npm - @rizom/ops - Versions diffs - 0.2.0-alpha.290 → 0.2.0-alpha.292 - Mend

@rizom/ops 0.2.0-alpha.290 → 0.2.0-alpha.292

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -258,7 +258,7 @@ Update marker: ${U.id}.
 `),await Y0(u$($.artifactsDir,"report.md"),Jl($))}function Jl($){let U=$.report.metrics.runtime,J=$.report.metrics.health,G=U.map((O)=>O.cpuPercent).sort((O,q)=>O-q),I=U.map((O)=>O.memoryPercent),Q=J.filter((O)=>!O.ok),X=["# Directory-sync stress report","",`- Run: \`${$.runId}\``,`- Target: \`${$.target.handle}\` (${$.target.domain})`,`- Profile: \`${$.report.profile}\``,`- Version: \`${$.report.baseline.version}\``,`- Result: **${$.report.success?"PASS":"FAIL"}**`,`- Started: ${$.startedAt}`,`- Completed: ${$.completedAt}`,"","## Phases","","| Phase | Operation | Count | Result | Pull latency | Persistence latency |","| --- | --- | ---: | --- | ---: | ---: |",...$.report.phases.map((O)=>`| ${O.id} | ${O.operation} | ${O.count} | ${O.success?"pass":`fail: ${O.error??"unknown"}`} | ${pA(O.commitLatencyMs)} | ${pA(O.persistenceLatencyMs)} |`),"","## Runtime","",`- Samples: ${U.length}`,`- CPU p50/p95/p99/max: ${wQ(Tg(G,0.5))} / ${wQ(Tg(G,0.95))} / ${wQ(Tg(G,0.99))} / ${wQ(G.at(-1))}`,`- Memory max: ${wQ(I.length?Math.max(...I):void 0)}`,`- PIDs max: ${U.length?Math.max(...U.map((O)=>O.pids)):"n/a"}`,`- Container status/restarts/OOM: ${$.report.metrics.container?`${$.report.metrics.container.status} / ${$.report.metrics.container.restartCount} / ${$.report.metrics.container.oomKilled}`:"unknown"}`,`- External AI calls: ${$.report.metrics.externalAiCalls??0}`,`- Health samples: ${J.length}`,`- Health failures: ${Q.length}`,"","## Cleanup","",`- Result: ${$.report.cleanup.success?"pass":"fail"}`,`- Remaining probes: ${$.report.cleanup.probesRemaining}`,`- Final entities: ${$.report.cleanup.finalEntities??"unknown"}`,`- Final notes: ${$.report.cleanup.finalNotes??"unknown"}`,`- Content tree restored: ${$.report.cleanup.contentTreeRestored??"unknown"}`,""];if($.report.failure)X.push("## Failure","",$.report.failure,"");return`${X.join(`
 `)}
 `}function Tg($,U){if($.length===0)return;let J=Math.max(0,Math.ceil($.length*U)-1);return $[J]}function wQ($){return $===void 0?"n/a":`${$.toFixed(2)}%`}function pA($){return $===void 0?"n/a":`${($/1000).toFixed(1)}s`}var oh,ah;var Wq=J$(()=>{sU();jg();BJ();Dq();iA();cA();Dq();oh=T.object({HCLOUD_TOKEN:T.string().min(1),KAMAL_SSH_PRIVATE_KEY:T.string().min(1),CONTENT_REPO_ADMIN_TOKEN:T.string().min(1)}),ah=T.object({servers:T.array(T.object({id:T.number().int(),status:T.string(),public_net:T.object({ipv4:T.object({ip:T.string().min(1)})})}))})});import{parseArgs as TP}from"util";function h$($){return $}class TQ extends Error{constructor($){super($);this.name="CliUsageError"}}function KP($,U){let J={...U};for(let G of $)for(let[I,Q]of Object.entries(G.flags??{})){let X=J[I];if(X===void 0){J[I]=Q;continue}if(X.type!==Q.type||X.short!==Q.short||X.default!==Q.default)throw Error(`Conflicting definitions for flag --${I}: commands must agree on type, short, and default`)}return J}function AP($){let U={};for(let[J,G]of Object.entries($))U[J]={type:G.type,...G.short!==void 0?{short:G.short}:{},...G.default!==void 0?{default:G.default}:{}};return U}function PP($){if(!($ instanceof Error)||!("code"in $))return!1;return $.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||$.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function kg($,U){let J=KP(U.commands,U.globalFlags??{}),G,I;try{({values:G,positionals:I}=TP({args:$,options:AP(J),allowPositionals:!0,strict:U.strict??!0}))}catch(X){if(PP(X))throw new TQ(X.message.split(". ")[0]??X.message);throw X}if("help"in J&&G.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in J&&G.version===!0)return{command:"version",args:[],flags:{version:!0}};let Q={};for(let[X,O]of Object.entries(J)){let q=G[X];if(typeof q==="string"&&O.type==="string")Q[X]=q;else if(typeof q==="boolean"&&O.type==="boolean")Q[X]=q}return{command:I[0]??"help",args:I.slice(1),flags:Q}}function Fg($){let U=$.reduce((J,G)=>Math.max(J,G.label.length),0);return $.map((J)=>`  ${J.label.padEnd(U)}  ${J.description}`)}function BP($){return Fg($.map((U)=>({label:U.usage?`${U.name} ${U.usage}`:U.name,description:U.description})))}function LP($,U){let J=U.type==="string"?` ${U.placeholder??"<value>"}`:"",G=U.short!==void 0?`, -${U.short}`:"";return`--${$}${J}${G}`}function ug($){return Fg(Object.entries($).map(([U,J])=>({label:LP(U,J),description:J.description})))}function xg($,U){return`Usage: ${$} ${U.name}${U.usage?` ${U.usage}`:""}`}function SP($){return JSON.stringify(Object.entries($).map(([U,J])=>[U,J.type,J.short??"",J.description,J.placeholder??"",J.default??""]).sort((U,J)=>String(U[0]).localeCompare(String(J[0]))))}function CP($){let U=[],J=new Map;for(let I of $){let Q=I.flags??{};if(Object.keys(Q).length===0)continue;let X=SP(Q),O=J.get(X);if(O){O.names.push(I.name);continue}let q={names:[I.name],flags:Q};J.set(X,q),U.push(q)}let G=[];for(let I of U)G.push("",`${I.names.join(" / ")} options:`),G.push(...ug(I.flags));return G}function mg($){let U=[$.intro,"",`Usage: ${$.cliName} ${$.usage??"<command> [args]"}`,"","Commands:",...BP($.commands)];if($.globalFlags&&Object.keys($.globalFlags).length>0)U.push("","Options:",...ug($.globalFlags));return U.push(...CP($.commands)),U.join(`
-`)}function yg($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function RU($,U){let J=$[U];return typeof J==="string"?J:void 0}function KQ($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var AQ={name:"@rizom/ops",version:"0.2.0-alpha.290",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as vS,mkdirSync as wS,readFileSync as Xz,writeFileSync as Oz}from"fs";import{dirname as VS,join as d5}from"path";function Zq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function y$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function t$($,U,J=""){let G=Zq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(y$($.outputLen),y$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function uJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function PQ($,U){t$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function BQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function MU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function I0($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var _P=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function bP($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function fP($){for(let U=0;U<$.length;U++)$[U]=bP($[U]);return $}var Rq=_P?($)=>$:fP,hg=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),kP=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function LQ($){if(t$($),hg)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=kP[$[J]];return U}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function rg($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function X8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(hg)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=rg($.charCodeAt(Q)),O=rg($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function FP($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Mq($,U=""){if(typeof $==="string")return FP($);return t$($,void 0,U)}function jq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];t$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function SQ($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function Hq($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function u0($=32){y$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Tq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Kq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(F0($),t$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),MU(G)}update($){return uJ(this),this.iHash.update($),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var w0=(()=>{let $=(U,J,G)=>new Kq(U,J).update(G).digest();return $.create=(U,J)=>new Kq(U,J),$})();function O8($,U,J){if(F0($),J===void 0)J=new Uint8Array($.outputLen);return w0($,J,U)}var Aq=Uint8Array.of(0),lg=Uint8Array.of();function Pq($,U,J,G=32){F0($),y$(G,"length"),t$(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=lg;else t$(J,void 0,"info");let X=new Uint8Array(Q*I),O=w0.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)Aq[0]=z+1,q.update(z===0?lg:D).update(J).update(Aq).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),MU(D,Aq),X.slice(0,G)}var GI=($,U,J,G,I)=>Pq($,O8($,U,J),G,I);function dg($,U,J){return $&U^~$&J}function ng($,U,J){return $&U^$&J^U&J}class CQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){uJ(this),t$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=xJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,MU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=xJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var x0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),e$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),s$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EQ=BigInt(4294967295),ig=BigInt(32);function uP($,U=!1){if(U)return{h:Number($&EQ),l:Number($>>ig&EQ)};return{h:Number($>>ig&EQ)|0,l:Number($&EQ)|0}}function cg($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=uP($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Bq=($,U,J)=>$>>>J,Lq=($,U,J)=>$<<32-J|U>>>J,lI=($,U,J)=>$>>>J|U<<32-J,dI=($,U,J)=>$<<32-J|U>>>J,q8=($,U,J)=>$<<64-J|U>>>J-32,D8=($,U,J)=>$>>>J-32|U<<64-J;function V0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var pg=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),og=($,U,J,G)=>U+J+G+($/4294967296|0)|0,ag=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),tg=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,eg=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),sg=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var mP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QI=new Uint32Array(64);class Sq extends CQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)QI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=QI[z-15],v=QI[z-2],w=I0(W,7)^I0(W,18)^W>>>3,g=I0(v,17)^I0(v,19)^v>>>10;QI[z]=g+QI[z-7]+w+QI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=I0(X,6)^I0(X,11)^I0(X,25),v=D+W+dg(X,O,q)+mP[z]+QI[z]|0,g=(I0(J,2)^I0(J,13)^I0(J,22))+ng(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+g|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){MU(QI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),MU(this.buffer)}}class $7 extends Sq{A=x0[0]|0;B=x0[1]|0;C=x0[2]|0;D=x0[3]|0;E=x0[4]|0;F=x0[5]|0;G=x0[6]|0;H=x0[7]|0;constructor(){super(32)}}class yP extends Sq{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var U7=(()=>cg(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),rP=(()=>U7[0])(),hP=(()=>U7[1])(),XI=new Uint32Array(80),OI=new Uint32Array(80);class z8 extends CQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:v,Gl:w,Hh:g,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=v|0,this.Gl=w|0,this.Hh=g|0,this.Hl=V|0}process($,U){for(let M=0;M<16;M++,U+=4)XI[M]=$.getUint32(U),OI[M]=$.getUint32(U+=4);for(let M=16;M<80;M++){let S=XI[M-15]|0,L=OI[M-15]|0,k=lI(S,L,1)^lI(S,L,8)^Bq(S,L,7),x=dI(S,L,1)^dI(S,L,8)^Lq(S,L,7),h=XI[M-2]|0,B=OI[M-2]|0,m=lI(h,B,19)^q8(h,B,61)^Bq(h,B,6),a=dI(h,B,19)^D8(h,B,61)^Lq(h,B,6),E=ag(x,a,OI[M-7],OI[M-16]),A=tg(E,k,m,XI[M-7],XI[M-16]);XI[M]=A|0,OI[M]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:v,Fl:w,Gh:g,Gl:V,Hh:N,Hl:j}=this;for(let M=0;M<80;M++){let S=lI(z,W,14)^lI(z,W,18)^q8(z,W,41),L=dI(z,W,14)^dI(z,W,18)^D8(z,W,41),k=z&v^~z&g,x=W&w^~W&V,h=eg(j,L,x,hP[M],OI[M]),B=sg(h,N,S,k,rP[M],XI[M]),m=h|0,a=lI(J,G,28)^q8(J,G,34)^q8(J,G,39),E=dI(J,G,28)^D8(J,G,34)^D8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=g|0,j=V|0,g=v|0,V=w|0,v=z|0,w=W|0,{h:z,l:W}=V0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let R=pg(m,E,_);J=og(R,B,a,A),G=R|0}({h:J,l:G}=V0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=V0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=V0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=V0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=V0(this.Eh|0,this.El|0,z|0,W|0),{h:v,l:w}=V0(this.Fh|0,this.Fl|0,v|0,w|0),{h:g,l:V}=V0(this.Gh|0,this.Gl|0,g|0,V|0),{h:N,l:j}=V0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,v,w,g,V,N,j)}roundClean(){MU(XI,OI)}destroy(){this.destroyed=!0,MU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class I7 extends z8{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(64)}}class lP extends z8{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(48)}}var zU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),YU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class dP extends z8{Ah=zU[0]|0;Al=zU[1]|0;Bh=zU[2]|0;Bl=zU[3]|0;Ch=zU[4]|0;Cl=zU[5]|0;Dh=zU[6]|0;Dl=zU[7]|0;Eh=zU[8]|0;El=zU[9]|0;Fh=zU[10]|0;Fl=zU[11]|0;Gh=zU[12]|0;Gl=zU[13]|0;Hh=zU[14]|0;Hl=zU[15]|0;constructor(){super(28)}}class nP extends z8{Ah=YU[0]|0;Al=YU[1]|0;Bh=YU[2]|0;Bl=YU[3]|0;Ch=YU[4]|0;Cl=YU[5]|0;Dh=YU[6]|0;Dl=YU[7]|0;Eh=YU[8]|0;El=YU[9]|0;Fh=YU[10]|0;Fl=YU[11]|0;Gh=YU[12]|0;Gl=YU[13]|0;Hh=YU[14]|0;Hl=YU[15]|0;constructor(){super(32)}}var r$=Hq(()=>new $7,Tq(1));var _Q=Hq(()=>new I7,Tq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function uQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function _q($){if(!uQ($))throw TypeError("Uint8Array expected")}function O7($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function q7($){if(typeof $!=="function")throw TypeError("function expected");return!0}function qI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function W8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function fQ($){if(!Array.isArray($))throw TypeError("array expected")}function kQ($,U){if(!O7(!0,U))throw TypeError(`${$}: array of strings expected`)}function bq($,U){if(!O7(!1,U))throw TypeError(`${$}: array of numbers expected`)}function xU(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function mU($){let U=typeof $==="string"?$.split(""):$,J=U.length;kQ("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return fQ(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return fQ(I),I.map((Q)=>{qI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function yU($=""){return qI("join",$),{encode:(U)=>{return kQ("join.decode",U),U.join($)},decode:(U)=>{return qI("join.decode",U),U.split($)}}}function xQ($,U="="){return W8($),qI("padding",U),{encode(J){kQ("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){kQ("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function D7($){return q7($),{encode:(U)=>U,decode:(U)=>$(U)}}function J7($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(fQ($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(W8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let z=Q[D],W=U*O,v=W+z;if(!Number.isSafeInteger(v)||W/U!==O||v-z!==W)throw Error("convertRadix: carry overflow");let w=v/J;O=v%J;let g=Math.floor(w);if(Q[D]=g,!Number.isSafeInteger(g)||g*J+O!==v)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!g)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var z7=($,U)=>U===0?$:z7(U,$%U),FQ=($,U)=>$+(U-z7($,U)),bQ=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function Cq($,U,J,G){if(fQ($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(FQ(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${FQ(U,J)}`);let I=0,Q=0,X=bQ[U],O=bQ[J]-1,q=[];for(let D of $){if(W8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let z=bQ[Q];if(z===void 0)throw Error("invalid carry");I&=z-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function iP($){W8($);let U=256;return{encode:(J)=>{if(!uQ(J))throw TypeError("radix.encode input should be Uint8Array");return J7(Array.from(J),U,$)},decode:(J)=>{return bq("radix.decode",J),Uint8Array.from(J7(J,$,U))}}}function iU($,U=!1){if(W8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(FQ(8,$)>32||FQ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!uQ(J))throw TypeError("radix2.encode input should be Uint8Array");return Cq(Array.from(J),8,$,!U)},decode:(J)=>{return bq("radix2.decode",J),Uint8Array.from(Cq(J,$,8,U))}}}function G7($){return q7($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Hl=Object.freeze(xU(iU(4),mU("0123456789ABCDEF"),yU(""))),Tl=Object.freeze(xU(iU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),xQ(5),yU(""))),Kl=Object.freeze(xU(iU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),yU(""))),Al=Object.freeze(xU(iU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),xQ(5),yU(""))),Pl=Object.freeze(xU(iU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),yU(""))),Bl=Object.freeze(xU(iU(5),mU("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),yU(""),D7(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),Y7=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),cP=/[\t\n\f\r ]/,W7=($,U)=>{qI("base64",$);let J=U?"base64url":"base64";if($.length>0&&cP.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},fq=Object.freeze(Y7?{encode($){return _q($),$.toBase64()},decode($){return W7($,!1)}}:xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),xQ(6),yU(""))),WU=Object.freeze(xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),yU(""))),Ll=Object.freeze(Y7?{encode($){return _q($),$.toBase64({alphabet:"base64url"})},decode($){return W7($,!0)}}:xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),xQ(6),yU(""))),Sl=Object.freeze(xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),yU(""))),kq=($)=>xU(iP(58),mU($),yU("")),Cl=Object.freeze(kq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),El=Object.freeze(kq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),_l=Object.freeze(kq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Eq=xU(mU("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),yU("")),Q7=[996825010,642813549,513874426,1027748829,705979059];function Y8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<Q7.length;G++)if((U>>G&1)===1)J^=Q7[G];return J}function X7($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=Y8(I)^X>>5}I=Y8(I);for(let Q=0;Q<G;Q++)I=Y8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=Y8(I)^Q;for(let Q=0;Q<6;Q++)I=Y8(I);return I^=J,Eq.encode(Cq([I%bQ[30]],30,5,!1))}function v7($){let U=$==="bech32"?1:734539939,J=iU(5),G=J.decode,I=J.encode,Q=G7(G);function X(W,v,w=90){if(qI("bech32.encode prefix",W),uQ(v))v=Array.from(v);bq("bech32.encode",v);let g=W.length;if(g===0)throw TypeError(`Invalid prefix length ${g}`);let V=g+7+v.length;if(w!==!1&&V>w)throw TypeError(`Length ${V} exceeds limit ${w}`);let N=W.toLowerCase(),j=X7(N,v,U);return`${N}1${Eq.encode(v)}${j}`}function O(W,v=90){qI("bech32.decode input",W);let w=W.length;if(w<8||v!==!1&&w>v)throw TypeError(`invalid string length: ${w} (${W}). Expected (8..${v})`);let g=W.toLowerCase();if(W!==g&&W!==W.toUpperCase())throw Error("String must be lowercase or uppercase");let V=g.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let N=g.slice(0,V),j=g.slice(V+1);if(j.length<6)throw Error("Data must be at least 6 characters long");let M=Eq.decode(j).slice(0,-6),S=X7(N,M,U);if(!j.endsWith(S))throw Error(`Invalid checksum in ${W}: expected "${S}"`);return{prefix:N,words:M}}let q=G7(O);function D(W){let{prefix:v,words:w}=O(W,!1);return{prefix:v,words:w,bytes:G(w)}}function z(W,v){return X(W,I(v))}return{encode:X,decode:O,encodeFromBytes:z,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var rU=Object.freeze(v7("bech32")),bl=Object.freeze(v7("bech32m"));var pP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),oP={encode($){return _q($),$.toHex()},decode($){return qI("hex",$),Uint8Array.fromHex($)}},fl=Object.freeze(pP?oP:xU(iU(4),mU("0123456789abcdef"),yU(""),D7(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function tP($,U,J,G){F0($);let I=SQ({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(y$(Q,"c"),y$(X,"dkLen"),y$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Mq(U,"password"),D=Mq(J,"salt"),z=new Uint8Array(X),W=w0.create($,q),v=W._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:z,PRF:W,PRFSalt:v}}function eP($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return MU(I),J}function Fq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=tP($,U,J,G),D,z=new Uint8Array(4),W=xJ(z),v=new Uint8Array(O.outputLen);for(let w=1,g=0;g<Q;w++,g+=O.outputLen){let V=X.subarray(g,g+O.outputLen);W.setInt32(0,w,!1),(D=q._cloneInto(D)).update(z).digestInto(v),V.set(v.subarray(0,V.length));for(let N=1;N<I;N++){O._cloneInto(D).update(v).digestInto(v);for(let j=0;j<V.length;j++)V[j]^=v[j]}}return eP(O,q,X,D,v)}function w7($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],z=$[U++]^J[G++],W=$[U++]^J[G++],v=$[U++]^J[G++],w=$[U++]^J[G++],g=$[U++]^J[G++],V=$[U++]^J[G++],N=$[U++]^J[G++],j=$[U++]^J[G++],M=$[U++]^J[G++],S=$[U++]^J[G++],L=$[U++]^J[G++],k=$[U++]^J[G++],x=X,h=O,B=q,m=D,a=z,E=W,A=v,_=w,R=g,K=V,H=N,b=j,P=M,F=S,y=L,n=k;for(let $$=0;$$<8;$$+=2)a^=P$(x+P|0,7),R^=P$(a+x|0,9),P^=P$(R+a|0,13),x^=P$(P+R|0,18),K^=P$(E+h|0,7),F^=P$(K+E|0,9),h^=P$(F+K|0,13),E^=P$(h+F|0,18),y^=P$(H+A|0,7),B^=P$(y+H|0,9),A^=P$(B+y|0,13),H^=P$(A+B|0,18),m^=P$(n+b|0,7),_^=P$(m+n|0,9),b^=P$(_+m|0,13),n^=P$(b+_|0,18),h^=P$(x+m|0,7),B^=P$(h+x|0,9),m^=P$(B+h|0,13),x^=P$(m+B|0,18),A^=P$(E+a|0,7),_^=P$(A+E|0,9),a^=P$(_+A|0,13),E^=P$(a+_|0,18),b^=P$(H+K|0,7),R^=P$(b+H|0,9),K^=P$(R+b|0,13),H^=P$(K+R|0,18),P^=P$(n+y|0,7),F^=P$(P+n|0,9),y^=P$(F+P|0,13),n^=P$(y+F|0,18);I[Q++]=X+x|0,I[Q++]=O+h|0,I[Q++]=q+B|0,I[Q++]=D+m|0,I[Q++]=z+a|0,I[Q++]=W+E|0,I[Q++]=v+A|0,I[Q++]=w+_|0,I[Q++]=g+R|0,I[Q++]=V+K|0,I[Q++]=N+H|0,I[Q++]=j+b|0,I[Q++]=M+P|0,I[Q++]=S+F|0,I[Q++]=L+y|0,I[Q++]=k+n|0}function uq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(w7(J,X,$,U,J,Q),O>0)X+=16;w7(J,Q,$,U+=16,J,X)}}function sP($,U,J){let G=SQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:z}=G;if(y$(I,"N"),y$(Q,"r"),y$(X,"p"),y$(O,"dkLen"),y$(q,"asyncTick"),y$(D,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let W=128*Q,v=W/4,w=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(w-1)*32/W)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let g=W*(I+X+1);if(g>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+g+", maxmem="+D);let V=Fq(r$,$,U,{c:1,dkLen:W*X}),N=BQ(V),j=BQ(new Uint8Array(W*I)),M=BQ(new Uint8Array(W)),S=()=>{};if(z){let L=2*I*X,k=Math.max(Math.floor(L/1e4),1),x=0;S=()=>{if(x++,z&&(!(x%k)||x===L))z(x/L)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:v,V:j,B32:N,B:V,tmp:M,blockMixCb:S,asyncTick:q}}function $B($,U,J,G,I){let Q=Fq(r$,$,J,{c:1,dkLen:U});return MU(J,G,I),Q}function xq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:z,tmp:W,blockMixCb:v}=sP($,U,J);Rq(D);for(let w=0;w<Q;w++){let g=O*w;for(let V=0;V<O;V++)q[V]=D[g+V];for(let V=0,N=0;V<G-1;V++)uq(q,N,q,N+=O,I),v();uq(q,(G-1)*O,D,g,I),v();for(let V=0;V<G;V++){let N=(D[g+O-16]&G-1)>>>0;for(let j=0;j<O;j++)W[j]=D[g+j]^q[N*O+j];uq(W,0,D,g,I),v()}}return Rq(D),$B($,X,z,q,W)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function UB($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mQ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function mJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function n$($,U,J=""){let G=UB($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function mq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function V7($,U,J=!1){n$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!yJ($))throw Error("invalid output, must be aligned")}function N0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function J0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function IB($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var nI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),JB=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var GB=($)=>{for(let U=0;U<$.length;U++)$[U]=JB($[U]);return $},y0=nI?($)=>$:GB;function N7($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function g7($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function Z7($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var R7=($,U)=>{function J(G,...I){if(n$(G,void 0,"key"),$.nonceLength!==void 0){let z=I[0];n$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)n$(I[1],void 0,"AAD");let X=U(G,...I),O=(z,W)=>{if(W!==void 0){if(z!==2)throw Error("cipher output not supported");n$(W,void 0,"output")}},q=!1;return{encrypt(z,W){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,n$(z),O(X.encrypt.length,W),X.encrypt(z,W)},decrypt(z,W){if(n$(z),Q&&z.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,W),X.decrypt(z,W)}}}return Object.assign(J,$),J};function v8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(n$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!yJ(U))throw Error("invalid output, must be aligned");return U}function M7($,U,J){mJ($),mJ(U),mQ(J);let G=new Uint8Array(16),I=IB(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function yJ($){return $.byteOffset%4===0}function rJ($){return Uint8Array.from(n$($))}var H7=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),QB=(()=>y0(N0(H7("expand 16-byte k"))))(),XB=(()=>y0(N0(H7("expand 32-byte k"))))();function B$($,U){return $<<U|$>>>32-U}var w8=64,OB=16,yq=(()=>4294967295)(),j7=Uint32Array.of();function qB($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(w8),z=N0(D),W=nI&&yJ(I)&&yJ(Q),v=W?N0(I):j7,w=W?N0(Q):j7;if(!nI){for(let g=0;g<q;X++){if($(U,J,G,z,X,O),y0(z),X>=yq)throw Error("arx: counter overflow");let V=Math.min(w8,q-g);for(let N=0,j;N<V;N++)j=g+N,Q[j]=I[j]^D[N];g+=V}return}for(let g=0;g<q;X++){if($(U,J,G,z,X,O),X>=yq)throw Error("arx: counter overflow");let V=Math.min(w8,q-g);if(W&&V===w8){let N=g/4;if(g%4!