@rizom/ops 0.2.0-alpha.241 → 0.2.0-alpha.242

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/dist/brains-ops.js +1 -1
  2. package/dist/index.js +88 -88
  3. package/package.json +1 -1
package/dist/brains-ops.js CHANGED
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env bun
2
2
  // @bun
3
3
  var CM=Object.defineProperty;var BM=($)=>$;function LM($,v){this[$]=BM.bind(null,v)}var pv=($,v)=>{for(var I in v)CM($,I,{get:v[I],enumerable:!0,configurable:!0,set:LM.bind(v,I)})};import{parseArgs as fM}from"util";function Ov($){return $}class PJ extends Error{constructor($){super($);this.name="CliUsageError"}}function _M($,v){let I={...v};for(let g of $)for(let[U,J]of Object.entries(g.flags??{})){let z=I[U];if(z===void 0){I[U]=J;continue}if(z.type!==J.type||z.short!==J.short||z.default!==J.default)throw Error(`Conflicting definitions for flag --${U}: commands must agree on type, short, and default`)}return I}function nM($){let v={};for(let[I,g]of Object.entries($))v[I]={type:g.type,...g.short!==void 0?{short:g.short}:{},...g.default!==void 0?{default:g.default}:{}};return v}function bM($){if(!($ instanceof Error)||!("code"in $))return!1;return $.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||$.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function aw($,v){let I=_M(v.commands,v.globalFlags??{}),g,U;try{({values:g,positionals:U}=fM({args:$,options:nM(I),allowPositionals:!0,strict:v.strict??!0}))}catch(z){if(bM(z))throw new PJ(z.message.split(". ")[0]??z.message);throw z}if("help"in I&&g.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in I&&g.version===!0)return{command:"version",args:[],flags:{version:!0}};let J={};for(let[z,G]of Object.entries(I)){let O=g[z];if(typeof O==="string"&&G.type==="string")J[z]=O;else if(typeof O==="boolean"&&G.type==="boolean")J[z]=O}return{command:U[0]??"help",args:U.slice(1),flags:J}}function ew($){let v=$.reduce((I,g)=>Math.max(I,g.label.length),0);return $.map((I)=>` ${I.label.padEnd(v)} ${I.description}`)}function mM($){return ew($.map((v)=>({label:v.usage?`${v.name} ${v.usage}`:v.name,description:v.description})))}function FM($,v){let I=v.type==="string"?` ${v.placeholder??"<value>"}`:"",g=v.short!==void 0?`, -${v.short}`:"";return`--${$}${I}${g}`}function sw($){return ew(Object.entries($).map(([v,I])=>({label:FM(v,I),description:I.description})))}function $Y($,v){return`Usage: ${$} ${v.name}${v.usage?` ${v.usage}`:""}`}function iM($){return JSON.stringify(Object.entries($).map(([v,I])=>[v,I.type,I.short??"",I.description,I.placeholder??"",I.default??""]).sort((v,I)=>String(v[0]).localeCompare(String(I[0]))))}function xM($){let v=[],I=new Map;for(let U of $){let J=U.flags??{};if(Object.keys(J).length===0)continue;let z=iM(J),G=I.get(z);if(G){G.names.push(U.name);continue}let O={names:[U.name],flags:J};I.set(z,O),v.push(O)}let g=[];for(let U of v)g.push("",`${U.names.join(" / ")} options:`),g.push(...sw(U.flags));return g}function vY($){let v=[$.intro,"",`Usage: ${$.cliName} ${$.usage??"<command> [args]"}`,"","Commands:",...mM($.commands)];if($.globalFlags&&Object.keys($.globalFlags).length>0)v.push("","Options:",...sw($.globalFlags));return v.push(...xM($.commands)),v.join(`
4
- `)}function UY($){let v=new Map;for(let I of $){if(v.has(I.name))throw Error(`Duplicate command name: ${I.name}`);v.set(I.name,I)}return v}function DI($,v){let I=$[v];return typeof I==="string"?I:void 0}function VO($,v){let I=$[v];return typeof I==="boolean"?I:void 0}var kJ={name:"@rizom/ops",version:"0.2.0-alpha.241",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as HR,mkdirSync as AR,readFileSync as GD,writeFileSync as OD}from"fs";import{dirname as TR,join as z9}from"path";function jO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function f$($,v=""){if(typeof $!=="number"){let I=v&&`"${v}" `;throw TypeError(`${I}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let I=v&&`"${v}" `;throw RangeError(`${I}expected integer >= 0, got ${$}`)}}function x$($,v,I=""){let g=jO($),U=$?.length,J=v!==void 0;if(!g||J&&U!==v){let z=I&&`"${I}" `,G=J?` of length ${v}`:"",O=g?`length=${U}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!g)throw TypeError(D);throw RangeError(D)}return $}function YU($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(f$($.outputLen),f$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function oI($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function EJ($,v){x$($,void 0,"digestInto() output");let I=v.outputLen;if($.length<I)throw RangeError('"digestInto() output" expected to be of length >='+I)}function CJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Dv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function yI($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function Fv($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var oM=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function yM($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function lM($){for(let v=0;v<$.length;v++)$[v]=yM($[v]);return $}var MO=oM?($)=>$:lM,gY=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),dM=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function BJ($){if(x$($),gY)return $.toHex();let v="";for(let I=0;I<$.length;I++)v+=dM[$[I]];return v}var wU={_0:48,_9:57,A:65,F:70,a:97,f:102};function IY($){if($>=wU._0&&$<=wU._9)return $-wU._0;if($>=wU.A&&$<=wU.F)return $-(wU.A-10);if($>=wU.a&&$<=wU.f)return $-(wU.a-10);return}function pg($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(gY)try{return Uint8Array.fromHex($)}catch(U){if(U instanceof SyntaxError)throw RangeError(U.message);throw U}let v=$.length,I=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let g=new Uint8Array(I);for(let U=0,J=0;U<I;U++,J+=2){let z=IY($.charCodeAt(J)),G=IY($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}g[U]=z*16+G}return g}function hM($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function rO($,v=""){if(typeof $==="string")return hM($);return x$($,void 0,v)}function RO(...$){let v=0;for(let g=0;g<$.length;g++){let U=$[g];x$(U),v+=U.length}let I=new Uint8Array(v);for(let g=0,U=0;g<$.length;g++){let J=$[g];I.set(J,U),U+=J.length}return I}function LJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function uO($,v={}){let I=(U,J)=>$(J).update(U).digest(),g=$(void 0);return I.outputLen=g.outputLen,I.blockLen=g.blockLen,I.canXOF=g.canXOF,I.create=(U)=>$(U),Object.assign(I,v),Object.freeze(I)}function qU($=32){f$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var KO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class HO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(YU($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let I=this.blockLen,g=new Uint8Array(I);g.set(v.length>I?$.create().update(v).digest():v);for(let U=0;U<g.length;U++)g[U]^=54;this.iHash.update(g),this.oHash=$.create();for(let U=0;U<g.length;U++)g[U]^=106;this.oHash.update(g),Dv(g)}update($){return oI(this),this.iHash.update($),this}digestInto($){oI(this),EJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:I,finished:g,destroyed:U,blockLen:J,outputLen:z}=this;return $=$,$.finished=g,$.destroyed=U,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=I._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tv=(()=>{let $=(v,I,g)=>new HO(v,I).update(g).digest();return $.create=(v,I)=>new HO(v,I),$})();function tg($,v,I){if(YU($),I===void 0)I=new Uint8Array($.outputLen);return tv($,I,v)}var AO=Uint8Array.of(0),JY=Uint8Array.of();function TO($,v,I,g=32){YU($),f$(g,"length"),x$(v,void 0,"prk");let U=$.outputLen;if(v.length<U)throw Error('"prk" must be at least HashLen octets');if(g>255*U)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(g/U);if(I===void 0)I=JY;else x$(I,void 0,"info");let z=new Uint8Array(J*U),G=tv.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)AO[0]=X+1,O.update(X===0?JY:D).update(I).update(AO).digestInto(D),z.set(D,U*X),G._cloneInto(O);return G.destroy(),O.destroy(),Dv(D,AO),z.slice(0,g)}var LU=($,v,I,g,U)=>TO($,tg($,v,I),g,U);function zY($,v,I){return $&v^~$&I}function GY($,v,I){return $&v^$&I^v&I}class fJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,I,g){this.blockLen=$,this.outputLen=v,this.padOffset=I,this.isLE=g,this.buffer=new Uint8Array($),this.view=yI(this.buffer)}update($){oI(this),x$($);let{view:v,buffer:I,blockLen:g}=this,U=$.length;for(let J=0;J<U;){let z=Math.min(g-this.pos,U-J);if(z===g){let G=yI($);for(;g<=U-J;J+=g)this.process(G,J);continue}if(I.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===g)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){oI(this),EJ($,this),this.finished=!0;let{buffer:v,view:I,blockLen:g,isLE:U}=this,{pos:J}=this;if(v[J++]=128,Dv(this.buffer.subarray(J)),this.padOffset>g-J)this.process(I,0),J=0;for(let X=J;X<g;X++)v[X]=0;I.setBigUint64(g-8,BigInt(this.length*8),U),this.process(I,0);let z=yI($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],U)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let I=$.slice(0,v);return this.destroy(),I}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:I,length:g,finished:U,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=U,$.length=g,$.pos=z,g%v)$.buffer.set(I);return $}clone(){return this._cloneInto()}}var WU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),ZU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),c$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),o$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var _J=BigInt(4294967295),OY=BigInt(32);function pM($,v=!1){if(v)return{h:Number($&_J),l:Number($>>OY&_J)};return{h:Number($>>OY&_J)|0,l:Number($&_J)|0}}function DY($,v=!1){let I=$.length,g=new Uint32Array(I),U=new Uint32Array(I);for(let J=0;J<I;J++){let{h:z,l:G}=pM($[J],v);[g[J],U[J]]=[z,G]}return[g,U]}var SO=($,v,I)=>$>>>I,PO=($,v,I)=>$<<32-I|v>>>I,QI=($,v,I)=>$>>>I|v<<32-I,XI=($,v,I)=>$<<32-I|v>>>I,ag=($,v,I)=>$<<64-I|v>>>I-32,eg=($,v,I)=>$>>>I-32|v<<64-I;function av($,v,I,g){let U=(v>>>0)+(g>>>0);return{h:$+I+(U/4294967296|0)|0,l:U|0}}var QY=($,v,I)=>($>>>0)+(v>>>0)+(I>>>0),XY=($,v,I,g)=>v+I+g+($/4294967296|0)|0,NY=($,v,I,g)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0),wY=($,v,I,g,U)=>v+I+g+U+($/4294967296|0)|0,YY=($,v,I,g,U)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0)+(U>>>0),qY=($,v,I,g,U,J)=>v+I+g+U+J+($/4294967296|0)|0;var aM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),fU=new Uint32Array(64);class kO extends fJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:I,D:g,E:U,F:J,G:z,H:G}=this;return[$,v,I,g,U,J,z,G]}set($,v,I,g,U,J,z,G){this.A=$|0,this.B=v|0,this.C=I|0,this.D=g|0,this.E=U|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)fU[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=fU[X-15],Y=fU[X-2],w=Fv(N,7)^Fv(N,18)^N>>>3,W=Fv(Y,17)^Fv(Y,19)^Y>>>10;fU[X]=W+fU[X-7]+w+fU[X-16]|0}let{A:I,B:g,C:U,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=Fv(z,6)^Fv(z,11)^Fv(z,25),Y=D+N+zY(z,G,O)+aM[X]+fU[X]|0,W=(Fv(I,2)^Fv(I,13)^Fv(I,22))+GY(I,g,U)|0;D=O,O=G,G=z,z=J+Y|0,J=U,U=g,g=I,I=Y+W|0}I=I+this.A|0,g=g+this.B|0,U=U+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(I,g,U,J,z,G,O,D)}roundClean(){Dv(fU)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Dv(this.buffer)}}class WY extends kO{A=WU[0]|0;B=WU[1]|0;C=WU[2]|0;D=WU[3]|0;E=WU[4]|0;F=WU[5]|0;G=WU[6]|0;H=WU[7]|0;constructor(){super(32)}}class eM extends kO{A=ZU[0]|0;B=ZU[1]|0;C=ZU[2]|0;D=ZU[3]|0;E=ZU[4]|0;F=ZU[5]|0;G=ZU[6]|0;H=ZU[7]|0;constructor(){super(28)}}var ZY=(()=>DY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),sM=(()=>ZY[0])(),$r=(()=>ZY[1])(),_U=new Uint32Array(80),nU=new Uint32Array(80);class sg extends fJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:I,Bl:g,Ch:U,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:Y,Gl:w,Hh:W,Hl:j}=this;return[$,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j]}set($,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j){this.Ah=$|0,this.Al=v|0,this.Bh=I|0,this.Bl=g|0,this.Ch=U|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=Y|0,this.Gl=w|0,this.Hh=W|0,this.Hl=j|0}process($,v){for(let u=0;u<16;u++,v+=4)_U[u]=$.getUint32(v),nU[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=_U[u-15]|0,L=nU[u-15]|0,i=QI(_,L,1)^QI(_,L,8)^SO(_,L,7),l=XI(_,L,1)^XI(_,L,8)^PO(_,L,7),h=_U[u-2]|0,n=nU[u-2]|0,b=QI(h,n,19)^ag(h,n,61)^SO(h,n,6),U$=XI(h,n,19)^eg(h,n,61)^PO(h,n,6),S=NY(l,U$,nU[u-7],nU[u-16]),K=wY(S,i,b,_U[u-7],_U[u-16]);_U[u]=K|0,nU[u]=S|0}let{Ah:I,Al:g,Bh:U,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:Y,Fl:w,Gh:W,Gl:j,Hh:Z,Hl:H}=this;for(let u=0;u<80;u++){let _=QI(X,N,14)^QI(X,N,18)^ag(X,N,41),L=XI(X,N,14)^XI(X,N,18)^eg(X,N,41),i=X&Y^~X&W,l=N&w^~N&j,h=YY(H,L,l,$r[u],nU[u]),n=qY(h,Z,_,i,sM[u],_U[u]),b=h|0,U$=QI(I,g,28)^ag(I,g,34)^ag(I,g,39),S=XI(I,g,28)^eg(I,g,34)^eg(I,g,39),K=I&U^I&z^U&z,P=g&J^g&G^J&G;Z=W|0,H=j|0,W=Y|0,j=w|0,Y=X|0,w=N|0,{h:X,l:N}=av(O|0,D|0,n|0,b|0),O=z|0,D=G|0,z=U|0,G=J|0,U=I|0,J=g|0;let V=QY(b,S,P);I=XY(V,n,U$,K),g=V|0}({h:I,l:g}=av(this.Ah|0,this.Al|0,I|0,g|0)),{h:U,l:J}=av(this.Bh|0,this.Bl|0,U|0,J|0),{h:z,l:G}=av(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=av(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=av(this.Eh|0,this.El|0,X|0,N|0),{h:Y,l:w}=av(this.Fh|0,this.Fl|0,Y|0,w|0),{h:W,l:j}=av(this.Gh|0,this.Gl|0,W|0,j|0),{h:Z,l:H}=av(this.Hh|0,this.Hl|0,Z|0,H|0),this.set(I,g,U,J,z,G,O,D,X,N,Y,w,W,j,Z,H)}roundClean(){Dv(_U,nU)}destroy(){this.destroyed=!0,Dv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class VY extends sg{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(64)}}class vr extends sg{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class Ur extends sg{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Ir extends sg{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var _$=uO(()=>new WY,KO(1));var nJ=uO(()=>new VY,KO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function xJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function BO($){if(!xJ($))throw TypeError("Uint8Array expected")}function uY($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((I)=>typeof I==="string");else return v.every((I)=>Number.isSafeInteger(I))}function KY($){if(typeof $!=="function")throw TypeError("function expected");return!0}function bU($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function v0($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function mJ($){if(!Array.isArray($))throw TypeError("array expected")}function FJ($,v){if(!uY(!0,v))throw TypeError(`${$}: array of strings expected`)}function LO($,v){if(!uY(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Kv(...$){let v=(J)=>J,I=(J,z)=>(G)=>J(z(G)),g=$.map((J)=>J.encode).reduceRight(I,v),U=$.map((J)=>J.decode).reduce(I,v);return{encode:g,decode:U}}function Hv($){let v=typeof $==="string"?$.split(""):$,I=v.length;FJ("alphabet",v);let g=new Map(v.map((U,J)=>[U,J]));return{encode:(U)=>{return mJ(U),U.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=I)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(U)=>{return mJ(U),U.map((J)=>{bU("alphabet.decode",J);let z=g.get(J);if(z===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return z})}}}function Av($=""){return bU("join",$),{encode:(v)=>{return FJ("join.decode",v),v.join($)},decode:(v)=>{return bU("join.decode",v),v.split($)}}}function cJ($,v="="){return v0($),bU("padding",v),{encode(I){FJ("padding.encode",I);while(I.length*$%8)I.push(v);return I},decode(I){FJ("padding.decode",I);let g=I.length;if(g*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;g>0&&I[g-1]===v;g--)if((g-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return I.slice(0,g)}}}function HY($){return KY($),{encode:(v)=>v,decode:(v)=>$(v)}}function jY($,v,I){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(I<2)throw RangeError(`convertRadix: invalid to=${I}, base cannot be less than 2`);if(mJ($),!$.length)return[];let g=0,U=[],J=Array.from($,(G)=>{if(v0(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),z=J.length;while(!0){let G=0,O=!0;for(let D=g;D<z;D++){let X=J[D],N=v*G,Y=N+X;if(!Number.isSafeInteger(Y)||N/v!==G||Y-X!==N)throw Error("convertRadix: carry overflow");let w=Y/I;G=Y%I;let W=Math.floor(w);if(J[D]=W,!Number.isSafeInteger(W)||W*I+G!==Y)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!W)g=D;else O=!1}if(U.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)U.push(0);return U.reverse()}var AY=($,v)=>v===0?$:AY(v,$%v),iJ=($,v)=>$+(v-AY($,v)),bJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function EO($,v,I,g){if(mJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(I<=0||I>32)throw RangeError(`convertRadix2: wrong to=${I}`);if(iJ(v,I)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${I} carryBits=${iJ(v,I)}`);let U=0,J=0,z=bJ[v],G=bJ[I]-1,O=[];for(let D of $){if(v0(D),D>=z)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(U=U<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=I;J-=I)O.push((U>>J-I&G)>>>0);let X=bJ[J];if(X===void 0)throw Error("invalid carry");U&=X-1}if(U=U<<I-J&G,!g&&J>=v)throw Error("Excess padding");if(!g&&U>0)throw Error(`Non-zero padding: ${U}`);if(g&&J>0)O.push(U>>>0);return O}function gr($){v0($);let v=256;return{encode:(I)=>{if(!xJ(I))throw TypeError("radix.encode input should be Uint8Array");return jY(Array.from(I),v,$)},decode:(I)=>{return LO("radix.decode",I),Uint8Array.from(jY(I,$,v))}}}function Cv($,v=!1){if(v0($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(iJ(8,$)>32||iJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(I)=>{if(!xJ(I))throw TypeError("radix2.encode input should be Uint8Array");return EO(Array.from(I),8,$,!v)},decode:(I)=>{return LO("radix2.decode",I),Uint8Array.from(EO(I,$,8,v))}}}function MY($){return KY($),function(...v){try{return $.apply(null,v)}catch(I){}}}var CA=Object.freeze(Kv(Cv(4),Hv("0123456789ABCDEF"),Av(""))),BA=Object.freeze(Kv(Cv(5),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),cJ(5),Av(""))),LA=Object.freeze(Kv(Cv(5),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Av(""))),fA=Object.freeze(Kv(Cv(5),Hv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),cJ(5),Av(""))),_A=Object.freeze(Kv(Cv(5),Hv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Av(""))),nA=Object.freeze(Kv(Cv(5),Hv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Av(""),HY(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),TY=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Jr=/[\t\n\f\r ]/,SY=($,v)=>{bU("base64",$);let I=v?"base64url":"base64";if($.length>0&&Jr.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:I,lastChunkHandling:"strict"})},fO=Object.freeze(TY?{encode($){return BO($),$.toBase64()},decode($){return SY($,!1)}}:Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),cJ(6),Av(""))),vv=Object.freeze(Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Av(""))),bA=Object.freeze(TY?{encode($){return BO($),$.toBase64({alphabet:"base64url"})},decode($){return SY($,!0)}}:Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),cJ(6),Av(""))),mA=Object.freeze(Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Av(""))),_O=($)=>Kv(gr(58),Hv($),Av("")),FA=Object.freeze(_O("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),iA=Object.freeze(_O("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),xA=Object.freeze(_O("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var CO=Kv(Hv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Av("")),rY=[996825010,642813549,513874426,1027748829,705979059];function $0($){let v=$>>25,I=($&33554431)<<5;for(let g=0;g<rY.length;g++)if((v>>g&1)===1)I^=rY[g];return I}function RY($,v,I=1){let g=$.length,U=1;for(let J=0;J<g;J++){let z=$.charCodeAt(J);if(z<33||z>126)throw Error(`Invalid prefix (${$})`);U=$0(U)^z>>5}U=$0(U);for(let J=0;J<g;J++)U=$0(U)^$.charCodeAt(J)&31;for(let J of v)U=$0(U)^J;for(let J=0;J<6;J++)U=$0(U);return U^=I,CO.encode(EO([U%bJ[30]],30,5,!1))}function PY($){let v=$==="bech32"?1:734539939,I=Cv(5),g=I.decode,U=I.encode,J=MY(g);function z(N,Y,w=90){if(bU("bech32.encode prefix",N),xJ(Y))Y=Array.from(Y);LO("bech32.encode",Y);let W=N.length;if(W===0)throw TypeError(`Invalid prefix length ${W}`);let j=W+7+Y.length;if(w!==!1&&j>w)throw TypeError(`Length ${j} exceeds limit ${w}`);let Z=N.toLowerCase(),H=RY(Z,Y,v);return`${Z}1${CO.encode(Y)}${H}`}function G(N,Y=90){bU("bech32.decode input",N);let w=N.length;if(w<8||Y!==!1&&w>Y)throw TypeError(`invalid string length: ${w} (${N}). Expected (8..${Y})`);let W=N.toLowerCase();if(N!==W&&N!==N.toUpperCase())throw Error("String must be lowercase or uppercase");let j=W.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let Z=W.slice(0,j),H=W.slice(j+1);if(H.length<6)throw Error("Data must be at least 6 characters long");let u=CO.decode(H).slice(0,-6),_=RY(Z,u,v);if(!H.endsWith(_))throw Error(`Invalid checksum in ${N}: expected "${_}"`);return{prefix:Z,words:u}}let O=MY(G);function D(N){let{prefix:Y,words:w}=G(N,!1);return{prefix:Y,words:w,bytes:g(w)}}function X(N,Y){return z(N,U(Y))}return{encode:z,decode:G,encodeFromBytes:X,decodeToBytes:D,decodeUnsafe:O,fromWords:g,fromWordsUnsafe:J,toWords:U}}var Tv=Object.freeze(PY("bech32")),cA=Object.freeze(PY("bech32m"));var zr=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Gr={encode($){return BO($),$.toHex()},decode($){return bU("hex",$),Uint8Array.fromHex($)}},oA=Object.freeze(zr?Gr:Kv(Cv(4),Hv("0123456789abcdef"),Av(""),HY(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Dr($,v,I,g){YU($);let U=LJ({dkLen:32,asyncTick:10},g),{c:J,dkLen:z,asyncTick:G}=U;if(f$(J,"c"),f$(z,"dkLen"),f$(G,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(z<1)throw Error('"dkLen" must be >= 1');if(z>4294967295*$.outputLen)throw Error("derived key too long");let O=rO(v,"password"),D=rO(I,"salt"),X=new Uint8Array(z),N=tv.create($,O),Y=N._cloneInto().update(D);return{c:J,dkLen:z,asyncTick:G,DK:X,PRF:N,PRFSalt:Y}}function Qr($,v,I,g,U){if($.destroy(),v.destroy(),g)g.destroy();return Dv(U),I}function nO($,v,I,g){let{c:U,dkLen:J,DK:z,PRF:G,PRFSalt:O}=Dr($,v,I,g),D,X=new Uint8Array(4),N=yI(X),Y=new Uint8Array(G.outputLen);for(let w=1,W=0;W<J;w++,W+=G.outputLen){let j=z.subarray(W,W+G.outputLen);N.setInt32(0,w,!1),(D=O._cloneInto(D)).update(X).digestInto(Y),j.set(Y.subarray(0,j.length));for(let Z=1;Z<U;Z++){G._cloneInto(D).update(Y).digestInto(Y);for(let H=0;H<j.length;H++)j[H]^=Y[H]}}return Qr(G,O,z,D,Y)}function kY($,v,I,g,U,J){let z=$[v++]^I[g++],G=$[v++]^I[g++],O=$[v++]^I[g++],D=$[v++]^I[g++],X=$[v++]^I[g++],N=$[v++]^I[g++],Y=$[v++]^I[g++],w=$[v++]^I[g++],W=$[v++]^I[g++],j=$[v++]^I[g++],Z=$[v++]^I[g++],H=$[v++]^I[g++],u=$[v++]^I[g++],_=$[v++]^I[g++],L=$[v++]^I[g++],i=$[v++]^I[g++],l=z,h=G,n=O,b=D,U$=X,S=N,K=Y,P=w,V=W,r=j,M=Z,T=H,R=u,E=_,B=L,x=i;for(let s=0;s<8;s+=2)U$^=R$(l+R|0,7),V^=R$(U$+l|0,9),R^=R$(V+U$|0,13),l^=R$(R+V|0,18),r^=R$(S+h|0,7),E^=R$(r+S|0,9),h^=R$(E+r|0,13),S^=R$(h+E|0,18),B^=R$(M+K|0,7),n^=R$(B+M|0,9),K^=R$(n+B|0,13),M^=R$(K+n|0,18),b^=R$(x+T|0,7),P^=R$(b+x|0,9),T^=R$(P+b|0,13),x^=R$(T+P|0,18),h^=R$(l+b|0,7),n^=R$(h+l|0,9),b^=R$(n+h|0,13),l^=R$(b+n|0,18),K^=R$(S+U$|0,7),P^=R$(K+S|0,9),U$^=R$(P+K|0,13),S^=R$(U$+P|0,18),T^=R$(M+r|0,7),V^=R$(T+M|0,9),r^=R$(V+T|0,13),M^=R$(r+V|0,18),R^=R$(x+B|0,7),E^=R$(R+x|0,9),B^=R$(E+R|0,13),x^=R$(B+E|0,18);U[J++]=z+l|0,U[J++]=G+h|0,U[J++]=O+n|0,U[J++]=D+b|0,U[J++]=X+U$|0,U[J++]=N+S|0,U[J++]=Y+K|0,U[J++]=w+P|0,U[J++]=W+V|0,U[J++]=j+r|0,U[J++]=Z+M|0,U[J++]=H+T|0,U[J++]=u+R|0,U[J++]=_+E|0,U[J++]=L+B|0,U[J++]=i+x|0}function bO($,v,I,g,U){let J=g+0,z=g+16*U;for(let G=0;G<16;G++)I[z+G]=$[v+(2*U-1)*16+G];for(let G=0;G<U;G++,J+=16,v+=16){if(kY(I,z,$,v,I,J),G>0)z+=16;kY(I,J,$,v+=16,I,z)}}function Xr($,v,I){let g=LJ({dkLen:32,asyncTick:10,maxmem:1073742848},I),{N:U,r:J,p:z,dkLen:G,asyncTick:O,maxmem:D,onProgress:X}=g;if(f$(U,"N"),f$(J,"r"),f$(z,"p"),f$(G,"dkLen"),f$(O,"asyncTick"),f$(D,"maxmem"),X!==void 0&&typeof X!=="function")throw Error("progressCb must be a function");let N=128*J,Y=N/4,w=Math.pow(2,32);if(U<=1||(U&U-1)!==0||U>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(z<1||z>(w-1)*32/N)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let W=N*(U+z+1);if(W>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+W+", maxmem="+D);let j=nO(_$,$,v,{c:1,dkLen:N*z}),Z=CJ(j),H=CJ(new Uint8Array(N*U)),u=CJ(new Uint8Array(N)),_=()=>{};if(X){let L=2*U*z,i=Math.max(Math.floor(L/1e4),1),l=0;_=()=>{if(l++,X&&(!(l%i)||l===L))X(l/L)}}return{N:U,r:J,p:z,dkLen:G,blockSize32:Y,V:H,B32:Z,B:j,tmp:u,blockMixCb:_,asyncTick:O}}function Nr($,v,I,g,U){let J=nO(_$,$,I,{c:1,dkLen:v});return Dv(I,g,U),J}function mO($,v,I){let{N:g,r:U,p:J,dkLen:z,blockSize32:G,V:O,B32:D,B:X,tmp:N,blockMixCb:Y}=Xr($,v,I);MO(D);for(let w=0;w<J;w++){let W=G*w;for(let j=0;j<G;j++)O[j]=D[W+j];for(let j=0,Z=0;j<g-1;j++)bO(O,Z,O,Z+=G,U),Y();bO(O,(g-1)*G,D,W,U),Y();for(let j=0;j<g;j++){let Z=(D[W+G-16]&g-1)>>>0;for(let H=0;H<G;H++)N[H]=D[W+H]^O[Z*G+H];bO(N,0,D,W,U),Y()}}return MO(D),Nr($,z,X,O,N)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function wr($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function oJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function lI($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,I=""){let g=wr($),U=$?.length,J=v!==void 0;if(!g||J&&U!==v){let z=I&&`"${I}" `,G=J?` of length ${v}`:"",O=g?`length=${U}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!g)throw TypeError(D);throw RangeError(D)}return $}function FO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function EY($,v,I=!1){b$($,void 0,"output");let g=v.outputLen;if($.length<g)throw RangeError("digestInto() expects output buffer of length at least "+g);if(I&&!dI($))throw Error("invalid output, must be aligned")}function ev($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function iv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Yr($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var NI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),qr=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var Wr=($)=>{for(let v=0;v<$.length;v++)$[v]=qr($[v]);return $},VU=NI?($)=>$:Wr;function CY($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function BY($,v){if($.length!==v.length)return!1;let I=0;for(let g=0;g<$.length;g++)I|=$[g]^v[g];return I===0}function LY($,v,I){let g=v,U=I||(()=>[]),J=(G,O)=>g(O,...U(G)).update(G).digest(),z=g(new Uint8Array($),...U(new Uint8Array(0)));return J.outputLen=z.outputLen,J.blockLen=z.blockLen,J.create=(G,...O)=>g(G,...O),J}var fY=($,v)=>{function I(g,...U){if(b$(g,void 0,"key"),$.nonceLength!==void 0){let X=U[0];b$(X,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&U[1]!==void 0)b$(U[1],void 0,"AAD");let z=v(g,...U),G=(X,N)=>{if(N!==void 0){if(X!==2)throw Error("cipher output not supported");b$(N,void 0,"output")}},O=!1;return{encrypt(X,N){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(X),G(z.encrypt.length,N),z.encrypt(X,N)},decrypt(X,N){if(b$(X),J&&X.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return G(z.decrypt.length,N),z.decrypt(X,N)}}}return Object.assign(I,$),I};function U0($,v,I=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(I&&!dI(v))throw Error("invalid output, must be aligned");return v}function _Y($,v,I){lI($),lI(v),oJ(I);let g=new Uint8Array(16),U=Yr(g);return U.setBigUint64(0,BigInt(v),I),U.setBigUint64(8,BigInt($),I),g}function dI($){return $.byteOffset%4===0}function hI($){return Uint8Array.from(b$($))}var bY=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),Zr=(()=>VU(ev(bY("expand 16-byte k"))))(),Vr=(()=>VU(ev(bY("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var I0=64,jr=16,iO=(()=>4294967295)(),nY=Uint32Array.of();function Mr($,v,I,g,U,J,z,G){let O=U.length,D=new Uint8Array(I0),X=ev(D),N=NI&&dI(U)&&dI(J),Y=N?ev(U):nY,w=N?ev(J):nY;if(!NI){for(let W=0;W<O;z++){if($(v,I,g,X,z,G),VU(X),z>=iO)throw Error("arx: counter overflow");let j=Math.min(I0,O-W);for(let Z=0,H;Z<j;Z++)H=W+Z,J[H]=U[H]^D[Z];W+=j}return}for(let W=0;W<O;z++){if($(v,I,g,X,z,G),z>=iO)throw Error("arx: counter overflow");let j=Math.min(I0,O-W);if(N&&j===I0){let Z=W/4;if(W%4!