npm - @rizom/ops - Versions diffs - 0.2.0-alpha.229 → 0.2.0-alpha.230 - Mend

@rizom/ops 0.2.0-alpha.229 → 0.2.0-alpha.230

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-var Jj=Object.defineProperty;var zj=($)=>$;function Gj($,v){this[$]=zj.bind(null,v)}var lv=($,v)=>{for(var U in v)Jj($,U,{get:v[U],enumerable:!0,configurable:!0,set:Gj.bind(v,U)})};import{parseArgs as Oj}from"util";var Dj={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function rO($,v){let U=$[v];return typeof U==="boolean"?U:void 0}function KJ($,v){let U=$[v];return typeof U==="string"?U:void 0}function xN($){let{values:v,positionals:U}=Oj({args:$,options:Dj,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:U[0]??"help",args:U.slice(1),flags:{help:rO(v,"help"),version:rO(v,"version"),dryRun:rO(v,"dry-run"),pushTo:KJ(v,"push-to"),cohort:KJ(v,"cohort"),anchorId:KJ(v,"anchor-id"),handle:KJ(v,"handle")}}}var TJ={name:"@rizom/ops",version:"0.2.0-alpha.229",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as l7,mkdirSync as d7,readFileSync as s8,writeFileSync as $D}from"fs";import{dirname as h7,join as lY}from"path";function XO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function n$($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(`${U}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw RangeError(`${U}expected integer >= 0, got ${$}`)}}function x$($,v,U=""){let I=XO($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function rg($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(n$($.outputLen),n$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function FU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function HJ($,v){x$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw RangeError('"digestInto() output" expected to be of length >='+U)}function AJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iU($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var rj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Xj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function Nj($){for(let v=0;v<$.length;v++)$[v]=Xj($[v]);return $}var NO=rj?($)=>$:Nj,cN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),wj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function SJ($){if(x$($),cN)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=wj[$[U]];return v}var Qg={_0:48,_9:57,A:65,F:70,a:97,f:102};function oN($){if($>=Qg._0&&$<=Qg._9)return $-Qg._0;if($>=Qg.A&&$<=Qg.F)return $-(Qg.A-10);if($>=Qg.a&&$<=Qg.f)return $-(Qg.a-10);return}function yI($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(cN)try{return Uint8Array.fromHex($)}catch(g){if(g instanceof SyntaxError)throw RangeError(g.message);throw g}let v=$.length,U=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=oN($.charCodeAt(J)),G=oN($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function qj($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function wO($,v=""){if(typeof $==="string")return qj($);return x$($,void 0,v)}function qO(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];x$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function kJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function YO($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.canXOF=I.canXOF,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function Xg($=32){n$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var WO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class ZO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(rg($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Ov(I)}update($){return FU(this),this.iHash.update($),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,U,I)=>new ZO(v,U).update(I).digest();return $.create=(v,U)=>new ZO(v,U),$})();function lI($,v,U){if(rg($),U===void 0)U=new Uint8Array($.outputLen);return dv($,U,v)}var VO=Uint8Array.of(0),yN=Uint8Array.of();function jO($,v,U,I=32){rg($),n$(I,"length"),x$(v,void 0,"prk");let g=$.outputLen;if(v.length<g)throw Error('"prk" must be at least HashLen octets');if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=yN;else x$(U,void 0,"info");let z=new Uint8Array(J*g),G=dv.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let r=0;r<J;r++)VO[0]=r+1,O.update(r===0?yN:D).update(U).update(VO).digestInto(D),z.set(D,g*r),G._cloneInto(O);return G.destroy(),O.destroy(),Ov(D,VO),z.slice(0,I)}var Pg=($,v,U,I,g)=>jO($,lI($,v,U),I,g);function lN($,v,U){return $&v^~$&U}function dN($,v,U){return $&v^$&U^v&U}class PJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iU(this.buffer)}update($){FU(this),x$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=iU($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Ov(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let r=J;r<I;r++)v[r]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=iU($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let r=0;r<O;r++)z.setUint32(4*r,D[r],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Ng=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),wg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),o$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EJ=BigInt(4294967295),hN=BigInt(32);function Yj($,v=!1){if(v)return{h:Number($&EJ),l:Number($>>hN&EJ)};return{h:Number($>>hN&EJ)|0,l:Number($&EJ)|0}}function pN($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=Yj($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var MO=($,v,U)=>$>>>U,RO=($,v,U)=>$<<32-U|v>>>U,JU=($,v,U)=>$>>>U|v<<32-U,zU=($,v,U)=>$<<32-U|v>>>U,dI=($,v,U)=>$<<64-U|v>>>U-32,hI=($,v,U)=>$>>>U-32|v<<64-U;function hv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var tN=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),aN=($,v,U,I)=>v+U+I+($/4294967296|0)|0,eN=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),sN=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,$w=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),vw=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var Zj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Eg=new Uint32Array(64);class uO extends PJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let r=0;r<16;r++,v+=4)Eg[r]=$.getUint32(v,!1);for(let r=16;r<64;r++){let X=Eg[r-15],w=Eg[r-2],N=_v(X,7)^_v(X,18)^X>>>3,Y=_v(w,17)^_v(w,19)^w>>>10;Eg[r]=Y+Eg[r-7]+N+Eg[r-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let r=0;r<64;r++){let X=_v(z,6)^_v(z,11)^_v(z,25),w=D+X+lN(z,G,O)+Zj[r]+Eg[r]|0,Y=(_v(U,2)^_v(U,13)^_v(U,22))+dN(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Ov(Eg)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class gw extends uO{A=Ng[0]|0;B=Ng[1]|0;C=Ng[2]|0;D=Ng[3]|0;E=Ng[4]|0;F=Ng[5]|0;G=Ng[6]|0;H=Ng[7]|0;constructor(){super(32)}}class Vj extends uO{A=wg[0]|0;B=wg[1]|0;C=wg[2]|0;D=wg[3]|0;E=wg[4]|0;F=wg[5]|0;G=wg[6]|0;H=wg[7]|0;constructor(){super(28)}}var Uw=(()=>pN(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),jj=(()=>Uw[0])(),Mj=(()=>Uw[1])(),Bg=new Uint32Array(80),Cg=new Uint32Array(80);class pI extends PJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:r,Fl:X,Gh:w,Gl:N,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V]}set($,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=r|0,this.Fl=X|0,this.Gh=w|0,this.Gl=N|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)Bg[u]=$.getUint32(v),Cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let f=Bg[u-15]|0,L=Cg[u-15]|0,i=JU(f,L,1)^JU(f,L,8)^MO(f,L,7),l=zU(f,L,1)^zU(f,L,8)^RO(f,L,7),h=Bg[u-2]|0,_=Cg[u-2]|0,b=JU(h,_,19)^dI(h,_,61)^MO(h,_,6),g$=zU(h,_,19)^hI(h,_,61)^RO(h,_,6),S=eN(l,g$,Cg[u-7],Cg[u-16]),K=sN(S,i,b,Bg[u-7],Bg[u-16]);Bg[u]=K|0,Cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:r,El:X,Fh:w,Fl:N,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let f=JU(r,X,14)^JU(r,X,18)^dI(r,X,41),L=zU(r,X,14)^zU(r,X,18)^hI(r,X,41),i=r&w^~r&Y,l=X&N^~X&V,h=$w(T,L,l,Mj[u],Cg[u]),_=vw(h,W,f,i,jj[u],Bg[u]),b=h|0,g$=JU(U,I,28)^dI(U,I,34)^dI(U,I,39),S=zU(U,I,28)^hI(U,I,34)^hI(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=N|0,w=r|0,N=X|0,{h:r,l:X}=hv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=tN(b,S,k);U=aN(Z,_,g$,K),I=Z|0}({h:U,l:I}=hv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=hv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=hv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=hv(this.Dh|0,this.Dl|0,O|0,D|0),{h:r,l:X}=hv(this.Eh|0,this.El|0,r|0,X|0),{h:w,l:N}=hv(this.Fh|0,this.Fl|0,w|0,N|0),{h:Y,l:V}=hv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=hv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,r,X,w,N,Y,V,W,T)}roundClean(){Ov(Bg,Cg)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Iw extends pI{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class Rj extends pI{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uj extends pI{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Kj extends pI{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var f$=YO(()=>new gw,WO(1));var BJ=YO(()=>new Iw,WO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function _J($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function HO($){if(!_J($))throw TypeError("Uint8Array expected")}function Dw($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((U)=>typeof U==="string");else return v.every((U)=>Number.isSafeInteger(U))}function Qw($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Lg($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aI($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function LJ($){if(!Array.isArray($))throw TypeError("array expected")}function nJ($,v){if(!Dw(!0,v))throw TypeError(`${$}: array of strings expected`)}function AO($,v){if(!Dw(!1,v))throw TypeError(`${$}: array of numbers expected`)}function uv(...$){let v=(J)=>J,U=(J,z)=>(G)=>J(z(G)),I=$.map((J)=>J.encode).reduceRight(U,v),g=$.map((J)=>J.decode).reduce(U,v);return{encode:I,decode:g}}function Kv($){let v=typeof $==="string"?$.split(""):$,U=v.length;nJ("alphabet",v);let I=new Map(v.map((g,J)=>[g,J]));return{encode:(g)=>{return LJ(g),g.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=U)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(g)=>{return LJ(g),g.map((J)=>{Lg("alphabet.decode",J);let z=I.get(J);if(z===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return z})}}}function Tv($=""){return Lg("join",$),{encode:(v)=>{return nJ("join.decode",v),v.join($)},decode:(v)=>{return Lg("join.decode",v),v.split($)}}}function bJ($,v="="){return aI($),Lg("padding",v),{encode(U){nJ("padding.encode",U);while(U.length*$%8)U.push(v);return U},decode(U){nJ("padding.decode",U);let I=U.length;if(I*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;I>0&&U[I-1]===v;I--)if((I-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return U.slice(0,I)}}}function rw($){return Qw($),{encode:(v)=>v,decode:(v)=>$(v)}}function Jw($,v,U){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(U<2)throw RangeError(`convertRadix: invalid to=${U}, base cannot be less than 2`);if(LJ($),!$.length)return[];let I=0,g=[],J=Array.from($,(G)=>{if(aI(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),z=J.length;while(!0){let G=0,O=!0;for(let D=I;D<z;D++){let r=J[D],X=v*G,w=X+r;if(!Number.isSafeInteger(w)||X/v!==G||w-r!==X)throw Error("convertRadix: carry overflow");let N=w/U;G=w%U;let Y=Math.floor(N);if(J[D]=Y,!Number.isSafeInteger(Y)||Y*U+G!==w)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!Y)I=D;else O=!1}if(g.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)g.push(0);return g.reverse()}var Xw=($,v)=>v===0?$:Xw(v,$%v),fJ=($,v)=>$+(v-Xw($,v)),CJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function KO($,v,U,I){if(LJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(U<=0||U>32)throw RangeError(`convertRadix2: wrong to=${U}`);if(fJ(v,U)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${U} carryBits=${fJ(v,U)}`);let g=0,J=0,z=CJ[v],G=CJ[U]-1,O=[];for(let D of $){if(aI(D),D>=z)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(g=g<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=U;J-=U)O.push((g>>J-U&G)>>>0);let r=CJ[J];if(r===void 0)throw Error("invalid carry");g&=r-1}if(g=g<<U-J&G,!I&&J>=v)throw Error("Excess padding");if(!I&&g>0)throw Error(`Non-zero padding: ${g}`);if(I&&J>0)O.push(g>>>0);return O}function Tj($){aI($);let v=256;return{encode:(U)=>{if(!_J(U))throw TypeError("radix.encode input should be Uint8Array");return Jw(Array.from(U),v,$)},decode:(U)=>{return AO("radix.decode",U),Uint8Array.from(Jw(U,$,v))}}}function Pv($,v=!1){if(aI($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(fJ(8,$)>32||fJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(U)=>{if(!_J(U))throw TypeError("radix2.encode input should be Uint8Array");return KO(Array.from(U),8,$,!v)},decode:(U)=>{return AO("radix2.decode",U),Uint8Array.from(KO(U,$,8,v))}}}function zw($){return Qw($),function(...v){try{return $.apply(null,v)}catch(U){}}}var pT=Object.freeze(uv(Pv(4),Kv("0123456789ABCDEF"),Tv(""))),tT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),bJ(5),Tv(""))),aT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Tv(""))),eT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),bJ(5),Tv(""))),sT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Tv(""))),$H=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Tv(""),rw(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),Nw=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Hj=/[\t\n\f\r ]/,ww=($,v)=>{Lg("base64",$);let U=v?"base64url":"base64";if($.length>0&&Hj.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:U,lastChunkHandling:"strict"})},SO=Object.freeze(Nw?{encode($){return HO($),$.toBase64()},decode($){return ww($,!1)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),bJ(6),Tv(""))),vv=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Tv(""))),vH=Object.freeze(Nw?{encode($){return HO($),$.toBase64({alphabet:"base64url"})},decode($){return ww($,!0)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),bJ(6),Tv(""))),gH=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Tv(""))),kO=($)=>uv(Tj(58),Kv($),Tv("")),UH=Object.freeze(kO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),IH=Object.freeze(kO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),JH=Object.freeze(kO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var TO=uv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Tv("")),Gw=[996825010,642813549,513874426,1027748829,705979059];function tI($){let v=$>>25,U=($&33554431)<<5;for(let I=0;I<Gw.length;I++)if((v>>I&1)===1)U^=Gw[I];return U}function Ow($,v,U=1){let I=$.length,g=1;for(let J=0;J<I;J++){let z=$.charCodeAt(J);if(z<33||z>126)throw Error(`Invalid prefix (${$})`);g=tI(g)^z>>5}g=tI(g);for(let J=0;J<I;J++)g=tI(g)^$.charCodeAt(J)&31;for(let J of v)g=tI(g)^J;for(let J=0;J<6;J++)g=tI(g);return g^=U,TO.encode(KO([g%CJ[30]],30,5,!1))}function qw($){let v=$==="bech32"?1:734539939,U=Pv(5),I=U.decode,g=U.encode,J=zw(I);function z(X,w,N=90){if(Lg("bech32.encode prefix",X),_J(w))w=Array.from(w);AO("bech32.encode",w);let Y=X.length;if(Y===0)throw TypeError(`Invalid prefix length ${Y}`);let V=Y+7+w.length;if(N!==!1&&V>N)throw TypeError(`Length ${V} exceeds limit ${N}`);let W=X.toLowerCase(),T=Ow(W,w,v);return`${W}1${TO.encode(w)}${T}`}function G(X,w=90){Lg("bech32.decode input",X);let N=X.length;if(N<8||w!==!1&&N>w)throw TypeError(`invalid string length: ${N} (${X}). Expected (8..${w})`);let Y=X.toLowerCase();if(X!==Y&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Y.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let W=Y.slice(0,V),T=Y.slice(V+1);if(T.length<6)throw Error("Data must be at least 6 characters long");let u=TO.decode(T).slice(0,-6),f=Ow(W,u,v);if(!T.endsWith(f))throw Error(`Invalid checksum in ${X}: expected "${f}"`);return{prefix:W,words:u}}let O=zw(G);function D(X){let{prefix:w,words:N}=G(X,!1);return{prefix:w,words:N,bytes:I(N)}}function r(X,w){return z(X,g(w))}return{encode:z,decode:G,encodeFromBytes:r,decodeToBytes:D,decodeUnsafe:O,fromWords:I,fromWordsUnsafe:J,toWords:g}}var Hv=Object.freeze(qw("bech32")),zH=Object.freeze(qw("bech32m"));var Aj=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Sj={encode($){return HO($),$.toHex()},decode($){return Lg("hex",$),Uint8Array.fromHex($)}},GH=Object.freeze(Aj?Sj:uv(Pv(4),Kv("0123456789abcdef"),Tv(""),rw(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Pj($,v,U,I){rg($);let g=kJ({dkLen:32,asyncTick:10},I),{c:J,dkLen:z,asyncTick:G}=g;if(n$(J,"c"),n$(z,"dkLen"),n$(G,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(z<1)throw Error('"dkLen" must be >= 1');if(z>4294967295*$.outputLen)throw Error("derived key too long");let O=wO(v,"password"),D=wO(U,"salt"),r=new Uint8Array(z),X=dv.create($,O),w=X._cloneInto().update(D);return{c:J,dkLen:z,asyncTick:G,DK:r,PRF:X,PRFSalt:w}}function Ej($,v,U,I,g){if($.destroy(),v.destroy(),I)I.destroy();return Ov(g),U}function PO($,v,U,I){let{c:g,dkLen:J,DK:z,PRF:G,PRFSalt:O}=Pj($,v,U,I),D,r=new Uint8Array(4),X=iU(r),w=new Uint8Array(G.outputLen);for(let N=1,Y=0;Y<J;N++,Y+=G.outputLen){let V=z.subarray(Y,Y+G.outputLen);X.setInt32(0,N,!1),(D=O._cloneInto(D)).update(r).digestInto(w),V.set(w.subarray(0,V.length));for(let W=1;W<g;W++){G._cloneInto(D).update(w).digestInto(w);for(let T=0;T<V.length;T++)V[T]^=w[T]}}return Ej(G,O,z,D,w)}function Yw($,v,U,I,g,J){let z=$[v++]^U[I++],G=$[v++]^U[I++],O=$[v++]^U[I++],D=$[v++]^U[I++],r=$[v++]^U[I++],X=$[v++]^U[I++],w=$[v++]^U[I++],N=$[v++]^U[I++],Y=$[v++]^U[I++],V=$[v++]^U[I++],W=$[v++]^U[I++],T=$[v++]^U[I++],u=$[v++]^U[I++],f=$[v++]^U[I++],L=$[v++]^U[I++],i=$[v++]^U[I++],l=z,h=G,_=O,b=D,g$=r,S=X,K=w,k=N,Z=Y,M=V,j=W,A=T,R=u,E=f,C=L,x=i;for(let s=0;s<8;s+=2)g$^=R$(l+R|0,7),Z^=R$(g$+l|0,9),R^=R$(Z+g$|0,13),l^=R$(R+Z|0,18),M^=R$(S+h|0,7),E^=R$(M+S|0,9),h^=R$(E+M|0,13),S^=R$(h+E|0,18),C^=R$(j+K|0,7),_^=R$(C+j|0,9),K^=R$(_+C|0,13),j^=R$(K+_|0,18),b^=R$(x+A|0,7),k^=R$(b+x|0,9),A^=R$(k+b|0,13),x^=R$(A+k|0,18),h^=R$(l+b|0,7),_^=R$(h+l|0,9),b^=R$(_+h|0,13),l^=R$(b+_|0,18),K^=R$(S+g$|0,7),k^=R$(K+S|0,9),g$^=R$(k+K|0,13),S^=R$(g$+k|0,18),A^=R$(j+M|0,7),Z^=R$(A+j|0,9),M^=R$(Z+A|0,13),j^=R$(M+Z|0,18),R^=R$(x+C|0,7),E^=R$(R+x|0,9),C^=R$(E+R|0,13),x^=R$(C+E|0,18);g[J++]=z+l|0,g[J++]=G+h|0,g[J++]=O+_|0,g[J++]=D+b|0,g[J++]=r+g$|0,g[J++]=X+S|0,g[J++]=w+K|0,g[J++]=N+k|0,g[J++]=Y+Z|0,g[J++]=V+M|0,g[J++]=W+j|0,g[J++]=T+A|0,g[J++]=u+R|0,g[J++]=f+E|0,g[J++]=L+C|0,g[J++]=i+x|0}function EO($,v,U,I,g){let J=I+0,z=I+16*g;for(let G=0;G<16;G++)U[z+G]=$[v+(2*g-1)*16+G];for(let G=0;G<g;G++,J+=16,v+=16){if(Yw(U,z,$,v,U,J),G>0)z+=16;Yw(U,J,$,v+=16,U,z)}}function Bj($,v,U){let I=kJ({dkLen:32,asyncTick:10,maxmem:1073742848},U),{N:g,r:J,p:z,dkLen:G,asyncTick:O,maxmem:D,onProgress:r}=I;if(n$(g,"N"),n$(J,"r"),n$(z,"p"),n$(G,"dkLen"),n$(O,"asyncTick"),n$(D,"maxmem"),r!==void 0&&typeof r!=="function")throw Error("progressCb must be a function");let X=128*J,w=X/4,N=Math.pow(2,32);if(g<=1||(g&g-1)!==0||g>N)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(z<1||z>(N-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(N-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Y=X*(g+z+1);if(Y>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Y+", maxmem="+D);let V=PO(f$,$,v,{c:1,dkLen:X*z}),W=AJ(V),T=AJ(new Uint8Array(X*g)),u=AJ(new Uint8Array(X)),f=()=>{};if(r){let L=2*g*z,i=Math.max(Math.floor(L/1e4),1),l=0;f=()=>{if(l++,r&&(!(l%i)||l===L))r(l/L)}}return{N:g,r:J,p:z,dkLen:G,blockSize32:w,V:T,B32:W,B:V,tmp:u,blockMixCb:f,asyncTick:O}}function Cj($,v,U,I,g){let J=PO(f$,$,U,{c:1,dkLen:v});return Ov(U,I,g),J}function BO($,v,U){let{N:I,r:g,p:J,dkLen:z,blockSize32:G,V:O,B32:D,B:r,tmp:X,blockMixCb:w}=Bj($,v,U);NO(D);for(let N=0;N<J;N++){let Y=G*N;for(let V=0;V<G;V++)O[V]=D[Y+V];for(let V=0,W=0;V<I-1;V++)EO(O,W,O,W+=G,g),w();EO(O,(I-1)*G,D,Y,g),w();for(let V=0;V<I;V++){let W=(D[Y+G-16]&I-1)>>>0;for(let T=0;T<G;T++)X[T]=D[Y+T]^O[W*G+T];EO(X,0,D,Y,g),w()}}return NO(D),Cj($,z,r,O,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Lj($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function xU($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,U=""){let I=Lj($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function CO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function Ww($,v,U=!1){b$($,void 0,"output");let I=v.outputLen;if($.length<I)throw RangeError("digestInto() expects output buffer of length at least "+I);if(U&&!oU($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function nj($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var GU=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),fj=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var _j=($)=>{for(let v=0;v<$.length;v++)$[v]=fj($[v]);return $},qg=GU?($)=>$:_j;function Zw($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function Vw($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function jw($,v,U){let I=v,g=U||(()=>[]),J=(G,O)=>I(O,...g(G)).update(G).digest(),z=I(new Uint8Array($),...g(new Uint8Array(0)));return J.outputLen=z.outputLen,J.blockLen=z.blockLen,J.create=(G,...O)=>I(G,...O),J}var Mw=($,v)=>{function U(I,...g){if(b$(I,void 0,"key"),$.nonceLength!==void 0){let r=g[0];b$(r,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&g[1]!==void 0)b$(g[1],void 0,"AAD");let z=v(I,...g),G=(r,X)=>{if(X!==void 0){if(r!==2)throw Error("cipher output not supported");b$(X,void 0,"output")}},O=!1;return{encrypt(r,X){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(r),G(z.encrypt.length,X),z.encrypt(r,X)},decrypt(r,X){if(b$(r),J&&r.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return G(z.decrypt.length,X),z.decrypt(r,X)}}}return Object.assign(U,$),U};function eI($,v,U=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(U&&!oU(v))throw Error("invalid output, must be aligned");return v}function Rw($,v,U){xU($),xU(v),mJ(U);let I=new Uint8Array(16),g=nj(I);return g.setBigUint64(0,BigInt(v),U),g.setBigUint64(8,BigInt($),U),I}function oU($){return $.byteOffset%4===0}function cU($){return Uint8Array.from(b$($))}var Kw=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),bj=(()=>qg(pv(Kw("expand 16-byte k"))))(),mj=(()=>qg(pv(Kw("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var sI=64,Fj=16,LO=(()=>4294967295)(),uw=Uint32Array.of();function ij($,v,U,I,g,J,z,G){let O=g.length,D=new Uint8Array(sI),r=pv(D),X=GU&&oU(g)&&oU(J),w=X?pv(g):uw,N=X?pv(J):uw;if(!GU){for(let Y=0;Y<O;z++){if($(v,U,I,r,z,G),qg(r),z>=LO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}return}for(let Y=0;Y<O;z++){if($(v,U,I,r,z,G),z>=LO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);if(X&&V===sI){let W=Y/4;if(Y%4!==0)throw Error("arx: invalid block position");for(let T=0,u;T<Fj;T++)u=W+T,N[u]=w[u]^r[T];Y+=sI;continue}for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}}function Tw($,v){let{allowShortKeys:U,extendNonceFn:I,counterLength:g,counterRight:J,rounds:z}=Zw({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return xU(g),xU(z),mJ(J),mJ(U),(G,O,D,r,X=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let w=D.length;if(r=eI(w,r,!1),xU(X),X<0||X>=LO)throw Error("arx: counter overflow");let N=[],Y=G.length,V,W;if(Y===32)N.push(V=cU(G)),W=mj;else if(Y===16&&U)V=new Uint8Array(32),V.set(G),V.set(G,16),W=bj,N.push(V);else throw b$(G,32,"arx key"),Error("invalid key size");if(!GU||!oU(O))N.push(O=cU(O));let T=pv(V);if(I){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(GU)I(W,T,pv(L),T);else{let i=qg(Uint32Array.from(W));I(i,T,pv(L),T),bv(i),qg(T)}O=O.subarray(16)}else if(!GU)qg(T);let u=16-g;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,N.push(O)}let f=qg(pv(O));try{return ij($,W,T,f,D,r,X,z),r}finally{bv(...N)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class Hw{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cU(b$($,32,"key"));let v=y$($,0),U=y$($,2),I=y$($,4),g=y$($,6),J=y$($,8),z=y$($,10),G=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|U<<3)&8191,this.r[2]=(U>>>10|I<<6)&7939,this.r[3]=(I>>>7|g<<9)&8191,this.r[4]=(g>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|z<<2)&8191,this.r[7]=(z>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,U=!1){let I=U?0:2048,{h:g,r:J}=this,z=J[0],G=J[1],O=J[2],D=J[3],r=J[4],X=J[5],w=J[6],N=J[7],Y=J[8],V=J[9],W=y$($,v+0),T=y$($,v+2),u=y$($,v+4),f=y$($,v+6),L=y$($,v+8),i=y$($,v+10),l=y$($,v+12),h=y$($,v+14),_=g[0]+(W&8191),b=g[1]+((W>>>13|T<<3)&8191),g$=g[2]+((T>>>10|u<<6)&8191),S=g[3]+((u>>>7|f<<9)&8191),K=g[4]+((f>>>4|L<<12)&8191),k=g[5]+(L>>>1&8191),Z=g[6]+((L>>>14|i<<2)&8191),M=g[7]+((i>>>11|l<<5)&8191),j=g[8]+((l>>>8|h<<8)&8191),A=g[9]+(h>>>5|I),R=0,E=R+_*z+b*(5*V)+g$*(5*Y)+S*(5*N)+K*(5*w);R=E>>>13,E&=8191,E+=k*(5*X)+Z*(5*r)+M*(5*D)+j*(5*O)+A*(5*G),R+=E>>>13,E&=8191;let C=R+_*G+b*z+g$*(5*V)+S*(5*Y)+K*(5*N);R=C>>>13,C&=8191,C+=k*(5*w)+Z*(5*X)+M*(5*r)+j*(5*D)+A*(5*O),R+=C>>>13,C&=8191;let x=R+_*O+b*G+g$*z+S*(5*V)+K*(5*Y);R=x>>>13,x&=8191,x+=k*(5*N)+Z*(5*w)+M*(5*X)+j*(5*r)+A*(5*D),R+=x>>>13,x&=8191;let s=R+_*D+b*O+g$*G+S*z+K*(5*V);R=s>>>13,s&=8191,s+=k*(5*Y)+Z*(5*N)+M*(5*w)+j*(5*X)+A*(5*r),R+=s>>>13,s&=8191;let J$=R+_*r+b*D+g$*O+S*G+K*z;R=J$>>>13,J$&=8191,J$+=k*(5*V)+Z*(5*Y)+M*(5*N)+j*(5*w)+A*(5*X),R+=J$>>>13,J$&=8191;let G$=R+_*X+b*r+g$*D+S*O+K*G;R=G$>>>13,G$&=8191,G$+=k*z+Z*(5*V)+M*(5*Y)+j*(5*N)+A*(5*w),R+=G$>>>13,G$&=8191;let Q$=R+_*w+b*X+g$*r+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=k*G+Z*z+M*(5*V)+j*(5*Y)+A*(5*N),R+=Q$>>>13,Q$&=8191;let N$=R+_*N+b*w+g$*X+S*r+K*D;R=N$>>>13,N$&=8191,N$+=k*O+Z*G+M*z+j*(5*V)+A*(5*Y),R+=N$>>>13,N$&=8191;let r$=R+_*Y+b*N+g$*w+S*X+K*r;R=r$>>>13,r$&=8191,r$+=k*D+Z*O+M*G+j*z+A*(5*V),R+=r$>>>13,r$&=8191;let X$=R+_*V+b*Y+g$*N+S*w+K*X;R=X$>>>13,X$&=8191,X$+=k*r+Z*D+M*O+j*G+A*z,R+=X$>>>13,X$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,C+=R,g[0]=E,g[1]=C,g[2]=x,g[3]=s,g[4]=J$,g[5]=G$,g[6]=Q$,g[7]=N$,g[8]=r$,g[9]=X$}finalize(){let{h:$,pad:v}=this,U=new Uint16Array(10),I=$[1]>>>13;$[1]&=8191;for(let z=2;z<10;z++)$[z]+=I,I=$[z]>>>13,$[z]&=8191;$[0]+=I*5,I=$[0]>>>13,$[0]&=8191,$[1]+=I,I=$[1]>>>13,$[1]&=8191,$[2]+=I,U[0]=$[0]+5,I=U[0]>>>13,U[0]&=8191;for(let z=1;z<10;z++)U[z]=$[z]+I,I=U[z]>>>13,U[z]&=8191;U[9]-=8192;let g=(I^1)-1;for(let z=0;z<10;z++)U[z]&=g;g=~g;for(let z=0;z<10;z++)$[z]=$[z]&g|U[z];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let z=1;z<8;z++)J=($[z]+v[z]|0)+(J>>>16)|0,$[z]=J&65535;bv(U)}update($){CO(this),b$($),$=cU($);let{buffer:v,blockLen:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(U-this.pos,I-g);if(J===U){for(;U<=I-g;g+=U)this.process($,g);continue}if(v.set($.subarray(g,g+J),this.pos),this.pos+=J,g+=J,this.pos===U)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){CO(this),Ww($,this),this.finished=!0;let{buffer:v,h:U}=this,{pos:I}=this;if(I){v[I++]=1;for(;I<16;I++)v[I]=0;this.process(v,0,!0)}this.finalize();let g=0;for(let J=0;J<8;J++)$[g++]=U[J]>>>0,$[g++]=U[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}}var Aw=jw(32,($)=>new Hw($));function xj($,v,U,I,g,J=20){let z=$[0],G=$[1],O=$[2],D=$[3],r=v[0],X=v[1],w=v[2],N=v[3],Y=v[4],V=v[5],W=v[6],T=v[7],u=g,f=U[0],L=U[1],i=U[2],l=z,h=G,_=O,b=D,g$=r,S=X,K=w,k=N,Z=Y,M=V,j=W,A=T,R=u,E=f,C=L,x=i;for(let J$=0;J$<J;J$+=2)l=l+g$|0,R=u$(R^l,16),Z=Z+R|0,g$=u$(g$^Z,12),l=l+g$|0,R=u$(R^l,8),Z=Z+R|0,g$=u$(g$^Z,7),h=h+S|0,E=u$(E^h,16),M=M+E|0,S=u$(S^M,12),h=h+S|0,E=u$(E^h,8),M=M+E|0,S=u$(S^M,7),_=_+K|0,C=u$(C^_,16),j=j+C|0,K=u$(K^j,12),_=_+K|0,C=u$(C^_,8),j=j+C|0,K=u$(K^j,7),b=b+k|0,x=u$(x^b,16),A=A+x|0,k=u$(k^A,12),b=b+k|0,x=u$(x^b,8),A=A+x|0,k=u$(k^A,7),l=l+S|0,x=u$(x^l,16),j=j+x|0,S=u$(S^j,12),l=l+S|0,x=u$(x^l,8),j=j+x|0,S=u$(S^j,7),h=h+K|0,R=u$(R^h,16),A=A+R|0,K=u$(K^A,12),h=h+K|0,R=u$(R^h,8),A=A+R|0,K=u$(K^A,7),_=_+k|0,E=u$(E^_,16),Z=Z+E|0,k=u$(k^Z,12),_=_+k|0,E=u$(E^_,8),Z=Z+E|0,k=u$(k^Z,7),b=b+g$|0,C=u$(C^b,16),M=M+C|0,g$=u$(g$^M,12),b=b+g$|0,C=u$(C^b,8),M=M+C|0,g$=u$(g$^M,7);let s=0;I[s++]=z+l|0,I[s++]=G+h|0,I[s++]=O+_|0,I[s++]=D+b|0,I[s++]=r+g$|0,I[s++]=X+S|0,I[s++]=w+K|0,I[s++]=N+k|0,I[s++]=Y+Z|0,I[s++]=V+M|0,I[s++]=W+j|0,I[s++]=T+A|0,I[s++]=u+R|0,I[s++]=f+E|0,I[s++]=L+C|0,I[s++]=i+x|0}var oj=Tw(xj,{counterRight:!1,counterLength:4,allowShortKeys:!1});var cj=new Uint8Array(16),Sw=($,v)=>{$.update(v);let U=v.length%16;if(U)$.update(cj.subarray(U))},yj=new Uint8Array(32);function kw($,v,U,I,g){if(g!