@rizom/ops 0.2.0-alpha.270 → 0.2.0-alpha.271
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +5 -5
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -257,7 +257,7 @@ Update marker: ${U.id}.
|
|
|
257
257
|
`),await E0(l$($.artifactsDir,"report.md"),sh($))}function sh($){let U=$.report.metrics.runtime,J=$.report.metrics.health,G=U.map((O)=>O.cpuPercent).sort((O,q)=>O-q),I=U.map((O)=>O.memoryPercent),Q=J.filter((O)=>!O.ok),X=["# Directory-sync stress report","",`- Run: \`${$.runId}\``,`- Target: \`${$.target.handle}\` (${$.target.domain})`,`- Profile: \`${$.report.profile}\``,`- Version: \`${$.report.baseline.version}\``,`- Result: **${$.report.success?"PASS":"FAIL"}**`,`- Started: ${$.startedAt}`,`- Completed: ${$.completedAt}`,"","## Phases","","| Phase | Operation | Count | Result | Pull latency | Persistence latency |","| --- | --- | ---: | --- | ---: | ---: |",...$.report.phases.map((O)=>`| ${O.id} | ${O.operation} | ${O.count} | ${O.success?"pass":`fail: ${O.error??"unknown"}`} | ${rA(O.commitLatencyMs)} | ${rA(O.persistenceLatencyMs)} |`),"","## Runtime","",`- Samples: ${U.length}`,`- CPU p50/p95/p99/max: ${vQ(H7(G,0.5))} / ${vQ(H7(G,0.95))} / ${vQ(H7(G,0.99))} / ${vQ(G.at(-1))}`,`- Memory max: ${vQ(I.length?Math.max(...I):void 0)}`,`- PIDs max: ${U.length?Math.max(...U.map((O)=>O.pids)):"n/a"}`,`- Container status/restarts/OOM: ${$.report.metrics.container?`${$.report.metrics.container.status} / ${$.report.metrics.container.restartCount} / ${$.report.metrics.container.oomKilled}`:"unknown"}`,`- Health samples: ${J.length}`,`- Health failures: ${Q.length}`,"","## Cleanup","",`- Result: ${$.report.cleanup.success?"pass":"fail"}`,`- Remaining probes: ${$.report.cleanup.probesRemaining}`,`- Final entities: ${$.report.cleanup.finalEntities??"unknown"}`,`- Final notes: ${$.report.cleanup.finalNotes??"unknown"}`,`- Content tree restored: ${$.report.cleanup.contentTreeRestored??"unknown"}`,""];if($.report.failure)X.push("## Failure","",$.report.failure,"");return`${X.join(`
|
|
258
258
|
`)}
|
|
259
259
|
`}function H7($,U){if($.length===0)return;let J=Math.max(0,Math.ceil($.length*U)-1);return $[J]}function vQ($){return $===void 0?"n/a":`${$.toFixed(2)}%`}function rA($){return $===void 0?"n/a":`${($/1000).toFixed(1)}s`}var nh,ch;var K7=J$(()=>{eU();M7();BJ();Oq();mA();yA();Oq();nh=K.object({HCLOUD_TOKEN:K.string().min(1),KAMAL_SSH_PRIVATE_KEY:K.string().min(1),CONTENT_REPO_ADMIN_TOKEN:K.string().min(1)}),ch=K.object({servers:K.array(K.object({id:K.number().int(),status:K.string(),public_net:K.object({ipv4:K.object({ip:K.string().min(1)})})}))})});import{parseArgs as RP}from"util";function d$($){return $}class jQ extends Error{constructor($){super($);this.name="CliUsageError"}}function HP($,U){let J={...U};for(let G of $)for(let[I,Q]of Object.entries(G.flags??{})){let X=J[I];if(X===void 0){J[I]=Q;continue}if(X.type!==Q.type||X.short!==Q.short||X.default!==Q.default)throw Error(`Conflicting definitions for flag --${I}: commands must agree on type, short, and default`)}return J}function jP($){let U={};for(let[J,G]of Object.entries($))U[J]={type:G.type,...G.short!==void 0?{short:G.short}:{},...G.default!==void 0?{default:G.default}:{}};return U}function TP($){if(!($ instanceof Error)||!("code"in $))return!1;return $.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||$.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function S7($,U){let J=HP(U.commands,U.globalFlags??{}),G,I;try{({values:G,positionals:I}=RP({args:$,options:jP(J),allowPositionals:!0,strict:U.strict??!0}))}catch(X){if(TP(X))throw new jQ(X.message.split(". ")[0]??X.message);throw X}if("help"in J&&G.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in J&&G.version===!0)return{command:"version",args:[],flags:{version:!0}};let Q={};for(let[X,O]of Object.entries(J)){let q=G[X];if(typeof q==="string"&&O.type==="string")Q[X]=q;else if(typeof q==="boolean"&&O.type==="boolean")Q[X]=q}return{command:I[0]??"help",args:I.slice(1),flags:Q}}function C7($){let U=$.reduce((J,G)=>Math.max(J,G.label.length),0);return $.map((J)=>` ${J.label.padEnd(U)} ${J.description}`)}function KP($){return C7($.map((U)=>({label:U.usage?`${U.name} ${U.usage}`:U.name,description:U.description})))}function AP($,U){let J=U.type==="string"?` ${U.placeholder??"<value>"}`:"",G=U.short!==void 0?`, -${U.short}`:"";return`--${$}${J}${G}`}function _7($){return C7(Object.entries($).map(([U,J])=>({label:AP(U,J),description:J.description})))}function E7($,U){return`Usage: ${$} ${U.name}${U.usage?` ${U.usage}`:""}`}function PP($){return JSON.stringify(Object.entries($).map(([U,J])=>[U,J.type,J.short??"",J.description,J.placeholder??"",J.default??""]).sort((U,J)=>String(U[0]).localeCompare(String(J[0]))))}function BP($){let U=[],J=new Map;for(let I of $){let Q=I.flags??{};if(Object.keys(Q).length===0)continue;let X=PP(Q),O=J.get(X);if(O){O.names.push(I.name);continue}let q={names:[I.name],flags:Q};J.set(X,q),U.push(q)}let G=[];for(let I of U)G.push("",`${I.names.join(" / ")} options:`),G.push(..._7(I.flags));return G}function b7($){let U=[$.intro,"",`Usage: ${$.cliName} ${$.usage??"<command> [args]"}`,"","Commands:",...KP($.commands)];if($.globalFlags&&Object.keys($.globalFlags).length>0)U.push("","Options:",..._7($.globalFlags));return U.push(...BP($.commands)),U.join(`
|
|
260
|
-
`)}function f7($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function uU($,U){let J=$[U];return typeof J==="string"?J:void 0}function TQ($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var KQ={name:"@rizom/ops",version:"0.2.0-alpha.270",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as zS,mkdirSync as YS,readFileSync as Jz,writeFileSync as Gz}from"fs";import{dirname as WS,join as x5}from"path";function Vq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function m$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function t$($,U,J=""){let G=Vq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(m$($.outputLen),m$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function uJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function AQ($,U){t$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function PQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function MU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function I0($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var SP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function CP($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function _P($){for(let U=0;U<$.length;U++)$[U]=CP($[U]);return $}var Nq=SP?($)=>$:_P,F7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),EP=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function BQ($){if(t$($),F7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=EP[$[J]];return U}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function k7($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function G8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(F7)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=k7($.charCodeAt(Q)),O=k7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function bP($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Zq($,U=""){if(typeof $==="string")return bP($);return t$($,void 0,U)}function gq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];t$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function LQ($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function Mq($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function u0($=32){m$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Rq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Hq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(F0($),t$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),MU(G)}update($){return uJ(this),this.iHash.update($),this}digestInto($){uJ(this),AQ($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var w0=(()=>{let $=(U,J,G)=>new Hq(U,J).update(G).digest();return $.create=(U,J)=>new Hq(U,J),$})();function Q8($,U,J){if(F0($),J===void 0)J=new Uint8Array($.outputLen);return w0($,J,U)}var jq=Uint8Array.of(0),u7=Uint8Array.of();function Tq($,U,J,G=32){F0($),m$(G,"length"),t$(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=u7;else t$(J,void 0,"info");let X=new Uint8Array(Q*I),O=w0.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)jq[0]=z+1,q.update(z===0?u7:D).update(J).update(jq).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),MU(D,jq),X.slice(0,G)}var GI=($,U,J,G,I)=>Tq($,Q8($,U,J),G,I);function x7($,U,J){return $&U^~$&J}function m7($,U,J){return $&U^$&J^U&J}class SQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){uJ(this),t$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=xJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){uJ(this),AQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,MU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=xJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var x0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),s$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),e$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var CQ=BigInt(4294967295),y7=BigInt(32);function fP($,U=!1){if(U)return{h:Number($&CQ),l:Number($>>y7&CQ)};return{h:Number($>>y7&CQ)|0,l:Number($&CQ)|0}}function r7($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=fP($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Kq=($,U,J)=>$>>>J,Aq=($,U,J)=>$<<32-J|U>>>J,lI=($,U,J)=>$>>>J|U<<32-J,dI=($,U,J)=>$<<32-J|U>>>J,X8=($,U,J)=>$<<64-J|U>>>J-32,O8=($,U,J)=>$>>>J-32|U<<64-J;function v0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var h7=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),l7=($,U,J,G)=>U+J+G+($/4294967296|0)|0,d7=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),n7=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,c7=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),i7=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var FP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QI=new Uint32Array(64);class Pq extends SQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)QI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=QI[z-15],w=QI[z-2],v=I0(W,7)^I0(W,18)^W>>>3,Z=I0(w,17)^I0(w,19)^w>>>10;QI[z]=Z+QI[z-7]+v+QI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=I0(X,6)^I0(X,11)^I0(X,25),w=D+W+x7(X,O,q)+FP[z]+QI[z]|0,Z=(I0(J,2)^I0(J,13)^I0(J,22))+m7(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){MU(QI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),MU(this.buffer)}}class p7 extends Pq{A=x0[0]|0;B=x0[1]|0;C=x0[2]|0;D=x0[3]|0;E=x0[4]|0;F=x0[5]|0;G=x0[6]|0;H=x0[7]|0;constructor(){super(32)}}class uP extends Pq{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var o7=(()=>r7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),xP=(()=>o7[0])(),mP=(()=>o7[1])(),XI=new Uint32Array(80),OI=new Uint32Array(80);class q8 extends SQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)XI[R]=$.getUint32(U),OI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=XI[R-15]|0,L=OI[R-15]|0,k=lI(S,L,1)^lI(S,L,8)^Kq(S,L,7),x=dI(S,L,1)^dI(S,L,8)^Aq(S,L,7),h=XI[R-2]|0,B=OI[R-2]|0,m=lI(h,B,19)^X8(h,B,61)^Kq(h,B,6),a=dI(h,B,19)^O8(h,B,61)^Aq(h,B,6),_=d7(x,a,OI[R-7],OI[R-16]),A=n7(_,k,m,XI[R-7],XI[R-16]);XI[R]=A|0,OI[R]=_|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:H}=this;for(let R=0;R<80;R++){let S=lI(z,W,14)^lI(z,W,18)^X8(z,W,41),L=dI(z,W,14)^dI(z,W,18)^O8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=c7(H,L,x,mP[R],OI[R]),B=i7(h,N,S,k,xP[R],XI[R]),m=h|0,a=lI(J,G,28)^X8(J,G,34)^X8(J,G,39),_=dI(J,G,28)^O8(J,G,34)^O8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;N=Z|0,H=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=v0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=h7(m,_,E);J=l7(M,B,a,A),G=M|0}({h:J,l:G}=v0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=v0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=v0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=v0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=v0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=v0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=v0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:H}=v0(this.Hh|0,this.Hl|0,N|0,H|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,H)}roundClean(){MU(XI,OI)}destroy(){this.destroyed=!0,MU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class a7 extends q8{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(64)}}class yP extends q8{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(48)}}var DU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),zU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class rP extends q8{Ah=DU[0]|0;Al=DU[1]|0;Bh=DU[2]|0;Bl=DU[3]|0;Ch=DU[4]|0;Cl=DU[5]|0;Dh=DU[6]|0;Dl=DU[7]|0;Eh=DU[8]|0;El=DU[9]|0;Fh=DU[10]|0;Fl=DU[11]|0;Gh=DU[12]|0;Gl=DU[13]|0;Hh=DU[14]|0;Hl=DU[15]|0;constructor(){super(28)}}class hP extends q8{Ah=zU[0]|0;Al=zU[1]|0;Bh=zU[2]|0;Bl=zU[3]|0;Ch=zU[4]|0;Cl=zU[5]|0;Dh=zU[6]|0;Dl=zU[7]|0;Eh=zU[8]|0;El=zU[9]|0;Fh=zU[10]|0;Fl=zU[11]|0;Gh=zU[12]|0;Gl=zU[13]|0;Hh=zU[14]|0;Hl=zU[15]|0;constructor(){super(32)}}var y$=Mq(()=>new p7,Rq(1));var _Q=Mq(()=>new a7,Rq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function FQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Sq($){if(!FQ($))throw TypeError("Uint8Array expected")}function UZ($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function IZ($){if(typeof $!=="function")throw TypeError("function expected");return!0}function qI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function z8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function bQ($){if(!Array.isArray($))throw TypeError("array expected")}function fQ($,U){if(!UZ(!0,U))throw TypeError(`${$}: array of strings expected`)}function Cq($,U){if(!UZ(!1,U))throw TypeError(`${$}: array of numbers expected`)}function xU(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function mU($){let U=typeof $==="string"?$.split(""):$,J=U.length;fQ("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return bQ(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return bQ(I),I.map((Q)=>{qI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function yU($=""){return qI("join",$),{encode:(U)=>{return fQ("join.decode",U),U.join($)},decode:(U)=>{return qI("join.decode",U),U.split($)}}}function uQ($,U="="){return z8($),qI("padding",U),{encode(J){fQ("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){fQ("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function JZ($){return IZ($),{encode:(U)=>U,decode:(U)=>$(U)}}function t7($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(bQ($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(z8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let z=Q[D],W=U*O,w=W+z;if(!Number.isSafeInteger(w)||W/U!==O||w-z!==W)throw Error("convertRadix: carry overflow");let v=w/J;O=w%J;let Z=Math.floor(v);if(Q[D]=Z,!Number.isSafeInteger(Z)||Z*J+O!==w)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!Z)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var GZ=($,U)=>U===0?$:GZ(U,$%U),kQ=($,U)=>$+(U-GZ($,U)),EQ=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function Bq($,U,J,G){if(bQ($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(kQ(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${kQ(U,J)}`);let I=0,Q=0,X=EQ[U],O=EQ[J]-1,q=[];for(let D of $){if(z8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let z=EQ[Q];if(z===void 0)throw Error("invalid carry");I&=z-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function lP($){z8($);let U=256;return{encode:(J)=>{if(!FQ(J))throw TypeError("radix.encode input should be Uint8Array");return t7(Array.from(J),U,$)},decode:(J)=>{return Cq("radix.decode",J),Uint8Array.from(t7(J,$,U))}}}function cU($,U=!1){if(z8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(kQ(8,$)>32||kQ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!FQ(J))throw TypeError("radix2.encode input should be Uint8Array");return Bq(Array.from(J),8,$,!U)},decode:(J)=>{return Cq("radix2.decode",J),Uint8Array.from(Bq(J,$,8,U))}}}function s7($){return IZ($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Zl=Object.freeze(xU(cU(4),mU("0123456789ABCDEF"),yU(""))),gl=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),uQ(5),yU(""))),Ml=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),yU(""))),Rl=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),uQ(5),yU(""))),Hl=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),yU(""))),jl=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),yU(""),JZ(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),QZ=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),dP=/[\t\n\f\r ]/,XZ=($,U)=>{qI("base64",$);let J=U?"base64url":"base64";if($.length>0&&dP.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},_q=Object.freeze(QZ?{encode($){return Sq($),$.toBase64()},decode($){return XZ($,!1)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),uQ(6),yU(""))),YU=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),yU(""))),Tl=Object.freeze(QZ?{encode($){return Sq($),$.toBase64({alphabet:"base64url"})},decode($){return XZ($,!0)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),uQ(6),yU(""))),Kl=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),yU(""))),Eq=($)=>xU(lP(58),mU($),yU("")),Al=Object.freeze(Eq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Pl=Object.freeze(Eq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Bl=Object.freeze(Eq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Lq=xU(mU("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),yU("")),e7=[996825010,642813549,513874426,1027748829,705979059];function D8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<e7.length;G++)if((U>>G&1)===1)J^=e7[G];return J}function $Z($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=D8(I)^X>>5}I=D8(I);for(let Q=0;Q<G;Q++)I=D8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=D8(I)^Q;for(let Q=0;Q<6;Q++)I=D8(I);return I^=J,Lq.encode(Bq([I%EQ[30]],30,5,!1))}function OZ($){let U=$==="bech32"?1:734539939,J=cU(5),G=J.decode,I=J.encode,Q=s7(G);function X(W,w,v=90){if(qI("bech32.encode prefix",W),FQ(w))w=Array.from(w);Cq("bech32.encode",w);let Z=W.length;if(Z===0)throw TypeError(`Invalid prefix length ${Z}`);let V=Z+7+w.length;if(v!==!1&&V>v)throw TypeError(`Length ${V} exceeds limit ${v}`);let N=W.toLowerCase(),H=$Z(N,w,U);return`${N}1${Lq.encode(w)}${H}`}function O(W,w=90){qI("bech32.decode input",W);let v=W.length;if(v<8||w!==!1&&v>w)throw TypeError(`invalid string length: ${v} (${W}). Expected (8..${w})`);let Z=W.toLowerCase();if(W!==Z&&W!==W.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Z.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let N=Z.slice(0,V),H=Z.slice(V+1);if(H.length<6)throw Error("Data must be at least 6 characters long");let R=Lq.decode(H).slice(0,-6),S=$Z(N,R,U);if(!H.endsWith(S))throw Error(`Invalid checksum in ${W}: expected "${S}"`);return{prefix:N,words:R}}let q=s7(O);function D(W){let{prefix:w,words:v}=O(W,!1);return{prefix:w,words:v,bytes:G(v)}}function z(W,w){return X(W,I(w))}return{encode:X,decode:O,encodeFromBytes:z,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var rU=Object.freeze(OZ("bech32")),Ll=Object.freeze(OZ("bech32m"));var nP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),cP={encode($){return Sq($),$.toHex()},decode($){return qI("hex",$),Uint8Array.fromHex($)}},Sl=Object.freeze(nP?cP:xU(cU(4),mU("0123456789abcdef"),yU(""),JZ(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function pP($,U,J,G){F0($);let I=LQ({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(m$(Q,"c"),m$(X,"dkLen"),m$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Zq(U,"password"),D=Zq(J,"salt"),z=new Uint8Array(X),W=w0.create($,q),w=W._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:z,PRF:W,PRFSalt:w}}function oP($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return MU(I),J}function bq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=pP($,U,J,G),D,z=new Uint8Array(4),W=xJ(z),w=new Uint8Array(O.outputLen);for(let v=1,Z=0;Z<Q;v++,Z+=O.outputLen){let V=X.subarray(Z,Z+O.outputLen);W.setInt32(0,v,!1),(D=q._cloneInto(D)).update(z).digestInto(w),V.set(w.subarray(0,V.length));for(let N=1;N<I;N++){O._cloneInto(D).update(w).digestInto(w);for(let H=0;H<V.length;H++)V[H]^=w[H]}}return oP(O,q,X,D,w)}function qZ($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],z=$[U++]^J[G++],W=$[U++]^J[G++],w=$[U++]^J[G++],v=$[U++]^J[G++],Z=$[U++]^J[G++],V=$[U++]^J[G++],N=$[U++]^J[G++],H=$[U++]^J[G++],R=$[U++]^J[G++],S=$[U++]^J[G++],L=$[U++]^J[G++],k=$[U++]^J[G++],x=X,h=O,B=q,m=D,a=z,_=W,A=w,E=v,M=Z,T=V,j=N,b=H,P=R,F=S,y=L,n=k;for(let $$=0;$$<8;$$+=2)a^=P$(x+P|0,7),M^=P$(a+x|0,9),P^=P$(M+a|0,13),x^=P$(P+M|0,18),T^=P$(_+h|0,7),F^=P$(T+_|0,9),h^=P$(F+T|0,13),_^=P$(h+F|0,18),y^=P$(j+A|0,7),B^=P$(y+j|0,9),A^=P$(B+y|0,13),j^=P$(A+B|0,18),m^=P$(n+b|0,7),E^=P$(m+n|0,9),b^=P$(E+m|0,13),n^=P$(b+E|0,18),h^=P$(x+m|0,7),B^=P$(h+x|0,9),m^=P$(B+h|0,13),x^=P$(m+B|0,18),A^=P$(_+a|0,7),E^=P$(A+_|0,9),a^=P$(E+A|0,13),_^=P$(a+E|0,18),b^=P$(j+T|0,7),M^=P$(b+j|0,9),T^=P$(M+b|0,13),j^=P$(T+M|0,18),P^=P$(n+y|0,7),F^=P$(P+n|0,9),y^=P$(F+P|0,13),n^=P$(y+F|0,18);I[Q++]=X+x|0,I[Q++]=O+h|0,I[Q++]=q+B|0,I[Q++]=D+m|0,I[Q++]=z+a|0,I[Q++]=W+_|0,I[Q++]=w+A|0,I[Q++]=v+E|0,I[Q++]=Z+M|0,I[Q++]=V+T|0,I[Q++]=N+j|0,I[Q++]=H+b|0,I[Q++]=R+P|0,I[Q++]=S+F|0,I[Q++]=L+y|0,I[Q++]=k+n|0}function fq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(qZ(J,X,$,U,J,Q),O>0)X+=16;qZ(J,Q,$,U+=16,J,X)}}function aP($,U,J){let G=LQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:z}=G;if(m$(I,"N"),m$(Q,"r"),m$(X,"p"),m$(O,"dkLen"),m$(q,"asyncTick"),m$(D,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let W=128*Q,w=W/4,v=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>v)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(v-1)*32/W)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(v-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Z=W*(I+X+1);if(Z>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Z+", maxmem="+D);let V=bq(y$,$,U,{c:1,dkLen:W*X}),N=PQ(V),H=PQ(new Uint8Array(W*I)),R=PQ(new Uint8Array(W)),S=()=>{};if(z){let L=2*I*X,k=Math.max(Math.floor(L/1e4),1),x=0;S=()=>{if(x++,z&&(!(x%k)||x===L))z(x/L)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:w,V:H,B32:N,B:V,tmp:R,blockMixCb:S,asyncTick:q}}function tP($,U,J,G,I){let Q=bq(y$,$,J,{c:1,dkLen:U});return MU(J,G,I),Q}function kq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:z,tmp:W,blockMixCb:w}=aP($,U,J);Nq(D);for(let v=0;v<Q;v++){let Z=O*v;for(let V=0;V<O;V++)q[V]=D[Z+V];for(let V=0,N=0;V<G-1;V++)fq(q,N,q,N+=O,I),w();fq(q,(G-1)*O,D,Z,I),w();for(let V=0;V<G;V++){let N=(D[Z+O-16]&G-1)>>>0;for(let H=0;H<O;H++)W[H]=D[Z+H]^q[N*O+H];fq(W,0,D,Z,I),w()}}return Nq(D),tP($,X,z,q,W)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function sP($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function xQ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function mJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function n$($,U,J=""){let G=sP($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function Fq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function DZ($,U,J=!1){n$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!yJ($))throw Error("invalid output, must be aligned")}function V0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function J0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function eP($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var nI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),$B=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var UB=($)=>{for(let U=0;U<$.length;U++)$[U]=$B($[U]);return $},y0=nI?($)=>$:UB;function zZ($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function YZ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function WZ($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var wZ=($,U)=>{function J(G,...I){if(n$(G,void 0,"key"),$.nonceLength!==void 0){let z=I[0];n$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)n$(I[1],void 0,"AAD");let X=U(G,...I),O=(z,W)=>{if(W!==void 0){if(z!==2)throw Error("cipher output not supported");n$(W,void 0,"output")}},q=!1;return{encrypt(z,W){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,n$(z),O(X.encrypt.length,W),X.encrypt(z,W)},decrypt(z,W){if(n$(z),Q&&z.