npm - @rizom/ops - Versions diffs - 0.2.0-alpha.237 → 0.2.0-alpha.238 - Mend

@rizom/ops 0.2.0-alpha.237 → 0.2.0-alpha.238

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-var Jj=Object.defineProperty;var zj=($)=>$;function Gj($,v){this[$]=zj.bind(null,v)}var lv=($,v)=>{for(var U in v)Jj($,U,{get:v[U],enumerable:!0,configurable:!0,set:Gj.bind(v,U)})};import{parseArgs as Oj}from"util";var Dj={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function NO($,v){let U=$[v];return typeof U==="boolean"?U:void 0}function KJ($,v){let U=$[v];return typeof U==="string"?U:void 0}function xr($){let{values:v,positionals:U}=Oj({args:$,options:Dj,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:U[0]??"help",args:U.slice(1),flags:{help:NO(v,"help"),version:NO(v,"version"),dryRun:NO(v,"dry-run"),pushTo:KJ(v,"push-to"),cohort:KJ(v,"cohort"),anchorId:KJ(v,"anchor-id"),handle:KJ(v,"handle")}}}var TJ={name:"@rizom/ops",version:"0.2.0-alpha.237",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as l7,mkdirSync as d7,readFileSync as $D,writeFileSync as vD}from"fs";import{dirname as h7,join as lY}from"path";function rO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function f$($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(`${U}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw RangeError(`${U}expected integer >= 0, got ${$}`)}}function x$($,v,U=""){let I=rO($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function Xg($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(f$($.outputLen),f$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function FU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function HJ($,v){x$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw RangeError('"digestInto() output" expected to be of length >='+U)}function AJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iU($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var Xj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Nj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function rj($){for(let v=0;v<$.length;v++)$[v]=Nj($[v]);return $}var wO=Xj?($)=>$:rj,cr=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),wj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function SJ($){if(x$($),cr)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=wj[$[U]];return v}var Qg={_0:48,_9:57,A:65,F:70,a:97,f:102};function or($){if($>=Qg._0&&$<=Qg._9)return $-Qg._0;if($>=Qg.A&&$<=Qg.F)return $-(Qg.A-10);if($>=Qg.a&&$<=Qg.f)return $-(Qg.a-10);return}function yI($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(cr)try{return Uint8Array.fromHex($)}catch(g){if(g instanceof SyntaxError)throw RangeError(g.message);throw g}let v=$.length,U=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=or($.charCodeAt(J)),G=or($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function qj($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function qO($,v=""){if(typeof $==="string")return qj($);return x$($,void 0,v)}function YO(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];x$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function kJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function WO($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.canXOF=I.canXOF,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function Ng($=32){f$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var ZO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Xg($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Ov(I)}update($){return FU(this),this.iHash.update($),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,U,I)=>new VO(v,U).update(I).digest();return $.create=(v,U)=>new VO(v,U),$})();function lI($,v,U){if(Xg($),U===void 0)U=new Uint8Array($.outputLen);return dv($,U,v)}var jO=Uint8Array.of(0),yr=Uint8Array.of();function MO($,v,U,I=32){Xg($),f$(I,"length"),x$(v,void 0,"prk");let g=$.outputLen;if(v.length<g)throw Error('"prk" must be at least HashLen octets');if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=yr;else x$(U,void 0,"info");let z=new Uint8Array(J*g),G=dv.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)jO[0]=X+1,O.update(X===0?yr:D).update(U).update(jO).digestInto(D),z.set(D,g*X),G._cloneInto(O);return G.destroy(),O.destroy(),Ov(D,jO),z.slice(0,I)}var Eg=($,v,U,I,g)=>MO($,lI($,v,U),I,g);function lr($,v,U){return $&v^~$&U}function dr($,v,U){return $&v^$&U^v&U}class PJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iU(this.buffer)}update($){FU(this),x$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=iU($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Ov(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=iU($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var rg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),wg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),o$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EJ=BigInt(4294967295),hr=BigInt(32);function Yj($,v=!1){if(v)return{h:Number($&EJ),l:Number($>>hr&EJ)};return{h:Number($>>hr&EJ)|0,l:Number($&EJ)|0}}function pr($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=Yj($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var RO=($,v,U)=>$>>>U,uO=($,v,U)=>$<<32-U|v>>>U,zU=($,v,U)=>$>>>U|v<<32-U,GU=($,v,U)=>$<<32-U|v>>>U,dI=($,v,U)=>$<<64-U|v>>>U-32,hI=($,v,U)=>$>>>U-32|v<<64-U;function hv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var tr=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),ar=($,v,U,I)=>v+U+I+($/4294967296|0)|0,er=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),sr=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,$w=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),vw=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var Zj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Bg=new Uint32Array(64);class KO extends PJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)Bg[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=Bg[X-15],w=Bg[X-2],r=_v(N,7)^_v(N,18)^N>>>3,Y=_v(w,17)^_v(w,19)^w>>>10;Bg[X]=Y+Bg[X-7]+r+Bg[X-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=_v(z,6)^_v(z,11)^_v(z,25),w=D+N+lr(z,G,O)+Zj[X]+Bg[X]|0,Y=(_v(U,2)^_v(U,13)^_v(U,22))+dr(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Ov(Bg)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class gw extends KO{A=rg[0]|0;B=rg[1]|0;C=rg[2]|0;D=rg[3]|0;E=rg[4]|0;F=rg[5]|0;G=rg[6]|0;H=rg[7]|0;constructor(){super(32)}}class Vj extends KO{A=wg[0]|0;B=wg[1]|0;C=wg[2]|0;D=wg[3]|0;E=wg[4]|0;F=wg[5]|0;G=wg[6]|0;H=wg[7]|0;constructor(){super(28)}}var Uw=(()=>pr(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),jj=(()=>Uw[0])(),Mj=(()=>Uw[1])(),Cg=new Uint32Array(80),Lg=new Uint32Array(80);class pI extends PJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:w,Gl:r,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V]}set($,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=w|0,this.Gl=r|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)Cg[u]=$.getUint32(v),Lg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let n=Cg[u-15]|0,L=Lg[u-15]|0,i=zU(n,L,1)^zU(n,L,8)^RO(n,L,7),l=GU(n,L,1)^GU(n,L,8)^uO(n,L,7),h=Cg[u-2]|0,_=Lg[u-2]|0,b=zU(h,_,19)^dI(h,_,61)^RO(h,_,6),g$=GU(h,_,19)^hI(h,_,61)^uO(h,_,6),S=er(l,g$,Lg[u-7],Lg[u-16]),K=sr(S,i,b,Cg[u-7],Cg[u-16]);Cg[u]=K|0,Lg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:w,Fl:r,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let n=zU(X,N,14)^zU(X,N,18)^dI(X,N,41),L=GU(X,N,14)^GU(X,N,18)^hI(X,N,41),i=X&w^~X&Y,l=N&r^~N&V,h=$w(T,L,l,Mj[u],Lg[u]),_=vw(h,W,n,i,jj[u],Cg[u]),b=h|0,g$=zU(U,I,28)^dI(U,I,34)^dI(U,I,39),S=GU(U,I,28)^hI(U,I,34)^hI(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=r|0,w=X|0,r=N|0,{h:X,l:N}=hv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=tr(b,S,k);U=ar(Z,_,g$,K),I=Z|0}({h:U,l:I}=hv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=hv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=hv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=hv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=hv(this.Eh|0,this.El|0,X|0,N|0),{h:w,l:r}=hv(this.Fh|0,this.Fl|0,w|0,r|0),{h:Y,l:V}=hv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=hv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,X,N,w,r,Y,V,W,T)}roundClean(){Ov(Cg,Lg)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Iw extends pI{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class Rj extends pI{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uj extends pI{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Kj extends pI{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var n$=WO(()=>new gw,ZO(1));var BJ=WO(()=>new Iw,ZO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function _J($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function AO($){if(!_J($))throw TypeError("Uint8Array expected")}function Dw($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((U)=>typeof U==="string");else return v.every((U)=>Number.isSafeInteger(U))}function Qw($){if(typeof $!=="function")throw TypeError("function expected");return!0}function fg($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aI($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function LJ($){if(!Array.isArray($))throw TypeError("array expected")}function fJ($,v){if(!Dw(!0,v))throw TypeError(`${$}: array of strings expected`)}function SO($,v){if(!Dw(!1,v))throw TypeError(`${$}: array of numbers expected`)}function uv(...$){let v=(J)=>J,U=(J,z)=>(G)=>J(z(G)),I=$.map((J)=>J.encode).reduceRight(U,v),g=$.map((J)=>J.decode).reduce(U,v);return{encode:I,decode:g}}function Kv($){let v=typeof $==="string"?$.split(""):$,U=v.length;fJ("alphabet",v);let I=new Map(v.map((g,J)=>[g,J]));return{encode:(g)=>{return LJ(g),g.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=U)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(g)=>{return LJ(g),g.map((J)=>{fg("alphabet.decode",J);let z=I.get(J);if(z===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return z})}}}function Tv($=""){return fg("join",$),{encode:(v)=>{return fJ("join.decode",v),v.join($)},decode:(v)=>{return fg("join.decode",v),v.split($)}}}function bJ($,v="="){return aI($),fg("padding",v),{encode(U){fJ("padding.encode",U);while(U.length*$%8)U.push(v);return U},decode(U){fJ("padding.decode",U);let I=U.length;if(I*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;I>0&&U[I-1]===v;I--)if((I-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return U.slice(0,I)}}}function Xw($){return Qw($),{encode:(v)=>v,decode:(v)=>$(v)}}function Jw($,v,U){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(U<2)throw RangeError(`convertRadix: invalid to=${U}, base cannot be less than 2`);if(LJ($),!$.length)return[];let I=0,g=[],J=Array.from($,(G)=>{if(aI(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),z=J.length;while(!0){let G=0,O=!0;for(let D=I;D<z;D++){let X=J[D],N=v*G,w=N+X;if(!Number.isSafeInteger(w)||N/v!==G||w-X!==N)throw Error("convertRadix: carry overflow");let r=w/U;G=w%U;let Y=Math.floor(r);if(J[D]=Y,!Number.isSafeInteger(Y)||Y*U+G!==w)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!Y)I=D;else O=!1}if(g.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)g.push(0);return g.reverse()}var Nw=($,v)=>v===0?$:Nw(v,$%v),nJ=($,v)=>$+(v-Nw($,v)),CJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function TO($,v,U,I){if(LJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(U<=0||U>32)throw RangeError(`convertRadix2: wrong to=${U}`);if(nJ(v,U)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${U} carryBits=${nJ(v,U)}`);let g=0,J=0,z=CJ[v],G=CJ[U]-1,O=[];for(let D of $){if(aI(D),D>=z)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(g=g<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=U;J-=U)O.push((g>>J-U&G)>>>0);let X=CJ[J];if(X===void 0)throw Error("invalid carry");g&=X-1}if(g=g<<U-J&G,!I&&J>=v)throw Error("Excess padding");if(!I&&g>0)throw Error(`Non-zero padding: ${g}`);if(I&&J>0)O.push(g>>>0);return O}function Tj($){aI($);let v=256;return{encode:(U)=>{if(!_J(U))throw TypeError("radix.encode input should be Uint8Array");return Jw(Array.from(U),v,$)},decode:(U)=>{return SO("radix.decode",U),Uint8Array.from(Jw(U,$,v))}}}function Pv($,v=!1){if(aI($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(nJ(8,$)>32||nJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(U)=>{if(!_J(U))throw TypeError("radix2.encode input should be Uint8Array");return TO(Array.from(U),8,$,!v)},decode:(U)=>{return SO("radix2.decode",U),Uint8Array.from(TO(U,$,8,v))}}}function zw($){return Qw($),function(...v){try{return $.apply(null,v)}catch(U){}}}var tT=Object.freeze(uv(Pv(4),Kv("0123456789ABCDEF"),Tv(""))),aT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),bJ(5),Tv(""))),eT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Tv(""))),sT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),bJ(5),Tv(""))),$H=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Tv(""))),vH=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Tv(""),Xw(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),rw=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Hj=/[\t\n\f\r ]/,ww=($,v)=>{fg("base64",$);let U=v?"base64url":"base64";if($.length>0&&Hj.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:U,lastChunkHandling:"strict"})},kO=Object.freeze(rw?{encode($){return AO($),$.toBase64()},decode($){return ww($,!1)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),bJ(6),Tv(""))),vv=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Tv(""))),gH=Object.freeze(rw?{encode($){return AO($),$.toBase64({alphabet:"base64url"})},decode($){return ww($,!0)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),bJ(6),Tv(""))),UH=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Tv(""))),PO=($)=>uv(Tj(58),Kv($),Tv("")),IH=Object.freeze(PO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),JH=Object.freeze(PO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),zH=Object.freeze(PO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var HO=uv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Tv("")),Gw=[996825010,642813549,513874426,1027748829,705979059];function tI($){let v=$>>25,U=($&33554431)<<5;for(let I=0;I<Gw.length;I++)if((v>>I&1)===1)U^=Gw[I];return U}function Ow($,v,U=1){let I=$.length,g=1;for(let J=0;J<I;J++){let z=$.charCodeAt(J);if(z<33||z>126)throw Error(`Invalid prefix (${$})`);g=tI(g)^z>>5}g=tI(g);for(let J=0;J<I;J++)g=tI(g)^$.charCodeAt(J)&31;for(let J of v)g=tI(g)^J;for(let J=0;J<6;J++)g=tI(g);return g^=U,HO.encode(TO([g%CJ[30]],30,5,!1))}function qw($){let v=$==="bech32"?1:734539939,U=Pv(5),I=U.decode,g=U.encode,J=zw(I);function z(N,w,r=90){if(fg("bech32.encode prefix",N),_J(w))w=Array.from(w);SO("bech32.encode",w);let Y=N.length;if(Y===0)throw TypeError(`Invalid prefix length ${Y}`);let V=Y+7+w.length;if(r!==!1&&V>r)throw TypeError(`Length ${V} exceeds limit ${r}`);let W=N.toLowerCase(),T=Ow(W,w,v);return`${W}1${HO.encode(w)}${T}`}function G(N,w=90){fg("bech32.decode input",N);let r=N.length;if(r<8||w!==!1&&r>w)throw TypeError(`invalid string length: ${r} (${N}). Expected (8..${w})`);let Y=N.toLowerCase();if(N!==Y&&N!==N.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Y.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let W=Y.slice(0,V),T=Y.slice(V+1);if(T.length<6)throw Error("Data must be at least 6 characters long");let u=HO.decode(T).slice(0,-6),n=Ow(W,u,v);if(!T.endsWith(n))throw Error(`Invalid checksum in ${N}: expected "${n}"`);return{prefix:W,words:u}}let O=zw(G);function D(N){let{prefix:w,words:r}=G(N,!1);return{prefix:w,words:r,bytes:I(r)}}function X(N,w){return z(N,g(w))}return{encode:z,decode:G,encodeFromBytes:X,decodeToBytes:D,decodeUnsafe:O,fromWords:I,fromWordsUnsafe:J,toWords:g}}var Hv=Object.freeze(qw("bech32")),GH=Object.freeze(qw("bech32m"));var Aj=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Sj={encode($){return AO($),$.toHex()},decode($){return fg("hex",$),Uint8Array.fromHex($)}},OH=Object.freeze(Aj?Sj:uv(Pv(4),Kv("0123456789abcdef"),Tv(""),Xw(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Pj($,v,U,I){Xg($);let g=kJ({dkLen:32,asyncTick:10},I),{c:J,dkLen:z,asyncTick:G}=g;if(f$(J,"c"),f$(z,"dkLen"),f$(G,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(z<1)throw Error('"dkLen" must be >= 1');if(z>4294967295*$.outputLen)throw Error("derived key too long");let O=qO(v,"password"),D=qO(U,"salt"),X=new Uint8Array(z),N=dv.create($,O),w=N._cloneInto().update(D);return{c:J,dkLen:z,asyncTick:G,DK:X,PRF:N,PRFSalt:w}}function Ej($,v,U,I,g){if($.destroy(),v.destroy(),I)I.destroy();return Ov(g),U}function EO($,v,U,I){let{c:g,dkLen:J,DK:z,PRF:G,PRFSalt:O}=Pj($,v,U,I),D,X=new Uint8Array(4),N=iU(X),w=new Uint8Array(G.outputLen);for(let r=1,Y=0;Y<J;r++,Y+=G.outputLen){let V=z.subarray(Y,Y+G.outputLen);N.setInt32(0,r,!1),(D=O._cloneInto(D)).update(X).digestInto(w),V.set(w.subarray(0,V.length));for(let W=1;W<g;W++){G._cloneInto(D).update(w).digestInto(w);for(let T=0;T<V.length;T++)V[T]^=w[T]}}return Ej(G,O,z,D,w)}function Yw($,v,U,I,g,J){let z=$[v++]^U[I++],G=$[v++]^U[I++],O=$[v++]^U[I++],D=$[v++]^U[I++],X=$[v++]^U[I++],N=$[v++]^U[I++],w=$[v++]^U[I++],r=$[v++]^U[I++],Y=$[v++]^U[I++],V=$[v++]^U[I++],W=$[v++]^U[I++],T=$[v++]^U[I++],u=$[v++]^U[I++],n=$[v++]^U[I++],L=$[v++]^U[I++],i=$[v++]^U[I++],l=z,h=G,_=O,b=D,g$=X,S=N,K=w,k=r,Z=Y,M=V,j=W,A=T,R=u,E=n,C=L,x=i;for(let s=0;s<8;s+=2)g$^=R$(l+R|0,7),Z^=R$(g$+l|0,9),R^=R$(Z+g$|0,13),l^=R$(R+Z|0,18),M^=R$(S+h|0,7),E^=R$(M+S|0,9),h^=R$(E+M|0,13),S^=R$(h+E|0,18),C^=R$(j+K|0,7),_^=R$(C+j|0,9),K^=R$(_+C|0,13),j^=R$(K+_|0,18),b^=R$(x+A|0,7),k^=R$(b+x|0,9),A^=R$(k+b|0,13),x^=R$(A+k|0,18),h^=R$(l+b|0,7),_^=R$(h+l|0,9),b^=R$(_+h|0,13),l^=R$(b+_|0,18),K^=R$(S+g$|0,7),k^=R$(K+S|0,9),g$^=R$(k+K|0,13),S^=R$(g$+k|0,18),A^=R$(j+M|0,7),Z^=R$(A+j|0,9),M^=R$(Z+A|0,13),j^=R$(M+Z|0,18),R^=R$(x+C|0,7),E^=R$(R+x|0,9),C^=R$(E+R|0,13),x^=R$(C+E|0,18);g[J++]=z+l|0,g[J++]=G+h|0,g[J++]=O+_|0,g[J++]=D+b|0,g[J++]=X+g$|0,g[J++]=N+S|0,g[J++]=w+K|0,g[J++]=r+k|0,g[J++]=Y+Z|0,g[J++]=V+M|0,g[J++]=W+j|0,g[J++]=T+A|0,g[J++]=u+R|0,g[J++]=n+E|0,g[J++]=L+C|0,g[J++]=i+x|0}function BO($,v,U,I,g){let J=I+0,z=I+16*g;for(let G=0;G<16;G++)U[z+G]=$[v+(2*g-1)*16+G];for(let G=0;G<g;G++,J+=16,v+=16){if(Yw(U,z,$,v,U,J),G>0)z+=16;Yw(U,J,$,v+=16,U,z)}}function Bj($,v,U){let I=kJ({dkLen:32,asyncTick:10,maxmem:1073742848},U),{N:g,r:J,p:z,dkLen:G,asyncTick:O,maxmem:D,onProgress:X}=I;if(f$(g,"N"),f$(J,"r"),f$(z,"p"),f$(G,"dkLen"),f$(O,"asyncTick"),f$(D,"maxmem"),X!==void 0&&typeof X!=="function")throw Error("progressCb must be a function");let N=128*J,w=N/4,r=Math.pow(2,32);if(g<=1||(g&g-1)!==0||g>r)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(z<1||z>(r-1)*32/N)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(r-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Y=N*(g+z+1);if(Y>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Y+", maxmem="+D);let V=EO(n$,$,v,{c:1,dkLen:N*z}),W=AJ(V),T=AJ(new Uint8Array(N*g)),u=AJ(new Uint8Array(N)),n=()=>{};if(X){let L=2*g*z,i=Math.max(Math.floor(L/1e4),1),l=0;n=()=>{if(l++,X&&(!(l%i)||l===L))X(l/L)}}return{N:g,r:J,p:z,dkLen:G,blockSize32:w,V:T,B32:W,B:V,tmp:u,blockMixCb:n,asyncTick:O}}function Cj($,v,U,I,g){let J=EO(n$,$,U,{c:1,dkLen:v});return Ov(U,I,g),J}function CO($,v,U){let{N:I,r:g,p:J,dkLen:z,blockSize32:G,V:O,B32:D,B:X,tmp:N,blockMixCb:w}=Bj($,v,U);wO(D);for(let r=0;r<J;r++){let Y=G*r;for(let V=0;V<G;V++)O[V]=D[Y+V];for(let V=0,W=0;V<I-1;V++)BO(O,W,O,W+=G,g),w();BO(O,(I-1)*G,D,Y,g),w();for(let V=0;V<I;V++){let W=(D[Y+G-16]&I-1)>>>0;for(let T=0;T<G;T++)N[T]=D[Y+T]^O[W*G+T];BO(N,0,D,Y,g),w()}}return wO(D),Cj($,z,X,O,N)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Lj($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function xU($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,U=""){let I=Lj($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function LO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function Ww($,v,U=!1){b$($,void 0,"output");let I=v.outputLen;if($.length<I)throw RangeError("digestInto() expects output buffer of length at least "+I);if(U&&!oU($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fj($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var OU=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),nj=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var _j=($)=>{for(let v=0;v<$.length;v++)$[v]=nj($[v]);return $},qg=OU?($)=>$:_j;function Zw($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function Vw($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function jw($,v,U){let I=v,g=U||(()=>[]),J=(G,O)=>I(O,...g(G)).update(G).digest(),z=I(new Uint8Array($),...g(new Uint8Array(0)));return J.outputLen=z.outputLen,J.blockLen=z.blockLen,J.create=(G,...O)=>I(G,...O),J}var Mw=($,v)=>{function U(I,...g){if(b$(I,void 0,"key"),$.nonceLength!==void 0){let X=g[0];b$(X,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&g[1]!==void 0)b$(g[1],void 0,"AAD");let z=v(I,...g),G=(X,N)=>{if(N!==void 0){if(X!==2)throw Error("cipher output not supported");b$(N,void 0,"output")}},O=!1;return{encrypt(X,N){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(X),G(z.encrypt.length,N),z.encrypt(X,N)},decrypt(X,N){if(b$(X),J&&X.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return G(z.decrypt.length,N),z.decrypt(X,N)}}}return Object.assign(U,$),U};function eI($,v,U=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(U&&!oU(v))throw Error("invalid output, must be aligned");return v}function Rw($,v,U){xU($),xU(v),mJ(U);let I=new Uint8Array(16),g=fj(I);return g.setBigUint64(0,BigInt(v),U),g.setBigUint64(8,BigInt($),U),I}function oU($){return $.byteOffset%4===0}function cU($){return Uint8Array.from(b$($))}var Kw=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),bj=(()=>qg(pv(Kw("expand 16-byte k"))))(),mj=(()=>qg(pv(Kw("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var sI=64,Fj=16,fO=(()=>4294967295)(),uw=Uint32Array.of();function ij($,v,U,I,g,J,z,G){let O=g.length,D=new Uint8Array(sI),X=pv(D),N=OU&&oU(g)&&oU(J),w=N?pv(g):uw,r=N?pv(J):uw;if(!OU){for(let Y=0;Y<O;z++){if($(v,U,I,X,z,G),qg(X),z>=fO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}return}for(let Y=0;Y<O;z++){if($(v,U,I,X,z,G),z>=fO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);if(N&&V===sI){let W=Y/4;if(Y%4!==0)throw Error("arx: invalid block position");for(let T=0,u;T<Fj;T++)u=W+T,r[u]=w[u]^X[T];Y+=sI;continue}for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}}function Tw($,v){let{allowShortKeys:U,extendNonceFn:I,counterLength:g,counterRight:J,rounds:z}=Zw({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return xU(g),xU(z),mJ(J),mJ(U),(G,O,D,X,N=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let w=D.length;if(X=eI(w,X,!1),xU(N),N<0||N>=fO)throw Error("arx: counter overflow");let r=[],Y=G.length,V,W;if(Y===32)r.push(V=cU(G)),W=mj;else if(Y===16&&U)V=new Uint8Array(32),V.set(G),V.set(G,16),W=bj,r.push(V);else throw b$(G,32,"arx key"),Error("invalid key size");if(!OU||!oU(O))r.push(O=cU(O));let T=pv(V);if(I){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(OU)I(W,T,pv(L),T);else{let i=qg(Uint32Array.from(W));I(i,T,pv(L),T),bv(i),qg(T)}O=O.subarray(16)}else if(!OU)qg(T);let u=16-g;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,r.push(O)}let n=qg(pv(O));try{return ij($,W,T,n,D,X,N,z),X}finally{bv(...r)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class Hw{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cU(b$($,32,"key"));let v=y$($,0),U=y$($,2),I=y$($,4),g=y$($,6),J=y$($,8),z=y$($,10),G=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|U<<3)&8191,this.r[2]=(U>>>10|I<<6)&7939,this.r[3]=(I>>>7|g<<9)&8191,this.r[4]=(g>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|z<<2)&8191,this.r[7]=(z>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,U=!1){let I=U?0:2048,{h:g,r:J}=this,z=J[0],G=J[1],O=J[2],D=J[3],X=J[4],N=J[5],w=J[6],r=J[7],Y=J[8],V=J[9],W=y$($,v+0),T=y$($,v+2),u=y$($,v+4),n=y$($,v+6),L=y$($,v+8),i=y$($,v+10),l=y$($,v+12),h=y$($,v+14),_=g[0]+(W&8191),b=g[1]+((W>>>13|T<<3)&8191),g$=g[2]+((T>>>10|u<<6)&8191),S=g[3]+((u>>>7|n<<9)&8191),K=g[4]+((n>>>4|L<<12)&8191),k=g[5]+(L>>>1&8191),Z=g[6]+((L>>>14|i<<2)&8191),M=g[7]+((i>>>11|l<<5)&8191),j=g[8]+((l>>>8|h<<8)&8191),A=g[9]+(h>>>5|I),R=0,E=R+_*z+b*(5*V)+g$*(5*Y)+S*(5*r)+K*(5*w);R=E>>>13,E&=8191,E+=k*(5*N)+Z*(5*X)+M*(5*D)+j*(5*O)+A*(5*G),R+=E>>>13,E&=8191;let C=R+_*G+b*z+g$*(5*V)+S*(5*Y)+K*(5*r);R=C>>>13,C&=8191,C+=k*(5*w)+Z*(5*N)+M*(5*X)+j*(5*D)+A*(5*O),R+=C>>>13,C&=8191;let x=R+_*O+b*G+g$*z+S*(5*V)+K*(5*Y);R=x>>>13,x&=8191,x+=k*(5*r)+Z*(5*w)+M*(5*N)+j*(5*X)+A*(5*D),R+=x>>>13,x&=8191;let s=R+_*D+b*O+g$*G+S*z+K*(5*V);R=s>>>13,s&=8191,s+=k*(5*Y)+Z*(5*r)+M*(5*w)+j*(5*N)+A*(5*X),R+=s>>>13,s&=8191;let J$=R+_*X+b*D+g$*O+S*G+K*z;R=J$>>>13,J$&=8191,J$+=k*(5*V)+Z*(5*Y)+M*(5*r)+j*(5*w)+A*(5*N),R+=J$>>>13,J$&=8191;let G$=R+_*N+b*X+g$*D+S*O+K*G;R=G$>>>13,G$&=8191,G$+=k*z+Z*(5*V)+M*(5*Y)+j*(5*r)+A*(5*w),R+=G$>>>13,G$&=8191;let Q$=R+_*w+b*N+g$*X+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=k*G+Z*z+M*(5*V)+j*(5*Y)+A*(5*r),R+=Q$>>>13,Q$&=8191;let r$=R+_*r+b*w+g$*N+S*X+K*D;R=r$>>>13,r$&=8191,r$+=k*O+Z*G+M*z+j*(5*V)+A*(5*Y),R+=r$>>>13,r$&=8191;let X$=R+_*Y+b*r+g$*w+S*N+K*X;R=X$>>>13,X$&=8191,X$+=k*D+Z*O+M*G+j*z+A*(5*V),R+=X$>>>13,X$&=8191;let N$=R+_*V+b*Y+g$*r+S*w+K*N;R=N$>>>13,N$&=8191,N$+=k*X+Z*D+M*O+j*G+A*z,R+=N$>>>13,N$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,C+=R,g[0]=E,g[1]=C,g[2]=x,g[3]=s,g[4]=J$,g[5]=G$,g[6]=Q$,g[7]=r$,g[8]=X$,g[9]=N$}finalize(){let{h:$,pad:v}=this,U=new Uint16Array(10),I=$[1]>>>13;$[1]&=8191;for(let z=2;z<10;z++)$[z]+=I,I=$[z]>>>13,$[z]&=8191;$[0]+=I*5,I=$[0]>>>13,$[0]&=8191,$[1]+=I,I=$[1]>>>13,$[1]&=8191,$[2]+=I,U[0]=$[0]+5,I=U[0]>>>13,U[0]&=8191;for(let z=1;z<10;z++)U[z]=$[z]+I,I=U[z]>>>13,U[z]&=8191;U[9]-=8192;let g=(I^1)-1;for(let z=0;z<10;z++)U[z]&=g;g=~g;for(let z=0;z<10;z++)$[z]=$[z]&g|U[z];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let z=1;z<8;z++)J=($[z]+v[z]|0)+(J>>>16)|0,$[z]=J&65535;bv(U)}update($){LO(this),b$($),$=cU($);let{buffer:v,blockLen:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(U-this.pos,I-g);if(J===U){for(;U<=I-g;g+=U)this.process($,g);continue}if(v.set($.subarray(g,g+J),this.pos),this.pos+=J,g+=J,this.pos===U)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){LO(this),Ww($,this),this.finished=!0;let{buffer:v,h:U}=this,{pos:I}=this;if(I){v[I++]=1;for(;I<16;I++)v[I]=0;this.process(v,0,!0)}this.finalize();let g=0;for(let J=0;J<8;J++)$[g++]=U[J]>>>0,$[g++]=U[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}}var Aw=jw(32,($)=>new Hw($));function xj($,v,U,I,g,J=20){let z=$[0],G=$[1],O=$[2],D=$[3],X=v[0],N=v[1],w=v[2],r=v[3],Y=v[4],V=v[5],W=v[6],T=v[7],u=g,n=U[0],L=U[1],i=U[2],l=z,h=G,_=O,b=D,g$=X,S=N,K=w,k=r,Z=Y,M=V,j=W,A=T,R=u,E=n,C=L,x=i;for(let J$=0;J$<J;J$+=2)l=l+g$|0,R=u$(R^l,16),Z=Z+R|0,g$=u$(g$^Z,12),l=l+g$|0,R=u$(R^l,8),Z=Z+R|0,g$=u$(g$^Z,7),h=h+S|0,E=u$(E^h,16),M=M+E|0,S=u$(S^M,12),h=h+S|0,E=u$(E^h,8),M=M+E|0,S=u$(S^M,7),_=_+K|0,C=u$(C^_,16),j=j+C|0,K=u$(K^j,12),_=_+K|0,C=u$(C^_,8),j=j+C|0,K=u$(K^j,7),b=b+k|0,x=u$(x^b,16),A=A+x|0,k=u$(k^A,12),b=b+k|0,x=u$(x^b,8),A=A+x|0,k=u$(k^A,7),l=l+S|0,x=u$(x^l,16),j=j+x|0,S=u$(S^j,12),l=l+S|0,x=u$(x^l,8),j=j+x|0,S=u$(S^j,7),h=h+K|0,R=u$(R^h,16),A=A+R|0,K=u$(K^A,12),h=h+K|0,R=u$(R^h,8),A=A+R|0,K=u$(K^A,7),_=_+k|0,E=u$(E^_,16),Z=Z+E|0,k=u$(k^Z,12),_=_+k|0,E=u$(E^_,8),Z=Z+E|0,k=u$(k^Z,7),b=b+g$|0,C=u$(C^b,16),M=M+C|0,g$=u$(g$^M,12),b=b+g$|0,C=u$(C^b,8),M=M+C|0,g$=u$(g$^M,7);let s=0;I[s++]=z+l|0,I[s++]=G+h|0,I[s++]=O+_|0,I[s++]=D+b|0,I[s++]=X+g$|0,I[s++]=N+S|0,I[s++]=w+K|0,I[s++]=r+k|0,I[s++]=Y+Z|0,I[s++]=V+M|0,I[s++]=W+j|0,I[s++]=T+A|0,I[s++]=u+R|0,I[s++]=n+E|0,I[s++]=L+C|0,I[s++]=i+x|0}var oj=Tw(xj,{counterRight:!1,counterLength:4,allowShortKeys:!1});var cj=new Uint8Array(16),Sw=($,v)=>{$.update(v);let U=v.length%16;if(U)$.update(cj.subarray(U))},yj=new Uint8Array(32);function kw($,v,U,I,g){if(g!