npm - @rizom/ops - Versions diffs - 0.2.0-alpha.281 → 0.2.0-alpha.283 - Mend

@rizom/ops 0.2.0-alpha.281 → 0.2.0-alpha.283

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -258,7 +258,7 @@ Update marker: ${U.id}.
 `),await Y0(u$($.artifactsDir,"report.md"),Ud($))}function Ud($){let U=$.report.metrics.runtime,J=$.report.metrics.health,G=U.map((O)=>O.cpuPercent).sort((O,q)=>O-q),I=U.map((O)=>O.memoryPercent),Q=J.filter((O)=>!O.ok),X=["# Directory-sync stress report","",`- Run: \`${$.runId}\``,`- Target: \`${$.target.handle}\` (${$.target.domain})`,`- Profile: \`${$.report.profile}\``,`- Version: \`${$.report.baseline.version}\``,`- Result: **${$.report.success?"PASS":"FAIL"}**`,`- Started: ${$.startedAt}`,`- Completed: ${$.completedAt}`,"","## Phases","","| Phase | Operation | Count | Result | Pull latency | Persistence latency |","| --- | --- | ---: | --- | ---: | ---: |",...$.report.phases.map((O)=>`| ${O.id} | ${O.operation} | ${O.count} | ${O.success?"pass":`fail: ${O.error??"unknown"}`} | ${iA(O.commitLatencyMs)} | ${iA(O.persistenceLatencyMs)} |`),"","## Runtime","",`- Samples: ${U.length}`,`- CPU p50/p95/p99/max: ${vQ(T7(G,0.5))} / ${vQ(T7(G,0.95))} / ${vQ(T7(G,0.99))} / ${vQ(G.at(-1))}`,`- Memory max: ${vQ(I.length?Math.max(...I):void 0)}`,`- PIDs max: ${U.length?Math.max(...U.map((O)=>O.pids)):"n/a"}`,`- Container status/restarts/OOM: ${$.report.metrics.container?`${$.report.metrics.container.status} / ${$.report.metrics.container.restartCount} / ${$.report.metrics.container.oomKilled}`:"unknown"}`,`- External AI calls: ${$.report.metrics.externalAiCalls??0}`,`- Health samples: ${J.length}`,`- Health failures: ${Q.length}`,"","## Cleanup","",`- Result: ${$.report.cleanup.success?"pass":"fail"}`,`- Remaining probes: ${$.report.cleanup.probesRemaining}`,`- Final entities: ${$.report.cleanup.finalEntities??"unknown"}`,`- Final notes: ${$.report.cleanup.finalNotes??"unknown"}`,`- Content tree restored: ${$.report.cleanup.contentTreeRestored??"unknown"}`,""];if($.report.failure)X.push("## Failure","",$.report.failure,"");return`${X.join(`
 `)}
 `}function T7($,U){if($.length===0)return;let J=Math.max(0,Math.ceil($.length*U)-1);return $[J]}function vQ($){return $===void 0?"n/a":`${$.toFixed(2)}%`}function iA($){return $===void 0?"n/a":`${($/1000).toFixed(1)}s`}var ih,ph;var Wq=J$(()=>{sU();j7();BJ();Dq();nA();cA();Dq();ih=T.object({HCLOUD_TOKEN:T.string().min(1),KAMAL_SSH_PRIVATE_KEY:T.string().min(1),CONTENT_REPO_ADMIN_TOKEN:T.string().min(1)}),ph=T.object({servers:T.array(T.object({id:T.number().int(),status:T.string(),public_net:T.object({ipv4:T.object({ip:T.string().min(1)})})}))})});import{parseArgs as HP}from"util";function h$($){return $}class TQ extends Error{constructor($){super($);this.name="CliUsageError"}}function TP($,U){let J={...U};for(let G of $)for(let[I,Q]of Object.entries(G.flags??{})){let X=J[I];if(X===void 0){J[I]=Q;continue}if(X.type!==Q.type||X.short!==Q.short||X.default!==Q.default)throw Error(`Conflicting definitions for flag --${I}: commands must agree on type, short, and default`)}return J}function KP($){let U={};for(let[J,G]of Object.entries($))U[J]={type:G.type,...G.short!==void 0?{short:G.short}:{},...G.default!==void 0?{default:G.default}:{}};return U}function AP($){if(!($ instanceof Error)||!("code"in $))return!1;return $.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||$.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function k7($,U){let J=TP(U.commands,U.globalFlags??{}),G,I;try{({values:G,positionals:I}=HP({args:$,options:KP(J),allowPositionals:!0,strict:U.strict??!0}))}catch(X){if(AP(X))throw new TQ(X.message.split(". ")[0]??X.message);throw X}if("help"in J&&G.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in J&&G.version===!0)return{command:"version",args:[],flags:{version:!0}};let Q={};for(let[X,O]of Object.entries(J)){let q=G[X];if(typeof q==="string"&&O.type==="string")Q[X]=q;else if(typeof q==="boolean"&&O.type==="boolean")Q[X]=q}return{command:I[0]??"help",args:I.slice(1),flags:Q}}function F7($){let U=$.reduce((J,G)=>Math.max(J,G.label.length),0);return $.map((J)=>`  ${J.label.padEnd(U)}  ${J.description}`)}function PP($){return F7($.map((U)=>({label:U.usage?`${U.name} ${U.usage}`:U.name,description:U.description})))}function BP($,U){let J=U.type==="string"?` ${U.placeholder??"<value>"}`:"",G=U.short!==void 0?`, -${U.short}`:"";return`--${$}${J}${G}`}function u7($){return F7(Object.entries($).map(([U,J])=>({label:BP(U,J),description:J.description})))}function x7($,U){return`Usage: ${$} ${U.name}${U.usage?` ${U.usage}`:""}`}function LP($){return JSON.stringify(Object.entries($).map(([U,J])=>[U,J.type,J.short??"",J.description,J.placeholder??"",J.default??""]).sort((U,J)=>String(U[0]).localeCompare(String(J[0]))))}function SP($){let U=[],J=new Map;for(let I of $){let Q=I.flags??{};if(Object.keys(Q).length===0)continue;let X=LP(Q),O=J.get(X);if(O){O.names.push(I.name);continue}let q={names:[I.name],flags:Q};J.set(X,q),U.push(q)}let G=[];for(let I of U)G.push("",`${I.names.join(" / ")} options:`),G.push(...u7(I.flags));return G}function m7($){let U=[$.intro,"",`Usage: ${$.cliName} ${$.usage??"<command> [args]"}`,"","Commands:",...PP($.commands)];if($.globalFlags&&Object.keys($.globalFlags).length>0)U.push("","Options:",...u7($.globalFlags));return U.push(...SP($.commands)),U.join(`
-`)}function y7($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function MU($,U){let J=$[U];return typeof J==="string"?J:void 0}function KQ($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var AQ={name:"@rizom/ops",version:"0.2.0-alpha.281",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as WS,mkdirSync as wS,readFileSync as Xz,writeFileSync as Oz}from"fs";import{dirname as vS,join as l5}from"path";function gq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function y$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function t$($,U,J=""){let G=gq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(y$($.outputLen),y$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function uJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function PQ($,U){t$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function BQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function RU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function I0($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var EP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function _P($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function bP($){for(let U=0;U<$.length;U++)$[U]=_P($[U]);return $}var Mq=EP?($)=>$:bP,h7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),fP=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function LQ($){if(t$($),h7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=fP[$[J]];return U}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function r7($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function X8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(h7)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=r7($.charCodeAt(Q)),O=r7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function kP($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Rq($,U=""){if(typeof $==="string")return kP($);return t$($,void 0,U)}function jq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];t$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function SQ($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function Hq($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function u0($=32){y$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Tq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Kq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(F0($),t$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),RU(G)}update($){return uJ(this),this.iHash.update($),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var v0=(()=>{let $=(U,J,G)=>new Kq(U,J).update(G).digest();return $.create=(U,J)=>new Kq(U,J),$})();function O8($,U,J){if(F0($),J===void 0)J=new Uint8Array($.outputLen);return v0($,J,U)}var Aq=Uint8Array.of(0),d7=Uint8Array.of();function Pq($,U,J,G=32){F0($),y$(G,"length"),t$(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=d7;else t$(J,void 0,"info");let X=new Uint8Array(Q*I),O=v0.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)Aq[0]=z+1,q.update(z===0?d7:D).update(J).update(Aq).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),RU(D,Aq),X.slice(0,G)}var GI=($,U,J,G,I)=>Pq($,O8($,U,J),G,I);function l7($,U,J){return $&U^~$&J}function n7($,U,J){return $&U^$&J^U&J}class CQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){uJ(this),t$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=xJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,RU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=xJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var x0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),e$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),s$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EQ=BigInt(4294967295),c7=BigInt(32);function FP($,U=!1){if(U)return{h:Number($&EQ),l:Number($>>c7&EQ)};return{h:Number($>>c7&EQ)|0,l:Number($&EQ)|0}}function i7($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=FP($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Bq=($,U,J)=>$>>>J,Lq=($,U,J)=>$<<32-J|U>>>J,dI=($,U,J)=>$>>>J|U<<32-J,lI=($,U,J)=>$<<32-J|U>>>J,q8=($,U,J)=>$<<64-J|U>>>J-32,D8=($,U,J)=>$>>>J-32|U<<64-J;function V0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var p7=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),o7=($,U,J,G)=>U+J+G+($/4294967296|0)|0,a7=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),t7=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,e7=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),s7=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var xP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QI=new Uint32Array(64);class Sq extends CQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)QI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=QI[z-15],w=QI[z-2],v=I0(W,7)^I0(W,18)^W>>>3,Z=I0(w,17)^I0(w,19)^w>>>10;QI[z]=Z+QI[z-7]+v+QI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=I0(X,6)^I0(X,11)^I0(X,25),w=D+W+l7(X,O,q)+xP[z]+QI[z]|0,Z=(I0(J,2)^I0(J,13)^I0(J,22))+n7(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){RU(QI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),RU(this.buffer)}}class $Z extends Sq{A=x0[0]|0;B=x0[1]|0;C=x0[2]|0;D=x0[3]|0;E=x0[4]|0;F=x0[5]|0;G=x0[6]|0;H=x0[7]|0;constructor(){super(32)}}class mP extends Sq{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var UZ=(()=>i7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),yP=(()=>UZ[0])(),rP=(()=>UZ[1])(),XI=new Uint32Array(80),OI=new Uint32Array(80);class z8 extends CQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)XI[R]=$.getUint32(U),OI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=XI[R-15]|0,L=OI[R-15]|0,k=dI(S,L,1)^dI(S,L,8)^Bq(S,L,7),x=lI(S,L,1)^lI(S,L,8)^Lq(S,L,7),h=XI[R-2]|0,B=OI[R-2]|0,m=dI(h,B,19)^q8(h,B,61)^Bq(h,B,6),a=lI(h,B,19)^D8(h,B,61)^Lq(h,B,6),E=a7(x,a,OI[R-7],OI[R-16]),A=t7(E,k,m,XI[R-7],XI[R-16]);XI[R]=A|0,OI[R]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:j}=this;for(let R=0;R<80;R++){let S=dI(z,W,14)^dI(z,W,18)^q8(z,W,41),L=lI(z,W,14)^lI(z,W,18)^D8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=e7(j,L,x,rP[R],OI[R]),B=s7(h,N,S,k,yP[R],XI[R]),m=h|0,a=dI(J,G,28)^q8(J,G,34)^q8(J,G,39),E=lI(J,G,28)^D8(J,G,34)^D8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=Z|0,j=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=V0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=p7(m,E,_);J=o7(M,B,a,A),G=M|0}({h:J,l:G}=V0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=V0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=V0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=V0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=V0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=V0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=V0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:j}=V0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,j)}roundClean(){RU(XI,OI)}destroy(){this.destroyed=!0,RU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class IZ extends z8{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(64)}}class hP extends z8{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(48)}}var zU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),YU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class dP extends z8{Ah=zU[0]|0;Al=zU[1]|0;Bh=zU[2]|0;Bl=zU[3]|0;Ch=zU[4]|0;Cl=zU[5]|0;Dh=zU[6]|0;Dl=zU[7]|0;Eh=zU[8]|0;El=zU[9]|0;Fh=zU[10]|0;Fl=zU[11]|0;Gh=zU[12]|0;Gl=zU[13]|0;Hh=zU[14]|0;Hl=zU[15]|0;constructor(){super(28)}}class lP extends z8{Ah=YU[0]|0;Al=YU[1]|0;Bh=YU[2]|0;Bl=YU[3]|0;Ch=YU[4]|0;Cl=YU[5]|0;Dh=YU[6]|0;Dl=YU[7]|0;Eh=YU[8]|0;El=YU[9]|0;Fh=YU[10]|0;Fl=YU[11]|0;Gh=YU[12]|0;Gl=YU[13]|0;Hh=YU[14]|0;Hl=YU[15]|0;constructor(){super(32)}}var r$=Hq(()=>new $Z,Tq(1));var _Q=Hq(()=>new IZ,Tq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function uQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function _q($){if(!uQ($))throw TypeError("Uint8Array expected")}function OZ($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function qZ($){if(typeof $!=="function")throw TypeError("function expected");return!0}function qI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function W8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function fQ($){if(!Array.isArray($))throw TypeError("array expected")}function kQ($,U){if(!OZ(!0,U))throw TypeError(`${$}: array of strings expected`)}function bq($,U){if(!OZ(!1,U))throw TypeError(`${$}: array of numbers expected`)}function xU(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function mU($){let U=typeof $==="string"?$.split(""):$,J=U.length;kQ("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return fQ(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return fQ(I),I.map((Q)=>{qI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function yU($=""){return qI("join",$),{encode:(U)=>{return kQ("join.decode",U),U.join($)},decode:(U)=>{return qI("join.decode",U),U.split($)}}}function xQ($,U="="){return W8($),qI("padding",U),{encode(J){kQ("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){kQ("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function DZ($){return qZ($),{encode:(U)=>U,decode:(U)=>$(U)}}function JZ($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(fQ($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(W8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let z=Q[D],W=U*O,w=W+z;if(!Number.isSafeInteger(w)||W/U!==O||w-z!==W)throw Error("convertRadix: carry overflow");let v=w/J;O=w%J;let Z=Math.floor(v);if(Q[D]=Z,!Number.isSafeInteger(Z)||Z*J+O!==w)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!Z)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var zZ=($,U)=>U===0?$:zZ(U,$%U),FQ=($,U)=>$+(U-zZ($,U)),bQ=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function Cq($,U,J,G){if(fQ($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(FQ(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${FQ(U,J)}`);let I=0,Q=0,X=bQ[U],O=bQ[J]-1,q=[];for(let D of $){if(W8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let z=bQ[Q];if(z===void 0)throw Error("invalid carry");I&=z-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function nP($){W8($);let U=256;return{encode:(J)=>{if(!uQ(J))throw TypeError("radix.encode input should be Uint8Array");return JZ(Array.from(J),U,$)},decode:(J)=>{return bq("radix.decode",J),Uint8Array.from(JZ(J,$,U))}}}function cU($,U=!1){if(W8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(FQ(8,$)>32||FQ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!uQ(J))throw TypeError("radix2.encode input should be Uint8Array");return Cq(Array.from(J),8,$,!U)},decode:(J)=>{return bq("radix2.decode",J),Uint8Array.from(Cq(J,$,8,U))}}}function GZ($){return qZ($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Rd=Object.freeze(xU(cU(4),mU("0123456789ABCDEF"),yU(""))),jd=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),xQ(5),yU(""))),Hd=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),yU(""))),Td=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),xQ(5),yU(""))),Kd=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),yU(""))),Ad=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),yU(""),DZ(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),YZ=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),cP=/[\t\n\f\r ]/,WZ=($,U)=>{qI("base64",$);let J=U?"base64url":"base64";if($.length>0&&cP.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},fq=Object.freeze(YZ?{encode($){return _q($),$.toBase64()},decode($){return WZ($,!1)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),xQ(6),yU(""))),WU=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),yU(""))),Pd=Object.freeze(YZ?{encode($){return _q($),$.toBase64({alphabet:"base64url"})},decode($){return WZ($,!0)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),xQ(6),yU(""))),Bd=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),yU(""))),kq=($)=>xU(nP(58),mU($),yU("")),Ld=Object.freeze(kq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Sd=Object.freeze(kq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Cd=Object.freeze(kq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Eq=xU(mU("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),yU("")),QZ=[996825010,642813549,513874426,1027748829,705979059];function Y8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<QZ.length;G++)if((U>>G&1)===1)J^=QZ[G];return J}function XZ($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=Y8(I)^X>>5}I=Y8(I);for(let Q=0;Q<G;Q++)I=Y8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=Y8(I)^Q;for(let Q=0;Q<6;Q++)I=Y8(I);return I^=J,Eq.encode(Cq([I%bQ[30]],30,5,!1))}function wZ($){let U=$==="bech32"?1:734539939,J=cU(5),G=J.decode,I=J.encode,Q=GZ(G);function X(W,w,v=90){if(qI("bech32.encode prefix",W),uQ(w))w=Array.from(w);bq("bech32.encode",w);let Z=W.length;if(Z===0)throw TypeError(`Invalid prefix length ${Z}`);let V=Z+7+w.length;if(v!==!1&&V>v)throw TypeError(`Length ${V} exceeds limit ${v}`);let N=W.toLowerCase(),j=XZ(N,w,U);return`${N}1${Eq.encode(w)}${j}`}function O(W,w=90){qI("bech32.decode input",W);let v=W.length;if(v<8||w!==!1&&v>w)throw TypeError(`invalid string length: ${v} (${W}). Expected (8..${w})`);let Z=W.toLowerCase();if(W!==Z&&W!==W.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Z.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let N=Z.slice(0,V),j=Z.slice(V+1);if(j.length<6)throw Error("Data must be at least 6 characters long");let R=Eq.decode(j).slice(0,-6),S=XZ(N,R,U);if(!j.endsWith(S))throw Error(`Invalid checksum in ${W}: expected "${S}"`);return{prefix:N,words:R}}let q=GZ(O);function D(W){let{prefix:w,words:v}=O(W,!1);return{prefix:w,words:v,bytes:G(v)}}function z(W,w){return X(W,I(w))}return{encode:X,decode:O,encodeFromBytes:z,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var rU=Object.freeze(wZ("bech32")),Ed=Object.freeze(wZ("bech32m"));var iP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),pP={encode($){return _q($),$.toHex()},decode($){return qI("hex",$),Uint8Array.fromHex($)}},_d=Object.freeze(iP?pP:xU(cU(4),mU("0123456789abcdef"),yU(""),DZ(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function aP($,U,J,G){F0($);let I=SQ({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(y$(Q,"c"),y$(X,"dkLen"),y$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Rq(U,"password"),D=Rq(J,"salt"),z=new Uint8Array(X),W=v0.create($,q),w=W._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:z,PRF:W,PRFSalt:w}}function tP($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return RU(I),J}function Fq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=aP($,U,J,G),D,z=new Uint8Array(4),W=xJ(z),w=new Uint8Array(O.outputLen);for(let v=1,Z=0;Z<Q;v++,Z+=O.outputLen){let V=X.subarray(Z,Z+O.outputLen);W.setInt32(0,v,!1),(D=q._cloneInto(D)).update(z).digestInto(w),V.set(w.subarray(0,V.length));for(let N=1;N<I;N++){O._cloneInto(D).update(w).digestInto(w);for(let j=0;j<V.length;j++)V[j]^=w[j]}}return tP(O,q,X,D,w)}function vZ($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],z=$[U++]^J[G++],W=$[U++]^J[G++],w=$[U++]^J[G++],v=$[U++]^J[G++],Z=$[U++]^J[G++],V=$[U++]^J[G++],N=$[U++]^J[G++],j=$[U++]^J[G++],R=$[U++]^J[G++],S=$[U++]^J[G++],L=$[U++]^J[G++],k=$[U++]^J[G++],x=X,h=O,B=q,m=D,a=z,E=W,A=w,_=v,M=Z,K=V,H=N,b=j,P=R,F=S,y=L,n=k;for(let $$=0;$$<8;$$+=2)a^=P$(x+P|0,7),M^=P$(a+x|0,9),P^=P$(M+a|0,13),x^=P$(P+M|0,18),K^=P$(E+h|0,7),F^=P$(K+E|0,9),h^=P$(F+K|0,13),E^=P$(h+F|0,18),y^=P$(H+A|0,7),B^=P$(y+H|0,9),A^=P$(B+y|0,13),H^=P$(A+B|0,18),m^=P$(n+b|0,7),_^=P$(m+n|0,9),b^=P$(_+m|0,13),n^=P$(b+_|0,18),h^=P$(x+m|0,7),B^=P$(h+x|0,9),m^=P$(B+h|0,13),x^=P$(m+B|0,18),A^=P$(E+a|0,7),_^=P$(A+E|0,9),a^=P$(_+A|0,13),E^=P$(a+_|0,18),b^=P$(H+K|0,7),M^=P$(b+H|0,9),K^=P$(M+b|0,13),H^=P$(K+M|0,18),P^=P$(n+y|0,7),F^=P$(P+n|0,9),y^=P$(F+P|0,13),n^=P$(y+F|0,18);I[Q++]=X+x|0,I[Q++]=O+h|0,I[Q++]=q+B|0,I[Q++]=D+m|0,I[Q++]=z+a|0,I[Q++]=W+E|0,I[Q++]=w+A|0,I[Q++]=v+_|0,I[Q++]=Z+M|0,I[Q++]=V+K|0,I[Q++]=N+H|0,I[Q++]=j+b|0,I[Q++]=R+P|0,I[Q++]=S+F|0,I[Q++]=L+y|0,I[Q++]=k+n|0}function uq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(vZ(J,X,$,U,J,Q),O>0)X+=16;vZ(J,Q,$,U+=16,J,X)}}function eP($,U,J){let G=SQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:z}=G;if(y$(I,"N"),y$(Q,"r"),y$(X,"p"),y$(O,"dkLen"),y$(q,"asyncTick"),y$(D,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let W=128*Q,w=W/4,v=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>v)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(v-1)*32/W)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(v-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Z=W*(I+X+1);if(Z>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Z+", maxmem="+D);let V=Fq(r$,$,U,{c:1,dkLen:W*X}),N=BQ(V),j=BQ(new Uint8Array(W*I)),R=BQ(new Uint8Array(W)),S=()=>{};if(z){let L=2*I*X,k=Math.max(Math.floor(L/1e4),1),x=0;S=()=>{if(x++,z&&(!(x%k)||x===L))z(x/L)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:w,V:j,B32:N,B:V,tmp:R,blockMixCb:S,asyncTick:q}}function sP($,U,J,G,I){let Q=Fq(r$,$,J,{c:1,dkLen:U});return RU(J,G,I),Q}function xq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:z,tmp:W,blockMixCb:w}=eP($,U,J);Mq(D);for(let v=0;v<Q;v++){let Z=O*v;for(let V=0;V<O;V++)q[V]=D[Z+V];for(let V=0,N=0;V<G-1;V++)uq(q,N,q,N+=O,I),w();uq(q,(G-1)*O,D,Z,I),w();for(let V=0;V<G;V++){let N=(D[Z+O-16]&G-1)>>>0;for(let j=0;j<O;j++)W[j]=D[Z+j]^q[N*O+j];uq(W,0,D,Z,I),w()}}return Mq(D),sP($,X,z,q,W)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function $B($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mQ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function mJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function n$($,U,J=""){let G=$B($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function mq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function VZ($,U,J=!1){n$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!yJ($))throw Error("invalid output, must be aligned")}function N0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function J0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function UB($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var nI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),IB=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var JB=($)=>{for(let U=0;U<$.length;U++)$[U]=IB($[U]);return $},y0=nI?($)=>$:JB;function NZ($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function ZZ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function gZ($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var MZ=($,U)=>{function J(G,...I){if(n$(G,void 0,"key"),$.nonceLength!==void 0){let z=I[0];n$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)n$(I[1],void 0,"AAD");let X=U(G,...I),O=(z,W)=>{if(W!==void 0){if(z!==2)throw Error("cipher output not supported");n$(W,void 0,"output")}},q=!1;return{encrypt(z,W){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,n$(z),O(X.encrypt.length,W),X.encrypt(z,W)},decrypt(z,W){if(n$(z),Q&&z.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,W),X.decrypt(z,W)}}}return Object.assign(J,$),J};function w8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(n$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!yJ(U))throw Error("invalid output, must be aligned");return U}function RZ($,U,J){mJ($),mJ(U),mQ(J);let G=new Uint8Array(16),I=UB(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function yJ($){return $.byteOffset%4===0}function rJ($){return Uint8Array.from(n$($))}var HZ=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),GB=(()=>y0(N0(HZ("expand 16-byte k"))))(),QB=(()=>y0(N0(HZ("expand 32-byte k"))))();function B$($,U){return $<<U|$>>>32-U}var v8=64,XB=16,yq=(()=>4294967295)(),jZ=Uint32Array.of();function OB($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(v8),z=N0(D),W=nI&&yJ(I)&&yJ(Q),w=W?N0(I):jZ,v=W?N0(Q):jZ;if(!nI){for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),y0(z),X>=yq)throw Error("arx: counter overflow");let V=Math.min(v8,q-Z);for(let N=0,j;N<V;N++)j=Z+N,Q[j]=I[j]^D[N];Z+=V}return}for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),X>=yq)throw Error("arx: counter overflow");let V=Math.min(v8,q-Z);if(W&&V===v8){let N=Z/4;if(Z%4!