8Array.of(),J=Uint8Array.of(0),G=Uint8Array.of(1),z=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},q=(...r)=>U(D,h$(O,...r)),w=(r=g)=>{if(D=q(J,r),O=q(),r.length===0)return;D=q(G,r),O=q()},W=()=>{if(X++>=z)throw Error("drbg: tried max amount of iterations");let r=0,T=[];while(r<v){O=q();let u=O.slice();T.push(u),r+=O.length}return h$(...T)};return(r,T)=>{N(),w(r);let u=void 0;while((u=T(W()))===void 0)w();return N(),u}}function Lv($,v={},U={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function I(J,G,z){if(!z&&G!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(z&&O===void 0)return;let D=typeof O;if(D!==G||O===null)throw TypeError(`param "${J}" is invalid: expected ${G}, got ${D}`)}let g=(J,G)=>Object.entries(J).forEach(([z,O])=>I(z,O,G));g(v,!1),g(U,!0)}var Y8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),C$=BigInt(1),jU=BigInt(2),UW=BigInt(3),IW=BigInt(4),JW=BigInt(5),$7=BigInt(7),GW=BigInt(8),v7=BigInt(9),zW=BigInt(16);function B$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let U=$%v;return U>=p$?U:v+U}function fv($,v,U){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let I=$;while(v-- >p$)I*=I,I%=U;return I}function $W($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let U=B$($,v),I=v,g=p$,J=C$,G=C$,z=p$;while(U!==p$){let D=I/U,X=I-U*D,N=g-G*D,q=J-z*D;I=U,U=X,g=G,J=z,G=N,z=q}if(I!==C$)throw Error("invert: does not exist");return B$(g,v)}function W8($,v,U){let I=$;if(!I.eql(I.sqr(v),U))throw Error("Cannot find square root")}function OW($,v){let U=$,I=(U.ORDER+C$)/IW,g=U.pow(v,I);return W8(U,g,v),g}function g7($,v){let U=$,I=(U.ORDER-JW)/GW,g=U.mul(v,jU),J=U.pow(g,I),G=U.mul(v,J),z=U.mul(U.mul(G,jU),J),O=U.mul(G,U.sub(z,U.ONE));return W8(U,O,v),O}function U7($){let v=DG($),U=DW($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),G=($+$7)/zW;return(z,O)=>{let D=z,X=D.pow(O,G),N=D.mul(X,I),q=D.mul(X,g),w=D.mul(X,J),W=D.eql(D.sqr(N),O),Z=D.eql(D.sqr(q),O);X=D.cmov(X,N,W),N=D.cmov(w,q,Z);let r=D.eql(D.sqr(N),O),T=D.cmov(X,N,r);return W8(D,T,O),T}}function DW($){if($<UW)throw Error("sqrt is not defined for small field");let v=$-C$,U=0;while(v%jU===p$)v/=jU,U++;let I=jU,g=DG($);while(vW(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return OW;let J=g.pow(I,v),G=(v+C$)/jU;return function(O,D){let X=O;if(X.is0(D))return D;if(vW(X,D)!==1)throw Error("Cannot find square root");let N=U,q=X.mul(X.ONE,J),w=X.pow(D,v),W=X.pow(D,G);while(!X.eql(w,X.ONE)){if(X.is0(w))return X.ZERO;let Z=1,r=X.sqr(w);while(!X.eql(r,X.ONE))if(Z++,r=X.sqr(r),Z===N)throw Error("Cannot find square root");let T=C$<<BigInt(N-Z-1),u=X.pow(q,T);N=Z,q=X.sqr(u),w=X.mul(w,q),W=X.mul(W,u)}return W}}function I7($){if($%IW===UW)return OW;if($%GW===JW)return g7;if($%zW===v7)return U7($);return DW($)}var Kg=($,v)=>(B$($,v)&C$)===C$,J7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function r8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=J7.reduce((I,g)=>{return I[g]="function",I},v);if(Lv($,U),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function G7($,v,U){let I=$;if(U<p$)throw Error("invalid exponent, negatives unsupported");if(U===p$)return I.ONE;if(U===C$)return v;let g=I.ONE,J=v;while(U>p$){if(U&C$)g=I.mul(g,J);J=I.sqr(J),U>>=C$}return g}function j0($,v,U=!1){let I=$,g=Array(v.length).fill(U?I.ZERO:void 0),J=v.reduce((z,O,D)=>{if(I.is0(O))return z;return g[D]=z,I.mul(z,O)},I.ONE),G=I.inv(J);return v.reduceRight((z,O,D)=>{if(I.is0(O))return z;return g[D]=I.mul(z,g[D]),I.mul(z,O)},G),g}function vW($,v){let U=$,I=(U.ORDER-C$)/jU,g=U.pow(v,I),J=U.eql(g,U.ONE),G=U.eql(g,U.ZERO),z=U.eql(g,U.neg(U.ONE));if(!J&&!G&&!z)throw Error("invalid Legendre symbol result");return J?1:G?0:-1}function z7($,v){if(v!==void 0)q8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let U=gI($);if(v!==void 0&&v<U)throw Error(`invalid n length: expected bit length (${U}) >= n.length (${v})`);let I=v!