==void 0)b$(g,void 0,"AAD");let J=$(v,U,yj),z=Rw(I.length,g?g.length:0,!0),G=Aw.create(J);if(g)Sw(G,g);Sw(G,I),G.update(z);let O=G.digest();return bv(J,z),O}var lj=($)=>(v,U,I)=>{return{encrypt(J,z){let G=J.length;z=eI(G+16,z,!1),z.set(J);let O=z.subarray(0,-16);$(v,U,O,O,1);let D=kw($,v,U,O,I);return z.set(D,G),bv(D),z},decrypt(J,z){z=eI(J.length-16,z,!1);let G=J.subarray(0,-16),O=J.subarray(-16),D=kw($,v,U,G,I);if(!Vw(O,D))throw bv(D),Error("invalid tag");return z.set(J.subarray(0,-16)),$(v,U,z,z,1),bv(D),z}}},Ev=Mw({blockSize:64,nonceLength:12,tagLength:16},lj(oj));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function yU($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw Error(`${U}expected integer >= 0, got ${$}`)}}function q$($,v,U=""){let I=yU($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`;throw Error(z+"expected Uint8Array"+G+", got "+O)}return $}function Bv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function Wg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function FJ($,v){q$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw Error('"digestInto() output" expected to be of length >='+U)}function iJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function mv($,v){return $<<32-v|$>>>v}var dj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pj($){for(let v=0;v<$.length;v++)$[v]=hj($[v]);return $}var nO=dj?($)=>$:pj,Ew=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function OU($){if(q$($),Ew)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=tj[$[U]];return v}var Yg={_0:48,_9:57,A:65,F:70,a:97,f:102};function Pw($){if($>=Yg._0&&$<=Yg._9)return $-Yg._0;if($>=Yg.A&&$<=Yg.F)return $-(Yg.A-10);if($>=Yg.a&&$<=Yg.f)return $-(Yg.a-10);return}function DU($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(Ew)return Uint8Array.fromHex($);let v=$.length,U=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=Pw($.charCodeAt(J)),G=Pw($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function _$(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];q$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function lU($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function ng($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var fg=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _O=BigInt(0),fO=BigInt(1);function $0($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw Error(U+"expected boolean, got type="+typeof $)}return $}function Bw($){if(typeof $==="bigint"){if(!oJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function v0($){let v=Bw($).toString(16);return v.length&1?"0"+v:v}function Cw($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_O:BigInt("0x"+$)}function _g($){return Cw(OU($))}function bg($){return Cw(OU(cJ(q$($)).reverse()))}function dU($,v){F$(v),$=Bw($);let U=DU($.toString(16).padStart(v*2,"0"));if(U.length!==v)throw Error("number too large");return U}function g0($,v){return dU($,v).reverse()}function cJ($){return Uint8Array.from($)}function mg($){return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw Error(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var oJ=($)=>typeof $==="bigint"&&_O<=$;function aj($,v,U){return oJ($)&&oJ(v)&&oJ(U)&&v<=$&&$<U}function U0($,v,U,I){if(!aj(v,U,I))throw Error("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function bO($){let v;for(v=0;$>_O;$>>=fO,v+=1);return v}var I0=($)=>(fO<<BigInt($))-fO;function Lw($,v,U){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof U!=="function")throw Error("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),r=0,X=()=>{O.fill(1),D.fill(0),r=0},w=(...W)=>U(D,_$(O,...W)),N=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(r++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return _$(...T)};return(W,T)=>{X(),N(W);let u=void 0;while(!(u=T(Y())))N();return X(),u}}function QU($,v={},U={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function I(J,z,G){let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw Error(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}function mO($){let v=new WeakMap;return(U,...I)=>{let g=v.get(U);if(g!==void 0)return g;let J=$(U,...I);return v.set(U,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qv=BigInt(0),gv=BigInt(1),rU=BigInt(2),_w=BigInt(3),bw=BigInt(4),mw=BigInt(5),ej=BigInt(7),Fw=BigInt(8),sj=BigInt(9),iw=BigInt(16);function Dv($,v){let U=$%v;return U>=Qv?U:v+U}function Cv($,v,U){let I=$;while(v-- >Qv)I*=I,I%=U;return I}function nw($,v){if($===Qv)throw Error("invert: expected non-zero number");if(v<=Qv)throw Error("invert: expected positive modulus, got "+v);let U=Dv($,v),I=v,g=Qv,J=gv,z=gv,G=Qv;while(U!==Qv){let D=I/U,r=I%U,X=g-z*D,w=J-G*D;I=U,U=r,g=z,J=G,z=X,G=w}if(I!==gv)throw Error("invert: does not exist");return Dv(g,v)}function FO($,v,U){if(!$.eql($.sqr(v),U))throw Error("Cannot find square root")}function xw($,v){let U=($.ORDER+gv)/bw,I=$.pow(v,U);return FO($,I,v),I}function $M($,v){let U=($.ORDER-mw)/Fw,I=$.mul(v,rU),g=$.pow(I,U),J=$.mul(v,g),z=$.mul($.mul(J,rU),g),G=$.mul(J,$.sub(z,$.ONE));return FO($,G,v),G}function vM($){let v=yJ($),U=ow($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+ej)/iw;return(G,O)=>{let D=G.pow(O,z),r=G.mul(D,I),X=G.mul(D,g),w=G.mul(D,J),N=G.eql(G.sqr(r),O),Y=G.eql(G.sqr(X),O);D=G.cmov(D,r,N),r=G.cmov(w,X,Y);let V=G.eql(G.sqr(r),O),W=G.cmov(D,r,V);return FO(G,W,O),W}}function ow($){if($<_w)throw Error("sqrt is not defined for small field");let v=$-gv,U=0;while(v%rU===Qv)v/=rU,U++;let I=rU,g=yJ($);while(fw(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return xw;let J=g.pow(I,v),z=(v+gv)/rU;return function(O,D){if(O.is0(D))return D;if(fw(O,D)!==1)throw Error("Cannot find square root");let r=U,X=O.mul(O.ONE,J),w=O.pow(D,v),N=O.pow(D,z);while(!O.eql(w,O.ONE)){if(O.is0(w))return O.ZERO;let Y=1,V=O.sqr(w);while(!O.eql(V,O.ONE))if(Y++,V=O.sqr(V),Y===r)throw Error("Cannot find square root");let W=gv<<BigInt(r-Y-1),T=O.pow(X,W);r=Y,X=O.sqr(T),w=O.mul(w,X),N=O.mul(N,T)}return N}}function gM($){if($%bw===_w)return xw;if($%Fw===mw)return $M;if($%iw===sj)return vM($);return ow($)}var UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function iO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=UM.reduce((I,g)=>{return I[g]="function",I},v);return QU($,U),$}function IM($,v,U){if(U<Qv)throw Error("invalid exponent, negatives unsupported");if(U===Qv)return $.ONE;if(U===gv)return v;let I=$.ONE,g=v;while(U>Qv){if(U&gv)I=$.mul(I,g);g=$.sqr(g),U>>=gv}return I}function J0($,v,U=!1){let I=Array(v.length).fill(U?$.ZERO:void 0),g=v.reduce((z,G,O)=>{if($.is0(G))return z;return I[O]=z,$.mul(z,G)},$.ONE),J=$.inv(g);return v.reduceRight((z,G,O)=>{if($.is0(G))return z;return I[O]=$.mul(z,I[O]),$.mul(z,G)},J),I}function fw($,v){let U=($.ORDER-gv)/rU,I=$.pow(v,U),g=$.eql(I,$.ONE),J=$.eql(I,$.ZERO),z=$.eql(I,$.neg($.ONE));if(!g&&!J&&!z)throw Error("invalid Legendre symbol result");return g?1:J?0:-1}function JM($,v){if(v!==void 0)F$(v);let U=v!==void 0?v:$.toString(2).length,I=Math.ceil(U/8);return{nBitLength:U,nByteLength:I}}class cw{ORDER;BITS;BYTES;isLE;ZERO=Qv;ONE=gv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Qv)throw Error("invalid field: expected ORDER > 0, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=JM($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Dv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Qv<=$&&$<this.ORDER}is0($){return $===Qv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&gv)===gv}neg($){return Dv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Dv($*$,this.ORDER)}add($,v){return Dv($+v,this.ORDER)}sub($,v){return Dv($-v,this.ORDER)}mul($,v){return Dv($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return Dv($*nw(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return nw($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=gM(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g0($,this.BYTES):dU($,this.BYTES)}fromBytes($,v=!1){q$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if(!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?bg($):_g($);if(z)G=Dv(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return J0(this,$)}cmov($,v,U){return U?v:$}}function yJ($,v={}){return new cw($,v)}function yw($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function xO($){let v=yw($);return v+Math.ceil(v/2)}function lw($,v,U=!1){q$($);let I=$.length,g=yw(v),J=xO(v);if(I<16||I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?bg($):_g($),G=Dv(z,v-gv)+gv;return U?g0(G,g):dU(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hU=BigInt(0),XU=BigInt(1);function z0($,v){let U=v.negate();return $?U:v}function lO($,v){let U=J0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function tw($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function oO($,v){tw($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=I0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function dw($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=XU;let D=v*I,r=D+Math.abs(G)-1,X=G===0,w=G<0,N=v%2!==0;return{nextN:O,offset:r,isZero:X,isNeg:w,isNegF:N,offsetF:D}}var cO=new WeakMap,aw=new WeakMap;function yO($){return aw.get($)||1}function hw($){if($!==hU)throw Error("invalid wNAF")}class dO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>hU){if(v&XU)U=U.add(I);I=I.double(),v>>=XU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=oO(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=oO($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:r,isNegF:X,offsetF:w}=dw(U,z,J);if(U=G,D)g=g.add(z0(X,v[w]));else I=I.add(z0(r,v[O]))}return hw(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=oO($,this.bits);for(let J=0;J<g.windows;J++){if(U===hU)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=dw(U,J,g);if(U=z,O)continue;else{let r=v[G];I=I.add(D?r.negate():r)}}return hw(U),I}getPrecomputes($,v,U){let I=cO.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);cO.set(v,I)}}return I}cached($,v,U){let I=yO($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=yO($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){tw(v,this.bits),aw.set($,v),cO.delete($)}hasCache($){return yO($)!==1}}function ew($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>hU||I>hU){if(U&XU)J=J.add(g);if(I&XU)z=z.add(g);g=g.double(),U>>=XU,I>>=XU}return{p1:J,p2:z}}function pw($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return iO(v),v}else return yJ($,{isLE:U})}function sw($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>hU))throw Error(`CURVE.${O} must be positive bigint`)}let g=pw(v.p,U.Fp,I),J=pw(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function lJ($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var G0=BigInt(0),pU=BigInt(1),dJ=BigInt(2);function zM($){return QU($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function $q($){let v=zM($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z||ng,D=G?255:448,r=G?32:56,X=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),N=G?dJ**BigInt(254):dJ**BigInt(447),Y=G?BigInt(8)*dJ**BigInt(251)-pU:BigInt(4)*dJ**BigInt(445)-pU,V=N+Y+pU,W=(Z)=>Dv(Z,U),T=u(X);function u(Z){return g0(W(Z),r)}function f(Z){let M=cJ(q$(Z,r,"uCoordinate"));if(G)M[31]&=127;return W(bg(M))}function L(Z){return bg(g(cJ(q$(Z,r,"scalar"))))}function i(Z,M){let j=g$(f(M),L(Z));if(j===G0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){U0("u",Z,G0,U),U0("scalar",M,N,V);let j=M,A=Z,R=pU,E=G0,C=Z,x=pU,s=G0;for(let G$=BigInt(D-1);G$>=G0;G$--){let Q$=j>>G$&pU;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let N$=R+E,r$=W(N$*N$),X$=R-E,W$=W(X$*X$),k$=r$-W$,E$=C+x,a$=C-x,e$=W(a$*N$),Wv=W(E$*X$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(r$*W$),E=W(k$*(r$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:r,publicKey:r,seed:r},K=(Z=O(r))=>{return q$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze({keygen:lJ(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}class hO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Bv($),q$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Zv(I)}update($){return Wg(this),this.iHash.update($),this}digestInto($){Wg(this),q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tU=($,v,U)=>new hO($,v).update(U).digest();tU.create=($,v)=>new hO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vq=($,v)=>($+($>=0?v:-v)/Uq)/v;function GM($,v,U){let[[I,g],[J,z]]=v,G=vq(z*$,U),O=vq(-g*$,U),D=$-G*I-O*J,r=-G*g-O*z,X=D<Zg,w=r<Zg;if(X)D=-D;if(w)r=-r;let N=I0(Math.ceil(bO(U)/2))+aU;if(D<Zg||D>=N||r<Zg||r>=N)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:D,k2neg:w,k2:r}}function tO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pO($,v){let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if($0(U.lowS,"lowS"),$0(U.prehash,"prehash"),U.format!==void 0)tO(U.format);return U}class gq extends Error{constructor($=""){super($)}}var Fg={Err:gq,_tlv:{encode:($,v)=>{let{Err:U}=Fg;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=v0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?v0(g.length/2|128):"";return v0($)+J+g+v},decode($,v){let{Err:U}=Fg,I=0;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let r of D)z=z<<8|r;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=Fg;if($<Zg)throw new v("integer: negative integers are not allowed");let U=v0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=Fg;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _g($)}},toSig($){let{Err:v,_int:U,_tlv:I}=Fg,g=q$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:r}=I.decode(2,O);if(r.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=Fg,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}},Zg=BigInt(0),aU=BigInt(1),Uq=BigInt(2),hJ=BigInt(3),OM=BigInt(4);function aO($,v={}){let U=sw("weierstrass",$,v),{Fp:I,Fn:g}=U,J=U.CURVE,{h:z,n:G}=J;QU(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=Jq(I,g);function r(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,k,Z){let{x:M,y:j}=k.toAffine(),A=I.toBytes(M);if($0(Z,"isCompressed"),Z){r();let R=!I.isOdd(j);return _$(Iq(R),A)}else return _$(Uint8Array.of(4),A,I.toBytes(j))}function w(K){q$(K,void 0,"Point");let{publicKey:k,publicKeyUncompressed:Z}=D,M=K.length,j=K[0],A=K.subarray(1);if(M===k&&(j===2||j===3)){let R=I.fromBytes(A);if(!I.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=V(R),C;try{C=I.sqrt(E)}catch(J$){let G$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}r();let x=I.isOdd(C);if((j&1)===1!==x)C=I.neg(C);return{x:R,y:C}}else if(M===Z&&j===4){let R=I.BYTES,E=I.fromBytes(A.subarray(0,R)),C=I.fromBytes(A.subarray(R,R*2));if(!W(E,C))throw Error("bad point: is not on curve");return{x:E,y:C}}else throw Error(`bad point: got length ${M}, expected compressed=${k} or uncompressed=${Z}`)}let N=v.toBytes||X,Y=v.fromBytes||w;function V(K){let k=I.sqr(K),Z=I.mul(k,K);return I.add(I.add(Z,I.mul(K,J.a)),J.b)}function W(K,k){let Z=I.sqr(k),M=V(K);return I.eql(Z,M)}if(!W(J.Gx,J.Gy))throw Error("bad curve params: generator point");let T=I.mul(I.pow(J.a,hJ),OM),u=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(T,u)))throw Error("bad curve params: a or b");function f(K,k,Z=!1){if(!I.isValid(k)||Z&&I.is0(k))throw Error(`bad point coordinate ${K}`);return k}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return GM(K,O.basises,g.ORDER)}let l=mO((K,k)=>{let{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),h=mO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!I.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:k,y:Z}=K.toAffine();if(!I.isValid(k)||!I.isValid(Z))throw Error("bad point: x or y not field elements");if(!W(k,Z))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,k,Z,M,j){return Z=new b(I.mul(Z.X,K),Z.Y,Z.Z),k=z0(M,k),Z=z0(j,Z),k.add(Z)}class b{static BASE=new b(J.Gx,J.Gy,I.ONE);static ZERO=new b(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(K,k,Z){this.X=f("x",K),this.Y=f("y",k,!0),this.Z=f("z",Z),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:k,y:Z}=K||{};if(!K||!I.isValid(k)||!I.isValid(Z))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(I.is0(k)&&I.is0(Z))return b.ZERO;return new b(k,Z,I.ONE)}static fromBytes(K){let k=b.fromAffine(Y(q$(K,void 0,"point")));return k.assertValidity(),k}static fromHex(K){return b.fromBytes(DU(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,k=!0){if(S.createCache(this,K),!k)this.multiply(hJ);return this}assertValidity(){h(this)}hasEvenY(){let{y:K}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(K)}equals(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.eql(I.mul(k,R),I.mul(j,M)),C=I.eql(I.mul(Z,R),I.mul(A,M));return E&&C}negate(){return new b(this.X,I.neg(this.Y),this.Z)}double(){let{a:K,b:k}=J,Z=I.mul(k,hJ),{X:M,Y:j,Z:A}=this,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(A,A),G$=I.mul(M,j);return G$=I.add(G$,G$),C=I.mul(M,A),C=I.add(C,C),R=I.mul(K,C),E=I.mul(Z,J$),E=I.add(R,E),R=I.sub(s,E),E=I.add(s,E),E=I.mul(R,E),R=I.mul(G$,R),C=I.mul(Z,C),J$=I.mul(K,J$),G$=I.sub(x,J$),G$=I.mul(K,G$),G$=I.add(G$,C),C=I.add(x,x),x=I.add(C,x),x=I.add(x,J$),x=I.mul(x,G$),E=I.add(E,x),J$=I.mul(j,A),J$=I.add(J$,J$),x=I.mul(J$,G$),R=I.sub(R,x),C=I.mul(J$,s),C=I.add(C,C),C=I.add(C,C),new b(R,E,C)}add(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.ZERO,C=I.ZERO,x=I.ZERO,s=J.a,J$=I.mul(J.b,hJ),G$=I.mul(k,j),Q$=I.mul(Z,A),N$=I.mul(M,R),r$=I.add(k,Z),X$=I.add(j,A);r$=I.mul(r$,X$),X$=I.add(G$,Q$),r$=I.sub(r$,X$),X$=I.add(k,M);let W$=I.add(j,R);return X$=I.mul(X$,W$),W$=I.add(G$,N$),X$=I.sub(X$,W$),W$=I.add(Z,M),E=I.add(A,R),W$=I.mul(W$,E),E=I.add(Q$,N$),W$=I.sub(W$,E),x=I.mul(s,X$),E=I.mul(J$,N$),x=I.add(E,x),E=I.sub(Q$,x),x=I.add(Q$,x),C=I.mul(E,x),Q$=I.add(G$,G$),Q$=I.add(Q$,G$),N$=I.mul(s,N$),X$=I.mul(J$,X$),Q$=I.add(Q$,N$),N$=I.sub(G$,N$),N$=I.mul(s,N$),X$=I.add(X$,N$),G$=I.mul(Q$,X$),C=I.add(C,G$),G$=I.mul(W$,X$),E=I.mul(r$,E),E=I.sub(E,G$),G$=I.mul(r$,Q$),x=I.mul(W$,x),x=I.add(x,G$),new b(E,C,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:k}=v;if(!g.isValidNot0(K))throw Error("invalid scalar: out of range");let Z,M,j=(A)=>S.cached(this,A,(R)=>lO(b,R));if(k){let{k1neg:A,k1:R,k2neg:E,k2:C}=i(K),{p:x,f:s}=j(R),{p:J$,f:G$}=j(C);M=s.add(G$),Z=_(k.beta,x,J$,A,E)}else{let{p:A,f:R}=j(K);Z=A,M=R}return lO(b,[Z,M])[0]}multiplyUnsafe(K){let{endo:k}=v,Z=this;if(!g.isValid(K))throw Error("invalid scalar: out of range");if(K===Zg||Z.is0())return b.ZERO;if(K===aU)return Z;if(S.hasCache(this))return this.multiply(K);if(k){let{k1neg:M,k1:j,k2neg:A,k2:R}=i(K),{p1:E,p2:C}=ew(b,Z,j,R);return _(k.beta,E,C,M,A)}else return S.unsafe(Z,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(z===aU)return!0;if(K)return K(b,this);return S.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(z===aU)return this;if(K)return K(b,this);return this.multiplyUnsafe(z)}isSmallOrder(){return this.multiplyUnsafe(z).is0()}toBytes(K=!0){return $0(K,"isCompressed"),this.assertValidity(),N(b,this,K)}toHex(K=!0){return OU(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let g$=g.BITS,S=new dO(b,v.endo?Math.ceil(g$/2):g$);return b.BASE.precompute(8),b}function Iq($){return Uint8Array.of($?2:3)}function Jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:U}=$,I=v.randomBytes||ng,g=Object.assign(Jq($.Fp,U),{seed:xO(U.ORDER)});function J(N){try{let Y=U.fromBytes(N);return U.isValidNot0(Y)}catch(Y){return!1}}function z(N,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=N.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(N)}catch(T){return!1}}function G(N=I(g.seed)){return lw(q$(N,g.seed,"seed"),U.ORDER)}function O(N,Y=!0){return $.BASE.multiply(U.fromBytes(N)).toBytes(Y)}function D(N){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g;if(!yU(N))return;if("_lengths"in U&&U._lengths||Y===V)return;let T=q$(N,void 0,"key").length;return T===V||T===W}function r(N,Y,V=!0){if(D(N)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(N);return $.fromBytes(Y).multiply(W).toBytes(V)}let X={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=lJ(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:r,keygen:w,Point:$,utils:X,lengths:g})}function eO($,v,U={}){Bv(v),QU(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let I=U.randomBytes||ng,g=U.hmac||((Z,M)=>tU(v,Z,M)),{Fp:J,Fn:z}=$,{ORDER:G,BITS:O}=z,{keygen:D,getPublicKey:r,getSharedSecret:X,utils:w,lengths:N}=DM($,U),Y={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},V=G*Uq<J.ORDER;function W(Z){let M=G>>aU;return Z>M}function T(Z,M){if(!z.isValidNot0(M))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return M}function u(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(Z,M){tO(M);let j=N.signature,A=M==="compact"?j:M==="recovered"?j+1:void 0;return q$(Z,A)}class L{r;s;recovery;constructor(Z,M,j){if(this.r=T("r",Z),this.s=T("s",M),j!=null){if(u(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(Z,M=Y.format){f(Z,M);let j;if(M==="der"){let{r:C,s:x}=Fg.toSig(q$(Z));return new L(C,x)}if(M==="recovered")j=Z[0],M="compact",Z=Z.subarray(1);let A=N.signature/2,R=Z.subarray(0,A),E=Z.subarray(A,A*2);return new L(z.fromBytes(R),z.fromBytes(E),j)}static fromHex(Z,M){return this.fromBytes(DU(Z),M)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new L(this.r,this.s,Z)}recoverPublicKey(Z){let{r:M,s:j}=this,A=this.assertRecovery(),R=A===2||A===3?M+G:M;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),C=$.fromBytes(_$(Iq((A&1)===0),E)),x=z.inv(R),s=l(q$(Z,void 0,"msgHash")),J$=z.create(-s*x),G$=z.create(j*x),Q$=$.BASE.multiplyUnsafe(J$).add(C.multiplyUnsafe(G$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return W(this.s)}toBytes(Z=Y.format){if(tO(Z),Z==="der")return DU(Fg.hexFromSig(this));let{r:M,s:j}=this,A=z.toBytes(M),R=z.toBytes(j);if(Z==="recovered")return u(),_$(Uint8Array.of(this.assertRecovery()),A,R);return _$(A,R)}toHex(Z){return OU(this.toBytes(Z))}}let i=U.bits2int||function(M){if(M.length>8192)throw Error("input is too large");let j=_g(M),A=M.length*8-O;return A>0?j>>BigInt(A):j},l=U.bits2int_modN||function(M){return z.create(i(M))},h=I0(O);function _(Z){return U0("num < 2^"+O,Z,Zg,h),z.toBytes(Z)}function b(Z,M){return q$(Z,void 0,"message"),M?q$(v(Z),void 0,"prehashed message"):Z}function g$(Z,M,j){let{lowS:A,prehash:R,extraEntropy:E}=pO(j,Y);Z=b(Z,R);let C=l(Z),x=z.fromBytes(M);if(!z.isValidNot0(x))throw Error("invalid private key");let s=[_(x),_(C)];if(E!=null&&E!==!1){let N$=E===!0?I(N.secretKey):E;s.push(q$(N$,void 0,"extraEntropy"))}let J$=_$(...s),G$=C;function Q$(N$){let r$=i(N$);if(!z.isValidNot0(r$))return;let X$=z.inv(r$),W$=$.BASE.multiply(r$).toAffine(),k$=z.create(W$.x);if(k$===Zg)return;let E$=z.create(X$*z.create(G$+k$*x));if(E$===Zg)return;let a$=(W$.x===k$?0:2)|Number(W$.y&aU),e$=E$;if(A&&W(E$))e$=z.neg(E$),a$^=1;return new L(k$,e$,V?