==0)throw Error("arx: invalid block position");for(let j=0,R;j<XB;j++)R=N+j,v[R]=w[R]^z[j];Z+=v8;continue}for(let N=0,j;N<V;N++)j=Z+N,Q[j]=I[j]^D[N];Z+=V}}function TZ($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=NZ({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return mJ(I),mJ(X),mQ(Q),mQ(J),(O,q,D,z,W=0)=>{n$(O,void 0,"key"),n$(q,void 0,"nonce"),n$(D,void 0,"data");let w=D.length;if(z=w8(w,z,!1),mJ(W),W<0||W>=yq)throw Error("arx: counter overflow");let v=[],Z=O.length,V,N;if(Z===32)v.push(V=rJ(O)),N=QB;else if(Z===16&&J)V=new Uint8Array(32),V.set(O),V.set(O,16),N=GB,v.push(V);else throw n$(O,32,"arx key"),Error("invalid key size");if(!nI||!yJ(q))v.push(q=rJ(q));let j=N0(V);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=q.subarray(0,16);if(nI)G(N,j,N0(L),j);else{let k=y0(Uint32Array.from(N));G(k,j,N0(L),j),J0(k),y0(j)}q=q.subarray(16)}else if(!nI)y0(j);let R=16-I;if(R!==q.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let L=new Uint8Array(12);L.set(q,Q?0:12-q.length),q=L,v.push(q)}let S=y0(N0(q));try{return OB($,N,j,S,D,z,W,X),z}finally{J0(...v)}}}function $U($,U){return $[U++]&255|($[U++]&255)<<8}class KZ{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=rJ(n$($,32,"key"));let U=$U($,0),J=$U($,2),G=$U($,4),I=$U($,6),Q=$U($,8),X=$U($,10),O=$U($,12),q=$U($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=$U($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],z=Q[4],W=Q[5],w=Q[6],v=Q[7],Z=Q[8],V=Q[9],N=$U($,U+0),j=$U($,U+2),R=$U($,U+4),S=$U($,U+6),L=$U($,U+8),k=$U($,U+10),x=$U($,U+12),h=$U($,U+14),B=I[0]+(N&8191),m=I[1]+((N>>>13|j<<3)&8191),a=I[2]+((j>>>10|R<<6)&8191),E=I[3]+((R>>>7|S<<9)&8191),A=I[4]+((S>>>4|L<<12)&8191),_=I[5]+(L>>>1&8191),M=I[6]+((L>>>14|k<<2)&8191),K=I[7]+((k>>>11|x<<5)&8191),H=I[8]+((x>>>8|h<<8)&8191),b=I[9]+(h>>>5|G),P=0,F=P+B*X+m*(5*V)+a*(5*Z)+E*(5*v)+A*(5*w);P=F>>>13,F&=8191,F+=_*(5*W)+M*(5*z)+K*(5*D)+H*(5*q)+b*(5*O),P+=F>>>13,F&=8191;let y=P+B*O+m*X+a*(5*V)+E*(5*Z)+A*(5*v);P=y>>>13,y&=8191,y+=_*(5*w)+M*(5*W)+K*(5*z)+H*(5*D)+b*(5*q),P+=y>>>13,y&=8191;let n=P+B*q+m*O+a*X+E*(5*V)+A*(5*Z);P=n>>>13,n&=8191,n+=_*(5*v)+M*(5*w)+K*(5*W)+H*(5*z)+b*(5*D),P+=n>>>13,n&=8191;let $$=P+B*D+m*q+a*O+E*X+A*(5*V);P=$$>>>13,$$&=8191,$$+=_*(5*Z)+M*(5*v)+K*(5*w)+H*(5*W)+b*(5*z),P+=$$>>>13,$$&=8191;let X$=P+B*z+m*D+a*q+E*O+A*X;P=X$>>>13,X$&=8191,X$+=_*(5*V)+M*(5*Z)+K*(5*v)+H*(5*w)+b*(5*W),P+=X$>>>13,X$&=8191;let q$=P+B*W+m*z+a*D+E*q+A*O;P=q$>>>13,q$&=8191,q$+=_*X+M*(5*V)+K*(5*Z)+H*(5*v)+b*(5*w),P+=q$>>>13,q$&=8191;let W$=P+B*w+m*W+a*z+E*D+A*q;P=W$>>>13,W$&=8191,W$+=_*O+M*X+K*(5*V)+H*(5*Z)+b*(5*v),P+=W$>>>13,W$&=8191;let N$=P+B*v+m*w+a*W+E*z+A*D;P=N$>>>13,N$&=8191,N$+=_*q+M*O+K*X+H*(5*V)+b*(5*Z),P+=N$>>>13,N$&=8191;let v$=P+B*Z+m*v+a*w+E*W+A*z;P=v$>>>13,v$&=8191,v$+=_*D+M*q+K*O+H*X+b*(5*V),P+=v$>>>13,v$&=8191;let V$=P+B*V+m*Z+a*v+E*w+A*W;P=V$>>>13,V$&=8191,V$+=_*z+M*D+K*q+H*O+b*X,P+=V$>>>13,V$&=8191,P=(P<<2)+P|0,P=P+F|0,F=P&8191,P=P>>>13,y+=P,I[0]=F,I[1]=y,I[2]=n,I[3]=$$,I[4]=X$,I[5]=q$,I[6]=W$,I[7]=N$,I[8]=v$,I[9]=V$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;J0(J)}update($){mq(this),n$($),$=rJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,J0(this.h,this.r,this.buffer,this.pad)}digestInto($){mq(this),VZ($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var AZ=gZ(32,($)=>new KZ($));function qB($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],z=U[0],W=U[1],w=U[2],v=U[3],Z=U[4],V=U[5],N=U[6],j=U[7],R=I,S=J[0],L=J[1],k=J[2],x=X,h=O,B=q,m=D,a=z,E=W,A=w,_=v,M=Z,K=V,H=N,b=j,P=R,F=S,y=L,n=k;for(let X$=0;X$<Q;X$+=2)x=x+a|0,P=B$(P^x,16),M=M+P|0,a=B$(a^M,12),x=x+a|0,P=B$(P^x,8),M=M+P|0,a=B$(a^M,7),h=h+E|0,F=B$(F^h,16),K=K+F|0,E=B$(E^K,12),h=h+E|0,F=B$(F^h,8),K=K+F|0,E=B$(E^K,7),B=B+A|0,y=B$(y^B,16),H=H+y|0,A=B$(A^H,12),B=B+A|0,y=B$(y^B,8),H=H+y|0,A=B$(A^H,7),m=m+_|0,n=B$(n^m,16),b=b+n|0,_=B$(_^b,12),m=m+_|0,n=B$(n^m,8),b=b+n|0,_=B$(_^b,7),x=x+E|0,n=B$(n^x,16),H=H+n|0,E=B$(E^H,12),x=x+E|0,n=B$(n^x,8),H=H+n|0,E=B$(E^H,7),h=h+A|0,P=B$(P^h,16),b=b+P|0,A=B$(A^b,12),h=h+A|0,P=B$(P^h,8),b=b+P|0,A=B$(A^b,7),B=B+_|0,F=B$(F^B,16),M=M+F|0,_=B$(_^M,12),B=B+_|0,F=B$(F^B,8),M=M+F|0,_=B$(_^M,7),m=m+a|0,y=B$(y^m,16),K=K+y|0,a=B$(a^K,12),m=m+a|0,y=B$(y^m,8),K=K+y|0,a=B$(a^K,7);let $$=0;G[$$++]=X+x|0,G[$$++]=O+h|0,G[$$++]=q+B|0,G[$$++]=D+m|0,G[$$++]=z+a|0,G[$$++]=W+E|0,G[$$++]=w+A|0,G[$$++]=v+_|0,G[$$++]=Z+M|0,G[$$++]=V+K|0,G[$$++]=N+H|0,G[$$++]=j+b|0,G[$$++]=R+P|0,G[$$++]=S+F|0,G[$$++]=L+y|0,G[$$++]=k+n|0}var DB=TZ(qB,{counterRight:!1,counterLength:4,allowShortKeys:!1});var zB=new Uint8Array(16),PZ=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(zB.subarray(J))},YB=new Uint8Array(32);function BZ($,U,J,G,I){if(I!==void 0)n$(I,void 0,"AAD");let Q=$(U,J,YB),X=RZ(G.length,I?I.length:0,!0),O=AZ.create(Q);if(I)PZ(O,I);PZ(O,G),O.update(X);let q=O.digest();return J0(Q,X),q}var WB=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=w8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=BZ($,U,J,q,G);return X.set(D,O),J0(D),X},decrypt(Q,X){X=w8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=BZ($,U,J,O,G);if(!ZZ(q,D))throw J0(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),J0(D),X}}},iU=MZ({blockSize:64,nonceLength:12,tagLength:16},WB(DB));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function hJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function p$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function g$($,U,J=""){let G=hJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function pU($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");p$($.outputLen),p$($.blockLen)}function h0($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function yQ($,U){g$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function rQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function CU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function hQ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function G0($,U){return $<<32-U|$>>>U}var wB=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function vB($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function VB($){for(let U=0;U<$.length;U++)$[U]=vB($[U]);return $}var rq=wB?($)=>$:VB,SZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),NB=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function cI($){if(g$($),SZ)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=NB[$[J]];return U}var r0={_0:48,_9:57,A:65,F:70,a:97,f:102};function LZ($){if($>=r0._0&&$<=r0._9)return $-r0._0;if($>=r0.A&&$<=r0.F)return $-(r0.A-10);if($>=r0.a&&$<=r0.f)return $-(r0.a-10);return}function iI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(SZ)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=LZ($.charCodeAt(Q)),O=LZ($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function d$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];g$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function dJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function DI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var zI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var dq=BigInt(0),hq=BigInt(1);function V8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function CZ($){if(typeof $==="bigint"){if(!dQ($))throw Error("positive bigint expected, got "+$)}else p$($);return $}function N8($){let U=CZ($).toString(16);return U.length&1?"0"+U:U}function EZ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?dq:BigInt("0x"+$)}function YI($){return EZ(cI($))}function WI($){return EZ(cI(lQ(g$($)).reverse()))}function lJ($,U){p$(U),$=CZ($);let J=iI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function Z8($,U){return lJ($,U).reverse()}function lQ($){return Uint8Array.from($)}function wI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var dQ=($)=>typeof $==="bigint"&&dq<=$;function ZB($,U,J){return dQ($)&&dQ(U)&&dQ(J)&&U<=$&&$<J}function g8($,U,J,G){if(!ZB(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function lq($){let U;for(U=0;$>dq;$>>=hq,U+=1);return U}var M8=($)=>(hq<<BigInt($))-hq;function _Z($,U,J){if(p$($,"hashLen"),p$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,d$(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=w();let R=q.slice();j.push(R),N+=q.length}return d$(...j)};return(N,j)=>{W(),v(N);let R=void 0;while(!(R=j(Z())))v();return W(),R}}function pI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function nq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HU=BigInt(0),wU=BigInt(1),oI=BigInt(2),kZ=BigInt(3),FZ=BigInt(4),uZ=BigInt(5),gB=BigInt(7),xZ=BigInt(8),MB=BigInt(9),mZ=BigInt(16);function jU($,U){let J=$%U;return J>=HU?J:U+J}function oU($,U,J){let G=$;while(U-- >HU)G*=G,G%=J;return G}function bZ($,U){if($===HU)throw Error("invert: expected non-zero number");if(U<=HU)throw Error("invert: expected positive modulus, got "+U);let J=jU($,U),G=U,I=HU,Q=wU,X=wU,O=HU;while(J!==HU){let D=G/J,z=G%J,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==wU)throw Error("invert: does not exist");return jU(I,U)}function cq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function yZ($,U){let J=($.ORDER+wU)/FZ,G=$.pow(U,J);return cq($,G,U),G}function RB($,U){let J=($.ORDER-uZ)/xZ,G=$.mul(U,oI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,oI),I),O=$.mul(Q,$.sub(X,$.ONE));return cq($,O,U),O}function jB($){let U=nQ($),J=rZ($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+gB)/mZ;return(O,q)=>{let D=O.pow(q,X),z=O.mul(D,G),W=O.mul(D,I),w=O.mul(D,Q),v=O.eql(O.sqr(z),q),Z=O.eql(O.sqr(W),q);D=O.cmov(D,z,v),z=O.cmov(w,W,Z);let V=O.eql(O.sqr(z),q),N=O.cmov(D,z,V);return cq(O,N,q),N}}function rZ($){if($<kZ)throw Error("sqrt is not defined for small field");let U=$-wU,J=0;while(U%oI===HU)U/=oI,J++;let G=oI,I=nQ($);while(fZ(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return yZ;let Q=I.pow(G,U),X=(U+wU)/oI;return function(q,D){if(q.is0(D))return D;if(fZ(q,D)!==1)throw Error("Cannot find square root");let z=J,W=q.mul(q.ONE,Q),w=q.pow(D,U),v=q.pow(D,X);while(!q.eql(w,q.ONE)){if(q.is0(w))return q.ZERO;let Z=1,V=q.sqr(w);while(!q.eql(V,q.ONE))if(Z++,V=q.sqr(V),Z===z)throw Error("Cannot find square root");let N=wU<<BigInt(z-Z-1),j=q.pow(W,N);z=Z,W=q.sqr(j),w=q.mul(w,W),v=q.mul(v,j)}return v}}function HB($){if($%FZ===kZ)return yZ;if($%xZ===uZ)return RB;if($%mZ===MB)return jB($);return rZ($)}var TB=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function iq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=TB.reduce((G,I)=>{return G[I]="function",G},U);return pI($,J),$}function KB($,U,J){if(J<HU)throw Error("invalid exponent, negatives unsupported");if(J===HU)return $.ONE;if(J===wU)return U;let G=$.ONE,I=U;while(J>HU){if(J&wU)G=$.mul(G,I);I=$.sqr(I),J>>=wU}return G}function R8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function fZ($,U){let J=($.ORDER-wU)/oI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function AB($,U){if(U!==void 0)p$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class hZ{ORDER;BITS;BYTES;isLE;ZERO=HU;ONE=wU;_lengths;_sqrt;_mod;constructor($,U={}){if($<=HU)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=AB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return jU($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return HU<=$&&$<this.ORDER}is0($){return $===HU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&wU)===wU}neg($){return jU(-$,this.ORDER)}eql($,U){return $===U}sqr($){return jU($*$,this.ORDER)}add($,U){return jU($+U,this.ORDER)}sub($,U){return jU($-U,this.ORDER)}mul($,U){return jU($*U,this.ORDER)}pow($,U){return KB(this,$,U)}div($,U){return jU($*bZ(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return bZ($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=HB(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?Z8($,this.BYTES):lJ($,this.BYTES)}fromBytes($,U=!1){g$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?WI($):YI($);if(X)O=jU(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return R8(this,$)}cmov($,U,J){return J?U:$}}function nQ($,U={}){return new hZ($,U)}function dZ($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function pq($){let U=dZ($);return U+Math.ceil(U/2)}function lZ($,U,J=!1){g$($);let G=$.length,I=dZ(U),Q=pq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?WI($):YI($),O=jU(X,U-wU)+wU;return J?Z8(O,I):lJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nJ=BigInt(0),aI=BigInt(1);function j8($,U){let J=U.negate();return $?J:U}function eq($,U){let J=R8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function pZ($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function oq($,U){pZ($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=M8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function nZ($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=aI;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var aq=new WeakMap,oZ=new WeakMap;function tq($){return oZ.get($)||1}function cZ($){if($!==nJ)throw Error("invalid wNAF")}class sq{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>nJ){if(U&aI)J=J.add(G);G=G.double(),U>>=aI}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=oq(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=oq($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=nZ(J,X,Q);if(J=O,D)I=I.add(j8(W,U[w]));else G=G.add(j8(z,U[q]))}return cZ(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=oq($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===nJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=nZ(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return cZ(J),G}getPrecomputes($,U,J){let G=aq.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);aq.set(U,G)}}return G}cached($,U,J){let G=tq($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=tq($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){pZ(U,this.bits),oZ.set($,U),aq.delete($)}hasCache($){return tq($)!==1}}function aZ($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>nJ||G>nJ){if(J&aI)Q=Q.add(I);if(G&aI)X=X.add(I);I=I.double(),J>>=aI,G>>=aI}return{p1:Q,p2:X}}function iZ($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return iq(U),U}else return nQ($,{isLE:J})}function tZ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>nJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=iZ(U.p,J.Fp,G),Q=iZ(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function cQ($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H8=BigInt(0),cJ=BigInt(1),iQ=BigInt(2);function PB($){return pI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eZ($){let U=PB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||DI,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?iQ**BigInt(254):iQ**BigInt(447),Z=O?BigInt(8)*iQ**BigInt(251)-cJ:BigInt(4)*iQ**BigInt(445)-cJ,V=v+Z+cJ,N=(M)=>jU(M,J),j=R(W);function R(M){return Z8(N(M),z)}function S(M){let K=lQ(g$(M,z,"uCoordinate"));if(O)K[31]&=127;return N(WI(K))}function L(M){return WI(I(lQ(g$(M,z,"scalar"))))}function k(M,K){let H=a(S(K),L(M));if(H===H8)throw Error("invalid private or public key received");return R(H)}function x(M){return k(M,j)}let h=x,B=k;function m(M,K,H){let b=N(M*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(M,K){g8("u",M,H8,J),g8("scalar",K,v,V);let H=K,b=M,P=cJ,F=H8,y=M,n=cJ,$$=H8;for(let q$=BigInt(D-1);q$>=H8;q$--){let W$=H>>q$&cJ;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,w0=DU-SU;y=N(W0*W0),n=N(b*N(w0*w0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(M=q(z))=>{return g$(M,E.seed,"seed"),M},_={randomSecretKey:A};return Object.freeze({keygen:cQ(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}class $D{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(pU($),g$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),CU(G)}update($){return h0(this),this.iHash.update($),this}digestInto($){h0(this),g$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var iJ=($,U,J)=>new $D($,U).update(J).digest();iJ.create=($,U)=>new $D($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sZ=($,U)=>($+($>=0?U:-U)/Ug)/U;function BB($,U,J){let[[G,I],[Q,X]]=U,O=sZ(X*$,J),q=sZ(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<d0,w=z<d0;if(W)D=-D;if(w)z=-z;let v=M8(Math.ceil(lq(J)/2))+pJ;if(D<d0||D>=v||z<d0||z>=v)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:W,k1:D,k2neg:w,k2:z}}function ID($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function UD($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(V8(J.lowS,"lowS"),V8(J.prehash,"prehash"),J.format!==void 0)ID(J.format);return J}class $g extends Error{constructor($=""){super($)}}var vI={Err:$g,_tlv:{encode:($,U)=>{let{Err:J}=vI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=N8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?N8(I.length/2|128):"";return N8($)+Q+I+U},decode($,U){let{Err:J}=vI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=vI;if($<d0)throw new U("integer: negative integers are not allowed");let J=N8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=vI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return YI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=vI,I=g$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=vI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},d0=BigInt(0),pJ=BigInt(1),Ug=BigInt(2),pQ=BigInt(3),LB=BigInt(4);function JD($,U={}){let J=tZ("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;pI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=Jg(G,I);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function W(A,_,M){let{x:K,y:H}=_.toAffine(),b=G.toBytes(K);if(V8(M,"isCompressed"),M){z();let P=!G.isOdd(H);return d$(Ig(P),b)}else return d$(Uint8Array.of(4),b,G.toBytes(H))}function w(A){g$(A,void 0,"Point");let{publicKey:_,publicKeyUncompressed:M}=D,K=A.length,H=A[0],b=A.subarray(1);if(K===_&&(H===2||H===3)){let P=G.fromBytes(b);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let F=V(P),y;try{y=G.sqrt(F)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}z();let n=G.isOdd(y);if((H&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(K===M&&H===4){let P=G.BYTES,F=G.fromBytes(b.subarray(0,P)),y=G.fromBytes(b.subarray(P,P*2));if(!N(F,y))throw Error("bad point: is not on curve");return{x:F,y}}else throw Error(`bad point: got length ${K}, expected compressed=${_} or uncompressed=${M}`)}let v=U.toBytes||W,Z=U.fromBytes||w;function V(A){let _=G.sqr(A),M=G.mul(_,A);return G.add(G.add(M,G.mul(A,Q.a)),Q.b)}function N(A,_){let M=G.sqr(_),K=V(A);return G.eql(M,K)}if(!N(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let j=G.mul(G.pow(Q.a,pQ),LB),R=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(j,R)))throw Error("bad curve params: a or b");function S(A,_,M=!1){if(!G.isValid(_)||M&&G.is0(_))throw Error(`bad point coordinate ${A}`);return _}function L(A){if(!(A instanceof m))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return BB(A,q.basises,I.ORDER)}let x=nq((A,_)=>{let{X:M,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:M,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(M,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}),h=nq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:_,y:M}=A.toAffine();if(!G.isValid(_)||!G.isValid(M))throw Error("bad point: x or y not field elements");if(!N(_,M))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(A,_,M,K,H){return M=new m(G.mul(M.X,A),M.Y,M.Z),_=j8(K,_),M=j8(H,M),_.add(M)}class m{static BASE=new m(Q.Gx,Q.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,_,M){this.X=S("x",A),this.Y=S("y",_,!0),this.Z=S("z",M),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:_,y:M}=A||{};if(!A||!G.isValid(_)||!G.isValid(M))throw Error("invalid affine point");if(A instanceof m)throw Error("projective point not allowed");if(G.is0(_)&&G.is0(M))return m.ZERO;return new m(_,M,G.ONE)}static fromBytes(A){let _=m.fromAffine(Z(g$(A,void 0,"point")));return _.assertValidity(),_}static fromHex(A){return m.fromBytes(iI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,_=!0){if(E.createCache(this,A),!_)this.multiply(pQ);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){L(A);let{X:_,Y:M,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.eql(G.mul(_,P),G.mul(H,K)),y=G.eql(G.mul(M,P),G.mul(b,K));return F&&y}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:_}=Q,M=G.mul(_,pQ),{X:K,Y:H,Z:b}=this,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(b,b),q$=G.mul(K,H);return q$=G.add(q$,q$),y=G.mul(K,b),y=G.add(y,y),P=G.mul(A,y),F=G.mul(M,X$),F=G.add(P,F),P=G.sub($$,F),F=G.add($$,F),F=G.mul(P,F),P=G.mul(q$,P),y=G.mul(M,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),F=G.add(F,n),X$=G.mul(H,b),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,$$),y=G.add(y,y),y=G.add(y,y),new m(P,F,y)}add(A){L(A);let{X:_,Y:M,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.ZERO,y=G.ZERO,n=G.ZERO,$$=Q.a,X$=G.mul(Q.b,pQ),q$=G.mul(_,H),W$=G.mul(M,b),N$=G.mul(K,P),v$=G.add(_,M),V$=G.add(H,b);v$=G.mul(v$,V$),V$=G.add(q$,W$),v$=G.sub(v$,V$),V$=G.add(_,K);let R$=G.add(H,P);return V$=G.mul(V$,R$),R$=G.add(q$,N$),V$=G.sub(V$,R$),R$=G.add(M,K),F=G.add(b,P),R$=G.mul(R$,F),F=G.add(W$,N$),R$=G.sub(R$,F),n=G.mul($$,V$),F=G.mul(X$,N$),n=G.add(F,n),F=G.sub(W$,n),n=G.add(W$,n),y=G.mul(F,n),W$=G.add(q$,q$),W$=G.add(W$,q$),N$=G.mul($$,N$),V$=G.mul(X$,V$),W$=G.add(W$,N$),N$=G.sub(q$,N$),N$=G.mul($$,N$),V$=G.add(V$,N$),q$=G.mul(W$,V$),y=G.add(y,q$),q$=G.mul(R$,V$),F=G.mul(v$,F),F=G.sub(F,q$),q$=G.mul(v$,W$),n=G.mul(R$,n),n=G.add(n,q$),new m(F,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(m.ZERO)}multiply(A){let{endo:_}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let M,K,H=(b)=>E.cached(this,b,(P)=>eq(m,P));if(_){let{k1neg:b,k1:P,k2neg:F,k2:y}=k(A),{p:n,f:$$}=H(P),{p:X$,f:q$}=H(y);K=$$.add(q$),M=B(_.beta,n,X$,b,F)}else{let{p:b,f:P}=H(A);M=b,K=P}return eq(m,[M,K])[0]}multiplyUnsafe(A){let{endo:_}=U,M=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===d0||M.is0())return m.ZERO;if(A===pJ)return M;if(E.hasCache(this))return this.multiply(A);if(_){let{k1neg:K,k1:H,k2neg:b,k2:P}=k(A),{p1:F,p2:y}=aZ(m,M,H,P);return B(_.beta,F,y,K,b)}else return E.unsafe(M,A)}toAffine(A){return x(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===pJ)return!0;if(A)return A(m,this);return E.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===pJ)return this;if(A)return A(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return V8(A,"isCompressed"),this.assertValidity(),v(m,this,A)}toHex(A=!0){return cI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let a=I.BITS,E=new sq(m,U.endo?Math.ceil(a/2):a);return m.BASE.precompute(8),m}function Ig($){return Uint8Array.of($?2:3)}function Jg($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function SB($,U={}){let{Fn:J}=$,G=U.randomBytes||DI,I=Object.assign(Jg($.Fp,J),{seed:pq(J.ORDER)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=v.length;if(Z===!0&&j!==V)return!1;if(Z===!1&&j!==N)return!1;return!!$.fromBytes(v)}catch(j){return!1}}function O(v=G(I.seed)){return lZ(g$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I;if(!hJ(v))return;if("_lengths"in J&&J._lengths||Z===V)return;let j=g$(v,void 0,"key").length;return j===V||j===N}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=cQ(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function GD($,U,J={}){pU(U),pI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||DI,I=J.hmac||((M,K)=>iJ(U,M,K)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v}=SB($,J),Z={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=O*Ug<Q.ORDER;function N(M){let K=O>>pJ;return M>K}function j(M,K){if(!X.isValidNot0(K))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return K}function R(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(M,K){ID(K);let H=v.signature,b=K==="compact"?H:K==="recovered"?H+1:void 0;return g$(M,b)}class L{r;s;recovery;constructor(M,K,H){if(this.r=j("r",M),this.s=j("s",K),H!=null){if(R(),![0,1,2,3].includes(H))throw Error("invalid recovery id");this.recovery=H}Object.freeze(this)}static fromBytes(M,K=Z.format){S(M,K);let H;if(K==="der"){let{r:y,s:n}=vI.toSig(g$(M));return new L(y,n)}if(K==="recovered")H=M[0],K="compact",M=M.subarray(1);let b=v.signature/2,P=M.subarray(0,b),F=M.subarray(b,b*2);return new L(X.fromBytes(P),X.fromBytes(F),H)}static fromHex(M,K){return this.fromBytes(iI(M),K)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new L(this.r,this.s,M)}recoverPublicKey(M){let{r:K,s:H}=this,b=this.assertRecovery(),P=b===2||b===3?K+O:K;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let F=Q.toBytes(P),y=$.fromBytes(d$(Ig((b&1)===0),F)),n=X.inv(P),$$=x(g$(M,void 0,"msgHash")),X$=X.create(-$$*n),q$=X.create(H*n),W$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(W$.is0())throw Error("invalid recovery: point at infinify");return W$.assertValidity(),W$}hasHighS(){return N(this.s)}toBytes(M=Z.format){if(ID(M),M==="der")return iI(vI.hexFromSig(this));let{r:K,s:H}=this,b=X.toBytes(K),P=X.toBytes(H);if(M==="recovered")return R(),d$(Uint8Array.of(this.assertRecovery()),b,P);return d$(b,P)}toHex(M){return cI(this.toBytes(M))}}let k=J.bits2int||function(K){if(K.length>8192)throw Error("input is too large");let H=YI(K),b=K.length*8-q;return b>0?H>>BigInt(b):H},x=J.bits2int_modN||function(K){return X.create(k(K))},h=M8(q);function B(M){return g8("num < 2^"+q,M,d0,h),X.toBytes(M)}function m(M,K){return g$(M,void 0,"message"),K?g$(U(M),void 0,"prehashed message"):M}function a(M,K,H){let{lowS:b,prehash:P,extraEntropy:F}=UD(H,Z);M=m(M,P);let y=x(M),n=X.fromBytes(K);if(!X.isValidNot0(n))throw Error("invalid private key");let $$=[B(n),B(y)];if(F!