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,W),X.decrypt(z,W)}}}return Object.assign(J,$),J};function Y8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(n$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!yJ(U))throw Error("invalid output, must be aligned");return U}function vZ($,U,J){mJ($),mJ(U),xQ(J);let G=new Uint8Array(16),I=eP(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function yJ($){return $.byteOffset%4===0}function rJ($){return Uint8Array.from(n$($))}var NZ=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),IB=(()=>y0(V0(NZ("expand 16-byte k"))))(),JB=(()=>y0(V0(NZ("expand 32-byte k"))))();function B$($,U){return $<<U|$>>>32-U}var W8=64,GB=16,uq=(()=>4294967295)(),VZ=Uint32Array.of();function QB($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(W8),z=V0(D),W=nI&&yJ(I)&&yJ(Q),w=W?V0(I):VZ,v=W?V0(Q):VZ;if(!nI){for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),y0(z),X>=uq)throw Error("arx: counter overflow");let V=Math.min(W8,q-Z);for(let N=0,H;N<V;N++)H=Z+N,Q[H]=I[H]^D[N];Z+=V}return}for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),X>=uq)throw Error("arx: counter overflow");let V=Math.min(W8,q-Z);if(W&&V===W8){let N=Z/4;if(Z%4!==0)throw Error("arx: invalid block position");for(let H=0,R;H<GB;H++)R=N+H,v[R]=w[R]^z[H];Z+=W8;continue}for(let N=0,H;N<V;N++)H=Z+N,Q[H]=I[H]^D[N];Z+=V}}function ZZ($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=zZ({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return mJ(I),mJ(X),xQ(Q),xQ(J),(O,q,D,z,W=0)=>{n$(O,void 0,"key"),n$(q,void 0,"nonce"),n$(D,void 0,"data");let w=D.length;if(z=Y8(w,z,!1),mJ(W),W<0||W>=uq)throw Error("arx: counter overflow");let v=[],Z=O.length,V,N;if(Z===32)v.push(V=rJ(O)),N=JB;else if(Z===16&&J)V=new Uint8Array(32),V.set(O),V.set(O,16),N=IB,v.push(V);else throw n$(O,32,"arx key"),Error("invalid key size");if(!nI||!yJ(q))v.push(q=rJ(q));let H=V0(V);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=q.subarray(0,16);if(nI)G(N,H,V0(L),H);else{let k=y0(Uint32Array.from(N));G(k,H,V0(L),H),J0(k),y0(H)}q=q.subarray(16)}else if(!nI)y0(H);let R=16-I;if(R!==q.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let L=new Uint8Array(12);L.set(q,Q?0:12-q.length),q=L,v.push(q)}let S=y0(V0(q));try{return QB($,N,H,S,D,z,W,X),z}finally{J0(...v)}}}function $U($,U){return $[U++]&255|($[U++]&255)<<8}class gZ{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=rJ(n$($,32,"key"));let U=$U($,0),J=$U($,2),G=$U($,4),I=$U($,6),Q=$U($,8),X=$U($,10),O=$U($,12),q=$U($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=$U($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],z=Q[4],W=Q[5],w=Q[6],v=Q[7],Z=Q[8],V=Q[9],N=$U($,U+0),H=$U($,U+2),R=$U($,U+4),S=$U($,U+6),L=$U($,U+8),k=$U($,U+10),x=$U($,U+12),h=$U($,U+14),B=I[0]+(N&8191),m=I[1]+((N>>>13|H<<3)&8191),a=I[2]+((H>>>10|R<<6)&8191),_=I[3]+((R>>>7|S<<9)&8191),A=I[4]+((S>>>4|L<<12)&8191),E=I[5]+(L>>>1&8191),M=I[6]+((L>>>14|k<<2)&8191),T=I[7]+((k>>>11|x<<5)&8191),j=I[8]+((x>>>8|h<<8)&8191),b=I[9]+(h>>>5|G),P=0,F=P+B*X+m*(5*V)+a*(5*Z)+_*(5*v)+A*(5*w);P=F>>>13,F&=8191,F+=E*(5*W)+M*(5*z)+T*(5*D)+j*(5*q)+b*(5*O),P+=F>>>13,F&=8191;let y=P+B*O+m*X+a*(5*V)+_*(5*Z)+A*(5*v);P=y>>>13,y&=8191,y+=E*(5*w)+M*(5*W)+T*(5*z)+j*(5*D)+b*(5*q),P+=y>>>13,y&=8191;let n=P+B*q+m*O+a*X+_*(5*V)+A*(5*Z);P=n>>>13,n&=8191,n+=E*(5*v)+M*(5*w)+T*(5*W)+j*(5*z)+b*(5*D),P+=n>>>13,n&=8191;let $$=P+B*D+m*q+a*O+_*X+A*(5*V);P=$$>>>13,$$&=8191,$$+=E*(5*Z)+M*(5*v)+T*(5*w)+j*(5*W)+b*(5*z),P+=$$>>>13,$$&=8191;let X$=P+B*z+m*D+a*q+_*O+A*X;P=X$>>>13,X$&=8191,X$+=E*(5*V)+M*(5*Z)+T*(5*v)+j*(5*w)+b*(5*W),P+=X$>>>13,X$&=8191;let q$=P+B*W+m*z+a*D+_*q+A*O;P=q$>>>13,q$&=8191,q$+=E*X+M*(5*V)+T*(5*Z)+j*(5*v)+b*(5*w),P+=q$>>>13,q$&=8191;let W$=P+B*w+m*W+a*z+_*D+A*q;P=W$>>>13,W$&=8191,W$+=E*O+M*X+T*(5*V)+j*(5*Z)+b*(5*v),P+=W$>>>13,W$&=8191;let N$=P+B*v+m*w+a*W+_*z+A*D;P=N$>>>13,N$&=8191,N$+=E*q+M*O+T*X+j*(5*V)+b*(5*Z),P+=N$>>>13,N$&=8191;let v$=P+B*Z+m*v+a*w+_*W+A*z;P=v$>>>13,v$&=8191,v$+=E*D+M*q+T*O+j*X+b*(5*V),P+=v$>>>13,v$&=8191;let V$=P+B*V+m*Z+a*v+_*w+A*W;P=V$>>>13,V$&=8191,V$+=E*z+M*D+T*q+j*O+b*X,P+=V$>>>13,V$&=8191,P=(P<<2)+P|0,P=P+F|0,F=P&8191,P=P>>>13,y+=P,I[0]=F,I[1]=y,I[2]=n,I[3]=$$,I[4]=X$,I[5]=q$,I[6]=W$,I[7]=N$,I[8]=v$,I[9]=V$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;J0(J)}update($){Fq(this),n$($),$=rJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,J0(this.h,this.r,this.buffer,this.pad)}digestInto($){Fq(this),DZ($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var MZ=WZ(32,($)=>new gZ($));function XB($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],z=U[0],W=U[1],w=U[2],v=U[3],Z=U[4],V=U[5],N=U[6],H=U[7],R=I,S=J[0],L=J[1],k=J[2],x=X,h=O,B=q,m=D,a=z,_=W,A=w,E=v,M=Z,T=V,j=N,b=H,P=R,F=S,y=L,n=k;for(let X$=0;X$<Q;X$+=2)x=x+a|0,P=B$(P^x,16),M=M+P|0,a=B$(a^M,12),x=x+a|0,P=B$(P^x,8),M=M+P|0,a=B$(a^M,7),h=h+_|0,F=B$(F^h,16),T=T+F|0,_=B$(_^T,12),h=h+_|0,F=B$(F^h,8),T=T+F|0,_=B$(_^T,7),B=B+A|0,y=B$(y^B,16),j=j+y|0,A=B$(A^j,12),B=B+A|0,y=B$(y^B,8),j=j+y|0,A=B$(A^j,7),m=m+E|0,n=B$(n^m,16),b=b+n|0,E=B$(E^b,12),m=m+E|0,n=B$(n^m,8),b=b+n|0,E=B$(E^b,7),x=x+_|0,n=B$(n^x,16),j=j+n|0,_=B$(_^j,12),x=x+_|0,n=B$(n^x,8),j=j+n|0,_=B$(_^j,7),h=h+A|0,P=B$(P^h,16),b=b+P|0,A=B$(A^b,12),h=h+A|0,P=B$(P^h,8),b=b+P|0,A=B$(A^b,7),B=B+E|0,F=B$(F^B,16),M=M+F|0,E=B$(E^M,12),B=B+E|0,F=B$(F^B,8),M=M+F|0,E=B$(E^M,7),m=m+a|0,y=B$(y^m,16),T=T+y|0,a=B$(a^T,12),m=m+a|0,y=B$(y^m,8),T=T+y|0,a=B$(a^T,7);let $$=0;G[$$++]=X+x|0,G[$$++]=O+h|0,G[$$++]=q+B|0,G[$$++]=D+m|0,G[$$++]=z+a|0,G[$$++]=W+_|0,G[$$++]=w+A|0,G[$$++]=v+E|0,G[$$++]=Z+M|0,G[$$++]=V+T|0,G[$$++]=N+j|0,G[$$++]=H+b|0,G[$$++]=R+P|0,G[$$++]=S+F|0,G[$$++]=L+y|0,G[$$++]=k+n|0}var OB=ZZ(XB,{counterRight:!1,counterLength:4,allowShortKeys:!1});var qB=new Uint8Array(16),RZ=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(qB.subarray(J))},DB=new Uint8Array(32);function HZ($,U,J,G,I){if(I!==void 0)n$(I,void 0,"AAD");let Q=$(U,J,DB),X=vZ(G.length,I?I.length:0,!0),O=MZ.create(Q);if(I)RZ(O,I);RZ(O,G),O.update(X);let q=O.digest();return J0(Q,X),q}var zB=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=Y8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=HZ($,U,J,q,G);return X.set(D,O),J0(D),X},decrypt(Q,X){X=Y8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=HZ($,U,J,O,G);if(!YZ(q,D))throw J0(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),J0(D),X}}},iU=wZ({blockSize:64,nonceLength:12,tagLength:16},zB(OB));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function hJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function p$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function g$($,U,J=""){let G=hJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function pU($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");p$($.outputLen),p$($.blockLen)}function h0($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function mQ($,U){g$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function yQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function SU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function rQ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function G0($,U){return $<<32-U|$>>>U}var YB=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function WB($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function wB($){for(let U=0;U<$.length;U++)$[U]=WB($[U]);return $}var xq=YB?($)=>$:wB,TZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),vB=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function cI($){if(g$($),TZ)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=vB[$[J]];return U}var r0={_0:48,_9:57,A:65,F:70,a:97,f:102};function jZ($){if($>=r0._0&&$<=r0._9)return $-r0._0;if($>=r0.A&&$<=r0.F)return $-(r0.A-10);if($>=r0.a&&$<=r0.f)return $-(r0.a-10);return}function iI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(TZ)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=jZ($.charCodeAt(Q)),O=jZ($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function r$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];g$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function lJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function DI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var zI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yq=BigInt(0),mq=BigInt(1);function w8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function KZ($){if(typeof $==="bigint"){if(!hQ($))throw Error("positive bigint expected, got "+$)}else p$($);return $}function v8($){let U=KZ($).toString(16);return U.length&1?"0"+U:U}function AZ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?yq:BigInt("0x"+$)}function YI($){return AZ(cI($))}function WI($){return AZ(cI(lQ(g$($)).reverse()))}function dJ($,U){p$(U),$=KZ($);let J=iI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function V8($,U){return dJ($,U).reverse()}function lQ($){return Uint8Array.from($)}function wI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var hQ=($)=>typeof $==="bigint"&&yq<=$;function VB($,U,J){return hQ($)&&hQ(U)&&hQ(J)&&U<=$&&$<J}function N8($,U,J,G){if(!VB(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function rq($){let U;for(U=0;$>yq;$>>=mq,U+=1);return U}var Z8=($)=>(mq<<BigInt($))-mq;function PZ($,U,J){if(p$($,"hashLen"),p$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,r$(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,H=[];while(N<U){q=w();let R=q.slice();H.push(R),N+=q.length}return r$(...H)};return(N,H)=>{W(),v(N);let R=void 0;while(!(R=H(Z())))v();return W(),R}}function pI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function hq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HU=BigInt(0),WU=BigInt(1),oI=BigInt(2),SZ=BigInt(3),CZ=BigInt(4),_Z=BigInt(5),NB=BigInt(7),EZ=BigInt(8),ZB=BigInt(9),bZ=BigInt(16);function RU($,U){let J=$%U;return J>=HU?J:U+J}function oU($,U,J){let G=$;while(U-- >HU)G*=G,G%=J;return G}function BZ($,U){if($===HU)throw Error("invert: expected non-zero number");if(U<=HU)throw Error("invert: expected positive modulus, got "+U);let J=RU($,U),G=U,I=HU,Q=WU,X=WU,O=HU;while(J!==HU){let D=G/J,z=G%J,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==WU)throw Error("invert: does not exist");return RU(I,U)}function lq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function fZ($,U){let J=($.ORDER+WU)/CZ,G=$.pow(U,J);return lq($,G,U),G}function gB($,U){let J=($.ORDER-_Z)/EZ,G=$.mul(U,oI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,oI),I),O=$.mul(Q,$.sub(X,$.ONE));return lq($,O,U),O}function MB($){let U=dQ($),J=kZ($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+NB)/bZ;return(O,q)=>{let D=O.pow(q,X),z=O.mul(D,G),W=O.mul(D,I),w=O.mul(D,Q),v=O.eql(O.sqr(z),q),Z=O.eql(O.sqr(W),q);D=O.cmov(D,z,v),z=O.cmov(w,W,Z);let V=O.eql(O.sqr(z),q),N=O.cmov(D,z,V);return lq(O,N,q),N}}function kZ($){if($<SZ)throw Error("sqrt is not defined for small field");let U=$-WU,J=0;while(U%oI===HU)U/=oI,J++;let G=oI,I=dQ($);while(LZ(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return fZ;let Q=I.pow(G,U),X=(U+WU)/oI;return function(q,D){if(q.is0(D))return D;if(LZ(q,D)!==1)throw Error("Cannot find square root");let z=J,W=q.mul(q.ONE,Q),w=q.pow(D,U),v=q.pow(D,X);while(!q.eql(w,q.ONE)){if(q.is0(w))return q.ZERO;let Z=1,V=q.sqr(w);while(!q.eql(V,q.ONE))if(Z++,V=q.sqr(V),Z===z)throw Error("Cannot find square root");let N=WU<<BigInt(z-Z-1),H=q.pow(W,N);z=Z,W=q.sqr(H),w=q.mul(w,W),v=q.mul(v,H)}return v}}function RB($){if($%CZ===SZ)return fZ;if($%EZ===_Z)return gB;if($%bZ===ZB)return MB($);return kZ($)}var HB=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function dq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=HB.reduce((G,I)=>{return G[I]="function",G},U);return pI($,J),$}function jB($,U,J){if(J<HU)throw Error("invalid exponent, negatives unsupported");if(J===HU)return $.ONE;if(J===WU)return U;let G=$.ONE,I=U;while(J>HU){if(J&WU)G=$.mul(G,I);I=$.sqr(I),J>>=WU}return G}function g8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function LZ($,U){let J=($.ORDER-WU)/oI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function TB($,U){if(U!==void 0)p$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class FZ{ORDER;BITS;BYTES;isLE;ZERO=HU;ONE=WU;_lengths;_sqrt;_mod;constructor($,U={}){if($<=HU)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=TB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return RU($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return HU<=$&&$<this.ORDER}is0($){return $===HU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&WU)===WU}neg($){return RU(-$,this.ORDER)}eql($,U){return $===U}sqr($){return RU($*$,this.ORDER)}add($,U){return RU($+U,this.ORDER)}sub($,U){return RU($-U,this.ORDER)}mul($,U){return RU($*U,this.ORDER)}pow($,U){return jB(this,$,U)}div($,U){return RU($*BZ(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return BZ($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=RB(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?V8($,this.BYTES):dJ($,this.BYTES)}fromBytes($,U=!1){g$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?WI($):YI($);if(X)O=RU(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return g8(this,$)}cmov($,U,J){return J?U:$}}function dQ($,U={}){return new FZ($,U)}function uZ($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function nq($){let U=uZ($);return U+Math.ceil(U/2)}function xZ($,U,J=!1){g$($);let G=$.length,I=uZ(U),Q=nq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?WI($):YI($),O=RU(X,U-WU)+WU;return J?V8(O,I):dJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nJ=BigInt(0),aI=BigInt(1);function M8($,U){let J=U.negate();return $?J:U}function oq($,U){let J=g8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function hZ($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function cq($,U){hZ($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=Z8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function mZ($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=aI;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var iq=new WeakMap,lZ=new WeakMap;function pq($){return lZ.get($)||1}function yZ($){if($!==nJ)throw Error("invalid wNAF")}class aq{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>nJ){if(U&aI)J=J.add(G);G=G.double(),U>>=aI}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=cq(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=cq($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=mZ(J,X,Q);if(J=O,D)I=I.add(M8(W,U[w]));else G=G.add(M8(z,U[q]))}return yZ(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=cq($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===nJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=mZ(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return yZ(J),G}getPrecomputes($,U,J){let G=iq.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);iq.set(U,G)}}return G}cached($,U,J){let G=pq($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=pq($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){hZ(U,this.bits),lZ.set($,U),iq.delete($)}hasCache($){return pq($)!==1}}function dZ($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>nJ||G>nJ){if(J&aI)Q=Q.add(I);if(G&aI)X=X.add(I);I=I.double(),J>>=aI,G>>=aI}return{p1:Q,p2:X}}function rZ($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return dq(U),U}else return dQ($,{isLE:J})}function nZ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>nJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=rZ(U.p,J.Fp,G),Q=rZ(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function nQ($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var R8=BigInt(0),cJ=BigInt(1),cQ=BigInt(2);function KB($){return pI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function cZ($){let U=KB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||DI,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?cQ**BigInt(254):cQ**BigInt(447),Z=O?BigInt(8)*cQ**BigInt(251)-cJ:BigInt(4)*cQ**BigInt(445)-cJ,V=v+Z+cJ,N=(M)=>RU(M,J),H=R(W);function R(M){return V8(N(M),z)}function S(M){let T=lQ(g$(M,z,"uCoordinate"));if(O)T[31]&=127;return N(WI(T))}function L(M){return WI(I(lQ(g$(M,z,"scalar"))))}function k(M,T){let j=a(S(T),L(M));if(j===R8)throw Error("invalid private or public key received");return R(j)}function x(M){return k(M,H)}let h=x,B=k;function m(M,T,j){let b=N(M*(T-j));return T=N(T-b),j=N(j+b),{x_2:T,x_3:j}}function a(M,T){N8("u",M,R8,J),N8("scalar",T,v,V);let j=T,b=M,P=cJ,F=R8,y=M,n=cJ,$$=R8;for(let q$=BigInt(D-1);q$>=R8;q$--){let W$=j>>q$&cJ;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,OU=y-n,qU=N(OU*N$),LU=N(k$*V$),Y0=qU+LU,W0=qU-LU;y=N(Y0*Y0),n=N(b*N(W0*W0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let _={secretKey:z,publicKey:z,seed:z},A=(M=q(z))=>{return g$(M,_.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze({keygen:nQ(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:E,GuBytes:H.slice(),lengths:_})}class tq{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(pU($),g$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),SU(G)}update($){return h0(this),this.iHash.update($),this}digestInto($){h0(this),g$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var iJ=($,U,J)=>new tq($,U).update(J).digest();iJ.create=($,U)=>new tq($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var iZ=($,U)=>($+($>=0?U:-U)/oZ)/U;function AB($,U,J){let[[G,I],[Q,X]]=U,O=iZ(X*$,J),q=iZ(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<l0,w=z<l0;if(W)D=-D;if(w)z=-z;let v=Z8(Math.ceil(rq(J)/2))+pJ;if(D<l0||D>=v||z<l0||z>=v)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:W,k1:D,k2neg:w,k2:z}}function eq($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function sq($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(w8(J.lowS,"lowS"),w8(J.prehash,"prehash"),J.format!==void 0)eq(J.format);return J}class pZ extends Error{constructor($=""){super($)}}var vI={Err:pZ,_tlv:{encode:($,U)=>{let{Err:J}=vI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=v8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?v8(I.length/2|128):"";return v8($)+Q+I+U},decode($,U){let{Err:J}=vI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=vI;if($<l0)throw new U("integer: negative integers are not allowed");let J=v8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=vI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return YI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=vI,I=g$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=vI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},l0=BigInt(0),pJ=BigInt(1),oZ=BigInt(2),iQ=BigInt(3),PB=BigInt(4);function $D($,U={}){let J=nZ("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;pI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=tZ(G,I);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function W(A,E,M){let{x:T,y:j}=E.toAffine(),b=G.toBytes(T);if(w8(M,"isCompressed"),M){z();let P=!G.isOdd(j);return r$(aZ(P),b)}else return r$(Uint8Array.of(4),b,G.toBytes(j))}function w(A){g$(A,void 0,"Point");let{publicKey:E,publicKeyUncompressed:M}=D,T=A.length,j=A[0],b=A.subarray(1);if(T===E&&(j===2||j===3)){let P=G.fromBytes(b);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let F=V(P),y;try{y=G.sqrt(F)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}z();let n=G.isOdd(y);if((j&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(T===M&&j===4){let P=G.BYTES,F=G.fromBytes(b.subarray(0,P)),y=G.fromBytes(b.subarray(P,P*2));if(!N(F,y))throw Error("bad point: is not on curve");return{x:F,y}}else throw Error(`bad point: got length ${T}, expected compressed=${E} or uncompressed=${M}`)}let v=U.toBytes||W,Z=U.fromBytes||w;function V(A){let E=G.sqr(A),M=G.mul(E,A);return G.add(G.add(M,G.mul(A,Q.a)),Q.b)}function N(A,E){let M=G.sqr(E),T=V(A);return G.eql(M,T)}if(!N(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let H=G.mul(G.pow(Q.a,iQ),PB),R=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(H,R)))throw Error("bad curve params: a or b");function S(A,E,M=!1){if(!G.isValid(E)||M&&G.is0(E))throw Error(`bad point coordinate ${A}`);return E}function L(A){if(!(A instanceof m))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return AB(A,q.basises,I.ORDER)}let x=hq((A,E)=>{let{X:M,Y:T,Z:j}=A;if(G.eql(j,G.ONE))return{x:M,y:T};let b=A.is0();if(E==null)E=b?G.ONE:G.inv(j);let P=G.mul(M,E),F=G.mul(T,E),y=G.mul(j,E);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}),h=hq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:E,y:M}=A.toAffine();if(!G.isValid(E)||!G.isValid(M))throw Error("bad point: x or y not field elements");if(!N(E,M))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(A,E,M,T,j){return M=new m(G.mul(M.X,A),M.Y,M.Z),E=M8(T,E),M=M8(j,M),E.add(M)}class m{static BASE=new m(Q.Gx,Q.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,E,M){this.X=S("x",A),this.Y=S("y",E,!0),this.Z=S("z",M),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:E,y:M}=A||{};if(!A||!G.isValid(E)||!G.isValid(M))throw Error("invalid affine point");if(A instanceof m)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(M))return m.ZERO;return new m(E,M,G.ONE)}static fromBytes(A){let E=m.fromAffine(Z(g$(A,void 0,"point")));return E.assertValidity(),E}static fromHex(A){return m.fromBytes(iI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,E=!0){if(_.createCache(this,A),!E)this.multiply(iQ);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){L(A);let{X:E,Y:M,Z:T}=this,{X:j,Y:b,Z:P}=A,F=G.eql(G.mul(E,P),G.mul(j,T)),y=G.eql(G.mul(M,P),G.mul(b,T));return F&&y}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:E}=Q,M=G.mul(E,iQ),{X:T,Y:j,Z:b}=this,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=G.mul(T,T),$$=G.mul(j,j),X$=G.mul(b,b),q$=G.mul(T,j);return q$=G.add(q$,q$),y=G.mul(T,b),y=G.add(y,y),P=G.mul(A,y),F=G.mul(M,X$),F=G.add(P,F),P=G.sub($$,F),F=G.add($$,F),F=G.mul(P,F),P=G.mul(q$,P),y=G.mul(M,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),F=G.add(F,n),X$=G.mul(j,b),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,$$),y=G.add(y,y),y=G.add(y,y),new m(P,F,y)}add(A){L(A);let{X:E,Y:M,Z:T}=this,{X:j,Y:b,Z:P}=A,F=G.ZERO,y=G.ZERO,n=G.ZERO,$$=Q.a,X$=G.mul(Q.b,iQ),q$=G.mul(E,j),W$=G.mul(M,b),N$=G.mul(T,P),v$=G.add(E,M),V$=G.add(j,b);v$=G.mul(v$,V$),V$=G.add(q$,W$),v$=G.sub(v$,V$),V$=G.add(E,T);let R$=G.add(j,P);return V$=G.mul(V$,R$),R$=G.add(q$,N$),V$=G.sub(V$,R$),R$=G.add(M,T),F=G.add(b,P),R$=G.mul(R$,F),F=G.add(W$,N$),R$=G.sub(R$,F),n=G.mul($$,V$),F=G.mul(X$,N$),n=G.add(F,n),F=G.sub(W$,n),n=G.add(W$,n),y=G.mul(F,n),W$=G.add(q$,q$),W$=G.add(W$,q$),N$=G.mul($$,N$),V$=G.mul(X$,V$),W$=G.add(W$,N$),N$=G.sub(q$,N$),N$=G.mul($$,N$),V$=G.add(V$,N$),q$=G.mul(W$,V$),y=G.add(y,q$),q$=G.mul(R$,V$),F=G.mul(v$,F),F=G.sub(F,q$),q$=G.mul(v$,W$),n=G.mul(R$,n),n=G.add(n,q$),new m(F,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(m.ZERO)}multiply(A){let{endo:E}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let M,T,j=(b)=>_.cached(this,b,(P)=>oq(m,P));if(E){let{k1neg:b,k1:P,k2neg:F,k2:y}=k(A),{p:n,f:$$}=j(P),{p:X$,f:q$}=j(y);T=$$.add(q$),M=B(E.beta,n,X$,b,F)}else{let{p:b,f:P}=j(A);M=b,T=P}return oq(m,[M,T])[0]}multiplyUnsafe(A){let{endo:E}=U,M=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===l0||M.is0())return m.ZERO;if(A===pJ)return M;if(_.hasCache(this))return this.multiply(A);if(E){let{k1neg:T,k1:j,k2neg:b,k2:P}=k(A),{p1:F,p2:y}=dZ(m,M,j,P);return B(E.beta,F,y,T,b)}else return _.unsafe(M,A)}toAffine(A){return x(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===pJ)return!0;if(A)return A(m,this);return _.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===pJ)return this;if(A)return A(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return w8(A,"isCompressed"),this.assertValidity(),v(m,this,A)}toHex(A=!0){return cI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let a=I.BITS,_=new aq(m,U.endo?Math.ceil(a/2):a);return m.BASE.precompute(8),m}function aZ($){return Uint8Array.of($?2:3)}function tZ($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function BB($,U={}){let{Fn:J}=$,G=U.randomBytes||DI,I=Object.assign(tZ($.Fp,J),{seed:nq(J.ORDER)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let H=v.length;if(Z===!0&&H!==V)return!1;if(Z===!1&&H!==N)return!1;return!!$.fromBytes(v)}catch(H){return!1}}function O(v=G(I.seed)){return xZ(g$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I;if(!hJ(v))return;if("_lengths"in J&&J._lengths||Z===V)return;let H=g$(v,void 0,"key").length;return H===V||H===N}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=nQ(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function UD($,U,J={}){pU(U),pI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||DI,I=J.hmac||((M,T)=>iJ(U,M,T)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v}=BB($,J),Z={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=O*oZ<Q.ORDER;function N(M){let T=O>>pJ;return M>T}function H(M,T){if(!X.isValidNot0(T))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return T}function R(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(M,T){eq(T);let j=v.signature,b=T==="compact"?j:T==="recovered"?j+1:void 0;return g$(M,b)}class L{r;s;recovery;constructor(M,T,j){if(this.r=H("r",M),this.s=H("s",T),j!