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(Z,M,j={}){let{seed:A,k2sig:R}=g$(Z,M,j);return Lw(v.outputLen,z.BYTES,g)(A,R).toBytes(j.format)}function K(Z,M,j,A={}){let{lowS:R,prehash:E,format:C}=pO(A,Y);if(j=q$(j,void 0,"publicKey"),M=b(M,E),!yU(Z)){let x=Z instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}f(Z,C);try{let x=L.fromBytes(Z,C),s=$.fromBytes(j);if(R&&x.hasHighS())return!1;let{r:J$,s:G$}=x,Q$=l(M),N$=z.inv(G$),r$=z.create(Q$*N$),X$=z.create(J$*N$),W$=$.BASE.multiplyUnsafe(r$).add(s.multiplyUnsafe(X$));if(W$.is0())return!1;return z.create(W$.x)===J$}catch(x){return!1}}function k(Z,M,j={}){let{prehash:A}=pO(j,Y);return M=b(M,A),L.fromBytes(Z,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:D,getPublicKey:r,getSharedSecret:X,utils:w,lengths:N,Point:$,sign:S,verify:K,recoverPublicKey:k,Signature:L,hash:v})}function zq($,v,U){return $&v^~$&U}function Gq($,v,U){return $&v^$&U^v&U}class pJ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){Wg(this),q$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=xJ($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wg(this),FJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Zv(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let r=J;r<I;r++)v[r]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=xJ($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let r=0;r<O;r++)z.setUint32(4*r,D[r],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Vg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),jg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var tJ=BigInt(4294967295),Oq=BigInt(32);function QM($,v=!1){if(v)return{h:Number($&tJ),l:Number($>>Oq&tJ)};return{h:Number($>>Oq&tJ)|0,l:Number($&tJ)|0}}function aJ($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=QM($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var sO=($,v,U)=>$>>>U,$8=($,v,U)=>$<<32-U|v>>>U,NU=($,v,U)=>$>>>U|v<<32-U,wU=($,v,U)=>$<<32-U|v>>>U,O0=($,v,U)=>$<<64-U|v>>>U-32,D0=($,v,U)=>$>>>U-32|v<<64-U;var Dq=($,v,U)=>$<<U|v>>>32-U,Qq=($,v,U)=>v<<U|$>>>32-U,rq=($,v,U)=>v<<U-32|$>>>64-U,Xq=($,v,U)=>$<<U-32|v>>>64-U;function tv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var Nq=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),wq=($,v,U,I)=>v+U+I+($/4294967296|0)|0,qq=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),Yq=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,Wq=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),Zq=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var XM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ig=new Uint32Array(64);class v8 extends pJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let r=0;r<16;r++,v+=4)ig[r]=$.getUint32(v,!1);for(let r=16;r<64;r++){let X=ig[r-15],w=ig[r-2],N=mv(X,7)^mv(X,18)^X>>>3,Y=mv(w,17)^mv(w,19)^w>>>10;ig[r]=Y+ig[r-7]+N+ig[r-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let r=0;r<64;r++){let X=mv(z,6)^mv(z,11)^mv(z,25),w=D+X+zq(z,G,O)+XM[r]+ig[r]|0,Y=(mv(U,2)^mv(U,13)^mv(U,22))+Gq(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Zv(ig)}destroy(){this.set(0,0,0,0,0,0,0,0),Zv(this.buffer)}}class Vq extends v8{A=Vg[0]|0;B=Vg[1]|0;C=Vg[2]|0;D=Vg[3]|0;E=Vg[4]|0;F=Vg[5]|0;G=Vg[6]|0;H=Vg[7]|0;constructor(){super(32)}}class NM extends v8{A=jg[0]|0;B=jg[1]|0;C=jg[2]|0;D=jg[3]|0;E=jg[4]|0;F=jg[5]|0;G=jg[6]|0;H=jg[7]|0;constructor(){super(28)}}var jq=(()=>aJ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),wM=(()=>jq[0])(),qM=(()=>jq[1])(),xg=new Uint32Array(80),og=new Uint32Array(80);class Q0 extends pJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:r,Fl:X,Gh:w,Gl:N,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V]}set($,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=r|0,this.Fl=X|0,this.Gh=w|0,this.Gl=N|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)xg[u]=$.getUint32(v),og[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let f=xg[u-15]|0,L=og[u-15]|0,i=NU(f,L,1)^NU(f,L,8)^sO(f,L,7),l=wU(f,L,1)^wU(f,L,8)^$8(f,L,7),h=xg[u-2]|0,_=og[u-2]|0,b=NU(h,_,19)^O0(h,_,61)^sO(h,_,6),g$=wU(h,_,19)^D0(h,_,61)^$8(h,_,6),S=qq(l,g$,og[u-7],og[u-16]),K=Yq(S,i,b,xg[u-7],xg[u-16]);xg[u]=K|0,og[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:r,El:X,Fh:w,Fl:N,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let f=NU(r,X,14)^NU(r,X,18)^O0(r,X,41),L=wU(r,X,14)^wU(r,X,18)^D0(r,X,41),i=r&w^~r&Y,l=X&N^~X&V,h=Wq(T,L,l,qM[u],og[u]),_=Zq(h,W,f,i,wM[u],xg[u]),b=h|0,g$=NU(U,I,28)^O0(U,I,34)^O0(U,I,39),S=wU(U,I,28)^D0(U,I,34)^D0(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=N|0,w=r|0,N=X|0,{h:r,l:X}=tv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=Nq(b,S,k);U=wq(Z,_,g$,K),I=Z|0}({h:U,l:I}=tv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=tv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=tv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=tv(this.Dh|0,this.Dl|0,O|0,D|0),{h:r,l:X}=tv(this.Eh|0,this.El|0,r|0,X|0),{h:w,l:N}=tv(this.Fh|0,this.Fl|0,w|0,N|0),{h:Y,l:V}=tv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=tv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,r,X,w,N,Y,V,W,T)}roundClean(){Zv(xg,og)}destroy(){Zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class YM extends Q0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class Mq extends Q0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Uv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Iv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class WM extends Q0{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(28)}}class ZM extends Q0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(32)}}var eJ=lU(()=>new Vq,fg(1));var Rq=lU(()=>new Mq,fg(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VM=BigInt(1),uq=BigInt(2),jM=BigInt(3),MM=BigInt(5),OA=BigInt(8),Kq=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RM($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=Kq,G=$*$%J*$%J,O=Cv(G,uq,J)*G%J,D=Cv(O,VM,J)*$%J,r=Cv(D,MM,J)*D%J,X=Cv(r,v,J)*r%J,w=Cv(X,U,J)*X%J,N=Cv(w,I,J)*w%J,Y=Cv(N,g,J)*N%J,V=Cv(Y,g,J)*N%J,W=Cv(V,v,J)*r%J;return{pow_p_5_8:Cv(W,uq,J)*$%J,b2:G}}function uM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Tq=(()=>{let $=Kq;return $q({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=RM(v);return Dv(Cv(U,jM,$)*I,$)},adjustScalarBytes:uM})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TM=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var HM=aO(KM),g8=eO(HM,eJ);var AM=aO(TM),Hq=eO(AM,Rq);function Sq($,v,U){if(Bv($),U===void 0)U=new Uint8Array($.outputLen);return tU($,U,v)}var U8=Uint8Array.of(0),Aq=Uint8Array.of();function kq($,v,U,I=32){Bv($),F$(I,"length");let g=$.outputLen;if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=Aq;else q$(U,void 0,"info");let z=new Uint8Array(J*g),G=tU.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let r=0;r<J;r++)U8[0]=r+1,O.update(r===0?Aq:D).update(U).update(U8).digestInto(D),z.set(D,g*r),G._cloneInto(O);return G.destroy(),O.destroy(),Zv(D,U8),z.slice(0,I)}var SM=BigInt(0),r0=BigInt(1),kM=BigInt(2),PM=BigInt(7),EM=BigInt(256),BM=BigInt(113),Bq=[],Cq=[],Lq=[];for(let $=0,v=r0,U=1,I=0;$<24;$++){[U,I]=[I,(2*U+3*I)%5],Bq.push(2*(5*I+U)),Cq.push(($+1)*($+2)/2%64);let g=SM;for(let J=0;J<7;J++)if(v=(v<<r0^(v>>PM)*BM)%EM,v&kM)g^=r0<<(r0<<BigInt(J))-r0;Lq.push(g)}var nq=aJ(Lq,!0),CM=nq[0],LM=nq[1],Pq=($,v,U)=>U>32?rq($,v,U):Dq($,v,U),Eq=($,v,U)=>U>32?Xq($,v,U):Qq($,v,U);function nM($,v=24){let U=new Uint32Array(10);for(let I=24-v;I<24;I++){for(let z=0;z<10;z++)U[z]=$[z]^$[z+10]^$[z+20]^$[z+30]^$[z+40];for(let z=0;z<10;z+=2){let G=(z+8)%10,O=(z+2)%10,D=U[O],r=U[O+1],X=Pq(D,r,1)^U[G],w=Eq(D,r,1)^U[G+1];for(let N=0;N<50;N+=10)$[z+N]^=X,$[z+N+1]^=w}let g=$[2],J=$[3];for(let z=0;z<24;z++){let G=Cq[z],O=Pq(g,J,G),D=Eq(g,J,G),r=Bq[z];g=$[r],J=$[r+1],$[r]=O,$[r+1]=D}for(let z=0;z<50;z+=10){for(let G=0;G<10;G++)U[G]=$[z+G];for(let G=0;G<10;G++)$[z+G]^=~U[(G+2)%10]&U[(G+4)%10]}$[0]^=CM[I],$[1]^=LM[I]}Zv(U)}class sJ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,U,I=!1,g=24){if(this.blockLen=$,this.suffix=v,this.outputLen=U,this.enableXOF=I,this.rounds=g,F$(U,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=iJ(this.state)}clone(){return this._cloneInto()}keccak(){nO(this.state32),nM(this.state32,this.rounds),nO(this.state32),this.posOut=0,this.pos=0}update($){Wg(this),q$($);let{blockLen:v,state:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(v-this.pos,I-g);for(let z=0;z<J;z++)U[this.pos++]^=$[g++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:U,blockLen:I}=this;if($[U]^=v,(v&128)!==0&&U===I-1)this.keccak();$[I-1]^=128,this.keccak()}writeInto($){Wg(this,!1),q$($),this.finish();let v=this.state,{blockLen:U}=this;for(let I=0,g=$.length;I<g;){if(this.posOut>=U)this.keccak();let J=Math.min(U-this.posOut,g-I);$.set(v.subarray(this.posOut,this.posOut+J),I),this.posOut+=J,I+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(FJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Zv(this.state)}_cloneInto($){let{blockLen:v,suffix:U,outputLen:I,rounds:g,enableXOF:J}=this;return $||=new sJ(v,U,I,J,g),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=g,$.suffix=U,$.outputLen=I,$.enableXOF=J,$.destroyed=this.destroyed,$}}var fq=($,v,U,I={})=>lU(()=>new sJ(v,$,U),I);var qU=fq(6,136,32,fg(8));var _q=fq(6,72,64,fg(10));var bq=($,v,U,I={})=>lU((g={})=>new sJ(v,$,g.dkLen===void 0?U:g.dkLen,!0),I),mq=bq(31,168,16,fg(11)),av=bq(31,136,32,fg(12));function I8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iq($){return I8($),($&$-1)===0&&$!==0}function J8($,v){I8($);let U=0;for(let I=0;I<v;I++,$>>>=1)U=U<<1|$&1;return U}function xq($){return I8($),31-Math.clz32($)}function Fq($){let v=$.length;if(v<2||!iq(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let U=xq(v);for(let I=0;I<v;I++){let g=J8(I,U);if(I<g){let J=$[I];$[I]=$[g],$[g]=J}}return $}var z8=($,v)=>{let{N:U,roots:I,dit:g,invertButterflies:J=!1,skipStages:z=0,brp:G=!0}=v,O=xq(U);if(!iq(U))throw Error("FFT: Polynomial size should be power of two");let D=g!==J;return(r)=>{if(r.length!==U)throw Error("FFT: wrong Polynomial length");if(g&&G)Fq(r);for(let X=0,w=1;X<O-z;X++){let N=g?X+1+z:O-X,Y=1<<N,V=Y>>1,W=U>>N;for(let T=0;T<U;T+=Y)for(let u=0,f=w++;u<V;u++){let L=J?g?U-f:f:u*W,i=T+u,l=T+u+V,h=I[L],_=r[l],b=r[i];if(D){let g$=$.mul(_,h);r[i]=$.add(b,g$),r[l]=$.sub(b,g$)}else if(J)r[i]=$.add(_,b),r[l]=$.mul($.sub(_,b),h);else r[i]=$.add(b,_),r[l]=$.mul($.sub(b,_),h)}}if(!g&&G)Fq(r);return r}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=ng;function $z($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function oq($){return Uint8Array.from($)}function YU($,...v){let U=(g)=>typeof g==="number"?g:g.bytesLen,I=v.reduce((g,J)=>g+U(J),0);return{bytesLen:I,encode:(g)=>{let J=new Uint8Array(I);for(let z=0,G=0;z<v.length;z++){let O=v[z],D=U(O),r=typeof O==="number"?g[z]:O.encode(g[z]);if(q$(r,D,$),J.set(r,G),typeof O!=="number")r.fill(0);G+=D}return J},decode:(g)=>{q$(g,I,$);let J=[];for(let z of v){let G=U(z),O=g.subarray(0,G);J.push(typeof z==="number"?O:z.decode(O)),g=g.subarray(G)}return J}}}function vz($,v){let U=v*$.bytesLen;return{bytesLen:U,encode:(I)=>{if(I.length!==v)throw Error(`vecCoder.encode: wrong length=${I.length}. Expected: ${v}`);let g=new Uint8Array(U);for(let J=0,z=0;J<I.length;J++){let G=$.encode(I[J]);g.set(G,z),G.fill(0),z+=G.length}return g},decode:(I)=>{q$(I,U);let g=[];for(let J=0;J<I.length;J+=$.bytesLen)g.push($.decode(I.subarray(J,J+$.bytesLen)));return g}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let U of v)U.fill(0);else v.fill(0)}function G8($){return(1<<$)-1}var uA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var cq=($)=>{let{newPoly:v,N:U,Q:I,F:g,ROOT_OF_UNITY:J,brvBits:z,isKyber:G}=$,O=(u,f=I)=>{let L=u%f|0;return(L>=0?L|0:f+L|0)|0},D=(u,f=I)=>{let L=O(u,f)|0;return(L>f>>1?L-f|0:L)|0};function r(){let u=v(U);for(let f=0;f<U;f++){let L=J8(f,z),i=BigInt(J)**BigInt(L)%BigInt(I);u[f]=Number(i)|0}return u}let X=r(),w={add:(u,f)=>O((u|0)+(f|0))|0,sub:(u,f)=>O((u|0)-(f|0))|0,mul:(u,f)=>O((u|0)*(f|0))|0,inv:(u)=>{throw Error("not implemented")}},N={N:U,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},Y=z8(w,{dit:!1,...N}),V=z8(w,{dit:!0,...N});return{mod:O,smod:D,nttZetas:X,NTT:{encode:(u)=>{return Y(u)},decode:(u)=>{V(u);for(let f=0;f<u.length;f++)u[f]=O(g*u[f]);return u}},bitsCoder:(u,f)=>{let L=G8(u),i=u*(U/8);return{bytesLen:i,encode:(l)=>{let h=new Uint8Array(i);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=(f.encode(l[_])&L)<<g$,g$+=u;for(;g$>=8;g$-=8,b>>=8)h[S++]=b&G8(g$)}return h},decode:(l)=>{let h=v(U);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=l[_]<<g$,g$+=8;for(;g$>=u;g$-=u,b>>=u)h[S++]=f.decode(b&L)}return h}}}}},fM=($)=>(v,U)=>{if(!U)U=$.blockLen;let I=new Uint8Array(v.length+2);I.set(v);let g=v.length,J=new Uint8Array(U),z=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(D,r)=>{return I[g+0]=D,I[g+1]=r,z.destroy(),z=$.create({}).update(I),G++,()=>{return O++,z.xofInto(J)}},clean:()=>{z.destroy(),m$(J,I)}}},yq=fM(mq);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,Mg=3329,_M=3303,bM=17,{mod:w0,nttZetas:mM,NTT:WU,bitsCoder:FM}=cq({N:Jv,Q:Mg,F:_M,ROOT_OF_UNITY:bM,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),O8={512:{N:Jv,Q:Mg,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:Mg,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:Mg,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iM=($)=>{if($>=12)return{encode:(U)=>U,decode:(U)=>U};let v=2**($-1);return{encode:(U)=>((U<<$)+Mg/2)/Mg,decode:(U)=>U*Mg+v>>>$}},X0=($)=>FM($,iM($));function ZU($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]+v[U])}function xM($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]-v[U])}function oM($,v,U,I,g){let J=w0(v*I*g+$*U),z=w0($*I+v*U);return{c0:J,c1:z}}function gz($,v){for(let U=0;U<Jv/2;U++){let I=mM[64+(U>>1)];if(U&1)I=-I;let{c0:g,c1:J}=oM($[2*U+0],$[2*U+1],v[2*U+0],v[2*U+1],I);$[2*U+0]=g,$[2*U+1]=J}return $}function lq($){let v=new Uint16Array(Jv);for(let U=0;U<Jv;){let I=$();if(I.length%3)throw Error("SampleNTT: unaligned block");for(let g=0;U<Jv&&g+3<=I.length;g+=3){let J=(I[g+0]>>0|I[g+1]<<8)&4095,z=(I[g+1]>>4|I[g+2]<<4)&4095;if(J<Mg)v[U++]=J;if(U<Jv&&z<Mg)v[U++]=z}}return v}function N0($,v,U,I){let g=$(I*Jv/4,v,U),J=new Uint16Array(Jv),z=iJ(g),G=0;for(let O=0,D=0,r=0,X=0;O<z.length;O++){let w=z[O];for(let N=0;N<32;N++)if(r+=w&1,w>>=1,G+=1,G===I)X=r,r=0;else if(G===2*I)J[D++]=w0(X-r),r=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return J}var cM=($)=>{let{K:v,PRF:U,XOF:I,HASH512:g,ETA1:J,ETA2:z,du:G,dv:O}=$,D=X0(1),r=X0(O),X=X0(G),w=YU("publicKey",vz(X0(12),v),32),N=vz(X0(12),v),Y=YU("ciphertext",vz(X,v),r),V=YU("seed",32,32);return{secretCoder:N,lengths:{secretKey:N.bytesLen,publicKey:w.bytesLen,cipherText:Y.bytesLen},keygen:(W)=>{q$(W,32,"seed");let T=new Uint8Array(33);T.set(W),T[32]=v;let u=g(T),[f,L]=V.decode(u),i=[],l=[];for(let b=0;b<v;b++)i.push(WU.encode(N0(U,L,b,J)));let h=I(f);for(let b=0;b<v;b++){let g$=WU.encode(N0(U,L,v+b,J));for(let S=0;S<v;S++){let K=lq(h.get(S,b));ZU(g$,gz(K,i[S]))}l.push(g$)}h.clean();let _={publicKey:w.encode([l,f]),secretKey:N.encode(i)};return m$(f,L,i,l,T,u),_},encrypt:(W,T,u)=>{let[f,L]=w.decode(W),i=[];for(let S=0;S<v;S++)i.push(WU.encode(N0(U,u,S,J)));let l=I(L),h=new Uint16Array(Jv),_=[];for(let S=0;S<v;S++){let K=N0(U,u,v+S,z),k=new Uint16Array(Jv);for(let Z=0;Z<v;Z++){let M=lq(l.get(S,Z));ZU(k,gz(M,i[Z]))}ZU(K,WU.decode(k)),_.push(K),ZU(h,gz(f[S],i[S])),m$(k)}l.clean();let b=N0(U,u,2*v,z);ZU(b,WU.decode(h));let g$=D.decode(T);return ZU(g$,b),m$(f,i,h,b),Y.encode([_,g$])},decrypt:(W,T)=>{let[u,f]=Y.decode(W),L=N.decode(T),i=new Uint16Array(Jv);for(let l=0;l<v;l++)ZU(i,gz(L[l],WU.encode(u[l])));return xM(f,WU.decode(i)),m$(i,L,u),D.encode(f)}}};function D8($){let v=cM($),{HASH256:U,HASH512:I,KDF:g}=$,{secretCoder:J,lengths:z}=v,G=YU("secretKey",z.secretKey,z.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...z,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(r=ev(64))=>{q$(r,64,"seed");let{publicKey:X,secretKey:w}=v.keygen(r.subarray(0,32)),N=U(X),Y=G.encode([w,X,N,r.subarray(32)]);return m$(w,N),{publicKey:X,secretKey:Y}},getPublicKey:(r)=>{let[X,w,N,Y]=G.decode(r);return Uint8Array.from(w)},encapsulate:(r,X=ev(32))=>{q$(r,z.publicKey,"publicKey"),q$(X,32,"message");let w=r.subarray(0,384*$.K),N=J.encode(J.decode(oq(w)));if(!$z(N,w))throw m$(N),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(N);let Y=I.create().update(X).update(U(r)).digest(),V=v.encrypt(r,X,Y.subarray(32,64));return m$(Y.subarray(32)),{cipherText:V,sharedSecret:Y.subarray(0,32)}},decapsulate:(r,X)=>{q$(X,G.bytesLen,"secretKey"),q$(r,z.cipherText,"cipherText");let w=G.bytesLen-96,N=w+32,Y=U(X.subarray(w/2,N));if(!$z(Y,X.subarray(N,N+32)))throw Error("invalid secretKey: hash check failed");let[V,W,T,u]=G.decode(X),f=v.decrypt(r,V),L=I.create().update(f).update(T).digest(),i=L.subarray(0,32),l=v.encrypt(W,f,L.subarray(32,64)),h=$z(r,l),_=g.create({dkLen:32}).update(u).update(r).digest();return m$(f,l,!h?i:_),h?i:_}}}function yM($,v,U){return av.create({dkLen:$}).update(v).update(new Uint8Array([U])).digest()}var Q8={HASH256:qU,HASH512:_q,KDF:av,XOF:yq,PRF:yM},LA=D8({...Q8,...O8[512]}),q0=D8({...Q8,...O8[768]}),dq=D8({...Q8,...O8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lM($,v=!1){let{lengths:U,keygen:I}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");I=(z=ev(U.seed))=>{q$(z,U.seed,"seed");let G=J.isLE?bg(z):_g(z),O=J.toBytes(J.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:U.secretKey,publicKey:U.publicKey,seed:U.seed},keygen:I,getPublicKey:(g)=>$.getPublicKey(g)}}function r8($,v=!1){let U=lM($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...U.lengths,msg:U.lengths.seed,cipherText:U.lengths.publicKey},keygen:U.keygen,getPublicKey:U.getPublicKey,encapsulate(I,g=ev($.lengths.seed)){let J=this.keygen(g).secretKey,z=this.decapsulate(I,J),G=$.getPublicKey(J);return m$(J),{sharedSecret:z,cipherText:G}},decapsulate(I,g){let J=$.getSharedSecret(g,I);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function Y0($,v){return YU(v,...$.map((U)=>{if(typeof U.lengths[v]!=="number")throw Error("wrong length: "+v);return U.lengths[v]}))}function X8($){return(v,U)=>$(v,{dkLen:U})}function dM($,v,...U){let I=Y0(U,"seed"),g=Y0(U,"publicKey");if($===void 0)$=I.bytesLen;F$($);function J(z){q$(z,$);let G=I.decode(v(z,I.bytesLen)),O=U.map((X,w)=>X.keygen(G[w])),D=O.map((X)=>X.secretKey),r=O.map((X)=>X.publicKey);return{secretKey:D,publicKey:r}}return{info:{lengths:{seed:$,publicKey:g.bytesLen,secretKey:$}},getPublicKey(z){return this.keygen(z).publicKey},keygen(z=ev($)){let{publicKey:G,secretKey:O}=J(z),D=g.encode(G);return m$(G),m$(O),{secretKey:z,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function Uz($,v,U,I,...g){let J=dM($,U,...g),z=Y0(g,"cipherText"),G=Y0(g,"publicKey"),O=Y0(g,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:z.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,r=ev(O.bytesLen)){let X=G.decode(D),w=O.decode(r),N=g.map((T,u)=>T.encapsulate(X[u],w[u])),Y=N.map((T)=>T.sharedSecret),V=N.map((T)=>T.cipherText),W={sharedSecret:I(X,V,Y),cipherText:z.encode(V)};return m$(Y,V),W},decapsulate(D,r){let X=z.decode(D),{publicKey:w,secretKey:N}=J.expandDecapsulationKey(r),Y=g.map((V,W)=>V.decapsulate(X[W],N[W]));return I(w,X,Y)}}}function hq($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,X8(I),(J,z,G)=>g(_$(G[0],G[1],z[1],J[1],mg($))),v,U)}var yA=hq("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",q0,r8(g8,!0),av,qU),lA=hq("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",dq,r8(Hq,!0),av,qU);function hM($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,X8(I),(J,z,G)=>{let O=_$(G[0],G[1],z[0],J[0],z[1],J[1],mg($)),D=32,r=_$(mg("hybrid_prk"),O),X=Sq(g,r),w=_$(dU(32,2),mg("shared_secret"),mg("")),N=kq(g,X,w,32);return m$(X,w,r,O),N},v,U)}var pq=r8(Tq),dA=hM("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",q0,pq,av,eJ),pM=(()=>Uz(32,32,X8(av),($,v,U)=>qU(_$(U[0],U[1],v[1],$[1],mg("\\.//^\\"))),q0,pq))();function tM($,v,U,I){let g=$.Point.Fn;if(!g)throw Error("no Point.Fn");function J(z){let G;for(let r=0,X=v;;r=X,X+=v){if(X>z.length)throw Error("rejection sampling failed");if(G=g.fromBytes(z.subarray(r,X),!0),g.isValidNot0(G))break}let O=g.toBytes(g.create(G)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:U,seed:I,msg:I,cipherText:U},keygen(z=ev(I)){return q$(z,I,"seed"),J(z)},getPublicKey(z){return $.getPublicKey(z,!1)},encapsulate(z,G=ev(I)){q$(G,I,"rand");let{secretKey:O}=J(G),D=this.decapsulate(z,O),r=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:r}},decapsulate(z,G){return $.getSharedSecret(G,z).subarray(1)}}}function aM($,v,U,I){let{secretKey:g,publicKeyUncompressed:J}=U.lengths;if(!g||!J)throw Error("wrong curve");let z=tM(U,g,J,I),G=64,O=G+I;return Uz(32,32,(D)=>{q$(D,32);let r=av(D,{dkLen:O}),X=r.subarray(0,G),w=r.subarray(G,O);return _$(X,w)},(D,r,X)=>qU(_$(X[0],X[1],r[1],D[1],mg($))),v,z)}var eM=(()=>aM("MLKEM768-P256",q0,g8,128))();var Iz=pM,tq=eM;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=($,v,U)=>x$($,v,U),w8=n$,eU=SJ,h$=(...$)=>qO(...$),sU=($)=>yI($),$I=XO,vI=($)=>Xg($),zz=BigInt(0),N8=BigInt(1);function Rg($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw TypeError(U+"expected boolean, got type="+typeof $)}return $}function Gz($){if(typeof $==="bigint"){if(!Jz($))throw RangeError("positive bigint expected, got "+$)}else w8($);return $}function sv($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(U+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let U=v&&`"${v}" `;throw RangeError(U+"expected safe integer, got "+$)}}function W0($){let v=Gz($).toString(16);return v.length&1?"0"+v:v}function aq($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?zz:BigInt("0x"+$)}function VU($){return aq(SJ($))}function Fv($){return aq(SJ(cg(x$($)).reverse()))}function Oz($,v){if(n$(v),v===0)throw RangeError("zero length");$=Gz($);let U=$.toString(16);if(U.length>v*2)throw RangeError("number too large");return yI(U.padStart(v*2,"0"))}function Z0($,v){return Oz($,v).reverse()}function eq($,v){if($=T$($),v=T$(v),$.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function cg($){return Uint8Array.from(T$($))}function Dz($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw RangeError(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var Jz=($)=>typeof $==="bigint"&&zz<=$;function sM($,v,U){return Jz($)&&Jz(v)&&Jz(U)&&v<=$&&$<U}function ug($,v,U,I){if(!sM(v,U,I))throw RangeError("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function gI($){if($<zz)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>zz;$>>=N8,v+=1);return v}var V0=($)=>(N8<<BigInt($))-N8;function sq($,v,U){if(n$($,"hashLen"),n$(v,"qByteLen"),typeof U!=="function")throw TypeError("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),r=0,X=()=>{O.fill(1),D.fill(0),r=0},w=(...W)=>U(D,h$(O,...W)),N=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(r++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return h$(...T)};return(W,T)=>{X(),N(W);let u=void 0;while((u=T(Y()))===void 0)N();return X(),u}}function Lv($,v={},U={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function I(J,z,G){if(!G&&z!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw TypeError(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}var q8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),C$=BigInt(1),jU=BigInt(2),UY=BigInt(3),IY=BigInt(4),JY=BigInt(5),$7=BigInt(7),zY=BigInt(8),v7=BigInt(9),GY=BigInt(16);function B$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let U=$%v;return U>=p$?U:v+U}function nv($,v,U){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let I=$;while(v-- >p$)I*=I,I%=U;return I}function $Y($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let U=B$($,v),I=v,g=p$,J=C$,z=C$,G=p$;while(U!==p$){let D=I/U,r=I-U*D,X=g-z*D,w=J-G*D;I=U,U=r,g=z,J=G,z=X,G=w}if(I!==C$)throw Error("invert: does not exist");return B$(g,v)}function Y8($,v,U){let I=$;if(!I.eql(I.sqr(v),U))throw Error("Cannot find square root")}function OY($,v){let U=$,I=(U.ORDER+C$)/IY,g=U.pow(v,I);return Y8(U,g,v),g}function g7($,v){let U=$,I=(U.ORDER-JY)/zY,g=U.mul(v,jU),J=U.pow(g,I),z=U.mul(v,J),G=U.mul(U.mul(z,jU),J),O=U.mul(z,U.sub(G,U.ONE));return Y8(U,O,v),O}function U7($){let v=Qz($),U=DY($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+$7)/GY;return(G,O)=>{let D=G,r=D.pow(O,z),X=D.mul(r,I),w=D.mul(r,g),N=D.mul(r,J),Y=D.eql(D.sqr(X),O),V=D.eql(D.sqr(w),O);r=D.cmov(r,X,Y),X=D.cmov(N,w,V);let W=D.eql(D.sqr(X),O),T=D.cmov(r,X,W);return Y8(D,T,O),T}}function DY($){if($<UY)throw Error("sqrt is not defined for small field");let v=$-C$,U=0;while(v%jU===p$)v/=jU,U++;let I=jU,g=Qz($);while(vY(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return OY;let J=g.pow(I,v),z=(v+C$)/jU;return function(O,D){let r=O;if(r.is0(D))return D;if(vY(r,D)!==1)throw Error("Cannot find square root");let X=U,w=r.mul(r.ONE,J),N=r.pow(D,v),Y=r.pow(D,z);while(!r.eql(N,r.ONE)){if(r.is0(N))return r.ZERO;let V=1,W=r.sqr(N);while(!r.eql(W,r.ONE))if(V++,W=r.sqr(W),V===X)throw Error("Cannot find square root");let T=C$<<BigInt(X-V-1),u=r.pow(w,T);X=V,w=r.sqr(u),N=r.mul(N,w),Y=r.mul(Y,u)}return Y}}function I7($){if($%IY===UY)return OY;if($%zY===JY)return g7;if($%GY===v7)return U7($);return DY($)}var Kg=($,v)=>(B$($,v)&C$)===C$,J7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function W8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=J7.reduce((I,g)=>{return I[g]="function",I},v);if(Lv($,U),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function z7($,v,U){let I=$;if(U<p$)throw Error("invalid exponent, negatives unsupported");if(U===p$)return I.ONE;if(U===C$)return v;let g=I.ONE,J=v;while(U>p$){if(U&C$)g=I.mul(g,J);J=I.sqr(J),U>>=C$}return g}function j0($,v,U=!1){let I=$,g=Array(v.length).fill(U?I.ZERO:void 0),J=v.reduce((G,O,D)=>{if(I.is0(O))return G;return g[D]=G,I.mul(G,O)},I.ONE),z=I.inv(J);return v.reduceRight((G,O,D)=>{if(I.is0(O))return G;return g[D]=I.mul(G,g[D]),I.mul(G,O)},z),g}function vY($,v){let U=$,I=(U.ORDER-C$)/jU,g=U.pow(v,I),J=U.eql(g,U.ONE),z=U.eql(g,U.ZERO),G=U.eql(g,U.neg(U.ONE));if(!J&&!z&&!G)throw Error("invalid Legendre symbol result");return J?1:z?0:-1}function G7($,v){if(v!==void 0)w8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let U=gI($);if(v!==void 0&&v<U)throw Error(`invalid n length: expected bit length (${U}) >= n.length (${v})`);let I=v!==void 0?v:U,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}var gY=new WeakMap;class Z8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=C$;_lengths;_mod;constructor($,v={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=G7($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return B$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return B$($*$,this.ORDER)}add($,v){return B$($+v,this.ORDER)}sub($,v){return B$($-v,this.ORDER)}mul($,v){return B$($*v,this.ORDER)}pow($,v){return z7(this,$,v)}div($,v){return B$($*$Y(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return $Y($,this.ORDER)}sqrt($){let v=gY.get(this);if(!v)gY.set(this,v=I7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?Z0($,this.BYTES):Oz($,this.BYTES)}fromBytes($,v=!1){T$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if($.length<1||!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?Fv($):VU($);if(z)G=B$(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return j0(this,$)}cmov($,v,U){return Rg(U,"condition"),U?v:$}}Object.freeze(Z8.prototype);function Qz($,v={}){return new Z8($,v)}function QY($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let v=gI($-C$);return Math.ceil(v/8)}function V8($){let v=QY($);return v+Math.ceil(v/2)}function rY($,v,U=!1){T$($);let I=$.length,g=QY(v),J=Math.max(V8(v),16);if(I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?Fv($):VU($),G=B$(z,v-C$)+C$;return U?Z0(G,g):Oz(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UI=BigInt(0),MU=BigInt(1);function M0($,v){let U=v.negate();return $?U:v}function RU($,v){let U=j0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function qY($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function j8($,v){qY($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=V0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function XY($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=MU;let D=v*I,r=D+Math.abs(G)-1,X=G===0,w=G<0,N=v%2!==0;return{nextN:O,offset:r,isZero:X,isNeg:w,isNegF:N,offsetF:D}}var M8=new WeakMap,YY=new WeakMap;function R8($){return YY.get($)||1}function NY($){if($!==UI)throw Error("invalid wNAF")}class R0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>UI){if(v&MU)U=U.add(I);I=I.double(),v>>=MU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=j8(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=j8($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:r,isNegF:X,offsetF:w}=XY(U,z,J);if(U=G,D)g=g.add(M0(X,v[w]));else I=I.add(M0(r,v[O]))}return NY(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=j8($,this.bits);for(let J=0;J<g.windows;J++){if(U===UI)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=XY(U,J,g);if(U=z,O)continue;else{let r=v[G];I=I.add(D?r.negate():r)}}return NY(U),I}getPrecomputes($,v,U){let I=M8.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);M8.set(v,I)}}return I}cached($,v,U){let I=R8($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=R8($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){qY(v,this.bits),YY.set($,v),M8.delete($)}hasCache($){return R8($)!