=null&&F!==!1){let N$=F===!0?G(v.secretKey):F;$$.push(g$(N$,void 0,"extraEntropy"))}let X$=d$(...$$),q$=y;function W$(N$){let v$=k(N$);if(!X.isValidNot0(v$))return;let V$=X.inv(v$),R$=$.BASE.multiply(v$).toAffine(),b$=X.create(R$.x);if(b$===d0)return;let k$=X.create(V$*X.create(q$+b$*n));if(k$===d0)return;let qU=(R$.x===b$?0:2)|Number(R$.y&pJ),DU=k$;if(b&&N(k$))DU=X.neg(k$),qU^=1;return new L(b$,DU,V?void 0:qU)}return{seed:X$,k2sig:W$}}function E(M,K,H={}){let{seed:b,k2sig:P}=a(M,K,H);return _Z(U.outputLen,X.BYTES,I)(b,P).toBytes(H.format)}function A(M,K,H,b={}){let{lowS:P,prehash:F,format:y}=UD(b,Z);if(H=g$(H,void 0,"publicKey"),K=m(K,F),!hJ(M)){let n=M instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(M,y);try{let n=L.fromBytes(M,y),$$=$.fromBytes(H);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,W$=x(K),N$=X.inv(q$),v$=X.create(W$*N$),V$=X.create(X$*N$),R$=$.BASE.multiplyUnsafe(v$).add($$.multiplyUnsafe(V$));if(R$.is0())return!1;return X.create(R$.x)===X$}catch(n){return!1}}function _(M,K,H={}){let{prehash:b}=UD(H,Z);return K=m(K,b),L.fromBytes(M,"recovered").recoverPublicKey(K).toBytes()}return Object.freeze({keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v,Point:$,sign:E,verify:A,recoverPublicKey:_,Signature:L,hash:U})}function Gg($,U,J){return $&U^~$&J}function Qg($,U,J){return $&U^$&J^U&J}class oQ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=hQ(this.buffer)}update($){h0(this),g$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=hQ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){h0(this),yQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,CU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=hQ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var l0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),n0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),UU=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),IU=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),Xg=BigInt(32);function CB($,U=!1){if(U)return{h:Number($&aQ),l:Number($>>Xg&aQ)};return{h:Number($>>Xg&aQ)|0,l:Number($&aQ)|0}}function tQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=CB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var QD=($,U,J)=>$>>>J,XD=($,U,J)=>$<<32-J|U>>>J,tI=($,U,J)=>$>>>J|U<<32-J,eI=($,U,J)=>$<<32-J|U>>>J,T8=($,U,J)=>$<<64-J|U>>>J-32,K8=($,U,J)=>$>>>J-32|U<<64-J;var Og=($,U,J)=>$<<J|U>>>32-J,qg=($,U,J)=>U<<J|$>>>32-J,Dg=($,U,J)=>U<<J-32|$>>>64-J,zg=($,U,J)=>$<<J-32|U>>>64-J;function Z0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var Yg=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),Wg=($,U,J,G)=>U+J+G+($/4294967296|0)|0,wg=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),vg=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,Vg=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),Ng=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var _B=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VI=new Uint32Array(64);class OD extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)VI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=VI[z-15],w=VI[z-2],v=G0(W,7)^G0(W,18)^W>>>3,Z=G0(w,17)^G0(w,19)^w>>>10;VI[z]=Z+VI[z-7]+v+VI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=G0(X,6)^G0(X,11)^G0(X,25),w=D+W+Gg(X,O,q)+_B[z]+VI[z]|0,Z=(G0(J,2)^G0(J,13)^G0(J,22))+Qg(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){CU(VI)}destroy(){this.set(0,0,0,0,0,0,0,0),CU(this.buffer)}}class Zg extends OD{A=l0[0]|0;B=l0[1]|0;C=l0[2]|0;D=l0[3]|0;E=l0[4]|0;F=l0[5]|0;G=l0[6]|0;H=l0[7]|0;constructor(){super(32)}}class bB extends OD{A=n0[0]|0;B=n0[1]|0;C=n0[2]|0;D=n0[3]|0;E=n0[4]|0;F=n0[5]|0;G=n0[6]|0;H=n0[7]|0;constructor(){super(28)}}var gg=(()=>tQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),fB=(()=>gg[0])(),kB=(()=>gg[1])(),NI=new Uint32Array(80),ZI=new Uint32Array(80);class A8 extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)NI[R]=$.getUint32(U),ZI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=NI[R-15]|0,L=ZI[R-15]|0,k=tI(S,L,1)^tI(S,L,8)^QD(S,L,7),x=eI(S,L,1)^eI(S,L,8)^XD(S,L,7),h=NI[R-2]|0,B=ZI[R-2]|0,m=tI(h,B,19)^T8(h,B,61)^QD(h,B,6),a=eI(h,B,19)^K8(h,B,61)^XD(h,B,6),E=wg(x,a,ZI[R-7],ZI[R-16]),A=vg(E,k,m,NI[R-7],NI[R-16]);NI[R]=A|0,ZI[R]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:j}=this;for(let R=0;R<80;R++){let S=tI(z,W,14)^tI(z,W,18)^T8(z,W,41),L=eI(z,W,14)^eI(z,W,18)^K8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=Vg(j,L,x,kB[R],ZI[R]),B=Ng(h,N,S,k,fB[R],NI[R]),m=h|0,a=tI(J,G,28)^T8(J,G,34)^T8(J,G,39),E=eI(J,G,28)^K8(J,G,34)^K8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=Z|0,j=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=Z0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=Yg(m,E,_);J=Wg(M,B,a,A),G=M|0}({h:J,l:G}=Z0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=Z0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=Z0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=Z0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=Z0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=Z0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=Z0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:j}=Z0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,j)}roundClean(){CU(NI,ZI)}destroy(){CU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class FB extends A8{Ah=IU[0]|0;Al=IU[1]|0;Bh=IU[2]|0;Bl=IU[3]|0;Ch=IU[4]|0;Cl=IU[5]|0;Dh=IU[6]|0;Dl=IU[7]|0;Eh=IU[8]|0;El=IU[9]|0;Fh=IU[10]|0;Fl=IU[11]|0;Gh=IU[12]|0;Gl=IU[13]|0;Hh=IU[14]|0;Hl=IU[15]|0;constructor(){super(64)}}class Mg extends A8{Ah=UU[0]|0;Al=UU[1]|0;Bh=UU[2]|0;Bl=UU[3]|0;Ch=UU[4]|0;Cl=UU[5]|0;Dh=UU[6]|0;Dl=UU[7]|0;Eh=UU[8]|0;El=UU[9]|0;Fh=UU[10]|0;Fl=UU[11]|0;Gh=UU[12]|0;Gl=UU[13]|0;Hh=UU[14]|0;Hl=UU[15]|0;constructor(){super(48)}}var vU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),VU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uB extends A8{Ah=vU[0]|0;Al=vU[1]|0;Bh=vU[2]|0;Bl=vU[3]|0;Ch=vU[4]|0;Cl=vU[5]|0;Dh=vU[6]|0;Dl=vU[7]|0;Eh=vU[8]|0;El=vU[9]|0;Fh=vU[10]|0;Fl=vU[11]|0;Gh=vU[12]|0;Gl=vU[13]|0;Hh=vU[14]|0;Hl=vU[15]|0;constructor(){super(28)}}class xB extends A8{Ah=VU[0]|0;Al=VU[1]|0;Bh=VU[2]|0;Bl=VU[3]|0;Ch=VU[4]|0;Cl=VU[5]|0;Dh=VU[6]|0;Dl=VU[7]|0;Eh=VU[8]|0;El=VU[9]|0;Fh=VU[10]|0;Fl=VU[11]|0;Gh=VU[12]|0;Gl=VU[13]|0;Hh=VU[14]|0;Hl=VU[15]|0;constructor(){super(32)}}var eQ=dJ(()=>new Zg,zI(1));var Rg=dJ(()=>new Mg,zI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mB=BigInt(1),jg=BigInt(2),yB=BigInt(3),rB=BigInt(5),bl=BigInt(8),Hg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function hB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=Hg,O=$*$%Q*$%Q,q=oU(O,jg,Q)*O%Q,D=oU(q,mB,Q)*$%Q,z=oU(D,rB,Q)*D%Q,W=oU(z,U,Q)*z%Q,w=oU(W,J,Q)*W%Q,v=oU(w,G,Q)*w%Q,Z=oU(v,I,Q)*v%Q,V=oU(Z,I,Q)*v%Q,N=oU(V,U,Q)*z%Q;return{pow_p_5_8:oU(N,jg,Q)*$%Q,b2:O}}function dB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Tg=(()=>{let $=Hg;return eZ({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=hB(U);return jU(oU(J,yB,$)*G,$)},adjustScalarBytes:dB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),nB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var cB=JD(lB),qD=GD(cB,eQ);var iB=JD(nB),Kg=GD(iB,Rg);function Pg($,U,J){if(pU($),J===void 0)J=new Uint8Array($.outputLen);return iJ($,J,U)}var DD=Uint8Array.of(0),Ag=Uint8Array.of();function Bg($,U,J,G=32){pU($),p$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=Ag;else g$(J,void 0,"info");let X=new Uint8Array(Q*I),O=iJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)DD[0]=z+1,q.update(z===0?Ag:D).update(J).update(DD).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),CU(D,DD),X.slice(0,G)}var pB=BigInt(0),P8=BigInt(1),oB=BigInt(2),aB=BigInt(7),tB=BigInt(256),eB=BigInt(113),Cg=[],Eg=[],_g=[];for(let $=0,U=P8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],Cg.push(2*(5*G+J)),Eg.push(($+1)*($+2)/2%64);let I=pB;for(let Q=0;Q<7;Q++)if(U=(U<<P8^(U>>aB)*eB)%tB,U&oB)I^=P8<<(P8<<BigInt(Q))-P8;_g.push(I)}var bg=tQ(_g,!0),sB=bg[0],$L=bg[1],Lg=($,U,J)=>J>32?Dg($,U,J):Og($,U,J),Sg=($,U,J)=>J>32?zg($,U,J):qg($,U,J);function UL($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],z=J[q+1],W=Lg(D,z,1)^J[O],w=Sg(D,z,1)^J[O+1];for(let v=0;v<50;v+=10)$[X+v]^=W,$[X+v+1]^=w}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=Eg[X],q=Lg(I,Q,O),D=Sg(I,Q,O),z=Cg[X];I=$[z],Q=$[z+1],$[z]=q,$[z+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=sB[G],$[1]^=$L[G]}CU(J)}class sQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,p$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rQ(this.state)}clone(){return this._cloneInto()}keccak(){rq(this.state32),UL(this.state32,this.rounds),rq(this.state32),this.posOut=0,this.pos=0}update($){h0(this),g$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){h0(this,!1),g$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return p$($),this.xofInto(new Uint8Array($))}digestInto($){if(yQ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,CU(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new sQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var fg=($,U,J,G={})=>dJ(()=>new sQ(U,$,J),G);var sI=fg(6,136,32,zI(8));var kg=fg(6,72,64,zI(10));var Fg=($,U,J,G={})=>dJ((I={})=>new sQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),ug=Fg(31,168,16,zI(11)),g0=Fg(31,136,32,zI(12));function zD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function mg($){return zD($),($&$-1)===0&&$!==0}function YD($,U){zD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function yg($){return zD($),31-Math.clz32($)}function xg($){let U=$.length;if(U<2||!mg(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=yg(U);for(let G=0;G<U;G++){let I=YD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var WD=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=yg(J);if(!mg(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)xg(z);for(let W=0,w=1;W<q-X;W++){let v=I?W+1+X:q-W,Z=1<<v,V=Z>>1,N=J>>v;for(let j=0;j<J;j+=Z)for(let R=0,S=w++;R<V;R++){let L=Q?I?J-S:S:R*N,k=j+R,x=j+R+V,h=G[L],B=z[x],m=z[k];if(D){let a=$.mul(B,h);z[k]=$.add(m,a),z[x]=$.sub(m,a)}else if(Q)z[k]=$.add(B,m),z[x]=$.mul($.sub(B,m),h);else z[k]=$.add(m,B),z[x]=$.mul($.sub(m,B),h)}}if(!I&&O)xg(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var M0=DI;function $4($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function rg($){return Uint8Array.from($)}function $J($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),z=typeof q==="number"?I[X]:q.encode(I[X]);if(g$(z,D,$),Q.set(z,O),typeof q!=="number")z.fill(0);O+=D}return Q},decode:(I)=>{g$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function U4($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{g$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function c$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function wD($){return(1<<$)-1}var pl=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var hg=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(R,S=G)=>{let L=R%S|0;return(L>=0?L|0:S+L|0)|0},D=(R,S=G)=>{let L=q(R,S)|0;return(L>S>>1?L-S|0:L)|0};function z(){let R=U(J);for(let S=0;S<J;S++){let L=YD(S,X),k=BigInt(Q)**BigInt(L)%BigInt(G);R[S]=Number(k)|0}return R}let W=z(),w={add:(R,S)=>q((R|0)+(S|0))|0,sub:(R,S)=>q((R|0)-(S|0))|0,mul:(R,S)=>q((R|0)*(S|0))|0,inv:(R)=>{throw Error("not implemented")}},v={N:J,roots:W,invertButterflies:!0,skipStages:O?1:0,brp:!1},Z=WD(w,{dit:!1,...v}),V=WD(w,{dit:!0,...v});return{mod:q,smod:D,nttZetas:W,NTT:{encode:(R)=>{return Z(R)},decode:(R)=>{V(R);for(let S=0;S<R.length;S++)R[S]=q(I*R[S]);return R}},bitsCoder:(R,S)=>{let L=wD(R),k=R*(J/8);return{bytesLen:k,encode:(x)=>{let h=new Uint8Array(k);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=(S.encode(x[B])&L)<<a,a+=R;for(;a>=8;a-=8,m>>=8)h[E++]=m&wD(a)}return h},decode:(x)=>{let h=U(J);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=x[B]<<a,a+=8;for(;a>=R;a-=R,m>>=R)h[E++]=S.decode(m&L)}return h}}}}},IL=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,z)=>{return G[I+0]=D,G[I+1]=z,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),c$(Q,G)}}},dg=IL(ug);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var NU=256,c0=3329,JL=3303,GL=17,{mod:S8,nttZetas:QL,NTT:UJ,bitsCoder:XL}=hg({N:NU,Q:c0,F:JL,ROOT_OF_UNITY:GL,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),vD={512:{N:NU,Q:c0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:NU,Q:c0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:NU,Q:c0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},OL=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+c0/2)/c0,decode:(J)=>J*c0+U>>>$}},B8=($)=>XL($,OL($));function IJ($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]+U[J])}function qL($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]-U[J])}function DL($,U,J,G,I){let Q=S8(U*G*I+$*J),X=S8($*G+U*J);return{c0:Q,c1:X}}function I4($,U){for(let J=0;J<NU/2;J++){let G=QL[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=DL($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function lg($){let U=new Uint16Array(NU);for(let J=0;J<NU;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<NU&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<c0)U[J++]=Q;if(J<NU&&X<c0)U[J++]=X}}return U}function L8($,U,J,G){let I=$(G*NU/4,U,J),Q=new Uint16Array(NU),X=rQ(I),O=0;for(let q=0,D=0,z=0,W=0;q<X.length;q++){let w=X[q];for(let v=0;v<32;v++)if(z+=w&1,w>>=1,O+=1,O===G)W=z,z=0;else if(O===2*G)Q[D++]=S8(W-z),z=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var zL=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=B8(1),z=B8(q),W=B8(O),w=$J("publicKey",U4(B8(12),U),32),v=U4(B8(12),U),Z=$J("ciphertext",U4(W,U),z),V=$J("seed",32,32);return{secretCoder:v,lengths:{secretKey:v.bytesLen,publicKey:w.bytesLen,cipherText:Z.bytesLen},keygen:(N)=>{g$(N,32,"seed");let j=new Uint8Array(33);j.set(N),j[32]=U;let R=I(j),[S,L]=V.decode(R),k=[],x=[];for(let m=0;m<U;m++)k.push(UJ.encode(L8(J,L,m,Q)));let h=G(S);for(let m=0;m<U;m++){let a=UJ.encode(L8(J,L,U+m,Q));for(let E=0;E<U;E++){let A=lg(h.get(E,m));IJ(a,I4(A,k[E]))}x.push(a)}h.clean();let B={publicKey:w.encode([x,S]),secretKey:v.encode(k)};return c$(S,L,k,x,j,R),B},encrypt:(N,j,R)=>{let[S,L]=w.decode(N),k=[];for(let E=0;E<U;E++)k.push(UJ.encode(L8(J,R,E,Q)));let x=G(L),h=new Uint16Array(NU),B=[];for(let E=0;E<U;E++){let A=L8(J,R,U+E,X),_=new Uint16Array(NU);for(let M=0;M<U;M++){let K=lg(x.get(E,M));IJ(_,I4(K,k[M]))}IJ(A,UJ.decode(_)),B.push(A),IJ(h,I4(S[E],k[E])),c$(_)}x.clean();let m=L8(J,R,2*U,X);IJ(m,UJ.decode(h));let a=D.decode(j);return IJ(a,m),c$(S,k,h,m),Z.encode([B,a])},decrypt:(N,j)=>{let[R,S]=Z.decode(N),L=v.decode(j),k=new Uint16Array(NU);for(let x=0;x<U;x++)IJ(k,I4(L[x],UJ.encode(R[x])));return qL(S,UJ.decode(k)),c$(k,L,R),D.encode(S)}}};function VD($){let U=zL($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=$J("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(z=M0(64))=>{g$(z,64,"seed");let{publicKey:W,secretKey:w}=U.keygen(z.subarray(0,32)),v=J(W),Z=O.encode([w,W,v,z.subarray(32)]);return c$(w,v),{publicKey:W,secretKey:Z}},getPublicKey:(z)=>{let[W,w,v,Z]=O.decode(z);return Uint8Array.from(w)},encapsulate:(z,W=M0(32))=>{g$(z,X.publicKey,"publicKey"),g$(W,32,"message");let w=z.subarray(0,384*$.K),v=Q.encode(Q.decode(rg(w)));if(!$4(v,w))throw c$(v),Error("ML-KEM.encapsulate: wrong publicKey modulus");c$(v);let Z=G.create().update(W).update(J(z)).digest(),V=U.encrypt(z,W,Z.subarray(32,64));return c$(Z.subarray(32)),{cipherText:V,sharedSecret:Z.subarray(0,32)}},decapsulate:(z,W)=>{g$(W,O.bytesLen,"secretKey"),g$(z,X.cipherText,"cipherText");let w=O.bytesLen-96,v=w+32,Z=J(W.subarray(w/2,v));if(!$4(Z,W.subarray(v,v+32)))throw Error("invalid secretKey: hash check failed");let[V,N,j,R]=O.decode(W),S=U.decrypt(z,V),L=G.create().update(S).update(j).digest(),k=L.subarray(0,32),x=U.encrypt(N,S,L.subarray(32,64)),h=$4(z,x),B=I.create({dkLen:32}).update(R).update(z).digest();return c$(S,x,!h?k:B),h?k:B}}}function YL($,U,J){return g0.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var ND={HASH256:sI,HASH512:kg,KDF:g0,XOF:dg,PRF:YL},Qn=VD({...ND,...vD[512]}),C8=VD({...ND,...vD[768]}),ng=VD({...ND,...vD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function WL($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=M0(J.seed))=>{g$(X,J.seed,"seed");let O=Q.isLE?WI(X):YI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function ZD($,U=!1){let J=WL($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=M0($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return c$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function E8($,U){return $J(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function gD($){return(U,J)=>$(U,{dkLen:J})}function wL($,U,...J){let G=E8(J,"seed"),I=E8(J,"publicKey");if($===void 0)$=G.bytesLen;p$($);function Q(X){g$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((W,w)=>W.keygen(O[w])),D=q.map((W)=>W.secretKey),z=q.map((W)=>W.publicKey);return{secretKey:D,publicKey:z}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=M0($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return c$(O),c$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function J4($,U,J,G,...I){let Q=wL($,J,...I),X=E8(I,"cipherText"),O=E8(I,"publicKey"),q=E8(I,"msg");if(U===void 0)U=q.bytesLen;return p$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,z=M0(q.bytesLen)){let W=O.decode(D),w=q.decode(z),v=I.map((j,R)=>j.encapsulate(W[R],w[R])),Z=v.map((j)=>j.sharedSecret),V=v.map((j)=>j.cipherText),N={sharedSecret:G(W,V,Z),cipherText:X.encode(V)};return c$(Z,V),N},decapsulate(D,z){let W=X.decode(D),{publicKey:w,secretKey:v}=Q.expandDecapsulationKey(z),Z=I.map((V,N)=>V.decapsulate(W[N],v[N]));return G(w,W,Z)}}}function cg($,U,J,G,I){return pU(G),pU(I),J4(32,32,gD(G),(Q,X,O)=>I(d$(O[0],O[1],X[1],Q[1],wI($))),U,J)}var Nn=cg("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",C8,ZD(qD,!0),g0,sI),Zn=cg("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",ng,ZD(Kg,!0),g0,sI);function vL($,U,J,G,I){return pU(G),pU(I),J4(32,32,gD(G),(Q,X,O)=>{let q=d$(O[0],O[1],X[0],Q[0],X[1],Q[1],wI($)),D=32,z=d$(wI("hybrid_prk"),q),W=Pg(I,z),w=d$(lJ(32,2),wI("shared_secret"),wI("")),v=Bg(I,W,w,32);return c$(W,w,z,q),v},U,J)}var ig=ZD(Tg),gn=vL("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",C8,ig,g0,eQ),VL=(()=>J4(32,32,gD(g0),($,U,J)=>sI(d$(J[0],J[1],U[1],$[1],wI("\\.//^\\"))),C8,ig))();function NL($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let z=0,W=U;;z=W,W+=U){if(W>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(z,W),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=M0(G)){return g$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=M0(G)){g$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),z=$.getPublicKey(q,!1);return c$(q),{sharedSecret:D,cipherText:z}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function ZL($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=NL(J,I,Q,G),O=64,q=O+G;return J4(32,32,(D)=>{g$(D,32);let z=g0(D,{dkLen:q}),W=z.subarray(0,O),w=z.subarray(O,q);return d$(W,w)},(D,z,W)=>sI(d$(W[0],W[1],z[1],D[1],wI($))),U,X)}var gL=(()=>ZL("MLKEM768-P256",C8,qD,128))();var G4=VL,pg=gL;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>t$($,U,J),RD=y$,oJ=LQ,JU=(...$)=>jq(...$),aJ=($)=>X8($),tJ=gq,eJ=($)=>u0($),X4=BigInt(0),MD=BigInt(1);function i0($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function O4($){if(typeof $==="bigint"){if(!Q4($))throw RangeError("positive bigint expected, got "+$)}else RD($);return $}function R0($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function _8($){let U=O4($).toString(16);return U.length&1?"0"+U:U}function og($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?X4:BigInt("0x"+$)}function JJ($){return og(LQ($))}function Q0($){return og(LQ(gI(t$($)).reverse()))}function q4($,U){if(y$(U),U===0)throw RangeError("zero length");$=O4($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return X8(J.padStart(U*2,"0"))}function b8($,U){return q4($,U).reverse()}function ag($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function gI($){return Uint8Array.from(S$($))}function D4($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var Q4=($)=>typeof $==="bigint"&&X4<=$;function ML($,U,J){return Q4($)&&Q4(U)&&Q4(J)&&U<=$&&$<J}function p0($,U,J,G){if(!ML(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function sJ($){if($<X4)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>X4;$>>=MD,U+=1);return U}var f8=($)=>(MD<<BigInt($))-MD;function tg($,U,J){if(y$($,"hashLen"),y$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,JU(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=w();let R=q.slice();j.push(R),N+=q.length}return JU(...j)};return(N,j)=>{W(),v(N);let R=void 0;while((R=j(Z()))===void 0)v();return W(),R}}function aU($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var jD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GU=BigInt(0),x$=BigInt(1),GJ=BigInt(2),U5=BigInt(3),I5=BigInt(4),J5=BigInt(5),RL=BigInt(7),G5=BigInt(8),jL=BigInt(9),Q5=BigInt(16);function F$($,U){if(U<=GU)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=GU?J:U+J}function tU($,U,J){if(U<GU)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >GU)G*=G,G%=J;return G}function eg($,U){if($===GU)throw Error("invert: expected non-zero number");if(U<=GU)throw Error("invert: expected positive modulus, got "+U);let J=F$($,U),G=U,I=GU,Q=x$,X=x$,O=GU;while(J!==GU){let D=G/J,z=G-J*D,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==x$)throw Error("invert: does not exist");return F$(I,U)}function HD($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function X5($,U){let J=$,G=(J.ORDER+x$)/I5,I=J.pow(U,G);return HD(J,I,U),I}function HL($,U){let J=$,G=(J.ORDER-J5)/G5,I=J.mul(U,GJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,GJ),Q),q=J.mul(X,J.sub(O,J.ONE));return HD(J,q,U),q}function TL($){let U=z4($),J=O5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+RL)/Q5;return(O,q)=>{let D=O,z=D.pow(q,X),W=D.mul(z,G),w=D.mul(z,I),v=D.mul(z,Q),Z=D.eql(D.sqr(W),q),V=D.eql(D.sqr(w),q);z=D.cmov(z,W,Z),W=D.cmov(v,w,V);let N=D.eql(D.sqr(W),q),j=D.cmov(z,W,N);return HD(D,j,q),j}}function O5($){if($<U5)throw Error("sqrt is not defined for small field");let U=$-x$,J=0;while(U%GJ===GU)U/=GJ,J++;let G=GJ,I=z4($);while(sg(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return X5;let Q=I.pow(G,U),X=(U+x$)/GJ;return function(q,D){let z=q;if(z.is0(D))return D;if(sg(z,D)!==1)throw Error("Cannot find square root");let W=J,w=z.mul(z.ONE,Q),v=z.pow(D,U),Z=z.pow(D,X);while(!z.eql(v,z.ONE)){if(z.is0(v))return z.ZERO;let V=1,N=z.sqr(v);while(!z.eql(N,z.ONE))if(V++,N=z.sqr(N),V===W)throw Error("Cannot find square root");let j=x$<<BigInt(W-V-1),R=z.pow(w,j);W=V,w=z.sqr(R),v=z.mul(v,w),Z=z.mul(Z,R)}return Z}}function KL($){if($%I5===U5)return X5;if($%G5===J5)return HL;if($%Q5===jL)return TL($);return O5($)}var o0=($,U)=>(F$($,U)&x$)===x$,AL=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function TD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=AL.reduce((G,I)=>{return G[I]="function",G},U);if(aU($,J),R0($.BYTES,"BYTES"),R0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=x$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function PL($,U,J){let G=$;if(J<GU)throw Error("invalid exponent, negatives unsupported");if(J===GU)return G.ONE;if(J===x$)return U;let I=G.ONE,Q=U;while(J>GU){if(J&x$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=x$}return I}function k8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function sg($,U){let J=$,G=(J.ORDER-x$)/GJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function BL($,U){if(U!==void 0)RD(U);if($<=GU)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=sJ($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var $5=new WeakMap;class KD{ORDER;BITS;BYTES;isLE;ZERO=GU;ONE=x$;_lengths;_mod;constructor($,U={}){if($<=x$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=BL($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return F$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return GU<=$&&$<this.ORDER}is0($){return $===GU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&x$)===x$}neg($){return F$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return F$($*$,this.ORDER)}add($,U){return F$($+U,this.ORDER)}sub($,U){return F$($-U,this.ORDER)}mul($,U){return F$($*U,this.ORDER)}pow($,U){return PL(this,$,U)}div($,U){return F$($*eg(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return eg($,this.ORDER)}sqrt($){let U=$5.get(this);if(!U)$5.set(this,U=KL(this.ORDER));return U(this,$)}toBytes($){return this.isLE?b8($,this.BYTES):q4($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?Q0($):JJ($);if(X)O=F$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return k8(this,$)}cmov($,U,J){return i0(J,"condition"),J?U:$}}Object.freeze(KD.prototype);function z4($,U={}){return new KD($,U)}function q5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=x$)throw Error("field order must be greater than 1");let U=sJ($-x$);return Math.ceil(U/8)}function AD($){let U=q5($);return U+Math.ceil(U/2)}function D5($,U,J=!1){S$($);let G=$.length,I=q5(U),Q=Math.max(AD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?Q0($):JJ($),O=F$(X,U-x$)+x$;return J?b8(O,I):q4(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $G=BigInt(0),QJ=BigInt(1);function F8($,U){let J=U.negate();return $?J:U}function XJ($,U){let J=k8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function w5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function PD($,U){w5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=f8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function z5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=QJ;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var BD=new WeakMap,v5=new WeakMap;function LD($){return v5.get($)||1}function Y5($){if($!