==void 0)b$(g,void 0,"AAD");let J=$(v,U,yj),z=Rw(I.length,g?g.length:0,!0),G=Aw.create(J);if(g)Sw(G,g);Sw(G,I),G.update(z);let O=G.digest();return bv(J,z),O}var lj=($)=>(v,U,I)=>{return{encrypt(J,z){let G=J.length;z=eI(G+16,z,!1),z.set(J);let O=z.subarray(0,-16);$(v,U,O,O,1);let D=kw($,v,U,O,I);return z.set(D,G),bv(D),z},decrypt(J,z){z=eI(J.length-16,z,!1);let G=J.subarray(0,-16),O=J.subarray(-16),D=kw($,v,U,G,I);if(!Vw(O,D))throw bv(D),Error("invalid tag");return z.set(J.subarray(0,-16)),$(v,U,z,z,1),bv(D),z}}},Ev=Mw({blockSize:64,nonceLength:12,tagLength:16},lj(oj));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function yU($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw Error(`${U}expected integer >= 0, got ${$}`)}}function q$($,v,U=""){let I=yU($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`;throw Error(z+"expected Uint8Array"+G+", got "+O)}return $}function Bv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function Wg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function FJ($,v){q$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw Error('"digestInto() output" expected to be of length >='+U)}function iJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function mv($,v){return $<<32-v|$>>>v}var dj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pj($){for(let v=0;v<$.length;v++)$[v]=hj($[v]);return $}var nO=dj?($)=>$:pj,Ew=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function DU($){if(q$($),Ew)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=tj[$[U]];return v}var Yg={_0:48,_9:57,A:65,F:70,a:97,f:102};function Pw($){if($>=Yg._0&&$<=Yg._9)return $-Yg._0;if($>=Yg.A&&$<=Yg.F)return $-(Yg.A-10);if($>=Yg.a&&$<=Yg.f)return $-(Yg.a-10);return}function QU($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(Ew)return Uint8Array.fromHex($);let v=$.length,U=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=Pw($.charCodeAt(J)),G=Pw($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function _$(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];q$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function lU($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function ng($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var _g=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bO=BigInt(0),_O=BigInt(1);function $0($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw Error(U+"expected boolean, got type="+typeof $)}return $}function Bw($){if(typeof $==="bigint"){if(!oJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function v0($){let v=Bw($).toString(16);return v.length&1?"0"+v:v}function Cw($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?bO:BigInt("0x"+$)}function bg($){return Cw(DU($))}function mg($){return Cw(DU(cJ(q$($)).reverse()))}function dU($,v){F$(v),$=Bw($);let U=QU($.toString(16).padStart(v*2,"0"));if(U.length!==v)throw Error("number too large");return U}function g0($,v){return dU($,v).reverse()}function cJ($){return Uint8Array.from($)}function Fg($){return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw Error(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var oJ=($)=>typeof $==="bigint"&&bO<=$;function aj($,v,U){return oJ($)&&oJ(v)&&oJ(U)&&v<=$&&$<U}function U0($,v,U,I){if(!aj(v,U,I))throw Error("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function mO($){let v;for(v=0;$>bO;$>>=_O,v+=1);return v}var I0=($)=>(_O<<BigInt($))-_O;function Lw($,v,U){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof U!=="function")throw Error("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},w=(...W)=>U(D,_$(O,...W)),r=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return _$(...T)};return(W,T)=>{N(),r(W);let u=void 0;while(!(u=T(Y())))r();return N(),u}}function XU($,v={},U={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function I(J,z,G){let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw Error(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}function FO($){let v=new WeakMap;return(U,...I)=>{let g=v.get(U);if(g!==void 0)return g;let J=$(U,...I);return v.set(U,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qv=BigInt(0),gv=BigInt(1),NU=BigInt(2),_w=BigInt(3),bw=BigInt(4),mw=BigInt(5),ej=BigInt(7),Fw=BigInt(8),sj=BigInt(9),iw=BigInt(16);function Dv($,v){let U=$%v;return U>=Qv?U:v+U}function Cv($,v,U){let I=$;while(v-- >Qv)I*=I,I%=U;return I}function fw($,v){if($===Qv)throw Error("invert: expected non-zero number");if(v<=Qv)throw Error("invert: expected positive modulus, got "+v);let U=Dv($,v),I=v,g=Qv,J=gv,z=gv,G=Qv;while(U!==Qv){let D=I/U,X=I%U,N=g-z*D,w=J-G*D;I=U,U=X,g=z,J=G,z=N,G=w}if(I!==gv)throw Error("invert: does not exist");return Dv(g,v)}function iO($,v,U){if(!$.eql($.sqr(v),U))throw Error("Cannot find square root")}function xw($,v){let U=($.ORDER+gv)/bw,I=$.pow(v,U);return iO($,I,v),I}function $M($,v){let U=($.ORDER-mw)/Fw,I=$.mul(v,NU),g=$.pow(I,U),J=$.mul(v,g),z=$.mul($.mul(J,NU),g),G=$.mul(J,$.sub(z,$.ONE));return iO($,G,v),G}function vM($){let v=yJ($),U=ow($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+ej)/iw;return(G,O)=>{let D=G.pow(O,z),X=G.mul(D,I),N=G.mul(D,g),w=G.mul(D,J),r=G.eql(G.sqr(X),O),Y=G.eql(G.sqr(N),O);D=G.cmov(D,X,r),X=G.cmov(w,N,Y);let V=G.eql(G.sqr(X),O),W=G.cmov(D,X,V);return iO(G,W,O),W}}function ow($){if($<_w)throw Error("sqrt is not defined for small field");let v=$-gv,U=0;while(v%NU===Qv)v/=NU,U++;let I=NU,g=yJ($);while(nw(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return xw;let J=g.pow(I,v),z=(v+gv)/NU;return function(O,D){if(O.is0(D))return D;if(nw(O,D)!==1)throw Error("Cannot find square root");let X=U,N=O.mul(O.ONE,J),w=O.pow(D,v),r=O.pow(D,z);while(!O.eql(w,O.ONE)){if(O.is0(w))return O.ZERO;let Y=1,V=O.sqr(w);while(!O.eql(V,O.ONE))if(Y++,V=O.sqr(V),Y===X)throw Error("Cannot find square root");let W=gv<<BigInt(X-Y-1),T=O.pow(N,W);X=Y,N=O.sqr(T),w=O.mul(w,N),r=O.mul(r,T)}return r}}function gM($){if($%bw===_w)return xw;if($%Fw===mw)return $M;if($%iw===sj)return vM($);return ow($)}var UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function xO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=UM.reduce((I,g)=>{return I[g]="function",I},v);return XU($,U),$}function IM($,v,U){if(U<Qv)throw Error("invalid exponent, negatives unsupported");if(U===Qv)return $.ONE;if(U===gv)return v;let I=$.ONE,g=v;while(U>Qv){if(U&gv)I=$.mul(I,g);g=$.sqr(g),U>>=gv}return I}function J0($,v,U=!1){let I=Array(v.length).fill(U?$.ZERO:void 0),g=v.reduce((z,G,O)=>{if($.is0(G))return z;return I[O]=z,$.mul(z,G)},$.ONE),J=$.inv(g);return v.reduceRight((z,G,O)=>{if($.is0(G))return z;return I[O]=$.mul(z,I[O]),$.mul(z,G)},J),I}function nw($,v){let U=($.ORDER-gv)/NU,I=$.pow(v,U),g=$.eql(I,$.ONE),J=$.eql(I,$.ZERO),z=$.eql(I,$.neg($.ONE));if(!g&&!J&&!z)throw Error("invalid Legendre symbol result");return g?1:J?0:-1}function JM($,v){if(v!==void 0)F$(v);let U=v!==void 0?v:$.toString(2).length,I=Math.ceil(U/8);return{nBitLength:U,nByteLength:I}}class cw{ORDER;BITS;BYTES;isLE;ZERO=Qv;ONE=gv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Qv)throw Error("invalid field: expected ORDER > 0, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=JM($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Dv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Qv<=$&&$<this.ORDER}is0($){return $===Qv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&gv)===gv}neg($){return Dv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Dv($*$,this.ORDER)}add($,v){return Dv($+v,this.ORDER)}sub($,v){return Dv($-v,this.ORDER)}mul($,v){return Dv($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return Dv($*fw(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fw($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=gM(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g0($,this.BYTES):dU($,this.BYTES)}fromBytes($,v=!1){q$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if(!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?mg($):bg($);if(z)G=Dv(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return J0(this,$)}cmov($,v,U){return U?v:$}}function yJ($,v={}){return new cw($,v)}function yw($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function oO($){let v=yw($);return v+Math.ceil(v/2)}function lw($,v,U=!1){q$($);let I=$.length,g=yw(v),J=oO(v);if(I<16||I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?mg($):bg($),G=Dv(z,v-gv)+gv;return U?g0(G,g):dU(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hU=BigInt(0),rU=BigInt(1);function z0($,v){let U=v.negate();return $?U:v}function dO($,v){let U=J0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function tw($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function cO($,v){tw($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=I0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function dw($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=rU;let D=v*I,X=D+Math.abs(G)-1,N=G===0,w=G<0,r=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:w,isNegF:r,offsetF:D}}var yO=new WeakMap,aw=new WeakMap;function lO($){return aw.get($)||1}function hw($){if($!==hU)throw Error("invalid wNAF")}class hO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>hU){if(v&rU)U=U.add(I);I=I.double(),v>>=rU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=cO(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=cO($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:w}=dw(U,z,J);if(U=G,D)g=g.add(z0(N,v[w]));else I=I.add(z0(X,v[O]))}return hw(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=cO($,this.bits);for(let J=0;J<g.windows;J++){if(U===hU)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=dw(U,J,g);if(U=z,O)continue;else{let X=v[G];I=I.add(D?X.negate():X)}}return hw(U),I}getPrecomputes($,v,U){let I=yO.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);yO.set(v,I)}}return I}cached($,v,U){let I=lO($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=lO($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){tw(v,this.bits),aw.set($,v),yO.delete($)}hasCache($){return lO($)!==1}}function ew($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>hU||I>hU){if(U&rU)J=J.add(g);if(I&rU)z=z.add(g);g=g.double(),U>>=rU,I>>=rU}return{p1:J,p2:z}}function pw($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return xO(v),v}else return yJ($,{isLE:U})}function sw($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>hU))throw Error(`CURVE.${O} must be positive bigint`)}let g=pw(v.p,U.Fp,I),J=pw(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function lJ($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var G0=BigInt(0),pU=BigInt(1),dJ=BigInt(2);function zM($){return XU($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function $q($){let v=zM($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z||ng,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),r=G?dJ**BigInt(254):dJ**BigInt(447),Y=G?BigInt(8)*dJ**BigInt(251)-pU:BigInt(4)*dJ**BigInt(445)-pU,V=r+Y+pU,W=(Z)=>Dv(Z,U),T=u(N);function u(Z){return g0(W(Z),X)}function n(Z){let M=cJ(q$(Z,X,"uCoordinate"));if(G)M[31]&=127;return W(mg(M))}function L(Z){return mg(g(cJ(q$(Z,X,"scalar"))))}function i(Z,M){let j=g$(n(M),L(Z));if(j===G0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){U0("u",Z,G0,U),U0("scalar",M,r,V);let j=M,A=Z,R=pU,E=G0,C=Z,x=pU,s=G0;for(let G$=BigInt(D-1);G$>=G0;G$--){let Q$=j>>G$&pU;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let r$=R+E,X$=W(r$*r$),N$=R-E,W$=W(N$*N$),k$=X$-W$,E$=C+x,a$=C-x,e$=W(a$*r$),Wv=W(E$*N$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(X$*W$),E=W(k$*(X$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(Z=O(X))=>{return q$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze({keygen:lJ(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}class pO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Bv($),q$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Zv(I)}update($){return Wg(this),this.iHash.update($),this}digestInto($){Wg(this),q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tU=($,v,U)=>new pO($,v).update(U).digest();tU.create=($,v)=>new pO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vq=($,v)=>($+($>=0?v:-v)/Uq)/v;function GM($,v,U){let[[I,g],[J,z]]=v,G=vq(z*$,U),O=vq(-g*$,U),D=$-G*I-O*J,X=-G*g-O*z,N=D<Zg,w=X<Zg;if(N)D=-D;if(w)X=-X;let r=I0(Math.ceil(mO(U)/2))+aU;if(D<Zg||D>=r||X<Zg||X>=r)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:N,k1:D,k2neg:w,k2:X}}function aO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function tO($,v){let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if($0(U.lowS,"lowS"),$0(U.prehash,"prehash"),U.format!==void 0)aO(U.format);return U}class gq extends Error{constructor($=""){super($)}}var ig={Err:gq,_tlv:{encode:($,v)=>{let{Err:U}=ig;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=v0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?v0(g.length/2|128):"";return v0($)+J+g+v},decode($,v){let{Err:U}=ig,I=0;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=ig;if($<Zg)throw new v("integer: negative integers are not allowed");let U=v0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=ig;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return bg($)}},toSig($){let{Err:v,_int:U,_tlv:I}=ig,g=q$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=ig,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}},Zg=BigInt(0),aU=BigInt(1),Uq=BigInt(2),hJ=BigInt(3),OM=BigInt(4);function eO($,v={}){let U=sw("weierstrass",$,v),{Fp:I,Fn:g}=U,J=U.CURVE,{h:z,n:G}=J;XU(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=Jq(I,g);function X(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(K,k,Z){let{x:M,y:j}=k.toAffine(),A=I.toBytes(M);if($0(Z,"isCompressed"),Z){X();let R=!I.isOdd(j);return _$(Iq(R),A)}else return _$(Uint8Array.of(4),A,I.toBytes(j))}function w(K){q$(K,void 0,"Point");let{publicKey:k,publicKeyUncompressed:Z}=D,M=K.length,j=K[0],A=K.subarray(1);if(M===k&&(j===2||j===3)){let R=I.fromBytes(A);if(!I.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=V(R),C;try{C=I.sqrt(E)}catch(J$){let G$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}X();let x=I.isOdd(C);if((j&1)===1!==x)C=I.neg(C);return{x:R,y:C}}else if(M===Z&&j===4){let R=I.BYTES,E=I.fromBytes(A.subarray(0,R)),C=I.fromBytes(A.subarray(R,R*2));if(!W(E,C))throw Error("bad point: is not on curve");return{x:E,y:C}}else throw Error(`bad point: got length ${M}, expected compressed=${k} or uncompressed=${Z}`)}let r=v.toBytes||N,Y=v.fromBytes||w;function V(K){let k=I.sqr(K),Z=I.mul(k,K);return I.add(I.add(Z,I.mul(K,J.a)),J.b)}function W(K,k){let Z=I.sqr(k),M=V(K);return I.eql(Z,M)}if(!W(J.Gx,J.Gy))throw Error("bad curve params: generator point");let T=I.mul(I.pow(J.a,hJ),OM),u=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(T,u)))throw Error("bad curve params: a or b");function n(K,k,Z=!1){if(!I.isValid(k)||Z&&I.is0(k))throw Error(`bad point coordinate ${K}`);return k}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return GM(K,O.basises,g.ORDER)}let l=FO((K,k)=>{let{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),h=FO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!I.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:k,y:Z}=K.toAffine();if(!I.isValid(k)||!I.isValid(Z))throw Error("bad point: x or y not field elements");if(!W(k,Z))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,k,Z,M,j){return Z=new b(I.mul(Z.X,K),Z.Y,Z.Z),k=z0(M,k),Z=z0(j,Z),k.add(Z)}class b{static BASE=new b(J.Gx,J.Gy,I.ONE);static ZERO=new b(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(K,k,Z){this.X=n("x",K),this.Y=n("y",k,!0),this.Z=n("z",Z),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:k,y:Z}=K||{};if(!K||!I.isValid(k)||!I.isValid(Z))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(I.is0(k)&&I.is0(Z))return b.ZERO;return new b(k,Z,I.ONE)}static fromBytes(K){let k=b.fromAffine(Y(q$(K,void 0,"point")));return k.assertValidity(),k}static fromHex(K){return b.fromBytes(QU(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,k=!0){if(S.createCache(this,K),!k)this.multiply(hJ);return this}assertValidity(){h(this)}hasEvenY(){let{y:K}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(K)}equals(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.eql(I.mul(k,R),I.mul(j,M)),C=I.eql(I.mul(Z,R),I.mul(A,M));return E&&C}negate(){return new b(this.X,I.neg(this.Y),this.Z)}double(){let{a:K,b:k}=J,Z=I.mul(k,hJ),{X:M,Y:j,Z:A}=this,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(A,A),G$=I.mul(M,j);return G$=I.add(G$,G$),C=I.mul(M,A),C=I.add(C,C),R=I.mul(K,C),E=I.mul(Z,J$),E=I.add(R,E),R=I.sub(s,E),E=I.add(s,E),E=I.mul(R,E),R=I.mul(G$,R),C=I.mul(Z,C),J$=I.mul(K,J$),G$=I.sub(x,J$),G$=I.mul(K,G$),G$=I.add(G$,C),C=I.add(x,x),x=I.add(C,x),x=I.add(x,J$),x=I.mul(x,G$),E=I.add(E,x),J$=I.mul(j,A),J$=I.add(J$,J$),x=I.mul(J$,G$),R=I.sub(R,x),C=I.mul(J$,s),C=I.add(C,C),C=I.add(C,C),new b(R,E,C)}add(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.ZERO,C=I.ZERO,x=I.ZERO,s=J.a,J$=I.mul(J.b,hJ),G$=I.mul(k,j),Q$=I.mul(Z,A),r$=I.mul(M,R),X$=I.add(k,Z),N$=I.add(j,A);X$=I.mul(X$,N$),N$=I.add(G$,Q$),X$=I.sub(X$,N$),N$=I.add(k,M);let W$=I.add(j,R);return N$=I.mul(N$,W$),W$=I.add(G$,r$),N$=I.sub(N$,W$),W$=I.add(Z,M),E=I.add(A,R),W$=I.mul(W$,E),E=I.add(Q$,r$),W$=I.sub(W$,E),x=I.mul(s,N$),E=I.mul(J$,r$),x=I.add(E,x),E=I.sub(Q$,x),x=I.add(Q$,x),C=I.mul(E,x),Q$=I.add(G$,G$),Q$=I.add(Q$,G$),r$=I.mul(s,r$),N$=I.mul(J$,N$),Q$=I.add(Q$,r$),r$=I.sub(G$,r$),r$=I.mul(s,r$),N$=I.add(N$,r$),G$=I.mul(Q$,N$),C=I.add(C,G$),G$=I.mul(W$,N$),E=I.mul(X$,E),E=I.sub(E,G$),G$=I.mul(X$,Q$),x=I.mul(W$,x),x=I.add(x,G$),new b(E,C,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:k}=v;if(!g.isValidNot0(K))throw Error("invalid scalar: out of range");let Z,M,j=(A)=>S.cached(this,A,(R)=>dO(b,R));if(k){let{k1neg:A,k1:R,k2neg:E,k2:C}=i(K),{p:x,f:s}=j(R),{p:J$,f:G$}=j(C);M=s.add(G$),Z=_(k.beta,x,J$,A,E)}else{let{p:A,f:R}=j(K);Z=A,M=R}return dO(b,[Z,M])[0]}multiplyUnsafe(K){let{endo:k}=v,Z=this;if(!g.isValid(K))throw Error("invalid scalar: out of range");if(K===Zg||Z.is0())return b.ZERO;if(K===aU)return Z;if(S.hasCache(this))return this.multiply(K);if(k){let{k1neg:M,k1:j,k2neg:A,k2:R}=i(K),{p1:E,p2:C}=ew(b,Z,j,R);return _(k.beta,E,C,M,A)}else return S.unsafe(Z,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(z===aU)return!0;if(K)return K(b,this);return S.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(z===aU)return this;if(K)return K(b,this);return this.multiplyUnsafe(z)}isSmallOrder(){return this.multiplyUnsafe(z).is0()}toBytes(K=!0){return $0(K,"isCompressed"),this.assertValidity(),r(b,this,K)}toHex(K=!0){return DU(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let g$=g.BITS,S=new hO(b,v.endo?Math.ceil(g$/2):g$);return b.BASE.precompute(8),b}function Iq($){return Uint8Array.of($?2:3)}function Jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:U}=$,I=v.randomBytes||ng,g=Object.assign(Jq($.Fp,U),{seed:oO(U.ORDER)});function J(r){try{let Y=U.fromBytes(r);return U.isValidNot0(Y)}catch(Y){return!1}}function z(r,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=r.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(r)}catch(T){return!1}}function G(r=I(g.seed)){return lw(q$(r,g.seed,"seed"),U.ORDER)}function O(r,Y=!0){return $.BASE.multiply(U.fromBytes(r)).toBytes(Y)}function D(r){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g;if(!yU(r))return;if("_lengths"in U&&U._lengths||Y===V)return;let T=q$(r,void 0,"key").length;return T===V||T===W}function X(r,Y,V=!0){if(D(r)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(r);return $.fromBytes(Y).multiply(W).toBytes(V)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=lJ(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:w,Point:$,utils:N,lengths:g})}function sO($,v,U={}){Bv(v),XU(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let I=U.randomBytes||ng,g=U.hmac||((Z,M)=>tU(v,Z,M)),{Fp:J,Fn:z}=$,{ORDER:G,BITS:O}=z,{keygen:D,getPublicKey:X,getSharedSecret:N,utils:w,lengths:r}=DM($,U),Y={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},V=G*Uq<J.ORDER;function W(Z){let M=G>>aU;return Z>M}function T(Z,M){if(!z.isValidNot0(M))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return M}function u(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function n(Z,M){aO(M);let j=r.signature,A=M==="compact"?j:M==="recovered"?j+1:void 0;return q$(Z,A)}class L{r;s;recovery;constructor(Z,M,j){if(this.r=T("r",Z),this.s=T("s",M),j!=null){if(u(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(Z,M=Y.format){n(Z,M);let j;if(M==="der"){let{r:C,s:x}=ig.toSig(q$(Z));return new L(C,x)}if(M==="recovered")j=Z[0],M="compact",Z=Z.subarray(1);let A=r.signature/2,R=Z.subarray(0,A),E=Z.subarray(A,A*2);return new L(z.fromBytes(R),z.fromBytes(E),j)}static fromHex(Z,M){return this.fromBytes(QU(Z),M)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new L(this.r,this.s,Z)}recoverPublicKey(Z){let{r:M,s:j}=this,A=this.assertRecovery(),R=A===2||A===3?M+G:M;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),C=$.fromBytes(_$(Iq((A&1)===0),E)),x=z.inv(R),s=l(q$(Z,void 0,"msgHash")),J$=z.create(-s*x),G$=z.create(j*x),Q$=$.BASE.multiplyUnsafe(J$).add(C.multiplyUnsafe(G$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return W(this.s)}toBytes(Z=Y.format){if(aO(Z),Z==="der")return QU(ig.hexFromSig(this));let{r:M,s:j}=this,A=z.toBytes(M),R=z.toBytes(j);if(Z==="recovered")return u(),_$(Uint8Array.of(this.assertRecovery()),A,R);return _$(A,R)}toHex(Z){return DU(this.toBytes(Z))}}let i=U.bits2int||function(M){if(M.length>8192)throw Error("input is too large");let j=bg(M),A=M.length*8-O;return A>0?j>>BigInt(A):j},l=U.bits2int_modN||function(M){return z.create(i(M))},h=I0(O);function _(Z){return U0("num < 2^"+O,Z,Zg,h),z.toBytes(Z)}function b(Z,M){return q$(Z,void 0,"message"),M?q$(v(Z),void 0,"prehashed message"):Z}function g$(Z,M,j){let{lowS:A,prehash:R,extraEntropy:E}=tO(j,Y);Z=b(Z,R);let C=l(Z),x=z.fromBytes(M);if(!z.isValidNot0(x))throw Error("invalid private key");let s=[_(x),_(C)];if(E!=null&&E!==!1){let r$=E===!0?I(r.secretKey):E;s.push(q$(r$,void 0,"extraEntropy"))}let J$=_$(...s),G$=C;function Q$(r$){let X$=i(r$);if(!z.isValidNot0(X$))return;let N$=z.inv(X$),W$=$.BASE.multiply(X$).toAffine(),k$=z.create(W$.x);if(k$===Zg)return;let E$=z.create(N$*z.create(G$+k$*x));if(E$===Zg)return;let a$=(W$.x===k$?0:2)|Number(W$.y&aU),e$=E$;if(A&&W(E$))e$=z.neg(E$),a$^=1;return new L(k$,e$,V?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(Z,M,j={}){let{seed:A,k2sig:R}=g$(Z,M,j);return Lw(v.outputLen,z.BYTES,g)(A,R).toBytes(j.format)}function K(Z,M,j,A={}){let{lowS:R,prehash:E,format:C}=tO(A,Y);if(j=q$(j,void 0,"publicKey"),M=b(M,E),!yU(Z)){let x=Z instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}n(Z,C);try{let x=L.fromBytes(Z,C),s=$.fromBytes(j);if(R&&x.hasHighS())return!1;let{r:J$,s:G$}=x,Q$=l(M),r$=z.inv(G$),X$=z.create(Q$*r$),N$=z.create(J$*r$),W$=$.BASE.multiplyUnsafe(X$).add(s.multiplyUnsafe(N$));if(W$.is0())return!1;return z.create(W$.x)===J$}catch(x){return!1}}function k(Z,M,j={}){let{prehash:A}=tO(j,Y);return M=b(M,A),L.fromBytes(Z,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:D,getPublicKey:X,getSharedSecret:N,utils:w,lengths:r,Point:$,sign:S,verify:K,recoverPublicKey:k,Signature:L,hash:v})}function zq($,v,U){return $&v^~$&U}function Gq($,v,U){return $&v^$&U^v&U}class pJ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){Wg(this),q$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=xJ($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wg(this),FJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Zv(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=xJ($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Vg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),jg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var tJ=BigInt(4294967295),Oq=BigInt(32);function QM($,v=!1){if(v)return{h:Number($&tJ),l:Number($>>Oq&tJ)};return{h:Number($>>Oq&tJ)|0,l:Number($&tJ)|0}}function aJ($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=QM($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var $8=($,v,U)=>$>>>U,v8=($,v,U)=>$<<32-U|v>>>U,wU=($,v,U)=>$>>>U|v<<32-U,qU=($,v,U)=>$<<32-U|v>>>U,O0=($,v,U)=>$<<64-U|v>>>U-32,D0=($,v,U)=>$>>>U-32|v<<64-U;var Dq=($,v,U)=>$<<U|v>>>32-U,Qq=($,v,U)=>v<<U|$>>>32-U,Xq=($,v,U)=>v<<U-32|$>>>64-U,Nq=($,v,U)=>$<<U-32|v>>>64-U;function tv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var rq=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),wq=($,v,U,I)=>v+U+I+($/4294967296|0)|0,qq=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),Yq=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,Wq=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),Zq=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var NM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),xg=new Uint32Array(64);class g8 extends pJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)xg[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=xg[X-15],w=xg[X-2],r=mv(N,7)^mv(N,18)^N>>>3,Y=mv(w,17)^mv(w,19)^w>>>10;xg[X]=Y+xg[X-7]+r+xg[X-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=mv(z,6)^mv(z,11)^mv(z,25),w=D+N+zq(z,G,O)+NM[X]+xg[X]|0,Y=(mv(U,2)^mv(U,13)^mv(U,22))+Gq(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Zv(xg)}destroy(){this.set(0,0,0,0,0,0,0,0),Zv(this.buffer)}}class Vq extends g8{A=Vg[0]|0;B=Vg[1]|0;C=Vg[2]|0;D=Vg[3]|0;E=Vg[4]|0;F=Vg[5]|0;G=Vg[6]|0;H=Vg[7]|0;constructor(){super(32)}}class rM extends g8{A=jg[0]|0;B=jg[1]|0;C=jg[2]|0;D=jg[3]|0;E=jg[4]|0;F=jg[5]|0;G=jg[6]|0;H=jg[7]|0;constructor(){super(28)}}var jq=(()=>aJ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),wM=(()=>jq[0])(),qM=(()=>jq[1])(),og=new Uint32Array(80),cg=new Uint32Array(80);class Q0 extends pJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:w,Gl:r,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V]}set($,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=w|0,this.Gl=r|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)og[u]=$.getUint32(v),cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let n=og[u-15]|0,L=cg[u-15]|0,i=wU(n,L,1)^wU(n,L,8)^$8(n,L,7),l=qU(n,L,1)^qU(n,L,8)^v8(n,L,7),h=og[u-2]|0,_=cg[u-2]|0,b=wU(h,_,19)^O0(h,_,61)^$8(h,_,6),g$=qU(h,_,19)^D0(h,_,61)^v8(h,_,6),S=qq(l,g$,cg[u-7],cg[u-16]),K=Yq(S,i,b,og[u-7],og[u-16]);og[u]=K|0,cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:w,Fl:r,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let n=wU(X,N,14)^wU(X,N,18)^O0(X,N,41),L=qU(X,N,14)^qU(X,N,18)^D0(X,N,41),i=X&w^~X&Y,l=N&r^~N&V,h=Wq(T,L,l,qM[u],cg[u]),_=Zq(h,W,n,i,wM[u],og[u]),b=h|0,g$=wU(U,I,28)^O0(U,I,34)^O0(U,I,39),S=qU(U,I,28)^D0(U,I,34)^D0(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=r|0,w=X|0,r=N|0,{h:X,l:N}=tv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=rq(b,S,k);U=wq(Z,_,g$,K),I=Z|0}({h:U,l:I}=tv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=tv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=tv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=tv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=tv(this.Eh|0,this.El|0,X|0,N|0),{h:w,l:r}=tv(this.Fh|0,this.Fl|0,w|0,r|0),{h:Y,l:V}=tv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=tv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,X,N,w,r,Y,V,W,T)}roundClean(){Zv(og,cg)}destroy(){Zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class YM extends Q0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class Mq extends Q0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Uv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Iv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class WM extends Q0{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(28)}}class ZM extends Q0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(32)}}var eJ=lU(()=>new Vq,_g(1));var Rq=lU(()=>new Mq,_g(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VM=BigInt(1),uq=BigInt(2),jM=BigInt(3),MM=BigInt(5),DA=BigInt(8),Kq=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RM($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=Kq,G=$*$%J*$%J,O=Cv(G,uq,J)*G%J,D=Cv(O,VM,J)*$%J,X=Cv(D,MM,J)*D%J,N=Cv(X,v,J)*X%J,w=Cv(N,U,J)*N%J,r=Cv(w,I,J)*w%J,Y=Cv(r,g,J)*r%J,V=Cv(Y,g,J)*r%J,W=Cv(V,v,J)*X%J;return{pow_p_5_8:Cv(W,uq,J)*$%J,b2:G}}function uM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Tq=(()=>{let $=Kq;return $q({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=RM(v);return Dv(Cv(U,jM,$)*I,$)},adjustScalarBytes:uM})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TM=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var HM=eO(KM),U8=sO(HM,eJ);var AM=eO(TM),Hq=sO(AM,Rq);function Sq($,v,U){if(Bv($),U===void 0)U=new Uint8Array($.outputLen);return tU($,U,v)}var I8=Uint8Array.of(0),Aq=Uint8Array.of();function kq($,v,U,I=32){Bv($),F$(I,"length");let g=$.outputLen;if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=Aq;else q$(U,void 0,"info");let z=new Uint8Array(J*g),G=tU.