==0)throw Error("arx: invalid block position");for(let j=0,M;j<OB;j++)M=N+j,w[M]=v[M]^z[j];g+=w8;continue}for(let N=0,j;N<V;N++)j=g+N,Q[j]=I[j]^D[N];g+=V}}function T7($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=N7({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return mJ(I),mJ(X),mQ(Q),mQ(J),(O,q,D,z,W=0)=>{n$(O,void 0,"key"),n$(q,void 0,"nonce"),n$(D,void 0,"data");let v=D.length;if(z=v8(v,z,!1),mJ(W),W<0||W>=yq)throw Error("arx: counter overflow");let w=[],g=O.length,V,N;if(g===32)w.push(V=rJ(O)),N=XB;else if(g===16&&J)V=new Uint8Array(32),V.set(O),V.set(O,16),N=QB,w.push(V);else throw n$(O,32,"arx key"),Error("invalid key size");if(!nI||!yJ(q))w.push(q=rJ(q));let j=N0(V);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=q.subarray(0,16);if(nI)G(N,j,N0(L),j);else{let k=y0(Uint32Array.from(N));G(k,j,N0(L),j),J0(k),y0(j)}q=q.subarray(16)}else if(!nI)y0(j);let M=16-I;if(M!==q.length)throw Error(`arx: nonce must be ${M} or 16 bytes`);if(M!==12){let L=new Uint8Array(12);L.set(q,Q?0:12-q.length),q=L,w.push(q)}let S=y0(N0(q));try{return qB($,N,j,S,D,z,W,X),z}finally{J0(...w)}}}function $U($,U){return $[U++]&255|($[U++]&255)<<8}class K7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=rJ(n$($,32,"key"));let U=$U($,0),J=$U($,2),G=$U($,4),I=$U($,6),Q=$U($,8),X=$U($,10),O=$U($,12),q=$U($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=$U($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],z=Q[4],W=Q[5],v=Q[6],w=Q[7],g=Q[8],V=Q[9],N=$U($,U+0),j=$U($,U+2),M=$U($,U+4),S=$U($,U+6),L=$U($,U+8),k=$U($,U+10),x=$U($,U+12),h=$U($,U+14),B=I[0]+(N&8191),m=I[1]+((N>>>13|j<<3)&8191),a=I[2]+((j>>>10|M<<6)&8191),E=I[3]+((M>>>7|S<<9)&8191),A=I[4]+((S>>>4|L<<12)&8191),_=I[5]+(L>>>1&8191),R=I[6]+((L>>>14|k<<2)&8191),K=I[7]+((k>>>11|x<<5)&8191),H=I[8]+((x>>>8|h<<8)&8191),b=I[9]+(h>>>5|G),P=0,F=P+B*X+m*(5*V)+a*(5*g)+E*(5*w)+A*(5*v);P=F>>>13,F&=8191,F+=_*(5*W)+R*(5*z)+K*(5*D)+H*(5*q)+b*(5*O),P+=F>>>13,F&=8191;let y=P+B*O+m*X+a*(5*V)+E*(5*g)+A*(5*w);P=y>>>13,y&=8191,y+=_*(5*v)+R*(5*W)+K*(5*z)+H*(5*D)+b*(5*q),P+=y>>>13,y&=8191;let n=P+B*q+m*O+a*X+E*(5*V)+A*(5*g);P=n>>>13,n&=8191,n+=_*(5*w)+R*(5*v)+K*(5*W)+H*(5*z)+b*(5*D),P+=n>>>13,n&=8191;let $$=P+B*D+m*q+a*O+E*X+A*(5*V);P=$$>>>13,$$&=8191,$$+=_*(5*g)+R*(5*w)+K*(5*v)+H*(5*W)+b*(5*z),P+=$$>>>13,$$&=8191;let X$=P+B*z+m*D+a*q+E*O+A*X;P=X$>>>13,X$&=8191,X$+=_*(5*V)+R*(5*g)+K*(5*w)+H*(5*v)+b*(5*W),P+=X$>>>13,X$&=8191;let q$=P+B*W+m*z+a*D+E*q+A*O;P=q$>>>13,q$&=8191,q$+=_*X+R*(5*V)+K*(5*g)+H*(5*w)+b*(5*v),P+=q$>>>13,q$&=8191;let W$=P+B*v+m*W+a*z+E*D+A*q;P=W$>>>13,W$&=8191,W$+=_*O+R*X+K*(5*V)+H*(5*g)+b*(5*w),P+=W$>>>13,W$&=8191;let N$=P+B*w+m*v+a*W+E*z+A*D;P=N$>>>13,N$&=8191,N$+=_*q+R*O+K*X+H*(5*V)+b*(5*g),P+=N$>>>13,N$&=8191;let w$=P+B*g+m*w+a*v+E*W+A*z;P=w$>>>13,w$&=8191,w$+=_*D+R*q+K*O+H*X+b*(5*V),P+=w$>>>13,w$&=8191;let V$=P+B*V+m*g+a*w+E*v+A*W;P=V$>>>13,V$&=8191,V$+=_*z+R*D+K*q+H*O+b*X,P+=V$>>>13,V$&=8191,P=(P<<2)+P|0,P=P+F|0,F=P&8191,P=P>>>13,y+=P,I[0]=F,I[1]=y,I[2]=n,I[3]=$$,I[4]=X$,I[5]=q$,I[6]=W$,I[7]=N$,I[8]=w$,I[9]=V$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;J0(J)}update($){mq(this),n$($),$=rJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,J0(this.h,this.r,this.buffer,this.pad)}digestInto($){mq(this),V7($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var A7=Z7(32,($)=>new K7($));function DB($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],z=U[0],W=U[1],v=U[2],w=U[3],g=U[4],V=U[5],N=U[6],j=U[7],M=I,S=J[0],L=J[1],k=J[2],x=X,h=O,B=q,m=D,a=z,E=W,A=v,_=w,R=g,K=V,H=N,b=j,P=M,F=S,y=L,n=k;for(let X$=0;X$<Q;X$+=2)x=x+a|0,P=B$(P^x,16),R=R+P|0,a=B$(a^R,12),x=x+a|0,P=B$(P^x,8),R=R+P|0,a=B$(a^R,7),h=h+E|0,F=B$(F^h,16),K=K+F|0,E=B$(E^K,12),h=h+E|0,F=B$(F^h,8),K=K+F|0,E=B$(E^K,7),B=B+A|0,y=B$(y^B,16),H=H+y|0,A=B$(A^H,12),B=B+A|0,y=B$(y^B,8),H=H+y|0,A=B$(A^H,7),m=m+_|0,n=B$(n^m,16),b=b+n|0,_=B$(_^b,12),m=m+_|0,n=B$(n^m,8),b=b+n|0,_=B$(_^b,7),x=x+E|0,n=B$(n^x,16),H=H+n|0,E=B$(E^H,12),x=x+E|0,n=B$(n^x,8),H=H+n|0,E=B$(E^H,7),h=h+A|0,P=B$(P^h,16),b=b+P|0,A=B$(A^b,12),h=h+A|0,P=B$(P^h,8),b=b+P|0,A=B$(A^b,7),B=B+_|0,F=B$(F^B,16),R=R+F|0,_=B$(_^R,12),B=B+_|0,F=B$(F^B,8),R=R+F|0,_=B$(_^R,7),m=m+a|0,y=B$(y^m,16),K=K+y|0,a=B$(a^K,12),m=m+a|0,y=B$(y^m,8),K=K+y|0,a=B$(a^K,7);let $$=0;G[$$++]=X+x|0,G[$$++]=O+h|0,G[$$++]=q+B|0,G[$$++]=D+m|0,G[$$++]=z+a|0,G[$$++]=W+E|0,G[$$++]=v+A|0,G[$$++]=w+_|0,G[$$++]=g+R|0,G[$$++]=V+K|0,G[$$++]=N+H|0,G[$$++]=j+b|0,G[$$++]=M+P|0,G[$$++]=S+F|0,G[$$++]=L+y|0,G[$$++]=k+n|0}var zB=T7(DB,{counterRight:!1,counterLength:4,allowShortKeys:!1});var YB=new Uint8Array(16),P7=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(YB.subarray(J))},WB=new Uint8Array(32);function B7($,U,J,G,I){if(I!==void 0)n$(I,void 0,"AAD");let Q=$(U,J,WB),X=M7(G.length,I?I.length:0,!0),O=A7.create(Q);if(I)P7(O,I);P7(O,G),O.update(X);let q=O.digest();return J0(Q,X),q}var vB=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=v8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=B7($,U,J,q,G);return X.set(D,O),J0(D),X},decrypt(Q,X){X=v8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=B7($,U,J,O,G);if(!g7(q,D))throw J0(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),J0(D),X}}},cU=R7({blockSize:64,nonceLength:12,tagLength:16},vB(zB));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function hJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function p$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Z$($,U,J=""){let G=hJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function pU($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");p$($.outputLen),p$($.blockLen)}function h0($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function yQ($,U){Z$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function rQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function CU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function hQ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function G0($,U){return $<<32-U|$>>>U}var wB=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function VB($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function NB($){for(let U=0;U<$.length;U++)$[U]=VB($[U]);return $}var rq=wB?($)=>$:NB,S7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),gB=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function iI($){if(Z$($),S7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=gB[$[J]];return U}var r0={_0:48,_9:57,A:65,F:70,a:97,f:102};function L7($){if($>=r0._0&&$<=r0._9)return $-r0._0;if($>=r0.A&&$<=r0.F)return $-(r0.A-10);if($>=r0.a&&$<=r0.f)return $-(r0.a-10);return}function cI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(S7)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=L7($.charCodeAt(Q)),O=L7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function l$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];Z$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function lJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function DI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var zI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lq=BigInt(0),hq=BigInt(1);function V8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function C7($){if(typeof $==="bigint"){if(!lQ($))throw Error("positive bigint expected, got "+$)}else p$($);return $}function N8($){let U=C7($).toString(16);return U.length&1?"0"+U:U}function E7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?lq:BigInt("0x"+$)}function YI($){return E7(iI($))}function WI($){return E7(iI(dQ(Z$($)).reverse()))}function dJ($,U){p$(U),$=C7($);let J=cI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function g8($,U){return dJ($,U).reverse()}function dQ($){return Uint8Array.from($)}function vI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var lQ=($)=>typeof $==="bigint"&&lq<=$;function ZB($,U,J){return lQ($)&&lQ(U)&&lQ(J)&&U<=$&&$<J}function Z8($,U,J,G){if(!ZB(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function dq($){let U;for(U=0;$>lq;$>>=hq,U+=1);return U}var R8=($)=>(hq<<BigInt($))-hq;function _7($,U,J){if(p$($,"hashLen"),p$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},v=(...N)=>J(D,l$(q,...N)),w=(N=I)=>{if(D=v(Q,N),q=v(),N.length===0)return;D=v(X,N),q=v()},g=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=v();let M=q.slice();j.push(M),N+=q.length}return l$(...j)};return(N,j)=>{W(),w(N);let M=void 0;while(!(M=j(g())))w();return W(),M}}function pI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function nq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HU=BigInt(0),vU=BigInt(1),oI=BigInt(2),k7=BigInt(3),F7=BigInt(4),u7=BigInt(5),RB=BigInt(7),x7=BigInt(8),MB=BigInt(9),m7=BigInt(16);function jU($,U){let J=$%U;return J>=HU?J:U+J}function oU($,U,J){let G=$;while(U-- >HU)G*=G,G%=J;return G}function b7($,U){if($===HU)throw Error("invert: expected non-zero number");if(U<=HU)throw Error("invert: expected positive modulus, got "+U);let J=jU($,U),G=U,I=HU,Q=vU,X=vU,O=HU;while(J!==HU){let D=G/J,z=G%J,W=I-X*D,v=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=v}if(G!==vU)throw Error("invert: does not exist");return jU(I,U)}function iq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function y7($,U){let J=($.ORDER+vU)/F7,G=$.pow(U,J);return iq($,G,U),G}function jB($,U){let J=($.ORDER-u7)/x7,G=$.mul(U,oI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,oI),I),O=$.mul(Q,$.sub(X,$.ONE));return iq($,O,U),O}function HB($){let U=nQ($),J=r7($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+RB)/m7;return(O,q)=>{let D=O.pow(q,X),z=O.mul(D,G),W=O.mul(D,I),v=O.mul(D,Q),w=O.eql(O.sqr(z),q),g=O.eql(O.sqr(W),q);D=O.cmov(D,z,w),z=O.cmov(v,W,g);let V=O.eql(O.sqr(z),q),N=O.cmov(D,z,V);return iq(O,N,q),N}}function r7($){if($<k7)throw Error("sqrt is not defined for small field");let U=$-vU,J=0;while(U%oI===HU)U/=oI,J++;let G=oI,I=nQ($);while(f7(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return y7;let Q=I.pow(G,U),X=(U+vU)/oI;return function(q,D){if(q.is0(D))return D;if(f7(q,D)!==1)throw Error("Cannot find square root");let z=J,W=q.mul(q.ONE,Q),v=q.pow(D,U),w=q.pow(D,X);while(!q.eql(v,q.ONE)){if(q.is0(v))return q.ZERO;let g=1,V=q.sqr(v);while(!q.eql(V,q.ONE))if(g++,V=q.sqr(V),g===z)throw Error("Cannot find square root");let N=vU<<BigInt(z-g-1),j=q.pow(W,N);z=g,W=q.sqr(j),v=q.mul(v,W),w=q.mul(w,j)}return w}}function TB($){if($%F7===k7)return y7;if($%x7===u7)return jB;if($%m7===MB)return HB($);return r7($)}var KB=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function cq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=KB.reduce((G,I)=>{return G[I]="function",G},U);return pI($,J),$}function AB($,U,J){if(J<HU)throw Error("invalid exponent, negatives unsupported");if(J===HU)return $.ONE;if(J===vU)return U;let G=$.ONE,I=U;while(J>HU){if(J&vU)G=$.mul(G,I);I=$.sqr(I),J>>=vU}return G}function M8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function f7($,U){let J=($.ORDER-vU)/oI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function PB($,U){if(U!==void 0)p$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class h7{ORDER;BITS;BYTES;isLE;ZERO=HU;ONE=vU;_lengths;_sqrt;_mod;constructor($,U={}){if($<=HU)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=PB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return jU($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return HU<=$&&$<this.ORDER}is0($){return $===HU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&vU)===vU}neg($){return jU(-$,this.ORDER)}eql($,U){return $===U}sqr($){return jU($*$,this.ORDER)}add($,U){return jU($+U,this.ORDER)}sub($,U){return jU($-U,this.ORDER)}mul($,U){return jU($*U,this.ORDER)}pow($,U){return AB(this,$,U)}div($,U){return jU($*b7(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return b7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=TB(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g8($,this.BYTES):dJ($,this.BYTES)}fromBytes($,U=!1){Z$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?WI($):YI($);if(X)O=jU(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return M8(this,$)}cmov($,U,J){return J?U:$}}function nQ($,U={}){return new h7($,U)}function l7($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function pq($){let U=l7($);return U+Math.ceil(U/2)}function d7($,U,J=!1){Z$($);let G=$.length,I=l7(U),Q=pq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?WI($):YI($),O=jU(X,U-vU)+vU;return J?g8(O,I):dJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nJ=BigInt(0),aI=BigInt(1);function j8($,U){let J=U.negate();return $?J:U}function eq($,U){let J=M8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function p7($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function oq($,U){p7($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=R8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function n7($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=aI;let D=U*G,z=D+Math.abs(O)-1,W=O===0,v=O<0,w=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:v,isNegF:w,offsetF:D}}var aq=new WeakMap,o7=new WeakMap;function tq($){return o7.get($)||1}function i7($){if($!==nJ)throw Error("invalid wNAF")}class sq{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>nJ){if(U&aI)J=J.add(G);G=G.double(),U>>=aI}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=oq(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=oq($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:v}=n7(J,X,Q);if(J=O,D)I=I.add(j8(W,U[v]));else G=G.add(j8(z,U[q]))}return i7(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=oq($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===nJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=n7(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return i7(J),G}getPrecomputes($,U,J){let G=aq.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);aq.set(U,G)}}return G}cached($,U,J){let G=tq($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=tq($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){p7(U,this.bits),o7.set($,U),aq.delete($)}hasCache($){return tq($)!==1}}function a7($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>nJ||G>nJ){if(J&aI)Q=Q.add(I);if(G&aI)X=X.add(I);I=I.double(),J>>=aI,G>>=aI}return{p1:Q,p2:X}}function c7($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return cq(U),U}else return nQ($,{isLE:J})}function t7($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>nJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=c7(U.p,J.Fp,G),Q=c7(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function iQ($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H8=BigInt(0),iJ=BigInt(1),cQ=BigInt(2);function BB($){return pI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function e7($){let U=BB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||DI,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),w=O?cQ**BigInt(254):cQ**BigInt(447),g=O?BigInt(8)*cQ**BigInt(251)-iJ:BigInt(4)*cQ**BigInt(445)-iJ,V=w+g+iJ,N=(R)=>jU(R,J),j=M(W);function M(R){return g8(N(R),z)}function S(R){let K=dQ(Z$(R,z,"uCoordinate"));if(O)K[31]&=127;return N(WI(K))}function L(R){return WI(I(dQ(Z$(R,z,"scalar"))))}function k(R,K){let H=a(S(K),L(R));if(H===H8)throw Error("invalid private or public key received");return M(H)}function x(R){return k(R,j)}let h=x,B=k;function m(R,K,H){let b=N(R*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(R,K){Z8("u",R,H8,J),Z8("scalar",K,w,V);let H=K,b=R,P=iJ,F=H8,y=R,n=iJ,$$=H8;for(let q$=BigInt(D-1);q$>=H8;q$--){let W$=H>>q$&iJ;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,w$=N(N$*N$),V$=P-F,M$=N(V$*V$),b$=w$-M$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,v0=DU-SU;y=N(W0*W0),n=N(b*N(v0*v0)),P=N(w$*M$),F=N(b$*(w$+N(v*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(R=q(z))=>{return Z$(R,E.seed,"seed"),R},_={randomSecretKey:A};return Object.freeze({keygen:iQ(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}class $D{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(pU($),Z$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),CU(G)}update($){return h0(this),this.iHash.update($),this}digestInto($){h0(this),Z$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var cJ=($,U,J)=>new $D($,U).update(J).digest();cJ.create=($,U)=>new $D($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var s7=($,U)=>($+($>=0?U:-U)/UZ)/U;function LB($,U,J){let[[G,I],[Q,X]]=U,O=s7(X*$,J),q=s7(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<l0,v=z<l0;if(W)D=-D;if(v)z=-z;let w=R8(Math.ceil(dq(J)/2))+pJ;if(D<l0||D>=w||z<l0||z>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:W,k1:D,k2neg:v,k2:z}}function ID($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function UD($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(V8(J.lowS,"lowS"),V8(J.prehash,"prehash"),J.format!==void 0)ID(J.format);return J}class $Z extends Error{constructor($=""){super($)}}var wI={Err:$Z,_tlv:{encode:($,U)=>{let{Err:J}=wI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=N8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?N8(I.length/2|128):"";return N8($)+Q+I+U},decode($,U){let{Err:J}=wI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=wI;if($<l0)throw new U("integer: negative integers are not allowed");let J=N8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=wI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return YI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=wI,I=Z$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=wI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},l0=BigInt(0),pJ=BigInt(1),UZ=BigInt(2),pQ=BigInt(3),SB=BigInt(4);function JD($,U={}){let J=t7("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;pI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=JZ(G,I);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function W(A,_,R){let{x:K,y:H}=_.toAffine(),b=G.toBytes(K);if(V8(R,"isCompressed"),R){z();let P=!G.isOdd(H);return l$(IZ(P),b)}else return l$(Uint8Array.of(4),b,G.toBytes(H))}function v(A){Z$(A,void 0,"Point");let{publicKey:_,publicKeyUncompressed:R}=D,K=A.length,H=A[0],b=A.subarray(1);if(K===_&&(H===2||H===3)){let P=G.fromBytes(b);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let F=V(P),y;try{y=G.sqrt(F)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}z();let n=G.isOdd(y);if((H&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(K===R&&H===4){let P=G.BYTES,F=G.fromBytes(b.subarray(0,P)),y=G.fromBytes(b.subarray(P,P*2));if(!N(F,y))throw Error("bad point: is not on curve");return{x:F,y}}else throw Error(`bad point: got length ${K}, expected compressed=${_} or uncompressed=${R}`)}let w=U.toBytes||W,g=U.fromBytes||v;function V(A){let _=G.sqr(A),R=G.mul(_,A);return G.add(G.add(R,G.mul(A,Q.a)),Q.b)}function N(A,_){let R=G.sqr(_),K=V(A);return G.eql(R,K)}if(!N(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let j=G.mul(G.pow(Q.a,pQ),SB),M=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(j,M)))throw Error("bad curve params: a or b");function S(A,_,R=!1){if(!G.isValid(_)||R&&G.is0(_))throw Error(`bad point coordinate ${A}`);return _}function L(A){if(!(A instanceof m))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return LB(A,q.basises,I.ORDER)}let x=nq((A,_)=>{let{X:R,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:R,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(R,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}),h=nq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:_,y:R}=A.toAffine();if(!G.isValid(_)||!G.isValid(R))throw Error("bad point: x or y not field elements");if(!N(_,R))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(A,_,R,K,H){return R=new m(G.mul(R.X,A),R.Y,R.Z),_=j8(K,_),R=j8(H,R),_.add(R)}class m{static BASE=new m(Q.Gx,Q.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,_,R){this.X=S("x",A),this.Y=S("y",_,!0),this.Z=S("z",R),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:_,y:R}=A||{};if(!A||!G.isValid(_)||!G.isValid(R))throw Error("invalid affine point");if(A instanceof m)throw Error("projective point not allowed");if(G.is0(_)&&G.is0(R))return m.ZERO;return new m(_,R,G.ONE)}static fromBytes(A){let _=m.fromAffine(g(Z$(A,void 0,"point")));return _.assertValidity(),_}static fromHex(A){return m.fromBytes(cI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,_=!0){if(E.createCache(this,A),!_)this.multiply(pQ);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){L(A);let{X:_,Y:R,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.eql(G.mul(_,P),G.mul(H,K)),y=G.eql(G.mul(R,P),G.mul(b,K));return F&&y}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:_}=Q,R=G.mul(_,pQ),{X:K,Y:H,Z:b}=this,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(b,b),q$=G.mul(K,H);return q$=G.add(q$,q$),y=G.mul(K,b),y=G.add(y,y),P=G.mul(A,y),F=G.mul(R,X$),F=G.add(P,F),P=G.sub($$,F),F=G.add($$,F),F=G.mul(P,F),P=G.mul(q$,P),y=G.mul(R,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),F=G.add(F,n),X$=G.mul(H,b),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,$$),y=G.add(y,y),y=G.add(y,y),new m(P,F,y)}add(A){L(A);let{X:_,Y:R,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.ZERO,y=G.ZERO,n=G.ZERO,$$=Q.a,X$=G.mul(Q.b,pQ),q$=G.mul(_,H),W$=G.mul(R,b),N$=G.mul(K,P),w$=G.add(_,R),V$=G.add(H,b);w$=G.mul(w$,V$),V$=G.add(q$,W$),w$=G.sub(w$,V$),V$=G.add(_,K);let M$=G.add(H,P);return V$=G.mul(V$,M$),M$=G.add(q$,N$),V$=G.sub(V$,M$),M$=G.add(R,K),F=G.add(b,P),M$=G.mul(M$,F),F=G.add(W$,N$),M$=G.sub(M$,F),n=G.mul($$,V$),F=G.mul(X$,N$),n=G.add(F,n),F=G.sub(W$,n),n=G.add(W$,n),y=G.mul(F,n),W$=G.add(q$,q$),W$=G.add(W$,q$),N$=G.mul($$,N$),V$=G.mul(X$,V$),W$=G.add(W$,N$),N$=G.sub(q$,N$),N$=G.mul($$,N$),V$=G.add(V$,N$),q$=G.mul(W$,V$),y=G.add(y,q$),q$=G.mul(M$,V$),F=G.mul(w$,F),F=G.sub(F,q$),q$=G.mul(w$,W$),n=G.mul(M$,n),n=G.add(n,q$),new m(F,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(m.ZERO)}multiply(A){let{endo:_}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let R,K,H=(b)=>E.cached(this,b,(P)=>eq(m,P));if(_){let{k1neg:b,k1:P,k2neg:F,k2:y}=k(A),{p:n,f:$$}=H(P),{p:X$,f:q$}=H(y);K=$$.add(q$),R=B(_.beta,n,X$,b,F)}else{let{p:b,f:P}=H(A);R=b,K=P}return eq(m,[R,K])[0]}multiplyUnsafe(A){let{endo:_}=U,R=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===l0||R.is0())return m.ZERO;if(A===pJ)return R;if(E.hasCache(this))return this.multiply(A);if(_){let{k1neg:K,k1:H,k2neg:b,k2:P}=k(A),{p1:F,p2:y}=a7(m,R,H,P);return B(_.beta,F,y,K,b)}else return E.unsafe(R,A)}toAffine(A){return x(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===pJ)return!0;if(A)return A(m,this);return E.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===pJ)return this;if(A)return A(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return V8(A,"isCompressed"),this.assertValidity(),w(m,this,A)}toHex(A=!0){return iI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let a=I.BITS,E=new sq(m,U.endo?Math.ceil(a/2):a);return m.BASE.precompute(8),m}function IZ($){return Uint8Array.of($?2:3)}function JZ($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function CB($,U={}){let{Fn:J}=$,G=U.randomBytes||DI,I=Object.assign(JZ($.Fp,J),{seed:pq(J.ORDER)});function Q(w){try{let g=J.fromBytes(w);return J.isValidNot0(g)}catch(g){return!1}}function X(w,g){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=w.length;if(g===!0&&j!==V)return!1;if(g===!1&&j!==N)return!1;return!!$.fromBytes(w)}catch(j){return!1}}function O(w=G(I.seed)){return d7(Z$(w,I.seed,"seed"),J.ORDER)}function q(w,g=!0){return $.BASE.multiply(J.fromBytes(w)).toBytes(g)}function D(w){let{secretKey:g,publicKey:V,publicKeyUncompressed:N}=I;if(!hJ(w))return;if("_lengths"in J&&J._lengths||g===V)return;let j=Z$(w,void 0,"key").length;return j===V||j===N}function z(w,g,V=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(g)===!1)throw Error("second arg must be public key");let N=J.fromBytes(w);return $.fromBytes(g).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=iQ(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:v,Point:$,utils:W,lengths:I})}function GD($,U,J={}){pU(U),pI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||DI,I=J.hmac||((R,K)=>cJ(U,R,K)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:z,getSharedSecret:W,utils:v,lengths:w}=CB($,J),g={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=O*UZ<Q.ORDER;function N(R){let K=O>>pJ;return R>K}function j(R,K){if(!X.isValidNot0(K))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return K}function M(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(R,K){ID(K);let H=w.signature,b=K==="compact"?H:K==="recovered"?H+1:void 0;return Z$(R,b)}class L{r;s;recovery;constructor(R,K,H){if(this.r=j("r",R),this.s=j("s",K),H!=null){if(M(),![0,1,2,3].includes(H))throw Error("invalid recovery id");this.recovery=H}Object.freeze(this)}static fromBytes(R,K=g.format){S(R,K);let H;if(K==="der"){let{r:y,s:n}=wI.toSig(Z$(R));return new L(y,n)}if(K==="recovered")H=R[0],K="compact",R=R.subarray(1);let b=w.signature/2,P=R.subarray(0,b),F=R.subarray(b,b*2);return new L(X.fromBytes(P),X.fromBytes(F),H)}static fromHex(R,K){return this.fromBytes(cI(R),K)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new L(this.r,this.s,R)}recoverPublicKey(R){let{r:K,s:H}=this,b=this.assertRecovery(),P=b===2||b===3?K+O:K;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let F=Q.toBytes(P),y=$.fromBytes(l$(IZ((b&1)===0),F)),n=X.inv(P),$$=x(Z$(R,void 0,"msgHash")),X$=X.create(-$$*n),q$=X.create(H*n),W$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(W$.is0())throw Error("invalid recovery: point at infinify");return W$.assertValidity(),W$}hasHighS(){return N(this.s)}toBytes(R=g.format){if(ID(R),R==="der")return cI(wI.hexFromSig(this));let{r:K,s:H}=this,b=X.toBytes(K),P=X.toBytes(H);if(R==="recovered")return M(),l$(Uint8Array.of(this.assertRecovery()),b,P);return l$(b,P)}toHex(R){return iI(this.toBytes(R))}}let k=J.bits2int||function(K){if(K.length>8192)throw Error("input is too large");let H=YI(K),b=K.length*8-q;return b>0?H>>BigInt(b):H},x=J.bits2int_modN||function(K){return X.create(k(K))},h=R8(q);function B(R){return Z8("num < 2^"+q,R,l0,h),X.toBytes(R)}function m(R,K){return Z$(R,void 0,"message"),K?Z$(U(R),void 0,"prehashed message"):R}function a(R,K,H){let{lowS:b,prehash:P,extraEntropy:F}=UD(H,g);R=m(R,P);let y=x(R),n=X.fromBytes(K);if(!X.isValidNot0(n))throw Error("invalid private key");let $$=[B(n),B(y)];if(F!