==0)throw Error("arx: invalid block position");for(let H=0,u;H<jr;H++)u=Z+H,w[u]=Y[u]^X[H];W+=I0;continue}for(let Z=0,H;Z<j;Z++)H=W+Z,J[H]=U[H]^D[Z];W+=j}}function mY($,v){let{allowShortKeys:I,extendNonceFn:g,counterLength:U,counterRight:J,rounds:z}=CY({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return lI(U),lI(z),oJ(J),oJ(I),(G,O,D,X,N=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let Y=D.length;if(X=U0(Y,X,!1),lI(N),N<0||N>=iO)throw Error("arx: counter overflow");let w=[],W=G.length,j,Z;if(W===32)w.push(j=hI(G)),Z=Vr;else if(W===16&&I)j=new Uint8Array(32),j.set(G),j.set(G,16),Z=Zr,w.push(j);else throw b$(G,32,"arx key"),Error("invalid key size");if(!NI||!dI(O))w.push(O=hI(O));let H=ev(j);if(g){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(NI)g(Z,H,ev(L),H);else{let i=VU(Uint32Array.from(Z));g(i,H,ev(L),H),iv(i),VU(H)}O=O.subarray(16)}else if(!NI)VU(H);let u=16-U;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,w.push(O)}let _=VU(ev(O));try{return Mr($,Z,H,_,D,X,N,z),X}finally{iv(...w)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class FY{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=hI(b$($,32,"key"));let v=y$($,0),I=y$($,2),g=y$($,4),U=y$($,6),J=y$($,8),z=y$($,10),G=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|I<<3)&8191,this.r[2]=(I>>>10|g<<6)&7939,this.r[3]=(g>>>7|U<<9)&8191,this.r[4]=(U>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|z<<2)&8191,this.r[7]=(z>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,I=!1){let g=I?0:2048,{h:U,r:J}=this,z=J[0],G=J[1],O=J[2],D=J[3],X=J[4],N=J[5],Y=J[6],w=J[7],W=J[8],j=J[9],Z=y$($,v+0),H=y$($,v+2),u=y$($,v+4),_=y$($,v+6),L=y$($,v+8),i=y$($,v+10),l=y$($,v+12),h=y$($,v+14),n=U[0]+(Z&8191),b=U[1]+((Z>>>13|H<<3)&8191),U$=U[2]+((H>>>10|u<<6)&8191),S=U[3]+((u>>>7|_<<9)&8191),K=U[4]+((_>>>4|L<<12)&8191),P=U[5]+(L>>>1&8191),V=U[6]+((L>>>14|i<<2)&8191),r=U[7]+((i>>>11|l<<5)&8191),M=U[8]+((l>>>8|h<<8)&8191),T=U[9]+(h>>>5|g),R=0,E=R+n*z+b*(5*j)+U$*(5*W)+S*(5*w)+K*(5*Y);R=E>>>13,E&=8191,E+=P*(5*N)+V*(5*X)+r*(5*D)+M*(5*O)+T*(5*G),R+=E>>>13,E&=8191;let B=R+n*G+b*z+U$*(5*j)+S*(5*W)+K*(5*w);R=B>>>13,B&=8191,B+=P*(5*Y)+V*(5*N)+r*(5*X)+M*(5*D)+T*(5*O),R+=B>>>13,B&=8191;let x=R+n*O+b*G+U$*z+S*(5*j)+K*(5*W);R=x>>>13,x&=8191,x+=P*(5*w)+V*(5*Y)+r*(5*N)+M*(5*X)+T*(5*D),R+=x>>>13,x&=8191;let s=R+n*D+b*O+U$*G+S*z+K*(5*j);R=s>>>13,s&=8191,s+=P*(5*W)+V*(5*w)+r*(5*Y)+M*(5*N)+T*(5*X),R+=s>>>13,s&=8191;let J$=R+n*X+b*D+U$*O+S*G+K*z;R=J$>>>13,J$&=8191,J$+=P*(5*j)+V*(5*W)+r*(5*w)+M*(5*Y)+T*(5*N),R+=J$>>>13,J$&=8191;let G$=R+n*N+b*X+U$*D+S*O+K*G;R=G$>>>13,G$&=8191,G$+=P*z+V*(5*j)+r*(5*W)+M*(5*w)+T*(5*Y),R+=G$>>>13,G$&=8191;let Q$=R+n*Y+b*N+U$*X+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=P*G+V*z+r*(5*j)+M*(5*W)+T*(5*w),R+=Q$>>>13,Q$&=8191;let w$=R+n*w+b*Y+U$*N+S*X+K*D;R=w$>>>13,w$&=8191,w$+=P*O+V*G+r*z+M*(5*j)+T*(5*W),R+=w$>>>13,w$&=8191;let X$=R+n*W+b*w+U$*Y+S*N+K*X;R=X$>>>13,X$&=8191,X$+=P*D+V*O+r*G+M*z+T*(5*j),R+=X$>>>13,X$&=8191;let N$=R+n*j+b*W+U$*w+S*Y+K*N;R=N$>>>13,N$&=8191,N$+=P*X+V*D+r*O+M*G+T*z,R+=N$>>>13,N$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,B+=R,U[0]=E,U[1]=B,U[2]=x,U[3]=s,U[4]=J$,U[5]=G$,U[6]=Q$,U[7]=w$,U[8]=X$,U[9]=N$}finalize(){let{h:$,pad:v}=this,I=new Uint16Array(10),g=$[1]>>>13;$[1]&=8191;for(let z=2;z<10;z++)$[z]+=g,g=$[z]>>>13,$[z]&=8191;$[0]+=g*5,g=$[0]>>>13,$[0]&=8191,$[1]+=g,g=$[1]>>>13,$[1]&=8191,$[2]+=g,I[0]=$[0]+5,g=I[0]>>>13,I[0]&=8191;for(let z=1;z<10;z++)I[z]=$[z]+g,g=I[z]>>>13,I[z]&=8191;I[9]-=8192;let U=(g^1)-1;for(let z=0;z<10;z++)I[z]&=U;U=~U;for(let z=0;z<10;z++)$[z]=$[z]&U|I[z];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let z=1;z<8;z++)J=($[z]+v[z]|0)+(J>>>16)|0,$[z]=J&65535;iv(I)}update($){FO(this),b$($),$=hI($);let{buffer:v,blockLen:I}=this,g=$.length;for(let U=0;U<g;){let J=Math.min(I-this.pos,g-U);if(J===I){for(;I<=g-U;U+=I)this.process($,U);continue}if(v.set($.subarray(U,U+J),this.pos),this.pos+=J,U+=J,this.pos===I)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,iv(this.h,this.r,this.buffer,this.pad)}digestInto($){FO(this),EY($,this),this.finished=!0;let{buffer:v,h:I}=this,{pos:g}=this;if(g){v[g++]=1;for(;g<16;g++)v[g]=0;this.process(v,0,!0)}this.finalize();let U=0;for(let J=0;J<8;J++)$[U++]=I[J]>>>0,$[U++]=I[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let I=$.slice(0,v);return this.destroy(),I}}var iY=LY(32,($)=>new FY($));function rr($,v,I,g,U,J=20){let z=$[0],G=$[1],O=$[2],D=$[3],X=v[0],N=v[1],Y=v[2],w=v[3],W=v[4],j=v[5],Z=v[6],H=v[7],u=U,_=I[0],L=I[1],i=I[2],l=z,h=G,n=O,b=D,U$=X,S=N,K=Y,P=w,V=W,r=j,M=Z,T=H,R=u,E=_,B=L,x=i;for(let J$=0;J$<J;J$+=2)l=l+U$|0,R=u$(R^l,16),V=V+R|0,U$=u$(U$^V,12),l=l+U$|0,R=u$(R^l,8),V=V+R|0,U$=u$(U$^V,7),h=h+S|0,E=u$(E^h,16),r=r+E|0,S=u$(S^r,12),h=h+S|0,E=u$(E^h,8),r=r+E|0,S=u$(S^r,7),n=n+K|0,B=u$(B^n,16),M=M+B|0,K=u$(K^M,12),n=n+K|0,B=u$(B^n,8),M=M+B|0,K=u$(K^M,7),b=b+P|0,x=u$(x^b,16),T=T+x|0,P=u$(P^T,12),b=b+P|0,x=u$(x^b,8),T=T+x|0,P=u$(P^T,7),l=l+S|0,x=u$(x^l,16),M=M+x|0,S=u$(S^M,12),l=l+S|0,x=u$(x^l,8),M=M+x|0,S=u$(S^M,7),h=h+K|0,R=u$(R^h,16),T=T+R|0,K=u$(K^T,12),h=h+K|0,R=u$(R^h,8),T=T+R|0,K=u$(K^T,7),n=n+P|0,E=u$(E^n,16),V=V+E|0,P=u$(P^V,12),n=n+P|0,E=u$(E^n,8),V=V+E|0,P=u$(P^V,7),b=b+U$|0,B=u$(B^b,16),r=r+B|0,U$=u$(U$^r,12),b=b+U$|0,B=u$(B^b,8),r=r+B|0,U$=u$(U$^r,7);let s=0;g[s++]=z+l|0,g[s++]=G+h|0,g[s++]=O+n|0,g[s++]=D+b|0,g[s++]=X+U$|0,g[s++]=N+S|0,g[s++]=Y+K|0,g[s++]=w+P|0,g[s++]=W+V|0,g[s++]=j+r|0,g[s++]=Z+M|0,g[s++]=H+T|0,g[s++]=u+R|0,g[s++]=_+E|0,g[s++]=L+B|0,g[s++]=i+x|0}var Rr=mY(rr,{counterRight:!1,counterLength:4,allowShortKeys:!1});var ur=new Uint8Array(16),xY=($,v)=>{$.update(v);let I=v.length%16;if(I)$.update(ur.subarray(I))},Kr=new Uint8Array(32);function cY($,v,I,g,U){if(U!==void 0)b$(U,void 0,"AAD");let J=$(v,I,Kr),z=_Y(g.length,U?U.length:0,!0),G=iY.create(J);if(U)xY(G,U);xY(G,g),G.update(z);let O=G.digest();return iv(J,z),O}var Hr=($)=>(v,I,g)=>{return{encrypt(J,z){let G=J.length;z=U0(G+16,z,!1),z.set(J);let O=z.subarray(0,-16);$(v,I,O,O,1);let D=cY($,v,I,O,g);return z.set(D,G),iv(D),z},decrypt(J,z){z=U0(J.length-16,z,!1);let G=J.subarray(0,-16),O=J.subarray(-16),D=cY($,v,I,G,g);if(!BY(O,D))throw iv(D),Error("invalid tag");return z.set(J.subarray(0,-16)),$(v,I,z,z,1),iv(D),z}}},Bv=fY({blockSize:64,nonceLength:12,tagLength:16},Hr(Rr));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function pI($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let I=v&&`"${v}" `;throw Error(`${I}expected integer >= 0, got ${$}`)}}function q$($,v,I=""){let g=pI($),U=$?.length,J=v!==void 0;if(!g||J&&U!==v){let z=I&&`"${I}" `,G=J?` of length ${v}`:"",O=g?`length=${U}`:`type=${typeof $}`;throw Error(z+"expected Uint8Array"+G+", got "+O)}return $}function Lv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function MU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function yJ($,v){q$($,void 0,"digestInto() output");let I=v.outputLen;if($.length<I)throw Error('"digestInto() output" expected to be of length >='+I)}function lJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function jv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function dJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function xv($,v){return $<<32-v|$>>>v}var Ar=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Tr($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function Sr($){for(let v=0;v<$.length;v++)$[v]=Tr($[v]);return $}var xO=Ar?($)=>$:Sr,yY=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Pr=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function wI($){if(q$($),yY)return $.toHex();let v="";for(let I=0;I<$.length;I++)v+=Pr[$[I]];return v}var jU={_0:48,_9:57,A:65,F:70,a:97,f:102};function oY($){if($>=jU._0&&$<=jU._9)return $-jU._0;if($>=jU.A&&$<=jU.F)return $-(jU.A-10);if($>=jU.a&&$<=jU.f)return $-(jU.a-10);return}function YI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(yY)return Uint8Array.fromHex($);let v=$.length,I=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let g=new Uint8Array(I);for(let U=0,J=0;U<I;U++,J+=2){let z=oY($.charCodeAt(J)),G=oY($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}g[U]=z*16+G}return g}function n$(...$){let v=0;for(let g=0;g<$.length;g++){let U=$[g];q$(U),v+=U.length}let I=new Uint8Array(v);for(let g=0,U=0;g<$.length;g++){let J=$[g];I.set(J,U),U+=J.length}return I}function tI($,v={}){let I=(U,J)=>$(J).update(U).digest(),g=$(void 0);return I.outputLen=g.outputLen,I.blockLen=g.blockLen,I.create=(U)=>$(U),Object.assign(I,v),Object.freeze(I)}function mU($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var FU=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var oO=BigInt(0),cO=BigInt(1);function g0($,v=""){if(typeof $!=="boolean"){let I=v&&`"${v}" `;throw Error(I+"expected boolean, got type="+typeof $)}return $}function lY($){if(typeof $==="bigint"){if(!hJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function J0($){let v=lY($).toString(16);return v.length&1?"0"+v:v}function dY($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?oO:BigInt("0x"+$)}function iU($){return dY(wI($))}function xU($){return dY(wI(pJ(q$($)).reverse()))}function aI($,v){F$(v),$=lY($);let I=YI($.toString(16).padStart(v*2,"0"));if(I.length!==v)throw Error("number too large");return I}function z0($,v){return aI($,v).reverse()}function pJ($){return Uint8Array.from($)}function cU($){return Uint8Array.from($,(v,I)=>{let g=v.charCodeAt(0);if(v.length!==1||g>127)throw Error(`string contains non-ASCII character "${$[I]}" with code ${g} at position ${I}`);return g})}var hJ=($)=>typeof $==="bigint"&&oO<=$;function kr($,v,I){return hJ($)&&hJ(v)&&hJ(I)&&v<=$&&$<I}function G0($,v,I,g){if(!kr(v,I,g))throw Error("expected valid "+$+": "+I+" <= n < "+g+", got "+v)}function yO($){let v;for(v=0;$>oO;$>>=cO,v+=1);return v}var O0=($)=>(cO<<BigInt($))-cO;function hY($,v,I){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof I!=="function")throw Error("hmacFn must be a function");let g=(Z)=>new Uint8Array(Z),U=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=g($),D=g($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},Y=(...Z)=>I(D,n$(O,...Z)),w=(Z=U)=>{if(D=Y(J,Z),O=Y(),Z.length===0)return;D=Y(z,Z),O=Y()},W=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let Z=0,H=[];while(Z<v){O=Y();let u=O.slice();H.push(u),Z+=O.length}return n$(...H)};return(Z,H)=>{N(),w(Z);let u=void 0;while(!(u=H(W())))w();return N(),u}}function qI($,v={},I={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function g(J,z,G){let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw Error(`param "${J}" is invalid: expected ${z}, got ${D}`)}let U=(J,z)=>Object.entries(J).forEach(([G,O])=>g(G,O,z));U(v,!1),U(I,!0)}function lO($){let v=new WeakMap;return(I,...g)=>{let U=v.get(I);if(U!==void 0)return U;let J=$(I,...g);return v.set(I,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Xv=BigInt(0),Uv=BigInt(1),WI=BigInt(2),aY=BigInt(3),eY=BigInt(4),sY=BigInt(5),Er=BigInt(7),$q=BigInt(8),Cr=BigInt(9),vq=BigInt(16);function Qv($,v){let I=$%v;return I>=Xv?I:v+I}function fv($,v,I){let g=$;while(v-- >Xv)g*=g,g%=I;return g}function pY($,v){if($===Xv)throw Error("invert: expected non-zero number");if(v<=Xv)throw Error("invert: expected positive modulus, got "+v);let I=Qv($,v),g=v,U=Xv,J=Uv,z=Uv,G=Xv;while(I!==Xv){let D=g/I,X=g%I,N=U-z*D,Y=J-G*D;g=I,I=X,U=z,J=G,z=N,G=Y}if(g!==Uv)throw Error("invert: does not exist");return Qv(U,v)}function dO($,v,I){if(!$.eql($.sqr(v),I))throw Error("Cannot find square root")}function Uq($,v){let I=($.ORDER+Uv)/eY,g=$.pow(v,I);return dO($,g,v),g}function Br($,v){let I=($.ORDER-sY)/$q,g=$.mul(v,WI),U=$.pow(g,I),J=$.mul(v,U),z=$.mul($.mul(J,WI),U),G=$.mul(J,$.sub(z,$.ONE));return dO($,G,v),G}function Lr($){let v=tJ($),I=Iq($),g=I(v,v.neg(v.ONE)),U=I(v,g),J=I(v,v.neg(g)),z=($+Er)/vq;return(G,O)=>{let D=G.pow(O,z),X=G.mul(D,g),N=G.mul(D,U),Y=G.mul(D,J),w=G.eql(G.sqr(X),O),W=G.eql(G.sqr(N),O);D=G.cmov(D,X,w),X=G.cmov(Y,N,W);let j=G.eql(G.sqr(X),O),Z=G.cmov(D,X,j);return dO(G,Z,O),Z}}function Iq($){if($<aY)throw Error("sqrt is not defined for small field");let v=$-Uv,I=0;while(v%WI===Xv)v/=WI,I++;let g=WI,U=tJ($);while(tY(U,g)===1)if(g++>1000)throw Error("Cannot find square root: probably non-prime P");if(I===1)return Uq;let J=U.pow(g,v),z=(v+Uv)/WI;return function(O,D){if(O.is0(D))return D;if(tY(O,D)!==1)throw Error("Cannot find square root");let X=I,N=O.mul(O.ONE,J),Y=O.pow(D,v),w=O.pow(D,z);while(!O.eql(Y,O.ONE)){if(O.is0(Y))return O.ZERO;let W=1,j=O.sqr(Y);while(!O.eql(j,O.ONE))if(W++,j=O.sqr(j),W===X)throw Error("Cannot find square root");let Z=Uv<<BigInt(X-W-1),H=O.pow(N,Z);X=W,N=O.sqr(H),Y=O.mul(Y,N),w=O.mul(w,H)}return w}}function fr($){if($%eY===aY)return Uq;if($%$q===sY)return Br;if($%vq===Cr)return Lr($);return Iq($)}var _r=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function hO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},I=_r.reduce((g,U)=>{return g[U]="function",g},v);return qI($,I),$}function nr($,v,I){if(I<Xv)throw Error("invalid exponent, negatives unsupported");if(I===Xv)return $.ONE;if(I===Uv)return v;let g=$.ONE,U=v;while(I>Xv){if(I&Uv)g=$.mul(g,U);U=$.sqr(U),I>>=Uv}return g}function D0($,v,I=!1){let g=Array(v.length).fill(I?$.ZERO:void 0),U=v.reduce((z,G,O)=>{if($.is0(G))return z;return g[O]=z,$.mul(z,G)},$.ONE),J=$.inv(U);return v.reduceRight((z,G,O)=>{if($.is0(G))return z;return g[O]=$.mul(z,g[O]),$.mul(z,G)},J),g}function tY($,v){let I=($.ORDER-Uv)/WI,g=$.pow(v,I),U=$.eql(g,$.ONE),J=$.eql(g,$.ZERO),z=$.eql(g,$.neg($.ONE));if(!U&&!J&&!z)throw Error("invalid Legendre symbol result");return U?1:J?0:-1}function br($,v){if(v!==void 0)F$(v);let I=v!==void 0?v:$.toString(2).length,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}class gq{ORDER;BITS;BYTES;isLE;ZERO=Xv;ONE=Uv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Xv)throw Error("invalid field: expected ORDER > 0, got "+$);let I=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")I=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:g,nByteLength:U}=br($,I);if(U>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=g,this.BYTES=U,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Qv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Xv<=$&&$<this.ORDER}is0($){return $===Xv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&Uv)===Uv}neg($){return Qv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Qv($*$,this.ORDER)}add($,v){return Qv($+v,this.ORDER)}sub($,v){return Qv($-v,this.ORDER)}mul($,v){return Qv($*v,this.ORDER)}pow($,v){return nr(this,$,v)}div($,v){return Qv($*pY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return pY($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=fr(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?z0($,this.BYTES):aI($,this.BYTES)}fromBytes($,v=!1){q$($);let{_lengths:I,BYTES:g,isLE:U,ORDER:J,_mod:z}=this;if(I){if(!I.includes($.length)||$.length>g)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let O=new Uint8Array(g);O.set($,U?0:O.length-$.length),$=O}if($.length!==g)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let G=U?xU($):iU($);if(z)G=Qv(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return D0(this,$)}cmov($,v,I){return I?v:$}}function tJ($,v={}){return new gq($,v)}function Jq($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function pO($){let v=Jq($);return v+Math.ceil(v/2)}function zq($,v,I=!1){q$($);let g=$.length,U=Jq(v),J=pO(v);if(g<16||g<J||g>1024)throw Error("expected "+J+"-1024 bytes of input, got "+g);let z=I?xU($):iU($),G=Qv(z,v-Uv)+Uv;return I?z0(G,U):aI(G,U)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var eI=BigInt(0),ZI=BigInt(1);function Q0($,v){let I=v.negate();return $?I:v}function sO($,v){let I=D0($.Fp,v.map((g)=>g.Z));return v.map((g,U)=>$.fromAffine(g.toAffine(I[U])))}function Qq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function tO($,v){Qq($,v);let I=Math.ceil(v/$)+1,g=2**($-1),U=2**$,J=O0($),z=BigInt($);return{windows:I,windowSize:g,mask:J,maxNumber:U,shiftBy:z}}function Gq($,v,I){let{windowSize:g,mask:U,maxNumber:J,shiftBy:z}=I,G=Number($&U),O=$>>z;if(G>g)G-=J,O+=ZI;let D=v*g,X=D+Math.abs(G)-1,N=G===0,Y=G<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:Y,isNegF:w,offsetF:D}}var aO=new WeakMap,Xq=new WeakMap;function eO($){return Xq.get($)||1}function Oq($){if($!==eI)throw Error("invalid wNAF")}class $8{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,I=this.ZERO){let g=$;while(v>eI){if(v&ZI)I=I.add(g);g=g.double(),v>>=ZI}return I}precomputeWindow($,v){let{windows:I,windowSize:g}=tO(v,this.bits),U=[],J=$,z=J;for(let G=0;G<I;G++){z=J,U.push(z);for(let O=1;O<g;O++)z=z.add(J),U.push(z);J=z.double()}return U}wNAF($,v,I){if(!this.Fn.isValid(I))throw Error("invalid scalar");let g=this.ZERO,U=this.BASE,J=tO($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:Y}=Gq(I,z,J);if(I=G,D)U=U.add(Q0(N,v[Y]));else g=g.add(Q0(X,v[O]))}return Oq(I),{p:g,f:U}}wNAFUnsafe($,v,I,g=this.ZERO){let U=tO($,this.bits);for(let J=0;J<U.windows;J++){if(I===eI)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=Gq(I,J,U);if(I=z,O)continue;else{let X=v[G];g=g.add(D?X.negate():X)}}return Oq(I),g}getPrecomputes($,v,I){let g=aO.get(v);if(!g){if(g=this.precomputeWindow(v,$),$!==1){if(typeof I==="function")g=I(g);aO.set(v,g)}}return g}cached($,v,I){let g=eO($);return this.wNAF(g,this.getPrecomputes(g,$,I),v)}unsafe($,v,I,g){let U=eO($);if(U===1)return this._unsafeLadder($,v,g);return this.wNAFUnsafe(U,this.getPrecomputes(U,$,I),v,g)}createCache($,v){Qq(v,this.bits),Xq.set($,v),aO.delete($)}hasCache($){return eO($)!==1}}function Nq($,v,I,g){let U=v,J=$.ZERO,z=$.ZERO;while(I>eI||g>eI){if(I&ZI)J=J.add(U);if(g&ZI)z=z.add(U);U=U.double(),I>>=ZI,g>>=ZI}return{p1:J,p2:z}}function Dq($,v,I){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return hO(v),v}else return tJ($,{isLE:I})}function wq($,v,I={},g){if(g===void 0)g=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>eI))throw Error(`CURVE.${O} must be positive bigint`)}let U=Dq(v.p,I.Fp,g),J=Dq(v.n,I.Fn,g),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!U.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:U,Fn:J}}function aJ($,v){return function(g){let U=$(g);return{secretKey:U,publicKey:v(U)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var X0=BigInt(0),sI=BigInt(1),eJ=BigInt(2);function mr($){return qI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function Yq($){let v=mr($),{P:I,type:g,adjustScalarBytes:U,powPminus2:J,randomBytes:z}=v,G=g==="x25519";if(!G&&g!=="x448")throw Error("invalid type");let O=z||mU,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),Y=G?BigInt(121665):BigInt(39081),w=G?eJ**BigInt(254):eJ**BigInt(447),W=G?BigInt(8)*eJ**BigInt(251)-sI:BigInt(4)*eJ**BigInt(445)-sI,j=w+W+sI,Z=(V)=>Qv(V,I),H=u(N);function u(V){return z0(Z(V),X)}function _(V){let r=pJ(q$(V,X,"uCoordinate"));if(G)r[31]&=127;return Z(xU(r))}function L(V){return xU(U(pJ(q$(V,X,"scalar"))))}function i(V,r){let M=U$(_(r),L(V));if(M===X0)throw Error("invalid private or public key received");return u(M)}function l(V){return i(V,H)}let h=l,n=i;function b(V,r,M){let T=Z(V*(r-M));return r=Z(r-T),M=Z(M+T),{x_2:r,x_3:M}}function U$(V,r){G0("u",V,X0,I),G0("scalar",r,w,j);let M=r,T=V,R=sI,E=X0,B=V,x=sI,s=X0;for(let G$=BigInt(D-1);G$>=X0;G$--){let Q$=M>>G$&sI;s^=Q$,{x_2:R,x_3:B}=b(s,R,B),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let w$=R+E,X$=Z(w$*w$),N$=R-E,Z$=Z(N$*N$),P$=X$-Z$,E$=B+x,a$=B-x,e$=Z(a$*w$),Vv=Z(E$*N$),dv=e$+Vv,hv=e$-Vv;B=Z(dv*dv),x=Z(T*Z(hv*hv)),R=Z(X$*Z$),E=Z(P$*(X$+Z(Y*P$)))}({x_2:R,x_3:B}=b(s,R,B)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return Z(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V=O(X))=>{return q$(V,S.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:aJ(K,h),getSharedSecret:n,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:P,GuBytes:H.slice(),lengths:S})}class v8{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Lv($),q$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let I=this.blockLen,g=new Uint8Array(I);g.set(v.length>I?$.create().update(v).digest():v);for(let U=0;U<g.length;U++)g[U]^=54;this.iHash.update(g),this.oHash=$.create();for(let U=0;U<g.length;U++)g[U]^=106;this.oHash.update(g),jv(g)}update($){return MU(this),this.iHash.update($),this}digestInto($){MU(this),q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:I,finished:g,destroyed:U,blockLen:J,outputLen:z}=this;return $=$,$.finished=g,$.destroyed=U,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=I._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var $g=($,v,I)=>new v8($,v).update(I).digest();$g.create=($,v)=>new v8($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qq=($,v)=>($+($>=0?v:-v)/Zq)/v;function Fr($,v,I){let[[g,U],[J,z]]=v,G=qq(z*$,I),O=qq(-U*$,I),D=$-G*g-O*J,X=-G*U-O*z,N=D<rU,Y=X<rU;if(N)D=-D;if(Y)X=-X;let w=O0(Math.ceil(yO(I)/2))+vg;if(D<rU||D>=w||X<rU||X>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:N,k1:D,k2neg:Y,k2:X}}function I8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function U8($,v){let I={};for(let g of Object.keys(v))I[g]=$[g]===void 0?v[g]:$[g];if(g0(I.lowS,"lowS"),g0(I.prehash,"prehash"),I.format!==void 0)I8(I.format);return I}class Wq extends Error{constructor($=""){super($)}}var oU={Err:Wq,_tlv:{encode:($,v)=>{let{Err:I}=oU;if($<0||$>256)throw new I("tlv.encode: wrong tag");if(v.length&1)throw new I("tlv.encode: unpadded data");let g=v.length/2,U=J0(g);if(U.length/2&128)throw new I("tlv.encode: long form length too big");let J=g>127?J0(U.length/2|128):"";return J0($)+J+U+v},decode($,v){let{Err:I}=oU,g=0;if($<0||$>256)throw new I("tlv.encode: wrong tag");if(v.length<2||v[g++]!==$)throw new I("tlv.decode: wrong tlv");let U=v[g++],J=!!(U&128),z=0;if(!J)z=U;else{let O=U&127;if(!O)throw new I("tlv.decode(long): indefinite length not supported");if(O>4)throw new I("tlv.decode(long): byte length is too big");let D=v.subarray(g,g+O);if(D.length!==O)throw new I("tlv.decode: length bytes not complete");if(D[0]===0)throw new I("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(g+=O,z<128)throw new I("tlv.decode(long): not minimal encoding")}let G=v.subarray(g,g+z);if(G.length!==z)throw new I("tlv.decode: wrong value length");return{v:G,l:v.subarray(g+z)}}},_int:{encode($){let{Err:v}=oU;if($<rU)throw new v("integer: negative integers are not allowed");let I=J0($);if(Number.parseInt(I[0],16)&8)I="00"+I;if(I.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return I},decode($){let{Err:v}=oU;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return iU($)}},toSig($){let{Err:v,_int:I,_tlv:g}=oU,U=q$($,void 0,"signature"),{v:J,l:z}=g.decode(48,U);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=g.decode(2,J),{v:D,l:X}=g.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:I.decode(G),s:I.decode(D)}},hexFromSig($){let{_tlv:v,_int:I}=oU,g=v.encode(2,I.encode($.r)),U=v.encode(2,I.encode($.s)),J=g+U;return v.encode(48,J)}},rU=BigInt(0),vg=BigInt(1),Zq=BigInt(2),sJ=BigInt(3),ir=BigInt(4);function g8($,v={}){let I=wq("weierstrass",$,v),{Fp:g,Fn:U}=I,J=I.CURVE,{h:z,n:G}=J;qI(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!g.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=jq(g,U);function X(){if(!g.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(K,P,V){let{x:r,y:M}=P.toAffine(),T=g.toBytes(r);if(g0(V,"isCompressed"),V){X();let R=!g.isOdd(M);return n$(Vq(R),T)}else return n$(Uint8Array.of(4),T,g.toBytes(M))}function Y(K){q$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=D,r=K.length,M=K[0],T=K.subarray(1);if(r===P&&(M===2||M===3)){let R=g.fromBytes(T);if(!g.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=j(R),B;try{B=g.sqrt(E)}catch(J$){let G$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}X();let x=g.isOdd(B);if((M&1)===1!==x)B=g.neg(B);return{x:R,y:B}}else if(r===V&&M===4){let R=g.BYTES,E=g.fromBytes(T.subarray(0,R)),B=g.fromBytes(T.subarray(R,R*2));if(!Z(E,B))throw Error("bad point: is not on curve");return{x:E,y:B}}else throw Error(`bad point: got length ${r}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||N,W=v.fromBytes||Y;function j(K){let P=g.sqr(K),V=g.mul(P,K);return g.add(g.add(V,g.mul(K,J.a)),J.b)}function Z(K,P){let V=g.sqr(P),r=j(K);return g.eql(V,r)}if(!Z(J.Gx,J.Gy))throw Error("bad curve params: generator point");let H=g.mul(g.pow(J.a,sJ),ir),u=g.mul(g.sqr(J.b),BigInt(27));if(g.is0(g.add(H,u)))throw Error("bad curve params: a or b");function _(K,P,V=!1){if(!g.isValid(P)||V&&g.is0(P))throw Error(`bad point coordinate ${K}`);return P}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return Fr(K,O.basises,U.ORDER)}let l=lO((K,P)=>{let{X:V,Y:r,Z:M}=K;if(g.eql(M,g.ONE))return{x:V,y:r};let T=K.is0();if(P==null)P=T?g.ONE:g.inv(M);let R=g.mul(V,P),E=g.mul(r,P),B=g.mul(M,P);if(T)return{x:g.ZERO,y:g.ZERO};if(!g.eql(B,g.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),h=lO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!g.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!g.isValid(P)||!g.isValid(V))throw Error("bad point: x or y not field elements");if(!Z(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function n(K,P,V,r,M){return V=new b(g.mul(V.X,K),V.Y,V.Z),P=Q0(r,P),V=Q0(M,V),P.add(V)}class b{static BASE=new b(J.Gx,J.Gy,g.ONE);static ZERO=new b(g.ZERO,g.ONE,g.ZERO);static Fp=g;static Fn=U;X;Y;Z;constructor(K,P,V){this.X=_("x",K),this.Y=_("y",P,!0),this.Z=_("z",V),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!g.isValid(P)||!g.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(g.is0(P)&&g.is0(V))return b.ZERO;return new b(P,V,g.ONE)}static fromBytes(K){let P=b.fromAffine(W(q$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return b.fromBytes(YI(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(S.createCache(this,K),!P)this.multiply(sJ);return this}assertValidity(){h(this)}hasEvenY(){let{y:K}=this.toAffine();if(!g.isOdd)throw Error("Field doesn't support isOdd");return!g.isOdd(K)}equals(K){L(K);let{X:P,Y:V,Z:r}=this,{X:M,Y:T,Z:R}=K,E=g.eql(g.mul(P,R),g.mul(M,r)),B=g.eql(g.mul(V,R),g.mul(T,r));return E&&B}negate(){return new b(this.X,g.neg(this.Y),this.Z)}double(){let{a:K,b:P}=J,V=g.mul(P,sJ),{X:r,Y:M,Z:T}=this,R=g.ZERO,E=g.ZERO,B=g.ZERO,x=g.mul(r,r),s=g.mul(M,M),J$=g.mul(T,T),G$=g.mul(r,M);return G$=g.add(G$,G$),B=g.mul(r,T),B=g.add(B,B),R=g.mul(K,B),E=g.mul(V,J$),E=g.add(R,E),R=g.sub(s,E),E=g.add(s,E),E=g.mul(R,E),R=g.mul(G$,R),B=g.mul(V,B),J$=g.mul(K,J$),G$=g.sub(x,J$),G$=g.mul(K,G$),G$=g.add(G$,B),B=g.add(x,x),x=g.add(B,x),x=g.add(x,J$),x=g.mul(x,G$),E=g.add(E,x),J$=g.mul(M,T),J$=g.add(J$,J$),x=g.mul(J$,G$),R=g.sub(R,x),B=g.mul(J$,s),B=g.add(B,B),B=g.add(B,B),new b(R,E,B)}add(K){L(K);let{X:P,Y:V,Z:r}=this,{X:M,Y:T,Z:R}=K,E=g.ZERO,B=g.ZERO,x=g.ZERO,s=J.a,J$=g.mul(J.b,sJ),G$=g.mul(P,M),Q$=g.mul(V,T),w$=g.mul(r,R),X$=g.add(P,V),N$=g.add(M,T);X$=g.mul(X$,N$),N$=g.add(G$,Q$),X$=g.sub(X$,N$),N$=g.add(P,r);let Z$=g.add(M,R);return N$=g.mul(N$,Z$),Z$=g.add(G$,w$),N$=g.sub(N$,Z$),Z$=g.add(V,r),E=g.add(T,R),Z$=g.mul(Z$,E),E=g.add(Q$,w$),Z$=g.sub(Z$,E),x=g.mul(s,N$),E=g.mul(J$,w$),x=g.add(E,x),E=g.sub(Q$,x),x=g.add(Q$,x),B=g.mul(E,x),Q$=g.add(G$,G$),Q$=g.add(Q$,G$),w$=g.mul(s,w$),N$=g.mul(J$,N$),Q$=g.add(Q$,w$),w$=g.sub(G$,w$),w$=g.mul(s,w$),N$=g.add(N$,w$),G$=g.mul(Q$,N$),B=g.add(B,G$),G$=g.mul(Z$,N$),E=g.mul(X$,E),E=g.sub(E,G$),G$=g.mul(X$,Q$),x=g.mul(Z$,x),x=g.add(x,G$),new b(E,B,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:P}=v;if(!U.isValidNot0(K))throw Error("invalid scalar: out of range");let V,r,M=(T)=>S.cached(this,T,(R)=>sO(b,R));if(P){let{k1neg:T,k1:R,k2neg:E,k2:B}=i(K),{p:x,f:s}=M(R),{p:J$,f:G$}=M(B);r=s.add(G$),V=n(P.beta,x,J$,T,E)}else{let{p:T,f:R}=M(K);V=T,r=R}return sO(b,[V,r])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!U.isValid(K))throw Error("invalid scalar: out of range");if(K===rU||V.is0())return b.ZERO;if(K===vg)return V;if(S.hasCache(this))return this.multiply(K);if(P){let{k1neg:r,k1:M,k2neg:T,k2:R}=i(K),{p1:E,p2:B}=Nq(b,V,M,R);return n(P.beta,E,B,r,T)}else return S.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(z===vg)return!0;if(K)return K(b,this);return S.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(z===vg)return this;if(K)return K(b,this);return this.multiplyUnsafe(z)}isSmallOrder(){return this.multiplyUnsafe(z).is0()}toBytes(K=!0){return g0(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return wI(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let U$=U.BITS,S=new $8(b,v.endo?Math.ceil(U$/2):U$);return b.BASE.precompute(8),b}function Vq($){return Uint8Array.of($?2:3)}function jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function xr($,v={}){let{Fn:I}=$,g=v.randomBytes||mU,U=Object.assign(jq($.Fp,I),{seed:pO(I.ORDER)});function J(w){try{let W=I.fromBytes(w);return I.isValidNot0(W)}catch(W){return!1}}function z(w,W){let{publicKey:j,publicKeyUncompressed:Z}=U;try{let H=w.length;if(W===!0&&H!==j)return!1;if(W===!1&&H!==Z)return!1;return!!$.fromBytes(w)}catch(H){return!1}}function G(w=g(U.seed)){return zq(q$(w,U.seed,"seed"),I.ORDER)}function O(w,W=!0){return $.BASE.multiply(I.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:j,publicKeyUncompressed:Z}=U;if(!pI(w))return;if("_lengths"in I&&I._lengths||W===j)return;let H=q$(w,void 0,"key").length;return H===j||H===Z}function X(w,W,j=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let Z=I.fromBytes(w);return $.fromBytes(W).multiply(Z).toBytes(j)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},Y=aJ(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:Y,Point:$,utils:N,lengths:U})}function J8($,v,I={}){Lv(v),qI(I,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),I=Object.assign({},I);let g=I.randomBytes||mU,U=I.hmac||((V,r)=>$g(v,V,r)),{Fp:J,Fn:z}=$,{ORDER:G,BITS:O}=z,{keygen:D,getPublicKey:X,getSharedSecret:N,utils:Y,lengths:w}=xr($,I),W={prehash:!0,lowS:typeof I.lowS==="boolean"?I.lowS:!0,format:"compact",extraEntropy:!1},j=G*Zq<J.ORDER;function Z(V){let r=G>>vg;return V>r}function H(V,r){if(!z.isValidNot0(r))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return r}function u(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(V,r){I8(r);let M=w.signature,T=r==="compact"?M:r==="recovered"?M+1:void 0;return q$(V,T)}class L{r;s;recovery;constructor(V,r,M){if(this.r=H("r",V),this.s=H("s",r),M!=null){if(u(),![0,1,2,3].includes(M))throw Error("invalid recovery id");this.recovery=M}Object.freeze(this)}static fromBytes(V,r=W.format){_(V,r);let M;if(r==="der"){let{r:B,s:x}=oU.toSig(q$(V));return new L(B,x)}if(r==="recovered")M=V[0],r="compact",V=V.subarray(1);let T=w.signature/2,R=V.subarray(0,T),E=V.subarray(T,T*2);return new L(z.fromBytes(R),z.fromBytes(E),M)}static fromHex(V,r){return this.fromBytes(YI(V),r)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new L(this.r,this.s,V)}recoverPublicKey(V){let{r,s:M}=this,T=this.assertRecovery(),R=T===2||T===3?r+G:r;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),B=$.fromBytes(n$(Vq((T&1)===0),E)),x=z.inv(R),s=l(q$(V,void 0,"msgHash")),J$=z.create(-s*x),G$=z.create(M*x),Q$=$.BASE.multiplyUnsafe(J$).add(B.multiplyUnsafe(G$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return Z(this.s)}toBytes(V=W.format){if(I8(V),V==="der")return YI(oU.hexFromSig(this));let{r,s:M}=this,T=z.toBytes(r),R=z.toBytes(M);if(V==="recovered")return u(),n$(Uint8Array.of(this.assertRecovery()),T,R);return n$(T,R)}toHex(V){return wI(this.toBytes(V))}}let i=I.bits2int||function(r){if(r.length>8192)throw Error("input is too large");let M=iU(r),T=r.length*8-O;return T>0?M>>BigInt(T):M},l=I.bits2int_modN||function(r){return z.create(i(r))},h=O0(O);function n(V){return G0("num < 2^"+O,V,rU,h),z.toBytes(V)}function b(V,r){return q$(V,void 0,"message"),r?q$(v(V),void 0,"prehashed message"):V}function U$(V,r,M){let{lowS:T,prehash:R,extraEntropy:E}=U8(M,W);V=b(V,R);let B=l(V),x=z.fromBytes(r);if(!z.isValidNot0(x))throw Error("invalid private key");let s=[n(x),n(B)];if(E!=null&&E!==!1){let w$=E===!0?g(w.secretKey):E;s.push(q$(w$,void 0,"extraEntropy"))}let J$=n$(...s),G$=B;function Q$(w$){let X$=i(w$);if(!z.isValidNot0(X$))return;let N$=z.inv(X$),Z$=$.BASE.multiply(X$).toAffine(),P$=z.create(Z$.x);if(P$===rU)return;let E$=z.create(N$*z.create(G$+P$*x));if(E$===rU)return;let a$=(Z$.x===P$?0:2)|Number(Z$.y&vg),e$=E$;if(T&&Z(E$))e$=z.neg(E$),a$^=1;return new L(P$,e$,j?