==1}}function WY($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>UI||I>UI){if(U&MU)J=J.add(g);if(I&MU)z=z.add(g);g=g.double(),U>>=MU,I>>=MU}return{p1:J,p2:z}}function wY($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return W8(v),v}else return Qz($,{isLE:U})}function rz($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>UI))throw Error(`CURVE.${O} must be positive bigint`)}let g=wY(v.p,U.Fp,I),J=wY(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function u0($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}function K0($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let U=Array.from({length:v}).fill(0);for(let I=v-1;I>=0;I--)U[I]=$&255,$>>>=8;return new Uint8Array(U)}function O7($,v){let U=new Uint8Array($.length);for(let I=0;I<$.length;I++)U[I]=$[I]^v[I];return U}function D7($){if(!$I($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?Dz($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function u8($,v,U,I){if(T$($),sv(U),v=D7(v),v.length>255)v=I(h$(Dz("H2C-OVERSIZE-DST-"),v));let{outputLen:g,blockLen:J}=I,z=Math.ceil(U/g);if(U>65535||z>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,K0(v.length,1)),O=new Uint8Array(J),D=K0(U,2),r=Array(z),X=I(h$(O,$,D,K0(0,1),G));r[0]=I(h$(X,K0(1,1),G));for(let N=1;N<z;N++){let Y=[O7(X,r[N-1]),K0(N+1,1),G];r[N]=I(h$(...Y))}return h$(...r).slice(0,U)}var ZY="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VY=($,v)=>($+($>=0?v:-v)/MY)/v;function Q7($,v,U){ug("scalar",$,$g,U);let[[I,g],[J,z]]=v,G=VY(z*$,U),O=VY(-g*$,U),D=$-G*I-O*J,r=-G*g-O*z,X=D<$g,w=r<$g;if(X)D=-D;if(w)r=-r;let N=V0(Math.ceil(gI(U)/2))+yg;if(D<$g||D>=N||r<$g||r>=N)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:D,k2neg:w,k2:r}}function T8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function K8($,v){Lv($);let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if(Rg(U.lowS,"lowS"),Rg(U.prehash,"prehash"),U.format!==void 0)T8(U.format);return U}class jY extends Error{constructor($=""){super($)}}var iv={Err:jY,_tlv:{encode:($,v)=>{let{Err:U}=iv;if(sv($,"tag"),$<0||$>255)throw new U("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=W0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?W0(g.length/2|128):"";return W0($)+J+g+v},decode($,v){let{Err:U}=iv;v=T$(v,void 0,"DER data");let I=0;if($<0||$>255)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let r of D)z=z<<8|r;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=iv;if(Gz($),$<$g)throw new v("integer: negative integers are not allowed");let U=W0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=iv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return VU($)}},toSig($){let{Err:v,_int:U,_tlv:I}=iv,g=T$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:r}=I.decode(2,O);if(r.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=iv,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}};Object.freeze(iv._tlv);Object.freeze(iv._int);Object.freeze(iv);var $g=BigInt(0),yg=BigInt(1),MY=BigInt(2),Xz=BigInt(3),r7=BigInt(4);function RY($,v={}){let U=rz("weierstrass",$,v),I=U.Fp,g=U.Fn,J=U.CURVE,{h:z,n:G}=J;Lv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let r=KY(I,g);function X(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(S,K,k){if(D&&K.is0())return Uint8Array.of(0);let{x:Z,y:M}=K.toAffine(),j=I.toBytes(Z);if(Rg(k,"isCompressed"),k){X();let A=!I.isOdd(M);return h$(uY(A),j)}else return h$(Uint8Array.of(4),j,I.toBytes(M))}function N(S){T$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:k}=r,Z=S.length,M=S[0],j=S.subarray(1);if(D&&Z===1&&M===0)return{x:I.ZERO,y:I.ZERO};if(Z===K&&(M===2||M===3)){let A=I.fromBytes(j);if(!I.isValid(A))throw Error("bad point: is not on curve, wrong x");let R=W(A),E;try{E=I.sqrt(R)}catch(s){let J$=s instanceof Error?": "+s.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}X();let C=I.isOdd(E);if((M&1)===1!==C)E=I.neg(E);return{x:A,y:E}}else if(Z===k&&M===4){let A=I.BYTES,R=I.fromBytes(j.subarray(0,A)),E=I.fromBytes(j.subarray(A,A*2));if(!T(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${Z}, expected compressed=${K} or uncompressed=${k}`)}let Y=v.toBytes===void 0?w:v.toBytes,V=v.fromBytes===void 0?N:v.fromBytes;function W(S){let K=I.sqr(S),k=I.mul(K,S);return I.add(I.add(k,I.mul(S,J.a)),J.b)}function T(S,K){let k=I.sqr(K),Z=W(S);return I.eql(k,Z)}if(!T(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=I.mul(I.pow(J.a,Xz),r7),f=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(u,f)))throw Error("bad curve params: a or b");function L(S,K,k=!1){if(!I.isValid(K)||k&&I.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof _))throw Error("Weierstrass Point expected")}function l(S){if(!O||!O.basises)throw Error("no endo");return Q7(S,O.basises,g.ORDER)}function h(S,K,k,Z,M){return k=new _(I.mul(k.X,S),k.Y,k.Z),K=M0(Z,K),k=M0(M,k),K.add(k)}class _{static BASE=new _(J.Gx,J.Gy,I.ONE);static ZERO=new _(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(S,K,k){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",k),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:k}=S||{};if(!S||!I.isValid(K)||!I.isValid(k))throw Error("invalid affine point");if(S instanceof _)throw Error("projective point not allowed");if(I.is0(K)&&I.is0(k))return _.ZERO;return new _(K,k,I.ONE)}static fromBytes(S){let K=_.fromAffine(V(T$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return _.fromBytes(sU(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(g$.createCache(this,S),!K)this.multiply(Xz);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&I.is0(S.X)&&I.eql(S.Y,I.ONE)&&I.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:k}=S.toAffine();if(!I.isValid(K)||!I.isValid(k))throw Error("bad point: x or y not field elements");if(!T(K,k))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(S)}equals(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.eql(I.mul(K,A),I.mul(M,Z)),E=I.eql(I.mul(k,A),I.mul(j,Z));return R&&E}negate(){return new _(this.X,I.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,k=I.mul(K,Xz),{X:Z,Y:M,Z:j}=this,A=I.ZERO,R=I.ZERO,E=I.ZERO,C=I.mul(Z,Z),x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(Z,M);return J$=I.add(J$,J$),E=I.mul(Z,j),E=I.add(E,E),A=I.mul(S,E),R=I.mul(k,s),R=I.add(A,R),A=I.sub(x,R),R=I.add(x,R),R=I.mul(A,R),A=I.mul(J$,A),E=I.mul(k,E),s=I.mul(S,s),J$=I.sub(C,s),J$=I.mul(S,J$),J$=I.add(J$,E),E=I.add(C,C),C=I.add(E,C),C=I.add(C,s),C=I.mul(C,J$),R=I.add(R,C),s=I.mul(M,j),s=I.add(s,s),C=I.mul(s,J$),A=I.sub(A,C),E=I.mul(s,x),E=I.add(E,E),E=I.add(E,E),new _(A,R,E)}add(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=J.a,s=I.mul(J.b,Xz),J$=I.mul(K,M),G$=I.mul(k,j),Q$=I.mul(Z,A),N$=I.add(K,k),r$=I.add(M,j);N$=I.mul(N$,r$),r$=I.add(J$,G$),N$=I.sub(N$,r$),r$=I.add(K,Z);let X$=I.add(M,A);return r$=I.mul(r$,X$),X$=I.add(J$,Q$),r$=I.sub(r$,X$),X$=I.add(k,Z),R=I.add(j,A),X$=I.mul(X$,R),R=I.add(G$,Q$),X$=I.sub(X$,R),C=I.mul(x,r$),R=I.mul(s,Q$),C=I.add(R,C),R=I.sub(G$,C),C=I.add(G$,C),E=I.mul(R,C),G$=I.add(J$,J$),G$=I.add(G$,J$),Q$=I.mul(x,Q$),r$=I.mul(s,r$),G$=I.add(G$,Q$),Q$=I.sub(J$,Q$),Q$=I.mul(x,Q$),r$=I.add(r$,Q$),J$=I.mul(G$,r$),E=I.add(E,J$),J$=I.mul(X$,r$),R=I.mul(N$,R),R=I.sub(R,J$),J$=I.mul(N$,G$),C=I.mul(X$,C),C=I.add(C,J$),new _(R,E,C)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(_.ZERO)}multiply(S){let{endo:K}=v;if(!g.isValidNot0(S))throw RangeError("invalid scalar: out of range");let k,Z,M=(j)=>g$.cached(this,j,(A)=>RU(_,A));if(K){let{k1neg:j,k1:A,k2neg:R,k2:E}=l(S),{p:C,f:x}=M(A),{p:s,f:J$}=M(E);Z=x.add(J$),k=h(K.beta,C,s,j,R)}else{let{p:j,f:A}=M(S);k=j,Z=A}return RU(_,[k,Z])[0]}multiplyUnsafe(S){let{endo:K}=v,k=this,Z=S;if(!g.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===$g||k.is0())return _.ZERO;if(Z===yg)return k;if(g$.hasCache(this))return this.multiply(Z);if(K){let{k1neg:M,k1:j,k2neg:A,k2:R}=l(Z),{p1:E,p2:C}=WY(_,k,j,R);return h(K.beta,E,C,M,A)}else return g$.unsafe(k,Z)}toAffine(S){let K=this,k=S,{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(z===yg)return!0;if(S)return S(_,this);return g$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:S}=v;if(z===yg)return this;if(S)return S(_,this);return this.multiplyUnsafe(z)}isSmallOrder(){if(z===yg)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return Rg(S,"isCompressed"),this.assertValidity(),Y(_,this,S)}toHex(S=!0){return eU(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=g.BITS,g$=new R0(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function uY($){return Uint8Array.of($?2:3)}function KY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function X7($,v={}){let{Fn:U}=$,I=v.randomBytes===void 0?vI:v.randomBytes,g=Object.assign(KY($.Fp,U),{seed:Math.max(V8(U.ORDER),16)});function J(N){try{let Y=U.fromBytes(N);return U.isValidNot0(Y)}catch(Y){return!1}}function z(N,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=N.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(N)}catch(T){return!1}}function G(N){return N=N===void 0?I(g.seed):N,rY(T$(N,g.seed,"seed"),U.ORDER)}function O(N,Y=!0){return $.BASE.multiply(U.fromBytes(N)).toBytes(Y)}function D(N){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g,T=U._lengths;if(!$I(N))return;let u=T$(N,void 0,"key").length,f=u===V||u===W,L=u===Y||!!T?.includes(u);if(f&&L)return;return f}function r(N,Y,V=!0){if(D(N)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(N);return $.fromBytes(Y).multiply(W).toBytes(V)}let X={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=u0(G,O);return Object.freeze(X),Object.freeze(g),Object.freeze({getPublicKey:O,getSharedSecret:r,keygen:w,Point:$,utils:X,lengths:g})}function TY($,v,U={}){let I=v;rg(I),Lv(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let g=U.randomBytes===void 0?vI:U.randomBytes,J=U.hmac===void 0?(M,j)=>dv(I,M,j):U.hmac,{Fp:z,Fn:G}=$,{ORDER:O,BITS:D}=G,{keygen:r,getPublicKey:X,getSharedSecret:w,utils:N,lengths:Y}=X7($,U),V={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},W=O*MY+yg<z.ORDER;function T(M){let j=O>>yg;return M>j}function u(M,j){if(!G.isValidNot0(j))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return j}function f(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(M,j){T8(j);let A=Y.signature,R=j==="compact"?A:j==="recovered"?A+1:void 0;return T$(M,R)}class i{r;s;recovery;constructor(M,j,A){if(this.r=u("r",M),this.s=u("s",j),A!=null){if(f(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(M,j=V.format){L(M,j);let A;if(j==="der"){let{r:x,s}=iv.toSig(T$(M));return new i(x,s)}if(j==="recovered")A=M[0],j="compact",M=M.subarray(1);let R=Y.signature/2,E=M.subarray(0,R),C=M.subarray(R,R*2);return new i(G.fromBytes(E),G.fromBytes(C),A)}static fromHex(M,j){return this.fromBytes(sU(M),j)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new i(this.r,this.s,M)}recoverPublicKey(M){let{r:j,s:A}=this,R=this.assertRecovery(),E=R===2||R===3?j+O:j;if(!z.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let C=z.toBytes(E),x=$.fromBytes(h$(uY((R&1)===0),C)),s=G.inv(E),J$=h(T$(M,void 0,"msgHash")),G$=G.create(-J$*s),Q$=G.create(A*s),N$=$.BASE.multiplyUnsafe(G$).add(x.multiplyUnsafe(Q$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return T(this.s)}toBytes(M=V.format){if(T8(M),M==="der")return sU(iv.hexFromSig(this));let{r:j,s:A}=this,R=G.toBytes(j),E=G.toBytes(A);if(M==="recovered")return f(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(M){return eU(this.toBytes(M))}}Object.freeze(i.prototype),Object.freeze(i);let l=U.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let A=VU(j),R=j.length*8-D;return R>0?A>>BigInt(R):A}:U.bits2int,h=U.bits2int_modN===void 0?function(j){return G.create(l(j))}:U.bits2int_modN,_=V0(D);function b(M){return ug("num < 2^"+D,M,$g,_),G.toBytes(M)}function g$(M,j){return T$(M,void 0,"message"),j?T$(I(M),void 0,"prehashed message"):M}function S(M,j,A){let{lowS:R,prehash:E,extraEntropy:C}=K8(A,V);M=g$(M,E);let x=h(M),s=G.fromBytes(j);if(!G.isValidNot0(s))throw Error("invalid private key");let J$=[b(s),b(x)];if(C!=null&&C!==!1){let r$=C===!0?g(Y.secretKey):C;J$.push(T$(r$,void 0,"extraEntropy"))}let G$=h$(...J$),Q$=x;function N$(r$){let X$=l(r$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),k$=$.BASE.multiply(X$).toAffine(),E$=G.create(k$.x);if(E$===$g)return;let a$=G.create(W$*G.create(Q$+E$*s));if(a$===$g)return;let e$=(k$.x===E$?0:2)|Number(k$.y&yg),Wv=a$;if(R&&T(a$))Wv=G.neg(a$),e$^=1;return new i(E$,Wv,W?void 0:e$)}return{seed:G$,k2sig:N$}}function K(M,j,A={}){let{seed:R,k2sig:E}=S(M,j,A);return sq(I.outputLen,G.BYTES,J)(R,E).toBytes(A.format)}function k(M,j,A,R={}){let{lowS:E,prehash:C,format:x}=K8(R,V);if(A=T$(A,void 0,"publicKey"),j=g$(j,C),!$I(M)){let s=M instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+s)}L(M,x);try{let s=i.fromBytes(M,x),J$=$.fromBytes(A);if(E&&s.hasHighS())return!1;let{r:G$,s:Q$}=s,N$=h(j),r$=G.inv(Q$),X$=G.create(N$*r$),W$=G.create(G$*r$),k$=$.BASE.multiplyUnsafe(X$).add(J$.multiplyUnsafe(W$));if(k$.is0())return!1;return G.create(k$.x)===G$}catch(s){return!1}}function Z(M,j,A={}){let{prehash:R}=K8(A,V);return j=g$(j,R),i.fromBytes(M,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:r,getPublicKey:X,getSharedSecret:w,utils:N,lengths:Y,Point:$,sign:K,verify:k,recoverPublicKey:Z,Signature:i,hash:I})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var N7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var w7=RY(N7),II=TY(w7,f$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lg=BigInt(0),Vv=BigInt(1),H8=BigInt(2),q7=BigInt(8);function Y7($,v,U,I){let g=$.sqr(U),J=$.sqr(I),z=$.add($.mul(v.a,g),J),G=$.add($.ONE,$.mul(v.d,$.mul(g,J)));return $.eql(z,G)}function HY($,v={}){let U=v,I=rz("edwards",$,U,U.FpFnLE),{Fp:g,Fn:J}=I,z=I.CURVE,{h:G}=z;Lv(U,{},{uvRatio:"function"});let O=H8<<BigInt(J.BYTES*8)-Vv,D=(V)=>g.create(V),r=U.uvRatio===void 0?(V,W)=>{try{return{isValid:!0,value:g.sqrt(g.div(V,W))}}catch(T){return{isValid:!1,value:lg}}}:U.uvRatio;if(!Y7(g,z,z.Gx,z.Gy))throw Error("bad curve params: generator point");function X(V,W,T=!1){let u=T?Vv:lg;return ug("coordinate "+V,W,u,O),W}function w(V){if(!(V instanceof N))throw Error("EdwardsPoint expected")}class N{static BASE=new N(z.Gx,z.Gy,Vv,D(z.Gx*z.Gy));static ZERO=new N(lg,Vv,Vv,lg);static Fp=g;static Fn=J;X;Y;Z;T;constructor(V,W,T,u){this.X=X("x",V),this.Y=X("y",W),this.Z=X("z",T,!0),this.T=X("t",u),Object.freeze(this)}static CURVE(){return z}static fromAffine(V){if(V instanceof N)throw Error("extended point not allowed");let{x:W,y:T}=V||{};return X("x",W),X("y",T),new N(W,T,Vv,D(W*T))}static fromBytes(V,W=!1){let T=g.BYTES,{a:u,d:f}=z;V=cg(T$(V,T,"point")),Rg(W,"zip215");let L=cg(V),i=V[T-1];L[T-1]=i&-129;let l=Fv(L),h=W?O:g.ORDER;ug("point.y",l,lg,h);let _=D(l*l),b=D(_-Vv),g$=D(f*_-u),{isValid:S,value:K}=r(b,g$);if(!S)throw Error("bad point: invalid y coordinate");let k=(K&Vv)===Vv,Z=(i&128)!==0;if(!W&&K===lg&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==k)K=D(-K);return N.fromAffine({x:K,y:l})}static fromHex(V,W=!1){return N.fromBytes(sU(V),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,W=!0){if(Y.createCache(this,V),!W)this.multiply(H8);return this}assertValidity(){let V=this,{a:W,d:T}=z;if(V.is0())throw Error("bad point: ZERO");let{X:u,Y:f,Z:L,T:i}=V,l=D(u*u),h=D(f*f),_=D(L*L),b=D(_*_),g$=D(l*W),S=D(_*D(g$+h)),K=D(b+D(T*D(l*h)));if(S!==K)throw Error("bad point: equation left != right (1)");let k=D(u*f),Z=D(L*i);if(k!==Z)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:W,Y:T,Z:u}=this,{X:f,Y:L,Z:i}=V,l=D(W*i),h=D(f*u),_=D(T*i),b=D(L*u);return l===h&&_===b}is0(){return this.equals(N.ZERO)}negate(){return new N(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=z,{X:W,Y:T,Z:u}=this,f=D(W*W),L=D(T*T),i=D(H8*D(u*u)),l=D(V*f),h=W+T,_=D(D(h*h)-f-L),b=l+L,g$=b-i,S=l-L,K=D(_*g$),k=D(b*S),Z=D(_*S),M=D(g$*b);return new N(K,k,M,Z)}add(V){w(V);let{a:W,d:T}=z,{X:u,Y:f,Z:L,T:i}=this,{X:l,Y:h,Z:_,T:b}=V,g$=D(u*l),S=D(f*h),K=D(i*T*b),k=D(L*_),Z=D((u+f)*(l+h)-g$-S),M=k-K,j=k+K,A=D(S-W*g$),R=D(Z*M),E=D(j*A),C=D(Z*A),x=D(M*j);return new N(R,E,x,C)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!J.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:T}=Y.cached(this,V,(u)=>RU(N,u));return RU(N,[W,T])[0]}multiplyUnsafe(V){if(!J.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===lg)return N.ZERO;if(this.is0()||V===Vv)return this;return Y.unsafe(this,V,(W)=>RU(N,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Y.unsafe(this,z.n).is0()}toAffine(V){let W=this,T=V,{X:u,Y:f,Z:L}=W,i=W.is0();if(T==null)T=i?q7:g.inv(L);let l=D(u*T),h=D(f*T),_=g.mul(L,T);if(i)return{x:lg,y:Vv};if(_!==Vv)throw Error("invZ was invalid");return{x:l,y:h}}clearCofactor(){if(G===Vv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:V,y:W}=this.toAffine(),T=g.toBytes(W);return T[T.length-1]|=V&Vv?128:0,T}toHex(){return eU(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Y=new R0(N,J.BITS);if(J.BITS>=8)N.BASE.precompute(8);return Object.freeze(N.prototype),Object.freeze(N),N}class A8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){q8()}static fromHex($){q8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eU(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),JI=BigInt(1),Nz=BigInt(2);function W7($){return Lv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function AY($){let v=W7($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z===void 0?vI:z,D=G?255:448,r=G?32:56,X=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),N=G?Nz**BigInt(254):Nz**BigInt(447),Y=G?BigInt(8)*Nz**BigInt(251)-JI:BigInt(4)*Nz**BigInt(445)-JI,V=N+Y+JI,W=(Z)=>B$(Z,U),T=u(X);function u(Z){return Z0(W(Z),r)}function f(Z){let M=cg(T$(Z,r,"uCoordinate"));if(G)M[31]&=127;return W(Fv(M))}function L(Z){return Fv(g(cg(T$(Z,r,"scalar"))))}function i(Z,M){let j=g$(f(M),L(Z));if(j===T0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){ug("u",Z,T0,U),ug("scalar",M,N,V);let j=M,A=Z,R=JI,E=T0,C=Z,x=JI,s=T0;for(let G$=BigInt(D-1);G$>=T0;G$--){let Q$=j>>G$&JI;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let N$=R+E,r$=W(N$*N$),X$=R-E,W$=W(X$*X$),k$=r$-W$,E$=C+x,a$=C-x,e$=W(a$*N$),Wv=W(E$*X$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(r$*W$),E=W(k$*(r$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:r,publicKey:r,seed:r},K=(Z)=>{return Z=Z===void 0?O(r):Z,T$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze(S),Object.freeze(k),Object.freeze({keygen:u0(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z7=BigInt(0),Tg=BigInt(1),SY=BigInt(2),V7=BigInt(3),j7=BigInt(5),M7=BigInt(8),KU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),E8=(()=>({p:KU,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:M7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function EY($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=KU,G=$*$%J*$%J,O=nv(G,SY,J)*G%J,D=nv(O,Tg,J)*$%J,r=nv(D,j7,J)*D%J,X=nv(r,v,J)*r%J,w=nv(X,U,J)*X%J,N=nv(w,I,J)*w%J,Y=nv(N,g,J)*N%J,V=nv(Y,g,J)*N%J,W=nv(V,v,J)*r%J;return{pow_p_5_8:nv(W,SY,J)*$%J,b2:G}}function R7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var S8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function B8($,v){let U=KU,I=B$(v*v*v,U),g=B$(I*I*v,U),J=EY($*g).pow_p_5_8,z=B$($*I*J,U),G=B$(v*z*z,U),O=z,D=B$(z*S8,U),r=G===$,X=G===B$(-$,U),w=G===B$(-$*S8,U);if(r)z=O;if(X||w)z=D;if(Kg(z,U))z=B$(-z,U);return{isValid:r||X,value:z}}var uU=HY(E8,{uvRatio:B8}),dg=(()=>uU.Fp)(),BY=(()=>uU.Fn)();var wz=(()=>{let $=KU;return AY({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=EY(v);return B$(nv(U,V7,$)*I,$)},adjustScalarBytes:R7})})();var k8=S8,u7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),K7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),T7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),H7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),kY=($)=>B8(Tg,$),A7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),P8=($)=>dg.create(Fv($)&A7);function PY($){let{d:v}=E8,U=KU,I=(T)=>dg.create(T),g=I(k8*$*$),J=I((g+Tg)*T7),z=BigInt(-1),G=I((z-v*g)*I(g+v)),{isValid:O,value:D}=B8(J,G),r=I(D*$);if(!Kg(r,U))r=I(-r);if(!O)D=r;if(!O)z=g;let X=I(z*(g-Tg)*H7-G),w=D*D,N=I((D+D)*G),Y=I(X*u7),V=I(Tg-w),W=I(Tg+w);return new uU(I(N*W),I(V*Y),I(Y*W),I(N*V))}class rv extends A8{static BASE=(()=>new rv(uU.BASE))();static ZERO=(()=>new rv(uU.ZERO))();static Fp=(()=>dg)();static Fn=(()=>BY)();constructor($){super($)}static fromAffine($){return new rv(uU.fromAffine($))}assertSame($){if(!($ instanceof rv))throw Error("RistrettoPoint expected")}init($){return new rv($)}static fromBytes($){x$($,32);let{a:v,d:U}=E8,I=KU,g=(f)=>dg.create(f),J=P8($);if(!eq(dg.toBytes(J),$)||Kg(J,I))throw Error("invalid ristretto255 encoding 1");let z=g(J*J),G=g(Tg+v*z),O=g(Tg-v*z),D=g(G*G),r=g(O*O),X=g(v*U*D-r),{isValid:w,value:N}=kY(g(X*r)),Y=g(N*O),V=g(N*Y*X),W=g((J+J)*Y);if(Kg(W,I))W=g(-W);let T=g(G*V),u=g(W*T);if(!w||Kg(u,I)||T===Z7)throw Error("invalid ristretto255 encoding 2");return new rv(new uU(W,T,Tg,u))}static fromHex($){return rv.fromBytes(yI($))}toBytes(){let{X:$,Y:v,Z:U,T:I}=this.ep,g=KU,J=(V)=>dg.create(V),z=J(J(U+v)*J(U-v)),G=J($*v),O=J(G*G),{value:D}=kY(J(z*O)),r=J(D*z),X=J(D*G),w=J(r*X*I),N;if(Kg(I*w,g)){let V=J(v*k8),W=J($*k8);$=V,v=W,N=J(r*K7)}else N=X;if(Kg($*w,g))v=J(-v);let Y=J((U-v)*N);if(Kg(Y,g))Y=J(-Y);return dg.toBytes(Y)}equals($){this.assertSame($);let{X:v,Y:U}=this.ep,{X:I,Y:g}=$.ep,J=(O)=>dg.create(O),z=J(v*g)===J(U*I),G=J(U*g)===J(v*I);return z||G}is0(){return this.equals(rv.ZERO)}}Object.freeze(rv.BASE);Object.freeze(rv.ZERO);Object.freeze(rv.prototype);Object.freeze(rv);var S7=Object.freeze({Point:rv,hashToCurve($,v){let U=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,I=u8($,U,64,BJ);return S7.deriveToCurve(I)},hashToScalar($,v={DST:ZY}){let U=u8($,v.DST,64,BJ);return BY.create(Fv(U))},deriveToCurve($){x$($,64);let v=P8($.subarray(0,32)),U=PY(v),I=P8($.subarray(32,64)),g=PY(I);return new rv(U.add(g))}});var CY=!1,k7=!1;async function LY($,v){if(k7)return await v();try{return await $()}catch(U){if(U instanceof ReferenceError||U instanceof DOMException&&U.name==="NotSupportedError")return await v();else throw U}}async function qz($,v){return await LY(async()=>{let U=C8($)?$:await E7($),I=await crypto.subtle.importKey("raw",B7(v),{name:"X25519"},CY,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:I},U,256))},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMult($,v)})}async function H0($){return await LY(async()=>{return qz($,wz.GuBytes)},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMultBase($)})}var P7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function E7($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...P7,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},CY,["deriveBits"])}function C8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function B7($){return $}class L8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),L7(TU($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let U=await this.s.read();if(U.done)return this.buf=TU($),null;this.buf=U.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:TU(this.transcript)}}}function L7($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function TU($){let v=$.reduce((g,J)=>g+J.length,0),U=new Uint8Array(v),I=0;for(let g of $)U.set(g,I),I+=g.length;return U}function zI($,...v){return $.pipeThrough(new TransformStream({start(U){for(let I of v)U.enqueue(I)}}))}function Yz($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function n8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function nY($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function fY($,v){let U=$.getReader(),I=[],g=0;while(g<v){let{done:O,value:D}=await U.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");I.push(D),g+=D.length}U.releaseLock();let J=TU(I),z=J.subarray(0,v),G=zI($,J.subarray(v));return{data:z,rest:G}}class vg{args;body;constructor($,v){this.args=$,this.body=v}}async function n7($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let U=v.split(" ");if(U.length<2||U.shift()!=="->")return{next:v};for(let J of U)if(J.length===0)throw Error("invalid stanza");let I=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let z=vv.decode(J);if(z.length>48)throw Error("invalid stanza");if(I.push(z),z.length<48)break}let g=TU(I);return{s:new vg(U,g)}}async function _Y($){let v=new L8($),U=await v.readLine();if(U!=="age-encryption.org/v1")throw Error("invalid version "+(U??"line"));let I=[];for(;;){let{s:g,next:J}=await n7(v);if(g!==void 0){I.push(g);continue}if(!J.startsWith("--- "))throw Error("invalid header");let z=vv.decode(J.slice(4)),{rest:G,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:I,headerNoMAC:D,MAC:z,headerSize:O.length,rest:zI($,G)}}}function f8($){let v=[];v.push(`age-encryption.org/v1
