@rizom/ops 0.2.0-alpha.320 → 0.2.0-alpha.322

package/dist/brains-ops.js

@@ -672,7 +672,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var O6,GK;var Bw=G(async()=>{Pt();$6();Nn();fc();await _6();O6=v.object({HCLOUD_TOKEN:v.string().min(1),KAMAL_SSH_PRIVATE_KEY:v.string().min(1)}),GK=v.object({servers:v.array(v.object({status:v.string(),public_net:v.object({ipv4:v.object({ip:v.string().min(1)})})}))})});import{parseArgs as sR}from"util";function Be(e){return e}class Sc extends Error{constructor(e){super(e);this.name="CliUsageError"}}function aR(e,t){let n={...t};for(let i of e)for(let[r,o]of Object.entries(i.flags??{})){let s=n[r];if(s===void 0){n[r]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${r}: commands must agree on type, short, and default`)}return n}function cR(e){let t={};for(let[n,i]of Object.entries(e))t[n]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function lR(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function Kw(e,t){let n=aR(t.commands,t.globalFlags??{}),i,r;try{({values:i,positionals:r}=sR({args:e,options:cR(n),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(lR(s))throw new Sc(s.message.split(". ")[0]??s.message);throw s}if("help"in n&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in n&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(n)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:r[0]??"help",args:r.slice(1),flags:o}}function qw(e){let t=e.reduce((n,i)=>Math.max(n,i.label.length),0);return e.map((n)=>`  ${n.label.padEnd(t)}  ${n.description}`)}function uR(e){return qw(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function fR(e,t){let n=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${n}${i}`}function Hw(e){return qw(Object.entries(e).map(([t,n])=>({label:fR(t,n),description:n.description})))}function Vw(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function dR(e){return JSON.stringify(Object.entries(e).map(([t,n])=>[t,n.type,n.short??"",n.description,n.placeholder??"",n.default??""]).sort((t,n)=>String(t[0]).localeCompare(String(n[0]))))}function pR(e){let t=[],n=new Map;for(let r of e){let o=r.flags??{};if(Object.keys(o).length===0)continue;let s=dR(o),a=n.get(s);if(a){a.names.push(r.name);continue}let c={names:[r.name],flags:o};n.set(s,c),t.push(c)}let i=[];for(let r of t)i.push("",`${r.names.join(" / ")} options:`),i.push(...Hw(r.flags));return i}function Yw(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...uR(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...Hw(e.globalFlags));return t.push(...pR(e.commands)),t.join(`
-`)}function Ww(e){let t=new Map;for(let n of e){if(t.has(n.name))throw Error(`Duplicate command name: ${n.name}`);t.set(n.name,n)}return t}function Ze(e,t){let n=e[t];return typeof n==="string"?n:void 0}function _c(e,t){let n=e[t];return typeof n==="boolean"?n:void 0}var $c={name:"@rizom/ops",version:"0.2.0-alpha.320",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as Z4,mkdirSync as F4,readFileSync as sm,writeFileSync as am}from"fs";import{dirname as K4,join as n$}from"path";function xd(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Fe(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(`${n}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw RangeError(`${n}expected integer >= 0, got ${e}`)}}function tt(e,t,n=""){let i=xd(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Cr(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Fe(e.outputLen),Fe(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function ji(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function kc(e,t){tt(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw RangeError('"digestInto() output" expected to be of length >='+n)}function Ec(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function gt(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mi(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Qt(e,t){return e<<32-t|e>>>t}function Ie(e,t){return e<<t|e>>>32-t>>>0}var hR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function gR(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function yR(e){for(let t=0;t<e.length;t++)e[t]=gR(e[t]);return e}var wd=hR?(e)=>e:yR,Jw=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),bR=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Ic(e){if(tt(e),Jw)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=bR[e[n]];return t}var Pr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Gw(e){if(e>=Pr._0&&e<=Pr._9)return e-Pr._0;if(e>=Pr.A&&e<=Pr.F)return e-(Pr.A-10);if(e>=Pr.a&&e<=Pr.f)return e-(Pr.a-10);return}function ds(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(Jw)try{return Uint8Array.fromHex(e)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let t=e.length,n=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=Gw(e.charCodeAt(o)),a=Gw(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function vR(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function Sd(e,t=""){if(typeof e==="string")return vR(e);return tt(e,void 0,t)}function _d(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];tt(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Oc(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function $d(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.canXOF=i.canXOF,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function Nr(e=32){Fe(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var kd=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ed{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Cr(e),tt(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),gt(i)}update(e){return ji(this),this.iHash.update(e),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var fr=(()=>{let e=(t,n,i)=>new Ed(t,n).update(i).digest();return e.create=(t,n)=>new Ed(t,n),e})();function ps(e,t,n){if(Cr(e),n===void 0)n=new Uint8Array(e.outputLen);return fr(e,n,t)}var Id=Uint8Array.of(0),Xw=Uint8Array.of();function Od(e,t,n,i=32){Cr(e),Fe(i,"length"),tt(t,void 0,"prk");let r=e.outputLen;if(t.length<r)throw Error('"prk" must be at least HashLen octets');if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=Xw;else tt(n,void 0,"info");let s=new Uint8Array(o*r),a=fr.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Id[0]=u+1,c.update(u===0?Xw:l).update(n).update(Id).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),gt(l,Id),s.slice(0,i)}var rn=(e,t,n,i,r)=>Od(e,ps(e,t,n),i,r);function Qw(e,t,n){return e&t^~e&n}function eS(e,t,n){return e&t^e&n^t&n}class Ac{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mi(this.buffer)}update(e){ji(this),tt(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mi(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,gt(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mi(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var Dr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var rt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Tc=BigInt(4294967295),tS=BigInt(32);function xR(e,t=!1){if(t)return{h:Number(e&Tc),l:Number(e>>tS&Tc)};return{h:Number(e>>tS&Tc)|0,l:Number(e&Tc)|0}}function rS(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=xR(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var Ad=(e,t,n)=>e>>>n,Td=(e,t,n)=>e<<32-n|t>>>n,Hn=(e,t,n)=>e>>>n|t<<32-n,Vn=(e,t,n)=>e<<32-n|t>>>n,ms=(e,t,n)=>e<<64-n|t>>>n-32,hs=(e,t,n)=>e>>>n-32|t<<64-n;function dr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var nS=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),iS=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,oS=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),sS=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,aS=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),cS=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var SR=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nn=new Uint32Array(64);class lS extends Ac{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)nn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=nn[u-15],p=nn[u-2],m=Qt(d,7)^Qt(d,18)^d>>>3,y=Qt(p,17)^Qt(p,19)^p>>>10;nn[u]=y+nn[u-7]+m+nn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Qt(s,6)^Qt(s,11)^Qt(s,25),p=l+d+Qw(s,a,c)+SR[u]+nn[u]|0,y=(Qt(n,2)^Qt(n,13)^Qt(n,22))+eS(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){gt(nn)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),gt(this.buffer)}}class uS extends lS{A=Dr[0]|0;B=Dr[1]|0;C=Dr[2]|0;D=Dr[3]|0;E=Dr[4]|0;F=Dr[5]|0;G=Dr[6]|0;H=Dr[7]|0;constructor(){super(32)}}var fS=(()=>rS(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),_R=(()=>fS[0])(),$R=(()=>fS[1])(),on=new Uint32Array(80),sn=new Uint32Array(80);class dS extends Ac{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let S=0;S<16;S++,t+=4)on[S]=e.getUint32(t),sn[S]=e.getUint32(t+=4);for(let S=16;S<80;S++){let A=on[S-15]|0,I=sn[S-15]|0,C=Hn(A,I,1)^Hn(A,I,8)^Ad(A,I,7),U=Vn(A,I,1)^Vn(A,I,8)^Td(A,I,7),F=on[S-2]|0,T=sn[S-2]|0,j=Hn(F,T,19)^ms(F,T,61)^Ad(F,T,6),X=Vn(F,T,19)^hs(F,T,61)^Td(F,T,6),P=oS(U,X,sn[S-7],sn[S-16]),E=sS(P,C,j,on[S-7],on[S-16]);on[S]=E|0,sn[S]=P|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let S=0;S<80;S++){let A=Hn(u,d,14)^Hn(u,d,18)^ms(u,d,41),I=Vn(u,d,14)^Vn(u,d,18)^hs(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=aS(w,I,U,$R[S],sn[S]),T=cS(F,g,A,C,_R[S],on[S]),j=F|0,X=Hn(n,i,28)^ms(n,i,34)^ms(n,i,39),P=Vn(n,i,28)^hs(n,i,34)^hs(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=dr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=nS(j,P,N);n=iS(x,T,X,E),i=x|0}({h:n,l:i}=dr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=dr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=dr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=dr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=dr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=dr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=dr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=dr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){gt(on,sn)}destroy(){this.destroyed=!0,gt(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class pS extends dS{Ah=rt[0]|0;Al=rt[1]|0;Bh=rt[2]|0;Bl=rt[3]|0;Ch=rt[4]|0;Cl=rt[5]|0;Dh=rt[6]|0;Dl=rt[7]|0;Eh=rt[8]|0;El=rt[9]|0;Fh=rt[10]|0;Fl=rt[11]|0;Gh=rt[12]|0;Gl=rt[13]|0;Hh=rt[14]|0;Hl=rt[15]|0;constructor(){super(64)}}var Ke=$d(()=>new uS,kd(1));var Rc=$d(()=>new pS,kd(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function zc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Cd(e){if(!zc(e))throw TypeError("Uint8Array expected")}function bS(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((n)=>typeof n==="string");else return t.every((n)=>Number.isSafeInteger(n))}function vS(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function an(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function ys(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Cc(e){if(!Array.isArray(e))throw TypeError("array expected")}function Nc(e,t){if(!bS(!0,t))throw TypeError(`${e}: array of strings expected`)}function Nd(e,t){if(!bS(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Nt(...e){let t=(o)=>o,n=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(n,t),r=e.map((o)=>o.decode).reduce(n,t);return{encode:i,decode:r}}function Dt(e){let t=typeof e==="string"?e.split(""):e,n=t.length;Nc("alphabet",t);let i=new Map(t.map((r,o)=>[r,o]));return{encode:(r)=>(Cc(r),r.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=n)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(r)=>(Cc(r),r.map((o)=>{an("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function zt(e=""){return an("join",e),{encode:(t)=>(Nc("join.decode",t),t.join(e)),decode:(t)=>(an("join.decode",t),t.split(e))}}function Uc(e,t="="){return ys(e),an("padding",t),{encode(n){Nc("padding.encode",n);while(n.length*e%8)n.push(t);return n},decode(n){Nc("padding.decode",n);let i=n.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&n[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return n.slice(0,i)}}}function xS(e){return vS(e),{encode:(t)=>t,decode:(t)=>e(t)}}function mS(e,t,n){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(n<2)throw RangeError(`convertRadix: invalid to=${n}, base cannot be less than 2`);if(Cc(e),!e.length)return[];let i=0,r=[],o=Array.from(e,(a)=>{if(ys(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,p=d+u;if(!Number.isSafeInteger(p)||d/t!==a||p-u!==d)throw Error("convertRadix: carry overflow");let m=p/n;a=p%n;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*n+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(r.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)r.push(0);return r.reverse()}var wS=(e,t)=>t===0?e:wS(t,e%t),Dc=(e,t)=>e+(t-wS(e,t)),Pc=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Rd(e,t,n,i){if(Cc(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(n<=0||n>32)throw RangeError(`convertRadix2: wrong to=${n}`);if(Dc(t,n)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${n} carryBits=${Dc(t,n)}`);let r=0,o=0,s=Pc[t],a=Pc[n]-1,c=[];for(let l of e){if(ys(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(r=r<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=n;o-=n)c.push((r>>o-n&a)>>>0);let u=Pc[o];if(u===void 0)throw Error("invalid carry");r&=u-1}if(r=r<<n-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&r>0)throw Error(`Non-zero padding: ${r}`);if(i&&o>0)c.push(r>>>0);return c}function kR(e){ys(e);let t=256;return{encode:(n)=>{if(!zc(n))throw TypeError("radix.encode input should be Uint8Array");return mS(Array.from(n),t,e)},decode:(n)=>(Nd("radix.decode",n),Uint8Array.from(mS(n,e,t)))}}function Kt(e,t=!1){if(ys(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Dc(8,e)>32||Dc(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(n)=>{if(!zc(n))throw TypeError("radix2.encode input should be Uint8Array");return Rd(Array.from(n),8,e,!t)},decode:(n)=>(Nd("radix2.decode",n),Uint8Array.from(Rd(n,e,8,t)))}}function hS(e){return vS(e),function(...t){try{return e.apply(null,t)}catch(n){}}}var S7=Object.freeze(Nt(Kt(4),Dt("0123456789ABCDEF"),zt(""))),_7=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Uc(5),zt(""))),$7=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),zt(""))),k7=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Uc(5),zt(""))),E7=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),zt(""))),I7=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),zt(""),xS((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),SS=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),ER=/[\t\n\f\r ]/,_S=(e,t)=>{an("base64",e);let n=t?"base64url":"base64";if(e.length>0&&ER.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:n,lastChunkHandling:"strict"})},Dd=Object.freeze(SS?