==void 0?v:U,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}var gW=new WeakMap;class V8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=C$;_lengths;_mod;constructor($,v={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=z7($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return B$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return B$($*$,this.ORDER)}add($,v){return B$($+v,this.ORDER)}sub($,v){return B$($-v,this.ORDER)}mul($,v){return B$($*v,this.ORDER)}pow($,v){return G7(this,$,v)}div($,v){return B$($*$W(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return $W($,this.ORDER)}sqrt($){let v=gW.get(this);if(!v)gW.set(this,v=I7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?V0($,this.BYTES):zG($,this.BYTES)}fromBytes($,v=!1){T$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:G}=this;if(U){if($.length<1||!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let z=g?Fv($):ZU($);if(G)z=B$(z,J);if(!v){if(!this.isValid(z))throw Error("invalid field element: outside of range 0..ORDER")}return z}invertBatch($){return j0(this,$)}cmov($,v,U){return Rg(U,"condition"),U?v:$}}Object.freeze(V8.prototype);function DG($,v={}){return new V8($,v)}function QW($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let v=gI($-C$);return Math.ceil(v/8)}function Z8($){let v=QW($);return v+Math.ceil(v/2)}function XW($,v,U=!1){T$($);let I=$.length,g=QW(v),J=Math.max(Z8(v),16);if(I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let G=U?Fv($):ZU($),z=B$(G,v-C$)+C$;return U?V0(z,g):zG(z,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UI=BigInt(0),MU=BigInt(1);function M0($,v){let U=v.negate();return $?U:v}function RU($,v){let U=j0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function YW($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function j8($,v){YW($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=Z0($),G=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:G}}function NW($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:G}=U,z=Number($&g),O=$>>G;if(z>I)z-=J,O+=MU;let D=v*I,X=D+Math.abs(z)-1,N=z===0,q=z<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:q,isNegF:w,offsetF:D}}var M8=new WeakMap,WW=new WeakMap;function R8($){return WW.get($)||1}function wW($){if($!==UI)throw Error("invalid wNAF")}class R0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>UI){if(v&MU)U=U.add(I);I=I.double(),v>>=MU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=j8(v,this.bits),g=[],J=$,G=J;for(let z=0;z<U;z++){G=J,g.push(G);for(let O=1;O<I;O++)G=G.add(J),g.push(G);J=G.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=j8($,this.bits);for(let G=0;G<J.windows;G++){let{nextN:z,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:q}=NW(U,G,J);if(U=z,D)g=g.add(M0(N,v[q]));else I=I.add(M0(X,v[O]))}return wW(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=j8($,this.bits);for(let J=0;J<g.windows;J++){if(U===UI)break;let{nextN:G,offset:z,isZero:O,isNeg:D}=NW(U,J,g);if(U=G,O)continue;else{let X=v[z];I=I.add(D?X.negate():X)}}return wW(U),I}getPrecomputes($,v,U){let I=M8.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);M8.set(v,I)}}return I}cached($,v,U){let I=R8($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=R8($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){YW(v,this.bits),WW.set($,v),M8.delete($)}hasCache($){return R8($)!==1}}function rW($,v,U,I){let g=v,J=$.ZERO,G=$.ZERO;while(U>UI||I>UI){if(U&MU)J=J.add(g);if(I&MU)G=G.add(g);g=g.double(),U>>=MU,I>>=MU}return{p1:J,p2:G}}function qW($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return r8(v),v}else return DG($,{isLE:U})}function QG($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>UI))throw Error(`CURVE.${O} must be positive bigint`)}let g=qW(v.p,U.Fp,I),J=qW(v.n,U.Fn,I),z=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of z)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function u0($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}function K0($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let U=Array.from({length:v}).fill(0);for(let I=v-1;I>=0;I--)U[I]=$&255,$>>>=8;return new Uint8Array(U)}function O7($,v){let U=new Uint8Array($.length);for(let I=0;I<$.length;I++)U[I]=$[I]^v[I];return U}function D7($){if(!