+var Jj=Object.defineProperty;var zj=($)=>$;function Gj($,v){this[$]=zj.bind(null,v)}var lv=($,v)=>{for(var U in v)Jj($,U,{get:v[U],enumerable:!0,configurable:!0,set:Gj.bind(v,U)})};import{parseArgs as Oj}from"util";var Dj={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function rO($,v){let U=$[v];return typeof U==="boolean"?U:void 0}function KJ($,v){let U=$[v];return typeof U==="string"?U:void 0}function xN($){let{values:v,positionals:U}=Oj({args:$,options:Dj,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:U[0]??"help",args:U.slice(1),flags:{help:rO(v,"help"),version:rO(v,"version"),dryRun:rO(v,"dry-run"),pushTo:KJ(v,"push-to"),cohort:KJ(v,"cohort"),anchorId:KJ(v,"anchor-id"),handle:KJ(v,"handle")}}}var TJ={name:"@rizom/ops",version:"0.2.0-alpha.230",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as l7,mkdirSync as d7,readFileSync as s8,writeFileSync as $D}from"fs";import{dirname as h7,join as lY}from"path";function XO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function n$($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(`${U}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw RangeError(`${U}expected integer >= 0, got ${$}`)}}function x$($,v,U=""){let I=XO($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function rg($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(n$($.outputLen),n$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function FU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function HJ($,v){x$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw RangeError('"digestInto() output" expected to be of length >='+U)}function AJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iU($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var rj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Xj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function Nj($){for(let v=0;v<$.length;v++)$[v]=Xj($[v]);return $}var NO=rj?($)=>$:Nj,cN=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),wj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function SJ($){if(x$($),cN)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=wj[$[U]];return v}var Qg={_0:48,_9:57,A:65,F:70,a:97,f:102};function oN($){if($>=Qg._0&&$<=Qg._9)return $-Qg._0;if($>=Qg.A&&$<=Qg.F)return $-(Qg.A-10);if($>=Qg.a&&$<=Qg.f)return $-(Qg.a-10);return}function yI($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(cN)try{return Uint8Array.fromHex($)}catch(g){if(g instanceof SyntaxError)throw RangeError(g.message);throw g}let v=$.length,U=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=oN($.charCodeAt(J)),G=oN($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function qj($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function wO($,v=""){if(typeof $==="string")return qj($);return x$($,void 0,v)}function qO(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];x$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function kJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function YO($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.canXOF=I.canXOF,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function Xg($=32){n$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var WO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class ZO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(rg($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Ov(I)}update($){return FU(this),this.iHash.update($),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,U,I)=>new ZO(v,U).update(I).digest();return $.create=(v,U)=>new ZO(v,U),$})();function lI($,v,U){if(rg($),U===void 0)U=new Uint8Array($.outputLen);return dv($,U,v)}var VO=Uint8Array.of(0),yN=Uint8Array.of();function jO($,v,U,I=32){rg($),n$(I,"length"),x$(v,void 0,"prk");let g=$.outputLen;if(v.length<g)throw Error('"prk" must be at least HashLen octets');if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=yN;else x$(U,void 0,"info");let z=new Uint8Array(J*g),G=dv.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let r=0;r<J;r++)VO[0]=r+1,O.update(r===0?yN:D).update(U).update(VO).digestInto(D),z.set(D,g*r),G._cloneInto(O);return G.destroy(),O.destroy(),Ov(D,VO),z.slice(0,I)}var Pg=($,v,U,I,g)=>jO($,lI($,v,U),I,g);function lN($,v,U){return $&v^~$&U}function dN($,v,U){return $&v^$&U^v&U}class PJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iU(this.buffer)}update($){FU(this),x$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=iU($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Ov(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let r=J;r<I;r++)v[r]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=iU($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let r=0;r<O;r++)z.setUint32(4*r,D[r],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Ng=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),wg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),o$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EJ=BigInt(4294967295),hN=BigInt(32);function Yj($,v=!1){if(v)return{h:Number($&EJ),l:Number($>>hN&EJ)};return{h:Number($>>hN&EJ)|0,l:Number($&EJ)|0}}function pN($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=Yj($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var MO=($,v,U)=>$>>>U,RO=($,v,U)=>$<<32-U|v>>>U,JU=($,v,U)=>$>>>U|v<<32-U,zU=($,v,U)=>$<<32-U|v>>>U,dI=($,v,U)=>$<<64-U|v>>>U-32,hI=($,v,U)=>$>>>U-32|v<<64-U;function hv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var tN=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),aN=($,v,U,I)=>v+U+I+($/4294967296|0)|0,eN=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),sN=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,$w=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),vw=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var Zj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Eg=new Uint32Array(64);class uO extends PJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let r=0;r<16;r++,v+=4)Eg[r]=$.getUint32(v,!1);for(let r=16;r<64;r++){let X=Eg[r-15],w=Eg[r-2],N=_v(X,7)^_v(X,18)^X>>>3,Y=_v(w,17)^_v(w,19)^w>>>10;Eg[r]=Y+Eg[r-7]+N+Eg[r-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let r=0;r<64;r++){let X=_v(z,6)^_v(z,11)^_v(z,25),w=D+X+lN(z,G,O)+Zj[r]+Eg[r]|0,Y=(_v(U,2)^_v(U,13)^_v(U,22))+dN(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Ov(Eg)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class gw extends uO{A=Ng[0]|0;B=Ng[1]|0;C=Ng[2]|0;D=Ng[3]|0;E=Ng[4]|0;F=Ng[5]|0;G=Ng[6]|0;H=Ng[7]|0;constructor(){super(32)}}class Vj extends uO{A=wg[0]|0;B=wg[1]|0;C=wg[2]|0;D=wg[3]|0;E=wg[4]|0;F=wg[5]|0;G=wg[6]|0;H=wg[7]|0;constructor(){super(28)}}var Uw=(()=>pN(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),jj=(()=>Uw[0])(),Mj=(()=>Uw[1])(),Bg=new Uint32Array(80),Cg=new Uint32Array(80);class pI extends PJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:r,Fl:X,Gh:w,Gl:N,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V]}set($,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=r|0,this.Fl=X|0,this.Gh=w|0,this.Gl=N|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)Bg[u]=$.getUint32(v),Cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let f=Bg[u-15]|0,L=Cg[u-15]|0,i=JU(f,L,1)^JU(f,L,8)^MO(f,L,7),l=zU(f,L,1)^zU(f,L,8)^RO(f,L,7),h=Bg[u-2]|0,_=Cg[u-2]|0,b=JU(h,_,19)^dI(h,_,61)^MO(h,_,6),g$=zU(h,_,19)^hI(h,_,61)^RO(h,_,6),S=eN(l,g$,Cg[u-7],Cg[u-16]),K=sN(S,i,b,Bg[u-7],Bg[u-16]);Bg[u]=K|0,Cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:r,El:X,Fh:w,Fl:N,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let f=JU(r,X,14)^JU(r,X,18)^dI(r,X,41),L=zU(r,X,14)^zU(r,X,18)^hI(r,X,41),i=r&w^~r&Y,l=X&N^~X&V,h=$w(T,L,l,Mj[u],Cg[u]),_=vw(h,W,f,i,jj[u],Bg[u]),b=h|0,g$=JU(U,I,28)^dI(U,I,34)^dI(U,I,39),S=zU(U,I,28)^hI(U,I,34)^hI(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=N|0,w=r|0,N=X|0,{h:r,l:X}=hv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=tN(b,S,k);U=aN(Z,_,g$,K),I=Z|0}({h:U,l:I}=hv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=hv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=hv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=hv(this.Dh|0,this.Dl|0,O|0,D|0),{h:r,l:X}=hv(this.Eh|0,this.El|0,r|0,X|0),{h:w,l:N}=hv(this.Fh|0,this.Fl|0,w|0,N|0),{h:Y,l:V}=hv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=hv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,r,X,w,N,Y,V,W,T)}roundClean(){Ov(Bg,Cg)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Iw extends pI{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class Rj extends pI{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uj extends pI{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Kj extends pI{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var f$=YO(()=>new gw,WO(1));var BJ=YO(()=>new Iw,WO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function _J($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function HO($){if(!_J($))throw TypeError("Uint8Array expected")}function Dw($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((U)=>typeof U==="string");else return v.every((U)=>Number.isSafeInteger(U))}function Qw($){if(typeof $!=="function")throw TypeError("function expected");return!0}function Lg($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aI($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function LJ($){if(!Array.isArray($))throw TypeError("array expected")}function nJ($,v){if(!Dw(!0,v))throw TypeError(`${$}: array of strings expected`)}function AO($,v){if(!Dw(!1,v))throw TypeError(`${$}: array of numbers expected`)}function uv(...$){let v=(J)=>J,U=(J,z)=>(G)=>J(z(G)),I=$.map((J)=>J.encode).reduceRight(U,v),g=$.map((J)=>J.decode).reduce(U,v);return{encode:I,decode:g}}function Kv($){let v=typeof $==="string"?$.split(""):$,U=v.length;nJ("alphabet",v);let I=new Map(v.map((g,J)=>[g,J]));return{encode:(g)=>{return LJ(g),g.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=U)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(g)=>{return LJ(g),g.map((J)=>{Lg("alphabet.decode",J);let z=I.get(J);if(z===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return z})}}}function Tv($=""){return Lg("join",$),{encode:(v)=>{return nJ("join.decode",v),v.join($)},decode:(v)=>{return Lg("join.decode",v),v.split($)}}}function bJ($,v="="){return aI($),Lg("padding",v),{encode(U){nJ("padding.encode",U);while(U.length*$%8)U.push(v);return U},decode(U){nJ("padding.decode",U);let I=U.length;if(I*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;I>0&&U[I-1]===v;I--)if((I-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return U.slice(0,I)}}}function rw($){return Qw($),{encode:(v)=>v,decode:(v)=>$(v)}}function Jw($,v,U){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(U<2)throw RangeError(`convertRadix: invalid to=${U}, base cannot be less than 2`);if(LJ($),!$.length)return[];let I=0,g=[],J=Array.from($,(G)=>{if(aI(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),z=J.length;while(!0){let G=0,O=!0;for(let D=I;D<z;D++){let r=J[D],X=v*G,w=X+r;if(!Number.isSafeInteger(w)||X/v!==G||w-r!==X)throw Error("convertRadix: carry overflow");let N=w/U;G=w%U;let Y=Math.floor(N);if(J[D]=Y,!Number.isSafeInteger(Y)||Y*U+G!==w)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!Y)I=D;else O=!1}if(g.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)g.push(0);return g.reverse()}var Xw=($,v)=>v===0?$:Xw(v,$%v),fJ=($,v)=>$+(v-Xw($,v)),CJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function KO($,v,U,I){if(LJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(U<=0||U>32)throw RangeError(`convertRadix2: wrong to=${U}`);if(fJ(v,U)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${U} carryBits=${fJ(v,U)}`);let g=0,J=0,z=CJ[v],G=CJ[U]-1,O=[];for(let D of $){if(aI(D),D>=z)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(g=g<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=U;J-=U)O.push((g>>J-U&G)>>>0);let r=CJ[J];if(r===void 0)throw Error("invalid carry");g&=r-1}if(g=g<<U-J&G,!I&&J>=v)throw Error("Excess padding");if(!I&&g>0)throw Error(`Non-zero padding: ${g}`);if(I&&J>0)O.push(g>>>0);return O}function Tj($){aI($);let v=256;return{encode:(U)=>{if(!_J(U))throw TypeError("radix.encode input should be Uint8Array");return Jw(Array.from(U),v,$)},decode:(U)=>{return AO("radix.decode",U),Uint8Array.from(Jw(U,$,v))}}}function Pv($,v=!1){if(aI($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(fJ(8,$)>32||fJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(U)=>{if(!_J(U))throw TypeError("radix2.encode input should be Uint8Array");return KO(Array.from(U),8,$,!v)},decode:(U)=>{return AO("radix2.decode",U),Uint8Array.from(KO(U,$,8,v))}}}function zw($){return Qw($),function(...v){try{return $.apply(null,v)}catch(U){}}}var pT=Object.freeze(uv(Pv(4),Kv("0123456789ABCDEF"),Tv(""))),tT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),bJ(5),Tv(""))),aT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Tv(""))),eT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),bJ(5),Tv(""))),sT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Tv(""))),$H=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Tv(""),rw(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),Nw=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Hj=/[\t\n\f\r ]/,ww=($,v)=>{Lg("base64",$);let U=v?"base64url":"base64";if($.length>0&&Hj.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:U,lastChunkHandling:"strict"})},SO=Object.freeze(Nw?{encode($){return HO($),$.toBase64()},decode($){return ww($,!1)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),bJ(6),Tv(""))),vv=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Tv(""))),vH=Object.freeze(Nw?{encode($){return HO($),$.toBase64({alphabet:"base64url"})},decode($){return ww($,!0)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),bJ(6),Tv(""))),gH=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Tv(""))),kO=($)=>uv(Tj(58),Kv($),Tv("")),UH=Object.freeze(kO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),IH=Object.freeze(kO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),JH=Object.freeze(kO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var TO=uv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Tv("")),Gw=[996825010,642813549,513874426,1027748829,705979059];function tI($){let v=$>>25,U=($&33554431)<<5;for(let I=0;I<Gw.length;I++)if((v>>I&1)===1)U^=Gw[I];return U}function Ow($,v,U=1){let I=$.length,g=1;for(let J=0;J<I;J++){let z=$.charCodeAt(J);if(z<33||z>126)throw Error(`Invalid prefix (${$})`);g=tI(g)^z>>5}g=tI(g);for(let J=0;J<I;J++)g=tI(g)^$.charCodeAt(J)&31;for(let J of v)g=tI(g)^J;for(let J=0;J<6;J++)g=tI(g);return g^=U,TO.encode(KO([g%CJ[30]],30,5,!1))}function qw($){let v=$==="bech32"?1:734539939,U=Pv(5),I=U.decode,g=U.encode,J=zw(I);function z(X,w,N=90){if(Lg("bech32.encode prefix",X),_J(w))w=Array.from(w);AO("bech32.encode",w);let Y=X.length;if(Y===0)throw TypeError(`Invalid prefix length ${Y}`);let V=Y+7+w.length;if(N!==!1&&V>N)throw TypeError(`Length ${V} exceeds limit ${N}`);let W=X.toLowerCase(),T=Ow(W,w,v);return`${W}1${TO.encode(w)}${T}`}function G(X,w=90){Lg("bech32.decode input",X);let N=X.length;if(N<8||w!==!1&&N>w)throw TypeError(`invalid string length: ${N} (${X}). Expected (8..${w})`);let Y=X.toLowerCase();if(X!==Y&&X!==X.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Y.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let W=Y.slice(0,V),T=Y.slice(V+1);if(T.length<6)throw Error("Data must be at least 6 characters long");let u=TO.decode(T).slice(0,-6),f=Ow(W,u,v);if(!T.endsWith(f))throw Error(`Invalid checksum in ${X}: expected "${f}"`);return{prefix:W,words:u}}let O=zw(G);function D(X){let{prefix:w,words:N}=G(X,!1);return{prefix:w,words:N,bytes:I(N)}}function r(X,w){return z(X,g(w))}return{encode:z,decode:G,encodeFromBytes:r,decodeToBytes:D,decodeUnsafe:O,fromWords:I,fromWordsUnsafe:J,toWords:g}}var Hv=Object.freeze(qw("bech32")),zH=Object.freeze(qw("bech32m"));var Aj=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Sj={encode($){return HO($),$.toHex()},decode($){return Lg("hex",$),Uint8Array.fromHex($)}},GH=Object.freeze(Aj?Sj:uv(Pv(4),Kv("0123456789abcdef"),Tv(""),rw(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Pj($,v,U,I){rg($);let g=kJ({dkLen:32,asyncTick:10},I),{c:J,dkLen:z,asyncTick:G}=g;if(n$(J,"c"),n$(z,"dkLen"),n$(G,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(z<1)throw Error('"dkLen" must be >= 1');if(z>4294967295*$.outputLen)throw Error("derived key too long");let O=wO(v,"password"),D=wO(U,"salt"),r=new Uint8Array(z),X=dv.create($,O),w=X._cloneInto().update(D);return{c:J,dkLen:z,asyncTick:G,DK:r,PRF:X,PRFSalt:w}}function Ej($,v,U,I,g){if($.destroy(),v.destroy(),I)I.destroy();return Ov(g),U}function PO($,v,U,I){let{c:g,dkLen:J,DK:z,PRF:G,PRFSalt:O}=Pj($,v,U,I),D,r=new Uint8Array(4),X=iU(r),w=new Uint8Array(G.outputLen);for(let N=1,Y=0;Y<J;N++,Y+=G.outputLen){let V=z.subarray(Y,Y+G.outputLen);X.setInt32(0,N,!1),(D=O._cloneInto(D)).update(r).digestInto(w),V.set(w.subarray(0,V.length));for(let W=1;W<g;W++){G._cloneInto(D).update(w).digestInto(w);for(let T=0;T<V.length;T++)V[T]^=w[T]}}return Ej(G,O,z,D,w)}function Yw($,v,U,I,g,J){let z=$[v++]^U[I++],G=$[v++]^U[I++],O=$[v++]^U[I++],D=$[v++]^U[I++],r=$[v++]^U[I++],X=$[v++]^U[I++],w=$[v++]^U[I++],N=$[v++]^U[I++],Y=$[v++]^U[I++],V=$[v++]^U[I++],W=$[v++]^U[I++],T=$[v++]^U[I++],u=$[v++]^U[I++],f=$[v++]^U[I++],L=$[v++]^U[I++],i=$[v++]^U[I++],l=z,h=G,_=O,b=D,g$=r,S=X,K=w,k=N,Z=Y,M=V,j=W,A=T,R=u,E=f,C=L,x=i;for(let s=0;s<8;s+=2)g$^=R$(l+R|0,7),Z^=R$(g$+l|0,9),R^=R$(Z+g$|0,13),l^=R$(R+Z|0,18),M^=R$(S+h|0,7),E^=R$(M+S|0,9),h^=R$(E+M|0,13),S^=R$(h+E|0,18),C^=R$(j+K|0,7),_^=R$(C+j|0,9),K^=R$(_+C|0,13),j^=R$(K+_|0,18),b^=R$(x+A|0,7),k^=R$(b+x|0,9),A^=R$(k+b|0,13),x^=R$(A+k|0,18),h^=R$(l+b|0,7),_^=R$(h+l|0,9),b^=R$(_+h|0,13),l^=R$(b+_|0,18),K^=R$(S+g$|0,7),k^=R$(K+S|0,9),g$^=R$(k+K|0,13),S^=R$(g$+k|0,18),A^=R$(j+M|0,7),Z^=R$(A+j|0,9),M^=R$(Z+A|0,13),j^=R$(M+Z|0,18),R^=R$(x+C|0,7),E^=R$(R+x|0,9),C^=R$(E+R|0,13),x^=R$(C+E|0,18);g[J++]=z+l|0,g[J++]=G+h|0,g[J++]=O+_|0,g[J++]=D+b|0,g[J++]=r+g$|0,g[J++]=X+S|0,g[J++]=w+K|0,g[J++]=N+k|0,g[J++]=Y+Z|0,g[J++]=V+M|0,g[J++]=W+j|0,g[J++]=T+A|0,g[J++]=u+R|0,g[J++]=f+E|0,g[J++]=L+C|0,g[J++]=i+x|0}function EO($,v,U,I,g){let J=I+0,z=I+16*g;for(let G=0;G<16;G++)U[z+G]=$[v+(2*g-1)*16+G];for(let G=0;G<g;G++,J+=16,v+=16){if(Yw(U,z,$,v,U,J),G>0)z+=16;Yw(U,J,$,v+=16,U,z)}}function Bj($,v,U){let I=kJ({dkLen:32,asyncTick:10,maxmem:1073742848},U),{N:g,r:J,p:z,dkLen:G,asyncTick:O,maxmem:D,onProgress:r}=I;if(n$(g,"N"),n$(J,"r"),n$(z,"p"),n$(G,"dkLen"),n$(O,"asyncTick"),n$(D,"maxmem"),r!==void 0&&typeof r!=="function")throw Error("progressCb must be a function");let X=128*J,w=X/4,N=Math.pow(2,32);if(g<=1||(g&g-1)!==0||g>N)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(z<1||z>(N-1)*32/X)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(N-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Y=X*(g+z+1);if(Y>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Y+", maxmem="+D);let V=PO(f$,$,v,{c:1,dkLen:X*z}),W=AJ(V),T=AJ(new Uint8Array(X*g)),u=AJ(new Uint8Array(X)),f=()=>{};if(r){let L=2*g*z,i=Math.max(Math.floor(L/1e4),1),l=0;f=()=>{if(l++,r&&(!(l%i)||l===L))r(l/L)}}return{N:g,r:J,p:z,dkLen:G,blockSize32:w,V:T,B32:W,B:V,tmp:u,blockMixCb:f,asyncTick:O}}function Cj($,v,U,I,g){let J=PO(f$,$,U,{c:1,dkLen:v});return Ov(U,I,g),J}function BO($,v,U){let{N:I,r:g,p:J,dkLen:z,blockSize32:G,V:O,B32:D,B:r,tmp:X,blockMixCb:w}=Bj($,v,U);NO(D);for(let N=0;N<J;N++){let Y=G*N;for(let V=0;V<G;V++)O[V]=D[Y+V];for(let V=0,W=0;V<I-1;V++)EO(O,W,O,W+=G,g),w();EO(O,(I-1)*G,D,Y,g),w();for(let V=0;V<I;V++){let W=(D[Y+G-16]&I-1)>>>0;for(let T=0;T<G;T++)X[T]=D[Y+T]^O[W*G+T];EO(X,0,D,Y,g),w()}}return NO(D),Cj($,z,r,O,X)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Lj($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function xU($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,U=""){let I=Lj($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function CO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function Ww($,v,U=!1){b$($,void 0,"output");let I=v.outputLen;if($.length<I)throw RangeError("digestInto() expects output buffer of length at least "+I);if(U&&!oU($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function nj($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var GU=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),fj=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var _j=($)=>{for(let v=0;v<$.length;v++)$[v]=fj($[v]);return $},qg=GU?($)=>$:_j;function Zw($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function Vw($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function jw($,v,U){let I=v,g=U||(()=>[]),J=(G,O)=>I(O,...g(G)).update(G).digest(),z=I(new Uint8Array($),...g(new Uint8Array(0)));return J.outputLen=z.outputLen,J.blockLen=z.blockLen,J.create=(G,...O)=>I(G,...O),J}var Mw=($,v)=>{function U(I,...g){if(b$(I,void 0,"key"),$.nonceLength!==void 0){let r=g[0];b$(r,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&g[1]!==void 0)b$(g[1],void 0,"AAD");let z=v(I,...g),G=(r,X)=>{if(X!==void 0){if(r!==2)throw Error("cipher output not supported");b$(X,void 0,"output")}},O=!1;return{encrypt(r,X){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(r),G(z.encrypt.length,X),z.encrypt(r,X)},decrypt(r,X){if(b$(r),J&&r.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return G(z.decrypt.length,X),z.decrypt(r,X)}}}return Object.assign(U,$),U};function eI($,v,U=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(U&&!oU(v))throw Error("invalid output, must be aligned");return v}function Rw($,v,U){xU($),xU(v),mJ(U);let I=new Uint8Array(16),g=nj(I);return g.setBigUint64(0,BigInt(v),U),g.setBigUint64(8,BigInt($),U),I}function oU($){return $.byteOffset%4===0}function cU($){return Uint8Array.from(b$($))}var Kw=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),bj=(()=>qg(pv(Kw("expand 16-byte k"))))(),mj=(()=>qg(pv(Kw("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var sI=64,Fj=16,LO=(()=>4294967295)(),uw=Uint32Array.of();function ij($,v,U,I,g,J,z,G){let O=g.length,D=new Uint8Array(sI),r=pv(D),X=GU&&oU(g)&&oU(J),w=X?pv(g):uw,N=X?pv(J):uw;if(!GU){for(let Y=0;Y<O;z++){if($(v,U,I,r,z,G),qg(r),z>=LO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}return}for(let Y=0;Y<O;z++){if($(v,U,I,r,z,G),z>=LO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);if(X&&V===sI){let W=Y/4;if(Y%4!==0)throw Error("arx: invalid block position");for(let T=0,u;T<Fj;T++)u=W+T,N[u]=w[u]^r[T];Y+=sI;continue}for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}}function Tw($,v){let{allowShortKeys:U,extendNonceFn:I,counterLength:g,counterRight:J,rounds:z}=Zw({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return xU(g),xU(z),mJ(J),mJ(U),(G,O,D,r,X=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let w=D.length;if(r=eI(w,r,!1),xU(X),X<0||X>=LO)throw Error("arx: counter overflow");let N=[],Y=G.length,V,W;if(Y===32)N.push(V=cU(G)),W=mj;else if(Y===16&&U)V=new Uint8Array(32),V.set(G),V.set(G,16),W=bj,N.push(V);else throw b$(G,32,"arx key"),Error("invalid key size");if(!GU||!oU(O))N.push(O=cU(O));let T=pv(V);if(I){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(GU)I(W,T,pv(L),T);else{let i=qg(Uint32Array.from(W));I(i,T,pv(L),T),bv(i),qg(T)}O=O.subarray(16)}else if(!GU)qg(T);let u=16-g;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,N.push(O)}let f=qg(pv(O));try{return ij($,W,T,f,D,r,X,z),r}finally{bv(...N)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class Hw{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cU(b$($,32,"key"));let v=y$($,0),U=y$($,2),I=y$($,4),g=y$($,6),J=y$($,8),z=y$($,10),G=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|U<<3)&8191,this.r[2]=(U>>>10|I<<6)&7939,this.r[3]=(I>>>7|g<<9)&8191,this.r[4]=(g>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|z<<2)&8191,this.r[7]=(z>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,U=!1){let I=U?0:2048,{h:g,r:J}=this,z=J[0],G=J[1],O=J[2],D=J[3],r=J[4],X=J[5],w=J[6],N=J[7],Y=J[8],V=J[9],W=y$($,v+0),T=y$($,v+2),u=y$($,v+4),f=y$($,v+6),L=y$($,v+8),i=y$($,v+10),l=y$($,v+12),h=y$($,v+14),_=g[0]+(W&8191),b=g[1]+((W>>>13|T<<3)&8191),g$=g[2]+((T>>>10|u<<6)&8191),S=g[3]+((u>>>7|f<<9)&8191),K=g[4]+((f>>>4|L<<12)&8191),k=g[5]+(L>>>1&8191),Z=g[6]+((L>>>14|i<<2)&8191),M=g[7]+((i>>>11|l<<5)&8191),j=g[8]+((l>>>8|h<<8)&8191),A=g[9]+(h>>>5|I),R=0,E=R+_*z+b*(5*V)+g$*(5*Y)+S*(5*N)+K*(5*w);R=E>>>13,E&=8191,E+=k*(5*X)+Z*(5*r)+M*(5*D)+j*(5*O)+A*(5*G),R+=E>>>13,E&=8191;let C=R+_*G+b*z+g$*(5*V)+S*(5*Y)+K*(5*N);R=C>>>13,C&=8191,C+=k*(5*w)+Z*(5*X)+M*(5*r)+j*(5*D)+A*(5*O),R+=C>>>13,C&=8191;let x=R+_*O+b*G+g$*z+S*(5*V)+K*(5*Y);R=x>>>13,x&=8191,x+=k*(5*N)+Z*(5*w)+M*(5*X)+j*(5*r)+A*(5*D),R+=x>>>13,x&=8191;let s=R+_*D+b*O+g$*G+S*z+K*(5*V);R=s>>>13,s&=8191,s+=k*(5*Y)+Z*(5*N)+M*(5*w)+j*(5*X)+A*(5*r),R+=s>>>13,s&=8191;let J$=R+_*r+b*D+g$*O+S*G+K*z;R=J$>>>13,J$&=8191,J$+=k*(5*V)+Z*(5*Y)+M*(5*N)+j*(5*w)+A*(5*X),R+=J$>>>13,J$&=8191;let G$=R+_*X+b*r+g$*D+S*O+K*G;R=G$>>>13,G$&=8191,G$+=k*z+Z*(5*V)+M*(5*Y)+j*(5*N)+A*(5*w),R+=G$>>>13,G$&=8191;let Q$=R+_*w+b*X+g$*r+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=k*G+Z*z+M*(5*V)+j*(5*Y)+A*(5*N),R+=Q$>>>13,Q$&=8191;let N$=R+_*N+b*w+g$*X+S*r+K*D;R=N$>>>13,N$&=8191,N$+=k*O+Z*G+M*z+j*(5*V)+A*(5*Y),R+=N$>>>13,N$&=8191;let r$=R+_*Y+b*N+g$*w+S*X+K*r;R=r$>>>13,r$&=8191,r$+=k*D+Z*O+M*G+j*z+A*(5*V),R+=r$>>>13,r$&=8191;let X$=R+_*V+b*Y+g$*N+S*w+K*X;R=X$>>>13,X$&=8191,X$+=k*r+Z*D+M*O+j*G+A*z,R+=X$>>>13,X$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,C+=R,g[0]=E,g[1]=C,g[2]=x,g[3]=s,g[4]=J$,g[5]=G$,g[6]=Q$,g[7]=N$,g[8]=r$,g[9]=X$}finalize(){let{h:$,pad:v}=this,U=new Uint16Array(10),I=$[1]>>>13;$[1]&=8191;for(let z=2;z<10;z++)$[z]+=I,I=$[z]>>>13,$[z]&=8191;$[0]+=I*5,I=$[0]>>>13,$[0]&=8191,$[1]+=I,I=$[1]>>>13,$[1]&=8191,$[2]+=I,U[0]=$[0]+5,I=U[0]>>>13,U[0]&=8191;for(let z=1;z<10;z++)U[z]=$[z]+I,I=U[z]>>>13,U[z]&=8191;U[9]-=8192;let g=(I^1)-1;for(let z=0;z<10;z++)U[z]&=g;g=~g;for(let z=0;z<10;z++)$[z]=$[z]&g|U[z];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let z=1;z<8;z++)J=($[z]+v[z]|0)+(J>>>16)|0,$[z]=J&65535;bv(U)}update($){CO(this),b$($),$=cU($);let{buffer:v,blockLen:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(U-this.pos,I-g);if(J===U){for(;U<=I-g;g+=U)this.process($,g);continue}if(v.set($.subarray(g,g+J),this.pos),this.pos+=J,g+=J,this.pos===U)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){CO(this),Ww($,this),this.finished=!0;let{buffer:v,h:U}=this,{pos:I}=this;if(I){v[I++]=1;for(;I<16;I++)v[I]=0;this.process(v,0,!0)}this.finalize();let g=0;for(let J=0;J<8;J++)$[g++]=U[J]>>>0,$[g++]=U[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}}var Aw=jw(32,($)=>new Hw($));function xj($,v,U,I,g,J=20){let z=$[0],G=$[1],O=$[2],D=$[3],r=v[0],X=v[1],w=v[2],N=v[3],Y=v[4],V=v[5],W=v[6],T=v[7],u=g,f=U[0],L=U[1],i=U[2],l=z,h=G,_=O,b=D,g$=r,S=X,K=w,k=N,Z=Y,M=V,j=W,A=T,R=u,E=f,C=L,x=i;for(let J$=0;J$<J;J$+=2)l=l+g$|0,R=u$(R^l,16),Z=Z+R|0,g$=u$(g$^Z,12),l=l+g$|0,R=u$(R^l,8),Z=Z+R|0,g$=u$(g$^Z,7),h=h+S|0,E=u$(E^h,16),M=M+E|0,S=u$(S^M,12),h=h+S|0,E=u$(E^h,8),M=M+E|0,S=u$(S^M,7),_=_+K|0,C=u$(C^_,16),j=j+C|0,K=u$(K^j,12),_=_+K|0,C=u$(C^_,8),j=j+C|0,K=u$(K^j,7),b=b+k|0,x=u$(x^b,16),A=A+x|0,k=u$(k^A,12),b=b+k|0,x=u$(x^b,8),A=A+x|0,k=u$(k^A,7),l=l+S|0,x=u$(x^l,16),j=j+x|0,S=u$(S^j,12),l=l+S|0,x=u$(x^l,8),j=j+x|0,S=u$(S^j,7),h=h+K|0,R=u$(R^h,16),A=A+R|0,K=u$(K^A,12),h=h+K|0,R=u$(R^h,8),A=A+R|0,K=u$(K^A,7),_=_+k|0,E=u$(E^_,16),Z=Z+E|0,k=u$(k^Z,12),_=_+k|0,E=u$(E^_,8),Z=Z+E|0,k=u$(k^Z,7),b=b+g$|0,C=u$(C^b,16),M=M+C|0,g$=u$(g$^M,12),b=b+g$|0,C=u$(C^b,8),M=M+C|0,g$=u$(g$^M,7);let s=0;I[s++]=z+l|0,I[s++]=G+h|0,I[s++]=O+_|0,I[s++]=D+b|0,I[s++]=r+g$|0,I[s++]=X+S|0,I[s++]=w+K|0,I[s++]=N+k|0,I[s++]=Y+Z|0,I[s++]=V+M|0,I[s++]=W+j|0,I[s++]=T+A|0,I[s++]=u+R|0,I[s++]=f+E|0,I[s++]=L+C|0,I[s++]=i+x|0}var oj=Tw(xj,{counterRight:!1,counterLength:4,allowShortKeys:!1});var cj=new Uint8Array(16),Sw=($,v)=>{$.update(v);let U=v.length%16;if(U)$.update(cj.subarray(U))},yj=new Uint8Array(32);function kw($,v,U,I,g){if(g!==void 0)b$(g,void 0,"AAD");let J=$(v,U,yj),z=Rw(I.length,g?g.length:0,!0),G=Aw.create(J);if(g)Sw(G,g);Sw(G,I),G.update(z);let O=G.digest();return bv(J,z),O}var lj=($)=>(v,U,I)=>{return{encrypt(J,z){let G=J.length;z=eI(G+16,z,!1),z.set(J);let O=z.subarray(0,-16);$(v,U,O,O,1);let D=kw($,v,U,O,I);return z.set(D,G),bv(D),z},decrypt(J,z){z=eI(J.length-16,z,!1);let G=J.subarray(0,-16),O=J.subarray(-16),D=kw($,v,U,G,I);if(!Vw(O,D))throw bv(D),Error("invalid tag");return z.set(J.subarray(0,-16)),$(v,U,z,z,1),bv(D),z}}},Ev=Mw({blockSize:64,nonceLength:12,tagLength:16},lj(oj));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function yU($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw Error(`${U}expected integer >= 0, got ${$}`)}}function q$($,v,U=""){let I=yU($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`;throw Error(z+"expected Uint8Array"+G+", got "+O)}return $}function Bv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function Wg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function FJ($,v){q$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw Error('"digestInto() output" expected to be of length >='+U)}function iJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function mv($,v){return $<<32-v|$>>>v}var dj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pj($){for(let v=0;v<$.length;v++)$[v]=hj($[v]);return $}var nO=dj?