=null&&F!==!1){let N$=F===!0?G(w.secretKey):F;$$.push(Z$(N$,void 0,"extraEntropy"))}let X$=l$(...$$),q$=y;function W$(N$){let w$=k(N$);if(!X.isValidNot0(w$))return;let V$=X.inv(w$),M$=$.BASE.multiply(w$).toAffine(),b$=X.create(M$.x);if(b$===l0)return;let k$=X.create(V$*X.create(q$+b$*n));if(k$===l0)return;let qU=(M$.x===b$?0:2)|Number(M$.y&pJ),DU=k$;if(b&&N(k$))DU=X.neg(k$),qU^=1;return new L(b$,DU,V?void 0:qU)}return{seed:X$,k2sig:W$}}function E(R,K,H={}){let{seed:b,k2sig:P}=a(R,K,H);return _7(U.outputLen,X.BYTES,I)(b,P).toBytes(H.format)}function A(R,K,H,b={}){let{lowS:P,prehash:F,format:y}=UD(b,g);if(H=Z$(H,void 0,"publicKey"),K=m(K,F),!hJ(R)){let n=R instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(R,y);try{let n=L.fromBytes(R,y),$$=$.fromBytes(H);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,W$=x(K),N$=X.inv(q$),w$=X.create(W$*N$),V$=X.create(X$*N$),M$=$.BASE.multiplyUnsafe(w$).add($$.multiplyUnsafe(V$));if(M$.is0())return!1;return X.create(M$.x)===X$}catch(n){return!1}}function _(R,K,H={}){let{prehash:b}=UD(H,g);return K=m(K,b),L.fromBytes(R,"recovered").recoverPublicKey(K).toBytes()}return Object.freeze({keygen:D,getPublicKey:z,getSharedSecret:W,utils:v,lengths:w,Point:$,sign:E,verify:A,recoverPublicKey:_,Signature:L,hash:U})}function GZ($,U,J){return $&U^~$&J}function QZ($,U,J){return $&U^$&J^U&J}class oQ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=hQ(this.buffer)}update($){h0(this),Z$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=hQ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){h0(this),yQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,CU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=hQ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var d0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),n0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),UU=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),IU=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),XZ=BigInt(32);function EB($,U=!1){if(U)return{h:Number($&aQ),l:Number($>>XZ&aQ)};return{h:Number($>>XZ&aQ)|0,l:Number($&aQ)|0}}function tQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=EB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var QD=($,U,J)=>$>>>J,XD=($,U,J)=>$<<32-J|U>>>J,tI=($,U,J)=>$>>>J|U<<32-J,eI=($,U,J)=>$<<32-J|U>>>J,T8=($,U,J)=>$<<64-J|U>>>J-32,K8=($,U,J)=>$>>>J-32|U<<64-J;var OZ=($,U,J)=>$<<J|U>>>32-J,qZ=($,U,J)=>U<<J|$>>>32-J,DZ=($,U,J)=>U<<J-32|$>>>64-J,zZ=($,U,J)=>$<<J-32|U>>>64-J;function g0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var YZ=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),WZ=($,U,J,G)=>U+J+G+($/4294967296|0)|0,vZ=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),wZ=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,VZ=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),NZ=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var bB=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VI=new Uint32Array(64);class OD extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)VI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=VI[z-15],v=VI[z-2],w=G0(W,7)^G0(W,18)^W>>>3,g=G0(v,17)^G0(v,19)^v>>>10;VI[z]=g+VI[z-7]+w+VI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=G0(X,6)^G0(X,11)^G0(X,25),v=D+W+GZ(X,O,q)+bB[z]+VI[z]|0,g=(G0(J,2)^G0(J,13)^G0(J,22))+QZ(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+g|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){CU(VI)}destroy(){this.set(0,0,0,0,0,0,0,0),CU(this.buffer)}}class gZ extends OD{A=d0[0]|0;B=d0[1]|0;C=d0[2]|0;D=d0[3]|0;E=d0[4]|0;F=d0[5]|0;G=d0[6]|0;H=d0[7]|0;constructor(){super(32)}}class fB extends OD{A=n0[0]|0;B=n0[1]|0;C=n0[2]|0;D=n0[3]|0;E=n0[4]|0;F=n0[5]|0;G=n0[6]|0;H=n0[7]|0;constructor(){super(28)}}var ZZ=(()=>tQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),kB=(()=>ZZ[0])(),FB=(()=>ZZ[1])(),NI=new Uint32Array(80),gI=new Uint32Array(80);class A8 extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:v,Gl:w,Hh:g,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=v|0,this.Gl=w|0,this.Hh=g|0,this.Hl=V|0}process($,U){for(let M=0;M<16;M++,U+=4)NI[M]=$.getUint32(U),gI[M]=$.getUint32(U+=4);for(let M=16;M<80;M++){let S=NI[M-15]|0,L=gI[M-15]|0,k=tI(S,L,1)^tI(S,L,8)^QD(S,L,7),x=eI(S,L,1)^eI(S,L,8)^XD(S,L,7),h=NI[M-2]|0,B=gI[M-2]|0,m=tI(h,B,19)^T8(h,B,61)^QD(h,B,6),a=eI(h,B,19)^K8(h,B,61)^XD(h,B,6),E=vZ(x,a,gI[M-7],gI[M-16]),A=wZ(E,k,m,NI[M-7],NI[M-16]);NI[M]=A|0,gI[M]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:v,Fl:w,Gh:g,Gl:V,Hh:N,Hl:j}=this;for(let M=0;M<80;M++){let S=tI(z,W,14)^tI(z,W,18)^T8(z,W,41),L=eI(z,W,14)^eI(z,W,18)^K8(z,W,41),k=z&v^~z&g,x=W&w^~W&V,h=VZ(j,L,x,FB[M],gI[M]),B=NZ(h,N,S,k,kB[M],NI[M]),m=h|0,a=tI(J,G,28)^T8(J,G,34)^T8(J,G,39),E=eI(J,G,28)^K8(J,G,34)^K8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=g|0,j=V|0,g=v|0,V=w|0,v=z|0,w=W|0,{h:z,l:W}=g0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let R=YZ(m,E,_);J=WZ(R,B,a,A),G=R|0}({h:J,l:G}=g0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=g0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=g0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=g0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=g0(this.Eh|0,this.El|0,z|0,W|0),{h:v,l:w}=g0(this.Fh|0,this.Fl|0,v|0,w|0),{h:g,l:V}=g0(this.Gh|0,this.Gl|0,g|0,V|0),{h:N,l:j}=g0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,v,w,g,V,N,j)}roundClean(){CU(NI,gI)}destroy(){CU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class uB extends A8{Ah=IU[0]|0;Al=IU[1]|0;Bh=IU[2]|0;Bl=IU[3]|0;Ch=IU[4]|0;Cl=IU[5]|0;Dh=IU[6]|0;Dl=IU[7]|0;Eh=IU[8]|0;El=IU[9]|0;Fh=IU[10]|0;Fl=IU[11]|0;Gh=IU[12]|0;Gl=IU[13]|0;Hh=IU[14]|0;Hl=IU[15]|0;constructor(){super(64)}}class RZ extends A8{Ah=UU[0]|0;Al=UU[1]|0;Bh=UU[2]|0;Bl=UU[3]|0;Ch=UU[4]|0;Cl=UU[5]|0;Dh=UU[6]|0;Dl=UU[7]|0;Eh=UU[8]|0;El=UU[9]|0;Fh=UU[10]|0;Fl=UU[11]|0;Gh=UU[12]|0;Gl=UU[13]|0;Hh=UU[14]|0;Hl=UU[15]|0;constructor(){super(48)}}var wU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),VU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class xB extends A8{Ah=wU[0]|0;Al=wU[1]|0;Bh=wU[2]|0;Bl=wU[3]|0;Ch=wU[4]|0;Cl=wU[5]|0;Dh=wU[6]|0;Dl=wU[7]|0;Eh=wU[8]|0;El=wU[9]|0;Fh=wU[10]|0;Fl=wU[11]|0;Gh=wU[12]|0;Gl=wU[13]|0;Hh=wU[14]|0;Hl=wU[15]|0;constructor(){super(28)}}class mB extends A8{Ah=VU[0]|0;Al=VU[1]|0;Bh=VU[2]|0;Bl=VU[3]|0;Ch=VU[4]|0;Cl=VU[5]|0;Dh=VU[6]|0;Dl=VU[7]|0;Eh=VU[8]|0;El=VU[9]|0;Fh=VU[10]|0;Fl=VU[11]|0;Gh=VU[12]|0;Gl=VU[13]|0;Hh=VU[14]|0;Hl=VU[15]|0;constructor(){super(32)}}var eQ=lJ(()=>new gZ,zI(1));var MZ=lJ(()=>new RZ,zI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yB=BigInt(1),jZ=BigInt(2),rB=BigInt(3),hB=BigInt(5),kd=BigInt(8),HZ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function lB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=HZ,O=$*$%Q*$%Q,q=oU(O,jZ,Q)*O%Q,D=oU(q,yB,Q)*$%Q,z=oU(D,hB,Q)*D%Q,W=oU(z,U,Q)*z%Q,v=oU(W,J,Q)*W%Q,w=oU(v,G,Q)*v%Q,g=oU(w,I,Q)*w%Q,V=oU(g,I,Q)*w%Q,N=oU(V,U,Q)*z%Q;return{pow_p_5_8:oU(N,jZ,Q)*$%Q,b2:O}}function dB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TZ=(()=>{let $=HZ;return e7({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=lB(U);return jU(oU(J,rB,$)*G,$)},adjustScalarBytes:dB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),iB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var cB=JD(nB),qD=GD(cB,eQ);var pB=JD(iB),KZ=GD(pB,MZ);function PZ($,U,J){if(pU($),J===void 0)J=new Uint8Array($.outputLen);return cJ($,J,U)}var DD=Uint8Array.of(0),AZ=Uint8Array.of();function BZ($,U,J,G=32){pU($),p$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=AZ;else Z$(J,void 0,"info");let X=new Uint8Array(Q*I),O=cJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)DD[0]=z+1,q.update(z===0?AZ:D).update(J).update(DD).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),CU(D,DD),X.slice(0,G)}var oB=BigInt(0),P8=BigInt(1),aB=BigInt(2),tB=BigInt(7),eB=BigInt(256),sB=BigInt(113),CZ=[],EZ=[],_Z=[];for(let $=0,U=P8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],CZ.push(2*(5*G+J)),EZ.push(($+1)*($+2)/2%64);let I=oB;for(let Q=0;Q<7;Q++)if(U=(U<<P8^(U>>tB)*sB)%eB,U&aB)I^=P8<<(P8<<BigInt(Q))-P8;_Z.push(I)}var bZ=tQ(_Z,!0),$L=bZ[0],UL=bZ[1],LZ=($,U,J)=>J>32?DZ($,U,J):OZ($,U,J),SZ=($,U,J)=>J>32?zZ($,U,J):qZ($,U,J);function IL($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],z=J[q+1],W=LZ(D,z,1)^J[O],v=SZ(D,z,1)^J[O+1];for(let w=0;w<50;w+=10)$[X+w]^=W,$[X+w+1]^=v}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=EZ[X],q=LZ(I,Q,O),D=SZ(I,Q,O),z=CZ[X];I=$[z],Q=$[z+1],$[z]=q,$[z+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=$L[G],$[1]^=UL[G]}CU(J)}class sQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,p$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rQ(this.state)}clone(){return this._cloneInto()}keccak(){rq(this.state32),IL(this.state32,this.rounds),rq(this.state32),this.posOut=0,this.pos=0}update($){h0(this),Z$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){h0(this,!1),Z$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return p$($),this.xofInto(new Uint8Array($))}digestInto($){if(yQ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,CU(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new sQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var fZ=($,U,J,G={})=>lJ(()=>new sQ(U,$,J),G);var sI=fZ(6,136,32,zI(8));var kZ=fZ(6,72,64,zI(10));var FZ=($,U,J,G={})=>lJ((I={})=>new sQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),uZ=FZ(31,168,16,zI(11)),Z0=FZ(31,136,32,zI(12));function zD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function mZ($){return zD($),($&$-1)===0&&$!==0}function YD($,U){zD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function yZ($){return zD($),31-Math.clz32($)}function xZ($){let U=$.length;if(U<2||!mZ(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=yZ(U);for(let G=0;G<U;G++){let I=YD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var WD=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=yZ(J);if(!mZ(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)xZ(z);for(let W=0,v=1;W<q-X;W++){let w=I?W+1+X:q-W,g=1<<w,V=g>>1,N=J>>w;for(let j=0;j<J;j+=g)for(let M=0,S=v++;M<V;M++){let L=Q?I?J-S:S:M*N,k=j+M,x=j+M+V,h=G[L],B=z[x],m=z[k];if(D){let a=$.mul(B,h);z[k]=$.add(m,a),z[x]=$.sub(m,a)}else if(Q)z[k]=$.add(B,m),z[x]=$.mul($.sub(B,m),h);else z[k]=$.add(m,B),z[x]=$.mul($.sub(m,B),h)}}if(!I&&O)xZ(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var R0=DI;function $4($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function rZ($){return Uint8Array.from($)}function $J($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),z=typeof q==="number"?I[X]:q.encode(I[X]);if(Z$(z,D,$),Q.set(z,O),typeof q!=="number")z.fill(0);O+=D}return Q},decode:(I)=>{Z$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function U4($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{Z$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function i$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function vD($){return(1<<$)-1}var ad=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var hZ=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(M,S=G)=>{let L=M%S|0;return(L>=0?L|0:S+L|0)|0},D=(M,S=G)=>{let L=q(M,S)|0;return(L>S>>1?L-S|0:L)|0};function z(){let M=U(J);for(let S=0;S<J;S++){let L=YD(S,X),k=BigInt(Q)**BigInt(L)%BigInt(G);M[S]=Number(k)|0}return M}let W=z(),v={add:(M,S)=>q((M|0)+(S|0))|0,sub:(M,S)=>q((M|0)-(S|0))|0,mul:(M,S)=>q((M|0)*(S|0))|0,inv:(M)=>{throw Error("not implemented")}},w={N:J,roots:W,invertButterflies:!0,skipStages:O?1:0,brp:!1},g=WD(v,{dit:!1,...w}),V=WD(v,{dit:!0,...w});return{mod:q,smod:D,nttZetas:W,NTT:{encode:(M)=>{return g(M)},decode:(M)=>{V(M);for(let S=0;S<M.length;S++)M[S]=q(I*M[S]);return M}},bitsCoder:(M,S)=>{let L=vD(M),k=M*(J/8);return{bytesLen:k,encode:(x)=>{let h=new Uint8Array(k);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=(S.encode(x[B])&L)<<a,a+=M;for(;a>=8;a-=8,m>>=8)h[E++]=m&vD(a)}return h},decode:(x)=>{let h=U(J);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=x[B]<<a,a+=8;for(;a>=M;a-=M,m>>=M)h[E++]=S.decode(m&L)}return h}}}}},JL=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,z)=>{return G[I+0]=D,G[I+1]=z,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),i$(Q,G)}}},lZ=JL(uZ);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var NU=256,i0=3329,GL=3303,QL=17,{mod:S8,nttZetas:XL,NTT:UJ,bitsCoder:OL}=hZ({N:NU,Q:i0,F:GL,ROOT_OF_UNITY:QL,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),wD={512:{N:NU,Q:i0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:NU,Q:i0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:NU,Q:i0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},qL=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+i0/2)/i0,decode:(J)=>J*i0+U>>>$}},B8=($)=>OL($,qL($));function IJ($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]+U[J])}function DL($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]-U[J])}function zL($,U,J,G,I){let Q=S8(U*G*I+$*J),X=S8($*G+U*J);return{c0:Q,c1:X}}function I4($,U){for(let J=0;J<NU/2;J++){let G=XL[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=zL($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function dZ($){let U=new Uint16Array(NU);for(let J=0;J<NU;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<NU&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<i0)U[J++]=Q;if(J<NU&&X<i0)U[J++]=X}}return U}function L8($,U,J,G){let I=$(G*NU/4,U,J),Q=new Uint16Array(NU),X=rQ(I),O=0;for(let q=0,D=0,z=0,W=0;q<X.length;q++){let v=X[q];for(let w=0;w<32;w++)if(z+=v&1,v>>=1,O+=1,O===G)W=z,z=0;else if(O===2*G)Q[D++]=S8(W-z),z=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var YL=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=B8(1),z=B8(q),W=B8(O),v=$J("publicKey",U4(B8(12),U),32),w=U4(B8(12),U),g=$J("ciphertext",U4(W,U),z),V=$J("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:v.bytesLen,cipherText:g.bytesLen},keygen:(N)=>{Z$(N,32,"seed");let j=new Uint8Array(33);j.set(N),j[32]=U;let M=I(j),[S,L]=V.decode(M),k=[],x=[];for(let m=0;m<U;m++)k.push(UJ.encode(L8(J,L,m,Q)));let h=G(S);for(let m=0;m<U;m++){let a=UJ.encode(L8(J,L,U+m,Q));for(let E=0;E<U;E++){let A=dZ(h.get(E,m));IJ(a,I4(A,k[E]))}x.push(a)}h.clean();let B={publicKey:v.encode([x,S]),secretKey:w.encode(k)};return i$(S,L,k,x,j,M),B},encrypt:(N,j,M)=>{let[S,L]=v.decode(N),k=[];for(let E=0;E<U;E++)k.push(UJ.encode(L8(J,M,E,Q)));let x=G(L),h=new Uint16Array(NU),B=[];for(let E=0;E<U;E++){let A=L8(J,M,U+E,X),_=new Uint16Array(NU);for(let R=0;R<U;R++){let K=dZ(x.get(E,R));IJ(_,I4(K,k[R]))}IJ(A,UJ.decode(_)),B.push(A),IJ(h,I4(S[E],k[E])),i$(_)}x.clean();let m=L8(J,M,2*U,X);IJ(m,UJ.decode(h));let a=D.decode(j);return IJ(a,m),i$(S,k,h,m),g.encode([B,a])},decrypt:(N,j)=>{let[M,S]=g.decode(N),L=w.decode(j),k=new Uint16Array(NU);for(let x=0;x<U;x++)IJ(k,I4(L[x],UJ.encode(M[x])));return DL(S,UJ.decode(k)),i$(k,L,M),D.encode(S)}}};function VD($){let U=YL($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=$J("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(z=R0(64))=>{Z$(z,64,"seed");let{publicKey:W,secretKey:v}=U.keygen(z.subarray(0,32)),w=J(W),g=O.encode([v,W,w,z.subarray(32)]);return i$(v,w),{publicKey:W,secretKey:g}},getPublicKey:(z)=>{let[W,v,w,g]=O.decode(z);return Uint8Array.from(v)},encapsulate:(z,W=R0(32))=>{Z$(z,X.publicKey,"publicKey"),Z$(W,32,"message");let v=z.subarray(0,384*$.K),w=Q.encode(Q.decode(rZ(v)));if(!$4(w,v))throw i$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");i$(w);let g=G.create().update(W).update(J(z)).digest(),V=U.encrypt(z,W,g.subarray(32,64));return i$(g.subarray(32)),{cipherText:V,sharedSecret:g.subarray(0,32)}},decapsulate:(z,W)=>{Z$(W,O.bytesLen,"secretKey"),Z$(z,X.cipherText,"cipherText");let v=O.bytesLen-96,w=v+32,g=J(W.subarray(v/2,w));if(!$4(g,W.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[V,N,j,M]=O.decode(W),S=U.decrypt(z,V),L=G.create().update(S).update(j).digest(),k=L.subarray(0,32),x=U.encrypt(N,S,L.subarray(32,64)),h=$4(z,x),B=I.create({dkLen:32}).update(M).update(z).digest();return i$(S,x,!h?k:B),h?k:B}}}function WL($,U,J){return Z0.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var ND={HASH256:sI,HASH512:kZ,KDF:Z0,XOF:lZ,PRF:WL},On=VD({...ND,...wD[512]}),C8=VD({...ND,...wD[768]}),nZ=VD({...ND,...wD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function vL($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=R0(J.seed))=>{Z$(X,J.seed,"seed");let O=Q.isLE?WI(X):YI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function gD($,U=!1){let J=vL($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=R0($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return i$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function E8($,U){return $J(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function ZD($){return(U,J)=>$(U,{dkLen:J})}function wL($,U,...J){let G=E8(J,"seed"),I=E8(J,"publicKey");if($===void 0)$=G.bytesLen;p$($);function Q(X){Z$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((W,v)=>W.keygen(O[v])),D=q.map((W)=>W.secretKey),z=q.map((W)=>W.publicKey);return{secretKey:D,publicKey:z}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=R0($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return i$(O),i$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function J4($,U,J,G,...I){let Q=wL($,J,...I),X=E8(I,"cipherText"),O=E8(I,"publicKey"),q=E8(I,"msg");if(U===void 0)U=q.bytesLen;return p$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,z=R0(q.bytesLen)){let W=O.decode(D),v=q.decode(z),w=I.map((j,M)=>j.encapsulate(W[M],v[M])),g=w.map((j)=>j.sharedSecret),V=w.map((j)=>j.cipherText),N={sharedSecret:G(W,V,g),cipherText:X.encode(V)};return i$(g,V),N},decapsulate(D,z){let W=X.decode(D),{publicKey:v,secretKey:w}=Q.expandDecapsulationKey(z),g=I.map((V,N)=>V.decapsulate(W[N],w[N]));return G(v,W,g)}}}function iZ($,U,J,G,I){return pU(G),pU(I),J4(32,32,ZD(G),(Q,X,O)=>I(l$(O[0],O[1],X[1],Q[1],vI($))),U,J)}var Zn=iZ("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",C8,gD(qD,!0),Z0,sI),Rn=iZ("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",nZ,gD(KZ,!0),Z0,sI);function VL($,U,J,G,I){return pU(G),pU(I),J4(32,32,ZD(G),(Q,X,O)=>{let q=l$(O[0],O[1],X[0],Q[0],X[1],Q[1],vI($)),D=32,z=l$(vI("hybrid_prk"),q),W=PZ(I,z),v=l$(dJ(32,2),vI("shared_secret"),vI("")),w=BZ(I,W,v,32);return i$(W,v,z,q),w},U,J)}var cZ=gD(TZ),Mn=VL("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",C8,cZ,Z0,eQ),NL=(()=>J4(32,32,ZD(Z0),($,U,J)=>sI(l$(J[0],J[1],U[1],$[1],vI("\\.//^\\"))),C8,cZ))();function gL($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let z=0,W=U;;z=W,W+=U){if(W>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(z,W),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=R0(G)){return Z$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=R0(G)){Z$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),z=$.getPublicKey(q,!1);return i$(q),{sharedSecret:D,cipherText:z}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function ZL($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=gL(J,I,Q,G),O=64,q=O+G;return J4(32,32,(D)=>{Z$(D,32);let z=Z0(D,{dkLen:q}),W=z.subarray(0,O),v=z.subarray(O,q);return l$(W,v)},(D,z,W)=>sI(l$(W[0],W[1],z[1],D[1],vI($))),U,X)}var RL=(()=>ZL("MLKEM768-P256",C8,qD,128))();var G4=NL,pZ=RL;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>t$($,U,J),MD=y$,oJ=LQ,JU=(...$)=>jq(...$),aJ=($)=>X8($),tJ=Zq,eJ=($)=>u0($),X4=BigInt(0),RD=BigInt(1);function c0($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function O4($){if(typeof $==="bigint"){if(!Q4($))throw RangeError("positive bigint expected, got "+$)}else MD($);return $}function M0($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function _8($){let U=O4($).toString(16);return U.length&1?"0"+U:U}function oZ($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?X4:BigInt("0x"+$)}function JJ($){return oZ(LQ($))}function Q0($){return oZ(LQ(ZI(t$($)).reverse()))}function q4($,U){if(y$(U),U===0)throw RangeError("zero length");$=O4($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return X8(J.padStart(U*2,"0"))}function b8($,U){return q4($,U).reverse()}function aZ($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function ZI($){return Uint8Array.from(S$($))}function D4($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var Q4=($)=>typeof $==="bigint"&&X4<=$;function ML($,U,J){return Q4($)&&Q4(U)&&Q4(J)&&U<=$&&$<J}function p0($,U,J,G){if(!ML(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function sJ($){if($<X4)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>X4;$>>=RD,U+=1);return U}var f8=($)=>(RD<<BigInt($))-RD;function tZ($,U,J){if(y$($,"hashLen"),y$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},v=(...N)=>J(D,JU(q,...N)),w=(N=I)=>{if(D=v(Q,N),q=v(),N.length===0)return;D=v(X,N),q=v()},g=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=v();let M=q.slice();j.push(M),N+=q.length}return JU(...j)};return(N,j)=>{W(),w(N);let M=void 0;while((M=j(g()))===void 0)w();return W(),M}}function aU($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var jD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GU=BigInt(0),x$=BigInt(1),GJ=BigInt(2),U5=BigInt(3),I5=BigInt(4),J5=BigInt(5),jL=BigInt(7),G5=BigInt(8),HL=BigInt(9),Q5=BigInt(16);function F$($,U){if(U<=GU)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=GU?J:U+J}function tU($,U,J){if(U<GU)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >GU)G*=G,G%=J;return G}function eZ($,U){if($===GU)throw Error("invert: expected non-zero number");if(U<=GU)throw Error("invert: expected positive modulus, got "+U);let J=F$($,U),G=U,I=GU,Q=x$,X=x$,O=GU;while(J!==GU){let D=G/J,z=G-J*D,W=I-X*D,v=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=v}if(G!==x$)throw Error("invert: does not exist");return F$(I,U)}function HD($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function X5($,U){let J=$,G=(J.ORDER+x$)/I5,I=J.pow(U,G);return HD(J,I,U),I}function TL($,U){let J=$,G=(J.ORDER-J5)/G5,I=J.mul(U,GJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,GJ),Q),q=J.mul(X,J.sub(O,J.ONE));return HD(J,q,U),q}function KL($){let U=z4($),J=O5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+jL)/Q5;return(O,q)=>{let D=O,z=D.pow(q,X),W=D.mul(z,G),v=D.mul(z,I),w=D.mul(z,Q),g=D.eql(D.sqr(W),q),V=D.eql(D.sqr(v),q);z=D.cmov(z,W,g),W=D.cmov(w,v,V);let N=D.eql(D.sqr(W),q),j=D.cmov(z,W,N);return HD(D,j,q),j}}function O5($){if($<U5)throw Error("sqrt is not defined for small field");let U=$-x$,J=0;while(U%GJ===GU)U/=GJ,J++;let G=GJ,I=z4($);while(sZ(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return X5;let Q=I.pow(G,U),X=(U+x$)/GJ;return function(q,D){let z=q;if(z.is0(D))return D;if(sZ(z,D)!==1)throw Error("Cannot find square root");let W=J,v=z.mul(z.ONE,Q),w=z.pow(D,U),g=z.pow(D,X);while(!z.eql(w,z.ONE)){if(z.is0(w))return z.ZERO;let V=1,N=z.sqr(w);while(!z.eql(N,z.ONE))if(V++,N=z.sqr(N),V===W)throw Error("Cannot find square root");let j=x$<<BigInt(W-V-1),M=z.pow(v,j);W=V,v=z.sqr(M),w=z.mul(w,v),g=z.mul(g,M)}return g}}function AL($){if($%I5===U5)return X5;if($%G5===J5)return TL;if($%Q5===HL)return KL($);return O5($)}var o0=($,U)=>(F$($,U)&x$)===x$,PL=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function TD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=PL.reduce((G,I)=>{return G[I]="function",G},U);if(aU($,J),M0($.BYTES,"BYTES"),M0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=x$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function BL($,U,J){let G=$;if(J<GU)throw Error("invalid exponent, negatives unsupported");if(J===GU)return G.ONE;if(J===x$)return U;let I=G.ONE,Q=U;while(J>GU){if(J&x$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=x$}return I}function k8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function sZ($,U){let J=$,G=(J.ORDER-x$)/GJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function LL($,U){if(U!==void 0)MD(U);if($<=GU)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=sJ($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var $5=new WeakMap;class KD{ORDER;BITS;BYTES;isLE;ZERO=GU;ONE=x$;_lengths;_mod;constructor($,U={}){if($<=x$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=LL($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return F$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return GU<=$&&$<this.ORDER}is0($){return $===GU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&x$)===x$}neg($){return F$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return F$($*$,this.ORDER)}add($,U){return F$($+U,this.ORDER)}sub($,U){return F$($-U,this.ORDER)}mul($,U){return F$($*U,this.ORDER)}pow($,U){return BL(this,$,U)}div($,U){return F$($*eZ(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return eZ($,this.ORDER)}sqrt($){let U=$5.get(this);if(!U)$5.set(this,U=AL(this.ORDER));return U(this,$)}toBytes($){return this.isLE?b8($,this.BYTES):q4($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?Q0($):JJ($);if(X)O=F$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return k8(this,$)}cmov($,U,J){return c0(J,"condition"),J?U:$}}Object.freeze(KD.prototype);function z4($,U={}){return new KD($,U)}function q5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=x$)throw Error("field order must be greater than 1");let U=sJ($-x$);return Math.ceil(U/8)}function AD($){let U=q5($);return U+Math.ceil(U/2)}function D5($,U,J=!1){S$($);let G=$.length,I=q5(U),Q=Math.max(AD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?Q0($):JJ($),O=F$(X,U-x$)+x$;return J?b8(O,I):q4(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $G=BigInt(0),QJ=BigInt(1);function F8($,U){let J=U.negate();return $?J:U}function XJ($,U){let J=k8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function v5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function PD($,U){v5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=f8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function z5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=QJ;let D=U*G,z=D+Math.abs(O)-1,W=O===0,v=O<0,w=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:v,isNegF:w,offsetF:D}}var BD=new WeakMap,w5=new WeakMap;function LD($){return w5.get($)||1}function Y5($){if($!