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)I8[0]=X+1,O.update(X===0?Aq:D).update(U).update(I8).digestInto(D),z.set(D,g*X),G._cloneInto(O);return G.destroy(),O.destroy(),Zv(D,I8),z.slice(0,I)}var SM=BigInt(0),X0=BigInt(1),kM=BigInt(2),PM=BigInt(7),EM=BigInt(256),BM=BigInt(113),Bq=[],Cq=[],Lq=[];for(let $=0,v=X0,U=1,I=0;$<24;$++){[U,I]=[I,(2*U+3*I)%5],Bq.push(2*(5*I+U)),Cq.push(($+1)*($+2)/2%64);let g=SM;for(let J=0;J<7;J++)if(v=(v<<X0^(v>>PM)*BM)%EM,v&kM)g^=X0<<(X0<<BigInt(J))-X0;Lq.push(g)}var fq=aJ(Lq,!0),CM=fq[0],LM=fq[1],Pq=($,v,U)=>U>32?Xq($,v,U):Dq($,v,U),Eq=($,v,U)=>U>32?Nq($,v,U):Qq($,v,U);function fM($,v=24){let U=new Uint32Array(10);for(let I=24-v;I<24;I++){for(let z=0;z<10;z++)U[z]=$[z]^$[z+10]^$[z+20]^$[z+30]^$[z+40];for(let z=0;z<10;z+=2){let G=(z+8)%10,O=(z+2)%10,D=U[O],X=U[O+1],N=Pq(D,X,1)^U[G],w=Eq(D,X,1)^U[G+1];for(let r=0;r<50;r+=10)$[z+r]^=N,$[z+r+1]^=w}let g=$[2],J=$[3];for(let z=0;z<24;z++){let G=Cq[z],O=Pq(g,J,G),D=Eq(g,J,G),X=Bq[z];g=$[X],J=$[X+1],$[X]=O,$[X+1]=D}for(let z=0;z<50;z+=10){for(let G=0;G<10;G++)U[G]=$[z+G];for(let G=0;G<10;G++)$[z+G]^=~U[(G+2)%10]&U[(G+4)%10]}$[0]^=CM[I],$[1]^=LM[I]}Zv(U)}class sJ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,U,I=!1,g=24){if(this.blockLen=$,this.suffix=v,this.outputLen=U,this.enableXOF=I,this.rounds=g,F$(U,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=iJ(this.state)}clone(){return this._cloneInto()}keccak(){nO(this.state32),fM(this.state32,this.rounds),nO(this.state32),this.posOut=0,this.pos=0}update($){Wg(this),q$($);let{blockLen:v,state:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(v-this.pos,I-g);for(let z=0;z<J;z++)U[this.pos++]^=$[g++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:U,blockLen:I}=this;if($[U]^=v,(v&128)!==0&&U===I-1)this.keccak();$[I-1]^=128,this.keccak()}writeInto($){Wg(this,!1),q$($),this.finish();let v=this.state,{blockLen:U}=this;for(let I=0,g=$.length;I<g;){if(this.posOut>=U)this.keccak();let J=Math.min(U-this.posOut,g-I);$.set(v.subarray(this.posOut,this.posOut+J),I),this.posOut+=J,I+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(FJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Zv(this.state)}_cloneInto($){let{blockLen:v,suffix:U,outputLen:I,rounds:g,enableXOF:J}=this;return $||=new sJ(v,U,I,J,g),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=g,$.suffix=U,$.outputLen=I,$.enableXOF=J,$.destroyed=this.destroyed,$}}var nq=($,v,U,I={})=>lU(()=>new sJ(v,$,U),I);var YU=nq(6,136,32,_g(8));var _q=nq(6,72,64,_g(10));var bq=($,v,U,I={})=>lU((g={})=>new sJ(v,$,g.dkLen===void 0?U:g.dkLen,!0),I),mq=bq(31,168,16,_g(11)),av=bq(31,136,32,_g(12));function J8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iq($){return J8($),($&$-1)===0&&$!==0}function z8($,v){J8($);let U=0;for(let I=0;I<v;I++,$>>>=1)U=U<<1|$&1;return U}function xq($){return J8($),31-Math.clz32($)}function Fq($){let v=$.length;if(v<2||!iq(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let U=xq(v);for(let I=0;I<v;I++){let g=z8(I,U);if(I<g){let J=$[I];$[I]=$[g],$[g]=J}}return $}var G8=($,v)=>{let{N:U,roots:I,dit:g,invertButterflies:J=!1,skipStages:z=0,brp:G=!0}=v,O=xq(U);if(!iq(U))throw Error("FFT: Polynomial size should be power of two");let D=g!==J;return(X)=>{if(X.length!==U)throw Error("FFT: wrong Polynomial length");if(g&&G)Fq(X);for(let N=0,w=1;N<O-z;N++){let r=g?N+1+z:O-N,Y=1<<r,V=Y>>1,W=U>>r;for(let T=0;T<U;T+=Y)for(let u=0,n=w++;u<V;u++){let L=J?g?U-n:n:u*W,i=T+u,l=T+u+V,h=I[L],_=X[l],b=X[i];if(D){let g$=$.mul(_,h);X[i]=$.add(b,g$),X[l]=$.sub(b,g$)}else if(J)X[i]=$.add(_,b),X[l]=$.mul($.sub(_,b),h);else X[i]=$.add(b,_),X[l]=$.mul($.sub(b,_),h)}}if(!g&&G)Fq(X);return X}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=ng;function $z($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function oq($){return Uint8Array.from($)}function WU($,...v){let U=(g)=>typeof g==="number"?g:g.bytesLen,I=v.reduce((g,J)=>g+U(J),0);return{bytesLen:I,encode:(g)=>{let J=new Uint8Array(I);for(let z=0,G=0;z<v.length;z++){let O=v[z],D=U(O),X=typeof O==="number"?g[z]:O.encode(g[z]);if(q$(X,D,$),J.set(X,G),typeof O!=="number")X.fill(0);G+=D}return J},decode:(g)=>{q$(g,I,$);let J=[];for(let z of v){let G=U(z),O=g.subarray(0,G);J.push(typeof z==="number"?O:z.decode(O)),g=g.subarray(G)}return J}}}function vz($,v){let U=v*$.bytesLen;return{bytesLen:U,encode:(I)=>{if(I.length!==v)throw Error(`vecCoder.encode: wrong length=${I.length}. Expected: ${v}`);let g=new Uint8Array(U);for(let J=0,z=0;J<I.length;J++){let G=$.encode(I[J]);g.set(G,z),G.fill(0),z+=G.length}return g},decode:(I)=>{q$(I,U);let g=[];for(let J=0;J<I.length;J+=$.bytesLen)g.push($.decode(I.subarray(J,J+$.bytesLen)));return g}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let U of v)U.fill(0);else v.fill(0)}function O8($){return(1<<$)-1}var KA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var cq=($)=>{let{newPoly:v,N:U,Q:I,F:g,ROOT_OF_UNITY:J,brvBits:z,isKyber:G}=$,O=(u,n=I)=>{let L=u%n|0;return(L>=0?L|0:n+L|0)|0},D=(u,n=I)=>{let L=O(u,n)|0;return(L>n>>1?L-n|0:L)|0};function X(){let u=v(U);for(let n=0;n<U;n++){let L=z8(n,z),i=BigInt(J)**BigInt(L)%BigInt(I);u[n]=Number(i)|0}return u}let N=X(),w={add:(u,n)=>O((u|0)+(n|0))|0,sub:(u,n)=>O((u|0)-(n|0))|0,mul:(u,n)=>O((u|0)*(n|0))|0,inv:(u)=>{throw Error("not implemented")}},r={N:U,roots:N,invertButterflies:!0,skipStages:G?1:0,brp:!1},Y=G8(w,{dit:!1,...r}),V=G8(w,{dit:!0,...r});return{mod:O,smod:D,nttZetas:N,NTT:{encode:(u)=>{return Y(u)},decode:(u)=>{V(u);for(let n=0;n<u.length;n++)u[n]=O(g*u[n]);return u}},bitsCoder:(u,n)=>{let L=O8(u),i=u*(U/8);return{bytesLen:i,encode:(l)=>{let h=new Uint8Array(i);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=(n.encode(l[_])&L)<<g$,g$+=u;for(;g$>=8;g$-=8,b>>=8)h[S++]=b&O8(g$)}return h},decode:(l)=>{let h=v(U);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=l[_]<<g$,g$+=8;for(;g$>=u;g$-=u,b>>=u)h[S++]=n.decode(b&L)}return h}}}}},nM=($)=>(v,U)=>{if(!U)U=$.blockLen;let I=new Uint8Array(v.length+2);I.set(v);let g=v.length,J=new Uint8Array(U),z=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(D,X)=>{return I[g+0]=D,I[g+1]=X,z.destroy(),z=$.create({}).update(I),G++,()=>{return O++,z.xofInto(J)}},clean:()=>{z.destroy(),m$(J,I)}}},yq=nM(mq);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,Mg=3329,_M=3303,bM=17,{mod:w0,nttZetas:mM,NTT:ZU,bitsCoder:FM}=cq({N:Jv,Q:Mg,F:_M,ROOT_OF_UNITY:bM,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),D8={512:{N:Jv,Q:Mg,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:Mg,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:Mg,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iM=($)=>{if($>=12)return{encode:(U)=>U,decode:(U)=>U};let v=2**($-1);return{encode:(U)=>((U<<$)+Mg/2)/Mg,decode:(U)=>U*Mg+v>>>$}},N0=($)=>FM($,iM($));function VU($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]+v[U])}function xM($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]-v[U])}function oM($,v,U,I,g){let J=w0(v*I*g+$*U),z=w0($*I+v*U);return{c0:J,c1:z}}function gz($,v){for(let U=0;U<Jv/2;U++){let I=mM[64+(U>>1)];if(U&1)I=-I;let{c0:g,c1:J}=oM($[2*U+0],$[2*U+1],v[2*U+0],v[2*U+1],I);$[2*U+0]=g,$[2*U+1]=J}return $}function lq($){let v=new Uint16Array(Jv);for(let U=0;U<Jv;){let I=$();if(I.length%3)throw Error("SampleNTT: unaligned block");for(let g=0;U<Jv&&g+3<=I.length;g+=3){let J=(I[g+0]>>0|I[g+1]<<8)&4095,z=(I[g+1]>>4|I[g+2]<<4)&4095;if(J<Mg)v[U++]=J;if(U<Jv&&z<Mg)v[U++]=z}}return v}function r0($,v,U,I){let g=$(I*Jv/4,v,U),J=new Uint16Array(Jv),z=iJ(g),G=0;for(let O=0,D=0,X=0,N=0;O<z.length;O++){let w=z[O];for(let r=0;r<32;r++)if(X+=w&1,w>>=1,G+=1,G===I)N=X,X=0;else if(G===2*I)J[D++]=w0(N-X),X=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return J}var cM=($)=>{let{K:v,PRF:U,XOF:I,HASH512:g,ETA1:J,ETA2:z,du:G,dv:O}=$,D=N0(1),X=N0(O),N=N0(G),w=WU("publicKey",vz(N0(12),v),32),r=vz(N0(12),v),Y=WU("ciphertext",vz(N,v),X),V=WU("seed",32,32);return{secretCoder:r,lengths:{secretKey:r.bytesLen,publicKey:w.bytesLen,cipherText:Y.bytesLen},keygen:(W)=>{q$(W,32,"seed");let T=new Uint8Array(33);T.set(W),T[32]=v;let u=g(T),[n,L]=V.decode(u),i=[],l=[];for(let b=0;b<v;b++)i.push(ZU.encode(r0(U,L,b,J)));let h=I(n);for(let b=0;b<v;b++){let g$=ZU.encode(r0(U,L,v+b,J));for(let S=0;S<v;S++){let K=lq(h.get(S,b));VU(g$,gz(K,i[S]))}l.push(g$)}h.clean();let _={publicKey:w.encode([l,n]),secretKey:r.encode(i)};return m$(n,L,i,l,T,u),_},encrypt:(W,T,u)=>{let[n,L]=w.decode(W),i=[];for(let S=0;S<v;S++)i.push(ZU.encode(r0(U,u,S,J)));let l=I(L),h=new Uint16Array(Jv),_=[];for(let S=0;S<v;S++){let K=r0(U,u,v+S,z),k=new Uint16Array(Jv);for(let Z=0;Z<v;Z++){let M=lq(l.get(S,Z));VU(k,gz(M,i[Z]))}VU(K,ZU.decode(k)),_.push(K),VU(h,gz(n[S],i[S])),m$(k)}l.clean();let b=r0(U,u,2*v,z);VU(b,ZU.decode(h));let g$=D.decode(T);return VU(g$,b),m$(n,i,h,b),Y.encode([_,g$])},decrypt:(W,T)=>{let[u,n]=Y.decode(W),L=r.decode(T),i=new Uint16Array(Jv);for(let l=0;l<v;l++)VU(i,gz(L[l],ZU.encode(u[l])));return xM(n,ZU.decode(i)),m$(i,L,u),D.encode(n)}}};function Q8($){let v=cM($),{HASH256:U,HASH512:I,KDF:g}=$,{secretCoder:J,lengths:z}=v,G=WU("secretKey",z.secretKey,z.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...z,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(X=ev(64))=>{q$(X,64,"seed");let{publicKey:N,secretKey:w}=v.keygen(X.subarray(0,32)),r=U(N),Y=G.encode([w,N,r,X.subarray(32)]);return m$(w,r),{publicKey:N,secretKey:Y}},getPublicKey:(X)=>{let[N,w,r,Y]=G.decode(X);return Uint8Array.from(w)},encapsulate:(X,N=ev(32))=>{q$(X,z.publicKey,"publicKey"),q$(N,32,"message");let w=X.subarray(0,384*$.K),r=J.encode(J.decode(oq(w)));if(!$z(r,w))throw m$(r),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(r);let Y=I.create().update(N).update(U(X)).digest(),V=v.encrypt(X,N,Y.subarray(32,64));return m$(Y.subarray(32)),{cipherText:V,sharedSecret:Y.subarray(0,32)}},decapsulate:(X,N)=>{q$(N,G.bytesLen,"secretKey"),q$(X,z.cipherText,"cipherText");let w=G.bytesLen-96,r=w+32,Y=U(N.subarray(w/2,r));if(!$z(Y,N.subarray(r,r+32)))throw Error("invalid secretKey: hash check failed");let[V,W,T,u]=G.decode(N),n=v.decrypt(X,V),L=I.create().update(n).update(T).digest(),i=L.subarray(0,32),l=v.encrypt(W,n,L.subarray(32,64)),h=$z(X,l),_=g.create({dkLen:32}).update(u).update(X).digest();return m$(n,l,!h?i:_),h?i:_}}}function yM($,v,U){return av.create({dkLen:$}).update(v).update(new Uint8Array([U])).digest()}var X8={HASH256:YU,HASH512:_q,KDF:av,XOF:yq,PRF:yM},fA=Q8({...X8,...D8[512]}),q0=Q8({...X8,...D8[768]}),dq=Q8({...X8,...D8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lM($,v=!1){let{lengths:U,keygen:I}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");I=(z=ev(U.seed))=>{q$(z,U.seed,"seed");let G=J.isLE?mg(z):bg(z),O=J.toBytes(J.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:U.secretKey,publicKey:U.publicKey,seed:U.seed},keygen:I,getPublicKey:(g)=>$.getPublicKey(g)}}function N8($,v=!1){let U=lM($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...U.lengths,msg:U.lengths.seed,cipherText:U.lengths.publicKey},keygen:U.keygen,getPublicKey:U.getPublicKey,encapsulate(I,g=ev($.lengths.seed)){let J=this.keygen(g).secretKey,z=this.decapsulate(I,J),G=$.getPublicKey(J);return m$(J),{sharedSecret:z,cipherText:G}},decapsulate(I,g){let J=$.getSharedSecret(g,I);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function Y0($,v){return WU(v,...$.map((U)=>{if(typeof U.lengths[v]!=="number")throw Error("wrong length: "+v);return U.lengths[v]}))}function r8($){return(v,U)=>$(v,{dkLen:U})}function dM($,v,...U){let I=Y0(U,"seed"),g=Y0(U,"publicKey");if($===void 0)$=I.bytesLen;F$($);function J(z){q$(z,$);let G=I.decode(v(z,I.bytesLen)),O=U.map((N,w)=>N.keygen(G[w])),D=O.map((N)=>N.secretKey),X=O.map((N)=>N.publicKey);return{secretKey:D,publicKey:X}}return{info:{lengths:{seed:$,publicKey:g.bytesLen,secretKey:$}},getPublicKey(z){return this.keygen(z).publicKey},keygen(z=ev($)){let{publicKey:G,secretKey:O}=J(z),D=g.encode(G);return m$(G),m$(O),{secretKey:z,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function Uz($,v,U,I,...g){let J=dM($,U,...g),z=Y0(g,"cipherText"),G=Y0(g,"publicKey"),O=Y0(g,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:z.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,X=ev(O.bytesLen)){let N=G.decode(D),w=O.decode(X),r=g.map((T,u)=>T.encapsulate(N[u],w[u])),Y=r.map((T)=>T.sharedSecret),V=r.map((T)=>T.cipherText),W={sharedSecret:I(N,V,Y),cipherText:z.encode(V)};return m$(Y,V),W},decapsulate(D,X){let N=z.decode(D),{publicKey:w,secretKey:r}=J.expandDecapsulationKey(X),Y=g.map((V,W)=>V.decapsulate(N[W],r[W]));return I(w,N,Y)}}}function hq($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,r8(I),(J,z,G)=>g(_$(G[0],G[1],z[1],J[1],Fg($))),v,U)}var lA=hq("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",q0,N8(U8,!0),av,YU),dA=hq("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",dq,N8(Hq,!0),av,YU);function hM($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,r8(I),(J,z,G)=>{let O=_$(G[0],G[1],z[0],J[0],z[1],J[1],Fg($)),D=32,X=_$(Fg("hybrid_prk"),O),N=Sq(g,X),w=_$(dU(32,2),Fg("shared_secret"),Fg("")),r=kq(g,N,w,32);return m$(N,w,X,O),r},v,U)}var pq=N8(Tq),hA=hM("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",q0,pq,av,eJ),pM=(()=>Uz(32,32,r8(av),($,v,U)=>YU(_$(U[0],U[1],v[1],$[1],Fg("\\.//^\\"))),q0,pq))();function tM($,v,U,I){let g=$.Point.Fn;if(!g)throw Error("no Point.Fn");function J(z){let G;for(let X=0,N=v;;X=N,N+=v){if(N>z.length)throw Error("rejection sampling failed");if(G=g.fromBytes(z.subarray(X,N),!0),g.isValidNot0(G))break}let O=g.toBytes(g.create(G)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:U,seed:I,msg:I,cipherText:U},keygen(z=ev(I)){return q$(z,I,"seed"),J(z)},getPublicKey(z){return $.getPublicKey(z,!1)},encapsulate(z,G=ev(I)){q$(G,I,"rand");let{secretKey:O}=J(G),D=this.decapsulate(z,O),X=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:X}},decapsulate(z,G){return $.getSharedSecret(G,z).subarray(1)}}}function aM($,v,U,I){let{secretKey:g,publicKeyUncompressed:J}=U.lengths;if(!g||!J)throw Error("wrong curve");let z=tM(U,g,J,I),G=64,O=G+I;return Uz(32,32,(D)=>{q$(D,32);let X=av(D,{dkLen:O}),N=X.subarray(0,G),w=X.subarray(G,O);return _$(N,w)},(D,X,N)=>YU(_$(N[0],N[1],X[1],D[1],Fg($))),v,z)}var eM=(()=>aM("MLKEM768-P256",q0,U8,128))();var Iz=pM,tq=eM;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=($,v,U)=>x$($,v,U),q8=f$,eU=SJ,h$=(...$)=>YO(...$),sU=($)=>yI($),$I=rO,vI=($)=>Ng($),zz=BigInt(0),w8=BigInt(1);function Rg($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw TypeError(U+"expected boolean, got type="+typeof $)}return $}function Gz($){if(typeof $==="bigint"){if(!Jz($))throw RangeError("positive bigint expected, got "+$)}else q8($);return $}function sv($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(U+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let U=v&&`"${v}" `;throw RangeError(U+"expected safe integer, got "+$)}}function W0($){let v=Gz($).toString(16);return v.length&1?"0"+v:v}function aq($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?zz:BigInt("0x"+$)}function jU($){return aq(SJ($))}function Fv($){return aq(SJ(yg(x$($)).reverse()))}function Oz($,v){if(f$(v),v===0)throw RangeError("zero length");$=Gz($);let U=$.toString(16);if(U.length>v*2)throw RangeError("number too large");return yI(U.padStart(v*2,"0"))}function Z0($,v){return Oz($,v).reverse()}function eq($,v){if($=T$($),v=T$(v),$.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function yg($){return Uint8Array.from(T$($))}function Dz($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw RangeError(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var Jz=($)=>typeof $==="bigint"&&zz<=$;function sM($,v,U){return Jz($)&&Jz(v)&&Jz(U)&&v<=$&&$<U}function ug($,v,U,I){if(!sM(v,U,I))throw RangeError("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function gI($){if($<zz)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>zz;$>>=w8,v+=1);return v}var V0=($)=>(w8<<BigInt($))-w8;function sq($,v,U){if(f$($,"hashLen"),f$(v,"qByteLen"),typeof U!=="function")throw TypeError("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},w=(...W)=>U(D,h$(O,...W)),r=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return h$(...T)};return(W,T)=>{N(),r(W);let u=void 0;while((u=T(Y()))===void 0)r();return N(),u}}function Lv($,v={},U={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function I(J,z,G){if(!G&&z!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw TypeError(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}var Y8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),C$=BigInt(1),MU=BigInt(2),UY=BigInt(3),IY=BigInt(4),JY=BigInt(5),$7=BigInt(7),zY=BigInt(8),v7=BigInt(9),GY=BigInt(16);function B$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let U=$%v;return U>=p$?U:v+U}function fv($,v,U){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let I=$;while(v-- >p$)I*=I,I%=U;return I}function $Y($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let U=B$($,v),I=v,g=p$,J=C$,z=C$,G=p$;while(U!==p$){let D=I/U,X=I-U*D,N=g-z*D,w=J-G*D;I=U,U=X,g=z,J=G,z=N,G=w}if(I!==C$)throw Error("invert: does not exist");return B$(g,v)}function W8($,v,U){let I=$;if(!I.eql(I.sqr(v),U))throw Error("Cannot find square root")}function OY($,v){let U=$,I=(U.ORDER+C$)/IY,g=U.pow(v,I);return W8(U,g,v),g}function g7($,v){let U=$,I=(U.ORDER-JY)/zY,g=U.mul(v,MU),J=U.pow(g,I),z=U.mul(v,J),G=U.mul(U.mul(z,MU),J),O=U.mul(z,U.sub(G,U.ONE));return W8(U,O,v),O}function U7($){let v=Qz($),U=DY($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+$7)/GY;return(G,O)=>{let D=G,X=D.pow(O,z),N=D.mul(X,I),w=D.mul(X,g),r=D.mul(X,J),Y=D.eql(D.sqr(N),O),V=D.eql(D.sqr(w),O);X=D.cmov(X,N,Y),N=D.cmov(r,w,V);let W=D.eql(D.sqr(N),O),T=D.cmov(X,N,W);return W8(D,T,O),T}}function DY($){if($<UY)throw Error("sqrt is not defined for small field");let v=$-C$,U=0;while(v%MU===p$)v/=MU,U++;let I=MU,g=Qz($);while(vY(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return OY;let J=g.pow(I,v),z=(v+C$)/MU;return function(O,D){let X=O;if(X.is0(D))return D;if(vY(X,D)!==1)throw Error("Cannot find square root");let N=U,w=X.mul(X.ONE,J),r=X.pow(D,v),Y=X.pow(D,z);while(!X.eql(r,X.ONE)){if(X.is0(r))return X.ZERO;let V=1,W=X.sqr(r);while(!X.eql(W,X.ONE))if(V++,W=X.sqr(W),V===N)throw Error("Cannot find square root");let T=C$<<BigInt(N-V-1),u=X.pow(w,T);N=V,w=X.sqr(u),r=X.mul(r,w),Y=X.mul(Y,u)}return Y}}function I7($){if($%IY===UY)return OY;if($%zY===JY)return g7;if($%GY===v7)return U7($);return DY($)}var Kg=($,v)=>(B$($,v)&C$)===C$,J7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Z8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=J7.reduce((I,g)=>{return I[g]="function",I},v);if(Lv($,U),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function z7($,v,U){let I=$;if(U<p$)throw Error("invalid exponent, negatives unsupported");if(U===p$)return I.ONE;if(U===C$)return v;let g=I.ONE,J=v;while(U>p$){if(U&C$)g=I.mul(g,J);J=I.sqr(J),U>>=C$}return g}function j0($,v,U=!1){let I=$,g=Array(v.length).fill(U?I.ZERO:void 0),J=v.reduce((G,O,D)=>{if(I.is0(O))return G;return g[D]=G,I.mul(G,O)},I.ONE),z=I.inv(J);return v.reduceRight((G,O,D)=>{if(I.is0(O))return G;return g[D]=I.mul(G,g[D]),I.mul(G,O)},z),g}function vY($,v){let U=$,I=(U.ORDER-C$)/MU,g=U.pow(v,I),J=U.eql(g,U.ONE),z=U.eql(g,U.ZERO),G=U.eql(g,U.neg(U.ONE));if(!J&&!z&&!G)throw Error("invalid Legendre symbol result");return J?1:z?0:-1}function G7($,v){if(v!==void 0)q8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let U=gI($);if(v!==void 0&&v<U)throw Error(`invalid n length: expected bit length (${U}) >= n.length (${v})`);let I=v!==void 0?v:U,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}var gY=new WeakMap;class V8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=C$;_lengths;_mod;constructor($,v={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=G7($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return B$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return B$($*$,this.ORDER)}add($,v){return B$($+v,this.ORDER)}sub($,v){return B$($-v,this.ORDER)}mul($,v){return B$($*v,this.ORDER)}pow($,v){return z7(this,$,v)}div($,v){return B$($*$Y(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return $Y($,this.ORDER)}sqrt($){let v=gY.get(this);if(!v)gY.set(this,v=I7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?Z0($,this.BYTES):Oz($,this.BYTES)}fromBytes($,v=!1){T$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if($.length<1||!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?Fv($):jU($);if(z)G=B$(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return j0(this,$)}cmov($,v,U){return Rg(U,"condition"),U?v:$}}Object.freeze(V8.prototype);function Qz($,v={}){return new V8($,v)}function QY($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let v=gI($-C$);return Math.ceil(v/8)}function j8($){let v=QY($);return v+Math.ceil(v/2)}function XY($,v,U=!1){T$($);let I=$.length,g=QY(v),J=Math.max(j8(v),16);if(I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?Fv($):jU($),G=B$(z,v-C$)+C$;return U?Z0(G,g):Oz(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UI=BigInt(0),RU=BigInt(1);function M0($,v){let U=v.negate();return $?U:v}function uU($,v){let U=j0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function qY($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function M8($,v){qY($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=V0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function NY($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=RU;let D=v*I,X=D+Math.abs(G)-1,N=G===0,w=G<0,r=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:w,isNegF:r,offsetF:D}}var R8=new WeakMap,YY=new WeakMap;function u8($){return YY.get($)||1}function rY($){if($!==UI)throw Error("invalid wNAF")}class R0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>UI){if(v&RU)U=U.add(I);I=I.double(),v>>=RU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=M8(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=M8($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:w}=NY(U,z,J);if(U=G,D)g=g.add(M0(N,v[w]));else I=I.add(M0(X,v[O]))}return rY(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=M8($,this.bits);for(let J=0;J<g.windows;J++){if(U===UI)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=NY(U,J,g);if(U=z,O)continue;else{let X=v[G];I=I.add(D?X.negate():X)}}return rY(U),I}getPrecomputes($,v,U){let I=R8.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);R8.set(v,I)}}return I}cached($,v,U){let I=u8($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=u8($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){qY(v,this.bits),YY.set($,v),R8.delete($)}hasCache($){return u8($)!==1}}function WY($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>UI||I>UI){if(U&RU)J=J.add(g);if(I&RU)z=z.add(g);g=g.double(),U>>=RU,I>>=RU}return{p1:J,p2:z}}function wY($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Z8(v),v}else return Qz($,{isLE:U})}function Xz($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>UI))throw Error(`CURVE.${O} must be positive bigint`)}let g=wY(v.p,U.Fp,I),J=wY(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function u0($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}function K0($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let U=Array.from({length:v}).fill(0);for(let I=v-1;I>=0;I--)U[I]=$&255,$>>>=8;return new Uint8Array(U)}function O7($,v){let U=new Uint8Array($.length);for(let I=0;I<$.length;I++)U[I]=$[I]^v[I];return U}function D7($){if(!$I($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?Dz($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function K8($,v,U,I){if(T$($),sv(U),v=D7(v),v.length>255)v=I(h$(Dz("H2C-OVERSIZE-DST-"),v));let{outputLen:g,blockLen:J}=I,z=Math.ceil(U/g);if(U>65535||z>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,K0(v.length,1)),O=new Uint8Array(J),D=K0(U,2),X=Array(z),N=I(h$(O,$,D,K0(0,1),G));X[0]=I(h$(N,K0(1,1),G));for(let r=1;r<z;r++){let Y=[O7(N,X[r-1]),K0(r+1,1),G];X[r]=I(h$(...Y))}return h$(...X).slice(0,U)}var ZY="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VY=($,v)=>($+($>=0?v:-v)/MY)/v;function Q7($,v,U){ug("scalar",$,$g,U);let[[I,g],[J,z]]=v,G=VY(z*$,U),O=VY(-g*$,U),D=$-G*I-O*J,X=-G*g-O*z,N=D<$g,w=X<$g;if(N)D=-D;if(w)X=-X;let r=V0(Math.ceil(gI(U)/2))+lg;if(D<$g||D>=r||X<$g||X>=r)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:N,k1:D,k2neg:w,k2:X}}function H8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function T8($,v){Lv($);let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if(Rg(U.lowS,"lowS"),Rg(U.prehash,"prehash"),U.format!==void 0)H8(U.format);return U}class jY extends Error{constructor($=""){super($)}}var iv={Err:jY,_tlv:{encode:($,v)=>{let{Err:U}=iv;if(sv($,"tag"),$<0||$>255)throw new U("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=W0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?W0(g.length/2|128):"";return W0($)+J+g+v},decode($,v){let{Err:U}=iv;v=T$(v,void 0,"DER data");let I=0;if($<0||$>255)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=iv;if(Gz($),$<$g)throw new v("integer: negative integers are not allowed");let U=W0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=iv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return jU($)}},toSig($){let{Err:v,_int:U,_tlv:I}=iv,g=T$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=iv,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}};Object.freeze(iv._tlv);Object.freeze(iv._int);Object.freeze(iv);var $g=BigInt(0),lg=BigInt(1),MY=BigInt(2),Nz=BigInt(3),X7=BigInt(4);function RY($,v={}){let U=Xz("weierstrass",$,v),I=U.Fp,g=U.Fn,J=U.CURVE,{h:z,n:G}=J;Lv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let X=KY(I,g);function N(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(S,K,k){if(D&&K.is0())return Uint8Array.of(0);let{x:Z,y:M}=K.toAffine(),j=I.toBytes(Z);if(Rg(k,"isCompressed"),k){N();let A=!I.isOdd(M);return h$(uY(A),j)}else return h$(Uint8Array.of(4),j,I.toBytes(M))}function r(S){T$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:k}=X,Z=S.length,M=S[0],j=S.subarray(1);if(D&&Z===1&&M===0)return{x:I.ZERO,y:I.ZERO};if(Z===K&&(M===2||M===3)){let A=I.fromBytes(j);if(!I.isValid(A))throw Error("bad point: is not on curve, wrong x");let R=W(A),E;try{E=I.sqrt(R)}catch(s){let J$=s instanceof Error?": "+s.