($)=>$:pj,Ew=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function OU($){if(q$($),Ew)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=tj[$[U]];return v}var Yg={_0:48,_9:57,A:65,F:70,a:97,f:102};function Pw($){if($>=Yg._0&&$<=Yg._9)return $-Yg._0;if($>=Yg.A&&$<=Yg.F)return $-(Yg.A-10);if($>=Yg.a&&$<=Yg.f)return $-(Yg.a-10);return}function DU($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(Ew)return Uint8Array.fromHex($);let v=$.length,U=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=Pw($.charCodeAt(J)),G=Pw($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function _$(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];q$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function lU($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function ng($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var fg=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _O=BigInt(0),fO=BigInt(1);function $0($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw Error(U+"expected boolean, got type="+typeof $)}return $}function Bw($){if(typeof $==="bigint"){if(!oJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function v0($){let v=Bw($).toString(16);return v.length&1?"0"+v:v}function Cw($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_O:BigInt("0x"+$)}function _g($){return Cw(OU($))}function bg($){return Cw(OU(cJ(q$($)).reverse()))}function dU($,v){F$(v),$=Bw($);let U=DU($.toString(16).padStart(v*2,"0"));if(U.length!==v)throw Error("number too large");return U}function g0($,v){return dU($,v).reverse()}function cJ($){return Uint8Array.from($)}function mg($){return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw Error(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var oJ=($)=>typeof $==="bigint"&&_O<=$;function aj($,v,U){return oJ($)&&oJ(v)&&oJ(U)&&v<=$&&$<U}function U0($,v,U,I){if(!aj(v,U,I))throw Error("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function bO($){let v;for(v=0;$>_O;$>>=fO,v+=1);return v}var I0=($)=>(fO<<BigInt($))-fO;function Lw($,v,U){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof U!=="function")throw Error("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),r=0,X=()=>{O.fill(1),D.fill(0),r=0},w=(...W)=>U(D,_$(O,...W)),N=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(r++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return _$(...T)};return(W,T)=>{X(),N(W);let u=void 0;while(!(u=T(Y())))N();return X(),u}}function QU($,v={},U={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function I(J,z,G){let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw Error(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}function mO($){let v=new WeakMap;return(U,...I)=>{let g=v.get(U);if(g!==void 0)return g;let J=$(U,...I);return v.set(U,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qv=BigInt(0),gv=BigInt(1),rU=BigInt(2),_w=BigInt(3),bw=BigInt(4),mw=BigInt(5),ej=BigInt(7),Fw=BigInt(8),sj=BigInt(9),iw=BigInt(16);function Dv($,v){let U=$%v;return U>=Qv?U:v+U}function Cv($,v,U){let I=$;while(v-- >Qv)I*=I,I%=U;return I}function nw($,v){if($===Qv)throw Error("invert: expected non-zero number");if(v<=Qv)throw Error("invert: expected positive modulus, got "+v);let U=Dv($,v),I=v,g=Qv,J=gv,z=gv,G=Qv;while(U!==Qv){let D=I/U,r=I%U,X=g-z*D,w=J-G*D;I=U,U=r,g=z,J=G,z=X,G=w}if(I!==gv)throw Error("invert: does not exist");return Dv(g,v)}function FO($,v,U){if(!$.eql($.sqr(v),U))throw Error("Cannot find square root")}function xw($,v){let U=($.ORDER+gv)/bw,I=$.pow(v,U);return FO($,I,v),I}function $M($,v){let U=($.ORDER-mw)/Fw,I=$.mul(v,rU),g=$.pow(I,U),J=$.mul(v,g),z=$.mul($.mul(J,rU),g),G=$.mul(J,$.sub(z,$.ONE));return FO($,G,v),G}function vM($){let v=yJ($),U=ow($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+ej)/iw;return(G,O)=>{let D=G.pow(O,z),r=G.mul(D,I),X=G.mul(D,g),w=G.mul(D,J),N=G.eql(G.sqr(r),O),Y=G.eql(G.sqr(X),O);D=G.cmov(D,r,N),r=G.cmov(w,X,Y);let V=G.eql(G.sqr(r),O),W=G.cmov(D,r,V);return FO(G,W,O),W}}function ow($){if($<_w)throw Error("sqrt is not defined for small field");let v=$-gv,U=0;while(v%rU===Qv)v/=rU,U++;let I=rU,g=yJ($);while(fw(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return xw;let J=g.pow(I,v),z=(v+gv)/rU;return function(O,D){if(O.is0(D))return D;if(fw(O,D)!==1)throw Error("Cannot find square root");let r=U,X=O.mul(O.ONE,J),w=O.pow(D,v),N=O.pow(D,z);while(!O.eql(w,O.ONE)){if(O.is0(w))return O.ZERO;let Y=1,V=O.sqr(w);while(!O.eql(V,O.ONE))if(Y++,V=O.sqr(V),Y===r)throw Error("Cannot find square root");let W=gv<<BigInt(r-Y-1),T=O.pow(X,W);r=Y,X=O.sqr(T),w=O.mul(w,X),N=O.mul(N,T)}return N}}function gM($){if($%bw===_w)return xw;if($%Fw===mw)return $M;if($%iw===sj)return vM($);return ow($)}var UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function iO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=UM.reduce((I,g)=>{return I[g]="function",I},v);return QU($,U),$}function IM($,v,U){if(U<Qv)throw Error("invalid exponent, negatives unsupported");if(U===Qv)return $.ONE;if(U===gv)return v;let I=$.ONE,g=v;while(U>Qv){if(U&gv)I=$.mul(I,g);g=$.sqr(g),U>>=gv}return I}function J0($,v,U=!1){let I=Array(v.length).fill(U?$.ZERO:void 0),g=v.reduce((z,G,O)=>{if($.is0(G))return z;return I[O]=z,$.mul(z,G)},$.ONE),J=$.inv(g);return v.reduceRight((z,G,O)=>{if($.is0(G))return z;return I[O]=$.mul(z,I[O]),$.mul(z,G)},J),I}function fw($,v){let U=($.ORDER-gv)/rU,I=$.pow(v,U),g=$.eql(I,$.ONE),J=$.eql(I,$.ZERO),z=$.eql(I,$.neg($.ONE));if(!g&&!J&&!z)throw Error("invalid Legendre symbol result");return g?1:J?0:-1}function JM($,v){if(v!==void 0)F$(v);let U=v!==void 0?v:$.toString(2).length,I=Math.ceil(U/8);return{nBitLength:U,nByteLength:I}}class cw{ORDER;BITS;BYTES;isLE;ZERO=Qv;ONE=gv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Qv)throw Error("invalid field: expected ORDER > 0, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=JM($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Dv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Qv<=$&&$<this.ORDER}is0($){return $===Qv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&gv)===gv}neg($){return Dv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Dv($*$,this.ORDER)}add($,v){return Dv($+v,this.ORDER)}sub($,v){return Dv($-v,this.ORDER)}mul($,v){return Dv($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return Dv($*nw(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return nw($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=gM(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g0($,this.BYTES):dU($,this.BYTES)}fromBytes($,v=!1){q$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if(!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?bg($):_g($);if(z)G=Dv(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return J0(this,$)}cmov($,v,U){return U?v:$}}function yJ($,v={}){return new cw($,v)}function yw($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function xO($){let v=yw($);return v+Math.ceil(v/2)}function lw($,v,U=!1){q$($);let I=$.length,g=yw(v),J=xO(v);if(I<16||I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?bg($):_g($),G=Dv(z,v-gv)+gv;return U?g0(G,g):dU(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hU=BigInt(0),XU=BigInt(1);function z0($,v){let U=v.negate();return $?U:v}function lO($,v){let U=J0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function tw($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function oO($,v){tw($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=I0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function dw($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=XU;let D=v*I,r=D+Math.abs(G)-1,X=G===0,w=G<0,N=v%2!==0;return{nextN:O,offset:r,isZero:X,isNeg:w,isNegF:N,offsetF:D}}var cO=new WeakMap,aw=new WeakMap;function yO($){return aw.get($)||1}function hw($){if($!==hU)throw Error("invalid wNAF")}class dO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>hU){if(v&XU)U=U.add(I);I=I.double(),v>>=XU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=oO(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=oO($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:r,isNegF:X,offsetF:w}=dw(U,z,J);if(U=G,D)g=g.add(z0(X,v[w]));else I=I.add(z0(r,v[O]))}return hw(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=oO($,this.bits);for(let J=0;J<g.windows;J++){if(U===hU)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=dw(U,J,g);if(U=z,O)continue;else{let r=v[G];I=I.add(D?r.negate():r)}}return hw(U),I}getPrecomputes($,v,U){let I=cO.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);cO.set(v,I)}}return I}cached($,v,U){let I=yO($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=yO($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){tw(v,this.bits),aw.set($,v),cO.delete($)}hasCache($){return yO($)!==1}}function ew($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>hU||I>hU){if(U&XU)J=J.add(g);if(I&XU)z=z.add(g);g=g.double(),U>>=XU,I>>=XU}return{p1:J,p2:z}}function pw($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return iO(v),v}else return yJ($,{isLE:U})}function sw($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>hU))throw Error(`CURVE.${O} must be positive bigint`)}let g=pw(v.p,U.Fp,I),J=pw(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function lJ($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var G0=BigInt(0),pU=BigInt(1),dJ=BigInt(2);function zM($){return QU($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function $q($){let v=zM($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z||ng,D=G?255:448,r=G?32:56,X=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),N=G?dJ**BigInt(254):dJ**BigInt(447),Y=G?BigInt(8)*dJ**BigInt(251)-pU:BigInt(4)*dJ**BigInt(445)-pU,V=N+Y+pU,W=(Z)=>Dv(Z,U),T=u(X);function u(Z){return g0(W(Z),r)}function f(Z){let M=cJ(q$(Z,r,"uCoordinate"));if(G)M[31]&=127;return W(bg(M))}function L(Z){return bg(g(cJ(q$(Z,r,"scalar"))))}function i(Z,M){let j=g$(f(M),L(Z));if(j===G0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){U0("u",Z,G0,U),U0("scalar",M,N,V);let j=M,A=Z,R=pU,E=G0,C=Z,x=pU,s=G0;for(let G$=BigInt(D-1);G$>=G0;G$--){let Q$=j>>G$&pU;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let N$=R+E,r$=W(N$*N$),X$=R-E,W$=W(X$*X$),k$=r$-W$,E$=C+x,a$=C-x,e$=W(a$*N$),Wv=W(E$*X$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(r$*W$),E=W(k$*(r$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:r,publicKey:r,seed:r},K=(Z=O(r))=>{return q$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze({keygen:lJ(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}class hO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Bv($),q$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Zv(I)}update($){return Wg(this),this.iHash.update($),this}digestInto($){Wg(this),q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tU=($,v,U)=>new hO($,v).update(U).digest();tU.create=($,v)=>new hO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vq=($,v)=>($+($>=0?v:-v)/Uq)/v;function GM($,v,U){let[[I,g],[J,z]]=v,G=vq(z*$,U),O=vq(-g*$,U),D=$-G*I-O*J,r=-G*g-O*z,X=D<Zg,w=r<Zg;if(X)D=-D;if(w)r=-r;let N=I0(Math.ceil(bO(U)/2))+aU;if(D<Zg||D>=N||r<Zg||r>=N)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:X,k1:D,k2neg:w,k2:r}}function tO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function pO($,v){let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if($0(U.lowS,"lowS"),$0(U.prehash,"prehash"),U.format!==void 0)tO(U.format);return U}class gq extends Error{constructor($=""){super($)}}var Fg={Err:gq,_tlv:{encode:($,v)=>{let{Err:U}=Fg;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=v0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?v0(g.length/2|128):"";return v0($)+J+g+v},decode($,v){let{Err:U}=Fg,I=0;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let r of D)z=z<<8|r;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=Fg;if($<Zg)throw new v("integer: negative integers are not allowed");let U=v0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=Fg;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return _g($)}},toSig($){let{Err:v,_int:U,_tlv:I}=Fg,g=q$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:r}=I.decode(2,O);if(r.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=Fg,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}},Zg=BigInt(0),aU=BigInt(1),Uq=BigInt(2),hJ=BigInt(3),OM=BigInt(4);function aO($,v={}){let U=sw("weierstrass",$,v),{Fp:I,Fn:g}=U,J=U.CURVE,{h:z,n:G}=J;QU(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=Jq(I,g);function r(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function X(K,k,Z){let{x:M,y:j}=k.toAffine(),A=I.toBytes(M);if($0(Z,"isCompressed"),Z){r();let R=!I.isOdd(j);return _$(Iq(R),A)}else return _$(Uint8Array.of(4),A,I.toBytes(j))}function w(K){q$(K,void 0,"Point");let{publicKey:k,publicKeyUncompressed:Z}=D,M=K.length,j=K[0],A=K.subarray(1);if(M===k&&(j===2||j===3)){let R=I.fromBytes(A);if(!I.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=V(R),C;try{C=I.sqrt(E)}catch(J$){let G$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}r();let x=I.isOdd(C);if((j&1)===1!==x)C=I.neg(C);return{x:R,y:C}}else if(M===Z&&j===4){let R=I.BYTES,E=I.fromBytes(A.subarray(0,R)),C=I.fromBytes(A.subarray(R,R*2));if(!W(E,C))throw Error("bad point: is not on curve");return{x:E,y:C}}else throw Error(`bad point: got length ${M}, expected compressed=${k} or uncompressed=${Z}`)}let N=v.toBytes||X,Y=v.fromBytes||w;function V(K){let k=I.sqr(K),Z=I.mul(k,K);return I.add(I.add(Z,I.mul(K,J.a)),J.b)}function W(K,k){let Z=I.sqr(k),M=V(K);return I.eql(Z,M)}if(!W(J.Gx,J.Gy))throw Error("bad curve params: generator point");let T=I.mul(I.pow(J.a,hJ),OM),u=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(T,u)))throw Error("bad curve params: a or b");function f(K,k,Z=!1){if(!I.isValid(k)||Z&&I.is0(k))throw Error(`bad point coordinate ${K}`);return k}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return GM(K,O.basises,g.ORDER)}let l=mO((K,k)=>{let{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),h=mO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!I.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:k,y:Z}=K.toAffine();if(!I.isValid(k)||!I.isValid(Z))throw Error("bad point: x or y not field elements");if(!W(k,Z))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,k,Z,M,j){return Z=new b(I.mul(Z.X,K),Z.Y,Z.Z),k=z0(M,k),Z=z0(j,Z),k.add(Z)}class b{static BASE=new b(J.Gx,J.Gy,I.ONE);static ZERO=new b(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(K,k,Z){this.X=f("x",K),this.Y=f("y",k,!0),this.Z=f("z",Z),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:k,y:Z}=K||{};if(!K||!I.isValid(k)||!I.isValid(Z))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(I.is0(k)&&I.is0(Z))return b.ZERO;return new b(k,Z,I.ONE)}static fromBytes(K){let k=b.fromAffine(Y(q$(K,void 0,"point")));return k.assertValidity(),k}static fromHex(K){return b.fromBytes(DU(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,k=!0){if(S.createCache(this,K),!k)this.multiply(hJ);return this}assertValidity(){h(this)}hasEvenY(){let{y:K}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(K)}equals(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.eql(I.mul(k,R),I.mul(j,M)),C=I.eql(I.mul(Z,R),I.mul(A,M));return E&&C}negate(){return new b(this.X,I.neg(this.Y),this.Z)}double(){let{a:K,b:k}=J,Z=I.mul(k,hJ),{X:M,Y:j,Z:A}=this,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(A,A),G$=I.mul(M,j);return G$=I.add(G$,G$),C=I.mul(M,A),C=I.add(C,C),R=I.mul(K,C),E=I.mul(Z,J$),E=I.add(R,E),R=I.sub(s,E),E=I.add(s,E),E=I.mul(R,E),R=I.mul(G$,R),C=I.mul(Z,C),J$=I.mul(K,J$),G$=I.sub(x,J$),G$=I.mul(K,G$),G$=I.add(G$,C),C=I.add(x,x),x=I.add(C,x),x=I.add(x,J$),x=I.mul(x,G$),E=I.add(E,x),J$=I.mul(j,A),J$=I.add(J$,J$),x=I.mul(J$,G$),R=I.sub(R,x),C=I.mul(J$,s),C=I.add(C,C),C=I.add(C,C),new b(R,E,C)}add(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.ZERO,C=I.ZERO,x=I.ZERO,s=J.a,J$=I.mul(J.b,hJ),G$=I.mul(k,j),Q$=I.mul(Z,A),N$=I.mul(M,R),r$=I.add(k,Z),X$=I.add(j,A);r$=I.mul(r$,X$),X$=I.add(G$,Q$),r$=I.sub(r$,X$),X$=I.add(k,M);let W$=I.add(j,R);return X$=I.mul(X$,W$),W$=I.add(G$,N$),X$=I.sub(X$,W$),W$=I.add(Z,M),E=I.add(A,R),W$=I.mul(W$,E),E=I.add(Q$,N$),W$=I.sub(W$,E),x=I.mul(s,X$),E=I.mul(J$,N$),x=I.add(E,x),E=I.sub(Q$,x),x=I.add(Q$,x),C=I.mul(E,x),Q$=I.add(G$,G$),Q$=I.add(Q$,G$),N$=I.mul(s,N$),X$=I.mul(J$,X$),Q$=I.add(Q$,N$),N$=I.sub(G$,N$),N$=I.mul(s,N$),X$=I.add(X$,N$),G$=I.mul(Q$,X$),C=I.add(C,G$),G$=I.mul(W$,X$),E=I.mul(r$,E),E=I.sub(E,G$),G$=I.mul(r$,Q$),x=I.mul(W$,x),x=I.add(x,G$),new b(E,C,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:k}=v;if(!g.isValidNot0(K))throw Error("invalid scalar: out of range");let Z,M,j=(A)=>S.cached(this,A,(R)=>lO(b,R));if(k){let{k1neg:A,k1:R,k2neg:E,k2:C}=i(K),{p:x,f:s}=j(R),{p:J$,f:G$}=j(C);M=s.add(G$),Z=_(k.beta,x,J$,A,E)}else{let{p:A,f:R}=j(K);Z=A,M=R}return lO(b,[Z,M])[0]}multiplyUnsafe(K){let{endo:k}=v,Z=this;if(!g.isValid(K))throw Error("invalid scalar: out of range");if(K===Zg||Z.is0())return b.ZERO;if(K===aU)return Z;if(S.hasCache(this))return this.multiply(K);if(k){let{k1neg:M,k1:j,k2neg:A,k2:R}=i(K),{p1:E,p2:C}=ew(b,Z,j,R);return _(k.beta,E,C,M,A)}else return S.unsafe(Z,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(z===aU)return!0;if(K)return K(b,this);return S.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(z===aU)return this;if(K)return K(b,this);return this.multiplyUnsafe(z)}isSmallOrder(){return this.multiplyUnsafe(z).is0()}toBytes(K=!0){return $0(K,"isCompressed"),this.assertValidity(),N(b,this,K)}toHex(K=!0){return OU(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let g$=g.BITS,S=new dO(b,v.endo?Math.ceil(g$/2):g$);return b.BASE.precompute(8),b}function Iq($){return Uint8Array.of($?2:3)}function Jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:U}=$,I=v.randomBytes||ng,g=Object.assign(Jq($.Fp,U),{seed:xO(U.ORDER)});function J(N){try{let Y=U.fromBytes(N);return U.isValidNot0(Y)}catch(Y){return!1}}function z(N,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=N.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(N)}catch(T){return!1}}function G(N=I(g.seed)){return lw(q$(N,g.seed,"seed"),U.ORDER)}function O(N,Y=!0){return $.BASE.multiply(U.fromBytes(N)).toBytes(Y)}function D(N){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g;if(!yU(N))return;if("_lengths"in U&&U._lengths||Y===V)return;let T=q$(N,void 0,"key").length;return T===V||T===W}function r(N,Y,V=!0){if(D(N)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(N);return $.fromBytes(Y).multiply(W).toBytes(V)}let X={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=lJ(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:r,keygen:w,Point:$,utils:X,lengths:g})}function eO($,v,U={}){Bv(v),QU(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let I=U.randomBytes||ng,g=U.hmac||((Z,M)=>tU(v,Z,M)),{Fp:J,Fn:z}=$,{ORDER:G,BITS:O}=z,{keygen:D,getPublicKey:r,getSharedSecret:X,utils:w,lengths:N}=DM($,U),Y={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},V=G*Uq<J.ORDER;function W(Z){let M=G>>aU;return Z>M}function T(Z,M){if(!z.isValidNot0(M))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return M}function u(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(Z,M){tO(M);let j=N.signature,A=M==="compact"?j:M==="recovered"?j+1:void 0;return q$(Z,A)}class L{r;s;recovery;constructor(Z,M,j){if(this.r=T("r",Z),this.s=T("s",M),j!=null){if(u(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(Z,M=Y.format){f(Z,M);let j;if(M==="der"){let{r:C,s:x}=Fg.toSig(q$(Z));return new L(C,x)}if(M==="recovered")j=Z[0],M="compact",Z=Z.subarray(1);let A=N.signature/2,R=Z.subarray(0,A),E=Z.subarray(A,A*2);return new L(z.fromBytes(R),z.fromBytes(E),j)}static fromHex(Z,M){return this.fromBytes(DU(Z),M)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new L(this.r,this.s,Z)}recoverPublicKey(Z){let{r:M,s:j}=this,A=this.assertRecovery(),R=A===2||A===3?M+G:M;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),C=$.fromBytes(_$(Iq((A&1)===0),E)),x=z.inv(R),s=l(q$(Z,void 0,"msgHash")),J$=z.create(-s*x),G$=z.create(j*x),Q$=$.BASE.multiplyUnsafe(J$).add(C.multiplyUnsafe(G$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return W(this.s)}toBytes(Z=Y.format){if(tO(Z),Z==="der")return DU(Fg.hexFromSig(this));let{r:M,s:j}=this,A=z.toBytes(M),R=z.toBytes(j);if(Z==="recovered")return u(),_$(Uint8Array.of(this.assertRecovery()),A,R);return _$(A,R)}toHex(Z){return OU(this.toBytes(Z))}}let i=U.bits2int||function(M){if(M.length>8192)throw Error("input is too large");let j=_g(M),A=M.length*8-O;return A>0?j>>BigInt(A):j},l=U.bits2int_modN||function(M){return z.create(i(M))},h=I0(O);function _(Z){return U0("num < 2^"+O,Z,Zg,h),z.toBytes(Z)}function b(Z,M){return q$(Z,void 0,"message"),M?q$(v(Z),void 0,"prehashed message"):Z}function g$(Z,M,j){let{lowS:A,prehash:R,extraEntropy:E}=pO(j,Y);Z=b(Z,R);let C=l(Z),x=z.fromBytes(M);if(!z.isValidNot0(x))throw Error("invalid private key");let s=[_(x),_(C)];if(E!=null&&E!==!1){let N$=E===!0?I(N.secretKey):E;s.push(q$(N$,void 0,"extraEntropy"))}let J$=_$(...s),G$=C;function Q$(N$){let r$=i(N$);if(!z.isValidNot0(r$))return;let X$=z.inv(r$),W$=$.BASE.multiply(r$).toAffine(),k$=z.create(W$.x);if(k$===Zg)return;let E$=z.create(X$*z.create(G$+k$*x));if(E$===Zg)return;let a$=(W$.x===k$?0:2)|Number(W$.y&aU),e$=E$;if(A&&W(E$))e$=z.neg(E$),a$^=1;return new L(k$,e$,V?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(Z,M,j={}){let{seed:A,k2sig:R}=g$(Z,M,j);return Lw(v.outputLen,z.BYTES,g)(A,R).toBytes(j.format)}function K(Z,M,j,A={}){let{lowS:R,prehash:E,format:C}=pO(A,Y);if(j=q$(j,void 0,"publicKey"),M=b(M,E),!yU(Z)){let x=Z instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}f(Z,C);try{let x=L.fromBytes(Z,C),s=$.fromBytes(j);if(R&&x.hasHighS())return!1;let{r:J$,s:G$}=x,Q$=l(M),N$=z.inv(G$),r$=z.create(Q$*N$),X$=z.create(J$*N$),W$=$.BASE.multiplyUnsafe(r$).add(s.multiplyUnsafe(X$));if(W$.is0())return!1;return z.create(W$.x)===J$}catch(x){return!1}}function k(Z,M,j={}){let{prehash:A}=pO(j,Y);return M=b(M,A),L.fromBytes(Z,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:D,getPublicKey:r,getSharedSecret:X,utils:w,lengths:N,Point:$,sign:S,verify:K,recoverPublicKey:k,Signature:L,hash:v})}function zq($,v,U){return $&v^~$&U}function Gq($,v,U){return $&v^$&U^v&U}class pJ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){Wg(this),q$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=xJ($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wg(this),FJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Zv(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let r=J;r<I;r++)v[r]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=xJ($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let r=0;r<O;r++)z.setUint32(4*r,D[r],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Vg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),jg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var tJ=BigInt(4294967295),Oq=BigInt(32);function QM($,v=!1){if(v)return{h:Number($&tJ),l:Number($>>Oq&tJ)};return{h:Number($>>Oq&tJ)|0,l:Number($&tJ)|0}}function aJ($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=QM($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var sO=($,v,U)=>$>>>U,$8=($,v,U)=>$<<32-U|v>>>U,NU=($,v,U)=>$>>>U|v<<32-U,wU=($,v,U)=>$<<32-U|v>>>U,O0=($,v,U)=>$<<64-U|v>>>U-32,D0=($,v,U)=>$>>>U-32|v<<64-U;var Dq=($,v,U)=>$<<U|v>>>32-U,Qq=($,v,U)=>v<<U|$>>>32-U,rq=($,v,U)=>v<<U-32|$>>>64-U,Xq=($,v,U)=>$<<U-32|v>>>64-U;function tv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var Nq=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),wq=($,v,U,I)=>v+U+I+($/4294967296|0)|0,qq=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),Yq=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,Wq=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),Zq=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var XM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ig=new Uint32Array(64);class v8 extends pJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let r=0;r<16;r++,v+=4)ig[r]=$.getUint32(v,!1);for(let r=16;r<64;r++){let X=ig[r-15],w=ig[r-2],N=mv(X,7)^mv(X,18)^X>>>3,Y=mv(w,17)^mv(w,19)^w>>>10;ig[r]=Y+ig[r-7]+N+ig[r-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let r=0;r<64;r++){let X=mv(z,6)^mv(z,11)^mv(z,25),w=D+X+zq(z,G,O)+XM[r]+ig[r]|0,Y=(mv(U,2)^mv(U,13)^mv(U,22))+Gq(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Zv(ig)}destroy(){this.set(0,0,0,0,0,0,0,0),Zv(this.buffer)}}class Vq extends v8{A=Vg[0]|0;B=Vg[1]|0;C=Vg[2]|0;D=Vg[3]|0;E=Vg[4]|0;F=Vg[5]|0;G=Vg[6]|0;H=Vg[7]|0;constructor(){super(32)}}class NM extends v8{A=jg[0]|0;B=jg[1]|0;C=jg[2]|0;D=jg[3]|0;E=jg[4]|0;F=jg[5]|0;G=jg[6]|0;H=jg[7]|0;constructor(){super(28)}}var jq=(()=>aJ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),wM=(()=>jq[0])(),qM=(()=>jq[1])(),xg=new Uint32Array(80),og=new Uint32Array(80);class Q0 extends pJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:r,Fl:X,Gh:w,Gl:N,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V]}set($,v,U,I,g,J,z,G,O,D,r,X,w,N,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=r|0,this.Fl=X|0,this.Gh=w|0,this.Gl=N|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)xg[u]=$.getUint32(v),og[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let f=xg[u-15]|0,L=og[u-15]|0,i=NU(f,L,1)^NU(f,L,8)^sO(f,L,7),l=wU(f,L,1)^wU(f,L,8)^$8(f,L,7),h=xg[u-2]|0,_=og[u-2]|0,b=NU(h,_,19)^O0(h,_,61)^sO(h,_,6),g$=wU(h,_,19)^D0(h,_,61)^$8(h,_,6),S=qq(l,g$,og[u-7],og[u-16]),K=Yq(S,i,b,xg[u-7],xg[u-16]);xg[u]=K|0,og[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:r,El:X,Fh:w,Fl:N,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let f=NU(r,X,14)^NU(r,X,18)^O0(r,X,41),L=wU(r,X,14)^wU(r,X,18)^D0(r,X,41),i=r&w^~r&Y,l=X&N^~X&V,h=Wq(T,L,l,qM[u],og[u]),_=Zq(h,W,f,i,wM[u],xg[u]),b=h|0,g$=NU(U,I,28)^O0(U,I,34)^O0(U,I,39),S=wU(U,I,28)^D0(U,I,34)^D0(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=N|0,w=r|0,N=X|0,{h:r,l:X}=tv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=Nq(b,S,k);U=wq(Z,_,g$,K),I=Z|0}({h:U,l:I}=tv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=tv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=tv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=tv(this.Dh|0,this.Dl|0,O|0,D|0),{h:r,l:X}=tv(this.Eh|0,this.El|0,r|0,X|0),{h:w,l:N}=tv(this.Fh|0,this.Fl|0,w|0,N|0),{h:Y,l:V}=tv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=tv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,r,X,w,N,Y,V,W,T)}roundClean(){Zv(xg,og)}destroy(){Zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class YM extends Q0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class Mq extends Q0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Uv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Iv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class WM extends Q0{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(28)}}class ZM extends Q0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(32)}}var eJ=lU(()=>new Vq,fg(1));var Rq=lU(()=>new Mq,fg(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VM=BigInt(1),uq=BigInt(2),jM=BigInt(3),MM=BigInt(5),OA=BigInt(8),Kq=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RM($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=Kq,G=$*$%J*$%J,O=Cv(G,uq,J)*G%J,D=Cv(O,VM,J)*$%J,r=Cv(D,MM,J)*D%J,X=Cv(r,v,J)*r%J,w=Cv(X,U,J)*X%J,N=Cv(w,I,J)*w%J,Y=Cv(N,g,J)*N%J,V=Cv(Y,g,J)*N%J,W=Cv(V,v,J)*r%J;return{pow_p_5_8:Cv(W,uq,J)*$%J,b2:G}}function uM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Tq=(()=>{let $=Kq;return $q({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=RM(v);return Dv(Cv(U,jM,$)*I,$)},adjustScalarBytes:uM})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TM=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var HM=aO(KM),g8=eO(HM,eJ);var AM=aO(TM),Hq=eO(AM,Rq);function Sq($,v,U){if(Bv($),U===void 0)U=new Uint8Array($.outputLen);return tU($,U,v)}var U8=Uint8Array.of(0),Aq=Uint8Array.of();function kq($,v,U,I=32){Bv($),F$(I,"length");let g=$.outputLen;if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=Aq;else q$(U,void 0,"info");let z=new Uint8Array(J*g),G=tU.