{encode(e){return Cd(e),e.toBase64()},decode(e){return _S(e,!1)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Uc(6),zt(""))),ut=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),zt(""))),O7=Object.freeze(SS?{encode(e){return Cd(e),e.toBase64({alphabet:"base64url"})},decode(e){return _S(e,!0)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Uc(6),zt(""))),A7=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),zt(""))),zd=(e)=>Nt(kR(58),Dt(e),zt("")),T7=Object.freeze(zd("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),R7=Object.freeze(zd("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),P7=Object.freeze(zd("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Pd=Nt(Dt("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),zt("")),gS=[996825010,642813549,513874426,1027748829,705979059];function gs(e){let t=e>>25,n=(e&33554431)<<5;for(let i=0;i<gS.length;i++)if((t>>i&1)===1)n^=gS[i];return n}function yS(e,t,n=1){let i=e.length,r=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);r=gs(r)^s>>5}r=gs(r);for(let o=0;o<i;o++)r=gs(r)^e.charCodeAt(o)&31;for(let o of t)r=gs(r)^o;for(let o=0;o<6;o++)r=gs(r);return r^=n,Pd.encode(Rd([r%Pc[30]],30,5,!1))}function $S(e){let t=e==="bech32"?1:734539939,n=Kt(5),i=n.decode,r=n.encode,o=hS(i);function s(d,p,m=90){if(an("bech32.encode prefix",d),zc(p))p=Array.from(p);Nd("bech32.encode",p);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let h=y+7+p.length;if(m!==!1&&h>m)throw TypeError(`Length ${h} exceeds limit ${m}`);let g=d.toLowerCase(),w=yS(g,p,t);return`${g}1${Pd.encode(p)}${w}`}function a(d,p=90){an("bech32.decode input",d);let m=d.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${d}). Expected (8..${p})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let h=y.lastIndexOf("1");if(h===0||h===-1)throw Error('Letter "1" must be present between prefix and data only');let g=y.slice(0,h),w=y.slice(h+1);if(w.length<6)throw Error("Data must be at least 6 characters long");let S=Pd.decode(w).slice(0,-6),A=yS(g,S,t);if(!w.endsWith(A))throw Error(`Invalid checksum in ${d}: expected "${A}"`);return{prefix:g,words:S}}let c=hS(a);function l(d){let{prefix:p,words:m}=a(d,!1);return{prefix:p,words:m,bytes:i(m)}}function u(d,p){return s(d,r(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:r}}var Ut=Object.freeze($S("bech32")),C7=Object.freeze($S("bech32m"));var IR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),OR={encode(e){return Cd(e),e.toHex()},decode(e){return an("hex",e),Uint8Array.fromHex(e)}},N7=Object.freeze(IR?OR:Nt(Kt(4),Dt("0123456789abcdef"),zt(""),xS((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function TR(e,t,n,i){Cr(e);let r=Oc({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=r;if(Fe(o,"c"),Fe(s,"dkLen"),Fe(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=Sd(t,"password"),l=Sd(n,"salt"),u=new Uint8Array(s),d=fr.create(e,c),p=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:p}}function RR(e,t,n,i,r){if(e.destroy(),t.destroy(),i)i.destroy();return gt(r),n}function Ud(e,t,n,i){let{c:r,dkLen:o,DK:s,PRF:a,PRFSalt:c}=TR(e,t,n,i),l,u=new Uint8Array(4),d=Mi(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let h=s.subarray(y,y+a.outputLen);d.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),h.set(p.subarray(0,h.length));for(let g=1;g<r;g++){a._cloneInto(l).update(p).digestInto(p);for(let w=0;w<h.length;w++)h[w]^=p[w]}}return RR(a,c,s,l,p)}function kS(e,t,n,i,r,o){let s=e[t++]^n[i++],a=e[t++]^n[i++],c=e[t++]^n[i++],l=e[t++]^n[i++],u=e[t++]^n[i++],d=e[t++]^n[i++],p=e[t++]^n[i++],m=e[t++]^n[i++],y=e[t++]^n[i++],h=e[t++]^n[i++],g=e[t++]^n[i++],w=e[t++]^n[i++],S=e[t++]^n[i++],A=e[t++]^n[i++],I=e[t++]^n[i++],C=e[t++]^n[i++],U=s,F=a,T=c,j=l,X=u,P=d,E=p,N=m,x=y,k=h,_=g,D=w,O=S,L=A,M=I,H=C;for(let re=0;re<8;re+=2)X^=Ie(U+O|0,7),x^=Ie(X+U|0,9),O^=Ie(x+X|0,13),U^=Ie(O+x|0,18),k^=Ie(P+F|0,7),L^=Ie(k+P|0,9),F^=Ie(L+k|0,13),P^=Ie(F+L|0,18),M^=Ie(_+E|0,7),T^=Ie(M+_|0,9),E^=Ie(T+M|0,13),_^=Ie(E+T|0,18),j^=Ie(H+D|0,7),N^=Ie(j+H|0,9),D^=Ie(N+j|0,13),H^=Ie(D+N|0,18),F^=Ie(U+j|0,7),T^=Ie(F+U|0,9),j^=Ie(T+F|0,13),U^=Ie(j+T|0,18),E^=Ie(P+X|0,7),N^=Ie(E+P|0,9),X^=Ie(N+E|0,13),P^=Ie(X+N|0,18),D^=Ie(_+k|0,7),x^=Ie(D+_|0,9),k^=Ie(x+D|0,13),_^=Ie(k+x|0,18),O^=Ie(H+M|0,7),L^=Ie(O+H|0,9),M^=Ie(L+O|0,13),H^=Ie(M+L|0,18);r[o++]=s+U|0,r[o++]=a+F|0,r[o++]=c+T|0,r[o++]=l+j|0,r[o++]=u+X|0,r[o++]=d+P|0,r[o++]=p+E|0,r[o++]=m+N|0,r[o++]=y+x|0,r[o++]=h+k|0,r[o++]=g+_|0,r[o++]=w+D|0,r[o++]=S+O|0,r[o++]=A+L|0,r[o++]=I+M|0,r[o++]=C+H|0}function Ld(e,t,n,i,r){let o=i+0,s=i+16*r;for(let a=0;a<16;a++)n[s+a]=e[t+(2*r-1)*16+a];for(let a=0;a<r;a++,o+=16,t+=16){if(kS(n,s,e,t,n,o),a>0)s+=16;kS(n,o,e,t+=16,n,s)}}function PR(e,t,n){let i=Oc({dkLen:32,asyncTick:10,maxmem:1073742848},n),{N:r,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Fe(r,"N"),Fe(o,"r"),Fe(s,"p"),Fe(a,"dkLen"),Fe(c,"asyncTick"),Fe(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,p=d/4,m=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(r+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let h=Ud(Ke,e,t,{c:1,dkLen:d*s}),g=Ec(h),w=Ec(new Uint8Array(d*r)),S=Ec(new Uint8Array(d)),A=()=>{};if(u){let I=2*r*s,C=Math.max(Math.floor(I/1e4),1),U=0;A=()=>{if(U++,u&&(!(U%C)||U===I))u(U/I)}}return{N:r,r:o,p:s,dkLen:a,blockSize32:p,V:w,B32:g,B:h,tmp:S,blockMixCb:A,asyncTick:c}}function CR(e,t,n,i,r){let o=Ud(Ke,e,n,{c:1,dkLen:t});return gt(n,i,r),o}function Bd(e,t,n){let{N:i,r,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:p}=PR(e,t,n);wd(l);for(let m=0;m<o;m++){let y=a*m;for(let h=0;h<a;h++)c[h]=l[y+h];for(let h=0,g=0;h<i-1;h++)Ld(c,g,c,g+=a,r),p();Ld(c,(i-1)*a,l,y,r),p();for(let h=0;h<i;h++){let g=(l[y+a-16]&i-1)>>>0;for(let w=0;w<a;w++)d[w]=l[y+w]^c[g*a+w];Ld(d,0,l,y,r),p()}}return wd(l),CR(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function NR(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Lc(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Zi(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ye(e,t,n=""){let i=NR(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function jd(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function ES(e,t,n=!1){Ye(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(n&&!Fi(e))throw Error("invalid output, must be aligned")}function pr(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function er(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function DR(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Yn=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),zR=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var UR=(e)=>{for(let t=0;t<e.length;t++)e[t]=zR(e[t]);return e},zr=Yn?(e)=>e:UR;function IS(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function OS(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function AS(e,t,n){let i=t,r=n||(()=>[]),o=(a,c)=>i(c,...r(a)).update(a).digest(),s=i(new Uint8Array(e),...r(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var TS=(e,t)=>{function n(i,...r){if(Ye(i,void 0,"key"),e.nonceLength!==void 0){let u=r[0];Ye(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&r[1]!==void 0)Ye(r[1],void 0,"AAD");let s=t(i,...r),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Ye(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ye(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Ye(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(n,e),n};function bs(e,t,n=!0){if(t===void 0)return new Uint8Array(e);if(Ye(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(n&&!Fi(t))throw Error("invalid output, must be aligned");return t}function RS(e,t,n){Zi(e),Zi(t),Lc(n);let i=new Uint8Array(16),r=DR(i);return r.setBigUint64(0,BigInt(t),n),r.setBigUint64(8,BigInt(e),n),i}function Fi(e){return e.byteOffset%4===0}function Ki(e){return Uint8Array.from(Ye(e))}var CS=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),LR=(()=>zr(pr(CS("expand 16-byte k"))))(),BR=(()=>zr(pr(CS("expand 32-byte k"))))();function Oe(e,t){return e<<t|e>>>32-t}var vs=64,jR=16,Md=(()=>4294967295)(),PS=Uint32Array.of();function MR(e,t,n,i,r,o,s,a){let c=r.length,l=new Uint8Array(vs),u=pr(l),d=Yn&&Fi(r)&&Fi(o),p=d?pr(r):PS,m=d?pr(o):PS;if(!Yn){for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),zr(u),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}return}for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);if(d&&h===vs){let g=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let w=0,S;w<jR;w++)S=g+w,m[S]=p[S]^u[w];y+=vs;continue}for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}}function NS(e,t){let{allowShortKeys:n,extendNonceFn:i,counterLength:r,counterRight:o,rounds:s}=IS({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Zi(r),Zi(s),Lc(o),Lc(n),(a,c,l,u,d=0)=>{Ye(a,void 0,"key"),Ye(c,void 0,"nonce"),Ye(l,void 0,"data");let p=l.length;if(u=bs(p,u,!1),Zi(d),d<0||d>=Md)throw Error("arx: counter overflow");let m=[],y=a.length,h,g;if(y===32)m.push(h=Ki(a)),g=BR;else if(y===16&&n)h=new Uint8Array(32),h.set(a),h.set(a,16),g=LR,m.push(h);else throw Ye(a,32,"arx key"),Error("invalid key size");if(!Yn||!Fi(c))m.push(c=Ki(c));let w=pr(h);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let I=c.subarray(0,16);if(Yn)i(g,w,pr(I),w);else{let C=zr(Uint32Array.from(g));i(C,w,pr(I),w),er(C),zr(w)}c=c.subarray(16)}else if(!Yn)zr(w);let S=16-r;if(S!==c.length)throw Error(`arx: nonce must be ${S} or 16 bytes`);if(S!==12){let I=new Uint8Array(12);I.set(c,o?0:12-c.length),c=I,m.push(c)}let A=zr(pr(c));try{return MR(e,g,w,A,l,u,d,s),u}finally{er(...m)}}}function nt(e,t){return e[t++]&255|(e[t++]&255)<<8}class DS{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ki(Ye(e,32,"key"));let t=nt(e,0),n=nt(e,2),i=nt(e,4),r=nt(e,6),o=nt(e,8),s=nt(e,10),a=nt(e,12),c=nt(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|r<<9)&8191,this.r[4]=(r>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=nt(e,16+2*l)}process(e,t,n=!1){let i=n?0:2048,{h:r,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],p=o[6],m=o[7],y=o[8],h=o[9],g=nt(e,t+0),w=nt(e,t+2),S=nt(e,t+4),A=nt(e,t+6),I=nt(e,t+8),C=nt(e,t+10),U=nt(e,t+12),F=nt(e,t+14),T=r[0]+(g&8191),j=r[1]+((g>>>13|w<<3)&8191),X=r[2]+((w>>>10|S<<6)&8191),P=r[3]+((S>>>7|A<<9)&8191),E=r[4]+((A>>>4|I<<12)&8191),N=r[5]+(I>>>1&8191),x=r[6]+((I>>>14|C<<2)&8191),k=r[7]+((C>>>11|U<<5)&8191),_=r[8]+((U>>>8|F<<8)&8191),D=r[9]+(F>>>5|i),O=0,L=O+T*s+j*(5*h)+X*(5*y)+P*(5*m)+E*(5*p);O=L>>>13,L&=8191,L+=N*(5*d)+x*(5*u)+k*(5*l)+_*(5*c)+D*(5*a),O+=L>>>13,L&=8191;let M=O+T*a+j*s+X*(5*h)+P*(5*y)+E*(5*m);O=M>>>13,M&=8191,M+=N*(5*p)+x*(5*d)+k*(5*u)+_*(5*l)+D*(5*c),O+=M>>>13,M&=8191;let H=O+T*c+j*a+X*s+P*(5*h)+E*(5*y);O=H>>>13,H&=8191,H+=N*(5*m)+x*(5*p)+k*(5*d)+_*(5*u)+D*(5*l),O+=H>>>13,H&=8191;let re=O+T*l+j*c+X*a+P*s+E*(5*h);O=re>>>13,re&=8191,re+=N*(5*y)+x*(5*m)+k*(5*p)+_*(5*d)+D*(5*u),O+=re>>>13,re&=8191;let ae=O+T*u+j*l+X*c+P*a+E*s;O=ae>>>13,ae&=8191,ae+=N*(5*h)+x*(5*y)+k*(5*m)+_*(5*p)+D*(5*d),O+=ae>>>13,ae&=8191;let le=O+T*d+j*u+X*l+P*c+E*a;O=le>>>13,le&=8191,le+=N*s+x*(5*h)+k*(5*y)+_*(5*m)+D*(5*p),O+=le>>>13,le&=8191;let pe=O+T*p+j*d+X*u+P*l+E*c;O=pe>>>13,pe&=8191,pe+=N*a+x*s+k*(5*h)+_*(5*y)+D*(5*m),O+=pe>>>13,pe&=8191;let ye=O+T*m+j*p+X*d+P*u+E*l;O=ye>>>13,ye&=8191,ye+=N*c+x*a+k*s+_*(5*h)+D*(5*y),O+=ye>>>13,ye&=8191;let he=O+T*y+j*m+X*p+P*d+E*u;O=he>>>13,he&=8191,he+=N*l+x*c+k*a+_*s+D*(5*h),O+=he>>>13,he&=8191;let ge=O+T*h+j*y+X*m+P*p+E*d;O=ge>>>13,ge&=8191,ge+=N*u+x*l+k*c+_*a+D*s,O+=ge>>>13,ge&=8191,O=(O<<2)+O|0,O=O+L|0,L=O&8191,O=O>>>13,M+=O,r[0]=L,r[1]=M,r[2]=H,r[3]=re,r[4]=ae,r[5]=le,r[6]=pe,r[7]=ye,r[8]=he,r[9]=ge}finalize(){let{h:e,pad:t}=this,n=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,n[0]=e[0]+5,i=n[0]>>>13,n[0]&=8191;for(let s=1;s<10;s++)n[s]=e[s]+i,i=n[s]>>>13,n[s]&=8191;n[9]-=8192;let r=(i^1)-1;for(let s=0;s<10;s++)n[s]&=r;r=~r;for(let s=0;s<10;s++)e[s]=e[s]&r|n[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;er(n)}update(e){jd(this),Ye(e),e=Ki(e);let{buffer:t,blockLen:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(n-this.pos,i-r);if(o===n){for(;n<=i-r;r+=n)this.process(e,r);continue}if(t.set(e.subarray(r,r+o),this.pos),this.pos+=o,r+=o,this.pos===n)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,er(this.h,this.r,this.buffer,this.pad)}digestInto(e){jd(this),ES(e,this),this.finished=!0;let{buffer:t,h:n}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let r=0;for(let o=0;o<8;o++)e[r++]=n[o]>>>0,e[r++]=n[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}}var zS=AS(32,(e)=>new DS(e));function ZR(e,t,n,i,r,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],p=t[2],m=t[3],y=t[4],h=t[5],g=t[6],w=t[7],S=r,A=n[0],I=n[1],C=n[2],U=s,F=a,T=c,j=l,X=u,P=d,E=p,N=m,x=y,k=h,_=g,D=w,O=S,L=A,M=I,H=C;for(let ae=0;ae<o;ae+=2)U=U+X|0,O=Oe(O^U,16),x=x+O|0,X=Oe(X^x,12),U=U+X|0,O=Oe(O^U,8),x=x+O|0,X=Oe(X^x,7),F=F+P|0,L=Oe(L^F,16),k=k+L|0,P=Oe(P^k,12),F=F+P|0,L=Oe(L^F,8),k=k+L|0,P=Oe(P^k,7),T=T+E|0,M=Oe(M^T,16),_=_+M|0,E=Oe(E^_,12),T=T+E|0,M=Oe(M^T,8),_=_+M|0,E=Oe(E^_,7),j=j+N|0,H=Oe(H^j,16),D=D+H|0,N=Oe(N^D,12),j=j+N|0,H=Oe(H^j,8),D=D+H|0,N=Oe(N^D,7),U=U+P|0,H=Oe(H^U,16),_=_+H|0,P=Oe(P^_,12),U=U+P|0,H=Oe(H^U,8),_=_+H|0,P=Oe(P^_,7),F=F+E|0,O=Oe(O^F,16),D=D+O|0,E=Oe(E^D,12),F=F+E|0,O=Oe(O^F,8),D=D+O|0,E=Oe(E^D,7),T=T+N|0,L=Oe(L^T,16),x=x+L|0,N=Oe(N^x,12),T=T+N|0,L=Oe(L^T,8),x=x+L|0,N=Oe(N^x,7),j=j+X|0,M=Oe(M^j,16),k=k+M|0,X=Oe(X^k,12),j=j+X|0,M=Oe(M^j,8),k=k+M|0,X=Oe(X^k,7);let re=0;i[re++]=s+U|0,i[re++]=a+F|0,i[re++]=c+T|0,i[re++]=l+j|0,i[re++]=u+X|0,i[re++]=d+P|0,i[re++]=p+E|0,i[re++]=m+N|0,i[re++]=y+x|0,i[re++]=h+k|0,i[re++]=g+_|0,i[re++]=w+D|0,i[re++]=S+O|0,i[re++]=A+L|0,i[re++]=I+M|0,i[re++]=C+H|0}var FR=NS(ZR,{counterRight:!1,counterLength:4,allowShortKeys:!1});var KR=new Uint8Array(16),US=(e,t)=>{e.update(t);let n=t.length%16;if(n)e.update(KR.subarray(n))},qR=new Uint8Array(32);function LS(e,t,n,i,r){if(r!==void 0)Ye(r,void 0,"AAD");let o=e(t,n,qR),s=RS(i.length,r?r.length:0,!0),a=zS.create(o);if(r)US(a,r);US(a,i),a.update(s);let c=a.digest();return er(o,s),c}var HR=(e)=>(t,n,i)=>({encrypt(o,s){let a=o.length;s=bs(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,n,c,c,1);let l=LS(e,t,n,c,i);return s.set(l,a),er(l),s},decrypt(o,s){s=bs(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=LS(e,t,n,a,i);if(!OS(c,l))throw er(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,n,s,s,1),er(l),s}}),qt=TS({blockSize:64,nonceLength:12,tagLength:16},HR(FR));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function qi(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Xe(e,t=""){if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw Error(`${n}expected integer >= 0, got ${e}`)}}function ve(e,t,n=""){let i=qi(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function Ht(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Xe(e.outputLen),Xe(e.blockLen)}function Lr(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bc(e,t){ve(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw Error('"digestInto() output" expected to be of length >='+n)}function jc(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function It(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function tr(e,t){return e<<32-t|e>>>t}var VR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function YR(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function WR(e){for(let t=0;t<e.length;t++)e[t]=YR(e[t]);return e}var Zd=VR?