==$G)throw Error("invalid wNAF")}class u8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>$G){if(U&QJ)J=J.add(G);G=G.double(),U>>=QJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=PD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=PD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=z5(J,X,Q);if(J=O,D)I=I.add(F8(W,U[w]));else G=G.add(F8(z,U[q]))}return Y5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=PD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===$G)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=z5(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return Y5(J),G}getPrecomputes($,U,J){let G=BD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);BD.set(U,G)}}return G}cached($,U,J){let G=LD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=LD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){w5(U,this.bits),v5.set($,U),BD.delete($)}hasCache($){return LD($)!==1}}function V5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>$G||G>$G){if(J&QJ)Q=Q.add(I);if(G&QJ)X=X.add(I);I=I.double(),J>>=QJ,G>>=QJ}return{p1:Q,p2:X}}function W5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return TD(U),U}else return z4($,{isLE:J})}function Y4($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>$G))throw Error(`CURVE.${q} must be positive bigint`)}let I=W5(U.p,J.Fp,G),Q=W5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function x8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function m8($,U){if(R0($),R0(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function LL($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function SL($){if(!tJ($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?D4($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function SD($,U,J,G){if(S$($),R0(J),U=SL(U),U.length>255)U=G(JU(D4("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=JU(U,m8(U.length,1)),q=new Uint8Array(Q),D=m8(J,2),z=Array(X),W=G(JU(q,$,D,m8(0,1),O));z[0]=G(JU(W,m8(1,1),O));for(let v=1;v<X;v++){let Z=[LL(W,z[v-1]),m8(v+1,1),O];z[v]=G(JU(...Z))}return JU(...z).slice(0,J)}var N5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z5=($,U)=>($+($>=0?U:-U)/M5)/U;function CL($,U,J){p0("scalar",$,j0,J);let[[G,I],[Q,X]]=U,O=Z5(X*$,J),q=Z5(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<j0,w=z<j0;if(W)D=-D;if(w)z=-z;let v=f8(Math.ceil(sJ(J)/2))+MI;if(D<j0||D>=v||z<j0||z>=v)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:W,k1:D,k2neg:w,k2:z}}function ED($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function CD($,U){aU($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(i0(J.lowS,"lowS"),i0(J.prehash,"prehash"),J.format!==void 0)ED(J.format);return J}class g5 extends Error{constructor($=""){super($)}}var X0={Err:g5,_tlv:{encode:($,U)=>{let{Err:J}=X0;if(R0($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=_8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?_8(I.length/2|128):"";return _8($)+Q+I+U},decode($,U){let{Err:J}=X0;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=X0;if(O4($),$<j0)throw new U("integer: negative integers are not allowed");let J=_8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=X0;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return JJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=X0,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=X0,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(X0._tlv);Object.freeze(X0._int);Object.freeze(X0);var j0=BigInt(0),MI=BigInt(1),M5=BigInt(2),W4=BigInt(3),EL=BigInt(4);function R5($,U={}){let J=Y4("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;aU(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=H5(G,I);function W(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(E,A,_){if(D&&A.is0())return Uint8Array.of(0);let{x:M,y:K}=A.toAffine(),H=G.toBytes(M);if(i0(_,"isCompressed"),_){W();let b=!G.isOdd(K);return JU(j5(b),H)}else return JU(Uint8Array.of(4),H,G.toBytes(K))}function v(E){S$(E,void 0,"Point");let{publicKey:A,publicKeyUncompressed:_}=z,M=E.length,K=E[0],H=E.subarray(1);if(D&&M===1&&K===0)return{x:G.ZERO,y:G.ZERO};if(M===A&&(K===2||K===3)){let b=G.fromBytes(H);if(!G.isValid(b))throw Error("bad point: is not on curve, wrong x");let P=N(b),F;try{F=G.sqrt(P)}catch($$){let X$=$$ instanceof Error?": "+$$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}W();let y=G.isOdd(F);if((K&1)===1!==y)F=G.neg(F);return{x:b,y:F}}else if(M===_&&K===4){let b=G.BYTES,P=G.fromBytes(H.subarray(0,b)),F=G.fromBytes(H.subarray(b,b*2));if(!j(P,F))throw Error("bad point: is not on curve");return{x:P,y:F}}else throw Error(`bad point: got length ${M}, expected compressed=${A} or uncompressed=${_}`)}let Z=U.toBytes===void 0?w:U.toBytes,V=U.fromBytes===void 0?v:U.fromBytes;function N(E){let A=G.sqr(E),_=G.mul(A,E);return G.add(G.add(_,G.mul(E,Q.a)),Q.b)}function j(E,A){let _=G.sqr(A),M=N(E);return G.eql(_,M)}if(!j(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let R=G.mul(G.pow(Q.a,W4),EL),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(R,S)))throw Error("bad curve params: a or b");function L(E,A,_=!1){if(!G.isValid(A)||_&&G.is0(A))throw Error(`bad point coordinate ${E}`);return A}function k(E){if(!(E instanceof B))throw Error("Weierstrass Point expected")}function x(E){if(!q||!q.basises)throw Error("no endo");return CL(E,q.basises,I.ORDER)}function h(E,A,_,M,K){return _=new B(G.mul(_.X,E),_.Y,_.Z),A=F8(M,A),_=F8(K,_),A.add(_)}class B{static BASE=new B(Q.Gx,Q.Gy,G.ONE);static ZERO=new B(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(E,A,_){this.X=L("x",E),this.Y=L("y",A,!0),this.Z=L("z",_),Object.freeze(this)}static CURVE(){return Q}static fromAffine(E){let{x:A,y:_}=E||{};if(!E||!G.isValid(A)||!G.isValid(_))throw Error("invalid affine point");if(E instanceof B)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(_))return B.ZERO;return new B(A,_,G.ONE)}static fromBytes(E){let A=B.fromAffine(V(S$(E,void 0,"point")));return A.assertValidity(),A}static fromHex(E){return B.fromBytes(aJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,A=!0){if(a.createCache(this,E),!A)this.multiply(W4);return this}assertValidity(){let E=this;if(E.is0()){if(U.allowInfinityPoint&&G.is0(E.X)&&G.eql(E.Y,G.ONE)&&G.is0(E.Z))return;throw Error("bad point: ZERO")}let{x:A,y:_}=E.toAffine();if(!G.isValid(A)||!G.isValid(_))throw Error("bad point: x or y not field elements");if(!j(A,_))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){k(E);let{X:A,Y:_,Z:M}=this,{X:K,Y:H,Z:b}=E,P=G.eql(G.mul(A,b),G.mul(K,M)),F=G.eql(G.mul(_,b),G.mul(H,M));return P&&F}negate(){return new B(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:A}=Q,_=G.mul(A,W4),{X:M,Y:K,Z:H}=this,b=G.ZERO,P=G.ZERO,F=G.ZERO,y=G.mul(M,M),n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(M,K);return X$=G.add(X$,X$),F=G.mul(M,H),F=G.add(F,F),b=G.mul(E,F),P=G.mul(_,$$),P=G.add(b,P),b=G.sub(n,P),P=G.add(n,P),P=G.mul(b,P),b=G.mul(X$,b),F=G.mul(_,F),$$=G.mul(E,$$),X$=G.sub(y,$$),X$=G.mul(E,X$),X$=G.add(X$,F),F=G.add(y,y),y=G.add(F,y),y=G.add(y,$$),y=G.mul(y,X$),P=G.add(P,y),$$=G.mul(K,H),$$=G.add($$,$$),y=G.mul($$,X$),b=G.sub(b,y),F=G.mul($$,n),F=G.add(F,F),F=G.add(F,F),new B(b,P,F)}add(E){k(E);let{X:A,Y:_,Z:M}=this,{X:K,Y:H,Z:b}=E,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=Q.a,$$=G.mul(Q.b,W4),X$=G.mul(A,K),q$=G.mul(_,H),W$=G.mul(M,b),N$=G.add(A,_),v$=G.add(K,H);N$=G.mul(N$,v$),v$=G.add(X$,q$),N$=G.sub(N$,v$),v$=G.add(A,M);let V$=G.add(K,b);return v$=G.mul(v$,V$),V$=G.add(X$,W$),v$=G.sub(v$,V$),V$=G.add(_,M),P=G.add(H,b),V$=G.mul(V$,P),P=G.add(q$,W$),V$=G.sub(V$,P),y=G.mul(n,v$),P=G.mul($$,W$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),F=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),W$=G.mul(n,W$),v$=G.mul($$,v$),q$=G.add(q$,W$),W$=G.sub(X$,W$),W$=G.mul(n,W$),v$=G.add(v$,W$),X$=G.mul(q$,v$),F=G.add(F,X$),X$=G.mul(V$,v$),P=G.mul(N$,P),P=G.sub(P,X$),X$=G.mul(N$,q$),y=G.mul(V$,y),y=G.add(y,X$),new B(P,F,y)}subtract(E){return k(E),this.add(E.negate())}is0(){return this.equals(B.ZERO)}multiply(E){let{endo:A}=U;if(!I.isValidNot0(E))throw RangeError("invalid scalar: out of range");let _,M,K=(H)=>a.cached(this,H,(b)=>XJ(B,b));if(A){let{k1neg:H,k1:b,k2neg:P,k2:F}=x(E),{p:y,f:n}=K(b),{p:$$,f:X$}=K(F);M=n.add(X$),_=h(A.beta,y,$$,H,P)}else{let{p:H,f:b}=K(E);_=H,M=b}return XJ(B,[_,M])[0]}multiplyUnsafe(E){let{endo:A}=U,_=this,M=E;if(!I.isValid(M))throw RangeError("invalid scalar: out of range");if(M===j0||_.is0())return B.ZERO;if(M===MI)return _;if(a.hasCache(this))return this.multiply(M);if(A){let{k1neg:K,k1:H,k2neg:b,k2:P}=x(M),{p1:F,p2:y}=V5(B,_,H,P);return h(A.beta,F,y,K,b)}else return a.unsafe(_,M)}toAffine(E){let A=this,_=E,{X:M,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:M,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(M,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}isTorsionFree(){let{isTorsionFree:E}=U;if(X===MI)return!0;if(E)return E(B,this);return a.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:E}=U;if(X===MI)return this;if(E)return E(B,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===MI)return this.is0();return this.clearCofactor().is0()}toBytes(E=!0){return i0(E,"isCompressed"),this.assertValidity(),Z(B,this,E)}toHex(E=!0){return oJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let m=I.BITS,a=new u8(B,U.endo?Math.ceil(m/2):m);if(m>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function j5($){return Uint8Array.of($?2:3)}function H5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function _L($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?eJ:U.randomBytes,I=Object.assign(H5($.Fp,J),{seed:Math.max(AD(J.ORDER),16)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=v.length;if(Z===!0&&j!==V)return!1;if(Z===!1&&j!==N)return!1;return!!$.fromBytes(v)}catch(j){return!1}}function O(v){return v=v===void 0?G(I.seed):v,D5(S$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I,j=J._lengths;if(!tJ(v))return;let R=S$(v,void 0,"key").length,S=R===V||R===N,L=R===Z||!!j?.includes(R);if(S&&L)return;return S}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=x8(O,q);return Object.freeze(W),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function T5($,U,J={}){let G=U;F0(G),aU(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?eJ:J.randomBytes,Q=J.hmac===void 0?(K,H)=>v0(G,K,H):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z}=_L($,J),V={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=q*M5+MI<X.ORDER;function j(K){let H=q>>MI;return K>H}function R(K,H){if(!O.isValidNot0(H))throw Error(`invalid signature ${K}: out of range 1..Point.Fn.ORDER`);return H}function S(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(K,H){ED(H);let b=Z.signature,P=H==="compact"?b:H==="recovered"?b+1:void 0;return S$(K,P)}class k{r;s;recovery;constructor(K,H,b){if(this.r=R("r",K),this.s=R("s",H),b!=null){if(S(),![0,1,2,3].includes(b))throw Error("invalid recovery id");this.recovery=b}Object.freeze(this)}static fromBytes(K,H=V.format){L(K,H);let b;if(H==="der"){let{r:n,s:$$}=X0.toSig(S$(K));return new k(n,$$)}if(H==="recovered")b=K[0],H="compact",K=K.subarray(1);let P=Z.signature/2,F=K.subarray(0,P),y=K.subarray(P,P*2);return new k(O.fromBytes(F),O.fromBytes(y),b)}static fromHex(K,H){return this.fromBytes(aJ(K),H)}assertRecovery(){let{recovery:K}=this;if(K==null)throw Error("invalid recovery id: must be present");return K}addRecoveryBit(K){return new k(this.r,this.s,K)}recoverPublicKey(K){let{r:H,s:b}=this,P=this.assertRecovery(),F=P===2||P===3?H+q:H;if(!X.isValid(F))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(F),n=$.fromBytes(JU(j5((P&1)===0),y)),$$=O.inv(F),X$=h(S$(K,void 0,"msgHash")),q$=O.create(-X$*$$),W$=O.create(b*$$),N$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(W$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return j(this.s)}toBytes(K=V.format){if(ED(K),K==="der")return aJ(X0.hexFromSig(this));let{r:H,s:b}=this,P=O.toBytes(H),F=O.toBytes(b);if(K==="recovered")return S(),JU(Uint8Array.of(this.assertRecovery()),P,F);return JU(P,F)}toHex(K){return oJ(this.toBytes(K))}}Object.freeze(k.prototype),Object.freeze(k);let x=J.bits2int===void 0?function(H){if(H.length>8192)throw Error("input is too large");let b=JJ(H),P=H.length*8-D;return P>0?b>>BigInt(P):b}:J.bits2int,h=J.bits2int_modN===void 0?function(H){return O.create(x(H))}:J.bits2int_modN,B=f8(D);function m(K){return p0("num < 2^"+D,K,j0,B),O.toBytes(K)}function a(K,H){return S$(K,void 0,"message"),H?S$(G(K),void 0,"prehashed message"):K}function E(K,H,b){let{lowS:P,prehash:F,extraEntropy:y}=CD(b,V);K=a(K,F);let n=h(K),$$=O.fromBytes(H);if(!O.isValidNot0($$))throw Error("invalid private key");let X$=[m($$),m(n)];if(y!=null&&y!==!1){let v$=y===!0?I(Z.secretKey):y;X$.push(S$(v$,void 0,"extraEntropy"))}let q$=JU(...X$),W$=n;function N$(v$){let V$=x(v$);if(!O.isValidNot0(V$))return;let R$=O.inv(V$),b$=$.BASE.multiply(V$).toAffine(),k$=O.create(b$.x);if(k$===j0)return;let qU=O.create(R$*O.create(W$+k$*$$));if(qU===j0)return;let DU=(b$.x===k$?0:2)|Number(b$.y&MI),SU=qU;if(P&&j(qU))SU=O.neg(qU),DU^=1;return new k(k$,SU,N?void 0:DU)}return{seed:q$,k2sig:N$}}function A(K,H,b={}){let{seed:P,k2sig:F}=E(K,H,b);return tg(G.outputLen,O.BYTES,Q)(P,F).toBytes(b.format)}function _(K,H,b,P={}){let{lowS:F,prehash:y,format:n}=CD(P,V);if(b=S$(b,void 0,"publicKey"),H=a(H,y),!tJ(K)){let $$=K instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+$$)}L(K,n);try{let $$=k.fromBytes(K,n),X$=$.fromBytes(b);if(F&&$$.hasHighS())return!1;let{r:q$,s:W$}=$$,N$=h(H),v$=O.inv(W$),V$=O.create(N$*v$),R$=O.create(q$*v$),b$=$.BASE.multiplyUnsafe(V$).add(X$.multiplyUnsafe(R$));if(b$.is0())return!1;return O.create(b$.x)===q$}catch($$){return!1}}function M(K,H,b={}){let{prehash:P}=CD(b,V);return H=a(H,P),k.fromBytes(K,"recovered").recoverPublicKey(H).toBytes()}return Object.freeze({keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z,Point:$,sign:A,verify:_,recoverPublicKey:M,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bL=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var fL=R5(bL),UG=T5(fL,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RI=BigInt(0),EU=BigInt(1),_D=BigInt(2),kL=BigInt(8);function FL($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function K5($,U={}){let J=U,G=Y4("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;aU(J,{},{uvRatio:"function"});let q=_D<<BigInt(Q.BYTES*8)-EU,D=(V)=>I.create(V),z=J.uvRatio===void 0?(V,N)=>{try{return{isValid:!0,value:I.sqrt(I.div(V,N))}}catch(j){return{isValid:!1,value:RI}}}:J.uvRatio;if(!FL(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function W(V,N,j=!1){let R=j?EU:RI;return p0("coordinate "+V,N,R,q),N}function w(V){if(!(V instanceof v))throw Error("EdwardsPoint expected")}class v{static BASE=new v(X.Gx,X.Gy,EU,D(X.Gx*X.Gy));static ZERO=new v(RI,EU,EU,RI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(V,N,j,R){this.X=W("x",V),this.Y=W("y",N),this.Z=W("z",j,!0),this.T=W("t",R),Object.freeze(this)}static CURVE(){return X}static fromAffine(V){if(V instanceof v)throw Error("extended point not allowed");let{x:N,y:j}=V||{};return W("x",N),W("y",j),new v(N,j,EU,D(N*j))}static fromBytes(V,N=!1){let j=I.BYTES,{a:R,d:S}=X;V=gI(S$(V,j,"point")),i0(N,"zip215");let L=gI(V),k=V[j-1];L[j-1]=k&-129;let x=Q0(L),h=N?q:I.ORDER;p0("point.y",x,RI,h);let B=D(x*x),m=D(B-EU),a=D(S*B-R),{isValid:E,value:A}=z(m,a);if(!E)throw Error("bad point: invalid y coordinate");let _=(A&EU)===EU,M=(k&128)!==0;if(!N&&A===RI&&M)throw Error("bad point: x=0 and x_0=1");if(M!==_)A=D(-A);return v.fromAffine({x:A,y:x})}static fromHex(V,N=!1){return v.fromBytes(aJ(V),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,N=!0){if(Z.createCache(this,V),!N)this.multiply(_D);return this}assertValidity(){let V=this,{a:N,d:j}=X;if(V.is0())throw Error("bad point: ZERO");let{X:R,Y:S,Z:L,T:k}=V,x=D(R*R),h=D(S*S),B=D(L*L),m=D(B*B),a=D(x*N),E=D(B*D(a+h)),A=D(m+D(j*D(x*h)));if(E!==A)throw Error("bad point: equation left != right (1)");let _=D(R*S),M=D(L*k);if(_!==M)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:N,Y:j,Z:R}=this,{X:S,Y:L,Z:k}=V,x=D(N*k),h=D(S*R),B=D(j*k),m=D(L*R);return x===h&&B===m}is0(){return this.equals(v.ZERO)}negate(){return new v(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=X,{X:N,Y:j,Z:R}=this,S=D(N*N),L=D(j*j),k=D(_D*D(R*R)),x=D(V*S),h=N+j,B=D(D(h*h)-S-L),m=x+L,a=m-k,E=x-L,A=D(B*a),_=D(m*E),M=D(B*E),K=D(a*m);return new v(A,_,K,M)}add(V){w(V);let{a:N,d:j}=X,{X:R,Y:S,Z:L,T:k}=this,{X:x,Y:h,Z:B,T:m}=V,a=D(R*x),E=D(S*h),A=D(k*j*m),_=D(L*B),M=D((R+S)*(x+h)-a-E),K=_-A,H=_+A,b=D(E-N*a),P=D(M*K),F=D(H*b),y=D(M*b),n=D(K*H);return new v(P,F,n,y)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!Q.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f:j}=Z.cached(this,V,(R)=>XJ(v,R));return XJ(v,[N,j])[0]}multiplyUnsafe(V){if(!Q.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===RI)return v.ZERO;if(this.is0()||V===EU)return this;return Z.unsafe(this,V,(N)=>XJ(v,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Z.unsafe(this,X.n).is0()}toAffine(V){let N=this,j=V,{X:R,Y:S,Z:L}=N,k=N.is0();if(j==null)j=k?kL:I.inv(L);let x=D(R*j),h=D(S*j),B=I.mul(L,j);if(k)return{x:RI,y:EU};if(B!==EU)throw Error("invZ was invalid");return{x,y:h}}clearCofactor(){if(O===EU)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:V,y:N}=this.toAffine(),j=I.toBytes(N);return j[j.length-1]|=V&EU?128:0,j}toHex(){return oJ(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Z=new u8(v,Q.BITS);if(Q.BITS>=8)v.BASE.precompute(8);return Object.freeze(v.prototype),Object.freeze(v),v}class bD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){jD()}static fromHex($){jD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return oJ(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var y8=BigInt(0),IG=BigInt(1),w4=BigInt(2);function uL($){return aU($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function A5($){let U=uL($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?eJ:X,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?w4**BigInt(254):w4**BigInt(447),Z=O?BigInt(8)*w4**BigInt(251)-IG:BigInt(4)*w4**BigInt(445)-IG,V=v+Z+IG,N=(M)=>F$(M,J),j=R(W);function R(M){return b8(N(M),z)}function S(M){let K=gI(S$(M,z,"uCoordinate"));if(O)K[31]&=127;return N(Q0(K))}function L(M){return Q0(I(gI(S$(M,z,"scalar"))))}function k(M,K){let H=a(S(K),L(M));if(H===y8)throw Error("invalid private or public key received");return R(H)}function x(M){return k(M,j)}let h=x,B=k;function m(M,K,H){let b=N(M*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(M,K){p0("u",M,y8,J),p0("scalar",K,v,V);let H=K,b=M,P=IG,F=y8,y=M,n=IG,$$=y8;for(let q$=BigInt(D-1);q$>=y8;q$--){let W$=H>>q$&IG;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,w0=DU-SU;y=N(W0*W0),n=N(b*N(w0*w0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(M)=>{return M=M===void 0?q(z):M,S$(M,E.seed,"seed"),M},_={randomSecretKey:A};return Object.freeze(E),Object.freeze(_),Object.freeze({keygen:x8(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var xL=BigInt(0),a0=BigInt(1),P5=BigInt(2),mL=BigInt(3),yL=BigInt(5),rL=BigInt(8),qJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),uD=(()=>({p:qJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:rL,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function S5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=qJ,O=$*$%Q*$%Q,q=tU(O,P5,Q)*O%Q,D=tU(q,a0,Q)*$%Q,z=tU(D,yL,Q)*D%Q,W=tU(z,U,Q)*z%Q,w=tU(W,J,Q)*W%Q,v=tU(w,G,Q)*w%Q,Z=tU(v,I,Q)*v%Q,V=tU(Z,I,Q)*v%Q,N=tU(V,U,Q)*z%Q;return{pow_p_5_8:tU(N,P5,Q)*$%Q,b2:O}}function hL($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var fD=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function xD($,U){let J=qJ,G=F$(U*U*U,J),I=F$(G*G*U,J),Q=S5($*I).pow_p_5_8,X=F$($*G*Q,J),O=F$(U*X*X,J),q=X,D=F$(X*fD,J),z=O===$,W=O===F$(-$,J),w=O===F$(-$*fD,J);if(z)X=q;if(W||w)X=D;if(o0(X,J))X=F$(-X,J);return{isValid:z||W,value:X}}var OJ=K5(uD,{uvRatio:xD}),jI=(()=>OJ.Fp)(),C5=(()=>OJ.Fn)();var v4=(()=>{let $=qJ;return A5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=S5(U);return F$(tU(J,mL,$)*G,$)},adjustScalarBytes:hL})})();var kD=fD,dL=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),lL=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),nL=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),cL=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),B5=($)=>xD(a0,$),iL=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),FD=($)=>jI.create(Q0($)&iL);function L5($){let{d:U}=uD,J=qJ,G=(j)=>jI.create(j),I=G(kD*$*$),Q=G((I+a0)*nL),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=xD(Q,O),z=G(D*$);if(!o0(z,J))z=G(-z);if(!q)D=z;if(!q)X=I;let W=G(X*(I-a0)*cL-O),w=D*D,v=G((D+D)*O),Z=G(W*dL),V=G(a0-w),N=G(a0+w);return new OJ(G(v*N),G(V*Z),G(Z*N),G(v*V))}class TU extends bD{static BASE=(()=>new TU(OJ.BASE))();static ZERO=(()=>new TU(OJ.ZERO))();static Fp=(()=>jI)();static Fn=(()=>C5)();constructor($){super($)}static fromAffine($){return new TU(OJ.fromAffine($))}assertSame($){if(!($ instanceof TU))throw Error("RistrettoPoint expected")}init($){return new TU($)}static fromBytes($){t$($,32);let{a:U,d:J}=uD,G=qJ,I=(S)=>jI.create(S),Q=FD($);if(!ag(jI.toBytes(Q),$)||o0(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(a0+U*X),q=I(a0-U*X),D=I(O*O),z=I(q*q),W=I(U*J*D-z),{isValid:w,value:v}=B5(I(W*z)),Z=I(v*q),V=I(v*Z*W),N=I((Q+Q)*Z);if(o0(N,G))N=I(-N);let j=I(O*V),R=I(N*j);if(!w||o0(R,G)||j===xL)throw Error("invalid ristretto255 encoding 2");return new TU(new OJ(N,j,a0,R))}static fromHex($){return TU.fromBytes(X8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=qJ,Q=(V)=>jI.create(V),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=B5(Q(X*q)),z=Q(D*X),W=Q(D*O),w=Q(z*W*G),v;if(o0(G*w,I)){let V=Q(U*kD),N=Q($*kD);$=V,U=N,v=Q(z*lL)}else v=W;if(o0($*w,I))U=Q(-U);let Z=Q((J-U)*v);if(o0(Z,I))Z=Q(-Z);return jI.toBytes(Z)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>jI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(TU.ZERO)}}Object.freeze(TU.BASE);Object.freeze(TU.ZERO);Object.freeze(TU.prototype);Object.freeze(TU);var pL=Object.freeze({Point:TU,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=SD($,J,64,_Q);return pL.deriveToCurve(G)},hashToScalar($,U={DST:N5}){let J=SD($,U.DST,64,_Q);return C5.create(Q0(J))},deriveToCurve($){t$($,64);let U=FD($.subarray(0,32)),J=L5(U),G=FD($.subarray(32,64)),I=L5(G);return new TU(J.add(I))}});var E5=!1,oL=!1;async function _5($,U){if(oL)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function V4($,U){return await _5(async()=>{let J=mD($)?$:await tL($),G=await crypto.subtle.importKey("raw",eL(U),{name:"X25519"},E5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return v4.scalarMult($,U)})}async function r8($){return await _5(async()=>{return V4($,v4.GuBytes)},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return v4.scalarMultBase($)})}var aL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function tL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([...aL,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},E5,["deriveBits"])}function mD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function eL($){return $}class yD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),$S(DJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=DJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:DJ(this.transcript)}}}function $S($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function DJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function JG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function N4($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function rD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function b5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function f5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=DJ(G),X=Q.subarray(0,U),O=JG($,Q.subarray(U));return{data:X,rest:O}}class H0{args;body;constructor($,U){this.args=$,this.body=U}}async function US($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=WU.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=DJ(G);return{s:new H0(J,I)}}async function k5($){let U=new yD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await US(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=WU.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:JG($,O)}}}function hD($){let U=[];U.push(`age-encryption.org/v1