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}N();let C=I.isOdd(E);if((M&1)===1!==C)E=I.neg(E);return{x:A,y:E}}else if(Z===k&&M===4){let A=I.BYTES,R=I.fromBytes(j.subarray(0,A)),E=I.fromBytes(j.subarray(A,A*2));if(!T(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${Z}, expected compressed=${K} or uncompressed=${k}`)}let Y=v.toBytes===void 0?w:v.toBytes,V=v.fromBytes===void 0?r:v.fromBytes;function W(S){let K=I.sqr(S),k=I.mul(K,S);return I.add(I.add(k,I.mul(S,J.a)),J.b)}function T(S,K){let k=I.sqr(K),Z=W(S);return I.eql(k,Z)}if(!T(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=I.mul(I.pow(J.a,Nz),X7),n=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(u,n)))throw Error("bad curve params: a or b");function L(S,K,k=!1){if(!I.isValid(K)||k&&I.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof _))throw Error("Weierstrass Point expected")}function l(S){if(!O||!O.basises)throw Error("no endo");return Q7(S,O.basises,g.ORDER)}function h(S,K,k,Z,M){return k=new _(I.mul(k.X,S),k.Y,k.Z),K=M0(Z,K),k=M0(M,k),K.add(k)}class _{static BASE=new _(J.Gx,J.Gy,I.ONE);static ZERO=new _(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(S,K,k){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",k),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:k}=S||{};if(!S||!I.isValid(K)||!I.isValid(k))throw Error("invalid affine point");if(S instanceof _)throw Error("projective point not allowed");if(I.is0(K)&&I.is0(k))return _.ZERO;return new _(K,k,I.ONE)}static fromBytes(S){let K=_.fromAffine(V(T$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return _.fromBytes(sU(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(g$.createCache(this,S),!K)this.multiply(Nz);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&I.is0(S.X)&&I.eql(S.Y,I.ONE)&&I.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:k}=S.toAffine();if(!I.isValid(K)||!I.isValid(k))throw Error("bad point: x or y not field elements");if(!T(K,k))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(S)}equals(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.eql(I.mul(K,A),I.mul(M,Z)),E=I.eql(I.mul(k,A),I.mul(j,Z));return R&&E}negate(){return new _(this.X,I.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,k=I.mul(K,Nz),{X:Z,Y:M,Z:j}=this,A=I.ZERO,R=I.ZERO,E=I.ZERO,C=I.mul(Z,Z),x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(Z,M);return J$=I.add(J$,J$),E=I.mul(Z,j),E=I.add(E,E),A=I.mul(S,E),R=I.mul(k,s),R=I.add(A,R),A=I.sub(x,R),R=I.add(x,R),R=I.mul(A,R),A=I.mul(J$,A),E=I.mul(k,E),s=I.mul(S,s),J$=I.sub(C,s),J$=I.mul(S,J$),J$=I.add(J$,E),E=I.add(C,C),C=I.add(E,C),C=I.add(C,s),C=I.mul(C,J$),R=I.add(R,C),s=I.mul(M,j),s=I.add(s,s),C=I.mul(s,J$),A=I.sub(A,C),E=I.mul(s,x),E=I.add(E,E),E=I.add(E,E),new _(A,R,E)}add(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=J.a,s=I.mul(J.b,Nz),J$=I.mul(K,M),G$=I.mul(k,j),Q$=I.mul(Z,A),r$=I.add(K,k),X$=I.add(M,j);r$=I.mul(r$,X$),X$=I.add(J$,G$),r$=I.sub(r$,X$),X$=I.add(K,Z);let N$=I.add(M,A);return X$=I.mul(X$,N$),N$=I.add(J$,Q$),X$=I.sub(X$,N$),N$=I.add(k,Z),R=I.add(j,A),N$=I.mul(N$,R),R=I.add(G$,Q$),N$=I.sub(N$,R),C=I.mul(x,X$),R=I.mul(s,Q$),C=I.add(R,C),R=I.sub(G$,C),C=I.add(G$,C),E=I.mul(R,C),G$=I.add(J$,J$),G$=I.add(G$,J$),Q$=I.mul(x,Q$),X$=I.mul(s,X$),G$=I.add(G$,Q$),Q$=I.sub(J$,Q$),Q$=I.mul(x,Q$),X$=I.add(X$,Q$),J$=I.mul(G$,X$),E=I.add(E,J$),J$=I.mul(N$,X$),R=I.mul(r$,R),R=I.sub(R,J$),J$=I.mul(r$,G$),C=I.mul(N$,C),C=I.add(C,J$),new _(R,E,C)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(_.ZERO)}multiply(S){let{endo:K}=v;if(!g.isValidNot0(S))throw RangeError("invalid scalar: out of range");let k,Z,M=(j)=>g$.cached(this,j,(A)=>uU(_,A));if(K){let{k1neg:j,k1:A,k2neg:R,k2:E}=l(S),{p:C,f:x}=M(A),{p:s,f:J$}=M(E);Z=x.add(J$),k=h(K.beta,C,s,j,R)}else{let{p:j,f:A}=M(S);k=j,Z=A}return uU(_,[k,Z])[0]}multiplyUnsafe(S){let{endo:K}=v,k=this,Z=S;if(!g.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===$g||k.is0())return _.ZERO;if(Z===lg)return k;if(g$.hasCache(this))return this.multiply(Z);if(K){let{k1neg:M,k1:j,k2neg:A,k2:R}=l(Z),{p1:E,p2:C}=WY(_,k,j,R);return h(K.beta,E,C,M,A)}else return g$.unsafe(k,Z)}toAffine(S){let K=this,k=S,{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(z===lg)return!0;if(S)return S(_,this);return g$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:S}=v;if(z===lg)return this;if(S)return S(_,this);return this.multiplyUnsafe(z)}isSmallOrder(){if(z===lg)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return Rg(S,"isCompressed"),this.assertValidity(),Y(_,this,S)}toHex(S=!0){return eU(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=g.BITS,g$=new R0(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function uY($){return Uint8Array.of($?2:3)}function KY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function N7($,v={}){let{Fn:U}=$,I=v.randomBytes===void 0?vI:v.randomBytes,g=Object.assign(KY($.Fp,U),{seed:Math.max(j8(U.ORDER),16)});function J(r){try{let Y=U.fromBytes(r);return U.isValidNot0(Y)}catch(Y){return!1}}function z(r,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=r.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(r)}catch(T){return!1}}function G(r){return r=r===void 0?I(g.seed):r,XY(T$(r,g.seed,"seed"),U.ORDER)}function O(r,Y=!0){return $.BASE.multiply(U.fromBytes(r)).toBytes(Y)}function D(r){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g,T=U._lengths;if(!$I(r))return;let u=T$(r,void 0,"key").length,n=u===V||u===W,L=u===Y||!!T?.includes(u);if(n&&L)return;return n}function X(r,Y,V=!0){if(D(r)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(r);return $.fromBytes(Y).multiply(W).toBytes(V)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=u0(G,O);return Object.freeze(N),Object.freeze(g),Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:w,Point:$,utils:N,lengths:g})}function TY($,v,U={}){let I=v;Xg(I),Lv(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let g=U.randomBytes===void 0?vI:U.randomBytes,J=U.hmac===void 0?(M,j)=>dv(I,M,j):U.hmac,{Fp:z,Fn:G}=$,{ORDER:O,BITS:D}=G,{keygen:X,getPublicKey:N,getSharedSecret:w,utils:r,lengths:Y}=N7($,U),V={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},W=O*MY+lg<z.ORDER;function T(M){let j=O>>lg;return M>j}function u(M,j){if(!G.isValidNot0(j))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return j}function n(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(M,j){H8(j);let A=Y.signature,R=j==="compact"?A:j==="recovered"?A+1:void 0;return T$(M,R)}class i{r;s;recovery;constructor(M,j,A){if(this.r=u("r",M),this.s=u("s",j),A!=null){if(n(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(M,j=V.format){L(M,j);let A;if(j==="der"){let{r:x,s}=iv.toSig(T$(M));return new i(x,s)}if(j==="recovered")A=M[0],j="compact",M=M.subarray(1);let R=Y.signature/2,E=M.subarray(0,R),C=M.subarray(R,R*2);return new i(G.fromBytes(E),G.fromBytes(C),A)}static fromHex(M,j){return this.fromBytes(sU(M),j)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new i(this.r,this.s,M)}recoverPublicKey(M){let{r:j,s:A}=this,R=this.assertRecovery(),E=R===2||R===3?j+O:j;if(!z.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let C=z.toBytes(E),x=$.fromBytes(h$(uY((R&1)===0),C)),s=G.inv(E),J$=h(T$(M,void 0,"msgHash")),G$=G.create(-J$*s),Q$=G.create(A*s),r$=$.BASE.multiplyUnsafe(G$).add(x.multiplyUnsafe(Q$));if(r$.is0())throw Error("invalid recovery: point at infinify");return r$.assertValidity(),r$}hasHighS(){return T(this.s)}toBytes(M=V.format){if(H8(M),M==="der")return sU(iv.hexFromSig(this));let{r:j,s:A}=this,R=G.toBytes(j),E=G.toBytes(A);if(M==="recovered")return n(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(M){return eU(this.toBytes(M))}}Object.freeze(i.prototype),Object.freeze(i);let l=U.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let A=jU(j),R=j.length*8-D;return R>0?A>>BigInt(R):A}:U.bits2int,h=U.bits2int_modN===void 0?function(j){return G.create(l(j))}:U.bits2int_modN,_=V0(D);function b(M){return ug("num < 2^"+D,M,$g,_),G.toBytes(M)}function g$(M,j){return T$(M,void 0,"message"),j?T$(I(M),void 0,"prehashed message"):M}function S(M,j,A){let{lowS:R,prehash:E,extraEntropy:C}=T8(A,V);M=g$(M,E);let x=h(M),s=G.fromBytes(j);if(!G.isValidNot0(s))throw Error("invalid private key");let J$=[b(s),b(x)];if(C!=null&&C!==!1){let X$=C===!0?g(Y.secretKey):C;J$.push(T$(X$,void 0,"extraEntropy"))}let G$=h$(...J$),Q$=x;function r$(X$){let N$=l(X$);if(!G.isValidNot0(N$))return;let W$=G.inv(N$),k$=$.BASE.multiply(N$).toAffine(),E$=G.create(k$.x);if(E$===$g)return;let a$=G.create(W$*G.create(Q$+E$*s));if(a$===$g)return;let e$=(k$.x===E$?0:2)|Number(k$.y&lg),Wv=a$;if(R&&T(a$))Wv=G.neg(a$),e$^=1;return new i(E$,Wv,W?void 0:e$)}return{seed:G$,k2sig:r$}}function K(M,j,A={}){let{seed:R,k2sig:E}=S(M,j,A);return sq(I.outputLen,G.BYTES,J)(R,E).toBytes(A.format)}function k(M,j,A,R={}){let{lowS:E,prehash:C,format:x}=T8(R,V);if(A=T$(A,void 0,"publicKey"),j=g$(j,C),!$I(M)){let s=M instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+s)}L(M,x);try{let s=i.fromBytes(M,x),J$=$.fromBytes(A);if(E&&s.hasHighS())return!1;let{r:G$,s:Q$}=s,r$=h(j),X$=G.inv(Q$),N$=G.create(r$*X$),W$=G.create(G$*X$),k$=$.BASE.multiplyUnsafe(N$).add(J$.multiplyUnsafe(W$));if(k$.is0())return!1;return G.create(k$.x)===G$}catch(s){return!1}}function Z(M,j,A={}){let{prehash:R}=T8(A,V);return j=g$(j,R),i.fromBytes(M,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:X,getPublicKey:N,getSharedSecret:w,utils:r,lengths:Y,Point:$,sign:K,verify:k,recoverPublicKey:Z,Signature:i,hash:I})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var r7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var w7=RY(r7),II=TY(w7,n$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var dg=BigInt(0),Vv=BigInt(1),A8=BigInt(2),q7=BigInt(8);function Y7($,v,U,I){let g=$.sqr(U),J=$.sqr(I),z=$.add($.mul(v.a,g),J),G=$.add($.ONE,$.mul(v.d,$.mul(g,J)));return $.eql(z,G)}function HY($,v={}){let U=v,I=Xz("edwards",$,U,U.FpFnLE),{Fp:g,Fn:J}=I,z=I.CURVE,{h:G}=z;Lv(U,{},{uvRatio:"function"});let O=A8<<BigInt(J.BYTES*8)-Vv,D=(V)=>g.create(V),X=U.uvRatio===void 0?(V,W)=>{try{return{isValid:!0,value:g.sqrt(g.div(V,W))}}catch(T){return{isValid:!1,value:dg}}}:U.uvRatio;if(!Y7(g,z,z.Gx,z.Gy))throw Error("bad curve params: generator point");function N(V,W,T=!1){let u=T?Vv:dg;return ug("coordinate "+V,W,u,O),W}function w(V){if(!(V instanceof r))throw Error("EdwardsPoint expected")}class r{static BASE=new r(z.Gx,z.Gy,Vv,D(z.Gx*z.Gy));static ZERO=new r(dg,Vv,Vv,dg);static Fp=g;static Fn=J;X;Y;Z;T;constructor(V,W,T,u){this.X=N("x",V),this.Y=N("y",W),this.Z=N("z",T,!0),this.T=N("t",u),Object.freeze(this)}static CURVE(){return z}static fromAffine(V){if(V instanceof r)throw Error("extended point not allowed");let{x:W,y:T}=V||{};return N("x",W),N("y",T),new r(W,T,Vv,D(W*T))}static fromBytes(V,W=!1){let T=g.BYTES,{a:u,d:n}=z;V=yg(T$(V,T,"point")),Rg(W,"zip215");let L=yg(V),i=V[T-1];L[T-1]=i&-129;let l=Fv(L),h=W?O:g.ORDER;ug("point.y",l,dg,h);let _=D(l*l),b=D(_-Vv),g$=D(n*_-u),{isValid:S,value:K}=X(b,g$);if(!S)throw Error("bad point: invalid y coordinate");let k=(K&Vv)===Vv,Z=(i&128)!==0;if(!W&&K===dg&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==k)K=D(-K);return r.fromAffine({x:K,y:l})}static fromHex(V,W=!1){return r.fromBytes(sU(V),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,W=!0){if(Y.createCache(this,V),!W)this.multiply(A8);return this}assertValidity(){let V=this,{a:W,d:T}=z;if(V.is0())throw Error("bad point: ZERO");let{X:u,Y:n,Z:L,T:i}=V,l=D(u*u),h=D(n*n),_=D(L*L),b=D(_*_),g$=D(l*W),S=D(_*D(g$+h)),K=D(b+D(T*D(l*h)));if(S!==K)throw Error("bad point: equation left != right (1)");let k=D(u*n),Z=D(L*i);if(k!==Z)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:W,Y:T,Z:u}=this,{X:n,Y:L,Z:i}=V,l=D(W*i),h=D(n*u),_=D(T*i),b=D(L*u);return l===h&&_===b}is0(){return this.equals(r.ZERO)}negate(){return new r(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=z,{X:W,Y:T,Z:u}=this,n=D(W*W),L=D(T*T),i=D(A8*D(u*u)),l=D(V*n),h=W+T,_=D(D(h*h)-n-L),b=l+L,g$=b-i,S=l-L,K=D(_*g$),k=D(b*S),Z=D(_*S),M=D(g$*b);return new r(K,k,M,Z)}add(V){w(V);let{a:W,d:T}=z,{X:u,Y:n,Z:L,T:i}=this,{X:l,Y:h,Z:_,T:b}=V,g$=D(u*l),S=D(n*h),K=D(i*T*b),k=D(L*_),Z=D((u+n)*(l+h)-g$-S),M=k-K,j=k+K,A=D(S-W*g$),R=D(Z*M),E=D(j*A),C=D(Z*A),x=D(M*j);return new r(R,E,x,C)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!J.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:T}=Y.cached(this,V,(u)=>uU(r,u));return uU(r,[W,T])[0]}multiplyUnsafe(V){if(!J.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===dg)return r.ZERO;if(this.is0()||V===Vv)return this;return Y.unsafe(this,V,(W)=>uU(r,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Y.unsafe(this,z.n).is0()}toAffine(V){let W=this,T=V,{X:u,Y:n,Z:L}=W,i=W.is0();if(T==null)T=i?q7:g.inv(L);let l=D(u*T),h=D(n*T),_=g.mul(L,T);if(i)return{x:dg,y:Vv};if(_!==Vv)throw Error("invZ was invalid");return{x:l,y:h}}clearCofactor(){if(G===Vv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:V,y:W}=this.toAffine(),T=g.toBytes(W);return T[T.length-1]|=V&Vv?128:0,T}toHex(){return eU(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Y=new R0(r,J.BITS);if(J.BITS>=8)r.BASE.precompute(8);return Object.freeze(r.prototype),Object.freeze(r),r}class S8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){Y8()}static fromHex($){Y8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eU(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),JI=BigInt(1),rz=BigInt(2);function W7($){return Lv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function AY($){let v=W7($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z===void 0?vI:z,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),r=G?rz**BigInt(254):rz**BigInt(447),Y=G?BigInt(8)*rz**BigInt(251)-JI:BigInt(4)*rz**BigInt(445)-JI,V=r+Y+JI,W=(Z)=>B$(Z,U),T=u(N);function u(Z){return Z0(W(Z),X)}function n(Z){let M=yg(T$(Z,X,"uCoordinate"));if(G)M[31]&=127;return W(Fv(M))}function L(Z){return Fv(g(yg(T$(Z,X,"scalar"))))}function i(Z,M){let j=g$(n(M),L(Z));if(j===T0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){ug("u",Z,T0,U),ug("scalar",M,r,V);let j=M,A=Z,R=JI,E=T0,C=Z,x=JI,s=T0;for(let G$=BigInt(D-1);G$>=T0;G$--){let Q$=j>>G$&JI;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let r$=R+E,X$=W(r$*r$),N$=R-E,W$=W(N$*N$),k$=X$-W$,E$=C+x,a$=C-x,e$=W(a$*r$),Wv=W(E$*N$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(X$*W$),E=W(k$*(X$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(Z)=>{return Z=Z===void 0?O(X):Z,T$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze(S),Object.freeze(k),Object.freeze({keygen:u0(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z7=BigInt(0),Tg=BigInt(1),SY=BigInt(2),V7=BigInt(3),j7=BigInt(5),M7=BigInt(8),TU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),B8=(()=>({p:TU,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:M7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function EY($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=TU,G=$*$%J*$%J,O=fv(G,SY,J)*G%J,D=fv(O,Tg,J)*$%J,X=fv(D,j7,J)*D%J,N=fv(X,v,J)*X%J,w=fv(N,U,J)*N%J,r=fv(w,I,J)*w%J,Y=fv(r,g,J)*r%J,V=fv(Y,g,J)*r%J,W=fv(V,v,J)*X%J;return{pow_p_5_8:fv(W,SY,J)*$%J,b2:G}}function R7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var k8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function C8($,v){let U=TU,I=B$(v*v*v,U),g=B$(I*I*v,U),J=EY($*g).pow_p_5_8,z=B$($*I*J,U),G=B$(v*z*z,U),O=z,D=B$(z*k8,U),X=G===$,N=G===B$(-$,U),w=G===B$(-$*k8,U);if(X)z=O;if(N||w)z=D;if(Kg(z,U))z=B$(-z,U);return{isValid:X||N,value:z}}var KU=HY(B8,{uvRatio:C8}),hg=(()=>KU.Fp)(),BY=(()=>KU.Fn)();var wz=(()=>{let $=TU;return AY({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=EY(v);return B$(fv(U,V7,$)*I,$)},adjustScalarBytes:R7})})();var P8=k8,u7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),K7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),T7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),H7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),kY=($)=>C8(Tg,$),A7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),E8=($)=>hg.create(Fv($)&A7);function PY($){let{d:v}=B8,U=TU,I=(T)=>hg.create(T),g=I(P8*$*$),J=I((g+Tg)*T7),z=BigInt(-1),G=I((z-v*g)*I(g+v)),{isValid:O,value:D}=C8(J,G),X=I(D*$);if(!Kg(X,U))X=I(-X);if(!O)D=X;if(!O)z=g;let N=I(z*(g-Tg)*H7-G),w=D*D,r=I((D+D)*G),Y=I(N*u7),V=I(Tg-w),W=I(Tg+w);return new KU(I(r*W),I(V*Y),I(Y*W),I(r*V))}class Xv extends S8{static BASE=(()=>new Xv(KU.BASE))();static ZERO=(()=>new Xv(KU.ZERO))();static Fp=(()=>hg)();static Fn=(()=>BY)();constructor($){super($)}static fromAffine($){return new Xv(KU.fromAffine($))}assertSame($){if(!($ instanceof Xv))throw Error("RistrettoPoint expected")}init($){return new Xv($)}static fromBytes($){x$($,32);let{a:v,d:U}=B8,I=TU,g=(n)=>hg.create(n),J=E8($);if(!eq(hg.toBytes(J),$)||Kg(J,I))throw Error("invalid ristretto255 encoding 1");let z=g(J*J),G=g(Tg+v*z),O=g(Tg-v*z),D=g(G*G),X=g(O*O),N=g(v*U*D-X),{isValid:w,value:r}=kY(g(N*X)),Y=g(r*O),V=g(r*Y*N),W=g((J+J)*Y);if(Kg(W,I))W=g(-W);let T=g(G*V),u=g(W*T);if(!w||Kg(u,I)||T===Z7)throw Error("invalid ristretto255 encoding 2");return new Xv(new KU(W,T,Tg,u))}static fromHex($){return Xv.fromBytes(yI($))}toBytes(){let{X:$,Y:v,Z:U,T:I}=this.ep,g=TU,J=(V)=>hg.create(V),z=J(J(U+v)*J(U-v)),G=J($*v),O=J(G*G),{value:D}=kY(J(z*O)),X=J(D*z),N=J(D*G),w=J(X*N*I),r;if(Kg(I*w,g)){let V=J(v*P8),W=J($*P8);$=V,v=W,r=J(X*K7)}else r=N;if(Kg($*w,g))v=J(-v);let Y=J((U-v)*r);if(Kg(Y,g))Y=J(-Y);return hg.toBytes(Y)}equals($){this.assertSame($);let{X:v,Y:U}=this.ep,{X:I,Y:g}=$.ep,J=(O)=>hg.create(O),z=J(v*g)===J(U*I),G=J(U*g)===J(v*I);return z||G}is0(){return this.equals(Xv.ZERO)}}Object.freeze(Xv.BASE);Object.freeze(Xv.ZERO);Object.freeze(Xv.prototype);Object.freeze(Xv);var S7=Object.freeze({Point:Xv,hashToCurve($,v){let U=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,I=K8($,U,64,BJ);return S7.deriveToCurve(I)},hashToScalar($,v={DST:ZY}){let U=K8($,v.DST,64,BJ);return BY.create(Fv(U))},deriveToCurve($){x$($,64);let v=E8($.subarray(0,32)),U=PY(v),I=E8($.subarray(32,64)),g=PY(I);return new Xv(U.add(g))}});var CY=!1,k7=!1;async function LY($,v){if(k7)return await v();try{return await $()}catch(U){if(U instanceof ReferenceError||U instanceof DOMException&&U.name==="NotSupportedError")return await v();else throw U}}async function qz($,v){return await LY(async()=>{let U=L8($)?$:await E7($),I=await crypto.subtle.importKey("raw",B7(v),{name:"X25519"},CY,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:I},U,256))},()=>{if(L8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMult($,v)})}async function H0($){return await LY(async()=>{return qz($,wz.GuBytes)},()=>{if(L8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMultBase($)})}var P7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function E7($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...P7,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},CY,["deriveBits"])}function L8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function B7($){return $}class f8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),L7(HU($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let U=await this.s.read();if(U.done)return this.buf=HU($),null;this.buf=U.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HU(this.transcript)}}}function L7($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HU($){let v=$.reduce((g,J)=>g+J.length,0),U=new Uint8Array(v),I=0;for(let g of $)U.set(g,I),I+=g.length;return U}function zI($,...v){return $.pipeThrough(new TransformStream({start(U){for(let I of v)U.enqueue(I)}}))}function Yz($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function n8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fY($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function nY($,v){let U=$.getReader(),I=[],g=0;while(g<v){let{done:O,value:D}=await U.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");I.push(D),g+=D.length}U.releaseLock();let J=HU(I),z=J.subarray(0,v),G=zI($,J.subarray(v));return{data:z,rest:G}}class vg{args;body;constructor($,v){this.args=$,this.body=v}}async function f7($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let U=v.split(" ");if(U.length<2||U.shift()!=="->")return{next:v};for(let J of U)if(J.length===0)throw Error("invalid stanza");let I=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let z=vv.decode(J);if(z.length>48)throw Error("invalid stanza");if(I.push(z),z.length<48)break}let g=HU(I);return{s:new vg(U,g)}}async function _Y($){let v=new f8($),U=await v.readLine();if(U!=="age-encryption.org/v1")throw Error("invalid version "+(U??"line"));let I=[];for(;;){let{s:g,next:J}=await f7(v);if(g!==void 0){I.push(g);continue}if(!J.startsWith("--- "))throw Error("invalid header");let z=vv.decode(J.slice(4)),{rest:G,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:I,headerNoMAC:D,MAC:z,headerSize:O.length,rest:zI($,G)}}}function _8($){let v=[];v.push(`age-encryption.org/v1
+var Jj=Object.defineProperty;var zj=($)=>$;function Gj($,v){this[$]=zj.bind(null,v)}var lv=($,v)=>{for(var U in v)Jj($,U,{get:v[U],enumerable:!0,configurable:!0,set:Gj.bind(v,U)})};import{parseArgs as Oj}from"util";var Dj={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"},handle:{type:"string"}};function NO($,v){let U=$[v];return typeof U==="boolean"?U:void 0}function KJ($,v){let U=$[v];return typeof U==="string"?U:void 0}function xr($){let{values:v,positionals:U}=Oj({args:$,options:Dj,allowPositionals:!0});if(v.help)return{command:"help",args:[],flags:{help:!0}};if(v.version)return{command:"version",args:[],flags:{version:!0}};return{command:U[0]??"help",args:U.slice(1),flags:{help:NO(v,"help"),version:NO(v,"version"),dryRun:NO(v,"dry-run"),pushTo:KJ(v,"push-to"),cohort:KJ(v,"cohort"),anchorId:KJ(v,"anchor-id"),handle:KJ(v,"handle")}}}var TJ={name:"@rizom/ops",version:"0.2.0-alpha.238",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as l7,mkdirSync as d7,readFileSync as $D,writeFileSync as vD}from"fs";import{dirname as h7,join as lY}from"path";function rO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function f$($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(`${U}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw RangeError(`${U}expected integer >= 0, got ${$}`)}}function x$($,v,U=""){let I=rO($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function Xg($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(f$($.outputLen),f$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function FU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function HJ($,v){x$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw RangeError('"digestInto() output" expected to be of length >='+U)}function AJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Ov(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function iU($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function _v($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var Xj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Nj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function rj($){for(let v=0;v<$.length;v++)$[v]=Nj($[v]);return $}var wO=Xj?($)=>$:rj,cr=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),wj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function SJ($){if(x$($),cr)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=wj[$[U]];return v}var Qg={_0:48,_9:57,A:65,F:70,a:97,f:102};function or($){if($>=Qg._0&&$<=Qg._9)return $-Qg._0;if($>=Qg.A&&$<=Qg.F)return $-(Qg.A-10);if($>=Qg.a&&$<=Qg.f)return $-(Qg.a-10);return}function yI($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(cr)try{return Uint8Array.fromHex($)}catch(g){if(g instanceof SyntaxError)throw RangeError(g.message);throw g}let v=$.length,U=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=or($.charCodeAt(J)),G=or($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function qj($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function qO($,v=""){if(typeof $==="string")return qj($);return x$($,void 0,v)}function YO(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];x$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function kJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function WO($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.canXOF=I.canXOF,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function Ng($=32){f$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var ZO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class VO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(Xg($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Ov(I)}update($){return FU(this),this.iHash.update($),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dv=(()=>{let $=(v,U,I)=>new VO(v,U).update(I).digest();return $.create=(v,U)=>new VO(v,U),$})();function lI($,v,U){if(Xg($),U===void 0)U=new Uint8Array($.outputLen);return dv($,U,v)}var jO=Uint8Array.of(0),yr=Uint8Array.of();function MO($,v,U,I=32){Xg($),f$(I,"length"),x$(v,void 0,"prk");let g=$.outputLen;if(v.length<g)throw Error('"prk" must be at least HashLen octets');if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=yr;else x$(U,void 0,"info");let z=new Uint8Array(J*g),G=dv.