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(V,r,M={}){let{seed:T,k2sig:R}=U$(V,r,M);return hY(v.outputLen,z.BYTES,U)(T,R).toBytes(M.format)}function K(V,r,M,T={}){let{lowS:R,prehash:E,format:B}=U8(T,W);if(M=q$(M,void 0,"publicKey"),r=b(r,E),!pI(V)){let x=V instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(V,B);try{let x=L.fromBytes(V,B),s=$.fromBytes(M);if(R&&x.hasHighS())return!1;let{r:J$,s:G$}=x,Q$=l(r),w$=z.inv(G$),X$=z.create(Q$*w$),N$=z.create(J$*w$),Z$=$.BASE.multiplyUnsafe(X$).add(s.multiplyUnsafe(N$));if(Z$.is0())return!1;return z.create(Z$.x)===J$}catch(x){return!1}}function P(V,r,M={}){let{prehash:T}=U8(M,W);return r=b(r,T),L.fromBytes(V,"recovered").recoverPublicKey(r).toBytes()}return Object.freeze({keygen:D,getPublicKey:X,getSharedSecret:N,utils:Y,lengths:w,Point:$,sign:S,verify:K,recoverPublicKey:P,Signature:L,hash:v})}function Mq($,v,I){return $&v^~$&I}function rq($,v,I){return $&v^$&I^v&I}class $z{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,I,g){this.blockLen=$,this.outputLen=v,this.padOffset=I,this.isLE=g,this.buffer=new Uint8Array($),this.view=dJ(this.buffer)}update($){MU(this),q$($);let{view:v,buffer:I,blockLen:g}=this,U=$.length;for(let J=0;J<U;){let z=Math.min(g-this.pos,U-J);if(z===g){let G=dJ($);for(;g<=U-J;J+=g)this.process(G,J);continue}if(I.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===g)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){MU(this),yJ($,this),this.finished=!0;let{buffer:v,view:I,blockLen:g,isLE:U}=this,{pos:J}=this;if(v[J++]=128,jv(this.buffer.subarray(J)),this.padOffset>g-J)this.process(I,0),J=0;for(let X=J;X<g;X++)v[X]=0;I.setBigUint64(g-8,BigInt(this.length*8),U),this.process(I,0);let z=dJ($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],U)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let I=$.slice(0,v);return this.destroy(),I}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:I,length:g,finished:U,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=U,$.length=g,$.pos=z,g%v)$.buffer.set(I);return $}clone(){return this._cloneInto()}}var RU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),uU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var vz=BigInt(4294967295),Rq=BigInt(32);function cr($,v=!1){if(v)return{h:Number($&vz),l:Number($>>Rq&vz)};return{h:Number($>>Rq&vz)|0,l:Number($&vz)|0}}function Uz($,v=!1){let I=$.length,g=new Uint32Array(I),U=new Uint32Array(I);for(let J=0;J<I;J++){let{h:z,l:G}=cr($[J],v);[g[J],U[J]]=[z,G]}return[g,U]}var z8=($,v,I)=>$>>>I,G8=($,v,I)=>$<<32-I|v>>>I,VI=($,v,I)=>$>>>I|v<<32-I,jI=($,v,I)=>$<<32-I|v>>>I,N0=($,v,I)=>$<<64-I|v>>>I-32,w0=($,v,I)=>$>>>I-32|v<<64-I;var uq=($,v,I)=>$<<I|v>>>32-I,Kq=($,v,I)=>v<<I|$>>>32-I,Hq=($,v,I)=>v<<I-32|$>>>64-I,Aq=($,v,I)=>$<<I-32|v>>>64-I;function sv($,v,I,g){let U=(v>>>0)+(g>>>0);return{h:$+I+(U/4294967296|0)|0,l:U|0}}var Tq=($,v,I)=>($>>>0)+(v>>>0)+(I>>>0),Sq=($,v,I,g)=>v+I+g+($/4294967296|0)|0,Pq=($,v,I,g)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0),kq=($,v,I,g,U)=>v+I+g+U+($/4294967296|0)|0,Eq=($,v,I,g,U)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0)+(U>>>0),Cq=($,v,I,g,U,J)=>v+I+g+U+J+($/4294967296|0)|0;var yr=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),yU=new Uint32Array(64);class O8 extends $z{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:I,D:g,E:U,F:J,G:z,H:G}=this;return[$,v,I,g,U,J,z,G]}set($,v,I,g,U,J,z,G){this.A=$|0,this.B=v|0,this.C=I|0,this.D=g|0,this.E=U|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)yU[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=yU[X-15],Y=yU[X-2],w=xv(N,7)^xv(N,18)^N>>>3,W=xv(Y,17)^xv(Y,19)^Y>>>10;yU[X]=W+yU[X-7]+w+yU[X-16]|0}let{A:I,B:g,C:U,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=xv(z,6)^xv(z,11)^xv(z,25),Y=D+N+Mq(z,G,O)+yr[X]+yU[X]|0,W=(xv(I,2)^xv(I,13)^xv(I,22))+rq(I,g,U)|0;D=O,O=G,G=z,z=J+Y|0,J=U,U=g,g=I,I=Y+W|0}I=I+this.A|0,g=g+this.B|0,U=U+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(I,g,U,J,z,G,O,D)}roundClean(){jv(yU)}destroy(){this.set(0,0,0,0,0,0,0,0),jv(this.buffer)}}class Bq extends O8{A=RU[0]|0;B=RU[1]|0;C=RU[2]|0;D=RU[3]|0;E=RU[4]|0;F=RU[5]|0;G=RU[6]|0;H=RU[7]|0;constructor(){super(32)}}class lr extends O8{A=uU[0]|0;B=uU[1]|0;C=uU[2]|0;D=uU[3]|0;E=uU[4]|0;F=uU[5]|0;G=uU[6]|0;H=uU[7]|0;constructor(){super(28)}}var Lq=(()=>Uz(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),dr=(()=>Lq[0])(),hr=(()=>Lq[1])(),lU=new Uint32Array(80),dU=new Uint32Array(80);class Y0 extends $z{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:I,Bl:g,Ch:U,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:Y,Gl:w,Hh:W,Hl:j}=this;return[$,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j]}set($,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j){this.Ah=$|0,this.Al=v|0,this.Bh=I|0,this.Bl=g|0,this.Ch=U|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=Y|0,this.Gl=w|0,this.Hh=W|0,this.Hl=j|0}process($,v){for(let u=0;u<16;u++,v+=4)lU[u]=$.getUint32(v),dU[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=lU[u-15]|0,L=dU[u-15]|0,i=VI(_,L,1)^VI(_,L,8)^z8(_,L,7),l=jI(_,L,1)^jI(_,L,8)^G8(_,L,7),h=lU[u-2]|0,n=dU[u-2]|0,b=VI(h,n,19)^N0(h,n,61)^z8(h,n,6),U$=jI(h,n,19)^w0(h,n,61)^G8(h,n,6),S=Pq(l,U$,dU[u-7],dU[u-16]),K=kq(S,i,b,lU[u-7],lU[u-16]);lU[u]=K|0,dU[u]=S|0}let{Ah:I,Al:g,Bh:U,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:Y,Fl:w,Gh:W,Gl:j,Hh:Z,Hl:H}=this;for(let u=0;u<80;u++){let _=VI(X,N,14)^VI(X,N,18)^N0(X,N,41),L=jI(X,N,14)^jI(X,N,18)^w0(X,N,41),i=X&Y^~X&W,l=N&w^~N&j,h=Eq(H,L,l,hr[u],dU[u]),n=Cq(h,Z,_,i,dr[u],lU[u]),b=h|0,U$=VI(I,g,28)^N0(I,g,34)^N0(I,g,39),S=jI(I,g,28)^w0(I,g,34)^w0(I,g,39),K=I&U^I&z^U&z,P=g&J^g&G^J&G;Z=W|0,H=j|0,W=Y|0,j=w|0,Y=X|0,w=N|0,{h:X,l:N}=sv(O|0,D|0,n|0,b|0),O=z|0,D=G|0,z=U|0,G=J|0,U=I|0,J=g|0;let V=Tq(b,S,P);I=Sq(V,n,U$,K),g=V|0}({h:I,l:g}=sv(this.Ah|0,this.Al|0,I|0,g|0)),{h:U,l:J}=sv(this.Bh|0,this.Bl|0,U|0,J|0),{h:z,l:G}=sv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=sv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=sv(this.Eh|0,this.El|0,X|0,N|0),{h:Y,l:w}=sv(this.Fh|0,this.Fl|0,Y|0,w|0),{h:W,l:j}=sv(this.Gh|0,this.Gl|0,W|0,j|0),{h:Z,l:H}=sv(this.Hh|0,this.Hl|0,Z|0,H|0),this.set(I,g,U,J,z,G,O,D,X,N,Y,w,W,j,Z,H)}roundClean(){jv(lU,dU)}destroy(){jv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class pr extends Y0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class fq extends Y0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Iv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),gv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class tr extends Y0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(28)}}class ar extends Y0{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(32)}}var Iz=tI(()=>new Bq,FU(1));var _q=tI(()=>new fq,FU(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var er=BigInt(1),nq=BigInt(2),sr=BigInt(3),$7=BigInt(5),yT=BigInt(8),bq=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function v7($){let v=BigInt(10),I=BigInt(20),g=BigInt(40),U=BigInt(80),J=bq,G=$*$%J*$%J,O=fv(G,nq,J)*G%J,D=fv(O,er,J)*$%J,X=fv(D,$7,J)*D%J,N=fv(X,v,J)*X%J,Y=fv(N,I,J)*N%J,w=fv(Y,g,J)*Y%J,W=fv(w,U,J)*w%J,j=fv(W,U,J)*w%J,Z=fv(j,v,J)*X%J;return{pow_p_5_8:fv(Z,nq,J)*$%J,b2:G}}function U7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var mq=(()=>{let $=bq;return Yq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:I,b2:g}=v7(v);return Qv(fv(I,sr,$)*g,$)},adjustScalarBytes:U7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),g7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var J7=g8(I7),D8=J8(J7,Iz);var z7=g8(g7),Fq=J8(z7,_q);function xq($,v,I){if(Lv($),I===void 0)I=new Uint8Array($.outputLen);return $g($,I,v)}var Q8=Uint8Array.of(0),iq=Uint8Array.of();function cq($,v,I,g=32){Lv($),F$(g,"length");let U=$.outputLen;if(g>255*U)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(g/U);if(I===void 0)I=iq;else q$(I,void 0,"info");let z=new Uint8Array(J*U),G=$g.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)Q8[0]=X+1,O.update(X===0?iq:D).update(I).update(Q8).digestInto(D),z.set(D,U*X),G._cloneInto(O);return G.destroy(),O.destroy(),jv(D,Q8),z.slice(0,g)}var G7=BigInt(0),q0=BigInt(1),O7=BigInt(2),D7=BigInt(7),Q7=BigInt(256),X7=BigInt(113),lq=[],dq=[],hq=[];for(let $=0,v=q0,I=1,g=0;$<24;$++){[I,g]=[g,(2*I+3*g)%5],lq.push(2*(5*g+I)),dq.push(($+1)*($+2)/2%64);let U=G7;for(let J=0;J<7;J++)if(v=(v<<q0^(v>>D7)*X7)%Q7,v&O7)U^=q0<<(q0<<BigInt(J))-q0;hq.push(U)}var pq=Uz(hq,!0),N7=pq[0],w7=pq[1],oq=($,v,I)=>I>32?Hq($,v,I):uq($,v,I),yq=($,v,I)=>I>32?Aq($,v,I):Kq($,v,I);function Y7($,v=24){let I=new Uint32Array(10);for(let g=24-v;g<24;g++){for(let z=0;z<10;z++)I[z]=$[z]^$[z+10]^$[z+20]^$[z+30]^$[z+40];for(let z=0;z<10;z+=2){let G=(z+8)%10,O=(z+2)%10,D=I[O],X=I[O+1],N=oq(D,X,1)^I[G],Y=yq(D,X,1)^I[G+1];for(let w=0;w<50;w+=10)$[z+w]^=N,$[z+w+1]^=Y}let U=$[2],J=$[3];for(let z=0;z<24;z++){let G=dq[z],O=oq(U,J,G),D=yq(U,J,G),X=lq[z];U=$[X],J=$[X+1],$[X]=O,$[X+1]=D}for(let z=0;z<50;z+=10){for(let G=0;G<10;G++)I[G]=$[z+G];for(let G=0;G<10;G++)$[z+G]^=~I[(G+2)%10]&I[(G+4)%10]}$[0]^=N7[g],$[1]^=w7[g]}jv(I)}class gz{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,I,g=!1,U=24){if(this.blockLen=$,this.suffix=v,this.outputLen=I,this.enableXOF=g,this.rounds=U,F$(I,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=lJ(this.state)}clone(){return this._cloneInto()}keccak(){xO(this.state32),Y7(this.state32,this.rounds),xO(this.state32),this.posOut=0,this.pos=0}update($){MU(this),q$($);let{blockLen:v,state:I}=this,g=$.length;for(let U=0;U<g;){let J=Math.min(v-this.pos,g-U);for(let z=0;z<J;z++)I[this.pos++]^=$[U++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:I,blockLen:g}=this;if($[I]^=v,(v&128)!==0&&I===g-1)this.keccak();$[g-1]^=128,this.keccak()}writeInto($){MU(this,!1),q$($),this.finish();let v=this.state,{blockLen:I}=this;for(let g=0,U=$.length;g<U;){if(this.posOut>=I)this.keccak();let J=Math.min(I-this.posOut,U-g);$.set(v.subarray(this.posOut,this.posOut+J),g),this.posOut+=J,g+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(yJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,jv(this.state)}_cloneInto($){let{blockLen:v,suffix:I,outputLen:g,rounds:U,enableXOF:J}=this;return $||=new gz(v,I,g,J,U),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=U,$.suffix=I,$.outputLen=g,$.enableXOF=J,$.destroyed=this.destroyed,$}}var tq=($,v,I,g={})=>tI(()=>new gz(v,$,I),g);var MI=tq(6,136,32,FU(8));var aq=tq(6,72,64,FU(10));var eq=($,v,I,g={})=>tI((U={})=>new gz(v,$,U.dkLen===void 0?I:U.dkLen,!0),g),sq=eq(31,168,16,FU(11)),$U=eq(31,136,32,FU(12));function X8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function vW($){return X8($),($&$-1)===0&&$!==0}function N8($,v){X8($);let I=0;for(let g=0;g<v;g++,$>>>=1)I=I<<1|$&1;return I}function UW($){return X8($),31-Math.clz32($)}function $W($){let v=$.length;if(v<2||!vW(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let I=UW(v);for(let g=0;g<v;g++){let U=N8(g,I);if(g<U){let J=$[g];$[g]=$[U],$[U]=J}}return $}var w8=($,v)=>{let{N:I,roots:g,dit:U,invertButterflies:J=!1,skipStages:z=0,brp:G=!0}=v,O=UW(I);if(!vW(I))throw Error("FFT: Polynomial size should be power of two");let D=U!==J;return(X)=>{if(X.length!==I)throw Error("FFT: wrong Polynomial length");if(U&&G)$W(X);for(let N=0,Y=1;N<O-z;N++){let w=U?N+1+z:O-N,W=1<<w,j=W>>1,Z=I>>w;for(let H=0;H<I;H+=W)for(let u=0,_=Y++;u<j;u++){let L=J?U?I-_:_:u*Z,i=H+u,l=H+u+j,h=g[L],n=X[l],b=X[i];if(D){let U$=$.mul(n,h);X[i]=$.add(b,U$),X[l]=$.sub(b,U$)}else if(J)X[i]=$.add(n,b),X[l]=$.mul($.sub(n,b),h);else X[i]=$.add(b,n),X[l]=$.mul($.sub(b,n),h)}}if(!U&&G)$W(X);return X}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var vU=mU;function Jz($,v){if($.length!==v.length)return!1;let I=0;for(let g=0;g<$.length;g++)I|=$[g]^v[g];return I===0}function IW($){return Uint8Array.from($)}function rI($,...v){let I=(U)=>typeof U==="number"?U:U.bytesLen,g=v.reduce((U,J)=>U+I(J),0);return{bytesLen:g,encode:(U)=>{let J=new Uint8Array(g);for(let z=0,G=0;z<v.length;z++){let O=v[z],D=I(O),X=typeof O==="number"?U[z]:O.encode(U[z]);if(q$(X,D,$),J.set(X,G),typeof O!=="number")X.fill(0);G+=D}return J},decode:(U)=>{q$(U,g,$);let J=[];for(let z of v){let G=I(z),O=U.subarray(0,G);J.push(typeof z==="number"?O:z.decode(O)),U=U.subarray(G)}return J}}}function zz($,v){let I=v*$.bytesLen;return{bytesLen:I,encode:(g)=>{if(g.length!==v)throw Error(`vecCoder.encode: wrong length=${g.length}. Expected: ${v}`);let U=new Uint8Array(I);for(let J=0,z=0;J<g.length;J++){let G=$.encode(g[J]);U.set(G,z),G.fill(0),z+=G.length}return U},decode:(g)=>{q$(g,I);let U=[];for(let J=0;J<g.length;J+=$.bytesLen)U.push($.decode(g.subarray(J,J+$.bytesLen)));return U}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let I of v)I.fill(0);else v.fill(0)}function Y8($){return(1<<$)-1}var zS=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var gW=($)=>{let{newPoly:v,N:I,Q:g,F:U,ROOT_OF_UNITY:J,brvBits:z,isKyber:G}=$,O=(u,_=g)=>{let L=u%_|0;return(L>=0?L|0:_+L|0)|0},D=(u,_=g)=>{let L=O(u,_)|0;return(L>_>>1?L-_|0:L)|0};function X(){let u=v(I);for(let _=0;_<I;_++){let L=N8(_,z),i=BigInt(J)**BigInt(L)%BigInt(g);u[_]=Number(i)|0}return u}let N=X(),Y={add:(u,_)=>O((u|0)+(_|0))|0,sub:(u,_)=>O((u|0)-(_|0))|0,mul:(u,_)=>O((u|0)*(_|0))|0,inv:(u)=>{throw Error("not implemented")}},w={N:I,roots:N,invertButterflies:!0,skipStages:G?1:0,brp:!1},W=w8(Y,{dit:!1,...w}),j=w8(Y,{dit:!0,...w});return{mod:O,smod:D,nttZetas:N,NTT:{encode:(u)=>{return W(u)},decode:(u)=>{j(u);for(let _=0;_<u.length;_++)u[_]=O(U*u[_]);return u}},bitsCoder:(u,_)=>{let L=Y8(u),i=u*(I/8);return{bytesLen:i,encode:(l)=>{let h=new Uint8Array(i);for(let n=0,b=0,U$=0,S=0;n<l.length;n++){b|=(_.encode(l[n])&L)<<U$,U$+=u;for(;U$>=8;U$-=8,b>>=8)h[S++]=b&Y8(U$)}return h},decode:(l)=>{let h=v(I);for(let n=0,b=0,U$=0,S=0;n<l.length;n++){b|=l[n]<<U$,U$+=8;for(;U$>=u;U$-=u,b>>=u)h[S++]=_.decode(b&L)}return h}}}}},q7=($)=>(v,I)=>{if(!I)I=$.blockLen;let g=new Uint8Array(v.length+2);g.set(v);let U=v.length,J=new Uint8Array(I),z=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(D,X)=>{return g[U+0]=D,g[U+1]=X,z.destroy(),z=$.create({}).update(g),G++,()=>{return O++,z.xofInto(J)}},clean:()=>{z.destroy(),m$(J,g)}}},JW=q7(sq);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,KU=3329,W7=3303,Z7=17,{mod:V0,nttZetas:V7,NTT:RI,bitsCoder:j7}=gW({N:Jv,Q:KU,F:W7,ROOT_OF_UNITY:Z7,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),q8={512:{N:Jv,Q:KU,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:KU,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:KU,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},M7=($)=>{if($>=12)return{encode:(I)=>I,decode:(I)=>I};let v=2**($-1);return{encode:(I)=>((I<<$)+KU/2)/KU,decode:(I)=>I*KU+v>>>$}},W0=($)=>j7($,M7($));function uI($,v){for(let I=0;I<Jv;I++)$[I]=V0($[I]+v[I])}function r7($,v){for(let I=0;I<Jv;I++)$[I]=V0($[I]-v[I])}function R7($,v,I,g,U){let J=V0(v*g*U+$*I),z=V0($*g+v*I);return{c0:J,c1:z}}function Gz($,v){for(let I=0;I<Jv/2;I++){let g=V7[64+(I>>1)];if(I&1)g=-g;let{c0:U,c1:J}=R7($[2*I+0],$[2*I+1],v[2*I+0],v[2*I+1],g);$[2*I+0]=U,$[2*I+1]=J}return $}function zW($){let v=new Uint16Array(Jv);for(let I=0;I<Jv;){let g=$();if(g.length%3)throw Error("SampleNTT: unaligned block");for(let U=0;I<Jv&&U+3<=g.length;U+=3){let J=(g[U+0]>>0|g[U+1]<<8)&4095,z=(g[U+1]>>4|g[U+2]<<4)&4095;if(J<KU)v[I++]=J;if(I<Jv&&z<KU)v[I++]=z}}return v}function Z0($,v,I,g){let U=$(g*Jv/4,v,I),J=new Uint16Array(Jv),z=lJ(U),G=0;for(let O=0,D=0,X=0,N=0;O<z.length;O++){let Y=z[O];for(let w=0;w<32;w++)if(X+=Y&1,Y>>=1,G+=1,G===g)N=X,X=0;else if(G===2*g)J[D++]=V0(N-X),X=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return J}var u7=($)=>{let{K:v,PRF:I,XOF:g,HASH512:U,ETA1:J,ETA2:z,du:G,dv:O}=$,D=W0(1),X=W0(O),N=W0(G),Y=rI("publicKey",zz(W0(12),v),32),w=zz(W0(12),v),W=rI("ciphertext",zz(N,v),X),j=rI("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:Y.bytesLen,cipherText:W.bytesLen},keygen:(Z)=>{q$(Z,32,"seed");let H=new Uint8Array(33);H.set(Z),H[32]=v;let u=U(H),[_,L]=j.decode(u),i=[],l=[];for(let b=0;b<v;b++)i.push(RI.encode(Z0(I,L,b,J)));let h=g(_);for(let b=0;b<v;b++){let U$=RI.encode(Z0(I,L,v+b,J));for(let S=0;S<v;S++){let K=zW(h.get(S,b));uI(U$,Gz(K,i[S]))}l.push(U$)}h.clean();let n={publicKey:Y.encode([l,_]),secretKey:w.encode(i)};return m$(_,L,i,l,H,u),n},encrypt:(Z,H,u)=>{let[_,L]=Y.decode(Z),i=[];for(let S=0;S<v;S++)i.push(RI.encode(Z0(I,u,S,J)));let l=g(L),h=new Uint16Array(Jv),n=[];for(let S=0;S<v;S++){let K=Z0(I,u,v+S,z),P=new Uint16Array(Jv);for(let V=0;V<v;V++){let r=zW(l.get(S,V));uI(P,Gz(r,i[V]))}uI(K,RI.decode(P)),n.push(K),uI(h,Gz(_[S],i[S])),m$(P)}l.clean();let b=Z0(I,u,2*v,z);uI(b,RI.decode(h));let U$=D.decode(H);return uI(U$,b),m$(_,i,h,b),W.encode([n,U$])},decrypt:(Z,H)=>{let[u,_]=W.decode(Z),L=w.decode(H),i=new Uint16Array(Jv);for(let l=0;l<v;l++)uI(i,Gz(L[l],RI.encode(u[l])));return r7(_,RI.decode(i)),m$(i,L,u),D.encode(_)}}};function W8($){let v=u7($),{HASH256:I,HASH512:g,KDF:U}=$,{secretCoder:J,lengths:z}=v,G=rI("secretKey",z.secretKey,z.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...z,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(X=vU(64))=>{q$(X,64,"seed");let{publicKey:N,secretKey:Y}=v.keygen(X.subarray(0,32)),w=I(N),W=G.encode([Y,N,w,X.subarray(32)]);return m$(Y,w),{publicKey:N,secretKey:W}},getPublicKey:(X)=>{let[N,Y,w,W]=G.decode(X);return Uint8Array.from(Y)},encapsulate:(X,N=vU(32))=>{q$(X,z.publicKey,"publicKey"),q$(N,32,"message");let Y=X.subarray(0,384*$.K),w=J.encode(J.decode(IW(Y)));if(!Jz(w,Y))throw m$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(w);let W=g.create().update(N).update(I(X)).digest(),j=v.encrypt(X,N,W.subarray(32,64));return m$(W.subarray(32)),{cipherText:j,sharedSecret:W.subarray(0,32)}},decapsulate:(X,N)=>{q$(N,G.bytesLen,"secretKey"),q$(X,z.cipherText,"cipherText");let Y=G.bytesLen-96,w=Y+32,W=I(N.subarray(Y/2,w));if(!Jz(W,N.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[j,Z,H,u]=G.decode(N),_=v.decrypt(X,j),L=g.create().update(_).update(H).digest(),i=L.subarray(0,32),l=v.encrypt(Z,_,L.subarray(32,64)),h=Jz(X,l),n=U.create({dkLen:32}).update(u).update(X).digest();return m$(_,l,!h?i:n),h?i:n}}}function K7($,v,I){return $U.create({dkLen:$}).update(v).update(new Uint8Array([I])).digest()}var Z8={HASH256:MI,HASH512:aq,KDF:$U,XOF:JW,PRF:K7},ZS=W8({...Z8,...q8[512]}),j0=W8({...Z8,...q8[768]}),GW=W8({...Z8,...q8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function H7($,v=!1){let{lengths:I,keygen:g}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");g=(z=vU(I.seed))=>{q$(z,I.seed,"seed");let G=J.isLE?xU(z):iU(z),O=J.toBytes(J.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:I.secretKey,publicKey:I.publicKey,seed:I.seed},keygen:g,getPublicKey:(U)=>$.getPublicKey(U)}}function V8($,v=!1){let I=H7($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...I.lengths,msg:I.lengths.seed,cipherText:I.lengths.publicKey},keygen:I.keygen,getPublicKey:I.getPublicKey,encapsulate(g,U=vU($.lengths.seed)){let J=this.keygen(U).secretKey,z=this.decapsulate(g,J),G=$.getPublicKey(J);return m$(J),{sharedSecret:z,cipherText:G}},decapsulate(g,U){let J=$.getSharedSecret(U,g);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function M0($,v){return rI(v,...$.map((I)=>{if(typeof I.lengths[v]!=="number")throw Error("wrong length: "+v);return I.lengths[v]}))}function j8($){return(v,I)=>$(v,{dkLen:I})}function A7($,v,...I){let g=M0(I,"seed"),U=M0(I,"publicKey");if($===void 0)$=g.bytesLen;F$($);function J(z){q$(z,$);let G=g.decode(v(z,g.bytesLen)),O=I.map((N,Y)=>N.keygen(G[Y])),D=O.map((N)=>N.secretKey),X=O.map((N)=>N.publicKey);return{secretKey:D,publicKey:X}}return{info:{lengths:{seed:$,publicKey:U.bytesLen,secretKey:$}},getPublicKey(z){return this.keygen(z).publicKey},keygen(z=vU($)){let{publicKey:G,secretKey:O}=J(z),D=U.encode(G);return m$(G),m$(O),{secretKey:z,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function Oz($,v,I,g,...U){let J=A7($,I,...U),z=M0(U,"cipherText"),G=M0(U,"publicKey"),O=M0(U,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:z.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,X=vU(O.bytesLen)){let N=G.decode(D),Y=O.decode(X),w=U.map((H,u)=>H.encapsulate(N[u],Y[u])),W=w.map((H)=>H.sharedSecret),j=w.map((H)=>H.cipherText),Z={sharedSecret:g(N,j,W),cipherText:z.encode(j)};return m$(W,j),Z},decapsulate(D,X){let N=z.decode(D),{publicKey:Y,secretKey:w}=J.expandDecapsulationKey(X),W=U.map((j,Z)=>j.decapsulate(N[Z],w[Z]));return g(Y,N,W)}}}function OW($,v,I,g,U){return Lv(g),Lv(U),Oz(32,32,j8(g),(J,z,G)=>U(n$(G[0],G[1],z[1],J[1],cU($))),v,I)}var SS=OW("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",j0,V8(D8,!0),$U,MI),PS=OW("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",GW,V8(Fq,!0),$U,MI);function T7($,v,I,g,U){return Lv(g),Lv(U),Oz(32,32,j8(g),(J,z,G)=>{let O=n$(G[0],G[1],z[0],J[0],z[1],J[1],cU($)),D=32,X=n$(cU("hybrid_prk"),O),N=xq(U,X),Y=n$(aI(32,2),cU("shared_secret"),cU("")),w=cq(U,N,Y,32);return m$(N,Y,X,O),w},v,I)}var DW=V8(mq),kS=T7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",j0,DW,$U,Iz),S7=(()=>Oz(32,32,j8($U),($,v,I)=>MI(n$(I[0],I[1],v[1],$[1],cU("\\.//^\\"))),j0,DW))();function P7($,v,I,g){let U=$.Point.Fn;if(!U)throw Error("no Point.Fn");function J(z){let G;for(let X=0,N=v;;X=N,N+=v){if(N>z.length)throw Error("rejection sampling failed");if(G=U.fromBytes(z.subarray(X,N),!0),U.isValidNot0(G))break}let O=U.toBytes(U.create(G)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:I,seed:g,msg:g,cipherText:I},keygen(z=vU(g)){return q$(z,g,"seed"),J(z)},getPublicKey(z){return $.getPublicKey(z,!1)},encapsulate(z,G=vU(g)){q$(G,g,"rand");let{secretKey:O}=J(G),D=this.decapsulate(z,O),X=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:X}},decapsulate(z,G){return $.getSharedSecret(G,z).subarray(1)}}}function k7($,v,I,g){let{secretKey:U,publicKeyUncompressed:J}=I.lengths;if(!U||!J)throw Error("wrong curve");let z=P7(I,U,J,g),G=64,O=G+g;return Oz(32,32,(D)=>{q$(D,32);let X=$U(D,{dkLen:O}),N=X.subarray(0,G),Y=X.subarray(G,O);return n$(N,Y)},(D,X,N)=>MI(n$(N[0],N[1],X[1],D[1],cU($))),v,z)}var E7=(()=>k7("MLKEM768-P256",j0,D8,128))();var Dz=S7,QW=E7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=($,v,I)=>x$($,v,I),r8=f$,Ug=BJ,h$=(...$)=>RO(...$),Ig=($)=>pg($),gg=jO,Jg=($)=>qU($),Xz=BigInt(0),M8=BigInt(1);function HU($,v=""){if(typeof $!=="boolean"){let I=v&&`"${v}" `;throw TypeError(I+"expected boolean, got type="+typeof $)}return $}function Nz($){if(typeof $==="bigint"){if(!Qz($))throw RangeError("positive bigint expected, got "+$)}else r8($);return $}function UU($,v=""){if(typeof $!=="number"){let I=v&&`"${v}" `;throw TypeError(I+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let I=v&&`"${v}" `;throw RangeError(I+"expected safe integer, got "+$)}}function r0($){let v=Nz($).toString(16);return v.length&1?"0"+v:v}function XW($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?Xz:BigInt("0x"+$)}function KI($){return XW(BJ($))}function cv($){return XW(BJ(hU(x$($)).reverse()))}function wz($,v){if(f$(v),v===0)throw RangeError("zero length");$=Nz($);let I=$.toString(16);if(I.length>v*2)throw RangeError("number too large");return pg(I.padStart(v*2,"0"))}function R0($,v){return wz($,v).reverse()}function NW($,v){if($=H$($),v=H$(v),$.length!==v.length)return!1;let I=0;for(let g=0;g<$.length;g++)I|=$[g]^v[g];return I===0}function hU($){return Uint8Array.from(H$($))}function Yz($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,I)=>{let g=v.charCodeAt(0);if(v.length!==1||g>127)throw RangeError(`string contains non-ASCII character "${$[I]}" with code ${g} at position ${I}`);return g})}var Qz=($)=>typeof $==="bigint"&&Xz<=$;function C7($,v,I){return Qz($)&&Qz(v)&&Qz(I)&&v<=$&&$<I}function AU($,v,I,g){if(!C7(v,I,g))throw RangeError("expected valid "+$+": "+I+" <= n < "+g+", got "+v)}function zg($){if($<Xz)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>Xz;$>>=M8,v+=1);return v}var u0=($)=>(M8<<BigInt($))-M8;function wW($,v,I){if(f$($,"hashLen"),f$(v,"qByteLen"),typeof I!=="function")throw TypeError("hmacFn must be a function");let g=(Z)=>new Uint8Array(Z),U=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=g($),D=g($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},Y=(...Z)=>I(D,h$(O,...Z)),w=(Z=U)=>{if(D=Y(J,Z),O=Y(),Z.length===0)return;D=Y(z,Z),O=Y()},W=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let Z=0,H=[];while(Z<v){O=Y();let u=O.slice();H.push(u),Z+=O.length}return h$(...H)};return(Z,H)=>{N(),w(Z);let u=void 0;while((u=H(W()))===void 0)w();return N(),u}}function _v($,v={},I={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function g(J,z,G){if(!G&&z!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw TypeError(`param "${J}" is invalid: expected ${z}, got ${D}`)}let U=(J,z)=>Object.entries(J).forEach(([G,O])=>g(G,O,z));U(v,!1),U(I,!0)}var R8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),B$=BigInt(1),HI=BigInt(2),ZW=BigInt(3),VW=BigInt(4),jW=BigInt(5),B7=BigInt(7),MW=BigInt(8),L7=BigInt(9),rW=BigInt(16);function C$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let I=$%v;return I>=p$?I:v+I}function nv($,v,I){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let g=$;while(v-- >p$)g*=g,g%=I;return g}function YW($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let I=C$($,v),g=v,U=p$,J=B$,z=B$,G=p$;while(I!==p$){let D=g/I,X=g-I*D,N=U-z*D,Y=J-G*D;g=I,I=X,U=z,J=G,z=N,G=Y}if(g!==B$)throw Error("invert: does not exist");return C$(U,v)}function u8($,v,I){let g=$;if(!g.eql(g.sqr(v),I))throw Error("Cannot find square root")}function RW($,v){let I=$,g=(I.ORDER+B$)/VW,U=I.pow(v,g);return u8(I,U,v),U}function f7($,v){let I=$,g=(I.ORDER-jW)/MW,U=I.mul(v,HI),J=I.pow(U,g),z=I.mul(v,J),G=I.mul(I.mul(z,HI),J),O=I.mul(z,I.sub(G,I.ONE));return u8(I,O,v),O}function _7($){let v=qz($),I=uW($),g=I(v,v.neg(v.ONE)),U=I(v,g),J=I(v,v.neg(g)),z=($+B7)/rW;return(G,O)=>{let D=G,X=D.pow(O,z),N=D.mul(X,g),Y=D.mul(X,U),w=D.mul(X,J),W=D.eql(D.sqr(N),O),j=D.eql(D.sqr(Y),O);X=D.cmov(X,N,W),N=D.cmov(w,Y,j);let Z=D.eql(D.sqr(N),O),H=D.cmov(X,N,Z);return u8(D,H,O),H}}function uW($){if($<ZW)throw Error("sqrt is not defined for small field");let v=$-B$,I=0;while(v%HI===p$)v/=HI,I++;let g=HI,U=qz($);while(qW(U,g)===1)if(g++>1000)throw Error("Cannot find square root: probably non-prime P");if(I===1)return RW;let J=U.pow(g,v),z=(v+B$)/HI;return function(O,D){let X=O;if(X.is0(D))return D;if(qW(X,D)!==1)throw Error("Cannot find square root");let N=I,Y=X.mul(X.ONE,J),w=X.pow(D,v),W=X.pow(D,z);while(!X.eql(w,X.ONE)){if(X.is0(w))return X.ZERO;let j=1,Z=X.sqr(w);while(!X.eql(Z,X.ONE))if(j++,Z=X.sqr(Z),j===N)throw Error("Cannot find square root");let H=B$<<BigInt(N-j-1),u=X.pow(Y,H);N=j,Y=X.sqr(u),w=X.mul(w,Y),W=X.mul(W,u)}return W}}function n7($){if($%VW===ZW)return RW;if($%MW===jW)return f7;if($%rW===L7)return _7($);return uW($)}var TU=($,v)=>(C$($,v)&B$)===B$,b7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function K8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},I=b7.reduce((g,U)=>{return g[U]="function",g},v);if(_v($,I),UU($.BYTES,"BYTES"),UU($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=B$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function m7($,v,I){let g=$;if(I<p$)throw Error("invalid exponent, negatives unsupported");if(I===p$)return g.ONE;if(I===B$)return v;let U=g.ONE,J=v;while(I>p$){if(I&B$)U=g.mul(U,J);J=g.sqr(J),I>>=B$}return U}function K0($,v,I=!1){let g=$,U=Array(v.length).fill(I?g.ZERO:void 0),J=v.reduce((G,O,D)=>{if(g.is0(O))return G;return U[D]=G,g.mul(G,O)},g.ONE),z=g.inv(J);return v.reduceRight((G,O,D)=>{if(g.is0(O))return G;return U[D]=g.mul(G,U[D]),g.mul(G,O)},z),U}function qW($,v){let I=$,g=(I.ORDER-B$)/HI,U=I.pow(v,g),J=I.eql(U,I.ONE),z=I.eql(U,I.ZERO),G=I.eql(U,I.neg(I.ONE));if(!J&&!z&&!G)throw Error("invalid Legendre symbol result");return J?1:z?0:-1}function F7($,v){if(v!==void 0)r8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let I=zg($);if(v!==void 0&&v<I)throw Error(`invalid n length: expected bit length (${I}) >= n.length (${v})`);let g=v!==void 0?v:I,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}var WW=new WeakMap;class H8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=B$;_lengths;_mod;constructor($,v={}){if($<=B$)throw Error("invalid field: expected ORDER > 1, got "+$);let I=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")I=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:g,nByteLength:U}=F7($,I);if(U>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=g,this.BYTES=U,Object.freeze(this)}create($){return C$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&B$)===B$}neg($){return C$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return C$($*$,this.ORDER)}add($,v){return C$($+v,this.ORDER)}sub($,v){return C$($-v,this.ORDER)}mul($,v){return C$($*v,this.ORDER)}pow($,v){return m7(this,$,v)}div($,v){return C$($*YW(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return YW($,this.ORDER)}sqrt($){let v=WW.get(this);if(!v)WW.set(this,v=n7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?R0($,this.BYTES):wz($,this.BYTES)}fromBytes($,v=!1){H$($);let{_lengths:I,BYTES:g,isLE:U,ORDER:J,_mod:z}=this;if(I){if($.length<1||!I.includes($.length)||$.length>g)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let O=new Uint8Array(g);O.set($,U?0:O.length-$.length),$=O}if($.length!==g)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let G=U?cv($):KI($);if(z)G=C$(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return K0(this,$)}cmov($,v,I){return HU(I,"condition"),I?v:$}}Object.freeze(H8.prototype);function qz($,v={}){return new H8($,v)}function KW($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=B$)throw Error("field order must be greater than 1");let v=zg($-B$);return Math.ceil(v/8)}function A8($){let v=KW($);return v+Math.ceil(v/2)}function HW($,v,I=!1){H$($);let g=$.length,U=KW(v),J=Math.max(A8(v),16);if(g<J||g>1024)throw Error("expected "+J+"-1024 bytes of input, got "+g);let z=I?cv($):KI($),G=C$(z,v-B$)+B$;return I?R0(G,U):wz(G,U)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Gg=BigInt(0),AI=BigInt(1);function H0($,v){let I=v.negate();return $?I:v}function TI($,v){let I=K0($.Fp,v.map((g)=>g.Z));return v.map((g,U)=>$.fromAffine(g.toAffine(I[U])))}function PW($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function T8($,v){PW($,v);let I=Math.ceil(v/$)+1,g=2**($-1),U=2**$,J=u0($),z=BigInt($);return{windows:I,windowSize:g,mask:J,maxNumber:U,shiftBy:z}}function AW($,v,I){let{windowSize:g,mask:U,maxNumber:J,shiftBy:z}=I,G=Number($&U),O=$>>z;if(G>g)G-=J,O+=AI;let D=v*g,X=D+Math.abs(G)-1,N=G===0,Y=G<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:Y,isNegF:w,offsetF:D}}var S8=new WeakMap,kW=new WeakMap;function P8($){return kW.get($)||1}function TW($){if($!