+`)}function y7($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function MU($,U){let J=$[U];return typeof J==="string"?J:void 0}function KQ($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var AQ={name:"@rizom/ops",version:"0.2.0-alpha.283",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as WS,mkdirSync as wS,readFileSync as Xz,writeFileSync as Oz}from"fs";import{dirname as vS,join as l5}from"path";function gq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function y$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function t$($,U,J=""){let G=gq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(y$($.outputLen),y$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function uJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function PQ($,U){t$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function BQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function RU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function I0($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var EP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function _P($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function bP($){for(let U=0;U<$.length;U++)$[U]=_P($[U]);return $}var Mq=EP?($)=>$:bP,h7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),fP=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function LQ($){if(t$($),h7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=fP[$[J]];return U}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function r7($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function X8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(h7)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=r7($.charCodeAt(Q)),O=r7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function kP($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Rq($,U=""){if(typeof $==="string")return kP($);return t$($,void 0,U)}function jq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];t$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function SQ($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function Hq($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function u0($=32){y$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Tq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Kq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(F0($),t$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),RU(G)}update($){return uJ(this),this.iHash.update($),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var v0=(()=>{let $=(U,J,G)=>new Kq(U,J).update(G).digest();return $.create=(U,J)=>new Kq(U,J),$})();function O8($,U,J){if(F0($),J===void 0)J=new Uint8Array($.outputLen);return v0($,J,U)}var Aq=Uint8Array.of(0),d7=Uint8Array.of();function Pq($,U,J,G=32){F0($),y$(G,"length"),t$(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=d7;else t$(J,void 0,"info");let X=new Uint8Array(Q*I),O=v0.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)Aq[0]=z+1,q.update(z===0?d7:D).update(J).update(Aq).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),RU(D,Aq),X.slice(0,G)}var GI=($,U,J,G,I)=>Pq($,O8($,U,J),G,I);function l7($,U,J){return $&U^~$&J}function n7($,U,J){return $&U^$&J^U&J}class CQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){uJ(this),t$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=xJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,RU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=xJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var x0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),e$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),s$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EQ=BigInt(4294967295),c7=BigInt(32);function FP($,U=!1){if(U)return{h:Number($&EQ),l:Number($>>c7&EQ)};return{h:Number($>>c7&EQ)|0,l:Number($&EQ)|0}}function i7($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=FP($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Bq=($,U,J)=>$>>>J,Lq=($,U,J)=>$<<32-J|U>>>J,dI=($,U,J)=>$>>>J|U<<32-J,lI=($,U,J)=>$<<32-J|U>>>J,q8=($,U,J)=>$<<64-J|U>>>J-32,D8=($,U,J)=>$>>>J-32|U<<64-J;function V0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var p7=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),o7=($,U,J,G)=>U+J+G+($/4294967296|0)|0,a7=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),t7=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,e7=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),s7=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var xP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QI=new Uint32Array(64);class Sq extends CQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)QI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=QI[z-15],w=QI[z-2],v=I0(W,7)^I0(W,18)^W>>>3,Z=I0(w,17)^I0(w,19)^w>>>10;QI[z]=Z+QI[z-7]+v+QI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=I0(X,6)^I0(X,11)^I0(X,25),w=D+W+l7(X,O,q)+xP[z]+QI[z]|0,Z=(I0(J,2)^I0(J,13)^I0(J,22))+n7(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){RU(QI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),RU(this.buffer)}}class $Z extends Sq{A=x0[0]|0;B=x0[1]|0;C=x0[2]|0;D=x0[3]|0;E=x0[4]|0;F=x0[5]|0;G=x0[6]|0;H=x0[7]|0;constructor(){super(32)}}class mP extends Sq{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var UZ=(()=>i7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),yP=(()=>UZ[0])(),rP=(()=>UZ[1])(),XI=new Uint32Array(80),OI=new Uint32Array(80);class z8 extends CQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)XI[R]=$.getUint32(U),OI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=XI[R-15]|0,L=OI[R-15]|0,k=dI(S,L,1)^dI(S,L,8)^Bq(S,L,7),x=lI(S,L,1)^lI(S,L,8)^Lq(S,L,7),h=XI[R-2]|0,B=OI[R-2]|0,m=dI(h,B,19)^q8(h,B,61)^Bq(h,B,6),a=lI(h,B,19)^D8(h,B,61)^Lq(h,B,6),E=a7(x,a,OI[R-7],OI[R-16]),A=t7(E,k,m,XI[R-7],XI[R-16]);XI[R]=A|0,OI[R]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:j}=this;for(let R=0;R<80;R++){let S=dI(z,W,14)^dI(z,W,18)^q8(z,W,41),L=lI(z,W,14)^lI(z,W,18)^D8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=e7(j,L,x,rP[R],OI[R]),B=s7(h,N,S,k,yP[R],XI[R]),m=h|0,a=dI(J,G,28)^q8(J,G,34)^q8(J,G,39),E=lI(J,G,28)^D8(J,G,34)^D8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=Z|0,j=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=V0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=p7(m,E,_);J=o7(M,B,a,A),G=M|0}({h:J,l:G}=V0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=V0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=V0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=V0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=V0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=V0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=V0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:j}=V0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,j)}roundClean(){RU(XI,OI)}destroy(){this.destroyed=!0,RU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class IZ extends z8{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(64)}}class hP extends z8{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(48)}}var zU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),YU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class dP extends z8{Ah=zU[0]|0;Al=zU[1]|0;Bh=zU[2]|0;Bl=zU[3]|0;Ch=zU[4]|0;Cl=zU[5]|0;Dh=zU[6]|0;Dl=zU[7]|0;Eh=zU[8]|0;El=zU[9]|0;Fh=zU[10]|0;Fl=zU[11]|0;Gh=zU[12]|0;Gl=zU[13]|0;Hh=zU[14]|0;Hl=zU[15]|0;constructor(){super(28)}}class lP extends z8{Ah=YU[0]|0;Al=YU[1]|0;Bh=YU[2]|0;Bl=YU[3]|0;Ch=YU[4]|0;Cl=YU[5]|0;Dh=YU[6]|0;Dl=YU[7]|0;Eh=YU[8]|0;El=YU[9]|0;Fh=YU[10]|0;Fl=YU[11]|0;Gh=YU[12]|0;Gl=YU[13]|0;Hh=YU[14]|0;Hl=YU[15]|0;constructor(){super(32)}}var r$=Hq(()=>new $Z,Tq(1));var _Q=Hq(()=>new IZ,Tq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function uQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function _q($){if(!uQ($))throw TypeError("Uint8Array expected")}function OZ($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function qZ($){if(typeof $!=="function")throw TypeError("function expected");return!0}function qI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function W8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function fQ($){if(!Array.isArray($))throw TypeError("array expected")}function kQ($,U){if(!OZ(!0,U))throw TypeError(`${$}: array of strings expected`)}function bq($,U){if(!OZ(!1,U))throw TypeError(`${$}: array of numbers expected`)}function xU(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function mU($){let U=typeof $==="string"?$.split(""):$,J=U.length;kQ("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return fQ(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return fQ(I),I.map((Q)=>{qI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function yU($=""){return qI("join",$),{encode:(U)=>{return kQ("join.decode",U),U.join($)},decode:(U)=>{return qI("join.decode",U),U.split($)}}}function xQ($,U="="){return W8($),qI("padding",U),{encode(J){kQ("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){kQ("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function DZ($){return qZ($),{encode:(U)=>U,decode:(U)=>$(U)}}function JZ($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(fQ($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(W8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let z=Q[D],W=U*O,w=W+z;if(!Number.isSafeInteger(w)||W/U!==O||w-z!==W)throw Error("convertRadix: carry overflow");let v=w/J;O=w%J;let Z=Math.floor(v);if(Q[D]=Z,!Number.isSafeInteger(Z)||Z*J+O!==w)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!Z)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var zZ=($,U)=>U===0?$:zZ(U,$%U),FQ=($,U)=>$+(U-zZ($,U)),bQ=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function Cq($,U,J,G){if(fQ($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(FQ(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${FQ(U,J)}`);let I=0,Q=0,X=bQ[U],O=bQ[J]-1,q=[];for(let D of $){if(W8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let z=bQ[Q];if(z===void 0)throw Error("invalid carry");I&=z-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function nP($){W8($);let U=256;return{encode:(J)=>{if(!uQ(J))throw TypeError("radix.encode input should be Uint8Array");return JZ(Array.from(J),U,$)},decode:(J)=>{return bq("radix.decode",J),Uint8Array.from(JZ(J,$,U))}}}function cU($,U=!1){if(W8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(FQ(8,$)>32||FQ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!uQ(J))throw TypeError("radix2.encode input should be Uint8Array");return Cq(Array.from(J),8,$,!U)},decode:(J)=>{return bq("radix2.decode",J),Uint8Array.from(Cq(J,$,8,U))}}}function GZ($){return qZ($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Rd=Object.freeze(xU(cU(4),mU("0123456789ABCDEF"),yU(""))),jd=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),xQ(5),yU(""))),Hd=Object.freeze(xU(cU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),yU(""))),Td=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),xQ(5),yU(""))),Kd=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),yU(""))),Ad=Object.freeze(xU(cU(5),mU("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),yU(""),DZ(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),YZ=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),cP=/[\t\n\f\r ]/,WZ=($,U)=>{qI("base64",$);let J=U?"base64url":"base64";if($.length>0&&cP.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},fq=Object.freeze(YZ?{encode($){return _q($),$.toBase64()},decode($){return WZ($,!1)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),xQ(6),yU(""))),WU=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),yU(""))),Pd=Object.freeze(YZ?{encode($){return _q($),$.toBase64({alphabet:"base64url"})},decode($){return WZ($,!0)}}:xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),xQ(6),yU(""))),Bd=Object.freeze(xU(cU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),yU(""))),kq=($)=>xU(nP(58),mU($),yU("")),Ld=Object.freeze(kq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Sd=Object.freeze(kq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Cd=Object.freeze(kq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Eq=xU(mU("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),yU("")),QZ=[996825010,642813549,513874426,1027748829,705979059];function Y8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<QZ.length;G++)if((U>>G&1)===1)J^=QZ[G];return J}function XZ($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=Y8(I)^X>>5}I=Y8(I);for(let Q=0;Q<G;Q++)I=Y8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=Y8(I)^Q;for(let Q=0;Q<6;Q++)I=Y8(I);return I^=J,Eq.encode(Cq([I%bQ[30]],30,5,!1))}function wZ($){let U=$==="bech32"?1:734539939,J=cU(5),G=J.decode,I=J.encode,Q=GZ(G);function X(W,w,v=90){if(qI("bech32.encode prefix",W),uQ(w))w=Array.from(w);bq("bech32.encode",w);let Z=W.length;if(Z===0)throw TypeError(`Invalid prefix length ${Z}`);let V=Z+7+w.length;if(v!==!1&&V>v)throw TypeError(`Length ${V} exceeds limit ${v}`);let N=W.toLowerCase(),j=XZ(N,w,U);return`${N}1${Eq.encode(w)}${j}`}function O(W,w=90){qI("bech32.decode input",W);let v=W.length;if(v<8||w!==!1&&v>w)throw TypeError(`invalid string length: ${v} (${W}). Expected (8..${w})`);let Z=W.toLowerCase();if(W!==Z&&W!==W.toUpperCase())throw Error("String must be lowercase or uppercase");let V=Z.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let N=Z.slice(0,V),j=Z.slice(V+1);if(j.length<6)throw Error("Data must be at least 6 characters long");let R=Eq.decode(j).slice(0,-6),S=XZ(N,R,U);if(!j.endsWith(S))throw Error(`Invalid checksum in ${W}: expected "${S}"`);return{prefix:N,words:R}}let q=GZ(O);function D(W){let{prefix:w,words:v}=O(W,!1);return{prefix:w,words:v,bytes:G(v)}}function z(W,w){return X(W,I(w))}return{encode:X,decode:O,encodeFromBytes:z,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var rU=Object.freeze(wZ("bech32")),Ed=Object.freeze(wZ("bech32m"));var iP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),pP={encode($){return _q($),$.toHex()},decode($){return qI("hex",$),Uint8Array.fromHex($)}},_d=Object.freeze(iP?pP:xU(cU(4),mU("0123456789abcdef"),yU(""),DZ(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function aP($,U,J,G){F0($);let I=SQ({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(y$(Q,"c"),y$(X,"dkLen"),y$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Rq(U,"password"),D=Rq(J,"salt"),z=new Uint8Array(X),W=v0.create($,q),w=W._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:z,PRF:W,PRFSalt:w}}function tP($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return RU(I),J}function Fq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=aP($,U,J,G),D,z=new Uint8Array(4),W=xJ(z),w=new Uint8Array(O.outputLen);for(let v=1,Z=0;Z<Q;v++,Z+=O.outputLen){let V=X.subarray(Z,Z+O.outputLen);W.setInt32(0,v,!1),(D=q._cloneInto(D)).update(z).digestInto(w),V.set(w.subarray(0,V.length));for(let N=1;N<I;N++){O._cloneInto(D).update(w).digestInto(w);for(let j=0;j<V.length;j++)V[j]^=w[j]}}return tP(O,q,X,D,w)}function vZ($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],z=$[U++]^J[G++],W=$[U++]^J[G++],w=$[U++]^J[G++],v=$[U++]^J[G++],Z=$[U++]^J[G++],V=$[U++]^J[G++],N=$[U++]^J[G++],j=$[U++]^J[G++],R=$[U++]^J[G++],S=$[U++]^J[G++],L=$[U++]^J[G++],k=$[U++]^J[G++],x=X,h=O,B=q,m=D,a=z,E=W,A=w,_=v,M=Z,K=V,H=N,b=j,P=R,F=S,y=L,n=k;for(let $$=0;$$<8;$$+=2)a^=P$(x+P|0,7),M^=P$(a+x|0,9),P^=P$(M+a|0,13),x^=P$(P+M|0,18),K^=P$(E+h|0,7),F^=P$(K+E|0,9),h^=P$(F+K|0,13),E^=P$(h+F|0,18),y^=P$(H+A|0,7),B^=P$(y+H|0,9),A^=P$(B+y|0,13),H^=P$(A+B|0,18),m^=P$(n+b|0,7),_^=P$(m+n|0,9),b^=P$(_+m|0,13),n^=P$(b+_|0,18),h^=P$(x+m|0,7),B^=P$(h+x|0,9),m^=P$(B+h|0,13),x^=P$(m+B|0,18),A^=P$(E+a|0,7),_^=P$(A+E|0,9),a^=P$(_+A|0,13),E^=P$(a+_|0,18),b^=P$(H+K|0,7),M^=P$(b+H|0,9),K^=P$(M+b|0,13),H^=P$(K+M|0,18),P^=P$(n+y|0,7),F^=P$(P+n|0,9),y^=P$(F+P|0,13),n^=P$(y+F|0,18);I[Q++]=X+x|0,I[Q++]=O+h|0,I[Q++]=q+B|0,I[Q++]=D+m|0,I[Q++]=z+a|0,I[Q++]=W+E|0,I[Q++]=w+A|0,I[Q++]=v+_|0,I[Q++]=Z+M|0,I[Q++]=V+K|0,I[Q++]=N+H|0,I[Q++]=j+b|0,I[Q++]=R+P|0,I[Q++]=S+F|0,I[Q++]=L+y|0,I[Q++]=k+n|0}function uq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(vZ(J,X,$,U,J,Q),O>0)X+=16;vZ(J,Q,$,U+=16,J,X)}}function eP($,U,J){let G=SQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:z}=G;if(y$(I,"N"),y$(Q,"r"),y$(X,"p"),y$(O,"dkLen"),y$(q,"asyncTick"),y$(D,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let W=128*Q,w=W/4,v=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>v)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(v-1)*32/W)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(v-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let Z=W*(I+X+1);if(Z>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+Z+", maxmem="+D);let V=Fq(r$,$,U,{c:1,dkLen:W*X}),N=BQ(V),j=BQ(new Uint8Array(W*I)),R=BQ(new Uint8Array(W)),S=()=>{};if(z){let L=2*I*X,k=Math.max(Math.floor(L/1e4),1),x=0;S=()=>{if(x++,z&&(!(x%k)||x===L))z(x/L)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:w,V:j,B32:N,B:V,tmp:R,blockMixCb:S,asyncTick:q}}function sP($,U,J,G,I){let Q=Fq(r$,$,J,{c:1,dkLen:U});return RU(J,G,I),Q}function xq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:z,tmp:W,blockMixCb:w}=eP($,U,J);Mq(D);for(let v=0;v<Q;v++){let Z=O*v;for(let V=0;V<O;V++)q[V]=D[Z+V];for(let V=0,N=0;V<G-1;V++)uq(q,N,q,N+=O,I),w();uq(q,(G-1)*O,D,Z,I),w();for(let V=0;V<G;V++){let N=(D[Z+O-16]&G-1)>>>0;for(let j=0;j<O;j++)W[j]=D[Z+j]^q[N*O+j];uq(W,0,D,Z,I),w()}}return Mq(D),sP($,X,z,q,W)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function $B($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mQ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function mJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function n$($,U,J=""){let G=$B($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function mq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function VZ($,U,J=!1){n$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!yJ($))throw Error("invalid output, must be aligned")}function N0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function J0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function UB($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var nI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),IB=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var JB=($)=>{for(let U=0;U<$.length;U++)$[U]=IB($[U]);return $},y0=nI?($)=>$:JB;function NZ($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function ZZ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function gZ($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var MZ=($,U)=>{function J(G,...I){if(n$(G,void 0,"key"),$.nonceLength!==void 0){let z=I[0];n$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)n$(I[1],void 0,"AAD");let X=U(G,...I),O=(z,W)=>{if(W!==void 0){if(z!==2)throw Error("cipher output not supported");n$(W,void 0,"output")}},q=!1;return{encrypt(z,W){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,n$(z),O(X.encrypt.length,W),X.encrypt(z,W)},decrypt(z,W){if(n$(z),Q&&z.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,W),X.decrypt(z,W)}}}return Object.assign(J,$),J};function w8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(n$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!yJ(U))throw Error("invalid output, must be aligned");return U}function RZ($,U,J){mJ($),mJ(U),mQ(J);let G=new Uint8Array(16),I=UB(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function yJ($){return $.byteOffset%4===0}function rJ($){return Uint8Array.from(n$($))}var HZ=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),GB=(()=>y0(N0(HZ("expand 16-byte k"))))(),QB=(()=>y0(N0(HZ("expand 32-byte k"))))();function B$($,U){return $<<U|$>>>32-U}var v8=64,XB=16,yq=(()=>4294967295)(),jZ=Uint32Array.of();function OB($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(v8),z=N0(D),W=nI&&yJ(I)&&yJ(Q),w=W?N0(I):jZ,v=W?N0(Q):jZ;if(!nI){for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),y0(z),X>=yq)throw Error("arx: counter overflow");let V=Math.min(v8,q-Z);for(let N=0,j;N<V;N++)j=Z+N,Q[j]=I[j]^D[N];Z+=V}return}for(let Z=0;Z<q;X++){if($(U,J,G,z,X,O),X>=yq)throw Error("arx: counter overflow");let V=Math.min(v8,q-Z);if(W&&V===v8){let N=Z/4;if(Z%4!==0)throw Error("arx: invalid block position");for(let j=0,R;j<XB;j++)R=N+j,v[R]=w[R]^z[j];Z+=v8;continue}for(let N=0,j;N<V;N++)j=Z+N,Q[j]=I[j]^D[N];Z+=V}}function TZ($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=NZ({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return mJ(I),mJ(X),mQ(Q),mQ(J),(O,q,D,z,W=0)=>{n$(O,void 0,"key"),n$(q,void 0,"nonce"),n$(D,void 0,"data");let w=D.length;if(z=w8(w,z,!1),mJ(W),W<0||W>=yq)throw Error("arx: counter overflow");let v=[],Z=O.length,V,N;if(Z===32)v.push(V=rJ(O)),N=QB;else if(Z===16&&J)V=new Uint8Array(32),V.set(O),V.set(O,16),N=GB,v.push(V);else throw n$(O,32,"arx key"),Error("invalid key size");if(!nI||!yJ(q))v.push(q=rJ(q));let j=N0(V);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=q.subarray(0,16);if(nI)G(N,j,N0(L),j);else{let k=y0(Uint32Array.from(N));G(k,j,N0(L),j),J0(k),y0(j)}q=q.subarray(16)}else if(!nI)y0(j);let R=16-I;if(R!==q.length)throw Error(`arx: nonce must be ${R} or 16 bytes`);if(R!==12){let L=new Uint8Array(12);L.set(q,Q?0:12-q.length),q=L,v.push(q)}let S=y0(N0(q));try{return OB($,N,j,S,D,z,W,X),z}finally{J0(...v)}}}function $U($,U){return $[U++]&255|($[U++]&255)<<8}class KZ{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=rJ(n$($,32,"key"));let U=$U($,0),J=$U($,2),G=$U($,4),I=$U($,6),Q=$U($,8),X=$U($,10),O=$U($,12),q=$U($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=$U($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],z=Q[4],W=Q[5],w=Q[6],v=Q[7],Z=Q[8],V=Q[9],N=$U($,U+0),j=$U($,U+2),R=$U($,U+4),S=$U($,U+6),L=$U($,U+8),k=$U($,U+10),x=$U($,U+12),h=$U($,U+14),B=I[0]+(N&8191),m=I[1]+((N>>>13|j<<3)&8191),a=I[2]+((j>>>10|R<<6)&8191),E=I[3]+((R>>>7|S<<9)&8191),A=I[4]+((S>>>4|L<<12)&8191),_=I[5]+(L>>>1&8191),M=I[6]+((L>>>14|k<<2)&8191),K=I[7]+((k>>>11|x<<5)&8191),H=I[8]+((x>>>8|h<<8)&8191),b=I[9]+(h>>>5|G),P=0,F=P+B*X+m*(5*V)+a*(5*Z)+E*(5*v)+A*(5*w);P=F>>>13,F&=8191,F+=_*(5*W)+M*(5*z)+K*(5*D)+H*(5*q)+b*(5*O),P+=F>>>13,F&=8191;let y=P+B*O+m*X+a*(5*V)+E*(5*Z)+A*(5*v);P=y>>>13,y&=8191,y+=_*(5*w)+M*(5*W)+K*(5*z)+H*(5*D)+b*(5*q),P+=y>>>13,y&=8191;let n=P+B*q+m*O+a*X+E*(5*V)+A*(5*Z);P=n>>>13,n&=8191,n+=_*(5*v)+M*(5*w)+K*(5*W)+H*(5*z)+b*(5*D),P+=n>>>13,n&=8191;let $$=P+B*D+m*q+a*O+E*X+A*(5*V);P=$$>>>13,$$&=8191,$$+=_*(5*Z)+M*(5*v)+K*(5*w)+H*(5*W)+b*(5*z),P+=$$>>>13,$$&=8191;let X$=P+B*z+m*D+a*q+E*O+A*X;P=X$>>>13,X$&=8191,X$+=_*(5*V)+M*(5*Z)+K*(5*v)+H*(5*w)+b*(5*W),P+=X$>>>13,X$&=8191;let q$=P+B*W+m*z+a*D+E*q+A*O;P=q$>>>13,q$&=8191,q$+=_*X+M*(5*V)+K*(5*Z)+H*(5*v)+b*(5*w),P+=q$>>>13,q$&=8191;let W$=P+B*w+m*W+a*z+E*D+A*q;P=W$>>>13,W$&=8191,W$+=_*O+M*X+K*(5*V)+H*(5*Z)+b*(5*v),P+=W$>>>13,W$&=8191;let N$=P+B*v+m*w+a*W+E*z+A*D;P=N$>>>13,N$&=8191,N$+=_*q+M*O+K*X+H*(5*V)+b*(5*Z),P+=N$>>>13,N$&=8191;let v$=P+B*Z+m*v+a*w+E*W+A*z;P=v$>>>13,v$&=8191,v$+=_*D+M*q+K*O+H*X+b*(5*V),P+=v$>>>13,v$&=8191;let V$=P+B*V+m*Z+a*v+E*w+A*W;P=V$>>>13,V$&=8191,V$+=_*z+M*D+K*q+H*O+b*X,P+=V$>>>13,V$&=8191,P=(P<<2)+P|0,P=P+F|0,F=P&8191,P=P>>>13,y+=P,I[0]=F,I[1]=y,I[2]=n,I[3]=$$,I[4]=X$,I[5]=q$,I[6]=W$,I[7]=N$,I[8]=v$,I[9]=V$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;J0(J)}update($){mq(this),n$($),$=rJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,J0(this.h,this.r,this.buffer,this.pad)}digestInto($){mq(this),VZ($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var AZ=gZ(32,($)=>new KZ($));function qB($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],z=U[0],W=U[1],w=U[2],v=U[3],Z=U[4],V=U[5],N=U[6],j=U[7],R=I,S=J[0],L=J[1],k=J[2],x=X,h=O,B=q,m=D,a=z,E=W,A=w,_=v,M=Z,K=V,H=N,b=j,P=R,F=S,y=L,n=k;for(let X$=0;X$<Q;X$+=2)x=x+a|0,P=B$(P^x,16),M=M+P|0,a=B$(a^M,12),x=x+a|0,P=B$(P^x,8),M=M+P|0,a=B$(a^M,7),h=h+E|0,F=B$(F^h,16),K=K+F|0,E=B$(E^K,12),h=h+E|0,F=B$(F^h,8),K=K+F|0,E=B$(E^K,7),B=B+A|0,y=B$(y^B,16),H=H+y|0,A=B$(A^H,12),B=B+A|0,y=B$(y^B,8),H=H+y|0,A=B$(A^H,7),m=m+_|0,n=B$(n^m,16),b=b+n|0,_=B$(_^b,12),m=m+_|0,n=B$(n^m,8),b=b+n|0,_=B$(_^b,7),x=x+E|0,n=B$(n^x,16),H=H+n|0,E=B$(E^H,12),x=x+E|0,n=B$(n^x,8),H=H+n|0,E=B$(E^H,7),h=h+A|0,P=B$(P^h,16),b=b+P|0,A=B$(A^b,12),h=h+A|0,P=B$(P^h,8),b=b+P|0,A=B$(A^b,7),B=B+_|0,F=B$(F^B,16),M=M+F|0,_=B$(_^M,12),B=B+_|0,F=B$(F^B,8),M=M+F|0,_=B$(_^M,7),m=m+a|0,y=B$(y^m,16),K=K+y|0,a=B$(a^K,12),m=m+a|0,y=B$(y^m,8),K=K+y|0,a=B$(a^K,7);let $$=0;G[$$++]=X+x|0,G[$$++]=O+h|0,G[$$++]=q+B|0,G[$$++]=D+m|0,G[$$++]=z+a|0,G[$$++]=W+E|0,G[$$++]=w+A|0,G[$$++]=v+_|0,G[$$++]=Z+M|0,G[$$++]=V+K|0,G[$$++]=N+H|0,G[$$++]=j+b|0,G[$$++]=R+P|0,G[$$++]=S+F|0,G[$$++]=L+y|0,G[$$++]=k+n|0}var DB=TZ(qB,{counterRight:!1,counterLength:4,allowShortKeys:!1});var zB=new Uint8Array(16),PZ=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(zB.subarray(J))},YB=new Uint8Array(32);function BZ($,U,J,G,I){if(I!