(e)=>e:WR,jS=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),GR=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Wn(e){if(ve(e),jS)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=GR[e[n]];return t}var Ur={_0:48,_9:57,A:65,F:70,a:97,f:102};function BS(e){if(e>=Ur._0&&e<=Ur._9)return e-Ur._0;if(e>=Ur.A&&e<=Ur.F)return e-(Ur.A-10);if(e>=Ur.a&&e<=Ur.f)return e-(Ur.a-10);return}function Gn(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(jS)return Uint8Array.fromHex(e);let t=e.length,n=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=BS(e.charCodeAt(o)),a=BS(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function qe(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];ve(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Hi(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function cn(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ln=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Kd=BigInt(0),Fd=BigInt(1);function xs(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw Error(n+"expected boolean, got type="+typeof e)}return e}function MS(e){if(typeof e==="bigint"){if(!Zc(e))throw Error("positive bigint expected, got "+e)}else Xe(e);return e}function ws(e){let t=MS(e).toString(16);return t.length&1?"0"+t:t}function ZS(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Kd:BigInt("0x"+e)}function un(e){return ZS(Wn(e))}function fn(e){return ZS(Wn(Fc(ve(e)).reverse()))}function Vi(e,t){Xe(t),e=MS(e);let n=Gn(e.toString(16).padStart(t*2,"0"));if(n.length!==t)throw Error("number too large");return n}function Ss(e,t){return Vi(e,t).reverse()}function Fc(e){return Uint8Array.from(e)}function dn(e){return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var Zc=(e)=>typeof e==="bigint"&&Kd<=e;function JR(e,t,n){return Zc(e)&&Zc(t)&&Zc(n)&&t<=e&&e<n}function _s(e,t,n,i){if(!JR(t,n,i))throw Error("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function qd(e){let t;for(t=0;e>Kd;e>>=Fd,t+=1);return t}var $s=(e)=>(Fd<<BigInt(e))-Fd;function FS(e,t,n){if(Xe(e,"hashLen"),Xe(t,"qByteLen"),typeof n!=="function")throw Error("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,qe(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let S=c.slice();w.push(S),g+=c.length}return qe(...w)};return(g,w)=>{d(),m(g);let S=void 0;while(!(S=w(y())))m();return d(),S}}function Jn(e,t={},n={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}function Hd(e){let t=new WeakMap;return(n,...i)=>{let r=t.get(n);if(r!==void 0)return r;let o=e(n,...i);return t.set(n,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bt=BigInt(0),ft=BigInt(1),Xn=BigInt(2),HS=BigInt(3),VS=BigInt(4),YS=BigInt(5),XR=BigInt(7),WS=BigInt(8),QR=BigInt(9),GS=BigInt(16);function yt(e,t){let n=e%t;return n>=bt?n:t+n}function Vt(e,t,n){let i=e;while(t-- >bt)i*=i,i%=n;return i}function KS(e,t){if(e===bt)throw Error("invert: expected non-zero number");if(t<=bt)throw Error("invert: expected positive modulus, got "+t);let n=yt(e,t),i=t,r=bt,o=ft,s=ft,a=bt;while(n!==bt){let l=i/n,u=i%n,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==ft)throw Error("invert: does not exist");return yt(r,t)}function Vd(e,t,n){if(!e.eql(e.sqr(t),n))throw Error("Cannot find square root")}function JS(e,t){let n=(e.ORDER+ft)/VS,i=e.pow(t,n);return Vd(e,i,t),i}function eP(e,t){let n=(e.ORDER-YS)/WS,i=e.mul(t,Xn),r=e.pow(i,n),o=e.mul(t,r),s=e.mul(e.mul(o,Xn),r),a=e.mul(o,e.sub(s,e.ONE));return Vd(e,a,t),a}function tP(e){let t=Kc(e),n=XS(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+XR)/GS;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,r),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,m),u=a.cmov(p,d,y);let h=a.eql(a.sqr(u),c),g=a.cmov(l,u,h);return Vd(a,g,c),g}}function XS(e){if(e<HS)throw Error("sqrt is not defined for small field");let t=e-ft,n=0;while(t%Xn===bt)t/=Xn,n++;let i=Xn,r=Kc(e);while(qS(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return JS;let o=r.pow(i,t),s=(t+ft)/Xn;return function(c,l){if(c.is0(l))return l;if(qS(c,l)!==1)throw Error("Cannot find square root");let u=n,d=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,h=c.sqr(p);while(!c.eql(h,c.ONE))if(y++,h=c.sqr(h),y===u)throw Error("Cannot find square root");let g=ft<<BigInt(u-y-1),w=c.pow(d,g);u=y,d=c.sqr(w),p=c.mul(p,d),m=c.mul(m,w)}return m}}function rP(e){if(e%VS===HS)return JS;if(e%WS===YS)return eP;if(e%GS===QR)return tP(e);return XS(e)}var nP=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Yd(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=nP.reduce((i,r)=>(i[r]="function",i),t);return Jn(e,n),e}function iP(e,t,n){if(n<bt)throw Error("invalid exponent, negatives unsupported");if(n===bt)return e.ONE;if(n===ft)return t;let i=e.ONE,r=t;while(n>bt){if(n&ft)i=e.mul(i,r);r=e.sqr(r),n>>=ft}return i}function ks(e,t,n=!1){let i=Array(t.length).fill(n?e.ZERO:void 0),r=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(r);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function qS(e,t){let n=(e.ORDER-ft)/Xn,i=e.pow(t,n),r=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!r&&!o&&!s)throw Error("invalid Legendre symbol result");return r?1:o?0:-1}function oP(e,t){if(t!==void 0)Xe(t);let n=t!==void 0?t:e.toString(2).length,i=Math.ceil(n/8);return{nBitLength:n,nByteLength:i}}class QS{ORDER;BITS;BYTES;isLE;ZERO=bt;ONE=ft;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=bt)throw Error("invalid field: expected ORDER > 0, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=oP(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return yt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return bt<=e&&e<this.ORDER}is0(e){return e===bt}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&ft)===ft}neg(e){return yt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return yt(e*e,this.ORDER)}add(e,t){return yt(e+t,this.ORDER)}sub(e,t){return yt(e-t,this.ORDER)}mul(e,t){return yt(e*t,this.ORDER)}pow(e,t){return iP(this,e,t)}div(e,t){return yt(e*KS(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return KS(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=rP(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Ss(e,this.BYTES):Vi(e,this.BYTES)}fromBytes(e,t=!1){ve(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?fn(e):un(e);if(s)a=yt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ks(this,e)}cmov(e,t,n){return n?t:e}}function Kc(e,t={}){return new QS(e,t)}function e_(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function Wd(e){let t=e_(e);return t+Math.ceil(t/2)}function t_(e,t,n=!1){ve(e);let i=e.length,r=e_(t),o=Wd(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?fn(e):un(e),a=yt(s,t-ft)+ft;return n?Ss(a,r):Vi(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Yi=BigInt(0),Qn=BigInt(1);function Es(e,t){let n=t.negate();return e?n:t}function Qd(e,t){let n=ks(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function o_(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Gd(e,t){o_(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=$s(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function r_(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=Qn;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Jd=new WeakMap,s_=new WeakMap;function Xd(e){return s_.get(e)||1}function n_(e){if(e!==Yi)throw Error("invalid wNAF")}class ep{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>Yi){if(t&Qn)n=n.add(i);i=i.double(),t>>=Qn}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Gd(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Gd(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=r_(n,s,o);if(n=a,l)r=r.add(Es(d,t[p]));else i=i.add(Es(u,t[c]))}return n_(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Gd(e,this.bits);for(let o=0;o<r.windows;o++){if(n===Yi)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=r_(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return n_(n),i}getPrecomputes(e,t,n){let i=Jd.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Jd.set(t,i)}}return i}cached(e,t,n){let i=Xd(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Xd(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){o_(t,this.bits),s_.set(e,t),Jd.delete(e)}hasCache(e){return Xd(e)!==1}}function a_(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>Yi||i>Yi){if(n&Qn)o=o.add(r);if(i&Qn)s=s.add(r);r=r.double(),n>>=Qn,i>>=Qn}return{p1:o,p2:s}}function i_(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Yd(t),t}else return Kc(e,{isLE:n})}function c_(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>Yi))throw Error(`CURVE.${c} must be positive bigint`)}let r=i_(t.p,n.Fp,i),o=i_(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function qc(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Is=BigInt(0),Wi=BigInt(1),Hc=BigInt(2);function sP(e){return Jn(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function l_(e){let t=sP(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||cn,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Hc**BigInt(254):Hc**BigInt(447),y=a?BigInt(8)*Hc**BigInt(251)-Wi:BigInt(4)*Hc**BigInt(445)-Wi,h=m+y+Wi,g=(x)=>yt(x,n),w=S(d);function S(x){return Ss(g(x),u)}function A(x){let k=Fc(ve(x,u,"uCoordinate"));if(a)k[31]&=127;return g(fn(k))}function I(x){return fn(r(Fc(ve(x,u,"scalar"))))}function C(x,k){let _=X(A(k),I(x));if(_===Is)throw Error("invalid private or public key received");return S(_)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,_){let D=g(x*(k-_));return k=g(k-D),_=g(_+D),{x_2:k,x_3:_}}function X(x,k){_s("u",x,Is,n),_s("scalar",k,m,h);let _=k,D=x,O=Wi,L=Is,M=x,H=Wi,re=Is;for(let le=BigInt(l-1);le>=Is;le--){let pe=_>>le&Wi;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let P={secretKey:u,publicKey:u,seed:u},E=(x=c(u))=>(ve(x,P.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze({keygen:qc(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:P})}class tp{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(Ht(e),ve(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),It(i)}update(e){return Lr(this),this.iHash.update(e),this}digestInto(e){Lr(this),ve(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Gi=(e,t,n)=>new tp(e,t).update(n).digest();Gi.create=(e,t)=>new tp(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u_=(e,t)=>(e+(e>=0?t:-t)/d_)/t;function aP(e,t,n){let[[i,r],[o,s]]=t,a=u_(s*e,n),c=u_(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<Br,p=u<Br;if(d)l=-l;if(p)u=-u;let m=$s(Math.ceil(qd(n)/2))+Ji;if(l<Br||l>=m||u<Br||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:p,k2:u}}function np(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function rp(e,t){let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(xs(n.lowS,"lowS"),xs(n.prehash,"prehash"),n.format!==void 0)np(n.format);return n}class f_ extends Error{constructor(e=""){super(e)}}var pn={Err:f_,_tlv:{encode:(e,t)=>{let{Err:n}=pn;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=ws(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?ws(r.length/2|128):"";return ws(e)+o+r+t},decode(e,t){let{Err:n}=pn,i=0;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=pn;if(e<Br)throw new t("integer: negative integers are not allowed");let n=ws(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=pn;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return un(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=pn,r=ve(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=pn,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}},Br=BigInt(0),Ji=BigInt(1),d_=BigInt(2),Vc=BigInt(3),cP=BigInt(4);function ip(e,t={}){let n=c_("weierstrass",e,t),{Fp:i,Fn:r}=n,o=n.CURVE,{h:s,n:a}=o;Jn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=m_(i,r);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(E,N,x){let{x:k,y:_}=N.toAffine(),D=i.toBytes(k);if(xs(x,"isCompressed"),x){u();let O=!i.isOdd(_);return qe(p_(O),D)}else return qe(Uint8Array.of(4),D,i.toBytes(_))}function p(E){ve(E,void 0,"Point");let{publicKey:N,publicKeyUncompressed:x}=l,k=E.length,_=E[0],D=E.subarray(1);if(k===N&&(_===2||_===3)){let O=i.fromBytes(D);if(!i.isValid(O))throw Error("bad point: is not on curve, wrong x");let L=h(O),M;try{M=i.sqrt(L)}catch(ae){let le=ae instanceof Error?": "+ae.message:"";throw Error("bad point: is not on curve, sqrt error"+le)}u();let H=i.isOdd(M);if((_&1)===1!==H)M=i.neg(M);return{x:O,y:M}}else if(k===x&&_===4){let O=i.BYTES,L=i.fromBytes(D.subarray(0,O)),M=i.fromBytes(D.subarray(O,O*2));if(!g(L,M))throw Error("bad point: is not on curve");return{x:L,y:M}}else throw Error(`bad point: got length ${k}, expected compressed=${N} or uncompressed=${x}`)}let m=t.toBytes||d,y=t.fromBytes||p;function h(E){let N=i.sqr(E),x=i.mul(N,E);return i.add(i.add(x,i.mul(E,o.a)),o.b)}function g(E,N){let x=i.sqr(N),k=h(E);return i.eql(x,k)}if(!g(o.Gx,o.Gy))throw Error("bad curve params: generator point");let w=i.mul(i.pow(o.a,Vc),cP),S=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(w,S)))throw Error("bad curve params: a or b");function A(E,N,x=!1){if(!i.isValid(N)||x&&i.is0(N))throw Error(`bad point coordinate ${E}`);return N}function I(E){if(!(E instanceof j))throw Error("Weierstrass Point expected")}function C(E){if(!c||!c.basises)throw Error("no endo");return aP(E,c.basises,r.ORDER)}let U=Hd((E,N)=>{let{X:x,Y:k,Z:_}=E;if(i.eql(_,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(_);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(_,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}),F=Hd((E)=>{if(E.is0()){if(t.allowInfinityPoint&&!i.