==Gg)throw Error("invalid wNAF")}class A0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,I=this.ZERO){let g=$;while(v>Gg){if(v&AI)I=I.add(g);g=g.double(),v>>=AI}return I}precomputeWindow($,v){let{windows:I,windowSize:g}=T8(v,this.bits),U=[],J=$,z=J;for(let G=0;G<I;G++){z=J,U.push(z);for(let O=1;O<g;O++)z=z.add(J),U.push(z);J=z.double()}return U}wNAF($,v,I){if(!this.Fn.isValid(I))throw Error("invalid scalar");let g=this.ZERO,U=this.BASE,J=T8($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:Y}=AW(I,z,J);if(I=G,D)U=U.add(H0(N,v[Y]));else g=g.add(H0(X,v[O]))}return TW(I),{p:g,f:U}}wNAFUnsafe($,v,I,g=this.ZERO){let U=T8($,this.bits);for(let J=0;J<U.windows;J++){if(I===Gg)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=AW(I,J,U);if(I=z,O)continue;else{let X=v[G];g=g.add(D?X.negate():X)}}return TW(I),g}getPrecomputes($,v,I){let g=S8.get(v);if(!g){if(g=this.precomputeWindow(v,$),$!==1){if(typeof I==="function")g=I(g);S8.set(v,g)}}return g}cached($,v,I){let g=P8($);return this.wNAF(g,this.getPrecomputes(g,$,I),v)}unsafe($,v,I,g){let U=P8($);if(U===1)return this._unsafeLadder($,v,g);return this.wNAFUnsafe(U,this.getPrecomputes(U,$,I),v,g)}createCache($,v){PW(v,this.bits),kW.set($,v),S8.delete($)}hasCache($){return P8($)!==1}}function EW($,v,I,g){let U=v,J=$.ZERO,z=$.ZERO;while(I>Gg||g>Gg){if(I&AI)J=J.add(U);if(g&AI)z=z.add(U);U=U.double(),I>>=AI,g>>=AI}return{p1:J,p2:z}}function SW($,v,I){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return K8(v),v}else return qz($,{isLE:I})}function Wz($,v,I={},g){if(g===void 0)g=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>Gg))throw Error(`CURVE.${O} must be positive bigint`)}let U=SW(v.p,I.Fp,g),J=SW(v.n,I.Fn,g),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!U.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:U,Fn:J}}function T0($,v){return function(g){let U=$(g);return{secretKey:U,publicKey:v(U)}}}function S0($,v){if(UU($),UU(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let I=Array.from({length:v}).fill(0);for(let g=v-1;g>=0;g--)I[g]=$&255,$>>>=8;return new Uint8Array(I)}function i7($,v){let I=new Uint8Array($.length);for(let g=0;g<$.length;g++)I[g]=$[g]^v[g];return I}function x7($){if(!gg($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?Yz($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function k8($,v,I,g){if(H$($),UU(I),v=x7(v),v.length>255)v=g(h$(Yz("H2C-OVERSIZE-DST-"),v));let{outputLen:U,blockLen:J}=g,z=Math.ceil(I/U);if(I>65535||z>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,S0(v.length,1)),O=new Uint8Array(J),D=S0(I,2),X=Array(z),N=g(h$(O,$,D,S0(0,1),G));X[0]=g(h$(N,S0(1,1),G));for(let w=1;w<z;w++){let W=[i7(N,X[w-1]),S0(w+1,1),G];X[w]=g(h$(...W))}return h$(...X).slice(0,I)}var CW="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var BW=($,v)=>($+($>=0?v:-v)/fW)/v;function c7($,v,I){AU("scalar",$,IU,I);let[[g,U],[J,z]]=v,G=BW(z*$,I),O=BW(-U*$,I),D=$-G*g-O*J,X=-G*U-O*z,N=D<IU,Y=X<IU;if(N)D=-D;if(Y)X=-X;let w=u0(Math.ceil(zg(I)/2))+pU;if(D<IU||D>=w||X<IU||X>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:N,k1:D,k2neg:Y,k2:X}}function C8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function E8($,v){_v($);let I={};for(let g of Object.keys(v))I[g]=$[g]===void 0?v[g]:$[g];if(HU(I.lowS,"lowS"),HU(I.prehash,"prehash"),I.format!==void 0)C8(I.format);return I}class LW extends Error{constructor($=""){super($)}}var ov={Err:LW,_tlv:{encode:($,v)=>{let{Err:I}=ov;if(UU($,"tag"),$<0||$>255)throw new I("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new I("tlv.encode: unpadded data");let g=v.length/2,U=r0(g);if(U.length/2&128)throw new I("tlv.encode: long form length too big");let J=g>127?r0(U.length/2|128):"";return r0($)+J+U+v},decode($,v){let{Err:I}=ov;v=H$(v,void 0,"DER data");let g=0;if($<0||$>255)throw new I("tlv.encode: wrong tag");if(v.length<2||v[g++]!==$)throw new I("tlv.decode: wrong tlv");let U=v[g++],J=!!(U&128),z=0;if(!J)z=U;else{let O=U&127;if(!O)throw new I("tlv.decode(long): indefinite length not supported");if(O>4)throw new I("tlv.decode(long): byte length is too big");let D=v.subarray(g,g+O);if(D.length!==O)throw new I("tlv.decode: length bytes not complete");if(D[0]===0)throw new I("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(g+=O,z<128)throw new I("tlv.decode(long): not minimal encoding")}let G=v.subarray(g,g+z);if(G.length!==z)throw new I("tlv.decode: wrong value length");return{v:G,l:v.subarray(g+z)}}},_int:{encode($){let{Err:v}=ov;if(Nz($),$<IU)throw new v("integer: negative integers are not allowed");let I=r0($);if(Number.parseInt(I[0],16)&8)I="00"+I;if(I.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return I},decode($){let{Err:v}=ov;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return KI($)}},toSig($){let{Err:v,_int:I,_tlv:g}=ov,U=H$($,void 0,"signature"),{v:J,l:z}=g.decode(48,U);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=g.decode(2,J),{v:D,l:X}=g.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:I.decode(G),s:I.decode(D)}},hexFromSig($){let{_tlv:v,_int:I}=ov,g=v.encode(2,I.encode($.r)),U=v.encode(2,I.encode($.s)),J=g+U;return v.encode(48,J)}};Object.freeze(ov._tlv);Object.freeze(ov._int);Object.freeze(ov);var IU=BigInt(0),pU=BigInt(1),fW=BigInt(2),Zz=BigInt(3),o7=BigInt(4);function _W($,v={}){let I=Wz("weierstrass",$,v),g=I.Fp,U=I.Fn,J=I.CURVE,{h:z,n:G}=J;_v(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!g.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let X=bW(g,U);function N(){if(!g.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function Y(S,K,P){if(D&&K.is0())return Uint8Array.of(0);let{x:V,y:r}=K.toAffine(),M=g.toBytes(V);if(HU(P,"isCompressed"),P){N();let T=!g.isOdd(r);return h$(nW(T),M)}else return h$(Uint8Array.of(4),M,g.toBytes(r))}function w(S){H$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=X,V=S.length,r=S[0],M=S.subarray(1);if(D&&V===1&&r===0)return{x:g.ZERO,y:g.ZERO};if(V===K&&(r===2||r===3)){let T=g.fromBytes(M);if(!g.isValid(T))throw Error("bad point: is not on curve, wrong x");let R=Z(T),E;try{E=g.sqrt(R)}catch(s){let J$=s instanceof Error?": "+s.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}N();let B=g.isOdd(E);if((r&1)===1!==B)E=g.neg(E);return{x:T,y:E}}else if(V===P&&r===4){let T=g.BYTES,R=g.fromBytes(M.subarray(0,T)),E=g.fromBytes(M.subarray(T,T*2));if(!H(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let W=v.toBytes===void 0?Y:v.toBytes,j=v.fromBytes===void 0?w:v.fromBytes;function Z(S){let K=g.sqr(S),P=g.mul(K,S);return g.add(g.add(P,g.mul(S,J.a)),J.b)}function H(S,K){let P=g.sqr(K),V=Z(S);return g.eql(P,V)}if(!H(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=g.mul(g.pow(J.a,Zz),o7),_=g.mul(g.sqr(J.b),BigInt(27));if(g.is0(g.add(u,_)))throw Error("bad curve params: a or b");function L(S,K,P=!1){if(!g.isValid(K)||P&&g.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof n))throw Error("Weierstrass Point expected")}function l(S){if(!O||!O.basises)throw Error("no endo");return c7(S,O.basises,U.ORDER)}function h(S,K,P,V,r){return P=new n(g.mul(P.X,S),P.Y,P.Z),K=H0(V,K),P=H0(r,P),K.add(P)}class n{static BASE=new n(J.Gx,J.Gy,g.ONE);static ZERO=new n(g.ZERO,g.ONE,g.ZERO);static Fp=g;static Fn=U;X;Y;Z;constructor(S,K,P){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",P),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:P}=S||{};if(!S||!g.isValid(K)||!g.isValid(P))throw Error("invalid affine point");if(S instanceof n)throw Error("projective point not allowed");if(g.is0(K)&&g.is0(P))return n.ZERO;return new n(K,P,g.ONE)}static fromBytes(S){let K=n.fromAffine(j(H$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return n.fromBytes(Ig(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(U$.createCache(this,S),!K)this.multiply(Zz);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&g.is0(S.X)&&g.eql(S.Y,g.ONE)&&g.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=S.toAffine();if(!g.isValid(K)||!g.isValid(P))throw Error("bad point: x or y not field elements");if(!H(K,P))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!g.isOdd)throw Error("Field doesn't support isOdd");return!g.isOdd(S)}equals(S){i(S);let{X:K,Y:P,Z:V}=this,{X:r,Y:M,Z:T}=S,R=g.eql(g.mul(K,T),g.mul(r,V)),E=g.eql(g.mul(P,T),g.mul(M,V));return R&&E}negate(){return new n(this.X,g.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,P=g.mul(K,Zz),{X:V,Y:r,Z:M}=this,T=g.ZERO,R=g.ZERO,E=g.ZERO,B=g.mul(V,V),x=g.mul(r,r),s=g.mul(M,M),J$=g.mul(V,r);return J$=g.add(J$,J$),E=g.mul(V,M),E=g.add(E,E),T=g.mul(S,E),R=g.mul(P,s),R=g.add(T,R),T=g.sub(x,R),R=g.add(x,R),R=g.mul(T,R),T=g.mul(J$,T),E=g.mul(P,E),s=g.mul(S,s),J$=g.sub(B,s),J$=g.mul(S,J$),J$=g.add(J$,E),E=g.add(B,B),B=g.add(E,B),B=g.add(B,s),B=g.mul(B,J$),R=g.add(R,B),s=g.mul(r,M),s=g.add(s,s),B=g.mul(s,J$),T=g.sub(T,B),E=g.mul(s,x),E=g.add(E,E),E=g.add(E,E),new n(T,R,E)}add(S){i(S);let{X:K,Y:P,Z:V}=this,{X:r,Y:M,Z:T}=S,R=g.ZERO,E=g.ZERO,B=g.ZERO,x=J.a,s=g.mul(J.b,Zz),J$=g.mul(K,r),G$=g.mul(P,M),Q$=g.mul(V,T),w$=g.add(K,P),X$=g.add(r,M);w$=g.mul(w$,X$),X$=g.add(J$,G$),w$=g.sub(w$,X$),X$=g.add(K,V);let N$=g.add(r,T);return X$=g.mul(X$,N$),N$=g.add(J$,Q$),X$=g.sub(X$,N$),N$=g.add(P,V),R=g.add(M,T),N$=g.mul(N$,R),R=g.add(G$,Q$),N$=g.sub(N$,R),B=g.mul(x,X$),R=g.mul(s,Q$),B=g.add(R,B),R=g.sub(G$,B),B=g.add(G$,B),E=g.mul(R,B),G$=g.add(J$,J$),G$=g.add(G$,J$),Q$=g.mul(x,Q$),X$=g.mul(s,X$),G$=g.add(G$,Q$),Q$=g.sub(J$,Q$),Q$=g.mul(x,Q$),X$=g.add(X$,Q$),J$=g.mul(G$,X$),E=g.add(E,J$),J$=g.mul(N$,X$),R=g.mul(w$,R),R=g.sub(R,J$),J$=g.mul(w$,G$),B=g.mul(N$,B),B=g.add(B,J$),new n(R,E,B)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(n.ZERO)}multiply(S){let{endo:K}=v;if(!U.isValidNot0(S))throw RangeError("invalid scalar: out of range");let P,V,r=(M)=>U$.cached(this,M,(T)=>TI(n,T));if(K){let{k1neg:M,k1:T,k2neg:R,k2:E}=l(S),{p:B,f:x}=r(T),{p:s,f:J$}=r(E);V=x.add(J$),P=h(K.beta,B,s,M,R)}else{let{p:M,f:T}=r(S);P=M,V=T}return TI(n,[P,V])[0]}multiplyUnsafe(S){let{endo:K}=v,P=this,V=S;if(!U.isValid(V))throw RangeError("invalid scalar: out of range");if(V===IU||P.is0())return n.ZERO;if(V===pU)return P;if(U$.hasCache(this))return this.multiply(V);if(K){let{k1neg:r,k1:M,k2neg:T,k2:R}=l(V),{p1:E,p2:B}=EW(n,P,M,R);return h(K.beta,E,B,r,T)}else return U$.unsafe(P,V)}toAffine(S){let K=this,P=S,{X:V,Y:r,Z:M}=K;if(g.eql(M,g.ONE))return{x:V,y:r};let T=K.is0();if(P==null)P=T?g.ONE:g.inv(M);let R=g.mul(V,P),E=g.mul(r,P),B=g.mul(M,P);if(T)return{x:g.ZERO,y:g.ZERO};if(!g.eql(B,g.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(z===pU)return!0;if(S)return S(n,this);return U$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:S}=v;if(z===pU)return this;if(S)return S(n,this);return this.multiplyUnsafe(z)}isSmallOrder(){if(z===pU)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return HU(S,"isCompressed"),this.assertValidity(),W(n,this,S)}toHex(S=!0){return Ug(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=U.BITS,U$=new A0(n,v.endo?Math.ceil(b/2):b);if(b>=8)n.BASE.precompute(8);return Object.freeze(n.prototype),Object.freeze(n),n}function nW($){return Uint8Array.of($?2:3)}function bW($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function y7($,v={}){let{Fn:I}=$,g=v.randomBytes===void 0?Jg:v.randomBytes,U=Object.assign(bW($.Fp,I),{seed:Math.max(A8(I.ORDER),16)});function J(w){try{let W=I.fromBytes(w);return I.isValidNot0(W)}catch(W){return!1}}function z(w,W){let{publicKey:j,publicKeyUncompressed:Z}=U;try{let H=w.length;if(W===!0&&H!==j)return!1;if(W===!1&&H!==Z)return!1;return!!$.fromBytes(w)}catch(H){return!1}}function G(w){return w=w===void 0?g(U.seed):w,HW(H$(w,U.seed,"seed"),I.ORDER)}function O(w,W=!0){return $.BASE.multiply(I.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:j,publicKeyUncompressed:Z}=U,H=I._lengths;if(!gg(w))return;let u=H$(w,void 0,"key").length,_=u===j||u===Z,L=u===W||!!H?.includes(u);if(_&&L)return;return _}function X(w,W,j=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let Z=I.fromBytes(w);return $.fromBytes(W).multiply(Z).toBytes(j)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},Y=T0(G,O);return Object.freeze(N),Object.freeze(U),Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:Y,Point:$,utils:N,lengths:U})}function mW($,v,I={}){let g=v;YU(g),_v(I,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),I=Object.assign({},I);let U=I.randomBytes===void 0?Jg:I.randomBytes,J=I.hmac===void 0?(r,M)=>tv(g,r,M):I.hmac,{Fp:z,Fn:G}=$,{ORDER:O,BITS:D}=G,{keygen:X,getPublicKey:N,getSharedSecret:Y,utils:w,lengths:W}=y7($,I),j={prehash:!0,lowS:typeof I.lowS==="boolean"?I.lowS:!0,format:"compact",extraEntropy:!1},Z=O*fW+pU<z.ORDER;function H(r){let M=O>>pU;return r>M}function u(r,M){if(!G.isValidNot0(M))throw Error(`invalid signature ${r}: out of range 1..Point.Fn.ORDER`);return M}function _(){if(Z)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(r,M){C8(M);let T=W.signature,R=M==="compact"?T:M==="recovered"?T+1:void 0;return H$(r,R)}class i{r;s;recovery;constructor(r,M,T){if(this.r=u("r",r),this.s=u("s",M),T!=null){if(_(),![0,1,2,3].includes(T))throw Error("invalid recovery id");this.recovery=T}Object.freeze(this)}static fromBytes(r,M=j.format){L(r,M);let T;if(M==="der"){let{r:x,s}=ov.toSig(H$(r));return new i(x,s)}if(M==="recovered")T=r[0],M="compact",r=r.subarray(1);let R=W.signature/2,E=r.subarray(0,R),B=r.subarray(R,R*2);return new i(G.fromBytes(E),G.fromBytes(B),T)}static fromHex(r,M){return this.fromBytes(Ig(r),M)}assertRecovery(){let{recovery:r}=this;if(r==null)throw Error("invalid recovery id: must be present");return r}addRecoveryBit(r){return new i(this.r,this.s,r)}recoverPublicKey(r){let{r:M,s:T}=this,R=this.assertRecovery(),E=R===2||R===3?M+O:M;if(!z.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let B=z.toBytes(E),x=$.fromBytes(h$(nW((R&1)===0),B)),s=G.inv(E),J$=h(H$(r,void 0,"msgHash")),G$=G.create(-J$*s),Q$=G.create(T*s),w$=$.BASE.multiplyUnsafe(G$).add(x.multiplyUnsafe(Q$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return H(this.s)}toBytes(r=j.format){if(C8(r),r==="der")return Ig(ov.hexFromSig(this));let{r:M,s:T}=this,R=G.toBytes(M),E=G.toBytes(T);if(r==="recovered")return _(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(r){return Ug(this.toBytes(r))}}Object.freeze(i.prototype),Object.freeze(i);let l=I.bits2int===void 0?function(M){if(M.length>8192)throw Error("input is too large");let T=KI(M),R=M.length*8-D;return R>0?T>>BigInt(R):T}:I.bits2int,h=I.bits2int_modN===void 0?function(M){return G.create(l(M))}:I.bits2int_modN,n=u0(D);function b(r){return AU("num < 2^"+D,r,IU,n),G.toBytes(r)}function U$(r,M){return H$(r,void 0,"message"),M?H$(g(r),void 0,"prehashed message"):r}function S(r,M,T){let{lowS:R,prehash:E,extraEntropy:B}=E8(T,j);r=U$(r,E);let x=h(r),s=G.fromBytes(M);if(!G.isValidNot0(s))throw Error("invalid private key");let J$=[b(s),b(x)];if(B!=null&&B!==!1){let X$=B===!0?U(W.secretKey):B;J$.push(H$(X$,void 0,"extraEntropy"))}let G$=h$(...J$),Q$=x;function w$(X$){let N$=l(X$);if(!G.isValidNot0(N$))return;let Z$=G.inv(N$),P$=$.BASE.multiply(N$).toAffine(),E$=G.create(P$.x);if(E$===IU)return;let a$=G.create(Z$*G.create(Q$+E$*s));if(a$===IU)return;let e$=(P$.x===E$?0:2)|Number(P$.y&pU),Vv=a$;if(R&&H(a$))Vv=G.neg(a$),e$^=1;return new i(E$,Vv,Z?void 0:e$)}return{seed:G$,k2sig:w$}}function K(r,M,T={}){let{seed:R,k2sig:E}=S(r,M,T);return wW(g.outputLen,G.BYTES,J)(R,E).toBytes(T.format)}function P(r,M,T,R={}){let{lowS:E,prehash:B,format:x}=E8(R,j);if(T=H$(T,void 0,"publicKey"),M=U$(M,B),!gg(r)){let s=r instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+s)}L(r,x);try{let s=i.fromBytes(r,x),J$=$.fromBytes(T);if(E&&s.hasHighS())return!1;let{r:G$,s:Q$}=s,w$=h(M),X$=G.inv(Q$),N$=G.create(w$*X$),Z$=G.create(G$*X$),P$=$.BASE.multiplyUnsafe(N$).add(J$.multiplyUnsafe(Z$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(s){return!1}}function V(r,M,T={}){let{prehash:R}=E8(T,j);return M=U$(M,R),i.fromBytes(r,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:X,getPublicKey:N,getSharedSecret:Y,utils:w,lengths:W,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:i,hash:g})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var l7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var d7=_W(l7),Og=mW(d7,_$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var tU=BigInt(0),Mv=BigInt(1),B8=BigInt(2),h7=BigInt(8);function p7($,v,I,g){let U=$.sqr(I),J=$.sqr(g),z=$.add($.mul(v.a,U),J),G=$.add($.ONE,$.mul(v.d,$.mul(U,J)));return $.eql(z,G)}function FW($,v={}){let I=v,g=Wz("edwards",$,I,I.FpFnLE),{Fp:U,Fn:J}=g,z=g.CURVE,{h:G}=z;_v(I,{},{uvRatio:"function"});let O=B8<<BigInt(J.BYTES*8)-Mv,D=(j)=>U.create(j),X=I.uvRatio===void 0?(j,Z)=>{try{return{isValid:!0,value:U.sqrt(U.div(j,Z))}}catch(H){return{isValid:!1,value:tU}}}:I.uvRatio;if(!p7(U,z,z.Gx,z.Gy))throw Error("bad curve params: generator point");function N(j,Z,H=!1){let u=H?Mv:tU;return AU("coordinate "+j,Z,u,O),Z}function Y(j){if(!(j instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(z.Gx,z.Gy,Mv,D(z.Gx*z.Gy));static ZERO=new w(tU,Mv,Mv,tU);static Fp=U;static Fn=J;X;Y;Z;T;constructor(j,Z,H,u){this.X=N("x",j),this.Y=N("y",Z),this.Z=N("z",H,!0),this.T=N("t",u),Object.freeze(this)}static CURVE(){return z}static fromAffine(j){if(j instanceof w)throw Error("extended point not allowed");let{x:Z,y:H}=j||{};return N("x",Z),N("y",H),new w(Z,H,Mv,D(Z*H))}static fromBytes(j,Z=!1){let H=U.BYTES,{a:u,d:_}=z;j=hU(H$(j,H,"point")),HU(Z,"zip215");let L=hU(j),i=j[H-1];L[H-1]=i&-129;let l=cv(L),h=Z?O:U.ORDER;AU("point.y",l,tU,h);let n=D(l*l),b=D(n-Mv),U$=D(_*n-u),{isValid:S,value:K}=X(b,U$);if(!S)throw Error("bad point: invalid y coordinate");let P=(K&Mv)===Mv,V=(i&128)!==0;if(!Z&&K===tU&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=D(-K);return w.fromAffine({x:K,y:l})}static fromHex(j,Z=!1){return w.fromBytes(Ig(j),Z)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,Z=!0){if(W.createCache(this,j),!Z)this.multiply(B8);return this}assertValidity(){let j=this,{a:Z,d:H}=z;if(j.is0())throw Error("bad point: ZERO");let{X:u,Y:_,Z:L,T:i}=j,l=D(u*u),h=D(_*_),n=D(L*L),b=D(n*n),U$=D(l*Z),S=D(n*D(U$+h)),K=D(b+D(H*D(l*h)));if(S!==K)throw Error("bad point: equation left != right (1)");let P=D(u*_),V=D(L*i);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(j){Y(j);let{X:Z,Y:H,Z:u}=this,{X:_,Y:L,Z:i}=j,l=D(Z*i),h=D(_*u),n=D(H*i),b=D(L*u);return l===h&&n===b}is0(){return this.equals(w.ZERO)}negate(){return new w(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:j}=z,{X:Z,Y:H,Z:u}=this,_=D(Z*Z),L=D(H*H),i=D(B8*D(u*u)),l=D(j*_),h=Z+H,n=D(D(h*h)-_-L),b=l+L,U$=b-i,S=l-L,K=D(n*U$),P=D(b*S),V=D(n*S),r=D(U$*b);return new w(K,P,r,V)}add(j){Y(j);let{a:Z,d:H}=z,{X:u,Y:_,Z:L,T:i}=this,{X:l,Y:h,Z:n,T:b}=j,U$=D(u*l),S=D(_*h),K=D(i*H*b),P=D(L*n),V=D((u+_)*(l+h)-U$-S),r=P-K,M=P+K,T=D(S-Z*U$),R=D(V*r),E=D(M*T),B=D(V*T),x=D(r*M);return new w(R,E,x,B)}subtract(j){return Y(j),this.add(j.negate())}multiply(j){if(!J.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:Z,f:H}=W.cached(this,j,(u)=>TI(w,u));return TI(w,[Z,H])[0]}multiplyUnsafe(j){if(!J.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===tU)return w.ZERO;if(this.is0()||j===Mv)return this;return W.unsafe(this,j,(Z)=>TI(w,Z))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return W.unsafe(this,z.n).is0()}toAffine(j){let Z=this,H=j,{X:u,Y:_,Z:L}=Z,i=Z.is0();if(H==null)H=i?h7:U.inv(L);let l=D(u*H),h=D(_*H),n=U.mul(L,H);if(i)return{x:tU,y:Mv};if(n!==Mv)throw Error("invZ was invalid");return{x:l,y:h}}clearCofactor(){if(G===Mv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:j,y:Z}=this.toAffine(),H=U.toBytes(Z);return H[H.length-1]|=j&Mv?128:0,H}toHex(){return Ug(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let W=new A0(w,J.BITS);if(J.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class L8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){R8()}static fromHex($){R8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return Ug(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var P0=BigInt(0),Dg=BigInt(1),Vz=BigInt(2);function t7($){return _v($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function iW($){let v=t7($),{P:I,type:g,adjustScalarBytes:U,powPminus2:J,randomBytes:z}=v,G=g==="x25519";if(!G&&g!=="x448")throw Error("invalid type");let O=z===void 0?Jg:z,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),Y=G?BigInt(121665):BigInt(39081),w=G?Vz**BigInt(254):Vz**BigInt(447),W=G?BigInt(8)*Vz**BigInt(251)-Dg:BigInt(4)*Vz**BigInt(445)-Dg,j=w+W+Dg,Z=(V)=>C$(V,I),H=u(N);function u(V){return R0(Z(V),X)}function _(V){let r=hU(H$(V,X,"uCoordinate"));if(G)r[31]&=127;return Z(cv(r))}function L(V){return cv(U(hU(H$(V,X,"scalar"))))}function i(V,r){let M=U$(_(r),L(V));if(M===P0)throw Error("invalid private or public key received");return u(M)}function l(V){return i(V,H)}let h=l,n=i;function b(V,r,M){let T=Z(V*(r-M));return r=Z(r-T),M=Z(M+T),{x_2:r,x_3:M}}function U$(V,r){AU("u",V,P0,I),AU("scalar",r,w,j);let M=r,T=V,R=Dg,E=P0,B=V,x=Dg,s=P0;for(let G$=BigInt(D-1);G$>=P0;G$--){let Q$=M>>G$&Dg;s^=Q$,{x_2:R,x_3:B}=b(s,R,B),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let w$=R+E,X$=Z(w$*w$),N$=R-E,Z$=Z(N$*N$),P$=X$-Z$,E$=B+x,a$=B-x,e$=Z(a$*w$),Vv=Z(E$*N$),dv=e$+Vv,hv=e$-Vv;B=Z(dv*dv),x=Z(T*Z(hv*hv)),R=Z(X$*Z$),E=Z(P$*(X$+Z(Y*P$)))}({x_2:R,x_3:B}=b(s,R,B)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return Z(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V)=>{return V=V===void 0?O(X):V,H$(V,S.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(S),Object.freeze(P),Object.freeze({keygen:T0(K,h),getSharedSecret:n,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:P,GuBytes:H.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var a7=BigInt(0),SU=BigInt(1),xW=BigInt(2),e7=BigInt(3),s7=BigInt(5),$R=BigInt(8),PI=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),b8=(()=>({p:PI,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:$R,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function yW($){let v=BigInt(10),I=BigInt(20),g=BigInt(40),U=BigInt(80),J=PI,G=$*$%J*$%J,O=nv(G,xW,J)*G%J,D=nv(O,SU,J)*$%J,X=nv(D,s7,J)*D%J,N=nv(X,v,J)*X%J,Y=nv(N,I,J)*N%J,w=nv(Y,g,J)*Y%J,W=nv(w,U,J)*w%J,j=nv(W,U,J)*w%J,Z=nv(j,v,J)*X%J;return{pow_p_5_8:nv(Z,xW,J)*$%J,b2:G}}function vR($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var f8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function m8($,v){let I=PI,g=C$(v*v*v,I),U=C$(g*g*v,I),J=yW($*U).pow_p_5_8,z=C$($*g*J,I),G=C$(v*z*z,I),O=z,D=C$(z*f8,I),X=G===$,N=G===C$(-$,I),Y=G===C$(-$*f8,I);if(X)z=O;if(N||Y)z=D;if(TU(z,I))z=C$(-z,I);return{isValid:X||N,value:z}}var SI=FW(b8,{uvRatio:m8}),aU=(()=>SI.Fp)(),lW=(()=>SI.Fn)();var jz=(()=>{let $=PI;return iW({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:I,b2:g}=yW(v);return C$(nv(I,e7,$)*g,$)},adjustScalarBytes:vR})})();var _8=f8,UR=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),IR=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),gR=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),JR=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),cW=($)=>m8(SU,$),zR=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n8=($)=>aU.create(cv($)&zR);function oW($){let{d:v}=b8,I=PI,g=(H)=>aU.create(H),U=g(_8*$*$),J=g((U+SU)*gR),z=BigInt(-1),G=g((z-v*U)*g(U+v)),{isValid:O,value:D}=m8(J,G),X=g(D*$);if(!TU(X,I))X=g(-X);if(!O)D=X;if(!O)z=U;let N=g(z*(U-SU)*JR-G),Y=D*D,w=g((D+D)*G),W=g(N*UR),j=g(SU-Y),Z=g(SU+Y);return new SI(g(w*Z),g(j*W),g(W*Z),g(w*j))}class Nv extends L8{static BASE=(()=>new Nv(SI.BASE))();static ZERO=(()=>new Nv(SI.ZERO))();static Fp=(()=>aU)();static Fn=(()=>lW)();constructor($){super($)}static fromAffine($){return new Nv(SI.fromAffine($))}assertSame($){if(!($ instanceof Nv))throw Error("RistrettoPoint expected")}init($){return new Nv($)}static fromBytes($){x$($,32);let{a:v,d:I}=b8,g=PI,U=(_)=>aU.create(_),J=n8($);if(!NW(aU.toBytes(J),$)||TU(J,g))throw Error("invalid ristretto255 encoding 1");let z=U(J*J),G=U(SU+v*z),O=U(SU-v*z),D=U(G*G),X=U(O*O),N=U(v*I*D-X),{isValid:Y,value:w}=cW(U(N*X)),W=U(w*O),j=U(w*W*N),Z=U((J+J)*W);if(TU(Z,g))Z=U(-Z);let H=U(G*j),u=U(Z*H);if(!Y||TU(u,g)||H===a7)throw Error("invalid ristretto255 encoding 2");return new Nv(new SI(Z,H,SU,u))}static fromHex($){return Nv.fromBytes(pg($))}toBytes(){let{X:$,Y:v,Z:I,T:g}=this.ep,U=PI,J=(j)=>aU.create(j),z=J(J(I+v)*J(I-v)),G=J($*v),O=J(G*G),{value:D}=cW(J(z*O)),X=J(D*z),N=J(D*G),Y=J(X*N*g),w;if(TU(g*Y,U)){let j=J(v*_8),Z=J($*_8);$=j,v=Z,w=J(X*IR)}else w=N;if(TU($*Y,U))v=J(-v);let W=J((I-v)*w);if(TU(W,U))W=J(-W);return aU.toBytes(W)}equals($){this.assertSame($);let{X:v,Y:I}=this.ep,{X:g,Y:U}=$.ep,J=(O)=>aU.create(O),z=J(v*U)===J(I*g),G=J(I*U)===J(v*g);return z||G}is0(){return this.equals(Nv.ZERO)}}Object.freeze(Nv.BASE);Object.freeze(Nv.ZERO);Object.freeze(Nv.prototype);Object.freeze(Nv);var GR=Object.freeze({Point:Nv,hashToCurve($,v){let I=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,g=k8($,I,64,nJ);return GR.deriveToCurve(g)},hashToScalar($,v={DST:CW}){let I=k8($,v.DST,64,nJ);return lW.create(cv(I))},deriveToCurve($){x$($,64);let v=n8($.subarray(0,32)),I=oW(v),g=n8($.subarray(32,64)),U=oW(g);return new Nv(I.add(U))}});var dW=!1,OR=!1;async function hW($,v){if(OR)return await v();try{return await $()}catch(I){if(I instanceof ReferenceError||I instanceof DOMException&&I.name==="NotSupportedError")return await v();else throw I}}async function Mz($,v){return await hW(async()=>{let I=F8($)?$:await QR($),g=await crypto.subtle.importKey("raw",XR(v),{name:"X25519"},dW,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:g},I,256))},()=>{if(F8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return jz.scalarMult($,v)})}async function k0($){return await hW(async()=>{return Mz($,jz.GuBytes)},()=>{if(F8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return jz.scalarMultBase($)})}var DR=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function QR($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...DR,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},dW,["deriveBits"])}function F8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function XR($){return $}class i8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),wR(kI($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let I=await this.s.read();if(I.done)return this.buf=kI($),null;this.buf=I.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:kI(this.transcript)}}}function wR($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function kI($){let v=$.reduce((U,J)=>U+J.length,0),I=new Uint8Array(v),g=0;for(let U of $)I.set(U,g),g+=U.length;return I}function Qg($,...v){return $.pipeThrough(new TransformStream({start(I){for(let g of v)I.enqueue(g)}}))}function rz($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function x8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function pW($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function tW($,v){let I=$.getReader(),g=[],U=0;while(U<v){let{done:O,value:D}=await I.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");g.push(D),U+=D.length}I.releaseLock();let J=kI(g),z=J.subarray(0,v),G=Qg($,J.subarray(v));return{data:z,rest:G}}class gU{args;body;constructor($,v){this.args=$,this.body=v}}async function YR($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let I=v.split(" ");if(I.length<2||I.shift()!=="->")return{next:v};for(let J of I)if(J.length===0)throw Error("invalid stanza");let g=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let z=vv.decode(J);if(z.length>48)throw Error("invalid stanza");if(g.push(z),z.length<48)break}let U=kI(g);return{s:new gU(I,U)}}async function aW($){let v=new i8($),I=await v.readLine();if(I!=="age-encryption.org/v1")throw Error("invalid version "+(I??"line"));let g=[];for(;;){let{s:U,next:J}=await YR(v);if(U!==void 0){g.push(U);continue}if(!J.startsWith("--- "))throw Error("invalid header");let z=vv.decode(J.slice(4)),{rest:G,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:g,headerNoMAC:D,MAC:z,headerSize:O.length,rest:Qg($,G)}}}function c8($){let v=[];v.push(`age-encryption.org/v1
4