$I($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?OG($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function u8($,v,U,I){if(T$($),sv(U),v=D7(v),v.length>255)v=I(h$(OG("H2C-OVERSIZE-DST-"),v));let{outputLen:g,blockLen:J}=I,G=Math.ceil(U/g);if(U>65535||G>255)throw Error("expand_message_xmd: invalid lenInBytes");let z=h$(v,K0(v.length,1)),O=new Uint8Array(J),D=K0(U,2),X=Array(G),N=I(h$(O,$,D,K0(0,1),z));X[0]=I(h$(N,K0(1,1),z));for(let w=1;w<G;w++){let W=[O7(N,X[w-1]),K0(w+1,1),z];X[w]=I(h$(...W))}return h$(...X).slice(0,U)}var VW="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZW=($,v)=>($+($>=0?v:-v)/MW)/v;function Q7($,v,U){ug("scalar",$,$g,U);let[[I,g],[J,G]]=v,z=ZW(G*$,U),O=ZW(-g*$,U),D=$-z*I-O*J,X=-z*g-O*G,N=D<$g,q=X<$g;if(N)D=-D;if(q)X=-X;let w=Z0(Math.ceil(gI(U)/2))+yg;if(D<$g||D>=w||X<$g||X>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:N,k1:D,k2neg:q,k2:X}}function T8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function K8($,v){Lv($);let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if(Rg(U.lowS,"lowS"),Rg(U.prehash,"prehash"),U.format!==void 0)T8(U.format);return U}class jW extends Error{constructor($=""){super($)}}var iv={Err:jW,_tlv:{encode:($,v)=>{let{Err:U}=iv;if(sv($,"tag"),$<0||$>255)throw new U("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=r0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?r0(g.length/2|128):"";return r0($)+J+g+v},decode($,v){let{Err:U}=iv;v=T$(v,void 0,"DER data");let I=0;if($<0||$>255)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),G=0;if(!J)G=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)G=G<<8|X;if(I+=O,G<128)throw new U("tlv.decode(long): not minimal encoding")}let z=v.subarray(I,I+G);if(z.length!==G)throw new U("tlv.decode: wrong value length");return{v:z,l:v.subarray(I+G)}}},_int:{encode($){let{Err:v}=iv;if(GG($),$<$g)throw new v("integer: negative integers are not allowed");let U=r0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=iv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return ZU($)}},toSig($){let{Err:v,_int:U,_tlv:I}=iv,g=T$($,void 0,"signature"),{v:J,l:G}=I.decode(48,g);if(G.length)throw new v("invalid signature: left bytes after parsing");let{v:z,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(z),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=iv,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}};Object.freeze(iv._tlv);Object.freeze(iv._int);Object.freeze(iv);var $g=BigInt(0),yg=BigInt(1),MW=BigInt(2),XG=BigInt(3),X7=BigInt(4);function RW($,v={}){let U=QG("weierstrass",$,v),I=U.Fp,g=U.Fn,J=U.CURVE,{h:G,n:z}=J;Lv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let X=KW(I,g);function N(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function q(S,K,k){if(D&&K.is0())return Uint8Array.of(0);let{x:V,y:M}=K.toAffine(),j=I.toBytes(V);if(Rg(k,"isCompressed"),k){N();let A=!I.isOdd(M);return h$(uW(A),j)}else return h$(Uint8Array.of(4),j,I.toBytes(M))}function w(S){T$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:k}=X,V=S.length,M=S[0],j=S.subarray(1);if(D&&V===1&&M===0)return{x:I.ZERO,y:I.ZERO};if(V===K&&(M===2||M===3)){let A=I.fromBytes(j);if(!I.isValid(A))throw Error("bad point: is not on curve, wrong x");let R=r(A),E;try{E=I.sqrt(R)}catch(e){let J$=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}N();let C=I.isOdd(E);if((M&1)===1!==C)E=I.neg(E);return{x:A,y:E}}else if(V===k&&M===4){let A=I.BYTES,R=I.fromBytes(j.subarray(0,A)),E=I.fromBytes(j.subarray(A,A*2));if(!T(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${k}`)}let W=v.toBytes===void 0?q:v.toBytes,Z=v.fromBytes===void 0?w:v.fromBytes;function r(S){let K=I.sqr(S),k=I.mul(K,S);return I.add(I.add(k,I.mul(S,J.a)),J.b)}function T(S,K){let k=I.sqr(K),V=r(S);return I.eql(k,V)}if(!T(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=I.mul(I.pow(J.a,XG),X7),_=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(u,_)))throw Error("bad curve params: a or b");function L(S,K,k=!1){if(!I.isValid(K)||k&&I.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof n))throw Error("Weierstrass Point expected")}function y(S){if(!O||!O.basises)throw Error("no endo");return Q7(S,O.basises,g.ORDER)}function d(S,K,k,V,M){return k=new n(I.mul(k.X,S),k.Y,k.Z),K=M0(V,K),k=M0(M,k),K.add(k)}class n{static BASE=new n(J.Gx,J.Gy,I.ONE);static ZERO=new n(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(S,K,k){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",k),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:k}=S||{};if(!S||!I.isValid(K)||!I.isValid(k))throw Error("invalid affine point");if(S instanceof n)throw Error("projective point not allowed");if(I.is0(K)&&I.is0(k))return n.ZERO;return new n(K,k,I.ONE)}static fromBytes(S){let K=n.fromAffine(Z(T$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return n.fromBytes(sU(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(v$.createCache(this,S),!K)this.multiply(XG);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&I.is0(S.X)&&I.eql(S.Y,I.ONE)&&I.