=null){if(R(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(M,T=Z.format){S(M,T);let j;if(T==="der"){let{r:y,s:n}=vI.toSig(g$(M));return new L(y,n)}if(T==="recovered")j=M[0],T="compact",M=M.subarray(1);let b=v.signature/2,P=M.subarray(0,b),F=M.subarray(b,b*2);return new L(X.fromBytes(P),X.fromBytes(F),j)}static fromHex(M,T){return this.fromBytes(iI(M),T)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new L(this.r,this.s,M)}recoverPublicKey(M){let{r:T,s:j}=this,b=this.assertRecovery(),P=b===2||b===3?T+O:T;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let F=Q.toBytes(P),y=$.fromBytes(r$(aZ((b&1)===0),F)),n=X.inv(P),$$=x(g$(M,void 0,"msgHash")),X$=X.create(-$$*n),q$=X.create(j*n),W$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(W$.is0())throw Error("invalid recovery: point at infinify");return W$.assertValidity(),W$}hasHighS(){return N(this.s)}toBytes(M=Z.format){if(eq(M),M==="der")return iI(vI.hexFromSig(this));let{r:T,s:j}=this,b=X.toBytes(T),P=X.toBytes(j);if(M==="recovered")return R(),r$(Uint8Array.of(this.assertRecovery()),b,P);return r$(b,P)}toHex(M){return cI(this.toBytes(M))}}let k=J.bits2int||function(T){if(T.length>8192)throw Error("input is too large");let j=YI(T),b=T.length*8-q;return b>0?j>>BigInt(b):j},x=J.bits2int_modN||function(T){return X.create(k(T))},h=Z8(q);function B(M){return N8("num < 2^"+q,M,l0,h),X.toBytes(M)}function m(M,T){return g$(M,void 0,"message"),T?g$(U(M),void 0,"prehashed message"):M}function a(M,T,j){let{lowS:b,prehash:P,extraEntropy:F}=sq(j,Z);M=m(M,P);let y=x(M),n=X.fromBytes(T);if(!X.isValidNot0(n))throw Error("invalid private key");let $$=[B(n),B(y)];if(F!=null&&F!==!1){let N$=F===!0?G(v.secretKey):F;$$.push(g$(N$,void 0,"extraEntropy"))}let X$=r$(...$$),q$=y;function W$(N$){let v$=k(N$);if(!X.isValidNot0(v$))return;let V$=X.inv(v$),R$=$.BASE.multiply(v$).toAffine(),b$=X.create(R$.x);if(b$===l0)return;let k$=X.create(V$*X.create(q$+b$*n));if(k$===l0)return;let OU=(R$.x===b$?0:2)|Number(R$.y&pJ),qU=k$;if(b&&N(k$))qU=X.neg(k$),OU^=1;return new L(b$,qU,V?void 0:OU)}return{seed:X$,k2sig:W$}}function _(M,T,j={}){let{seed:b,k2sig:P}=a(M,T,j);return PZ(U.outputLen,X.BYTES,I)(b,P).toBytes(j.format)}function A(M,T,j,b={}){let{lowS:P,prehash:F,format:y}=sq(b,Z);if(j=g$(j,void 0,"publicKey"),T=m(T,F),!hJ(M)){let n=M instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(M,y);try{let n=L.fromBytes(M,y),$$=$.fromBytes(j);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,W$=x(T),N$=X.inv(q$),v$=X.create(W$*N$),V$=X.create(X$*N$),R$=$.BASE.multiplyUnsafe(v$).add($$.multiplyUnsafe(V$));if(R$.is0())return!1;return X.create(R$.x)===X$}catch(n){return!1}}function E(M,T,j={}){let{prehash:b}=sq(j,Z);return T=m(T,b),L.fromBytes(M,"recovered").recoverPublicKey(T).toBytes()}return Object.freeze({keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v,Point:$,sign:_,verify:A,recoverPublicKey:E,Signature:L,hash:U})}function sZ($,U,J){return $&U^~$&J}function eZ($,U,J){return $&U^$&J^U&J}class pQ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=rQ(this.buffer)}update($){h0(this),g$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=rQ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){h0(this),mQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,SU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=rQ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var d0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),n0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),UU=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),IU=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var oQ=BigInt(4294967295),$g=BigInt(32);function LB($,U=!1){if(U)return{h:Number($&oQ),l:Number($>>$g&oQ)};return{h:Number($>>$g&oQ)|0,l:Number($&oQ)|0}}function aQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=LB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var ID=($,U,J)=>$>>>J,JD=($,U,J)=>$<<32-J|U>>>J,tI=($,U,J)=>$>>>J|U<<32-J,sI=($,U,J)=>$<<32-J|U>>>J,H8=($,U,J)=>$<<64-J|U>>>J-32,j8=($,U,J)=>$>>>J-32|U<<64-J;var Ug=($,U,J)=>$<<J|U>>>32-J,Ig=($,U,J)=>U<<J|$>>>32-J,Jg=($,U,J)=>U<<J-32|$>>>64-J,Gg=($,U,J)=>$<<J-32|U>>>64-J;function N0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var Qg=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),Xg=($,U,J,G)=>U+J+G+($/4294967296|0)|0,Og=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),qg=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,Dg=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),zg=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var CB=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VI=new Uint32Array(64);class GD extends pQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)VI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=VI[z-15],w=VI[z-2],v=G0(W,7)^G0(W,18)^W>>>3,Z=G0(w,17)^G0(w,19)^w>>>10;VI[z]=Z+VI[z-7]+v+VI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=G0(X,6)^G0(X,11)^G0(X,25),w=D+W+sZ(X,O,q)+CB[z]+VI[z]|0,Z=(G0(J,2)^G0(J,13)^G0(J,22))+eZ(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){SU(VI)}destroy(){this.set(0,0,0,0,0,0,0,0),SU(this.buffer)}}class Yg extends GD{A=d0[0]|0;B=d0[1]|0;C=d0[2]|0;D=d0[3]|0;E=d0[4]|0;F=d0[5]|0;G=d0[6]|0;H=d0[7]|0;constructor(){super(32)}}class _B extends GD{A=n0[0]|0;B=n0[1]|0;C=n0[2]|0;D=n0[3]|0;E=n0[4]|0;F=n0[5]|0;G=n0[6]|0;H=n0[7]|0;constructor(){super(28)}}var Wg=(()=>aQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),EB=(()=>Wg[0])(),bB=(()=>Wg[1])(),NI=new Uint32Array(80),ZI=new Uint32Array(80);class T8 extends pQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)NI[R]=$.getUint32(U),ZI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=NI[R-15]|0,L=ZI[R-15]|0,k=tI(S,L,1)^tI(S,L,8)^ID(S,L,7),x=sI(S,L,1)^sI(S,L,8)^JD(S,L,7),h=NI[R-2]|0,B=ZI[R-2]|0,m=tI(h,B,19)^H8(h,B,61)^ID(h,B,6),a=sI(h,B,19)^j8(h,B,61)^JD(h,B,6),_=Og(x,a,ZI[R-7],ZI[R-16]),A=qg(_,k,m,NI[R-7],NI[R-16]);NI[R]=A|0,ZI[R]=_|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:H}=this;for(let R=0;R<80;R++){let S=tI(z,W,14)^tI(z,W,18)^H8(z,W,41),L=sI(z,W,14)^sI(z,W,18)^j8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=Dg(H,L,x,bB[R],ZI[R]),B=zg(h,N,S,k,EB[R],NI[R]),m=h|0,a=tI(J,G,28)^H8(J,G,34)^H8(J,G,39),_=sI(J,G,28)^j8(J,G,34)^j8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;N=Z|0,H=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=N0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=Qg(m,_,E);J=Xg(M,B,a,A),G=M|0}({h:J,l:G}=N0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=N0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=N0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=N0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=N0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=N0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=N0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:H}=N0(this.Hh|0,this.Hl|0,N|0,H|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,H)}roundClean(){SU(NI,ZI)}destroy(){SU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class fB extends T8{Ah=IU[0]|0;Al=IU[1]|0;Bh=IU[2]|0;Bl=IU[3]|0;Ch=IU[4]|0;Cl=IU[5]|0;Dh=IU[6]|0;Dl=IU[7]|0;Eh=IU[8]|0;El=IU[9]|0;Fh=IU[10]|0;Fl=IU[11]|0;Gh=IU[12]|0;Gl=IU[13]|0;Hh=IU[14]|0;Hl=IU[15]|0;constructor(){super(64)}}class wg extends T8{Ah=UU[0]|0;Al=UU[1]|0;Bh=UU[2]|0;Bl=UU[3]|0;Ch=UU[4]|0;Cl=UU[5]|0;Dh=UU[6]|0;Dl=UU[7]|0;Eh=UU[8]|0;El=UU[9]|0;Fh=UU[10]|0;Fl=UU[11]|0;Gh=UU[12]|0;Gl=UU[13]|0;Hh=UU[14]|0;Hl=UU[15]|0;constructor(){super(48)}}var wU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),vU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class kB extends T8{Ah=wU[0]|0;Al=wU[1]|0;Bh=wU[2]|0;Bl=wU[3]|0;Ch=wU[4]|0;Cl=wU[5]|0;Dh=wU[6]|0;Dl=wU[7]|0;Eh=wU[8]|0;El=wU[9]|0;Fh=wU[10]|0;Fl=wU[11]|0;Gh=wU[12]|0;Gl=wU[13]|0;Hh=wU[14]|0;Hl=wU[15]|0;constructor(){super(28)}}class FB extends T8{Ah=vU[0]|0;Al=vU[1]|0;Bh=vU[2]|0;Bl=vU[3]|0;Ch=vU[4]|0;Cl=vU[5]|0;Dh=vU[6]|0;Dl=vU[7]|0;Eh=vU[8]|0;El=vU[9]|0;Fh=vU[10]|0;Fl=vU[11]|0;Gh=vU[12]|0;Gl=vU[13]|0;Hh=vU[14]|0;Hl=vU[15]|0;constructor(){super(32)}}var tQ=lJ(()=>new Yg,zI(1));var vg=lJ(()=>new wg,zI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var uB=BigInt(1),Vg=BigInt(2),xB=BigInt(3),mB=BigInt(5),Cd=BigInt(8),Ng=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function yB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=Ng,O=$*$%Q*$%Q,q=oU(O,Vg,Q)*O%Q,D=oU(q,uB,Q)*$%Q,z=oU(D,mB,Q)*D%Q,W=oU(z,U,Q)*z%Q,w=oU(W,J,Q)*W%Q,v=oU(w,G,Q)*w%Q,Z=oU(v,I,Q)*v%Q,V=oU(Z,I,Q)*v%Q,N=oU(V,U,Q)*z%Q;return{pow_p_5_8:oU(N,Vg,Q)*$%Q,b2:O}}function rB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Zg=(()=>{let $=Ng;return cZ({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=yB(U);return RU(oU(J,xB,$)*G,$)},adjustScalarBytes:rB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),lB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var dB=$D(hB),QD=UD(dB,tQ);var nB=$D(lB),gg=UD(nB,vg);function Rg($,U,J){if(pU($),J===void 0)J=new Uint8Array($.outputLen);return iJ($,J,U)}var XD=Uint8Array.of(0),Mg=Uint8Array.of();function Hg($,U,J,G=32){pU($),p$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=Mg;else g$(J,void 0,"info");let X=new Uint8Array(Q*I),O=iJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)XD[0]=z+1,q.update(z===0?Mg:D).update(J).update(XD).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),SU(D,XD),X.slice(0,G)}var cB=BigInt(0),K8=BigInt(1),iB=BigInt(2),pB=BigInt(7),oB=BigInt(256),aB=BigInt(113),Kg=[],Ag=[],Pg=[];for(let $=0,U=K8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],Kg.push(2*(5*G+J)),Ag.push(($+1)*($+2)/2%64);let I=cB;for(let Q=0;Q<7;Q++)if(U=(U<<K8^(U>>pB)*aB)%oB,U&iB)I^=K8<<(K8<<BigInt(Q))-K8;Pg.push(I)}var Bg=aQ(Pg,!0),tB=Bg[0],sB=Bg[1],jg=($,U,J)=>J>32?Jg($,U,J):Ug($,U,J),Tg=($,U,J)=>J>32?Gg($,U,J):Ig($,U,J);function eB($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],z=J[q+1],W=jg(D,z,1)^J[O],w=Tg(D,z,1)^J[O+1];for(let v=0;v<50;v+=10)$[X+v]^=W,$[X+v+1]^=w}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=Ag[X],q=jg(I,Q,O),D=Tg(I,Q,O),z=Kg[X];I=$[z],Q=$[z+1],$[z]=q,$[z+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=tB[G],$[1]^=sB[G]}SU(J)}class sQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,p$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=yQ(this.state)}clone(){return this._cloneInto()}keccak(){xq(this.state32),eB(this.state32,this.rounds),xq(this.state32),this.posOut=0,this.pos=0}update($){h0(this),g$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){h0(this,!1),g$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return p$($),this.xofInto(new Uint8Array($))}digestInto($){if(mQ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,SU(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new sQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var Lg=($,U,J,G={})=>lJ(()=>new sQ(U,$,J),G);var eI=Lg(6,136,32,zI(8));var Sg=Lg(6,72,64,zI(10));var Cg=($,U,J,G={})=>lJ((I={})=>new sQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),_g=Cg(31,168,16,zI(11)),Z0=Cg(31,136,32,zI(12));function OD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function bg($){return OD($),($&$-1)===0&&$!==0}function qD($,U){OD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function fg($){return OD($),31-Math.clz32($)}function Eg($){let U=$.length;if(U<2||!bg(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=fg(U);for(let G=0;G<U;G++){let I=qD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var DD=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=fg(J);if(!bg(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)Eg(z);for(let W=0,w=1;W<q-X;W++){let v=I?W+1+X:q-W,Z=1<<v,V=Z>>1,N=J>>v;for(let H=0;H<J;H+=Z)for(let R=0,S=w++;R<V;R++){let L=Q?I?J-S:S:R*N,k=H+R,x=H+R+V,h=G[L],B=z[x],m=z[k];if(D){let a=$.mul(B,h);z[k]=$.add(m,a),z[x]=$.sub(m,a)}else if(Q)z[k]=$.add(B,m),z[x]=$.mul($.sub(B,m),h);else z[k]=$.add(m,B),z[x]=$.mul($.sub(m,B),h)}}if(!I&&O)Eg(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var g0=DI;function eQ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function kg($){return Uint8Array.from($)}function $J($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),z=typeof q==="number"?I[X]:q.encode(I[X]);if(g$(z,D,$),Q.set(z,O),typeof q!=="number")z.fill(0);O+=D}return Q},decode:(I)=>{g$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function $4($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{g$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function c$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function zD($){return(1<<$)-1}var nd=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Fg=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(R,S=G)=>{let L=R%S|0;return(L>=0?L|0:S+L|0)|0},D=(R,S=G)=>{let L=q(R,S)|0;return(L>S>>1?L-S|0:L)|0};function z(){let R=U(J);for(let S=0;S<J;S++){let L=qD(S,X),k=BigInt(Q)**BigInt(L)%BigInt(G);R[S]=Number(k)|0}return R}let W=z(),w={add:(R,S)=>q((R|0)+(S|0))|0,sub:(R,S)=>q((R|0)-(S|0))|0,mul:(R,S)=>q((R|0)*(S|0))|0,inv:(R)=>{throw Error("not implemented")}},v={N:J,roots:W,invertButterflies:!0,skipStages:O?1:0,brp:!1},Z=DD(w,{dit:!1,...v}),V=DD(w,{dit:!0,...v});return{mod:q,smod:D,nttZetas:W,NTT:{encode:(R)=>{return Z(R)},decode:(R)=>{V(R);for(let S=0;S<R.length;S++)R[S]=q(I*R[S]);return R}},bitsCoder:(R,S)=>{let L=zD(R),k=R*(J/8);return{bytesLen:k,encode:(x)=>{let h=new Uint8Array(k);for(let B=0,m=0,a=0,_=0;B<x.length;B++){m|=(S.encode(x[B])&L)<<a,a+=R;for(;a>=8;a-=8,m>>=8)h[_++]=m&zD(a)}return h},decode:(x)=>{let h=U(J);for(let B=0,m=0,a=0,_=0;B<x.length;B++){m|=x[B]<<a,a+=8;for(;a>=R;a-=R,m>>=R)h[_++]=S.decode(m&L)}return h}}}}},$L=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,z)=>{return G[I+0]=D,G[I+1]=z,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),c$(Q,G)}}},ug=$L(_g);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var VU=256,c0=3329,UL=3303,IL=17,{mod:B8,nttZetas:JL,NTT:UJ,bitsCoder:GL}=Fg({N:VU,Q:c0,F:UL,ROOT_OF_UNITY:IL,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),YD={512:{N:VU,Q:c0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:VU,Q:c0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:VU,Q:c0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},QL=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+c0/2)/c0,decode:(J)=>J*c0+U>>>$}},A8=($)=>GL($,QL($));function IJ($,U){for(let J=0;J<VU;J++)$[J]=B8($[J]+U[J])}function XL($,U){for(let J=0;J<VU;J++)$[J]=B8($[J]-U[J])}function OL($,U,J,G,I){let Q=B8(U*G*I+$*J),X=B8($*G+U*J);return{c0:Q,c1:X}}function U4($,U){for(let J=0;J<VU/2;J++){let G=JL[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=OL($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function xg($){let U=new Uint16Array(VU);for(let J=0;J<VU;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<VU&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<c0)U[J++]=Q;if(J<VU&&X<c0)U[J++]=X}}return U}function P8($,U,J,G){let I=$(G*VU/4,U,J),Q=new Uint16Array(VU),X=yQ(I),O=0;for(let q=0,D=0,z=0,W=0;q<X.length;q++){let w=X[q];for(let v=0;v<32;v++)if(z+=w&1,w>>=1,O+=1,O===G)W=z,z=0;else if(O===2*G)Q[D++]=B8(W-z),z=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var qL=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=A8(1),z=A8(q),W=A8(O),w=$J("publicKey",$4(A8(12),U),32),v=$4(A8(12),U),Z=$J("ciphertext",$4(W,U),z),V=$J("seed",32,32);return{secretCoder:v,lengths:{secretKey:v.bytesLen,publicKey:w.bytesLen,cipherText:Z.bytesLen},keygen:(N)=>{g$(N,32,"seed");let H=new Uint8Array(33);H.set(N),H[32]=U;let R=I(H),[S,L]=V.decode(R),k=[],x=[];for(let m=0;m<U;m++)k.push(UJ.encode(P8(J,L,m,Q)));let h=G(S);for(let m=0;m<U;m++){let a=UJ.encode(P8(J,L,U+m,Q));for(let _=0;_<U;_++){let A=xg(h.get(_,m));IJ(a,U4(A,k[_]))}x.push(a)}h.clean();let B={publicKey:w.encode([x,S]),secretKey:v.encode(k)};return c$(S,L,k,x,H,R),B},encrypt:(N,H,R)=>{let[S,L]=w.decode(N),k=[];for(let _=0;_<U;_++)k.push(UJ.encode(P8(J,R,_,Q)));let x=G(L),h=new Uint16Array(VU),B=[];for(let _=0;_<U;_++){let A=P8(J,R,U+_,X),E=new Uint16Array(VU);for(let M=0;M<U;M++){let T=xg(x.get(_,M));IJ(E,U4(T,k[M]))}IJ(A,UJ.decode(E)),B.push(A),IJ(h,U4(S[_],k[_])),c$(E)}x.clean();let m=P8(J,R,2*U,X);IJ(m,UJ.decode(h));let a=D.decode(H);return IJ(a,m),c$(S,k,h,m),Z.encode([B,a])},decrypt:(N,H)=>{let[R,S]=Z.decode(N),L=v.decode(H),k=new Uint16Array(VU);for(let x=0;x<U;x++)IJ(k,U4(L[x],UJ.encode(R[x])));return XL(S,UJ.decode(k)),c$(k,L,R),D.encode(S)}}};function WD($){let U=qL($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=$J("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(z=g0(64))=>{g$(z,64,"seed");let{publicKey:W,secretKey:w}=U.keygen(z.subarray(0,32)),v=J(W),Z=O.encode([w,W,v,z.subarray(32)]);return c$(w,v),{publicKey:W,secretKey:Z}},getPublicKey:(z)=>{let[W,w,v,Z]=O.decode(z);return Uint8Array.from(w)},encapsulate:(z,W=g0(32))=>{g$(z,X.publicKey,"publicKey"),g$(W,32,"message");let w=z.subarray(0,384*$.K),v=Q.encode(Q.decode(kg(w)));if(!eQ(v,w))throw c$(v),Error("ML-KEM.encapsulate: wrong publicKey modulus");c$(v);let Z=G.create().update(W).update(J(z)).digest(),V=U.encrypt(z,W,Z.subarray(32,64));return c$(Z.subarray(32)),{cipherText:V,sharedSecret:Z.subarray(0,32)}},decapsulate:(z,W)=>{g$(W,O.bytesLen,"secretKey"),g$(z,X.cipherText,"cipherText");let w=O.bytesLen-96,v=w+32,Z=J(W.subarray(w/2,v));if(!eQ(Z,W.subarray(v,v+32)))throw Error("invalid secretKey: hash check failed");let[V,N,H,R]=O.decode(W),S=U.decrypt(z,V),L=G.create().update(S).update(H).digest(),k=L.subarray(0,32),x=U.encrypt(N,S,L.subarray(32,64)),h=eQ(z,x),B=I.create({dkLen:32}).update(R).update(z).digest();return c$(S,x,!h?k:B),h?k:B}}}function DL($,U,J){return Z0.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var wD={HASH256:eI,HASH512:Sg,KDF:Z0,XOF:ug,PRF:DL},In=WD({...wD,...YD[512]}),L8=WD({...wD,...YD[768]}),mg=WD({...wD,...YD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function zL($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=g0(J.seed))=>{g$(X,J.seed,"seed");let O=Q.isLE?WI(X):YI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function vD($,U=!1){let J=zL($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=g0($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return c$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function S8($,U){return $J(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function VD($){return(U,J)=>$(U,{dkLen:J})}function YL($,U,...J){let G=S8(J,"seed"),I=S8(J,"publicKey");if($===void 0)$=G.bytesLen;p$($);function Q(X){g$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((W,w)=>W.keygen(O[w])),D=q.map((W)=>W.secretKey),z=q.map((W)=>W.publicKey);return{secretKey:D,publicKey:z}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=g0($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return c$(O),c$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function I4($,U,J,G,...I){let Q=YL($,J,...I),X=S8(I,"cipherText"),O=S8(I,"publicKey"),q=S8(I,"msg");if(U===void 0)U=q.bytesLen;return p$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,z=g0(q.bytesLen)){let W=O.decode(D),w=q.decode(z),v=I.map((H,R)=>H.encapsulate(W[R],w[R])),Z=v.map((H)=>H.sharedSecret),V=v.map((H)=>H.cipherText),N={sharedSecret:G(W,V,Z),cipherText:X.encode(V)};return c$(Z,V),N},decapsulate(D,z){let W=X.decode(D),{publicKey:w,secretKey:v}=Q.expandDecapsulationKey(z),Z=I.map((V,N)=>V.decapsulate(W[N],v[N]));return G(w,W,Z)}}}function yg($,U,J,G,I){return pU(G),pU(I),I4(32,32,VD(G),(Q,X,O)=>I(r$(O[0],O[1],X[1],Q[1],wI($))),U,J)}var wn=yg("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",L8,vD(QD,!0),Z0,eI),vn=yg("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",mg,vD(gg,!0),Z0,eI);function WL($,U,J,G,I){return pU(G),pU(I),I4(32,32,VD(G),(Q,X,O)=>{let q=r$(O[0],O[1],X[0],Q[0],X[1],Q[1],wI($)),D=32,z=r$(wI("hybrid_prk"),q),W=Rg(I,z),w=r$(dJ(32,2),wI("shared_secret"),wI("")),v=Hg(I,W,w,32);return c$(W,w,z,q),v},U,J)}var rg=vD(Zg),Vn=WL("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",L8,rg,Z0,tQ),wL=(()=>I4(32,32,VD(Z0),($,U,J)=>eI(r$(J[0],J[1],U[1],$[1],wI("\\.//^\\"))),L8,rg))();function vL($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let z=0,W=U;;z=W,W+=U){if(W>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(z,W),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=g0(G)){return g$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=g0(G)){g$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),z=$.getPublicKey(q,!1);return c$(q),{sharedSecret:D,cipherText:z}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function VL($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=vL(J,I,Q,G),O=64,q=O+G;return I4(32,32,(D)=>{g$(D,32);let z=Z0(D,{dkLen:q}),W=z.subarray(0,O),w=z.subarray(O,q);return r$(W,w)},(D,z,W)=>eI(r$(W[0],W[1],z[1],D[1],wI($))),U,X)}var NL=(()=>VL("MLKEM768-P256",L8,QD,128))();var J4=wL,hg=NL;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>t$($,U,J),ZD=m$,oJ=BQ,JU=(...$)=>gq(...$),aJ=($)=>G8($),tJ=Vq,sJ=($)=>u0($),Q4=BigInt(0),ND=BigInt(1);function i0($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function X4($){if(typeof $==="bigint"){if(!G4($))throw RangeError("positive bigint expected, got "+$)}else ZD($);return $}function M0($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function C8($){let U=X4($).toString(16);return U.length&1?"0"+U:U}function lg($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?Q4:BigInt("0x"+$)}function JJ($){return lg(BQ($))}function Q0($){return lg(BQ(gI(t$($)).reverse()))}function O4($,U){if(m$(U),U===0)throw RangeError("zero length");$=X4($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return G8(J.padStart(U*2,"0"))}function _8($,U){return O4($,U).reverse()}function dg($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function gI($){return Uint8Array.from(S$($))}function q4($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var G4=($)=>typeof $==="bigint"&&Q4<=$;function ZL($,U,J){return G4($)&&G4(U)&&G4(J)&&U<=$&&$<J}function p0($,U,J,G){if(!ZL(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function eJ($){if($<Q4)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>Q4;$>>=ND,U+=1);return U}var E8=($)=>(ND<<BigInt($))-ND;function ng($,U,J){if(m$($,"hashLen"),m$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,JU(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,H=[];while(N<U){q=w();let R=q.slice();H.push(R),N+=q.length}return JU(...H)};return(N,H)=>{W(),v(N);let R=void 0;while((R=H(Z()))===void 0)v();return W(),R}}function aU($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var gD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GU=BigInt(0),u$=BigInt(1),GJ=BigInt(2),og=BigInt(3),ag=BigInt(4),tg=BigInt(5),gL=BigInt(7),sg=BigInt(8),ML=BigInt(9),eg=BigInt(16);function F$($,U){if(U<=GU)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=GU?J:U+J}function tU($,U,J){if(U<GU)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >GU)G*=G,G%=J;return G}function cg($,U){if($===GU)throw Error("invert: expected non-zero number");if(U<=GU)throw Error("invert: expected positive modulus, got "+U);let J=F$($,U),G=U,I=GU,Q=u$,X=u$,O=GU;while(J!==GU){let D=G/J,z=G-J*D,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==u$)throw Error("invert: does not exist");return F$(I,U)}function MD($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function $5($,U){let J=$,G=(J.ORDER+u$)/ag,I=J.pow(U,G);return MD(J,I,U),I}function RL($,U){let J=$,G=(J.ORDER-tg)/sg,I=J.mul(U,GJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,GJ),Q),q=J.mul(X,J.sub(O,J.ONE));return MD(J,q,U),q}function HL($){let U=D4($),J=U5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+gL)/eg;return(O,q)=>{let D=O,z=D.pow(q,X),W=D.mul(z,G),w=D.mul(z,I),v=D.mul(z,Q),Z=D.eql(D.sqr(W),q),V=D.eql(D.sqr(w),q);z=D.cmov(z,W,Z),W=D.cmov(v,w,V);let N=D.eql(D.sqr(W),q),H=D.cmov(z,W,N);return MD(D,H,q),H}}function U5($){if($<og)throw Error("sqrt is not defined for small field");let U=$-u$,J=0;while(U%GJ===GU)U/=GJ,J++;let G=GJ,I=D4($);while(ig(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return $5;let Q=I.pow(G,U),X=(U+u$)/GJ;return function(q,D){let z=q;if(z.is0(D))return D;if(ig(z,D)!