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)jO[0]=X+1,O.update(X===0?yr:D).update(U).update(jO).digestInto(D),z.set(D,g*X),G._cloneInto(O);return G.destroy(),O.destroy(),Ov(D,jO),z.slice(0,I)}var Eg=($,v,U,I,g)=>MO($,lI($,v,U),I,g);function lr($,v,U){return $&v^~$&U}function dr($,v,U){return $&v^$&U^v&U}class PJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=iU(this.buffer)}update($){FU(this),x$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=iU($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){FU(this),HJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Ov(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=iU($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var rg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),wg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),o$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EJ=BigInt(4294967295),hr=BigInt(32);function Yj($,v=!1){if(v)return{h:Number($&EJ),l:Number($>>hr&EJ)};return{h:Number($>>hr&EJ)|0,l:Number($&EJ)|0}}function pr($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=Yj($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var RO=($,v,U)=>$>>>U,uO=($,v,U)=>$<<32-U|v>>>U,zU=($,v,U)=>$>>>U|v<<32-U,GU=($,v,U)=>$<<32-U|v>>>U,dI=($,v,U)=>$<<64-U|v>>>U-32,hI=($,v,U)=>$>>>U-32|v<<64-U;function hv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var tr=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),ar=($,v,U,I)=>v+U+I+($/4294967296|0)|0,er=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),sr=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,$w=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),vw=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var Zj=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Bg=new Uint32Array(64);class KO extends PJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)Bg[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=Bg[X-15],w=Bg[X-2],r=_v(N,7)^_v(N,18)^N>>>3,Y=_v(w,17)^_v(w,19)^w>>>10;Bg[X]=Y+Bg[X-7]+r+Bg[X-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=_v(z,6)^_v(z,11)^_v(z,25),w=D+N+lr(z,G,O)+Zj[X]+Bg[X]|0,Y=(_v(U,2)^_v(U,13)^_v(U,22))+dr(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Ov(Bg)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ov(this.buffer)}}class gw extends KO{A=rg[0]|0;B=rg[1]|0;C=rg[2]|0;D=rg[3]|0;E=rg[4]|0;F=rg[5]|0;G=rg[6]|0;H=rg[7]|0;constructor(){super(32)}}class Vj extends KO{A=wg[0]|0;B=wg[1]|0;C=wg[2]|0;D=wg[3]|0;E=wg[4]|0;F=wg[5]|0;G=wg[6]|0;H=wg[7]|0;constructor(){super(28)}}var Uw=(()=>pr(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),jj=(()=>Uw[0])(),Mj=(()=>Uw[1])(),Cg=new Uint32Array(80),Lg=new Uint32Array(80);class pI extends PJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:w,Gl:r,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V]}set($,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=w|0,this.Gl=r|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)Cg[u]=$.getUint32(v),Lg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let n=Cg[u-15]|0,L=Lg[u-15]|0,i=zU(n,L,1)^zU(n,L,8)^RO(n,L,7),l=GU(n,L,1)^GU(n,L,8)^uO(n,L,7),h=Cg[u-2]|0,_=Lg[u-2]|0,b=zU(h,_,19)^dI(h,_,61)^RO(h,_,6),g$=GU(h,_,19)^hI(h,_,61)^uO(h,_,6),S=er(l,g$,Lg[u-7],Lg[u-16]),K=sr(S,i,b,Cg[u-7],Cg[u-16]);Cg[u]=K|0,Lg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:w,Fl:r,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let n=zU(X,N,14)^zU(X,N,18)^dI(X,N,41),L=GU(X,N,14)^GU(X,N,18)^hI(X,N,41),i=X&w^~X&Y,l=N&r^~N&V,h=$w(T,L,l,Mj[u],Lg[u]),_=vw(h,W,n,i,jj[u],Cg[u]),b=h|0,g$=zU(U,I,28)^dI(U,I,34)^dI(U,I,39),S=GU(U,I,28)^hI(U,I,34)^hI(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=r|0,w=X|0,r=N|0,{h:X,l:N}=hv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=tr(b,S,k);U=ar(Z,_,g$,K),I=Z|0}({h:U,l:I}=hv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=hv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=hv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=hv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=hv(this.Eh|0,this.El|0,X|0,N|0),{h:w,l:r}=hv(this.Fh|0,this.Fl|0,w|0,r|0),{h:Y,l:V}=hv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=hv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,X,N,w,r,Y,V,W,T)}roundClean(){Ov(Cg,Lg)}destroy(){this.destroyed=!0,Ov(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Iw extends pI{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class Rj extends pI{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uj extends pI{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Kj extends pI{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var n$=WO(()=>new gw,ZO(1));var BJ=WO(()=>new Iw,ZO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function _J($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function AO($){if(!_J($))throw TypeError("Uint8Array expected")}function Dw($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((U)=>typeof U==="string");else return v.every((U)=>Number.isSafeInteger(U))}function Qw($){if(typeof $!=="function")throw TypeError("function expected");return!0}function fg($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function aI($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function LJ($){if(!Array.isArray($))throw TypeError("array expected")}function fJ($,v){if(!Dw(!0,v))throw TypeError(`${$}: array of strings expected`)}function SO($,v){if(!Dw(!1,v))throw TypeError(`${$}: array of numbers expected`)}function uv(...$){let v=(J)=>J,U=(J,z)=>(G)=>J(z(G)),I=$.map((J)=>J.encode).reduceRight(U,v),g=$.map((J)=>J.decode).reduce(U,v);return{encode:I,decode:g}}function Kv($){let v=typeof $==="string"?$.split(""):$,U=v.length;fJ("alphabet",v);let I=new Map(v.map((g,J)=>[g,J]));return{encode:(g)=>{return LJ(g),g.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=U)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(g)=>{return LJ(g),g.map((J)=>{fg("alphabet.decode",J);let z=I.get(J);if(z===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return z})}}}function Tv($=""){return fg("join",$),{encode:(v)=>{return fJ("join.decode",v),v.join($)},decode:(v)=>{return fg("join.decode",v),v.split($)}}}function bJ($,v="="){return aI($),fg("padding",v),{encode(U){fJ("padding.encode",U);while(U.length*$%8)U.push(v);return U},decode(U){fJ("padding.decode",U);let I=U.length;if(I*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;I>0&&U[I-1]===v;I--)if((I-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return U.slice(0,I)}}}function Xw($){return Qw($),{encode:(v)=>v,decode:(v)=>$(v)}}function Jw($,v,U){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(U<2)throw RangeError(`convertRadix: invalid to=${U}, base cannot be less than 2`);if(LJ($),!$.length)return[];let I=0,g=[],J=Array.from($,(G)=>{if(aI(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),z=J.length;while(!0){let G=0,O=!0;for(let D=I;D<z;D++){let X=J[D],N=v*G,w=N+X;if(!Number.isSafeInteger(w)||N/v!==G||w-X!==N)throw Error("convertRadix: carry overflow");let r=w/U;G=w%U;let Y=Math.floor(r);if(J[D]=Y,!Number.isSafeInteger(Y)||Y*U+G!==w)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!Y)I=D;else O=!1}if(g.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)g.push(0);return g.reverse()}var Nw=($,v)=>v===0?$:Nw(v,$%v),nJ=($,v)=>$+(v-Nw($,v)),CJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function TO($,v,U,I){if(LJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(U<=0||U>32)throw RangeError(`convertRadix2: wrong to=${U}`);if(nJ(v,U)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${U} carryBits=${nJ(v,U)}`);let g=0,J=0,z=CJ[v],G=CJ[U]-1,O=[];for(let D of $){if(aI(D),D>=z)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(g=g<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=U;J-=U)O.push((g>>J-U&G)>>>0);let X=CJ[J];if(X===void 0)throw Error("invalid carry");g&=X-1}if(g=g<<U-J&G,!I&&J>=v)throw Error("Excess padding");if(!I&&g>0)throw Error(`Non-zero padding: ${g}`);if(I&&J>0)O.push(g>>>0);return O}function Tj($){aI($);let v=256;return{encode:(U)=>{if(!_J(U))throw TypeError("radix.encode input should be Uint8Array");return Jw(Array.from(U),v,$)},decode:(U)=>{return SO("radix.decode",U),Uint8Array.from(Jw(U,$,v))}}}function Pv($,v=!1){if(aI($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(nJ(8,$)>32||nJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(U)=>{if(!_J(U))throw TypeError("radix2.encode input should be Uint8Array");return TO(Array.from(U),8,$,!v)},decode:(U)=>{return SO("radix2.decode",U),Uint8Array.from(TO(U,$,8,v))}}}function zw($){return Qw($),function(...v){try{return $.apply(null,v)}catch(U){}}}var tT=Object.freeze(uv(Pv(4),Kv("0123456789ABCDEF"),Tv(""))),aT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),bJ(5),Tv(""))),eT=Object.freeze(uv(Pv(5),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Tv(""))),sT=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),bJ(5),Tv(""))),$H=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Tv(""))),vH=Object.freeze(uv(Pv(5),Kv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Tv(""),Xw(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),rw=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Hj=/[\t\n\f\r ]/,ww=($,v)=>{fg("base64",$);let U=v?"base64url":"base64";if($.length>0&&Hj.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:U,lastChunkHandling:"strict"})},kO=Object.freeze(rw?{encode($){return AO($),$.toBase64()},decode($){return ww($,!1)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),bJ(6),Tv(""))),vv=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Tv(""))),gH=Object.freeze(rw?{encode($){return AO($),$.toBase64({alphabet:"base64url"})},decode($){return ww($,!0)}}:uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),bJ(6),Tv(""))),UH=Object.freeze(uv(Pv(6),Kv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Tv(""))),PO=($)=>uv(Tj(58),Kv($),Tv("")),IH=Object.freeze(PO("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),JH=Object.freeze(PO("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),zH=Object.freeze(PO("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var HO=uv(Kv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Tv("")),Gw=[996825010,642813549,513874426,1027748829,705979059];function tI($){let v=$>>25,U=($&33554431)<<5;for(let I=0;I<Gw.length;I++)if((v>>I&1)===1)U^=Gw[I];return U}function Ow($,v,U=1){let I=$.length,g=1;for(let J=0;J<I;J++){let z=$.charCodeAt(J);if(z<33||z>126)throw Error(`Invalid prefix (${$})`);g=tI(g)^z>>5}g=tI(g);for(let J=0;J<I;J++)g=tI(g)^$.charCodeAt(J)&31;for(let J of v)g=tI(g)^J;for(let J=0;J<6;J++)g=tI(g);return g^=U,HO.encode(TO([g%CJ[30]],30,5,!1))}function qw($){let v=$==="bech32"?1:734539939,U=Pv(5),I=U.decode,g=U.encode,J=zw(I);function z(N,w,r=90){if(fg("bech32.encode prefix",N),_J(w))w=Array.from(w);SO("bech32.encode",w);let Y=N.length;if(Y===0)throw TypeError(`Invalid prefix length ${Y}`);let V=Y+7+w.length;if(r!==!1&&V>r)throw TypeError(`Length ${V} exceeds limit ${r}`);let W=N.toLowerCase(),T=Ow(W,w,v);return`${W}1${HO.encode(w)}${T}`}function G(N,w=90){fg("bech32.decode input",N);let r=N.length;if(r<8||w!==!1&&r>w)throw TypeError(`invalid string length: ${r} (${N}). Expected (8..${w})`);let Y=N.toLowerCase();if(N!==Y&&N!==N.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Y.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let W=Y.slice(0,V),T=Y.slice(V+1);if(T.length<6)throw Error("Data must be at least 6 characters long");let u=HO.decode(T).slice(0,-6),n=Ow(W,u,v);if(!T.endsWith(n))throw Error(`Invalid checksum in ${N}: expected "${n}"`);return{prefix:W,words:u}}let O=zw(G);function D(N){let{prefix:w,words:r}=G(N,!1);return{prefix:w,words:r,bytes:I(r)}}function X(N,w){return z(N,g(w))}return{encode:z,decode:G,encodeFromBytes:X,decodeToBytes:D,decodeUnsafe:O,fromWords:I,fromWordsUnsafe:J,toWords:g}}var Hv=Object.freeze(qw("bech32")),GH=Object.freeze(qw("bech32m"));var Aj=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Sj={encode($){return AO($),$.toHex()},decode($){return fg("hex",$),Uint8Array.fromHex($)}},OH=Object.freeze(Aj?Sj:uv(Pv(4),Kv("0123456789abcdef"),Tv(""),Xw(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Pj($,v,U,I){Xg($);let g=kJ({dkLen:32,asyncTick:10},I),{c:J,dkLen:z,asyncTick:G}=g;if(f$(J,"c"),f$(z,"dkLen"),f$(G,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(z<1)throw Error('"dkLen" must be >= 1');if(z>4294967295*$.outputLen)throw Error("derived key too long");let O=qO(v,"password"),D=qO(U,"salt"),X=new Uint8Array(z),N=dv.create($,O),w=N._cloneInto().update(D);return{c:J,dkLen:z,asyncTick:G,DK:X,PRF:N,PRFSalt:w}}function Ej($,v,U,I,g){if($.destroy(),v.destroy(),I)I.destroy();return Ov(g),U}function EO($,v,U,I){let{c:g,dkLen:J,DK:z,PRF:G,PRFSalt:O}=Pj($,v,U,I),D,X=new Uint8Array(4),N=iU(X),w=new Uint8Array(G.outputLen);for(let r=1,Y=0;Y<J;r++,Y+=G.outputLen){let V=z.subarray(Y,Y+G.outputLen);N.setInt32(0,r,!1),(D=O._cloneInto(D)).update(X).digestInto(w),V.set(w.subarray(0,V.length));for(let W=1;W<g;W++){G._cloneInto(D).update(w).digestInto(w);for(let T=0;T<V.length;T++)V[T]^=w[T]}}return Ej(G,O,z,D,w)}function Yw($,v,U,I,g,J){let z=$[v++]^U[I++],G=$[v++]^U[I++],O=$[v++]^U[I++],D=$[v++]^U[I++],X=$[v++]^U[I++],N=$[v++]^U[I++],w=$[v++]^U[I++],r=$[v++]^U[I++],Y=$[v++]^U[I++],V=$[v++]^U[I++],W=$[v++]^U[I++],T=$[v++]^U[I++],u=$[v++]^U[I++],n=$[v++]^U[I++],L=$[v++]^U[I++],i=$[v++]^U[I++],l=z,h=G,_=O,b=D,g$=X,S=N,K=w,k=r,Z=Y,M=V,j=W,A=T,R=u,E=n,C=L,x=i;for(let s=0;s<8;s+=2)g$^=R$(l+R|0,7),Z^=R$(g$+l|0,9),R^=R$(Z+g$|0,13),l^=R$(R+Z|0,18),M^=R$(S+h|0,7),E^=R$(M+S|0,9),h^=R$(E+M|0,13),S^=R$(h+E|0,18),C^=R$(j+K|0,7),_^=R$(C+j|0,9),K^=R$(_+C|0,13),j^=R$(K+_|0,18),b^=R$(x+A|0,7),k^=R$(b+x|0,9),A^=R$(k+b|0,13),x^=R$(A+k|0,18),h^=R$(l+b|0,7),_^=R$(h+l|0,9),b^=R$(_+h|0,13),l^=R$(b+_|0,18),K^=R$(S+g$|0,7),k^=R$(K+S|0,9),g$^=R$(k+K|0,13),S^=R$(g$+k|0,18),A^=R$(j+M|0,7),Z^=R$(A+j|0,9),M^=R$(Z+A|0,13),j^=R$(M+Z|0,18),R^=R$(x+C|0,7),E^=R$(R+x|0,9),C^=R$(E+R|0,13),x^=R$(C+E|0,18);g[J++]=z+l|0,g[J++]=G+h|0,g[J++]=O+_|0,g[J++]=D+b|0,g[J++]=X+g$|0,g[J++]=N+S|0,g[J++]=w+K|0,g[J++]=r+k|0,g[J++]=Y+Z|0,g[J++]=V+M|0,g[J++]=W+j|0,g[J++]=T+A|0,g[J++]=u+R|0,g[J++]=n+E|0,g[J++]=L+C|0,g[J++]=i+x|0}function BO($,v,U,I,g){let J=I+0,z=I+16*g;for(let G=0;G<16;G++)U[z+G]=$[v+(2*g-1)*16+G];for(let G=0;G<g;G++,J+=16,v+=16){if(Yw(U,z,$,v,U,J),G>0)z+=16;Yw(U,J,$,v+=16,U,z)}}function Bj($,v,U){let I=kJ({dkLen:32,asyncTick:10,maxmem:1073742848},U),{N:g,r:J,p:z,dkLen:G,asyncTick:O,maxmem:D,onProgress:X}=I;if(f$(g,"N"),f$(J,"r"),f$(z,"p"),f$(G,"dkLen"),f$(O,"asyncTick"),f$(D,"maxmem"),X!==void 0&&typeof X!=="function")throw Error("progressCb must be a function");let N=128*J,w=N/4,r=Math.pow(2,32);if(g<=1||(g&g-1)!==0||g>r)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(z<1||z>(r-1)*32/N)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(r-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Y=N*(g+z+1);if(Y>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Y+", maxmem="+D);let V=EO(n$,$,v,{c:1,dkLen:N*z}),W=AJ(V),T=AJ(new Uint8Array(N*g)),u=AJ(new Uint8Array(N)),n=()=>{};if(X){let L=2*g*z,i=Math.max(Math.floor(L/1e4),1),l=0;n=()=>{if(l++,X&&(!(l%i)||l===L))X(l/L)}}return{N:g,r:J,p:z,dkLen:G,blockSize32:w,V:T,B32:W,B:V,tmp:u,blockMixCb:n,asyncTick:O}}function Cj($,v,U,I,g){let J=EO(n$,$,U,{c:1,dkLen:v});return Ov(U,I,g),J}function CO($,v,U){let{N:I,r:g,p:J,dkLen:z,blockSize32:G,V:O,B32:D,B:X,tmp:N,blockMixCb:w}=Bj($,v,U);wO(D);for(let r=0;r<J;r++){let Y=G*r;for(let V=0;V<G;V++)O[V]=D[Y+V];for(let V=0,W=0;V<I-1;V++)BO(O,W,O,W+=G,g),w();BO(O,(I-1)*G,D,Y,g),w();for(let V=0;V<I;V++){let W=(D[Y+G-16]&I-1)>>>0;for(let T=0;T<G;T++)N[T]=D[Y+T]^O[W*G+T];BO(N,0,D,Y,g),w()}}return wO(D),Cj($,z,X,O,N)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Lj($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function xU($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,U=""){let I=Lj($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!I)throw TypeError(D);throw RangeError(D)}return $}function LO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function Ww($,v,U=!1){b$($,void 0,"output");let I=v.outputLen;if($.length<I)throw RangeError("digestInto() expects output buffer of length at least "+I);if(U&&!oU($))throw Error("invalid output, must be aligned")}function pv($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function bv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function fj($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var OU=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),nj=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var _j=($)=>{for(let v=0;v<$.length;v++)$[v]=nj($[v]);return $},qg=OU?($)=>$:_j;function Zw($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function Vw($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function jw($,v,U){let I=v,g=U||(()=>[]),J=(G,O)=>I(O,...g(G)).update(G).digest(),z=I(new Uint8Array($),...g(new Uint8Array(0)));return J.outputLen=z.outputLen,J.blockLen=z.blockLen,J.create=(G,...O)=>I(G,...O),J}var Mw=($,v)=>{function U(I,...g){if(b$(I,void 0,"key"),$.nonceLength!==void 0){let X=g[0];b$(X,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&g[1]!==void 0)b$(g[1],void 0,"AAD");let z=v(I,...g),G=(X,N)=>{if(N!==void 0){if(X!==2)throw Error("cipher output not supported");b$(N,void 0,"output")}},O=!1;return{encrypt(X,N){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(X),G(z.encrypt.length,N),z.encrypt(X,N)},decrypt(X,N){if(b$(X),J&&X.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return G(z.decrypt.length,N),z.decrypt(X,N)}}}return Object.assign(U,$),U};function eI($,v,U=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(U&&!oU(v))throw Error("invalid output, must be aligned");return v}function Rw($,v,U){xU($),xU(v),mJ(U);let I=new Uint8Array(16),g=fj(I);return g.setBigUint64(0,BigInt(v),U),g.setBigUint64(8,BigInt($),U),I}function oU($){return $.byteOffset%4===0}function cU($){return Uint8Array.from(b$($))}var Kw=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),bj=(()=>qg(pv(Kw("expand 16-byte k"))))(),mj=(()=>qg(pv(Kw("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var sI=64,Fj=16,fO=(()=>4294967295)(),uw=Uint32Array.of();function ij($,v,U,I,g,J,z,G){let O=g.length,D=new Uint8Array(sI),X=pv(D),N=OU&&oU(g)&&oU(J),w=N?pv(g):uw,r=N?pv(J):uw;if(!OU){for(let Y=0;Y<O;z++){if($(v,U,I,X,z,G),qg(X),z>=fO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}return}for(let Y=0;Y<O;z++){if($(v,U,I,X,z,G),z>=fO)throw Error("arx: counter overflow");let V=Math.min(sI,O-Y);if(N&&V===sI){let W=Y/4;if(Y%4!==0)throw Error("arx: invalid block position");for(let T=0,u;T<Fj;T++)u=W+T,r[u]=w[u]^X[T];Y+=sI;continue}for(let W=0,T;W<V;W++)T=Y+W,J[T]=g[T]^D[W];Y+=V}}function Tw($,v){let{allowShortKeys:U,extendNonceFn:I,counterLength:g,counterRight:J,rounds:z}=Zw({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return xU(g),xU(z),mJ(J),mJ(U),(G,O,D,X,N=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let w=D.length;if(X=eI(w,X,!1),xU(N),N<0||N>=fO)throw Error("arx: counter overflow");let r=[],Y=G.length,V,W;if(Y===32)r.push(V=cU(G)),W=mj;else if(Y===16&&U)V=new Uint8Array(32),V.set(G),V.set(G,16),W=bj,r.push(V);else throw b$(G,32,"arx key"),Error("invalid key size");if(!OU||!oU(O))r.push(O=cU(O));let T=pv(V);if(I){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(OU)I(W,T,pv(L),T);else{let i=qg(Uint32Array.from(W));I(i,T,pv(L),T),bv(i),qg(T)}O=O.subarray(16)}else if(!OU)qg(T);let u=16-g;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,r.push(O)}let n=qg(pv(O));try{return ij($,W,T,n,D,X,N,z),X}finally{bv(...r)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class Hw{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=cU(b$($,32,"key"));let v=y$($,0),U=y$($,2),I=y$($,4),g=y$($,6),J=y$($,8),z=y$($,10),G=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|U<<3)&8191,this.r[2]=(U>>>10|I<<6)&7939,this.r[3]=(I>>>7|g<<9)&8191,this.r[4]=(g>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|z<<2)&8191,this.r[7]=(z>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,U=!1){let I=U?0:2048,{h:g,r:J}=this,z=J[0],G=J[1],O=J[2],D=J[3],X=J[4],N=J[5],w=J[6],r=J[7],Y=J[8],V=J[9],W=y$($,v+0),T=y$($,v+2),u=y$($,v+4),n=y$($,v+6),L=y$($,v+8),i=y$($,v+10),l=y$($,v+12),h=y$($,v+14),_=g[0]+(W&8191),b=g[1]+((W>>>13|T<<3)&8191),g$=g[2]+((T>>>10|u<<6)&8191),S=g[3]+((u>>>7|n<<9)&8191),K=g[4]+((n>>>4|L<<12)&8191),k=g[5]+(L>>>1&8191),Z=g[6]+((L>>>14|i<<2)&8191),M=g[7]+((i>>>11|l<<5)&8191),j=g[8]+((l>>>8|h<<8)&8191),A=g[9]+(h>>>5|I),R=0,E=R+_*z+b*(5*V)+g$*(5*Y)+S*(5*r)+K*(5*w);R=E>>>13,E&=8191,E+=k*(5*N)+Z*(5*X)+M*(5*D)+j*(5*O)+A*(5*G),R+=E>>>13,E&=8191;let C=R+_*G+b*z+g$*(5*V)+S*(5*Y)+K*(5*r);R=C>>>13,C&=8191,C+=k*(5*w)+Z*(5*N)+M*(5*X)+j*(5*D)+A*(5*O),R+=C>>>13,C&=8191;let x=R+_*O+b*G+g$*z+S*(5*V)+K*(5*Y);R=x>>>13,x&=8191,x+=k*(5*r)+Z*(5*w)+M*(5*N)+j*(5*X)+A*(5*D),R+=x>>>13,x&=8191;let s=R+_*D+b*O+g$*G+S*z+K*(5*V);R=s>>>13,s&=8191,s+=k*(5*Y)+Z*(5*r)+M*(5*w)+j*(5*N)+A*(5*X),R+=s>>>13,s&=8191;let J$=R+_*X+b*D+g$*O+S*G+K*z;R=J$>>>13,J$&=8191,J$+=k*(5*V)+Z*(5*Y)+M*(5*r)+j*(5*w)+A*(5*N),R+=J$>>>13,J$&=8191;let G$=R+_*N+b*X+g$*D+S*O+K*G;R=G$>>>13,G$&=8191,G$+=k*z+Z*(5*V)+M*(5*Y)+j*(5*r)+A*(5*w),R+=G$>>>13,G$&=8191;let Q$=R+_*w+b*N+g$*X+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=k*G+Z*z+M*(5*V)+j*(5*Y)+A*(5*r),R+=Q$>>>13,Q$&=8191;let r$=R+_*r+b*w+g$*N+S*X+K*D;R=r$>>>13,r$&=8191,r$+=k*O+Z*G+M*z+j*(5*V)+A*(5*Y),R+=r$>>>13,r$&=8191;let X$=R+_*Y+b*r+g$*w+S*N+K*X;R=X$>>>13,X$&=8191,X$+=k*D+Z*O+M*G+j*z+A*(5*V),R+=X$>>>13,X$&=8191;let N$=R+_*V+b*Y+g$*r+S*w+K*N;R=N$>>>13,N$&=8191,N$+=k*X+Z*D+M*O+j*G+A*z,R+=N$>>>13,N$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,C+=R,g[0]=E,g[1]=C,g[2]=x,g[3]=s,g[4]=J$,g[5]=G$,g[6]=Q$,g[7]=r$,g[8]=X$,g[9]=N$}finalize(){let{h:$,pad:v}=this,U=new Uint16Array(10),I=$[1]>>>13;$[1]&=8191;for(let z=2;z<10;z++)$[z]+=I,I=$[z]>>>13,$[z]&=8191;$[0]+=I*5,I=$[0]>>>13,$[0]&=8191,$[1]+=I,I=$[1]>>>13,$[1]&=8191,$[2]+=I,U[0]=$[0]+5,I=U[0]>>>13,U[0]&=8191;for(let z=1;z<10;z++)U[z]=$[z]+I,I=U[z]>>>13,U[z]&=8191;U[9]-=8192;let g=(I^1)-1;for(let z=0;z<10;z++)U[z]&=g;g=~g;for(let z=0;z<10;z++)$[z]=$[z]&g|U[z];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let z=1;z<8;z++)J=($[z]+v[z]|0)+(J>>>16)|0,$[z]=J&65535;bv(U)}update($){LO(this),b$($),$=cU($);let{buffer:v,blockLen:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(U-this.pos,I-g);if(J===U){for(;U<=I-g;g+=U)this.process($,g);continue}if(v.set($.subarray(g,g+J),this.pos),this.pos+=J,g+=J,this.pos===U)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,bv(this.h,this.r,this.buffer,this.pad)}digestInto($){LO(this),Ww($,this),this.finished=!0;let{buffer:v,h:U}=this,{pos:I}=this;if(I){v[I++]=1;for(;I<16;I++)v[I]=0;this.process(v,0,!0)}this.finalize();let g=0;for(let J=0;J<8;J++)$[g++]=U[J]>>>0,$[g++]=U[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}}var Aw=jw(32,($)=>new Hw($));function xj($,v,U,I,g,J=20){let z=$[0],G=$[1],O=$[2],D=$[3],X=v[0],N=v[1],w=v[2],r=v[3],Y=v[4],V=v[5],W=v[6],T=v[7],u=g,n=U[0],L=U[1],i=U[2],l=z,h=G,_=O,b=D,g$=X,S=N,K=w,k=r,Z=Y,M=V,j=W,A=T,R=u,E=n,C=L,x=i;for(let J$=0;J$<J;J$+=2)l=l+g$|0,R=u$(R^l,16),Z=Z+R|0,g$=u$(g$^Z,12),l=l+g$|0,R=u$(R^l,8),Z=Z+R|0,g$=u$(g$^Z,7),h=h+S|0,E=u$(E^h,16),M=M+E|0,S=u$(S^M,12),h=h+S|0,E=u$(E^h,8),M=M+E|0,S=u$(S^M,7),_=_+K|0,C=u$(C^_,16),j=j+C|0,K=u$(K^j,12),_=_+K|0,C=u$(C^_,8),j=j+C|0,K=u$(K^j,7),b=b+k|0,x=u$(x^b,16),A=A+x|0,k=u$(k^A,12),b=b+k|0,x=u$(x^b,8),A=A+x|0,k=u$(k^A,7),l=l+S|0,x=u$(x^l,16),j=j+x|0,S=u$(S^j,12),l=l+S|0,x=u$(x^l,8),j=j+x|0,S=u$(S^j,7),h=h+K|0,R=u$(R^h,16),A=A+R|0,K=u$(K^A,12),h=h+K|0,R=u$(R^h,8),A=A+R|0,K=u$(K^A,7),_=_+k|0,E=u$(E^_,16),Z=Z+E|0,k=u$(k^Z,12),_=_+k|0,E=u$(E^_,8),Z=Z+E|0,k=u$(k^Z,7),b=b+g$|0,C=u$(C^b,16),M=M+C|0,g$=u$(g$^M,12),b=b+g$|0,C=u$(C^b,8),M=M+C|0,g$=u$(g$^M,7);let s=0;I[s++]=z+l|0,I[s++]=G+h|0,I[s++]=O+_|0,I[s++]=D+b|0,I[s++]=X+g$|0,I[s++]=N+S|0,I[s++]=w+K|0,I[s++]=r+k|0,I[s++]=Y+Z|0,I[s++]=V+M|0,I[s++]=W+j|0,I[s++]=T+A|0,I[s++]=u+R|0,I[s++]=n+E|0,I[s++]=L+C|0,I[s++]=i+x|0}var oj=Tw(xj,{counterRight:!1,counterLength:4,allowShortKeys:!1});var cj=new Uint8Array(16),Sw=($,v)=>{$.update(v);let U=v.length%16;if(U)$.update(cj.subarray(U))},yj=new Uint8Array(32);function kw($,v,U,I,g){if(g!==void 0)b$(g,void 0,"AAD");let J=$(v,U,yj),z=Rw(I.length,g?g.length:0,!0),G=Aw.create(J);if(g)Sw(G,g);Sw(G,I),G.update(z);let O=G.digest();return bv(J,z),O}var lj=($)=>(v,U,I)=>{return{encrypt(J,z){let G=J.length;z=eI(G+16,z,!1),z.set(J);let O=z.subarray(0,-16);$(v,U,O,O,1);let D=kw($,v,U,O,I);return z.set(D,G),bv(D),z},decrypt(J,z){z=eI(J.length-16,z,!1);let G=J.subarray(0,-16),O=J.subarray(-16),D=kw($,v,U,G,I);if(!Vw(O,D))throw bv(D),Error("invalid tag");return z.set(J.subarray(0,-16)),$(v,U,z,z,1),bv(D),z}}},Ev=Mw({blockSize:64,nonceLength:12,tagLength:16},lj(oj));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function yU($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let U=v&&`"${v}" `;throw Error(`${U}expected integer >= 0, got ${$}`)}}function q$($,v,U=""){let I=yU($),g=$?.length,J=v!==void 0;if(!I||J&&g!==v){let z=U&&`"${U}" `,G=J?` of length ${v}`:"",O=I?`length=${g}`:`type=${typeof $}`;throw Error(z+"expected Uint8Array"+G+", got "+O)}return $}function Bv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function Wg($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function FJ($,v){q$($,void 0,"digestInto() output");let U=v.outputLen;if($.length<U)throw Error('"digestInto() output" expected to be of length >='+U)}function iJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Zv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function mv($,v){return $<<32-v|$>>>v}var dj=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hj($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pj($){for(let v=0;v<$.length;v++)$[v]=hj($[v]);return $}var nO=dj?($)=>$:pj,Ew=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tj=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function DU($){if(q$($),Ew)return $.toHex();let v="";for(let U=0;U<$.length;U++)v+=tj[$[U]];return v}var Yg={_0:48,_9:57,A:65,F:70,a:97,f:102};function Pw($){if($>=Yg._0&&$<=Yg._9)return $-Yg._0;if($>=Yg.A&&$<=Yg.F)return $-(Yg.A-10);if($>=Yg.a&&$<=Yg.f)return $-(Yg.a-10);return}function QU($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(Ew)return Uint8Array.fromHex($);let v=$.length,U=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let I=new Uint8Array(U);for(let g=0,J=0;g<U;g++,J+=2){let z=Pw($.charCodeAt(J)),G=Pw($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}I[g]=z*16+G}return I}function _$(...$){let v=0;for(let I=0;I<$.length;I++){let g=$[I];q$(g),v+=g.length}let U=new Uint8Array(v);for(let I=0,g=0;I<$.length;I++){let J=$[I];U.set(J,g),g+=J.length}return U}function lU($,v={}){let U=(g,J)=>$(J).update(g).digest(),I=$(void 0);return U.outputLen=I.outputLen,U.blockLen=I.blockLen,U.create=(g)=>$(g),Object.assign(U,v),Object.freeze(U)}function ng($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var _g=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bO=BigInt(0),_O=BigInt(1);function $0($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw Error(U+"expected boolean, got type="+typeof $)}return $}function Bw($){if(typeof $==="bigint"){if(!oJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function v0($){let v=Bw($).toString(16);return v.length&1?"0"+v:v}function Cw($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?bO:BigInt("0x"+$)}function bg($){return Cw(DU($))}function mg($){return Cw(DU(cJ(q$($)).reverse()))}function dU($,v){F$(v),$=Bw($);let U=QU($.toString(16).padStart(v*2,"0"));if(U.length!==v)throw Error("number too large");return U}function g0($,v){return dU($,v).reverse()}function cJ($){return Uint8Array.from($)}function Fg($){return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw Error(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var oJ=($)=>typeof $==="bigint"&&bO<=$;function aj($,v,U){return oJ($)&&oJ(v)&&oJ(U)&&v<=$&&$<U}function U0($,v,U,I){if(!aj(v,U,I))throw Error("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function mO($){let v;for(v=0;$>bO;$>>=_O,v+=1);return v}var I0=($)=>(_O<<BigInt($))-_O;function Lw($,v,U){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof U!=="function")throw Error("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},w=(...W)=>U(D,_$(O,...W)),r=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return _$(...T)};return(W,T)=>{N(),r(W);let u=void 0;while(!(u=T(Y())))r();return N(),u}}function XU($,v={},U={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function I(J,z,G){let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw Error(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}function FO($){let v=new WeakMap;return(U,...I)=>{let g=v.get(U);if(g!