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:k}=S.toAffine();if(!I.isValid(K)||!I.isValid(k))throw Error("bad point: x or y not field elements");if(!T(K,k))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(S)}equals(S){i(S);let{X:K,Y:k,Z:V}=this,{X:M,Y:j,Z:A}=S,R=I.eql(I.mul(K,A),I.mul(M,V)),E=I.eql(I.mul(k,A),I.mul(j,V));return R&&E}negate(){return new n(this.X,I.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,k=I.mul(K,XG),{X:V,Y:M,Z:j}=this,A=I.ZERO,R=I.ZERO,E=I.ZERO,C=I.mul(V,V),x=I.mul(M,M),e=I.mul(j,j),J$=I.mul(V,M);return J$=I.add(J$,J$),E=I.mul(V,j),E=I.add(E,E),A=I.mul(S,E),R=I.mul(k,e),R=I.add(A,R),A=I.sub(x,R),R=I.add(x,R),R=I.mul(A,R),A=I.mul(J$,A),E=I.mul(k,E),e=I.mul(S,e),J$=I.sub(C,e),J$=I.mul(S,J$),J$=I.add(J$,E),E=I.add(C,C),C=I.add(E,C),C=I.add(C,e),C=I.mul(C,J$),R=I.add(R,C),e=I.mul(M,j),e=I.add(e,e),C=I.mul(e,J$),A=I.sub(A,C),E=I.mul(e,x),E=I.add(E,E),E=I.add(E,E),new n(A,R,E)}add(S){i(S);let{X:K,Y:k,Z:V}=this,{X:M,Y:j,Z:A}=S,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=J.a,e=I.mul(J.b,XG),J$=I.mul(K,M),z$=I.mul(k,j),Q$=I.mul(V,A),w$=I.add(K,k),X$=I.add(M,j);w$=I.mul(w$,X$),X$=I.add(J$,z$),w$=I.sub(w$,X$),X$=I.add(K,V);let N$=I.add(M,A);return X$=I.mul(X$,N$),N$=I.add(J$,Q$),X$=I.sub(X$,N$),N$=I.add(k,V),R=I.add(j,A),N$=I.mul(N$,R),R=I.add(z$,Q$),N$=I.sub(N$,R),C=I.mul(x,X$),R=I.mul(e,Q$),C=I.add(R,C),R=I.sub(z$,C),C=I.add(z$,C),E=I.mul(R,C),z$=I.add(J$,J$),z$=I.add(z$,J$),Q$=I.mul(x,Q$),X$=I.mul(e,X$),z$=I.add(z$,Q$),Q$=I.sub(J$,Q$),Q$=I.mul(x,Q$),X$=I.add(X$,Q$),J$=I.mul(z$,X$),E=I.add(E,J$),J$=I.mul(N$,X$),R=I.mul(w$,R),R=I.sub(R,J$),J$=I.mul(w$,z$),C=I.mul(N$,C),C=I.add(C,J$),new n(R,E,C)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(n.ZERO)}multiply(S){let{endo:K}=v;if(!g.isValidNot0(S))throw RangeError("invalid scalar: out of range");let k,V,M=(j)=>v$.cached(this,j,(A)=>RU(n,A));if(K){let{k1neg:j,k1:A,k2neg:R,k2:E}=y(S),{p:C,f:x}=M(A),{p:e,f:J$}=M(E);V=x.add(J$),k=d(K.beta,C,e,j,R)}else{let{p:j,f:A}=M(S);k=j,V=A}return RU(n,[k,V])[0]}multiplyUnsafe(S){let{endo:K}=v,k=this,V=S;if(!g.isValid(V))throw RangeError("invalid scalar: out of range");if(V===$g||k.is0())return n.ZERO;if(V===yg)return k;if(v$.hasCache(this))return this.multiply(V);if(K){let{k1neg:M,k1:j,k2neg:A,k2:R}=y(V),{p1:E,p2:C}=rW(n,k,j,R);return d(K.beta,E,C,M,A)}else return v$.unsafe(k,V)}toAffine(S){let K=this,k=S,{X:V,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:V,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(V,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(G===yg)return!0;if(S)return S(n,this);return v$.unsafe(this,z).is0()}clearCofactor(){let{clearCofactor:S}=v;if(G===yg)return this;if(S)return S(n,this);return this.multiplyUnsafe(G)}isSmallOrder(){if(G===yg)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return Rg(S,"isCompressed"),this.assertValidity(),W(n,this,S)}toHex(S=!0){return eU(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=g.BITS,v$=new R0(n,v.endo?Math.ceil(b/2):b);if(b>=8)n.BASE.precompute(8);return Object.freeze(n.prototype),Object.freeze(n),n}function uW($){return Uint8Array.of($?2:3)}function KW($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function N7($,v={}){let{Fn:U}=$,I=v.randomBytes===void 0?vI:v.randomBytes,g=Object.assign(KW($.Fp,U),{seed:Math.max(Z8(U.ORDER),16)});function J(w){try{let W=U.fromBytes(w);return U.isValidNot0(W)}catch(W){return!1}}function G(w,W){let{publicKey:Z,publicKeyUncompressed:r}=g;try{let T=w.length;if(W===!0&&T!==Z)return!1;if(W===!1&&T!==r)return!1;return!!$.fromBytes(w)}catch(T){return!1}}function z(w){return w=w===void 0?I(g.seed):w,XW(T$(w,g.seed,"seed"),U.ORDER)}function O(w,W=!0){return $.BASE.multiply(U.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:Z,publicKeyUncompressed:r}=g,T=U._lengths;if(!