==1)throw Error("Cannot find square root");let W=J,w=z.mul(z.ONE,Q),v=z.pow(D,U),Z=z.pow(D,X);while(!z.eql(v,z.ONE)){if(z.is0(v))return z.ZERO;let V=1,N=z.sqr(v);while(!z.eql(N,z.ONE))if(V++,N=z.sqr(N),V===W)throw Error("Cannot find square root");let H=u$<<BigInt(W-V-1),R=z.pow(w,H);W=V,w=z.sqr(R),v=z.mul(v,w),Z=z.mul(Z,R)}return Z}}function jL($){if($%ag===og)return $5;if($%sg===tg)return RL;if($%eg===ML)return HL($);return U5($)}var o0=($,U)=>(F$($,U)&u$)===u$,TL=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function RD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=TL.reduce((G,I)=>{return G[I]="function",G},U);if(aU($,J),M0($.BYTES,"BYTES"),M0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=u$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function KL($,U,J){let G=$;if(J<GU)throw Error("invalid exponent, negatives unsupported");if(J===GU)return G.ONE;if(J===u$)return U;let I=G.ONE,Q=U;while(J>GU){if(J&u$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=u$}return I}function b8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function ig($,U){let J=$,G=(J.ORDER-u$)/GJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function AL($,U){if(U!==void 0)ZD(U);if($<=GU)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=eJ($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var pg=new WeakMap;class HD{ORDER;BITS;BYTES;isLE;ZERO=GU;ONE=u$;_lengths;_mod;constructor($,U={}){if($<=u$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=AL($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return F$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return GU<=$&&$<this.ORDER}is0($){return $===GU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&u$)===u$}neg($){return F$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return F$($*$,this.ORDER)}add($,U){return F$($+U,this.ORDER)}sub($,U){return F$($-U,this.ORDER)}mul($,U){return F$($*U,this.ORDER)}pow($,U){return KL(this,$,U)}div($,U){return F$($*cg(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return cg($,this.ORDER)}sqrt($){let U=pg.get(this);if(!U)pg.set(this,U=jL(this.ORDER));return U(this,$)}toBytes($){return this.isLE?_8($,this.BYTES):O4($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?Q0($):JJ($);if(X)O=F$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return b8(this,$)}cmov($,U,J){return i0(J,"condition"),J?U:$}}Object.freeze(HD.prototype);function D4($,U={}){return new HD($,U)}function I5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=u$)throw Error("field order must be greater than 1");let U=eJ($-u$);return Math.ceil(U/8)}function jD($){let U=I5($);return U+Math.ceil(U/2)}function J5($,U,J=!1){S$($);let G=$.length,I=I5(U),Q=Math.max(jD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?Q0($):JJ($),O=F$(X,U-u$)+u$;return J?_8(O,I):O4(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $G=BigInt(0),QJ=BigInt(1);function f8($,U){let J=U.negate();return $?J:U}function XJ($,U){let J=b8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function O5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function TD($,U){O5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=E8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function G5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=QJ;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var KD=new WeakMap,q5=new WeakMap;function AD($){return q5.get($)||1}function Q5($){if($!==$G)throw Error("invalid wNAF")}class k8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>$G){if(U&QJ)J=J.add(G);G=G.double(),U>>=QJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=TD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=TD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=G5(J,X,Q);if(J=O,D)I=I.add(f8(W,U[w]));else G=G.add(f8(z,U[q]))}return Q5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=TD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===$G)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=G5(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return Q5(J),G}getPrecomputes($,U,J){let G=KD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);KD.set(U,G)}}return G}cached($,U,J){let G=AD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=AD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){O5(U,this.bits),q5.set($,U),KD.delete($)}hasCache($){return AD($)!==1}}function D5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>$G||G>$G){if(J&QJ)Q=Q.add(I);if(G&QJ)X=X.add(I);I=I.double(),J>>=QJ,G>>=QJ}return{p1:Q,p2:X}}function X5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return RD(U),U}else return D4($,{isLE:J})}function z4($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>$G))throw Error(`CURVE.${q} must be positive bigint`)}let I=X5(U.p,J.Fp,G),Q=X5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function F8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function u8($,U){if(M0($),M0(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function PL($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function BL($){if(!tJ($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?q4($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function PD($,U,J,G){if(S$($),M0(J),U=BL(U),U.length>255)U=G(JU(q4("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=JU(U,u8(U.length,1)),q=new Uint8Array(Q),D=u8(J,2),z=Array(X),W=G(JU(q,$,D,u8(0,1),O));z[0]=G(JU(W,u8(1,1),O));for(let v=1;v<X;v++){let Z=[PL(W,z[v-1]),u8(v+1,1),O];z[v]=G(JU(...Z))}return JU(...z).slice(0,J)}var z5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Y5=($,U)=>($+($>=0?U:-U)/w5)/U;function LL($,U,J){p0("scalar",$,R0,J);let[[G,I],[Q,X]]=U,O=Y5(X*$,J),q=Y5(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<R0,w=z<R0;if(W)D=-D;if(w)z=-z;let v=E8(Math.ceil(eJ(J)/2))+MI;if(D<R0||D>=v||z<R0||z>=v)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:W,k1:D,k2neg:w,k2:z}}function LD($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function BD($,U){aU($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(i0(J.lowS,"lowS"),i0(J.prehash,"prehash"),J.format!==void 0)LD(J.format);return J}class W5 extends Error{constructor($=""){super($)}}var X0={Err:W5,_tlv:{encode:($,U)=>{let{Err:J}=X0;if(M0($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=C8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?C8(I.length/2|128):"";return C8($)+Q+I+U},decode($,U){let{Err:J}=X0;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=X0;if(X4($),$<R0)throw new U("integer: negative integers are not allowed");let J=C8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=X0;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return JJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=X0,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=X0,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(X0._tlv);Object.freeze(X0._int);Object.freeze(X0);var R0=BigInt(0),MI=BigInt(1),w5=BigInt(2),Y4=BigInt(3),SL=BigInt(4);function v5($,U={}){let J=z4("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;aU(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=N5(G,I);function W(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(_,A,E){if(D&&A.is0())return Uint8Array.of(0);let{x:M,y:T}=A.toAffine(),j=G.toBytes(M);if(i0(E,"isCompressed"),E){W();let b=!G.isOdd(T);return JU(V5(b),j)}else return JU(Uint8Array.of(4),j,G.toBytes(T))}function v(_){S$(_,void 0,"Point");let{publicKey:A,publicKeyUncompressed:E}=z,M=_.length,T=_[0],j=_.subarray(1);if(D&&M===1&&T===0)return{x:G.ZERO,y:G.ZERO};if(M===A&&(T===2||T===3)){let b=G.fromBytes(j);if(!G.isValid(b))throw Error("bad point: is not on curve, wrong x");let P=N(b),F;try{F=G.sqrt(P)}catch($$){let X$=$$ instanceof Error?": "+$$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}W();let y=G.isOdd(F);if((T&1)===1!==y)F=G.neg(F);return{x:b,y:F}}else if(M===E&&T===4){let b=G.BYTES,P=G.fromBytes(j.subarray(0,b)),F=G.fromBytes(j.subarray(b,b*2));if(!H(P,F))throw Error("bad point: is not on curve");return{x:P,y:F}}else throw Error(`bad point: got length ${M}, expected compressed=${A} or uncompressed=${E}`)}let Z=U.toBytes===void 0?w:U.toBytes,V=U.fromBytes===void 0?v:U.fromBytes;function N(_){let A=G.sqr(_),E=G.mul(A,_);return G.add(G.add(E,G.mul(_,Q.a)),Q.b)}function H(_,A){let E=G.sqr(A),M=N(_);return G.eql(E,M)}if(!H(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let R=G.mul(G.pow(Q.a,Y4),SL),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(R,S)))throw Error("bad curve params: a or b");function L(_,A,E=!1){if(!G.isValid(A)||E&&G.is0(A))throw Error(`bad point coordinate ${_}`);return A}function k(_){if(!(_ instanceof B))throw Error("Weierstrass Point expected")}function x(_){if(!q||!q.basises)throw Error("no endo");return LL(_,q.basises,I.ORDER)}function h(_,A,E,M,T){return E=new B(G.mul(E.X,_),E.Y,E.Z),A=f8(M,A),E=f8(T,E),A.add(E)}class B{static BASE=new B(Q.Gx,Q.Gy,G.ONE);static ZERO=new B(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(_,A,E){this.X=L("x",_),this.Y=L("y",A,!0),this.Z=L("z",E),Object.freeze(this)}static CURVE(){return Q}static fromAffine(_){let{x:A,y:E}=_||{};if(!_||!G.isValid(A)||!G.isValid(E))throw Error("invalid affine point");if(_ instanceof B)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(E))return B.ZERO;return new B(A,E,G.ONE)}static fromBytes(_){let A=B.fromAffine(V(S$(_,void 0,"point")));return A.assertValidity(),A}static fromHex(_){return B.fromBytes(aJ(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,A=!0){if(a.createCache(this,_),!A)this.multiply(Y4);return this}assertValidity(){let _=this;if(_.is0()){if(U.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:A,y:E}=_.toAffine();if(!G.isValid(A)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!H(A,E))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){k(_);let{X:A,Y:E,Z:M}=this,{X:T,Y:j,Z:b}=_,P=G.eql(G.mul(A,b),G.mul(T,M)),F=G.eql(G.mul(E,b),G.mul(j,M));return P&&F}negate(){return new B(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:A}=Q,E=G.mul(A,Y4),{X:M,Y:T,Z:j}=this,b=G.ZERO,P=G.ZERO,F=G.ZERO,y=G.mul(M,M),n=G.mul(T,T),$$=G.mul(j,j),X$=G.mul(M,T);return X$=G.add(X$,X$),F=G.mul(M,j),F=G.add(F,F),b=G.mul(_,F),P=G.mul(E,$$),P=G.add(b,P),b=G.sub(n,P),P=G.add(n,P),P=G.mul(b,P),b=G.mul(X$,b),F=G.mul(E,F),$$=G.mul(_,$$),X$=G.sub(y,$$),X$=G.mul(_,X$),X$=G.add(X$,F),F=G.add(y,y),y=G.add(F,y),y=G.add(y,$$),y=G.mul(y,X$),P=G.add(P,y),$$=G.mul(T,j),$$=G.add($$,$$),y=G.mul($$,X$),b=G.sub(b,y),F=G.mul($$,n),F=G.add(F,F),F=G.add(F,F),new B(b,P,F)}add(_){k(_);let{X:A,Y:E,Z:M}=this,{X:T,Y:j,Z:b}=_,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=Q.a,$$=G.mul(Q.b,Y4),X$=G.mul(A,T),q$=G.mul(E,j),W$=G.mul(M,b),N$=G.add(A,E),v$=G.add(T,j);N$=G.mul(N$,v$),v$=G.add(X$,q$),N$=G.sub(N$,v$),v$=G.add(A,M);let V$=G.add(T,b);return v$=G.mul(v$,V$),V$=G.add(X$,W$),v$=G.sub(v$,V$),V$=G.add(E,M),P=G.add(j,b),V$=G.mul(V$,P),P=G.add(q$,W$),V$=G.sub(V$,P),y=G.mul(n,v$),P=G.mul($$,W$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),F=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),W$=G.mul(n,W$),v$=G.mul($$,v$),q$=G.add(q$,W$),W$=G.sub(X$,W$),W$=G.mul(n,W$),v$=G.add(v$,W$),X$=G.mul(q$,v$),F=G.add(F,X$),X$=G.mul(V$,v$),P=G.mul(N$,P),P=G.sub(P,X$),X$=G.mul(N$,q$),y=G.mul(V$,y),y=G.add(y,X$),new B(P,F,y)}subtract(_){return k(_),this.add(_.negate())}is0(){return this.equals(B.ZERO)}multiply(_){let{endo:A}=U;if(!I.isValidNot0(_))throw RangeError("invalid scalar: out of range");let E,M,T=(j)=>a.cached(this,j,(b)=>XJ(B,b));if(A){let{k1neg:j,k1:b,k2neg:P,k2:F}=x(_),{p:y,f:n}=T(b),{p:$$,f:X$}=T(F);M=n.add(X$),E=h(A.beta,y,$$,j,P)}else{let{p:j,f:b}=T(_);E=j,M=b}return XJ(B,[E,M])[0]}multiplyUnsafe(_){let{endo:A}=U,E=this,M=_;if(!I.isValid(M))throw RangeError("invalid scalar: out of range");if(M===R0||E.is0())return B.ZERO;if(M===MI)return E;if(a.hasCache(this))return this.multiply(M);if(A){let{k1neg:T,k1:j,k2neg:b,k2:P}=x(M),{p1:F,p2:y}=D5(B,E,j,P);return h(A.beta,F,y,T,b)}else return a.unsafe(E,M)}toAffine(_){let A=this,E=_,{X:M,Y:T,Z:j}=A;if(G.eql(j,G.ONE))return{x:M,y:T};let b=A.is0();if(E==null)E=b?G.ONE:G.inv(j);let P=G.mul(M,E),F=G.mul(T,E),y=G.mul(j,E);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}isTorsionFree(){let{isTorsionFree:_}=U;if(X===MI)return!0;if(_)return _(B,this);return a.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:_}=U;if(X===MI)return this;if(_)return _(B,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===MI)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return i0(_,"isCompressed"),this.assertValidity(),Z(B,this,_)}toHex(_=!0){return oJ(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let m=I.BITS,a=new k8(B,U.endo?Math.ceil(m/2):m);if(m>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function V5($){return Uint8Array.of($?2:3)}function N5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function CL($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?sJ:U.randomBytes,I=Object.assign(N5($.Fp,J),{seed:Math.max(jD(J.ORDER),16)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let H=v.length;if(Z===!0&&H!==V)return!1;if(Z===!1&&H!==N)return!1;return!!$.fromBytes(v)}catch(H){return!1}}function O(v){return v=v===void 0?G(I.seed):v,J5(S$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I,H=J._lengths;if(!tJ(v))return;let R=S$(v,void 0,"key").length,S=R===V||R===N,L=R===Z||!!H?.includes(R);if(S&&L)return;return S}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=F8(O,q);return Object.freeze(W),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function Z5($,U,J={}){let G=U;F0(G),aU(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?sJ:J.randomBytes,Q=J.hmac===void 0?(T,j)=>w0(G,T,j):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z}=CL($,J),V={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=q*w5+MI<X.ORDER;function H(T){let j=q>>MI;return T>j}function R(T,j){if(!O.isValidNot0(j))throw Error(`invalid signature ${T}: out of range 1..Point.Fn.ORDER`);return j}function S(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(T,j){LD(j);let b=Z.signature,P=j==="compact"?b:j==="recovered"?b+1:void 0;return S$(T,P)}class k{r;s;recovery;constructor(T,j,b){if(this.r=R("r",T),this.s=R("s",j),b!=null){if(S(),![0,1,2,3].includes(b))throw Error("invalid recovery id");this.recovery=b}Object.freeze(this)}static fromBytes(T,j=V.format){L(T,j);let b;if(j==="der"){let{r:n,s:$$}=X0.toSig(S$(T));return new k(n,$$)}if(j==="recovered")b=T[0],j="compact",T=T.subarray(1);let P=Z.signature/2,F=T.subarray(0,P),y=T.subarray(P,P*2);return new k(O.fromBytes(F),O.fromBytes(y),b)}static fromHex(T,j){return this.fromBytes(aJ(T),j)}assertRecovery(){let{recovery:T}=this;if(T==null)throw Error("invalid recovery id: must be present");return T}addRecoveryBit(T){return new k(this.r,this.s,T)}recoverPublicKey(T){let{r:j,s:b}=this,P=this.assertRecovery(),F=P===2||P===3?j+q:j;if(!X.isValid(F))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(F),n=$.fromBytes(JU(V5((P&1)===0),y)),$$=O.inv(F),X$=h(S$(T,void 0,"msgHash")),q$=O.create(-X$*$$),W$=O.create(b*$$),N$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(W$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return H(this.s)}toBytes(T=V.format){if(LD(T),T==="der")return aJ(X0.hexFromSig(this));let{r:j,s:b}=this,P=O.toBytes(j),F=O.toBytes(b);if(T==="recovered")return S(),JU(Uint8Array.of(this.assertRecovery()),P,F);return JU(P,F)}toHex(T){return oJ(this.toBytes(T))}}Object.freeze(k.prototype),Object.freeze(k);let x=J.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let b=JJ(j),P=j.length*8-D;return P>0?b>>BigInt(P):b}:J.bits2int,h=J.bits2int_modN===void 0?function(j){return O.create(x(j))}:J.bits2int_modN,B=E8(D);function m(T){return p0("num < 2^"+D,T,R0,B),O.toBytes(T)}function a(T,j){return S$(T,void 0,"message"),j?S$(G(T),void 0,"prehashed message"):T}function _(T,j,b){let{lowS:P,prehash:F,extraEntropy:y}=BD(b,V);T=a(T,F);let n=h(T),$$=O.fromBytes(j);if(!O.isValidNot0($$))throw Error("invalid private key");let X$=[m($$),m(n)];if(y!=null&&y!==!1){let v$=y===!0?I(Z.secretKey):y;X$.push(S$(v$,void 0,"extraEntropy"))}let q$=JU(...X$),W$=n;function N$(v$){let V$=x(v$);if(!O.isValidNot0(V$))return;let R$=O.inv(V$),b$=$.BASE.multiply(V$).toAffine(),k$=O.create(b$.x);if(k$===R0)return;let OU=O.create(R$*O.create(W$+k$*$$));if(OU===R0)return;let qU=(b$.x===k$?0:2)|Number(b$.y&MI),LU=OU;if(P&&H(OU))LU=O.neg(OU),qU^=1;return new k(k$,LU,N?void 0:qU)}return{seed:q$,k2sig:N$}}function A(T,j,b={}){let{seed:P,k2sig:F}=_(T,j,b);return ng(G.outputLen,O.BYTES,Q)(P,F).toBytes(b.format)}function E(T,j,b,P={}){let{lowS:F,prehash:y,format:n}=BD(P,V);if(b=S$(b,void 0,"publicKey"),j=a(j,y),!tJ(T)){let $$=T instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+$$)}L(T,n);try{let $$=k.fromBytes(T,n),X$=$.fromBytes(b);if(F&&$$.hasHighS())return!1;let{r:q$,s:W$}=$$,N$=h(j),v$=O.inv(W$),V$=O.create(N$*v$),R$=O.create(q$*v$),b$=$.BASE.multiplyUnsafe(V$).add(X$.multiplyUnsafe(R$));if(b$.is0())return!1;return O.create(b$.x)===q$}catch($$){return!1}}function M(T,j,b={}){let{prehash:P}=BD(b,V);return j=a(j,P),k.fromBytes(T,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z,Point:$,sign:A,verify:E,recoverPublicKey:M,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _L=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var EL=v5(_L),UG=Z5(EL,y$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RI=BigInt(0),CU=BigInt(1),SD=BigInt(2),bL=BigInt(8);function fL($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function g5($,U={}){let J=U,G=z4("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;aU(J,{},{uvRatio:"function"});let q=SD<<BigInt(Q.BYTES*8)-CU,D=(V)=>I.create(V),z=J.uvRatio===void 0?(V,N)=>{try{return{isValid:!0,value:I.sqrt(I.div(V,N))}}catch(H){return{isValid:!1,value:RI}}}:J.uvRatio;if(!fL(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function W(V,N,H=!1){let R=H?CU:RI;return p0("coordinate "+V,N,R,q),N}function w(V){if(!(V instanceof v))throw Error("EdwardsPoint expected")}class v{static BASE=new v(X.Gx,X.Gy,CU,D(X.Gx*X.Gy));static ZERO=new v(RI,CU,CU,RI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(V,N,H,R){this.X=W("x",V),this.Y=W("y",N),this.Z=W("z",H,!0),this.T=W("t",R),Object.freeze(this)}static CURVE(){return X}static fromAffine(V){if(V instanceof v)throw Error("extended point not allowed");let{x:N,y:H}=V||{};return W("x",N),W("y",H),new v(N,H,CU,D(N*H))}static fromBytes(V,N=!1){let H=I.BYTES,{a:R,d:S}=X;V=gI(S$(V,H,"point")),i0(N,"zip215");let L=gI(V),k=V[H-1];L[H-1]=k&-129;let x=Q0(L),h=N?q:I.ORDER;p0("point.y",x,RI,h);let B=D(x*x),m=D(B-CU),a=D(S*B-R),{isValid:_,value:A}=z(m,a);if(!_)throw Error("bad point: invalid y coordinate");let E=(A&CU)===CU,M=(k&128)!==0;if(!N&&A===RI&&M)throw Error("bad point: x=0 and x_0=1");if(M!==E)A=D(-A);return v.fromAffine({x:A,y:x})}static fromHex(V,N=!1){return v.fromBytes(aJ(V),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,N=!0){if(Z.createCache(this,V),!N)this.multiply(SD);return this}assertValidity(){let V=this,{a:N,d:H}=X;if(V.is0())throw Error("bad point: ZERO");let{X:R,Y:S,Z:L,T:k}=V,x=D(R*R),h=D(S*S),B=D(L*L),m=D(B*B),a=D(x*N),_=D(B*D(a+h)),A=D(m+D(H*D(x*h)));if(_!==A)throw Error("bad point: equation left != right (1)");let E=D(R*S),M=D(L*k);if(E!==M)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:N,Y:H,Z:R}=this,{X:S,Y:L,Z:k}=V,x=D(N*k),h=D(S*R),B=D(H*k),m=D(L*R);return x===h&&B===m}is0(){return this.equals(v.ZERO)}negate(){return new v(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=X,{X:N,Y:H,Z:R}=this,S=D(N*N),L=D(H*H),k=D(SD*D(R*R)),x=D(V*S),h=N+H,B=D(D(h*h)-S-L),m=x+L,a=m-k,_=x-L,A=D(B*a),E=D(m*_),M=D(B*_),T=D(a*m);return new v(A,E,T,M)}add(V){w(V);let{a:N,d:H}=X,{X:R,Y:S,Z:L,T:k}=this,{X:x,Y:h,Z:B,T:m}=V,a=D(R*x),_=D(S*h),A=D(k*H*m),E=D(L*B),M=D((R+S)*(x+h)-a-_),T=E-A,j=E+A,b=D(_-N*a),P=D(M*T),F=D(j*b),y=D(M*b),n=D(T*j);return new v(P,F,n,y)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!Q.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f:H}=Z.cached(this,V,(R)=>XJ(v,R));return XJ(v,[N,H])[0]}multiplyUnsafe(V){if(!Q.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===RI)return v.ZERO;if(this.is0()||V===CU)return this;return Z.unsafe(this,V,(N)=>XJ(v,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Z.unsafe(this,X.n).is0()}toAffine(V){let N=this,H=V,{X:R,Y:S,Z:L}=N,k=N.is0();if(H==null)H=k?bL:I.inv(L);let x=D(R*H),h=D(S*H),B=I.mul(L,H);if(k)return{x:RI,y:CU};if(B!==CU)throw Error("invZ was invalid");return{x,y:h}}clearCofactor(){if(O===CU)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:V,y:N}=this.toAffine(),H=I.toBytes(N);return H[H.length-1]|=V&CU?128:0,H}toHex(){return oJ(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Z=new k8(v,Q.BITS);if(Q.BITS>=8)v.BASE.precompute(8);return Object.freeze(v.prototype),Object.freeze(v),v}class CD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){gD()}static fromHex($){gD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return oJ(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var x8=BigInt(0),IG=BigInt(1),W4=BigInt(2);function kL($){return aU($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function M5($){let U=kL($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?sJ:X,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?W4**BigInt(254):W4**BigInt(447),Z=O?BigInt(8)*W4**BigInt(251)-IG:BigInt(4)*W4**BigInt(445)-IG,V=v+Z+IG,N=(M)=>F$(M,J),H=R(W);function R(M){return _8(N(M),z)}function S(M){let T=gI(S$(M,z,"uCoordinate"));if(O)T[31]&=127;return N(Q0(T))}function L(M){return Q0(I(gI(S$(M,z,"scalar"))))}function k(M,T){let j=a(S(T),L(M));if(j===x8)throw Error("invalid private or public key received");return R(j)}function x(M){return k(M,H)}let h=x,B=k;function m(M,T,j){let b=N(M*(T-j));return T=N(T-b),j=N(j+b),{x_2:T,x_3:j}}function a(M,T){p0("u",M,x8,J),p0("scalar",T,v,V);let j=T,b=M,P=IG,F=x8,y=M,n=IG,$$=x8;for(let q$=BigInt(D-1);q$>=x8;q$--){let W$=j>>q$&IG;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,OU=y-n,qU=N(OU*N$),LU=N(k$*V$),Y0=qU+LU,W0=qU-LU;y=N(Y0*Y0),n=N(b*N(W0*W0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let _={secretKey:z,publicKey:z,seed:z},A=(M)=>{return M=M===void 0?q(z):M,S$(M,_.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze(_),Object.freeze(E),Object.freeze({keygen:F8(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:E,GuBytes:H.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var FL=BigInt(0),a0=BigInt(1),R5=BigInt(2),uL=BigInt(3),xL=BigInt(5),mL=BigInt(8),qJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),fD=(()=>({p:qJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:mL,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function T5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=qJ,O=$*$%Q*$%Q,q=tU(O,R5,Q)*O%Q,D=tU(q,a0,Q)*$%Q,z=tU(D,xL,Q)*D%Q,W=tU(z,U,Q)*z%Q,w=tU(W,J,Q)*W%Q,v=tU(w,G,Q)*w%Q,Z=tU(v,I,Q)*v%Q,V=tU(Z,I,Q)*v%Q,N=tU(V,U,Q)*z%Q;return{pow_p_5_8:tU(N,R5,Q)*$%Q,b2:O}}function yL($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var _D=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function kD($,U){let J=qJ,G=F$(U*U*U,J),I=F$(G*G*U,J),Q=T5($*I).pow_p_5_8,X=F$($*G*Q,J),O=F$(U*X*X,J),q=X,D=F$(X*_D,J),z=O===$,W=O===F$(-$,J),w=O===F$(-$*_D,J);if(z)X=q;if(W||w)X=D;if(o0(X,J))X=F$(-X,J);return{isValid:z||W,value:X}}var OJ=g5(fD,{uvRatio:kD}),HI=(()=>OJ.Fp)(),K5=(()=>OJ.Fn)();var w4=(()=>{let $=qJ;return M5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=T5(U);return F$(tU(J,uL,$)*G,$)},adjustScalarBytes:yL})})();var ED=_D,rL=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),hL=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),lL=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),dL=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),H5=($)=>kD(a0,$),nL=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),bD=($)=>HI.create(Q0($)&nL);function j5($){let{d:U}=fD,J=qJ,G=(H)=>HI.create(H),I=G(ED*$*$),Q=G((I+a0)*lL),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=kD(Q,O),z=G(D*$);if(!o0(z,J))z=G(-z);if(!q)D=z;if(!q)X=I;let W=G(X*(I-a0)*dL-O),w=D*D,v=G((D+D)*O),Z=G(W*rL),V=G(a0-w),N=G(a0+w);return new OJ(G(v*N),G(V*Z),G(Z*N),G(v*V))}class jU extends CD{static BASE=(()=>new jU(OJ.BASE))();static ZERO=(()=>new jU(OJ.ZERO))();static Fp=(()=>HI)();static Fn=(()=>K5)();constructor($){super($)}static fromAffine($){return new jU(OJ.fromAffine($))}assertSame($){if(!($ instanceof jU))throw Error("RistrettoPoint expected")}init($){return new jU($)}static fromBytes($){t$($,32);let{a:U,d:J}=fD,G=qJ,I=(S)=>HI.create(S),Q=bD($);if(!dg(HI.toBytes(Q),$)||o0(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(a0+U*X),q=I(a0-U*X),D=I(O*O),z=I(q*q),W=I(U*J*D-z),{isValid:w,value:v}=H5(I(W*z)),Z=I(v*q),V=I(v*Z*W),N=I((Q+Q)*Z);if(o0(N,G))N=I(-N);let H=I(O*V),R=I(N*H);if(!w||o0(R,G)||H===FL)throw Error("invalid ristretto255 encoding 2");return new jU(new OJ(N,H,a0,R))}static fromHex($){return jU.fromBytes(G8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=qJ,Q=(V)=>HI.create(V),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=H5(Q(X*q)),z=Q(D*X),W=Q(D*O),w=Q(z*W*G),v;if(o0(G*w,I)){let V=Q(U*ED),N=Q($*ED);$=V,U=N,v=Q(z*hL)}else v=W;if(o0($*w,I))U=Q(-U);let Z=Q((J-U)*v);if(o0(Z,I))Z=Q(-Z);return HI.toBytes(Z)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>HI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(jU.ZERO)}}Object.freeze(jU.BASE);Object.freeze(jU.ZERO);Object.freeze(jU.prototype);Object.freeze(jU);var cL=Object.freeze({Point:jU,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=PD($,J,64,_Q);return cL.deriveToCurve(G)},hashToScalar($,U={DST:z5}){let J=PD($,U.DST,64,_Q);return K5.create(Q0(J))},deriveToCurve($){t$($,64);let U=bD($.subarray(0,32)),J=j5(U),G=bD($.subarray(32,64)),I=j5(G);return new jU(J.add(I))}});var A5=!1,iL=!1;async function P5($,U){if(iL)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function v4($,U){return await P5(async()=>{let J=FD($)?$:await oL($),G=await crypto.subtle.importKey("raw",aL(U),{name:"X25519"},A5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(FD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMult($,U)})}async function m8($){return await P5(async()=>{return v4($,w4.GuBytes)},()=>{if(FD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMultBase($)})}var pL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function oL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([...pL,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},A5,["deriveBits"])}function FD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function aL($){return $}class uD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),sL(DJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=DJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:DJ(this.transcript)}}}function sL($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function DJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function JG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function V4($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function xD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function B5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function L5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=DJ(G),X=Q.subarray(0,U),O=JG($,Q.subarray(U));return{data:X,rest:O}}class H0{args;body;constructor($,U){this.args=$,this.body=U}}async function eL($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=YU.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=DJ(G);return{s:new H0(J,I)}}async function S5($){let U=new uD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await eL(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=YU.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:JG($,O)}}}function mD($){let U=[];U.push(`age-encryption.org/v1