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:N,y:x}=E.toAffine();if(!i.isValid(N)||!i.isValid(x))throw Error("bad point: x or y not field elements");if(!g(N,x))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function T(E,N,x,k,_){return x=new j(i.mul(x.X,E),x.Y,x.Z),N=Es(k,N),x=Es(_,x),N.add(x)}class j{static BASE=new j(o.Gx,o.Gy,i.ONE);static ZERO=new j(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(E,N,x){this.X=A("x",E),this.Y=A("y",N,!0),this.Z=A("z",x),Object.freeze(this)}static CURVE(){return o}static fromAffine(E){let{x:N,y:x}=E||{};if(!E||!i.isValid(N)||!i.isValid(x))throw Error("invalid affine point");if(E instanceof j)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(x))return j.ZERO;return new j(N,x,i.ONE)}static fromBytes(E){let N=j.fromAffine(y(ve(E,void 0,"point")));return N.assertValidity(),N}static fromHex(E){return j.fromBytes(Gn(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,N=!0){if(P.createCache(this,E),!N)this.multiply(Vc);return this}assertValidity(){F(this)}hasEvenY(){let{y:E}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(E)}equals(E){I(E);let{X:N,Y:x,Z:k}=this,{X:_,Y:D,Z:O}=E,L=i.eql(i.mul(N,O),i.mul(_,k)),M=i.eql(i.mul(x,O),i.mul(D,k));return L&&M}negate(){return new j(this.X,i.neg(this.Y),this.Z)}double(){let{a:E,b:N}=o,x=i.mul(N,Vc),{X:k,Y:_,Z:D}=this,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=i.mul(k,k),re=i.mul(_,_),ae=i.mul(D,D),le=i.mul(k,_);return le=i.add(le,le),M=i.mul(k,D),M=i.add(M,M),O=i.mul(E,M),L=i.mul(x,ae),L=i.add(O,L),O=i.sub(re,L),L=i.add(re,L),L=i.mul(O,L),O=i.mul(le,O),M=i.mul(x,M),ae=i.mul(E,ae),le=i.sub(H,ae),le=i.mul(E,le),le=i.add(le,M),M=i.add(H,H),H=i.add(M,H),H=i.add(H,ae),H=i.mul(H,le),L=i.add(L,H),ae=i.mul(_,D),ae=i.add(ae,ae),H=i.mul(ae,le),O=i.sub(O,H),M=i.mul(ae,re),M=i.add(M,M),M=i.add(M,M),new j(O,L,M)}add(E){I(E);let{X:N,Y:x,Z:k}=this,{X:_,Y:D,Z:O}=E,L=i.ZERO,M=i.ZERO,H=i.ZERO,re=o.a,ae=i.mul(o.b,Vc),le=i.mul(N,_),pe=i.mul(x,D),ye=i.mul(k,O),he=i.add(N,x),ge=i.add(_,D);he=i.mul(he,ge),ge=i.add(le,pe),he=i.sub(he,ge),ge=i.add(N,k);let we=i.add(_,O);return ge=i.mul(ge,we),we=i.add(le,ye),ge=i.sub(ge,we),we=i.add(x,k),L=i.add(D,O),we=i.mul(we,L),L=i.add(pe,ye),we=i.sub(we,L),H=i.mul(re,ge),L=i.mul(ae,ye),H=i.add(L,H),L=i.sub(pe,H),H=i.add(pe,H),M=i.mul(L,H),pe=i.add(le,le),pe=i.add(pe,le),ye=i.mul(re,ye),ge=i.mul(ae,ge),pe=i.add(pe,ye),ye=i.sub(le,ye),ye=i.mul(re,ye),ge=i.add(ge,ye),le=i.mul(pe,ge),M=i.add(M,le),le=i.mul(we,ge),L=i.mul(he,L),L=i.sub(L,le),le=i.mul(he,pe),H=i.mul(we,H),H=i.add(H,le),new j(L,M,H)}subtract(E){return this.add(E.negate())}is0(){return this.equals(j.ZERO)}multiply(E){let{endo:N}=t;if(!r.isValidNot0(E))throw Error("invalid scalar: out of range");let x,k,_=(D)=>P.cached(this,D,(O)=>Qd(j,O));if(N){let{k1neg:D,k1:O,k2neg:L,k2:M}=C(E),{p:H,f:re}=_(O),{p:ae,f:le}=_(M);k=re.add(le),x=T(N.beta,H,ae,D,L)}else{let{p:D,f:O}=_(E);x=D,k=O}return Qd(j,[x,k])[0]}multiplyUnsafe(E){let{endo:N}=t,x=this;if(!r.isValid(E))throw Error("invalid scalar: out of range");if(E===Br||x.is0())return j.ZERO;if(E===Ji)return x;if(P.hasCache(this))return this.multiply(E);if(N){let{k1neg:k,k1:_,k2neg:D,k2:O}=C(E),{p1:L,p2:M}=a_(j,x,_,O);return T(N.beta,L,M,k,D)}else return P.unsafe(x,E)}toAffine(E){return U(this,E)}isTorsionFree(){let{isTorsionFree:E}=t;if(s===Ji)return!0;if(E)return E(j,this);return P.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:E}=t;if(s===Ji)return this;if(E)return E(j,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(E=!0){return xs(E,"isCompressed"),this.assertValidity(),m(j,this,E)}toHex(E=!0){return Wn(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let X=r.BITS,P=new ep(j,t.endo?Math.ceil(X/2):X);return j.BASE.precompute(8),j}function p_(e){return Uint8Array.of(e?2:3)}function m_(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function lP(e,t={}){let{Fn:n}=e,i=t.randomBytes||cn,r=Object.assign(m_(e.Fp,n),{seed:Wd(n.ORDER)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m=i(r.seed)){return t_(ve(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r;if(!qi(m))return;if("_lengths"in n&&n._lengths||y===h)return;let w=ve(m,void 0,"key").length;return w===h||w===g}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=qc(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function op(e,t,n={}){Ht(t),Jn(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let i=n.randomBytes||cn,r=n.hmac||((x,k)=>Gi(t,x,k)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m}=lP(e,n),y={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},h=a*d_<o.ORDER;function g(x){let k=a>>Ji;return x>k}function w(x,k){if(!s.isValidNot0(k))throw Error(`invalid signature ${x}: out of range 1..Point.Fn.ORDER`);return k}function S(){if(h)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function A(x,k){np(k);let _=m.signature,D=k==="compact"?_:k==="recovered"?_+1:void 0;return ve(x,D)}class I{r;s;recovery;constructor(x,k,_){if(this.r=w("r",x),this.s=w("s",k),_!=null){if(S(),![0,1,2,3].includes(_))throw Error("invalid recovery id");this.recovery=_}Object.freeze(this)}static fromBytes(x,k=y.format){A(x,k);let _;if(k==="der"){let{r:M,s:H}=pn.toSig(ve(x));return new I(M,H)}if(k==="recovered")_=x[0],k="compact",x=x.subarray(1);let D=m.signature/2,O=x.subarray(0,D),L=x.subarray(D,D*2);return new I(s.fromBytes(O),s.fromBytes(L),_)}static fromHex(x,k){return this.fromBytes(Gn(x),k)}assertRecovery(){let{recovery:x}=this;if(x==null)throw Error("invalid recovery id: must be present");return x}addRecoveryBit(x){return new I(this.r,this.s,x)}recoverPublicKey(x){let{r:k,s:_}=this,D=this.assertRecovery(),O=D===2||D===3?k+a:k;if(!o.isValid(O))throw Error("invalid recovery id: sig.r+curve.n != R.x");let L=o.toBytes(O),M=e.fromBytes(qe(p_((D&1)===0),L)),H=s.inv(O),re=U(ve(x,void 0,"msgHash")),ae=s.create(-re*H),le=s.create(_*H),pe=e.BASE.multiplyUnsafe(ae).add(M.multiplyUnsafe(le));if(pe.is0())throw Error("invalid recovery: point at infinify");return pe.assertValidity(),pe}hasHighS(){return g(this.s)}toBytes(x=y.format){if(np(x),x==="der")return Gn(pn.hexFromSig(this));let{r:k,s:_}=this,D=s.toBytes(k),O=s.toBytes(_);if(x==="recovered")return S(),qe(Uint8Array.of(this.assertRecovery()),D,O);return qe(D,O)}toHex(x){return Wn(this.toBytes(x))}}let C=n.bits2int||function(k){if(k.length>8192)throw Error("input is too large");let _=un(k),D=k.length*8-c;return D>0?_>>BigInt(D):_},U=n.bits2int_modN||function(k){return s.create(C(k))},F=$s(c);function T(x){return _s("num < 2^"+c,x,Br,F),s.toBytes(x)}function j(x,k){return ve(x,void 0,"message"),k?ve(t(x),void 0,"prehashed message"):x}function X(x,k,_){let{lowS:D,prehash:O,extraEntropy:L}=rp(_,y);x=j(x,O);let M=U(x),H=s.fromBytes(k);if(!s.isValidNot0(H))throw Error("invalid private key");let re=[T(H),T(M)];if(L!=null&&L!==!1){let ye=L===!0?i(m.secretKey):L;re.push(ve(ye,void 0,"extraEntropy"))}let ae=qe(...re),le=M;function pe(ye){let he=C(ye);if(!s.isValidNot0(he))return;let ge=s.inv(he),we=e.BASE.multiply(he).toAffine(),Ne=s.create(we.x);if(Ne===Br)return;let ze=s.create(ge*s.create(le+Ne*H));if(ze===Br)return;let ct=(we.x===Ne?0:2)|Number(we.y&Ji),lt=ze;if(D&&g(ze))lt=s.neg(ze),ct^=1;return new I(Ne,lt,h?void 0:ct)}return{seed:ae,k2sig:pe}}function P(x,k,_={}){let{seed:D,k2sig:O}=X(x,k,_);return FS(t.outputLen,s.BYTES,r)(D,O).toBytes(_.format)}function E(x,k,_,D={}){let{lowS:O,prehash:L,format:M}=rp(D,y);if(_=ve(_,void 0,"publicKey"),k=j(k,L),!qi(x)){let H=x instanceof I?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+H)}A(x,M);try{let H=I.fromBytes(x,M),re=e.fromBytes(_);if(O&&H.hasHighS())return!1;let{r:ae,s:le}=H,pe=U(k),ye=s.inv(le),he=s.create(pe*ye),ge=s.create(ae*ye),we=e.BASE.multiplyUnsafe(he).add(re.multiplyUnsafe(ge));if(we.is0())return!1;return s.create(we.x)===ae}catch(H){return!1}}function N(x,k,_={}){let{prehash:D}=rp(_,y);return k=j(k,D),I.fromBytes(x,"recovered").recoverPublicKey(k).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m,Point:e,sign:P,verify:E,recoverPublicKey:N,Signature:I,hash:t})}function h_(e,t,n){return e&t^~e&n}function g_(e,t,n){return e&t^e&n^t&n}class Yc{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mc(this.buffer)}update(e){Lr(this),ve(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mc(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Lr(this),Bc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,It(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var jr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var it=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Wc=BigInt(4294967295),y_=BigInt(32);function uP(e,t=!1){if(t)return{h:Number(e&Wc),l:Number(e>>y_&Wc)};return{h:Number(e>>y_&Wc)|0,l:Number(e&Wc)|0}}function Gc(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=uP(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var sp=(e,t,n)=>e>>>n,ap=(e,t,n)=>e<<32-n|t>>>n,ei=(e,t,n)=>e>>>n|t<<32-n,ti=(e,t,n)=>e<<32-n|t>>>n,Os=(e,t,n)=>e<<64-n|t>>>n-32,As=(e,t,n)=>e>>>n-32|t<<64-n;var b_=(e,t,n)=>e<<n|t>>>32-n,v_=(e,t,n)=>t<<n|e>>>32-n,x_=(e,t,n)=>t<<n-32|e>>>64-n,w_=(e,t,n)=>e<<n-32|t>>>64-n;function mr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var S_=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),__=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,$_=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),k_=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,E_=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),I_=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var dP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),mn=new Uint32Array(64);class O_ extends Yc{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)mn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=mn[u-15],p=mn[u-2],m=tr(d,7)^tr(d,18)^d>>>3,y=tr(p,17)^tr(p,19)^p>>>10;mn[u]=y+mn[u-7]+m+mn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=tr(s,6)^tr(s,11)^tr(s,25),p=l+d+h_(s,a,c)+dP[u]+mn[u]|0,y=(tr(n,2)^tr(n,13)^tr(n,22))+g_(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){It(mn)}destroy(){this.set(0,0,0,0,0,0,0,0),It(this.buffer)}}class A_ extends O_{A=jr[0]|0;B=jr[1]|0;C=jr[2]|0;D=jr[3]|0;E=jr[4]|0;F=jr[5]|0;G=jr[6]|0;H=jr[7]|0;constructor(){super(32)}}var T_=(()=>Gc(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),pP=(()=>T_[0])(),mP=(()=>T_[1])(),hn=new Uint32Array(80),gn=new Uint32Array(80);class R_ extends Yc{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let S=0;S<16;S++,t+=4)hn[S]=e.getUint32(t),gn[S]=e.getUint32(t+=4);for(let S=16;S<80;S++){let A=hn[S-15]|0,I=gn[S-15]|0,C=ei(A,I,1)^ei(A,I,8)^sp(A,I,7),U=ti(A,I,1)^ti(A,I,8)^ap(A,I,7),F=hn[S-2]|0,T=gn[S-2]|0,j=ei(F,T,19)^Os(F,T,61)^sp(F,T,6),X=ti(F,T,19)^As(F,T,61)^ap(F,T,6),P=$_(U,X,gn[S-7],gn[S-16]),E=k_(P,C,j,hn[S-7],hn[S-16]);hn[S]=E|0,gn[S]=P|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let S=0;S<80;S++){let A=ei(u,d,14)^ei(u,d,18)^Os(u,d,41),I=ti(u,d,14)^ti(u,d,18)^As(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=E_(w,I,U,mP[S],gn[S]),T=I_(F,g,A,C,pP[S],hn[S]),j=F|0,X=ei(n,i,28)^Os(n,i,34)^Os(n,i,39),P=ti(n,i,28)^As(n,i,34)^As(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=mr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=S_(j,P,N);n=__(x,T,X,E),i=x|0}({h:n,l:i}=mr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=mr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=mr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=mr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=mr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=mr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=mr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=mr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){It(hn,gn)}destroy(){It(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class P_ extends R_{Ah=it[0]|0;Al=it[1]|0;Bh=it[2]|0;Bl=it[3]|0;Ch=it[4]|0;Cl=it[5]|0;Dh=it[6]|0;Dl=it[7]|0;Eh=it[8]|0;El=it[9]|0;Fh=it[10]|0;Fl=it[11]|0;Gh=it[12]|0;Gl=it[13]|0;Hh=it[14]|0;Hl=it[15]|0;constructor(){super(48)}}var Jc=Hi(()=>new A_,ln(1));var C_=Hi(()=>new P_,ln(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hP=BigInt(1),N_=BigInt(2),gP=BigInt(3),yP=BigInt(5),Uq=BigInt(8),D_=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function bP(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=D_,a=e*e%o*e%o,c=Vt(a,N_,o)*a%o,l=Vt(c,hP,o)*e%o,u=Vt(l,yP,o)*l%o,d=Vt(u,t,o)*u%o,p=Vt(d,n,o)*d%o,m=Vt(p,i,o)*p%o,y=Vt(m,r,o)*m%o,h=Vt(y,r,o)*m%o,g=Vt(h,t,o)*u%o;return{pow_p_5_8:Vt(g,N_,o)*e%o,b2:a}}function vP(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var z_=(()=>{let e=D_;return l_({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=bP(t);return yt(Vt(n,gP,e)*i,e)},adjustScalarBytes:vP})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var xP=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),wP=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var SP=ip(xP),cp=op(SP,Jc);var _P=ip(wP),U_=op(_P,C_);function B_(e,t,n){if(Ht(e),n===void 0)n=new Uint8Array(e.outputLen);return Gi(e,n,t)}var lp=Uint8Array.of(0),L_=Uint8Array.of();function j_(e,t,n,i=32){Ht(e),Xe(i,"length");let r=e.outputLen;if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=L_;else ve(n,void 0,"info");let s=new Uint8Array(o*r),a=Gi.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)lp[0]=u+1,c.update(u===0?L_:l).update(n).update(lp).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),It(l,lp),s.slice(0,i)}var $P=BigInt(0),Ts=BigInt(1),kP=BigInt(2),EP=BigInt(7),IP=BigInt(256),OP=BigInt(113),F_=[],K_=[],q_=[];for(let e=0,t=Ts,n=1,i=0;e<24;e++){[n,i]=[i,(2*n+3*i)%5],F_.push(2*(5*i+n)),K_.push((e+1)*(e+2)/2%64);let r=$P;for(let o=0;o<7;o++)if(t=(t<<Ts^(t>>EP)*OP)%IP,t&kP)r^=Ts<<(Ts<<BigInt(o))-Ts;q_.push(r)}var H_=Gc(q_,!0),AP=H_[0],TP=H_[1],M_=(e,t,n)=>n>32?x_(e,t,n):b_(e,t,n),Z_=(e,t,n)=>n>32?w_(e,t,n):v_(e,t,n);function RP(e,t=24){let n=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)n[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=n[c],u=n[c+1],d=M_(l,u,1)^n[a],p=Z_(l,u,1)^n[a+1];for(let m=0;m<50;m+=10)e[s+m]^=d,e[s+m+1]^=p}let r=e[2],o=e[3];for(let s=0;s<24;s++){let a=K_[s],c=M_(r,o,a),l=Z_(r,o,a),u=F_[s];r=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)n[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~n[(a+2)%10]&n[(a+4)%10]}e[0]^=AP[i],e[1]^=TP[i]}It(n)}class Xc{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,n,i=!1,r=24){if(this.blockLen=e,this.suffix=t,this.outputLen=n,this.enableXOF=i,this.rounds=r,Xe(n,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=jc(this.state)}clone(){return this._cloneInto()}keccak(){Zd(this.state32),RP(this.state32,this.rounds),Zd(this.state32),this.posOut=0,this.pos=0}update(e){Lr(this),ve(e);let{blockLen:t,state:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(t-this.pos,i-r);for(let s=0;s<o;s++)n[this.pos++]^=e[r++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:n,blockLen:i}=this;if(e[n]^=t,(t&128)!