==$G)throw Error("invalid wNAF")}class u8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>$G){if(U&QJ)J=J.add(G);G=G.double(),U>>=QJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=PD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=PD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:v}=z5(J,X,Q);if(J=O,D)I=I.add(F8(W,U[v]));else G=G.add(F8(z,U[q]))}return Y5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=PD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===$G)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=z5(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return Y5(J),G}getPrecomputes($,U,J){let G=BD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);BD.set(U,G)}}return G}cached($,U,J){let G=LD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=LD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){v5(U,this.bits),w5.set($,U),BD.delete($)}hasCache($){return LD($)!==1}}function V5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>$G||G>$G){if(J&QJ)Q=Q.add(I);if(G&QJ)X=X.add(I);I=I.double(),J>>=QJ,G>>=QJ}return{p1:Q,p2:X}}function W5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return TD(U),U}else return z4($,{isLE:J})}function Y4($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>$G))throw Error(`CURVE.${q} must be positive bigint`)}let I=W5(U.p,J.Fp,G),Q=W5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function x8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function m8($,U){if(M0($),M0(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function SL($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function CL($){if(!tJ($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?D4($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function SD($,U,J,G){if(S$($),M0(J),U=CL(U),U.length>255)U=G(JU(D4("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=JU(U,m8(U.length,1)),q=new Uint8Array(Q),D=m8(J,2),z=Array(X),W=G(JU(q,$,D,m8(0,1),O));z[0]=G(JU(W,m8(1,1),O));for(let w=1;w<X;w++){let g=[SL(W,z[w-1]),m8(w+1,1),O];z[w]=G(JU(...g))}return JU(...z).slice(0,J)}var N5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var g5=($,U)=>($+($>=0?U:-U)/R5)/U;function EL($,U,J){p0("scalar",$,j0,J);let[[G,I],[Q,X]]=U,O=g5(X*$,J),q=g5(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<j0,v=z<j0;if(W)D=-D;if(v)z=-z;let w=f8(Math.ceil(sJ(J)/2))+RI;if(D<j0||D>=w||z<j0||z>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:W,k1:D,k2neg:v,k2:z}}function ED($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function CD($,U){aU($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(c0(J.lowS,"lowS"),c0(J.prehash,"prehash"),J.format!==void 0)ED(J.format);return J}class Z5 extends Error{constructor($=""){super($)}}var X0={Err:Z5,_tlv:{encode:($,U)=>{let{Err:J}=X0;if(M0($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=_8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?_8(I.length/2|128):"";return _8($)+Q+I+U},decode($,U){let{Err:J}=X0;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=X0;if(O4($),$<j0)throw new U("integer: negative integers are not allowed");let J=_8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=X0;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return JJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=X0,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=X0,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(X0._tlv);Object.freeze(X0._int);Object.freeze(X0);var j0=BigInt(0),RI=BigInt(1),R5=BigInt(2),W4=BigInt(3),_L=BigInt(4);function M5($,U={}){let J=Y4("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;aU(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=H5(G,I);function W(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function v(E,A,_){if(D&&A.is0())return Uint8Array.of(0);let{x:R,y:K}=A.toAffine(),H=G.toBytes(R);if(c0(_,"isCompressed"),_){W();let b=!G.isOdd(K);return JU(j5(b),H)}else return JU(Uint8Array.of(4),H,G.toBytes(K))}function w(E){S$(E,void 0,"Point");let{publicKey:A,publicKeyUncompressed:_}=z,R=E.length,K=E[0],H=E.subarray(1);if(D&&R===1&&K===0)return{x:G.ZERO,y:G.ZERO};if(R===A&&(K===2||K===3)){let b=G.fromBytes(H);if(!G.isValid(b))throw Error("bad point: is not on curve, wrong x");let P=N(b),F;try{F=G.sqrt(P)}catch($$){let X$=$$ instanceof Error?": "+$$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}W();let y=G.isOdd(F);if((K&1)===1!==y)F=G.neg(F);return{x:b,y:F}}else if(R===_&&K===4){let b=G.BYTES,P=G.fromBytes(H.subarray(0,b)),F=G.fromBytes(H.subarray(b,b*2));if(!j(P,F))throw Error("bad point: is not on curve");return{x:P,y:F}}else throw Error(`bad point: got length ${R}, expected compressed=${A} or uncompressed=${_}`)}let g=U.toBytes===void 0?v:U.toBytes,V=U.fromBytes===void 0?w:U.fromBytes;function N(E){let A=G.sqr(E),_=G.mul(A,E);return G.add(G.add(_,G.mul(E,Q.a)),Q.b)}function j(E,A){let _=G.sqr(A),R=N(E);return G.eql(_,R)}if(!j(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let M=G.mul(G.pow(Q.a,W4),_L),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(M,S)))throw Error("bad curve params: a or b");function L(E,A,_=!1){if(!G.isValid(A)||_&&G.is0(A))throw Error(`bad point coordinate ${E}`);return A}function k(E){if(!(E instanceof B))throw Error("Weierstrass Point expected")}function x(E){if(!q||!q.basises)throw Error("no endo");return EL(E,q.basises,I.ORDER)}function h(E,A,_,R,K){return _=new B(G.mul(_.X,E),_.Y,_.Z),A=F8(R,A),_=F8(K,_),A.add(_)}class B{static BASE=new B(Q.Gx,Q.Gy,G.ONE);static ZERO=new B(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(E,A,_){this.X=L("x",E),this.Y=L("y",A,!0),this.Z=L("z",_),Object.freeze(this)}static CURVE(){return Q}static fromAffine(E){let{x:A,y:_}=E||{};if(!E||!G.isValid(A)||!G.isValid(_))throw Error("invalid affine point");if(E instanceof B)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(_))return B.ZERO;return new B(A,_,G.ONE)}static fromBytes(E){let A=B.fromAffine(V(S$(E,void 0,"point")));return A.assertValidity(),A}static fromHex(E){return B.fromBytes(aJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,A=!0){if(a.createCache(this,E),!A)this.multiply(W4);return this}assertValidity(){let E=this;if(E.is0()){if(U.allowInfinityPoint&&G.is0(E.X)&&G.eql(E.Y,G.ONE)&&G.is0(E.Z))return;throw Error("bad point: ZERO")}let{x:A,y:_}=E.toAffine();if(!G.isValid(A)||!G.isValid(_))throw Error("bad point: x or y not field elements");if(!j(A,_))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){k(E);let{X:A,Y:_,Z:R}=this,{X:K,Y:H,Z:b}=E,P=G.eql(G.mul(A,b),G.mul(K,R)),F=G.eql(G.mul(_,b),G.mul(H,R));return P&&F}negate(){return new B(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:A}=Q,_=G.mul(A,W4),{X:R,Y:K,Z:H}=this,b=G.ZERO,P=G.ZERO,F=G.ZERO,y=G.mul(R,R),n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(R,K);return X$=G.add(X$,X$),F=G.mul(R,H),F=G.add(F,F),b=G.mul(E,F),P=G.mul(_,$$),P=G.add(b,P),b=G.sub(n,P),P=G.add(n,P),P=G.mul(b,P),b=G.mul(X$,b),F=G.mul(_,F),$$=G.mul(E,$$),X$=G.sub(y,$$),X$=G.mul(E,X$),X$=G.add(X$,F),F=G.add(y,y),y=G.add(F,y),y=G.add(y,$$),y=G.mul(y,X$),P=G.add(P,y),$$=G.mul(K,H),$$=G.add($$,$$),y=G.mul($$,X$),b=G.sub(b,y),F=G.mul($$,n),F=G.add(F,F),F=G.add(F,F),new B(b,P,F)}add(E){k(E);let{X:A,Y:_,Z:R}=this,{X:K,Y:H,Z:b}=E,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=Q.a,$$=G.mul(Q.b,W4),X$=G.mul(A,K),q$=G.mul(_,H),W$=G.mul(R,b),N$=G.add(A,_),w$=G.add(K,H);N$=G.mul(N$,w$),w$=G.add(X$,q$),N$=G.sub(N$,w$),w$=G.add(A,R);let V$=G.add(K,b);return w$=G.mul(w$,V$),V$=G.add(X$,W$),w$=G.sub(w$,V$),V$=G.add(_,R),P=G.add(H,b),V$=G.mul(V$,P),P=G.add(q$,W$),V$=G.sub(V$,P),y=G.mul(n,w$),P=G.mul($$,W$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),F=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),W$=G.mul(n,W$),w$=G.mul($$,w$),q$=G.add(q$,W$),W$=G.sub(X$,W$),W$=G.mul(n,W$),w$=G.add(w$,W$),X$=G.mul(q$,w$),F=G.add(F,X$),X$=G.mul(V$,w$),P=G.mul(N$,P),P=G.sub(P,X$),X$=G.mul(N$,q$),y=G.mul(V$,y),y=G.add(y,X$),new B(P,F,y)}subtract(E){return k(E),this.add(E.negate())}is0(){return this.equals(B.ZERO)}multiply(E){let{endo:A}=U;if(!I.isValidNot0(E))throw RangeError("invalid scalar: out of range");let _,R,K=(H)=>a.cached(this,H,(b)=>XJ(B,b));if(A){let{k1neg:H,k1:b,k2neg:P,k2:F}=x(E),{p:y,f:n}=K(b),{p:$$,f:X$}=K(F);R=n.add(X$),_=h(A.beta,y,$$,H,P)}else{let{p:H,f:b}=K(E);_=H,R=b}return XJ(B,[_,R])[0]}multiplyUnsafe(E){let{endo:A}=U,_=this,R=E;if(!I.isValid(R))throw RangeError("invalid scalar: out of range");if(R===j0||_.is0())return B.ZERO;if(R===RI)return _;if(a.hasCache(this))return this.multiply(R);if(A){let{k1neg:K,k1:H,k2neg:b,k2:P}=x(R),{p1:F,p2:y}=V5(B,_,H,P);return h(A.beta,F,y,K,b)}else return a.unsafe(_,R)}toAffine(E){let A=this,_=E,{X:R,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:R,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(R,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}isTorsionFree(){let{isTorsionFree:E}=U;if(X===RI)return!0;if(E)return E(B,this);return a.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:E}=U;if(X===RI)return this;if(E)return E(B,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===RI)return this.is0();return this.clearCofactor().is0()}toBytes(E=!0){return c0(E,"isCompressed"),this.assertValidity(),g(B,this,E)}toHex(E=!0){return oJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let m=I.BITS,a=new u8(B,U.endo?Math.ceil(m/2):m);if(m>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function j5($){return Uint8Array.of($?2:3)}function H5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function bL($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?eJ:U.randomBytes,I=Object.assign(H5($.Fp,J),{seed:Math.max(AD(J.ORDER),16)});function Q(w){try{let g=J.fromBytes(w);return J.isValidNot0(g)}catch(g){return!1}}function X(w,g){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=w.length;if(g===!0&&j!==V)return!1;if(g===!1&&j!==N)return!1;return!!$.fromBytes(w)}catch(j){return!1}}function O(w){return w=w===void 0?G(I.seed):w,D5(S$(w,I.seed,"seed"),J.ORDER)}function q(w,g=!0){return $.BASE.multiply(J.fromBytes(w)).toBytes(g)}function D(w){let{secretKey:g,publicKey:V,publicKeyUncompressed:N}=I,j=J._lengths;if(!tJ(w))return;let M=S$(w,void 0,"key").length,S=M===V||M===N,L=M===g||!!j?.includes(M);if(S&&L)return;return S}function z(w,g,V=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(g)===!1)throw Error("second arg must be public key");let N=J.fromBytes(w);return $.fromBytes(g).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=x8(O,q);return Object.freeze(W),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:v,Point:$,utils:W,lengths:I})}function T5($,U,J={}){let G=U;F0(G),aU(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?eJ:J.randomBytes,Q=J.hmac===void 0?(K,H)=>w0(G,K,H):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:z,getPublicKey:W,getSharedSecret:v,utils:w,lengths:g}=bL($,J),V={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=q*R5+RI<X.ORDER;function j(K){let H=q>>RI;return K>H}function M(K,H){if(!O.isValidNot0(H))throw Error(`invalid signature ${K}: out of range 1..Point.Fn.ORDER`);return H}function S(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(K,H){ED(H);let b=g.signature,P=H==="compact"?b:H==="recovered"?b+1:void 0;return S$(K,P)}class k{r;s;recovery;constructor(K,H,b){if(this.r=M("r",K),this.s=M("s",H),b!=null){if(S(),![0,1,2,3].includes(b))throw Error("invalid recovery id");this.recovery=b}Object.freeze(this)}static fromBytes(K,H=V.format){L(K,H);let b;if(H==="der"){let{r:n,s:$$}=X0.toSig(S$(K));return new k(n,$$)}if(H==="recovered")b=K[0],H="compact",K=K.subarray(1);let P=g.signature/2,F=K.subarray(0,P),y=K.subarray(P,P*2);return new k(O.fromBytes(F),O.fromBytes(y),b)}static fromHex(K,H){return this.fromBytes(aJ(K),H)}assertRecovery(){let{recovery:K}=this;if(K==null)throw Error("invalid recovery id: must be present");return K}addRecoveryBit(K){return new k(this.r,this.s,K)}recoverPublicKey(K){let{r:H,s:b}=this,P=this.assertRecovery(),F=P===2||P===3?H+q:H;if(!X.isValid(F))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(F),n=$.fromBytes(JU(j5((P&1)===0),y)),$$=O.inv(F),X$=h(S$(K,void 0,"msgHash")),q$=O.create(-X$*$$),W$=O.create(b*$$),N$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(W$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return j(this.s)}toBytes(K=V.format){if(ED(K),K==="der")return aJ(X0.hexFromSig(this));let{r:H,s:b}=this,P=O.toBytes(H),F=O.toBytes(b);if(K==="recovered")return S(),JU(Uint8Array.of(this.assertRecovery()),P,F);return JU(P,F)}toHex(K){return oJ(this.toBytes(K))}}Object.freeze(k.prototype),Object.freeze(k);let x=J.bits2int===void 0?function(H){if(H.length>8192)throw Error("input is too large");let b=JJ(H),P=H.length*8-D;return P>0?b>>BigInt(P):b}:J.bits2int,h=J.bits2int_modN===void 0?function(H){return O.create(x(H))}:J.bits2int_modN,B=f8(D);function m(K){return p0("num < 2^"+D,K,j0,B),O.toBytes(K)}function a(K,H){return S$(K,void 0,"message"),H?S$(G(K),void 0,"prehashed message"):K}function E(K,H,b){let{lowS:P,prehash:F,extraEntropy:y}=CD(b,V);K=a(K,F);let n=h(K),$$=O.fromBytes(H);if(!O.isValidNot0($$))throw Error("invalid private key");let X$=[m($$),m(n)];if(y!=null&&y!==!1){let w$=y===!0?I(g.secretKey):y;X$.push(S$(w$,void 0,"extraEntropy"))}let q$=JU(...X$),W$=n;function N$(w$){let V$=x(w$);if(!O.isValidNot0(V$))return;let M$=O.inv(V$),b$=$.BASE.multiply(V$).toAffine(),k$=O.create(b$.x);if(k$===j0)return;let qU=O.create(M$*O.create(W$+k$*$$));if(qU===j0)return;let DU=(b$.x===k$?0:2)|Number(b$.y&RI),SU=qU;if(P&&j(qU))SU=O.neg(qU),DU^=1;return new k(k$,SU,N?void 0:DU)}return{seed:q$,k2sig:N$}}function A(K,H,b={}){let{seed:P,k2sig:F}=E(K,H,b);return tZ(G.outputLen,O.BYTES,Q)(P,F).toBytes(b.format)}function _(K,H,b,P={}){let{lowS:F,prehash:y,format:n}=CD(P,V);if(b=S$(b,void 0,"publicKey"),H=a(H,y),!tJ(K)){let $$=K instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+$$)}L(K,n);try{let $$=k.fromBytes(K,n),X$=$.fromBytes(b);if(F&&$$.hasHighS())return!1;let{r:q$,s:W$}=$$,N$=h(H),w$=O.inv(W$),V$=O.create(N$*w$),M$=O.create(q$*w$),b$=$.BASE.multiplyUnsafe(V$).add(X$.multiplyUnsafe(M$));if(b$.is0())return!1;return O.create(b$.x)===q$}catch($$){return!1}}function R(K,H,b={}){let{prehash:P}=CD(b,V);return H=a(H,P),k.fromBytes(K,"recovered").recoverPublicKey(H).toBytes()}return Object.freeze({keygen:z,getPublicKey:W,getSharedSecret:v,utils:w,lengths:g,Point:$,sign:A,verify:_,recoverPublicKey:R,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var fL=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var kL=M5(fL),UG=T5(kL,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var MI=BigInt(0),EU=BigInt(1),_D=BigInt(2),FL=BigInt(8);function uL($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function K5($,U={}){let J=U,G=Y4("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;aU(J,{},{uvRatio:"function"});let q=_D<<BigInt(Q.BYTES*8)-EU,D=(V)=>I.create(V),z=J.uvRatio===void 0?(V,N)=>{try{return{isValid:!0,value:I.sqrt(I.div(V,N))}}catch(j){return{isValid:!1,value:MI}}}:J.uvRatio;if(!uL(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function W(V,N,j=!1){let M=j?EU:MI;return p0("coordinate "+V,N,M,q),N}function v(V){if(!(V instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(X.Gx,X.Gy,EU,D(X.Gx*X.Gy));static ZERO=new w(MI,EU,EU,MI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(V,N,j,M){this.X=W("x",V),this.Y=W("y",N),this.Z=W("z",j,!0),this.T=W("t",M),Object.freeze(this)}static CURVE(){return X}static fromAffine(V){if(V instanceof w)throw Error("extended point not allowed");let{x:N,y:j}=V||{};return W("x",N),W("y",j),new w(N,j,EU,D(N*j))}static fromBytes(V,N=!1){let j=I.BYTES,{a:M,d:S}=X;V=ZI(S$(V,j,"point")),c0(N,"zip215");let L=ZI(V),k=V[j-1];L[j-1]=k&-129;let x=Q0(L),h=N?q:I.ORDER;p0("point.y",x,MI,h);let B=D(x*x),m=D(B-EU),a=D(S*B-M),{isValid:E,value:A}=z(m,a);if(!E)throw Error("bad point: invalid y coordinate");let _=(A&EU)===EU,R=(k&128)!==0;if(!N&&A===MI&&R)throw Error("bad point: x=0 and x_0=1");if(R!==_)A=D(-A);return w.fromAffine({x:A,y:x})}static fromHex(V,N=!1){return w.fromBytes(aJ(V),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,N=!0){if(g.createCache(this,V),!N)this.multiply(_D);return this}assertValidity(){let V=this,{a:N,d:j}=X;if(V.is0())throw Error("bad point: ZERO");let{X:M,Y:S,Z:L,T:k}=V,x=D(M*M),h=D(S*S),B=D(L*L),m=D(B*B),a=D(x*N),E=D(B*D(a+h)),A=D(m+D(j*D(x*h)));if(E!==A)throw Error("bad point: equation left != right (1)");let _=D(M*S),R=D(L*k);if(_!==R)throw Error("bad point: equation left != right (2)")}equals(V){v(V);let{X:N,Y:j,Z:M}=this,{X:S,Y:L,Z:k}=V,x=D(N*k),h=D(S*M),B=D(j*k),m=D(L*M);return x===h&&B===m}is0(){return this.equals(w.ZERO)}negate(){return new w(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=X,{X:N,Y:j,Z:M}=this,S=D(N*N),L=D(j*j),k=D(_D*D(M*M)),x=D(V*S),h=N+j,B=D(D(h*h)-S-L),m=x+L,a=m-k,E=x-L,A=D(B*a),_=D(m*E),R=D(B*E),K=D(a*m);return new w(A,_,K,R)}add(V){v(V);let{a:N,d:j}=X,{X:M,Y:S,Z:L,T:k}=this,{X:x,Y:h,Z:B,T:m}=V,a=D(M*x),E=D(S*h),A=D(k*j*m),_=D(L*B),R=D((M+S)*(x+h)-a-E),K=_-A,H=_+A,b=D(E-N*a),P=D(R*K),F=D(H*b),y=D(R*b),n=D(K*H);return new w(P,F,n,y)}subtract(V){return v(V),this.add(V.negate())}multiply(V){if(!Q.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f:j}=g.cached(this,V,(M)=>XJ(w,M));return XJ(w,[N,j])[0]}multiplyUnsafe(V){if(!Q.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===MI)return w.ZERO;if(this.is0()||V===EU)return this;return g.unsafe(this,V,(N)=>XJ(w,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return g.unsafe(this,X.n).is0()}toAffine(V){let N=this,j=V,{X:M,Y:S,Z:L}=N,k=N.is0();if(j==null)j=k?FL:I.inv(L);let x=D(M*j),h=D(S*j),B=I.mul(L,j);if(k)return{x:MI,y:EU};if(B!==EU)throw Error("invZ was invalid");return{x,y:h}}clearCofactor(){if(O===EU)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:V,y:N}=this.toAffine(),j=I.toBytes(N);return j[j.length-1]|=V&EU?128:0,j}toHex(){return oJ(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let g=new u8(w,Q.BITS);if(Q.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class bD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){jD()}static fromHex($){jD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return oJ(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var y8=BigInt(0),IG=BigInt(1),v4=BigInt(2);function xL($){return aU($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function A5($){let U=xL($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?eJ:X,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),w=O?v4**BigInt(254):v4**BigInt(447),g=O?BigInt(8)*v4**BigInt(251)-IG:BigInt(4)*v4**BigInt(445)-IG,V=w+g+IG,N=(R)=>F$(R,J),j=M(W);function M(R){return b8(N(R),z)}function S(R){let K=ZI(S$(R,z,"uCoordinate"));if(O)K[31]&=127;return N(Q0(K))}function L(R){return Q0(I(ZI(S$(R,z,"scalar"))))}function k(R,K){let H=a(S(K),L(R));if(H===y8)throw Error("invalid private or public key received");return M(H)}function x(R){return k(R,j)}let h=x,B=k;function m(R,K,H){let b=N(R*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(R,K){p0("u",R,y8,J),p0("scalar",K,w,V);let H=K,b=R,P=IG,F=y8,y=R,n=IG,$$=y8;for(let q$=BigInt(D-1);q$>=y8;q$--){let W$=H>>q$&IG;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,w$=N(N$*N$),V$=P-F,M$=N(V$*V$),b$=w$-M$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,v0=DU-SU;y=N(W0*W0),n=N(b*N(v0*v0)),P=N(w$*M$),F=N(b$*(w$+N(v*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(R)=>{return R=R===void 0?q(z):R,S$(R,E.seed,"seed"),R},_={randomSecretKey:A};return Object.freeze(E),Object.freeze(_),Object.freeze({keygen:x8(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mL=BigInt(0),a0=BigInt(1),P5=BigInt(2),yL=BigInt(3),rL=BigInt(5),hL=BigInt(8),qJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),uD=(()=>({p:qJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:hL,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function S5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=qJ,O=$*$%Q*$%Q,q=tU(O,P5,Q)*O%Q,D=tU(q,a0,Q)*$%Q,z=tU(D,rL,Q)*D%Q,W=tU(z,U,Q)*z%Q,v=tU(W,J,Q)*W%Q,w=tU(v,G,Q)*v%Q,g=tU(w,I,Q)*w%Q,V=tU(g,I,Q)*w%Q,N=tU(V,U,Q)*z%Q;return{pow_p_5_8:tU(N,P5,Q)*$%Q,b2:O}}function lL($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var fD=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function xD($,U){let J=qJ,G=F$(U*U*U,J),I=F$(G*G*U,J),Q=S5($*I).pow_p_5_8,X=F$($*G*Q,J),O=F$(U*X*X,J),q=X,D=F$(X*fD,J),z=O===$,W=O===F$(-$,J),v=O===F$(-$*fD,J);if(z)X=q;if(W||v)X=D;if(o0(X,J))X=F$(-X,J);return{isValid:z||W,value:X}}var OJ=K5(uD,{uvRatio:xD}),jI=(()=>OJ.Fp)(),C5=(()=>OJ.Fn)();var w4=(()=>{let $=qJ;return A5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=S5(U);return F$(tU(J,yL,$)*G,$)},adjustScalarBytes:lL})})();var kD=fD,dL=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),nL=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),iL=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),cL=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),B5=($)=>xD(a0,$),pL=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),FD=($)=>jI.create(Q0($)&pL);function L5($){let{d:U}=uD,J=qJ,G=(j)=>jI.create(j),I=G(kD*$*$),Q=G((I+a0)*iL),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=xD(Q,O),z=G(D*$);if(!o0(z,J))z=G(-z);if(!q)D=z;if(!q)X=I;let W=G(X*(I-a0)*cL-O),v=D*D,w=G((D+D)*O),g=G(W*dL),V=G(a0-v),N=G(a0+v);return new OJ(G(w*N),G(V*g),G(g*N),G(w*V))}class TU extends bD{static BASE=(()=>new TU(OJ.BASE))();static ZERO=(()=>new TU(OJ.ZERO))();static Fp=(()=>jI)();static Fn=(()=>C5)();constructor($){super($)}static fromAffine($){return new TU(OJ.fromAffine($))}assertSame($){if(!($ instanceof TU))throw Error("RistrettoPoint expected")}init($){return new TU($)}static fromBytes($){t$($,32);let{a:U,d:J}=uD,G=qJ,I=(S)=>jI.create(S),Q=FD($);if(!aZ(jI.toBytes(Q),$)||o0(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(a0+U*X),q=I(a0-U*X),D=I(O*O),z=I(q*q),W=I(U*J*D-z),{isValid:v,value:w}=B5(I(W*z)),g=I(w*q),V=I(w*g*W),N=I((Q+Q)*g);if(o0(N,G))N=I(-N);let j=I(O*V),M=I(N*j);if(!v||o0(M,G)||j===mL)throw Error("invalid ristretto255 encoding 2");return new TU(new OJ(N,j,a0,M))}static fromHex($){return TU.fromBytes(X8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=qJ,Q=(V)=>jI.create(V),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=B5(Q(X*q)),z=Q(D*X),W=Q(D*O),v=Q(z*W*G),w;if(o0(G*v,I)){let V=Q(U*kD),N=Q($*kD);$=V,U=N,w=Q(z*nL)}else w=W;if(o0($*v,I))U=Q(-U);let g=Q((J-U)*w);if(o0(g,I))g=Q(-g);return jI.toBytes(g)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>jI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(TU.ZERO)}}Object.freeze(TU.BASE);Object.freeze(TU.ZERO);Object.freeze(TU.prototype);Object.freeze(TU);var oL=Object.freeze({Point:TU,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=SD($,J,64,_Q);return oL.deriveToCurve(G)},hashToScalar($,U={DST:N5}){let J=SD($,U.DST,64,_Q);return C5.create(Q0(J))},deriveToCurve($){t$($,64);let U=FD($.subarray(0,32)),J=L5(U),G=FD($.subarray(32,64)),I=L5(G);return new TU(J.add(I))}});var E5=!1,aL=!1;async function _5($,U){if(aL)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function V4($,U){return await _5(async()=>{let J=mD($)?$:await eL($),G=await crypto.subtle.importKey("raw",sL(U),{name:"X25519"},E5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMult($,U)})}async function r8($){return await _5(async()=>{return V4($,w4.GuBytes)},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMultBase($)})}var tL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function eL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([...tL,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},E5,["deriveBits"])}function mD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function sL($){return $}class yD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),US(DJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=DJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:DJ(this.transcript)}}}function US($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function DJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function JG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function N4($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function rD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function b5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function f5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=DJ(G),X=Q.subarray(0,U),O=JG($,Q.subarray(U));return{data:X,rest:O}}class H0{args;body;constructor($,U){this.args=$,this.body=U}}async function IS($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=WU.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=DJ(G);return{s:new H0(J,I)}}async function k5($){let U=new yD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await IS(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=WU.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:JG($,O)}}}function hD($){let U=[];U.push(`age-encryption.org/v1