==void 0)return g;let J=$(U,...I);return v.set(U,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qv=BigInt(0),gv=BigInt(1),NU=BigInt(2),_w=BigInt(3),bw=BigInt(4),mw=BigInt(5),ej=BigInt(7),Fw=BigInt(8),sj=BigInt(9),iw=BigInt(16);function Dv($,v){let U=$%v;return U>=Qv?U:v+U}function Cv($,v,U){let I=$;while(v-- >Qv)I*=I,I%=U;return I}function fw($,v){if($===Qv)throw Error("invert: expected non-zero number");if(v<=Qv)throw Error("invert: expected positive modulus, got "+v);let U=Dv($,v),I=v,g=Qv,J=gv,z=gv,G=Qv;while(U!==Qv){let D=I/U,X=I%U,N=g-z*D,w=J-G*D;I=U,U=X,g=z,J=G,z=N,G=w}if(I!==gv)throw Error("invert: does not exist");return Dv(g,v)}function iO($,v,U){if(!$.eql($.sqr(v),U))throw Error("Cannot find square root")}function xw($,v){let U=($.ORDER+gv)/bw,I=$.pow(v,U);return iO($,I,v),I}function $M($,v){let U=($.ORDER-mw)/Fw,I=$.mul(v,NU),g=$.pow(I,U),J=$.mul(v,g),z=$.mul($.mul(J,NU),g),G=$.mul(J,$.sub(z,$.ONE));return iO($,G,v),G}function vM($){let v=yJ($),U=ow($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+ej)/iw;return(G,O)=>{let D=G.pow(O,z),X=G.mul(D,I),N=G.mul(D,g),w=G.mul(D,J),r=G.eql(G.sqr(X),O),Y=G.eql(G.sqr(N),O);D=G.cmov(D,X,r),X=G.cmov(w,N,Y);let V=G.eql(G.sqr(X),O),W=G.cmov(D,X,V);return iO(G,W,O),W}}function ow($){if($<_w)throw Error("sqrt is not defined for small field");let v=$-gv,U=0;while(v%NU===Qv)v/=NU,U++;let I=NU,g=yJ($);while(nw(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return xw;let J=g.pow(I,v),z=(v+gv)/NU;return function(O,D){if(O.is0(D))return D;if(nw(O,D)!==1)throw Error("Cannot find square root");let X=U,N=O.mul(O.ONE,J),w=O.pow(D,v),r=O.pow(D,z);while(!O.eql(w,O.ONE)){if(O.is0(w))return O.ZERO;let Y=1,V=O.sqr(w);while(!O.eql(V,O.ONE))if(Y++,V=O.sqr(V),Y===X)throw Error("Cannot find square root");let W=gv<<BigInt(X-Y-1),T=O.pow(N,W);X=Y,N=O.sqr(T),w=O.mul(w,N),r=O.mul(r,T)}return r}}function gM($){if($%bw===_w)return xw;if($%Fw===mw)return $M;if($%iw===sj)return vM($);return ow($)}var UM=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function xO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=UM.reduce((I,g)=>{return I[g]="function",I},v);return XU($,U),$}function IM($,v,U){if(U<Qv)throw Error("invalid exponent, negatives unsupported");if(U===Qv)return $.ONE;if(U===gv)return v;let I=$.ONE,g=v;while(U>Qv){if(U&gv)I=$.mul(I,g);g=$.sqr(g),U>>=gv}return I}function J0($,v,U=!1){let I=Array(v.length).fill(U?$.ZERO:void 0),g=v.reduce((z,G,O)=>{if($.is0(G))return z;return I[O]=z,$.mul(z,G)},$.ONE),J=$.inv(g);return v.reduceRight((z,G,O)=>{if($.is0(G))return z;return I[O]=$.mul(z,I[O]),$.mul(z,G)},J),I}function nw($,v){let U=($.ORDER-gv)/NU,I=$.pow(v,U),g=$.eql(I,$.ONE),J=$.eql(I,$.ZERO),z=$.eql(I,$.neg($.ONE));if(!g&&!J&&!z)throw Error("invalid Legendre symbol result");return g?1:J?0:-1}function JM($,v){if(v!==void 0)F$(v);let U=v!==void 0?v:$.toString(2).length,I=Math.ceil(U/8);return{nBitLength:U,nByteLength:I}}class cw{ORDER;BITS;BYTES;isLE;ZERO=Qv;ONE=gv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Qv)throw Error("invalid field: expected ORDER > 0, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=JM($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Dv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Qv<=$&&$<this.ORDER}is0($){return $===Qv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&gv)===gv}neg($){return Dv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Dv($*$,this.ORDER)}add($,v){return Dv($+v,this.ORDER)}sub($,v){return Dv($-v,this.ORDER)}mul($,v){return Dv($*v,this.ORDER)}pow($,v){return IM(this,$,v)}div($,v){return Dv($*fw(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return fw($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=gM(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g0($,this.BYTES):dU($,this.BYTES)}fromBytes($,v=!1){q$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if(!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?mg($):bg($);if(z)G=Dv(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return J0(this,$)}cmov($,v,U){return U?v:$}}function yJ($,v={}){return new cw($,v)}function yw($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function oO($){let v=yw($);return v+Math.ceil(v/2)}function lw($,v,U=!1){q$($);let I=$.length,g=yw(v),J=oO(v);if(I<16||I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?mg($):bg($),G=Dv(z,v-gv)+gv;return U?g0(G,g):dU(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hU=BigInt(0),rU=BigInt(1);function z0($,v){let U=v.negate();return $?U:v}function dO($,v){let U=J0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function tw($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function cO($,v){tw($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=I0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function dw($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=rU;let D=v*I,X=D+Math.abs(G)-1,N=G===0,w=G<0,r=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:w,isNegF:r,offsetF:D}}var yO=new WeakMap,aw=new WeakMap;function lO($){return aw.get($)||1}function hw($){if($!==hU)throw Error("invalid wNAF")}class hO{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>hU){if(v&rU)U=U.add(I);I=I.double(),v>>=rU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=cO(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=cO($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:w}=dw(U,z,J);if(U=G,D)g=g.add(z0(N,v[w]));else I=I.add(z0(X,v[O]))}return hw(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=cO($,this.bits);for(let J=0;J<g.windows;J++){if(U===hU)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=dw(U,J,g);if(U=z,O)continue;else{let X=v[G];I=I.add(D?X.negate():X)}}return hw(U),I}getPrecomputes($,v,U){let I=yO.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);yO.set(v,I)}}return I}cached($,v,U){let I=lO($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=lO($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){tw(v,this.bits),aw.set($,v),yO.delete($)}hasCache($){return lO($)!==1}}function ew($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>hU||I>hU){if(U&rU)J=J.add(g);if(I&rU)z=z.add(g);g=g.double(),U>>=rU,I>>=rU}return{p1:J,p2:z}}function pw($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return xO(v),v}else return yJ($,{isLE:U})}function sw($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>hU))throw Error(`CURVE.${O} must be positive bigint`)}let g=pw(v.p,U.Fp,I),J=pw(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function lJ($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var G0=BigInt(0),pU=BigInt(1),dJ=BigInt(2);function zM($){return XU($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function $q($){let v=zM($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z||ng,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),r=G?dJ**BigInt(254):dJ**BigInt(447),Y=G?BigInt(8)*dJ**BigInt(251)-pU:BigInt(4)*dJ**BigInt(445)-pU,V=r+Y+pU,W=(Z)=>Dv(Z,U),T=u(N);function u(Z){return g0(W(Z),X)}function n(Z){let M=cJ(q$(Z,X,"uCoordinate"));if(G)M[31]&=127;return W(mg(M))}function L(Z){return mg(g(cJ(q$(Z,X,"scalar"))))}function i(Z,M){let j=g$(n(M),L(Z));if(j===G0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){U0("u",Z,G0,U),U0("scalar",M,r,V);let j=M,A=Z,R=pU,E=G0,C=Z,x=pU,s=G0;for(let G$=BigInt(D-1);G$>=G0;G$--){let Q$=j>>G$&pU;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let r$=R+E,X$=W(r$*r$),N$=R-E,W$=W(N$*N$),k$=X$-W$,E$=C+x,a$=C-x,e$=W(a$*r$),Wv=W(E$*N$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(X$*W$),E=W(k$*(X$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(Z=O(X))=>{return q$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze({keygen:lJ(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}class pO{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Bv($),q$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let U=this.blockLen,I=new Uint8Array(U);I.set(v.length>U?$.create().update(v).digest():v);for(let g=0;g<I.length;g++)I[g]^=54;this.iHash.update(I),this.oHash=$.create();for(let g=0;g<I.length;g++)I[g]^=106;this.oHash.update(I),Zv(I)}update($){return Wg(this),this.iHash.update($),this}digestInto($){Wg(this),q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:U,finished:I,destroyed:g,blockLen:J,outputLen:z}=this;return $=$,$.finished=I,$.destroyed=g,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=U._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tU=($,v,U)=>new pO($,v).update(U).digest();tU.create=($,v)=>new pO($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vq=($,v)=>($+($>=0?v:-v)/Uq)/v;function GM($,v,U){let[[I,g],[J,z]]=v,G=vq(z*$,U),O=vq(-g*$,U),D=$-G*I-O*J,X=-G*g-O*z,N=D<Zg,w=X<Zg;if(N)D=-D;if(w)X=-X;let r=I0(Math.ceil(mO(U)/2))+aU;if(D<Zg||D>=r||X<Zg||X>=r)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:N,k1:D,k2neg:w,k2:X}}function aO($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function tO($,v){let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if($0(U.lowS,"lowS"),$0(U.prehash,"prehash"),U.format!==void 0)aO(U.format);return U}class gq extends Error{constructor($=""){super($)}}var ig={Err:gq,_tlv:{encode:($,v)=>{let{Err:U}=ig;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=v0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?v0(g.length/2|128):"";return v0($)+J+g+v},decode($,v){let{Err:U}=ig,I=0;if($<0||$>256)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=ig;if($<Zg)throw new v("integer: negative integers are not allowed");let U=v0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=ig;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return bg($)}},toSig($){let{Err:v,_int:U,_tlv:I}=ig,g=q$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=ig,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}},Zg=BigInt(0),aU=BigInt(1),Uq=BigInt(2),hJ=BigInt(3),OM=BigInt(4);function eO($,v={}){let U=sw("weierstrass",$,v),{Fp:I,Fn:g}=U,J=U.CURVE,{h:z,n:G}=J;XU(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=Jq(I,g);function X(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(K,k,Z){let{x:M,y:j}=k.toAffine(),A=I.toBytes(M);if($0(Z,"isCompressed"),Z){X();let R=!I.isOdd(j);return _$(Iq(R),A)}else return _$(Uint8Array.of(4),A,I.toBytes(j))}function w(K){q$(K,void 0,"Point");let{publicKey:k,publicKeyUncompressed:Z}=D,M=K.length,j=K[0],A=K.subarray(1);if(M===k&&(j===2||j===3)){let R=I.fromBytes(A);if(!I.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=V(R),C;try{C=I.sqrt(E)}catch(J$){let G$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}X();let x=I.isOdd(C);if((j&1)===1!==x)C=I.neg(C);return{x:R,y:C}}else if(M===Z&&j===4){let R=I.BYTES,E=I.fromBytes(A.subarray(0,R)),C=I.fromBytes(A.subarray(R,R*2));if(!W(E,C))throw Error("bad point: is not on curve");return{x:E,y:C}}else throw Error(`bad point: got length ${M}, expected compressed=${k} or uncompressed=${Z}`)}let r=v.toBytes||N,Y=v.fromBytes||w;function V(K){let k=I.sqr(K),Z=I.mul(k,K);return I.add(I.add(Z,I.mul(K,J.a)),J.b)}function W(K,k){let Z=I.sqr(k),M=V(K);return I.eql(Z,M)}if(!W(J.Gx,J.Gy))throw Error("bad curve params: generator point");let T=I.mul(I.pow(J.a,hJ),OM),u=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(T,u)))throw Error("bad curve params: a or b");function n(K,k,Z=!1){if(!I.isValid(k)||Z&&I.is0(k))throw Error(`bad point coordinate ${K}`);return k}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return GM(K,O.basises,g.ORDER)}let l=FO((K,k)=>{let{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),h=FO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!I.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:k,y:Z}=K.toAffine();if(!I.isValid(k)||!I.isValid(Z))throw Error("bad point: x or y not field elements");if(!W(k,Z))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(K,k,Z,M,j){return Z=new b(I.mul(Z.X,K),Z.Y,Z.Z),k=z0(M,k),Z=z0(j,Z),k.add(Z)}class b{static BASE=new b(J.Gx,J.Gy,I.ONE);static ZERO=new b(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(K,k,Z){this.X=n("x",K),this.Y=n("y",k,!0),this.Z=n("z",Z),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:k,y:Z}=K||{};if(!K||!I.isValid(k)||!I.isValid(Z))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(I.is0(k)&&I.is0(Z))return b.ZERO;return new b(k,Z,I.ONE)}static fromBytes(K){let k=b.fromAffine(Y(q$(K,void 0,"point")));return k.assertValidity(),k}static fromHex(K){return b.fromBytes(QU(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,k=!0){if(S.createCache(this,K),!k)this.multiply(hJ);return this}assertValidity(){h(this)}hasEvenY(){let{y:K}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(K)}equals(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.eql(I.mul(k,R),I.mul(j,M)),C=I.eql(I.mul(Z,R),I.mul(A,M));return E&&C}negate(){return new b(this.X,I.neg(this.Y),this.Z)}double(){let{a:K,b:k}=J,Z=I.mul(k,hJ),{X:M,Y:j,Z:A}=this,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(A,A),G$=I.mul(M,j);return G$=I.add(G$,G$),C=I.mul(M,A),C=I.add(C,C),R=I.mul(K,C),E=I.mul(Z,J$),E=I.add(R,E),R=I.sub(s,E),E=I.add(s,E),E=I.mul(R,E),R=I.mul(G$,R),C=I.mul(Z,C),J$=I.mul(K,J$),G$=I.sub(x,J$),G$=I.mul(K,G$),G$=I.add(G$,C),C=I.add(x,x),x=I.add(C,x),x=I.add(x,J$),x=I.mul(x,G$),E=I.add(E,x),J$=I.mul(j,A),J$=I.add(J$,J$),x=I.mul(J$,G$),R=I.sub(R,x),C=I.mul(J$,s),C=I.add(C,C),C=I.add(C,C),new b(R,E,C)}add(K){L(K);let{X:k,Y:Z,Z:M}=this,{X:j,Y:A,Z:R}=K,E=I.ZERO,C=I.ZERO,x=I.ZERO,s=J.a,J$=I.mul(J.b,hJ),G$=I.mul(k,j),Q$=I.mul(Z,A),r$=I.mul(M,R),X$=I.add(k,Z),N$=I.add(j,A);X$=I.mul(X$,N$),N$=I.add(G$,Q$),X$=I.sub(X$,N$),N$=I.add(k,M);let W$=I.add(j,R);return N$=I.mul(N$,W$),W$=I.add(G$,r$),N$=I.sub(N$,W$),W$=I.add(Z,M),E=I.add(A,R),W$=I.mul(W$,E),E=I.add(Q$,r$),W$=I.sub(W$,E),x=I.mul(s,N$),E=I.mul(J$,r$),x=I.add(E,x),E=I.sub(Q$,x),x=I.add(Q$,x),C=I.mul(E,x),Q$=I.add(G$,G$),Q$=I.add(Q$,G$),r$=I.mul(s,r$),N$=I.mul(J$,N$),Q$=I.add(Q$,r$),r$=I.sub(G$,r$),r$=I.mul(s,r$),N$=I.add(N$,r$),G$=I.mul(Q$,N$),C=I.add(C,G$),G$=I.mul(W$,N$),E=I.mul(X$,E),E=I.sub(E,G$),G$=I.mul(X$,Q$),x=I.mul(W$,x),x=I.add(x,G$),new b(E,C,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:k}=v;if(!g.isValidNot0(K))throw Error("invalid scalar: out of range");let Z,M,j=(A)=>S.cached(this,A,(R)=>dO(b,R));if(k){let{k1neg:A,k1:R,k2neg:E,k2:C}=i(K),{p:x,f:s}=j(R),{p:J$,f:G$}=j(C);M=s.add(G$),Z=_(k.beta,x,J$,A,E)}else{let{p:A,f:R}=j(K);Z=A,M=R}return dO(b,[Z,M])[0]}multiplyUnsafe(K){let{endo:k}=v,Z=this;if(!g.isValid(K))throw Error("invalid scalar: out of range");if(K===Zg||Z.is0())return b.ZERO;if(K===aU)return Z;if(S.hasCache(this))return this.multiply(K);if(k){let{k1neg:M,k1:j,k2neg:A,k2:R}=i(K),{p1:E,p2:C}=ew(b,Z,j,R);return _(k.beta,E,C,M,A)}else return S.unsafe(Z,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(z===aU)return!0;if(K)return K(b,this);return S.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(z===aU)return this;if(K)return K(b,this);return this.multiplyUnsafe(z)}isSmallOrder(){return this.multiplyUnsafe(z).is0()}toBytes(K=!0){return $0(K,"isCompressed"),this.assertValidity(),r(b,this,K)}toHex(K=!0){return DU(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let g$=g.BITS,S=new hO(b,v.endo?Math.ceil(g$/2):g$);return b.BASE.precompute(8),b}function Iq($){return Uint8Array.of($?2:3)}function Jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function DM($,v={}){let{Fn:U}=$,I=v.randomBytes||ng,g=Object.assign(Jq($.Fp,U),{seed:oO(U.ORDER)});function J(r){try{let Y=U.fromBytes(r);return U.isValidNot0(Y)}catch(Y){return!1}}function z(r,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=r.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(r)}catch(T){return!1}}function G(r=I(g.seed)){return lw(q$(r,g.seed,"seed"),U.ORDER)}function O(r,Y=!0){return $.BASE.multiply(U.fromBytes(r)).toBytes(Y)}function D(r){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g;if(!yU(r))return;if("_lengths"in U&&U._lengths||Y===V)return;let T=q$(r,void 0,"key").length;return T===V||T===W}function X(r,Y,V=!0){if(D(r)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(r);return $.fromBytes(Y).multiply(W).toBytes(V)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=lJ(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:w,Point:$,utils:N,lengths:g})}function sO($,v,U={}){Bv(v),XU(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let I=U.randomBytes||ng,g=U.hmac||((Z,M)=>tU(v,Z,M)),{Fp:J,Fn:z}=$,{ORDER:G,BITS:O}=z,{keygen:D,getPublicKey:X,getSharedSecret:N,utils:w,lengths:r}=DM($,U),Y={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},V=G*Uq<J.ORDER;function W(Z){let M=G>>aU;return Z>M}function T(Z,M){if(!z.isValidNot0(M))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return M}function u(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function n(Z,M){aO(M);let j=r.signature,A=M==="compact"?j:M==="recovered"?j+1:void 0;return q$(Z,A)}class L{r;s;recovery;constructor(Z,M,j){if(this.r=T("r",Z),this.s=T("s",M),j!=null){if(u(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(Z,M=Y.format){n(Z,M);let j;if(M==="der"){let{r:C,s:x}=ig.toSig(q$(Z));return new L(C,x)}if(M==="recovered")j=Z[0],M="compact",Z=Z.subarray(1);let A=r.signature/2,R=Z.subarray(0,A),E=Z.subarray(A,A*2);return new L(z.fromBytes(R),z.fromBytes(E),j)}static fromHex(Z,M){return this.fromBytes(QU(Z),M)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new L(this.r,this.s,Z)}recoverPublicKey(Z){let{r:M,s:j}=this,A=this.assertRecovery(),R=A===2||A===3?M+G:M;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),C=$.fromBytes(_$(Iq((A&1)===0),E)),x=z.inv(R),s=l(q$(Z,void 0,"msgHash")),J$=z.create(-s*x),G$=z.create(j*x),Q$=$.BASE.multiplyUnsafe(J$).add(C.multiplyUnsafe(G$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return W(this.s)}toBytes(Z=Y.format){if(aO(Z),Z==="der")return QU(ig.hexFromSig(this));let{r:M,s:j}=this,A=z.toBytes(M),R=z.toBytes(j);if(Z==="recovered")return u(),_$(Uint8Array.of(this.assertRecovery()),A,R);return _$(A,R)}toHex(Z){return DU(this.toBytes(Z))}}let i=U.bits2int||function(M){if(M.length>8192)throw Error("input is too large");let j=bg(M),A=M.length*8-O;return A>0?j>>BigInt(A):j},l=U.bits2int_modN||function(M){return z.create(i(M))},h=I0(O);function _(Z){return U0("num < 2^"+O,Z,Zg,h),z.toBytes(Z)}function b(Z,M){return q$(Z,void 0,"message"),M?q$(v(Z),void 0,"prehashed message"):Z}function g$(Z,M,j){let{lowS:A,prehash:R,extraEntropy:E}=tO(j,Y);Z=b(Z,R);let C=l(Z),x=z.fromBytes(M);if(!z.isValidNot0(x))throw Error("invalid private key");let s=[_(x),_(C)];if(E!=null&&E!==!1){let r$=E===!0?I(r.secretKey):E;s.push(q$(r$,void 0,"extraEntropy"))}let J$=_$(...s),G$=C;function Q$(r$){let X$=i(r$);if(!z.isValidNot0(X$))return;let N$=z.inv(X$),W$=$.BASE.multiply(X$).toAffine(),k$=z.create(W$.x);if(k$===Zg)return;let E$=z.create(N$*z.create(G$+k$*x));if(E$===Zg)return;let a$=(W$.x===k$?0:2)|Number(W$.y&aU),e$=E$;if(A&&W(E$))e$=z.neg(E$),a$^=1;return new L(k$,e$,V?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(Z,M,j={}){let{seed:A,k2sig:R}=g$(Z,M,j);return Lw(v.outputLen,z.BYTES,g)(A,R).toBytes(j.format)}function K(Z,M,j,A={}){let{lowS:R,prehash:E,format:C}=tO(A,Y);if(j=q$(j,void 0,"publicKey"),M=b(M,E),!yU(Z)){let x=Z instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}n(Z,C);try{let x=L.fromBytes(Z,C),s=$.fromBytes(j);if(R&&x.hasHighS())return!1;let{r:J$,s:G$}=x,Q$=l(M),r$=z.inv(G$),X$=z.create(Q$*r$),N$=z.create(J$*r$),W$=$.BASE.multiplyUnsafe(X$).add(s.multiplyUnsafe(N$));if(W$.is0())return!1;return z.create(W$.x)===J$}catch(x){return!1}}function k(Z,M,j={}){let{prehash:A}=tO(j,Y);return M=b(M,A),L.fromBytes(Z,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:D,getPublicKey:X,getSharedSecret:N,utils:w,lengths:r,Point:$,sign:S,verify:K,recoverPublicKey:k,Signature:L,hash:v})}function zq($,v,U){return $&v^~$&U}function Gq($,v,U){return $&v^$&U^v&U}class pJ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,U,I){this.blockLen=$,this.outputLen=v,this.padOffset=U,this.isLE=I,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){Wg(this),q$($);let{view:v,buffer:U,blockLen:I}=this,g=$.length;for(let J=0;J<g;){let z=Math.min(I-this.pos,g-J);if(z===I){let G=xJ($);for(;I<=g-J;J+=I)this.process(G,J);continue}if(U.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===I)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Wg(this),FJ($,this),this.finished=!0;let{buffer:v,view:U,blockLen:I,isLE:g}=this,{pos:J}=this;if(v[J++]=128,Zv(this.buffer.subarray(J)),this.padOffset>I-J)this.process(U,0),J=0;for(let X=J;X<I;X++)v[X]=0;U.setBigUint64(I-8,BigInt(this.length*8),g),this.process(U,0);let z=xJ($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],g)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let U=$.slice(0,v);return this.destroy(),U}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:U,length:I,finished:g,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=g,$.length=I,$.pos=z,I%v)$.buffer.set(U);return $}clone(){return this._cloneInto()}}var Vg=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),jg=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var tJ=BigInt(4294967295),Oq=BigInt(32);function QM($,v=!1){if(v)return{h:Number($&tJ),l:Number($>>Oq&tJ)};return{h:Number($>>Oq&tJ)|0,l:Number($&tJ)|0}}function aJ($,v=!1){let U=$.length,I=new Uint32Array(U),g=new Uint32Array(U);for(let J=0;J<U;J++){let{h:z,l:G}=QM($[J],v);[I[J],g[J]]=[z,G]}return[I,g]}var $8=($,v,U)=>$>>>U,v8=($,v,U)=>$<<32-U|v>>>U,wU=($,v,U)=>$>>>U|v<<32-U,qU=($,v,U)=>$<<32-U|v>>>U,O0=($,v,U)=>$<<64-U|v>>>U-32,D0=($,v,U)=>$>>>U-32|v<<64-U;var Dq=($,v,U)=>$<<U|v>>>32-U,Qq=($,v,U)=>v<<U|$>>>32-U,Xq=($,v,U)=>v<<U-32|$>>>64-U,Nq=($,v,U)=>$<<U-32|v>>>64-U;function tv($,v,U,I){let g=(v>>>0)+(I>>>0);return{h:$+U+(g/4294967296|0)|0,l:g|0}}var rq=($,v,U)=>($>>>0)+(v>>>0)+(U>>>0),wq=($,v,U,I)=>v+U+I+($/4294967296|0)|0,qq=($,v,U,I)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0),Yq=($,v,U,I,g)=>v+U+I+g+($/4294967296|0)|0,Wq=($,v,U,I,g)=>($>>>0)+(v>>>0)+(U>>>0)+(I>>>0)+(g>>>0),Zq=($,v,U,I,g,J)=>v+U+I+g+J+($/4294967296|0)|0;var NM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),xg=new Uint32Array(64);class g8 extends pJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:U,D:I,E:g,F:J,G:z,H:G}=this;return[$,v,U,I,g,J,z,G]}set($,v,U,I,g,J,z,G){this.A=$|0,this.B=v|0,this.C=U|0,this.D=I|0,this.E=g|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)xg[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=xg[X-15],w=xg[X-2],r=mv(N,7)^mv(N,18)^N>>>3,Y=mv(w,17)^mv(w,19)^w>>>10;xg[X]=Y+xg[X-7]+r+xg[X-16]|0}let{A:U,B:I,C:g,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=mv(z,6)^mv(z,11)^mv(z,25),w=D+N+zq(z,G,O)+NM[X]+xg[X]|0,Y=(mv(U,2)^mv(U,13)^mv(U,22))+Gq(U,I,g)|0;D=O,O=G,G=z,z=J+w|0,J=g,g=I,I=U,U=w+Y|0}U=U+this.A|0,I=I+this.B|0,g=g+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(U,I,g,J,z,G,O,D)}roundClean(){Zv(xg)}destroy(){this.set(0,0,0,0,0,0,0,0),Zv(this.buffer)}}class Vq extends g8{A=Vg[0]|0;B=Vg[1]|0;C=Vg[2]|0;D=Vg[3]|0;E=Vg[4]|0;F=Vg[5]|0;G=Vg[6]|0;H=Vg[7]|0;constructor(){super(32)}}class rM extends g8{A=jg[0]|0;B=jg[1]|0;C=jg[2]|0;D=jg[3]|0;E=jg[4]|0;F=jg[5]|0;G=jg[6]|0;H=jg[7]|0;constructor(){super(28)}}var jq=(()=>aJ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),wM=(()=>jq[0])(),qM=(()=>jq[1])(),og=new Uint32Array(80),cg=new Uint32Array(80);class Q0 extends pJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:U,Bl:I,Ch:g,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:w,Gl:r,Hh:Y,Hl:V}=this;return[$,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V]}set($,v,U,I,g,J,z,G,O,D,X,N,w,r,Y,V){this.Ah=$|0,this.Al=v|0,this.Bh=U|0,this.Bl=I|0,this.Ch=g|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=w|0,this.Gl=r|0,this.Hh=Y|0,this.Hl=V|0}process($,v){for(let u=0;u<16;u++,v+=4)og[u]=$.getUint32(v),cg[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let n=og[u-15]|0,L=cg[u-15]|0,i=wU(n,L,1)^wU(n,L,8)^$8(n,L,7),l=qU(n,L,1)^qU(n,L,8)^v8(n,L,7),h=og[u-2]|0,_=cg[u-2]|0,b=wU(h,_,19)^O0(h,_,61)^$8(h,_,6),g$=qU(h,_,19)^D0(h,_,61)^v8(h,_,6),S=qq(l,g$,cg[u-7],cg[u-16]),K=Yq(S,i,b,og[u-7],og[u-16]);og[u]=K|0,cg[u]=S|0}let{Ah:U,Al:I,Bh:g,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:w,Fl:r,Gh:Y,Gl:V,Hh:W,Hl:T}=this;for(let u=0;u<80;u++){let n=wU(X,N,14)^wU(X,N,18)^O0(X,N,41),L=qU(X,N,14)^qU(X,N,18)^D0(X,N,41),i=X&w^~X&Y,l=N&r^~N&V,h=Wq(T,L,l,qM[u],cg[u]),_=Zq(h,W,n,i,wM[u],og[u]),b=h|0,g$=wU(U,I,28)^O0(U,I,34)^O0(U,I,39),S=qU(U,I,28)^D0(U,I,34)^D0(U,I,39),K=U&g^U&z^g&z,k=I&J^I&G^J&G;W=Y|0,T=V|0,Y=w|0,V=r|0,w=X|0,r=N|0,{h:X,l:N}=tv(O|0,D|0,_|0,b|0),O=z|0,D=G|0,z=g|0,G=J|0,g=U|0,J=I|0;let Z=rq(b,S,k);U=wq(Z,_,g$,K),I=Z|0}({h:U,l:I}=tv(this.Ah|0,this.Al|0,U|0,I|0)),{h:g,l:J}=tv(this.Bh|0,this.Bl|0,g|0,J|0),{h:z,l:G}=tv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=tv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=tv(this.Eh|0,this.El|0,X|0,N|0),{h:w,l:r}=tv(this.Fh|0,this.Fl|0,w|0,r|0),{h:Y,l:V}=tv(this.Gh|0,this.Gl|0,Y|0,V|0),{h:W,l:T}=tv(this.Hh|0,this.Hl|0,W|0,T|0),this.set(U,I,g,J,z,G,O,D,X,N,w,r,Y,V,W,T)}roundClean(){Zv(og,cg)}destroy(){Zv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class YM extends Q0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class Mq extends Q0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Uv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Iv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class WM extends Q0{Ah=Uv[0]|0;Al=Uv[1]|0;Bh=Uv[2]|0;Bl=Uv[3]|0;Ch=Uv[4]|0;Cl=Uv[5]|0;Dh=Uv[6]|0;Dl=Uv[7]|0;Eh=Uv[8]|0;El=Uv[9]|0;Fh=Uv[10]|0;Fl=Uv[11]|0;Gh=Uv[12]|0;Gl=Uv[13]|0;Hh=Uv[14]|0;Hl=Uv[15]|0;constructor(){super(28)}}class ZM extends Q0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(32)}}var eJ=lU(()=>new Vq,_g(1));var Rq=lU(()=>new Mq,_g(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VM=BigInt(1),uq=BigInt(2),jM=BigInt(3),MM=BigInt(5),DA=BigInt(8),Kq=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RM($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=Kq,G=$*$%J*$%J,O=Cv(G,uq,J)*G%J,D=Cv(O,VM,J)*$%J,X=Cv(D,MM,J)*D%J,N=Cv(X,v,J)*X%J,w=Cv(N,U,J)*N%J,r=Cv(w,I,J)*w%J,Y=Cv(r,g,J)*r%J,V=Cv(Y,g,J)*r%J,W=Cv(V,v,J)*X%J;return{pow_p_5_8:Cv(W,uq,J)*$%J,b2:G}}function uM($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Tq=(()=>{let $=Kq;return $q({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=RM(v);return Dv(Cv(U,jM,$)*I,$)},adjustScalarBytes:uM})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KM=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TM=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var HM=eO(KM),U8=sO(HM,eJ);var AM=eO(TM),Hq=sO(AM,Rq);function Sq($,v,U){if(Bv($),U===void 0)U=new Uint8Array($.outputLen);return tU($,U,v)}var I8=Uint8Array.of(0),Aq=Uint8Array.of();function kq($,v,U,I=32){Bv($),F$(I,"length");let g=$.outputLen;if(I>255*g)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(I/g);if(U===void 0)U=Aq;else q$(U,void 0,"info");let z=new Uint8Array(J*g),G=tU.