|
|
260
|
+
`)}function f7($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function uU($,U){let J=$[U];return typeof J==="string"?J:void 0}function TQ($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var KQ={name:"@rizom/ops",version:"0.2.0-alpha.271",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as zS,mkdirSync as YS,readFileSync as Jz,writeFileSync as Gz}from"fs";import{dirname as WS,join as x5}from"path";function Vq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function m$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function t$($,U,J=""){let G=Vq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(m$($.outputLen),m$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function uJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function AQ($,U){t$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function PQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function MU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function I0($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var SP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function CP($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function _P($){for(let U=0;U<$.length;U++)$[U]=CP($[U]);return $}var Nq=SP?($)=>$:_P,F7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),EP=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function BQ($){if(t$($),F7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=EP[$[J]];return U}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function k7($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function G8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(F7)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=k7($.charCodeAt(Q)),O=k7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function bP($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Zq($,U=""){if(typeof $==="string")return bP($);return t$($,void 0,U)}function gq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];t$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function LQ($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function Mq($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function u0($=32){m$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Rq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Hq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(F0($),t$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),MU(G)}update($){return uJ(this),this.iHash.update($),this}digestInto($){uJ(this),AQ($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var w0=(()=>{let $=(U,J,G)=>new Hq(U,J).update(G).digest();return $.create=(U,J)=>new Hq(U,J),$})();function Q8($,U,J){if(F0($),J===void 0)J=new Uint8Array($.outputLen);return w0($,J,U)}var jq=Uint8Array.of(0),u7=Uint8Array.of();function Tq($,U,J,G=32){F0($),m$(G,"length"),t$(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=u7;else t$(J,void 0,"info");let X=new Uint8Array(Q*I),O=w0.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)jq[0]=z+1,q.update(z===0?u7:D).update(J).update(jq).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),MU(D,jq),X.slice(0,G)}var GI=($,U,J,G,I)=>Tq($,Q8($,U,J),G,I);function x7($,U,J){return $&U^~$&J}function m7($,U,J){return $&U^$&J^U&J}class SQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){uJ(this),t$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=xJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){uJ(this),AQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,MU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=xJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var x0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),s$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),e$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var CQ=BigInt(4294967295),y7=BigInt(32);function fP($,U=!1){if(U)return{h:Number($&CQ),l:Number($>>y7&CQ)};return{h:Number($>>y7&CQ)|0,l:Number($&CQ)|0}}function r7($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=fP($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Kq=($,U,J)=>$>>>J,Aq=($,U,J)=>$<<32-J|U>>>J,lI=($,U,J)=>$>>>J|U<<32-J,dI=($,U,J)=>$<<32-J|U>>>J,X8=($,U,J)=>$<<64-J|U>>>J-32,O8=($,U,J)=>$>>>J-32|U<<64-J;function v0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var h7=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),l7=($,U,J,G)=>U+J+G+($/4294967296|0)|0,d7=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),n7=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,c7=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),i7=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var FP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QI=new Uint32Array(64);class Pq extends SQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)QI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=QI[z-15],w=QI[z-2],v=I0(W,7)^I0(W,18)^W>>>3,Z=I0(w,17)^I0(w,19)^w>>>10;QI[z]=Z+QI[z-7]+v+QI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=I0(X,6)^I0(X,11)^I0(X,25),w=D+W+x7(X,O,q)+FP[z]+QI[z]|0,Z=(I0(J,2)^I0(J,13)^I0(J,22))+m7(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){MU(QI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),MU(this.buffer)}}class p7 extends Pq{A=x0[0]|0;B=x0[1]|0;C=x0[2]|0;D=x0[3]|0;E=x0[4]|0;F=x0[5]|0;G=x0[6]|0;H=x0[7]|0;constructor(){super(32)}}class uP extends Pq{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var o7=(()=>r7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),xP=(()=>o7[0])(),mP=(()=>o7[1])(),XI=new Uint32Array(80),OI=new Uint32Array(80);class q8 extends SQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)XI[R]=$.getUint32(U),OI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=XI[R-15]|0,L=OI[R-15]|0,k=lI(S,L,1)^lI(S,L,8)^Kq(S,L,7),x=dI(S,L,1)^dI(S,L,8)^Aq(S,L,7),h=XI[R-2]|0,B=OI[R-2]|0,m=lI(h,B,19)^X8(h,B,61)^Kq(h,B,6),a=dI(h,B,19)^O8(h,B,61)^Aq(h,B,6),_=d7(x,a,OI[R-7],OI[R-16]),A=n7(_,k,m,XI[R-7],XI[R-16]);XI[R]=A|0,OI[R]=_|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:H}=this;for(let R=0;R<80;R++){let S=lI(z,W,14)^lI(z,W,18)^X8(z,W,41),L=dI(z,W,14)^dI(z,W,18)^O8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=c7(H,L,x,mP[R],OI[R]),B=i7(h,N,S,k,xP[R],XI[R]),m=h|0,a=lI(J,G,28)^X8(J,G,34)^X8(J,G,39),_=dI(J,G,28)^O8(J,G,34)^O8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;N=Z|0,H=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=v0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=h7(m,_,E);J=l7(M,B,a,A),G=M|0}({h:J,l:G}=v0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=v0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=v0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=v0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=v0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=v0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=v0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:H}=v0(this.Hh|0,this.Hl|0,N|0,H|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,H)}roundClean(){MU(XI,OI)}destroy(){this.destroyed=!0,MU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class a7 extends q8{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(64)}}class yP extends q8{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(48)}}var DU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),zU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class rP extends q8{Ah=DU[0]|0;Al=DU[1]|0;Bh=DU[2]|0;Bl=DU[3]|0;Ch=DU[4]|0;Cl=DU[5]|0;Dh=DU[6]|0;Dl=DU[7]|0;Eh=DU[8]|0;El=DU[9]|0;Fh=DU[10]|0;Fl=DU[11]|0;Gh=DU[12]|0;Gl=DU[13]|0;Hh=DU[14]|0;Hl=DU[15]|0;constructor(){super(28)}}class hP extends q8{Ah=zU[0]|0;Al=zU[1]|0;Bh=zU[2]|0;Bl=zU[3]|0;Ch=zU[4]|0;Cl=zU[5]|0;Dh=zU[6]|0;Dl=zU[7]|0;Eh=zU[8]|0;El=zU[9]|0;Fh=zU[10]|0;Fl=zU[11]|0;Gh=zU[12]|0;Gl=zU[13]|0;Hh=zU[14]|0;Hl=zU[15]|0;constructor(){super(32)}}var y$=Mq(()=>new p7,Rq(1));var _Q=Mq(()=>new a7,Rq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function FQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Sq($){if(!FQ($))throw TypeError("Uint8Array expected")}function UZ($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function IZ($){if(typeof $!=="function")throw TypeError("function expected");return!0}function qI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function z8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function bQ($){if(!Array.isArray($))throw TypeError("array expected")}function fQ($,U){if(!UZ(!0,U))throw TypeError(`${$}: array of strings expected`)}function Cq($,U){if(!UZ(!1,U))throw TypeError(`${$}: array of numbers expected`)}function xU(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function mU($){let U=typeof $==="string"?$.split(""):$,J=U.length;fQ("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return bQ(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return bQ(I),I.map((Q)=>{qI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function yU($=""){return qI("join",$),{encode:(U)=>{return fQ("join.decode",U),U.join($)},decode:(U)=>{return qI("join.decode",U),U.split($)}}}function uQ($,U="="){return z8($),qI("padding",U),{encode(J){fQ("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){fQ("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function JZ($){return IZ($),{encode:(U)=>U,decode:(U)=>$(U)}}function t7($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(bQ($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(z8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let z=Q[D],W=U*O,w=W+z;if(!Number.isSafeInteger(w)||W/U!==O||w-z!==W)throw Error("convertRadix: carry overflow");let v=w/J;O=w%J;let Z=Math.floor(v);if(Q[D]=Z,!Number.isSafeInteger(Z)||Z*J+O!==w)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!Z)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var GZ=($,U)=>U===0?$:GZ(U,$%U),kQ=($,U)=>$+(U-GZ($,U)),EQ=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function Bq($,U,J,G){if(bQ($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(kQ(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${kQ(U,J)}`);let I=0,Q=0,X=EQ[U],O=EQ[J]-1,q=[];for(let D of $){if(z8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let z=EQ[Q];if(z===void 0)throw Error("invalid carry");I&=z-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function lP($){z8($);let U=256;return{encode:(J)=>{if(!FQ(J))throw TypeError("radix.encode input should be Uint8Array");return t7(Array.from(J),U,$)},decode:(J)=>{return Cq("radix.decode",J),Uint8Array.from(t7(J,$,U))}}}function cU($,U=!1){if(z8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(kQ(8,$)>32||kQ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!FQ(J))throw TypeError("radix2.encode input should be Uint8Array");return Bq(Array.from(J),8,$,!U)},decode:(J)=>{return Cq("radix2.decode",J),Uint8Array.from(Bq(J,$,8,U))}}}function s7($){return IZ($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Zl=Object.freeze(xU(cU(4),mU("0123456789ABCDEF"),yU(""))),gl=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),uQ(5),yU(""))),Ml=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),yU(""))),Rl=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),uQ(5),yU(""))),Hl=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),yU(""))),jl=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),yU(""),JZ(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),QZ=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),dP=/[\t\n\f\r ]/,XZ=($,U)=>{qI("base64",$);let J=U?"base64url":"base64";if($.length>0&&dP.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},_q=Object.freeze(QZ?{encode($){return Sq($),$.toBase64()},decode($){return XZ($,!1)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),uQ(6),yU(""))),YU=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),yU(""))),Tl=Object.freeze(QZ?{encode($){return Sq($),$.toBase64({alphabet:"base64url"})},decode($){return XZ($,!0)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),uQ(6),yU(""))),Kl=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),yU(""))),Eq=($)=>xU(lP(58),mU($),yU("")),Al=Object.freeze(Eq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Pl=Object.freeze(Eq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Bl=Object.freeze(Eq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Lq=xU(mU("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),yU("")),e7=[996825010,642813549,513874426,1027748829,705979059];function D8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<e7.length;G++)if((U>>G&1)===1)J^=e7[G];return J}function $Z($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=D8(I)^X>>5}I=D8(I);for(let Q=0;Q<G;Q++)I=D8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=D8(I)^Q;for(let Q=0;Q<6;Q++)I=D8(I);return I^=J,Lq.encode(Bq([I%EQ[30]],30,5,!1))}function OZ($){let U=$==="bech32"?1:734539939,J=cU(5),G=J.decode,I=J.encode,Q=s7(G);function X(W,w,v=90){if(qI("bech32.encode prefix",W),FQ(w))w=Array.from(w);Cq("bech32.encode",w);let Z=W.length;if(Z===0)throw TypeError(`Invalid prefix length ${Z}`);let V=Z+7+w.length;if(v!==!1&&V>v)throw TypeError(`Length ${V} exceeds limit ${v}`);let N=W.toLowerCase(),H=$Z(N,w,U);return`${N}1${Lq.encode(w)}${H}`}function O(W,w=90){qI("bech32.decode input",W);let v=W.length;if(v<8||w!==!1&&v>w)throw TypeError(`invalid string length: ${v} (${W}). Expected (8..${w})`);let Z=W.toLowerCase();if(W!==Z&&W!==W.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Z.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let N=Z.slice(0,V),H=Z.slice(V+1);if(H.length<6)throw Error("Data must be at least 6 characters long");let R=Lq.decode(H).slice(0,-6),S=$Z(N,R,U);if(!H.endsWith(S))throw Error(`Invalid checksum in ${W}: expected "${S}"`);return{prefix:N,words:R}}let q=s7(O);function D(W){let{prefix:w,words:v}=O(W,!1);return{prefix:w,words:v,bytes:G(v)}}function z(W,w){return X(W,I(w))}return{encode:X,decode:O,encodeFromBytes:z,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var rU=Object.freeze(OZ("bech32")),Ll=Object.freeze(OZ("bech32m"));var nP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),cP={encode($){return Sq($),$.toHex()},decode($){return qI("hex",$),Uint8Array.fromHex($)}},Sl=Object.freeze(nP?cP:xU(cU(4),mU("0123456789abcdef"),yU(""),JZ(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function pP($,U,J,G){F0($);let I=LQ({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(m$(Q,"c"),m$(X,"dkLen"),m$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Zq(U,"password"),D=Zq(J,"salt"),z=new Uint8Array(X),W=w0.create($,q),w=W._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:z,PRF:W,PRFSalt:w}}function oP($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return MU(I),J}function bq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=pP($,U,J,G),D,z=new Uint8Array(4),W=xJ(z),w=new Uint8Array(O.outputLen);for(let v=1,Z=0;Z<Q;v++,Z+=O.outputLen){let V=X.subarray(Z,Z+O.outputLen);W.setInt32(0,v,!1),(D=q._cloneInto(D)).update(z).digestInto(w),V.set(w.subarray(0,V.length));for(let N=1;N<I;N++){O._cloneInto(D).update(w).digestInto(w);for(let H=0;H<V.length;H++)V[H]^=w[H]}}return oP(O,q,X,D,w)}function qZ($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],z=$[U++]^J[G++],W=$[U++]^J[G++],w=$[U++]^J[G++],v=$[U++]^J[G++],Z=$[U++]^J[G++],V=$[U++]^J[G++],N=$[U++]^J[G++],H=$[U++]^J[G++],R=$[U++]^J[G++],S=$[U++]^J[G++],L=$[U++]^J[G++],k=$[U++]^J[G++],x=X,h=O,B=q,m=D,a=z,_=W,A=w,E=v,M=Z,T=V,j=N,b=H,P=R,F=S,y=L,n=k;for(let $$=0;$$<8;$$+=2)a^=P$(x+P|0,7),M^=P$(a+x|0,9),P^=P$(M+a|0,13),x^=P$(P+M|0,18),T^=P$(_+h|0,7),F^=P$(T+_|0,9),h^=P$(F+T|0,13),_^=P$(h+F|0,18),y^=P$(j+A|0,7),B^=P$(y+j|0,9),A^=P$(B+y|0,13),j^=P$(A+B|0,18),m^=P$(n+b|0,7),E^=P$(m+n|0,9),b^=P$(E+m|0,13),n^=P$(b+E|0,18),h^=P$(x+m|0,7),B^=P$(h+x|0,9),m^=P$(B+h|0,13),x^=P$(m+B|0,18),A^=P$(_+a|0,7),E^=P$(A+_|0,9),a^=P$(E+A|0,13),_^=P$(a+E|0,18),b^=P$(j+T|0,7),M^=P$(b+j|0,9),T^=P$(M+b|0,13),j^=P$(T+M|0,18),P^=P$(n+y|0,7),F^=P$(P+n|0,9),y^=P$(F+P|0,13),n^=P$(y+F|0,18);I[Q++]=X+x|0,I[Q++]=O+h|0,I[Q++]=q+B|0,I[Q++]=D+m|0,I[Q++]=z+a|0,I[Q++]=W+_|0,I[Q++]=w+A|0,I[Q++]=v+E|0,I[Q++]=Z+M|0,I[Q++]=V+T|0,I[Q++]=N+j|0,I[Q++]=H+b|0,I[Q++]=R+P|0,I[Q++]=S+F|0,I[Q++]=L+y|0,I[Q++]=k+n|0}function fq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(qZ(J,X,$,U,J,Q),O>0)X+=16;qZ(J,Q,$,U+=16,J,X)}}function aP($,U,J){let G=LQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:z}=G;if(m$(I,"N"),m$(Q,"r"),m$(X,"p"),m$(O,"dkLen"),m$(q,"asyncTick"),m$(D,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let W=128*Q,w=W/4,v=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>v)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(v-1)*32/W)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(v-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Z=W*(I+X+1);if(Z>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Z+", maxmem="+D);let V=bq(y$,$,U,{c:1,dkLen:W*X}),N=PQ(V),H=PQ(new Uint8Array(W*I)),R=PQ(new Uint8Array(W)),S=()=>{};if(z){let L=2*I*X,k=Math.max(Math.floor(L/1e4),1),x=0;S=()=>{if(x++,z&&(!(x%k)||x===L))z(x/L)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:w,V:H,B32:N,B:V,tmp:R,blockMixCb:S,asyncTick:q}}function tP($,U,J,G,I){let Q=bq(y$,$,J,{c:1,dkLen:U});return MU(J,G,I),Q}function kq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:z,tmp:W,blockMixCb:w}=aP($,U,J);Nq(D);for(let v=0;v<Q;v++){let Z=O*v;for(let V=0;V<O;V++)q[V]=D[Z+V];for(let V=0,N=0;V<G-1;V++)fq(q,N,q,N+=O,I),w();fq(q,(G-1)*O,D,Z,I),w();for(let V=0;V<G;V++){let N=(D[Z+O-16]&G-1)>>>0;for(let H=0;H<O;H++)W[H]=D[Z+H]^q[N*O+H];fq(W,0,D,Z,I),w()}}return Nq(D),tP($,X,z,q,W)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function sP($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function xQ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function mJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function n$($,U,J=""){let G=sP($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function Fq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function DZ($,U,J=!1){n$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!yJ($))throw Error("invalid output, must be aligned")}function V0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function J0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function eP($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var nI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),$B=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var UB=($)=>{for(let U=0;U<$.length;U++)$[U]=$B($[U]);return $},y0=nI?($)=>$:UB;function zZ($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function YZ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function WZ($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var wZ=($,U)=>{function J(G,...I){if(n$(G,void 0,"key"),$.nonceLength!==void 0){let z=I[0];n$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)n$(I[1],void 0,"AAD");let X=U(G,...I),O=(z,W)=>{if(W!==void 0){if(z!==2)throw Error("cipher output not supported");n$(W,void 0,"output")}},q=!1;return{encrypt(z,W){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,n$(z),O(X.encrypt.length,W),X.encrypt(z,W)},decrypt(z,W){if(n$(z),Q&&z.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,W),X.decrypt(z,W)}}}return Object.assign(J,$),J};function Y8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(n$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!yJ(U))throw Error("invalid output, must be aligned");return U}function vZ($,U,J){mJ($),mJ(U),xQ(J);let G=new Uint8Array(16),I=eP(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function yJ($){return $.byteOffset%4===0}function rJ($){return Uint8Array.from(n$($))}var NZ=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),IB=(()=>y0(V0(NZ("expand 16-byte k"))))(),JB=(()=>y0(V0(NZ("expand 32-byte k"))))();function B$($,U){return $<<U|$>>>32-U}var W8=64,GB=16,uq=(()=>4294967295)(),VZ=Uint32Array.of();function QB($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(W8),z=V0(D),W=nI&&yJ(I)&&yJ(Q),w=W?V0(I):VZ,v=W?V0(Q):VZ;if(!nI){for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),y0(z),X>=uq)throw Error("arx: counter overflow");let V=Math.min(W8,q-Z);for(let N=0,H;N<V;N++)H=Z+N,Q[H]=I[H]^D[N];Z+=V}return}for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),X>=uq)throw Error("arx: counter overflow");let V=Math.min(W8,q-Z);if(W&&V===W8){let N=Z/4;if(Z%4!==0)throw Error("arx: invalid block position");for(let H=0,R;H<GB;H++)R=N+H,v[R]=w[R]^z[H];Z+=W8;continue}for(let N=0,H;N<V;N++)H=Z+N,Q[H]=I[H]^D[N];Z+=V}}function ZZ($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=zZ({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return mJ(I),mJ(X),xQ(Q),xQ(J),(O,q,D,z,W=0)=>{n$(O,void 0,"key"),n$(q,void 0,"nonce"),n$(D,void 0,"data");let w=D.length;if(z=Y8(w,z,!1),mJ(W),W<0||W>=uq)throw Error("arx: counter overflow");let v=[],Z=O.length,V,N;if(Z===32)v.push(V=rJ(O)),N=JB;else if(Z===16&&J)V=new Uint8Array(32),V.set(O),V.set(O,16),N=IB,v.push(V);else throw n$(O,32,"arx key"),Error("invalid key size");if(!nI||!yJ(q))v.push(q=rJ(q));let H=V0(V);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=q.subarray(0,16);if(nI)G(N,H,V0(L),H);else{let k=y0(Uint32Array.from(N));G(k,H,V0(L),H),J0(k),y0(H)}q=q.subarray(16)}else if(!nI)y0(H);let R=16-I;if(R!==q.