+`)}function yg($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function RU($,U){let J=$[U];return typeof J==="string"?J:void 0}function KQ($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var AQ={name:"@rizom/ops",version:"0.2.0-alpha.292",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as vS,mkdirSync as wS,readFileSync as Xz,writeFileSync as Oz}from"fs";import{dirname as VS,join as d5}from"path";function Zq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function y$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function t$($,U,J=""){let G=Zq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function F0($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(y$($.outputLen),y$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function uJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function PQ($,U){t$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function BQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function MU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function xJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function I0($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var _P=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function bP($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function fP($){for(let U=0;U<$.length;U++)$[U]=bP($[U]);return $}var Rq=_P?($)=>$:fP,hg=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),kP=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function LQ($){if(t$($),hg)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=kP[$[J]];return U}var k0={_0:48,_9:57,A:65,F:70,a:97,f:102};function rg($){if($>=k0._0&&$<=k0._9)return $-k0._0;if($>=k0.A&&$<=k0.F)return $-(k0.A-10);if($>=k0.a&&$<=k0.f)return $-(k0.a-10);return}function X8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(hg)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=rg($.charCodeAt(Q)),O=rg($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function FP($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Mq($,U=""){if(typeof $==="string")return FP($);return t$($,void 0,U)}function jq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];t$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function SQ($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function Hq($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function u0($=32){y$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Tq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Kq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(F0($),t$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),MU(G)}update($){return uJ(this),this.iHash.update($),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var w0=(()=>{let $=(U,J,G)=>new Kq(U,J).update(G).digest();return $.create=(U,J)=>new Kq(U,J),$})();function O8($,U,J){if(F0($),J===void 0)J=new Uint8Array($.outputLen);return w0($,J,U)}var Aq=Uint8Array.of(0),lg=Uint8Array.of();function Pq($,U,J,G=32){F0($),y$(G,"length"),t$(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=lg;else t$(J,void 0,"info");let X=new Uint8Array(Q*I),O=w0.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)Aq[0]=z+1,q.update(z===0?lg:D).update(J).update(Aq).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),MU(D,Aq),X.slice(0,G)}var GI=($,U,J,G,I)=>Pq($,O8($,U,J),G,I);function dg($,U,J){return $&U^~$&J}function ng($,U,J){return $&U^$&J^U&J}class CQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=xJ(this.buffer)}update($){uJ(this),t$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=xJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){uJ(this),PQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,MU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=xJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var x0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),m0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),e$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),s$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var EQ=BigInt(4294967295),ig=BigInt(32);function uP($,U=!1){if(U)return{h:Number($&EQ),l:Number($>>ig&EQ)};return{h:Number($>>ig&EQ)|0,l:Number($&EQ)|0}}function cg($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=uP($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Bq=($,U,J)=>$>>>J,Lq=($,U,J)=>$<<32-J|U>>>J,lI=($,U,J)=>$>>>J|U<<32-J,dI=($,U,J)=>$<<32-J|U>>>J,q8=($,U,J)=>$<<64-J|U>>>J-32,D8=($,U,J)=>$>>>J-32|U<<64-J;function V0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var pg=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),og=($,U,J,G)=>U+J+G+($/4294967296|0)|0,ag=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),tg=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,eg=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),sg=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var mP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QI=new Uint32Array(64);class Sq extends CQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)QI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=QI[z-15],v=QI[z-2],w=I0(W,7)^I0(W,18)^W>>>3,g=I0(v,17)^I0(v,19)^v>>>10;QI[z]=g+QI[z-7]+w+QI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=I0(X,6)^I0(X,11)^I0(X,25),v=D+W+dg(X,O,q)+mP[z]+QI[z]|0,g=(I0(J,2)^I0(J,13)^I0(J,22))+ng(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+g|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){MU(QI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),MU(this.buffer)}}class $7 extends Sq{A=x0[0]|0;B=x0[1]|0;C=x0[2]|0;D=x0[3]|0;E=x0[4]|0;F=x0[5]|0;G=x0[6]|0;H=x0[7]|0;constructor(){super(32)}}class yP extends Sq{A=m0[0]|0;B=m0[1]|0;C=m0[2]|0;D=m0[3]|0;E=m0[4]|0;F=m0[5]|0;G=m0[6]|0;H=m0[7]|0;constructor(){super(28)}}var U7=(()=>cg(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),rP=(()=>U7[0])(),hP=(()=>U7[1])(),XI=new Uint32Array(80),OI=new Uint32Array(80);class z8 extends CQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:v,Gl:w,Hh:g,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=v|0,this.Gl=w|0,this.Hh=g|0,this.Hl=V|0}process($,U){for(let M=0;M<16;M++,U+=4)XI[M]=$.getUint32(U),OI[M]=$.getUint32(U+=4);for(let M=16;M<80;M++){let S=XI[M-15]|0,L=OI[M-15]|0,k=lI(S,L,1)^lI(S,L,8)^Bq(S,L,7),x=dI(S,L,1)^dI(S,L,8)^Lq(S,L,7),h=XI[M-2]|0,B=OI[M-2]|0,m=lI(h,B,19)^q8(h,B,61)^Bq(h,B,6),a=dI(h,B,19)^D8(h,B,61)^Lq(h,B,6),E=ag(x,a,OI[M-7],OI[M-16]),A=tg(E,k,m,XI[M-7],XI[M-16]);XI[M]=A|0,OI[M]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:v,Fl:w,Gh:g,Gl:V,Hh:N,Hl:j}=this;for(let M=0;M<80;M++){let S=lI(z,W,14)^lI(z,W,18)^q8(z,W,41),L=dI(z,W,14)^dI(z,W,18)^D8(z,W,41),k=z&v^~z&g,x=W&w^~W&V,h=eg(j,L,x,hP[M],OI[M]),B=sg(h,N,S,k,rP[M],XI[M]),m=h|0,a=lI(J,G,28)^q8(J,G,34)^q8(J,G,39),E=dI(J,G,28)^D8(J,G,34)^D8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=g|0,j=V|0,g=v|0,V=w|0,v=z|0,w=W|0,{h:z,l:W}=V0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let R=pg(m,E,_);J=og(R,B,a,A),G=R|0}({h:J,l:G}=V0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=V0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=V0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=V0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=V0(this.Eh|0,this.El|0,z|0,W|0),{h:v,l:w}=V0(this.Fh|0,this.Fl|0,v|0,w|0),{h:g,l:V}=V0(this.Gh|0,this.Gl|0,g|0,V|0),{h:N,l:j}=V0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,v,w,g,V,N,j)}roundClean(){MU(XI,OI)}destroy(){this.destroyed=!0,MU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class I7 extends z8{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(64)}}class lP extends z8{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(48)}}var zU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),YU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class dP extends z8{Ah=zU[0]|0;Al=zU[1]|0;Bh=zU[2]|0;Bl=zU[3]|0;Ch=zU[4]|0;Cl=zU[5]|0;Dh=zU[6]|0;Dl=zU[7]|0;Eh=zU[8]|0;El=zU[9]|0;Fh=zU[10]|0;Fl=zU[11]|0;Gh=zU[12]|0;Gl=zU[13]|0;Hh=zU[14]|0;Hl=zU[15]|0;constructor(){super(28)}}class nP extends z8{Ah=YU[0]|0;Al=YU[1]|0;Bh=YU[2]|0;Bl=YU[3]|0;Ch=YU[4]|0;Cl=YU[5]|0;Dh=YU[6]|0;Dl=YU[7]|0;Eh=YU[8]|0;El=YU[9]|0;Fh=YU[10]|0;Fl=YU[11]|0;Gh=YU[12]|0;Gl=YU[13]|0;Hh=YU[14]|0;Hl=YU[15]|0;constructor(){super(32)}}var r$=Hq(()=>new $7,Tq(1));var _Q=Hq(()=>new I7,Tq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function uQ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function _q($){if(!uQ($))throw TypeError("Uint8Array expected")}function O7($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function q7($){if(typeof $!=="function")throw TypeError("function expected");return!0}function qI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function W8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function fQ($){if(!Array.isArray($))throw TypeError("array expected")}function kQ($,U){if(!O7(!0,U))throw TypeError(`${$}: array of strings expected`)}function bq($,U){if(!O7(!1,U))throw TypeError(`${$}: array of numbers expected`)}function xU(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function mU($){let U=typeof $==="string"?$.split(""):$,J=U.length;kQ("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return fQ(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return fQ(I),I.map((Q)=>{qI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function yU($=""){return qI("join",$),{encode:(U)=>{return kQ("join.decode",U),U.join($)},decode:(U)=>{return qI("join.decode",U),U.split($)}}}function xQ($,U="="){return W8($),qI("padding",U),{encode(J){kQ("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){kQ("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function D7($){return q7($),{encode:(U)=>U,decode:(U)=>$(U)}}function J7($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(fQ($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(W8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let z=Q[D],W=U*O,v=W+z;if(!Number.isSafeInteger(v)||W/U!==O||v-z!==W)throw Error("convertRadix: carry overflow");let w=v/J;O=v%J;let g=Math.floor(w);if(Q[D]=g,!Number.isSafeInteger(g)||g*J+O!==v)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!g)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var z7=($,U)=>U===0?$:z7(U,$%U),FQ=($,U)=>$+(U-z7($,U)),bQ=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function Cq($,U,J,G){if(fQ($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(FQ(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${FQ(U,J)}`);let I=0,Q=0,X=bQ[U],O=bQ[J]-1,q=[];for(let D of $){if(W8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let z=bQ[Q];if(z===void 0)throw Error("invalid carry");I&=z-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function iP($){W8($);let U=256;return{encode:(J)=>{if(!uQ(J))throw TypeError("radix.encode input should be Uint8Array");return J7(Array.from(J),U,$)},decode:(J)=>{return bq("radix.decode",J),Uint8Array.from(J7(J,$,U))}}}function iU($,U=!1){if(W8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(FQ(8,$)>32||FQ($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!uQ(J))throw TypeError("radix2.encode input should be Uint8Array");return Cq(Array.from(J),8,$,!U)},decode:(J)=>{return bq("radix2.decode",J),Uint8Array.from(Cq(J,$,8,U))}}}function G7($){return q7($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Hl=Object.freeze(xU(iU(4),mU("0123456789ABCDEF"),yU(""))),Tl=Object.freeze(xU(iU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),xQ(5),yU(""))),Kl=Object.freeze(xU(iU(5),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),yU(""))),Al=Object.freeze(xU(iU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),xQ(5),yU(""))),Pl=Object.freeze(xU(iU(5),mU("0123456789ABCDEFGHIJKLMNOPQRSTUV"),yU(""))),Bl=Object.freeze(xU(iU(5),mU("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),yU(""),D7(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),Y7=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),cP=/[\t\n\f\r ]/,W7=($,U)=>{qI("base64",$);let J=U?"base64url":"base64";if($.length>0&&cP.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},fq=Object.freeze(Y7?{encode($){return _q($),$.toBase64()},decode($){return W7($,!1)}}:xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),xQ(6),yU(""))),WU=Object.freeze(xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),yU(""))),Ll=Object.freeze(Y7?{encode($){return _q($),$.toBase64({alphabet:"base64url"})},decode($){return W7($,!0)}}:xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),xQ(6),yU(""))),Sl=Object.freeze(xU(iU(6),mU("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),yU(""))),kq=($)=>xU(iP(58),mU($),yU("")),Cl=Object.freeze(kq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),El=Object.freeze(kq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),_l=Object.freeze(kq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Eq=xU(mU("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),yU("")),Q7=[996825010,642813549,513874426,1027748829,705979059];function Y8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<Q7.length;G++)if((U>>G&1)===1)J^=Q7[G];return J}function X7($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=Y8(I)^X>>5}I=Y8(I);for(let Q=0;Q<G;Q++)I=Y8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=Y8(I)^Q;for(let Q=0;Q<6;Q++)I=Y8(I);return I^=J,Eq.encode(Cq([I%bQ[30]],30,5,!1))}function v7($){let U=$==="bech32"?1:734539939,J=iU(5),G=J.decode,I=J.encode,Q=G7(G);function X(W,v,w=90){if(qI("bech32.encode prefix",W),uQ(v))v=Array.from(v);bq("bech32.encode",v);let g=W.length;if(g===0)throw TypeError(`Invalid prefix length ${g}`);let V=g+7+v.length;if(w!==!1&&V>w)throw TypeError(`Length ${V} exceeds limit ${w}`);let N=W.toLowerCase(),j=X7(N,v,U);return`${N}1${Eq.encode(v)}${j}`}function O(W,v=90){qI("bech32.decode input",W);let w=W.length;if(w<8||v!==!1&&w>v)throw TypeError(`invalid string length: ${w} (${W}). Expected (8..${v})`);let g=W.toLowerCase();if(W!==g&&W!==W.toUpperCase())throw Error("String must be lowercase or uppercase");let V=g.lastIndexOf("1");if(V===0||V===-1)throw Error('Letter "1" must be present between prefix and data only');let N=g.slice(0,V),j=g.slice(V+1);if(j.length<6)throw Error("Data must be at least 6 characters long");let M=Eq.decode(j).slice(0,-6),S=X7(N,M,U);if(!j.endsWith(S))throw Error(`Invalid checksum in ${W}: expected "${S}"`);return{prefix:N,words:M}}let q=G7(O);function D(W){let{prefix:v,words:w}=O(W,!1);return{prefix:v,words:w,bytes:G(w)}}function z(W,v){return X(W,I(v))}return{encode:X,decode:O,encodeFromBytes:z,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var rU=Object.freeze(v7("bech32")),bl=Object.freeze(v7("bech32m"));var pP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),oP={encode($){return _q($),$.toHex()},decode($){return qI("hex",$),Uint8Array.fromHex($)}},fl=Object.freeze(pP?oP:xU(iU(4),mU("0123456789abcdef"),yU(""),D7(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function tP($,U,J,G){F0($);let I=SQ({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(y$(Q,"c"),y$(X,"dkLen"),y$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Mq(U,"password"),D=Mq(J,"salt"),z=new Uint8Array(X),W=w0.create($,q),v=W._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:z,PRF:W,PRFSalt:v}}function eP($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return MU(I),J}function Fq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=tP($,U,J,G),D,z=new Uint8Array(4),W=xJ(z),v=new Uint8Array(O.outputLen);for(let w=1,g=0;g<Q;w++,g+=O.outputLen){let V=X.subarray(g,g+O.outputLen);W.setInt32(0,w,!1),(D=q._cloneInto(D)).update(z).digestInto(v),V.set(v.subarray(0,V.length));for(let N=1;N<I;N++){O._cloneInto(D).update(v).digestInto(v);for(let j=0;j<V.length;j++)V[j]^=v[j]}}return eP(O,q,X,D,v)}function w7($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],z=$[U++]^J[G++],W=$[U++]^J[G++],v=$[U++]^J[G++],w=$[U++]^J[G++],g=$[U++]^J[G++],V=$[U++]^J[G++],N=$[U++]^J[G++],j=$[U++]^J[G++],M=$[U++]^J[G++],S=$[U++]^J[G++],L=$[U++]^J[G++],k=$[U++]^J[G++],x=X,h=O,B=q,m=D,a=z,E=W,A=v,_=w,R=g,K=V,H=N,b=j,P=M,F=S,y=L,n=k;for(let $$=0;$$<8;$$+=2)a^=P$(x+P|0,7),R^=P$(a+x|0,9),P^=P$(R+a|0,13),x^=P$(P+R|0,18),K^=P$(E+h|0,7),F^=P$(K+E|0,9),h^=P$(F+K|0,13),E^=P$(h+F|0,18),y^=P$(H+A|0,7),B^=P$(y+H|0,9),A^=P$(B+y|0,13),H^=P$(A+B|0,18),m^=P$(n+b|0,7),_^=P$(m+n|0,9),b^=P$(_+m|0,13),n^=P$(b+_|0,18),h^=P$(x+m|0,7),B^=P$(h+x|0,9),m^=P$(B+h|0,13),x^=P$(m+B|0,18),A^=P$(E+a|0,7),_^=P$(A+E|0,9),a^=P$(_+A|0,13),E^=P$(a+_|0,18),b^=P$(H+K|0,7),R^=P$(b+H|0,9),K^=P$(R+b|0,13),H^=P$(K+R|0,18),P^=P$(n+y|0,7),F^=P$(P+n|0,9),y^=P$(F+P|0,13),n^=P$(y+F|0,18);I[Q++]=X+x|0,I[Q++]=O+h|0,I[Q++]=q+B|0,I[Q++]=D+m|0,I[Q++]=z+a|0,I[Q++]=W+E|0,I[Q++]=v+A|0,I[Q++]=w+_|0,I[Q++]=g+R|0,I[Q++]=V+K|0,I[Q++]=N+H|0,I[Q++]=j+b|0,I[Q++]=M+P|0,I[Q++]=S+F|0,I[Q++]=L+y|0,I[Q++]=k+n|0}function uq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(w7(J,X,$,U,J,Q),O>0)X+=16;w7(J,Q,$,U+=16,J,X)}}function sP($,U,J){let G=SQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:z}=G;if(y$(I,"N"),y$(Q,"r"),y$(X,"p"),y$(O,"dkLen"),y$(q,"asyncTick"),y$(D,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let W=128*Q,v=W/4,w=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>w)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(w-1)*32/W)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(w-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let g=W*(I+X+1);if(g>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+g+", maxmem="+D);let V=Fq(r$,$,U,{c:1,dkLen:W*X}),N=BQ(V),j=BQ(new Uint8Array(W*I)),M=BQ(new Uint8Array(W)),S=()=>{};if(z){let L=2*I*X,k=Math.max(Math.floor(L/1e4),1),x=0;S=()=>{if(x++,z&&(!(x%k)||x===L))z(x/L)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:v,V:j,B32:N,B:V,tmp:M,blockMixCb:S,asyncTick:q}}function $B($,U,J,G,I){let Q=Fq(r$,$,J,{c:1,dkLen:U});return MU(J,G,I),Q}function xq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:z,tmp:W,blockMixCb:v}=sP($,U,J);Rq(D);for(let w=0;w<Q;w++){let g=O*w;for(let V=0;V<O;V++)q[V]=D[g+V];for(let V=0,N=0;V<G-1;V++)uq(q,N,q,N+=O,I),v();uq(q,(G-1)*O,D,g,I),v();for(let V=0;V<G;V++){let N=(D[g+O-16]&G-1)>>>0;for(let j=0;j<O;j++)W[j]=D[g+j]^q[N*O+j];uq(W,0,D,g,I),v()}}return Rq(D),$B($,X,z,q,W)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function UB($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function mQ($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function mJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function n$($,U,J=""){let G=UB($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function mq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function V7($,U,J=!1){n$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!yJ($))throw Error("invalid output, must be aligned")}function N0($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function J0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function IB($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var nI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),JB=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var GB=($)=>{for(let U=0;U<$.length;U++)$[U]=JB($[U]);return $},y0=nI?($)=>$:GB;function N7($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function g7($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function Z7($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var R7=($,U)=>{function J(G,...I){if(n$(G,void 0,"key"),$.nonceLength!==void 0){let z=I[0];n$(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)n$(I[1],void 0,"AAD");let X=U(G,...I),O=(z,W)=>{if(W!==void 0){if(z!==2)throw Error("cipher output not supported");n$(W,void 0,"output")}},q=!1;return{encrypt(z,W){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,n$(z),O(X.encrypt.length,W),X.encrypt(z,W)},decrypt(z,W){if(n$(z),Q&&z.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,W),X.decrypt(z,W)}}}return Object.assign(J,$),J};function v8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(n$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!yJ(U))throw Error("invalid output, must be aligned");return U}function M7($,U,J){mJ($),mJ(U),mQ(J);let G=new Uint8Array(16),I=IB(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function yJ($){return $.byteOffset%4===0}function rJ($){return Uint8Array.from(n$($))}var H7=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),QB=(()=>y0(N0(H7("expand 16-byte k"))))(),XB=(()=>y0(N0(H7("expand 32-byte k"))))();function B$($,U){return $<<U|$>>>32-U}var w8=64,OB=16,yq=(()=>4294967295)(),j7=Uint32Array.of();function qB($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(w8),z=N0(D),W=nI&&yJ(I)&&yJ(Q),v=W?N0(I):j7,w=W?N0(Q):j7;if(!nI){for(let g=0;g<q;X++){if($(U,J,G,z,X,O),y0(z),X>=yq)throw Error("arx: counter overflow");let V=Math.min(w8,q-g);for(let N=0,j;N<V;N++)j=g+N,Q[j]=I[j]^D[N];g+=V}return}for(let g=0;g<q;X++){if($(U,J,G,z,X,O),X>=yq)throw Error("arx: counter overflow");let V=Math.min(w8,q-g);if(W&&V===w8){let N=g/4;if(g%4!==0)throw Error("arx: invalid block position");for(let j=0,M;j<OB;j++)M=N+j,w[M]=v[M]^z[j];g+=w8;continue}for(let N=0,j;N<V;N++)j=g+N,Q[j]=I[j]^D[N];g+=V}}function T7($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=N7({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return mJ(I),mJ(X),mQ(Q),mQ(J),(O,q,D,z,W=0)=>{n$(O,void 0,"key"),n$(q,void 0,"nonce"),n$(D,void 0,"data");let v=D.length;if(z=v8(v,z,!1),mJ(W),W<0||W>=yq)throw Error("arx: counter overflow");let w=[],g=O.length,V,N;if(g===32)w.push(V=rJ(O)),N=XB;else if(g===16&&J)V=new Uint8Array(32),V.set(O),V.set(O,16),N=QB,w.push(V);else throw n$(O,32,"arx key"),Error("invalid key size");if(!nI||!yJ(q))w.push(q=rJ(q));let j=N0(V);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let L=q.subarray(0,16);if(nI)G(N,j,N0(L),j);else{let k=y0(Uint32Array.from(N));G(k,j,N0(L),j),J0(k),y0(j)}q=q.subarray(16)}else if(!nI)y0(j);let M=16-I;if(M!==q.length)throw Error(`arx: nonce must be ${M} or 16 bytes`);if(M!==12){let L=new Uint8Array(12);L.set(q,Q?0:12-q.length),q=L,w.push(q)}let S=y0(N0(q));try{return qB($,N,j,S,D,z,W,X),z}finally{J0(...w)}}}function $U($,U){return $[U++]&255|($[U++]&255)<<8}class K7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=rJ(n$($,32,"key"));let U=$U($,0),J=$U($,2),G=$U($,4),I=$U($,6),Q=$U($,8),X=$U($,10),O=$U($,12),q=$U($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=$U($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],z=Q[4],W=Q[5],v=Q[6],w=Q[7],g=Q[8],V=Q[9],N=$U($,U+0),j=$U($,U+2),M=$U($,U+4),S=$U($,U+6),L=$U($,U+8),k=$U($,U+10),x=$U($,U+12),h=$U($,U+14),B=I[0]+(N&8191),m=I[1]+((N>>>13|j<<3)&8191),a=I[2]+((j>>>10|M<<6)&8191),E=I[3]+((M>>>7|S<<9)&8191),A=I[4]+((S>>>4|L<<12)&8191),_=I[5]+(L>>>1&8191),R=I[6]+((L>>>14|k<<2)&8191),K=I[7]+((k>>>11|x<<5)&8191),H=I[8]+((x>>>8|h<<8)&8191),b=I[9]+(h>>>5|G),P=0,F=P+B*X+m*(5*V)+a*(5*g)+E*(5*w)+A*(5*v);P=F>>>13,F&=8191,F+=_*(5*W)+R*(5*z)+K*(5*D)+H*(5*q)+b*(5*O),P+=F>>>13,F&=8191;let y=P+B*O+m*X+a*(5*V)+E*(5*g)+A*(5*w);P=y>>>13,y&=8191,y+=_*(5*v)+R*(5*W)+K*(5*z)+H*(5*D)+b*(5*q),P+=y>>>13,y&=8191;let n=P+B*q+m*O+a*X+E*(5*V)+A*(5*g);P=n>>>13,n&=8191,n+=_*(5*w)+R*(5*v)+K*(5*W)+H*(5*z)+b*(5*D),P+=n>>>13,n&=8191;let $$=P+B*D+m*q+a*O+E*X+A*(5*V);P=$$>>>13,$$&=8191,$$+=_*(5*g)+R*(5*w)+K*(5*v)+H*(5*W)+b*(5*z),P+=$$>>>13,$$&=8191;let X$=P+B*z+m*D+a*q+E*O+A*X;P=X$>>>13,X$&=8191,X$+=_*(5*V)+R*(5*g)+K*(5*w)+H*(5*v)+b*(5*W),P+=X$>>>13,X$&=8191;let q$=P+B*W+m*z+a*D+E*q+A*O;P=q$>>>13,q$&=8191,q$+=_*X+R*(5*V)+K*(5*g)+H*(5*w)+b*(5*v),P+=q$>>>13,q$&=8191;let W$=P+B*v+m*W+a*z+E*D+A*q;P=W$>>>13,W$&=8191,W$+=_*O+R*X+K*(5*V)+H*(5*g)+b*(5*w),P+=W$>>>13,W$&=8191;let N$=P+B*w+m*v+a*W+E*z+A*D;P=N$>>>13,N$&=8191,N$+=_*q+R*O+K*X+H*(5*V)+b*(5*g),P+=N$>>>13,N$&=8191;let w$=P+B*g+m*w+a*v+E*W+A*z;P=w$>>>13,w$&=8191,w$+=_*D+R*q+K*O+H*X+b*(5*V),P+=w$>>>13,w$&=8191;let V$=P+B*V+m*g+a*w+E*v+A*W;P=V$>>>13,V$&=8191,V$+=_*z+R*D+K*q+H*O+b*X,P+=V$>>>13,V$&=8191,P=(P<<2)+P|0,P=P+F|0,F=P&8191,P=P>>>13,y+=P,I[0]=F,I[1]=y,I[2]=n,I[3]=$$,I[4]=X$,I[5]=q$,I[6]=W$,I[7]=N$,I[8]=w$,I[9]=V$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;J0(J)}update($){mq(this),n$($),$=rJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,J0(this.h,this.r,this.buffer,this.pad)}digestInto($){mq(this),V7($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var A7=Z7(32,($)=>new K7($));function DB($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],z=U[0],W=U[1],v=U[2],w=U[3],g=U[4],V=U[5],N=U[6],j=U[7],M=I,S=J[0],L=J[1],k=J[2],x=X,h=O,B=q,m=D,a=z,E=W,A=v,_=w,R=g,K=V,H=N,b=j,P=M,F=S,y=L,n=k;for(let X$=0;X$<Q;X$+=2)x=x+a|0,P=B$(P^x,16),R=R+P|0,a=B$(a^R,12),x=x+a|0,P=B$(P^x,8),R=R+P|0,a=B$(a^R,7),h=h+E|0,F=B$(F^h,16),K=K+F|0,E=B$(E^K,12),h=h+E|0,F=B$(F^h,8),K=K+F|0,E=B$(E^K,7),B=B+A|0,y=B$(y^B,16),H=H+y|0,A=B$(A^H,12),B=B+A|0,y=B$(y^B,8),H=H+y|0,A=B$(A^H,7),m=m+_|0,n=B$(n^m,16),b=b+n|0,_=B$(_^b,12),m=m+_|0,n=B$(n^m,8),b=b+n|0,_=B$(_^b,7),x=x+E|0,n=B$(n^x,16),H=H+n|0,E=B$(E^H,12),x=x+E|0,n=B$(n^x,8),H=H+n|0,E=B$(E^H,7),h=h+A|0,P=B$(P^h,16),b=b+P|0,A=B$(A^b,12),h=h+A|0,P=B$(P^h,8),b=b+P|0,A=B$(A^b,7),B=B+_|0,F=B$(F^B,16),R=R+F|0,_=B$(_^R,12),B=B+_|0,F=B$(F^B,8),R=R+F|0,_=B$(_^R,7),m=m+a|0,y=B$(y^m,16),K=K+y|0,a=B$(a^K,12),m=m+a|0,y=B$(y^m,8),K=K+y|0,a=B$(a^K,7);let $$=0;G[$$++]=X+x|0,G[$$++]=O+h|0,G[$$++]=q+B|0,G[$$++]=D+m|0,G[$$++]=z+a|0,G[$$++]=W+E|0,G[$$++]=v+A|0,G[$$++]=w+_|0,G[$$++]=g+R|0,G[$$++]=V+K|0,G[$$++]=N+H|0,G[$$++]=j+b|0,G[$$++]=M+P|0,G[$$++]=S+F|0,G[$$++]=L+y|0,G[$$++]=k+n|0}var zB=T7(DB,{counterRight:!1,counterLength:4,allowShortKeys:!1});var YB=new Uint8Array(16),P7=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(YB.subarray(J))},WB=new Uint8Array(32);function B7($,U,J,G,I){if(I!