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)I8[0]=X+1,O.update(X===0?Aq:D).update(U).update(I8).digestInto(D),z.set(D,g*X),G._cloneInto(O);return G.destroy(),O.destroy(),Zv(D,I8),z.slice(0,I)}var SM=BigInt(0),X0=BigInt(1),kM=BigInt(2),PM=BigInt(7),EM=BigInt(256),BM=BigInt(113),Bq=[],Cq=[],Lq=[];for(let $=0,v=X0,U=1,I=0;$<24;$++){[U,I]=[I,(2*U+3*I)%5],Bq.push(2*(5*I+U)),Cq.push(($+1)*($+2)/2%64);let g=SM;for(let J=0;J<7;J++)if(v=(v<<X0^(v>>PM)*BM)%EM,v&kM)g^=X0<<(X0<<BigInt(J))-X0;Lq.push(g)}var fq=aJ(Lq,!0),CM=fq[0],LM=fq[1],Pq=($,v,U)=>U>32?Xq($,v,U):Dq($,v,U),Eq=($,v,U)=>U>32?Nq($,v,U):Qq($,v,U);function fM($,v=24){let U=new Uint32Array(10);for(let I=24-v;I<24;I++){for(let z=0;z<10;z++)U[z]=$[z]^$[z+10]^$[z+20]^$[z+30]^$[z+40];for(let z=0;z<10;z+=2){let G=(z+8)%10,O=(z+2)%10,D=U[O],X=U[O+1],N=Pq(D,X,1)^U[G],w=Eq(D,X,1)^U[G+1];for(let r=0;r<50;r+=10)$[z+r]^=N,$[z+r+1]^=w}let g=$[2],J=$[3];for(let z=0;z<24;z++){let G=Cq[z],O=Pq(g,J,G),D=Eq(g,J,G),X=Bq[z];g=$[X],J=$[X+1],$[X]=O,$[X+1]=D}for(let z=0;z<50;z+=10){for(let G=0;G<10;G++)U[G]=$[z+G];for(let G=0;G<10;G++)$[z+G]^=~U[(G+2)%10]&U[(G+4)%10]}$[0]^=CM[I],$[1]^=LM[I]}Zv(U)}class sJ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,U,I=!1,g=24){if(this.blockLen=$,this.suffix=v,this.outputLen=U,this.enableXOF=I,this.rounds=g,F$(U,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=iJ(this.state)}clone(){return this._cloneInto()}keccak(){nO(this.state32),fM(this.state32,this.rounds),nO(this.state32),this.posOut=0,this.pos=0}update($){Wg(this),q$($);let{blockLen:v,state:U}=this,I=$.length;for(let g=0;g<I;){let J=Math.min(v-this.pos,I-g);for(let z=0;z<J;z++)U[this.pos++]^=$[g++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:U,blockLen:I}=this;if($[U]^=v,(v&128)!==0&&U===I-1)this.keccak();$[I-1]^=128,this.keccak()}writeInto($){Wg(this,!1),q$($),this.finish();let v=this.state,{blockLen:U}=this;for(let I=0,g=$.length;I<g;){if(this.posOut>=U)this.keccak();let J=Math.min(U-this.posOut,g-I);$.set(v.subarray(this.posOut,this.posOut+J),I),this.posOut+=J,I+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(FJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Zv(this.state)}_cloneInto($){let{blockLen:v,suffix:U,outputLen:I,rounds:g,enableXOF:J}=this;return $||=new sJ(v,U,I,J,g),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=g,$.suffix=U,$.outputLen=I,$.enableXOF=J,$.destroyed=this.destroyed,$}}var nq=($,v,U,I={})=>lU(()=>new sJ(v,$,U),I);var YU=nq(6,136,32,_g(8));var _q=nq(6,72,64,_g(10));var bq=($,v,U,I={})=>lU((g={})=>new sJ(v,$,g.dkLen===void 0?U:g.dkLen,!0),I),mq=bq(31,168,16,_g(11)),av=bq(31,136,32,_g(12));function J8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function iq($){return J8($),($&$-1)===0&&$!==0}function z8($,v){J8($);let U=0;for(let I=0;I<v;I++,$>>>=1)U=U<<1|$&1;return U}function xq($){return J8($),31-Math.clz32($)}function Fq($){let v=$.length;if(v<2||!iq(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let U=xq(v);for(let I=0;I<v;I++){let g=z8(I,U);if(I<g){let J=$[I];$[I]=$[g],$[g]=J}}return $}var G8=($,v)=>{let{N:U,roots:I,dit:g,invertButterflies:J=!1,skipStages:z=0,brp:G=!0}=v,O=xq(U);if(!iq(U))throw Error("FFT: Polynomial size should be power of two");let D=g!==J;return(X)=>{if(X.length!==U)throw Error("FFT: wrong Polynomial length");if(g&&G)Fq(X);for(let N=0,w=1;N<O-z;N++){let r=g?N+1+z:O-N,Y=1<<r,V=Y>>1,W=U>>r;for(let T=0;T<U;T+=Y)for(let u=0,n=w++;u<V;u++){let L=J?g?U-n:n:u*W,i=T+u,l=T+u+V,h=I[L],_=X[l],b=X[i];if(D){let g$=$.mul(_,h);X[i]=$.add(b,g$),X[l]=$.sub(b,g$)}else if(J)X[i]=$.add(_,b),X[l]=$.mul($.sub(_,b),h);else X[i]=$.add(b,_),X[l]=$.mul($.sub(b,_),h)}}if(!g&&G)Fq(X);return X}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ev=ng;function $z($,v){if($.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function oq($){return Uint8Array.from($)}function WU($,...v){let U=(g)=>typeof g==="number"?g:g.bytesLen,I=v.reduce((g,J)=>g+U(J),0);return{bytesLen:I,encode:(g)=>{let J=new Uint8Array(I);for(let z=0,G=0;z<v.length;z++){let O=v[z],D=U(O),X=typeof O==="number"?g[z]:O.encode(g[z]);if(q$(X,D,$),J.set(X,G),typeof O!=="number")X.fill(0);G+=D}return J},decode:(g)=>{q$(g,I,$);let J=[];for(let z of v){let G=U(z),O=g.subarray(0,G);J.push(typeof z==="number"?O:z.decode(O)),g=g.subarray(G)}return J}}}function vz($,v){let U=v*$.bytesLen;return{bytesLen:U,encode:(I)=>{if(I.length!==v)throw Error(`vecCoder.encode: wrong length=${I.length}. Expected: ${v}`);let g=new Uint8Array(U);for(let J=0,z=0;J<I.length;J++){let G=$.encode(I[J]);g.set(G,z),G.fill(0),z+=G.length}return g},decode:(I)=>{q$(I,U);let g=[];for(let J=0;J<I.length;J+=$.bytesLen)g.push($.decode(I.subarray(J,J+$.bytesLen)));return g}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let U of v)U.fill(0);else v.fill(0)}function O8($){return(1<<$)-1}var KA=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var cq=($)=>{let{newPoly:v,N:U,Q:I,F:g,ROOT_OF_UNITY:J,brvBits:z,isKyber:G}=$,O=(u,n=I)=>{let L=u%n|0;return(L>=0?L|0:n+L|0)|0},D=(u,n=I)=>{let L=O(u,n)|0;return(L>n>>1?L-n|0:L)|0};function X(){let u=v(U);for(let n=0;n<U;n++){let L=z8(n,z),i=BigInt(J)**BigInt(L)%BigInt(I);u[n]=Number(i)|0}return u}let N=X(),w={add:(u,n)=>O((u|0)+(n|0))|0,sub:(u,n)=>O((u|0)-(n|0))|0,mul:(u,n)=>O((u|0)*(n|0))|0,inv:(u)=>{throw Error("not implemented")}},r={N:U,roots:N,invertButterflies:!0,skipStages:G?1:0,brp:!1},Y=G8(w,{dit:!1,...r}),V=G8(w,{dit:!0,...r});return{mod:O,smod:D,nttZetas:N,NTT:{encode:(u)=>{return Y(u)},decode:(u)=>{V(u);for(let n=0;n<u.length;n++)u[n]=O(g*u[n]);return u}},bitsCoder:(u,n)=>{let L=O8(u),i=u*(U/8);return{bytesLen:i,encode:(l)=>{let h=new Uint8Array(i);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=(n.encode(l[_])&L)<<g$,g$+=u;for(;g$>=8;g$-=8,b>>=8)h[S++]=b&O8(g$)}return h},decode:(l)=>{let h=v(U);for(let _=0,b=0,g$=0,S=0;_<l.length;_++){b|=l[_]<<g$,g$+=8;for(;g$>=u;g$-=u,b>>=u)h[S++]=n.decode(b&L)}return h}}}}},nM=($)=>(v,U)=>{if(!U)U=$.blockLen;let I=new Uint8Array(v.length+2);I.set(v);let g=v.length,J=new Uint8Array(U),z=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(D,X)=>{return I[g+0]=D,I[g+1]=X,z.destroy(),z=$.create({}).update(I),G++,()=>{return O++,z.xofInto(J)}},clean:()=>{z.destroy(),m$(J,I)}}},yq=nM(mq);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,Mg=3329,_M=3303,bM=17,{mod:w0,nttZetas:mM,NTT:ZU,bitsCoder:FM}=cq({N:Jv,Q:Mg,F:_M,ROOT_OF_UNITY:bM,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),D8={512:{N:Jv,Q:Mg,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:Mg,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:Mg,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iM=($)=>{if($>=12)return{encode:(U)=>U,decode:(U)=>U};let v=2**($-1);return{encode:(U)=>((U<<$)+Mg/2)/Mg,decode:(U)=>U*Mg+v>>>$}},N0=($)=>FM($,iM($));function VU($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]+v[U])}function xM($,v){for(let U=0;U<Jv;U++)$[U]=w0($[U]-v[U])}function oM($,v,U,I,g){let J=w0(v*I*g+$*U),z=w0($*I+v*U);return{c0:J,c1:z}}function gz($,v){for(let U=0;U<Jv/2;U++){let I=mM[64+(U>>1)];if(U&1)I=-I;let{c0:g,c1:J}=oM($[2*U+0],$[2*U+1],v[2*U+0],v[2*U+1],I);$[2*U+0]=g,$[2*U+1]=J}return $}function lq($){let v=new Uint16Array(Jv);for(let U=0;U<Jv;){let I=$();if(I.length%3)throw Error("SampleNTT: unaligned block");for(let g=0;U<Jv&&g+3<=I.length;g+=3){let J=(I[g+0]>>0|I[g+1]<<8)&4095,z=(I[g+1]>>4|I[g+2]<<4)&4095;if(J<Mg)v[U++]=J;if(U<Jv&&z<Mg)v[U++]=z}}return v}function r0($,v,U,I){let g=$(I*Jv/4,v,U),J=new Uint16Array(Jv),z=iJ(g),G=0;for(let O=0,D=0,X=0,N=0;O<z.length;O++){let w=z[O];for(let r=0;r<32;r++)if(X+=w&1,w>>=1,G+=1,G===I)N=X,X=0;else if(G===2*I)J[D++]=w0(N-X),X=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return J}var cM=($)=>{let{K:v,PRF:U,XOF:I,HASH512:g,ETA1:J,ETA2:z,du:G,dv:O}=$,D=N0(1),X=N0(O),N=N0(G),w=WU("publicKey",vz(N0(12),v),32),r=vz(N0(12),v),Y=WU("ciphertext",vz(N,v),X),V=WU("seed",32,32);return{secretCoder:r,lengths:{secretKey:r.bytesLen,publicKey:w.bytesLen,cipherText:Y.bytesLen},keygen:(W)=>{q$(W,32,"seed");let T=new Uint8Array(33);T.set(W),T[32]=v;let u=g(T),[n,L]=V.decode(u),i=[],l=[];for(let b=0;b<v;b++)i.push(ZU.encode(r0(U,L,b,J)));let h=I(n);for(let b=0;b<v;b++){let g$=ZU.encode(r0(U,L,v+b,J));for(let S=0;S<v;S++){let K=lq(h.get(S,b));VU(g$,gz(K,i[S]))}l.push(g$)}h.clean();let _={publicKey:w.encode([l,n]),secretKey:r.encode(i)};return m$(n,L,i,l,T,u),_},encrypt:(W,T,u)=>{let[n,L]=w.decode(W),i=[];for(let S=0;S<v;S++)i.push(ZU.encode(r0(U,u,S,J)));let l=I(L),h=new Uint16Array(Jv),_=[];for(let S=0;S<v;S++){let K=r0(U,u,v+S,z),k=new Uint16Array(Jv);for(let Z=0;Z<v;Z++){let M=lq(l.get(S,Z));VU(k,gz(M,i[Z]))}VU(K,ZU.decode(k)),_.push(K),VU(h,gz(n[S],i[S])),m$(k)}l.clean();let b=r0(U,u,2*v,z);VU(b,ZU.decode(h));let g$=D.decode(T);return VU(g$,b),m$(n,i,h,b),Y.encode([_,g$])},decrypt:(W,T)=>{let[u,n]=Y.decode(W),L=r.decode(T),i=new Uint16Array(Jv);for(let l=0;l<v;l++)VU(i,gz(L[l],ZU.encode(u[l])));return xM(n,ZU.decode(i)),m$(i,L,u),D.encode(n)}}};function Q8($){let v=cM($),{HASH256:U,HASH512:I,KDF:g}=$,{secretCoder:J,lengths:z}=v,G=WU("secretKey",z.secretKey,z.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...z,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(X=ev(64))=>{q$(X,64,"seed");let{publicKey:N,secretKey:w}=v.keygen(X.subarray(0,32)),r=U(N),Y=G.encode([w,N,r,X.subarray(32)]);return m$(w,r),{publicKey:N,secretKey:Y}},getPublicKey:(X)=>{let[N,w,r,Y]=G.decode(X);return Uint8Array.from(w)},encapsulate:(X,N=ev(32))=>{q$(X,z.publicKey,"publicKey"),q$(N,32,"message");let w=X.subarray(0,384*$.K),r=J.encode(J.decode(oq(w)));if(!$z(r,w))throw m$(r),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(r);let Y=I.create().update(N).update(U(X)).digest(),V=v.encrypt(X,N,Y.subarray(32,64));return m$(Y.subarray(32)),{cipherText:V,sharedSecret:Y.subarray(0,32)}},decapsulate:(X,N)=>{q$(N,G.bytesLen,"secretKey"),q$(X,z.cipherText,"cipherText");let w=G.bytesLen-96,r=w+32,Y=U(N.subarray(w/2,r));if(!$z(Y,N.subarray(r,r+32)))throw Error("invalid secretKey: hash check failed");let[V,W,T,u]=G.decode(N),n=v.decrypt(X,V),L=I.create().update(n).update(T).digest(),i=L.subarray(0,32),l=v.encrypt(W,n,L.subarray(32,64)),h=$z(X,l),_=g.create({dkLen:32}).update(u).update(X).digest();return m$(n,l,!h?i:_),h?i:_}}}function yM($,v,U){return av.create({dkLen:$}).update(v).update(new Uint8Array([U])).digest()}var X8={HASH256:YU,HASH512:_q,KDF:av,XOF:yq,PRF:yM},fA=Q8({...X8,...D8[512]}),q0=Q8({...X8,...D8[768]}),dq=Q8({...X8,...D8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lM($,v=!1){let{lengths:U,keygen:I}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");I=(z=ev(U.seed))=>{q$(z,U.seed,"seed");let G=J.isLE?mg(z):bg(z),O=J.toBytes(J.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:U.secretKey,publicKey:U.publicKey,seed:U.seed},keygen:I,getPublicKey:(g)=>$.getPublicKey(g)}}function N8($,v=!1){let U=lM($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...U.lengths,msg:U.lengths.seed,cipherText:U.lengths.publicKey},keygen:U.keygen,getPublicKey:U.getPublicKey,encapsulate(I,g=ev($.lengths.seed)){let J=this.keygen(g).secretKey,z=this.decapsulate(I,J),G=$.getPublicKey(J);return m$(J),{sharedSecret:z,cipherText:G}},decapsulate(I,g){let J=$.getSharedSecret(g,I);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function Y0($,v){return WU(v,...$.map((U)=>{if(typeof U.lengths[v]!=="number")throw Error("wrong length: "+v);return U.lengths[v]}))}function r8($){return(v,U)=>$(v,{dkLen:U})}function dM($,v,...U){let I=Y0(U,"seed"),g=Y0(U,"publicKey");if($===void 0)$=I.bytesLen;F$($);function J(z){q$(z,$);let G=I.decode(v(z,I.bytesLen)),O=U.map((N,w)=>N.keygen(G[w])),D=O.map((N)=>N.secretKey),X=O.map((N)=>N.publicKey);return{secretKey:D,publicKey:X}}return{info:{lengths:{seed:$,publicKey:g.bytesLen,secretKey:$}},getPublicKey(z){return this.keygen(z).publicKey},keygen(z=ev($)){let{publicKey:G,secretKey:O}=J(z),D=g.encode(G);return m$(G),m$(O),{secretKey:z,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function Uz($,v,U,I,...g){let J=dM($,U,...g),z=Y0(g,"cipherText"),G=Y0(g,"publicKey"),O=Y0(g,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:z.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,X=ev(O.bytesLen)){let N=G.decode(D),w=O.decode(X),r=g.map((T,u)=>T.encapsulate(N[u],w[u])),Y=r.map((T)=>T.sharedSecret),V=r.map((T)=>T.cipherText),W={sharedSecret:I(N,V,Y),cipherText:z.encode(V)};return m$(Y,V),W},decapsulate(D,X){let N=z.decode(D),{publicKey:w,secretKey:r}=J.expandDecapsulationKey(X),Y=g.map((V,W)=>V.decapsulate(N[W],r[W]));return I(w,N,Y)}}}function hq($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,r8(I),(J,z,G)=>g(_$(G[0],G[1],z[1],J[1],Fg($))),v,U)}var lA=hq("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",q0,N8(U8,!0),av,YU),dA=hq("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",dq,N8(Hq,!0),av,YU);function hM($,v,U,I,g){return Bv(I),Bv(g),Uz(32,32,r8(I),(J,z,G)=>{let O=_$(G[0],G[1],z[0],J[0],z[1],J[1],Fg($)),D=32,X=_$(Fg("hybrid_prk"),O),N=Sq(g,X),w=_$(dU(32,2),Fg("shared_secret"),Fg("")),r=kq(g,N,w,32);return m$(N,w,X,O),r},v,U)}var pq=N8(Tq),hA=hM("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",q0,pq,av,eJ),pM=(()=>Uz(32,32,r8(av),($,v,U)=>YU(_$(U[0],U[1],v[1],$[1],Fg("\\.//^\\"))),q0,pq))();function tM($,v,U,I){let g=$.Point.Fn;if(!g)throw Error("no Point.Fn");function J(z){let G;for(let X=0,N=v;;X=N,N+=v){if(N>z.length)throw Error("rejection sampling failed");if(G=g.fromBytes(z.subarray(X,N),!0),g.isValidNot0(G))break}let O=g.toBytes(g.create(G)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:U,seed:I,msg:I,cipherText:U},keygen(z=ev(I)){return q$(z,I,"seed"),J(z)},getPublicKey(z){return $.getPublicKey(z,!1)},encapsulate(z,G=ev(I)){q$(G,I,"rand");let{secretKey:O}=J(G),D=this.decapsulate(z,O),X=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:X}},decapsulate(z,G){return $.getSharedSecret(G,z).subarray(1)}}}function aM($,v,U,I){let{secretKey:g,publicKeyUncompressed:J}=U.lengths;if(!g||!J)throw Error("wrong curve");let z=tM(U,g,J,I),G=64,O=G+I;return Uz(32,32,(D)=>{q$(D,32);let X=av(D,{dkLen:O}),N=X.subarray(0,G),w=X.subarray(G,O);return _$(N,w)},(D,X,N)=>YU(_$(N[0],N[1],X[1],D[1],Fg($))),v,z)}var eM=(()=>aM("MLKEM768-P256",q0,U8,128))();var Iz=pM,tq=eM;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T$=($,v,U)=>x$($,v,U),q8=f$,eU=SJ,h$=(...$)=>YO(...$),sU=($)=>yI($),$I=rO,vI=($)=>Ng($),zz=BigInt(0),w8=BigInt(1);function Rg($,v=""){if(typeof $!=="boolean"){let U=v&&`"${v}" `;throw TypeError(U+"expected boolean, got type="+typeof $)}return $}function Gz($){if(typeof $==="bigint"){if(!Jz($))throw RangeError("positive bigint expected, got "+$)}else q8($);return $}function sv($,v=""){if(typeof $!=="number"){let U=v&&`"${v}" `;throw TypeError(U+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let U=v&&`"${v}" `;throw RangeError(U+"expected safe integer, got "+$)}}function W0($){let v=Gz($).toString(16);return v.length&1?"0"+v:v}function aq($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?zz:BigInt("0x"+$)}function jU($){return aq(SJ($))}function Fv($){return aq(SJ(yg(x$($)).reverse()))}function Oz($,v){if(f$(v),v===0)throw RangeError("zero length");$=Gz($);let U=$.toString(16);if(U.length>v*2)throw RangeError("number too large");return yI(U.padStart(v*2,"0"))}function Z0($,v){return Oz($,v).reverse()}function eq($,v){if($=T$($),v=T$(v),$.length!==v.length)return!1;let U=0;for(let I=0;I<$.length;I++)U|=$[I]^v[I];return U===0}function yg($){return Uint8Array.from(T$($))}function Dz($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,U)=>{let I=v.charCodeAt(0);if(v.length!==1||I>127)throw RangeError(`string contains non-ASCII character "${$[U]}" with code ${I} at position ${U}`);return I})}var Jz=($)=>typeof $==="bigint"&&zz<=$;function sM($,v,U){return Jz($)&&Jz(v)&&Jz(U)&&v<=$&&$<U}function ug($,v,U,I){if(!sM(v,U,I))throw RangeError("expected valid "+$+": "+U+" <= n < "+I+", got "+v)}function gI($){if($<zz)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>zz;$>>=w8,v+=1);return v}var V0=($)=>(w8<<BigInt($))-w8;function sq($,v,U){if(f$($,"hashLen"),f$(v,"qByteLen"),typeof U!=="function")throw TypeError("hmacFn must be a function");let I=(W)=>new Uint8Array(W),g=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=I($),D=I($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},w=(...W)=>U(D,h$(O,...W)),r=(W=g)=>{if(D=w(J,W),O=w(),W.length===0)return;D=w(z,W),O=w()},Y=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let W=0,T=[];while(W<v){O=w();let u=O.slice();T.push(u),W+=O.length}return h$(...T)};return(W,T)=>{N(),r(W);let u=void 0;while((u=T(Y()))===void 0)r();return N(),u}}function Lv($,v={},U={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function I(J,z,G){if(!G&&z!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw TypeError(`param "${J}" is invalid: expected ${z}, got ${D}`)}let g=(J,z)=>Object.entries(J).forEach(([G,O])=>I(G,O,z));g(v,!1),g(U,!0)}var Y8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),C$=BigInt(1),MU=BigInt(2),UY=BigInt(3),IY=BigInt(4),JY=BigInt(5),$7=BigInt(7),zY=BigInt(8),v7=BigInt(9),GY=BigInt(16);function B$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let U=$%v;return U>=p$?U:v+U}function fv($,v,U){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let I=$;while(v-- >p$)I*=I,I%=U;return I}function $Y($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let U=B$($,v),I=v,g=p$,J=C$,z=C$,G=p$;while(U!==p$){let D=I/U,X=I-U*D,N=g-z*D,w=J-G*D;I=U,U=X,g=z,J=G,z=N,G=w}if(I!==C$)throw Error("invert: does not exist");return B$(g,v)}function W8($,v,U){let I=$;if(!I.eql(I.sqr(v),U))throw Error("Cannot find square root")}function OY($,v){let U=$,I=(U.ORDER+C$)/IY,g=U.pow(v,I);return W8(U,g,v),g}function g7($,v){let U=$,I=(U.ORDER-JY)/zY,g=U.mul(v,MU),J=U.pow(g,I),z=U.mul(v,J),G=U.mul(U.mul(z,MU),J),O=U.mul(z,U.sub(G,U.ONE));return W8(U,O,v),O}function U7($){let v=Qz($),U=DY($),I=U(v,v.neg(v.ONE)),g=U(v,I),J=U(v,v.neg(I)),z=($+$7)/GY;return(G,O)=>{let D=G,X=D.pow(O,z),N=D.mul(X,I),w=D.mul(X,g),r=D.mul(X,J),Y=D.eql(D.sqr(N),O),V=D.eql(D.sqr(w),O);X=D.cmov(X,N,Y),N=D.cmov(r,w,V);let W=D.eql(D.sqr(N),O),T=D.cmov(X,N,W);return W8(D,T,O),T}}function DY($){if($<UY)throw Error("sqrt is not defined for small field");let v=$-C$,U=0;while(v%MU===p$)v/=MU,U++;let I=MU,g=Qz($);while(vY(g,I)===1)if(I++>1000)throw Error("Cannot find square root: probably non-prime P");if(U===1)return OY;let J=g.pow(I,v),z=(v+C$)/MU;return function(O,D){let X=O;if(X.is0(D))return D;if(vY(X,D)!==1)throw Error("Cannot find square root");let N=U,w=X.mul(X.ONE,J),r=X.pow(D,v),Y=X.pow(D,z);while(!X.eql(r,X.ONE)){if(X.is0(r))return X.ZERO;let V=1,W=X.sqr(r);while(!X.eql(W,X.ONE))if(V++,W=X.sqr(W),V===N)throw Error("Cannot find square root");let T=C$<<BigInt(N-V-1),u=X.pow(w,T);N=V,w=X.sqr(u),r=X.mul(r,w),Y=X.mul(Y,u)}return Y}}function I7($){if($%IY===UY)return OY;if($%zY===JY)return g7;if($%GY===v7)return U7($);return DY($)}var Kg=($,v)=>(B$($,v)&C$)===C$,J7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Z8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},U=J7.reduce((I,g)=>{return I[g]="function",I},v);if(Lv($,U),sv($.BYTES,"BYTES"),sv($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function z7($,v,U){let I=$;if(U<p$)throw Error("invalid exponent, negatives unsupported");if(U===p$)return I.ONE;if(U===C$)return v;let g=I.ONE,J=v;while(U>p$){if(U&C$)g=I.mul(g,J);J=I.sqr(J),U>>=C$}return g}function j0($,v,U=!1){let I=$,g=Array(v.length).fill(U?I.ZERO:void 0),J=v.reduce((G,O,D)=>{if(I.is0(O))return G;return g[D]=G,I.mul(G,O)},I.ONE),z=I.inv(J);return v.reduceRight((G,O,D)=>{if(I.is0(O))return G;return g[D]=I.mul(G,g[D]),I.mul(G,O)},z),g}function vY($,v){let U=$,I=(U.ORDER-C$)/MU,g=U.pow(v,I),J=U.eql(g,U.ONE),z=U.eql(g,U.ZERO),G=U.eql(g,U.neg(U.ONE));if(!J&&!z&&!G)throw Error("invalid Legendre symbol result");return J?1:z?0:-1}function G7($,v){if(v!==void 0)q8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let U=gI($);if(v!==void 0&&v<U)throw Error(`invalid n length: expected bit length (${U}) >= n.length (${v})`);let I=v!==void 0?v:U,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}var gY=new WeakMap;class V8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=C$;_lengths;_mod;constructor($,v={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let U=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")U=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:I,nByteLength:g}=G7($,U);if(g>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=I,this.BYTES=g,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return B$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return B$($*$,this.ORDER)}add($,v){return B$($+v,this.ORDER)}sub($,v){return B$($-v,this.ORDER)}mul($,v){return B$($*v,this.ORDER)}pow($,v){return z7(this,$,v)}div($,v){return B$($*$Y(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return $Y($,this.ORDER)}sqrt($){let v=gY.get(this);if(!v)gY.set(this,v=I7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?Z0($,this.BYTES):Oz($,this.BYTES)}fromBytes($,v=!1){T$($);let{_lengths:U,BYTES:I,isLE:g,ORDER:J,_mod:z}=this;if(U){if($.length<1||!U.includes($.length)||$.length>I)throw Error("Field.fromBytes: expected "+U+" bytes, got "+$.length);let O=new Uint8Array(I);O.set($,g?0:O.length-$.length),$=O}if($.length!==I)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let G=g?Fv($):jU($);if(z)G=B$(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return j0(this,$)}cmov($,v,U){return Rg(U,"condition"),U?v:$}}Object.freeze(V8.prototype);function Qz($,v={}){return new V8($,v)}function QY($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let v=gI($-C$);return Math.ceil(v/8)}function j8($){let v=QY($);return v+Math.ceil(v/2)}function XY($,v,U=!1){T$($);let I=$.length,g=QY(v),J=Math.max(j8(v),16);if(I<J||I>1024)throw Error("expected "+J+"-1024 bytes of input, got "+I);let z=U?Fv($):jU($),G=B$(z,v-C$)+C$;return U?Z0(G,g):Oz(G,g)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UI=BigInt(0),RU=BigInt(1);function M0($,v){let U=v.negate();return $?U:v}function uU($,v){let U=j0($.Fp,v.map((I)=>I.Z));return v.map((I,g)=>$.fromAffine(I.toAffine(U[g])))}function qY($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function M8($,v){qY($,v);let U=Math.ceil(v/$)+1,I=2**($-1),g=2**$,J=V0($),z=BigInt($);return{windows:U,windowSize:I,mask:J,maxNumber:g,shiftBy:z}}function NY($,v,U){let{windowSize:I,mask:g,maxNumber:J,shiftBy:z}=U,G=Number($&g),O=$>>z;if(G>I)G-=J,O+=RU;let D=v*I,X=D+Math.abs(G)-1,N=G===0,w=G<0,r=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:w,isNegF:r,offsetF:D}}var R8=new WeakMap,YY=new WeakMap;function u8($){return YY.get($)||1}function rY($){if($!==UI)throw Error("invalid wNAF")}class R0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,U=this.ZERO){let I=$;while(v>UI){if(v&RU)U=U.add(I);I=I.double(),v>>=RU}return U}precomputeWindow($,v){let{windows:U,windowSize:I}=M8(v,this.bits),g=[],J=$,z=J;for(let G=0;G<U;G++){z=J,g.push(z);for(let O=1;O<I;O++)z=z.add(J),g.push(z);J=z.double()}return g}wNAF($,v,U){if(!this.Fn.isValid(U))throw Error("invalid scalar");let I=this.ZERO,g=this.BASE,J=M8($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:w}=NY(U,z,J);if(U=G,D)g=g.add(M0(N,v[w]));else I=I.add(M0(X,v[O]))}return rY(U),{p:I,f:g}}wNAFUnsafe($,v,U,I=this.ZERO){let g=M8($,this.bits);for(let J=0;J<g.windows;J++){if(U===UI)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=NY(U,J,g);if(U=z,O)continue;else{let X=v[G];I=I.add(D?X.negate():X)}}return rY(U),I}getPrecomputes($,v,U){let I=R8.get(v);if(!I){if(I=this.precomputeWindow(v,$),$!==1){if(typeof U==="function")I=U(I);R8.set(v,I)}}return I}cached($,v,U){let I=u8($);return this.wNAF(I,this.getPrecomputes(I,$,U),v)}unsafe($,v,U,I){let g=u8($);if(g===1)return this._unsafeLadder($,v,I);return this.wNAFUnsafe(g,this.getPrecomputes(g,$,U),v,I)}createCache($,v){qY(v,this.bits),YY.set($,v),R8.delete($)}hasCache($){return u8($)!==1}}function WY($,v,U,I){let g=v,J=$.ZERO,z=$.ZERO;while(U>UI||I>UI){if(U&RU)J=J.add(g);if(I&RU)z=z.add(g);g=g.double(),U>>=RU,I>>=RU}return{p1:J,p2:z}}function wY($,v,U){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Z8(v),v}else return Qz($,{isLE:U})}function Xz($,v,U={},I){if(I===void 0)I=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>UI))throw Error(`CURVE.${O} must be positive bigint`)}let g=wY(v.p,U.Fp,I),J=wY(v.n,U.Fn,I),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!g.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:g,Fn:J}}function u0($,v){return function(I){let g=$(I);return{secretKey:g,publicKey:v(g)}}}function K0($,v){if(sv($),sv(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let U=Array.from({length:v}).fill(0);for(let I=v-1;I>=0;I--)U[I]=$&255,$>>>=8;return new Uint8Array(U)}function O7($,v){let U=new Uint8Array($.length);for(let I=0;I<$.length;I++)U[I]=$[I]^v[I];return U}function D7($){if(!$I($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?Dz($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function K8($,v,U,I){if(T$($),sv(U),v=D7(v),v.length>255)v=I(h$(Dz("H2C-OVERSIZE-DST-"),v));let{outputLen:g,blockLen:J}=I,z=Math.ceil(U/g);if(U>65535||z>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,K0(v.length,1)),O=new Uint8Array(J),D=K0(U,2),X=Array(z),N=I(h$(O,$,D,K0(0,1),G));X[0]=I(h$(N,K0(1,1),G));for(let r=1;r<z;r++){let Y=[O7(N,X[r-1]),K0(r+1,1),G];X[r]=I(h$(...Y))}return h$(...X).slice(0,U)}var ZY="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VY=($,v)=>($+($>=0?v:-v)/MY)/v;function Q7($,v,U){ug("scalar",$,$g,U);let[[I,g],[J,z]]=v,G=VY(z*$,U),O=VY(-g*$,U),D=$-G*I-O*J,X=-G*g-O*z,N=D<$g,w=X<$g;if(N)D=-D;if(w)X=-X;let r=V0(Math.ceil(gI(U)/2))+lg;if(D<$g||D>=r||X<$g||X>=r)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:N,k1:D,k2neg:w,k2:X}}function H8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function T8($,v){Lv($);let U={};for(let I of Object.keys(v))U[I]=$[I]===void 0?v[I]:$[I];if(Rg(U.lowS,"lowS"),Rg(U.prehash,"prehash"),U.format!==void 0)H8(U.format);return U}class jY extends Error{constructor($=""){super($)}}var iv={Err:jY,_tlv:{encode:($,v)=>{let{Err:U}=iv;if(sv($,"tag"),$<0||$>255)throw new U("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new U("tlv.encode: unpadded data");let I=v.length/2,g=W0(I);if(g.length/2&128)throw new U("tlv.encode: long form length too big");let J=I>127?W0(g.length/2|128):"";return W0($)+J+g+v},decode($,v){let{Err:U}=iv;v=T$(v,void 0,"DER data");let I=0;if($<0||$>255)throw new U("tlv.encode: wrong tag");if(v.length<2||v[I++]!==$)throw new U("tlv.decode: wrong tlv");let g=v[I++],J=!!(g&128),z=0;if(!J)z=g;else{let O=g&127;if(!O)throw new U("tlv.decode(long): indefinite length not supported");if(O>4)throw new U("tlv.decode(long): byte length is too big");let D=v.subarray(I,I+O);if(D.length!==O)throw new U("tlv.decode: length bytes not complete");if(D[0]===0)throw new U("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(I+=O,z<128)throw new U("tlv.decode(long): not minimal encoding")}let G=v.subarray(I,I+z);if(G.length!==z)throw new U("tlv.decode: wrong value length");return{v:G,l:v.subarray(I+z)}}},_int:{encode($){let{Err:v}=iv;if(Gz($),$<$g)throw new v("integer: negative integers are not allowed");let U=W0($);if(Number.parseInt(U[0],16)&8)U="00"+U;if(U.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return U},decode($){let{Err:v}=iv;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return jU($)}},toSig($){let{Err:v,_int:U,_tlv:I}=iv,g=T$($,void 0,"signature"),{v:J,l:z}=I.decode(48,g);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=I.decode(2,J),{v:D,l:X}=I.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:U.decode(G),s:U.decode(D)}},hexFromSig($){let{_tlv:v,_int:U}=iv,I=v.encode(2,U.encode($.r)),g=v.encode(2,U.encode($.s)),J=I+g;return v.encode(48,J)}};Object.freeze(iv._tlv);Object.freeze(iv._int);Object.freeze(iv);var $g=BigInt(0),lg=BigInt(1),MY=BigInt(2),Nz=BigInt(3),X7=BigInt(4);function RY($,v={}){let U=Xz("weierstrass",$,v),I=U.Fp,g=U.Fn,J=U.CURVE,{h:z,n:G}=J;Lv(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!I.