+ `)}function UY($){let v=new Map;for(let I of $){if(v.has(I.name))throw Error(`Duplicate command name: ${I.name}`);v.set(I.name,I)}return v}function DI($,v){let I=$[v];return typeof I==="string"?I:void 0}function VO($,v){let I=$[v];return typeof I==="boolean"?I:void 0}var kJ={name:"@rizom/ops",version:"0.2.0-alpha.242",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as HR,mkdirSync as AR,readFileSync as GD,writeFileSync as OD}from"fs";import{dirname as TR,join as z9}from"path";function jO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function f$($,v=""){if(typeof $!=="number"){let I=v&&`"${v}" `;throw TypeError(`${I}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let I=v&&`"${v}" `;throw RangeError(`${I}expected integer >= 0, got ${$}`)}}function x$($,v,I=""){let g=jO($),U=$?.length,J=v!==void 0;if(!g||J&&U!==v){let z=I&&`"${I}" `,G=J?` of length ${v}`:"",O=g?`length=${U}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!g)throw TypeError(D);throw RangeError(D)}return $}function YU($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(f$($.outputLen),f$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function oI($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function EJ($,v){x$($,void 0,"digestInto() output");let I=v.outputLen;if($.length<I)throw RangeError('"digestInto() output" expected to be of length >='+I)}function CJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Dv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function yI($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function Fv($,v){return $<<32-v|$>>>v}function R$($,v){return $<<v|$>>>32-v>>>0}var oM=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function yM($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function lM($){for(let v=0;v<$.length;v++)$[v]=yM($[v]);return $}var MO=oM?($)=>$:lM,gY=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),dM=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function BJ($){if(x$($),gY)return $.toHex();let v="";for(let I=0;I<$.length;I++)v+=dM[$[I]];return v}var wU={_0:48,_9:57,A:65,F:70,a:97,f:102};function IY($){if($>=wU._0&&$<=wU._9)return $-wU._0;if($>=wU.A&&$<=wU.F)return $-(wU.A-10);if($>=wU.a&&$<=wU.f)return $-(wU.a-10);return}function pg($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(gY)try{return Uint8Array.fromHex($)}catch(U){if(U instanceof SyntaxError)throw RangeError(U.message);throw U}let v=$.length,I=v/2;if(v%2)throw RangeError("hex string expected, got unpadded hex of length "+v);let g=new Uint8Array(I);for(let U=0,J=0;U<I;U++,J+=2){let z=IY($.charCodeAt(J)),G=IY($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw RangeError('hex string expected, got non-hex character "'+O+'" at index '+J)}g[U]=z*16+G}return g}function hM($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function rO($,v=""){if(typeof $==="string")return hM($);return x$($,void 0,v)}function RO(...$){let v=0;for(let g=0;g<$.length;g++){let U=$[g];x$(U),v+=U.length}let I=new Uint8Array(v);for(let g=0,U=0;g<$.length;g++){let J=$[g];I.set(J,U),U+=J.length}return I}function LJ($,v){if(v!==void 0&&{}.toString.call(v)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,v)}function uO($,v={}){let I=(U,J)=>$(J).update(U).digest(),g=$(void 0);return I.outputLen=g.outputLen,I.blockLen=g.blockLen,I.canXOF=g.canXOF,I.create=(U)=>$(U),Object.assign(I,v),Object.freeze(I)}function qU($=32){f$($,"bytesLength");let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return v.getRandomValues(new Uint8Array($))}var KO=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class HO{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,v){if(YU($),x$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let I=this.blockLen,g=new Uint8Array(I);g.set(v.length>I?$.create().update(v).digest():v);for(let U=0;U<g.length;U++)g[U]^=54;this.iHash.update(g),this.oHash=$.create();for(let U=0;U<g.length;U++)g[U]^=106;this.oHash.update(g),Dv(g)}update($){return oI(this),this.iHash.update($),this}digestInto($){oI(this),EJ($,this),this.finished=!0;let v=$.subarray(0,this.outputLen);this.iHash.digestInto(v),this.oHash.update(v),this.oHash.digestInto(v),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:I,finished:g,destroyed:U,blockLen:J,outputLen:z}=this;return $=$,$.finished=g,$.destroyed=U,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=I._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var tv=(()=>{let $=(v,I,g)=>new HO(v,I).update(g).digest();return $.create=(v,I)=>new HO(v,I),$})();function tg($,v,I){if(YU($),I===void 0)I=new Uint8Array($.outputLen);return tv($,I,v)}var AO=Uint8Array.of(0),JY=Uint8Array.of();function TO($,v,I,g=32){YU($),f$(g,"length"),x$(v,void 0,"prk");let U=$.outputLen;if(v.length<U)throw Error('"prk" must be at least HashLen octets');if(g>255*U)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(g/U);if(I===void 0)I=JY;else x$(I,void 0,"info");let z=new Uint8Array(J*U),G=tv.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)AO[0]=X+1,O.update(X===0?JY:D).update(I).update(AO).digestInto(D),z.set(D,U*X),G._cloneInto(O);return G.destroy(),O.destroy(),Dv(D,AO),z.slice(0,g)}var LU=($,v,I,g,U)=>TO($,tg($,v,I),g,U);function zY($,v,I){return $&v^~$&I}function GY($,v,I){return $&v^$&I^v&I}class fJ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,I,g){this.blockLen=$,this.outputLen=v,this.padOffset=I,this.isLE=g,this.buffer=new Uint8Array($),this.view=yI(this.buffer)}update($){oI(this),x$($);let{view:v,buffer:I,blockLen:g}=this,U=$.length;for(let J=0;J<U;){let z=Math.min(g-this.pos,U-J);if(z===g){let G=yI($);for(;g<=U-J;J+=g)this.process(G,J);continue}if(I.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===g)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){oI(this),EJ($,this),this.finished=!0;let{buffer:v,view:I,blockLen:g,isLE:U}=this,{pos:J}=this;if(v[J++]=128,Dv(this.buffer.subarray(J)),this.padOffset>g-J)this.process(I,0),J=0;for(let X=J;X<g;X++)v[X]=0;I.setBigUint64(g-8,BigInt(this.length*8),U),this.process(I,0);let z=yI($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],U)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let I=$.slice(0,v);return this.destroy(),I}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:I,length:g,finished:U,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=U,$.length=g,$.pos=z,g%v)$.buffer.set(I);return $}clone(){return this._cloneInto()}}var WU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),ZU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),c$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),o$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var _J=BigInt(4294967295),OY=BigInt(32);function pM($,v=!1){if(v)return{h:Number($&_J),l:Number($>>OY&_J)};return{h:Number($>>OY&_J)|0,l:Number($&_J)|0}}function DY($,v=!1){let I=$.length,g=new Uint32Array(I),U=new Uint32Array(I);for(let J=0;J<I;J++){let{h:z,l:G}=pM($[J],v);[g[J],U[J]]=[z,G]}return[g,U]}var SO=($,v,I)=>$>>>I,PO=($,v,I)=>$<<32-I|v>>>I,QI=($,v,I)=>$>>>I|v<<32-I,XI=($,v,I)=>$<<32-I|v>>>I,ag=($,v,I)=>$<<64-I|v>>>I-32,eg=($,v,I)=>$>>>I-32|v<<64-I;function av($,v,I,g){let U=(v>>>0)+(g>>>0);return{h:$+I+(U/4294967296|0)|0,l:U|0}}var QY=($,v,I)=>($>>>0)+(v>>>0)+(I>>>0),XY=($,v,I,g)=>v+I+g+($/4294967296|0)|0,NY=($,v,I,g)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0),wY=($,v,I,g,U)=>v+I+g+U+($/4294967296|0)|0,YY=($,v,I,g,U)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0)+(U>>>0),qY=($,v,I,g,U,J)=>v+I+g+U+J+($/4294967296|0)|0;var aM=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),fU=new Uint32Array(64);class kO extends fJ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:I,D:g,E:U,F:J,G:z,H:G}=this;return[$,v,I,g,U,J,z,G]}set($,v,I,g,U,J,z,G){this.A=$|0,this.B=v|0,this.C=I|0,this.D=g|0,this.E=U|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)fU[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=fU[X-15],Y=fU[X-2],w=Fv(N,7)^Fv(N,18)^N>>>3,W=Fv(Y,17)^Fv(Y,19)^Y>>>10;fU[X]=W+fU[X-7]+w+fU[X-16]|0}let{A:I,B:g,C:U,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=Fv(z,6)^Fv(z,11)^Fv(z,25),Y=D+N+zY(z,G,O)+aM[X]+fU[X]|0,W=(Fv(I,2)^Fv(I,13)^Fv(I,22))+GY(I,g,U)|0;D=O,O=G,G=z,z=J+Y|0,J=U,U=g,g=I,I=Y+W|0}I=I+this.A|0,g=g+this.B|0,U=U+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(I,g,U,J,z,G,O,D)}roundClean(){Dv(fU)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Dv(this.buffer)}}class WY extends kO{A=WU[0]|0;B=WU[1]|0;C=WU[2]|0;D=WU[3]|0;E=WU[4]|0;F=WU[5]|0;G=WU[6]|0;H=WU[7]|0;constructor(){super(32)}}class eM extends kO{A=ZU[0]|0;B=ZU[1]|0;C=ZU[2]|0;D=ZU[3]|0;E=ZU[4]|0;F=ZU[5]|0;G=ZU[6]|0;H=ZU[7]|0;constructor(){super(28)}}var ZY=(()=>DY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),sM=(()=>ZY[0])(),$r=(()=>ZY[1])(),_U=new Uint32Array(80),nU=new Uint32Array(80);class sg extends fJ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:I,Bl:g,Ch:U,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:Y,Gl:w,Hh:W,Hl:j}=this;return[$,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j]}set($,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j){this.Ah=$|0,this.Al=v|0,this.Bh=I|0,this.Bl=g|0,this.Ch=U|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=Y|0,this.Gl=w|0,this.Hh=W|0,this.Hl=j|0}process($,v){for(let u=0;u<16;u++,v+=4)_U[u]=$.getUint32(v),nU[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=_U[u-15]|0,L=nU[u-15]|0,i=QI(_,L,1)^QI(_,L,8)^SO(_,L,7),l=XI(_,L,1)^XI(_,L,8)^PO(_,L,7),h=_U[u-2]|0,n=nU[u-2]|0,b=QI(h,n,19)^ag(h,n,61)^SO(h,n,6),U$=XI(h,n,19)^eg(h,n,61)^PO(h,n,6),S=NY(l,U$,nU[u-7],nU[u-16]),K=wY(S,i,b,_U[u-7],_U[u-16]);_U[u]=K|0,nU[u]=S|0}let{Ah:I,Al:g,Bh:U,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:Y,Fl:w,Gh:W,Gl:j,Hh:Z,Hl:H}=this;for(let u=0;u<80;u++){let _=QI(X,N,14)^QI(X,N,18)^ag(X,N,41),L=XI(X,N,14)^XI(X,N,18)^eg(X,N,41),i=X&Y^~X&W,l=N&w^~N&j,h=YY(H,L,l,$r[u],nU[u]),n=qY(h,Z,_,i,sM[u],_U[u]),b=h|0,U$=QI(I,g,28)^ag(I,g,34)^ag(I,g,39),S=XI(I,g,28)^eg(I,g,34)^eg(I,g,39),K=I&U^I&z^U&z,P=g&J^g&G^J&G;Z=W|0,H=j|0,W=Y|0,j=w|0,Y=X|0,w=N|0,{h:X,l:N}=av(O|0,D|0,n|0,b|0),O=z|0,D=G|0,z=U|0,G=J|0,U=I|0,J=g|0;let V=QY(b,S,P);I=XY(V,n,U$,K),g=V|0}({h:I,l:g}=av(this.Ah|0,this.Al|0,I|0,g|0)),{h:U,l:J}=av(this.Bh|0,this.Bl|0,U|0,J|0),{h:z,l:G}=av(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=av(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=av(this.Eh|0,this.El|0,X|0,N|0),{h:Y,l:w}=av(this.Fh|0,this.Fl|0,Y|0,w|0),{h:W,l:j}=av(this.Gh|0,this.Gl|0,W|0,j|0),{h:Z,l:H}=av(this.Hh|0,this.Hl|0,Z|0,H|0),this.set(I,g,U,J,z,G,O,D,X,N,Y,w,W,j,Z,H)}roundClean(){Dv(_U,nU)}destroy(){this.destroyed=!0,Dv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class VY extends sg{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(64)}}class vr extends sg{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$v=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class Ur extends sg{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class Ir extends sg{Ah=$v[0]|0;Al=$v[1]|0;Bh=$v[2]|0;Bl=$v[3]|0;Ch=$v[4]|0;Cl=$v[5]|0;Dh=$v[6]|0;Dl=$v[7]|0;Eh=$v[8]|0;El=$v[9]|0;Fh=$v[10]|0;Fl=$v[11]|0;Gh=$v[12]|0;Gl=$v[13]|0;Hh=$v[14]|0;Hl=$v[15]|0;constructor(){super(32)}}var _$=uO(()=>new WY,KO(1));var nJ=uO(()=>new VY,KO(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function xJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function BO($){if(!xJ($))throw TypeError("Uint8Array expected")}function uY($,v){if(!Array.isArray(v))return!1;if(v.length===0)return!0;if($)return v.every((I)=>typeof I==="string");else return v.every((I)=>Number.isSafeInteger(I))}function KY($){if(typeof $!=="function")throw TypeError("function expected");return!0}function bU($,v){if(typeof v!=="string")throw TypeError(`${$}: string expected`);return!0}function v0($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function mJ($){if(!Array.isArray($))throw TypeError("array expected")}function FJ($,v){if(!uY(!0,v))throw TypeError(`${$}: array of strings expected`)}function LO($,v){if(!uY(!1,v))throw TypeError(`${$}: array of numbers expected`)}function Kv(...$){let v=(J)=>J,I=(J,z)=>(G)=>J(z(G)),g=$.map((J)=>J.encode).reduceRight(I,v),U=$.map((J)=>J.decode).reduce(I,v);return{encode:g,decode:U}}function Hv($){let v=typeof $==="string"?$.split(""):$,I=v.length;FJ("alphabet",v);let g=new Map(v.map((U,J)=>[U,J]));return{encode:(U)=>{return mJ(U),U.map((J)=>{if(!Number.isSafeInteger(J)||J<0||J>=I)throw Error(`alphabet.encode: digit index outside alphabet "${J}". Allowed: ${$}`);return v[J]})},decode:(U)=>{return mJ(U),U.map((J)=>{bU("alphabet.decode",J);let z=g.get(J);if(z===void 0)throw Error(`Unknown letter: "${J}". Allowed: ${$}`);return z})}}}function Av($=""){return bU("join",$),{encode:(v)=>{return FJ("join.decode",v),v.join($)},decode:(v)=>{return bU("join.decode",v),v.split($)}}}function cJ($,v="="){return v0($),bU("padding",v),{encode(I){FJ("padding.encode",I);while(I.length*$%8)I.push(v);return I},decode(I){FJ("padding.decode",I);let g=I.length;if(g*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;g>0&&I[g-1]===v;g--)if((g-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return I.slice(0,g)}}}function HY($){return KY($),{encode:(v)=>v,decode:(v)=>$(v)}}function jY($,v,I){if(v<2)throw RangeError(`convertRadix: invalid from=${v}, base cannot be less than 2`);if(I<2)throw RangeError(`convertRadix: invalid to=${I}, base cannot be less than 2`);if(mJ($),!$.length)return[];let g=0,U=[],J=Array.from($,(G)=>{if(v0(G),G<0||G>=v)throw Error(`invalid integer: ${G}`);return G}),z=J.length;while(!0){let G=0,O=!0;for(let D=g;D<z;D++){let X=J[D],N=v*G,Y=N+X;if(!Number.isSafeInteger(Y)||N/v!==G||Y-X!==N)throw Error("convertRadix: carry overflow");let w=Y/I;G=Y%I;let W=Math.floor(w);if(J[D]=W,!Number.isSafeInteger(W)||W*I+G!==Y)throw Error("convertRadix: carry overflow");if(!O)continue;else if(!W)g=D;else O=!1}if(U.push(G),O)break}for(let G=0;G<$.length-1&&$[G]===0;G++)U.push(0);return U.reverse()}var AY=($,v)=>v===0?$:AY(v,$%v),iJ=($,v)=>$+(v-AY($,v)),bJ=(()=>{let $=[];for(let v=0;v<40;v++)$.push(2**v);return $})();function EO($,v,I,g){if(mJ($),v<=0||v>32)throw RangeError(`convertRadix2: wrong from=${v}`);if(I<=0||I>32)throw RangeError(`convertRadix2: wrong to=${I}`);if(iJ(v,I)>32)throw Error(`convertRadix2: carry overflow from=${v} to=${I} carryBits=${iJ(v,I)}`);let U=0,J=0,z=bJ[v],G=bJ[I]-1,O=[];for(let D of $){if(v0(D),D>=z)throw Error(`convertRadix2: invalid data word=${D} from=${v}`);if(U=U<<v|D,J+v>32)throw Error(`convertRadix2: carry overflow pos=${J} from=${v}`);J+=v;for(;J>=I;J-=I)O.push((U>>J-I&G)>>>0);let X=bJ[J];if(X===void 0)throw Error("invalid carry");U&=X-1}if(U=U<<I-J&G,!g&&J>=v)throw Error("Excess padding");if(!g&&U>0)throw Error(`Non-zero padding: ${U}`);if(g&&J>0)O.push(U>>>0);return O}function gr($){v0($);let v=256;return{encode:(I)=>{if(!xJ(I))throw TypeError("radix.encode input should be Uint8Array");return jY(Array.from(I),v,$)},decode:(I)=>{return LO("radix.decode",I),Uint8Array.from(jY(I,$,v))}}}function Cv($,v=!1){if(v0($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(iJ(8,$)>32||iJ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(I)=>{if(!xJ(I))throw TypeError("radix2.encode input should be Uint8Array");return EO(Array.from(I),8,$,!v)},decode:(I)=>{return LO("radix2.decode",I),Uint8Array.from(EO(I,$,8,v))}}}function MY($){return KY($),function(...v){try{return $.apply(null,v)}catch(I){}}}var CA=Object.freeze(Kv(Cv(4),Hv("0123456789ABCDEF"),Av(""))),BA=Object.freeze(Kv(Cv(5),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),cJ(5),Av(""))),LA=Object.freeze(Kv(Cv(5),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Av(""))),fA=Object.freeze(Kv(Cv(5),Hv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),cJ(5),Av(""))),_A=Object.freeze(Kv(Cv(5),Hv("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Av(""))),nA=Object.freeze(Kv(Cv(5),Hv("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Av(""),HY(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),TY=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),Jr=/[\t\n\f\r ]/,SY=($,v)=>{bU("base64",$);let I=v?"base64url":"base64";if($.length>0&&Jr.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:I,lastChunkHandling:"strict"})},fO=Object.freeze(TY?{encode($){return BO($),$.toBase64()},decode($){return SY($,!1)}}:Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),cJ(6),Av(""))),vv=Object.freeze(Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Av(""))),bA=Object.freeze(TY?{encode($){return BO($),$.toBase64({alphabet:"base64url"})},decode($){return SY($,!0)}}:Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),cJ(6),Av(""))),mA=Object.freeze(Kv(Cv(6),Hv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Av(""))),_O=($)=>Kv(gr(58),Hv($),Av("")),FA=Object.freeze(_O("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),iA=Object.freeze(_O("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),xA=Object.freeze(_O("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var CO=Kv(Hv("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Av("")),rY=[996825010,642813549,513874426,1027748829,705979059];function $0($){let v=$>>25,I=($&33554431)<<5;for(let g=0;g<rY.length;g++)if((v>>g&1)===1)I^=rY[g];return I}function RY($,v,I=1){let g=$.length,U=1;for(let J=0;J<g;J++){let z=$.charCodeAt(J);if(z<33||z>126)throw Error(`Invalid prefix (${$})`);U=$0(U)^z>>5}U=$0(U);for(let J=0;J<g;J++)U=$0(U)^$.charCodeAt(J)&31;for(let J of v)U=$0(U)^J;for(let J=0;J<6;J++)U=$0(U);return U^=I,CO.encode(EO([U%bJ[30]],30,5,!1))}function PY($){let v=$==="bech32"?1:734539939,I=Cv(5),g=I.decode,U=I.encode,J=MY(g);function z(N,Y,w=90){if(bU("bech32.encode prefix",N),xJ(Y))Y=Array.from(Y);LO("bech32.encode",Y);let W=N.length;if(W===0)throw TypeError(`Invalid prefix length ${W}`);let j=W+7+Y.length;if(w!==!1&&j>w)throw TypeError(`Length ${j} exceeds limit ${w}`);let Z=N.toLowerCase(),H=RY(Z,Y,v);return`${Z}1${CO.encode(Y)}${H}`}function G(N,Y=90){bU("bech32.decode input",N);let w=N.length;if(w<8||Y!==!1&&w>Y)throw TypeError(`invalid string length: ${w} (${N}). Expected (8..${Y})`);let W=N.toLowerCase();if(N!==W&&N!==N.toUpperCase())throw Error("String must be lowercase or uppercase");let j=W.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let Z=W.slice(0,j),H=W.slice(j+1);if(H.length<6)throw Error("Data must be at least 6 characters long");let u=CO.decode(H).slice(0,-6),_=RY(Z,u,v);if(!H.endsWith(_))throw Error(`Invalid checksum in ${N}: expected "${_}"`);return{prefix:Z,words:u}}let O=MY(G);function D(N){let{prefix:Y,words:w}=G(N,!1);return{prefix:Y,words:w,bytes:g(w)}}function X(N,Y){return z(N,U(Y))}return{encode:z,decode:G,encodeFromBytes:X,decodeToBytes:D,decodeUnsafe:O,fromWords:g,fromWordsUnsafe:J,toWords:U}}var Tv=Object.freeze(PY("bech32")),cA=Object.freeze(PY("bech32m"));var zr=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Gr={encode($){return BO($),$.toHex()},decode($){return bU("hex",$),Uint8Array.fromHex($)}},oA=Object.freeze(zr?Gr:Kv(Cv(4),Hv("0123456789abcdef"),Av(""),HY(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function Dr($,v,I,g){YU($);let U=LJ({dkLen:32,asyncTick:10},g),{c:J,dkLen:z,asyncTick:G}=U;if(f$(J,"c"),f$(z,"dkLen"),f$(G,"asyncTick"),J<1)throw Error("iterations (c) must be >= 1");if(z<1)throw Error('"dkLen" must be >= 1');if(z>4294967295*$.outputLen)throw Error("derived key too long");let O=rO(v,"password"),D=rO(I,"salt"),X=new Uint8Array(z),N=tv.create($,O),Y=N._cloneInto().update(D);return{c:J,dkLen:z,asyncTick:G,DK:X,PRF:N,PRFSalt:Y}}function Qr($,v,I,g,U){if($.destroy(),v.destroy(),g)g.destroy();return Dv(U),I}function nO($,v,I,g){let{c:U,dkLen:J,DK:z,PRF:G,PRFSalt:O}=Dr($,v,I,g),D,X=new Uint8Array(4),N=yI(X),Y=new Uint8Array(G.outputLen);for(let w=1,W=0;W<J;w++,W+=G.outputLen){let j=z.subarray(W,W+G.outputLen);N.setInt32(0,w,!1),(D=O._cloneInto(D)).update(X).digestInto(Y),j.set(Y.subarray(0,j.length));for(let Z=1;Z<U;Z++){G._cloneInto(D).update(Y).digestInto(Y);for(let H=0;H<j.length;H++)j[H]^=Y[H]}}return Qr(G,O,z,D,Y)}function kY($,v,I,g,U,J){let z=$[v++]^I[g++],G=$[v++]^I[g++],O=$[v++]^I[g++],D=$[v++]^I[g++],X=$[v++]^I[g++],N=$[v++]^I[g++],Y=$[v++]^I[g++],w=$[v++]^I[g++],W=$[v++]^I[g++],j=$[v++]^I[g++],Z=$[v++]^I[g++],H=$[v++]^I[g++],u=$[v++]^I[g++],_=$[v++]^I[g++],L=$[v++]^I[g++],i=$[v++]^I[g++],l=z,h=G,n=O,b=D,U$=X,S=N,K=Y,P=w,V=W,r=j,M=Z,T=H,R=u,E=_,B=L,x=i;for(let s=0;s<8;s+=2)U$^=R$(l+R|0,7),V^=R$(U$+l|0,9),R^=R$(V+U$|0,13),l^=R$(R+V|0,18),r^=R$(S+h|0,7),E^=R$(r+S|0,9),h^=R$(E+r|0,13),S^=R$(h+E|0,18),B^=R$(M+K|0,7),n^=R$(B+M|0,9),K^=R$(n+B|0,13),M^=R$(K+n|0,18),b^=R$(x+T|0,7),P^=R$(b+x|0,9),T^=R$(P+b|0,13),x^=R$(T+P|0,18),h^=R$(l+b|0,7),n^=R$(h+l|0,9),b^=R$(n+h|0,13),l^=R$(b+n|0,18),K^=R$(S+U$|0,7),P^=R$(K+S|0,9),U$^=R$(P+K|0,13),S^=R$(U$+P|0,18),T^=R$(M+r|0,7),V^=R$(T+M|0,9),r^=R$(V+T|0,13),M^=R$(r+V|0,18),R^=R$(x+B|0,7),E^=R$(R+x|0,9),B^=R$(E+R|0,13),x^=R$(B+E|0,18);U[J++]=z+l|0,U[J++]=G+h|0,U[J++]=O+n|0,U[J++]=D+b|0,U[J++]=X+U$|0,U[J++]=N+S|0,U[J++]=Y+K|0,U[J++]=w+P|0,U[J++]=W+V|0,U[J++]=j+r|0,U[J++]=Z+M|0,U[J++]=H+T|0,U[J++]=u+R|0,U[J++]=_+E|0,U[J++]=L+B|0,U[J++]=i+x|0}function bO($,v,I,g,U){let J=g+0,z=g+16*U;for(let G=0;G<16;G++)I[z+G]=$[v+(2*U-1)*16+G];for(let G=0;G<U;G++,J+=16,v+=16){if(kY(I,z,$,v,I,J),G>0)z+=16;kY(I,J,$,v+=16,I,z)}}function Xr($,v,I){let g=LJ({dkLen:32,asyncTick:10,maxmem:1073742848},I),{N:U,r:J,p:z,dkLen:G,asyncTick:O,maxmem:D,onProgress:X}=g;if(f$(U,"N"),f$(J,"r"),f$(z,"p"),f$(G,"dkLen"),f$(O,"asyncTick"),f$(D,"maxmem"),X!==void 0&&typeof X!=="function")throw Error("progressCb must be a function");let N=128*J,Y=N/4,w=Math.pow(2,32);if(U<=1||(U&U-1)!==0||U>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(z<1||z>(w-1)*32/N)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(G<1||G>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let W=N*(U+z+1);if(W>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+W+", maxmem="+D);let j=nO(_$,$,v,{c:1,dkLen:N*z}),Z=CJ(j),H=CJ(new Uint8Array(N*U)),u=CJ(new Uint8Array(N)),_=()=>{};if(X){let L=2*U*z,i=Math.max(Math.floor(L/1e4),1),l=0;_=()=>{if(l++,X&&(!(l%i)||l===L))X(l/L)}}return{N:U,r:J,p:z,dkLen:G,blockSize32:Y,V:H,B32:Z,B:j,tmp:u,blockMixCb:_,asyncTick:O}}function Nr($,v,I,g,U){let J=nO(_$,$,I,{c:1,dkLen:v});return Dv(I,g,U),J}function mO($,v,I){let{N:g,r:U,p:J,dkLen:z,blockSize32:G,V:O,B32:D,B:X,tmp:N,blockMixCb:Y}=Xr($,v,I);MO(D);for(let w=0;w<J;w++){let W=G*w;for(let j=0;j<G;j++)O[j]=D[W+j];for(let j=0,Z=0;j<g-1;j++)bO(O,Z,O,Z+=G,U),Y();bO(O,(g-1)*G,D,W,U),Y();for(let j=0;j<g;j++){let Z=(D[W+G-16]&g-1)>>>0;for(let H=0;H<G;H++)N[H]=D[W+H]^O[Z*G+H];bO(N,0,D,W,U),Y()}}return MO(D),Nr($,z,X,O,N)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function wr($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function oJ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function lI($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,v,I=""){let g=wr($),U=$?.length,J=v!==void 0;if(!g||J&&U!==v){let z=I&&`"${I}" `,G=J?` of length ${v}`:"",O=g?`length=${U}`:`type=${typeof $}`,D=z+"expected Uint8Array"+G+", got "+O;if(!g)throw TypeError(D);throw RangeError(D)}return $}function FO($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function EY($,v,I=!1){b$($,void 0,"output");let g=v.outputLen;if($.length<g)throw RangeError("digestInto() expects output buffer of length at least "+g);if(I&&!dI($))throw Error("invalid output, must be aligned")}function ev($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function iv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function Yr($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var NI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),qr=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var Wr=($)=>{for(let v=0;v<$.length;v++)$[v]=qr($[v]);return $},VU=NI?($)=>$:Wr;function CY($,v){if(v==null||typeof v!=="object")throw Error("options must be defined");return Object.assign($,v)}function BY($,v){if($.length!==v.length)return!1;let I=0;for(let g=0;g<$.length;g++)I|=$[g]^v[g];return I===0}function LY($,v,I){let g=v,U=I||(()=>[]),J=(G,O)=>g(O,...U(G)).update(G).digest(),z=g(new Uint8Array($),...U(new Uint8Array(0)));return J.outputLen=z.outputLen,J.blockLen=z.blockLen,J.create=(G,...O)=>g(G,...O),J}var fY=($,v)=>{function I(g,...U){if(b$(g,void 0,"key"),$.nonceLength!==void 0){let X=U[0];b$(X,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let J=$.tagLength;if(J&&U[1]!==void 0)b$(U[1],void 0,"AAD");let z=v(g,...U),G=(X,N)=>{if(N!==void 0){if(X!==2)throw Error("cipher output not supported");b$(N,void 0,"output")}},O=!1;return{encrypt(X,N){if(O)throw Error("cannot encrypt() twice with same key + nonce");return O=!0,b$(X),G(z.encrypt.length,N),z.encrypt(X,N)},decrypt(X,N){if(b$(X),J&&X.length<J)throw Error('"ciphertext" expected length bigger than tagLength='+J);return G(z.decrypt.length,N),z.decrypt(X,N)}}}return Object.assign(I,$),I};function U0($,v,I=!0){if(v===void 0)return new Uint8Array($);if(b$(v,void 0,"output"),v.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+v.length);if(I&&!dI(v))throw Error("invalid output, must be aligned");return v}function _Y($,v,I){lI($),lI(v),oJ(I);let g=new Uint8Array(16),U=Yr(g);return U.setBigUint64(0,BigInt(v),I),U.setBigUint64(8,BigInt($),I),g}function dI($){return $.byteOffset%4===0}function hI($){return Uint8Array.from(b$($))}var bY=($)=>Uint8Array.from($.split(""),(v)=>v.charCodeAt(0)),Zr=(()=>VU(ev(bY("expand 16-byte k"))))(),Vr=(()=>VU(ev(bY("expand 32-byte k"))))();function u$($,v){return $<<v|$>>>32-v}var I0=64,jr=16,iO=(()=>4294967295)(),nY=Uint32Array.of();function Mr($,v,I,g,U,J,z,G){let O=U.length,D=new Uint8Array(I0),X=ev(D),N=NI&&dI(U)&&dI(J),Y=N?ev(U):nY,w=N?ev(J):nY;if(!NI){for(let W=0;W<O;z++){if($(v,I,g,X,z,G),VU(X),z>=iO)throw Error("arx: counter overflow");let j=Math.min(I0,O-W);for(let Z=0,H;Z<j;Z++)H=W+Z,J[H]=U[H]^D[Z];W+=j}return}for(let W=0;W<O;z++){if($(v,I,g,X,z,G),z>=iO)throw Error("arx: counter overflow");let j=Math.min(I0,O-W);if(N&&j===I0){let Z=W/4;if(W%4!==0)throw Error("arx: invalid block position");for(let H=0,u;H<jr;H++)u=Z+H,w[u]=Y[u]^X[H];W+=I0;continue}for(let Z=0,H;Z<j;Z++)H=W+Z,J[H]=U[H]^D[Z];W+=j}}function mY($,v){let{allowShortKeys:I,extendNonceFn:g,counterLength:U,counterRight:J,rounds:z}=CY({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},v);if(typeof $!=="function")throw Error("core must be a function");return lI(U),lI(z),oJ(J),oJ(I),(G,O,D,X,N=0)=>{b$(G,void 0,"key"),b$(O,void 0,"nonce"),b$(D,void 0,"data");let Y=D.length;if(X=U0(Y,X,!1),lI(N),N<0||N>=iO)throw Error("arx: counter overflow");let w=[],W=G.length,j,Z;if(W===32)w.push(j=hI(G)),Z=Vr;else if(W===16&&I)j=new Uint8Array(32),j.set(G),j.set(G,16),Z=Zr,w.push(j);else throw b$(G,32,"arx key"),Error("invalid key size");if(!NI||!dI(O))w.push(O=hI(O));let H=ev(j);if(g){if(O.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=O.subarray(0,16);if(NI)g(Z,H,ev(L),H);else{let i=VU(Uint32Array.from(Z));g(i,H,ev(L),H),iv(i),VU(H)}O=O.subarray(16)}else if(!NI)VU(H);let u=16-U;if(u!==O.length)throw Error(`arx: nonce must be ${u} or 16 bytes`);if(u!==12){let L=new Uint8Array(12);L.set(O,J?0:12-O.length),O=L,w.push(O)}let _=VU(ev(O));try{return Mr($,Z,H,_,D,X,N,z),X}finally{iv(...w)}}}function y$($,v){return $[v++]&255|($[v++]&255)<<8}class FY{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=hI(b$($,32,"key"));let v=y$($,0),I=y$($,2),g=y$($,4),U=y$($,6),J=y$($,8),z=y$($,10),G=y$($,12),O=y$($,14);this.r[0]=v&8191,this.r[1]=(v>>>13|I<<3)&8191,this.r[2]=(I>>>10|g<<6)&7939,this.r[3]=(g>>>7|U<<9)&8191,this.r[4]=(U>>>4|J<<12)&255,this.r[5]=J>>>1&8190,this.r[6]=(J>>>14|z<<2)&8191,this.r[7]=(z>>>11|G<<5)&8065,this.r[8]=(G>>>8|O<<8)&8191,this.r[9]=O>>>5&127;for(let D=0;D<8;D++)this.pad[D]=y$($,16+2*D)}process($,v,I=!1){let g=I?0:2048,{h:U,r:J}=this,z=J[0],G=J[1],O=J[2],D=J[3],X=J[4],N=J[5],Y=J[6],w=J[7],W=J[8],j=J[9],Z=y$($,v+0),H=y$($,v+2),u=y$($,v+4),_=y$($,v+6),L=y$($,v+8),i=y$($,v+10),l=y$($,v+12),h=y$($,v+14),n=U[0]+(Z&8191),b=U[1]+((Z>>>13|H<<3)&8191),U$=U[2]+((H>>>10|u<<6)&8191),S=U[3]+((u>>>7|_<<9)&8191),K=U[4]+((_>>>4|L<<12)&8191),P=U[5]+(L>>>1&8191),V=U[6]+((L>>>14|i<<2)&8191),r=U[7]+((i>>>11|l<<5)&8191),M=U[8]+((l>>>8|h<<8)&8191),T=U[9]+(h>>>5|g),R=0,E=R+n*z+b*(5*j)+U$*(5*W)+S*(5*w)+K*(5*Y);R=E>>>13,E&=8191,E+=P*(5*N)+V*(5*X)+r*(5*D)+M*(5*O)+T*(5*G),R+=E>>>13,E&=8191;let B=R+n*G+b*z+U$*(5*j)+S*(5*W)+K*(5*w);R=B>>>13,B&=8191,B+=P*(5*Y)+V*(5*N)+r*(5*X)+M*(5*D)+T*(5*O),R+=B>>>13,B&=8191;let x=R+n*O+b*G+U$*z+S*(5*j)+K*(5*W);R=x>>>13,x&=8191,x+=P*(5*w)+V*(5*Y)+r*(5*N)+M*(5*X)+T*(5*D),R+=x>>>13,x&=8191;let s=R+n*D+b*O+U$*G+S*z+K*(5*j);R=s>>>13,s&=8191,s+=P*(5*W)+V*(5*w)+r*(5*Y)+M*(5*N)+T*(5*X),R+=s>>>13,s&=8191;let J$=R+n*X+b*D+U$*O+S*G+K*z;R=J$>>>13,J$&=8191,J$+=P*(5*j)+V*(5*W)+r*(5*w)+M*(5*Y)+T*(5*N),R+=J$>>>13,J$&=8191;let G$=R+n*N+b*X+U$*D+S*O+K*G;R=G$>>>13,G$&=8191,G$+=P*z+V*(5*j)+r*(5*W)+M*(5*w)+T*(5*Y),R+=G$>>>13,G$&=8191;let Q$=R+n*Y+b*N+U$*X+S*D+K*O;R=Q$>>>13,Q$&=8191,Q$+=P*G+V*z+r*(5*j)+M*(5*W)+T*(5*w),R+=Q$>>>13,Q$&=8191;let w$=R+n*w+b*Y+U$*N+S*X+K*D;R=w$>>>13,w$&=8191,w$+=P*O+V*G+r*z+M*(5*j)+T*(5*W),R+=w$>>>13,w$&=8191;let X$=R+n*W+b*w+U$*Y+S*N+K*X;R=X$>>>13,X$&=8191,X$+=P*D+V*O+r*G+M*z+T*(5*j),R+=X$>>>13,X$&=8191;let N$=R+n*j+b*W+U$*w+S*Y+K*N;R=N$>>>13,N$&=8191,N$+=P*X+V*D+r*O+M*G+T*z,R+=N$>>>13,N$&=8191,R=(R<<2)+R|0,R=R+E|0,E=R&8191,R=R>>>13,B+=R,U[0]=E,U[1]=B,U[2]=x,U[3]=s,U[4]=J$,U[5]=G$,U[6]=Q$,U[7]=w$,U[8]=X$,U[9]=N$}finalize(){let{h:$,pad:v}=this,I=new Uint16Array(10),g=$[1]>>>13;$[1]&=8191;for(let z=2;z<10;z++)$[z]+=g,g=$[z]>>>13,$[z]&=8191;$[0]+=g*5,g=$[0]>>>13,$[0]&=8191,$[1]+=g,g=$[1]>>>13,$[1]&=8191,$[2]+=g,I[0]=$[0]+5,g=I[0]>>>13,I[0]&=8191;for(let z=1;z<10;z++)I[z]=$[z]+g,g=I[z]>>>13,I[z]&=8191;I[9]-=8192;let U=(g^1)-1;for(let z=0;z<10;z++)I[z]&=U;U=~U;for(let z=0;z<10;z++)$[z]=$[z]&U|I[z];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let J=$[0]+v[0];$[0]=J&65535;for(let z=1;z<8;z++)J=($[z]+v[z]|0)+(J>>>16)|0,$[z]=J&65535;iv(I)}update($){FO(this),b$($),$=hI($);let{buffer:v,blockLen:I}=this,g=$.length;for(let U=0;U<g;){let J=Math.min(I-this.pos,g-U);if(J===I){for(;I<=g-U;U+=I)this.process($,U);continue}if(v.set($.subarray(U,U+J),this.pos),this.pos+=J,U+=J,this.pos===I)this.process(v,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,iv(this.h,this.r,this.buffer,this.pad)}digestInto($){FO(this),EY($,this),this.finished=!0;let{buffer:v,h:I}=this,{pos:g}=this;if(g){v[g++]=1;for(;g<16;g++)v[g]=0;this.process(v,0,!0)}this.finalize();let U=0;for(let J=0;J<8;J++)$[U++]=I[J]>>>0,$[U++]=I[J]>>>8}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let I=$.slice(0,v);return this.destroy(),I}}var iY=LY(32,($)=>new FY($));function rr($,v,I,g,U,J=20){let z=$[0],G=$[1],O=$[2],D=$[3],X=v[0],N=v[1],Y=v[2],w=v[3],W=v[4],j=v[5],Z=v[6],H=v[7],u=U,_=I[0],L=I[1],i=I[2],l=z,h=G,n=O,b=D,U$=X,S=N,K=Y,P=w,V=W,r=j,M=Z,T=H,R=u,E=_,B=L,x=i;for(let J$=0;J$<J;J$+=2)l=l+U$|0,R=u$(R^l,16),V=V+R|0,U$=u$(U$^V,12),l=l+U$|0,R=u$(R^l,8),V=V+R|0,U$=u$(U$^V,7),h=h+S|0,E=u$(E^h,16),r=r+E|0,S=u$(S^r,12),h=h+S|0,E=u$(E^h,8),r=r+E|0,S=u$(S^r,7),n=n+K|0,B=u$(B^n,16),M=M+B|0,K=u$(K^M,12),n=n+K|0,B=u$(B^n,8),M=M+B|0,K=u$(K^M,7),b=b+P|0,x=u$(x^b,16),T=T+x|0,P=u$(P^T,12),b=b+P|0,x=u$(x^b,8),T=T+x|0,P=u$(P^T,7),l=l+S|0,x=u$(x^l,16),M=M+x|0,S=u$(S^M,12),l=l+S|0,x=u$(x^l,8),M=M+x|0,S=u$(S^M,7),h=h+K|0,R=u$(R^h,16),T=T+R|0,K=u$(K^T,12),h=h+K|0,R=u$(R^h,8),T=T+R|0,K=u$(K^T,7),n=n+P|0,E=u$(E^n,16),V=V+E|0,P=u$(P^V,12),n=n+P|0,E=u$(E^n,8),V=V+E|0,P=u$(P^V,7),b=b+U$|0,B=u$(B^b,16),r=r+B|0,U$=u$(U$^r,12),b=b+U$|0,B=u$(B^b,8),r=r+B|0,U$=u$(U$^r,7);let s=0;g[s++]=z+l|0,g[s++]=G+h|0,g[s++]=O+n|0,g[s++]=D+b|0,g[s++]=X+U$|0,g[s++]=N+S|0,g[s++]=Y+K|0,g[s++]=w+P|0,g[s++]=W+V|0,g[s++]=j+r|0,g[s++]=Z+M|0,g[s++]=H+T|0,g[s++]=u+R|0,g[s++]=_+E|0,g[s++]=L+B|0,g[s++]=i+x|0}var Rr=mY(rr,{counterRight:!1,counterLength:4,allowShortKeys:!1});var ur=new Uint8Array(16),xY=($,v)=>{$.update(v);let I=v.length%16;if(I)$.update(ur.subarray(I))},Kr=new Uint8Array(32);function cY($,v,I,g,U){if(U!