==void 0)n$(I,void 0,"AAD");let Q=$(U,J,YB),X=RZ(G.length,I?I.length:0,!0),O=AZ.create(Q);if(I)PZ(O,I);PZ(O,G),O.update(X);let q=O.digest();return J0(Q,X),q}var WB=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=w8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=BZ($,U,J,q,G);return X.set(D,O),J0(D),X},decrypt(Q,X){X=w8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=BZ($,U,J,O,G);if(!ZZ(q,D))throw J0(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),J0(D),X}}},iU=MZ({blockSize:64,nonceLength:12,tagLength:16},WB(DB));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function hJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function p$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function g$($,U,J=""){let G=hJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function pU($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");p$($.outputLen),p$($.blockLen)}function h0($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function yQ($,U){g$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function rQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function CU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function hQ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function G0($,U){return $<<32-U|$>>>U}var wB=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function vB($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function VB($){for(let U=0;U<$.length;U++)$[U]=vB($[U]);return $}var rq=wB?($)=>$:VB,SZ=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),NB=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function cI($){if(g$($),SZ)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=NB[$[J]];return U}var r0={_0:48,_9:57,A:65,F:70,a:97,f:102};function LZ($){if($>=r0._0&&$<=r0._9)return $-r0._0;if($>=r0.A&&$<=r0.F)return $-(r0.A-10);if($>=r0.a&&$<=r0.f)return $-(r0.a-10);return}function iI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(SZ)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=LZ($.charCodeAt(Q)),O=LZ($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function d$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];g$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function dJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function DI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var zI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var dq=BigInt(0),hq=BigInt(1);function V8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function CZ($){if(typeof $==="bigint"){if(!dQ($))throw Error("positive bigint expected, got "+$)}else p$($);return $}function N8($){let U=CZ($).toString(16);return U.length&1?"0"+U:U}function EZ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?dq:BigInt("0x"+$)}function YI($){return EZ(cI($))}function WI($){return EZ(cI(lQ(g$($)).reverse()))}function lJ($,U){p$(U),$=CZ($);let J=iI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function Z8($,U){return lJ($,U).reverse()}function lQ($){return Uint8Array.from($)}function wI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var dQ=($)=>typeof $==="bigint"&&dq<=$;function ZB($,U,J){return dQ($)&&dQ(U)&&dQ(J)&&U<=$&&$<J}function g8($,U,J,G){if(!ZB(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function lq($){let U;for(U=0;$>dq;$>>=hq,U+=1);return U}var M8=($)=>(hq<<BigInt($))-hq;function _Z($,U,J){if(p$($,"hashLen"),p$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,d$(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=w();let R=q.slice();j.push(R),N+=q.length}return d$(...j)};return(N,j)=>{W(),v(N);let R=void 0;while(!(R=j(Z())))v();return W(),R}}function pI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function nq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HU=BigInt(0),wU=BigInt(1),oI=BigInt(2),kZ=BigInt(3),FZ=BigInt(4),uZ=BigInt(5),gB=BigInt(7),xZ=BigInt(8),MB=BigInt(9),mZ=BigInt(16);function jU($,U){let J=$%U;return J>=HU?J:U+J}function oU($,U,J){let G=$;while(U-- >HU)G*=G,G%=J;return G}function bZ($,U){if($===HU)throw Error("invert: expected non-zero number");if(U<=HU)throw Error("invert: expected positive modulus, got "+U);let J=jU($,U),G=U,I=HU,Q=wU,X=wU,O=HU;while(J!==HU){let D=G/J,z=G%J,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==wU)throw Error("invert: does not exist");return jU(I,U)}function cq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function yZ($,U){let J=($.ORDER+wU)/FZ,G=$.pow(U,J);return cq($,G,U),G}function RB($,U){let J=($.ORDER-uZ)/xZ,G=$.mul(U,oI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,oI),I),O=$.mul(Q,$.sub(X,$.ONE));return cq($,O,U),O}function jB($){let U=nQ($),J=rZ($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+gB)/mZ;return(O,q)=>{let D=O.pow(q,X),z=O.mul(D,G),W=O.mul(D,I),w=O.mul(D,Q),v=O.eql(O.sqr(z),q),Z=O.eql(O.sqr(W),q);D=O.cmov(D,z,v),z=O.cmov(w,W,Z);let V=O.eql(O.sqr(z),q),N=O.cmov(D,z,V);return cq(O,N,q),N}}function rZ($){if($<kZ)throw Error("sqrt is not defined for small field");let U=$-wU,J=0;while(U%oI===HU)U/=oI,J++;let G=oI,I=nQ($);while(fZ(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return yZ;let Q=I.pow(G,U),X=(U+wU)/oI;return function(q,D){if(q.is0(D))return D;if(fZ(q,D)!==1)throw Error("Cannot find square root");let z=J,W=q.mul(q.ONE,Q),w=q.pow(D,U),v=q.pow(D,X);while(!q.eql(w,q.ONE)){if(q.is0(w))return q.ZERO;let Z=1,V=q.sqr(w);while(!q.eql(V,q.ONE))if(Z++,V=q.sqr(V),Z===z)throw Error("Cannot find square root");let N=wU<<BigInt(z-Z-1),j=q.pow(W,N);z=Z,W=q.sqr(j),w=q.mul(w,W),v=q.mul(v,j)}return v}}function HB($){if($%FZ===kZ)return yZ;if($%xZ===uZ)return RB;if($%mZ===MB)return jB($);return rZ($)}var TB=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function iq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=TB.reduce((G,I)=>{return G[I]="function",G},U);return pI($,J),$}function KB($,U,J){if(J<HU)throw Error("invalid exponent, negatives unsupported");if(J===HU)return $.ONE;if(J===wU)return U;let G=$.ONE,I=U;while(J>HU){if(J&wU)G=$.mul(G,I);I=$.sqr(I),J>>=wU}return G}function R8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function fZ($,U){let J=($.ORDER-wU)/oI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function AB($,U){if(U!==void 0)p$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class hZ{ORDER;BITS;BYTES;isLE;ZERO=HU;ONE=wU;_lengths;_sqrt;_mod;constructor($,U={}){if($<=HU)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=AB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return jU($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return HU<=$&&$<this.ORDER}is0($){return $===HU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&wU)===wU}neg($){return jU(-$,this.ORDER)}eql($,U){return $===U}sqr($){return jU($*$,this.ORDER)}add($,U){return jU($+U,this.ORDER)}sub($,U){return jU($-U,this.ORDER)}mul($,U){return jU($*U,this.ORDER)}pow($,U){return KB(this,$,U)}div($,U){return jU($*bZ(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return bZ($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=HB(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?Z8($,this.BYTES):lJ($,this.BYTES)}fromBytes($,U=!1){g$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?WI($):YI($);if(X)O=jU(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return R8(this,$)}cmov($,U,J){return J?U:$}}function nQ($,U={}){return new hZ($,U)}function dZ($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function pq($){let U=dZ($);return U+Math.ceil(U/2)}function lZ($,U,J=!1){g$($);let G=$.length,I=dZ(U),Q=pq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?WI($):YI($),O=jU(X,U-wU)+wU;return J?Z8(O,I):lJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nJ=BigInt(0),aI=BigInt(1);function j8($,U){let J=U.negate();return $?J:U}function eq($,U){let J=R8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function pZ($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function oq($,U){pZ($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=M8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function nZ($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=aI;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var aq=new WeakMap,oZ=new WeakMap;function tq($){return oZ.get($)||1}function cZ($){if($!==nJ)throw Error("invalid wNAF")}class sq{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>nJ){if(U&aI)J=J.add(G);G=G.double(),U>>=aI}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=oq(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=oq($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=nZ(J,X,Q);if(J=O,D)I=I.add(j8(W,U[w]));else G=G.add(j8(z,U[q]))}return cZ(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=oq($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===nJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=nZ(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return cZ(J),G}getPrecomputes($,U,J){let G=aq.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);aq.set(U,G)}}return G}cached($,U,J){let G=tq($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=tq($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){pZ(U,this.bits),oZ.set($,U),aq.delete($)}hasCache($){return tq($)!==1}}function aZ($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>nJ||G>nJ){if(J&aI)Q=Q.add(I);if(G&aI)X=X.add(I);I=I.double(),J>>=aI,G>>=aI}return{p1:Q,p2:X}}function iZ($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return iq(U),U}else return nQ($,{isLE:J})}function tZ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>nJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=iZ(U.p,J.Fp,G),Q=iZ(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function cQ($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H8=BigInt(0),cJ=BigInt(1),iQ=BigInt(2);function PB($){return pI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function eZ($){let U=PB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||DI,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?iQ**BigInt(254):iQ**BigInt(447),Z=O?BigInt(8)*iQ**BigInt(251)-cJ:BigInt(4)*iQ**BigInt(445)-cJ,V=v+Z+cJ,N=(M)=>jU(M,J),j=R(W);function R(M){return Z8(N(M),z)}function S(M){let K=lQ(g$(M,z,"uCoordinate"));if(O)K[31]&=127;return N(WI(K))}function L(M){return WI(I(lQ(g$(M,z,"scalar"))))}function k(M,K){let H=a(S(K),L(M));if(H===H8)throw Error("invalid private or public key received");return R(H)}function x(M){return k(M,j)}let h=x,B=k;function m(M,K,H){let b=N(M*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(M,K){g8("u",M,H8,J),g8("scalar",K,v,V);let H=K,b=M,P=cJ,F=H8,y=M,n=cJ,$$=H8;for(let q$=BigInt(D-1);q$>=H8;q$--){let W$=H>>q$&cJ;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,w0=DU-SU;y=N(W0*W0),n=N(b*N(w0*w0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(M=q(z))=>{return g$(M,E.seed,"seed"),M},_={randomSecretKey:A};return Object.freeze({keygen:cQ(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}class $D{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(pU($),g$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),CU(G)}update($){return h0(this),this.iHash.update($),this}digestInto($){h0(this),g$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var iJ=($,U,J)=>new $D($,U).update(J).digest();iJ.create=($,U)=>new $D($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sZ=($,U)=>($+($>=0?U:-U)/Ug)/U;function BB($,U,J){let[[G,I],[Q,X]]=U,O=sZ(X*$,J),q=sZ(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<d0,w=z<d0;if(W)D=-D;if(w)z=-z;let v=M8(Math.ceil(lq(J)/2))+pJ;if(D<d0||D>=v||z<d0||z>=v)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:W,k1:D,k2neg:w,k2:z}}function ID($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function UD($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(V8(J.lowS,"lowS"),V8(J.prehash,"prehash"),J.format!==void 0)ID(J.format);return J}class $g extends Error{constructor($=""){super($)}}var vI={Err:$g,_tlv:{encode:($,U)=>{let{Err:J}=vI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=N8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?N8(I.length/2|128):"";return N8($)+Q+I+U},decode($,U){let{Err:J}=vI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=vI;if($<d0)throw new U("integer: negative integers are not allowed");let J=N8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=vI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return YI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=vI,I=g$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=vI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},d0=BigInt(0),pJ=BigInt(1),Ug=BigInt(2),pQ=BigInt(3),LB=BigInt(4);function JD($,U={}){let J=tZ("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;pI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=Jg(G,I);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function W(A,_,M){let{x:K,y:H}=_.toAffine(),b=G.toBytes(K);if(V8(M,"isCompressed"),M){z();let P=!G.isOdd(H);return d$(Ig(P),b)}else return d$(Uint8Array.of(4),b,G.toBytes(H))}function w(A){g$(A,void 0,"Point");let{publicKey:_,publicKeyUncompressed:M}=D,K=A.length,H=A[0],b=A.subarray(1);if(K===_&&(H===2||H===3)){let P=G.fromBytes(b);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let F=V(P),y;try{y=G.sqrt(F)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}z();let n=G.isOdd(y);if((H&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(K===M&&H===4){let P=G.BYTES,F=G.fromBytes(b.subarray(0,P)),y=G.fromBytes(b.subarray(P,P*2));if(!N(F,y))throw Error("bad point: is not on curve");return{x:F,y}}else throw Error(`bad point: got length ${K}, expected compressed=${_} or uncompressed=${M}`)}let v=U.toBytes||W,Z=U.fromBytes||w;function V(A){let _=G.sqr(A),M=G.mul(_,A);return G.add(G.add(M,G.mul(A,Q.a)),Q.b)}function N(A,_){let M=G.sqr(_),K=V(A);return G.eql(M,K)}if(!N(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let j=G.mul(G.pow(Q.a,pQ),LB),R=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(j,R)))throw Error("bad curve params: a or b");function S(A,_,M=!1){if(!G.isValid(_)||M&&G.is0(_))throw Error(`bad point coordinate ${A}`);return _}function L(A){if(!(A instanceof m))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return BB(A,q.basises,I.ORDER)}let x=nq((A,_)=>{let{X:M,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:M,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(M,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}),h=nq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:_,y:M}=A.toAffine();if(!G.isValid(_)||!G.isValid(M))throw Error("bad point: x or y not field elements");if(!N(_,M))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(A,_,M,K,H){return M=new m(G.mul(M.X,A),M.Y,M.Z),_=j8(K,_),M=j8(H,M),_.add(M)}class m{static BASE=new m(Q.Gx,Q.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,_,M){this.X=S("x",A),this.Y=S("y",_,!0),this.Z=S("z",M),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:_,y:M}=A||{};if(!A||!G.isValid(_)||!G.isValid(M))throw Error("invalid affine point");if(A instanceof m)throw Error("projective point not allowed");if(G.is0(_)&&G.is0(M))return m.ZERO;return new m(_,M,G.ONE)}static fromBytes(A){let _=m.fromAffine(Z(g$(A,void 0,"point")));return _.assertValidity(),_}static fromHex(A){return m.fromBytes(iI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,_=!0){if(E.createCache(this,A),!_)this.multiply(pQ);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){L(A);let{X:_,Y:M,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.eql(G.mul(_,P),G.mul(H,K)),y=G.eql(G.mul(M,P),G.mul(b,K));return F&&y}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:_}=Q,M=G.mul(_,pQ),{X:K,Y:H,Z:b}=this,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(b,b),q$=G.mul(K,H);return q$=G.add(q$,q$),y=G.mul(K,b),y=G.add(y,y),P=G.mul(A,y),F=G.mul(M,X$),F=G.add(P,F),P=G.sub($$,F),F=G.add($$,F),F=G.mul(P,F),P=G.mul(q$,P),y=G.mul(M,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),F=G.add(F,n),X$=G.mul(H,b),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,$$),y=G.add(y,y),y=G.add(y,y),new m(P,F,y)}add(A){L(A);let{X:_,Y:M,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.ZERO,y=G.ZERO,n=G.ZERO,$$=Q.a,X$=G.mul(Q.b,pQ),q$=G.mul(_,H),W$=G.mul(M,b),N$=G.mul(K,P),v$=G.add(_,M),V$=G.add(H,b);v$=G.mul(v$,V$),V$=G.add(q$,W$),v$=G.sub(v$,V$),V$=G.add(_,K);let R$=G.add(H,P);return V$=G.mul(V$,R$),R$=G.add(q$,N$),V$=G.sub(V$,R$),R$=G.add(M,K),F=G.add(b,P),R$=G.mul(R$,F),F=G.add(W$,N$),R$=G.sub(R$,F),n=G.mul($$,V$),F=G.mul(X$,N$),n=G.add(F,n),F=G.sub(W$,n),n=G.add(W$,n),y=G.mul(F,n),W$=G.add(q$,q$),W$=G.add(W$,q$),N$=G.mul($$,N$),V$=G.mul(X$,V$),W$=G.add(W$,N$),N$=G.sub(q$,N$),N$=G.mul($$,N$),V$=G.add(V$,N$),q$=G.mul(W$,V$),y=G.add(y,q$),q$=G.mul(R$,V$),F=G.mul(v$,F),F=G.sub(F,q$),q$=G.mul(v$,W$),n=G.mul(R$,n),n=G.add(n,q$),new m(F,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(m.ZERO)}multiply(A){let{endo:_}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let M,K,H=(b)=>E.cached(this,b,(P)=>eq(m,P));if(_){let{k1neg:b,k1:P,k2neg:F,k2:y}=k(A),{p:n,f:$$}=H(P),{p:X$,f:q$}=H(y);K=$$.add(q$),M=B(_.beta,n,X$,b,F)}else{let{p:b,f:P}=H(A);M=b,K=P}return eq(m,[M,K])[0]}multiplyUnsafe(A){let{endo:_}=U,M=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===d0||M.is0())return m.ZERO;if(A===pJ)return M;if(E.hasCache(this))return this.multiply(A);if(_){let{k1neg:K,k1:H,k2neg:b,k2:P}=k(A),{p1:F,p2:y}=aZ(m,M,H,P);return B(_.beta,F,y,K,b)}else return E.unsafe(M,A)}toAffine(A){return x(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===pJ)return!0;if(A)return A(m,this);return E.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===pJ)return this;if(A)return A(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return V8(A,"isCompressed"),this.assertValidity(),v(m,this,A)}toHex(A=!0){return cI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let a=I.BITS,E=new sq(m,U.endo?Math.ceil(a/2):a);return m.BASE.precompute(8),m}function Ig($){return Uint8Array.of($?2:3)}function Jg($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function SB($,U={}){let{Fn:J}=$,G=U.randomBytes||DI,I=Object.assign(Jg($.Fp,J),{seed:pq(J.ORDER)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=v.length;if(Z===!0&&j!==V)return!1;if(Z===!1&&j!==N)return!1;return!!$.fromBytes(v)}catch(j){return!1}}function O(v=G(I.seed)){return lZ(g$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I;if(!hJ(v))return;if("_lengths"in J&&J._lengths||Z===V)return;let j=g$(v,void 0,"key").length;return j===V||j===N}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=cQ(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function GD($,U,J={}){pU(U),pI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||DI,I=J.hmac||((M,K)=>iJ(U,M,K)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v}=SB($,J),Z={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=O*Ug<Q.ORDER;function N(M){let K=O>>pJ;return M>K}function j(M,K){if(!X.isValidNot0(K))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return K}function R(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(M,K){ID(K);let H=v.signature,b=K==="compact"?H:K==="recovered"?H+1:void 0;return g$(M,b)}class L{r;s;recovery;constructor(M,K,H){if(this.r=j("r",M),this.s=j("s",K),H!=null){if(R(),![0,1,2,3].includes(H))throw Error("invalid recovery id");this.recovery=H}Object.freeze(this)}static fromBytes(M,K=Z.format){S(M,K);let H;if(K==="der"){let{r:y,s:n}=vI.toSig(g$(M));return new L(y,n)}if(K==="recovered")H=M[0],K="compact",M=M.subarray(1);let b=v.signature/2,P=M.subarray(0,b),F=M.subarray(b,b*2);return new L(X.fromBytes(P),X.fromBytes(F),H)}static fromHex(M,K){return this.fromBytes(iI(M),K)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new L(this.r,this.s,M)}recoverPublicKey(M){let{r:K,s:H}=this,b=this.assertRecovery(),P=b===2||b===3?K+O:K;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let F=Q.toBytes(P),y=$.fromBytes(d$(Ig((b&1)===0),F)),n=X.inv(P),$$=x(g$(M,void 0,"msgHash")),X$=X.create(-$$*n),q$=X.create(H*n),W$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(W$.is0())throw Error("invalid recovery: point at infinify");return W$.assertValidity(),W$}hasHighS(){return N(this.s)}toBytes(M=Z.format){if(ID(M),M==="der")return iI(vI.hexFromSig(this));let{r:K,s:H}=this,b=X.toBytes(K),P=X.toBytes(H);if(M==="recovered")return R(),d$(Uint8Array.of(this.assertRecovery()),b,P);return d$(b,P)}toHex(M){return cI(this.toBytes(M))}}let k=J.bits2int||function(K){if(K.length>8192)throw Error("input is too large");let H=YI(K),b=K.length*8-q;return b>0?H>>BigInt(b):H},x=J.bits2int_modN||function(K){return X.create(k(K))},h=M8(q);function B(M){return g8("num < 2^"+q,M,d0,h),X.toBytes(M)}function m(M,K){return g$(M,void 0,"message"),K?g$(U(M),void 0,"prehashed message"):M}function a(M,K,H){let{lowS:b,prehash:P,extraEntropy:F}=UD(H,Z);M=m(M,P);let y=x(M),n=X.fromBytes(K);if(!X.isValidNot0(n))throw Error("invalid private key");let $$=[B(n),B(y)];if(F!=null&&F!==!1){let N$=F===!0?G(v.secretKey):F;$$.push(g$(N$,void 0,"extraEntropy"))}let X$=d$(...$$),q$=y;function W$(N$){let v$=k(N$);if(!X.isValidNot0(v$))return;let V$=X.inv(v$),R$=$.BASE.multiply(v$).toAffine(),b$=X.create(R$.x);if(b$===d0)return;let k$=X.create(V$*X.create(q$+b$*n));if(k$===d0)return;let qU=(R$.x===b$?0:2)|Number(R$.y&pJ),DU=k$;if(b&&N(k$))DU=X.neg(k$),qU^=1;return new L(b$,DU,V?void 0:qU)}return{seed:X$,k2sig:W$}}function E(M,K,H={}){let{seed:b,k2sig:P}=a(M,K,H);return _Z(U.outputLen,X.BYTES,I)(b,P).toBytes(H.format)}function A(M,K,H,b={}){let{lowS:P,prehash:F,format:y}=UD(b,Z);if(H=g$(H,void 0,"publicKey"),K=m(K,F),!hJ(M)){let n=M instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(M,y);try{let n=L.fromBytes(M,y),$$=$.fromBytes(H);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,W$=x(K),N$=X.inv(q$),v$=X.create(W$*N$),V$=X.create(X$*N$),R$=$.BASE.multiplyUnsafe(v$).add($$.multiplyUnsafe(V$));if(R$.is0())return!1;return X.create(R$.x)===X$}catch(n){return!1}}function _(M,K,H={}){let{prehash:b}=UD(H,Z);return K=m(K,b),L.fromBytes(M,"recovered").recoverPublicKey(K).toBytes()}return Object.freeze({keygen:D,getPublicKey:z,getSharedSecret:W,utils:w,lengths:v,Point:$,sign:E,verify:A,recoverPublicKey:_,Signature:L,hash:U})}function Gg($,U,J){return $&U^~$&J}function Qg($,U,J){return $&U^$&J^U&J}class oQ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=hQ(this.buffer)}update($){h0(this),g$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=hQ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){h0(this),yQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,CU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=hQ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var l0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),n0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),UU=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),IU=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),Xg=BigInt(32);function CB($,U=!1){if(U)return{h:Number($&aQ),l:Number($>>Xg&aQ)};return{h:Number($>>Xg&aQ)|0,l:Number($&aQ)|0}}function tQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=CB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var QD=($,U,J)=>$>>>J,XD=($,U,J)=>$<<32-J|U>>>J,tI=($,U,J)=>$>>>J|U<<32-J,eI=($,U,J)=>$<<32-J|U>>>J,T8=($,U,J)=>$<<64-J|U>>>J-32,K8=($,U,J)=>$>>>J-32|U<<64-J;var Og=($,U,J)=>$<<J|U>>>32-J,qg=($,U,J)=>U<<J|$>>>32-J,Dg=($,U,J)=>U<<J-32|$>>>64-J,zg=($,U,J)=>$<<J-32|U>>>64-J;function Z0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var Yg=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),Wg=($,U,J,G)=>U+J+G+($/4294967296|0)|0,wg=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),vg=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,Vg=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),Ng=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var _B=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VI=new Uint32Array(64);class OD extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)VI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=VI[z-15],w=VI[z-2],v=G0(W,7)^G0(W,18)^W>>>3,Z=G0(w,17)^G0(w,19)^w>>>10;VI[z]=Z+VI[z-7]+v+VI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=G0(X,6)^G0(X,11)^G0(X,25),w=D+W+Gg(X,O,q)+_B[z]+VI[z]|0,Z=(G0(J,2)^G0(J,13)^G0(J,22))+Qg(J,G,I)|0;D=q,q=O,O=X,X=Q+w|0,Q=I,I=G,G=J,J=w+Z|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){CU(VI)}destroy(){this.set(0,0,0,0,0,0,0,0),CU(this.buffer)}}class Zg extends OD{A=l0[0]|0;B=l0[1]|0;C=l0[2]|0;D=l0[3]|0;E=l0[4]|0;F=l0[5]|0;G=l0[6]|0;H=l0[7]|0;constructor(){super(32)}}class bB extends OD{A=n0[0]|0;B=n0[1]|0;C=n0[2]|0;D=n0[3]|0;E=n0[4]|0;F=n0[5]|0;G=n0[6]|0;H=n0[7]|0;constructor(){super(28)}}var gg=(()=>tQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),fB=(()=>gg[0])(),kB=(()=>gg[1])(),NI=new Uint32Array(80),ZI=new Uint32Array(80);class A8 extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:w,Gl:v,Hh:Z,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,w,v,Z,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=w|0,this.Gl=v|0,this.Hh=Z|0,this.Hl=V|0}process($,U){for(let R=0;R<16;R++,U+=4)NI[R]=$.getUint32(U),ZI[R]=$.getUint32(U+=4);for(let R=16;R<80;R++){let S=NI[R-15]|0,L=ZI[R-15]|0,k=tI(S,L,1)^tI(S,L,8)^QD(S,L,7),x=eI(S,L,1)^eI(S,L,8)^XD(S,L,7),h=NI[R-2]|0,B=ZI[R-2]|0,m=tI(h,B,19)^T8(h,B,61)^QD(h,B,6),a=eI(h,B,19)^K8(h,B,61)^XD(h,B,6),E=wg(x,a,ZI[R-7],ZI[R-16]),A=vg(E,k,m,NI[R-7],NI[R-16]);NI[R]=A|0,ZI[R]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:w,Fl:v,Gh:Z,Gl:V,Hh:N,Hl:j}=this;for(let R=0;R<80;R++){let S=tI(z,W,14)^tI(z,W,18)^T8(z,W,41),L=eI(z,W,14)^eI(z,W,18)^K8(z,W,41),k=z&w^~z&Z,x=W&v^~W&V,h=Vg(j,L,x,kB[R],ZI[R]),B=Ng(h,N,S,k,fB[R],NI[R]),m=h|0,a=tI(J,G,28)^T8(J,G,34)^T8(J,G,39),E=eI(J,G,28)^K8(J,G,34)^K8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=Z|0,j=V|0,Z=w|0,V=v|0,w=z|0,v=W|0,{h:z,l:W}=Z0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=Yg(m,E,_);J=Wg(M,B,a,A),G=M|0}({h:J,l:G}=Z0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=Z0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=Z0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=Z0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=Z0(this.Eh|0,this.El|0,z|0,W|0),{h:w,l:v}=Z0(this.Fh|0,this.Fl|0,w|0,v|0),{h:Z,l:V}=Z0(this.Gh|0,this.Gl|0,Z|0,V|0),{h:N,l:j}=Z0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,w,v,Z,V,N,j)}roundClean(){CU(NI,ZI)}destroy(){CU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class FB extends A8{Ah=IU[0]|0;Al=IU[1]|0;Bh=IU[2]|0;Bl=IU[3]|0;Ch=IU[4]|0;Cl=IU[5]|0;Dh=IU[6]|0;Dl=IU[7]|0;Eh=IU[8]|0;El=IU[9]|0;Fh=IU[10]|0;Fl=IU[11]|0;Gh=IU[12]|0;Gl=IU[13]|0;Hh=IU[14]|0;Hl=IU[15]|0;constructor(){super(64)}}class Mg extends A8{Ah=UU[0]|0;Al=UU[1]|0;Bh=UU[2]|0;Bl=UU[3]|0;Ch=UU[4]|0;Cl=UU[5]|0;Dh=UU[6]|0;Dl=UU[7]|0;Eh=UU[8]|0;El=UU[9]|0;Fh=UU[10]|0;Fl=UU[11]|0;Gh=UU[12]|0;Gl=UU[13]|0;Hh=UU[14]|0;Hl=UU[15]|0;constructor(){super(48)}}var vU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),VU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class uB extends A8{Ah=vU[0]|0;Al=vU[1]|0;Bh=vU[2]|0;Bl=vU[3]|0;Ch=vU[4]|0;Cl=vU[5]|0;Dh=vU[6]|0;Dl=vU[7]|0;Eh=vU[8]|0;El=vU[9]|0;Fh=vU[10]|0;Fl=vU[11]|0;Gh=vU[12]|0;Gl=vU[13]|0;Hh=vU[14]|0;Hl=vU[15]|0;constructor(){super(28)}}class xB extends A8{Ah=VU[0]|0;Al=VU[1]|0;Bh=VU[2]|0;Bl=VU[3]|0;Ch=VU[4]|0;Cl=VU[5]|0;Dh=VU[6]|0;Dl=VU[7]|0;Eh=VU[8]|0;El=VU[9]|0;Fh=VU[10]|0;Fl=VU[11]|0;Gh=VU[12]|0;Gl=VU[13]|0;Hh=VU[14]|0;Hl=VU[15]|0;constructor(){super(32)}}var eQ=dJ(()=>new Zg,zI(1));var Rg=dJ(()=>new Mg,zI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mB=BigInt(1),jg=BigInt(2),yB=BigInt(3),rB=BigInt(5),bl=BigInt(8),Hg=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function hB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=Hg,O=$*$%Q*$%Q,q=oU(O,jg,Q)*O%Q,D=oU(q,mB,Q)*$%Q,z=oU(D,rB,Q)*D%Q,W=oU(z,U,Q)*z%Q,w=oU(W,J,Q)*W%Q,v=oU(w,G,Q)*w%Q,Z=oU(v,I,Q)*v%Q,V=oU(Z,I,Q)*v%Q,N=oU(V,U,Q)*z%Q;return{pow_p_5_8:oU(N,jg,Q)*$%Q,b2:O}}function dB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var Tg=(()=>{let $=Hg;return eZ({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=hB(U);return jU(oU(J,yB,$)*G,$)},adjustScalarBytes:dB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),nB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var cB=JD(lB),qD=GD(cB,eQ);var iB=JD(nB),Kg=GD(iB,Rg);function Pg($,U,J){if(pU($),J===void 0)J=new Uint8Array($.outputLen);return iJ($,J,U)}var DD=Uint8Array.of(0),Ag=Uint8Array.of();function Bg($,U,J,G=32){pU($),p$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=Ag;else g$(J,void 0,"info");let X=new Uint8Array(Q*I),O=iJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)DD[0]=z+1,q.update(z===0?Ag:D).update(J).update(DD).