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let X=KY(I,g);function N(){if(!I.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(S,K,k){if(D&&K.is0())return Uint8Array.of(0);let{x:Z,y:M}=K.toAffine(),j=I.toBytes(Z);if(Rg(k,"isCompressed"),k){N();let A=!I.isOdd(M);return h$(uY(A),j)}else return h$(Uint8Array.of(4),j,I.toBytes(M))}function r(S){T$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:k}=X,Z=S.length,M=S[0],j=S.subarray(1);if(D&&Z===1&&M===0)return{x:I.ZERO,y:I.ZERO};if(Z===K&&(M===2||M===3)){let A=I.fromBytes(j);if(!I.isValid(A))throw Error("bad point: is not on curve, wrong x");let R=W(A),E;try{E=I.sqrt(R)}catch(s){let J$=s instanceof Error?": "+s.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}N();let C=I.isOdd(E);if((M&1)===1!==C)E=I.neg(E);return{x:A,y:E}}else if(Z===k&&M===4){let A=I.BYTES,R=I.fromBytes(j.subarray(0,A)),E=I.fromBytes(j.subarray(A,A*2));if(!T(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${Z}, expected compressed=${K} or uncompressed=${k}`)}let Y=v.toBytes===void 0?w:v.toBytes,V=v.fromBytes===void 0?r:v.fromBytes;function W(S){let K=I.sqr(S),k=I.mul(K,S);return I.add(I.add(k,I.mul(S,J.a)),J.b)}function T(S,K){let k=I.sqr(K),Z=W(S);return I.eql(k,Z)}if(!T(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=I.mul(I.pow(J.a,Nz),X7),n=I.mul(I.sqr(J.b),BigInt(27));if(I.is0(I.add(u,n)))throw Error("bad curve params: a or b");function L(S,K,k=!1){if(!I.isValid(K)||k&&I.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof _))throw Error("Weierstrass Point expected")}function l(S){if(!O||!O.basises)throw Error("no endo");return Q7(S,O.basises,g.ORDER)}function h(S,K,k,Z,M){return k=new _(I.mul(k.X,S),k.Y,k.Z),K=M0(Z,K),k=M0(M,k),K.add(k)}class _{static BASE=new _(J.Gx,J.Gy,I.ONE);static ZERO=new _(I.ZERO,I.ONE,I.ZERO);static Fp=I;static Fn=g;X;Y;Z;constructor(S,K,k){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",k),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:k}=S||{};if(!S||!I.isValid(K)||!I.isValid(k))throw Error("invalid affine point");if(S instanceof _)throw Error("projective point not allowed");if(I.is0(K)&&I.is0(k))return _.ZERO;return new _(K,k,I.ONE)}static fromBytes(S){let K=_.fromAffine(V(T$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return _.fromBytes(sU(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(g$.createCache(this,S),!K)this.multiply(Nz);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&I.is0(S.X)&&I.eql(S.Y,I.ONE)&&I.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:k}=S.toAffine();if(!I.isValid(K)||!I.isValid(k))throw Error("bad point: x or y not field elements");if(!T(K,k))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!I.isOdd)throw Error("Field doesn't support isOdd");return!I.isOdd(S)}equals(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.eql(I.mul(K,A),I.mul(M,Z)),E=I.eql(I.mul(k,A),I.mul(j,Z));return R&&E}negate(){return new _(this.X,I.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,k=I.mul(K,Nz),{X:Z,Y:M,Z:j}=this,A=I.ZERO,R=I.ZERO,E=I.ZERO,C=I.mul(Z,Z),x=I.mul(M,M),s=I.mul(j,j),J$=I.mul(Z,M);return J$=I.add(J$,J$),E=I.mul(Z,j),E=I.add(E,E),A=I.mul(S,E),R=I.mul(k,s),R=I.add(A,R),A=I.sub(x,R),R=I.add(x,R),R=I.mul(A,R),A=I.mul(J$,A),E=I.mul(k,E),s=I.mul(S,s),J$=I.sub(C,s),J$=I.mul(S,J$),J$=I.add(J$,E),E=I.add(C,C),C=I.add(E,C),C=I.add(C,s),C=I.mul(C,J$),R=I.add(R,C),s=I.mul(M,j),s=I.add(s,s),C=I.mul(s,J$),A=I.sub(A,C),E=I.mul(s,x),E=I.add(E,E),E=I.add(E,E),new _(A,R,E)}add(S){i(S);let{X:K,Y:k,Z}=this,{X:M,Y:j,Z:A}=S,R=I.ZERO,E=I.ZERO,C=I.ZERO,x=J.a,s=I.mul(J.b,Nz),J$=I.mul(K,M),G$=I.mul(k,j),Q$=I.mul(Z,A),r$=I.add(K,k),X$=I.add(M,j);r$=I.mul(r$,X$),X$=I.add(J$,G$),r$=I.sub(r$,X$),X$=I.add(K,Z);let N$=I.add(M,A);return X$=I.mul(X$,N$),N$=I.add(J$,Q$),X$=I.sub(X$,N$),N$=I.add(k,Z),R=I.add(j,A),N$=I.mul(N$,R),R=I.add(G$,Q$),N$=I.sub(N$,R),C=I.mul(x,X$),R=I.mul(s,Q$),C=I.add(R,C),R=I.sub(G$,C),C=I.add(G$,C),E=I.mul(R,C),G$=I.add(J$,J$),G$=I.add(G$,J$),Q$=I.mul(x,Q$),X$=I.mul(s,X$),G$=I.add(G$,Q$),Q$=I.sub(J$,Q$),Q$=I.mul(x,Q$),X$=I.add(X$,Q$),J$=I.mul(G$,X$),E=I.add(E,J$),J$=I.mul(N$,X$),R=I.mul(r$,R),R=I.sub(R,J$),J$=I.mul(r$,G$),C=I.mul(N$,C),C=I.add(C,J$),new _(R,E,C)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(_.ZERO)}multiply(S){let{endo:K}=v;if(!g.isValidNot0(S))throw RangeError("invalid scalar: out of range");let k,Z,M=(j)=>g$.cached(this,j,(A)=>uU(_,A));if(K){let{k1neg:j,k1:A,k2neg:R,k2:E}=l(S),{p:C,f:x}=M(A),{p:s,f:J$}=M(E);Z=x.add(J$),k=h(K.beta,C,s,j,R)}else{let{p:j,f:A}=M(S);k=j,Z=A}return uU(_,[k,Z])[0]}multiplyUnsafe(S){let{endo:K}=v,k=this,Z=S;if(!g.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===$g||k.is0())return _.ZERO;if(Z===lg)return k;if(g$.hasCache(this))return this.multiply(Z);if(K){let{k1neg:M,k1:j,k2neg:A,k2:R}=l(Z),{p1:E,p2:C}=WY(_,k,j,R);return h(K.beta,E,C,M,A)}else return g$.unsafe(k,Z)}toAffine(S){let K=this,k=S,{X:Z,Y:M,Z:j}=K;if(I.eql(j,I.ONE))return{x:Z,y:M};let A=K.is0();if(k==null)k=A?I.ONE:I.inv(j);let R=I.mul(Z,k),E=I.mul(M,k),C=I.mul(j,k);if(A)return{x:I.ZERO,y:I.ZERO};if(!I.eql(C,I.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(z===lg)return!0;if(S)return S(_,this);return g$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:S}=v;if(z===lg)return this;if(S)return S(_,this);return this.multiplyUnsafe(z)}isSmallOrder(){if(z===lg)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return Rg(S,"isCompressed"),this.assertValidity(),Y(_,this,S)}toHex(S=!0){return eU(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=g.BITS,g$=new R0(_,v.endo?Math.ceil(b/2):b);if(b>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function uY($){return Uint8Array.of($?2:3)}function KY($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function N7($,v={}){let{Fn:U}=$,I=v.randomBytes===void 0?vI:v.randomBytes,g=Object.assign(KY($.Fp,U),{seed:Math.max(j8(U.ORDER),16)});function J(r){try{let Y=U.fromBytes(r);return U.isValidNot0(Y)}catch(Y){return!1}}function z(r,Y){let{publicKey:V,publicKeyUncompressed:W}=g;try{let T=r.length;if(Y===!0&&T!==V)return!1;if(Y===!1&&T!==W)return!1;return!!$.fromBytes(r)}catch(T){return!1}}function G(r){return r=r===void 0?I(g.seed):r,XY(T$(r,g.seed,"seed"),U.ORDER)}function O(r,Y=!0){return $.BASE.multiply(U.fromBytes(r)).toBytes(Y)}function D(r){let{secretKey:Y,publicKey:V,publicKeyUncompressed:W}=g,T=U._lengths;if(!$I(r))return;let u=T$(r,void 0,"key").length,n=u===V||u===W,L=u===Y||!!T?.includes(u);if(n&&L)return;return n}function X(r,Y,V=!0){if(D(r)===!0)throw Error("first arg must be private key");if(D(Y)===!1)throw Error("second arg must be public key");let W=U.fromBytes(r);return $.fromBytes(Y).multiply(W).toBytes(V)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},w=u0(G,O);return Object.freeze(N),Object.freeze(g),Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:w,Point:$,utils:N,lengths:g})}function TY($,v,U={}){let I=v;Xg(I),Lv(U,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),U=Object.assign({},U);let g=U.randomBytes===void 0?vI:U.randomBytes,J=U.hmac===void 0?(M,j)=>dv(I,M,j):U.hmac,{Fp:z,Fn:G}=$,{ORDER:O,BITS:D}=G,{keygen:X,getPublicKey:N,getSharedSecret:w,utils:r,lengths:Y}=N7($,U),V={prehash:!0,lowS:typeof U.lowS==="boolean"?U.lowS:!0,format:"compact",extraEntropy:!1},W=O*MY+lg<z.ORDER;function T(M){let j=O>>lg;return M>j}function u(M,j){if(!G.isValidNot0(j))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return j}function n(){if(W)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(M,j){H8(j);let A=Y.signature,R=j==="compact"?A:j==="recovered"?A+1:void 0;return T$(M,R)}class i{r;s;recovery;constructor(M,j,A){if(this.r=u("r",M),this.s=u("s",j),A!=null){if(n(),![0,1,2,3].includes(A))throw Error("invalid recovery id");this.recovery=A}Object.freeze(this)}static fromBytes(M,j=V.format){L(M,j);let A;if(j==="der"){let{r:x,s}=iv.toSig(T$(M));return new i(x,s)}if(j==="recovered")A=M[0],j="compact",M=M.subarray(1);let R=Y.signature/2,E=M.subarray(0,R),C=M.subarray(R,R*2);return new i(G.fromBytes(E),G.fromBytes(C),A)}static fromHex(M,j){return this.fromBytes(sU(M),j)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new i(this.r,this.s,M)}recoverPublicKey(M){let{r:j,s:A}=this,R=this.assertRecovery(),E=R===2||R===3?j+O:j;if(!z.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let C=z.toBytes(E),x=$.fromBytes(h$(uY((R&1)===0),C)),s=G.inv(E),J$=h(T$(M,void 0,"msgHash")),G$=G.create(-J$*s),Q$=G.create(A*s),r$=$.BASE.multiplyUnsafe(G$).add(x.multiplyUnsafe(Q$));if(r$.is0())throw Error("invalid recovery: point at infinify");return r$.assertValidity(),r$}hasHighS(){return T(this.s)}toBytes(M=V.format){if(H8(M),M==="der")return sU(iv.hexFromSig(this));let{r:j,s:A}=this,R=G.toBytes(j),E=G.toBytes(A);if(M==="recovered")return n(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(M){return eU(this.toBytes(M))}}Object.freeze(i.prototype),Object.freeze(i);let l=U.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let A=jU(j),R=j.length*8-D;return R>0?A>>BigInt(R):A}:U.bits2int,h=U.bits2int_modN===void 0?function(j){return G.create(l(j))}:U.bits2int_modN,_=V0(D);function b(M){return ug("num < 2^"+D,M,$g,_),G.toBytes(M)}function g$(M,j){return T$(M,void 0,"message"),j?T$(I(M),void 0,"prehashed message"):M}function S(M,j,A){let{lowS:R,prehash:E,extraEntropy:C}=T8(A,V);M=g$(M,E);let x=h(M),s=G.fromBytes(j);if(!G.isValidNot0(s))throw Error("invalid private key");let J$=[b(s),b(x)];if(C!=null&&C!==!1){let X$=C===!0?g(Y.secretKey):C;J$.push(T$(X$,void 0,"extraEntropy"))}let G$=h$(...J$),Q$=x;function r$(X$){let N$=l(X$);if(!G.isValidNot0(N$))return;let W$=G.inv(N$),k$=$.BASE.multiply(N$).toAffine(),E$=G.create(k$.x);if(E$===$g)return;let a$=G.create(W$*G.create(Q$+E$*s));if(a$===$g)return;let e$=(k$.x===E$?0:2)|Number(k$.y&lg),Wv=a$;if(R&&T(a$))Wv=G.neg(a$),e$^=1;return new i(E$,Wv,W?void 0:e$)}return{seed:G$,k2sig:r$}}function K(M,j,A={}){let{seed:R,k2sig:E}=S(M,j,A);return sq(I.outputLen,G.BYTES,J)(R,E).toBytes(A.format)}function k(M,j,A,R={}){let{lowS:E,prehash:C,format:x}=T8(R,V);if(A=T$(A,void 0,"publicKey"),j=g$(j,C),!$I(M)){let s=M instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+s)}L(M,x);try{let s=i.fromBytes(M,x),J$=$.fromBytes(A);if(E&&s.hasHighS())return!1;let{r:G$,s:Q$}=s,r$=h(j),X$=G.inv(Q$),N$=G.create(r$*X$),W$=G.create(G$*X$),k$=$.BASE.multiplyUnsafe(N$).add(J$.multiplyUnsafe(W$));if(k$.is0())return!1;return G.create(k$.x)===G$}catch(s){return!1}}function Z(M,j,A={}){let{prehash:R}=T8(A,V);return j=g$(j,R),i.fromBytes(M,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:X,getPublicKey:N,getSharedSecret:w,utils:r,lengths:Y,Point:$,sign:K,verify:k,recoverPublicKey:Z,Signature:i,hash:I})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var r7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var w7=RY(r7),II=TY(w7,n$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var dg=BigInt(0),Vv=BigInt(1),A8=BigInt(2),q7=BigInt(8);function Y7($,v,U,I){let g=$.sqr(U),J=$.sqr(I),z=$.add($.mul(v.a,g),J),G=$.add($.ONE,$.mul(v.d,$.mul(g,J)));return $.eql(z,G)}function HY($,v={}){let U=v,I=Xz("edwards",$,U,U.FpFnLE),{Fp:g,Fn:J}=I,z=I.CURVE,{h:G}=z;Lv(U,{},{uvRatio:"function"});let O=A8<<BigInt(J.BYTES*8)-Vv,D=(V)=>g.create(V),X=U.uvRatio===void 0?(V,W)=>{try{return{isValid:!0,value:g.sqrt(g.div(V,W))}}catch(T){return{isValid:!1,value:dg}}}:U.uvRatio;if(!Y7(g,z,z.Gx,z.Gy))throw Error("bad curve params: generator point");function N(V,W,T=!1){let u=T?Vv:dg;return ug("coordinate "+V,W,u,O),W}function w(V){if(!(V instanceof r))throw Error("EdwardsPoint expected")}class r{static BASE=new r(z.Gx,z.Gy,Vv,D(z.Gx*z.Gy));static ZERO=new r(dg,Vv,Vv,dg);static Fp=g;static Fn=J;X;Y;Z;T;constructor(V,W,T,u){this.X=N("x",V),this.Y=N("y",W),this.Z=N("z",T,!0),this.T=N("t",u),Object.freeze(this)}static CURVE(){return z}static fromAffine(V){if(V instanceof r)throw Error("extended point not allowed");let{x:W,y:T}=V||{};return N("x",W),N("y",T),new r(W,T,Vv,D(W*T))}static fromBytes(V,W=!1){let T=g.BYTES,{a:u,d:n}=z;V=yg(T$(V,T,"point")),Rg(W,"zip215");let L=yg(V),i=V[T-1];L[T-1]=i&-129;let l=Fv(L),h=W?O:g.ORDER;ug("point.y",l,dg,h);let _=D(l*l),b=D(_-Vv),g$=D(n*_-u),{isValid:S,value:K}=X(b,g$);if(!S)throw Error("bad point: invalid y coordinate");let k=(K&Vv)===Vv,Z=(i&128)!==0;if(!W&&K===dg&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==k)K=D(-K);return r.fromAffine({x:K,y:l})}static fromHex(V,W=!1){return r.fromBytes(sU(V),W)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,W=!0){if(Y.createCache(this,V),!W)this.multiply(A8);return this}assertValidity(){let V=this,{a:W,d:T}=z;if(V.is0())throw Error("bad point: ZERO");let{X:u,Y:n,Z:L,T:i}=V,l=D(u*u),h=D(n*n),_=D(L*L),b=D(_*_),g$=D(l*W),S=D(_*D(g$+h)),K=D(b+D(T*D(l*h)));if(S!==K)throw Error("bad point: equation left != right (1)");let k=D(u*n),Z=D(L*i);if(k!==Z)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:W,Y:T,Z:u}=this,{X:n,Y:L,Z:i}=V,l=D(W*i),h=D(n*u),_=D(T*i),b=D(L*u);return l===h&&_===b}is0(){return this.equals(r.ZERO)}negate(){return new r(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=z,{X:W,Y:T,Z:u}=this,n=D(W*W),L=D(T*T),i=D(A8*D(u*u)),l=D(V*n),h=W+T,_=D(D(h*h)-n-L),b=l+L,g$=b-i,S=l-L,K=D(_*g$),k=D(b*S),Z=D(_*S),M=D(g$*b);return new r(K,k,M,Z)}add(V){w(V);let{a:W,d:T}=z,{X:u,Y:n,Z:L,T:i}=this,{X:l,Y:h,Z:_,T:b}=V,g$=D(u*l),S=D(n*h),K=D(i*T*b),k=D(L*_),Z=D((u+n)*(l+h)-g$-S),M=k-K,j=k+K,A=D(S-W*g$),R=D(Z*M),E=D(j*A),C=D(Z*A),x=D(M*j);return new r(R,E,x,C)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!J.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:W,f:T}=Y.cached(this,V,(u)=>uU(r,u));return uU(r,[W,T])[0]}multiplyUnsafe(V){if(!J.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===dg)return r.ZERO;if(this.is0()||V===Vv)return this;return Y.unsafe(this,V,(W)=>uU(r,W))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Y.unsafe(this,z.n).is0()}toAffine(V){let W=this,T=V,{X:u,Y:n,Z:L}=W,i=W.is0();if(T==null)T=i?q7:g.inv(L);let l=D(u*T),h=D(n*T),_=g.mul(L,T);if(i)return{x:dg,y:Vv};if(_!==Vv)throw Error("invZ was invalid");return{x:l,y:h}}clearCofactor(){if(G===Vv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:V,y:W}=this.toAffine(),T=g.toBytes(W);return T[T.length-1]|=V&Vv?128:0,T}toHex(){return eU(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Y=new R0(r,J.BITS);if(J.BITS>=8)r.BASE.precompute(8);return Object.freeze(r.prototype),Object.freeze(r),r}class S8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){Y8()}static fromHex($){Y8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return eU(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),JI=BigInt(1),rz=BigInt(2);function W7($){return Lv($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function AY($){let v=W7($),{P:U,type:I,adjustScalarBytes:g,powPminus2:J,randomBytes:z}=v,G=I==="x25519";if(!G&&I!=="x448")throw Error("invalid type");let O=z===void 0?vI:z,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),w=G?BigInt(121665):BigInt(39081),r=G?rz**BigInt(254):rz**BigInt(447),Y=G?BigInt(8)*rz**BigInt(251)-JI:BigInt(4)*rz**BigInt(445)-JI,V=r+Y+JI,W=(Z)=>B$(Z,U),T=u(N);function u(Z){return Z0(W(Z),X)}function n(Z){let M=yg(T$(Z,X,"uCoordinate"));if(G)M[31]&=127;return W(Fv(M))}function L(Z){return Fv(g(yg(T$(Z,X,"scalar"))))}function i(Z,M){let j=g$(n(M),L(Z));if(j===T0)throw Error("invalid private or public key received");return u(j)}function l(Z){return i(Z,T)}let h=l,_=i;function b(Z,M,j){let A=W(Z*(M-j));return M=W(M-A),j=W(j+A),{x_2:M,x_3:j}}function g$(Z,M){ug("u",Z,T0,U),ug("scalar",M,r,V);let j=M,A=Z,R=JI,E=T0,C=Z,x=JI,s=T0;for(let G$=BigInt(D-1);G$>=T0;G$--){let Q$=j>>G$&JI;s^=Q$,{x_2:R,x_3:C}=b(s,R,C),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let r$=R+E,X$=W(r$*r$),N$=R-E,W$=W(N$*N$),k$=X$-W$,E$=C+x,a$=C-x,e$=W(a$*r$),Wv=W(E$*N$),cv=e$+Wv,yv=e$-Wv;C=W(cv*cv),x=W(A*W(yv*yv)),R=W(X$*W$),E=W(k$*(X$+W(w*k$)))}({x_2:R,x_3:C}=b(s,R,C)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return W(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(Z)=>{return Z=Z===void 0?O(X):Z,T$(Z,S.seed,"seed"),Z},k={randomSecretKey:K};return Object.freeze(S),Object.freeze(k),Object.freeze({keygen:u0(K,h),getSharedSecret:_,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:k,GuBytes:T.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z7=BigInt(0),Tg=BigInt(1),SY=BigInt(2),V7=BigInt(3),j7=BigInt(5),M7=BigInt(8),TU=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),B8=(()=>({p:TU,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:M7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function EY($){let v=BigInt(10),U=BigInt(20),I=BigInt(40),g=BigInt(80),J=TU,G=$*$%J*$%J,O=fv(G,SY,J)*G%J,D=fv(O,Tg,J)*$%J,X=fv(D,j7,J)*D%J,N=fv(X,v,J)*X%J,w=fv(N,U,J)*N%J,r=fv(w,I,J)*w%J,Y=fv(r,g,J)*r%J,V=fv(Y,g,J)*r%J,W=fv(V,v,J)*X%J;return{pow_p_5_8:fv(W,SY,J)*$%J,b2:G}}function R7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var k8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function C8($,v){let U=TU,I=B$(v*v*v,U),g=B$(I*I*v,U),J=EY($*g).pow_p_5_8,z=B$($*I*J,U),G=B$(v*z*z,U),O=z,D=B$(z*k8,U),X=G===$,N=G===B$(-$,U),w=G===B$(-$*k8,U);if(X)z=O;if(N||w)z=D;if(Kg(z,U))z=B$(-z,U);return{isValid:X||N,value:z}}var KU=HY(B8,{uvRatio:C8}),hg=(()=>KU.Fp)(),BY=(()=>KU.Fn)();var wz=(()=>{let $=TU;return AY({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:U,b2:I}=EY(v);return B$(fv(U,V7,$)*I,$)},adjustScalarBytes:R7})})();var P8=k8,u7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),K7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),T7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),H7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),kY=($)=>C8(Tg,$),A7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),E8=($)=>hg.create(Fv($)&A7);function PY($){let{d:v}=B8,U=TU,I=(T)=>hg.create(T),g=I(P8*$*$),J=I((g+Tg)*T7),z=BigInt(-1),G=I((z-v*g)*I(g+v)),{isValid:O,value:D}=C8(J,G),X=I(D*$);if(!Kg(X,U))X=I(-X);if(!O)D=X;if(!O)z=g;let N=I(z*(g-Tg)*H7-G),w=D*D,r=I((D+D)*G),Y=I(N*u7),V=I(Tg-w),W=I(Tg+w);return new KU(I(r*W),I(V*Y),I(Y*W),I(r*V))}class Xv extends S8{static BASE=(()=>new Xv(KU.BASE))();static ZERO=(()=>new Xv(KU.ZERO))();static Fp=(()=>hg)();static Fn=(()=>BY)();constructor($){super($)}static fromAffine($){return new Xv(KU.fromAffine($))}assertSame($){if(!($ instanceof Xv))throw Error("RistrettoPoint expected")}init($){return new Xv($)}static fromBytes($){x$($,32);let{a:v,d:U}=B8,I=TU,g=(n)=>hg.create(n),J=E8($);if(!eq(hg.toBytes(J),$)||Kg(J,I))throw Error("invalid ristretto255 encoding 1");let z=g(J*J),G=g(Tg+v*z),O=g(Tg-v*z),D=g(G*G),X=g(O*O),N=g(v*U*D-X),{isValid:w,value:r}=kY(g(N*X)),Y=g(r*O),V=g(r*Y*N),W=g((J+J)*Y);if(Kg(W,I))W=g(-W);let T=g(G*V),u=g(W*T);if(!w||Kg(u,I)||T===Z7)throw Error("invalid ristretto255 encoding 2");return new Xv(new KU(W,T,Tg,u))}static fromHex($){return Xv.fromBytes(yI($))}toBytes(){let{X:$,Y:v,Z:U,T:I}=this.ep,g=TU,J=(V)=>hg.create(V),z=J(J(U+v)*J(U-v)),G=J($*v),O=J(G*G),{value:D}=kY(J(z*O)),X=J(D*z),N=J(D*G),w=J(X*N*I),r;if(Kg(I*w,g)){let V=J(v*P8),W=J($*P8);$=V,v=W,r=J(X*K7)}else r=N;if(Kg($*w,g))v=J(-v);let Y=J((U-v)*r);if(Kg(Y,g))Y=J(-Y);return hg.toBytes(Y)}equals($){this.assertSame($);let{X:v,Y:U}=this.ep,{X:I,Y:g}=$.ep,J=(O)=>hg.create(O),z=J(v*g)===J(U*I),G=J(U*g)===J(v*I);return z||G}is0(){return this.equals(Xv.ZERO)}}Object.freeze(Xv.BASE);Object.freeze(Xv.ZERO);Object.freeze(Xv.prototype);Object.freeze(Xv);var S7=Object.freeze({Point:Xv,hashToCurve($,v){let U=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,I=K8($,U,64,BJ);return S7.deriveToCurve(I)},hashToScalar($,v={DST:ZY}){let U=K8($,v.DST,64,BJ);return BY.create(Fv(U))},deriveToCurve($){x$($,64);let v=E8($.subarray(0,32)),U=PY(v),I=E8($.subarray(32,64)),g=PY(I);return new Xv(U.add(g))}});var CY=!1,k7=!1;async function LY($,v){if(k7)return await v();try{return await $()}catch(U){if(U instanceof ReferenceError||U instanceof DOMException&&U.name==="NotSupportedError")return await v();else throw U}}async function qz($,v){return await LY(async()=>{let U=L8($)?$:await E7($),I=await crypto.subtle.importKey("raw",B7(v),{name:"X25519"},CY,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:I},U,256))},()=>{if(L8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMult($,v)})}async function H0($){return await LY(async()=>{return qz($,wz.GuBytes)},()=>{if(L8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return wz.scalarMultBase($)})}var P7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function E7($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...P7,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},CY,["deriveBits"])}function L8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function B7($){return $}class f8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),L7(HU($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let U=await this.s.read();if(U.done)return this.buf=HU($),null;this.buf=U.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HU(this.transcript)}}}function L7($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HU($){let v=$.reduce((g,J)=>g+J.length,0),U=new Uint8Array(v),I=0;for(let g of $)U.set(g,I),I+=g.length;return U}function zI($,...v){return $.pipeThrough(new TransformStream({start(U){for(let I of v)U.enqueue(I)}}))}function Yz($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function n8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function fY($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function nY($,v){let U=$.getReader(),I=[],g=0;while(g<v){let{done:O,value:D}=await U.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");I.push(D),g+=D.length}U.releaseLock();let J=HU(I),z=J.subarray(0,v),G=zI($,J.subarray(v));return{data:z,rest:G}}class vg{args;body;constructor($,v){this.args=$,this.body=v}}async function f7($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let U=v.split(" ");if(U.length<2||U.shift()!=="->")return{next:v};for(let J of U)if(J.length===0)throw Error("invalid stanza");let I=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let z=vv.decode(J);if(z.length>48)throw Error("invalid stanza");if(I.push(z),z.length<48)break}let g=HU(I);return{s:new vg(U,g)}}async function _Y($){let v=new f8($),U=await v.readLine();if(U!=="age-encryption.org/v1")throw Error("invalid version "+(U??"line"));let I=[];for(;;){let{s:g,next:J}=await f7(v);if(g!==void 0){I.push(g);continue}if(!J.startsWith("--- "))throw Error("invalid header");let z=vv.decode(J.slice(4)),{rest:G,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:I,headerNoMAC:D,MAC:z,headerSize:O.length,rest:zI($,G)}}}function _8($){let v=[];v.push(`age-encryption.org/v1
 `);for(let U of $){v.push("-> "+U.args.join(" ")+`
 `);for(let I=0;I<U.body.length;I+=48){let g=I+48;if(g>U.body.length)g=U.body.length;v.push(vv.encode(U.body.subarray(I,g))+`
 `)}if(U.body.length%48===0)v.push(`

package/dist/index.js CHANGED Viewed

@@ -3,7 +3,7 @@ var tv=Object.create;var{getPrototypeOf:sv,defineProperty:l8,getOwnPropertyNames
 `).join(`
 `+G),$.push(g+"m+"+PN.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=KP()+U+" "+$[0]}function KP(){if(l7.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function AP(...$){return process.stderr.write(EN.formatWithOptions(l7.inspectOpts,...$)+`
 `)}function HP($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function TP(){return process.env.DEBUG}function SP($){$.inspectOpts={};let U=Object.keys(l7.inspectOpts);for(let J=0;J<U.length;J++)$.inspectOpts[U[J]]=l7.inspectOpts[U[J]]}PN.exports=h9()(l7);var{formatters:h7}=PN.exports;h7.o=function($){return this.inspectOpts.colors=this.useColors,EN.inspect($,this.inspectOpts).split(`
-`).map((U)=>U.trim()).join(" ")};h7.O=function($){return this.inspectOpts.colors=this.useColors,EN.inspect($,this.inspectOpts)}});var c7=e0((Ai,p9)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)p9.exports=k7();else p9.exports=p7()});var nM=e0((tn,lM)=>{var mN=Object.prototype.hasOwnProperty,hM=Object.prototype.toString,kM=Object.defineProperty,mM=Object.getOwnPropertyDescriptor,xM=function(U){if(typeof Array.isArray==="function")return Array.isArray(U);return hM.call(U)==="[object Array]"},yM=function(U){if(!U||hM.call(U)!=="[object Object]")return!1;var J=mN.call(U,"constructor"),I=U.constructor&&U.constructor.prototype&&mN.call(U.constructor.prototype,"isPrototypeOf");if(U.constructor&&!J&&!I)return!1;var g;for(g in U);return typeof g>"u"||mN.call(U,g)},fM=function(U,J){if(kM&&J.name==="__proto__")kM(U,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else U[J.name]=J.newValue},iM=function(U,J){if(J==="__proto__"){if(!mN.call(U,J))return;else if(mM)return mM(U,J).value}return U[J]};lM.exports=function $(){var U,J,I,g,G,q,D=arguments[0],N=1,Q=arguments.length,X=!1;if(typeof D==="boolean")X=D,D=arguments[1]||{},N=2;if(D==null||typeof D!=="object"&&typeof D!=="function")D={};for(;N<Q;++N)if(U=arguments[N],U!=null){for(J in U)if(I=iM(D,J),g=iM(U,J),D!==g){if(X&&g&&(yM(g)||(G=xM(g)))){if(G)G=!1,q=I&&xM(I)?I:[];else q=I&&yM(I)?I:{};fM(D,{name:J,newValue:$(X,q,g)})}else if(typeof g<"u")fM(D,{name:J,newValue:g})}}return D}});import{access as yT,chmod as M9,mkdir as yz,readFile as iz,writeFile as fz}from"fs/promises";import{dirname as fT,join as v9}from"path";import{fileURLToPath as iT}from"url";var Lq={name:"@rizom/ops",version:"0.2.0-alpha.237",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var uR=`ARG BUN_VERSION=1.3.10
+`).map((U)=>U.trim()).join(" ")};h7.O=function($){return this.inspectOpts.colors=this.useColors,EN.inspect($,this.inspectOpts)}});var c7=e0((Ai,p9)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)p9.exports=k7();else p9.exports=p7()});var nM=e0((tn,lM)=>{var mN=Object.prototype.hasOwnProperty,hM=Object.prototype.toString,kM=Object.defineProperty,mM=Object.getOwnPropertyDescriptor,xM=function(U){if(typeof Array.isArray==="function")return Array.isArray(U);return hM.call(U)==="[object Array]"},yM=function(U){if(!U||hM.call(U)!=="[object Object]")return!1;var J=mN.call(U,"constructor"),I=U.constructor&&U.constructor.prototype&&mN.call(U.constructor.prototype,"isPrototypeOf");if(U.constructor&&!J&&!I)return!1;var g;for(g in U);return typeof g>"u"||mN.call(U,g)},fM=function(U,J){if(kM&&J.name==="__proto__")kM(U,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else U[J.name]=J.newValue},iM=function(U,J){if(J==="__proto__"){if(!mN.call(U,J))return;else if(mM)return mM(U,J).value}return U[J]};lM.exports=function $(){var U,J,I,g,G,q,D=arguments[0],N=1,Q=arguments.length,X=!1;if(typeof D==="boolean")X=D,D=arguments[1]||{},N=2;if(D==null||typeof D!=="object"&&typeof D!=="function")D={};for(;N<Q;++N)if(U=arguments[N],U!=null){for(J in U)if(I=iM(D,J),g=iM(U,J),D!==g){if(X&&g&&(yM(g)||(G=xM(g)))){if(G)G=!1,q=I&&xM(I)?I:[];else q=I&&yM(I)?I:{};fM(D,{name:J,newValue:$(X,q,g)})}else if(typeof g<"u")fM(D,{name:J,newValue:g})}}return D}});import{access as yT,chmod as M9,mkdir as yz,readFile as iz,writeFile as fz}from"fs/promises";import{dirname as fT,join as v9}from"path";import{fileURLToPath as iT}from"url";var Lq={name:"@rizom/ops",version:"0.2.0-alpha.238",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var uR=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.237",
+  "version": "0.2.0-alpha.238",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",