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let r=0;r<J;r++)U8[0]=r+1,O.update(r===0?Aq:D).update(U).update(U8).digestInto(D),z.set(D,g*r),G._cloneInto(O);return G.destroy(),O.destroy(),Zv(D,U8),z.slice(0,I)}var SM=BigInt(0),r0=BigInt(1),kM=BigInt(2),PM=BigInt(7),EM=BigInt(256),BM=BigInt(113),Bq=[],Cq=[],Lq=[];for(let $=0,v=r0,U=1,I=0;$<24;$++){[U,I]=[I,(2*U+3*I)%5],Bq.push(2*(5*I+U)),Cq.push(($+1)*($+2)/2%64);let g=SM;for(let J=0;J<7;J++)if(v=(v<<r0^(v>>PM)*BM)%EM,v&kM)g^=r0<<(r0<<BigInt(J))-r0;Lq.push(g)}var nq=aJ(Lq,!0),CM=nq[0],LM=nq[1],Pq=($,v,U)=>U>32?rq($,v,U):Dq($,v,U),Eq=($,v,U)=>U>32?Xq($,v,U):Qq($,v,U);function nM($,v=24){let U=new Uint32Array(10);for(let I=24-v;I<24;I++){for(let z=0;z<10;z++)U[z]=$[z]^$[z+10]^$[z+20]^$[z+30]^$[z+40];for(let z=0;z<10;z+=2){let G=(z+8)%10,O=(z+2)%10,D=U[O],r=U[O+1],X=Pq(D,r,1)^U[G],w=Eq(D,r,1)^U[G+1];for(let N=0;N<50;N+=10)$[z+N]^=X,$[z+N+1]^=w}let g=$[2],J=$[3];for(let z=0;z<24;z++){let G=Cq[z],O=Pq(g,J,G),D=Eq(g,J,G),r=Bq[z];g=$[r],J=$[r+1],$[r]=O,$[r+1]=D}for(let z=0;z<50;z+=10){for(let G=0;G<10;G++)U[G]=$[z+G];for(let G=0;G<10;G++)$[z+G]^=~U[(G+2)%10]&U[(G+4)%10]}$[0]^=CM[I],$[1]^=LM[I]}Zv(U)}class sJ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,U,I=!1,g=24){if(this.blockLen=$,this.suffix=v,this.outputLen=U,this.enableXOF=I,this.rounds=g,F$(U,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=iJ(this.state)}clone(){return this._cloneInto()}keccak(){nO(this.state32),nM(this.state32,this.rounds),nO(this.state32),this.posOut=0,this.pos=0}update($){Wg(this),q$($);let{blockLen:v,state:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(v-this.pos,I-g);for(let z=0;z<J;z++)U[this.pos++]^=$[g++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:U,blockLen:I}=this;if($[U]^=v,(v&128)!==0&&U===I-1)this.keccak();$[I-1]^=128,this.keccak()}writeInto($){Wg(this,!1),q$($),this.finish();let v=this.state,{blockLen:U}=this;for(let I=0,g=$.length;I<g;){if(this.posOut>=U)this.keccak();let J=Math.min(U-this.posOut,g-I);$.set(v.subarray(this.posOut,this.posOut+J),I),this.posOut+=J,I+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(FJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Zv(this.state)}_cloneInto($){let{blockLen:v,suffix:U,outputLen:I,rounds:g,enableXOF:J}=this;return $||=new sJ(v,U,I,J,g),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=g,$.suffix=U,$.outputLen=I,$.enableXOF=J,$.destroyed=this.destroyed,$}}var fq=($,v,U,I={})=>lU(()=>new sJ(v,$,U),I);var qU=fq(6,136,32,fg(8));var _q=fq(6,72,64,fg(10));var bq=($,v,U,I={})=>lU((g={})=>new sJ(v,$,g.dkLen===void 0?U:g.dkLen,!0),I),mq=bq(31,168,16,fg(11)),av=bq(31,136,32,fg(12));function I8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iq($){return I8($),($&$-1)===0&&$!==0}function J8($,v){I8($);let U=0;for(let I=0;I<v;I++,$>>>=1)U=U<<1|$&1;return U}function xq($){return I8($),31-Math.clz32($)}function Fq($){let v=$.length;if(v<2||!iq(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let U=xq(v);for(let I=0;I<v;I++){let g=J8(I,U);if(I<g){let J=$[I];$[I]=$[g],$[g]=J}}return $}var z8=($,v)=>{let{N:U,roots:I,dit:g,invertButterflies:J=!1,skipStages:z=0,brp:G=!0}=v,O=xq(U);if(!iq(U))throw Error("FFT: Polynomial size should be power of two");let D=g!==J;return(r)=>{if(r.length!==U)throw Error("FFT: wrong Polynomial length");if(g&&G)Fq(r);for(let X=0,w=1;X<O-z;X++){let N=g?X+1+z:O-X,Y=1<<N,V=Y>>1,W=U>>N;for(let T=0;T<U;T+=Y)for(let u=0,f=w++;u<V;u++){let L=J?g?U-f:f:u*W,i=T+u,l=T+u+V,h=I[L],_=r[l],b=r[i];if(D){let g$=$.mul(_,h);r[i]=$.add(b,g$),r[l]=$.sub(b,g$)}else if(J)r[i]=$.add(_,b),r[l]=$.mul($.sub(_,b),h);else r[i]=$.add(b,_),r[l]=$.mul($.sub(b,_),h)}}if(!g&&G)Fq(r);return r}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=ng;function $z($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function oq($){return Uint8Array.from($)}function YU($,...v){let U=(g)=>typeof g==="number"?g:g.bytesLen,I=v.reduce((g,J)=>g+U(J),0);return{bytesLen:I,encode:(g)=>{let J=new Uint8Array(I);for(let z=0,G=0;z<v.length;z++){let O=v[z],D=U(O),r=typeof O==="number"?g[z]:O.encode(g[z]);if(q$(r,D,$),J.set(r,G),typeof O!=="number")r.fill(0);G+=D}return J},decode:(g)=>{q$(g,I,$);let J=[];for(let z of v){let G=U(z),O=g.subarray(0,G);J.push(typeof z==="number"?O:z.decode(O)),g=g.subarray(G)}return J}}}function vz($,v){let U=v*$.bytesLen;return{bytesLen:U,encode:(I)=>{if(I.length!==v)throw Error(`vecCoder.encode: wrong length=${I.length}. Expected: ${v}`);let g=new Uint8Array(U);for(let J=0,z=0;J<I.length;J++){let G=$.encode(I[J]);g.set(G,z),G.fill(0),z+=G.length}return g},decode:(I)=>{q$(I,U);let g=[];for(let J=0;J<I.length;J+=$.bytesLen)g.push($.decode(I.subarray(J,J+$.bytesLen)));return g}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let U of v)U.fill(0);else v.fill(0)}function G8($){return(1<<$)-1}var uA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var cq=($)=>{let{newPoly:v,N:U,Q:I,F:g,ROOT_OF_UNITY:J,brvBits:z,isKyber:G}=$,O=(u,f=I)=>{let L=u%f|0;return(L>=0?L|0:f+L|0)|0},D=(u,f=I)=>{let L=O(u,f)|0;return(L>f>>1?L-f|0:L)|0};function r(){let u=v(U);for(let f=0;f<U;f++){let L=J8(f,z),i=BigInt(J)**BigInt(L)%BigInt(I);u[f]=Number(i)|0}return u}let X=r(),w={add:(u,f)=>O((u|0)+(f|0))|0,sub:(u,f)=>O((u|0)-(f|0))|0,mul:(u,f)=>O((u|0)*(f|0))|0,inv:(u)=>{throw Error("not implemented")}},N={N:U,roots:X,invertButterflies:!0,skipStages:G?1:0,brp:!1},Y=z8(w,{dit:!1,...N}),V=z8(w,{dit:!0,...N});return{mod:O,smod:D,nttZetas:X,NTT:{encode:(u)=>{return Y(u)},decode:(u)=>{V(u);for(let f=0;f<u.length;f++)u[f]=O(g*u[f]);return u}},bitsCoder:(u,f)=>{let L=G8(u),i=u*(U/8);return{bytesLen:i,encode:(l)=>{let h=new Uint8Array(i);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=(f.encode(l[_])&L)<<g$,g$+=u;for(;g$>=8;g$-=8,b>>=8)h[S++]=b&G8(g$)}return h},decode:(l)=>{let h=v(U);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=l[_]<<g$,g$+=8;for(;g$>=u;g$-=u,b>>=u)h[S++]=f.decode(b&L)}return h}}}}},fM=($)=>(v,U)=>{if(!U)U=$.blockLen;let I=new Uint8Array(v.length+2);I.set(v);let g=v.length,J=new Uint8Array(U),z=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(D,r)=>{return I[g+0]=D,I[g+1]=r,z.destroy(),z=$.create({}).update(I),G++,()=>{return O++,z.xofInto(J)}},clean:()=>{z.destroy(),m$(J,I)}}},yq=fM(mq);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,Mg=3329,_M=3303,bM=17,{mod:w0,nttZetas:mM,NTT:WU,bitsCoder:FM}=cq({N:Jv,Q:Mg,F:_M,ROOT_OF_UNITY:bM,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),O8={512:{N:Jv,Q:Mg,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:Mg,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:Mg,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iM=($)=>{if($>=12)return{encode:(U)=>U,decode:(U)=>U};let v=2**($-1);return{encode:(U)=>((U<<$)+Mg/2)/Mg,decode:(U)=>U*Mg+v>>>$}},X0=($)=>FM($,iM($));function ZU($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]+v[U])}function xM($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]-v[U])}function oM($,v,U,I,g){let J=w0(v*I*g+$*U),z=w0($*I+v*U);return{c0:J,c1:z}}function gz($,v){for(let U=0;U<Jv/2;U++){let I=mM[64+(U>>1)];if(U&1)I=-I;let{c0:g,c1:J}=oM($[2*U+0],$[2*U+1],v[2*U+0],v[2*U+1],I);$[2*U+0]=g,$[2*U+1]=J}return $}function lq($){let v=new Uint16Array(Jv);for(let U=0;U<Jv;){let I=$();if(I.length%3)throw Error("SampleNTT: unaligned block");for(let g=0;U<Jv&&g+3<=I.length;g+=3){let J=(I[g+0]>>0|I[g+1]<<8)&4095,z=(I[g+1]>>4|I[g+2]<<4)&4095;if(J<Mg)v[U++]=J;if(U<Jv&&z<Mg)v[U++]=z}}return v}function N0($,v,U,I){let g=$(I*Jv/4,v,U),J=new Uint16Array(Jv),z=iJ(g),G=0;for(let O=0,D=0,r=0,X=0;O<z.length;O++){let w=z[O];for(let N=0;N<32;N++)if(r+=w&1,w>>=1,G+=1,G===I)X=r,r=0;else if(G===2*I)J[D++]=w0(X-r),r=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return J}var cM=($)=>{let{K:v,PRF:U,XOF:I,HASH512:g,ETA1:J,ETA2:z,du:G,dv:O}=$,D=X0(1),r=X0(O),X=X0(G),w=YU("publicKey",vz(X0(12),v),32),N=vz(X0(12),v),Y=YU("ciphertext",vz(X,v),r),V=YU("seed",32,32);return{secretCoder:N,lengths:{secretKey:N.bytesLen,publicKey:w.bytesLen,cipherText:Y.bytesLen},keygen:(W)=>{q$(W,32,"seed");let T=new Uint8Array(33);T.set(W),T[32]=v;let u=g(T),[f,L]=V.decode(u),i=[],l=[];for(let b=0;b<v;b++)i.push(WU.encode(N0(U,L,b,J)));let h=I(f);for(let b=0;b<v;b++){let g$=WU.encode(N0(U,L,v+b,J));for(let S=0;S<v;S++){let K=lq(h.get(S,b));ZU(g$,gz(K,i[S]))}l.push(g$)}h.clean();let _={publicKey:w.encode([l,f]),secretKey:N.encode(i)};return m$(f,L,i,l,T,u),_},encrypt:(W,T,u)=>{let[f,L]=w.decode(W),i=[];for(let S=0;S<v;S++)i.push(WU.encode(N0(U,u,S,J)));let l=I(L),h=new Uint16Array(Jv),_=[];for(let S=0;S<v;S++){let K=N0(U,u,v+S,z),k=new Uint16Array(Jv);for(let Z=0;Z<v;Z++){let M=lq(l.get(S,Z));ZU(k,gz(M,i[Z]))}ZU(K,WU.decode(k)),_.push(K),ZU(h,gz(f[S],i[S])),m$(k)}l.clean();let b=N0(U,u,2*v,z);ZU(b,WU.decode(h));let g$=D.decode(T);return ZU(g$,b),m$(f,i,h,b),Y.encode([_,g$])},decrypt:(W,T)=>{let[u,f]=Y.decode(W),L=N.decode(T),i=new Uint16Array(Jv);for(let l=0;l<v;l++)ZU(i,gz(L[l],WU.encode(u[l])));return xM(f,WU.decode(i)),m$(i,L,u),D.encode(f)}}};function D8($){let v=cM($),{HASH256:U,HASH512:I,KDF:g}=$,{secretCoder:J,lengths:z}=v,G=YU("secretKey",z.secretKey,z.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...z,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(r=ev(64))=>{q$(r,64,"seed");let{publicKey:X,secretKey:w}=v.keygen(r.subarray(0,32)),N=U(X),Y=G.encode([w,X,N,r.subarray(32)]);return m$(w,N),{publicKey:X,secretKey:Y}},getPublicKey:(r)=>{let[X,w,N,Y]=G.decode(r);return Uint8Array.from(w)},encapsulate:(r,X=ev(32))=>{q$(r,z.publicKey,"publicKey"),q$(X,32,"message");let w=r.subarray(0,384*$.K),N=J.encode(J.decode(oq(w)));if(!$z(N,w))throw m$(N),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(N);let Y=I.create().update(X).update(U(r)).digest(),V=v.encrypt(r,X,Y.subarray(32,64));return m$(Y.subarray(32)),{cipherText:V,sharedSecret:Y.subarray(0,32)}},decapsulate:(r,X)=>{q$(X,G.bytesLen,"secretKey"),q$(r,z.cipherText,"cipherText");let w=G.bytesLen-96,N=w+32,Y=U(X.subarray(w/2,N));if(!$z(Y,X.subarray(N,N+32)))throw Error("invalid secretKey: hash check failed");let[V,W,T,u]=G.decode(X),f=v.decrypt(r,V),L=I.create().update(f).update(T).digest(),i=L.subarray(0,32),l=v.encrypt(W,f,L.subarray(32,64)),h=$z(r,l),_=g.create({dkLen:32}).update(u).update(r).digest();return m$(f,l,!h?i:_),h?i:_}}}function yM($,v,U){return av.create({dkLen:$}).update(v).update(new Uint8Array([U])).digest()}var Q8={HASH256:qU,HASH512:_q,KDF:av,XOF:yq,PRF:yM},LA=D8({...Q8,...O8[512]}),q0=D8({...Q8,...O8[768]}),dq=D8({...Q8,...O8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lM($,v=!1){let{lengths:U,keygen:I}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");I=(z=ev(U.seed))=>{q$(z,U.seed,"seed");let G=J.isLE?bg(z):_g(z),O=J.toBytes(J.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:U.secretKey,publicKey:U.publicKey,seed:U.seed},keygen:I,getPublicKey:(g)=>$.getPublicKey(g)}}function r8($,v=!1){let U=lM($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...U.lengths,msg:U.lengths.seed,cipherText:U.lengths.publicKey},keygen:U.keygen,getPublicKey:U.getPublicKey,encapsulate(I,g=ev($.lengths.seed)){let J=this.keygen(g).secretKey,z=this.decapsulate(I,J),G=$.getPublicKey(J);return m$(J),{sharedSecret:z,cipherText:G}},decapsulate(I,g){let J=$.getSharedSecret(g,I);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function Y0($,v){return YU(v,...$.map((U)=>{if(typeof U.lengths[v]!=="number")throw Error("wrong length: "+v);return U.lengths[v]}))}function X8($){return(v,U)=>$(v,{dkLen:U})}function dM($,v,...U){let I=Y0(U,"seed"),g=Y0(U,"publicKey");if($===void 0)$=I.bytesLen;F$($);function J(z){q$(z,$);let G=I.decode(v(z,I.bytesLen)),O=U.map((X,w)=>X.keygen(G[w])),D=O.map((X)=>X.secretKey),r=O.map((X)=>X.publicKey);return{secretKey:D,publicKey:r}}return{info:{lengths:{seed:$,publicKey:g.bytesLen,secretKey:$}},getPublicKey(z){return this.keygen(z).publicKey},keygen(z=ev($)){let{publicKey:G,secretKey:O}=J(z),D=g.encode(G);return m$(G),m$(O),{secretKey:z,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function Uz($,v,U,I,...g){let J=dM($,U,...g),z=Y0(g,"cipherText"),G=Y0(g,"publicKey"),O=Y0(g,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:z.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,r=ev(O.bytesLen)){let X=G.decode(D),w=O.decode(r),N=g.map((T,u)=>T.encapsulate(X[u],w[u])),Y=N.map((T)=>T.sharedSecret),V=N.map((T)=>T.cipherText),W={sharedSecret:I(X,V,Y),cipherText:z.encode(V)};return m$(Y,V),W},decapsulate(D,r){let X=z.decode(D),{publicKey:w,secretKey:N}=J.expandDecapsulationKey(r),Y=g.map((V,W)=>V.decapsulate(X[W],N[W]));return I(w,X,Y)}}}function hq($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,X8(I),(J,z,G)=>g(_$(G[0],G[1],z[1],J[1],mg($))),v,U)}var yA=hq("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",q0,r8(g8,!0),av,qU),lA=hq("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",dq,r8(Hq,!0),av,qU);function hM($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,X8(I),(J,z,G)=>{let O=_$(G[0],G[1],z[0],J[0],z[1],J[1],mg($)),D=32,r=_$(mg("hybrid_prk"),O),X=Sq(g,r),w=_$(dU(32,2),mg("shared_secret"),mg("")),N=kq(g,X,w,32);return m$(X,w,r,O),N},v,U)}var pq=r8(Tq),dA=hM("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",q0,pq,av,eJ),pM=(()=>Uz(32,32,X8(av),($,v,U)=>qU(_$(U[0],U[1],v[1],$[1],mg("\\.//^\\"))),q0,pq))();function tM($,v,U,I){let g=$.Point.Fn;if(!g)throw Error("no Point.Fn");function J(z){let G;for(let r=0,X=v;;r=X,X+=v){if(X>z.length)throw Error("rejection sampling failed");if(G=g.fromBytes(z.subarray(r,X),!0),g.isValidNot0(G))break}let O=g.toBytes(g.create(G)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:U,seed:I,msg:I,cipherText:U},keygen(z=ev(I)){return q$(z,I,"seed"),J(z)},getPublicKey(z){return $.getPublicKey(z,!1)},encapsulate(z,G=ev(I)){q$(G,I,"rand");let{secretKey:O}=J(G),D=this.decapsulate(z,O),r=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:r}},decapsulate(z,G){return $.getSharedSecret(G,z).subarray(1)}}}function aM($,v,U,I){let{secretKey:g,publicKeyUncompressed:J}=U.lengths;if(!g||!J)throw Error("wrong curve");let z=tM(U,g,J,I),G=64,O=G+I;return Uz(32,32,(D)=>{q$(D,32);let r=av(D,{dkLen:O}),X=r.subarray(0,G),w=r.subarray(G,O);return _$(X,w)},(D,r,X)=>qU(_$(X[0],X[1],r[1],D[1],mg($))),v,z)}var eM=(()=>aM("MLKEM768-P256",q0,g8,128))();var Iz=pM,tq=eM;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=($,v,U)=>x$($,v,U),w8=n$,eU=SJ,h$=(...$)=>qO(...$),sU=($)=>yI($),$I=XO,vI=($)=>Xg($),zz=BigInt(0),N8=BigInt(1);function Rg($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw TypeError(U+"expected boolean, got type="+typeof $)}return $}function Gz($){if(typeof $==="bigint"){if(!Jz($))throw RangeError("positive bigint expected, got "+$)}else w8($);return $}function sv($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(U+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let U=v&&`"${v}" `;throw RangeError(U+"expected safe integer, got "+$)}}function W0($){let v=Gz($).toString(16);return v.length&1?"0"+v:v}function aq($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?zz:BigInt("0x"+$)}function VU($){return aq(SJ($))}function Fv($){return aq(SJ(cg(x$($)).reverse()))}function Oz($,v){if(n$(v),v===0)throw RangeError("zero length");$=Gz($);let U=$.toString(16);if(U.length>v*2)throw RangeError("number too large");return yI(U.padStart(v*2,"0"))}function Z0($,v){return Oz($,v).reverse()}function eq($,v){if($=T$($),v=T$(v),$.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function cg($){return Uint8Array.from(T$($))}function Dz($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw RangeError(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var Jz=($)=>typeof $==="bigint"&&zz<=$;function sM($,v,U){return Jz($)&&Jz(v)&&Jz(U)&&v<=$&&$<U}function ug($,v,U,I){if(!sM(v,U,I))throw RangeError("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function gI($){if($<zz)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>zz;$>>=N8,v+=1);return v}var V0=($)=>(N8<<BigInt($))-N8;function sq($,v,U){if(n$($,"hashLen"),n$(v,"qByteLen"),typeof U!=="function")throw TypeError("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),r=0,X=()=>{O.fill(1),D.fill(0),r=0},w=(...W)=>U(D,h$(O,...W)),N=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(r++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return h$(...T)};return(W,T)=>{X(),N(W);let u=void 0;while((u=T(Y()))===void 0)N();return X(),u}}function Lv($,v={},U={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function I(J,z,G){if(!G&&z!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw TypeError(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}var q8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),C$=BigInt(1),jU=BigInt(2),UY=BigInt(3),IY=BigInt(4),JY=BigInt(5),$7=BigInt(7),zY=BigInt(8),v7=BigInt(9),GY=BigInt(16);function B$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let U=$%v;return U>=p$?U:v+U}function nv($,v,U){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let I=$;while(v-- >p$)I*=I,I%=U;return I}function $Y($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let U=B$($,v),I=v,g=p$,J=C$,z=C$,G=p$;while(U!==p$){let D=I/U,r=I-U*D,X=g-z*D,w=J-G*D;I=U,U=r,g=z,J=G,z=X,G=w}if(I!==C$)throw Error("invert: does not exist");return B$(g,v)}function Y8($,v,U){let I=$;if(!I.eql(I.sqr(v),U))throw Error("Cannot find square root")}function OY($,v){let U=$,I=(U.ORDER+C$)/IY,g=U.pow(v,I);return Y8(U,g,v),g}function g7($,v){let U=$,I=(U.ORDER-JY)/zY,g=U.mul(v,jU),J=U.pow(g,I),z=U.mul(v,J),G=U.mul(U.mul(z,jU),J),O=U.mul(z,U.sub(G,U.ONE));return Y8(U,O,v),O}function U7($){let v=Qz($),U=DY($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+$7)/GY;return(G,O)=>{let D=G,r=D.pow(O,z),X=D.mul(r,I),w=D.mul(r,g),N=D.mul(r,J),Y=D.eql(D.sqr(X),O),V=D.eql(D.sqr(w),O);r=D.cmov(r,X,Y),X=D.cmov(N,w,V);let W=D.eql(D.sqr(X),O),T=D.cmov(r,X,W);return Y8(D,T,O),T}}function DY($){if($<UY)throw Error("sqrt is not defined for small field");let v=$-C$,U=0;while(v%jU===p$)v/=jU,U++;let I=jU,g=Qz($);while(vY(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return OY;let J=g.pow(I,v),z=(v+C$)/jU;return function(O,D){let r=O;if(r.is0(D))return D;if(vY(r,D)!==1)throw Error("Cannot find square root");let X=U,w=r.mul(r.ONE,J),N=r.pow(D,v),Y=r.pow(D,z);while(!r.eql(N,r.ONE)){if(r.is0(N))return r.ZERO;let V=1,W=r.sqr(N);while(!r.eql(W,r.ONE))if(V++,W=r.sqr(W),V===X)throw Error("Cannot find square root");let T=C$<<BigInt(X-V-1),u=r.pow(w,T);X=V,w=r.sqr(u),N=r.mul(N,w),Y=r.mul(Y,u)}return Y}}function I7($){if($%IY===UY)return OY;if($%zY===JY)return g7;if($%GY===v7)return U7($);return DY($)}var Kg=($,v)=>(B$($,v)&C$)===C$,J7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function W8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=J7.reduce((I,g)=>{return I[g]="function",I},v);if(Lv($,U),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function z7($,v,U){let I=$;if(U<p$)throw Error("invalid exponent, negatives unsupported");if(U===p$)return I.ONE;if(U===C$)return v;let g=I.ONE,J=v;while(U>p$){if(U&C$)g=I.mul(g,J);J=I.sqr(J),U>>=C$}return g}function j0($,v,U=!1){let I=$,g=Array(v.length).fill(U?I.ZERO:void 0),J=v.reduce((G,O,D)=>{if(I.is0(O))return G;return g[D]=G,I.mul(G,O)},I.ONE),z=I.inv(J);return v.reduceRight((G,O,D)=>{if(I.is0(O))return G;return g[D]=I.mul(G,g[D]),I.mul(G,O)},z),g}function vY($,v){let U=$,I=(U.ORDER-C$)/jU,g=U.pow(v,I),J=U.eql(g,U.ONE),z=U.eql(g,U.ZERO),G=U.eql(g,U.neg(U.ONE));if(!J&&!z&&!G)throw Error("invalid Legendre symbol result");return J?1:z?0:-1}function G7($,v){if(v!==void 0)w8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let U=gI($);if(v!==void 0&&v<U)throw Error(`invalid n length: expected bit length (${U}) >= n.length (${v})`);let I=v!==void 0?v:U,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}var gY=new WeakMap;class Z8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=C$;_lengths;_mod;constructor($,v={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=G7($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return B$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return B$($*$,this.ORDER)}add($,v){return B$($+v,this.ORDER)}sub($,v){return B$($-v,this.ORDER)}mul($,v){return B$($*v,this.ORDER)}pow($,v){return z7(this,$,v)}div($,v){return B$($*$Y(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return $Y($,this.ORDER)}sqrt($){let v=gY.get(this);if(!v)gY.set(this,v=I7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?Z0($,this.BYTES):Oz($,this.BYTES)}fromBytes($,v=!1){T$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if($.length<1||!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?Fv($):VU($);if(z)G=B$(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return j0(this,$)}cmov($,v,U){return Rg(U,"condition"),U?v:$}}Object.freeze(Z8.prototype);function Qz($,v={}){return new Z8($,v)}function QY($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let v=gI($-C$);return Math.ceil(v/8)}function V8($){let v=QY($);return v+Math.ceil(v/2)}function rY($,v,U=!1){T$($);let I=$.length,g=QY(v),J=Math.max(V8(v),16);if(I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?Fv($):VU($),G=B$(z,v-C$)+C$;return U?Z0(G,g):Oz(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UI=BigInt(0),MU=BigInt(1);function M0($,v){let U=v.negate();return $?U:v}function RU($,v){let U=j0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function qY($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function j8($,v){qY($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=V0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function XY($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=MU;let D=v*I,r=D+Math.abs(G)-1,X=G===0,w=G<0,N=v%2!==0;return{nextN:O,offset:r,isZero:X,isNeg:w,isNegF:N,offsetF:D}}var M8=new WeakMap,YY=new WeakMap;function R8($){return YY.get($)||1}function NY($){if($!==UI)throw Error("invalid wNAF")}class R0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>UI){if(v&MU)U=U.add(I);I=I.double(),v>>=MU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=j8(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=j8($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:r,isNegF:X,offsetF:w}=XY(U,z,J);if(U=G,D)g=g.add(M0(X,v[w]));else I=I.add(M0(r,v[O]))}return NY(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=j8($,this.bits);for(let J=0;J<g.windows;J++){if(U===UI)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=XY(U,J,g);if(U=z,O)continue;else{let r=v[G];I=I.add(D?r.negate():r)}}return NY(U),I}getPrecomputes($,v,U){let I=M8.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);M8.set(v,I)}}return I}cached($,v,U){let I=R8($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=R8($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){qY(v,this.bits),YY.set($,v),M8.delete($)}hasCache($){return R8($)!==1}}function WY($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>UI||I>UI){if(U&MU)J=J.add(g);if(I&MU)z=z.add(g);g=g.double(),U>>=MU,I>>=MU}return{p1:J,p2:z}}function wY($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return W8(v),v}else return Qz($,{isLE:U})}function rz($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>UI))throw Error(`CURVE.${O} must be positive bigint`)}let g=wY(v.p,U.Fp,I),J=wY(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function u0($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}function K0($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let U=Array.from({length:v}).fill(0);for(let I=v-1;I>=0;I--)U[I]=$&255,$>>>=8;return new Uint8Array(U)}function O7($,v){let U=new Uint8Array($.length);for(let I=0;I<$.length;I++)U[I]=$[I]^v[I];return U}function D7($){if(!$I($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?Dz($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function u8($,v,U,I){if(T$($),sv(U),v=D7(v),v.length>255)v=I(h$(Dz("H2C-OVERSIZE-DST-"),v));let{outputLen:g,blockLen:J}=I,z=Math.ceil(U/g);if(U>65535||z>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,K0(v.length,1)),O=new Uint8Array(J),D=K0(U,2),r=Array(z),X=I(h$(O,$,D,K0(0,1),G));r[0]=I(h$(X,K0(1,1),G));for(let N=1;N<z;N++){let Y=[O7(X,r[N-1]),K0(N+1,1),G];r[N]=I(h$(...Y))}return h$(...r).slice(0,U)}var ZY="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VY=($,v)=>($+($>=0?v:-v)/MY)/v;function Q7($,v,U){ug("scalar",$,$g,U);let[[I,g],[J,z]]=v,G=VY(z*$,U),O=VY(-g*$,U),D=$-G*I-O*J,r=-G*g-O*z,X=D<$g,w=r<$g;if(X)D=-D;if(w)r=-r;let N=V0(Math.ceil(gI(U)/2))+yg;if(D<$g||D>=N||r<$g||r>=N)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:X,k1:D,k2neg:w,k2:r}}function T8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function K8($,v){Lv($);let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if(Rg(U.lowS,"lowS"),Rg(U.prehash,"prehash"),U.format!==void 0)T8(U.format);return U}class jY extends Error{constructor($=""){super($)}}var iv={Err:jY,_tlv:{encode:($,v)=>{let{Err:U}=iv;if(sv($,"tag"),$<0||$>255)throw new U("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=W0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?W0(g.length/2|128):"";return W0($)+J+g+v},decode($,v){let{Err:U}=iv;v=T$(v,void 0,"DER data");let I=0;if($<0||$>255)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let r of D)z=z<<8|r;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=iv;if(Gz($),$<$g)throw new v("integer: negative integers are not allowed");let U=W0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=iv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return VU($)}},toSig($){let{Err:v,_int:U,_tlv:I}=iv,g=T$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:r}=I.decode(2,O);if(r.