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let L=new Uint8Array(12);L.set(q,Q?0:12-q.length),q=L,v.push(q)}let S=y0(V0(q));try{return QB($,N,H,S,D,z,W,X),z}finally{J0(...v)}}}function $U($,U){return $[U++]&255|($[U++]&255)<<8}class gZ{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=rJ(n$($,32,"key"));let U=$U($,0),J=$U($,2),G=$U($,4),I=$U($,6),Q=$U($,8),X=$U($,10),O=$U($,12),q=$U($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=$U($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],z=Q[4],W=Q[5],w=Q[6],v=Q[7],Z=Q[8],V=Q[9],N=$U($,U+0),H=$U($,U+2),R=$U($,U+4),S=$U($,U+6),L=$U($,U+8),k=$U($,U+10),x=$U($,U+12),h=$U($,U+14),B=I[0]+(N&8191),m=I[1]+((N>>>13|H<<3)&8191),a=I[2]+((H>>>10|R<<6)&8191),_=I[3]+((R>>>7|S<<9)&8191),A=I[4]+((S>>>4|L<<12)&8191),E=I[5]+(L>>>1&8191),M=I[6]+((L>>>14|k<<2)&8191),T=I[7]+((k>>>11|x<<5)&8191),j=I[8]+((x>>>8|h<<8)&8191),b=I[9]+(h>>>5|G),P=0,F=P+B*X+m*(5*V)+a*(5*Z)+_*(5*v)+A*(5*w);P=F>>>13,F&=8191,F+=E*(5*W)+M*(5*z)+T*(5*D)+j*(5*q)+b*(5*O),P+=F>>>13,F&=8191;let y=P+B*O+m*X+a*(5*V)+_*(5*Z)+A*(5*v);P=y>>>13,y&=8191,y+=E*(5*w)+M*(5*W)+T*(5*z)+j*(5*D)+b*(5*q),P+=y>>>13,y&=8191;let n=P+B*q+m*O+a*X+_*(5*V)+A*(5*Z);P=n>>>13,n&=8191,n+=E*(5*v)+M*(5*w)+T*(5*W)+j*(5*z)+b*(5*D),P+=n>>>13,n&=8191;let $$=P+B*D+m*q+a*O+_*X+A*(5*V);P=$$>>>13,$$&=8191,$$+=E*(5*Z)+M*(5*v)+T*(5*w)+j*(5*W)+b*(5*z),P+=$$>>>13,$$&=8191;let X$=P+B*z+m*D+a*q+_*O+A*X;P=X$>>>13,X$&=8191,X$+=E*(5*V)+M*(5*Z)+T*(5*v)+j*(5*w)+b*(5*W),P+=X$>>>13,X$&=8191;let q$=P+B*W+m*z+a*D+_*q+A*O;P=q$>>>13,q$&=8191,q$+=E*X+M*(5*V)+T*(5*Z)+j*(5*v)+b*(5*w),P+=q$>>>13,q$&=8191;let W$=P+B*w+m*W+a*z+_*D+A*q;P=W$>>>13,W$&=8191,W$+=E*O+M*X+T*(5*V)+j*(5*Z)+b*(5*v),P+=W$>>>13,W$&=8191;let N$=P+B*v+m*w+a*W+_*z+A*D;P=N$>>>13,N$&=8191,N$+=E*q+M*O+T*X+j*(5*V)+b*(5*Z),P+=N$>>>13,N$&=8191;let v$=P+B*Z+m*v+a*w+_*W+A*z;P=v$>>>13,v$&=8191,v$+=E*D+M*q+T*O+j*X+b*(5*V),P+=v$>>>13,v$&=8191;let V$=P+B*V+m*Z+a*v+_*w+A*W;P=V$>>>13,V$&=8191,V$+=E*z+M*D+T*q+j*O+b*X,P+=V$>>>13,V$&=8191,P=(P<<2)+P|0,P=P+F|0,F=P&8191,P=P>>>13,y+=P,I[0]=F,I[1]=y,I[2]=n,I[3]=$$,I[4]=X$,I[5]=q$,I[6]=W$,I[7]=N$,I[8]=v$,I[9]=V$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;J0(J)}update($){Fq(this),n$($),$=rJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,J0(this.h,this.r,this.buffer,this.pad)}digestInto($){Fq(this),DZ($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var MZ=WZ(32,($)=>new gZ($));function XB($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],z=U[0],W=U[1],w=U[2],v=U[3],Z=U[4],V=U[5],N=U[6],H=U[7],R=I,S=J[0],L=J[1],k=J[2],x=X,h=O,B=q,m=D,a=z,_=W,A=w,E=v,M=Z,T=V,j=N,b=H,P=R,F=S,y=L,n=k;for(let X$=0;X$<Q;X$+=2)x=x+a|0,P=B$(P^x,16),M=M+P|0,a=B$(a^M,12),x=x+a|0,P=B$(P^x,8),M=M+P|0,a=B$(a^M,7),h=h+_|0,F=B$(F^h,16),T=T+F|0,_=B$(_^T,12),h=h+_|0,F=B$(F^h,8),T=T+F|0,_=B$(_^T,7),B=B+A|0,y=B$(y^B,16),j=j+y|0,A=B$(A^j,12),B=B+A|0,y=B$(y^B,8),j=j+y|0,A=B$(A^j,7),m=m+E|0,n=B$(n^m,16),b=b+n|0,E=B$(E^b,12),m=m+E|0,n=B$(n^m,8),b=b+n|0,E=B$(E^b,7),x=x+_|0,n=B$(n^x,16),j=j+n|0,_=B$(_^j,12),x=x+_|0,n=B$(n^x,8),j=j+n|0,_=B$(_^j,7),h=h+A|0,P=B$(P^h,16),b=b+P|0,A=B$(A^b,12),h=h+A|0,P=B$(P^h,8),b=b+P|0,A=B$(A^b,7),B=B+E|0,F=B$(F^B,16),M=M+F|0,E=B$(E^M,12),B=B+E|0,F=B$(F^B,8),M=M+F|0,E=B$(E^M,7),m=m+a|0,y=B$(y^m,16),T=T+y|0,a=B$(a^T,12),m=m+a|0,y=B$(y^m,8),T=T+y|0,a=B$(a^T,7);let $$=0;G[$$++]=X+x|0,G[$$++]=O+h|0,G[$$++]=q+B|0,G[$$++]=D+m|0,G[$$++]=z+a|0,G[$$++]=W+_|0,G[$$++]=w+A|0,G[$$++]=v+E|0,G[$$++]=Z+M|0,G[$$++]=V+T|0,G[$$++]=N+j|0,G[$$++]=H+b|0,G[$$++]=R+P|0,G[$$++]=S+F|0,G[$$++]=L+y|0,G[$$++]=k+n|0}var OB=ZZ(XB,{counterRight:!1,counterLength:4,allowShortKeys:!1});var qB=new Uint8Array(16),RZ=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(qB.subarray(J))},DB=new Uint8Array(32);function HZ($,U,J,G,I){if(I!==void 0)n$(I,void 0,"AAD");let Q=$(U,J,DB),X=vZ(G.length,I?I.length:0,!0),O=MZ.create(Q);if(I)RZ(O,I);RZ(O,G),O.update(X);let q=O.digest();return J0(Q,X),q}var zB=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=Y8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=HZ($,U,J,q,G);return X.set(D,O),J0(D),X},decrypt(Q,X){X=Y8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=HZ($,U,J,O,G);if(!YZ(q,D))throw J0(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),J0(D),X}}},iU=wZ({blockSize:64,nonceLength:12,tagLength:16},zB(OB));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function hJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function p$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function g$($,U,J=""){let G=hJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function pU($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");p$($.outputLen),p$($.blockLen)}function h0($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function mQ($,U){g$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function yQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function SU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function rQ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function G0($,U){return $<<32-U|$>>>U}var YB=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function WB($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function wB($){for(let U=0;U<$.length;U++)$[U]=WB($[U]);return $}var xq=YB?($)=>$:wB,TZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),vB=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function cI($){if(g$($),TZ)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=vB[$[J]];return U}var r0={_0:48,_9:57,A:65,F:70,a:97,f:102};function jZ($){if($>=r0._0&&$<=r0._9)return $-r0._0;if($>=r0.A&&$<=r0.F)return $-(r0.A-10);if($>=r0.a&&$<=r0.f)return $-(r0.a-10);return}function iI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(TZ)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=jZ($.charCodeAt(Q)),O=jZ($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function r$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];g$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function lJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function DI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var zI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yq=BigInt(0),mq=BigInt(1);function w8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function KZ($){if(typeof $==="bigint"){if(!hQ($))throw Error("positive bigint expected, got "+$)}else p$($);return $}function v8($){let U=KZ($).toString(16);return U.length&1?"0"+U:U}function AZ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?yq:BigInt("0x"+$)}function YI($){return AZ(cI($))}function WI($){return AZ(cI(lQ(g$($)).reverse()))}function dJ($,U){p$(U),$=KZ($);let J=iI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function V8($,U){return dJ($,U).reverse()}function lQ($){return Uint8Array.from($)}function wI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var hQ=($)=>typeof $==="bigint"&&yq<=$;function VB($,U,J){return hQ($)&&hQ(U)&&hQ(J)&&U<=$&&$<J}function N8($,U,J,G){if(!VB(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function rq($){let U;for(U=0;$>yq;$>>=mq,U+=1);return U}var Z8=($)=>(mq<<BigInt($))-mq;function PZ($,U,J){if(p$($,"hashLen"),p$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,r$(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,H=[];while(N<U){q=w();let R=q.slice();H.push(R),N+=q.length}return r$(...H)};return(N,H)=>{W(),v(N);let R=void 0;while(!(R=H(Z())))v();return W(),R}}function pI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function hq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HU=BigInt(0),WU=BigInt(1),oI=BigInt(2),SZ=BigInt(3),CZ=BigInt(4),_Z=BigInt(5),NB=BigInt(7),EZ=BigInt(8),ZB=BigInt(9),bZ=BigInt(16);function RU($,U){let J=$%U;return J>=HU?J:U+J}function oU($,U,J){let G=$;while(U-- >HU)G*=G,G%=J;return G}function BZ($,U){if($===HU)throw Error("invert: expected non-zero number");if(U<=HU)throw Error("invert: expected positive modulus, got "+U);let J=RU($,U),G=U,I=HU,Q=WU,X=WU,O=HU;while(J!==HU){let D=G/J,z=G%J,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==WU)throw Error("invert: does not exist");return RU(I,U)}function lq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function fZ($,U){let J=($.ORDER+WU)/CZ,G=$.pow(U,J);return lq($,G,U),G}function gB($,U){let J=($.ORDER-_Z)/EZ,G=$.mul(U,oI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,oI),I),O=$.mul(Q,$.sub(X,$.ONE));return lq($,O,U),O}function MB($){let U=dQ($),J=kZ($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+NB)/bZ;return(O,q)=>{let D=O.pow(q,X),z=O.mul(D,G),W=O.mul(D,I),w=O.mul(D,Q),v=O.eql(O.sqr(z),q),Z=O.eql(O.sqr(W),q);D=O.cmov(D,z,v),z=O.cmov(w,W,Z);let V=O.eql(O.sqr(z),q),N=O.cmov(D,z,V);return lq(O,N,q),N}}function kZ($){if($<SZ)throw Error("sqrt is not defined for small field");let U=$-WU,J=0;while(U%oI===HU)U/=oI,J++;let G=oI,I=dQ($);while(LZ(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return fZ;let Q=I.pow(G,U),X=(U+WU)/oI;return function(q,D){if(q.is0(D))return D;if(LZ(q,D)!==1)throw Error("Cannot find square root");let z=J,W=q.mul(q.ONE,Q),w=q.pow(D,U),v=q.pow(D,X);while(!q.eql(w,q.ONE)){if(q.is0(w))return q.ZERO;let Z=1,V=q.sqr(w);while(!q.eql(V,q.ONE))if(Z++,V=q.sqr(V),Z===z)throw Error("Cannot find square root");let N=WU<<BigInt(z-Z-1),H=q.pow(W,N);z=Z,W=q.sqr(H),w=q.mul(w,W),v=q.mul(v,H)}return v}}function RB($){if($%CZ===SZ)return fZ;if($%EZ===_Z)return gB;if($%bZ===ZB)return MB($);return kZ($)}var HB=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function dq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=HB.reduce((G,I)=>{return G[I]="function",G},U);return pI($,J),$}function jB($,U,J){if(J<HU)throw Error("invalid exponent, negatives unsupported");if(J===HU)return $.ONE;if(J===WU)return U;let G=$.ONE,I=U;while(J>HU){if(J&WU)G=$.mul(G,I);I=$.sqr(I),J>>=WU}return G}function g8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function LZ($,U){let J=($.ORDER-WU)/oI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function TB($,U){if(U!==void 0)p$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class FZ{ORDER;BITS;BYTES;isLE;ZERO=HU;ONE=WU;_lengths;_sqrt;_mod;constructor($,U={}){if($<=HU)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=TB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return RU($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return HU<=$&&$<this.ORDER}is0($){return $===HU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&WU)===WU}neg($){return RU(-$,this.ORDER)}eql($,U){return $===U}sqr($){return RU($*$,this.ORDER)}add($,U){return RU($+U,this.ORDER)}sub($,U){return RU($-U,this.ORDER)}mul($,U){return RU($*U,this.ORDER)}pow($,U){return jB(this,$,U)}div($,U){return RU($*BZ(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return BZ($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=RB(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?V8($,this.BYTES):dJ($,this.BYTES)}fromBytes($,U=!1){g$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?WI($):YI($);if(X)O=RU(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return g8(this,$)}cmov($,U,J){return J?U:$}}function dQ($,U={}){return new FZ($,U)}function uZ($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function nq($){let U=uZ($);return U+Math.ceil(U/2)}function xZ($,U,J=!1){g$($);let G=$.length,I=uZ(U),Q=nq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?WI($):YI($),O=RU(X,U-WU)+WU;return J?V8(O,I):dJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nJ=BigInt(0),aI=BigInt(1);function M8($,U){let J=U.negate();return $?J:U}function oq($,U){let J=g8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function hZ($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function cq($,U){hZ($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=Z8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function mZ($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=aI;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var iq=new WeakMap,lZ=new WeakMap;function pq($){return lZ.get($)||1}function yZ($){if($!==nJ)throw Error("invalid wNAF")}class aq{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>nJ){if(U&aI)J=J.add(G);G=G.double(),U>>=aI}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=cq(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=cq($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=mZ(J,X,Q);if(J=O,D)I=I.add(M8(W,U[w]));else G=G.add(M8(z,U[q]))}return yZ(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=cq($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===nJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=mZ(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return yZ(J),G}getPrecomputes($,U,J){let G=iq.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);iq.set(U,G)}}return G}cached($,U,J){let G=pq($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=pq($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){hZ(U,this.bits),lZ.set($,U),iq.delete($)}hasCache($){return pq($)!==1}}function dZ($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>nJ||G>nJ){if(J&aI)Q=Q.add(I);if(G&aI)X=X.add(I);I=I.double(),J>>=aI,G>>=aI}return{p1:Q,p2:X}}function rZ($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return dq(U),U}else return dQ($,{isLE:J})}function nZ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>nJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=rZ(U.p,J.Fp,G),Q=rZ(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function nQ($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var R8=BigInt(0),cJ=BigInt(1),cQ=BigInt(2);function KB($){return pI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function cZ($){let U=KB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||DI,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?cQ**BigInt(254):cQ**BigInt(447),Z=O?BigInt(8)*cQ**BigInt(251)-cJ:BigInt(4)*cQ**BigInt(445)-cJ,V=v+Z+cJ,N=(M)=>RU(M,J),H=R(W);function R(M){return V8(N(M),z)}function S(M){let T=lQ(g$(M,z,"uCoordinate"));if(O)T[31]&=127;return N(WI(T))}function L(M){return WI(I(lQ(g$(M,z,"scalar"))))}function k(M,T){let j=a(S(T),L(M));if(j===R8)throw Error("invalid private or public key received");return R(j)}function x(M){return k(M,H)}let h=x,B=k;function m(M,T,j){let b=N(M*(T-j));return T=N(T-b),j=N(j+b),{x_2:T,x_3:j}}function a(M,T){N8("u",M,R8,J),N8("scalar",T,v,V);let j=T,b=M,P=cJ,F=R8,y=M,n=cJ,$$=R8;for(let q$=BigInt(D-1);q$>=R8;q$--){let W$=j>>q$&cJ;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,OU=y-n,qU=N(OU*N$),LU=N(k$*V$),Y0=qU+LU,W0=qU-LU;y=N(Y0*Y0),n=N(b*N(W0*W0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let _={secretKey:z,publicKey:z,seed:z},A=(M=q(z))=>{return g$(M,_.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze({keygen:nQ(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:E,GuBytes:H.slice(),lengths:_})}class tq{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(pU($),g$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),SU(G)}update($){return h0(this),this.iHash.update($),this}digestInto($){h0(this),g$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var iJ=($,U,J)=>new tq($,U).update(J).digest();iJ.create=($,U)=>new tq($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var iZ=($,U)=>($+($>=0?U:-U)/oZ)/U;function AB($,U,J){let[[G,I],[Q,X]]=U,O=iZ(X*$,J),q=iZ(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<l0,w=z<l0;if(W)D=-D;if(w)z=-z;let v=Z8(Math.ceil(rq(J)/2))+pJ;if(D<l0||D>=v||z<l0||z>=v)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:W,k1:D,k2neg:w,k2:z}}function eq($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function sq($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(w8(J.lowS,"lowS"),w8(J.prehash,"prehash"),J.format!==void 0)eq(J.format);return J}class pZ extends Error{constructor($=""){super($)}}var vI={Err:pZ,_tlv:{encode:($,U)=>{let{Err:J}=vI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=v8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?v8(I.length/2|128):"";return v8($)+Q+I+U},decode($,U){let{Err:J}=vI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=vI;if($<l0)throw new U("integer: negative integers are not allowed");let J=v8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=vI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return YI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=vI,I=g$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=vI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},l0=BigInt(0),pJ=BigInt(1),oZ=BigInt(2),iQ=BigInt(3),PB=BigInt(4);function $D($,U={}){let J=nZ("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;pI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=tZ(G,I);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function W(A,E,M){let{x:T,y:j}=E.toAffine(),b=G.toBytes(T);if(w8(M,"isCompressed"),M){z();let P=!G.isOdd(j);return r$(aZ(P),b)}else return r$(Uint8Array.of(4),b,G.toBytes(j))}function w(A){g$(A,void 0,"Point");let{publicKey:E,publicKeyUncompressed:M}=D,T=A.length,j=A[0],b=A.subarray(1);if(T===E&&(j===2||j===3)){let P=G.fromBytes(b);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let F=V(P),y;try{y=G.sqrt(F)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}z();let n=G.isOdd(y);if((j&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(T===M&&j===4){let P=G.BYTES,F=G.fromBytes(b.subarray(0,P)),y=G.fromBytes(b.subarray(P,P*2));if(!N(F,y))throw Error("bad point: is not on curve");return{x:F,y}}else throw Error(`bad point: got length ${T}, expected compressed=${E} or uncompressed=${M}`)}let v=U.toBytes||W,Z=U.fromBytes||w;function V(A){let E=G.sqr(A),M=G.mul(E,A);return G.add(G.add(M,G.mul(A,Q.a)),Q.b)}function N(A,E){let M=G.sqr(E),T=V(A);return G.eql(M,T)}if(!N(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let H=G.mul(G.pow(Q.a,iQ),PB),R=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(H,R)))throw Error("bad curve params: a or b");function S(A,E,M=!1){if(!G.isValid(E)||M&&G.is0(E))throw Error(`bad point coordinate ${A}`);return E}function L(A){if(!(A instanceof m))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return AB(A,q.basises,I.ORDER)}let x=hq((A,E)=>{let{X:M,Y:T,Z:j}=A;if(G.eql(j,G.ONE))return{x:M,y:T};let b=A.is0();if(E==null)E=b?G.ONE:G.inv(j);let P=G.mul(M,E),F=G.mul(T,E),y=G.mul(j,E);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}),h=hq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:E,y:M}=A.toAffine();if(!G.isValid(E)||!G.isValid(M))throw Error("bad point: x or y not field elements");if(!N(E,M))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(A,E,M,T,j){return M=new m(G.mul(M.X,A),M.Y,M.Z),E=M8(T,E),M=M8(j,M),E.add(M)}class m{static BASE=new m(Q.Gx,Q.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,E,M){this.X=S("x",A),this.Y=S("y",E,!0),this.Z=S("z",M),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:E,y:M}=A||{};if(!A||!G.isValid(E)||!G.isValid(M))throw Error("invalid affine point");if(A instanceof m)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(M))return m.ZERO;return new m(E,M,G.ONE)}static fromBytes(A){let E=m.fromAffine(Z(g$(A,void 0,"point")));return E.assertValidity(),E}static fromHex(A){return m.fromBytes(iI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,E=!0){if(_.createCache(this,A),!E)this.multiply(iQ);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){L(A);let{X:E,Y:M,Z:T}=this,{X:j,Y:b,Z:P}=A,F=G.eql(G.mul(E,P),G.mul(j,T)),y=G.eql(G.mul(M,P),G.mul(b,T));return F&&y}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:E}=Q,M=G.mul(E,iQ),{X:T,Y:j,Z:b}=this,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=G.mul(T,T),$$=G.mul(j,j),X$=G.mul(b,b),q$=G.mul(T,j);return q$=G.add(q$,q$),y=G.mul(T,b),y=G.add(y,y),P=G.mul(A,y),F=G.mul(M,X$),F=G.add(P,F),P=G.sub($$,F),F=G.add($$,F),F=G.mul(P,F),P=G.mul(q$,P),y=G.mul(M,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),F=G.add(F,n),X$=G.mul(j,b),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,$$),y=G.add(y,y),y=G.add(y,y),new m(P,F,y)}add(A){L(A);let{X:E,Y:M,Z:T}=this,{X:j,Y:b,Z:P}=A,F=G.ZERO,y=G.ZERO,n=G.ZERO,$$=Q.a,X$=G.mul(Q.b,iQ),q$=G.mul(E,j),W$=G.mul(M,b),N$=G.mul(T,P),v$=G.add(E,M),V$=G.add(j,b);v$=G.mul(v$,V$),V$=G.add(q$,W$),v$=G.sub(v$,V$),V$=G.add(E,T);let R$=G.add(j,P);return V$=G.mul(V$,R$),R$=G.add(q$,N$),V$=G.sub(V$,R$),R$=G.add(M,T),F=G.add(b,P),R$=G.mul(R$,F),F=G.add(W$,N$),R$=G.sub(R$,F),n=G.mul($$,V$),F=G.mul(X$,N$),n=G.add(F,n),F=G.sub(W$,n),n=G.add(W$,n),y=G.mul(F,n),W$=G.add(q$,q$),W$=G.add(W$,q$),N$=G.mul($$,N$),V$=G.mul(X$,V$),W$=G.add(W$,N$),N$=G.sub(q$,N$),N$=G.mul($$,N$),V$=G.add(V$,N$),q$=G.mul(W$,V$),y=G.add(y,q$),q$=G.mul(R$,V$),F=G.mul(v$,F),F=G.sub(F,q$),q$=G.mul(v$,W$),n=G.mul(R$,n),n=G.add(n,q$),new m(F,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(m.ZERO)}multiply(A){let{endo:E}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let M,T,j=(b)=>_.cached(this,b,(P)=>oq(m,P));if(E){let{k1neg:b,k1:P,k2neg:F,k2:y}=k(A),{p:n,f:$$}=j(P),{p:X$,f:q$}=j(y);T=$$.add(q$),M=B(E.beta,n,X$,b,F)}else{let{p:b,f:P}=j(A);M=b,T=P}return oq(m,[M,T])[0]}multiplyUnsafe(A){let{endo:E}=U,M=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===l0||M.is0())return m.ZERO;if(A===pJ)return M;if(_.hasCache(this))return this.multiply(A);if(E){let{k1neg:T,k1:j,k2neg:b,k2:P}=k(A),{p1:F,p2:y}=dZ(m,M,j,P);return B(E.beta,F,y,T,b)}else return _.unsafe(M,A)}toAffine(A){return x(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===pJ)return!0;if(A)return A(m,this);return _.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===pJ)return this;if(A)return A(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return w8(A,"isCompressed"),this.assertValidity(),v(m,this,A)}toHex(A=!0){return cI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let a=I.BITS,_=new aq(m,U.endo?Math.ceil(a/2):a);return m.BASE.precompute(8),m}function aZ($){return Uint8Array.of($?2:3)}function tZ($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function BB($,U={}){let{Fn:J}=$,G=U.randomBytes||DI,I=Object.assign(tZ($.Fp,J),{seed:nq(J.ORDER)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let H=v.length;if(Z===!0&&H!==V)return!1;if(Z===!1&&H!==N)return!1;return!!$.fromBytes(v)}catch(H){return!1}}function O(v=G(I.seed)){return xZ(g$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I;if(!hJ(v))return;if("_lengths"in J&&J._lengths||Z===V)return;let H=g$(v,void 0,"key").length;return H===V||H===N}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=nQ(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function UD($,U,J={}){pU(U),pI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||DI,I=J.hmac||((M,T)=>iJ(U,M,T)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v}=BB($,J),Z={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=O*oZ<Q.ORDER;function N(M){let T=O>>pJ;return M>T}function H(M,T){if(!X.isValidNot0(T))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return T}function R(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(M,T){eq(T);let j=v.signature,b=T==="compact"?j:T==="recovered"?j+1:void 0;return g$(M,b)}class L{r;s;recovery;constructor(M,T,j){if(this.r=H("r",M),this.s=H("s",T),j!=null){if(R(),![0,1,2,3].includes(j))throw Error("invalid recovery id");this.recovery=j}Object.freeze(this)}static fromBytes(M,T=Z.format){S(M,T);let j;if(T==="der"){let{r:y,s:n}=vI.toSig(g$(M));return new L(y,n)}if(T==="recovered")j=M[0],T="compact",M=M.subarray(1);let b=v.signature/2,P=M.subarray(0,b),F=M.subarray(b,b*2);return new L(X.fromBytes(P),X.fromBytes(F),j)}static fromHex(M,T){return this.fromBytes(iI(M),T)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new L(this.r,this.s,M)}recoverPublicKey(M){let{r:T,s:j}=this,b=this.assertRecovery(),P=b===2||b===3?T+O:T;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let F=Q.toBytes(P),y=$.fromBytes(r$(aZ((b&1)===0),F)),n=X.inv(P),$$=x(g$(M,void 0,"msgHash")),X$=X.create(-$$*n),q$=X.create(j*n),W$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(W$.is0())throw Error("invalid recovery: point at infinify");return W$.assertValidity(),W$}hasHighS(){return N(this.s)}toBytes(M=Z.format){if(eq(M),M==="der")return iI(vI.hexFromSig(this));let{r:T,s:j}=this,b=X.toBytes(T),P=X.toBytes(j);if(M==="recovered")return R(),r$(Uint8Array.of(this.assertRecovery()),b,P);return r$(b,P)}toHex(M){return cI(this.toBytes(M))}}let k=J.bits2int||function(T){if(T.length>8192)throw Error("input is too large");let j=YI(T),b=T.length*8-q;return b>0?j>>BigInt(b):j},x=J.bits2int_modN||function(T){return X.create(k(T))},h=Z8(q);function B(M){return N8("num < 2^"+q,M,l0,h),X.toBytes(M)}function m(M,T){return g$(M,void 0,"message"),T?g$(U(M),void 0,"prehashed message"):M}function a(M,T,j){let{lowS:b,prehash:P,extraEntropy:F}=sq(j,Z);M=m(M,P);let y=x(M),n=X.fromBytes(T);if(!X.isValidNot0(n))throw Error("invalid private key");let $$=[B(n),B(y)];if(F!=null&&F!==!1){let N$=F===!0?G(v.secretKey):F;$$.push(g$(N$,void 0,"extraEntropy"))}let X$=r$(...