$I(w))return;let u=T$(w,void 0,"key").length,_=u===Z||u===r,L=u===W||!!T?.includes(u);if(_&&L)return;return _}function X(w,W,Z=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let r=U.fromBytes(w);return $.fromBytes(W).multiply(r).toBytes(Z)}let N={isValidSecretKey:J,isValidPublicKey:G,randomSecretKey:z},q=u0(z,O);return Object.freeze(N),Object.freeze(g),Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:q,Point:$,utils:N,lengths:g})}function TW($,v,U={}){let I=v;Xg(I),Lv(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let g=U.randomBytes===void 0?vI:U.randomBytes,J=U.hmac===void 0?(M,j)=>dv(I,M,j):U.hmac,{Fp:G,Fn:z}=$,{ORDER:O,BITS:D}=z,{keygen:X,getPublicKey:N,getSharedSecret:q,utils:w,lengths:W}=N7($,U),Z={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},r=O*MW+yg<G.ORDER;function T(M){let j=O>>yg;return M>j}function u(M,j){if(!z.isValidNot0(j))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return j}function _(){if(r)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(M,j){T8(j);let A=W.signature,R=j==="compact"?A:j==="recovered"?A+1:void 0;return T$(M,R)}class i{r;s;recovery;constructor(M,j,A){if(this.r=u("r",M),this.s=u("s",j),A!=null){if(_(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(M,j=Z.format){L(M,j);let A;if(j==="der"){let{r:x,s:e}=iv.toSig(T$(M));return new i(x,e)}if(j==="recovered")A=M[0],j="compact",M=M.subarray(1);let R=W.signature/2,E=M.subarray(0,R),C=M.subarray(R,R*2);return new i(z.fromBytes(E),z.fromBytes(C),A)}static fromHex(M,j){return this.fromBytes(sU(M),j)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new i(this.r,this.s,M)}recoverPublicKey(M){let{r:j,s:A}=this,R=this.assertRecovery(),E=R===2||R===3?j+O:j;if(!G.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let C=G.toBytes(E),x=$.fromBytes(h$(uW((R&1)===0),C)),e=z.inv(E),J$=d(T$(M,void 0,"msgHash")),z$=z.create(-J$*e),Q$=z.create(A*e),w$=$.BASE.multiplyUnsafe(z$).add(x.multiplyUnsafe(Q$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return T(this.s)}toBytes(M=Z.format){if(T8(M),M==="der")return sU(iv.hexFromSig(this));let{r:j,s:A}=this,R=z.toBytes(j),E=z.toBytes(A);if(M==="recovered")return _(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(M){return eU(this.toBytes(M))}}Object.freeze(i.prototype),Object.freeze(i);let y=U.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let A=ZU(j),R=j.length*8-D;return R>0?A>>BigInt(R):A}:U.bits2int,d=U.bits2int_modN===void 0?function(j){return z.create(y(j))}:U.bits2int_modN,n=Z0(D);function b(M){return ug("num < 2^"+D,M,$g,n),z.toBytes(M)}function v$(M,j){return T$(M,void 0,"message"),j?T$(I(M),void 0,"prehashed message"):M}function S(M,j,A){let{lowS:R,prehash:E,extraEntropy:C}=K8(A,Z);M=v$(M,E);let x=d(M),e=z.fromBytes(j);if(!z.isValidNot0(e))throw Error("invalid private key");let J$=[b(e),b(x)];if(C!=null&&C!==!1){let X$=C===!0?g(W.secretKey):C;J$.push(T$(X$,void 0,"extraEntropy"))}let z$=h$(...J$),Q$=x;function w$(X$){let N$=y(X$);if(!z.isValidNot0(N$))return;let r$=z.inv(N$),k$=$.BASE.multiply(N$).toAffine(),E$=z.create(k$.x);if(E$===$g)return;let a$=z.create(r$*z.create(Q$+E$*e));if(a$===$g)return;let e$=(k$.x===E$?0:2)|Number(k$.y&yg),rv=a$;if(R&&T(a$))rv=z.neg(a$),e$^=1;return new i(E$,rv,r?void 0:e$)}return{seed:z$,k2sig:w$}}function K(M,j,A={}){let{seed:R,k2sig:E}=S(M,j,A);return sY(I.outputLen,z.BYTES,J)(R,E).toBytes(A.format)}function k(M,j,A,R={}){let{lowS:E,prehash:C,format:x}=K8(R,Z);if(A=T$(A,void 0,"publicKey"),j=v$(j,C),!$I(M)){let e=M instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+e)}L(M,x);try{let e=i.fromBytes(M,x),J$=$.fromBytes(A);if(E&&e.hasHighS())return!1;let{r:z$,s:Q$}=e,w$=d(j),X$=z.inv(Q$),N$=z.create(w$*X$),r$=z.create(z$*X$),k$=$.BASE.multiplyUnsafe(N$).add(J$.multiplyUnsafe(r$));if(k$.is0())return!1;return z.create(k$.x)===z$}catch(e){return!1}}function V(M,j,A={}){let{prehash:R}=K8(A,Z);return j=v$(j,R),i.fromBytes(M,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:X,getPublicKey:N,getSharedSecret:q,utils:w,lengths:W,Point:$,sign:K,verify:k,recoverPublicKey:V,Signature:i,hash:I})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var w7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var q7=RW(w7),II=TW(q7,_$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lg=BigInt(0),Zv=BigInt(1),H8=BigInt(2),Y7=BigInt(8);function W7($,v,U,I){let g=$.sqr(U),J=$.sqr(I),G=$.add($.mul(v.a,g),J),z=$.add($.ONE,$.mul(v.d,$.mul(g,J)));return $.eql(G,z)}function HW($,v={}){let U=v,I=QG("edwards",$,U,U.FpFnLE),{Fp:g,Fn:J}=I,G=I.CURVE,{h:z}=G;Lv(U,{},{uvRatio:"function"});let O=H8<<BigInt(J.BYTES*8)-Zv,D=(Z)=>g.create(Z),X=U.uvRatio===void 0?