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=iv,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}};Object.freeze(iv._tlv);Object.freeze(iv._int);Object.freeze(iv);var $g=BigInt(0),yg=BigInt(1),MY=BigInt(2),Xz=BigInt(3),r7=BigInt(4);function RY($,v={}){let U=rz("weierstrass",$,v),I=U.Fp,g=U.Fn,J=U.CURVE,{h:z,n:G}=J;Lv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let r=KY(I,g);function X(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(S,K,k){if(D&&K.is0())return Uint8Array.of(0);let{x:Z,y:M}=K.toAffine(),j=I.toBytes(Z);if(Rg(k,"isCompressed"),k){X();let A=!I.isOdd(M);return h$(uY(A),j)}else return h$(Uint8Array.of(4),j,I.toBytes(M))}function N(S){T$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:k}=r,Z=S.length,M=S[0],j=S.subarray(1);if(D&&Z===1&&M===0)return{x:I.ZERO,y:I.ZERO};if(Z===K&&(M===2||M===3)){let A=I.fromBytes(j);if(!I.isValid(A))throw Error("bad point: is not on curve, wrong x");let R=W(A),E;try{E=I.sqrt(R)}catch(s){let J$=s instanceof Error?": "+s.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}X();let C=I.isOdd(E);if((M&1)===1!==C)E=I.neg(E);return{x:A,y:E}}else if(Z===k&&M===4){let A=I.BYTES,R=I.fromBytes(j.subarray(0,A)),E=I.fromBytes(j.subarray(A,A*2));if(!T(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${Z}, expected compressed=${K} or uncompressed=${k}`)}let Y=v.toBytes===void 0?w:v.toBytes,V=v.fromBytes===void 0?N:v.fromBytes;function W(S){let K=I.sqr(S),k=I.mul(K,S);return I.add(I.add(k,I.mul(S,J.a)),J.b)}function T(S,K){let k=I.sqr(K),Z=W(S);return I.eql(k,Z)}if(!T(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=I.mul(I.pow(J.a,Xz),r7),f=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(u,f)))throw Error("bad curve params: a or b");function L(S,K,k=!1){if(!I.isValid(K)||k&&I.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof _))throw Error("Weierstrass Point expected")}function l(S){if(!O||!O.basises)throw Error("no endo");return Q7(S,O.basises,g.ORDER)}function h(S,K,k,Z,M){return k=new _(I.mul(k.X,S),k.Y,k.Z),K=M0(Z,K),k=M0(M,k),K.add(k)}class _{static BASE=new _(J.Gx,J.Gy,I.ONE);static ZERO=new _(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(S,K,k){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",k),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:k}=S||{};if(!S||!I.isValid(K)||!I.isValid(k))throw Error("invalid affine point");if(S instanceof _)throw Error("projective point not allowed");if(I.is0(K)&&I.is0(k))return _.ZERO;return new _(K,k,I.ONE)}static fromBytes(S){let K=_.fromAffine(V(T$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return _.fromBytes(sU(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(g$.createCache(this,S),!K)this.multiply(Xz);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&I.is0(S.X)&&I.eql(S.Y,I.ONE)&&I.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:k}=S.toAffine();if(!I.isValid(K)||!I.isValid(k))throw Error("bad point: x or y not field elements");if(!T(K,k))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(S)}equals(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.eql(I.mul(K,A),I.mul(M,Z)),E=I.eql(I.mul(k,A),I.mul(j,Z));return R&&E}negate(){return new _(this.X,I.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,k=I.mul(K,Xz),{X:Z,Y:M,Z:j}=this,A=I.ZERO,R=I.ZERO,E=I.ZERO,C=I.mul(Z,Z),x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(Z,M);return J$=I.add(J$,J$),E=I.mul(Z,j),E=I.add(E,E),A=I.mul(S,E),R=I.mul(k,s),R=I.add(A,R),A=I.sub(x,R),R=I.add(x,R),R=I.mul(A,R),A=I.mul(J$,A),E=I.mul(k,E),s=I.mul(S,s),J$=I.sub(C,s),J$=I.mul(S,J$),J$=I.add(J$,E),E=I.add(C,C),C=I.add(E,C),C=I.add(C,s),C=I.mul(C,J$),R=I.add(R,C),s=I.mul(M,j),s=I.add(s,s),C=I.mul(s,J$),A=I.sub(A,C),E=I.mul(s,x),E=I.add(E,E),E=I.add(E,E),new _(A,R,E)}add(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=J.a,s=I.mul(J.b,Xz),J$=I.mul(K,M),G$=I.mul(k,j),Q$=I.mul(Z,A),N$=I.add(K,k),r$=I.add(M,j);N$=I.mul(N$,r$),r$=I.add(J$,G$),N$=I.sub(N$,r$),r$=I.add(K,Z);let X$=I.add(M,A);return r$=I.mul(r$,X$),X$=I.add(J$,Q$),r$=I.sub(r$,X$),X$=I.add(k,Z),R=I.add(j,A),X$=I.mul(X$,R),R=I.add(G$,Q$),X$=I.sub(X$,R),C=I.mul(x,r$),R=I.mul(s,Q$),C=I.add(R,C),R=I.sub(G$,C),C=I.add(G$,C),E=I.mul(R,C),G$=I.add(J$,J$),G$=I.add(G$,J$),Q$=I.mul(x,Q$),r$=I.mul(s,r$),G$=I.add(G$,Q$),Q$=I.sub(J$,Q$),Q$=I.mul(x,Q$),r$=I.add(r$,Q$),J$=I.mul(G$,r$),E=I.add(E,J$),J$=I.mul(X$,r$),R=I.mul(N$,R),R=I.sub(R,J$),J$=I.mul(N$,G$),C=I.mul(X$,C),C=I.add(C,J$),new _(R,E,C)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(_.ZERO)}multiply(S){let{endo:K}=v;if(!g.isValidNot0(S))throw RangeError("invalid scalar: out of range");let k,Z,M=(j)=>g$.cached(this,j,(A)=>RU(_,A));if(K){let{k1neg:j,k1:A,k2neg:R,k2:E}=l(S),{p:C,f:x}=M(A),{p:s,f:J$}=M(E);Z=x.add(J$),k=h(K.beta,C,s,j,R)}else{let{p:j,f:A}=M(S);k=j,Z=A}return RU(_,[k,Z])[0]}multiplyUnsafe(S){let{endo:K}=v,k=this,Z=S;if(!g.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===$g||k.is0())return _.ZERO;if(Z===yg)return k;if(g$.hasCache(this))return this.multiply(Z);if(K){let{k1neg:M,k1:j,k2neg:A,k2:R}=l(Z),{p1:E,p2:C}=WY(_,k,j,R);return h(K.beta,E,C,M,A)}else return g$.unsafe(k,Z)}toAffine(S){let K=this,k=S,{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(z===yg)return!0;if(S)return S(_,this);return g$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:S}=v;if(z===yg)return this;if(S)return S(_,this);return this.multiplyUnsafe(z)}isSmallOrder(){if(z===yg)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return Rg(S,"isCompressed"),this.assertValidity(),Y(_,this,S)}toHex(S=!0){return eU(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=g.BITS,g$=new R0(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function uY($){return Uint8Array.of($?2:3)}function KY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function X7($,v={}){let{Fn:U}=$,I=v.randomBytes===void 0?vI:v.randomBytes,g=Object.assign(KY($.Fp,U),{seed:Math.max(V8(U.ORDER),16)});function J(N){try{let Y=U.fromBytes(N);return U.isValidNot0(Y)}catch(Y){return!1}}function z(N,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=N.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(N)}catch(T){return!1}}function G(N){return N=N===void 0?I(g.seed):N,rY(T$(N,g.seed,"seed"),U.ORDER)}function O(N,Y=!0){return $.BASE.multiply(U.fromBytes(N)).toBytes(Y)}function D(N){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g,T=U._lengths;if(!$I(N))return;let u=T$(N,void 0,"key").length,f=u===V||u===W,L=u===Y||!!T?.includes(u);if(f&&L)return;return f}function r(N,Y,V=!0){if(D(N)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(N);return $.fromBytes(Y).multiply(W).toBytes(V)}let X={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=u0(G,O);return Object.freeze(X),Object.freeze(g),Object.freeze({getPublicKey:O,getSharedSecret:r,keygen:w,Point:$,utils:X,lengths:g})}function TY($,v,U={}){let I=v;rg(I),Lv(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let g=U.randomBytes===void 0?vI:U.randomBytes,J=U.hmac===void 0?(M,j)=>dv(I,M,j):U.hmac,{Fp:z,Fn:G}=$,{ORDER:O,BITS:D}=G,{keygen:r,getPublicKey:X,getSharedSecret:w,utils:N,lengths:Y}=X7($,U),V={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},W=O*MY+yg<z.ORDER;function T(M){let j=O>>yg;return M>j}function u(M,j){if(!G.isValidNot0(j))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return j}function f(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(M,j){T8(j);let A=Y.signature,R=j==="compact"?A:j==="recovered"?A+1:void 0;return T$(M,R)}class i{r;s;recovery;constructor(M,j,A){if(this.r=u("r",M),this.s=u("s",j),A!=null){if(f(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(M,j=V.format){L(M,j);let A;if(j==="der"){let{r:x,s}=iv.toSig(T$(M));return new i(x,s)}if(j==="recovered")A=M[0],j="compact",M=M.subarray(1);let R=Y.signature/2,E=M.subarray(0,R),C=M.subarray(R,R*2);return new i(G.fromBytes(E),G.fromBytes(C),A)}static fromHex(M,j){return this.fromBytes(sU(M),j)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new i(this.r,this.s,M)}recoverPublicKey(M){let{r:j,s:A}=this,R=this.assertRecovery(),E=R===2||R===3?j+O:j;if(!z.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let C=z.toBytes(E),x=$.fromBytes(h$(uY((R&1)===0),C)),s=G.inv(E),J$=h(T$(M,void 0,"msgHash")),G$=G.create(-J$*s),Q$=G.create(A*s),N$=$.BASE.multiplyUnsafe(G$).add(x.multiplyUnsafe(Q$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return T(this.s)}toBytes(M=V.format){if(T8(M),M==="der")return sU(iv.hexFromSig(this));let{r:j,s:A}=this,R=G.toBytes(j),E=G.toBytes(A);if(M==="recovered")return f(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(M){return eU(this.toBytes(M))}}Object.freeze(i.prototype),Object.freeze(i);let l=U.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let A=VU(j),R=j.length*8-D;return R>0?A>>BigInt(R):A}:U.bits2int,h=U.bits2int_modN===void 0?function(j){return G.create(l(j))}:U.bits2int_modN,_=V0(D);function b(M){return ug("num < 2^"+D,M,$g,_),G.toBytes(M)}function g$(M,j){return T$(M,void 0,"message"),j?T$(I(M),void 0,"prehashed message"):M}function S(M,j,A){let{lowS:R,prehash:E,extraEntropy:C}=K8(A,V);M=g$(M,E);let x=h(M),s=G.fromBytes(j);if(!G.isValidNot0(s))throw Error("invalid private key");let J$=[b(s),b(x)];if(C!=null&&C!==!1){let r$=C===!0?g(Y.secretKey):C;J$.push(T$(r$,void 0,"extraEntropy"))}let G$=h$(...J$),Q$=x;function N$(r$){let X$=l(r$);if(!G.isValidNot0(X$))return;let W$=G.inv(X$),k$=$.BASE.multiply(X$).toAffine(),E$=G.create(k$.x);if(E$===$g)return;let a$=G.create(W$*G.create(Q$+E$*s));if(a$===$g)return;let e$=(k$.x===E$?0:2)|Number(k$.y&yg),Wv=a$;if(R&&T(a$))Wv=G.neg(a$),e$^=1;return new i(E$,Wv,W?void 0:e$)}return{seed:G$,k2sig:N$}}function K(M,j,A={}){let{seed:R,k2sig:E}=S(M,j,A);return sq(I.outputLen,G.BYTES,J)(R,E).toBytes(A.format)}function k(M,j,A,R={}){let{lowS:E,prehash:C,format:x}=K8(R,V);if(A=T$(A,void 0,"publicKey"),j=g$(j,C),!$I(M)){let s=M instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+s)}L(M,x);try{let s=i.fromBytes(M,x),J$=$.fromBytes(A);if(E&&s.hasHighS())return!1;let{r:G$,s:Q$}=s,N$=h(j),r$=G.inv(Q$),X$=G.create(N$*r$),W$=G.create(G$*r$),k$=$.BASE.multiplyUnsafe(X$).add(J$.multiplyUnsafe(W$));if(k$.is0())return!1;return G.create(k$.x)===G$}catch(s){return!1}}function Z(M,j,A={}){let{prehash:R}=K8(A,V);return j=g$(j,R),i.fromBytes(M,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:r,getPublicKey:X,getSharedSecret:w,utils:N,lengths:Y,Point:$,sign:K,verify:k,recoverPublicKey:Z,Signature:i,hash:I})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var N7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var w7=RY(N7),II=TY(w7,f$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lg=BigInt(0),Vv=BigInt(1),H8=BigInt(2),q7=BigInt(8);function Y7($,v,U,I){let g=$.sqr(U),J=$.sqr(I),z=$.add($.mul(v.a,g),J),G=$.add($.ONE,$.mul(v.d,$.mul(g,J)));return $.eql(z,G)}function HY($,v={}){let U=v,I=rz("edwards",$,U,U.FpFnLE),{Fp:g,Fn:J}=I,z=I.CURVE,{h:G}=z;Lv(U,{},{uvRatio:"function"});let O=H8<<BigInt(J.BYTES*8)-Vv,D=(V)=>g.create(V),r=U.uvRatio===void 0?(V,W)=>{try{return{isValid:!0,value:g.sqrt(g.div(V,W))}}catch(T){return{isValid:!1,value:lg}}}:U.uvRatio;if(!Y7(g,z,z.Gx,z.Gy))throw Error("bad curve params: generator point");function X(V,W,T=!1){let u=T?Vv:lg;return ug("coordinate "+V,W,u,O),W}function w(V){if(!(V instanceof N))throw Error("EdwardsPoint expected")}class N{static BASE=new N(z.Gx,z.Gy,Vv,D(z.Gx*z.Gy));static ZERO=new N(lg,Vv,Vv,lg);static Fp=g;static Fn=J;X;Y;Z;T;constructor(V,W,T,u){this.X=X("x",V),this.Y=X("y",W),this.Z=X("z",T,!0),this.T=X("t",u),Object.freeze(this)}static CURVE(){return z}static fromAffine(V){if(V instanceof N)throw Error("extended point not allowed");let{x:W,y:T}=V||{};return X("x",W),X("y",T),new N(W,T,Vv,D(W*T))}static fromBytes(V,W=!1){let T=g.BYTES,{a:u,d:f}=z;V=cg(T$(V,T,"point")),Rg(W,"zip215");let L=cg(V),i=V[T-1];L[T-1]=i&-129;let l=Fv(L),h=W?O:g.ORDER;ug("point.y",l,lg,h);let _=D(l*l),b=D(_-Vv),g$=D(f*_-u),{isValid:S,value:K}=r(b,g$);if(!S)throw Error("bad point: invalid y coordinate");let k=(K&Vv)===Vv,Z=(i&128)!==0;if(!W&&K===lg&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==k)K=D(-K);return N.fromAffine({x:K,y:l})}static fromHex(V,W=!1){return N.fromBytes(sU(V),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,W=!0){if(Y.createCache(this,V),!W)this.multiply(H8);return this}assertValidity(){let V=this,{a:W,d:T}=z;if(V.is0())throw Error("bad point: ZERO");let{X:u,Y:f,Z:L,T:i}=V,l=D(u*u),h=D(f*f),_=D(L*L),b=D(_*_),g$=D(l*W),S=D(_*D(g$+h)),K=D(b+D(T*D(l*h)));if(S!==K)throw Error("bad point: equation left != right (1)");let k=D(u*f),Z=D(L*i);if(k!==Z)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:W,Y:T,Z:u}=this,{X:f,Y:L,Z:i}=V,l=D(W*i),h=D(f*u),_=D(T*i),b=D(L*u);return l===h&&_===b}is0(){return this.equals(N.ZERO)}negate(){return new N(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=z,{X:W,Y:T,Z:u}=this,f=D(W*W),L=D(T*T),i=D(H8*D(u*u)),l=D(V*f),h=W+T,_=D(D(h*h)-f-L),b=l+L,g$=b-i,S=l-L,K=D(_*g$),k=D(b*S),Z=D(_*S),M=D(g$*b);return new N(K,k,M,Z)}add(V){w(V);let{a:W,d:T}=z,{X:u,Y:f,Z:L,T:i}=this,{X:l,Y:h,Z:_,T:b}=V,g$=D(u*l),S=D(f*h),K=D(i*T*b),k=D(L*_),Z=D((u+f)*(l+h)-g$-S),M=k-K,j=k+K,A=D(S-W*g$),R=D(Z*M),E=D(j*A),C=D(Z*A),x=D(M*j);return new N(R,E,x,C)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!J.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:T}=Y.cached(this,V,(u)=>RU(N,u));return RU(N,[W,T])[0]}multiplyUnsafe(V){if(!J.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===lg)return N.ZERO;if(this.is0()||V===Vv)return this;return Y.unsafe(this,V,(W)=>RU(N,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Y.unsafe(this,z.n).is0()}toAffine(V){let W=this,T=V,{X:u,Y:f,Z:L}=W,i=W.is0();if(T==null)T=i?q7:g.inv(L);let l=D(u*T),h=D(f*T),_=g.mul(L,T);if(i)return{x:lg,y:Vv};if(_!==Vv)throw Error("invZ was invalid");return{x:l,y:h}}clearCofactor(){if(G===Vv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:V,y:W}=this.toAffine(),T=g.toBytes(W);return T[T.length-1]|=V&Vv?128:0,T}toHex(){return eU(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Y=new R0(N,J.BITS);if(J.BITS>=8)N.BASE.precompute(8);return Object.freeze(N.prototype),Object.freeze(N),N}class A8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){q8()}static fromHex($){q8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eU(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),JI=BigInt(1),Nz=BigInt(2);function W7($){return Lv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function AY($){let v=W7($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z===void 0?vI:z,D=G?255:448,r=G?32:56,X=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),N=G?Nz**BigInt(254):Nz**BigInt(447),Y=G?BigInt(8)*Nz**BigInt(251)-JI:BigInt(4)*Nz**BigInt(445)-JI,V=N+Y+JI,W=(Z)=>B$(Z,U),T=u(X);function u(Z){return Z0(W(Z),r)}function f(Z){let M=cg(T$(Z,r,"uCoordinate"));if(G)M[31]&=127;return W(Fv(M))}function L(Z){return Fv(g(cg(T$(Z,r,"scalar"))))}function i(Z,M){let j=g$(f(M),L(Z));if(j===T0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){ug("u",Z,T0,U),ug("scalar",M,N,V);let j=M,A=Z,R=JI,E=T0,C=Z,x=JI,s=T0;for(let G$=BigInt(D-1);G$>=T0;G$--){let Q$=j>>G$&JI;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let N$=R+E,r$=W(N$*N$),X$=R-E,W$=W(X$*X$),k$=r$-W$,E$=C+x,a$=C-x,e$=W(a$*N$),Wv=W(E$*X$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(r$*W$),E=W(k$*(r$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:r,publicKey:r,seed:r},K=(Z)=>{return Z=Z===void 0?O(r):Z,T$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze(S),Object.freeze(k),Object.freeze({keygen:u0(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z7=BigInt(0),Tg=BigInt(1),SY=BigInt(2),V7=BigInt(3),j7=BigInt(5),M7=BigInt(8),KU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),E8=(()=>({p:KU,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:M7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function EY($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=KU,G=$*$%J*$%J,O=nv(G,SY,J)*G%J,D=nv(O,Tg,J)*$%J,r=nv(D,j7,J)*D%J,X=nv(r,v,J)*r%J,w=nv(X,U,J)*X%J,N=nv(w,I,J)*w%J,Y=nv(N,g,J)*N%J,V=nv(Y,g,J)*N%J,W=nv(V,v,J)*r%J;return{pow_p_5_8:nv(W,SY,J)*$%J,b2:G}}function R7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var S8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function B8($,v){let U=KU,I=B$(v*v*v,U),g=B$(I*I*v,U),J=EY($*g).pow_p_5_8,z=B$($*I*J,U),G=B$(v*z*z,U),O=z,D=B$(z*S8,U),r=G===$,X=G===B$(-$,U),w=G===B$(-$*S8,U);if(r)z=O;if(X||w)z=D;if(Kg(z,U))z=B$(-z,U);return{isValid:r||X,value:z}}var uU=HY(E8,{uvRatio:B8}),dg=(()=>uU.Fp)(),BY=(()=>uU.Fn)();var wz=(()=>{let $=KU;return AY({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=EY(v);return B$(nv(U,V7,$)*I,$)},adjustScalarBytes:R7})})();var k8=S8,u7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),K7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),T7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),H7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),kY=($)=>B8(Tg,$),A7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),P8=($)=>dg.create(Fv($)&A7);function PY($){let{d:v}=E8,U=KU,I=(T)=>dg.create(T),g=I(k8*$*$),J=I((g+Tg)*T7),z=BigInt(-1),G=I((z-v*g)*I(g+v)),{isValid:O,value:D}=B8(J,G),r=I(D*$);if(!Kg(r,U))r=I(-r);if(!O)D=r;if(!O)z=g;let X=I(z*(g-Tg)*H7-G),w=D*D,N=I((D+D)*G),Y=I(X*u7),V=I(Tg-w),W=I(Tg+w);return new uU(I(N*W),I(V*Y),I(Y*W),I(N*V))}class rv extends A8{static BASE=(()=>new rv(uU.BASE))();static ZERO=(()=>new rv(uU.ZERO))();static Fp=(()=>dg)();static Fn=(()=>BY)();constructor($){super($)}static fromAffine($){return new rv(uU.fromAffine($))}assertSame($){if(!($ instanceof rv))throw Error("RistrettoPoint expected")}init($){return new rv($)}static fromBytes($){x$($,32);let{a:v,d:U}=E8,I=KU,g=(f)=>dg.create(f),J=P8($);if(!eq(dg.toBytes(J),$)||Kg(J,I))throw Error("invalid ristretto255 encoding 1");let z=g(J*J),G=g(Tg+v*z),O=g(Tg-v*z),D=g(G*G),r=g(O*O),X=g(v*U*D-r),{isValid:w,value:N}=kY(g(X*r)),Y=g(N*O),V=g(N*Y*X),W=g((J+J)*Y);if(Kg(W,I))W=g(-W);let T=g(G*V),u=g(W*T);if(!w||Kg(u,I)||T===Z7)throw Error("invalid ristretto255 encoding 2");return new rv(new uU(W,T,Tg,u))}static fromHex($){return rv.fromBytes(yI($))}toBytes(){let{X:$,Y:v,Z:U,T:I}=this.ep,g=KU,J=(V)=>dg.create(V),z=J(J(U+v)*J(U-v)),G=J($*v),O=J(G*G),{value:D}=kY(J(z*O)),r=J(D*z),X=J(D*G),w=J(r*X*I),N;if(Kg(I*w,g)){let V=J(v*k8),W=J($*k8);$=V,v=W,N=J(r*K7)}else N=X;if(Kg($*w,g))v=J(-v);let Y=J((U-v)*N);if(Kg(Y,g))Y=J(-Y);return dg.toBytes(Y)}equals($){this.assertSame($);let{X:v,Y:U}=this.ep,{X:I,Y:g}=$.ep,J=(O)=>dg.create(O),z=J(v*g)===J(U*I),G=J(U*g)===J(v*I);return z||G}is0(){return this.equals(rv.ZERO)}}Object.freeze(rv.BASE);Object.freeze(rv.ZERO);Object.freeze(rv.prototype);Object.freeze(rv);var S7=Object.freeze({Point:rv,hashToCurve($,v){let U=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,I=u8($,U,64,BJ);return S7.deriveToCurve(I)},hashToScalar($,v={DST:ZY}){let U=u8($,v.DST,64,BJ);return BY.create(Fv(U))},deriveToCurve($){x$($,64);let v=P8($.subarray(0,32)),U=PY(v),I=P8($.subarray(32,64)),g=PY(I);return new rv(U.add(g))}});var CY=!1,k7=!1;async function LY($,v){if(k7)return await v();try{return await $()}catch(U){if(U instanceof ReferenceError||U instanceof DOMException&&U.name==="NotSupportedError")return await v();else throw U}}async function qz($,v){return await LY(async()=>{let U=C8($)?$:await E7($),I=await crypto.subtle.importKey("raw",B7(v),{name:"X25519"},CY,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:I},U,256))},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMult($,v)})}async function H0($){return await LY(async()=>{return qz($,wz.GuBytes)},()=>{if(C8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMultBase($)})}var P7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function E7($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...P7,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},CY,["deriveBits"])}function C8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function B7($){return $}class L8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),L7(TU($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let U=await this.s.read();if(U.done)return this.buf=TU($),null;this.buf=U.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:TU(this.transcript)}}}function L7($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function TU($){let v=$.reduce((g,J)=>g+J.length,0),U=new Uint8Array(v),I=0;for(let g of $)U.set(g,I),I+=g.length;return U}function zI($,...v){return $.pipeThrough(new TransformStream({start(U){for(let I of v)U.enqueue(I)}}))}function Yz($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function n8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function nY($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function fY($,v){let U=$.getReader(),I=[],g=0;while(g<v){let{done:O,value:D}=await U.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");I.push(D),g+=D.length}U.releaseLock();let J=TU(I),z=J.subarray(0,v),G=zI($,J.subarray(v));return{data:z,rest:G}}class vg{args;body;constructor($,v){this.args=$,this.body=v}}async function n7($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let U=v.split(" ");if(U.length<2||U.shift()!=="->")return{next:v};for(let J of U)if(J.length===0)throw Error("invalid stanza");let I=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let z=vv.decode(J);if(z.length>48)throw Error("invalid stanza");if(I.push(z),z.length<48)break}let g=TU(I);return{s:new vg(U,g)}}async function _Y($){let v=new L8($),U=await v.readLine();if(U!=="age-encryption.org/v1")throw Error("invalid version "+(U??"line"));let I=[];for(;;){let{s:g,next:J}=await n7(v);if(g!==void 0){I.push(g);continue}if(!J.startsWith("--- "))throw Error("invalid header");let z=vv.decode(J.slice(4)),{rest:G,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:I,headerNoMAC:D,MAC:z,headerSize:O.length,rest:zI($,G)}}}function f8($){let v=[];v.push(`age-encryption.org/v1
 `);for(let U of $){v.push("-> "+U.args.join(" ")+`
 `);for(let I=0;I<U.body.length;I+=48){let g=I+48;if(g>U.body.length)g=U.body.length;v.push(vv.encode(U.body.subarray(I,g))+`
 `)}if(U.body.length%48===0)v.push(`

package/dist/index.js CHANGED Viewed

@@ -3,7 +3,7 @@ var tv=Object.create;var{getPrototypeOf:sv,defineProperty:h8,getOwnPropertyNames
 `).join(`
 `+G),$.push(g+"m+"+EN.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=vP()+U+" "+$[0]}function vP(){if(l7.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function KP(...$){return process.stderr.write(SN.formatWithOptions(l7.inspectOpts,...$)+`
 `)}function AP($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function HP(){return process.env.DEBUG}function TP($){$.inspectOpts={};let U=Object.keys(l7.inspectOpts);for(let J=0;J<U.length;J++)$.inspectOpts[U[J]]=l7.inspectOpts[U[J]]}EN.exports=h9()(l7);var{formatters:h7}=EN.exports;h7.o=function($){return this.inspectOpts.colors=this.useColors,SN.inspect($,this.inspectOpts).split(`
-`).map((U)=>U.trim()).join(" ")};h7.O=function($){return this.inspectOpts.colors=this.useColors,SN.inspect($,this.inspectOpts)}});var c7=s0((Ki,p9)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)p9.exports=k7();else p9.exports=p7()});var nM=s0((an,lM)=>{var kN=Object.prototype.hasOwnProperty,hM=Object.prototype.toString,kM=Object.defineProperty,mM=Object.getOwnPropertyDescriptor,xM=function(U){if(typeof Array.isArray==="function")return Array.isArray(U);return hM.call(U)==="[object Array]"},yM=function(U){if(!U||hM.call(U)!=="[object Object]")return!1;var J=kN.call(U,"constructor"),I=U.constructor&&U.constructor.prototype&&kN.call(U.constructor.prototype,"isPrototypeOf");if(U.constructor&&!J&&!I)return!1;var g;for(g in U);return typeof g>"u"||kN.call(U,g)},fM=function(U,J){if(kM&&J.name==="__proto__")kM(U,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else U[J.name]=J.newValue},iM=function(U,J){if(J==="__proto__"){if(!kN.call(U,J))return;else if(mM)return mM(U,J).value}return U[J]};lM.exports=function $(){var U,J,I,g,G,q,D=arguments[0],N=1,Q=arguments.length,O=!1;if(typeof D==="boolean")O=D,D=arguments[1]||{},N=2;if(D==null||typeof D!=="object"&&typeof D!=="function")D={};for(;N<Q;++N)if(U=arguments[N],U!=null){for(J in U)if(I=iM(D,J),g=iM(U,J),D!==g){if(O&&g&&(yM(g)||(G=xM(g)))){if(G)G=!1,q=I&&xM(I)?I:[];else q=I&&yM(I)?I:{};fM(D,{name:J,newValue:$(O,q,g)})}else if(typeof g<"u")fM(D,{name:J,newValue:g})}}return D}});import{access as xT,chmod as M9,mkdir as yz,readFile as iz,writeFile as fz}from"fs/promises";import{dirname as yT,join as v9}from"path";import{fileURLToPath as fT}from"url";var Lq={name:"@rizom/ops",version:"0.2.0-alpha.229",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var bR=`ARG BUN_VERSION=1.3.10
+`).map((U)=>U.trim()).join(" ")};h7.O=function($){return this.inspectOpts.colors=this.useColors,SN.inspect($,this.inspectOpts)}});var c7=s0((Ki,p9)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)p9.exports=k7();else p9.exports=p7()});var nM=s0((an,lM)=>{var kN=Object.prototype.hasOwnProperty,hM=Object.prototype.toString,kM=Object.defineProperty,mM=Object.getOwnPropertyDescriptor,xM=function(U){if(typeof Array.isArray==="function")return Array.isArray(U);return hM.call(U)==="[object Array]"},yM=function(U){if(!U||hM.call(U)!=="[object Object]")return!1;var J=kN.call(U,"constructor"),I=U.constructor&&U.constructor.prototype&&kN.call(U.constructor.prototype,"isPrototypeOf");if(U.constructor&&!J&&!I)return!1;var g;for(g in U);return typeof g>"u"||kN.call(U,g)},fM=function(U,J){if(kM&&J.name==="__proto__")kM(U,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else U[J.name]=J.newValue},iM=function(U,J){if(J==="__proto__"){if(!kN.call(U,J))return;else if(mM)return mM(U,J).value}return U[J]};lM.exports=function $(){var U,J,I,g,G,q,D=arguments[0],N=1,Q=arguments.length,O=!1;if(typeof D==="boolean")O=D,D=arguments[1]||{},N=2;if(D==null||typeof D!=="object"&&typeof D!=="function")D={};for(;N<Q;++N)if(U=arguments[N],U!=null){for(J in U)if(I=iM(D,J),g=iM(U,J),D!==g){if(O&&g&&(yM(g)||(G=xM(g)))){if(G)G=!1,q=I&&xM(I)?I:[];else q=I&&yM(I)?I:{};fM(D,{name:J,newValue:$(O,q,g)})}else if(typeof g<"u")fM(D,{name:J,newValue:g})}}return D}});import{access as xT,chmod as M9,mkdir as yz,readFile as iz,writeFile as fz}from"fs/promises";import{dirname as yT,join as v9}from"path";import{fileURLToPath as fT}from"url";var Lq={name:"@rizom/ops",version:"0.2.0-alpha.230",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var bR=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.229",
+  "version": "0.2.0-alpha.230",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",