$$),q$=y;function W$(N$){let v$=k(N$);if(!X.isValidNot0(v$))return;let V$=X.inv(v$),R$=$.BASE.multiply(v$).toAffine(),b$=X.create(R$.x);if(b$===l0)return;let k$=X.create(V$*X.create(q$+b$*n));if(k$===l0)return;let OU=(R$.x===b$?0:2)|Number(R$.y&pJ),qU=k$;if(b&&N(k$))qU=X.neg(k$),OU^=1;return new L(b$,qU,V?void 0:OU)}return{seed:X$,k2sig:W$}}function _(M,T,j={}){let{seed:b,k2sig:P}=a(M,T,j);return PZ(U.outputLen,X.BYTES,I)(b,P).toBytes(j.format)}function A(M,T,j,b={}){let{lowS:P,prehash:F,format:y}=sq(b,Z);if(j=g$(j,void 0,"publicKey"),T=m(T,F),!hJ(M)){let n=M instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(M,y);try{let n=L.fromBytes(M,y),$$=$.fromBytes(j);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,W$=x(T),N$=X.inv(q$),v$=X.create(W$*N$),V$=X.create(X$*N$),R$=$.BASE.multiplyUnsafe(v$).add($$.multiplyUnsafe(V$));if(R$.is0())return!1;return X.create(R$.x)===X$}catch(n){return!1}}function E(M,T,j={}){let{prehash:b}=sq(j,Z);return T=m(T,b),L.fromBytes(M,"recovered").recoverPublicKey(T).toBytes()}return Object.freeze({keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v,Point:$,sign:_,verify:A,recoverPublicKey:E,Signature:L,hash:U})}function sZ($,U,J){return $&U^~$&J}function eZ($,U,J){return $&U^$&J^U&J}class pQ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=rQ(this.buffer)}update($){h0(this),g$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=rQ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){h0(this),mQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,SU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=rQ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var d0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),n0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),UU=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),IU=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var oQ=BigInt(4294967295),$g=BigInt(32);function LB($,U=!1){if(U)return{h:Number($&oQ),l:Number($>>$g&oQ)};return{h:Number($>>$g&oQ)|0,l:Number($&oQ)|0}}function aQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=LB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var ID=($,U,J)=>$>>>J,JD=($,U,J)=>$<<32-J|U>>>J,tI=($,U,J)=>$>>>J|U<<32-J,sI=($,U,J)=>$<<32-J|U>>>J,H8=($,U,J)=>$<<64-J|U>>>J-32,j8=($,U,J)=>$>>>J-32|U<<64-J;var Ug=($,U,J)=>$<<J|U>>>32-J,Ig=($,U,J)=>U<<J|$>>>32-J,Jg=($,U,J)=>U<<J-32|$>>>64-J,Gg=($,U,J)=>$<<J-32|U>>>64-J;function N0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var Qg=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),Xg=($,U,J,G)=>U+J+G+($/4294967296|0)|0,Og=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),qg=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,Dg=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),zg=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var CB=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VI=new Uint32Array(64);class GD extends pQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)VI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=VI[z-15],w=VI[z-2],v=G0(W,7)^G0(W,18)^W>>>3,Z=G0(w,17)^G0(w,19)^w>>>10;VI[z]=Z+VI[z-7]+v+VI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=G0(X,6)^G0(X,11)^G0(X,25),w=D+W+sZ(X,O,q)+CB[z]+VI[z]|0,Z=(G0(J,2)^G0(J,13)^G0(J,22))+eZ(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){SU(VI)}destroy(){this.set(0,0,0,0,0,0,0,0),SU(this.buffer)}}class Yg extends GD{A=d0[0]|0;B=d0[1]|0;C=d0[2]|0;D=d0[3]|0;E=d0[4]|0;F=d0[5]|0;G=d0[6]|0;H=d0[7]|0;constructor(){super(32)}}class _B extends GD{A=n0[0]|0;B=n0[1]|0;C=n0[2]|0;D=n0[3]|0;E=n0[4]|0;F=n0[5]|0;G=n0[6]|0;H=n0[7]|0;constructor(){super(28)}}var Wg=(()=>aQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),EB=(()=>Wg[0])(),bB=(()=>Wg[1])(),NI=new Uint32Array(80),ZI=new Uint32Array(80);class T8 extends pQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)NI[R]=$.getUint32(U),ZI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=NI[R-15]|0,L=ZI[R-15]|0,k=tI(S,L,1)^tI(S,L,8)^ID(S,L,7),x=sI(S,L,1)^sI(S,L,8)^JD(S,L,7),h=NI[R-2]|0,B=ZI[R-2]|0,m=tI(h,B,19)^H8(h,B,61)^ID(h,B,6),a=sI(h,B,19)^j8(h,B,61)^JD(h,B,6),_=Og(x,a,ZI[R-7],ZI[R-16]),A=qg(_,k,m,NI[R-7],NI[R-16]);NI[R]=A|0,ZI[R]=_|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:H}=this;for(let R=0;R<80;R++){let S=tI(z,W,14)^tI(z,W,18)^H8(z,W,41),L=sI(z,W,14)^sI(z,W,18)^j8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=Dg(H,L,x,bB[R],ZI[R]),B=zg(h,N,S,k,EB[R],NI[R]),m=h|0,a=tI(J,G,28)^H8(J,G,34)^H8(J,G,39),_=sI(J,G,28)^j8(J,G,34)^j8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;N=Z|0,H=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=N0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=Qg(m,_,E);J=Xg(M,B,a,A),G=M|0}({h:J,l:G}=N0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=N0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=N0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=N0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=N0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=N0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=N0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:H}=N0(this.Hh|0,this.Hl|0,N|0,H|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,H)}roundClean(){SU(NI,ZI)}destroy(){SU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class fB extends T8{Ah=IU[0]|0;Al=IU[1]|0;Bh=IU[2]|0;Bl=IU[3]|0;Ch=IU[4]|0;Cl=IU[5]|0;Dh=IU[6]|0;Dl=IU[7]|0;Eh=IU[8]|0;El=IU[9]|0;Fh=IU[10]|0;Fl=IU[11]|0;Gh=IU[12]|0;Gl=IU[13]|0;Hh=IU[14]|0;Hl=IU[15]|0;constructor(){super(64)}}class wg extends T8{Ah=UU[0]|0;Al=UU[1]|0;Bh=UU[2]|0;Bl=UU[3]|0;Ch=UU[4]|0;Cl=UU[5]|0;Dh=UU[6]|0;Dl=UU[7]|0;Eh=UU[8]|0;El=UU[9]|0;Fh=UU[10]|0;Fl=UU[11]|0;Gh=UU[12]|0;Gl=UU[13]|0;Hh=UU[14]|0;Hl=UU[15]|0;constructor(){super(48)}}var wU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),vU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class kB extends T8{Ah=wU[0]|0;Al=wU[1]|0;Bh=wU[2]|0;Bl=wU[3]|0;Ch=wU[4]|0;Cl=wU[5]|0;Dh=wU[6]|0;Dl=wU[7]|0;Eh=wU[8]|0;El=wU[9]|0;Fh=wU[10]|0;Fl=wU[11]|0;Gh=wU[12]|0;Gl=wU[13]|0;Hh=wU[14]|0;Hl=wU[15]|0;constructor(){super(28)}}class FB extends T8{Ah=vU[0]|0;Al=vU[1]|0;Bh=vU[2]|0;Bl=vU[3]|0;Ch=vU[4]|0;Cl=vU[5]|0;Dh=vU[6]|0;Dl=vU[7]|0;Eh=vU[8]|0;El=vU[9]|0;Fh=vU[10]|0;Fl=vU[11]|0;Gh=vU[12]|0;Gl=vU[13]|0;Hh=vU[14]|0;Hl=vU[15]|0;constructor(){super(32)}}var tQ=lJ(()=>new Yg,zI(1));var vg=lJ(()=>new wg,zI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var uB=BigInt(1),Vg=BigInt(2),xB=BigInt(3),mB=BigInt(5),Cd=BigInt(8),Ng=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function yB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=Ng,O=$*$%Q*$%Q,q=oU(O,Vg,Q)*O%Q,D=oU(q,uB,Q)*$%Q,z=oU(D,mB,Q)*D%Q,W=oU(z,U,Q)*z%Q,w=oU(W,J,Q)*W%Q,v=oU(w,G,Q)*w%Q,Z=oU(v,I,Q)*v%Q,V=oU(Z,I,Q)*v%Q,N=oU(V,U,Q)*z%Q;return{pow_p_5_8:oU(N,Vg,Q)*$%Q,b2:O}}function rB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Zg=(()=>{let $=Ng;return cZ({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=yB(U);return RU(oU(J,xB,$)*G,$)},adjustScalarBytes:rB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),lB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var dB=$D(hB),QD=UD(dB,tQ);var nB=$D(lB),gg=UD(nB,vg);function Rg($,U,J){if(pU($),J===void 0)J=new Uint8Array($.outputLen);return iJ($,J,U)}var XD=Uint8Array.of(0),Mg=Uint8Array.of();function Hg($,U,J,G=32){pU($),p$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=Mg;else g$(J,void 0,"info");let X=new Uint8Array(Q*I),O=iJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)XD[0]=z+1,q.update(z===0?Mg:D).update(J).update(XD).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),SU(D,XD),X.slice(0,G)}var cB=BigInt(0),K8=BigInt(1),iB=BigInt(2),pB=BigInt(7),oB=BigInt(256),aB=BigInt(113),Kg=[],Ag=[],Pg=[];for(let $=0,U=K8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],Kg.push(2*(5*G+J)),Ag.push(($+1)*($+2)/2%64);let I=cB;for(let Q=0;Q<7;Q++)if(U=(U<<K8^(U>>pB)*aB)%oB,U&iB)I^=K8<<(K8<<BigInt(Q))-K8;Pg.push(I)}var Bg=aQ(Pg,!0),tB=Bg[0],sB=Bg[1],jg=($,U,J)=>J>32?Jg($,U,J):Ug($,U,J),Tg=($,U,J)=>J>32?Gg($,U,J):Ig($,U,J);function eB($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],z=J[q+1],W=jg(D,z,1)^J[O],w=Tg(D,z,1)^J[O+1];for(let v=0;v<50;v+=10)$[X+v]^=W,$[X+v+1]^=w}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=Ag[X],q=jg(I,Q,O),D=Tg(I,Q,O),z=Kg[X];I=$[z],Q=$[z+1],$[z]=q,$[z+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=tB[G],$[1]^=sB[G]}SU(J)}class sQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,p$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=yQ(this.state)}clone(){return this._cloneInto()}keccak(){xq(this.state32),eB(this.state32,this.rounds),xq(this.state32),this.posOut=0,this.pos=0}update($){h0(this),g$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){h0(this,!1),g$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return p$($),this.xofInto(new Uint8Array($))}digestInto($){if(mQ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,SU(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new sQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var Lg=($,U,J,G={})=>lJ(()=>new sQ(U,$,J),G);var eI=Lg(6,136,32,zI(8));var Sg=Lg(6,72,64,zI(10));var Cg=($,U,J,G={})=>lJ((I={})=>new sQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),_g=Cg(31,168,16,zI(11)),Z0=Cg(31,136,32,zI(12));function OD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function bg($){return OD($),($&$-1)===0&&$!==0}function qD($,U){OD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function fg($){return OD($),31-Math.clz32($)}function Eg($){let U=$.length;if(U<2||!bg(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=fg(U);for(let G=0;G<U;G++){let I=qD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var DD=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=fg(J);if(!bg(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)Eg(z);for(let W=0,w=1;W<q-X;W++){let v=I?W+1+X:q-W,Z=1<<v,V=Z>>1,N=J>>v;for(let H=0;H<J;H+=Z)for(let R=0,S=w++;R<V;R++){let L=Q?I?J-S:S:R*N,k=H+R,x=H+R+V,h=G[L],B=z[x],m=z[k];if(D){let a=$.mul(B,h);z[k]=$.add(m,a),z[x]=$.sub(m,a)}else if(Q)z[k]=$.add(B,m),z[x]=$.mul($.sub(B,m),h);else z[k]=$.add(m,B),z[x]=$.mul($.sub(m,B),h)}}if(!I&&O)Eg(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var g0=DI;function eQ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function kg($){return Uint8Array.from($)}function $J($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),z=typeof q==="number"?I[X]:q.encode(I[X]);if(g$(z,D,$),Q.set(z,O),typeof q!=="number")z.fill(0);O+=D}return Q},decode:(I)=>{g$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function $4($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{g$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function c$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function zD($){return(1<<$)-1}var nd=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Fg=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(R,S=G)=>{let L=R%S|0;return(L>=0?L|0:S+L|0)|0},D=(R,S=G)=>{let L=q(R,S)|0;return(L>S>>1?L-S|0:L)|0};function z(){let R=U(J);for(let S=0;S<J;S++){let L=qD(S,X),k=BigInt(Q)**BigInt(L)%BigInt(G);R[S]=Number(k)|0}return R}let W=z(),w={add:(R,S)=>q((R|0)+(S|0))|0,sub:(R,S)=>q((R|0)-(S|0))|0,mul:(R,S)=>q((R|0)*(S|0))|0,inv:(R)=>{throw Error("not implemented")}},v={N:J,roots:W,invertButterflies:!0,skipStages:O?1:0,brp:!1},Z=DD(w,{dit:!1,...v}),V=DD(w,{dit:!0,...v});return{mod:q,smod:D,nttZetas:W,NTT:{encode:(R)=>{return Z(R)},decode:(R)=>{V(R);for(let S=0;S<R.length;S++)R[S]=q(I*R[S]);return R}},bitsCoder:(R,S)=>{let L=zD(R),k=R*(J/8);return{bytesLen:k,encode:(x)=>{let h=new Uint8Array(k);for(let B=0,m=0,a=0,_=0;B<x.length;B++){m|=(S.encode(x[B])&L)<<a,a+=R;for(;a>=8;a-=8,m>>=8)h[_++]=m&zD(a)}return h},decode:(x)=>{let h=U(J);for(let B=0,m=0,a=0,_=0;B<x.length;B++){m|=x[B]<<a,a+=8;for(;a>=R;a-=R,m>>=R)h[_++]=S.decode(m&L)}return h}}}}},$L=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,z)=>{return G[I+0]=D,G[I+1]=z,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),c$(Q,G)}}},ug=$L(_g);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var VU=256,c0=3329,UL=3303,IL=17,{mod:B8,nttZetas:JL,NTT:UJ,bitsCoder:GL}=Fg({N:VU,Q:c0,F:UL,ROOT_OF_UNITY:IL,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),YD={512:{N:VU,Q:c0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:VU,Q:c0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:VU,Q:c0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},QL=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+c0/2)/c0,decode:(J)=>J*c0+U>>>$}},A8=($)=>GL($,QL($));function IJ($,U){for(let J=0;J<VU;J++)$[J]=B8($[J]+U[J])}function XL($,U){for(let J=0;J<VU;J++)$[J]=B8($[J]-U[J])}function OL($,U,J,G,I){let Q=B8(U*G*I+$*J),X=B8($*G+U*J);return{c0:Q,c1:X}}function U4($,U){for(let J=0;J<VU/2;J++){let G=JL[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=OL($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function xg($){let U=new Uint16Array(VU);for(let J=0;J<VU;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<VU&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<c0)U[J++]=Q;if(J<VU&&X<c0)U[J++]=X}}return U}function P8($,U,J,G){let I=$(G*VU/4,U,J),Q=new Uint16Array(VU),X=yQ(I),O=0;for(let q=0,D=0,z=0,W=0;q<X.length;q++){let w=X[q];for(let v=0;v<32;v++)if(z+=w&1,w>>=1,O+=1,O===G)W=z,z=0;else if(O===2*G)Q[D++]=B8(W-z),z=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var qL=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=A8(1),z=A8(q),W=A8(O),w=$J("publicKey",$4(A8(12),U),32),v=$4(A8(12),U),Z=$J("ciphertext",$4(W,U),z),V=$J("seed",32,32);return{secretCoder:v,lengths:{secretKey:v.bytesLen,publicKey:w.bytesLen,cipherText:Z.bytesLen},keygen:(N)=>{g$(N,32,"seed");let H=new Uint8Array(33);H.set(N),H[32]=U;let R=I(H),[S,L]=V.decode(R),k=[],x=[];for(let m=0;m<U;m++)k.push(UJ.encode(P8(J,L,m,Q)));let h=G(S);for(let m=0;m<U;m++){let a=UJ.encode(P8(J,L,U+m,Q));for(let _=0;_<U;_++){let A=xg(h.get(_,m));IJ(a,U4(A,k[_]))}x.push(a)}h.clean();let B={publicKey:w.encode([x,S]),secretKey:v.encode(k)};return c$(S,L,k,x,H,R),B},encrypt:(N,H,R)=>{let[S,L]=w.decode(N),k=[];for(let _=0;_<U;_++)k.push(UJ.encode(P8(J,R,_,Q)));let x=G(L),h=new Uint16Array(VU),B=[];for(let _=0;_<U;_++){let A=P8(J,R,U+_,X),E=new Uint16Array(VU);for(let M=0;M<U;M++){let T=xg(x.get(_,M));IJ(E,U4(T,k[M]))}IJ(A,UJ.decode(E)),B.push(A),IJ(h,U4(S[_],k[_])),c$(E)}x.clean();let m=P8(J,R,2*U,X);IJ(m,UJ.decode(h));let a=D.decode(H);return IJ(a,m),c$(S,k,h,m),Z.encode([B,a])},decrypt:(N,H)=>{let[R,S]=Z.decode(N),L=v.decode(H),k=new Uint16Array(VU);for(let x=0;x<U;x++)IJ(k,U4(L[x],UJ.encode(R[x])));return XL(S,UJ.decode(k)),c$(k,L,R),D.encode(S)}}};function WD($){let U=qL($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=$J("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(z=g0(64))=>{g$(z,64,"seed");let{publicKey:W,secretKey:w}=U.keygen(z.subarray(0,32)),v=J(W),Z=O.encode([w,W,v,z.subarray(32)]);return c$(w,v),{publicKey:W,secretKey:Z}},getPublicKey:(z)=>{let[W,w,v,Z]=O.decode(z);return Uint8Array.from(w)},encapsulate:(z,W=g0(32))=>{g$(z,X.publicKey,"publicKey"),g$(W,32,"message");let w=z.subarray(0,384*$.K),v=Q.encode(Q.decode(kg(w)));if(!eQ(v,w))throw c$(v),Error("ML-KEM.encapsulate: wrong publicKey modulus");c$(v);let Z=G.create().update(W).update(J(z)).digest(),V=U.encrypt(z,W,Z.subarray(32,64));return c$(Z.subarray(32)),{cipherText:V,sharedSecret:Z.subarray(0,32)}},decapsulate:(z,W)=>{g$(W,O.bytesLen,"secretKey"),g$(z,X.cipherText,"cipherText");let w=O.bytesLen-96,v=w+32,Z=J(W.subarray(w/2,v));if(!eQ(Z,W.subarray(v,v+32)))throw Error("invalid secretKey: hash check failed");let[V,N,H,R]=O.decode(W),S=U.decrypt(z,V),L=G.create().update(S).update(H).digest(),k=L.subarray(0,32),x=U.encrypt(N,S,L.subarray(32,64)),h=eQ(z,x),B=I.create({dkLen:32}).update(R).update(z).digest();return c$(S,x,!h?k:B),h?k:B}}}function DL($,U,J){return Z0.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var wD={HASH256:eI,HASH512:Sg,KDF:Z0,XOF:ug,PRF:DL},In=WD({...wD,...YD[512]}),L8=WD({...wD,...YD[768]}),mg=WD({...wD,...YD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function zL($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=g0(J.seed))=>{g$(X,J.seed,"seed");let O=Q.isLE?WI(X):YI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function vD($,U=!1){let J=zL($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=g0($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return c$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function S8($,U){return $J(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function VD($){return(U,J)=>$(U,{dkLen:J})}function YL($,U,...J){let G=S8(J,"seed"),I=S8(J,"publicKey");if($===void 0)$=G.bytesLen;p$($);function Q(X){g$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((W,w)=>W.keygen(O[w])),D=q.map((W)=>W.secretKey),z=q.map((W)=>W.publicKey);return{secretKey:D,publicKey:z}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=g0($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return c$(O),c$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function I4($,U,J,G,...I){let Q=YL($,J,...I),X=S8(I,"cipherText"),O=S8(I,"publicKey"),q=S8(I,"msg");if(U===void 0)U=q.bytesLen;return p$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,z=g0(q.bytesLen)){let W=O.decode(D),w=q.decode(z),v=I.map((H,R)=>H.encapsulate(W[R],w[R])),Z=v.map((H)=>H.sharedSecret),V=v.map((H)=>H.cipherText),N={sharedSecret:G(W,V,Z),cipherText:X.encode(V)};return c$(Z,V),N},decapsulate(D,z){let W=X.decode(D),{publicKey:w,secretKey:v}=Q.expandDecapsulationKey(z),Z=I.map((V,N)=>V.decapsulate(W[N],v[N]));return G(w,W,Z)}}}function yg($,U,J,G,I){return pU(G),pU(I),I4(32,32,VD(G),(Q,X,O)=>I(r$(O[0],O[1],X[1],Q[1],wI($))),U,J)}var wn=yg("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",L8,vD(QD,!0),Z0,eI),vn=yg("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",mg,vD(gg,!0),Z0,eI);function WL($,U,J,G,I){return pU(G),pU(I),I4(32,32,VD(G),(Q,X,O)=>{let q=r$(O[0],O[1],X[0],Q[0],X[1],Q[1],wI($)),D=32,z=r$(wI("hybrid_prk"),q),W=Rg(I,z),w=r$(dJ(32,2),wI("shared_secret"),wI("")),v=Hg(I,W,w,32);return c$(W,w,z,q),v},U,J)}var rg=vD(Zg),Vn=WL("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",L8,rg,Z0,tQ),wL=(()=>I4(32,32,VD(Z0),($,U,J)=>eI(r$(J[0],J[1],U[1],$[1],wI("\\.//^\\"))),L8,rg))();function vL($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let z=0,W=U;;z=W,W+=U){if(W>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(z,W),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=g0(G)){return g$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=g0(G)){g$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),z=$.getPublicKey(q,!1);return c$(q),{sharedSecret:D,cipherText:z}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function VL($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=vL(J,I,Q,G),O=64,q=O+G;return I4(32,32,(D)=>{g$(D,32);let z=Z0(D,{dkLen:q}),W=z.subarray(0,O),w=z.subarray(O,q);return r$(W,w)},(D,z,W)=>eI(r$(W[0],W[1],z[1],D[1],wI($))),U,X)}var NL=(()=>VL("MLKEM768-P256",L8,QD,128))();var J4=wL,hg=NL;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>t$($,U,J),ZD=m$,oJ=BQ,JU=(...$)=>gq(...$),aJ=($)=>G8($),tJ=Vq,sJ=($)=>u0($),Q4=BigInt(0),ND=BigInt(1);function i0($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function X4($){if(typeof $==="bigint"){if(!G4($))throw RangeError("positive bigint expected, got "+$)}else ZD($);return $}function M0($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function C8($){let U=X4($).toString(16);return U.length&1?"0"+U:U}function lg($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?Q4:BigInt("0x"+$)}function JJ($){return lg(BQ($))}function Q0($){return lg(BQ(gI(t$($)).reverse()))}function O4($,U){if(m$(U),U===0)throw RangeError("zero length");$=X4($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return G8(J.padStart(U*2,"0"))}function _8($,U){return O4($,U).reverse()}function dg($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function gI($){return Uint8Array.from(S$($))}function q4($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var G4=($)=>typeof $==="bigint"&&Q4<=$;function ZL($,U,J){return G4($)&&G4(U)&&G4(J)&&U<=$&&$<J}function p0($,U,J,G){if(!ZL(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function eJ($){if($<Q4)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>Q4;$>>=ND,U+=1);return U}var E8=($)=>(ND<<BigInt($))-ND;function ng($,U,J){if(m$($,"hashLen"),m$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,JU(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,H=[];while(N<U){q=w();let R=q.slice();H.push(R),N+=q.length}return JU(...H)};return(N,H)=>{W(),v(N);let R=void 0;while((R=H(Z()))===void 0)v();return W(),R}}function aU($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var gD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GU=BigInt(0),u$=BigInt(1),GJ=BigInt(2),og=BigInt(3),ag=BigInt(4),tg=BigInt(5),gL=BigInt(7),sg=BigInt(8),ML=BigInt(9),eg=BigInt(16);function F$($,U){if(U<=GU)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=GU?J:U+J}function tU($,U,J){if(U<GU)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >GU)G*=G,G%=J;return G}function cg($,U){if($===GU)throw Error("invert: expected non-zero number");if(U<=GU)throw Error("invert: expected positive modulus, got "+U);let J=F$($,U),G=U,I=GU,Q=u$,X=u$,O=GU;while(J!==GU){let D=G/J,z=G-J*D,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==u$)throw Error("invert: does not exist");return F$(I,U)}function MD($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function $5($,U){let J=$,G=(J.ORDER+u$)/ag,I=J.pow(U,G);return MD(J,I,U),I}function RL($,U){let J=$,G=(J.ORDER-tg)/sg,I=J.mul(U,GJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,GJ),Q),q=J.mul(X,J.sub(O,J.ONE));return MD(J,q,U),q}function HL($){let U=D4($),J=U5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+gL)/eg;return(O,q)=>{let D=O,z=D.pow(q,X),W=D.mul(z,G),w=D.mul(z,I),v=D.mul(z,Q),Z=D.eql(D.sqr(W),q),V=D.eql(D.sqr(w),q);z=D.cmov(z,W,Z),W=D.cmov(v,w,V);let N=D.eql(D.sqr(W),q),H=D.cmov(z,W,N);return MD(D,H,q),H}}function U5($){if($<og)throw Error("sqrt is not defined for small field");let U=$-u$,J=0;while(U%GJ===GU)U/=GJ,J++;let G=GJ,I=D4($);while(ig(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return $5;let Q=I.pow(G,U),X=(U+u$)/GJ;return function(q,D){let z=q;if(z.is0(D))return D;if(ig(z,D)!==1)throw Error("Cannot find square root");let W=J,w=z.mul(z.ONE,Q),v=z.pow(D,U),Z=z.pow(D,X);while(!z.eql(v,z.ONE)){if(z.is0(v))return z.ZERO;let V=1,N=z.sqr(v);while(!z.eql(N,z.ONE))if(V++,N=z.sqr(N),V===W)throw Error("Cannot find square root");let H=u$<<BigInt(W-V-1),R=z.pow(w,H);W=V,w=z.sqr(R),v=z.mul(v,w),Z=z.mul(Z,R)}return Z}}function jL($){if($%ag===og)return $5;if($%sg===tg)return RL;if($%eg===ML)return HL($);return U5($)}var o0=($,U)=>(F$($,U)&u$)===u$,TL=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function RD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=TL.reduce((G,I)=>{return G[I]="function",G},U);if(aU($,J),M0($.BYTES,"BYTES"),M0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=u$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function KL($,U,J){let G=$;if(J<GU)throw Error("invalid exponent, negatives unsupported");if(J===GU)return G.ONE;if(J===u$)return U;let I=G.ONE,Q=U;while(J>GU){if(J&u$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=u$}return I}function b8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function ig($,U){let J=$,G=(J.ORDER-u$)/GJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function AL($,U){if(U!==void 0)ZD(U);if($<=GU)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=eJ($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var pg=new WeakMap;class HD{ORDER;BITS;BYTES;isLE;ZERO=GU;ONE=u$;_lengths;_mod;constructor($,U={}){if($<=u$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=AL($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return F$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return GU<=$&&$<this.ORDER}is0($){return $===GU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&u$)===u$}neg($){return F$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return F$($*$,this.ORDER)}add($,U){return F$($+U,this.ORDER)}sub($,U){return F$($-U,this.ORDER)}mul($,U){return F$($*U,this.ORDER)}pow($,U){return KL(this,$,U)}div($,U){return F$($*cg(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return cg($,this.ORDER)}sqrt($){let U=pg.get(this);if(!U)pg.set(this,U=jL(this.ORDER));return U(this,$)}toBytes($){return this.isLE?_8($,this.BYTES):O4($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?Q0($):JJ($);if(X)O=F$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return b8(this,$)}cmov($,U,J){return i0(J,"condition"),J?U:$}}Object.freeze(HD.prototype);function D4($,U={}){return new HD($,U)}function I5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=u$)throw Error("field order must be greater than 1");let U=eJ($-u$);return Math.ceil(U/8)}function jD($){let U=I5($);return U+Math.ceil(U/2)}function J5($,U,J=!1){S$($);let G=$.length,I=I5(U),Q=Math.max(jD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?Q0($):JJ($),O=F$(X,U-u$)+u$;return J?_8(O,I):O4(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $G=BigInt(0),QJ=BigInt(1);function f8($,U){let J=U.negate();return $?J:U}function XJ($,U){let J=b8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function O5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function TD($,U){O5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=E8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function G5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=QJ;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var KD=new WeakMap,q5=new WeakMap;function AD($){return q5.get($)||1}function Q5($){if($!