(Z,r)=>{try{return{isValid:!0,value:g.sqrt(g.div(Z,r))}}catch(T){return{isValid:!1,value:lg}}}:U.uvRatio;if(!W7(g,G,G.Gx,G.Gy))throw Error("bad curve params: generator point");function N(Z,r,T=!1){let u=T?Zv:lg;return ug("coordinate "+Z,r,u,O),r}function q(Z){if(!(Z instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(G.Gx,G.Gy,Zv,D(G.Gx*G.Gy));static ZERO=new w(lg,Zv,Zv,lg);static Fp=g;static Fn=J;X;Y;Z;T;constructor(Z,r,T,u){this.X=N("x",Z),this.Y=N("y",r),this.Z=N("z",T,!0),this.T=N("t",u),Object.freeze(this)}static CURVE(){return G}static fromAffine(Z){if(Z instanceof w)throw Error("extended point not allowed");let{x:r,y:T}=Z||{};return N("x",r),N("y",T),new w(r,T,Zv,D(r*T))}static fromBytes(Z,r=!1){let T=g.BYTES,{a:u,d:_}=G;Z=og(T$(Z,T,"point")),Rg(r,"zip215");let L=og(Z),i=Z[T-1];L[T-1]=i&-129;let y=Fv(L),d=r?O:g.ORDER;ug("point.y",y,lg,d);let n=D(y*y),b=D(n-Zv),v$=D(_*n-u),{isValid:S,value:K}=X(b,v$);if(!S)throw Error("bad point: invalid y coordinate");let k=(K&Zv)===Zv,V=(i&128)!==0;if(!r&&K===lg&&V)throw Error("bad point: x=0 and x_0=1");if(V!==k)K=D(-K);return w.fromAffine({x:K,y})}static fromHex(Z,r=!1){return w.fromBytes(sU(Z),r)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(Z=8,r=!0){if(W.createCache(this,Z),!r)this.multiply(H8);return this}assertValidity(){let Z=this,{a:r,d:T}=G;if(Z.is0())throw Error("bad point: ZERO");let{X:u,Y:_,Z:L,T:i}=Z,y=D(u*u),d=D(_*_),n=D(L*L),b=D(n*n),v$=D(y*r),S=D(n*D(v$+d)),K=D(b+D(T*D(y*d)));if(S!==K)throw Error("bad point: equation left != right (1)");let k=D(u*_),V=D(L*i);if(k!==V)throw Error("bad point: equation left != right (2)")}equals(Z){q(Z);let{X:r,Y:T,Z:u}=this,{X:_,Y:L,Z:i}=Z,y=D(r*i),d=D(_*u),n=D(T*i),b=D(L*u);return y===d&&n===b}is0(){return this.equals(w.ZERO)}negate(){return new w(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:Z}=G,{X:r,Y:T,Z:u}=this,_=D(r*r),L=D(T*T),i=D(H8*D(u*u)),y=D(Z*_),d=r+T,n=D(D(d*d)-_-L),b=y+L,v$=b-i,S=y-L,K=D(n*v$),k=D(b*S),V=D(n*S),M=D(v$*b);return new w(K,k,M,V)}add(Z){q(Z);let{a:r,d:T}=G,{X:u,Y:_,Z:L,T:i}=this,{X:y,Y:d,Z:n,T:b}=Z,v$=D(u*y),S=D(_*d),K=D(i*T*b),k=D(L*n),V=D((u+_)*(y+d)-v$-S),M=k-K,j=k+K,A=D(S-r*v$),R=D(V*M),E=D(j*A),C=D(V*A),x=D(M*j);return new w(R,E,x,C)}subtract(Z){return q(Z),this.add(Z.negate())}multiply(Z){if(!J.isValidNot0(Z))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:r,f:T}=W.cached(this,Z,(u)=>RU(w,u));return RU(w,[r,T])[0]}multiplyUnsafe(Z){if(!J.isValid(Z))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(Z===lg)return w.ZERO;if(this.is0()||Z===Zv)return this;return W.unsafe(this,Z,(r)=>RU(w,r))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return W.unsafe(this,G.n).is0()}toAffine(Z){let r=this,T=Z,{X:u,Y:_,Z:L}=r,i=r.is0();if(T==null)T=i?Y7:g.inv(L);let y=D(u*T),d=D(_*T),n=g.mul(L,T);if(i)return{x:lg,y:Zv};if(n!==Zv)throw Error("invZ was invalid");return{x:y,y:d}}clearCofactor(){if(z===Zv)return this;return this.multiplyUnsafe(z)}toBytes(){let{x:Z,y:r}=this.toAffine(),T=g.toBytes(r);return T[T.length-1]|=Z&Zv?128:0,T}toHex(){return eU(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let W=new R0(w,J.BITS);if(J.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class A8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){Y8()}static fromHex($){Y8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eU(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),JI=BigInt(1),NG=BigInt(2);function r7($){return Lv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function AW($){let v=r7($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:G}=v,z=I==="x25519";if(!z&&I!