==void 0)n$(I,void 0,"AAD");let Q=$(U,J,WB),X=M7(G.length,I?I.length:0,!0),O=A7.create(Q);if(I)P7(O,I);P7(O,G),O.update(X);let q=O.digest();return J0(Q,X),q}var vB=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=v8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=B7($,U,J,q,G);return X.set(D,O),J0(D),X},decrypt(Q,X){X=v8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=B7($,U,J,O,G);if(!g7(q,D))throw J0(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),J0(D),X}}},cU=R7({blockSize:64,nonceLength:12,tagLength:16},vB(zB));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function hJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function p$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Z$($,U,J=""){let G=hJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function pU($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");p$($.outputLen),p$($.blockLen)}function h0($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function yQ($,U){Z$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function rQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function CU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function hQ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function G0($,U){return $<<32-U|$>>>U}var wB=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function VB($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function NB($){for(let U=0;U<$.length;U++)$[U]=VB($[U]);return $}var rq=wB?($)=>$:NB,S7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),gB=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function iI($){if(Z$($),S7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=gB[$[J]];return U}var r0={_0:48,_9:57,A:65,F:70,a:97,f:102};function L7($){if($>=r0._0&&$<=r0._9)return $-r0._0;if($>=r0.A&&$<=r0.F)return $-(r0.A-10);if($>=r0.a&&$<=r0.f)return $-(r0.a-10);return}function cI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(S7)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=L7($.charCodeAt(Q)),O=L7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function l$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];Z$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function lJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function DI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var zI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lq=BigInt(0),hq=BigInt(1);function V8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function C7($){if(typeof $==="bigint"){if(!lQ($))throw Error("positive bigint expected, got "+$)}else p$($);return $}function N8($){let U=C7($).toString(16);return U.length&1?"0"+U:U}function E7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?lq:BigInt("0x"+$)}function YI($){return E7(iI($))}function WI($){return E7(iI(dQ(Z$($)).reverse()))}function dJ($,U){p$(U),$=C7($);let J=cI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function g8($,U){return dJ($,U).reverse()}function dQ($){return Uint8Array.from($)}function vI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var lQ=($)=>typeof $==="bigint"&&lq<=$;function ZB($,U,J){return lQ($)&&lQ(U)&&lQ(J)&&U<=$&&$<J}function Z8($,U,J,G){if(!ZB(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function dq($){let U;for(U=0;$>lq;$>>=hq,U+=1);return U}var R8=($)=>(hq<<BigInt($))-hq;function _7($,U,J){if(p$($,"hashLen"),p$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},v=(...N)=>J(D,l$(q,...N)),w=(N=I)=>{if(D=v(Q,N),q=v(),N.length===0)return;D=v(X,N),q=v()},g=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=v();let M=q.slice();j.push(M),N+=q.length}return l$(...j)};return(N,j)=>{W(),w(N);let M=void 0;while(!(M=j(g())))w();return W(),M}}function pI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function nq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HU=BigInt(0),vU=BigInt(1),oI=BigInt(2),k7=BigInt(3),F7=BigInt(4),u7=BigInt(5),RB=BigInt(7),x7=BigInt(8),MB=BigInt(9),m7=BigInt(16);function jU($,U){let J=$%U;return J>=HU?J:U+J}function oU($,U,J){let G=$;while(U-- >HU)G*=G,G%=J;return G}function b7($,U){if($===HU)throw Error("invert: expected non-zero number");if(U<=HU)throw Error("invert: expected positive modulus, got "+U);let J=jU($,U),G=U,I=HU,Q=vU,X=vU,O=HU;while(J!==HU){let D=G/J,z=G%J,W=I-X*D,v=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=v}if(G!==vU)throw Error("invert: does not exist");return jU(I,U)}function iq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function y7($,U){let J=($.ORDER+vU)/F7,G=$.pow(U,J);return iq($,G,U),G}function jB($,U){let J=($.ORDER-u7)/x7,G=$.mul(U,oI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,oI),I),O=$.mul(Q,$.sub(X,$.ONE));return iq($,O,U),O}function HB($){let U=nQ($),J=r7($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+RB)/m7;return(O,q)=>{let D=O.pow(q,X),z=O.mul(D,G),W=O.mul(D,I),v=O.mul(D,Q),w=O.eql(O.sqr(z),q),g=O.eql(O.sqr(W),q);D=O.cmov(D,z,w),z=O.cmov(v,W,g);let V=O.eql(O.sqr(z),q),N=O.cmov(D,z,V);return iq(O,N,q),N}}function r7($){if($<k7)throw Error("sqrt is not defined for small field");let U=$-vU,J=0;while(U%oI===HU)U/=oI,J++;let G=oI,I=nQ($);while(f7(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return y7;let Q=I.pow(G,U),X=(U+vU)/oI;return function(q,D){if(q.is0(D))return D;if(f7(q,D)!==1)throw Error("Cannot find square root");let z=J,W=q.mul(q.ONE,Q),v=q.pow(D,U),w=q.pow(D,X);while(!q.eql(v,q.ONE)){if(q.is0(v))return q.ZERO;let g=1,V=q.sqr(v);while(!q.eql(V,q.ONE))if(g++,V=q.sqr(V),g===z)throw Error("Cannot find square root");let N=vU<<BigInt(z-g-1),j=q.pow(W,N);z=g,W=q.sqr(j),v=q.mul(v,W),w=q.mul(w,j)}return w}}function TB($){if($%F7===k7)return y7;if($%x7===u7)return jB;if($%m7===MB)return HB($);return r7($)}var KB=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function cq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=KB.reduce((G,I)=>{return G[I]="function",G},U);return pI($,J),$}function AB($,U,J){if(J<HU)throw Error("invalid exponent, negatives unsupported");if(J===HU)return $.ONE;if(J===vU)return U;let G=$.ONE,I=U;while(J>HU){if(J&vU)G=$.mul(G,I);I=$.sqr(I),J>>=vU}return G}function M8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function f7($,U){let J=($.ORDER-vU)/oI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function PB($,U){if(U!==void 0)p$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class h7{ORDER;BITS;BYTES;isLE;ZERO=HU;ONE=vU;_lengths;_sqrt;_mod;constructor($,U={}){if($<=HU)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=PB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return jU($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return HU<=$&&$<this.ORDER}is0($){return $===HU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&vU)===vU}neg($){return jU(-$,this.ORDER)}eql($,U){return $===U}sqr($){return jU($*$,this.ORDER)}add($,U){return jU($+U,this.ORDER)}sub($,U){return jU($-U,this.ORDER)}mul($,U){return jU($*U,this.ORDER)}pow($,U){return AB(this,$,U)}div($,U){return jU($*b7(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return b7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=TB(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?g8($,this.BYTES):dJ($,this.BYTES)}fromBytes($,U=!1){Z$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?WI($):YI($);if(X)O=jU(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return M8(this,$)}cmov($,U,J){return J?U:$}}function nQ($,U={}){return new h7($,U)}function l7($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function pq($){let U=l7($);return U+Math.ceil(U/2)}function d7($,U,J=!1){Z$($);let G=$.length,I=l7(U),Q=pq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?WI($):YI($),O=jU(X,U-vU)+vU;return J?g8(O,I):dJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nJ=BigInt(0),aI=BigInt(1);function j8($,U){let J=U.negate();return $?J:U}function eq($,U){let J=M8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function p7($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function oq($,U){p7($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=R8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function n7($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=aI;let D=U*G,z=D+Math.abs(O)-1,W=O===0,v=O<0,w=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:v,isNegF:w,offsetF:D}}var aq=new WeakMap,o7=new WeakMap;function tq($){return o7.get($)||1}function i7($){if($!==nJ)throw Error("invalid wNAF")}class sq{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>nJ){if(U&aI)J=J.add(G);G=G.double(),U>>=aI}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=oq(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=oq($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:v}=n7(J,X,Q);if(J=O,D)I=I.add(j8(W,U[v]));else G=G.add(j8(z,U[q]))}return i7(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=oq($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===nJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=n7(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return i7(J),G}getPrecomputes($,U,J){let G=aq.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);aq.set(U,G)}}return G}cached($,U,J){let G=tq($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=tq($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){p7(U,this.bits),o7.set($,U),aq.delete($)}hasCache($){return tq($)!==1}}function a7($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>nJ||G>nJ){if(J&aI)Q=Q.add(I);if(G&aI)X=X.add(I);I=I.double(),J>>=aI,G>>=aI}return{p1:Q,p2:X}}function c7($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return cq(U),U}else return nQ($,{isLE:J})}function t7($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>nJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=c7(U.p,J.Fp,G),Q=c7(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function iQ($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H8=BigInt(0),iJ=BigInt(1),cQ=BigInt(2);function BB($){return pI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function e7($){let U=BB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||DI,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),w=O?cQ**BigInt(254):cQ**BigInt(447),g=O?BigInt(8)*cQ**BigInt(251)-iJ:BigInt(4)*cQ**BigInt(445)-iJ,V=w+g+iJ,N=(R)=>jU(R,J),j=M(W);function M(R){return g8(N(R),z)}function S(R){let K=dQ(Z$(R,z,"uCoordinate"));if(O)K[31]&=127;return N(WI(K))}function L(R){return WI(I(dQ(Z$(R,z,"scalar"))))}function k(R,K){let H=a(S(K),L(R));if(H===H8)throw Error("invalid private or public key received");return M(H)}function x(R){return k(R,j)}let h=x,B=k;function m(R,K,H){let b=N(R*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(R,K){Z8("u",R,H8,J),Z8("scalar",K,w,V);let H=K,b=R,P=iJ,F=H8,y=R,n=iJ,$$=H8;for(let q$=BigInt(D-1);q$>=H8;q$--){let W$=H>>q$&iJ;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,w$=N(N$*N$),V$=P-F,M$=N(V$*V$),b$=w$-M$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,v0=DU-SU;y=N(W0*W0),n=N(b*N(v0*v0)),P=N(w$*M$),F=N(b$*(w$+N(v*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(R=q(z))=>{return Z$(R,E.seed,"seed"),R},_={randomSecretKey:A};return Object.freeze({keygen:iQ(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}class $D{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(pU($),Z$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),CU(G)}update($){return h0(this),this.iHash.update($),this}digestInto($){h0(this),Z$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var cJ=($,U,J)=>new $D($,U).update(J).digest();cJ.create=($,U)=>new $D($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var s7=($,U)=>($+($>=0?U:-U)/UZ)/U;function LB($,U,J){let[[G,I],[Q,X]]=U,O=s7(X*$,J),q=s7(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<l0,v=z<l0;if(W)D=-D;if(v)z=-z;let w=R8(Math.ceil(dq(J)/2))+pJ;if(D<l0||D>=w||z<l0||z>=w)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:W,k1:D,k2neg:v,k2:z}}function ID($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function UD($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(V8(J.lowS,"lowS"),V8(J.prehash,"prehash"),J.format!==void 0)ID(J.format);return J}class $Z extends Error{constructor($=""){super($)}}var wI={Err:$Z,_tlv:{encode:($,U)=>{let{Err:J}=wI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=N8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?N8(I.length/2|128):"";return N8($)+Q+I+U},decode($,U){let{Err:J}=wI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=wI;if($<l0)throw new U("integer: negative integers are not allowed");let J=N8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=wI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return YI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=wI,I=Z$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=wI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},l0=BigInt(0),pJ=BigInt(1),UZ=BigInt(2),pQ=BigInt(3),SB=BigInt(4);function JD($,U={}){let J=t7("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;pI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=JZ(G,I);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function W(A,_,R){let{x:K,y:H}=_.toAffine(),b=G.toBytes(K);if(V8(R,"isCompressed"),R){z();let P=!G.isOdd(H);return l$(IZ(P),b)}else return l$(Uint8Array.of(4),b,G.toBytes(H))}function v(A){Z$(A,void 0,"Point");let{publicKey:_,publicKeyUncompressed:R}=D,K=A.length,H=A[0],b=A.subarray(1);if(K===_&&(H===2||H===3)){let P=G.fromBytes(b);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let F=V(P),y;try{y=G.sqrt(F)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}z();let n=G.isOdd(y);if((H&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(K===R&&H===4){let P=G.BYTES,F=G.fromBytes(b.subarray(0,P)),y=G.fromBytes(b.subarray(P,P*2));if(!N(F,y))throw Error("bad point: is not on curve");return{x:F,y}}else throw Error(`bad point: got length ${K}, expected compressed=${_} or uncompressed=${R}`)}let w=U.toBytes||W,g=U.fromBytes||v;function V(A){let _=G.sqr(A),R=G.mul(_,A);return G.add(G.add(R,G.mul(A,Q.a)),Q.b)}function N(A,_){let R=G.sqr(_),K=V(A);return G.eql(R,K)}if(!N(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let j=G.mul(G.pow(Q.a,pQ),SB),M=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(j,M)))throw Error("bad curve params: a or b");function S(A,_,R=!1){if(!G.isValid(_)||R&&G.is0(_))throw Error(`bad point coordinate ${A}`);return _}function L(A){if(!(A instanceof m))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return LB(A,q.basises,I.ORDER)}let x=nq((A,_)=>{let{X:R,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:R,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(R,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}),h=nq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:_,y:R}=A.toAffine();if(!G.isValid(_)||!G.isValid(R))throw Error("bad point: x or y not field elements");if(!N(_,R))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(A,_,R,K,H){return R=new m(G.mul(R.X,A),R.Y,R.Z),_=j8(K,_),R=j8(H,R),_.add(R)}class m{static BASE=new m(Q.Gx,Q.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,_,R){this.X=S("x",A),this.Y=S("y",_,!0),this.Z=S("z",R),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:_,y:R}=A||{};if(!A||!G.isValid(_)||!G.isValid(R))throw Error("invalid affine point");if(A instanceof m)throw Error("projective point not allowed");if(G.is0(_)&&G.is0(R))return m.ZERO;return new m(_,R,G.ONE)}static fromBytes(A){let _=m.fromAffine(g(Z$(A,void 0,"point")));return _.assertValidity(),_}static fromHex(A){return m.fromBytes(cI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,_=!0){if(E.createCache(this,A),!_)this.multiply(pQ);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){L(A);let{X:_,Y:R,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.eql(G.mul(_,P),G.mul(H,K)),y=G.eql(G.mul(R,P),G.mul(b,K));return F&&y}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:_}=Q,R=G.mul(_,pQ),{X:K,Y:H,Z:b}=this,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(b,b),q$=G.mul(K,H);return q$=G.add(q$,q$),y=G.mul(K,b),y=G.add(y,y),P=G.mul(A,y),F=G.mul(R,X$),F=G.add(P,F),P=G.sub($$,F),F=G.add($$,F),F=G.mul(P,F),P=G.mul(q$,P),y=G.mul(R,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),F=G.add(F,n),X$=G.mul(H,b),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,$$),y=G.add(y,y),y=G.add(y,y),new m(P,F,y)}add(A){L(A);let{X:_,Y:R,Z:K}=this,{X:H,Y:b,Z:P}=A,F=G.ZERO,y=G.ZERO,n=G.ZERO,$$=Q.a,X$=G.mul(Q.b,pQ),q$=G.mul(_,H),W$=G.mul(R,b),N$=G.mul(K,P),w$=G.add(_,R),V$=G.add(H,b);w$=G.mul(w$,V$),V$=G.add(q$,W$),w$=G.sub(w$,V$),V$=G.add(_,K);let M$=G.add(H,P);return V$=G.mul(V$,M$),M$=G.add(q$,N$),V$=G.sub(V$,M$),M$=G.add(R,K),F=G.add(b,P),M$=G.mul(M$,F),F=G.add(W$,N$),M$=G.sub(M$,F),n=G.mul($$,V$),F=G.mul(X$,N$),n=G.add(F,n),F=G.sub(W$,n),n=G.add(W$,n),y=G.mul(F,n),W$=G.add(q$,q$),W$=G.add(W$,q$),N$=G.mul($$,N$),V$=G.mul(X$,V$),W$=G.add(W$,N$),N$=G.sub(q$,N$),N$=G.mul($$,N$),V$=G.add(V$,N$),q$=G.mul(W$,V$),y=G.add(y,q$),q$=G.mul(M$,V$),F=G.mul(w$,F),F=G.sub(F,q$),q$=G.mul(w$,W$),n=G.mul(M$,n),n=G.add(n,q$),new m(F,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(m.ZERO)}multiply(A){let{endo:_}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let R,K,H=(b)=>E.cached(this,b,(P)=>eq(m,P));if(_){let{k1neg:b,k1:P,k2neg:F,k2:y}=k(A),{p:n,f:$$}=H(P),{p:X$,f:q$}=H(y);K=$$.add(q$),R=B(_.beta,n,X$,b,F)}else{let{p:b,f:P}=H(A);R=b,K=P}return eq(m,[R,K])[0]}multiplyUnsafe(A){let{endo:_}=U,R=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===l0||R.is0())return m.ZERO;if(A===pJ)return R;if(E.hasCache(this))return this.multiply(A);if(_){let{k1neg:K,k1:H,k2neg:b,k2:P}=k(A),{p1:F,p2:y}=a7(m,R,H,P);return B(_.beta,F,y,K,b)}else return E.unsafe(R,A)}toAffine(A){return x(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===pJ)return!0;if(A)return A(m,this);return E.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===pJ)return this;if(A)return A(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return V8(A,"isCompressed"),this.assertValidity(),w(m,this,A)}toHex(A=!0){return iI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let a=I.BITS,E=new sq(m,U.endo?Math.ceil(a/2):a);return m.BASE.precompute(8),m}function IZ($){return Uint8Array.of($?2:3)}function JZ($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function CB($,U={}){let{Fn:J}=$,G=U.randomBytes||DI,I=Object.assign(JZ($.Fp,J),{seed:pq(J.ORDER)});function Q(w){try{let g=J.fromBytes(w);return J.isValidNot0(g)}catch(g){return!1}}function X(w,g){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=w.length;if(g===!0&&j!==V)return!1;if(g===!1&&j!==N)return!1;return!!$.fromBytes(w)}catch(j){return!1}}function O(w=G(I.seed)){return d7(Z$(w,I.seed,"seed"),J.ORDER)}function q(w,g=!0){return $.BASE.multiply(J.fromBytes(w)).toBytes(g)}function D(w){let{secretKey:g,publicKey:V,publicKeyUncompressed:N}=I;if(!hJ(w))return;if("_lengths"in J&&J._lengths||g===V)return;let j=Z$(w,void 0,"key").length;return j===V||j===N}function z(w,g,V=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(g)===!1)throw Error("second arg must be public key");let N=J.fromBytes(w);return $.fromBytes(g).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=iQ(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:v,Point:$,utils:W,lengths:I})}function GD($,U,J={}){pU(U),pI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||DI,I=J.hmac||((R,K)=>cJ(U,R,K)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:z,getSharedSecret:W,utils:v,lengths:w}=CB($,J),g={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=O*UZ<Q.ORDER;function N(R){let K=O>>pJ;return R>K}function j(R,K){if(!X.isValidNot0(K))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return K}function M(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(R,K){ID(K);let H=w.signature,b=K==="compact"?H:K==="recovered"?H+1:void 0;return Z$(R,b)}class L{r;s;recovery;constructor(R,K,H){if(this.r=j("r",R),this.s=j("s",K),H!=null){if(M(),![0,1,2,3].includes(H))throw Error("invalid recovery id");this.recovery=H}Object.freeze(this)}static fromBytes(R,K=g.format){S(R,K);let H;if(K==="der"){let{r:y,s:n}=wI.toSig(Z$(R));return new L(y,n)}if(K==="recovered")H=R[0],K="compact",R=R.subarray(1);let b=w.signature/2,P=R.subarray(0,b),F=R.subarray(b,b*2);return new L(X.fromBytes(P),X.fromBytes(F),H)}static fromHex(R,K){return this.fromBytes(cI(R),K)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new L(this.r,this.s,R)}recoverPublicKey(R){let{r:K,s:H}=this,b=this.assertRecovery(),P=b===2||b===3?K+O:K;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let F=Q.toBytes(P),y=$.fromBytes(l$(IZ((b&1)===0),F)),n=X.inv(P),$$=x(Z$(R,void 0,"msgHash")),X$=X.create(-$$*n),q$=X.create(H*n),W$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(W$.is0())throw Error("invalid recovery: point at infinify");return W$.assertValidity(),W$}hasHighS(){return N(this.s)}toBytes(R=g.format){if(ID(R),R==="der")return cI(wI.hexFromSig(this));let{r:K,s:H}=this,b=X.toBytes(K),P=X.toBytes(H);if(R==="recovered")return M(),l$(Uint8Array.of(this.assertRecovery()),b,P);return l$(b,P)}toHex(R){return iI(this.toBytes(R))}}let k=J.bits2int||function(K){if(K.length>8192)throw Error("input is too large");let H=YI(K),b=K.length*8-q;return b>0?H>>BigInt(b):H},x=J.bits2int_modN||function(K){return X.create(k(K))},h=R8(q);function B(R){return Z8("num < 2^"+q,R,l0,h),X.toBytes(R)}function m(R,K){return Z$(R,void 0,"message"),K?Z$(U(R),void 0,"prehashed message"):R}function a(R,K,H){let{lowS:b,prehash:P,extraEntropy:F}=UD(H,g);R=m(R,P);let y=x(R),n=X.fromBytes(K);if(!X.isValidNot0(n))throw Error("invalid private key");let $$=[B(n),B(y)];if(F!=null&&F!==!1){let N$=F===!0?G(w.secretKey):F;$$.push(Z$(N$,void 0,"extraEntropy"))}let X$=l$(...$$),q$=y;function W$(N$){let w$=k(N$);if(!X.isValidNot0(w$))return;let V$=X.inv(w$),M$=$.BASE.multiply(w$).toAffine(),b$=X.create(M$.x);if(b$===l0)return;let k$=X.create(V$*X.create(q$+b$*n));if(k$===l0)return;let qU=(M$.x===b$?0:2)|Number(M$.y&pJ),DU=k$;if(b&&N(k$))DU=X.neg(k$),qU^=1;return new L(b$,DU,V?void 0:qU)}return{seed:X$,k2sig:W$}}function E(R,K,H={}){let{seed:b,k2sig:P}=a(R,K,H);return _7(U.outputLen,X.BYTES,I)(b,P).toBytes(H.format)}function A(R,K,H,b={}){let{lowS:P,prehash:F,format:y}=UD(b,g);if(H=Z$(H,void 0,"publicKey"),K=m(K,F),!hJ(R)){let n=R instanceof L?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(R,y);try{let n=L.fromBytes(R,y),$$=$.fromBytes(H);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,W$=x(K),N$=X.inv(q$),w$=X.create(W$*N$),V$=X.create(X$*N$),M$=$.BASE.multiplyUnsafe(w$).add($$.multiplyUnsafe(V$));if(M$.is0())return!1;return X.create(M$.x)===X$}catch(n){return!1}}function _(R,K,H={}){let{prehash:b}=UD(H,g);return K=m(K,b),L.fromBytes(R,"recovered").recoverPublicKey(K).toBytes()}return Object.freeze({keygen:D,getPublicKey:z,getSharedSecret:W,utils:v,lengths:w,Point:$,sign:E,verify:A,recoverPublicKey:_,Signature:L,hash:U})}function GZ($,U,J){return $&U^~$&J}function QZ($,U,J){return $&U^$&J^U&J}class oQ{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=hQ(this.buffer)}update($){h0(this),Z$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=hQ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){h0(this),yQ($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,CU(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let z=Q;z<G;z++)U[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=hQ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<q;z++)X.setUint32(4*z,D[z],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var d0=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),n0=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),UU=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),IU=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),XZ=BigInt(32);function EB($,U=!1){if(U)return{h:Number($&aQ),l:Number($>>XZ&aQ)};return{h:Number($>>XZ&aQ)|0,l:Number($&aQ)|0}}function tQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=EB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var QD=($,U,J)=>$>>>J,XD=($,U,J)=>$<<32-J|U>>>J,tI=($,U,J)=>$>>>J|U<<32-J,eI=($,U,J)=>$<<32-J|U>>>J,T8=($,U,J)=>$<<64-J|U>>>J-32,K8=($,U,J)=>$>>>J-32|U<<64-J;var OZ=($,U,J)=>$<<J|U>>>32-J,qZ=($,U,J)=>U<<J|$>>>32-J,DZ=($,U,J)=>U<<J-32|$>>>64-J,zZ=($,U,J)=>$<<J-32|U>>>64-J;function g0($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var YZ=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),WZ=($,U,J,G)=>U+J+G+($/4294967296|0)|0,vZ=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),wZ=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,VZ=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),NZ=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var bB=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),VI=new Uint32Array(64);class OD extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let z=0;z<16;z++,U+=4)VI[z]=$.getUint32(U,!1);for(let z=16;z<64;z++){let W=VI[z-15],v=VI[z-2],w=G0(W,7)^G0(W,18)^W>>>3,g=G0(v,17)^G0(v,19)^v>>>10;VI[z]=g+VI[z-7]+w+VI[z-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let z=0;z<64;z++){let W=G0(X,6)^G0(X,11)^G0(X,25),v=D+W+GZ(X,O,q)+bB[z]+VI[z]|0,g=(G0(J,2)^G0(J,13)^G0(J,22))+QZ(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+g|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){CU(VI)}destroy(){this.set(0,0,0,0,0,0,0,0),CU(this.buffer)}}class gZ extends OD{A=d0[0]|0;B=d0[1]|0;C=d0[2]|0;D=d0[3]|0;E=d0[4]|0;F=d0[5]|0;G=d0[6]|0;H=d0[7]|0;constructor(){super(32)}}class fB extends OD{A=n0[0]|0;B=n0[1]|0;C=n0[2]|0;D=n0[3]|0;E=n0[4]|0;F=n0[5]|0;G=n0[6]|0;H=n0[7]|0;constructor(){super(28)}}var ZZ=(()=>tQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),kB=(()=>ZZ[0])(),FB=(()=>ZZ[1])(),NI=new Uint32Array(80),gI=new Uint32Array(80);class A8 extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:z,Fl:W,Gh:v,Gl:w,Hh:g,Hl:V}=this;return[$,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V]}set($,U,J,G,I,Q,X,O,q,D,z,W,v,w,g,V){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=z|0,this.Fl=W|0,this.Gh=v|0,this.Gl=w|0,this.Hh=g|0,this.Hl=V|0}process($,U){for(let M=0;M<16;M++,U+=4)NI[M]=$.getUint32(U),gI[M]=$.getUint32(U+=4);for(let M=16;M<80;M++){let S=NI[M-15]|0,L=gI[M-15]|0,k=tI(S,L,1)^tI(S,L,8)^QD(S,L,7),x=eI(S,L,1)^eI(S,L,8)^XD(S,L,7),h=NI[M-2]|0,B=gI[M-2]|0,m=tI(h,B,19)^T8(h,B,61)^QD(h,B,6),a=eI(h,B,19)^K8(h,B,61)^XD(h,B,6),E=vZ(x,a,gI[M-7],gI[M-16]),A=wZ(E,k,m,NI[M-7],NI[M-16]);NI[M]=A|0,gI[M]=E|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:z,El:W,Fh:v,Fl:w,Gh:g,Gl:V,Hh:N,Hl:j}=this;for(let