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),CU(D,DD),X.slice(0,G)}var pB=BigInt(0),P8=BigInt(1),oB=BigInt(2),aB=BigInt(7),tB=BigInt(256),eB=BigInt(113),Cg=[],Eg=[],_g=[];for(let $=0,U=P8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],Cg.push(2*(5*G+J)),Eg.push(($+1)*($+2)/2%64);let I=pB;for(let Q=0;Q<7;Q++)if(U=(U<<P8^(U>>aB)*eB)%tB,U&oB)I^=P8<<(P8<<BigInt(Q))-P8;_g.push(I)}var bg=tQ(_g,!0),sB=bg[0],$L=bg[1],Lg=($,U,J)=>J>32?Dg($,U,J):Og($,U,J),Sg=($,U,J)=>J>32?zg($,U,J):qg($,U,J);function UL($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],z=J[q+1],W=Lg(D,z,1)^J[O],w=Sg(D,z,1)^J[O+1];for(let v=0;v<50;v+=10)$[X+v]^=W,$[X+v+1]^=w}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=Eg[X],q=Lg(I,Q,O),D=Sg(I,Q,O),z=Cg[X];I=$[z],Q=$[z+1],$[z]=q,$[z+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=sB[G],$[1]^=$L[G]}CU(J)}class sQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,p$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rQ(this.state)}clone(){return this._cloneInto()}keccak(){rq(this.state32),UL(this.state32,this.rounds),rq(this.state32),this.posOut=0,this.pos=0}update($){h0(this),g$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){h0(this,!1),g$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return p$($),this.xofInto(new Uint8Array($))}digestInto($){if(yQ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,CU(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new sQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var fg=($,U,J,G={})=>dJ(()=>new sQ(U,$,J),G);var sI=fg(6,136,32,zI(8));var kg=fg(6,72,64,zI(10));var Fg=($,U,J,G={})=>dJ((I={})=>new sQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),ug=Fg(31,168,16,zI(11)),g0=Fg(31,136,32,zI(12));function zD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function mg($){return zD($),($&$-1)===0&&$!==0}function YD($,U){zD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function yg($){return zD($),31-Math.clz32($)}function xg($){let U=$.length;if(U<2||!mg(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=yg(U);for(let G=0;G<U;G++){let I=YD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var WD=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=yg(J);if(!mg(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)xg(z);for(let W=0,w=1;W<q-X;W++){let v=I?W+1+X:q-W,Z=1<<v,V=Z>>1,N=J>>v;for(let j=0;j<J;j+=Z)for(let R=0,S=w++;R<V;R++){let L=Q?I?J-S:S:R*N,k=j+R,x=j+R+V,h=G[L],B=z[x],m=z[k];if(D){let a=$.mul(B,h);z[k]=$.add(m,a),z[x]=$.sub(m,a)}else if(Q)z[k]=$.add(B,m),z[x]=$.mul($.sub(B,m),h);else z[k]=$.add(m,B),z[x]=$.mul($.sub(m,B),h)}}if(!I&&O)xg(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var M0=DI;function $4($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function rg($){return Uint8Array.from($)}function $J($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),z=typeof q==="number"?I[X]:q.encode(I[X]);if(g$(z,D,$),Q.set(z,O),typeof q!=="number")z.fill(0);O+=D}return Q},decode:(I)=>{g$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function U4($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{g$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function c$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function wD($){return(1<<$)-1}var pl=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var hg=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(R,S=G)=>{let L=R%S|0;return(L>=0?L|0:S+L|0)|0},D=(R,S=G)=>{let L=q(R,S)|0;return(L>S>>1?L-S|0:L)|0};function z(){let R=U(J);for(let S=0;S<J;S++){let L=YD(S,X),k=BigInt(Q)**BigInt(L)%BigInt(G);R[S]=Number(k)|0}return R}let W=z(),w={add:(R,S)=>q((R|0)+(S|0))|0,sub:(R,S)=>q((R|0)-(S|0))|0,mul:(R,S)=>q((R|0)*(S|0))|0,inv:(R)=>{throw Error("not implemented")}},v={N:J,roots:W,invertButterflies:!0,skipStages:O?1:0,brp:!1},Z=WD(w,{dit:!1,...v}),V=WD(w,{dit:!0,...v});return{mod:q,smod:D,nttZetas:W,NTT:{encode:(R)=>{return Z(R)},decode:(R)=>{V(R);for(let S=0;S<R.length;S++)R[S]=q(I*R[S]);return R}},bitsCoder:(R,S)=>{let L=wD(R),k=R*(J/8);return{bytesLen:k,encode:(x)=>{let h=new Uint8Array(k);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=(S.encode(x[B])&L)<<a,a+=R;for(;a>=8;a-=8,m>>=8)h[E++]=m&wD(a)}return h},decode:(x)=>{let h=U(J);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=x[B]<<a,a+=8;for(;a>=R;a-=R,m>>=R)h[E++]=S.decode(m&L)}return h}}}}},IL=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,z)=>{return G[I+0]=D,G[I+1]=z,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),c$(Q,G)}}},dg=IL(ug);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var NU=256,c0=3329,JL=3303,GL=17,{mod:S8,nttZetas:QL,NTT:UJ,bitsCoder:XL}=hg({N:NU,Q:c0,F:JL,ROOT_OF_UNITY:GL,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),vD={512:{N:NU,Q:c0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:NU,Q:c0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:NU,Q:c0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},OL=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+c0/2)/c0,decode:(J)=>J*c0+U>>>$}},B8=($)=>XL($,OL($));function IJ($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]+U[J])}function qL($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]-U[J])}function DL($,U,J,G,I){let Q=S8(U*G*I+$*J),X=S8($*G+U*J);return{c0:Q,c1:X}}function I4($,U){for(let J=0;J<NU/2;J++){let G=QL[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=DL($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function lg($){let U=new Uint16Array(NU);for(let J=0;J<NU;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<NU&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<c0)U[J++]=Q;if(J<NU&&X<c0)U[J++]=X}}return U}function L8($,U,J,G){let I=$(G*NU/4,U,J),Q=new Uint16Array(NU),X=rQ(I),O=0;for(let q=0,D=0,z=0,W=0;q<X.length;q++){let w=X[q];for(let v=0;v<32;v++)if(z+=w&1,w>>=1,O+=1,O===G)W=z,z=0;else if(O===2*G)Q[D++]=S8(W-z),z=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var zL=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=B8(1),z=B8(q),W=B8(O),w=$J("publicKey",U4(B8(12),U),32),v=U4(B8(12),U),Z=$J("ciphertext",U4(W,U),z),V=$J("seed",32,32);return{secretCoder:v,lengths:{secretKey:v.bytesLen,publicKey:w.bytesLen,cipherText:Z.bytesLen},keygen:(N)=>{g$(N,32,"seed");let j=new Uint8Array(33);j.set(N),j[32]=U;let R=I(j),[S,L]=V.decode(R),k=[],x=[];for(let m=0;m<U;m++)k.push(UJ.encode(L8(J,L,m,Q)));let h=G(S);for(let m=0;m<U;m++){let a=UJ.encode(L8(J,L,U+m,Q));for(let E=0;E<U;E++){let A=lg(h.get(E,m));IJ(a,I4(A,k[E]))}x.push(a)}h.clean();let B={publicKey:w.encode([x,S]),secretKey:v.encode(k)};return c$(S,L,k,x,j,R),B},encrypt:(N,j,R)=>{let[S,L]=w.decode(N),k=[];for(let E=0;E<U;E++)k.push(UJ.encode(L8(J,R,E,Q)));let x=G(L),h=new Uint16Array(NU),B=[];for(let E=0;E<U;E++){let A=L8(J,R,U+E,X),_=new Uint16Array(NU);for(let M=0;M<U;M++){let K=lg(x.get(E,M));IJ(_,I4(K,k[M]))}IJ(A,UJ.decode(_)),B.push(A),IJ(h,I4(S[E],k[E])),c$(_)}x.clean();let m=L8(J,R,2*U,X);IJ(m,UJ.decode(h));let a=D.decode(j);return IJ(a,m),c$(S,k,h,m),Z.encode([B,a])},decrypt:(N,j)=>{let[R,S]=Z.decode(N),L=v.decode(j),k=new Uint16Array(NU);for(let x=0;x<U;x++)IJ(k,I4(L[x],UJ.encode(R[x])));return qL(S,UJ.decode(k)),c$(k,L,R),D.encode(S)}}};function VD($){let U=zL($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=$J("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(z=M0(64))=>{g$(z,64,"seed");let{publicKey:W,secretKey:w}=U.keygen(z.subarray(0,32)),v=J(W),Z=O.encode([w,W,v,z.subarray(32)]);return c$(w,v),{publicKey:W,secretKey:Z}},getPublicKey:(z)=>{let[W,w,v,Z]=O.decode(z);return Uint8Array.from(w)},encapsulate:(z,W=M0(32))=>{g$(z,X.publicKey,"publicKey"),g$(W,32,"message");let w=z.subarray(0,384*$.K),v=Q.encode(Q.decode(rg(w)));if(!$4(v,w))throw c$(v),Error("ML-KEM.encapsulate: wrong publicKey modulus");c$(v);let Z=G.create().update(W).update(J(z)).digest(),V=U.encrypt(z,W,Z.subarray(32,64));return c$(Z.subarray(32)),{cipherText:V,sharedSecret:Z.subarray(0,32)}},decapsulate:(z,W)=>{g$(W,O.bytesLen,"secretKey"),g$(z,X.cipherText,"cipherText");let w=O.bytesLen-96,v=w+32,Z=J(W.subarray(w/2,v));if(!$4(Z,W.subarray(v,v+32)))throw Error("invalid secretKey: hash check failed");let[V,N,j,R]=O.decode(W),S=U.decrypt(z,V),L=G.create().update(S).update(j).digest(),k=L.subarray(0,32),x=U.encrypt(N,S,L.subarray(32,64)),h=$4(z,x),B=I.create({dkLen:32}).update(R).update(z).digest();return c$(S,x,!h?k:B),h?k:B}}}function YL($,U,J){return g0.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var ND={HASH256:sI,HASH512:kg,KDF:g0,XOF:dg,PRF:YL},Qn=VD({...ND,...vD[512]}),C8=VD({...ND,...vD[768]}),ng=VD({...ND,...vD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function WL($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=M0(J.seed))=>{g$(X,J.seed,"seed");let O=Q.isLE?WI(X):YI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function ZD($,U=!1){let J=WL($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=M0($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return c$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function E8($,U){return $J(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function gD($){return(U,J)=>$(U,{dkLen:J})}function wL($,U,...J){let G=E8(J,"seed"),I=E8(J,"publicKey");if($===void 0)$=G.bytesLen;p$($);function Q(X){g$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((W,w)=>W.keygen(O[w])),D=q.map((W)=>W.secretKey),z=q.map((W)=>W.publicKey);return{secretKey:D,publicKey:z}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=M0($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return c$(O),c$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function J4($,U,J,G,...I){let Q=wL($,J,...I),X=E8(I,"cipherText"),O=E8(I,"publicKey"),q=E8(I,"msg");if(U===void 0)U=q.bytesLen;return p$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,z=M0(q.bytesLen)){let W=O.decode(D),w=q.decode(z),v=I.map((j,R)=>j.encapsulate(W[R],w[R])),Z=v.map((j)=>j.sharedSecret),V=v.map((j)=>j.cipherText),N={sharedSecret:G(W,V,Z),cipherText:X.encode(V)};return c$(Z,V),N},decapsulate(D,z){let W=X.decode(D),{publicKey:w,secretKey:v}=Q.expandDecapsulationKey(z),Z=I.map((V,N)=>V.decapsulate(W[N],v[N]));return G(w,W,Z)}}}function cg($,U,J,G,I){return pU(G),pU(I),J4(32,32,gD(G),(Q,X,O)=>I(d$(O[0],O[1],X[1],Q[1],wI($))),U,J)}var Nn=cg("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",C8,ZD(qD,!0),g0,sI),Zn=cg("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",ng,ZD(Kg,!0),g0,sI);function vL($,U,J,G,I){return pU(G),pU(I),J4(32,32,gD(G),(Q,X,O)=>{let q=d$(O[0],O[1],X[0],Q[0],X[1],Q[1],wI($)),D=32,z=d$(wI("hybrid_prk"),q),W=Pg(I,z),w=d$(lJ(32,2),wI("shared_secret"),wI("")),v=Bg(I,W,w,32);return c$(W,w,z,q),v},U,J)}var ig=ZD(Tg),gn=vL("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",C8,ig,g0,eQ),VL=(()=>J4(32,32,gD(g0),($,U,J)=>sI(d$(J[0],J[1],U[1],$[1],wI("\\.//^\\"))),C8,ig))();function NL($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let z=0,W=U;;z=W,W+=U){if(W>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(z,W),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=M0(G)){return g$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=M0(G)){g$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),z=$.getPublicKey(q,!1);return c$(q),{sharedSecret:D,cipherText:z}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function ZL($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=NL(J,I,Q,G),O=64,q=O+G;return J4(32,32,(D)=>{g$(D,32);let z=g0(D,{dkLen:q}),W=z.subarray(0,O),w=z.subarray(O,q);return d$(W,w)},(D,z,W)=>sI(d$(W[0],W[1],z[1],D[1],wI($))),U,X)}var gL=(()=>ZL("MLKEM768-P256",C8,qD,128))();var G4=VL,pg=gL;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>t$($,U,J),RD=y$,oJ=LQ,JU=(...$)=>jq(...$),aJ=($)=>X8($),tJ=gq,eJ=($)=>u0($),X4=BigInt(0),MD=BigInt(1);function i0($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function O4($){if(typeof $==="bigint"){if(!Q4($))throw RangeError("positive bigint expected, got "+$)}else RD($);return $}function R0($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function _8($){let U=O4($).toString(16);return U.length&1?"0"+U:U}function og($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?X4:BigInt("0x"+$)}function JJ($){return og(LQ($))}function Q0($){return og(LQ(gI(t$($)).reverse()))}function q4($,U){if(y$(U),U===0)throw RangeError("zero length");$=O4($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return X8(J.padStart(U*2,"0"))}function b8($,U){return q4($,U).reverse()}function ag($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function gI($){return Uint8Array.from(S$($))}function D4($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var Q4=($)=>typeof $==="bigint"&&X4<=$;function ML($,U,J){return Q4($)&&Q4(U)&&Q4(J)&&U<=$&&$<J}function p0($,U,J,G){if(!ML(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function sJ($){if($<X4)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>X4;$>>=MD,U+=1);return U}var f8=($)=>(MD<<BigInt($))-MD;function tg($,U,J){if(y$($,"hashLen"),y$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},w=(...N)=>J(D,JU(q,...N)),v=(N=I)=>{if(D=w(Q,N),q=w(),N.length===0)return;D=w(X,N),q=w()},Z=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=w();let R=q.slice();j.push(R),N+=q.length}return JU(...j)};return(N,j)=>{W(),v(N);let R=void 0;while((R=j(Z()))===void 0)v();return W(),R}}function aU($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var jD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GU=BigInt(0),x$=BigInt(1),GJ=BigInt(2),U5=BigInt(3),I5=BigInt(4),J5=BigInt(5),RL=BigInt(7),G5=BigInt(8),jL=BigInt(9),Q5=BigInt(16);function F$($,U){if(U<=GU)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=GU?J:U+J}function tU($,U,J){if(U<GU)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >GU)G*=G,G%=J;return G}function eg($,U){if($===GU)throw Error("invert: expected non-zero number");if(U<=GU)throw Error("invert: expected positive modulus, got "+U);let J=F$($,U),G=U,I=GU,Q=x$,X=x$,O=GU;while(J!==GU){let D=G/J,z=G-J*D,W=I-X*D,w=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=w}if(G!==x$)throw Error("invert: does not exist");return F$(I,U)}function HD($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function X5($,U){let J=$,G=(J.ORDER+x$)/I5,I=J.pow(U,G);return HD(J,I,U),I}function HL($,U){let J=$,G=(J.ORDER-J5)/G5,I=J.mul(U,GJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,GJ),Q),q=J.mul(X,J.sub(O,J.ONE));return HD(J,q,U),q}function TL($){let U=z4($),J=O5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+RL)/Q5;return(O,q)=>{let D=O,z=D.pow(q,X),W=D.mul(z,G),w=D.mul(z,I),v=D.mul(z,Q),Z=D.eql(D.sqr(W),q),V=D.eql(D.sqr(w),q);z=D.cmov(z,W,Z),W=D.cmov(v,w,V);let N=D.eql(D.sqr(W),q),j=D.cmov(z,W,N);return HD(D,j,q),j}}function O5($){if($<U5)throw Error("sqrt is not defined for small field");let U=$-x$,J=0;while(U%GJ===GU)U/=GJ,J++;let G=GJ,I=z4($);while(sg(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return X5;let Q=I.pow(G,U),X=(U+x$)/GJ;return function(q,D){let z=q;if(z.is0(D))return D;if(sg(z,D)!==1)throw Error("Cannot find square root");let W=J,w=z.mul(z.ONE,Q),v=z.pow(D,U),Z=z.pow(D,X);while(!z.eql(v,z.ONE)){if(z.is0(v))return z.ZERO;let V=1,N=z.sqr(v);while(!z.eql(N,z.ONE))if(V++,N=z.sqr(N),V===W)throw Error("Cannot find square root");let j=x$<<BigInt(W-V-1),R=z.pow(w,j);W=V,w=z.sqr(R),v=z.mul(v,w),Z=z.mul(Z,R)}return Z}}function KL($){if($%I5===U5)return X5;if($%G5===J5)return HL;if($%Q5===jL)return TL($);return O5($)}var o0=($,U)=>(F$($,U)&x$)===x$,AL=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function TD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=AL.reduce((G,I)=>{return G[I]="function",G},U);if(aU($,J),R0($.BYTES,"BYTES"),R0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=x$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function PL($,U,J){let G=$;if(J<GU)throw Error("invalid exponent, negatives unsupported");if(J===GU)return G.ONE;if(J===x$)return U;let I=G.ONE,Q=U;while(J>GU){if(J&x$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=x$}return I}function k8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function sg($,U){let J=$,G=(J.ORDER-x$)/GJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function BL($,U){if(U!==void 0)RD(U);if($<=GU)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=sJ($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var $5=new WeakMap;class KD{ORDER;BITS;BYTES;isLE;ZERO=GU;ONE=x$;_lengths;_mod;constructor($,U={}){if($<=x$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=BL($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return F$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return GU<=$&&$<this.ORDER}is0($){return $===GU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&x$)===x$}neg($){return F$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return F$($*$,this.ORDER)}add($,U){return F$($+U,this.ORDER)}sub($,U){return F$($-U,this.ORDER)}mul($,U){return F$($*U,this.ORDER)}pow($,U){return PL(this,$,U)}div($,U){return F$($*eg(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return eg($,this.ORDER)}sqrt($){let U=$5.get(this);if(!U)$5.set(this,U=KL(this.ORDER));return U(this,$)}toBytes($){return this.isLE?b8($,this.BYTES):q4($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?Q0($):JJ($);if(X)O=F$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return k8(this,$)}cmov($,U,J){return i0(J,"condition"),J?U:$}}Object.freeze(KD.prototype);function z4($,U={}){return new KD($,U)}function q5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=x$)throw Error("field order must be greater than 1");let U=sJ($-x$);return Math.ceil(U/8)}function AD($){let U=q5($);return U+Math.ceil(U/2)}function D5($,U,J=!1){S$($);let G=$.length,I=q5(U),Q=Math.max(AD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?Q0($):JJ($),O=F$(X,U-x$)+x$;return J?b8(O,I):q4(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $G=BigInt(0),QJ=BigInt(1);function F8($,U){let J=U.negate();return $?J:U}function XJ($,U){let J=k8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function w5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function PD($,U){w5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=f8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function z5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=QJ;let D=U*G,z=D+Math.abs(O)-1,W=O===0,w=O<0,v=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:w,isNegF:v,offsetF:D}}var BD=new WeakMap,v5=new WeakMap;function LD($){return v5.get($)||1}function Y5($){if($!==$G)throw Error("invalid wNAF")}class u8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>$G){if(U&QJ)J=J.add(G);G=G.double(),U>>=QJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=PD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=PD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:w}=z5(J,X,Q);if(J=O,D)I=I.add(F8(W,U[w]));else G=G.add(F8(z,U[q]))}return Y5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=PD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===$G)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=z5(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return Y5(J),G}getPrecomputes($,U,J){let G=BD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);BD.set(U,G)}}return G}cached($,U,J){let G=LD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=LD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){w5(U,this.bits),v5.set($,U),BD.delete($)}hasCache($){return LD($)!==1}}function V5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>$G||G>$G){if(J&QJ)Q=Q.add(I);if(G&QJ)X=X.add(I);I=I.double(),J>>=QJ,G>>=QJ}return{p1:Q,p2:X}}function W5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return TD(U),U}else return z4($,{isLE:J})}function Y4($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>$G))throw Error(`CURVE.${q} must be positive bigint`)}let I=W5(U.p,J.Fp,G),Q=W5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function x8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function m8($,U){if(R0($),R0(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function LL($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function SL($){if(!tJ($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?D4($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function SD($,U,J,G){if(S$($),R0(J),U=SL(U),U.length>255)U=G(JU(D4("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=JU(U,m8(U.length,1)),q=new Uint8Array(Q),D=m8(J,2),z=Array(X),W=G(JU(q,$,D,m8(0,1),O));z[0]=G(JU(W,m8(1,1),O));for(let v=1;v<X;v++){let Z=[LL(W,z[v-1]),m8(v+1,1),O];z[v]=G(JU(...Z))}return JU(...z).slice(0,J)}var N5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z5=($,U)=>($+($>=0?U:-U)/M5)/U;function CL($,U,J){p0("scalar",$,j0,J);let[[G,I],[Q,X]]=U,O=Z5(X*$,J),q=Z5(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<j0,w=z<j0;if(W)D=-D;if(w)z=-z;let v=f8(Math.ceil(sJ(J)/2))+MI;if(D<j0||D>=v||z<j0||z>=v)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:W,k1:D,k2neg:w,k2:z}}function ED($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function CD($,U){aU($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(i0(J.lowS,"lowS"),i0(J.prehash,"prehash"),J.format!==void 0)ED(J.format);return J}class g5 extends Error{constructor($=""){super($)}}var X0={Err:g5,_tlv:{encode:($,U)=>{let{Err:J}=X0;if(R0($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=_8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?_8(I.length/2|128):"";return _8($)+Q+I+U},decode($,U){let{Err:J}=X0;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=X0;if(O4($),$<j0)throw new U("integer: negative integers are not allowed");let J=_8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=X0;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return JJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=X0,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=X0,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(X0._tlv);Object.freeze(X0._int);Object.freeze(X0);var j0=BigInt(0),MI=BigInt(1),M5=BigInt(2),W4=BigInt(3),EL=BigInt(4);function R5($,U={}){let J=Y4("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;aU(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=H5(G,I);function W(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function w(E,A,_){if(D&&A.is0())return Uint8Array.of(0);let{x:M,y:K}=A.toAffine(),H=G.toBytes(M);if(i0(_,"isCompressed"),_){W();let b=!G.isOdd(K);return JU(j5(b),H)}else return JU(Uint8Array.of(4),H,G.toBytes(K))}function v(E){S$(E,void 0,"Point");let{publicKey:A,publicKeyUncompressed:_}=z,M=E.length,K=E[0],H=E.subarray(1);if(D&&M===1&&K===0)return{x:G.ZERO,y:G.ZERO};if(M===A&&(K===2||K===3)){let b=G.fromBytes(H);if(!G.isValid(b))throw Error("bad point: is not on curve, wrong x");let P=N(b),F;try{F=G.sqrt(P)}catch($$){let X$=$$ instanceof Error?": "+$$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}W();let y=G.isOdd(F);if((K&1)===1!