=="x448")throw Error("invalid type");let O=G===void 0?vI:G,D=z?255:448,X=z?32:56,N=z?BigInt(9):BigInt(5),q=z?BigInt(121665):BigInt(39081),w=z?NG**BigInt(254):NG**BigInt(447),W=z?BigInt(8)*NG**BigInt(251)-JI:BigInt(4)*NG**BigInt(445)-JI,Z=w+W+JI,r=(V)=>B$(V,U),T=u(N);function u(V){return V0(r(V),X)}function _(V){let M=og(T$(V,X,"uCoordinate"));if(z)M[31]&=127;return r(Fv(M))}function L(V){return Fv(g(og(T$(V,X,"scalar"))))}function i(V,M){let j=v$(_(M),L(V));if(j===T0)throw Error("invalid private or public key received");return u(j)}function y(V){return i(V,T)}let d=y,n=i;function b(V,M,j){let A=r(V*(M-j));return M=r(M-A),j=r(j+A),{x_2:M,x_3:j}}function v$(V,M){ug("u",V,T0,U),ug("scalar",M,w,Z);let j=M,A=V,R=JI,E=T0,C=V,x=JI,e=T0;for(let z$=BigInt(D-1);z$>=T0;z$--){let Q$=j>>z$&JI;e^=Q$,{x_2:R,x_3:C}=b(e,R,C),{x_2:E,x_3:x}=b(e,E,x),e=Q$;let w$=R+E,X$=r(w$*w$),N$=R-E,r$=r(N$*N$),k$=X$-r$,E$=C+x,a$=C-x,e$=r(a$*w$),rv=r(E$*N$),ov=e$+rv,yv=e$-rv;C=r(ov*ov),x=r(A*r(yv*yv)),R=r(X$*r$),E=r(k$*(X$+r(q*k$)))}({x_2:R,x_3:C}=b(e,R,C)),{x_2:E,x_3:x}=b(e,E,x);let J$=J(E);return r(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V)=>{return V=V===void 0?O(X):V,T$(V,S.seed,"seed"),V},k={randomSecretKey:K};return Object.freeze(S),Object.freeze(k),Object.freeze({keygen:u0(K,d),getSharedSecret:n,getPublicKey:d,scalarMult:i,scalarMultBase:y,utils:k,GuBytes:T.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var V7=BigInt(0),Tg=BigInt(1),SW=BigInt(2),Z7=BigInt(3),j7=BigInt(5),M7=BigInt(8),KU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),E8=(()=>({p:KU,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:M7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function EW($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=KU,z=$*$%J*$%J,O=fv(z,SW,J)*z%J,D=fv(O,Tg,J)*$%J,X=fv(D,j7,J)*D%J,N=fv(X,v,J)*X%J,q=fv(N,U,J)*N%J,w=fv(q,I,J)*q%J,W=fv(w,g,J)*w%J,Z=fv(W,g,J)*w%J,r=fv(Z,v,J)*X%J;return{pow_p_5_8:fv(r,SW,J)*$%J,b2:z}}function R7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var S8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function B8($,v){let U=KU,I=B$(v*v*v,U),g=B$(I*I*v,U),J=EW($*g).pow_p_5_8,G=B$($*I*J,U),z=B$(v*G*G,U),O=G,D=B$(G*S8,U),X=z===$,N=z===B$(-$,U),q=z===B$(-$*S8,U);if(X)G=O;if(N||q)G=D;if(Kg(G,U))G=B$(-G,U);return{isValid:X||N,value:G}}var uU=HW(E8,{uvRatio:B8}),dg=(()=>uU.Fp)(),BW=(()=>uU.Fn)();var wG=(()=>{let $=KU;return AW({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=EW(v);return B$(fv(U,Z7,$)*I,$)},adjustScalarBytes:R7})})();var k8=S8,u7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),K7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),T7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),H7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),kW=($)=>B8(Tg,$),A7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),P8=($)=>dg.create(Fv($)&A7);function PW($){let{d:v}=E8,U=KU,I=(T)=>dg.create(T),g=I(k8*$*$),J=I((g+Tg)*T7),G=BigInt(-1),z=I((G-v*g)*I(g+v)),{isValid:O,value:D}=B8(J,z),X=I(D*$);if(!Kg(X,U))X=I(-X);if(!O)D=X;if(!O)G=g;let N=I(G*(g-Tg)*H7-z),q=D*D,w=I((D+D)*z),W=I(N*u7),Z=I(Tg-q),r=I(Tg+q);return new uU(I(w*r),I(Z*W),I(W*r),I(w*Z))}class Xv extends A8{static BASE=(()=>new Xv(uU.BASE))();static ZERO=(()=>new Xv(uU.ZERO))();static Fp=(()=>dg)();static Fn=(()=>BW)();constructor($){super($)}static fromAffine($){return new Xv(uU.fromAffine($))}assertSame($){if(!($ instanceof Xv))throw Error("RistrettoPoint expected")}init($){return new Xv($)}static fromBytes($){x$($,32);let{a:v,d:U}=E8,I=KU,g=(_)=>dg.create(_),J=P8($);if(!eY(dg.toBytes(J),$)||Kg(J,I))throw Error("invalid ristretto255 encoding 1");let G=g(J*J),z=g(Tg+v*G),O=g(Tg-v*G),D=g(z*z),X=g(O*O),N=g(v*U*D-X),{isValid:q,value:w}=kW(g(N*X)),W=g(w*O),Z=g(w*W*N),r=g((J+J)*W);if(Kg(r,I))r=g(-r);let T=g(z*Z),u=g(r*T);if(!q||Kg(u,I)||T===V7)throw Error("invalid ristretto255 encoding 2");return new Xv(new uU(r,T,Tg,u))}static fromHex($){return Xv.fromBytes(yI($))}toBytes(){let{X:$,Y:v,Z:U,T:I}=this.ep,g=KU,J=(Z)=>dg.create(Z),G=J(J(U+v)*J(U-v)),z=J($*v),O=J(z*z),{value:D}=kW(J(G*O)),X=J(D*G),N=J(D*z),q=J(X*N*I),w;if(Kg(I*q,g)){let Z=J(v*k8),r=J($*k8);$=Z,v=r,w=J(X*K7)}else w=N;if(Kg($*q,g))v=J(-v);let W=J((U-v)*w);if(Kg(W,g))W=J(-W);return dg.toBytes(W)}equals($){this.assertSame($);let{X:v,Y:U}=this.ep,{X:I,Y:g}=$.ep,J=(O)=>dg.create(O),G=J(v*g)===J(U*I),z=J(U*g)===J(v*I);return G||z}is0(){return this.equals(Xv.ZERO)}}Object.freeze(Xv.BASE);Object.freeze(Xv.ZERO);Object.freeze(Xv.prototype);Object.freeze(Xv);var S7=Object.freeze({Point:Xv,hashToCurve($,v){let U=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,I=u8($,U,64,EJ);return S7.deriveToCurve(I)},hashToScalar($,v={DST:VW}){let U=u8($,v.DST,64,EJ);return BW.create(Fv(U))},deriveToCurve($){x$($,64);let v=P8($.subarray(0,32)),U=PW(v),I=P8($.subarray(32,64)),g=PW(I);return new Xv(U.add(g))}});var CW=!1,k7=!1;async function LW($,v){if(k7)return await v();try{return await $()}catch(U){if(U instanceof ReferenceError||U instanceof DOMException&&U.name==="NotSupportedError")return await v();else throw U}}async function qG($,v){return await LW(async()=>{let U=C8($)?