==0&&n===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Lr(this,!1),ve(e),this.finish();let t=this.state,{blockLen:n}=this;for(let i=0,r=e.length;i<r;){if(this.posOut>=n)this.keccak();let o=Math.min(n-this.posOut,r-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Xe(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Bc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,It(this.state)}_cloneInto(e){let{blockLen:t,suffix:n,outputLen:i,rounds:r,enableXOF:o}=this;return e||=new Xc(t,n,i,o,r),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=r,e.suffix=n,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var V_=(e,t,n,i={})=>Hi(()=>new Xc(t,e,n),i);var ri=V_(6,136,32,ln(8));var Y_=V_(6,72,64,ln(10));var W_=(e,t,n,i={})=>Hi((r={})=>new Xc(t,e,r.dkLen===void 0?n:r.dkLen,!0),i),G_=W_(31,168,16,ln(11)),hr=W_(31,136,32,ln(12));function up(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function X_(e){return up(e),(e&e-1)===0&&e!==0}function fp(e,t){up(e);let n=0;for(let i=0;i<t;i++,e>>>=1)n=n<<1|e&1;return n}function Q_(e){return up(e),31-Math.clz32(e)}function J_(e){let t=e.length;if(t<2||!X_(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let n=Q_(t);for(let i=0;i<t;i++){let r=fp(i,n);if(i<r){let o=e[i];e[i]=e[r],e[r]=o}}return e}var dp=(e,t)=>{let{N:n,roots:i,dit:r,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=Q_(n);if(!X_(n))throw Error("FFT: Polynomial size should be power of two");let l=r!==o;return(u)=>{if(u.length!==n)throw Error("FFT: wrong Polynomial length");if(r&&a)J_(u);for(let d=0,p=1;d<c-s;d++){let m=r?d+1+s:c-d,y=1<<m,h=y>>1,g=n>>m;for(let w=0;w<n;w+=y)for(let S=0,A=p++;S<h;S++){let I=o?r?n-A:A:S*g,C=w+S,U=w+S+h,F=i[I],T=u[U],j=u[C];if(l){let X=e.mul(T,F);u[C]=e.add(j,X),u[U]=e.sub(j,X)}else if(o)u[C]=e.add(T,j),u[U]=e.mul(e.sub(T,j),F);else u[C]=e.add(j,T),u[U]=e.mul(e.sub(j,T),F)}}if(!r&&a)J_(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var gr=cn;function Qc(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function e1(e){return Uint8Array.from(e)}function ni(e,...t){let n=(r)=>typeof r==="number"?r:r.bytesLen,i=t.reduce((r,o)=>r+n(o),0);return{bytesLen:i,encode:(r)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=n(c),u=typeof c==="number"?r[s]:c.encode(r[s]);if(ve(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(r)=>{ve(r,i,e);let o=[];for(let s of t){let a=n(s),c=r.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),r=r.subarray(a)}return o}}}function el(e,t){let n=t*e.bytesLen;return{bytesLen:n,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let r=new Uint8Array(n);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);r.set(a,s),a.fill(0),s+=a.length}return r},decode:(i)=>{ve(i,n);let r=[];for(let o=0;o<i.length;o+=e.bytesLen)r.push(e.decode(i.subarray(o,o+e.bytesLen)));return r}}}function We(...e){for(let t of e)if(Array.isArray(t))for(let n of t)n.fill(0);else t.fill(0)}function pp(e){return(1<<e)-1}var Xq=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var t1=(e)=>{let{newPoly:t,N:n,Q:i,F:r,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(S,A=i)=>{let I=S%A|0;return(I>=0?I|0:A+I|0)|0},l=(S,A=i)=>{let I=c(S,A)|0;return(I>A>>1?I-A|0:I)|0};function u(){let S=t(n);for(let A=0;A<n;A++){let I=fp(A,s),C=BigInt(o)**BigInt(I)%BigInt(i);S[A]=Number(C)|0}return S}let d=u(),p={add:(S,A)=>c((S|0)+(A|0))|0,sub:(S,A)=>c((S|0)-(A|0))|0,mul:(S,A)=>c((S|0)*(A|0))|0,inv:(S)=>{throw Error("not implemented")}},m={N:n,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=dp(p,{dit:!1,...m}),h=dp(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(S)=>y(S),decode:(S)=>{h(S);for(let A=0;A<S.length;A++)S[A]=c(r*S[A]);return S}},bitsCoder:(S,A)=>{let I=pp(S),C=S*(n/8);return{bytesLen:C,encode:(U)=>{let F=new Uint8Array(C);for(let T=0,j=0,X=0,P=0;T<U.length;T++){j|=(A.encode(U[T])&I)<<X,X+=S;for(;X>=8;X-=8,j>>=8)F[P++]=j&pp(X)}return F},decode:(U)=>{let F=t(n);for(let T=0,j=0,X=0,P=0;T<U.length;T++){j|=U[T]<<X,X+=8;for(;X>=S;X-=S,j>>=S)F[P++]=A.decode(j&I)}return F}}}}},PP=(e)=>(t,n)=>{if(!n)n=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let r=t.length,o=new Uint8Array(n),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[r+0]=l,i[r+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),We(o,i)}}},r1=PP(G_);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var dt=256,Mr=3329,CP=3303,NP=17,{mod:Cs,nttZetas:DP,NTT:ii,bitsCoder:zP}=t1({N:dt,Q:Mr,F:CP,ROOT_OF_UNITY:NP,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),mp={512:{N:dt,Q:Mr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:dt,Q:Mr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:dt,Q:Mr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},UP=(e)=>{if(e>=12)return{encode:(n)=>n,decode:(n)=>n};let t=2**(e-1);return{encode:(n)=>((n<<e)+Mr/2)/Mr,decode:(n)=>n*Mr+t>>>e}},Rs=(e)=>zP(e,UP(e));function oi(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]+t[n])}function LP(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]-t[n])}function BP(e,t,n,i,r){let o=Cs(t*i*r+e*n),s=Cs(e*i+t*n);return{c0:o,c1:s}}function tl(e,t){for(let n=0;n<dt/2;n++){let i=DP[64+(n>>1)];if(n&1)i=-i;let{c0:r,c1:o}=BP(e[2*n+0],e[2*n+1],t[2*n+0],t[2*n+1],i);e[2*n+0]=r,e[2*n+1]=o}return e}function n1(e){let t=new Uint16Array(dt);for(let n=0;n<dt;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;n<dt&&r+3<=i.length;r+=3){let o=(i[r+0]>>0|i[r+1]<<8)&4095,s=(i[r+1]>>4|i[r+2]<<4)&4095;if(o<Mr)t[n++]=o;if(n<dt&&s<Mr)t[n++]=s}}return t}function Ps(e,t,n,i){let r=e(i*dt/4,t,n),o=new Uint16Array(dt),s=jc(r),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Cs(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var jP=(e)=>{let{K:t,PRF:n,XOF:i,HASH512:r,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Rs(1),u=Rs(c),d=Rs(a),p=ni("publicKey",el(Rs(12),t),32),m=el(Rs(12),t),y=ni("ciphertext",el(d,t),u),h=ni("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(g)=>{ve(g,32,"seed");let w=new Uint8Array(33);w.set(g),w[32]=t;let S=r(w),[A,I]=h.decode(S),C=[],U=[];for(let j=0;j<t;j++)C.push(ii.encode(Ps(n,I,j,o)));let F=i(A);for(let j=0;j<t;j++){let X=ii.encode(Ps(n,I,t+j,o));for(let P=0;P<t;P++){let E=n1(F.get(P,j));oi(X,tl(E,C[P]))}U.push(X)}F.clean();let T={publicKey:p.encode([U,A]),secretKey:m.encode(C)};return We(A,I,C,U,w,S),T},encrypt:(g,w,S)=>{let[A,I]=p.decode(g),C=[];for(let P=0;P<t;P++)C.push(ii.encode(Ps(n,S,P,o)));let U=i(I),F=new Uint16Array(dt),T=[];for(let P=0;P<t;P++){let E=Ps(n,S,t+P,s),N=new Uint16Array(dt);for(let x=0;x<t;x++){let k=n1(U.get(P,x));oi(N,tl(k,C[x]))}oi(E,ii.decode(N)),T.push(E),oi(F,tl(A[P],C[P])),We(N)}U.clean();let j=Ps(n,S,2*t,s);oi(j,ii.decode(F));let X=l.decode(w);return oi(X,j),We(A,C,F,j),y.encode([T,X])},decrypt:(g,w)=>{let[S,A]=y.decode(g),I=m.decode(w),C=new Uint16Array(dt);for(let U=0;U<t;U++)oi(C,tl(I[U],ii.encode(S[U])));return LP(A,ii.decode(C)),We(C,I,S),l.encode(A)}}};function hp(e){let t=jP(e),{HASH256:n,HASH512:i,KDF:r}=e,{secretCoder:o,lengths:s}=t,a=ni("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=gr(64))=>{ve(u,64,"seed");let{publicKey:d,secretKey:p}=t.keygen(u.subarray(0,32)),m=n(d),y=a.encode([p,d,m,u.subarray(32)]);return We(p,m),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,d=gr(32))=>{ve(u,s.publicKey,"publicKey"),ve(d,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(e1(p)));if(!Qc(m,p))throw We(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");We(m);let y=i.create().update(d).update(n(u)).digest(),h=t.encrypt(u,d,y.subarray(32,64));return We(y.subarray(32)),{cipherText:h,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{ve(d,a.bytesLen,"secretKey"),ve(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=n(d.subarray(p/2,m));if(!Qc(y,d.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[h,g,w,S]=a.decode(d),A=t.decrypt(u,h),I=i.create().update(A).update(w).digest(),C=I.subarray(0,32),U=t.encrypt(g,A,I.subarray(32,64)),F=Qc(u,U),T=r.create({dkLen:32}).update(S).update(u).digest();return We(A,U,!F?C:T),F?C:T}}}function MP(e,t,n){return hr.create({dkLen:e}).update(t).update(new Uint8Array([n])).digest()}var gp={HASH256:ri,HASH512:Y_,KDF:hr,XOF:r1,PRF:MP},lH=hp({...gp,...mp[512]}),Ns=hp({...gp,...mp[768]}),i1=hp({...gp,...mp[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function ZP(e,t=!1){let{lengths:n,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=gr(n.seed))=>{ve(s,n.seed,"seed");let a=o.isLE?fn(s):un(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:n.secretKey,publicKey:n.publicKey,seed:n.seed},keygen:i,getPublicKey:(r)=>e.getPublicKey(r)}}function yp(e,t=!1){let n=ZP(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...n.lengths,msg:n.lengths.seed,cipherText:n.lengths.publicKey},keygen:n.keygen,getPublicKey:n.getPublicKey,encapsulate(i,r=gr(e.lengths.seed)){let o=this.keygen(r).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return We(o),{sharedSecret:s,cipherText:a}},decapsulate(i,r){let o=e.getSharedSecret(r,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Ds(e,t){return ni(t,...e.map((n)=>{if(typeof n.lengths[t]!=="number")throw Error("wrong length: "+t);return n.lengths[t]}))}function bp(e){return(t,n)=>e(t,{dkLen:n})}function FP(e,t,...n){let i=Ds(n,"seed"),r=Ds(n,"publicKey");if(e===void 0)e=i.bytesLen;Xe(e);function o(s){ve(s,e);let a=i.decode(t(s,i.bytesLen)),c=n.map((d,p)=>d.keygen(a[p])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:r.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=gr(e)){let{publicKey:a,secretKey:c}=o(s),l=r.encode(a);return We(a),We(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function rl(e,t,n,i,...r){let o=FP(e,n,...r),s=Ds(r,"cipherText"),a=Ds(r,"publicKey"),c=Ds(r,"msg");if(t===void 0)t=c.bytesLen;return Xe(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=gr(c.bytesLen)){let d=a.decode(l),p=c.decode(u),m=r.map((w,S)=>w.encapsulate(d[S],p[S])),y=m.map((w)=>w.sharedSecret),h=m.map((w)=>w.cipherText),g={sharedSecret:i(d,h,y),cipherText:s.encode(h)};return We(y,h),g},decapsulate(l,u){let d=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=r.map((h,g)=>h.decapsulate(d[g],m[g]));return i(p,d,y)}}}function o1(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>r(qe(a[0],a[1],s[1],o[1],dn(e))),t,n)}var xH=o1("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Ns,yp(cp,!0),hr,ri),wH=o1("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",i1,yp(U_,!0),hr,ri);function KP(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>{let c=qe(a[0],a[1],s[0],o[0],s[1],o[1],dn(e)),l=32,u=qe(dn("hybrid_prk"),c),d=B_(r,u),p=qe(Vi(32,2),dn("shared_secret"),dn("")),m=j_(r,d,p,32);return We(d,p,u,c),m},t,n)}var s1=yp(z_),SH=KP("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Ns,s1,hr,Jc),qP=(()=>rl(32,32,bp(hr),(e,t,n)=>ri(qe(n[0],n[1],t[1],e[1],dn("\\.//^\\"))),Ns,s1))();function HP(e,t,n,i){let r=e.Point.Fn;if(!r)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=r.fromBytes(s.subarray(u,d),!0),r.isValidNot0(a))break}let c=r.toBytes(r.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:n,seed:i,msg:i,cipherText:n},keygen(s=gr(i)){return ve(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=gr(i)){ve(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return We(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function VP(e,t,n,i){let{secretKey:r,publicKeyUncompressed:o}=n.lengths;if(!r||!o)throw Error("wrong curve");let s=HP(n,r,o,i),a=64,c=a+i;return rl(32,32,(l)=>{ve(l,32);let u=hr(l,{dkLen:c}),d=u.subarray(0,a),p=u.subarray(a,c);return qe(d,p)},(l,u,d)=>ri(qe(d[0],d[1],u[1],l[1],dn(e))),t,s)}var YP=(()=>VP("MLKEM768-P256",Ns,cp,128))();var nl=qP,a1=YP;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Te=(e,t,n)=>tt(e,t,n),xp=Fe,Xi=Ic,ot=(...e)=>_d(...e),Qi=(e)=>ds(e),eo=xd,to=(e)=>Nr(e),ol=BigInt(0),vp=BigInt(1);function Zr(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw TypeError(n+"expected boolean, got type="+typeof e)}return e}function sl(e){if(typeof e==="bigint"){if(!il(e))throw RangeError("positive bigint expected, got "+e)}else xp(e);return e}function yr(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(n+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let n=t&&`"${t}" `;throw RangeError(n+"expected safe integer, got "+e)}}function zs(e){let t=sl(e).toString(16);return t.length&1?"0"+t:t}function c1(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?ol:BigInt("0x"+e)}function si(e){return c1(Ic(e))}function rr(e){return c1(Ic(yn(tt(e)).reverse()))}function al(e,t){if(Fe(t),t===0)throw RangeError("zero length");e=sl(e);let n=e.toString(16);if(n.length>t*2)throw RangeError("number too large");return ds(n.padStart(t*2,"0"))}function Us(e,t){return al(e,t).reverse()}function l1(e,t){if(e=Te(e),t=Te(t),e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function yn(e){return Uint8Array.from(Te(e))}function cl(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var il=(e)=>typeof e==="bigint"&&ol<=e;function WP(e,t,n){return il(e)&&il(t)&&il(n)&&t<=e&&e<n}function Fr(e,t,n,i){if(!WP(t,n,i))throw RangeError("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function ro(e){if(e<ol)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>ol;e>>=vp,t+=1);return t}var Ls=(e)=>(vp<<BigInt(e))-vp;function u1(e,t,n){if(Fe(e,"hashLen"),Fe(t,"qByteLen"),typeof n!=="function")throw TypeError("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,ot(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let S=c.slice();w.push(S),g+=c.length}return ot(...w)};return(g,w)=>{d(),m(g);let S=void 0;while((S=w(y()))===void 0)m();return d(),S}}function Yt(e,t={},n={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}var wp=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var st=BigInt(0),je=BigInt(1),ai=BigInt(2),m1=BigInt(3),h1=BigInt(4),g1=BigInt(5),GP=BigInt(7),y1=BigInt(8),JP=BigInt(9),b1=BigInt(16);function Ue(e,t){if(t<=st)throw Error("mod: expected positive modulus, got "+t);let n=e%t;return n>=st?n:t+n}function Wt(e,t,n){if(t<st)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >st)i*=i,i%=n;return i}function f1(e,t){if(e===st)throw Error("invert: expected non-zero number");if(t<=st)throw Error("invert: expected positive modulus, got "+t);let n=Ue(e,t),i=t,r=st,o=je,s=je,a=st;while(n!==st){let l=i/n,u=i-n*l,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==je)throw Error("invert: does not exist");return Ue(r,t)}function Sp(e,t,n){let i=e;if(!i.eql(i.sqr(t),n))throw Error("Cannot find square root")}function v1(e,t){let n=e,i=(n.ORDER+je)/h1,r=n.pow(t,i);return Sp(n,r,t),r}function XP(e,t){let n=e,i=(n.ORDER-g1)/y1,r=n.mul(t,ai),o=n.pow(r,i),s=n.mul(t,o),a=n.mul(n.mul(s,ai),o),c=n.mul(s,n.sub(a,n.ONE));return Sp(n,c,t),c}function QP(e){let t=ll(e),n=x1(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+GP)/b1;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),p=l.mul(u,r),m=l.mul(u,o),y=l.eql(l.sqr(d),c),h=l.eql(l.sqr(p),c);u=l.cmov(u,d,y),d=l.cmov(m,p,h);let g=l.eql(l.sqr(d),c),w=l.cmov(u,d,g);return Sp(l,w,c),w}}function x1(e){if(e<m1)throw Error("sqrt is not defined for small field");let t=e-je,n=0;while(t%ai===st)t/=ai,n++;let i=ai,r=ll(e);while(d1(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return v1;let o=r.pow(i,t),s=(t+je)/ai;return function(c,l){let u=c;if(u.is0(l))return l;if(d1(u,l)!