==void 0)b$(U,void 0,"AAD");let J=$(v,I,Kr),z=_Y(g.length,U?U.length:0,!0),G=iY.create(J);if(U)xY(G,U);xY(G,g),G.update(z);let O=G.digest();return iv(J,z),O}var Hr=($)=>(v,I,g)=>{return{encrypt(J,z){let G=J.length;z=U0(G+16,z,!1),z.set(J);let O=z.subarray(0,-16);$(v,I,O,O,1);let D=cY($,v,I,O,g);return z.set(D,G),iv(D),z},decrypt(J,z){z=U0(J.length-16,z,!1);let G=J.subarray(0,-16),O=J.subarray(-16),D=cY($,v,I,G,g);if(!BY(O,D))throw iv(D),Error("invalid tag");return z.set(J.subarray(0,-16)),$(v,I,z,z,1),iv(D),z}}},Bv=fY({blockSize:64,nonceLength:12,tagLength:16},Hr(Rr));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function pI($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function F$($,v=""){if(!Number.isSafeInteger($)||$<0){let I=v&&`"${v}" `;throw Error(`${I}expected integer >= 0, got ${$}`)}}function q$($,v,I=""){let g=pI($),U=$?.length,J=v!==void 0;if(!g||J&&U!==v){let z=I&&`"${I}" `,G=J?` of length ${v}`:"",O=g?`length=${U}`:`type=${typeof $}`;throw Error(z+"expected Uint8Array"+G+", got "+O)}return $}function Lv($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");F$($.outputLen),F$($.blockLen)}function MU($,v=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(v&&$.finished)throw Error("Hash#digest() has already been called")}function yJ($,v){q$($,void 0,"digestInto() output");let I=v.outputLen;if($.length<I)throw Error('"digestInto() output" expected to be of length >='+I)}function lJ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function jv(...$){for(let v=0;v<$.length;v++)$[v].fill(0)}function dJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function xv($,v){return $<<32-v|$>>>v}var Ar=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Tr($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function Sr($){for(let v=0;v<$.length;v++)$[v]=Tr($[v]);return $}var xO=Ar?($)=>$:Sr,yY=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Pr=Array.from({length:256},($,v)=>v.toString(16).padStart(2,"0"));function wI($){if(q$($),yY)return $.toHex();let v="";for(let I=0;I<$.length;I++)v+=Pr[$[I]];return v}var jU={_0:48,_9:57,A:65,F:70,a:97,f:102};function oY($){if($>=jU._0&&$<=jU._9)return $-jU._0;if($>=jU.A&&$<=jU.F)return $-(jU.A-10);if($>=jU.a&&$<=jU.f)return $-(jU.a-10);return}function YI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(yY)return Uint8Array.fromHex($);let v=$.length,I=v/2;if(v%2)throw Error("hex string expected, got unpadded hex of length "+v);let g=new Uint8Array(I);for(let U=0,J=0;U<I;U++,J+=2){let z=oY($.charCodeAt(J)),G=oY($.charCodeAt(J+1));if(z===void 0||G===void 0){let O=$[J]+$[J+1];throw Error('hex string expected, got non-hex character "'+O+'" at index '+J)}g[U]=z*16+G}return g}function n$(...$){let v=0;for(let g=0;g<$.length;g++){let U=$[g];q$(U),v+=U.length}let I=new Uint8Array(v);for(let g=0,U=0;g<$.length;g++){let J=$[g];I.set(J,U),U+=J.length}return I}function tI($,v={}){let I=(U,J)=>$(J).update(U).digest(),g=$(void 0);return I.outputLen=g.outputLen,I.blockLen=g.blockLen,I.create=(U)=>$(U),Object.assign(I,v),Object.freeze(I)}function mU($=32){let v=typeof globalThis==="object"?globalThis.crypto:null;if(typeof v?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return v.getRandomValues(new Uint8Array($))}var FU=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var oO=BigInt(0),cO=BigInt(1);function g0($,v=""){if(typeof $!=="boolean"){let I=v&&`"${v}" `;throw Error(I+"expected boolean, got type="+typeof $)}return $}function lY($){if(typeof $==="bigint"){if(!hJ($))throw Error("positive bigint expected, got "+$)}else F$($);return $}function J0($){let v=lY($).toString(16);return v.length&1?"0"+v:v}function dY($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?oO:BigInt("0x"+$)}function iU($){return dY(wI($))}function xU($){return dY(wI(pJ(q$($)).reverse()))}function aI($,v){F$(v),$=lY($);let I=YI($.toString(16).padStart(v*2,"0"));if(I.length!==v)throw Error("number too large");return I}function z0($,v){return aI($,v).reverse()}function pJ($){return Uint8Array.from($)}function cU($){return Uint8Array.from($,(v,I)=>{let g=v.charCodeAt(0);if(v.length!==1||g>127)throw Error(`string contains non-ASCII character "${$[I]}" with code ${g} at position ${I}`);return g})}var hJ=($)=>typeof $==="bigint"&&oO<=$;function kr($,v,I){return hJ($)&&hJ(v)&&hJ(I)&&v<=$&&$<I}function G0($,v,I,g){if(!kr(v,I,g))throw Error("expected valid "+$+": "+I+" <= n < "+g+", got "+v)}function yO($){let v;for(v=0;$>oO;$>>=cO,v+=1);return v}var O0=($)=>(cO<<BigInt($))-cO;function hY($,v,I){if(F$($,"hashLen"),F$(v,"qByteLen"),typeof I!=="function")throw Error("hmacFn must be a function");let g=(Z)=>new Uint8Array(Z),U=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=g($),D=g($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},Y=(...Z)=>I(D,n$(O,...Z)),w=(Z=U)=>{if(D=Y(J,Z),O=Y(),Z.length===0)return;D=Y(z,Z),O=Y()},W=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let Z=0,H=[];while(Z<v){O=Y();let u=O.slice();H.push(u),Z+=O.length}return n$(...H)};return(Z,H)=>{N(),w(Z);let u=void 0;while(!(u=H(W())))w();return N(),u}}function qI($,v={},I={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function g(J,z,G){let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw Error(`param "${J}" is invalid: expected ${z}, got ${D}`)}let U=(J,z)=>Object.entries(J).forEach(([G,O])=>g(G,O,z));U(v,!1),U(I,!0)}function lO($){let v=new WeakMap;return(I,...g)=>{let U=v.get(I);if(U!==void 0)return U;let J=$(I,...g);return v.set(I,J),J}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Xv=BigInt(0),Uv=BigInt(1),WI=BigInt(2),aY=BigInt(3),eY=BigInt(4),sY=BigInt(5),Er=BigInt(7),$q=BigInt(8),Cr=BigInt(9),vq=BigInt(16);function Qv($,v){let I=$%v;return I>=Xv?I:v+I}function fv($,v,I){let g=$;while(v-- >Xv)g*=g,g%=I;return g}function pY($,v){if($===Xv)throw Error("invert: expected non-zero number");if(v<=Xv)throw Error("invert: expected positive modulus, got "+v);let I=Qv($,v),g=v,U=Xv,J=Uv,z=Uv,G=Xv;while(I!==Xv){let D=g/I,X=g%I,N=U-z*D,Y=J-G*D;g=I,I=X,U=z,J=G,z=N,G=Y}if(g!==Uv)throw Error("invert: does not exist");return Qv(U,v)}function dO($,v,I){if(!$.eql($.sqr(v),I))throw Error("Cannot find square root")}function Uq($,v){let I=($.ORDER+Uv)/eY,g=$.pow(v,I);return dO($,g,v),g}function Br($,v){let I=($.ORDER-sY)/$q,g=$.mul(v,WI),U=$.pow(g,I),J=$.mul(v,U),z=$.mul($.mul(J,WI),U),G=$.mul(J,$.sub(z,$.ONE));return dO($,G,v),G}function Lr($){let v=tJ($),I=Iq($),g=I(v,v.neg(v.ONE)),U=I(v,g),J=I(v,v.neg(g)),z=($+Er)/vq;return(G,O)=>{let D=G.pow(O,z),X=G.mul(D,g),N=G.mul(D,U),Y=G.mul(D,J),w=G.eql(G.sqr(X),O),W=G.eql(G.sqr(N),O);D=G.cmov(D,X,w),X=G.cmov(Y,N,W);let j=G.eql(G.sqr(X),O),Z=G.cmov(D,X,j);return dO(G,Z,O),Z}}function Iq($){if($<aY)throw Error("sqrt is not defined for small field");let v=$-Uv,I=0;while(v%WI===Xv)v/=WI,I++;let g=WI,U=tJ($);while(tY(U,g)===1)if(g++>1000)throw Error("Cannot find square root: probably non-prime P");if(I===1)return Uq;let J=U.pow(g,v),z=(v+Uv)/WI;return function(O,D){if(O.is0(D))return D;if(tY(O,D)!==1)throw Error("Cannot find square root");let X=I,N=O.mul(O.ONE,J),Y=O.pow(D,v),w=O.pow(D,z);while(!O.eql(Y,O.ONE)){if(O.is0(Y))return O.ZERO;let W=1,j=O.sqr(Y);while(!O.eql(j,O.ONE))if(W++,j=O.sqr(j),W===X)throw Error("Cannot find square root");let Z=Uv<<BigInt(X-W-1),H=O.pow(N,Z);X=W,N=O.sqr(H),Y=O.mul(Y,N),w=O.mul(w,H)}return w}}function fr($){if($%eY===aY)return Uq;if($%$q===sY)return Br;if($%vq===Cr)return Lr($);return Iq($)}var _r=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function hO($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},I=_r.reduce((g,U)=>{return g[U]="function",g},v);return qI($,I),$}function nr($,v,I){if(I<Xv)throw Error("invalid exponent, negatives unsupported");if(I===Xv)return $.ONE;if(I===Uv)return v;let g=$.ONE,U=v;while(I>Xv){if(I&Uv)g=$.mul(g,U);U=$.sqr(U),I>>=Uv}return g}function D0($,v,I=!1){let g=Array(v.length).fill(I?$.ZERO:void 0),U=v.reduce((z,G,O)=>{if($.is0(G))return z;return g[O]=z,$.mul(z,G)},$.ONE),J=$.inv(U);return v.reduceRight((z,G,O)=>{if($.is0(G))return z;return g[O]=$.mul(z,g[O]),$.mul(z,G)},J),g}function tY($,v){let I=($.ORDER-Uv)/WI,g=$.pow(v,I),U=$.eql(g,$.ONE),J=$.eql(g,$.ZERO),z=$.eql(g,$.neg($.ONE));if(!U&&!J&&!z)throw Error("invalid Legendre symbol result");return U?1:J?0:-1}function br($,v){if(v!==void 0)F$(v);let I=v!==void 0?v:$.toString(2).length,g=Math.ceil(I/8);return{nBitLength:I,nByteLength:g}}class gq{ORDER;BITS;BYTES;isLE;ZERO=Xv;ONE=Uv;_lengths;_sqrt;_mod;constructor($,v={}){if($<=Xv)throw Error("invalid field: expected ORDER > 0, got "+$);let I=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")I=v.BITS;if(typeof v.sqrt==="function")this.sqrt=v.sqrt;if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=v.allowedLengths?.slice();if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:g,nByteLength:U}=br($,I);if(U>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=g,this.BYTES=U,this._sqrt=void 0,Object.preventExtensions(this)}create($){return Qv($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return Xv<=$&&$<this.ORDER}is0($){return $===Xv}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&Uv)===Uv}neg($){return Qv(-$,this.ORDER)}eql($,v){return $===v}sqr($){return Qv($*$,this.ORDER)}add($,v){return Qv($+v,this.ORDER)}sub($,v){return Qv($-v,this.ORDER)}mul($,v){return Qv($*v,this.ORDER)}pow($,v){return nr(this,$,v)}div($,v){return Qv($*pY(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return pY($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=fr(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?z0($,this.BYTES):aI($,this.BYTES)}fromBytes($,v=!1){q$($);let{_lengths:I,BYTES:g,isLE:U,ORDER:J,_mod:z}=this;if(I){if(!I.includes($.length)||$.length>g)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let O=new Uint8Array(g);O.set($,U?0:O.length-$.length),$=O}if($.length!==g)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let G=U?xU($):iU($);if(z)G=Qv(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return D0(this,$)}cmov($,v,I){return I?v:$}}function tJ($,v={}){return new gq($,v)}function Jq($){if(typeof $!=="bigint")throw Error("field order must be bigint");let v=$.toString(2).length;return Math.ceil(v/8)}function pO($){let v=Jq($);return v+Math.ceil(v/2)}function zq($,v,I=!1){q$($);let g=$.length,U=Jq(v),J=pO(v);if(g<16||g<J||g>1024)throw Error("expected "+J+"-1024 bytes of input, got "+g);let z=I?xU($):iU($),G=Qv(z,v-Uv)+Uv;return I?z0(G,U):aI(G,U)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var eI=BigInt(0),ZI=BigInt(1);function Q0($,v){let I=v.negate();return $?I:v}function sO($,v){let I=D0($.Fp,v.map((g)=>g.Z));return v.map((g,U)=>$.fromAffine(g.toAffine(I[U])))}function Qq($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function tO($,v){Qq($,v);let I=Math.ceil(v/$)+1,g=2**($-1),U=2**$,J=O0($),z=BigInt($);return{windows:I,windowSize:g,mask:J,maxNumber:U,shiftBy:z}}function Gq($,v,I){let{windowSize:g,mask:U,maxNumber:J,shiftBy:z}=I,G=Number($&U),O=$>>z;if(G>g)G-=J,O+=ZI;let D=v*g,X=D+Math.abs(G)-1,N=G===0,Y=G<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:Y,isNegF:w,offsetF:D}}var aO=new WeakMap,Xq=new WeakMap;function eO($){return Xq.get($)||1}function Oq($){if($!==eI)throw Error("invalid wNAF")}class $8{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,I=this.ZERO){let g=$;while(v>eI){if(v&ZI)I=I.add(g);g=g.double(),v>>=ZI}return I}precomputeWindow($,v){let{windows:I,windowSize:g}=tO(v,this.bits),U=[],J=$,z=J;for(let G=0;G<I;G++){z=J,U.push(z);for(let O=1;O<g;O++)z=z.add(J),U.push(z);J=z.double()}return U}wNAF($,v,I){if(!this.Fn.isValid(I))throw Error("invalid scalar");let g=this.ZERO,U=this.BASE,J=tO($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:Y}=Gq(I,z,J);if(I=G,D)U=U.add(Q0(N,v[Y]));else g=g.add(Q0(X,v[O]))}return Oq(I),{p:g,f:U}}wNAFUnsafe($,v,I,g=this.ZERO){let U=tO($,this.bits);for(let J=0;J<U.windows;J++){if(I===eI)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=Gq(I,J,U);if(I=z,O)continue;else{let X=v[G];g=g.add(D?X.negate():X)}}return Oq(I),g}getPrecomputes($,v,I){let g=aO.get(v);if(!g){if(g=this.precomputeWindow(v,$),$!==1){if(typeof I==="function")g=I(g);aO.set(v,g)}}return g}cached($,v,I){let g=eO($);return this.wNAF(g,this.getPrecomputes(g,$,I),v)}unsafe($,v,I,g){let U=eO($);if(U===1)return this._unsafeLadder($,v,g);return this.wNAFUnsafe(U,this.getPrecomputes(U,$,I),v,g)}createCache($,v){Qq(v,this.bits),Xq.set($,v),aO.delete($)}hasCache($){return eO($)!==1}}function Nq($,v,I,g){let U=v,J=$.ZERO,z=$.ZERO;while(I>eI||g>eI){if(I&ZI)J=J.add(U);if(g&ZI)z=z.add(U);U=U.double(),I>>=ZI,g>>=ZI}return{p1:J,p2:z}}function Dq($,v,I){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return hO(v),v}else return tJ($,{isLE:I})}function wq($,v,I={},g){if(g===void 0)g=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>eI))throw Error(`CURVE.${O} must be positive bigint`)}let U=Dq(v.p,I.Fp,g),J=Dq(v.n,I.Fn,g),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!U.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:U,Fn:J}}function aJ($,v){return function(g){let U=$(g);return{secretKey:U,publicKey:v(U)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var X0=BigInt(0),sI=BigInt(1),eJ=BigInt(2);function mr($){return qI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function Yq($){let v=mr($),{P:I,type:g,adjustScalarBytes:U,powPminus2:J,randomBytes:z}=v,G=g==="x25519";if(!G&&g!=="x448")throw Error("invalid type");let O=z||mU,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),Y=G?BigInt(121665):BigInt(39081),w=G?eJ**BigInt(254):eJ**BigInt(447),W=G?BigInt(8)*eJ**BigInt(251)-sI:BigInt(4)*eJ**BigInt(445)-sI,j=w+W+sI,Z=(V)=>Qv(V,I),H=u(N);function u(V){return z0(Z(V),X)}function _(V){let r=pJ(q$(V,X,"uCoordinate"));if(G)r[31]&=127;return Z(xU(r))}function L(V){return xU(U(pJ(q$(V,X,"scalar"))))}function i(V,r){let M=U$(_(r),L(V));if(M===X0)throw Error("invalid private or public key received");return u(M)}function l(V){return i(V,H)}let h=l,n=i;function b(V,r,M){let T=Z(V*(r-M));return r=Z(r-T),M=Z(M+T),{x_2:r,x_3:M}}function U$(V,r){G0("u",V,X0,I),G0("scalar",r,w,j);let M=r,T=V,R=sI,E=X0,B=V,x=sI,s=X0;for(let G$=BigInt(D-1);G$>=X0;G$--){let Q$=M>>G$&sI;s^=Q$,{x_2:R,x_3:B}=b(s,R,B),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let w$=R+E,X$=Z(w$*w$),N$=R-E,Z$=Z(N$*N$),P$=X$-Z$,E$=B+x,a$=B-x,e$=Z(a$*w$),Vv=Z(E$*N$),dv=e$+Vv,hv=e$-Vv;B=Z(dv*dv),x=Z(T*Z(hv*hv)),R=Z(X$*Z$),E=Z(P$*(X$+Z(Y*P$)))}({x_2:R,x_3:B}=b(s,R,B)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return Z(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V=O(X))=>{return q$(V,S.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze({keygen:aJ(K,h),getSharedSecret:n,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:P,GuBytes:H.slice(),lengths:S})}class v8{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,v){if(Lv($),q$(v,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let I=this.blockLen,g=new Uint8Array(I);g.set(v.length>I?$.create().update(v).digest():v);for(let U=0;U<g.length;U++)g[U]^=54;this.iHash.update(g),this.oHash=$.create();for(let U=0;U<g.length;U++)g[U]^=106;this.oHash.update(g),jv(g)}update($){return MU(this),this.iHash.update($),this}digestInto($){MU(this),q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:v,iHash:I,finished:g,destroyed:U,blockLen:J,outputLen:z}=this;return $=$,$.finished=g,$.destroyed=U,$.blockLen=J,$.outputLen=z,$.oHash=v._cloneInto($.oHash),$.iHash=I._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var $g=($,v,I)=>new v8($,v).update(I).digest();$g.create=($,v)=>new v8($,v);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qq=($,v)=>($+($>=0?v:-v)/Zq)/v;function Fr($,v,I){let[[g,U],[J,z]]=v,G=qq(z*$,I),O=qq(-U*$,I),D=$-G*g-O*J,X=-G*U-O*z,N=D<rU,Y=X<rU;if(N)D=-D;if(Y)X=-X;let w=O0(Math.ceil(yO(I)/2))+vg;if(D<rU||D>=w||X<rU||X>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:N,k1:D,k2neg:Y,k2:X}}function I8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function U8($,v){let I={};for(let g of Object.keys(v))I[g]=$[g]===void 0?v[g]:$[g];if(g0(I.lowS,"lowS"),g0(I.prehash,"prehash"),I.format!==void 0)I8(I.format);return I}class Wq extends Error{constructor($=""){super($)}}var oU={Err:Wq,_tlv:{encode:($,v)=>{let{Err:I}=oU;if($<0||$>256)throw new I("tlv.encode: wrong tag");if(v.length&1)throw new I("tlv.encode: unpadded data");let g=v.length/2,U=J0(g);if(U.length/2&128)throw new I("tlv.encode: long form length too big");let J=g>127?J0(U.length/2|128):"";return J0($)+J+U+v},decode($,v){let{Err:I}=oU,g=0;if($<0||$>256)throw new I("tlv.encode: wrong tag");if(v.length<2||v[g++]!==$)throw new I("tlv.decode: wrong tlv");let U=v[g++],J=!!(U&128),z=0;if(!J)z=U;else{let O=U&127;if(!O)throw new I("tlv.decode(long): indefinite length not supported");if(O>4)throw new I("tlv.decode(long): byte length is too big");let D=v.subarray(g,g+O);if(D.length!==O)throw new I("tlv.decode: length bytes not complete");if(D[0]===0)throw new I("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(g+=O,z<128)throw new I("tlv.decode(long): not minimal encoding")}let G=v.subarray(g,g+z);if(G.length!==z)throw new I("tlv.decode: wrong value length");return{v:G,l:v.subarray(g+z)}}},_int:{encode($){let{Err:v}=oU;if($<rU)throw new v("integer: negative integers are not allowed");let I=J0($);if(Number.parseInt(I[0],16)&8)I="00"+I;if(I.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return I},decode($){let{Err:v}=oU;if($[0]&128)throw new v("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return iU($)}},toSig($){let{Err:v,_int:I,_tlv:g}=oU,U=q$($,void 0,"signature"),{v:J,l:z}=g.decode(48,U);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=g.decode(2,J),{v:D,l:X}=g.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:I.decode(G),s:I.decode(D)}},hexFromSig($){let{_tlv:v,_int:I}=oU,g=v.encode(2,I.encode($.r)),U=v.encode(2,I.encode($.s)),J=g+U;return v.encode(48,J)}},rU=BigInt(0),vg=BigInt(1),Zq=BigInt(2),sJ=BigInt(3),ir=BigInt(4);function g8($,v={}){let I=wq("weierstrass",$,v),{Fp:g,Fn:U}=I,J=I.CURVE,{h:z,n:G}=J;qI(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O}=v;if(O){if(!g.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=jq(g,U);function X(){if(!g.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function N(K,P,V){let{x:r,y:M}=P.toAffine(),T=g.toBytes(r);if(g0(V,"isCompressed"),V){X();let R=!g.isOdd(M);return n$(Vq(R),T)}else return n$(Uint8Array.of(4),T,g.toBytes(M))}function Y(K){q$(K,void 0,"Point");let{publicKey:P,publicKeyUncompressed:V}=D,r=K.length,M=K[0],T=K.subarray(1);if(r===P&&(M===2||M===3)){let R=g.fromBytes(T);if(!g.isValid(R))throw Error("bad point: is not on curve, wrong x");let E=j(R),B;try{B=g.sqrt(E)}catch(J$){let G$=J$ instanceof Error?": "+J$.message:"";throw Error("bad point: is not on curve, sqrt error"+G$)}X();let x=g.isOdd(B);if((M&1)===1!==x)B=g.neg(B);return{x:R,y:B}}else if(r===V&&M===4){let R=g.BYTES,E=g.fromBytes(T.subarray(0,R)),B=g.fromBytes(T.subarray(R,R*2));if(!Z(E,B))throw Error("bad point: is not on curve");return{x:E,y:B}}else throw Error(`bad point: got length ${r}, expected compressed=${P} or uncompressed=${V}`)}let w=v.toBytes||N,W=v.fromBytes||Y;function j(K){let P=g.sqr(K),V=g.mul(P,K);return g.add(g.add(V,g.mul(K,J.a)),J.b)}function Z(K,P){let V=g.sqr(P),r=j(K);return g.eql(V,r)}if(!Z(J.Gx,J.Gy))throw Error("bad curve params: generator point");let H=g.mul(g.pow(J.a,sJ),ir),u=g.mul(g.sqr(J.b),BigInt(27));if(g.is0(g.add(H,u)))throw Error("bad curve params: a or b");function _(K,P,V=!1){if(!g.isValid(P)||V&&g.is0(P))throw Error(`bad point coordinate ${K}`);return P}function L(K){if(!(K instanceof b))throw Error("Weierstrass Point expected")}function i(K){if(!O||!O.basises)throw Error("no endo");return Fr(K,O.basises,U.ORDER)}let l=lO((K,P)=>{let{X:V,Y:r,Z:M}=K;if(g.eql(M,g.ONE))return{x:V,y:r};let T=K.is0();if(P==null)P=T?g.ONE:g.inv(M);let R=g.mul(V,P),E=g.mul(r,P),B=g.mul(M,P);if(T)return{x:g.ZERO,y:g.ZERO};if(!g.eql(B,g.ONE))throw Error("invZ was invalid");return{x:R,y:E}}),h=lO((K)=>{if(K.is0()){if(v.allowInfinityPoint&&!g.is0(K.Y))return;throw Error("bad point: ZERO")}let{x:P,y:V}=K.toAffine();if(!g.isValid(P)||!g.isValid(V))throw Error("bad point: x or y not field elements");if(!Z(P,V))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function n(K,P,V,r,M){return V=new b(g.mul(V.X,K),V.Y,V.Z),P=Q0(r,P),V=Q0(M,V),P.add(V)}class b{static BASE=new b(J.Gx,J.Gy,g.ONE);static ZERO=new b(g.ZERO,g.ONE,g.ZERO);static Fp=g;static Fn=U;X;Y;Z;constructor(K,P,V){this.X=_("x",K),this.Y=_("y",P,!0),this.Z=_("z",V),Object.freeze(this)}static CURVE(){return J}static fromAffine(K){let{x:P,y:V}=K||{};if(!K||!g.isValid(P)||!g.isValid(V))throw Error("invalid affine point");if(K instanceof b)throw Error("projective point not allowed");if(g.is0(P)&&g.is0(V))return b.ZERO;return new b(P,V,g.ONE)}static fromBytes(K){let P=b.fromAffine(W(q$(K,void 0,"point")));return P.assertValidity(),P}static fromHex(K){return b.fromBytes(YI(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,P=!0){if(S.createCache(this,K),!P)this.multiply(sJ);return this}assertValidity(){h(this)}hasEvenY(){let{y:K}=this.toAffine();if(!g.isOdd)throw Error("Field doesn't support isOdd");return!g.isOdd(K)}equals(K){L(K);let{X:P,Y:V,Z:r}=this,{X:M,Y:T,Z:R}=K,E=g.eql(g.mul(P,R),g.mul(M,r)),B=g.eql(g.mul(V,R),g.mul(T,r));return E&&B}negate(){return new b(this.X,g.neg(this.Y),this.Z)}double(){let{a:K,b:P}=J,V=g.mul(P,sJ),{X:r,Y:M,Z:T}=this,R=g.ZERO,E=g.ZERO,B=g.ZERO,x=g.mul(r,r),s=g.mul(M,M),J$=g.mul(T,T),G$=g.mul(r,M);return G$=g.add(G$,G$),B=g.mul(r,T),B=g.add(B,B),R=g.mul(K,B),E=g.mul(V,J$),E=g.add(R,E),R=g.sub(s,E),E=g.add(s,E),E=g.mul(R,E),R=g.mul(G$,R),B=g.mul(V,B),J$=g.mul(K,J$),G$=g.sub(x,J$),G$=g.mul(K,G$),G$=g.add(G$,B),B=g.add(x,x),x=g.add(B,x),x=g.add(x,J$),x=g.mul(x,G$),E=g.add(E,x),J$=g.mul(M,T),J$=g.add(J$,J$),x=g.mul(J$,G$),R=g.sub(R,x),B=g.mul(J$,s),B=g.add(B,B),B=g.add(B,B),new b(R,E,B)}add(K){L(K);let{X:P,Y:V,Z:r}=this,{X:M,Y:T,Z:R}=K,E=g.ZERO,B=g.ZERO,x=g.ZERO,s=J.a,J$=g.mul(J.b,sJ),G$=g.mul(P,M),Q$=g.mul(V,T),w$=g.mul(r,R),X$=g.add(P,V),N$=g.add(M,T);X$=g.mul(X$,N$),N$=g.add(G$,Q$),X$=g.sub(X$,N$),N$=g.add(P,r);let Z$=g.add(M,R);return N$=g.mul(N$,Z$),Z$=g.add(G$,w$),N$=g.sub(N$,Z$),Z$=g.add(V,r),E=g.add(T,R),Z$=g.mul(Z$,E),E=g.add(Q$,w$),Z$=g.sub(Z$,E),x=g.mul(s,N$),E=g.mul(J$,w$),x=g.add(E,x),E=g.sub(Q$,x),x=g.add(Q$,x),B=g.mul(E,x),Q$=g.add(G$,G$),Q$=g.add(Q$,G$),w$=g.mul(s,w$),N$=g.mul(J$,N$),Q$=g.add(Q$,w$),w$=g.sub(G$,w$),w$=g.mul(s,w$),N$=g.add(N$,w$),G$=g.mul(Q$,N$),B=g.add(B,G$),G$=g.mul(Z$,N$),E=g.mul(X$,E),E=g.sub(E,G$),G$=g.mul(X$,Q$),x=g.mul(Z$,x),x=g.add(x,G$),new b(E,B,x)}subtract(K){return this.add(K.negate())}is0(){return this.equals(b.ZERO)}multiply(K){let{endo:P}=v;if(!U.isValidNot0(K))throw Error("invalid scalar: out of range");let V,r,M=(T)=>S.cached(this,T,(R)=>sO(b,R));if(P){let{k1neg:T,k1:R,k2neg:E,k2:B}=i(K),{p:x,f:s}=M(R),{p:J$,f:G$}=M(B);r=s.add(G$),V=n(P.beta,x,J$,T,E)}else{let{p:T,f:R}=M(K);V=T,r=R}return sO(b,[V,r])[0]}multiplyUnsafe(K){let{endo:P}=v,V=this;if(!U.isValid(K))throw Error("invalid scalar: out of range");if(K===rU||V.is0())return b.ZERO;if(K===vg)return V;if(S.hasCache(this))return this.multiply(K);if(P){let{k1neg:r,k1:M,k2neg:T,k2:R}=i(K),{p1:E,p2:B}=Nq(b,V,M,R);return n(P.beta,E,B,r,T)}else return S.unsafe(V,K)}toAffine(K){return l(this,K)}isTorsionFree(){let{isTorsionFree:K}=v;if(z===vg)return!0;if(K)return K(b,this);return S.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:K}=v;if(z===vg)return this;if(K)return K(b,this);return this.multiplyUnsafe(z)}isSmallOrder(){return this.multiplyUnsafe(z).is0()}toBytes(K=!0){return g0(K,"isCompressed"),this.assertValidity(),w(b,this,K)}toHex(K=!0){return wI(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let U$=U.BITS,S=new $8(b,v.endo?Math.ceil(U$/2):U$);return b.BASE.precompute(8),b}function Vq($){return Uint8Array.of($?2:3)}function jq($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function xr($,v={}){let{Fn:I}=$,g=v.randomBytes||mU,U=Object.assign(jq($.Fp,I),{seed:pO(I.ORDER)});function J(w){try{let W=I.fromBytes(w);return I.isValidNot0(W)}catch(W){return!1}}function z(w,W){let{publicKey:j,publicKeyUncompressed:Z}=U;try{let H=w.length;if(W===!0&&H!==j)return!1;if(W===!1&&H!==Z)return!1;return!!$.fromBytes(w)}catch(H){return!1}}function G(w=g(U.seed)){return zq(q$(w,U.seed,"seed"),I.ORDER)}function O(w,W=!0){return $.BASE.multiply(I.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:j,publicKeyUncompressed:Z}=U;if(!pI(w))return;if("_lengths"in I&&I._lengths||W===j)return;let H=q$(w,void 0,"key").length;return H===j||H===Z}function X(w,W,j=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let Z=I.fromBytes(w);return $.fromBytes(W).multiply(Z).toBytes(j)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},Y=aJ(G,O);return Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:Y,Point:$,utils:N,lengths:U})}function J8($,v,I={}){Lv(v),qI(I,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),I=Object.assign({},I);let g=I.randomBytes||mU,U=I.hmac||((V,r)=>$g(v,V,r)),{Fp:J,Fn:z}=$,{ORDER:G,BITS:O}=z,{keygen:D,getPublicKey:X,getSharedSecret:N,utils:Y,lengths:w}=xr($,I),W={prehash:!0,lowS:typeof I.lowS==="boolean"?I.lowS:!0,format:"compact",extraEntropy:!1},j=G*Zq<J.ORDER;function Z(V){let r=G>>vg;return V>r}function H(V,r){if(!z.isValidNot0(r))throw Error(`invalid signature ${V}: out of range 1..Point.Fn.ORDER`);return r}function u(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(V,r){I8(r);let M=w.signature,T=r==="compact"?M:r==="recovered"?M+1:void 0;return q$(V,T)}class L{r;s;recovery;constructor(V,r,M){if(this.r=H("r",V),this.s=H("s",r),M!=null){if(u(),![0,1,2,3].includes(M))throw Error("invalid recovery id");this.recovery=M}Object.freeze(this)}static fromBytes(V,r=W.format){_(V,r);let M;if(r==="der"){let{r:B,s:x}=oU.toSig(q$(V));return new L(B,x)}if(r==="recovered")M=V[0],r="compact",V=V.subarray(1);let T=w.signature/2,R=V.subarray(0,T),E=V.subarray(T,T*2);return new L(z.fromBytes(R),z.fromBytes(E),M)}static fromHex(V,r){return this.fromBytes(YI(V),r)}assertRecovery(){let{recovery:V}=this;if(V==null)throw Error("invalid recovery id: must be present");return V}addRecoveryBit(V){return new L(this.r,this.s,V)}recoverPublicKey(V){let{r,s:M}=this,T=this.assertRecovery(),R=T===2||T===3?r+G:r;if(!J.isValid(R))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=J.toBytes(R),B=$.fromBytes(n$(Vq((T&1)===0),E)),x=z.inv(R),s=l(q$(V,void 0,"msgHash")),J$=z.create(-s*x),G$=z.create(M*x),Q$=$.BASE.multiplyUnsafe(J$).add(B.multiplyUnsafe(G$));if(Q$.is0())throw Error("invalid recovery: point at infinify");return Q$.assertValidity(),Q$}hasHighS(){return Z(this.s)}toBytes(V=W.format){if(I8(V),V==="der")return YI(oU.hexFromSig(this));let{r,s:M}=this,T=z.toBytes(r),R=z.toBytes(M);if(V==="recovered")return u(),n$(Uint8Array.of(this.assertRecovery()),T,R);return n$(T,R)}toHex(V){return wI(this.toBytes(V))}}let i=I.bits2int||function(r){if(r.length>8192)throw Error("input is too large");let M=iU(r),T=r.length*8-O;return T>0?M>>BigInt(T):M},l=I.bits2int_modN||function(r){return z.create(i(r))},h=O0(O);function n(V){return G0("num < 2^"+O,V,rU,h),z.toBytes(V)}function b(V,r){return q$(V,void 0,"message"),r?q$(v(V),void 0,"prehashed message"):V}function U$(V,r,M){let{lowS:T,prehash:R,extraEntropy:E}=U8(M,W);V=b(V,R);let B=l(V),x=z.fromBytes(r);if(!z.isValidNot0(x))throw Error("invalid private key");let s=[n(x),n(B)];if(E!=null&&E!