M=0;M<80;M++){let S=tI(z,W,14)^tI(z,W,18)^T8(z,W,41),L=eI(z,W,14)^eI(z,W,18)^K8(z,W,41),k=z&v^~z&g,x=W&w^~W&V,h=VZ(j,L,x,FB[M],gI[M]),B=NZ(h,N,S,k,kB[M],NI[M]),m=h|0,a=tI(J,G,28)^T8(J,G,34)^T8(J,G,39),E=eI(J,G,28)^K8(J,G,34)^K8(J,G,39),A=J&I^J&X^I&X,_=G&Q^G&O^Q&O;N=g|0,j=V|0,g=v|0,V=w|0,v=z|0,w=W|0,{h:z,l:W}=g0(q|0,D|0,B|0,m|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let R=YZ(m,E,_);J=WZ(R,B,a,A),G=R|0}({h:J,l:G}=g0(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=g0(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=g0(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=g0(this.Dh|0,this.Dl|0,q|0,D|0),{h:z,l:W}=g0(this.Eh|0,this.El|0,z|0,W|0),{h:v,l:w}=g0(this.Fh|0,this.Fl|0,v|0,w|0),{h:g,l:V}=g0(this.Gh|0,this.Gl|0,g|0,V|0),{h:N,l:j}=g0(this.Hh|0,this.Hl|0,N|0,j|0),this.set(J,G,I,Q,X,O,q,D,z,W,v,w,g,V,N,j)}roundClean(){CU(NI,gI)}destroy(){CU(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class uB extends A8{Ah=IU[0]|0;Al=IU[1]|0;Bh=IU[2]|0;Bl=IU[3]|0;Ch=IU[4]|0;Cl=IU[5]|0;Dh=IU[6]|0;Dl=IU[7]|0;Eh=IU[8]|0;El=IU[9]|0;Fh=IU[10]|0;Fl=IU[11]|0;Gh=IU[12]|0;Gl=IU[13]|0;Hh=IU[14]|0;Hl=IU[15]|0;constructor(){super(64)}}class RZ extends A8{Ah=UU[0]|0;Al=UU[1]|0;Bh=UU[2]|0;Bl=UU[3]|0;Ch=UU[4]|0;Cl=UU[5]|0;Dh=UU[6]|0;Dl=UU[7]|0;Eh=UU[8]|0;El=UU[9]|0;Fh=UU[10]|0;Fl=UU[11]|0;Gh=UU[12]|0;Gl=UU[13]|0;Hh=UU[14]|0;Hl=UU[15]|0;constructor(){super(48)}}var wU=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),VU=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class xB extends A8{Ah=wU[0]|0;Al=wU[1]|0;Bh=wU[2]|0;Bl=wU[3]|0;Ch=wU[4]|0;Cl=wU[5]|0;Dh=wU[6]|0;Dl=wU[7]|0;Eh=wU[8]|0;El=wU[9]|0;Fh=wU[10]|0;Fl=wU[11]|0;Gh=wU[12]|0;Gl=wU[13]|0;Hh=wU[14]|0;Hl=wU[15]|0;constructor(){super(28)}}class mB extends A8{Ah=VU[0]|0;Al=VU[1]|0;Bh=VU[2]|0;Bl=VU[3]|0;Ch=VU[4]|0;Cl=VU[5]|0;Dh=VU[6]|0;Dl=VU[7]|0;Eh=VU[8]|0;El=VU[9]|0;Fh=VU[10]|0;Fl=VU[11]|0;Gh=VU[12]|0;Gl=VU[13]|0;Hh=VU[14]|0;Hl=VU[15]|0;constructor(){super(32)}}var eQ=lJ(()=>new gZ,zI(1));var MZ=lJ(()=>new RZ,zI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var yB=BigInt(1),jZ=BigInt(2),rB=BigInt(3),hB=BigInt(5),kd=BigInt(8),HZ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function lB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=HZ,O=$*$%Q*$%Q,q=oU(O,jZ,Q)*O%Q,D=oU(q,yB,Q)*$%Q,z=oU(D,hB,Q)*D%Q,W=oU(z,U,Q)*z%Q,v=oU(W,J,Q)*W%Q,w=oU(v,G,Q)*v%Q,g=oU(w,I,Q)*w%Q,V=oU(g,I,Q)*w%Q,N=oU(V,U,Q)*z%Q;return{pow_p_5_8:oU(N,jZ,Q)*$%Q,b2:O}}function dB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TZ=(()=>{let $=HZ;return e7({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=lB(U);return jU(oU(J,rB,$)*G,$)},adjustScalarBytes:dB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),iB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var cB=JD(nB),qD=GD(cB,eQ);var pB=JD(iB),KZ=GD(pB,MZ);function PZ($,U,J){if(pU($),J===void 0)J=new Uint8Array($.outputLen);return cJ($,J,U)}var DD=Uint8Array.of(0),AZ=Uint8Array.of();function BZ($,U,J,G=32){pU($),p$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=AZ;else Z$(J,void 0,"info");let X=new Uint8Array(Q*I),O=cJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let z=0;z<Q;z++)DD[0]=z+1,q.update(z===0?AZ:D).update(J).update(DD).digestInto(D),X.set(D,I*z),O._cloneInto(q);return O.destroy(),q.destroy(),CU(D,DD),X.slice(0,G)}var oB=BigInt(0),P8=BigInt(1),aB=BigInt(2),tB=BigInt(7),eB=BigInt(256),sB=BigInt(113),CZ=[],EZ=[],_Z=[];for(let $=0,U=P8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],CZ.push(2*(5*G+J)),EZ.push(($+1)*($+2)/2%64);let I=oB;for(let Q=0;Q<7;Q++)if(U=(U<<P8^(U>>tB)*sB)%eB,U&aB)I^=P8<<(P8<<BigInt(Q))-P8;_Z.push(I)}var bZ=tQ(_Z,!0),$L=bZ[0],UL=bZ[1],LZ=($,U,J)=>J>32?DZ($,U,J):OZ($,U,J),SZ=($,U,J)=>J>32?zZ($,U,J):qZ($,U,J);function IL($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],z=J[q+1],W=LZ(D,z,1)^J[O],v=SZ(D,z,1)^J[O+1];for(let w=0;w<50;w+=10)$[X+w]^=W,$[X+w+1]^=v}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=EZ[X],q=LZ(I,Q,O),D=SZ(I,Q,O),z=CZ[X];I=$[z],Q=$[z+1],$[z]=q,$[z+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=$L[G],$[1]^=UL[G]}CU(J)}class sQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,p$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rQ(this.state)}clone(){return this._cloneInto()}keccak(){rq(this.state32),IL(this.state32,this.rounds),rq(this.state32),this.posOut=0,this.pos=0}update($){h0(this),Z$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){h0(this,!1),Z$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return p$($),this.xofInto(new Uint8Array($))}digestInto($){if(yQ($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,CU(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new sQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var fZ=($,U,J,G={})=>lJ(()=>new sQ(U,$,J),G);var sI=fZ(6,136,32,zI(8));var kZ=fZ(6,72,64,zI(10));var FZ=($,U,J,G={})=>lJ((I={})=>new sQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),uZ=FZ(31,168,16,zI(11)),Z0=FZ(31,136,32,zI(12));function zD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function mZ($){return zD($),($&$-1)===0&&$!==0}function YD($,U){zD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function yZ($){return zD($),31-Math.clz32($)}function xZ($){let U=$.length;if(U<2||!mZ(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=yZ(U);for(let G=0;G<U;G++){let I=YD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var WD=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=yZ(J);if(!mZ(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)xZ(z);for(let W=0,v=1;W<q-X;W++){let w=I?W+1+X:q-W,g=1<<w,V=g>>1,N=J>>w;for(let j=0;j<J;j+=g)for(let M=0,S=v++;M<V;M++){let L=Q?I?J-S:S:M*N,k=j+M,x=j+M+V,h=G[L],B=z[x],m=z[k];if(D){let a=$.mul(B,h);z[k]=$.add(m,a),z[x]=$.sub(m,a)}else if(Q)z[k]=$.add(B,m),z[x]=$.mul($.sub(B,m),h);else z[k]=$.add(m,B),z[x]=$.mul($.sub(m,B),h)}}if(!I&&O)xZ(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var R0=DI;function $4($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function rZ($){return Uint8Array.from($)}function $J($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),z=typeof q==="number"?I[X]:q.encode(I[X]);if(Z$(z,D,$),Q.set(z,O),typeof q!=="number")z.fill(0);O+=D}return Q},decode:(I)=>{Z$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function U4($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{Z$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function i$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function vD($){return(1<<$)-1}var ad=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var hZ=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(M,S=G)=>{let L=M%S|0;return(L>=0?L|0:S+L|0)|0},D=(M,S=G)=>{let L=q(M,S)|0;return(L>S>>1?L-S|0:L)|0};function z(){let M=U(J);for(let S=0;S<J;S++){let L=YD(S,X),k=BigInt(Q)**BigInt(L)%BigInt(G);M[S]=Number(k)|0}return M}let W=z(),v={add:(M,S)=>q((M|0)+(S|0))|0,sub:(M,S)=>q((M|0)-(S|0))|0,mul:(M,S)=>q((M|0)*(S|0))|0,inv:(M)=>{throw Error("not implemented")}},w={N:J,roots:W,invertButterflies:!0,skipStages:O?1:0,brp:!1},g=WD(v,{dit:!1,...w}),V=WD(v,{dit:!0,...w});return{mod:q,smod:D,nttZetas:W,NTT:{encode:(M)=>{return g(M)},decode:(M)=>{V(M);for(let S=0;S<M.length;S++)M[S]=q(I*M[S]);return M}},bitsCoder:(M,S)=>{let L=vD(M),k=M*(J/8);return{bytesLen:k,encode:(x)=>{let h=new Uint8Array(k);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=(S.encode(x[B])&L)<<a,a+=M;for(;a>=8;a-=8,m>>=8)h[E++]=m&vD(a)}return h},decode:(x)=>{let h=U(J);for(let B=0,m=0,a=0,E=0;B<x.length;B++){m|=x[B]<<a,a+=8;for(;a>=M;a-=M,m>>=M)h[E++]=S.decode(m&L)}return h}}}}},JL=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,z)=>{return G[I+0]=D,G[I+1]=z,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),i$(Q,G)}}},lZ=JL(uZ);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var NU=256,i0=3329,GL=3303,QL=17,{mod:S8,nttZetas:XL,NTT:UJ,bitsCoder:OL}=hZ({N:NU,Q:i0,F:GL,ROOT_OF_UNITY:QL,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),wD={512:{N:NU,Q:i0,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:NU,Q:i0,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:NU,Q:i0,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},qL=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+i0/2)/i0,decode:(J)=>J*i0+U>>>$}},B8=($)=>OL($,qL($));function IJ($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]+U[J])}function DL($,U){for(let J=0;J<NU;J++)$[J]=S8($[J]-U[J])}function zL($,U,J,G,I){let Q=S8(U*G*I+$*J),X=S8($*G+U*J);return{c0:Q,c1:X}}function I4($,U){for(let J=0;J<NU/2;J++){let G=XL[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=zL($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function dZ($){let U=new Uint16Array(NU);for(let J=0;J<NU;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<NU&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<i0)U[J++]=Q;if(J<NU&&X<i0)U[J++]=X}}return U}function L8($,U,J,G){let I=$(G*NU/4,U,J),Q=new Uint16Array(NU),X=rQ(I),O=0;for(let q=0,D=0,z=0,W=0;q<X.length;q++){let v=X[q];for(let w=0;w<32;w++)if(z+=v&1,v>>=1,O+=1,O===G)W=z,z=0;else if(O===2*G)Q[D++]=S8(W-z),z=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var YL=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=B8(1),z=B8(q),W=B8(O),v=$J("publicKey",U4(B8(12),U),32),w=U4(B8(12),U),g=$J("ciphertext",U4(W,U),z),V=$J("seed",32,32);return{secretCoder:w,lengths:{secretKey:w.bytesLen,publicKey:v.bytesLen,cipherText:g.bytesLen},keygen:(N)=>{Z$(N,32,"seed");let j=new Uint8Array(33);j.set(N),j[32]=U;let M=I(j),[S,L]=V.decode(M),k=[],x=[];for(let m=0;m<U;m++)k.push(UJ.encode(L8(J,L,m,Q)));let h=G(S);for(let m=0;m<U;m++){let a=UJ.encode(L8(J,L,U+m,Q));for(let E=0;E<U;E++){let A=dZ(h.get(E,m));IJ(a,I4(A,k[E]))}x.push(a)}h.clean();let B={publicKey:v.encode([x,S]),secretKey:w.encode(k)};return i$(S,L,k,x,j,M),B},encrypt:(N,j,M)=>{let[S,L]=v.decode(N),k=[];for(let E=0;E<U;E++)k.push(UJ.encode(L8(J,M,E,Q)));let x=G(L),h=new Uint16Array(NU),B=[];for(let E=0;E<U;E++){let A=L8(J,M,U+E,X),_=new Uint16Array(NU);for(let R=0;R<U;R++){let K=dZ(x.get(E,R));IJ(_,I4(K,k[R]))}IJ(A,UJ.decode(_)),B.push(A),IJ(h,I4(S[E],k[E])),i$(_)}x.clean();let m=L8(J,M,2*U,X);IJ(m,UJ.decode(h));let a=D.decode(j);return IJ(a,m),i$(S,k,h,m),g.encode([B,a])},decrypt:(N,j)=>{let[M,S]=g.decode(N),L=w.decode(j),k=new Uint16Array(NU);for(let x=0;x<U;x++)IJ(k,I4(L[x],UJ.encode(M[x])));return DL(S,UJ.decode(k)),i$(k,L,M),D.encode(S)}}};function VD($){let U=YL($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=$J("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(z=R0(64))=>{Z$(z,64,"seed");let{publicKey:W,secretKey:v}=U.keygen(z.subarray(0,32)),w=J(W),g=O.encode([v,W,w,z.subarray(32)]);return i$(v,w),{publicKey:W,secretKey:g}},getPublicKey:(z)=>{let[W,v,w,g]=O.decode(z);return Uint8Array.from(v)},encapsulate:(z,W=R0(32))=>{Z$(z,X.publicKey,"publicKey"),Z$(W,32,"message");let v=z.subarray(0,384*$.K),w=Q.encode(Q.decode(rZ(v)));if(!$4(w,v))throw i$(w),Error("ML-KEM.encapsulate: wrong publicKey modulus");i$(w);let g=G.create().update(W).update(J(z)).digest(),V=U.encrypt(z,W,g.subarray(32,64));return i$(g.subarray(32)),{cipherText:V,sharedSecret:g.subarray(0,32)}},decapsulate:(z,W)=>{Z$(W,O.bytesLen,"secretKey"),Z$(z,X.cipherText,"cipherText");let v=O.bytesLen-96,w=v+32,g=J(W.subarray(v/2,w));if(!$4(g,W.subarray(w,w+32)))throw Error("invalid secretKey: hash check failed");let[V,N,j,M]=O.decode(W),S=U.decrypt(z,V),L=G.create().update(S).update(j).digest(),k=L.subarray(0,32),x=U.encrypt(N,S,L.subarray(32,64)),h=$4(z,x),B=I.create({dkLen:32}).update(M).update(z).digest();return i$(S,x,!h?k:B),h?k:B}}}function WL($,U,J){return Z0.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var ND={HASH256:sI,HASH512:kZ,KDF:Z0,XOF:lZ,PRF:WL},On=VD({...ND,...wD[512]}),C8=VD({...ND,...wD[768]}),nZ=VD({...ND,...wD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function vL($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=R0(J.seed))=>{Z$(X,J.seed,"seed");let O=Q.isLE?WI(X):YI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function gD($,U=!1){let J=vL($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=R0($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return i$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function E8($,U){return $J(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function ZD($){return(U,J)=>$(U,{dkLen:J})}function wL($,U,...J){let G=E8(J,"seed"),I=E8(J,"publicKey");if($===void 0)$=G.bytesLen;p$($);function Q(X){Z$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((W,v)=>W.keygen(O[v])),D=q.map((W)=>W.secretKey),z=q.map((W)=>W.publicKey);return{secretKey:D,publicKey:z}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=R0($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return i$(O),i$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function J4($,U,J,G,...I){let Q=wL($,J,...I),X=E8(I,"cipherText"),O=E8(I,"publicKey"),q=E8(I,"msg");if(U===void 0)U=q.bytesLen;return p$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,z=R0(q.bytesLen)){let W=O.decode(D),v=q.decode(z),w=I.map((j,M)=>j.encapsulate(W[M],v[M])),g=w.map((j)=>j.sharedSecret),V=w.map((j)=>j.cipherText),N={sharedSecret:G(W,V,g),cipherText:X.encode(V)};return i$(g,V),N},decapsulate(D,z){let W=X.decode(D),{publicKey:v,secretKey:w}=Q.expandDecapsulationKey(z),g=I.map((V,N)=>V.decapsulate(W[N],w[N]));return G(v,W,g)}}}function iZ($,U,J,G,I){return pU(G),pU(I),J4(32,32,ZD(G),(Q,X,O)=>I(l$(O[0],O[1],X[1],Q[1],vI($))),U,J)}var Zn=iZ("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",C8,gD(qD,!0),Z0,sI),Rn=iZ("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",nZ,gD(KZ,!0),Z0,sI);function VL($,U,J,G,I){return pU(G),pU(I),J4(32,32,ZD(G),(Q,X,O)=>{let q=l$(O[0],O[1],X[0],Q[0],X[1],Q[1],vI($)),D=32,z=l$(vI("hybrid_prk"),q),W=PZ(I,z),v=l$(dJ(32,2),vI("shared_secret"),vI("")),w=BZ(I,W,v,32);return i$(W,v,z,q),w},U,J)}var cZ=gD(TZ),Mn=VL("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",C8,cZ,Z0,eQ),NL=(()=>J4(32,32,ZD(Z0),($,U,J)=>sI(l$(J[0],J[1],U[1],$[1],vI("\\.//^\\"))),C8,cZ))();function gL($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let z=0,W=U;;z=W,W+=U){if(W>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(z,W),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=R0(G)){return Z$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=R0(G)){Z$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),z=$.getPublicKey(q,!1);return i$(q),{sharedSecret:D,cipherText:z}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function ZL($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=gL(J,I,Q,G),O=64,q=O+G;return J4(32,32,(D)=>{Z$(D,32);let z=Z0(D,{dkLen:q}),W=z.subarray(0,O),v=z.subarray(O,q);return l$(W,v)},(D,z,W)=>sI(l$(W[0],W[1],z[1],D[1],vI($))),U,X)}var RL=(()=>ZL("MLKEM768-P256",C8,qD,128))();var G4=NL,pZ=RL;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>t$($,U,J),MD=y$,oJ=LQ,JU=(...$)=>jq(...$),aJ=($)=>X8($),tJ=Zq,eJ=($)=>u0($),X4=BigInt(0),RD=BigInt(1);function c0($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function O4($){if(typeof $==="bigint"){if(!Q4($))throw RangeError("positive bigint expected, got "+$)}else MD($);return $}function M0($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function _8($){let U=O4($).toString(16);return U.length&1?"0"+U:U}function oZ($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?X4:BigInt("0x"+$)}function JJ($){return oZ(LQ($))}function Q0($){return oZ(LQ(ZI(t$($)).reverse()))}function q4($,U){if(y$(U),U===0)throw RangeError("zero length");$=O4($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return X8(J.padStart(U*2,"0"))}function b8($,U){return q4($,U).reverse()}function aZ($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function ZI($){return Uint8Array.from(S$($))}function D4($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var Q4=($)=>typeof $==="bigint"&&X4<=$;function ML($,U,J){return Q4($)&&Q4(U)&&Q4(J)&&U<=$&&$<J}function p0($,U,J,G){if(!ML(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function sJ($){if($<X4)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>X4;$>>=RD,U+=1);return U}var f8=($)=>(RD<<BigInt($))-RD;function tZ($,U,J){if(y$($,"hashLen"),y$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(N)=>new Uint8Array(N),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),z=0,W=()=>{q.fill(1),D.fill(0),z=0},v=(...N)=>J(D,JU(q,...N)),w=(N=I)=>{if(D=v(Q,N),q=v(),N.length===0)return;D=v(X,N),q=v()},g=()=>{if(z++>=O)throw Error("drbg: tried max amount of iterations");let N=0,j=[];while(N<U){q=v();let M=q.slice();j.push(M),N+=q.length}return JU(...j)};return(N,j)=>{W(),w(N);let M=void 0;while((M=j(g()))===void 0)w();return W(),M}}function aU($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var jD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GU=BigInt(0),x$=BigInt(1),GJ=BigInt(2),U5=BigInt(3),I5=BigInt(4),J5=BigInt(5),jL=BigInt(7),G5=BigInt(8),HL=BigInt(9),Q5=BigInt(16);function F$($,U){if(U<=GU)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=GU?J:U+J}function tU($,U,J){if(U<GU)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >GU)G*=G,G%=J;return G}function eZ($,U){if($===GU)throw Error("invert: expected non-zero number");if(U<=GU)throw Error("invert: expected positive modulus, got "+U);let J=F$($,U),G=U,I=GU,Q=x$,X=x$,O=GU;while(J!==GU){let D=G/J,z=G-J*D,W=I-X*D,v=Q-O*D;G=J,J=z,I=X,Q=O,X=W,O=v}if(G!==x$)throw Error("invert: does not exist");return F$(I,U)}function HD($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function X5($,U){let J=$,G=(J.ORDER+x$)/I5,I=J.pow(U,G);return HD(J,I,U),I}function TL($,U){let J=$,G=(J.ORDER-J5)/G5,I=J.mul(U,GJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,GJ),Q),q=J.mul(X,J.sub(O,J.ONE));return HD(J,q,U),q}function KL($){let U=z4($),J=O5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+jL)/Q5;return(O,q)=>{let D=O,z=D.pow(q,X),W=D.mul(z,G),v=D.mul(z,I),w=D.mul(z,Q),g=D.eql(D.sqr(W),q),V=D.eql(D.sqr(v),q);z=D.cmov(z,W,g),W=D.cmov(w,v,V);let N=D.eql(D.sqr(W),q),j=D.cmov(z,W,N);return HD(D,j,q),j}}function O5($){if($<U5)throw Error("sqrt is not defined for small field");let U=$-x$,J=0;while(U%GJ===GU)U/=GJ,J++;let G=GJ,I=z4($);while(sZ(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return X5;let Q=I.pow(G,U),X=(U+x$)/GJ;return function(q,D){let z=q;if(z.is0(D))return D;if(sZ(z,D)!==1)throw Error("Cannot find square root");let W=J,v=z.mul(z.ONE,Q),w=z.pow(D,U),g=z.pow(D,X);while(!z.eql(w,z.ONE)){if(z.is0(w))return z.ZERO;let V=1,N=z.sqr(w);while(!z.eql(N,z.ONE))if(V++,N=z.sqr(N),V===W)throw Error("Cannot find square root");let j=x$<<BigInt(W-V-1),M=z.pow(v,j);W=V,v=z.sqr(M),w=z.mul(w,v),g=z.mul(g,M)}return g}}function AL($){if($%I5===U5)return X5;if($%G5===J5)return TL;if($%Q5===HL)return KL($);return O5($)}var o0=($,U)=>(F$($,U)&x$)===x$,PL=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function TD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=PL.reduce((G,I)=>{return G[I]="function",G},U);if(aU($,J),M0($.BYTES,"BYTES"),M0($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=x$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function BL($,U,J){let G=$;if(J<GU)throw Error("invalid exponent, negatives unsupported");if(J===GU)return G.ONE;if(J===x$)return U;let I=G.ONE,Q=U;while(J>GU){if(J&x$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=x$}return I}function k8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function sZ($,U){let J=$,G=(J.ORDER-x$)/GJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function LL($,U){if(U!==void 0)MD(U);if($<=GU)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=sJ($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var $5=new WeakMap;class KD{ORDER;BITS;BYTES;isLE;ZERO=GU;ONE=x$;_lengths;_mod;constructor($,U={}){if($<=x$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=LL($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return F$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return GU<=$&&$<this.ORDER}is0($){return $===GU}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&x$)===x$}neg($){return F$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return F$($*$,this.ORDER)}add($,U){return F$($+U,this.ORDER)}sub($,U){return F$($-U,this.ORDER)}mul($,U){return F$($*U,this.ORDER)}pow($,U){return BL(this,$,U)}div($,U){return F$($*eZ(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return eZ($,this.ORDER)}sqrt($){let U=$5.get(this);if(!U)$5.set(this,U=AL(this.ORDER));return U(this,$)}toBytes($){return this.isLE?b8($,this.BYTES):q4($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?Q0($):JJ($);if(X)O=F$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return k8(this,$)}cmov($,U,J){return c0(J,"condition"),J?U:$}}Object.freeze(KD.prototype);function z4($,U={}){return new KD($,U)}function q5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=x$)throw Error("field order must be greater than 1");let U=sJ($-x$);return Math.ceil(U/8)}function AD($){let U=q5($);return U+Math.ceil(U/2)}function D5($,U,J=!1){S$($);let G=$.length,I=q5(U),Q=Math.max(AD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?Q0($):JJ($),O=F$(X,U-x$)+x$;return J?b8(O,I):q4(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $G=BigInt(0),QJ=BigInt(1);function F8($,U){let J=U.negate();return $?J:U}function XJ($,U){let J=k8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function v5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function PD($,U){v5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=f8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function z5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=QJ;let D=U*G,z=D+Math.abs(O)-1,W=O===0,v=O<0,w=U%2!==0;return{nextN:q,offset:z,isZero:W,isNeg:v,isNegF:w,offsetF:D}}var BD=new WeakMap,w5=new WeakMap;function LD($){return w5.get($)||1}function Y5($){if($!==$G)throw Error("invalid wNAF")}class u8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>$G){if(U&QJ)J=J.add(G);G=G.double(),U>>=QJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=PD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=PD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:z,isNegF:W,offsetF:v}=z5(J,X,Q);if(J=O,D)I=I.add(F8(W,U[v]));else G=G.add(F8(z,U[q]))}return Y5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=PD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===$G)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=z5(J,Q,I);if(J=X,q)continue;else{let z=U[O];G=G.add(D?z.negate():z)}}return Y5(J),G}getPrecomputes($,U,J){let G=BD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);BD.set(U,G)}}return G}cached($,U,J){let G=LD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=LD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){v5(U,this.bits),w5.set($,U),BD.delete($)}hasCache($){return LD($)!==1}}function V5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>$G||G>$G){if(J&QJ)Q=Q.add(I);if(G&QJ)X=X.add(I);I=I.double(),J>>=QJ,G>>=QJ}return{p1:Q,p2:X}}function W5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return TD(U),U}else return z4($,{isLE:J})}function Y4($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>$G))throw Error(`CURVE.${q} must be positive bigint`)}let I=W5(U.p,J.Fp,G),Q=W5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function x8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function m8($,U){if(M0($),M0(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function SL($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function CL($){if(!tJ($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?D4($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function SD($,U,J,G){if(S$($),M0(J),U=CL(U),U.length>255)U=G(JU(D4("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=JU(U,m8(U.length,1)),q=new Uint8Array(Q),D=m8(J,2),z=Array(X),W=G(JU(q,$,D,m8(0,1),O));z[0]=G(JU(W,m8(1,1),O));for(let w=1;w<X;w++){let g=[SL(W,z[w-1]),m8(w+1,1),O];z[w]=G(JU(...g))}return JU(...z).slice(0,J)}var N5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var g5=($,U)=>($+($>=0?U:-U)/R5)/U;function EL($,U,J){p0("scalar",$,j0,J);let[[G,I],[Q,X]]=U,O=g5(X*$,J),q=g5(-I*$,J),D=$-O*G-q*Q,z=-O*I-q*X,W=D<j0,v=z<j0;if(W)D=-D;if(v)z=-z;let w=f8(Math.ceil(sJ(J)/2))+RI;if(D<j0||D>=w||z<j0||z>=w)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:W,k1:D,k2neg:v,k2:z}}function ED($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function CD($,U){aU($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(c0(J.lowS,"lowS"),c0(J.prehash,"prehash"),J.format!==void 0)ED(J.format);return J}class Z5 extends Error{constructor($=""){super($)}}var X0={Err:Z5,_tlv:{encode:($,U)=>{let{Err:J}=X0;if(M0($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=_8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?_8(I.length/2|128):"";return _8($)+Q+I+U},decode($,U){let{Err:J}=X0;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of D)X=X<<8|z;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=X0;if(O4($),$<j0)throw new U("integer: negative integers are not allowed");let J=_8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=X0;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return JJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=X0,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:z}=G.decode(2,q);if(z.