==1)throw Error("Cannot find square root");let d=n,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let h=1,g=u.sqr(m);while(!u.eql(g,u.ONE))if(h++,g=u.sqr(g),h===d)throw Error("Cannot find square root");let w=je<<BigInt(d-h-1),S=u.pow(p,w);d=h,p=u.sqr(S),m=u.mul(m,p),y=u.mul(y,S)}return y}}function e4(e){if(e%h1===m1)return v1;if(e%y1===g1)return XP;if(e%b1===JP)return QP(e);return x1(e)}var Kr=(e,t)=>(Ue(e,t)&je)===je,t4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function _p(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=t4.reduce((i,r)=>(i[r]="function",i),t);if(Yt(e,n),yr(e.BYTES,"BYTES"),yr(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=je)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function r4(e,t,n){let i=e;if(n<st)throw Error("invalid exponent, negatives unsupported");if(n===st)return i.ONE;if(n===je)return t;let r=i.ONE,o=t;while(n>st){if(n&je)r=i.mul(r,o);o=i.sqr(o),n>>=je}return r}function Bs(e,t,n=!1){let i=e,r=Array(t.length).fill(n?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return r[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return r[l]=i.mul(a,r[l]),i.mul(a,c)},s),r}function d1(e,t){let n=e,i=(n.ORDER-je)/ai,r=n.pow(t,i),o=n.eql(r,n.ONE),s=n.eql(r,n.ZERO),a=n.eql(r,n.neg(n.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function n4(e,t){if(t!==void 0)xp(t);if(e<=st)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let n=ro(e);if(t!==void 0&&t<n)throw Error(`invalid n length: expected bit length (${n}) >= n.length (${t})`);let i=t!==void 0?t:n,r=Math.ceil(i/8);return{nBitLength:i,nByteLength:r}}var p1=new WeakMap;class $p{ORDER;BITS;BYTES;isLE;ZERO=st;ONE=je;_lengths;_mod;constructor(e,t={}){if(e<=je)throw Error("invalid field: expected ORDER > 1, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=n4(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,Object.freeze(this)}create(e){return Ue(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return st<=e&&e<this.ORDER}is0(e){return e===st}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&je)===je}neg(e){return Ue(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Ue(e*e,this.ORDER)}add(e,t){return Ue(e+t,this.ORDER)}sub(e,t){return Ue(e-t,this.ORDER)}mul(e,t){return Ue(e*t,this.ORDER)}pow(e,t){return r4(this,e,t)}div(e,t){return Ue(e*f1(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return f1(e,this.ORDER)}sqrt(e){let t=p1.get(this);if(!t)p1.set(this,t=e4(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Us(e,this.BYTES):al(e,this.BYTES)}fromBytes(e,t=!1){Te(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(e.length<1||!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?rr(e):si(e);if(s)a=Ue(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Bs(this,e)}cmov(e,t,n){return Zr(n,"condition"),n?t:e}}Object.freeze($p.prototype);function ll(e,t={}){return new $p(e,t)}function w1(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=je)throw Error("field order must be greater than 1");let t=ro(e-je);return Math.ceil(t/8)}function kp(e){let t=w1(e);return t+Math.ceil(t/2)}function S1(e,t,n=!1){Te(e);let i=e.length,r=w1(t),o=Math.max(kp(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?rr(e):si(e),a=Ue(s,t-je)+je;return n?Us(a,r):al(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var no=BigInt(0),ci=BigInt(1);function js(e,t){let n=t.negate();return e?n:t}function li(e,t){let n=Bs(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function E1(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Ep(e,t){E1(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=Ls(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function _1(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=ci;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Ip=new WeakMap,I1=new WeakMap;function Op(e){return I1.get(e)||1}function $1(e){if(e!==no)throw Error("invalid wNAF")}class Ms{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>no){if(t&ci)n=n.add(i);i=i.double(),t>>=ci}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Ep(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Ep(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=_1(n,s,o);if(n=a,l)r=r.add(js(d,t[p]));else i=i.add(js(u,t[c]))}return $1(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Ep(e,this.bits);for(let o=0;o<r.windows;o++){if(n===no)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=_1(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return $1(n),i}getPrecomputes(e,t,n){let i=Ip.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Ip.set(t,i)}}return i}cached(e,t,n){let i=Op(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Op(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){E1(t,this.bits),I1.set(e,t),Ip.delete(e)}hasCache(e){return Op(e)!==1}}function O1(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>no||i>no){if(n&ci)o=o.add(r);if(i&ci)s=s.add(r);r=r.double(),n>>=ci,i>>=ci}return{p1:o,p2:s}}function k1(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return _p(t),t}else return ll(e,{isLE:n})}function ul(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>no))throw Error(`CURVE.${c} must be positive bigint`)}let r=k1(t.p,n.Fp,i),o=k1(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function Zs(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}function Fs(e,t){if(yr(e),yr(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let n=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)n[i]=e&255,e>>>=8;return new Uint8Array(n)}function i4(e,t){let n=new Uint8Array(e.length);for(let i=0;i<e.length;i++)n[i]=e[i]^t[i];return n}function o4(e){if(!eo(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?cl(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Ap(e,t,n,i){if(Te(e),yr(n),t=o4(t),t.length>255)t=i(ot(cl("H2C-OVERSIZE-DST-"),t));let{outputLen:r,blockLen:o}=i,s=Math.ceil(n/r);if(n>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ot(t,Fs(t.length,1)),c=new Uint8Array(o),l=Fs(n,2),u=Array(s),d=i(ot(c,e,l,Fs(0,1),a));u[0]=i(ot(d,Fs(1,1),a));for(let m=1;m<s;m++){let y=[i4(d,u[m-1]),Fs(m+1,1),a];u[m]=i(ot(...y))}return ot(...u).slice(0,n)}var A1="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T1=(e,t)=>(e+(e>=0?t:-t)/P1)/t;function s4(e,t,n){Fr("scalar",e,br,n);let[[i,r],[o,s]]=t,a=T1(s*e,n),c=T1(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<br,p=u<br;if(d)l=-l;if(p)u=-u;let m=Ls(Math.ceil(ro(n)/2))+bn;if(l<br||l>=m||u<br||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:p,k2:u}}function Rp(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Tp(e,t){Yt(e);let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(Zr(n.lowS,"lowS"),Zr(n.prehash,"prehash"),n.format!==void 0)Rp(n.format);return n}class R1 extends Error{constructor(e=""){super(e)}}var nr={Err:R1,_tlv:{encode:(e,t)=>{let{Err:n}=nr;if(yr(e,"tag"),e<0||e>255)throw new n("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=zs(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?zs(r.length/2|128):"";return zs(e)+o+r+t},decode(e,t){let{Err:n}=nr;t=Te(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=nr;if(sl(e),e<br)throw new t("integer: negative integers are not allowed");let n=zs(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=nr;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return si(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=nr,r=Te(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=nr,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}};Object.freeze(nr._tlv);Object.freeze(nr._int);Object.freeze(nr);var br=BigInt(0),bn=BigInt(1),P1=BigInt(2),fl=BigInt(3),a4=BigInt(4);function C1(e,t={}){let n=ul("weierstrass",e,t),i=n.Fp,r=n.Fn,o=n.CURVE,{h:s,n:a}=o;Yt(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=D1(i,r);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(P,E,N){if(l&&E.is0())return Uint8Array.of(0);let{x,y:k}=E.toAffine(),_=i.toBytes(x);if(Zr(N,"isCompressed"),N){d();let D=!i.isOdd(k);return ot(N1(D),_)}else return ot(Uint8Array.of(4),_,i.toBytes(k))}function m(P){Te(P,void 0,"Point");let{publicKey:E,publicKeyUncompressed:N}=u,x=P.length,k=P[0],_=P.subarray(1);if(l&&x===1&&k===0)return{x:i.ZERO,y:i.ZERO};if(x===E&&(k===2||k===3)){let D=i.fromBytes(_);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let O=g(D),L;try{L=i.sqrt(O)}catch(re){let ae=re instanceof Error?": "+re.message:"";throw Error("bad point: is not on curve, sqrt error"+ae)}d();let M=i.isOdd(L);if((k&1)===1!==M)L=i.neg(L);return{x:D,y:L}}else if(x===N&&k===4){let D=i.BYTES,O=i.fromBytes(_.subarray(0,D)),L=i.fromBytes(_.subarray(D,D*2));if(!w(O,L))throw Error("bad point: is not on curve");return{x:O,y:L}}else throw Error(`bad point: got length ${x}, expected compressed=${E} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,h=t.fromBytes===void 0?m:t.fromBytes;function g(P){let E=i.sqr(P),N=i.mul(E,P);return i.add(i.add(N,i.mul(P,o.a)),o.b)}function w(P,E){let N=i.sqr(E),x=g(P);return i.eql(N,x)}if(!w(o.Gx,o.Gy))throw Error("bad curve params: generator point");let S=i.mul(i.pow(o.a,fl),a4),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(S,A)))throw Error("bad curve params: a or b");function I(P,E,N=!1){if(!i.isValid(E)||N&&i.is0(E))throw Error(`bad point coordinate ${P}`);return E}function C(P){if(!(P instanceof T))throw Error("Weierstrass Point expected")}function U(P){if(!c||!c.basises)throw Error("no endo");return s4(P,c.basises,r.ORDER)}function F(P,E,N,x,k){return N=new T(i.mul(N.X,P),N.Y,N.Z),E=js(x,E),N=js(k,N),E.add(N)}class T{static BASE=new T(o.Gx,o.Gy,i.ONE);static ZERO=new T(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(P,E,N){this.X=I("x",P),this.Y=I("y",E,!0),this.Z=I("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:E,y:N}=P||{};if(!P||!i.isValid(E)||!i.isValid(N))throw Error("invalid affine point");if(P instanceof T)throw Error("projective point not allowed");if(i.is0(E)&&i.is0(N))return T.ZERO;return new T(E,N,i.ONE)}static fromBytes(P){let E=T.fromAffine(h(Te(P,void 0,"point")));return E.assertValidity(),E}static fromHex(P){return T.fromBytes(Qi(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,E=!0){if(X.createCache(this,P),!E)this.multiply(fl);return this}assertValidity(){let P=this;if(P.is0()){if(t.allowInfinityPoint&&i.is0(P.X)&&i.eql(P.Y,i.ONE)&&i.is0(P.Z))return;throw Error("bad point: ZERO")}let{x:E,y:N}=P.toAffine();if(!i.isValid(E)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!w(E,N))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){C(P);let{X:E,Y:N,Z:x}=this,{X:k,Y:_,Z:D}=P,O=i.eql(i.mul(E,D),i.mul(k,x)),L=i.eql(i.mul(N,D),i.mul(_,x));return O&&L}negate(){return new T(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:E}=o,N=i.mul(E,fl),{X:x,Y:k,Z:_}=this,D=i.ZERO,O=i.ZERO,L=i.ZERO,M=i.mul(x,x),H=i.mul(k,k),re=i.mul(_,_),ae=i.mul(x,k);return ae=i.add(ae,ae),L=i.mul(x,_),L=i.add(L,L),D=i.mul(P,L),O=i.mul(N,re),O=i.add(D,O),D=i.sub(H,O),O=i.add(H,O),O=i.mul(D,O),D=i.mul(ae,D),L=i.mul(N,L),re=i.mul(P,re),ae=i.sub(M,re),ae=i.mul(P,ae),ae=i.add(ae,L),L=i.add(M,M),M=i.add(L,M),M=i.add(M,re),M=i.mul(M,ae),O=i.add(O,M),re=i.mul(k,_),re=i.add(re,re),M=i.mul(re,ae),D=i.sub(D,M),L=i.mul(re,H),L=i.add(L,L),L=i.add(L,L),new T(D,O,L)}add(P){C(P);let{X:E,Y:N,Z:x}=this,{X:k,Y:_,Z:D}=P,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=o.a,re=i.mul(o.b,fl),ae=i.mul(E,k),le=i.mul(N,_),pe=i.mul(x,D),ye=i.add(E,N),he=i.add(k,_);ye=i.mul(ye,he),he=i.add(ae,le),ye=i.sub(ye,he),he=i.add(E,x);let ge=i.add(k,D);return he=i.mul(he,ge),ge=i.add(ae,pe),he=i.sub(he,ge),ge=i.add(N,x),O=i.add(_,D),ge=i.mul(ge,O),O=i.add(le,pe),ge=i.sub(ge,O),M=i.mul(H,he),O=i.mul(re,pe),M=i.add(O,M),O=i.sub(le,M),M=i.add(le,M),L=i.mul(O,M),le=i.add(ae,ae),le=i.add(le,ae),pe=i.mul(H,pe),he=i.mul(re,he),le=i.add(le,pe),pe=i.sub(ae,pe),pe=i.mul(H,pe),he=i.add(he,pe),ae=i.mul(le,he),L=i.add(L,ae),ae=i.mul(ge,he),O=i.mul(ye,O),O=i.sub(O,ae),ae=i.mul(ye,le),M=i.mul(ge,M),M=i.add(M,ae),new T(O,L,M)}subtract(P){return C(P),this.add(P.negate())}is0(){return this.equals(T.ZERO)}multiply(P){let{endo:E}=t;if(!r.isValidNot0(P))throw RangeError("invalid scalar: out of range");let N,x,k=(_)=>X.cached(this,_,(D)=>li(T,D));if(E){let{k1neg:_,k1:D,k2neg:O,k2:L}=U(P),{p:M,f:H}=k(D),{p:re,f:ae}=k(L);x=H.add(ae),N=F(E.beta,M,re,_,O)}else{let{p:_,f:D}=k(P);N=_,x=D}return li(T,[N,x])[0]}multiplyUnsafe(P){let{endo:E}=t,N=this,x=P;if(!r.isValid(x))throw RangeError("invalid scalar: out of range");if(x===br||N.is0())return T.ZERO;if(x===bn)return N;if(X.hasCache(this))return this.multiply(x);if(E){let{k1neg:k,k1:_,k2neg:D,k2:O}=U(x),{p1:L,p2:M}=O1(T,N,_,O);return F(E.beta,L,M,k,D)}else return X.unsafe(N,x)}toAffine(P){let E=this,N=P,{X:x,Y:k,Z:_}=E;if(i.eql(_,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(_);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(_,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}isTorsionFree(){let{isTorsionFree:P}=t;if(s===bn)return!0;if(P)return P(T,this);return X.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===bn)return this;if(P)return P(T,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===bn)return this.is0();return this.clearCofactor().is0()}toBytes(P=!0){return Zr(P,"isCompressed"),this.assertValidity(),y(T,this,P)}toHex(P=!0){return Xi(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let j=r.BITS,X=new Ms(T,t.endo?Math.ceil(j/2):j);if(j>=8)T.BASE.precompute(8);return Object.freeze(T.prototype),Object.freeze(T),T}function N1(e){return Uint8Array.of(e?2:3)}function D1(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function c4(e,t={}){let{Fn:n}=e,i=t.randomBytes===void 0?to:t.randomBytes,r=Object.assign(D1(e.Fp,n),{seed:Math.max(kp(n.ORDER),16)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m){return m=m===void 0?i(r.seed):m,S1(Te(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r,w=n._lengths;if(!eo(m))return;let S=Te(m,void 0,"key").length,A=S===h||S===g,I=S===y||!!w?.includes(S);if(A&&I)return;return A}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Zs(a,c);return Object.freeze(d),Object.freeze(r),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function z1(e,t,n={}){let i=t;Cr(i),Yt(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let r=n.randomBytes===void 0?to:n.randomBytes,o=n.hmac===void 0?(k,_)=>fr(i,k,_):n.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y}=c4(e,n),h={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},g=c*P1+bn<s.ORDER;function w(k){let _=c>>bn;return k>_}function S(k,_){if(!a.isValidNot0(_))throw Error(`invalid signature ${k}: out of range 1..Point.Fn.ORDER`);return _}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function I(k,_){Rp(_);let D=y.signature,O=_==="compact"?D:_==="recovered"?D+1:void 0;return Te(k,O)}class C{r;s;recovery;constructor(k,_,D){if(this.r=S("r",k),this.s=S("s",_),D!