==!1){let w$=E===!0?g(w.secretKey):E;s.push(q$(w$,void 0,"extraEntropy"))}let J$=n$(...s),G$=B;function Q$(w$){let X$=i(w$);if(!z.isValidNot0(X$))return;let N$=z.inv(X$),Z$=$.BASE.multiply(X$).toAffine(),P$=z.create(Z$.x);if(P$===rU)return;let E$=z.create(N$*z.create(G$+P$*x));if(E$===rU)return;let a$=(Z$.x===P$?0:2)|Number(Z$.y&vg),e$=E$;if(T&&Z(E$))e$=z.neg(E$),a$^=1;return new L(P$,e$,j?void 0:a$)}return{seed:J$,k2sig:Q$}}function S(V,r,M={}){let{seed:T,k2sig:R}=U$(V,r,M);return hY(v.outputLen,z.BYTES,U)(T,R).toBytes(M.format)}function K(V,r,M,T={}){let{lowS:R,prehash:E,format:B}=U8(T,W);if(M=q$(M,void 0,"publicKey"),r=b(r,E),!pI(V)){let x=V instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(V,B);try{let x=L.fromBytes(V,B),s=$.fromBytes(M);if(R&&x.hasHighS())return!1;let{r:J$,s:G$}=x,Q$=l(r),w$=z.inv(G$),X$=z.create(Q$*w$),N$=z.create(J$*w$),Z$=$.BASE.multiplyUnsafe(X$).add(s.multiplyUnsafe(N$));if(Z$.is0())return!1;return z.create(Z$.x)===J$}catch(x){return!1}}function P(V,r,M={}){let{prehash:T}=U8(M,W);return r=b(r,T),L.fromBytes(V,"recovered").recoverPublicKey(r).toBytes()}return Object.freeze({keygen:D,getPublicKey:X,getSharedSecret:N,utils:Y,lengths:w,Point:$,sign:S,verify:K,recoverPublicKey:P,Signature:L,hash:v})}function Mq($,v,I){return $&v^~$&I}function rq($,v,I){return $&v^$&I^v&I}class $z{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,v,I,g){this.blockLen=$,this.outputLen=v,this.padOffset=I,this.isLE=g,this.buffer=new Uint8Array($),this.view=dJ(this.buffer)}update($){MU(this),q$($);let{view:v,buffer:I,blockLen:g}=this,U=$.length;for(let J=0;J<U;){let z=Math.min(g-this.pos,U-J);if(z===g){let G=dJ($);for(;g<=U-J;J+=g)this.process(G,J);continue}if(I.set($.subarray(J,J+z),this.pos),this.pos+=z,J+=z,this.pos===g)this.process(v,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){MU(this),yJ($,this),this.finished=!0;let{buffer:v,view:I,blockLen:g,isLE:U}=this,{pos:J}=this;if(v[J++]=128,jv(this.buffer.subarray(J)),this.padOffset>g-J)this.process(I,0),J=0;for(let X=J;X<g;X++)v[X]=0;I.setBigUint64(g-8,BigInt(this.length*8),U),this.process(I,0);let z=dJ($),G=this.outputLen;if(G%4)throw Error("_sha2: outputLen must be aligned to 32bit");let O=G/4,D=this.get();if(O>D.length)throw Error("_sha2: outputLen bigger than state");for(let X=0;X<O;X++)z.setUint32(4*X,D[X],U)}digest(){let{buffer:$,outputLen:v}=this;this.digestInto($);let I=$.slice(0,v);return this.destroy(),I}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:v,buffer:I,length:g,finished:U,destroyed:J,pos:z}=this;if($.destroyed=J,$.finished=U,$.length=g,$.pos=z,g%v)$.buffer.set(I);return $}clone(){return this._cloneInto()}}var RU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),uU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),l$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),d$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var vz=BigInt(4294967295),Rq=BigInt(32);function cr($,v=!1){if(v)return{h:Number($&vz),l:Number($>>Rq&vz)};return{h:Number($>>Rq&vz)|0,l:Number($&vz)|0}}function Uz($,v=!1){let I=$.length,g=new Uint32Array(I),U=new Uint32Array(I);for(let J=0;J<I;J++){let{h:z,l:G}=cr($[J],v);[g[J],U[J]]=[z,G]}return[g,U]}var z8=($,v,I)=>$>>>I,G8=($,v,I)=>$<<32-I|v>>>I,VI=($,v,I)=>$>>>I|v<<32-I,jI=($,v,I)=>$<<32-I|v>>>I,N0=($,v,I)=>$<<64-I|v>>>I-32,w0=($,v,I)=>$>>>I-32|v<<64-I;var uq=($,v,I)=>$<<I|v>>>32-I,Kq=($,v,I)=>v<<I|$>>>32-I,Hq=($,v,I)=>v<<I-32|$>>>64-I,Aq=($,v,I)=>$<<I-32|v>>>64-I;function sv($,v,I,g){let U=(v>>>0)+(g>>>0);return{h:$+I+(U/4294967296|0)|0,l:U|0}}var Tq=($,v,I)=>($>>>0)+(v>>>0)+(I>>>0),Sq=($,v,I,g)=>v+I+g+($/4294967296|0)|0,Pq=($,v,I,g)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0),kq=($,v,I,g,U)=>v+I+g+U+($/4294967296|0)|0,Eq=($,v,I,g,U)=>($>>>0)+(v>>>0)+(I>>>0)+(g>>>0)+(U>>>0),Cq=($,v,I,g,U,J)=>v+I+g+U+J+($/4294967296|0)|0;var yr=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),yU=new Uint32Array(64);class O8 extends $z{constructor($){super(64,$,8,!1)}get(){let{A:$,B:v,C:I,D:g,E:U,F:J,G:z,H:G}=this;return[$,v,I,g,U,J,z,G]}set($,v,I,g,U,J,z,G){this.A=$|0,this.B=v|0,this.C=I|0,this.D=g|0,this.E=U|0,this.F=J|0,this.G=z|0,this.H=G|0}process($,v){for(let X=0;X<16;X++,v+=4)yU[X]=$.getUint32(v,!1);for(let X=16;X<64;X++){let N=yU[X-15],Y=yU[X-2],w=xv(N,7)^xv(N,18)^N>>>3,W=xv(Y,17)^xv(Y,19)^Y>>>10;yU[X]=W+yU[X-7]+w+yU[X-16]|0}let{A:I,B:g,C:U,D:J,E:z,F:G,G:O,H:D}=this;for(let X=0;X<64;X++){let N=xv(z,6)^xv(z,11)^xv(z,25),Y=D+N+Mq(z,G,O)+yr[X]+yU[X]|0,W=(xv(I,2)^xv(I,13)^xv(I,22))+rq(I,g,U)|0;D=O,O=G,G=z,z=J+Y|0,J=U,U=g,g=I,I=Y+W|0}I=I+this.A|0,g=g+this.B|0,U=U+this.C|0,J=J+this.D|0,z=z+this.E|0,G=G+this.F|0,O=O+this.G|0,D=D+this.H|0,this.set(I,g,U,J,z,G,O,D)}roundClean(){jv(yU)}destroy(){this.set(0,0,0,0,0,0,0,0),jv(this.buffer)}}class Bq extends O8{A=RU[0]|0;B=RU[1]|0;C=RU[2]|0;D=RU[3]|0;E=RU[4]|0;F=RU[5]|0;G=RU[6]|0;H=RU[7]|0;constructor(){super(32)}}class lr extends O8{A=uU[0]|0;B=uU[1]|0;C=uU[2]|0;D=uU[3]|0;E=uU[4]|0;F=uU[5]|0;G=uU[6]|0;H=uU[7]|0;constructor(){super(28)}}var Lq=(()=>Uz(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),dr=(()=>Lq[0])(),hr=(()=>Lq[1])(),lU=new Uint32Array(80),dU=new Uint32Array(80);class Y0 extends $z{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:v,Bh:I,Bl:g,Ch:U,Cl:J,Dh:z,Dl:G,Eh:O,El:D,Fh:X,Fl:N,Gh:Y,Gl:w,Hh:W,Hl:j}=this;return[$,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j]}set($,v,I,g,U,J,z,G,O,D,X,N,Y,w,W,j){this.Ah=$|0,this.Al=v|0,this.Bh=I|0,this.Bl=g|0,this.Ch=U|0,this.Cl=J|0,this.Dh=z|0,this.Dl=G|0,this.Eh=O|0,this.El=D|0,this.Fh=X|0,this.Fl=N|0,this.Gh=Y|0,this.Gl=w|0,this.Hh=W|0,this.Hl=j|0}process($,v){for(let u=0;u<16;u++,v+=4)lU[u]=$.getUint32(v),dU[u]=$.getUint32(v+=4);for(let u=16;u<80;u++){let _=lU[u-15]|0,L=dU[u-15]|0,i=VI(_,L,1)^VI(_,L,8)^z8(_,L,7),l=jI(_,L,1)^jI(_,L,8)^G8(_,L,7),h=lU[u-2]|0,n=dU[u-2]|0,b=VI(h,n,19)^N0(h,n,61)^z8(h,n,6),U$=jI(h,n,19)^w0(h,n,61)^G8(h,n,6),S=Pq(l,U$,dU[u-7],dU[u-16]),K=kq(S,i,b,lU[u-7],lU[u-16]);lU[u]=K|0,dU[u]=S|0}let{Ah:I,Al:g,Bh:U,Bl:J,Ch:z,Cl:G,Dh:O,Dl:D,Eh:X,El:N,Fh:Y,Fl:w,Gh:W,Gl:j,Hh:Z,Hl:H}=this;for(let u=0;u<80;u++){let _=VI(X,N,14)^VI(X,N,18)^N0(X,N,41),L=jI(X,N,14)^jI(X,N,18)^w0(X,N,41),i=X&Y^~X&W,l=N&w^~N&j,h=Eq(H,L,l,hr[u],dU[u]),n=Cq(h,Z,_,i,dr[u],lU[u]),b=h|0,U$=VI(I,g,28)^N0(I,g,34)^N0(I,g,39),S=jI(I,g,28)^w0(I,g,34)^w0(I,g,39),K=I&U^I&z^U&z,P=g&J^g&G^J&G;Z=W|0,H=j|0,W=Y|0,j=w|0,Y=X|0,w=N|0,{h:X,l:N}=sv(O|0,D|0,n|0,b|0),O=z|0,D=G|0,z=U|0,G=J|0,U=I|0,J=g|0;let V=Tq(b,S,P);I=Sq(V,n,U$,K),g=V|0}({h:I,l:g}=sv(this.Ah|0,this.Al|0,I|0,g|0)),{h:U,l:J}=sv(this.Bh|0,this.Bl|0,U|0,J|0),{h:z,l:G}=sv(this.Ch|0,this.Cl|0,z|0,G|0),{h:O,l:D}=sv(this.Dh|0,this.Dl|0,O|0,D|0),{h:X,l:N}=sv(this.Eh|0,this.El|0,X|0,N|0),{h:Y,l:w}=sv(this.Fh|0,this.Fl|0,Y|0,w|0),{h:W,l:j}=sv(this.Gh|0,this.Gl|0,W|0,j|0),{h:Z,l:H}=sv(this.Hh|0,this.Hl|0,Z|0,H|0),this.set(I,g,U,J,z,G,O,D,X,N,Y,w,W,j,Z,H)}roundClean(){jv(lU,dU)}destroy(){jv(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class pr extends Y0{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(64)}}class fq extends Y0{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(48)}}var Iv=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),gv=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class tr extends Y0{Ah=Iv[0]|0;Al=Iv[1]|0;Bh=Iv[2]|0;Bl=Iv[3]|0;Ch=Iv[4]|0;Cl=Iv[5]|0;Dh=Iv[6]|0;Dl=Iv[7]|0;Eh=Iv[8]|0;El=Iv[9]|0;Fh=Iv[10]|0;Fl=Iv[11]|0;Gh=Iv[12]|0;Gl=Iv[13]|0;Hh=Iv[14]|0;Hl=Iv[15]|0;constructor(){super(28)}}class ar extends Y0{Ah=gv[0]|0;Al=gv[1]|0;Bh=gv[2]|0;Bl=gv[3]|0;Ch=gv[4]|0;Cl=gv[5]|0;Dh=gv[6]|0;Dl=gv[7]|0;Eh=gv[8]|0;El=gv[9]|0;Fh=gv[10]|0;Fl=gv[11]|0;Gh=gv[12]|0;Gl=gv[13]|0;Hh=gv[14]|0;Hl=gv[15]|0;constructor(){super(32)}}var Iz=tI(()=>new Bq,FU(1));var _q=tI(()=>new fq,FU(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var er=BigInt(1),nq=BigInt(2),sr=BigInt(3),$7=BigInt(5),yT=BigInt(8),bq=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function v7($){let v=BigInt(10),I=BigInt(20),g=BigInt(40),U=BigInt(80),J=bq,G=$*$%J*$%J,O=fv(G,nq,J)*G%J,D=fv(O,er,J)*$%J,X=fv(D,$7,J)*D%J,N=fv(X,v,J)*X%J,Y=fv(N,I,J)*N%J,w=fv(Y,g,J)*Y%J,W=fv(w,U,J)*w%J,j=fv(W,U,J)*w%J,Z=fv(j,v,J)*X%J;return{pow_p_5_8:fv(Z,nq,J)*$%J,b2:G}}function U7($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var mq=(()=>{let $=bq;return Yq({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:I,b2:g}=v7(v);return Qv(fv(I,sr,$)*g,$)},adjustScalarBytes:U7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),g7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var J7=g8(I7),D8=J8(J7,Iz);var z7=g8(g7),Fq=J8(z7,_q);function xq($,v,I){if(Lv($),I===void 0)I=new Uint8Array($.outputLen);return $g($,I,v)}var Q8=Uint8Array.of(0),iq=Uint8Array.of();function cq($,v,I,g=32){Lv($),F$(g,"length");let U=$.outputLen;if(g>255*U)throw Error("Length must be <= 255*HashLen");let J=Math.ceil(g/U);if(I===void 0)I=iq;else q$(I,void 0,"info");let z=new Uint8Array(J*U),G=$g.create($,v),O=G._cloneInto(),D=new Uint8Array(G.outputLen);for(let X=0;X<J;X++)Q8[0]=X+1,O.update(X===0?iq:D).update(I).update(Q8).digestInto(D),z.set(D,U*X),G._cloneInto(O);return G.destroy(),O.destroy(),jv(D,Q8),z.slice(0,g)}var G7=BigInt(0),q0=BigInt(1),O7=BigInt(2),D7=BigInt(7),Q7=BigInt(256),X7=BigInt(113),lq=[],dq=[],hq=[];for(let $=0,v=q0,I=1,g=0;$<24;$++){[I,g]=[g,(2*I+3*g)%5],lq.push(2*(5*g+I)),dq.push(($+1)*($+2)/2%64);let U=G7;for(let J=0;J<7;J++)if(v=(v<<q0^(v>>D7)*X7)%Q7,v&O7)U^=q0<<(q0<<BigInt(J))-q0;hq.push(U)}var pq=Uz(hq,!0),N7=pq[0],w7=pq[1],oq=($,v,I)=>I>32?Hq($,v,I):uq($,v,I),yq=($,v,I)=>I>32?Aq($,v,I):Kq($,v,I);function Y7($,v=24){let I=new Uint32Array(10);for(let g=24-v;g<24;g++){for(let z=0;z<10;z++)I[z]=$[z]^$[z+10]^$[z+20]^$[z+30]^$[z+40];for(let z=0;z<10;z+=2){let G=(z+8)%10,O=(z+2)%10,D=I[O],X=I[O+1],N=oq(D,X,1)^I[G],Y=yq(D,X,1)^I[G+1];for(let w=0;w<50;w+=10)$[z+w]^=N,$[z+w+1]^=Y}let U=$[2],J=$[3];for(let z=0;z<24;z++){let G=dq[z],O=oq(U,J,G),D=yq(U,J,G),X=lq[z];U=$[X],J=$[X+1],$[X]=O,$[X+1]=D}for(let z=0;z<50;z+=10){for(let G=0;G<10;G++)I[G]=$[z+G];for(let G=0;G<10;G++)$[z+G]^=~I[(G+2)%10]&I[(G+4)%10]}$[0]^=N7[g],$[1]^=w7[g]}jv(I)}class gz{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,v,I,g=!1,U=24){if(this.blockLen=$,this.suffix=v,this.outputLen=I,this.enableXOF=g,this.rounds=U,F$(I,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=lJ(this.state)}clone(){return this._cloneInto()}keccak(){xO(this.state32),Y7(this.state32,this.rounds),xO(this.state32),this.posOut=0,this.pos=0}update($){MU(this),q$($);let{blockLen:v,state:I}=this,g=$.length;for(let U=0;U<g;){let J=Math.min(v-this.pos,g-U);for(let z=0;z<J;z++)I[this.pos++]^=$[U++];if(this.pos===v)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:v,pos:I,blockLen:g}=this;if($[I]^=v,(v&128)!==0&&I===g-1)this.keccak();$[g-1]^=128,this.keccak()}writeInto($){MU(this,!1),q$($),this.finish();let v=this.state,{blockLen:I}=this;for(let g=0,U=$.length;g<U;){if(this.posOut>=I)this.keccak();let J=Math.min(I-this.posOut,U-g);$.set(v.subarray(this.posOut,this.posOut+J),g),this.posOut+=J,g+=J}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return F$($),this.xofInto(new Uint8Array($))}digestInto($){if(yJ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,jv(this.state)}_cloneInto($){let{blockLen:v,suffix:I,outputLen:g,rounds:U,enableXOF:J}=this;return $||=new gz(v,I,g,J,U),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=U,$.suffix=I,$.outputLen=g,$.enableXOF=J,$.destroyed=this.destroyed,$}}var tq=($,v,I,g={})=>tI(()=>new gz(v,$,I),g);var MI=tq(6,136,32,FU(8));var aq=tq(6,72,64,FU(10));var eq=($,v,I,g={})=>tI((U={})=>new gz(v,$,U.dkLen===void 0?I:U.dkLen,!0),g),sq=eq(31,168,16,FU(11)),$U=eq(31,136,32,FU(12));function X8($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function vW($){return X8($),($&$-1)===0&&$!==0}function N8($,v){X8($);let I=0;for(let g=0;g<v;g++,$>>>=1)I=I<<1|$&1;return I}function UW($){return X8($),31-Math.clz32($)}function $W($){let v=$.length;if(v<2||!vW(v))throw Error("n must be a power of 2 and greater than 1. Got "+v);let I=UW(v);for(let g=0;g<v;g++){let U=N8(g,I);if(g<U){let J=$[g];$[g]=$[U],$[U]=J}}return $}var w8=($,v)=>{let{N:I,roots:g,dit:U,invertButterflies:J=!1,skipStages:z=0,brp:G=!0}=v,O=UW(I);if(!vW(I))throw Error("FFT: Polynomial size should be power of two");let D=U!==J;return(X)=>{if(X.length!==I)throw Error("FFT: wrong Polynomial length");if(U&&G)$W(X);for(let N=0,Y=1;N<O-z;N++){let w=U?N+1+z:O-N,W=1<<w,j=W>>1,Z=I>>w;for(let H=0;H<I;H+=W)for(let u=0,_=Y++;u<j;u++){let L=J?U?I-_:_:u*Z,i=H+u,l=H+u+j,h=g[L],n=X[l],b=X[i];if(D){let U$=$.mul(n,h);X[i]=$.add(b,U$),X[l]=$.sub(b,U$)}else if(J)X[i]=$.add(n,b),X[l]=$.mul($.sub(n,b),h);else X[i]=$.add(b,n),X[l]=$.mul($.sub(b,n),h)}}if(!U&&G)$W(X);return X}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var vU=mU;function Jz($,v){if($.length!==v.length)return!1;let I=0;for(let g=0;g<$.length;g++)I|=$[g]^v[g];return I===0}function IW($){return Uint8Array.from($)}function rI($,...v){let I=(U)=>typeof U==="number"?U:U.bytesLen,g=v.reduce((U,J)=>U+I(J),0);return{bytesLen:g,encode:(U)=>{let J=new Uint8Array(g);for(let z=0,G=0;z<v.length;z++){let O=v[z],D=I(O),X=typeof O==="number"?U[z]:O.encode(U[z]);if(q$(X,D,$),J.set(X,G),typeof O!=="number")X.fill(0);G+=D}return J},decode:(U)=>{q$(U,g,$);let J=[];for(let z of v){let G=I(z),O=U.subarray(0,G);J.push(typeof z==="number"?O:z.decode(O)),U=U.subarray(G)}return J}}}function zz($,v){let I=v*$.bytesLen;return{bytesLen:I,encode:(g)=>{if(g.length!==v)throw Error(`vecCoder.encode: wrong length=${g.length}. Expected: ${v}`);let U=new Uint8Array(I);for(let J=0,z=0;J<g.length;J++){let G=$.encode(g[J]);U.set(G,z),G.fill(0),z+=G.length}return U},decode:(g)=>{q$(g,I);let U=[];for(let J=0;J<g.length;J+=$.bytesLen)U.push($.decode(g.subarray(J,J+$.bytesLen)));return U}}}function m$(...$){for(let v of $)if(Array.isArray(v))for(let I of v)I.fill(0);else v.fill(0)}function Y8($){return(1<<$)-1}var zS=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var gW=($)=>{let{newPoly:v,N:I,Q:g,F:U,ROOT_OF_UNITY:J,brvBits:z,isKyber:G}=$,O=(u,_=g)=>{let L=u%_|0;return(L>=0?L|0:_+L|0)|0},D=(u,_=g)=>{let L=O(u,_)|0;return(L>_>>1?L-_|0:L)|0};function X(){let u=v(I);for(let _=0;_<I;_++){let L=N8(_,z),i=BigInt(J)**BigInt(L)%BigInt(g);u[_]=Number(i)|0}return u}let N=X(),Y={add:(u,_)=>O((u|0)+(_|0))|0,sub:(u,_)=>O((u|0)-(_|0))|0,mul:(u,_)=>O((u|0)*(_|0))|0,inv:(u)=>{throw Error("not implemented")}},w={N:I,roots:N,invertButterflies:!0,skipStages:G?1:0,brp:!1},W=w8(Y,{dit:!1,...w}),j=w8(Y,{dit:!0,...w});return{mod:O,smod:D,nttZetas:N,NTT:{encode:(u)=>{return W(u)},decode:(u)=>{j(u);for(let _=0;_<u.length;_++)u[_]=O(U*u[_]);return u}},bitsCoder:(u,_)=>{let L=Y8(u),i=u*(I/8);return{bytesLen:i,encode:(l)=>{let h=new Uint8Array(i);for(let n=0,b=0,U$=0,S=0;n<l.length;n++){b|=(_.encode(l[n])&L)<<U$,U$+=u;for(;U$>=8;U$-=8,b>>=8)h[S++]=b&Y8(U$)}return h},decode:(l)=>{let h=v(I);for(let n=0,b=0,U$=0,S=0;n<l.length;n++){b|=l[n]<<U$,U$+=8;for(;U$>=u;U$-=u,b>>=u)h[S++]=_.decode(b&L)}return h}}}}},q7=($)=>(v,I)=>{if(!I)I=$.blockLen;let g=new Uint8Array(v.length+2);g.set(v);let U=v.length,J=new Uint8Array(I),z=$.create({}),G=0,O=0;return{stats:()=>({calls:G,xofs:O}),get:(D,X)=>{return g[U+0]=D,g[U+1]=X,z.destroy(),z=$.create({}).update(g),G++,()=>{return O++,z.xofInto(J)}},clean:()=>{z.destroy(),m$(J,g)}}},JW=q7(sq);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Jv=256,KU=3329,W7=3303,Z7=17,{mod:V0,nttZetas:V7,NTT:RI,bitsCoder:j7}=gW({N:Jv,Q:KU,F:W7,ROOT_OF_UNITY:Z7,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),q8={512:{N:Jv,Q:KU,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Jv,Q:KU,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Jv,Q:KU,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},M7=($)=>{if($>=12)return{encode:(I)=>I,decode:(I)=>I};let v=2**($-1);return{encode:(I)=>((I<<$)+KU/2)/KU,decode:(I)=>I*KU+v>>>$}},W0=($)=>j7($,M7($));function uI($,v){for(let I=0;I<Jv;I++)$[I]=V0($[I]+v[I])}function r7($,v){for(let I=0;I<Jv;I++)$[I]=V0($[I]-v[I])}function R7($,v,I,g,U){let J=V0(v*g*U+$*I),z=V0($*g+v*I);return{c0:J,c1:z}}function Gz($,v){for(let I=0;I<Jv/2;I++){let g=V7[64+(I>>1)];if(I&1)g=-g;let{c0:U,c1:J}=R7($[2*I+0],$[2*I+1],v[2*I+0],v[2*I+1],g);$[2*I+0]=U,$[2*I+1]=J}return $}function zW($){let v=new Uint16Array(Jv);for(let I=0;I<Jv;){let g=$();if(g.length%3)throw Error("SampleNTT: unaligned block");for(let U=0;I<Jv&&U+3<=g.length;U+=3){let J=(g[U+0]>>0|g[U+1]<<8)&4095,z=(g[U+1]>>4|g[U+2]<<4)&4095;if(J<KU)v[I++]=J;if(I<Jv&&z<KU)v[I++]=z}}return v}function Z0($,v,I,g){let U=$(g*Jv/4,v,I),J=new Uint16Array(Jv),z=lJ(U),G=0;for(let O=0,D=0,X=0,N=0;O<z.length;O++){let Y=z[O];for(let w=0;w<32;w++)if(X+=Y&1,Y>>=1,G+=1,G===g)N=X,X=0;else if(G===2*g)J[D++]=V0(N-X),X=0,G=0}if(G)throw Error(`sampleCBD: leftover bits: ${G}`);return J}var u7=($)=>{let{K:v,PRF:I,XOF:g,HASH512:U,ETA1:J,ETA2:z,du:G,dv:O}=$,D=W0(1),X=W0(O),N=W0(G),Y=rI("publicKey",zz(W0(12),v),32),w=zz(W0(12),v),W=rI("ciphertext",zz(N,v),X),j=rI("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:Y.bytesLen,cipherText:W.bytesLen},keygen:(Z)=>{q$(Z,32,"seed");let H=new Uint8Array(33);H.set(Z),H[32]=v;let u=U(H),[_,L]=j.decode(u),i=[],l=[];for(let b=0;b<v;b++)i.push(RI.encode(Z0(I,L,b,J)));let h=g(_);for(let b=0;b<v;b++){let U$=RI.encode(Z0(I,L,v+b,J));for(let S=0;S<v;S++){let K=zW(h.get(S,b));uI(U$,Gz(K,i[S]))}l.push(U$)}h.clean();let n={publicKey:Y.encode([l,_]),secretKey:w.encode(i)};return m$(_,L,i,l,H,u),n},encrypt:(Z,H,u)=>{let[_,L]=Y.decode(Z),i=[];for(let S=0;S<v;S++)i.push(RI.encode(Z0(I,u,S,J)));let l=g(L),h=new Uint16Array(Jv),n=[];for(let S=0;S<v;S++){let K=Z0(I,u,v+S,z),P=new Uint16Array(Jv);for(let V=0;V<v;V++){let r=zW(l.get(S,V));uI(P,Gz(r,i[V]))}uI(K,RI.decode(P)),n.push(K),uI(h,Gz(_[S],i[S])),m$(P)}l.clean();let b=Z0(I,u,2*v,z);uI(b,RI.decode(h));let U$=D.decode(H);return uI(U$,b),m$(_,i,h,b),W.encode([n,U$])},decrypt:(Z,H)=>{let[u,_]=W.decode(Z),L=w.decode(H),i=new Uint16Array(Jv);for(let l=0;l<v;l++)uI(i,Gz(L[l],RI.encode(u[l])));return r7(_,RI.decode(i)),m$(i,L,u),D.encode(_)}}};function W8($){let v=u7($),{HASH256:I,HASH512:g,KDF:U}=$,{secretCoder:J,lengths:z}=v,G=rI("secretKey",z.secretKey,z.publicKey,32,32),O=32,D=64;return{info:{type:"ml-kem"},lengths:{...z,seed:64,msg:32,msgRand:32,secretKey:G.bytesLen},keygen:(X=vU(64))=>{q$(X,64,"seed");let{publicKey:N,secretKey:Y}=v.keygen(X.subarray(0,32)),w=I(N),W=G.encode([Y,N,w,X.subarray(32)]);return m$(Y,w),{publicKey:N,secretKey:W}},getPublicKey:(X)=>{let[N,Y,w,W]=G.decode(X);return Uint8Array.from(Y)},encapsulate:(X,N=vU(32))=>{q$(X,z.publicKey,"publicKey"),q$(N,32,"message");let Y=X.subarray(0,384*$.K),w=J.encode(J.decode(IW(Y)));if(!Jz(w,Y))throw m$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");m$(w);let W=g.create().update(N).update(I(X)).digest(),j=v.encrypt(X,N,W.subarray(32,64));return m$(W.subarray(32)),{cipherText:j,sharedSecret:W.subarray(0,32)}},decapsulate:(X,N)=>{q$(N,G.bytesLen,"secretKey"),q$(X,z.cipherText,"cipherText");let Y=G.bytesLen-96,w=Y+32,W=I(N.subarray(Y/2,w));if(!Jz(W,N.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[j,Z,H,u]=G.decode(N),_=v.decrypt(X,j),L=g.create().update(_).update(H).digest(),i=L.subarray(0,32),l=v.encrypt(Z,_,L.subarray(32,64)),h=Jz(X,l),n=U.create({dkLen:32}).update(u).update(X).digest();return m$(_,l,!h?i:n),h?i:n}}}function K7($,v,I){return $U.create({dkLen:$}).update(v).update(new Uint8Array([I])).digest()}var Z8={HASH256:MI,HASH512:aq,KDF:$U,XOF:JW,PRF:K7},ZS=W8({...Z8,...q8[512]}),j0=W8({...Z8,...q8[768]}),GW=W8({...Z8,...q8[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function H7($,v=!1){let{lengths:I,keygen:g}=$;if(v){let J=$.Point.Fn;if(!J)throw Error("No Point.Fn");g=(z=vU(I.seed))=>{q$(z,I.seed,"seed");let G=J.isLE?xU(z):iU(z),O=J.toBytes(J.create(G));return{secretKey:O,publicKey:$.getPublicKey(O)}}}return{lengths:{secretKey:I.secretKey,publicKey:I.publicKey,seed:I.seed},keygen:g,getPublicKey:(U)=>$.getPublicKey(U)}}function V8($,v=!1){let I=H7($,v);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...I.lengths,msg:I.lengths.seed,cipherText:I.lengths.publicKey},keygen:I.keygen,getPublicKey:I.getPublicKey,encapsulate(g,U=vU($.lengths.seed)){let J=this.keygen(U).secretKey,z=this.decapsulate(g,J),G=$.getPublicKey(J);return m$(J),{sharedSecret:z,cipherText:G}},decapsulate(g,U){let J=$.getSharedSecret(U,g);return $.lengths.publicKeyHasPrefix?J.subarray(1):J}}}function M0($,v){return rI(v,...$.map((I)=>{if(typeof I.lengths[v]!=="number")throw Error("wrong length: "+v);return I.lengths[v]}))}function j8($){return(v,I)=>$(v,{dkLen:I})}function A7($,v,...I){let g=M0(I,"seed"),U=M0(I,"publicKey");if($===void 0)$=g.bytesLen;F$($);function J(z){q$(z,$);let G=g.decode(v(z,g.bytesLen)),O=I.map((N,Y)=>N.keygen(G[Y])),D=O.map((N)=>N.secretKey),X=O.map((N)=>N.publicKey);return{secretKey:D,publicKey:X}}return{info:{lengths:{seed:$,publicKey:U.bytesLen,secretKey:$}},getPublicKey(z){return this.keygen(z).publicKey},keygen(z=vU($)){let{publicKey:G,secretKey:O}=J(z),D=U.encode(G);return m$(G),m$(O),{secretKey:z,publicKey:D}},expandDecapsulationKey:J,realSeedLen:$}}function Oz($,v,I,g,...U){let J=A7($,I,...U),z=M0(U,"cipherText"),G=M0(U,"publicKey"),O=M0(U,"msg");if(v===void 0)v=O.bytesLen;return F$(v),{lengths:{...J.info.lengths,msg:v,msgRand:O.bytesLen,cipherText:z.bytesLen},getPublicKey:J.getPublicKey,keygen:J.keygen,encapsulate(D,X=vU(O.bytesLen)){let N=G.decode(D),Y=O.decode(X),w=U.map((H,u)=>H.encapsulate(N[u],Y[u])),W=w.map((H)=>H.sharedSecret),j=w.map((H)=>H.cipherText),Z={sharedSecret:g(N,j,W),cipherText:z.encode(j)};return m$(W,j),Z},decapsulate(D,X){let N=z.decode(D),{publicKey:Y,secretKey:w}=J.expandDecapsulationKey(X),W=U.map((j,Z)=>j.decapsulate(N[Z],w[Z]));return g(Y,N,W)}}}function OW($,v,I,g,U){return Lv(g),Lv(U),Oz(32,32,j8(g),(J,z,G)=>U(n$(G[0],G[1],z[1],J[1],cU($))),v,I)}var SS=OW("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",j0,V8(D8,!0),$U,MI),PS=OW("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",GW,V8(Fq,!0),$U,MI);function T7($,v,I,g,U){return Lv(g),Lv(U),Oz(32,32,j8(g),(J,z,G)=>{let O=n$(G[0],G[1],z[0],J[0],z[1],J[1],cU($)),D=32,X=n$(cU("hybrid_prk"),O),N=xq(U,X),Y=n$(aI(32,2),cU("shared_secret"),cU("")),w=cq(U,N,Y,32);return m$(N,Y,X,O),w},v,I)}var DW=V8(mq),kS=T7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",j0,DW,$U,Iz),S7=(()=>Oz(32,32,j8($U),($,v,I)=>MI(n$(I[0],I[1],v[1],$[1],cU("\\.//^\\"))),j0,DW))();function P7($,v,I,g){let U=$.Point.Fn;if(!U)throw Error("no Point.Fn");function J(z){let G;for(let X=0,N=v;;X=N,N+=v){if(N>z.length)throw Error("rejection sampling failed");if(G=U.fromBytes(z.subarray(X,N),!0),U.isValidNot0(G))break}let O=U.toBytes(U.create(G)),D=$.getPublicKey(O,!1);return{secretKey:O,publicKey:D}}return{lengths:{secretKey:v,publicKey:I,seed:g,msg:g,cipherText:I},keygen(z=vU(g)){return q$(z,g,"seed"),J(z)},getPublicKey(z){return $.getPublicKey(z,!1)},encapsulate(z,G=vU(g)){q$(G,g,"rand");let{secretKey:O}=J(G),D=this.decapsulate(z,O),X=$.getPublicKey(O,!1);return m$(O),{sharedSecret:D,cipherText:X}},decapsulate(z,G){return $.getSharedSecret(G,z).subarray(1)}}}function k7($,v,I,g){let{secretKey:U,publicKeyUncompressed:J}=I.lengths;if(!U||!J)throw Error("wrong curve");let z=P7(I,U,J,g),G=64,O=G+g;return Oz(32,32,(D)=>{q$(D,32);let X=$U(D,{dkLen:O}),N=X.subarray(0,G),Y=X.subarray(G,O);return n$(N,Y)},(D,X,N)=>MI(n$(N[0],N[1],X[1],D[1],cU($))),v,z)}var E7=(()=>k7("MLKEM768-P256",j0,D8,128))();var Dz=S7,QW=E7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=($,v,I)=>x$($,v,I),r8=f$,Ug=BJ,h$=(...$)=>RO(...$),Ig=($)=>pg($),gg=jO,Jg=($)=>qU($),Xz=BigInt(0),M8=BigInt(1);function HU($,v=""){if(typeof $!=="boolean"){let I=v&&`"${v}" `;throw TypeError(I+"expected boolean, got type="+typeof $)}return $}function Nz($){if(typeof $==="bigint"){if(!Qz($))throw RangeError("positive bigint expected, got "+$)}else r8($);return $}function UU($,v=""){if(typeof $!=="number"){let I=v&&`"${v}" `;throw TypeError(I+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let I=v&&`"${v}" `;throw RangeError(I+"expected safe integer, got "+$)}}function r0($){let v=Nz($).toString(16);return v.length&1?"0"+v:v}function XW($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?Xz:BigInt("0x"+$)}function KI($){return XW(BJ($))}function cv($){return XW(BJ(hU(x$($)).reverse()))}function wz($,v){if(f$(v),v===0)throw RangeError("zero length");$=Nz($);let I=$.toString(16);if(I.length>v*2)throw RangeError("number too large");return pg(I.padStart(v*2,"0"))}function R0($,v){return wz($,v).reverse()}function NW($,v){if($=H$($),v=H$(v),$.length!==v.length)return!1;let I=0;for(let g=0;g<$.length;g++)I|=$[g]^v[g];return I===0}function hU($){return Uint8Array.from(H$($))}function Yz($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(v,I)=>{let g=v.charCodeAt(0);if(v.length!==1||g>127)throw RangeError(`string contains non-ASCII character "${$[I]}" with code ${g} at position ${I}`);return g})}var Qz=($)=>typeof $==="bigint"&&Xz<=$;function C7($,v,I){return Qz($)&&Qz(v)&&Qz(I)&&v<=$&&$<I}function AU($,v,I,g){if(!C7(v,I,g))throw RangeError("expected valid "+$+": "+I+" <= n < "+g+", got "+v)}function zg($){if($<Xz)throw Error("expected non-negative bigint, got "+$);let v;for(v=0;$>Xz;$>>=M8,v+=1);return v}var u0=($)=>(M8<<BigInt($))-M8;function wW($,v,I){if(f$($,"hashLen"),f$(v,"qByteLen"),typeof I!=="function")throw TypeError("hmacFn must be a function");let g=(Z)=>new Uint8Array(Z),U=Uint8Array.of(),J=Uint8Array.of(0),z=Uint8Array.of(1),G=1000,O=g($),D=g($),X=0,N=()=>{O.fill(1),D.fill(0),X=0},Y=(...Z)=>I(D,h$(O,...Z)),w=(Z=U)=>{if(D=Y(J,Z),O=Y(),Z.length===0)return;D=Y(z,Z),O=Y()},W=()=>{if(X++>=G)throw Error("drbg: tried max amount of iterations");let Z=0,H=[];while(Z<v){O=Y();let u=O.slice();H.push(u),Z+=O.length}return h$(...H)};return(Z,H)=>{N(),w(Z);let u=void 0;while((u=H(W()))===void 0)w();return N(),u}}function _v($,v={},I={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function g(J,z,G){if(!G&&z!=="function"&&!Object.hasOwn($,J))throw TypeError(`param "${J}" is invalid: expected own property`);let O=$[J];if(G&&O===void 0)return;let D=typeof O;if(D!==z||O===null)throw TypeError(`param "${J}" is invalid: expected ${z}, got ${D}`)}let U=(J,z)=>Object.entries(J).forEach(([G,O])=>g(G,O,z));U(v,!1),U(I,!0)}var R8=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p$=BigInt(0),B$=BigInt(1),HI=BigInt(2),ZW=BigInt(3),VW=BigInt(4),jW=BigInt(5),B7=BigInt(7),MW=BigInt(8),L7=BigInt(9),rW=BigInt(16);function C$($,v){if(v<=p$)throw Error("mod: expected positive modulus, got "+v);let I=$%v;return I>=p$?I:v+I}function nv($,v,I){if(v<p$)throw Error("pow2: expected non-negative exponent, got "+v);let g=$;while(v-- >p$)g*=g,g%=I;return g}function YW($,v){if($===p$)throw Error("invert: expected non-zero number");if(v<=p$)throw Error("invert: expected positive modulus, got "+v);let I=C$($,v),g=v,U=p$,J=B$,z=B$,G=p$;while(I!==p$){let D=g/I,X=g-I*D,N=U-z*D,Y=J-G*D;g=I,I=X,U=z,J=G,z=N,G=Y}if(g!==B$)throw Error("invert: does not exist");return C$(U,v)}function u8($,v,I){let g=$;if(!g.eql(g.sqr(v),I))throw Error("Cannot find square root")}function RW($,v){let I=$,g=(I.ORDER+B$)/VW,U=I.pow(v,g);return u8(I,U,v),U}function f7($,v){let I=$,g=(I.ORDER-jW)/MW,U=I.mul(v,HI),J=I.pow(U,g),z=I.mul(v,J),G=I.mul(I.mul(z,HI),J),O=I.mul(z,I.sub(G,I.ONE));return u8(I,O,v),O}function _7($){let v=qz($),I=uW($),g=I(v,v.neg(v.ONE)),U=I(v,g),J=I(v,v.neg(g)),z=($+B7)/rW;return(G,O)=>{let D=G,X=D.pow(O,z),N=D.mul(X,g),Y=D.mul(X,U),w=D.mul(X,J),W=D.eql(D.sqr(N),O),j=D.eql(D.sqr(Y),O);X=D.cmov(X,N,W),N=D.cmov(w,Y,j);let Z=D.eql(D.sqr(N),O),H=D.cmov(X,N,Z);return u8(D,H,O),H}}function uW($){if($<ZW)throw Error("sqrt is not defined for small field");let v=$-B$,I=0;while(v%HI===p$)v/=HI,I++;let g=HI,U=qz($);while(qW(U,g)===1)if(g++>1000)throw Error("Cannot find square root: probably non-prime P");if(I===1)return RW;let J=U.pow(g,v),z=(v+B$)/HI;return function(O,D){let X=O;if(X.is0(D))return D;if(qW(X,D)!==1)throw Error("Cannot find square root");let N=I,Y=X.mul(X.ONE,J),w=X.pow(D,v),W=X.pow(D,z);while(!X.eql(w,X.ONE)){if(X.is0(w))return X.ZERO;let j=1,Z=X.sqr(w);while(!X.eql(Z,X.ONE))if(j++,Z=X.sqr(Z),j===N)throw Error("Cannot find square root");let H=B$<<BigInt(N-j-1),u=X.pow(Y,H);N=j,Y=X.sqr(u),w=X.mul(w,Y),W=X.mul(W,u)}return W}}function n7($){if($%VW===ZW)return RW;if($%MW===jW)return f7;if($%rW===L7)return _7($);return uW($)}var TU=($,v)=>(C$($,v)&B$)===B$,b7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function K8($){let v={ORDER:"bigint",BYTES:"number",BITS:"number"},I=b7.reduce((g,U)=>{return g[U]="function",g},v);if(_v($,I),UU($.BYTES,"BYTES"),UU($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=B$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function m7($,v,I){let g=$;if(I<p$)throw Error("invalid exponent, negatives unsupported");if(I===p$)return g.ONE;if(I===B$)return v;let U=g.ONE,J=v;while(I>p$){if(I&B$)U=g.mul(U,J);J=g.sqr(J),I>>=B$}return U}function K0($,v,I=!1){let g=$,U=Array(v.length).fill(I?g.ZERO:void 0),J=v.reduce((G,O,D)=>{if(g.is0(O))return G;return U[D]=G,g.mul(G,O)},g.ONE),z=g.inv(J);return v.reduceRight((G,O,D)=>{if(g.is0(O))return G;return U[D]=g.mul(G,U[D]),g.mul(G,O)},z),U}function qW($,v){let I=$,g=(I.ORDER-B$)/HI,U=I.pow(v,g),J=I.eql(U,I.ONE),z=I.eql(U,I.ZERO),G=I.eql(U,I.neg(I.ONE));if(!J&&!z&&!G)throw Error("invalid Legendre symbol result");return J?1:z?0:-1}function F7($,v){if(v!==void 0)r8(v);if($<=p$)throw Error("invalid n length: expected positive n, got "+$);if(v!==void 0&&v<1)throw Error("invalid n length: expected positive bit length, got "+v);let I=zg($);if(v!==void 0&&v<I)throw Error(`invalid n length: expected bit length (${I}) >= n.length (${v})`);let g=v!==void 0?v:I,U=Math.ceil(g/8);return{nBitLength:g,nByteLength:U}}var WW=new WeakMap;class H8{ORDER;BITS;BYTES;isLE;ZERO=p$;ONE=B$;_lengths;_mod;constructor($,v={}){if($<=B$)throw Error("invalid field: expected ORDER > 1, got "+$);let I=void 0;if(this.isLE=!1,v!=null&&typeof v==="object"){if(typeof v.BITS==="number")I=v.BITS;if(typeof v.sqrt==="function")Object.defineProperty(this,"sqrt",{value:v.sqrt,enumerable:!0});if(typeof v.isLE==="boolean")this.isLE=v.isLE;if(v.allowedLengths)this._lengths=Object.freeze(v.allowedLengths.slice());if(typeof v.modFromBytes==="boolean")this._mod=v.modFromBytes}let{nBitLength:g,nByteLength:U}=F7($,I);if(U>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=g,this.BYTES=U,Object.freeze(this)}create($){return C$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return p$<=$&&$<this.ORDER}is0($){return $===p$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&B$)===B$}neg($){return C$(-$,this.ORDER)}eql($,v){return $===v}sqr($){return C$($*$,this.ORDER)}add($,v){return C$($+v,this.ORDER)}sub($,v){return C$($-v,this.ORDER)}mul($,v){return C$($*v,this.ORDER)}pow($,v){return m7(this,$,v)}div($,v){return C$($*YW(v,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,v){return $+v}subN($,v){return $-v}mulN($,v){return $*v}inv($){return YW($,this.ORDER)}sqrt($){let v=WW.get(this);if(!v)WW.set(this,v=n7(this.ORDER));return v(this,$)}toBytes($){return this.isLE?R0($,this.BYTES):wz($,this.BYTES)}fromBytes($,v=!1){H$($);let{_lengths:I,BYTES:g,isLE:U,ORDER:J,_mod:z}=this;if(I){if($.length<1||!I.includes($.length)||$.length>g)throw Error("Field.fromBytes: expected "+I+" bytes, got "+$.length);let O=new Uint8Array(g);O.set($,U?0:O.length-$.length),$=O}if($.length!==g)throw Error("Field.fromBytes: expected "+g+" bytes, got "+$.length);let G=U?cv($):KI($);if(z)G=C$(G,J);if(!v){if(!this.isValid(G))throw Error("invalid field element: outside of range 0..ORDER")}return G}invertBatch($){return K0(this,$)}cmov($,v,I){return HU(I,"condition"),I?v:$}}Object.freeze(H8.prototype);function qz($,v={}){return new H8($,v)}function KW($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=B$)throw Error("field order must be greater than 1");let v=zg($-B$);return Math.ceil(v/8)}function A8($){let v=KW($);return v+Math.ceil(v/2)}function HW($,v,I=!1){H$($);let g=$.length,U=KW(v),J=Math.max(A8(v),16);if(g<J||g>1024)throw Error("expected "+J+"-1024 bytes of input, got "+g);let z=I?cv($):KI($),G=C$(z,v-B$)+B$;return I?R0(G,U):wz(G,U)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Gg=BigInt(0),AI=BigInt(1);function H0($,v){let I=v.negate();return $?I:v}function TI($,v){let I=K0($.Fp,v.map((g)=>g.Z));return v.map((g,U)=>$.fromAffine(g.toAffine(I[U])))}function PW($,v){if(!Number.isSafeInteger($)||$<=0||$>v)throw Error("invalid window size, expected [1.."+v+"], got W="+$)}function T8($,v){PW($,v);let I=Math.ceil(v/$)+1,g=2**($-1),U=2**$,J=u0($),z=BigInt($);return{windows:I,windowSize:g,mask:J,maxNumber:U,shiftBy:z}}function AW($,v,I){let{windowSize:g,mask:U,maxNumber:J,shiftBy:z}=I,G=Number($&U),O=$>>z;if(G>g)G-=J,O+=AI;let D=v*g,X=D+Math.abs(G)-1,N=G===0,Y=G<0,w=v%2!