==$G)throw Error("invalid wNAF")}class k8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>$G){if(U&QJ)J=J.add(G);G=G.double(),U>>=QJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=TD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=TD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=G5(J,X,Q);if(J=O,D)I=I.add(f8(W,U[w]));else G=G.add(f8(z,U[q]))}return Q5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=TD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===$G)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=G5(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return Q5(J),G}getPrecomputes($,U,J){let G=KD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);KD.set(U,G)}}return G}cached($,U,J){let G=AD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=AD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){O5(U,this.bits),q5.set($,U),KD.delete($)}hasCache($){return AD($)!==1}}function D5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>$G||G>$G){if(J&QJ)Q=Q.add(I);if(G&QJ)X=X.add(I);I=I.double(),J>>=QJ,G>>=QJ}return{p1:Q,p2:X}}function X5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return RD(U),U}else return D4($,{isLE:J})}function z4($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>$G))throw Error(`CURVE.${q} must be positive bigint`)}let I=X5(U.p,J.Fp,G),Q=X5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function F8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function u8($,U){if(M0($),M0(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function PL($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function BL($){if(!tJ($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?q4($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function PD($,U,J,G){if(S$($),M0(J),U=BL(U),U.length>255)U=G(JU(q4("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=JU(U,u8(U.length,1)),q=new Uint8Array(Q),D=u8(J,2),z=Array(X),W=G(JU(q,$,D,u8(0,1),O));z[0]=G(JU(W,u8(1,1),O));for(let v=1;v<X;v++){let Z=[PL(W,z[v-1]),u8(v+1,1),O];z[v]=G(JU(...Z))}return JU(...z).slice(0,J)}var z5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Y5=($,U)=>($+($>=0?U:-U)/w5)/U;function LL($,U,J){p0("scalar",$,R0,J);let[[G,I],[Q,X]]=U,O=Y5(X*$,J),q=Y5(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<R0,w=z<R0;if(W)D=-D;if(w)z=-z;let v=E8(Math.ceil(eJ(J)/2))+MI;if(D<R0||D>=v||z<R0||z>=v)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:W,k1:D,k2neg:w,k2:z}}function LD($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function BD($,U){aU($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(i0(J.lowS,"lowS"),i0(J.prehash,"prehash"),J.format!==void 0)LD(J.format);return J}class W5 extends Error{constructor($=""){super($)}}var X0={Err:W5,_tlv:{encode:($,U)=>{let{Err:J}=X0;if(M0($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=C8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?C8(I.length/2|128):"";return C8($)+Q+I+U},decode($,U){let{Err:J}=X0;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=X0;if(X4($),$<R0)throw new U("integer: negative integers are not allowed");let J=C8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=X0;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return JJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=X0,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=X0,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(X0._tlv);Object.freeze(X0._int);Object.freeze(X0);var R0=BigInt(0),MI=BigInt(1),w5=BigInt(2),Y4=BigInt(3),SL=BigInt(4);function v5($,U={}){let J=z4("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;aU(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=N5(G,I);function W(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(_,A,E){if(D&&A.is0())return Uint8Array.of(0);let{x:M,y:T}=A.toAffine(),j=G.toBytes(M);if(i0(E,"isCompressed"),E){W();let b=!G.isOdd(T);return JU(V5(b),j)}else return JU(Uint8Array.of(4),j,G.toBytes(T))}function v(_){S$(_,void 0,"Point");let{publicKey:A,publicKeyUncompressed:E}=z,M=_.length,T=_[0],j=_.subarray(1);if(D&&M===1&&T===0)return{x:G.ZERO,y:G.ZERO};if(M===A&&(T===2||T===3)){let b=G.fromBytes(j);if(!G.isValid(b))throw Error("bad point: is not on curve, wrong x");let P=N(b),F;try{F=G.sqrt(P)}catch($$){let X$=$$ instanceof Error?": "+$$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}W();let y=G.isOdd(F);if((T&1)===1!==y)F=G.neg(F);return{x:b,y:F}}else if(M===E&&T===4){let b=G.BYTES,P=G.fromBytes(j.subarray(0,b)),F=G.fromBytes(j.subarray(b,b*2));if(!H(P,F))throw Error("bad point: is not on curve");return{x:P,y:F}}else throw Error(`bad point: got length ${M}, expected compressed=${A} or uncompressed=${E}`)}let Z=U.toBytes===void 0?w:U.toBytes,V=U.fromBytes===void 0?v:U.fromBytes;function N(_){let A=G.sqr(_),E=G.mul(A,_);return G.add(G.add(E,G.mul(_,Q.a)),Q.b)}function H(_,A){let E=G.sqr(A),M=N(_);return G.eql(E,M)}if(!H(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let R=G.mul(G.pow(Q.a,Y4),SL),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(R,S)))throw Error("bad curve params: a or b");function L(_,A,E=!1){if(!G.isValid(A)||E&&G.is0(A))throw Error(`bad point coordinate ${_}`);return A}function k(_){if(!(_ instanceof B))throw Error("Weierstrass Point expected")}function x(_){if(!q||!q.basises)throw Error("no endo");return LL(_,q.basises,I.ORDER)}function h(_,A,E,M,T){return E=new B(G.mul(E.X,_),E.Y,E.Z),A=f8(M,A),E=f8(T,E),A.add(E)}class B{static BASE=new B(Q.Gx,Q.Gy,G.ONE);static ZERO=new B(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(_,A,E){this.X=L("x",_),this.Y=L("y",A,!0),this.Z=L("z",E),Object.freeze(this)}static CURVE(){return Q}static fromAffine(_){let{x:A,y:E}=_||{};if(!_||!G.isValid(A)||!G.isValid(E))throw Error("invalid affine point");if(_ instanceof B)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(E))return B.ZERO;return new B(A,E,G.ONE)}static fromBytes(_){let A=B.fromAffine(V(S$(_,void 0,"point")));return A.assertValidity(),A}static fromHex(_){return B.fromBytes(aJ(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,A=!0){if(a.createCache(this,_),!A)this.multiply(Y4);return this}assertValidity(){let _=this;if(_.is0()){if(U.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:A,y:E}=_.toAffine();if(!G.isValid(A)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!H(A,E))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){k(_);let{X:A,Y:E,Z:M}=this,{X:T,Y:j,Z:b}=_,P=G.eql(G.mul(A,b),G.mul(T,M)),F=G.eql(G.mul(E,b),G.mul(j,M));return P&&F}negate(){return new B(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:A}=Q,E=G.mul(A,Y4),{X:M,Y:T,Z:j}=this,b=G.ZERO,P=G.ZERO,F=G.ZERO,y=G.mul(M,M),n=G.mul(T,T),$$=G.mul(j,j),X$=G.mul(M,T);return X$=G.add(X$,X$),F=G.mul(M,j),F=G.add(F,F),b=G.mul(_,F),P=G.mul(E,$$),P=G.add(b,P),b=G.sub(n,P),P=G.add(n,P),P=G.mul(b,P),b=G.mul(X$,b),F=G.mul(E,F),$$=G.mul(_,$$),X$=G.sub(y,$$),X$=G.mul(_,X$),X$=G.add(X$,F),F=G.add(y,y),y=G.add(F,y),y=G.add(y,$$),y=G.mul(y,X$),P=G.add(P,y),$$=G.mul(T,j),$$=G.add($$,$$),y=G.mul($$,X$),b=G.sub(b,y),F=G.mul($$,n),F=G.add(F,F),F=G.add(F,F),new B(b,P,F)}add(_){k(_);let{X:A,Y:E,Z:M}=this,{X:T,Y:j,Z:b}=_,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=Q.a,$$=G.mul(Q.b,Y4),X$=G.mul(A,T),q$=G.mul(E,j),W$=G.mul(M,b),N$=G.add(A,E),v$=G.add(T,j);N$=G.mul(N$,v$),v$=G.add(X$,q$),N$=G.sub(N$,v$),v$=G.add(A,M);let V$=G.add(T,b);return v$=G.mul(v$,V$),V$=G.add(X$,W$),v$=G.sub(v$,V$),V$=G.add(E,M),P=G.add(j,b),V$=G.mul(V$,P),P=G.add(q$,W$),V$=G.sub(V$,P),y=G.mul(n,v$),P=G.mul($$,W$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),F=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),W$=G.mul(n,W$),v$=G.mul($$,v$),q$=G.add(q$,W$),W$=G.sub(X$,W$),W$=G.mul(n,W$),v$=G.add(v$,W$),X$=G.mul(q$,v$),F=G.add(F,X$),X$=G.mul(V$,v$),P=G.mul(N$,P),P=G.sub(P,X$),X$=G.mul(N$,q$),y=G.mul(V$,y),y=G.add(y,X$),new B(P,F,y)}subtract(_){return k(_),this.add(_.negate())}is0(){return this.equals(B.ZERO)}multiply(_){let{endo:A}=U;if(!I.isValidNot0(_))throw RangeError("invalid scalar: out of range");let E,M,T=(j)=>a.cached(this,j,(b)=>XJ(B,b));if(A){let{k1neg:j,k1:b,k2neg:P,k2:F}=x(_),{p:y,f:n}=T(b),{p:$$,f:X$}=T(F);M=n.add(X$),E=h(A.beta,y,$$,j,P)}else{let{p:j,f:b}=T(_);E=j,M=b}return XJ(B,[E,M])[0]}multiplyUnsafe(_){let{endo:A}=U,E=this,M=_;if(!I.isValid(M))throw RangeError("invalid scalar: out of range");if(M===R0||E.is0())return B.ZERO;if(M===MI)return E;if(a.hasCache(this))return this.multiply(M);if(A){let{k1neg:T,k1:j,k2neg:b,k2:P}=x(M),{p1:F,p2:y}=D5(B,E,j,P);return h(A.beta,F,y,T,b)}else return a.unsafe(E,M)}toAffine(_){let A=this,E=_,{X:M,Y:T,Z:j}=A;if(G.eql(j,G.ONE))return{x:M,y:T};let b=A.is0();if(E==null)E=b?G.ONE:G.inv(j);let P=G.mul(M,E),F=G.mul(T,E),y=G.mul(j,E);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}isTorsionFree(){let{isTorsionFree:_}=U;if(X===MI)return!0;if(_)return _(B,this);return a.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:_}=U;if(X===MI)return this;if(_)return _(B,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===MI)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return i0(_,"isCompressed"),this.assertValidity(),Z(B,this,_)}toHex(_=!0){return oJ(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let m=I.BITS,a=new k8(B,U.endo?Math.ceil(m/2):m);if(m>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function V5($){return Uint8Array.of($?2:3)}function N5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function CL($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?sJ:U.randomBytes,I=Object.assign(N5($.Fp,J),{seed:Math.max(jD(J.ORDER),16)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let H=v.length;if(Z===!0&&H!==V)return!1;if(Z===!1&&H!==N)return!1;return!!$.fromBytes(v)}catch(H){return!1}}function O(v){return v=v===void 0?G(I.seed):v,J5(S$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I,H=J._lengths;if(!tJ(v))return;let R=S$(v,void 0,"key").length,S=R===V||R===N,L=R===Z||!!H?.includes(R);if(S&&L)return;return S}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=F8(O,q);return Object.freeze(W),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function Z5($,U,J={}){let G=U;F0(G),aU(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?sJ:J.randomBytes,Q=J.hmac===void 0?(T,j)=>w0(G,T,j):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z}=CL($,J),V={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=q*w5+MI<X.ORDER;function H(T){let j=q>>MI;return T>j}function R(T,j){if(!O.isValidNot0(j))throw Error(`invalid signature ${T}: out of range 1..Point.Fn.ORDER`);return j}function S(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(T,j){LD(j);let b=Z.signature,P=j==="compact"?b:j==="recovered"?b+1:void 0;return S$(T,P)}class k{r;s;recovery;constructor(T,j,b){if(this.r=R("r",T),this.s=R("s",j),b!=null){if(S(),![0,1,2,3].includes(b))throw Error("invalid recovery id");this.recovery=b}Object.freeze(this)}static fromBytes(T,j=V.format){L(T,j);let b;if(j==="der"){let{r:n,s:$$}=X0.toSig(S$(T));return new k(n,$$)}if(j==="recovered")b=T[0],j="compact",T=T.subarray(1);let P=Z.signature/2,F=T.subarray(0,P),y=T.subarray(P,P*2);return new k(O.fromBytes(F),O.fromBytes(y),b)}static fromHex(T,j){return this.fromBytes(aJ(T),j)}assertRecovery(){let{recovery:T}=this;if(T==null)throw Error("invalid recovery id: must be present");return T}addRecoveryBit(T){return new k(this.r,this.s,T)}recoverPublicKey(T){let{r:j,s:b}=this,P=this.assertRecovery(),F=P===2||P===3?j+q:j;if(!X.isValid(F))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(F),n=$.fromBytes(JU(V5((P&1)===0),y)),$$=O.inv(F),X$=h(S$(T,void 0,"msgHash")),q$=O.create(-X$*$$),W$=O.create(b*$$),N$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(W$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return H(this.s)}toBytes(T=V.format){if(LD(T),T==="der")return aJ(X0.hexFromSig(this));let{r:j,s:b}=this,P=O.toBytes(j),F=O.toBytes(b);if(T==="recovered")return S(),JU(Uint8Array.of(this.assertRecovery()),P,F);return JU(P,F)}toHex(T){return oJ(this.toBytes(T))}}Object.freeze(k.prototype),Object.freeze(k);let x=J.bits2int===void 0?function(j){if(j.length>8192)throw Error("input is too large");let b=JJ(j),P=j.length*8-D;return P>0?b>>BigInt(P):b}:J.bits2int,h=J.bits2int_modN===void 0?function(j){return O.create(x(j))}:J.bits2int_modN,B=E8(D);function m(T){return p0("num < 2^"+D,T,R0,B),O.toBytes(T)}function a(T,j){return S$(T,void 0,"message"),j?S$(G(T),void 0,"prehashed message"):T}function _(T,j,b){let{lowS:P,prehash:F,extraEntropy:y}=BD(b,V);T=a(T,F);let n=h(T),$$=O.fromBytes(j);if(!O.isValidNot0($$))throw Error("invalid private key");let X$=[m($$),m(n)];if(y!=null&&y!==!1){let v$=y===!0?I(Z.secretKey):y;X$.push(S$(v$,void 0,"extraEntropy"))}let q$=JU(...X$),W$=n;function N$(v$){let V$=x(v$);if(!O.isValidNot0(V$))return;let R$=O.inv(V$),b$=$.BASE.multiply(V$).toAffine(),k$=O.create(b$.x);if(k$===R0)return;let OU=O.create(R$*O.create(W$+k$*$$));if(OU===R0)return;let qU=(b$.x===k$?0:2)|Number(b$.y&MI),LU=OU;if(P&&H(OU))LU=O.neg(OU),qU^=1;return new k(k$,LU,N?void 0:qU)}return{seed:q$,k2sig:N$}}function A(T,j,b={}){let{seed:P,k2sig:F}=_(T,j,b);return ng(G.outputLen,O.BYTES,Q)(P,F).toBytes(b.format)}function E(T,j,b,P={}){let{lowS:F,prehash:y,format:n}=BD(P,V);if(b=S$(b,void 0,"publicKey"),j=a(j,y),!tJ(T)){let $$=T instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+$$)}L(T,n);try{let $$=k.fromBytes(T,n),X$=$.fromBytes(b);if(F&&$$.hasHighS())return!1;let{r:q$,s:W$}=$$,N$=h(j),v$=O.inv(W$),V$=O.create(N$*v$),R$=O.create(q$*v$),b$=$.BASE.multiplyUnsafe(V$).add(X$.multiplyUnsafe(R$));if(b$.is0())return!1;return O.create(b$.x)===q$}catch($$){return!1}}function M(T,j,b={}){let{prehash:P}=BD(b,V);return j=a(j,P),k.fromBytes(T,"recovered").recoverPublicKey(j).toBytes()}return Object.freeze({keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z,Point:$,sign:A,verify:E,recoverPublicKey:M,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _L=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var EL=v5(_L),UG=Z5(EL,y$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RI=BigInt(0),CU=BigInt(1),SD=BigInt(2),bL=BigInt(8);function fL($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function g5($,U={}){let J=U,G=z4("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;aU(J,{},{uvRatio:"function"});let q=SD<<BigInt(Q.BYTES*8)-CU,D=(V)=>I.create(V),z=J.uvRatio===void 0?(V,N)=>{try{return{isValid:!0,value:I.sqrt(I.div(V,N))}}catch(H){return{isValid:!1,value:RI}}}:J.uvRatio;if(!fL(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function W(V,N,H=!1){let R=H?CU:RI;return p0("coordinate "+V,N,R,q),N}function w(V){if(!(V instanceof v))throw Error("EdwardsPoint expected")}class v{static BASE=new v(X.Gx,X.Gy,CU,D(X.Gx*X.Gy));static ZERO=new v(RI,CU,CU,RI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(V,N,H,R){this.X=W("x",V),this.Y=W("y",N),this.Z=W("z",H,!0),this.T=W("t",R),Object.freeze(this)}static CURVE(){return X}static fromAffine(V){if(V instanceof v)throw Error("extended point not allowed");let{x:N,y:H}=V||{};return W("x",N),W("y",H),new v(N,H,CU,D(N*H))}static fromBytes(V,N=!1){let H=I.BYTES,{a:R,d:S}=X;V=gI(S$(V,H,"point")),i0(N,"zip215");let L=gI(V),k=V[H-1];L[H-1]=k&-129;let x=Q0(L),h=N?q:I.ORDER;p0("point.y",x,RI,h);let B=D(x*x),m=D(B-CU),a=D(S*B-R),{isValid:_,value:A}=z(m,a);if(!_)throw Error("bad point: invalid y coordinate");let E=(A&CU)===CU,M=(k&128)!==0;if(!N&&A===RI&&M)throw Error("bad point: x=0 and x_0=1");if(M!==E)A=D(-A);return v.fromAffine({x:A,y:x})}static fromHex(V,N=!1){return v.fromBytes(aJ(V),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,N=!0){if(Z.createCache(this,V),!N)this.multiply(SD);return this}assertValidity(){let V=this,{a:N,d:H}=X;if(V.is0())throw Error("bad point: ZERO");let{X:R,Y:S,Z:L,T:k}=V,x=D(R*R),h=D(S*S),B=D(L*L),m=D(B*B),a=D(x*N),_=D(B*D(a+h)),A=D(m+D(H*D(x*h)));if(_!==A)throw Error("bad point: equation left != right (1)");let E=D(R*S),M=D(L*k);if(E!==M)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:N,Y:H,Z:R}=this,{X:S,Y:L,Z:k}=V,x=D(N*k),h=D(S*R),B=D(H*k),m=D(L*R);return x===h&&B===m}is0(){return this.equals(v.ZERO)}negate(){return new v(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=X,{X:N,Y:H,Z:R}=this,S=D(N*N),L=D(H*H),k=D(SD*D(R*R)),x=D(V*S),h=N+H,B=D(D(h*h)-S-L),m=x+L,a=m-k,_=x-L,A=D(B*a),E=D(m*_),M=D(B*_),T=D(a*m);return new v(A,E,T,M)}add(V){w(V);let{a:N,d:H}=X,{X:R,Y:S,Z:L,T:k}=this,{X:x,Y:h,Z:B,T:m}=V,a=D(R*x),_=D(S*h),A=D(k*H*m),E=D(L*B),M=D((R+S)*(x+h)-a-_),T=E-A,j=E+A,b=D(_-N*a),P=D(M*T),F=D(j*b),y=D(M*b),n=D(T*j);return new v(P,F,n,y)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!Q.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f:H}=Z.cached(this,V,(R)=>XJ(v,R));return XJ(v,[N,H])[0]}multiplyUnsafe(V){if(!Q.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===RI)return v.ZERO;if(this.is0()||V===CU)return this;return Z.unsafe(this,V,(N)=>XJ(v,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Z.unsafe(this,X.n).is0()}toAffine(V){let N=this,H=V,{X:R,Y:S,Z:L}=N,k=N.is0();if(H==null)H=k?bL:I.inv(L);let x=D(R*H),h=D(S*H),B=I.mul(L,H);if(k)return{x:RI,y:CU};if(B!==CU)throw Error("invZ was invalid");return{x,y:h}}clearCofactor(){if(O===CU)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:V,y:N}=this.toAffine(),H=I.toBytes(N);return H[H.length-1]|=V&CU?128:0,H}toHex(){return oJ(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Z=new k8(v,Q.BITS);if(Q.BITS>=8)v.BASE.precompute(8);return Object.freeze(v.prototype),Object.freeze(v),v}class CD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){gD()}static fromHex($){gD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return oJ(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var x8=BigInt(0),IG=BigInt(1),W4=BigInt(2);function kL($){return aU($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function M5($){let U=kL($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?sJ:X,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?W4**BigInt(254):W4**BigInt(447),Z=O?BigInt(8)*W4**BigInt(251)-IG:BigInt(4)*W4**BigInt(445)-IG,V=v+Z+IG,N=(M)=>F$(M,J),H=R(W);function R(M){return _8(N(M),z)}function S(M){let T=gI(S$(M,z,"uCoordinate"));if(O)T[31]&=127;return N(Q0(T))}function L(M){return Q0(I(gI(S$(M,z,"scalar"))))}function k(M,T){let j=a(S(T),L(M));if(j===x8)throw Error("invalid private or public key received");return R(j)}function x(M){return k(M,H)}let h=x,B=k;function m(M,T,j){let b=N(M*(T-j));return T=N(T-b),j=N(j+b),{x_2:T,x_3:j}}function a(M,T){p0("u",M,x8,J),p0("scalar",T,v,V);let j=T,b=M,P=IG,F=x8,y=M,n=IG,$$=x8;for(let q$=BigInt(D-1);q$>=x8;q$--){let W$=j>>q$&IG;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,OU=y-n,qU=N(OU*N$),LU=N(k$*V$),Y0=qU+LU,W0=qU-LU;y=N(Y0*Y0),n=N(b*N(W0*W0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let _={secretKey:z,publicKey:z,seed:z},A=(M)=>{return M=M===void 0?q(z):M,S$(M,_.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze(_),Object.freeze(E),Object.freeze({keygen:F8(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:E,GuBytes:H.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var FL=BigInt(0),a0=BigInt(1),R5=BigInt(2),uL=BigInt(3),xL=BigInt(5),mL=BigInt(8),qJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),fD=(()=>({p:qJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:mL,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function T5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=qJ,O=$*$%Q*$%Q,q=tU(O,R5,Q)*O%Q,D=tU(q,a0,Q)*$%Q,z=tU(D,xL,Q)*D%Q,W=tU(z,U,Q)*z%Q,w=tU(W,J,Q)*W%Q,v=tU(w,G,Q)*w%Q,Z=tU(v,I,Q)*v%Q,V=tU(Z,I,Q)*v%Q,N=tU(V,U,Q)*z%Q;return{pow_p_5_8:tU(N,R5,Q)*$%Q,b2:O}}function yL($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var _D=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function kD($,U){let J=qJ,G=F$(U*U*U,J),I=F$(G*G*U,J),Q=T5($*I).pow_p_5_8,X=F$($*G*Q,J),O=F$(U*X*X,J),q=X,D=F$(X*_D,J),z=O===$,W=O===F$(-$,J),w=O===F$(-$*_D,J);if(z)X=q;if(W||w)X=D;if(o0(X,J))X=F$(-X,J);return{isValid:z||W,value:X}}var OJ=g5(fD,{uvRatio:kD}),HI=(()=>OJ.Fp)(),K5=(()=>OJ.Fn)();var w4=(()=>{let $=qJ;return M5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=T5(U);return F$(tU(J,uL,$)*G,$)},adjustScalarBytes:yL})})();var ED=_D,rL=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),hL=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),lL=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),dL=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),H5=($)=>kD(a0,$),nL=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),bD=($)=>HI.create(Q0($)&nL);function j5($){let{d:U}=fD,J=qJ,G=(H)=>HI.create(H),I=G(ED*$*$),Q=G((I+a0)*lL),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=kD(Q,O),z=G(D*$);if(!o0(z,J))z=G(-z);if(!q)D=z;if(!q)X=I;let W=G(X*(I-a0)*dL-O),w=D*D,v=G((D+D)*O),Z=G(W*rL),V=G(a0-w),N=G(a0+w);return new OJ(G(v*N),G(V*Z),G(Z*N),G(v*V))}class jU extends CD{static BASE=(()=>new jU(OJ.BASE))();static ZERO=(()=>new jU(OJ.ZERO))();static Fp=(()=>HI)();static Fn=(()=>K5)();constructor($){super($)}static fromAffine($){return new jU(OJ.fromAffine($))}assertSame($){if(!($ instanceof jU))throw Error("RistrettoPoint expected")}init($){return new jU($)}static fromBytes($){t$($,32);let{a:U,d:J}=fD,G=qJ,I=(S)=>HI.create(S),Q=bD($);if(!dg(HI.toBytes(Q),$)||o0(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(a0+U*X),q=I(a0-U*X),D=I(O*O),z=I(q*q),W=I(U*J*D-z),{isValid:w,value:v}=H5(I(W*z)),Z=I(v*q),V=I(v*Z*W),N=I((Q+Q)*Z);if(o0(N,G))N=I(-N);let H=I(O*V),R=I(N*H);if(!w||o0(R,G)||H===FL)throw Error("invalid ristretto255 encoding 2");return new jU(new OJ(N,H,a0,R))}static fromHex($){return jU.fromBytes(G8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=qJ,Q=(V)=>HI.create(V),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=H5(Q(X*q)),z=Q(D*X),W=Q(D*O),w=Q(z*W*G),v;if(o0(G*w,I)){let V=Q(U*ED),N=Q($*ED);$=V,U=N,v=Q(z*hL)}else v=W;if(o0($*w,I))U=Q(-U);let Z=Q((J-U)*v);if(o0(Z,I))Z=Q(-Z);return HI.toBytes(Z)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>HI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(jU.ZERO)}}Object.freeze(jU.BASE);Object.freeze(jU.ZERO);Object.freeze(jU.prototype);Object.freeze(jU);var cL=Object.freeze({Point:jU,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=PD($,J,64,_Q);return cL.deriveToCurve(G)},hashToScalar($,U={DST:z5}){let J=PD($,U.DST,64,_Q);return K5.create(Q0(J))},deriveToCurve($){t$($,64);let U=bD($.subarray(0,32)),J=j5(U),G=bD($.subarray(32,64)),I=j5(G);return new jU(J.add(I))}});var A5=!1,iL=!1;async function P5($,U){if(iL)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function v4($,U){return await P5(async()=>{let J=FD($)?$:await oL($),G=await crypto.subtle.importKey("raw",aL(U),{name:"X25519"},A5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(FD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMult($,U)})}async function m8($){return await P5(async()=>{return v4($,w4.GuBytes)},()=>{if(FD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMultBase($)})}var pL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function oL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([...pL,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},A5,["deriveBits"])}function FD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function aL($){return $}class uD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),sL(DJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=DJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:DJ(this.transcript)}}}function sL($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function DJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function JG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function V4($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function xD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function B5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function L5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=DJ(G),X=Q.subarray(0,U),O=JG($,Q.subarray(U));return{data:X,rest:O}}class H0{args;body;constructor($,U){this.args=$,this.body=U}}async function eL($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=YU.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=DJ(G);return{s:new H0(J,I)}}async function S5($){let U=new uD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await eL(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=YU.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:JG($,O)}}}function mD($){let U=[];U.push(`age-encryption.org/v1
|
|
261
261
|
`);for(let J of $){U.push("-> "+J.args.join(" ")+`
|
|
262
262
|
`);for(let G=0;G<J.body.length;G+=48){let I=G+48;if(I>J.body.length)I=J.body.length;U.push(YU.encode(J.body.subarray(G,I))+`
|
|
263
263
|
`)}if(J.body.length%48===0)U.push(`
|