=null){if(A(),![0,1,2,3].includes(D))throw Error("invalid recovery id");this.recovery=D}Object.freeze(this)}static fromBytes(k,_=h.format){I(k,_);let D;if(_==="der"){let{r:H,s:re}=nr.toSig(Te(k));return new C(H,re)}if(_==="recovered")D=k[0],_="compact",k=k.subarray(1);let O=y.signature/2,L=k.subarray(0,O),M=k.subarray(O,O*2);return new C(a.fromBytes(L),a.fromBytes(M),D)}static fromHex(k,_){return this.fromBytes(Qi(k),_)}assertRecovery(){let{recovery:k}=this;if(k==null)throw Error("invalid recovery id: must be present");return k}addRecoveryBit(k){return new C(this.r,this.s,k)}recoverPublicKey(k){let{r:_,s:D}=this,O=this.assertRecovery(),L=O===2||O===3?_+c:_;if(!s.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let M=s.toBytes(L),H=e.fromBytes(ot(N1((O&1)===0),M)),re=a.inv(L),ae=F(Te(k,void 0,"msgHash")),le=a.create(-ae*re),pe=a.create(D*re),ye=e.BASE.multiplyUnsafe(le).add(H.multiplyUnsafe(pe));if(ye.is0())throw Error("invalid recovery: point at infinify");return ye.assertValidity(),ye}hasHighS(){return w(this.s)}toBytes(k=h.format){if(Rp(k),k==="der")return Qi(nr.hexFromSig(this));let{r:_,s:D}=this,O=a.toBytes(_),L=a.toBytes(D);if(k==="recovered")return A(),ot(Uint8Array.of(this.assertRecovery()),O,L);return ot(O,L)}toHex(k){return Xi(this.toBytes(k))}}Object.freeze(C.prototype),Object.freeze(C);let U=n.bits2int===void 0?function(_){if(_.length>8192)throw Error("input is too large");let D=si(_),O=_.length*8-l;return O>0?D>>BigInt(O):D}:n.bits2int,F=n.bits2int_modN===void 0?function(_){return a.create(U(_))}:n.bits2int_modN,T=Ls(l);function j(k){return Fr("num < 2^"+l,k,br,T),a.toBytes(k)}function X(k,_){return Te(k,void 0,"message"),_?Te(i(k),void 0,"prehashed message"):k}function P(k,_,D){let{lowS:O,prehash:L,extraEntropy:M}=Tp(D,h);k=X(k,L);let H=F(k),re=a.fromBytes(_);if(!a.isValidNot0(re))throw Error("invalid private key");let ae=[j(re),j(H)];if(M!=null&&M!==!1){let he=M===!0?r(y.secretKey):M;ae.push(Te(he,void 0,"extraEntropy"))}let le=ot(...ae),pe=H;function ye(he){let ge=U(he);if(!a.isValidNot0(ge))return;let we=a.inv(ge),Ne=e.BASE.multiply(ge).toAffine(),ze=a.create(Ne.x);if(ze===br)return;let ct=a.create(we*a.create(pe+ze*re));if(ct===br)return;let lt=(Ne.x===ze?0:2)|Number(Ne.y&bn),kt=ct;if(O&&w(ct))kt=a.neg(ct),lt^=1;return new C(ze,kt,g?void 0:lt)}return{seed:le,k2sig:ye}}function E(k,_,D={}){let{seed:O,k2sig:L}=P(k,_,D);return u1(i.outputLen,a.BYTES,o)(O,L).toBytes(D.format)}function N(k,_,D,O={}){let{lowS:L,prehash:M,format:H}=Tp(O,h);if(D=Te(D,void 0,"publicKey"),_=X(_,M),!eo(k)){let re=k instanceof C?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}I(k,H);try{let re=C.fromBytes(k,H),ae=e.fromBytes(D);if(L&&re.hasHighS())return!1;let{r:le,s:pe}=re,ye=F(_),he=a.inv(pe),ge=a.create(ye*he),we=a.create(le*he),Ne=e.BASE.multiplyUnsafe(ge).add(ae.multiplyUnsafe(we));if(Ne.is0())return!1;return a.create(Ne.x)===le}catch(re){return!1}}function x(k,_,D={}){let{prehash:O}=Tp(D,h);return _=X(_,O),C.fromBytes(k,"recovered").recoverPublicKey(_).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:E,verify:N,recoverPublicKey:x,Signature:C,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var l4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var u4=C1(l4),io=z1(u4,Ke);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vn=BigInt(0),Ot=BigInt(1),Pp=BigInt(2),f4=BigInt(8);function d4(e,t,n,i){let r=e.sqr(n),o=e.sqr(i),s=e.add(e.mul(t.a,r),o),a=e.add(e.ONE,e.mul(t.d,e.mul(r,o)));return e.eql(s,a)}function U1(e,t={}){let n=t,i=ul("edwards",e,n,n.FpFnLE),{Fp:r,Fn:o}=i,s=i.CURVE,{h:a}=s;Yt(n,{},{uvRatio:"function"});let c=Pp<<BigInt(o.BYTES*8)-Ot,l=(h)=>r.create(h),u=n.uvRatio===void 0?(h,g)=>{try{return{isValid:!0,value:r.sqrt(r.div(h,g))}}catch(w){return{isValid:!1,value:vn}}}:n.uvRatio;if(!d4(r,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(h,g,w=!1){let S=w?Ot:vn;return Fr("coordinate "+h,g,S,c),g}function p(h){if(!(h instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Ot,l(s.Gx*s.Gy));static ZERO=new m(vn,Ot,Ot,vn);static Fp=r;static Fn=o;X;Y;Z;T;constructor(h,g,w,S){this.X=d("x",h),this.Y=d("y",g),this.Z=d("z",w,!0),this.T=d("t",S),Object.freeze(this)}static CURVE(){return s}static fromAffine(h){if(h instanceof m)throw Error("extended point not allowed");let{x:g,y:w}=h||{};return d("x",g),d("y",w),new m(g,w,Ot,l(g*w))}static fromBytes(h,g=!1){let w=r.BYTES,{a:S,d:A}=s;h=yn(Te(h,w,"point")),Zr(g,"zip215");let I=yn(h),C=h[w-1];I[w-1]=C&-129;let U=rr(I),F=g?c:r.ORDER;Fr("point.y",U,vn,F);let T=l(U*U),j=l(T-Ot),X=l(A*T-S),{isValid:P,value:E}=u(j,X);if(!P)throw Error("bad point: invalid y coordinate");let N=(E&Ot)===Ot,x=(C&128)!==0;if(!g&&E===vn&&x)throw Error("bad point: x=0 and x_0=1");if(x!==N)E=l(-E);return m.fromAffine({x:E,y:U})}static fromHex(h,g=!1){return m.fromBytes(Qi(h),g)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(h=8,g=!0){if(y.createCache(this,h),!g)this.multiply(Pp);return this}assertValidity(){let h=this,{a:g,d:w}=s;if(h.is0())throw Error("bad point: ZERO");let{X:S,Y:A,Z:I,T:C}=h,U=l(S*S),F=l(A*A),T=l(I*I),j=l(T*T),X=l(U*g),P=l(T*l(X+F)),E=l(j+l(w*l(U*F)));if(P!==E)throw Error("bad point: equation left != right (1)");let N=l(S*A),x=l(I*C);if(N!==x)throw Error("bad point: equation left != right (2)")}equals(h){p(h);let{X:g,Y:w,Z:S}=this,{X:A,Y:I,Z:C}=h,U=l(g*C),F=l(A*S),T=l(w*C),j=l(I*S);return U===F&&T===j}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:h}=s,{X:g,Y:w,Z:S}=this,A=l(g*g),I=l(w*w),C=l(Pp*l(S*S)),U=l(h*A),F=g+w,T=l(l(F*F)-A-I),j=U+I,X=j-C,P=U-I,E=l(T*X),N=l(j*P),x=l(T*P),k=l(X*j);return new m(E,N,k,x)}add(h){p(h);let{a:g,d:w}=s,{X:S,Y:A,Z:I,T:C}=this,{X:U,Y:F,Z:T,T:j}=h,X=l(S*U),P=l(A*F),E=l(C*w*j),N=l(I*T),x=l((S+A)*(U+F)-X-P),k=N-E,_=N+E,D=l(P-g*X),O=l(x*k),L=l(_*D),M=l(x*D),H=l(k*_);return new m(O,L,H,M)}subtract(h){return p(h),this.add(h.negate())}multiply(h){if(!o.isValidNot0(h))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:g,f:w}=y.cached(this,h,(S)=>li(m,S));return li(m,[g,w])[0]}multiplyUnsafe(h){if(!o.isValid(h))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(h===vn)return m.ZERO;if(this.is0()||h===Ot)return this;return y.unsafe(this,h,(g)=>li(m,g))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(h){let g=this,w=h,{X:S,Y:A,Z:I}=g,C=g.is0();if(w==null)w=C?f4:r.inv(I);let U=l(S*w),F=l(A*w),T=r.mul(I,w);if(C)return{x:vn,y:Ot};if(T!==Ot)throw Error("invZ was invalid");return{x:U,y:F}}clearCofactor(){if(a===Ot)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:h,y:g}=this.toAffine(),w=r.toBytes(g);return w[w.length-1]|=h&Ot?128:0,w}toHex(){return Xi(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new Ms(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Cp{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){wp()}static fromHex(e){wp()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return Xi(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ks=BigInt(0),oo=BigInt(1),dl=BigInt(2);function p4(e){return Yt(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function L1(e){let t=p4(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?to:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?dl**BigInt(254):dl**BigInt(447),y=a?BigInt(8)*dl**BigInt(251)-oo:BigInt(4)*dl**BigInt(445)-oo,h=m+y+oo,g=(x)=>Ue(x,n),w=S(d);function S(x){return Us(g(x),u)}function A(x){let k=yn(Te(x,u,"uCoordinate"));if(a)k[31]&=127;return g(rr(k))}function I(x){return rr(r(yn(Te(x,u,"scalar"))))}function C(x,k){let _=X(A(k),I(x));if(_===Ks)throw Error("invalid private or public key received");return S(_)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,_){let D=g(x*(k-_));return k=g(k-D),_=g(_+D),{x_2:k,x_3:_}}function X(x,k){Fr("u",x,Ks,n),Fr("scalar",k,m,h);let _=k,D=x,O=oo,L=Ks,M=x,H=oo,re=Ks;for(let le=BigInt(l-1);le>=Ks;le--){let pe=_>>le&oo;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let P={secretKey:u,publicKey:u,seed:u},E=(x)=>(x=x===void 0?c(u):x,Te(x,P.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze(P),Object.freeze(N),Object.freeze({keygen:Zs(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:P})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var m4=BigInt(0),qr=BigInt(1),B1=BigInt(2),h4=BigInt(3),g4=BigInt(5),y4=BigInt(8),fi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Up=(()=>({p:fi,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:y4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Z1(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=fi,a=e*e%o*e%o,c=Wt(a,B1,o)*a%o,l=Wt(c,qr,o)*e%o,u=Wt(l,g4,o)*l%o,d=Wt(u,t,o)*u%o,p=Wt(d,n,o)*d%o,m=Wt(p,i,o)*p%o,y=Wt(m,r,o)*m%o,h=Wt(y,r,o)*m%o,g=Wt(h,t,o)*u%o;return{pow_p_5_8:Wt(g,B1,o)*e%o,b2:a}}function b4(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Np=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Lp(e,t){let n=fi,i=Ue(t*t*t,n),r=Ue(i*i*t,n),o=Z1(e*r).pow_p_5_8,s=Ue(e*i*o,n),a=Ue(t*s*s,n),c=s,l=Ue(s*Np,n),u=a===e,d=a===Ue(-e,n),p=a===Ue(-e*Np,n);if(u)s=c;if(d||p)s=l;if(Kr(s,n))s=Ue(-s,n);return{isValid:u||d,value:s}}var ui=U1(Up,{uvRatio:Lp}),xn=(()=>ui.Fp)(),F1=(()=>ui.Fn)();var pl=(()=>{let e=fi;return L1({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=Z1(t);return Ue(Wt(n,h4,e)*i,e)},adjustScalarBytes:b4})})();var Dp=Np,v4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),x4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),w4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),S4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),j1=(e)=>Lp(qr,e),_4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),zp=(e)=>xn.create(rr(e)&_4);function M1(e){let{d:t}=Up,n=fi,i=(w)=>xn.create(w),r=i(Dp*e*e),o=i((r+qr)*w4),s=BigInt(-1),a=i((s-t*r)*i(r+t)),{isValid:c,value:l}=Lp(o,a),u=i(l*e);if(!Kr(u,n))u=i(-u);if(!c)l=u;if(!c)s=r;let d=i(s*(r-qr)*S4-a),p=l*l,m=i((l+l)*a),y=i(d*v4),h=i(qr-p),g=i(qr+p);return new ui(i(m*g),i(h*y),i(y*g),i(m*h))}class vt extends Cp{static BASE=(()=>new vt(ui.BASE))();static ZERO=(()=>new vt(ui.ZERO))();static Fp=(()=>xn)();static Fn=(()=>F1)();constructor(e){super(e)}static fromAffine(e){return new vt(ui.fromAffine(e))}assertSame(e){if(!(e instanceof vt))throw Error("RistrettoPoint expected")}init(e){return new vt(e)}static fromBytes(e){tt(e,32);let{a:t,d:n}=Up,i=fi,r=(A)=>xn.create(A),o=zp(e);if(!l1(xn.toBytes(o),e)||Kr(o,i))throw Error("invalid ristretto255 encoding 1");let s=r(o*o),a=r(qr+t*s),c=r(qr-t*s),l=r(a*a),u=r(c*c),d=r(t*n*l-u),{isValid:p,value:m}=j1(r(d*u)),y=r(m*c),h=r(m*y*d),g=r((o+o)*y);if(Kr(g,i))g=r(-g);let w=r(a*h),S=r(g*w);if(!p||Kr(S,i)||w===m4)throw Error("invalid ristretto255 encoding 2");return new vt(new ui(g,w,qr,S))}static fromHex(e){return vt.fromBytes(ds(e))}toBytes(){let{X:e,Y:t,Z:n,T:i}=this.ep,r=fi,o=(h)=>xn.create(h),s=o(o(n+t)*o(n-t)),a=o(e*t),c=o(a*a),{value:l}=j1(o(s*c)),u=o(l*s),d=o(l*a),p=o(u*d*i),m;if(Kr(i*p,r)){let h=o(t*Dp),g=o(e*Dp);e=h,t=g,m=o(u*x4)}else m=d;if(Kr(e*p,r))t=o(-t);let y=o((n-t)*m);if(Kr(y,r))y=o(-y);return xn.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:n}=this.ep,{X:i,Y:r}=e.ep,o=(c)=>xn.create(c),s=o(t*r)===o(n*i),a=o(n*r)===o(t*i);return s||a}is0(){return this.equals(vt.ZERO)}}Object.freeze(vt.BASE);Object.freeze(vt.ZERO);Object.freeze(vt.prototype);Object.freeze(vt);var $4=Object.freeze({Point:vt,hashToCurve(e,t){let n=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Ap(e,n,64,Rc);return $4.deriveToCurve(i)},hashToScalar(e,t={DST:A1}){let n=Ap(e,t.DST,64,Rc);return F1.create(rr(n))},deriveToCurve(e){tt(e,64);let t=zp(e.subarray(0,32)),n=M1(t),i=zp(e.subarray(32,64)),r=M1(i);return new vt(n.add(r))}});var K1=!1,k4=!1;async function q1(e,t){if(k4)return await t();try{return await e()}catch(n){if(n instanceof ReferenceError||n instanceof DOMException&&n.name==="NotSupportedError")return await t();else throw n}}async function ml(e,t){return await q1(async()=>{let n=Bp(e)?e:await I4(e),i=await crypto.subtle.importKey("raw",O4(t),{name:"X25519"},K1,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},n,256))},()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMult(e,t)})}async function qs(e){return await q1(async()=>ml(e,pl.GuBytes),()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMultBase(e)})}var E4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function I4(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...E4,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},K1,["deriveBits"])}function Bp(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function O4(e){return e}class jp{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),T4(di(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let n=await this.s.read();if(n.done)return this.buf=di(e),null;this.buf=n.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:di(this.transcript)}}}function T4(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function di(e){let t=e.reduce((r,o)=>r+o.length,0),n=new Uint8Array(t),i=0;for(let r of e)n.set(r,i),i+=r.length;return n}function so(e,...t){return e.pipeThrough(new TransformStream({start(n){for(let i of t)n.enqueue(i)}}))}function hl(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Mp(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function H1(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function V1(e,t){let n=e.getReader(),i=[],r=0;while(r<t){let{done:c,value:l}=await n.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),r+=l.length}n.releaseLock();let o=di(i),s=o.subarray(0,t),a=so(e,o.subarray(t));return{data:s,rest:a}}class vr{args;body;constructor(e,t){this.args=e,this.body=t}}async function R4(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let n=t.split(" ");if(n.length<2||n.shift()!=="->")return{next:t};for(let o of n)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=ut.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let r=di(i);return{s:new vr(n,r)}}async function Y1(e){let t=new jp(e),n=await t.readLine();if(n!=="age-encryption.org/v1")throw Error("invalid version "+(n??"line"));let i=[];for(;;){let{s:r,next:o}=await R4(t);if(r!==void 0){i.push(r);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=ut.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:so(e,a)}}}function Zp(e){let t=[];t.push(`age-encryption.org/v1