==0;return{nextN:O,offset:X,isZero:N,isNeg:Y,isNegF:w,offsetF:D}}var S8=new WeakMap,kW=new WeakMap;function P8($){return kW.get($)||1}function TW($){if($!==Gg)throw Error("invalid wNAF")}class A0{BASE;ZERO;Fn;bits;constructor($,v){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=v}_unsafeLadder($,v,I=this.ZERO){let g=$;while(v>Gg){if(v&AI)I=I.add(g);g=g.double(),v>>=AI}return I}precomputeWindow($,v){let{windows:I,windowSize:g}=T8(v,this.bits),U=[],J=$,z=J;for(let G=0;G<I;G++){z=J,U.push(z);for(let O=1;O<g;O++)z=z.add(J),U.push(z);J=z.double()}return U}wNAF($,v,I){if(!this.Fn.isValid(I))throw Error("invalid scalar");let g=this.ZERO,U=this.BASE,J=T8($,this.bits);for(let z=0;z<J.windows;z++){let{nextN:G,offset:O,isZero:D,isNeg:X,isNegF:N,offsetF:Y}=AW(I,z,J);if(I=G,D)U=U.add(H0(N,v[Y]));else g=g.add(H0(X,v[O]))}return TW(I),{p:g,f:U}}wNAFUnsafe($,v,I,g=this.ZERO){let U=T8($,this.bits);for(let J=0;J<U.windows;J++){if(I===Gg)break;let{nextN:z,offset:G,isZero:O,isNeg:D}=AW(I,J,U);if(I=z,O)continue;else{let X=v[G];g=g.add(D?X.negate():X)}}return TW(I),g}getPrecomputes($,v,I){let g=S8.get(v);if(!g){if(g=this.precomputeWindow(v,$),$!==1){if(typeof I==="function")g=I(g);S8.set(v,g)}}return g}cached($,v,I){let g=P8($);return this.wNAF(g,this.getPrecomputes(g,$,I),v)}unsafe($,v,I,g){let U=P8($);if(U===1)return this._unsafeLadder($,v,g);return this.wNAFUnsafe(U,this.getPrecomputes(U,$,I),v,g)}createCache($,v){PW(v,this.bits),kW.set($,v),S8.delete($)}hasCache($){return P8($)!==1}}function EW($,v,I,g){let U=v,J=$.ZERO,z=$.ZERO;while(I>Gg||g>Gg){if(I&AI)J=J.add(U);if(g&AI)z=z.add(U);U=U.double(),I>>=AI,g>>=AI}return{p1:J,p2:z}}function SW($,v,I){if(v){if(v.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return K8(v),v}else return qz($,{isLE:I})}function Wz($,v,I={},g){if(g===void 0)g=$==="edwards";if(!v||typeof v!=="object")throw Error(`expected valid ${$} CURVE object`);for(let O of["p","n","h"]){let D=v[O];if(!(typeof D==="bigint"&&D>Gg))throw Error(`CURVE.${O} must be positive bigint`)}let U=SW(v.p,I.Fp,g),J=SW(v.n,I.Fn,g),G=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let O of G)if(!U.isValid(v[O]))throw Error(`CURVE.${O} must be valid field element of CURVE.Fp`);return v=Object.freeze(Object.assign({},v)),{CURVE:v,Fp:U,Fn:J}}function T0($,v){return function(g){let U=$(g);return{secretKey:U,publicKey:v(U)}}}function S0($,v){if(UU($),UU(v),v<0||v>4)throw Error("invalid I2OSP length: "+v);if($<0||$>2**(8*v)-1)throw Error("invalid I2OSP input: "+$);let I=Array.from({length:v}).fill(0);for(let g=v-1;g>=0;g--)I[g]=$&255,$>>>=8;return new Uint8Array(I)}function i7($,v){let I=new Uint8Array($.length);for(let g=0;g<$.length;g++)I[g]=$[g]^v[g];return I}function x7($){if(!gg($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let v=typeof $==="string"?Yz($):$;if(v.length===0)throw Error("DST must be non-empty");return v}function k8($,v,I,g){if(H$($),UU(I),v=x7(v),v.length>255)v=g(h$(Yz("H2C-OVERSIZE-DST-"),v));let{outputLen:U,blockLen:J}=g,z=Math.ceil(I/U);if(I>65535||z>255)throw Error("expand_message_xmd: invalid lenInBytes");let G=h$(v,S0(v.length,1)),O=new Uint8Array(J),D=S0(I,2),X=Array(z),N=g(h$(O,$,D,S0(0,1),G));X[0]=g(h$(N,S0(1,1),G));for(let w=1;w<z;w++){let W=[i7(N,X[w-1]),S0(w+1,1),G];X[w]=g(h$(...W))}return h$(...X).slice(0,I)}var CW="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var BW=($,v)=>($+($>=0?v:-v)/fW)/v;function c7($,v,I){AU("scalar",$,IU,I);let[[g,U],[J,z]]=v,G=BW(z*$,I),O=BW(-U*$,I),D=$-G*g-O*J,X=-G*U-O*z,N=D<IU,Y=X<IU;if(N)D=-D;if(Y)X=-X;let w=u0(Math.ceil(zg(I)/2))+pU;if(D<IU||D>=w||X<IU||X>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:N,k1:D,k2neg:Y,k2:X}}function C8($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function E8($,v){_v($);let I={};for(let g of Object.keys(v))I[g]=$[g]===void 0?v[g]:$[g];if(HU(I.lowS,"lowS"),HU(I.prehash,"prehash"),I.format!==void 0)C8(I.format);return I}class LW extends Error{constructor($=""){super($)}}var ov={Err:LW,_tlv:{encode:($,v)=>{let{Err:I}=ov;if(UU($,"tag"),$<0||$>255)throw new I("tlv.encode: wrong tag");if(typeof v!=="string")throw TypeError('"data" expected string, got type='+typeof v);if(v.length&1)throw new I("tlv.encode: unpadded data");let g=v.length/2,U=r0(g);if(U.length/2&128)throw new I("tlv.encode: long form length too big");let J=g>127?r0(U.length/2|128):"";return r0($)+J+U+v},decode($,v){let{Err:I}=ov;v=H$(v,void 0,"DER data");let g=0;if($<0||$>255)throw new I("tlv.encode: wrong tag");if(v.length<2||v[g++]!==$)throw new I("tlv.decode: wrong tlv");let U=v[g++],J=!!(U&128),z=0;if(!J)z=U;else{let O=U&127;if(!O)throw new I("tlv.decode(long): indefinite length not supported");if(O>4)throw new I("tlv.decode(long): byte length is too big");let D=v.subarray(g,g+O);if(D.length!==O)throw new I("tlv.decode: length bytes not complete");if(D[0]===0)throw new I("tlv.decode(long): zero leftmost byte");for(let X of D)z=z<<8|X;if(g+=O,z<128)throw new I("tlv.decode(long): not minimal encoding")}let G=v.subarray(g,g+z);if(G.length!==z)throw new I("tlv.decode: wrong value length");return{v:G,l:v.subarray(g+z)}}},_int:{encode($){let{Err:v}=ov;if(Nz($),$<IU)throw new v("integer: negative integers are not allowed");let I=r0($);if(Number.parseInt(I[0],16)&8)I="00"+I;if(I.length&1)throw new v("unexpected DER parsing assertion: unpadded hex");return I},decode($){let{Err:v}=ov;if($.length<1)throw new v("invalid signature integer: empty");if($[0]&128)throw new v("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new v("invalid signature integer: unnecessary leading zero");return KI($)}},toSig($){let{Err:v,_int:I,_tlv:g}=ov,U=H$($,void 0,"signature"),{v:J,l:z}=g.decode(48,U);if(z.length)throw new v("invalid signature: left bytes after parsing");let{v:G,l:O}=g.decode(2,J),{v:D,l:X}=g.decode(2,O);if(X.length)throw new v("invalid signature: left bytes after parsing");return{r:I.decode(G),s:I.decode(D)}},hexFromSig($){let{_tlv:v,_int:I}=ov,g=v.encode(2,I.encode($.r)),U=v.encode(2,I.encode($.s)),J=g+U;return v.encode(48,J)}};Object.freeze(ov._tlv);Object.freeze(ov._int);Object.freeze(ov);var IU=BigInt(0),pU=BigInt(1),fW=BigInt(2),Zz=BigInt(3),o7=BigInt(4);function _W($,v={}){let I=Wz("weierstrass",$,v),g=I.Fp,U=I.Fn,J=I.CURVE,{h:z,n:G}=J;_v(v,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:O,allowInfinityPoint:D}=v;if(O){if(!g.is0(J.a)||typeof O.beta!=="bigint"||!Array.isArray(O.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let X=bW(g,U);function N(){if(!g.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function Y(S,K,P){if(D&&K.is0())return Uint8Array.of(0);let{x:V,y:r}=K.toAffine(),M=g.toBytes(V);if(HU(P,"isCompressed"),P){N();let T=!g.isOdd(r);return h$(nW(T),M)}else return h$(Uint8Array.of(4),M,g.toBytes(r))}function w(S){H$(S,void 0,"Point");let{publicKey:K,publicKeyUncompressed:P}=X,V=S.length,r=S[0],M=S.subarray(1);if(D&&V===1&&r===0)return{x:g.ZERO,y:g.ZERO};if(V===K&&(r===2||r===3)){let T=g.fromBytes(M);if(!g.isValid(T))throw Error("bad point: is not on curve, wrong x");let R=Z(T),E;try{E=g.sqrt(R)}catch(s){let J$=s instanceof Error?": "+s.message:"";throw Error("bad point: is not on curve, sqrt error"+J$)}N();let B=g.isOdd(E);if((r&1)===1!==B)E=g.neg(E);return{x:T,y:E}}else if(V===P&&r===4){let T=g.BYTES,R=g.fromBytes(M.subarray(0,T)),E=g.fromBytes(M.subarray(T,T*2));if(!H(R,E))throw Error("bad point: is not on curve");return{x:R,y:E}}else throw Error(`bad point: got length ${V}, expected compressed=${K} or uncompressed=${P}`)}let W=v.toBytes===void 0?Y:v.toBytes,j=v.fromBytes===void 0?w:v.fromBytes;function Z(S){let K=g.sqr(S),P=g.mul(K,S);return g.add(g.add(P,g.mul(S,J.a)),J.b)}function H(S,K){let P=g.sqr(K),V=Z(S);return g.eql(P,V)}if(!H(J.Gx,J.Gy))throw Error("bad curve params: generator point");let u=g.mul(g.pow(J.a,Zz),o7),_=g.mul(g.sqr(J.b),BigInt(27));if(g.is0(g.add(u,_)))throw Error("bad curve params: a or b");function L(S,K,P=!1){if(!g.isValid(K)||P&&g.is0(K))throw Error(`bad point coordinate ${S}`);return K}function i(S){if(!(S instanceof n))throw Error("Weierstrass Point expected")}function l(S){if(!O||!O.basises)throw Error("no endo");return c7(S,O.basises,U.ORDER)}function h(S,K,P,V,r){return P=new n(g.mul(P.X,S),P.Y,P.Z),K=H0(V,K),P=H0(r,P),K.add(P)}class n{static BASE=new n(J.Gx,J.Gy,g.ONE);static ZERO=new n(g.ZERO,g.ONE,g.ZERO);static Fp=g;static Fn=U;X;Y;Z;constructor(S,K,P){this.X=L("x",S),this.Y=L("y",K,!0),this.Z=L("z",P),Object.freeze(this)}static CURVE(){return J}static fromAffine(S){let{x:K,y:P}=S||{};if(!S||!g.isValid(K)||!g.isValid(P))throw Error("invalid affine point");if(S instanceof n)throw Error("projective point not allowed");if(g.is0(K)&&g.is0(P))return n.ZERO;return new n(K,P,g.ONE)}static fromBytes(S){let K=n.fromAffine(j(H$(S,void 0,"point")));return K.assertValidity(),K}static fromHex(S){return n.fromBytes(Ig(S))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(S=8,K=!0){if(U$.createCache(this,S),!K)this.multiply(Zz);return this}assertValidity(){let S=this;if(S.is0()){if(v.allowInfinityPoint&&g.is0(S.X)&&g.eql(S.Y,g.ONE)&&g.is0(S.Z))return;throw Error("bad point: ZERO")}let{x:K,y:P}=S.toAffine();if(!g.isValid(K)||!g.isValid(P))throw Error("bad point: x or y not field elements");if(!H(K,P))throw Error("bad point: equation left != right");if(!S.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:S}=this.toAffine();if(!g.isOdd)throw Error("Field doesn't support isOdd");return!g.isOdd(S)}equals(S){i(S);let{X:K,Y:P,Z:V}=this,{X:r,Y:M,Z:T}=S,R=g.eql(g.mul(K,T),g.mul(r,V)),E=g.eql(g.mul(P,T),g.mul(M,V));return R&&E}negate(){return new n(this.X,g.neg(this.Y),this.Z)}double(){let{a:S,b:K}=J,P=g.mul(K,Zz),{X:V,Y:r,Z:M}=this,T=g.ZERO,R=g.ZERO,E=g.ZERO,B=g.mul(V,V),x=g.mul(r,r),s=g.mul(M,M),J$=g.mul(V,r);return J$=g.add(J$,J$),E=g.mul(V,M),E=g.add(E,E),T=g.mul(S,E),R=g.mul(P,s),R=g.add(T,R),T=g.sub(x,R),R=g.add(x,R),R=g.mul(T,R),T=g.mul(J$,T),E=g.mul(P,E),s=g.mul(S,s),J$=g.sub(B,s),J$=g.mul(S,J$),J$=g.add(J$,E),E=g.add(B,B),B=g.add(E,B),B=g.add(B,s),B=g.mul(B,J$),R=g.add(R,B),s=g.mul(r,M),s=g.add(s,s),B=g.mul(s,J$),T=g.sub(T,B),E=g.mul(s,x),E=g.add(E,E),E=g.add(E,E),new n(T,R,E)}add(S){i(S);let{X:K,Y:P,Z:V}=this,{X:r,Y:M,Z:T}=S,R=g.ZERO,E=g.ZERO,B=g.ZERO,x=J.a,s=g.mul(J.b,Zz),J$=g.mul(K,r),G$=g.mul(P,M),Q$=g.mul(V,T),w$=g.add(K,P),X$=g.add(r,M);w$=g.mul(w$,X$),X$=g.add(J$,G$),w$=g.sub(w$,X$),X$=g.add(K,V);let N$=g.add(r,T);return X$=g.mul(X$,N$),N$=g.add(J$,Q$),X$=g.sub(X$,N$),N$=g.add(P,V),R=g.add(M,T),N$=g.mul(N$,R),R=g.add(G$,Q$),N$=g.sub(N$,R),B=g.mul(x,X$),R=g.mul(s,Q$),B=g.add(R,B),R=g.sub(G$,B),B=g.add(G$,B),E=g.mul(R,B),G$=g.add(J$,J$),G$=g.add(G$,J$),Q$=g.mul(x,Q$),X$=g.mul(s,X$),G$=g.add(G$,Q$),Q$=g.sub(J$,Q$),Q$=g.mul(x,Q$),X$=g.add(X$,Q$),J$=g.mul(G$,X$),E=g.add(E,J$),J$=g.mul(N$,X$),R=g.mul(w$,R),R=g.sub(R,J$),J$=g.mul(w$,G$),B=g.mul(N$,B),B=g.add(B,J$),new n(R,E,B)}subtract(S){return i(S),this.add(S.negate())}is0(){return this.equals(n.ZERO)}multiply(S){let{endo:K}=v;if(!U.isValidNot0(S))throw RangeError("invalid scalar: out of range");let P,V,r=(M)=>U$.cached(this,M,(T)=>TI(n,T));if(K){let{k1neg:M,k1:T,k2neg:R,k2:E}=l(S),{p:B,f:x}=r(T),{p:s,f:J$}=r(E);V=x.add(J$),P=h(K.beta,B,s,M,R)}else{let{p:M,f:T}=r(S);P=M,V=T}return TI(n,[P,V])[0]}multiplyUnsafe(S){let{endo:K}=v,P=this,V=S;if(!U.isValid(V))throw RangeError("invalid scalar: out of range");if(V===IU||P.is0())return n.ZERO;if(V===pU)return P;if(U$.hasCache(this))return this.multiply(V);if(K){let{k1neg:r,k1:M,k2neg:T,k2:R}=l(V),{p1:E,p2:B}=EW(n,P,M,R);return h(K.beta,E,B,r,T)}else return U$.unsafe(P,V)}toAffine(S){let K=this,P=S,{X:V,Y:r,Z:M}=K;if(g.eql(M,g.ONE))return{x:V,y:r};let T=K.is0();if(P==null)P=T?g.ONE:g.inv(M);let R=g.mul(V,P),E=g.mul(r,P),B=g.mul(M,P);if(T)return{x:g.ZERO,y:g.ZERO};if(!g.eql(B,g.ONE))throw Error("invZ was invalid");return{x:R,y:E}}isTorsionFree(){let{isTorsionFree:S}=v;if(z===pU)return!0;if(S)return S(n,this);return U$.unsafe(this,G).is0()}clearCofactor(){let{clearCofactor:S}=v;if(z===pU)return this;if(S)return S(n,this);return this.multiplyUnsafe(z)}isSmallOrder(){if(z===pU)return this.is0();return this.clearCofactor().is0()}toBytes(S=!0){return HU(S,"isCompressed"),this.assertValidity(),W(n,this,S)}toHex(S=!0){return Ug(this.toBytes(S))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=U.BITS,U$=new A0(n,v.endo?Math.ceil(b/2):b);if(b>=8)n.BASE.precompute(8);return Object.freeze(n.prototype),Object.freeze(n),n}function nW($){return Uint8Array.of($?2:3)}function bW($,v){return{secretKey:v.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*v.BYTES}}function y7($,v={}){let{Fn:I}=$,g=v.randomBytes===void 0?Jg:v.randomBytes,U=Object.assign(bW($.Fp,I),{seed:Math.max(A8(I.ORDER),16)});function J(w){try{let W=I.fromBytes(w);return I.isValidNot0(W)}catch(W){return!1}}function z(w,W){let{publicKey:j,publicKeyUncompressed:Z}=U;try{let H=w.length;if(W===!0&&H!==j)return!1;if(W===!1&&H!==Z)return!1;return!!$.fromBytes(w)}catch(H){return!1}}function G(w){return w=w===void 0?g(U.seed):w,HW(H$(w,U.seed,"seed"),I.ORDER)}function O(w,W=!0){return $.BASE.multiply(I.fromBytes(w)).toBytes(W)}function D(w){let{secretKey:W,publicKey:j,publicKeyUncompressed:Z}=U,H=I._lengths;if(!gg(w))return;let u=H$(w,void 0,"key").length,_=u===j||u===Z,L=u===W||!!H?.includes(u);if(_&&L)return;return _}function X(w,W,j=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(W)===!1)throw Error("second arg must be public key");let Z=I.fromBytes(w);return $.fromBytes(W).multiply(Z).toBytes(j)}let N={isValidSecretKey:J,isValidPublicKey:z,randomSecretKey:G},Y=T0(G,O);return Object.freeze(N),Object.freeze(U),Object.freeze({getPublicKey:O,getSharedSecret:X,keygen:Y,Point:$,utils:N,lengths:U})}function mW($,v,I={}){let g=v;YU(g),_v(I,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),I=Object.assign({},I);let U=I.randomBytes===void 0?Jg:I.randomBytes,J=I.hmac===void 0?(r,M)=>tv(g,r,M):I.hmac,{Fp:z,Fn:G}=$,{ORDER:O,BITS:D}=G,{keygen:X,getPublicKey:N,getSharedSecret:Y,utils:w,lengths:W}=y7($,I),j={prehash:!0,lowS:typeof I.lowS==="boolean"?I.lowS:!0,format:"compact",extraEntropy:!1},Z=O*fW+pU<z.ORDER;function H(r){let M=O>>pU;return r>M}function u(r,M){if(!G.isValidNot0(M))throw Error(`invalid signature ${r}: out of range 1..Point.Fn.ORDER`);return M}function _(){if(Z)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(r,M){C8(M);let T=W.signature,R=M==="compact"?T:M==="recovered"?T+1:void 0;return H$(r,R)}class i{r;s;recovery;constructor(r,M,T){if(this.r=u("r",r),this.s=u("s",M),T!=null){if(_(),![0,1,2,3].includes(T))throw Error("invalid recovery id");this.recovery=T}Object.freeze(this)}static fromBytes(r,M=j.format){L(r,M);let T;if(M==="der"){let{r:x,s}=ov.toSig(H$(r));return new i(x,s)}if(M==="recovered")T=r[0],M="compact",r=r.subarray(1);let R=W.signature/2,E=r.subarray(0,R),B=r.subarray(R,R*2);return new i(G.fromBytes(E),G.fromBytes(B),T)}static fromHex(r,M){return this.fromBytes(Ig(r),M)}assertRecovery(){let{recovery:r}=this;if(r==null)throw Error("invalid recovery id: must be present");return r}addRecoveryBit(r){return new i(this.r,this.s,r)}recoverPublicKey(r){let{r:M,s:T}=this,R=this.assertRecovery(),E=R===2||R===3?M+O:M;if(!z.isValid(E))throw Error("invalid recovery id: sig.r+curve.n != R.x");let B=z.toBytes(E),x=$.fromBytes(h$(nW((R&1)===0),B)),s=G.inv(E),J$=h(H$(r,void 0,"msgHash")),G$=G.create(-J$*s),Q$=G.create(T*s),w$=$.BASE.multiplyUnsafe(G$).add(x.multiplyUnsafe(Q$));if(w$.is0())throw Error("invalid recovery: point at infinify");return w$.assertValidity(),w$}hasHighS(){return H(this.s)}toBytes(r=j.format){if(C8(r),r==="der")return Ig(ov.hexFromSig(this));let{r:M,s:T}=this,R=G.toBytes(M),E=G.toBytes(T);if(r==="recovered")return _(),h$(Uint8Array.of(this.assertRecovery()),R,E);return h$(R,E)}toHex(r){return Ug(this.toBytes(r))}}Object.freeze(i.prototype),Object.freeze(i);let l=I.bits2int===void 0?function(M){if(M.length>8192)throw Error("input is too large");let T=KI(M),R=M.length*8-D;return R>0?T>>BigInt(R):T}:I.bits2int,h=I.bits2int_modN===void 0?function(M){return G.create(l(M))}:I.bits2int_modN,n=u0(D);function b(r){return AU("num < 2^"+D,r,IU,n),G.toBytes(r)}function U$(r,M){return H$(r,void 0,"message"),M?H$(g(r),void 0,"prehashed message"):r}function S(r,M,T){let{lowS:R,prehash:E,extraEntropy:B}=E8(T,j);r=U$(r,E);let x=h(r),s=G.fromBytes(M);if(!G.isValidNot0(s))throw Error("invalid private key");let J$=[b(s),b(x)];if(B!=null&&B!==!1){let X$=B===!0?U(W.secretKey):B;J$.push(H$(X$,void 0,"extraEntropy"))}let G$=h$(...J$),Q$=x;function w$(X$){let N$=l(X$);if(!G.isValidNot0(N$))return;let Z$=G.inv(N$),P$=$.BASE.multiply(N$).toAffine(),E$=G.create(P$.x);if(E$===IU)return;let a$=G.create(Z$*G.create(Q$+E$*s));if(a$===IU)return;let e$=(P$.x===E$?0:2)|Number(P$.y&pU),Vv=a$;if(R&&H(a$))Vv=G.neg(a$),e$^=1;return new i(E$,Vv,Z?void 0:e$)}return{seed:G$,k2sig:w$}}function K(r,M,T={}){let{seed:R,k2sig:E}=S(r,M,T);return wW(g.outputLen,G.BYTES,J)(R,E).toBytes(T.format)}function P(r,M,T,R={}){let{lowS:E,prehash:B,format:x}=E8(R,j);if(T=H$(T,void 0,"publicKey"),M=U$(M,B),!gg(r)){let s=r instanceof i?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+s)}L(r,x);try{let s=i.fromBytes(r,x),J$=$.fromBytes(T);if(E&&s.hasHighS())return!1;let{r:G$,s:Q$}=s,w$=h(M),X$=G.inv(Q$),N$=G.create(w$*X$),Z$=G.create(G$*X$),P$=$.BASE.multiplyUnsafe(N$).add(J$.multiplyUnsafe(Z$));if(P$.is0())return!1;return G.create(P$.x)===G$}catch(s){return!1}}function V(r,M,T={}){let{prehash:R}=E8(T,j);return M=U$(M,R),i.fromBytes(r,"recovered").recoverPublicKey(M).toBytes()}return Object.freeze({keygen:X,getPublicKey:N,getSharedSecret:Y,utils:w,lengths:W,Point:$,sign:K,verify:P,recoverPublicKey:V,Signature:i,hash:g})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var l7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var d7=_W(l7),Og=mW(d7,_$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var tU=BigInt(0),Mv=BigInt(1),B8=BigInt(2),h7=BigInt(8);function p7($,v,I,g){let U=$.sqr(I),J=$.sqr(g),z=$.add($.mul(v.a,U),J),G=$.add($.ONE,$.mul(v.d,$.mul(U,J)));return $.eql(z,G)}function FW($,v={}){let I=v,g=Wz("edwards",$,I,I.FpFnLE),{Fp:U,Fn:J}=g,z=g.CURVE,{h:G}=z;_v(I,{},{uvRatio:"function"});let O=B8<<BigInt(J.BYTES*8)-Mv,D=(j)=>U.create(j),X=I.uvRatio===void 0?(j,Z)=>{try{return{isValid:!0,value:U.sqrt(U.div(j,Z))}}catch(H){return{isValid:!1,value:tU}}}:I.uvRatio;if(!p7(U,z,z.Gx,z.Gy))throw Error("bad curve params: generator point");function N(j,Z,H=!1){let u=H?Mv:tU;return AU("coordinate "+j,Z,u,O),Z}function Y(j){if(!(j instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(z.Gx,z.Gy,Mv,D(z.Gx*z.Gy));static ZERO=new w(tU,Mv,Mv,tU);static Fp=U;static Fn=J;X;Y;Z;T;constructor(j,Z,H,u){this.X=N("x",j),this.Y=N("y",Z),this.Z=N("z",H,!0),this.T=N("t",u),Object.freeze(this)}static CURVE(){return z}static fromAffine(j){if(j instanceof w)throw Error("extended point not allowed");let{x:Z,y:H}=j||{};return N("x",Z),N("y",H),new w(Z,H,Mv,D(Z*H))}static fromBytes(j,Z=!1){let H=U.BYTES,{a:u,d:_}=z;j=hU(H$(j,H,"point")),HU(Z,"zip215");let L=hU(j),i=j[H-1];L[H-1]=i&-129;let l=cv(L),h=Z?O:U.ORDER;AU("point.y",l,tU,h);let n=D(l*l),b=D(n-Mv),U$=D(_*n-u),{isValid:S,value:K}=X(b,U$);if(!S)throw Error("bad point: invalid y coordinate");let P=(K&Mv)===Mv,V=(i&128)!==0;if(!Z&&K===tU&&V)throw Error("bad point: x=0 and x_0=1");if(V!==P)K=D(-K);return w.fromAffine({x:K,y:l})}static fromHex(j,Z=!1){return w.fromBytes(Ig(j),Z)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,Z=!0){if(W.createCache(this,j),!Z)this.multiply(B8);return this}assertValidity(){let j=this,{a:Z,d:H}=z;if(j.is0())throw Error("bad point: ZERO");let{X:u,Y:_,Z:L,T:i}=j,l=D(u*u),h=D(_*_),n=D(L*L),b=D(n*n),U$=D(l*Z),S=D(n*D(U$+h)),K=D(b+D(H*D(l*h)));if(S!==K)throw Error("bad point: equation left != right (1)");let P=D(u*_),V=D(L*i);if(P!==V)throw Error("bad point: equation left != right (2)")}equals(j){Y(j);let{X:Z,Y:H,Z:u}=this,{X:_,Y:L,Z:i}=j,l=D(Z*i),h=D(_*u),n=D(H*i),b=D(L*u);return l===h&&n===b}is0(){return this.equals(w.ZERO)}negate(){return new w(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:j}=z,{X:Z,Y:H,Z:u}=this,_=D(Z*Z),L=D(H*H),i=D(B8*D(u*u)),l=D(j*_),h=Z+H,n=D(D(h*h)-_-L),b=l+L,U$=b-i,S=l-L,K=D(n*U$),P=D(b*S),V=D(n*S),r=D(U$*b);return new w(K,P,r,V)}add(j){Y(j);let{a:Z,d:H}=z,{X:u,Y:_,Z:L,T:i}=this,{X:l,Y:h,Z:n,T:b}=j,U$=D(u*l),S=D(_*h),K=D(i*H*b),P=D(L*n),V=D((u+_)*(l+h)-U$-S),r=P-K,M=P+K,T=D(S-Z*U$),R=D(V*r),E=D(M*T),B=D(V*T),x=D(r*M);return new w(R,E,x,B)}subtract(j){return Y(j),this.add(j.negate())}multiply(j){if(!J.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:Z,f:H}=W.cached(this,j,(u)=>TI(w,u));return TI(w,[Z,H])[0]}multiplyUnsafe(j){if(!J.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===tU)return w.ZERO;if(this.is0()||j===Mv)return this;return W.unsafe(this,j,(Z)=>TI(w,Z))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return W.unsafe(this,z.n).is0()}toAffine(j){let Z=this,H=j,{X:u,Y:_,Z:L}=Z,i=Z.is0();if(H==null)H=i?h7:U.inv(L);let l=D(u*H),h=D(_*H),n=U.mul(L,H);if(i)return{x:tU,y:Mv};if(n!==Mv)throw Error("invZ was invalid");return{x:l,y:h}}clearCofactor(){if(G===Mv)return this;return this.multiplyUnsafe(G)}toBytes(){let{x:j,y:Z}=this.toAffine(),H=U.toBytes(Z);return H[H.length-1]|=j&Mv?128:0,H}toHex(){return Ug(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let W=new A0(w,J.BITS);if(J.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class L8{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){R8()}static fromHex($){R8()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return Ug(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,v){return this.ep.precompute($,v),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var P0=BigInt(0),Dg=BigInt(1),Vz=BigInt(2);function t7($){return _v($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function iW($){let v=t7($),{P:I,type:g,adjustScalarBytes:U,powPminus2:J,randomBytes:z}=v,G=g==="x25519";if(!G&&g!=="x448")throw Error("invalid type");let O=z===void 0?Jg:z,D=G?255:448,X=G?32:56,N=G?BigInt(9):BigInt(5),Y=G?BigInt(121665):BigInt(39081),w=G?Vz**BigInt(254):Vz**BigInt(447),W=G?BigInt(8)*Vz**BigInt(251)-Dg:BigInt(4)*Vz**BigInt(445)-Dg,j=w+W+Dg,Z=(V)=>C$(V,I),H=u(N);function u(V){return R0(Z(V),X)}function _(V){let r=hU(H$(V,X,"uCoordinate"));if(G)r[31]&=127;return Z(cv(r))}function L(V){return cv(U(hU(H$(V,X,"scalar"))))}function i(V,r){let M=U$(_(r),L(V));if(M===P0)throw Error("invalid private or public key received");return u(M)}function l(V){return i(V,H)}let h=l,n=i;function b(V,r,M){let T=Z(V*(r-M));return r=Z(r-T),M=Z(M+T),{x_2:r,x_3:M}}function U$(V,r){AU("u",V,P0,I),AU("scalar",r,w,j);let M=r,T=V,R=Dg,E=P0,B=V,x=Dg,s=P0;for(let G$=BigInt(D-1);G$>=P0;G$--){let Q$=M>>G$&Dg;s^=Q$,{x_2:R,x_3:B}=b(s,R,B),{x_2:E,x_3:x}=b(s,E,x),s=Q$;let w$=R+E,X$=Z(w$*w$),N$=R-E,Z$=Z(N$*N$),P$=X$-Z$,E$=B+x,a$=B-x,e$=Z(a$*w$),Vv=Z(E$*N$),dv=e$+Vv,hv=e$-Vv;B=Z(dv*dv),x=Z(T*Z(hv*hv)),R=Z(X$*Z$),E=Z(P$*(X$+Z(Y*P$)))}({x_2:R,x_3:B}=b(s,R,B)),{x_2:E,x_3:x}=b(s,E,x);let J$=J(E);return Z(R*J$)}let S={secretKey:X,publicKey:X,seed:X},K=(V)=>{return V=V===void 0?O(X):V,H$(V,S.seed,"seed"),V},P={randomSecretKey:K};return Object.freeze(S),Object.freeze(P),Object.freeze({keygen:T0(K,h),getSharedSecret:n,getPublicKey:h,scalarMult:i,scalarMultBase:l,utils:P,GuBytes:H.slice(),lengths:S})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var a7=BigInt(0),SU=BigInt(1),xW=BigInt(2),e7=BigInt(3),s7=BigInt(5),$R=BigInt(8),PI=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),b8=(()=>({p:PI,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:$R,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function yW($){let v=BigInt(10),I=BigInt(20),g=BigInt(40),U=BigInt(80),J=PI,G=$*$%J*$%J,O=nv(G,xW,J)*G%J,D=nv(O,SU,J)*$%J,X=nv(D,s7,J)*D%J,N=nv(X,v,J)*X%J,Y=nv(N,I,J)*N%J,w=nv(Y,g,J)*Y%J,W=nv(w,U,J)*w%J,j=nv(W,U,J)*w%J,Z=nv(j,v,J)*X%J;return{pow_p_5_8:nv(Z,xW,J)*$%J,b2:G}}function vR($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var f8=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function m8($,v){let I=PI,g=C$(v*v*v,I),U=C$(g*g*v,I),J=yW($*U).pow_p_5_8,z=C$($*g*J,I),G=C$(v*z*z,I),O=z,D=C$(z*f8,I),X=G===$,N=G===C$(-$,I),Y=G===C$(-$*f8,I);if(X)z=O;if(N||Y)z=D;if(TU(z,I))z=C$(-z,I);return{isValid:X||N,value:z}}var SI=FW(b8,{uvRatio:m8}),aU=(()=>SI.Fp)(),lW=(()=>SI.Fn)();var jz=(()=>{let $=PI;return iW({P:$,type:"x25519",powPminus2:(v)=>{let{pow_p_5_8:I,b2:g}=yW(v);return C$(nv(I,e7,$)*g,$)},adjustScalarBytes:vR})})();var _8=f8,UR=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),IR=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),gR=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),JR=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),cW=($)=>m8(SU,$),zR=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n8=($)=>aU.create(cv($)&zR);function oW($){let{d:v}=b8,I=PI,g=(H)=>aU.create(H),U=g(_8*$*$),J=g((U+SU)*gR),z=BigInt(-1),G=g((z-v*U)*g(U+v)),{isValid:O,value:D}=m8(J,G),X=g(D*$);if(!TU(X,I))X=g(-X);if(!O)D=X;if(!O)z=U;let N=g(z*(U-SU)*JR-G),Y=D*D,w=g((D+D)*G),W=g(N*UR),j=g(SU-Y),Z=g(SU+Y);return new SI(g(w*Z),g(j*W),g(W*Z),g(w*j))}class Nv extends L8{static BASE=(()=>new Nv(SI.BASE))();static ZERO=(()=>new Nv(SI.ZERO))();static Fp=(()=>aU)();static Fn=(()=>lW)();constructor($){super($)}static fromAffine($){return new Nv(SI.fromAffine($))}assertSame($){if(!($ instanceof Nv))throw Error("RistrettoPoint expected")}init($){return new Nv($)}static fromBytes($){x$($,32);let{a:v,d:I}=b8,g=PI,U=(_)=>aU.create(_),J=n8($);if(!NW(aU.toBytes(J),$)||TU(J,g))throw Error("invalid ristretto255 encoding 1");let z=U(J*J),G=U(SU+v*z),O=U(SU-v*z),D=U(G*G),X=U(O*O),N=U(v*I*D-X),{isValid:Y,value:w}=cW(U(N*X)),W=U(w*O),j=U(w*W*N),Z=U((J+J)*W);if(TU(Z,g))Z=U(-Z);let H=U(G*j),u=U(Z*H);if(!Y||TU(u,g)||H===a7)throw Error("invalid ristretto255 encoding 2");return new Nv(new SI(Z,H,SU,u))}static fromHex($){return Nv.fromBytes(pg($))}toBytes(){let{X:$,Y:v,Z:I,T:g}=this.ep,U=PI,J=(j)=>aU.create(j),z=J(J(I+v)*J(I-v)),G=J($*v),O=J(G*G),{value:D}=cW(J(z*O)),X=J(D*z),N=J(D*G),Y=J(X*N*g),w;if(TU(g*Y,U)){let j=J(v*_8),Z=J($*_8);$=j,v=Z,w=J(X*IR)}else w=N;if(TU($*Y,U))v=J(-v);let W=J((I-v)*w);if(TU(W,U))W=J(-W);return aU.toBytes(W)}equals($){this.assertSame($);let{X:v,Y:I}=this.ep,{X:g,Y:U}=$.ep,J=(O)=>aU.create(O),z=J(v*U)===J(I*g),G=J(I*U)===J(v*g);return z||G}is0(){return this.equals(Nv.ZERO)}}Object.freeze(Nv.BASE);Object.freeze(Nv.ZERO);Object.freeze(Nv.prototype);Object.freeze(Nv);var GR=Object.freeze({Point:Nv,hashToCurve($,v){let I=v?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":v.DST,g=k8($,I,64,nJ);return GR.deriveToCurve(g)},hashToScalar($,v={DST:CW}){let I=k8($,v.DST,64,nJ);return lW.create(cv(I))},deriveToCurve($){x$($,64);let v=n8($.subarray(0,32)),I=oW(v),g=n8($.subarray(32,64)),U=oW(g);return new Nv(I.add(U))}});var dW=!1,OR=!1;async function hW($,v){if(OR)return await v();try{return await $()}catch(I){if(I instanceof ReferenceError||I instanceof DOMException&&I.name==="NotSupportedError")return await v();else throw I}}async function Mz($,v){return await hW(async()=>{let I=F8($)?$:await QR($),g=await crypto.subtle.importKey("raw",XR(v),{name:"X25519"},dW,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:g},I,256))},()=>{if(F8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return jz.scalarMult($,v)})}async function k0($){return await hW(async()=>{return Mz($,jz.GuBytes)},()=>{if(F8($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return jz.scalarMultBase($)})}var DR=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function QR($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let v=new Uint8Array([...DR,...$]);return crypto.subtle.importKey("pkcs8",v,{name:"X25519"},dW,["deriveBits"])}function F8($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function XR($){return $}class i8{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let v=this.buf.indexOf(10);if(v>=0)return $.push(this.buf.subarray(0,v)),this.transcript.push(this.buf.subarray(0,v+1)),this.buf=this.buf.subarray(v+1),wR(kI($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let I=await this.s.read();if(I.done)return this.buf=kI($),null;this.buf=I.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:kI(this.transcript)}}}function wR($){return $.forEach((v)=>{if(v<32||v>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function kI($){let v=$.reduce((U,J)=>U+J.length,0),I=new Uint8Array(v),g=0;for(let U of $)I.set(U,g),g+=U.length;return I}function Qg($,...v){return $.pipeThrough(new TransformStream({start(I){for(let g of v)I.enqueue(g)}}))}function rz($){return new ReadableStream({start(v){v.enqueue($),v.close()}})}async function x8($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function pW($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function tW($,v){let I=$.getReader(),g=[],U=0;while(U<v){let{done:O,value:D}=await I.read();if(O)throw Error("stream ended before reading "+v.toString()+" bytes");g.push(D),U+=D.length}I.releaseLock();let J=kI(g),z=J.subarray(0,v),G=Qg($,J.subarray(v));return{data:z,rest:G}}class gU{args;body;constructor($,v){this.args=$,this.body=v}}async function YR($){let v=await $.readLine();if(v===null)throw Error("invalid stanza");let I=v.split(" ");if(I.length<2||I.shift()!=="->")return{next:v};for(let J of I)if(J.length===0)throw Error("invalid stanza");let g=[];for(;;){let J=await $.readLine();if(J===null)throw Error("invalid stanza");let z=vv.decode(J);if(z.length>48)throw Error("invalid stanza");if(g.push(z),z.length<48)break}let U=kI(g);return{s:new gU(I,U)}}async function aW($){let v=new i8($),I=await v.readLine();if(I!=="age-encryption.org/v1")throw Error("invalid version "+(I??"line"));let g=[];for(;;){let{s:U,next:J}=await YR(v);if(U!==void 0){g.push(U);continue}if(!J.startsWith("--- "))throw Error("invalid header");let z=vv.decode(J.slice(4)),{rest:G,transcript:O}=v.close(),D=O.slice(0,O.length-1-J.length+3);return{stanzas:g,headerNoMAC:D,MAC:z,headerSize:O.length,rest:Qg($,G)}}}function c8($){let v=[];v.push(`age-encryption.org/v1
5
5
  `);for(let I of $){v.push("-> "+I.args.join(" ")+`
6
6
  `);for(let g=0;g<I.body.length;g+=48){let U=g+48;if(U>I.body.length)U=I.body.length;v.push(vv.encode(I.body.subarray(g,U))+`
7
7
  `)}if(I.body.length%48===0)v.push(`