$:await E7($),I=await crypto.subtle.importKey("raw",B7(v),{name:"X25519"},CW,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:I},U,256))},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wG.scalarMult($,v)})}async function H0($){return await LW(async()=>{return qG($,wG.GuBytes)},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wG.scalarMultBase($)})}var P7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function E7($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...P7,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},CW,["deriveBits"])}function C8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function B7($){return $}class L8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),L7(TU($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let U=await this.s.read();if(U.done)return this.buf=TU($),null;this.buf=U.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:TU(this.transcript)}}}function L7($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function TU($){let v=$.reduce((g,J)=>g+J.length,0),U=new Uint8Array(v),I=0;for(let g of $)U.set(g,I),I+=g.length;return U}function GI($,...v){return $.pipeThrough(new TransformStream({start(U){for(let I of v)U.enqueue(I)}}))}function YG($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function f8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fW($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function _W($,v){let U=$.getReader(),I=[],g=0;while(g<v){let{done:O,value:D}=await U.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");I.push(D),g+=D.length}U.releaseLock();let J=TU(I),G=J.subarray(0,v),z=GI($,J.subarray(v));return{data:G,rest:z}}class vg{args;body;constructor($,v){this.args=$,this.body=v}}async function f7($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let U=v.split(" ");if(U.length<2||U.shift()!=="->")return{next:v};for(let J of U)if(J.length===0)throw Error("invalid stanza");let I=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let G=vv.decode(J);if(G.length>48)throw Error("invalid stanza");if(I.push(G),G.length<48)break}let g=TU(I);return{s:new vg(U,g)}}async function nW($){let v=new L8($),U=await v.readLine();if(U!=="age-encryption.org/v1")throw Error("invalid version "+(U??"line"));let I=[];for(;;){let{s:g,next:J}=await f7(v);if(g!==void 0){I.push(g);continue}if(!J.startsWith("--- "))throw Error("invalid header");let G=vv.decode(J.slice(4)),{rest:z,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:I,headerNoMAC:D,MAC:G,headerSize:O.length,rest:GI($,z)}}}function _8($){let v=[];v.push(`age-encryption.org/v1
 `);for(let U of $){v.push("-> "+U.args.join(" ")+`
 `);for(let I=0;I<U.body.length;I+=48){let g=I+48;if(g>U.body.length)g=U.body.length;v.push(vv.encode(U.body.subarray(I,g))+`
 `)}if(U.body.length%48===0)v.push(`

package/dist/index.js CHANGED Viewed

@@ -1,5 +1,5 @@
 // @bun
-var Oj=Object.defineProperty;var Dj=($)=>$;function Qj($,v){this[$]=Dj.bind(null,v)}var dv=($,v)=>{for(var g in v)Oj($,g,{get:v[g],enumerable:!0,configurable:!0,set:Qj.bind(v,g)})};import{access as oR,chmod as mX,mkdir as z9,readFile as D9,writeFile as O9}from"fs/promises";import{dirname as yR,join as iX}from"path";import{fileURLToPath as lR}from"url";var KJ={name:"@rizom/ops",version:"0.2.0-alpha.217",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var sw=`ARG BUN_VERSION=1.3.10
+var Oj=Object.defineProperty;var Dj=($)=>$;function Qj($,v){this[$]=Dj.bind(null,v)}var dv=($,v)=>{for(var g in v)Oj($,g,{get:v[g],enumerable:!0,configurable:!0,set:Qj.bind(v,g)})};import{access as oR,chmod as mX,mkdir as z9,readFile as D9,writeFile as O9}from"fs/promises";import{dirname as yR,join as iX}from"path";import{fileURLToPath as lR}from"url";var KJ={name:"@rizom/ops",version:"0.2.0-alpha.218",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var sw=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.217",
+  "version": "0.2.0-alpha.218",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",