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=X0,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(X0._tlv);Object.freeze(X0._int);Object.freeze(X0);var j0=BigInt(0),RI=BigInt(1),R5=BigInt(2),W4=BigInt(3),_L=BigInt(4);function M5($,U={}){let J=Y4("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;aU(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=H5(G,I);function W(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function v(E,A,_){if(D&&A.is0())return Uint8Array.of(0);let{x:R,y:K}=A.toAffine(),H=G.toBytes(R);if(c0(_,"isCompressed"),_){W();let b=!G.isOdd(K);return JU(j5(b),H)}else return JU(Uint8Array.of(4),H,G.toBytes(K))}function w(E){S$(E,void 0,"Point");let{publicKey:A,publicKeyUncompressed:_}=z,R=E.length,K=E[0],H=E.subarray(1);if(D&&R===1&&K===0)return{x:G.ZERO,y:G.ZERO};if(R===A&&(K===2||K===3)){let b=G.fromBytes(H);if(!G.isValid(b))throw Error("bad point: is not on curve, wrong x");let P=N(b),F;try{F=G.sqrt(P)}catch($$){let X$=$$ instanceof Error?": "+$$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}W();let y=G.isOdd(F);if((K&1)===1!==y)F=G.neg(F);return{x:b,y:F}}else if(R===_&&K===4){let b=G.BYTES,P=G.fromBytes(H.subarray(0,b)),F=G.fromBytes(H.subarray(b,b*2));if(!j(P,F))throw Error("bad point: is not on curve");return{x:P,y:F}}else throw Error(`bad point: got length ${R}, expected compressed=${A} or uncompressed=${_}`)}let g=U.toBytes===void 0?v:U.toBytes,V=U.fromBytes===void 0?w:U.fromBytes;function N(E){let A=G.sqr(E),_=G.mul(A,E);return G.add(G.add(_,G.mul(E,Q.a)),Q.b)}function j(E,A){let _=G.sqr(A),R=N(E);return G.eql(_,R)}if(!j(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let M=G.mul(G.pow(Q.a,W4),_L),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(M,S)))throw Error("bad curve params: a or b");function L(E,A,_=!1){if(!G.isValid(A)||_&&G.is0(A))throw Error(`bad point coordinate ${E}`);return A}function k(E){if(!(E instanceof B))throw Error("Weierstrass Point expected")}function x(E){if(!q||!q.basises)throw Error("no endo");return EL(E,q.basises,I.ORDER)}function h(E,A,_,R,K){return _=new B(G.mul(_.X,E),_.Y,_.Z),A=F8(R,A),_=F8(K,_),A.add(_)}class B{static BASE=new B(Q.Gx,Q.Gy,G.ONE);static ZERO=new B(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(E,A,_){this.X=L("x",E),this.Y=L("y",A,!0),this.Z=L("z",_),Object.freeze(this)}static CURVE(){return Q}static fromAffine(E){let{x:A,y:_}=E||{};if(!E||!G.isValid(A)||!G.isValid(_))throw Error("invalid affine point");if(E instanceof B)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(_))return B.ZERO;return new B(A,_,G.ONE)}static fromBytes(E){let A=B.fromAffine(V(S$(E,void 0,"point")));return A.assertValidity(),A}static fromHex(E){return B.fromBytes(aJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,A=!0){if(a.createCache(this,E),!A)this.multiply(W4);return this}assertValidity(){let E=this;if(E.is0()){if(U.allowInfinityPoint&&G.is0(E.X)&&G.eql(E.Y,G.ONE)&&G.is0(E.Z))return;throw Error("bad point: ZERO")}let{x:A,y:_}=E.toAffine();if(!G.isValid(A)||!G.isValid(_))throw Error("bad point: x or y not field elements");if(!j(A,_))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){k(E);let{X:A,Y:_,Z:R}=this,{X:K,Y:H,Z:b}=E,P=G.eql(G.mul(A,b),G.mul(K,R)),F=G.eql(G.mul(_,b),G.mul(H,R));return P&&F}negate(){return new B(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:A}=Q,_=G.mul(A,W4),{X:R,Y:K,Z:H}=this,b=G.ZERO,P=G.ZERO,F=G.ZERO,y=G.mul(R,R),n=G.mul(K,K),$$=G.mul(H,H),X$=G.mul(R,K);return X$=G.add(X$,X$),F=G.mul(R,H),F=G.add(F,F),b=G.mul(E,F),P=G.mul(_,$$),P=G.add(b,P),b=G.sub(n,P),P=G.add(n,P),P=G.mul(b,P),b=G.mul(X$,b),F=G.mul(_,F),$$=G.mul(E,$$),X$=G.sub(y,$$),X$=G.mul(E,X$),X$=G.add(X$,F),F=G.add(y,y),y=G.add(F,y),y=G.add(y,$$),y=G.mul(y,X$),P=G.add(P,y),$$=G.mul(K,H),$$=G.add($$,$$),y=G.mul($$,X$),b=G.sub(b,y),F=G.mul($$,n),F=G.add(F,F),F=G.add(F,F),new B(b,P,F)}add(E){k(E);let{X:A,Y:_,Z:R}=this,{X:K,Y:H,Z:b}=E,P=G.ZERO,F=G.ZERO,y=G.ZERO,n=Q.a,$$=G.mul(Q.b,W4),X$=G.mul(A,K),q$=G.mul(_,H),W$=G.mul(R,b),N$=G.add(A,_),w$=G.add(K,H);N$=G.mul(N$,w$),w$=G.add(X$,q$),N$=G.sub(N$,w$),w$=G.add(A,R);let V$=G.add(K,b);return w$=G.mul(w$,V$),V$=G.add(X$,W$),w$=G.sub(w$,V$),V$=G.add(_,R),P=G.add(H,b),V$=G.mul(V$,P),P=G.add(q$,W$),V$=G.sub(V$,P),y=G.mul(n,w$),P=G.mul($$,W$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),F=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),W$=G.mul(n,W$),w$=G.mul($$,w$),q$=G.add(q$,W$),W$=G.sub(X$,W$),W$=G.mul(n,W$),w$=G.add(w$,W$),X$=G.mul(q$,w$),F=G.add(F,X$),X$=G.mul(V$,w$),P=G.mul(N$,P),P=G.sub(P,X$),X$=G.mul(N$,q$),y=G.mul(V$,y),y=G.add(y,X$),new B(P,F,y)}subtract(E){return k(E),this.add(E.negate())}is0(){return this.equals(B.ZERO)}multiply(E){let{endo:A}=U;if(!I.isValidNot0(E))throw RangeError("invalid scalar: out of range");let _,R,K=(H)=>a.cached(this,H,(b)=>XJ(B,b));if(A){let{k1neg:H,k1:b,k2neg:P,k2:F}=x(E),{p:y,f:n}=K(b),{p:$$,f:X$}=K(F);R=n.add(X$),_=h(A.beta,y,$$,H,P)}else{let{p:H,f:b}=K(E);_=H,R=b}return XJ(B,[_,R])[0]}multiplyUnsafe(E){let{endo:A}=U,_=this,R=E;if(!I.isValid(R))throw RangeError("invalid scalar: out of range");if(R===j0||_.is0())return B.ZERO;if(R===RI)return _;if(a.hasCache(this))return this.multiply(R);if(A){let{k1neg:K,k1:H,k2neg:b,k2:P}=x(R),{p1:F,p2:y}=V5(B,_,H,P);return h(A.beta,F,y,K,b)}else return a.unsafe(_,R)}toAffine(E){let A=this,_=E,{X:R,Y:K,Z:H}=A;if(G.eql(H,G.ONE))return{x:R,y:K};let b=A.is0();if(_==null)_=b?G.ONE:G.inv(H);let P=G.mul(R,_),F=G.mul(K,_),y=G.mul(H,_);if(b)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:F}}isTorsionFree(){let{isTorsionFree:E}=U;if(X===RI)return!0;if(E)return E(B,this);return a.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:E}=U;if(X===RI)return this;if(E)return E(B,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===RI)return this.is0();return this.clearCofactor().is0()}toBytes(E=!0){return c0(E,"isCompressed"),this.assertValidity(),g(B,this,E)}toHex(E=!0){return oJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let m=I.BITS,a=new u8(B,U.endo?Math.ceil(m/2):m);if(m>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function j5($){return Uint8Array.of($?2:3)}function H5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function bL($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?eJ:U.randomBytes,I=Object.assign(H5($.Fp,J),{seed:Math.max(AD(J.ORDER),16)});function Q(w){try{let g=J.fromBytes(w);return J.isValidNot0(g)}catch(g){return!1}}function X(w,g){let{publicKey:V,publicKeyUncompressed:N}=I;try{let j=w.length;if(g===!0&&j!==V)return!1;if(g===!1&&j!==N)return!1;return!!$.fromBytes(w)}catch(j){return!1}}function O(w){return w=w===void 0?G(I.seed):w,D5(S$(w,I.seed,"seed"),J.ORDER)}function q(w,g=!0){return $.BASE.multiply(J.fromBytes(w)).toBytes(g)}function D(w){let{secretKey:g,publicKey:V,publicKeyUncompressed:N}=I,j=J._lengths;if(!tJ(w))return;let M=S$(w,void 0,"key").length,S=M===V||M===N,L=M===g||!!j?.includes(M);if(S&&L)return;return S}function z(w,g,V=!0){if(D(w)===!0)throw Error("first arg must be private key");if(D(g)===!1)throw Error("second arg must be public key");let N=J.fromBytes(w);return $.fromBytes(g).multiply(N).toBytes(V)}let W={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=x8(O,q);return Object.freeze(W),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:z,keygen:v,Point:$,utils:W,lengths:I})}function T5($,U,J={}){let G=U;F0(G),aU(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?eJ:J.randomBytes,Q=J.hmac===void 0?(K,H)=>w0(G,K,H):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:z,getPublicKey:W,getSharedSecret:v,utils:w,lengths:g}=bL($,J),V={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=q*R5+RI<X.ORDER;function j(K){let H=q>>RI;return K>H}function M(K,H){if(!O.isValidNot0(H))throw Error(`invalid signature ${K}: out of range 1..Point.Fn.ORDER`);return H}function S(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function L(K,H){ED(H);let b=g.signature,P=H==="compact"?b:H==="recovered"?b+1:void 0;return S$(K,P)}class k{r;s;recovery;constructor(K,H,b){if(this.r=M("r",K),this.s=M("s",H),b!=null){if(S(),![0,1,2,3].includes(b))throw Error("invalid recovery id");this.recovery=b}Object.freeze(this)}static fromBytes(K,H=V.format){L(K,H);let b;if(H==="der"){let{r:n,s:$$}=X0.toSig(S$(K));return new k(n,$$)}if(H==="recovered")b=K[0],H="compact",K=K.subarray(1);let P=g.signature/2,F=K.subarray(0,P),y=K.subarray(P,P*2);return new k(O.fromBytes(F),O.fromBytes(y),b)}static fromHex(K,H){return this.fromBytes(aJ(K),H)}assertRecovery(){let{recovery:K}=this;if(K==null)throw Error("invalid recovery id: must be present");return K}addRecoveryBit(K){return new k(this.r,this.s,K)}recoverPublicKey(K){let{r:H,s:b}=this,P=this.assertRecovery(),F=P===2||P===3?H+q:H;if(!X.isValid(F))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(F),n=$.fromBytes(JU(j5((P&1)===0),y)),$$=O.inv(F),X$=h(S$(K,void 0,"msgHash")),q$=O.create(-X$*$$),W$=O.create(b*$$),N$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(W$));if(N$.is0())throw Error("invalid recovery: point at infinify");return N$.assertValidity(),N$}hasHighS(){return j(this.s)}toBytes(K=V.format){if(ED(K),K==="der")return aJ(X0.hexFromSig(this));let{r:H,s:b}=this,P=O.toBytes(H),F=O.toBytes(b);if(K==="recovered")return S(),JU(Uint8Array.of(this.assertRecovery()),P,F);return JU(P,F)}toHex(K){return oJ(this.toBytes(K))}}Object.freeze(k.prototype),Object.freeze(k);let x=J.bits2int===void 0?function(H){if(H.length>8192)throw Error("input is too large");let b=JJ(H),P=H.length*8-D;return P>0?b>>BigInt(P):b}:J.bits2int,h=J.bits2int_modN===void 0?function(H){return O.create(x(H))}:J.bits2int_modN,B=f8(D);function m(K){return p0("num < 2^"+D,K,j0,B),O.toBytes(K)}function a(K,H){return S$(K,void 0,"message"),H?S$(G(K),void 0,"prehashed message"):K}function E(K,H,b){let{lowS:P,prehash:F,extraEntropy:y}=CD(b,V);K=a(K,F);let n=h(K),$$=O.fromBytes(H);if(!O.isValidNot0($$))throw Error("invalid private key");let X$=[m($$),m(n)];if(y!=null&&y!==!1){let w$=y===!0?I(g.secretKey):y;X$.push(S$(w$,void 0,"extraEntropy"))}let q$=JU(...X$),W$=n;function N$(w$){let V$=x(w$);if(!O.isValidNot0(V$))return;let M$=O.inv(V$),b$=$.BASE.multiply(V$).toAffine(),k$=O.create(b$.x);if(k$===j0)return;let qU=O.create(M$*O.create(W$+k$*$$));if(qU===j0)return;let DU=(b$.x===k$?0:2)|Number(b$.y&RI),SU=qU;if(P&&j(qU))SU=O.neg(qU),DU^=1;return new k(k$,SU,N?void 0:DU)}return{seed:q$,k2sig:N$}}function A(K,H,b={}){let{seed:P,k2sig:F}=E(K,H,b);return tZ(G.outputLen,O.BYTES,Q)(P,F).toBytes(b.format)}function _(K,H,b,P={}){let{lowS:F,prehash:y,format:n}=CD(P,V);if(b=S$(b,void 0,"publicKey"),H=a(H,y),!tJ(K)){let $$=K instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+$$)}L(K,n);try{let $$=k.fromBytes(K,n),X$=$.fromBytes(b);if(F&&$$.hasHighS())return!1;let{r:q$,s:W$}=$$,N$=h(H),w$=O.inv(W$),V$=O.create(N$*w$),M$=O.create(q$*w$),b$=$.BASE.multiplyUnsafe(V$).add(X$.multiplyUnsafe(M$));if(b$.is0())return!1;return O.create(b$.x)===q$}catch($$){return!1}}function R(K,H,b={}){let{prehash:P}=CD(b,V);return H=a(H,P),k.fromBytes(K,"recovered").recoverPublicKey(H).toBytes()}return Object.freeze({keygen:z,getPublicKey:W,getSharedSecret:v,utils:w,lengths:g,Point:$,sign:A,verify:_,recoverPublicKey:R,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var fL=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var kL=M5(fL),UG=T5(kL,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var MI=BigInt(0),EU=BigInt(1),_D=BigInt(2),FL=BigInt(8);function uL($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function K5($,U={}){let J=U,G=Y4("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;aU(J,{},{uvRatio:"function"});let q=_D<<BigInt(Q.BYTES*8)-EU,D=(V)=>I.create(V),z=J.uvRatio===void 0?(V,N)=>{try{return{isValid:!0,value:I.sqrt(I.div(V,N))}}catch(j){return{isValid:!1,value:MI}}}:J.uvRatio;if(!uL(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function W(V,N,j=!1){let M=j?EU:MI;return p0("coordinate "+V,N,M,q),N}function v(V){if(!(V instanceof w))throw Error("EdwardsPoint expected")}class w{static BASE=new w(X.Gx,X.Gy,EU,D(X.Gx*X.Gy));static ZERO=new w(MI,EU,EU,MI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(V,N,j,M){this.X=W("x",V),this.Y=W("y",N),this.Z=W("z",j,!0),this.T=W("t",M),Object.freeze(this)}static CURVE(){return X}static fromAffine(V){if(V instanceof w)throw Error("extended point not allowed");let{x:N,y:j}=V||{};return W("x",N),W("y",j),new w(N,j,EU,D(N*j))}static fromBytes(V,N=!1){let j=I.BYTES,{a:M,d:S}=X;V=ZI(S$(V,j,"point")),c0(N,"zip215");let L=ZI(V),k=V[j-1];L[j-1]=k&-129;let x=Q0(L),h=N?q:I.ORDER;p0("point.y",x,MI,h);let B=D(x*x),m=D(B-EU),a=D(S*B-M),{isValid:E,value:A}=z(m,a);if(!E)throw Error("bad point: invalid y coordinate");let _=(A&EU)===EU,R=(k&128)!==0;if(!N&&A===MI&&R)throw Error("bad point: x=0 and x_0=1");if(R!==_)A=D(-A);return w.fromAffine({x:A,y:x})}static fromHex(V,N=!1){return w.fromBytes(aJ(V),N)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(V=8,N=!0){if(g.createCache(this,V),!N)this.multiply(_D);return this}assertValidity(){let V=this,{a:N,d:j}=X;if(V.is0())throw Error("bad point: ZERO");let{X:M,Y:S,Z:L,T:k}=V,x=D(M*M),h=D(S*S),B=D(L*L),m=D(B*B),a=D(x*N),E=D(B*D(a+h)),A=D(m+D(j*D(x*h)));if(E!==A)throw Error("bad point: equation left != right (1)");let _=D(M*S),R=D(L*k);if(_!==R)throw Error("bad point: equation left != right (2)")}equals(V){v(V);let{X:N,Y:j,Z:M}=this,{X:S,Y:L,Z:k}=V,x=D(N*k),h=D(S*M),B=D(j*k),m=D(L*M);return x===h&&B===m}is0(){return this.equals(w.ZERO)}negate(){return new w(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:V}=X,{X:N,Y:j,Z:M}=this,S=D(N*N),L=D(j*j),k=D(_D*D(M*M)),x=D(V*S),h=N+j,B=D(D(h*h)-S-L),m=x+L,a=m-k,E=x-L,A=D(B*a),_=D(m*E),R=D(B*E),K=D(a*m);return new w(A,_,K,R)}add(V){v(V);let{a:N,d:j}=X,{X:M,Y:S,Z:L,T:k}=this,{X:x,Y:h,Z:B,T:m}=V,a=D(M*x),E=D(S*h),A=D(k*j*m),_=D(L*B),R=D((M+S)*(x+h)-a-E),K=_-A,H=_+A,b=D(E-N*a),P=D(R*K),F=D(H*b),y=D(R*b),n=D(K*H);return new w(P,F,n,y)}subtract(V){return v(V),this.add(V.negate())}multiply(V){if(!Q.isValidNot0(V))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:N,f:j}=g.cached(this,V,(M)=>XJ(w,M));return XJ(w,[N,j])[0]}multiplyUnsafe(V){if(!Q.isValid(V))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(V===MI)return w.ZERO;if(this.is0()||V===EU)return this;return g.unsafe(this,V,(N)=>XJ(w,N))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return g.unsafe(this,X.n).is0()}toAffine(V){let N=this,j=V,{X:M,Y:S,Z:L}=N,k=N.is0();if(j==null)j=k?FL:I.inv(L);let x=D(M*j),h=D(S*j),B=I.mul(L,j);if(k)return{x:MI,y:EU};if(B!==EU)throw Error("invZ was invalid");return{x,y:h}}clearCofactor(){if(O===EU)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:V,y:N}=this.toAffine(),j=I.toBytes(N);return j[j.length-1]|=V&EU?128:0,j}toHex(){return oJ(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let g=new u8(w,Q.BITS);if(Q.BITS>=8)w.BASE.precompute(8);return Object.freeze(w.prototype),Object.freeze(w),w}class bD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){jD()}static fromHex($){jD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return oJ(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var y8=BigInt(0),IG=BigInt(1),v4=BigInt(2);function xL($){return aU($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function A5($){let U=xL($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?eJ:X,D=O?255:448,z=O?32:56,W=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),w=O?v4**BigInt(254):v4**BigInt(447),g=O?BigInt(8)*v4**BigInt(251)-IG:BigInt(4)*v4**BigInt(445)-IG,V=w+g+IG,N=(R)=>F$(R,J),j=M(W);function M(R){return b8(N(R),z)}function S(R){let K=ZI(S$(R,z,"uCoordinate"));if(O)K[31]&=127;return N(Q0(K))}function L(R){return Q0(I(ZI(S$(R,z,"scalar"))))}function k(R,K){let H=a(S(K),L(R));if(H===y8)throw Error("invalid private or public key received");return M(H)}function x(R){return k(R,j)}let h=x,B=k;function m(R,K,H){let b=N(R*(K-H));return K=N(K-b),H=N(H+b),{x_2:K,x_3:H}}function a(R,K){p0("u",R,y8,J),p0("scalar",K,w,V);let H=K,b=R,P=IG,F=y8,y=R,n=IG,$$=y8;for(let q$=BigInt(D-1);q$>=y8;q$--){let W$=H>>q$&IG;$$^=W$,{x_2:P,x_3:y}=m($$,P,y),{x_2:F,x_3:n}=m($$,F,n),$$=W$;let N$=P+F,w$=N(N$*N$),V$=P-F,M$=N(V$*V$),b$=w$-M$,k$=y+n,qU=y-n,DU=N(qU*N$),SU=N(k$*V$),W0=DU+SU,v0=DU-SU;y=N(W0*W0),n=N(b*N(v0*v0)),P=N(w$*M$),F=N(b$*(w$+N(v*b$)))}({x_2:P,x_3:y}=m($$,P,y)),{x_2:F,x_3:n}=m($$,F,n);let X$=Q(F);return N(P*X$)}let E={secretKey:z,publicKey:z,seed:z},A=(R)=>{return R=R===void 0?q(z):R,S$(R,E.seed,"seed"),R},_={randomSecretKey:A};return Object.freeze(E),Object.freeze(_),Object.freeze({keygen:x8(A,h),getSharedSecret:B,getPublicKey:h,scalarMult:k,scalarMultBase:x,utils:_,GuBytes:j.slice(),lengths:E})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mL=BigInt(0),a0=BigInt(1),P5=BigInt(2),yL=BigInt(3),rL=BigInt(5),hL=BigInt(8),qJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),uD=(()=>({p:qJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:hL,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function S5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=qJ,O=$*$%Q*$%Q,q=tU(O,P5,Q)*O%Q,D=tU(q,a0,Q)*$%Q,z=tU(D,rL,Q)*D%Q,W=tU(z,U,Q)*z%Q,v=tU(W,J,Q)*W%Q,w=tU(v,G,Q)*v%Q,g=tU(w,I,Q)*w%Q,V=tU(g,I,Q)*w%Q,N=tU(V,U,Q)*z%Q;return{pow_p_5_8:tU(N,P5,Q)*$%Q,b2:O}}function lL($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var fD=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function xD($,U){let J=qJ,G=F$(U*U*U,J),I=F$(G*G*U,J),Q=S5($*I).pow_p_5_8,X=F$($*G*Q,J),O=F$(U*X*X,J),q=X,D=F$(X*fD,J),z=O===$,W=O===F$(-$,J),v=O===F$(-$*fD,J);if(z)X=q;if(W||v)X=D;if(o0(X,J))X=F$(-X,J);return{isValid:z||W,value:X}}var OJ=K5(uD,{uvRatio:xD}),jI=(()=>OJ.Fp)(),C5=(()=>OJ.Fn)();var w4=(()=>{let $=qJ;return A5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=S5(U);return F$(tU(J,yL,$)*G,$)},adjustScalarBytes:lL})})();var kD=fD,dL=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),nL=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),iL=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),cL=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),B5=($)=>xD(a0,$),pL=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),FD=($)=>jI.create(Q0($)&pL);function L5($){let{d:U}=uD,J=qJ,G=(j)=>jI.create(j),I=G(kD*$*$),Q=G((I+a0)*iL),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=xD(Q,O),z=G(D*$);if(!o0(z,J))z=G(-z);if(!q)D=z;if(!q)X=I;let W=G(X*(I-a0)*cL-O),v=D*D,w=G((D+D)*O),g=G(W*dL),V=G(a0-v),N=G(a0+v);return new OJ(G(w*N),G(V*g),G(g*N),G(w*V))}class TU extends bD{static BASE=(()=>new TU(OJ.BASE))();static ZERO=(()=>new TU(OJ.ZERO))();static Fp=(()=>jI)();static Fn=(()=>C5)();constructor($){super($)}static fromAffine($){return new TU(OJ.fromAffine($))}assertSame($){if(!($ instanceof TU))throw Error("RistrettoPoint expected")}init($){return new TU($)}static fromBytes($){t$($,32);let{a:U,d:J}=uD,G=qJ,I=(S)=>jI.create(S),Q=FD($);if(!aZ(jI.toBytes(Q),$)||o0(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(a0+U*X),q=I(a0-U*X),D=I(O*O),z=I(q*q),W=I(U*J*D-z),{isValid:v,value:w}=B5(I(W*z)),g=I(w*q),V=I(w*g*W),N=I((Q+Q)*g);if(o0(N,G))N=I(-N);let j=I(O*V),M=I(N*j);if(!v||o0(M,G)||j===mL)throw Error("invalid ristretto255 encoding 2");return new TU(new OJ(N,j,a0,M))}static fromHex($){return TU.fromBytes(X8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=qJ,Q=(V)=>jI.create(V),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=B5(Q(X*q)),z=Q(D*X),W=Q(D*O),v=Q(z*W*G),w;if(o0(G*v,I)){let V=Q(U*kD),N=Q($*kD);$=V,U=N,w=Q(z*nL)}else w=W;if(o0($*v,I))U=Q(-U);let g=Q((J-U)*w);if(o0(g,I))g=Q(-g);return jI.toBytes(g)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>jI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(TU.ZERO)}}Object.freeze(TU.BASE);Object.freeze(TU.ZERO);Object.freeze(TU.prototype);Object.freeze(TU);var oL=Object.freeze({Point:TU,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=SD($,J,64,_Q);return oL.deriveToCurve(G)},hashToScalar($,U={DST:N5}){let J=SD($,U.DST,64,_Q);return C5.create(Q0(J))},deriveToCurve($){t$($,64);let U=FD($.subarray(0,32)),J=L5(U),G=FD($.subarray(32,64)),I=L5(G);return new TU(J.add(I))}});var E5=!1,aL=!1;async function _5($,U){if(aL)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function V4($,U){return await _5(async()=>{let J=mD($)?$:await eL($),G=await crypto.subtle.importKey("raw",sL(U),{name:"X25519"},E5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMult($,U)})}async function r8($){return await _5(async()=>{return V4($,w4.GuBytes)},()=>{if(mD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return w4.scalarMultBase($)})}var tL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function eL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([...tL,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},E5,["deriveBits"])}function mD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function sL($){return $}class yD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),US(DJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=DJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:DJ(this.transcript)}}}function US($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function DJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function JG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function N4($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function rD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function b5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function f5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=DJ(G),X=Q.subarray(0,U),O=JG($,Q.subarray(U));return{data:X,rest:O}}class H0{args;body;constructor($,U){this.args=$,this.body=U}}async function IS($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=WU.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=DJ(G);return{s:new H0(J,I)}}async function k5($){let U=new yD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await IS(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=WU.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:JG($,O)}}}function hD($){let U=[];U.push(`age-encryption.org/v1
 `);for(let J of $){U.push("-> "+J.args.join(" ")+`
 `);for(let G=0;G<J.body.length;G+=48){let I=G+48;if(I>J.body.length)I=J.body.length;U.push(WU.encode(J.body.subarray(G,I))+`
 `)}if(J.body.length%48===0)U.push(`

package/dist/index.js CHANGED Viewed

@@ -310,7 +310,7 @@ Update marker: ${U.id}.
 `}function fH($){return $.replace(/[-:.TZ]/g,"").slice(0,14)}async function zG$($){await pU(c$($.artifactsDir,"report.json"),`${JSON.stringify($,null,2)}
 `),await pU(c$($.artifactsDir,"report.md"),AG$($))}function AG$($){let U=$.report.metrics.runtime,J=$.report.metrics.health,G=U.map((D)=>D.cpuPercent).sort((D,X)=>D-X),q=U.map((D)=>D.memoryPercent),I=J.filter((D)=>!D.ok),Q=["# Directory-sync stress report","",`- Run: \`${$.runId}\``,`- Target: \`${$.target.handle}\` (${$.target.domain})`,`- Profile: \`${$.report.profile}\``,`- Version: \`${$.report.baseline.version}\``,`- Result: **${$.report.success?"PASS":"FAIL"}**`,`- Started: ${$.startedAt}`,`- Completed: ${$.completedAt}`,"","## Phases","","| Phase | Operation | Count | Result | Pull latency | Persistence latency |","| --- | --- | ---: | --- | ---: | ---: |",...$.report.phases.map((D)=>`| ${D.id} | ${D.operation} | ${D.count} | ${D.success?"pass":`fail: ${D.error??"unknown"}`} | ${Ev(D.commitLatencyMs)} | ${Ev(D.persistenceLatencyMs)} |`),"","## Runtime","",`- Samples: ${U.length}`,`- CPU p50/p95/p99/max: ${XQ(_H(G,0.5))} / ${XQ(_H(G,0.95))} / ${XQ(_H(G,0.99))} / ${XQ(G.at(-1))}`,`- Memory max: ${XQ(q.length?Math.max(...q):void 0)}`,`- PIDs max: ${U.length?Math.max(...U.map((D)=>D.pids)):"n/a"}`,`- Container status/restarts/OOM: ${$.report.metrics.container?`${$.report.metrics.container.status} / ${$.report.metrics.container.restartCount} / ${$.report.metrics.container.oomKilled}`:"unknown"}`,`- External AI calls: ${$.report.metrics.externalAiCalls??0}`,`- Health samples: ${J.length}`,`- Health failures: ${I.length}`,"","## Cleanup","",`- Result: ${$.report.cleanup.success?"pass":"fail"}`,`- Remaining probes: ${$.report.cleanup.probesRemaining}`,`- Final entities: ${$.report.cleanup.finalEntities??"unknown"}`,`- Final notes: ${$.report.cleanup.finalNotes??"unknown"}`,`- Content tree restored: ${$.report.cleanup.contentTreeRestored??"unknown"}`,""];if($.report.failure)Q.push("## Failure","",$.report.failure,"");return`${Q.join(`
 `)}
-`}function _H($,U){if($.length===0)return;let J=Math.max(0,Math.ceil($.length*U)-1);return $[J]}function XQ($){return $===void 0?"n/a":`${$.toFixed(2)}%`}function Ev($){return $===void 0?"n/a":`${($/1000).toFixed(1)}s`}var MG$,HG$;var VQ=O$(()=>{b$();mY();NJ();hY();Sv();Cv();hY();MG$=R.object({HCLOUD_TOKEN:R.string().min(1),KAMAL_SSH_PRIVATE_KEY:R.string().min(1),CONTENT_REPO_ADMIN_TOKEN:R.string().min(1)}),HG$=R.object({servers:R.array(R.object({id:R.number().int(),status:R.string(),public_net:R.object({ipv4:R.object({ip:R.string().min(1)})})}))})});import{access as Uj,chmod as bN,mkdir as eD,readFile as qj,writeFile as Jj}from"fs/promises";import{dirname as nu,join as B8}from"path";import{fileURLToPath as cu}from"url";var WQ={name:"@rizom/ops",version:"0.2.0-alpha.290",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var lH=`ARG BUN_VERSION=1.3.10
+`}function _H($,U){if($.length===0)return;let J=Math.max(0,Math.ceil($.length*U)-1);return $[J]}function XQ($){return $===void 0?"n/a":`${$.toFixed(2)}%`}function Ev($){return $===void 0?"n/a":`${($/1000).toFixed(1)}s`}var MG$,HG$;var VQ=O$(()=>{b$();mY();NJ();hY();Sv();Cv();hY();MG$=R.object({HCLOUD_TOKEN:R.string().min(1),KAMAL_SSH_PRIVATE_KEY:R.string().min(1),CONTENT_REPO_ADMIN_TOKEN:R.string().min(1)}),HG$=R.object({servers:R.array(R.object({id:R.number().int(),status:R.string(),public_net:R.object({ipv4:R.object({ip:R.string().min(1)})})}))})});import{access as Uj,chmod as bN,mkdir as eD,readFile as qj,writeFile as Jj}from"fs/promises";import{dirname as nu,join as B8}from"path";import{fileURLToPath as cu}from"url";var WQ={name:"@rizom/ops",version:"0.2.0-alpha.292",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};var lH=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 LABEL ai.rizom.brain.watchdog="true"

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.290",
+  "version": "0.2.0-alpha.292",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",