==y)F=G.neg(F);return{x:b,y:F}}else if(M===_&&K===4){let b=G.BYTES,P=G.fromBytes(H.subarray(0,b)),F=G.fromBytes(H.subarray(b,b*2));if(!j(P,F))throw Error("bad point: is not on curve");return{x:P,y:F}}else throw Error(`bad point: got length ${M}, expected compressed=${A} or uncompressed=${_}`)}let Z=U.toBytes===void 0?w:U.toBytes,V=U.fromBytes===void 0?v:U.fromBytes;function N(E){let A=G.sqr(E),_=G.mul(A,E);return G.add(G.add(_,G.mul(E,Q.a)),Q.b)}function j(E,A){let _=G.sqr(A),M=N(E);return G.eql(_,M)}if(!j(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let R=G.mul(G.pow(Q.a,W4),EL),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(R,S)))throw Error("bad curve params: a or b");function L(E,A,_=!1){if(!G.isValid(A)||_&&G.is0(A))throw Error(`bad point coordinate ${E}`);return A}function k(E){if(!(E instanceof B))throw Error("Weierstrass Point expected")}function x(E){if(!q||!q.basises)throw Error("no endo");return CL(E,q.basises,I.ORDER)}function h(E,A,_,M,K){return _=new B(G.mul(_.X,E),_.Y,_.Z),A=F8(M,A),_=F8(K,_),A.add(_)}class B{static BASE=new B(Q.Gx,Q.Gy,G.ONE);static ZERO=new B(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(E,A,_){this.X=L("x",E),this.Y=L("y",A,!0),this.Z=L("z",_),Object.freeze(this)}static CURVE(){return Q}static fromAffine(E){let{x:A,y:_}=E||{};if(!E||!G.isValid(A)||!G.isValid(_))throw Error("invalid affine point");if(E instanceof B)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(_))return B.ZERO;return new B(A,_,G.ONE)}static fromBytes(E){let A=B.fromAffine(V(S$(E,void 0,"point")));return A.assertValidity(),A}static fromHex(E){return B.fromBytes(aJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,A=!0){if(a.createCache(this,E),!A)this.multiply(W4);return this}assertValidity(){let E=this;if(E.is0()){if(U.allowInfinityPoint&&G.is0(E.X)&&G.eql(E.Y,G.ONE)&&G.is0(E.Z))return;throw Error("bad point: ZERO")}let{x:A,y:_}=E.toAffine();if(!G.isValid(A)||!G.isValid(_))throw Error("bad point: x or y not field elements");if(!j(A,_))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){k(E);let{X:A,Y:_,Z:M}=this,{X:K,Y:H,Z:b}=E,P=G.eql(G.mul(A,b),G.mul(K,M)),F=G.eql(G.mul(_,b),G.mul(H,M));return P&&F}negate(){return new B(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:A}=Q,_=G.mul(A,W4),{X:M,Y:K,Z:H}=this,b=G.ZERO,P=G.ZERO,F=G.ZERO,y=G.mul(M,M),n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(M,K);return X$=G.add(X$,X$),F=G.mul(M,H),F=G.add(F,F),b=G.mul(E,F),P=G.mul(_,$$),P=G.add(b,P),b=G.sub(n,P),P=G.add(n,P),P=G.mul(b,P),b=G.mul(X$,b),F=G.mul(_,F),$$=G.mul(E,$$),X$=G.sub(y,$$),X$=G.mul(E,X$),X$=G.add(X$,F),F=G.add(y,y),y=G.add(F,y),y=G.add(y,$$),y=G.mul(y,X$),P=G.add(P,y),$$=G.mul(K,H),$$=G.add($$,$$),y=G.mul($$,X$),b=G.sub(b,y),F=G.mul($$,n),F=G.add(F,F),F=G.add(F,F),new B(b,P,F)}add(E){k(E);let{X:A,Y:_,Z:M}=this,{X:K,Y:H,Z:b}=E,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=Q.a,$$=G.mul(Q.b,W4),X$=G.mul(A,K),q$=G.mul(_,H),W$=G.mul(M,b),N$=G.add(A,_),v$=G.add(K,H);N$=G.mul(N$,v$),v$=G.add(X$,q$),N$=G.sub(N$,v$),v$=G.add(A,M);let V$=G.add(K,b);return v$=G.mul(v$,V$),V$=G.add(X$,W$),v$=G.sub(v$,V$),V$=G.add(_,M),P=G.add(H,b),V$=G.mul(V$,P),P=G.add(q$,W$),V$=G.sub(V$,P),y=G.mul(n,v$),P=G.mul($$,W$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),F=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),W$=G.mul(n,W$),v$=G.mul($$,v$),q$=G.add(q$,W$),W$=G.sub(X$,W$),W$=G.mul(n,W$),v$=G.add(v$,W$),X$=G.mul(q$,v$),F=G.add(F,X$),X$=G.mul(V$,v$),P=G.mul(N$,P),P=G.sub(P,X$),X$=G.mul(N$,q$),y=G.mul(V$,y),y=G.add(y,X$),new B(P,F,y)}subtract(E){return k(E),this.add(E.negate())}is0(){return this.equals(B.ZERO)}multiply(E){let{endo:A}=U;if(!I.isValidNot0(E))throw RangeError("invalid scalar: out of range");let _,M,K=(H)=>a.cached(this,H,(b)=>XJ(B,b));if(A){let{k1neg:H,k1:b,k2neg:P,k2:F}=x(E),{p:y,f:n}=K(b),{p:$$,f:X$}=K(F);M=n.add(X$),_=h(A.beta,y,$$,H,P)}else{let{p:H,f:b}=K(E);_=H,M=b}return XJ(B,[_,M])[0]}multiplyUnsafe(E){let{endo:A}=U,_=this,M=E;if(!I.isValid(M))throw RangeError("invalid scalar: out of range");if(M===j0||_.is0())return B.ZERO;if(M===MI)return _;if(a.hasCache(this))return this.multiply(M);if(A){let{k1neg:K,k1:H,k2neg:b,k2:P}=x(M),{p1:F,p2:y}=V5(B,_,H,P);return h(A.beta,F,y,K,b)}else return a.unsafe(_,M)}toAffine(E){let A=this,_=E,{X:M,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:M,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(M,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}isTorsionFree(){let{isTorsionFree:E}=U;if(X===MI)return!0;if(E)return E(B,this);return a.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:E}=U;if(X===MI)return this;if(E)return E(B,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===MI)return this.is0();return this.clearCofactor().is0()}toBytes(E=!0){return i0(E,"isCompressed"),this.assertValidity(),Z(B,this,E)}toHex(E=!0){return oJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let m=I.BITS,a=new u8(B,U.endo?Math.ceil(m/2):m);if(m>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function j5($){return Uint8Array.of($?2:3)}function H5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function _L($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?eJ:U.randomBytes,I=Object.assign(H5($.Fp,J),{seed:Math.max(AD(J.ORDER),16)});function Q(v){try{let Z=J.fromBytes(v);return J.isValidNot0(Z)}catch(Z){return!1}}function X(v,Z){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=v.length;if(Z===!0&&j!==V)return!1;if(Z===!1&&j!==N)return!1;return!!$.fromBytes(v)}catch(j){return!1}}function O(v){return v=v===void 0?G(I.seed):v,D5(S$(v,I.seed,"seed"),J.ORDER)}function q(v,Z=!0){return $.BASE.multiply(J.fromBytes(v)).toBytes(Z)}function D(v){let{secretKey:Z,publicKey:V,publicKeyUncompressed:N}=I,j=J._lengths;if(!tJ(v))return;let R=S$(v,void 0,"key").length,S=R===V||R===N,L=R===Z||!!j?.includes(R);if(S&&L)return;return S}function z(v,Z,V=!0){if(D(v)===!0)throw Error("first arg must be private key");if(D(Z)===!1)throw Error("second arg must be public key");let N=J.fromBytes(v);return $.fromBytes(Z).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},w=x8(O,q);return Object.freeze(W),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:w,Point:$,utils:W,lengths:I})}function T5($,U,J={}){let G=U;F0(G),aU(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?eJ:J.randomBytes,Q=J.hmac===void 0?(K,H)=>v0(G,K,H):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z}=_L($,J),V={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=q*M5+MI<X.ORDER;function j(K){let H=q>>MI;return K>H}function R(K,H){if(!O.isValidNot0(H))throw Error(`invalid signature ${K}: out of range 1..Point.Fn.ORDER`);return H}function S(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(K,H){ED(H);let b=Z.signature,P=H==="compact"?b:H==="recovered"?b+1:void 0;return S$(K,P)}class k{r;s;recovery;constructor(K,H,b){if(this.r=R("r",K),this.s=R("s",H),b!=null){if(S(),![0,1,2,3].includes(b))throw Error("invalid recovery id");this.recovery=b}Object.freeze(this)}static fromBytes(K,H=V.format){L(K,H);let b;if(H==="der"){let{r:n,s:$$}=X0.toSig(S$(K));return new k(n,$$)}if(H==="recovered")b=K[0],H="compact",K=K.subarray(1);let P=Z.signature/2,F=K.subarray(0,P),y=K.subarray(P,P*2);return new k(O.fromBytes(F),O.fromBytes(y),b)}static fromHex(K,H){return this.fromBytes(aJ(K),H)}assertRecovery(){let{recovery:K}=this;if(K==null)throw Error("invalid recovery id: must be present");return K}addRecoveryBit(K){return new k(this.r,this.s,K)}recoverPublicKey(K){let{r:H,s:b}=this,P=this.assertRecovery(),F=P===2||P===3?H+q:H;if(!X.isValid(F))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(F),n=$.fromBytes(JU(j5((P&1)===0),y)),$$=O.inv(F),X$=h(S$(K,void 0,"msgHash")),q$=O.create(-X$*$$),W$=O.create(b*$$),N$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(W$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return j(this.s)}toBytes(K=V.format){if(ED(K),K==="der")return aJ(X0.hexFromSig(this));let{r:H,s:b}=this,P=O.toBytes(H),F=O.toBytes(b);if(K==="recovered")return S(),JU(Uint8Array.of(this.assertRecovery()),P,F);return JU(P,F)}toHex(K){return oJ(this.toBytes(K))}}Object.freeze(k.prototype),Object.freeze(k);let x=J.bits2int===void 0?function(H){if(H.length>8192)throw Error("input is too large");let b=JJ(H),P=H.length*8-D;return P>0?b>>BigInt(P):b}:J.bits2int,h=J.bits2int_modN===void 0?function(H){return O.create(x(H))}:J.bits2int_modN,B=f8(D);function m(K){return p0("num < 2^"+D,K,j0,B),O.toBytes(K)}function a(K,H){return S$(K,void 0,"message"),H?S$(G(K),void 0,"prehashed message"):K}function E(K,H,b){let{lowS:P,prehash:F,extraEntropy:y}=CD(b,V);K=a(K,F);let n=h(K),$$=O.fromBytes(H);if(!O.isValidNot0($$))throw Error("invalid private key");let X$=[m($$),m(n)];if(y!=null&&y!==!1){let v$=y===!0?I(Z.secretKey):y;X$.push(S$(v$,void 0,"extraEntropy"))}let q$=JU(...X$),W$=n;function N$(v$){let V$=x(v$);if(!O.isValidNot0(V$))return;let R$=O.inv(V$),b$=$.BASE.multiply(V$).toAffine(),k$=O.create(b$.x);if(k$===j0)return;let qU=O.create(R$*O.create(W$+k$*$$));if(qU===j0)return;let DU=(b$.x===k$?0:2)|Number(b$.y&MI),SU=qU;if(P&&j(qU))SU=O.neg(qU),DU^=1;return new k(k$,SU,N?void 0:DU)}return{seed:q$,k2sig:N$}}function A(K,H,b={}){let{seed:P,k2sig:F}=E(K,H,b);return tg(G.outputLen,O.BYTES,Q)(P,F).toBytes(b.format)}function _(K,H,b,P={}){let{lowS:F,prehash:y,format:n}=CD(P,V);if(b=S$(b,void 0,"publicKey"),H=a(H,y),!tJ(K)){let $$=K instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+$$)}L(K,n);try{let $$=k.fromBytes(K,n),X$=$.fromBytes(b);if(F&&$$.hasHighS())return!1;let{r:q$,s:W$}=$$,N$=h(H),v$=O.inv(W$),V$=O.create(N$*v$),R$=O.create(q$*v$),b$=$.BASE.multiplyUnsafe(V$).add(X$.multiplyUnsafe(R$));if(b$.is0())return!1;return O.create(b$.x)===q$}catch($$){return!1}}function M(K,H,b={}){let{prehash:P}=CD(b,V);return H=a(H,P),k.fromBytes(K,"recovered").recoverPublicKey(H).toBytes()}return Object.freeze({keygen:z,getPublicKey:W,getSharedSecret:w,utils:v,lengths:Z,Point:$,sign:A,verify:_,recoverPublicKey:M,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bL=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var fL=R5(bL),UG=T5(fL,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RI=BigInt(0),EU=BigInt(1),_D=BigInt(2),kL=BigInt(8);function FL($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function K5($,U={}){let J=U,G=Y4("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;aU(J,{},{uvRatio:"function"});let q=_D<<BigInt(Q.BYTES*8)-EU,D=(V)=>I.create(V),z=J.uvRatio===void 0?(V,N)=>{try{return{isValid:!0,value:I.sqrt(I.div(V,N))}}catch(j){return{isValid:!1,value:RI}}}:J.uvRatio;if(!FL(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function W(V,N,j=!1){let R=j?EU:RI;return p0("coordinate "+V,N,R,q),N}function w(V){if(!(V instanceof v))throw Error("EdwardsPoint expected")}class v{static BASE=new v(X.Gx,X.Gy,EU,D(X.Gx*X.Gy));static ZERO=new v(RI,EU,EU,RI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(V,N,j,R){this.X=W("x",V),this.Y=W("y",N),this.Z=W("z",j,!0),this.T=W("t",R),Object.freeze(this)}static CURVE(){return X}static fromAffine(V){if(V instanceof v)throw Error("extended point not allowed");let{x:N,y:j}=V||{};return W("x",N),W("y",j),new v(N,j,EU,D(N*j))}static fromBytes(V,N=!1){let j=I.BYTES,{a:R,d:S}=X;V=gI(S$(V,j,"point")),i0(N,"zip215");let L=gI(V),k=V[j-1];L[j-1]=k&-129;let x=Q0(L),h=N?q:I.ORDER;p0("point.y",x,RI,h);let B=D(x*x),m=D(B-EU),a=D(S*B-R),{isValid:E,value:A}=z(m,a);if(!E)throw Error("bad point: invalid y coordinate");let _=(A&EU)===EU,M=(k&128)!==0;if(!N&&A===RI&&M)throw Error("bad point: x=0 and x_0=1");if(M!==_)A=D(-A);return v.fromAffine({x:A,y:x})}static fromHex(V,N=!1){return v.fromBytes(aJ(V),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,N=!0){if(Z.createCache(this,V),!N)this.multiply(_D);return this}assertValidity(){let V=this,{a:N,d:j}=X;if(V.is0())throw Error("bad point: ZERO");let{X:R,Y:S,Z:L,T:k}=V,x=D(R*R),h=D(S*S),B=D(L*L),m=D(B*B),a=D(x*N),E=D(B*D(a+h)),A=D(m+D(j*D(x*h)));if(E!==A)throw Error("bad point: equation left != right (1)");let _=D(R*S),M=D(L*k);if(_!==M)throw Error("bad point: equation left != right (2)")}equals(V){w(V);let{X:N,Y:j,Z:R}=this,{X:S,Y:L,Z:k}=V,x=D(N*k),h=D(S*R),B=D(j*k),m=D(L*R);return x===h&&B===m}is0(){return this.equals(v.ZERO)}negate(){return new v(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=X,{X:N,Y:j,Z:R}=this,S=D(N*N),L=D(j*j),k=D(_D*D(R*R)),x=D(V*S),h=N+j,B=D(D(h*h)-S-L),m=x+L,a=m-k,E=x-L,A=D(B*a),_=D(m*E),M=D(B*E),K=D(a*m);return new v(A,_,K,M)}add(V){w(V);let{a:N,d:j}=X,{X:R,Y:S,Z:L,T:k}=this,{X:x,Y:h,Z:B,T:m}=V,a=D(R*x),E=D(S*h),A=D(k*j*m),_=D(L*B),M=D((R+S)*(x+h)-a-E),K=_-A,H=_+A,b=D(E-N*a),P=D(M*K),F=D(H*b),y=D(M*b),n=D(K*H);return new v(P,F,n,y)}subtract(V){return w(V),this.add(V.negate())}multiply(V){if(!Q.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f:j}=Z.cached(this,V,(R)=>XJ(v,R));return XJ(v,[N,j])[0]}multiplyUnsafe(V){if(!Q.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===RI)return v.ZERO;if(this.is0()||V===EU)return this;return Z.unsafe(this,V,(N)=>XJ(v,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return Z.unsafe(this,X.n).is0()}toAffine(V){let N=this,j=V,{X:R,Y:S,Z:L}=N,k=N.is0();if(j==null)j=k?kL:I.inv(L);let x=D(R*j),h=D(S*j),B=I.mul(L,j);if(k)return{x:RI,y:EU};if(B!==EU)throw Error("invZ was invalid");return{x,y:h}}clearCofactor(){if(O===EU)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:V,y:N}=this.toAffine(),j=I.toBytes(N);return j[j.length-1]|=V&EU?128:0,j}toHex(){return oJ(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let Z=new u8(v,Q.BITS);if(Q.BITS>=8)v.BASE.precompute(8);return Object.freeze(v.prototype),Object.freeze(v),v}class bD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){jD()}static fromHex($){jD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return oJ(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var y8=BigInt(0),IG=BigInt(1),w4=BigInt(2);function uL($){return aU($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function A5($){let U=uL($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?eJ:X,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),w=O?BigInt(121665):BigInt(39081),v=O?w4**BigInt(254):w4**BigInt(447),Z=O?BigInt(8)*w4**BigInt(251)-IG:BigInt(4)*w4**BigInt(445)-IG,V=v+Z+IG,N=(M)=>F$(M,J),j=R(W);function R(M){return b8(N(M),z)}function S(M){let K=gI(S$(M,z,"uCoordinate"));if(O)K[31]&=127;return N(Q0(K))}function L(M){return Q0(I(gI(S$(M,z,"scalar"))))}function k(M,K){let H=a(S(K),L(M));if(H===y8)throw Error("invalid private or public key received");return R(H)}function x(M){return k(M,j)}let h=x,B=k;function m(M,K,H){let b=N(M*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(M,K){p0("u",M,y8,J),p0("scalar",K,v,V);let H=K,b=M,P=IG,F=y8,y=M,n=IG,$$=y8;for(let q$=BigInt(D-1);q$>=y8;q$--){let W$=H>>q$&IG;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,v$=N(N$*N$),V$=P-F,R$=N(V$*V$),b$=v$-R$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,w0=DU-SU;y=N(W0*W0),n=N(b*N(w0*w0)),P=N(v$*R$),F=N(b$*(v$+N(w*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(M)=>{return M=M===void 0?q(z):M,S$(M,E.seed,"seed"),M},_={randomSecretKey:A};return Object.freeze(E),Object.freeze(_),Object.freeze({keygen:x8(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var xL=BigInt(0),a0=BigInt(1),P5=BigInt(2),mL=BigInt(3),yL=BigInt(5),rL=BigInt(8),qJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),uD=(()=>({p:qJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:rL,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function S5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=qJ,O=$*$%Q*$%Q,q=tU(O,P5,Q)*O%Q,D=tU(q,a0,Q)*$%Q,z=tU(D,yL,Q)*D%Q,W=tU(z,U,Q)*z%Q,w=tU(W,J,Q)*W%Q,v=tU(w,G,Q)*w%Q,Z=tU(v,I,Q)*v%Q,V=tU(Z,I,Q)*v%Q,N=tU(V,U,Q)*z%Q;return{pow_p_5_8:tU(N,P5,Q)*$%Q,b2:O}}function hL($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var fD=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function xD($,U){let J=qJ,G=F$(U*U*U,J),I=F$(G*G*U,J),Q=S5($*I).pow_p_5_8,X=F$($*G*Q,J),O=F$(U*X*X,J),q=X,D=F$(X*fD,J),z=O===$,W=O===F$(-$,J),w=O===F$(-$*fD,J);if(z)X=q;if(W||w)X=D;if(o0(X,J))X=F$(-X,J);return{isValid:z||W,value:X}}var OJ=K5(uD,{uvRatio:xD}),jI=(()=>OJ.Fp)(),C5=(()=>OJ.Fn)();var v4=(()=>{let $=qJ;return A5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=S5(U);return F$(tU(J,mL,$)*G,$)},adjustScalarBytes:hL})})();var kD=fD,dL=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),lL=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),nL=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),cL=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),B5=($)=>xD(a0,$),iL=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),FD=($)=>jI.create(Q0($)&iL);function L5($){let{d:U}=uD,J=qJ,G=(j)=>jI.create(j),I=G(kD*$*$),Q=G((I+a0)*nL),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=xD(Q,O),z=G(D*$);if(!o0(z,J))z=G(-z);if(!q)D=z;if(!q)X=I;let W=G(X*(I-a0)*cL-O),w=D*D,v=G((D+D)*O),Z=G(W*dL),V=G(a0-w),N=G(a0+w);return new OJ(G(v*N),G(V*Z),G(Z*N),G(v*V))}class TU extends bD{static BASE=(()=>new TU(OJ.BASE))();static ZERO=(()=>new TU(OJ.ZERO))();static Fp=(()=>jI)();static Fn=(()=>C5)();constructor($){super($)}static fromAffine($){return new TU(OJ.fromAffine($))}assertSame($){if(!($ instanceof TU))throw Error("RistrettoPoint expected")}init($){return new TU($)}static fromBytes($){t$($,32);let{a:U,d:J}=uD,G=qJ,I=(S)=>jI.create(S),Q=FD($);if(!ag(jI.toBytes(Q),$)||o0(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(a0+U*X),q=I(a0-U*X),D=I(O*O),z=I(q*q),W=I(U*J*D-z),{isValid:w,value:v}=B5(I(W*z)),Z=I(v*q),V=I(v*Z*W),N=I((Q+Q)*Z);if(o0(N,G))N=I(-N);let j=I(O*V),R=I(N*j);if(!w||o0(R,G)||j===xL)throw Error("invalid ristretto255 encoding 2");return new TU(new OJ(N,j,a0,R))}static fromHex($){return TU.fromBytes(X8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=qJ,Q=(V)=>jI.create(V),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=B5(Q(X*q)),z=Q(D*X),W=Q(D*O),w=Q(z*W*G),v;if(o0(G*w,I)){let V=Q(U*kD),N=Q($*kD);$=V,U=N,v=Q(z*lL)}else v=W;if(o0($*w,I))U=Q(-U);let Z=Q((J-U)*v);if(o0(Z,I))Z=Q(-Z);return jI.toBytes(Z)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>jI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(TU.ZERO)}}Object.freeze(TU.BASE);Object.freeze(TU.ZERO);Object.freeze(TU.prototype);Object.freeze(TU);var pL=Object.freeze({Point:TU,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=SD($,J,64,_Q);return pL.deriveToCurve(G)},hashToScalar($,U={DST:N5}){let J=SD($,U.DST,64,_Q);return C5.create(Q0(J))},deriveToCurve($){t$($,64);let U=FD($.subarray(0,32)),J=L5(U),G=FD($.subarray(32,64)),I=L5(G);return new TU(J.add(I))}});var E5=!1,oL=!1;async function _5($,U){if(oL)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function V4($,U){return await _5(async()=>{let J=mD($)?$:await tL($),G=await crypto.subtle.importKey("raw",eL(U),{name:"X25519"},E5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return v4.scalarMult($,U)})}async function r8($){return await _5(async()=>{return V4($,v4.GuBytes)},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return v4.scalarMultBase($)})}var aL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function tL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([...aL,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},E5,["deriveBits"])}function mD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function eL($){return $}class yD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),$S(DJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=DJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:DJ(this.transcript)}}}function $S($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function DJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function JG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function N4($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function rD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function b5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function f5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=DJ(G),X=Q.subarray(0,U),O=JG($,Q.subarray(U));return{data:X,rest:O}}class H0{args;body;constructor($,U){this.args=$,this.body=U}}async function US($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=WU.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=DJ(G);return{s:new H0(J,I)}}async function k5($){let U=new yD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await US(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=WU.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:JG($,O)}}}function hD($){let U=[];U.push(`age-encryption.org/v1
 `);for(let J of $){U.push("-> "+J.args.join(" ")+`
 `);for(let G=0;G<J.body.length;G+=48){let I=G+48;if(I>J.body.length)I=J.body.length;U.push(WU.encode(J.body.subarray(G,I))+`
 `)}if(J.body.length%48===0)U.push(`

package/dist/index.js CHANGED Viewed

@@ -310,7 +310,7 @@ Update marker: ${U.id}.
 `}function fH($){return $.replace(/[-:.TZ]/g,"").slice(0,14)}async function TG$($){await pU(c$($.artifactsDir,"report.json"),`${JSON.stringify($,null,2)}
 `),await pU(c$($.artifactsDir,"report.md"),KG$($))}function KG$($){let U=$.report.metrics.runtime,J=$.report.metrics.health,G=U.map((D)=>D.cpuPercent).sort((D,X)=>D-X),q=U.map((D)=>D.memoryPercent),I=J.filter((D)=>!D.ok),Q=["# Directory-sync stress report","",`- Run: \`${$.runId}\``,`- Target: \`${$.target.handle}\` (${$.target.domain})`,`- Profile: \`${$.report.profile}\``,`- Version: \`${$.report.baseline.version}\``,`- Result: **${$.report.success?"PASS":"FAIL"}**`,`- Started: ${$.startedAt}`,`- Completed: ${$.completedAt}`,"","## Phases","","| Phase | Operation | Count | Result | Pull latency | Persistence latency |","| --- | --- | ---: | --- | ---: | ---: |",...$.report.phases.map((D)=>`| ${D.id} | ${D.operation} | ${D.count} | ${D.success?"pass":`fail: ${D.error??"unknown"}`} | ${Cv(D.commitLatencyMs)} | ${Cv(D.persistenceLatencyMs)} |`),"","## Runtime","",`- Samples: ${U.length}`,`- CPU p50/p95/p99/max: ${XQ(_H(G,0.5))} / ${XQ(_H(G,0.95))} / ${XQ(_H(G,0.99))} / ${XQ(G.at(-1))}`,`- Memory max: ${XQ(q.length?Math.max(...q):void 0)}`,`- PIDs max: ${U.length?Math.max(...U.map((D)=>D.pids)):"n/a"}`,`- Container status/restarts/OOM: ${$.report.metrics.container?`${$.report.metrics.container.status} / ${$.report.metrics.container.restartCount} / ${$.report.metrics.container.oomKilled}`:"unknown"}`,`- External AI calls: ${$.report.metrics.externalAiCalls??0}`,`- Health samples: ${J.length}`,`- Health failures: ${I.length}`,"","## Cleanup","",`- Result: ${$.report.cleanup.success?"pass":"fail"}`,`- Remaining probes: ${$.report.cleanup.probesRemaining}`,`- Final entities: ${$.report.cleanup.finalEntities??"unknown"}`,`- Final notes: ${$.report.cleanup.finalNotes??"unknown"}`,`- Content tree restored: ${$.report.cleanup.contentTreeRestored??"unknown"}`,""];if($.report.failure)Q.push("## Failure","",$.report.failure,"");return`${Q.join(`
 `)}
-`}function _H($,U){if($.length===0)return;let J=Math.max(0,Math.ceil($.length*U)-1);return $[J]}function XQ($){return $===void 0?"n/a":`${$.toFixed(2)}%`}function Cv($){return $===void 0?"n/a":`${($/1000).toFixed(1)}s`}var RG$,wG$;var VQ=O$(()=>{b$();mY();NJ();hY();Lv();Sv();hY();RG$=R.object({HCLOUD_TOKEN:R.string().min(1),KAMAL_SSH_PRIVATE_KEY:R.string().min(1),CONTENT_REPO_ADMIN_TOKEN:R.string().min(1)}),wG$=R.object({servers:R.array(R.object({id:R.number().int(),status:R.string(),public_net:R.object({ipv4:R.object({ip:R.string().min(1)})})}))})});import{access as Uj,chmod as bN,mkdir as eD,readFile as qj,writeFile as Jj}from"fs/promises";import{dirname as du,join as P8}from"path";import{fileURLToPath as nu}from"url";var WQ={name:"@rizom/ops",version:"0.2.0-alpha.281",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var lH=`ARG BUN_VERSION=1.3.10
+`}function _H($,U){if($.length===0)return;let J=Math.max(0,Math.ceil($.length*U)-1);return $[J]}function XQ($){return $===void 0?"n/a":`${$.toFixed(2)}%`}function Cv($){return $===void 0?"n/a":`${($/1000).toFixed(1)}s`}var RG$,wG$;var VQ=O$(()=>{b$();mY();NJ();hY();Lv();Sv();hY();RG$=R.object({HCLOUD_TOKEN:R.string().min(1),KAMAL_SSH_PRIVATE_KEY:R.string().min(1),CONTENT_REPO_ADMIN_TOKEN:R.string().min(1)}),wG$=R.object({servers:R.array(R.object({id:R.number().int(),status:R.string(),public_net:R.object({ipv4:R.object({ip:R.string().min(1)})})}))})});import{access as Uj,chmod as bN,mkdir as eD,readFile as qj,writeFile as Jj}from"fs/promises";import{dirname as du,join as P8}from"path";import{fileURLToPath as nu}from"url";var WQ={name:"@rizom/ops",version:"0.2.0-alpha.283",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var lH=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 LABEL ai.rizom.brain.watchdog="true"

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.281",
+  "version": "0.2.0-alpha.283",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",