+`)}function Ww(e){let t=new Map;for(let n of e){if(t.has(n.name))throw Error(`Duplicate command name: ${n.name}`);t.set(n.name,n)}return t}function Ze(e,t){let n=e[t];return typeof n==="string"?n:void 0}function _c(e,t){let n=e[t];return typeof n==="boolean"?n:void 0}var $c={name:"@rizom/ops",version:"0.2.0-alpha.322",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as Z4,mkdirSync as F4,readFileSync as sm,writeFileSync as am}from"fs";import{dirname as K4,join as n$}from"path";function xd(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Fe(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(`${n}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw RangeError(`${n}expected integer >= 0, got ${e}`)}}function tt(e,t,n=""){let i=xd(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Cr(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Fe(e.outputLen),Fe(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function ji(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function kc(e,t){tt(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw RangeError('"digestInto() output" expected to be of length >='+n)}function Ec(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function gt(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mi(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Qt(e,t){return e<<32-t|e>>>t}function Ie(e,t){return e<<t|e>>>32-t>>>0}var hR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function gR(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function yR(e){for(let t=0;t<e.length;t++)e[t]=gR(e[t]);return e}var wd=hR?(e)=>e:yR,Jw=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),bR=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Ic(e){if(tt(e),Jw)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=bR[e[n]];return t}var Pr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Gw(e){if(e>=Pr._0&&e<=Pr._9)return e-Pr._0;if(e>=Pr.A&&e<=Pr.F)return e-(Pr.A-10);if(e>=Pr.a&&e<=Pr.f)return e-(Pr.a-10);return}function ds(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(Jw)try{return Uint8Array.fromHex(e)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let t=e.length,n=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=Gw(e.charCodeAt(o)),a=Gw(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function vR(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function Sd(e,t=""){if(typeof e==="string")return vR(e);return tt(e,void 0,t)}function _d(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];tt(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Oc(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function $d(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.canXOF=i.canXOF,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function Nr(e=32){Fe(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var kd=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ed{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Cr(e),tt(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),gt(i)}update(e){return ji(this),this.iHash.update(e),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var fr=(()=>{let e=(t,n,i)=>new Ed(t,n).update(i).digest();return e.create=(t,n)=>new Ed(t,n),e})();function ps(e,t,n){if(Cr(e),n===void 0)n=new Uint8Array(e.outputLen);return fr(e,n,t)}var Id=Uint8Array.of(0),Xw=Uint8Array.of();function Od(e,t,n,i=32){Cr(e),Fe(i,"length"),tt(t,void 0,"prk");let r=e.outputLen;if(t.length<r)throw Error('"prk" must be at least HashLen octets');if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=Xw;else tt(n,void 0,"info");let s=new Uint8Array(o*r),a=fr.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Id[0]=u+1,c.update(u===0?Xw:l).update(n).update(Id).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),gt(l,Id),s.slice(0,i)}var rn=(e,t,n,i,r)=>Od(e,ps(e,t,n),i,r);function Qw(e,t,n){return e&t^~e&n}function eS(e,t,n){return e&t^e&n^t&n}class Ac{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mi(this.buffer)}update(e){ji(this),tt(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mi(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,gt(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mi(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var Dr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var rt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Tc=BigInt(4294967295),tS=BigInt(32);function xR(e,t=!1){if(t)return{h:Number(e&Tc),l:Number(e>>tS&Tc)};return{h:Number(e>>tS&Tc)|0,l:Number(e&Tc)|0}}function rS(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=xR(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var Ad=(e,t,n)=>e>>>n,Td=(e,t,n)=>e<<32-n|t>>>n,Hn=(e,t,n)=>e>>>n|t<<32-n,Vn=(e,t,n)=>e<<32-n|t>>>n,ms=(e,t,n)=>e<<64-n|t>>>n-32,hs=(e,t,n)=>e>>>n-32|t<<64-n;function dr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var nS=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),iS=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,oS=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),sS=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,aS=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),cS=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var SR=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nn=new Uint32Array(64);class lS extends Ac{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)nn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=nn[u-15],p=nn[u-2],m=Qt(d,7)^Qt(d,18)^d>>>3,y=Qt(p,17)^Qt(p,19)^p>>>10;nn[u]=y+nn[u-7]+m+nn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Qt(s,6)^Qt(s,11)^Qt(s,25),p=l+d+Qw(s,a,c)+SR[u]+nn[u]|0,y=(Qt(n,2)^Qt(n,13)^Qt(n,22))+eS(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){gt(nn)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),gt(this.buffer)}}class uS extends lS{A=Dr[0]|0;B=Dr[1]|0;C=Dr[2]|0;D=Dr[3]|0;E=Dr[4]|0;F=Dr[5]|0;G=Dr[6]|0;H=Dr[7]|0;constructor(){super(32)}}var fS=(()=>rS(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),_R=(()=>fS[0])(),$R=(()=>fS[1])(),on=new Uint32Array(80),sn=new Uint32Array(80);class dS extends Ac{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let S=0;S<16;S++,t+=4)on[S]=e.getUint32(t),sn[S]=e.getUint32(t+=4);for(let S=16;S<80;S++){let A=on[S-15]|0,I=sn[S-15]|0,C=Hn(A,I,1)^Hn(A,I,8)^Ad(A,I,7),U=Vn(A,I,1)^Vn(A,I,8)^Td(A,I,7),F=on[S-2]|0,T=sn[S-2]|0,j=Hn(F,T,19)^ms(F,T,61)^Ad(F,T,6),X=Vn(F,T,19)^hs(F,T,61)^Td(F,T,6),P=oS(U,X,sn[S-7],sn[S-16]),E=sS(P,C,j,on[S-7],on[S-16]);on[S]=E|0,sn[S]=P|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let S=0;S<80;S++){let A=Hn(u,d,14)^Hn(u,d,18)^ms(u,d,41),I=Vn(u,d,14)^Vn(u,d,18)^hs(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=aS(w,I,U,$R[S],sn[S]),T=cS(F,g,A,C,_R[S],on[S]),j=F|0,X=Hn(n,i,28)^ms(n,i,34)^ms(n,i,39),P=Vn(n,i,28)^hs(n,i,34)^hs(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=dr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=nS(j,P,N);n=iS(x,T,X,E),i=x|0}({h:n,l:i}=dr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=dr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=dr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=dr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=dr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=dr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=dr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=dr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){gt(on,sn)}destroy(){this.destroyed=!0,gt(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class pS extends dS{Ah=rt[0]|0;Al=rt[1]|0;Bh=rt[2]|0;Bl=rt[3]|0;Ch=rt[4]|0;Cl=rt[5]|0;Dh=rt[6]|0;Dl=rt[7]|0;Eh=rt[8]|0;El=rt[9]|0;Fh=rt[10]|0;Fl=rt[11]|0;Gh=rt[12]|0;Gl=rt[13]|0;Hh=rt[14]|0;Hl=rt[15]|0;constructor(){super(64)}}var Ke=$d(()=>new uS,kd(1));var Rc=$d(()=>new pS,kd(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function zc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Cd(e){if(!zc(e))throw TypeError("Uint8Array expected")}function bS(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((n)=>typeof n==="string");else return t.every((n)=>Number.isSafeInteger(n))}function vS(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function an(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function ys(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Cc(e){if(!Array.isArray(e))throw TypeError("array expected")}function Nc(e,t){if(!bS(!0,t))throw TypeError(`${e}: array of strings expected`)}function Nd(e,t){if(!bS(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Nt(...e){let t=(o)=>o,n=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(n,t),r=e.map((o)=>o.decode).reduce(n,t);return{encode:i,decode:r}}function Dt(e){let t=typeof e==="string"?e.split(""):e,n=t.length;Nc("alphabet",t);let i=new Map(t.map((r,o)=>[r,o]));return{encode:(r)=>(Cc(r),r.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=n)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(r)=>(Cc(r),r.map((o)=>{an("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function zt(e=""){return an("join",e),{encode:(t)=>(Nc("join.decode",t),t.join(e)),decode:(t)=>(an("join.decode",t),t.split(e))}}function Uc(e,t="="){return ys(e),an("padding",t),{encode(n){Nc("padding.encode",n);while(n.length*e%8)n.push(t);return n},decode(n){Nc("padding.decode",n);let i=n.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&n[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return n.slice(0,i)}}}function xS(e){return vS(e),{encode:(t)=>t,decode:(t)=>e(t)}}function mS(e,t,n){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(n<2)throw RangeError(`convertRadix: invalid to=${n}, base cannot be less than 2`);if(Cc(e),!e.length)return[];let i=0,r=[],o=Array.from(e,(a)=>{if(ys(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,p=d+u;if(!Number.isSafeInteger(p)||d/t!==a||p-u!==d)throw Error("convertRadix: carry overflow");let m=p/n;a=p%n;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*n+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(r.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)r.push(0);return r.reverse()}var wS=(e,t)=>t===0?e:wS(t,e%t),Dc=(e,t)=>e+(t-wS(e,t)),Pc=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Rd(e,t,n,i){if(Cc(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(n<=0||n>32)throw RangeError(`convertRadix2: wrong to=${n}`);if(Dc(t,n)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${n} carryBits=${Dc(t,n)}`);let r=0,o=0,s=Pc[t],a=Pc[n]-1,c=[];for(let l of e){if(ys(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(r=r<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=n;o-=n)c.push((r>>o-n&a)>>>0);let u=Pc[o];if(u===void 0)throw Error("invalid carry");r&=u-1}if(r=r<<n-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&r>0)throw Error(`Non-zero padding: ${r}`);if(i&&o>0)c.push(r>>>0);return c}function kR(e){ys(e);let t=256;return{encode:(n)=>{if(!zc(n))throw TypeError("radix.encode input should be Uint8Array");return mS(Array.from(n),t,e)},decode:(n)=>(Nd("radix.decode",n),Uint8Array.from(mS(n,e,t)))}}function Kt(e,t=!1){if(ys(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Dc(8,e)>32||Dc(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(n)=>{if(!zc(n))throw TypeError("radix2.encode input should be Uint8Array");return Rd(Array.from(n),8,e,!t)},decode:(n)=>(Nd("radix2.decode",n),Uint8Array.from(Rd(n,e,8,t)))}}function hS(e){return vS(e),function(...t){try{return e.apply(null,t)}catch(n){}}}var S7=Object.freeze(Nt(Kt(4),Dt("0123456789ABCDEF"),zt(""))),_7=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Uc(5),zt(""))),$7=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),zt(""))),k7=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Uc(5),zt(""))),E7=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),zt(""))),I7=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),zt(""),xS((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),SS=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),ER=/[\t\n\f\r ]/,_S=(e,t)=>{an("base64",e);let n=t?"base64url":"base64";if(e.length>0&&ER.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:n,lastChunkHandling:"strict"})},Dd=Object.freeze(SS?{encode(e){return Cd(e),e.toBase64()},decode(e){return _S(e,!1)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Uc(6),zt(""))),ut=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),zt(""))),O7=Object.freeze(SS?{encode(e){return Cd(e),e.toBase64({alphabet:"base64url"})},decode(e){return _S(e,!0)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Uc(6),zt(""))),A7=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),zt(""))),zd=(e)=>Nt(kR(58),Dt(e),zt("")),T7=Object.freeze(zd("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),R7=Object.freeze(zd("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),P7=Object.freeze(zd("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Pd=Nt(Dt("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),zt("")),gS=[996825010,642813549,513874426,1027748829,705979059];function gs(e){let t=e>>25,n=(e&33554431)<<5;for(let i=0;i<gS.length;i++)if((t>>i&1)===1)n^=gS[i];return n}function yS(e,t,n=1){let i=e.length,r=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);r=gs(r)^s>>5}r=gs(r);for(let o=0;o<i;o++)r=gs(r)^e.charCodeAt(o)&31;for(let o of t)r=gs(r)^o;for(let o=0;o<6;o++)r=gs(r);return r^=n,Pd.encode(Rd([r%Pc[30]],30,5,!1))}function $S(e){let t=e==="bech32"?1:734539939,n=Kt(5),i=n.decode,r=n.encode,o=hS(i);function s(d,p,m=90){if(an("bech32.encode prefix",d),zc(p))p=Array.from(p);Nd("bech32.encode",p);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let h=y+7+p.length;if(m!==!1&&h>m)throw TypeError(`Length ${h} exceeds limit ${m}`);let g=d.toLowerCase(),w=yS(g,p,t);return`${g}1${Pd.encode(p)}${w}`}function a(d,p=90){an("bech32.decode input",d);let m=d.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${d}). Expected (8..${p})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let h=y.lastIndexOf("1");if(h===0||h===-1)throw Error('Letter "1" must be present between prefix and data only');let g=y.slice(0,h),w=y.slice(h+1);if(w.length<6)throw Error("Data must be at least 6 characters long");let S=Pd.decode(w).slice(0,-6),A=yS(g,S,t);if(!w.endsWith(A))throw Error(`Invalid checksum in ${d}: expected "${A}"`);return{prefix:g,words:S}}let c=hS(a);function l(d){let{prefix:p,words:m}=a(d,!1);return{prefix:p,words:m,bytes:i(m)}}function u(d,p){return s(d,r(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:r}}var Ut=Object.freeze($S("bech32")),C7=Object.freeze($S("bech32m"));var IR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),OR={encode(e){return Cd(e),e.toHex()},decode(e){return an("hex",e),Uint8Array.fromHex(e)}},N7=Object.freeze(IR?OR:Nt(Kt(4),Dt("0123456789abcdef"),zt(""),xS((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function TR(e,t,n,i){Cr(e);let r=Oc({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=r;if(Fe(o,"c"),Fe(s,"dkLen"),Fe(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=Sd(t,"password"),l=Sd(n,"salt"),u=new Uint8Array(s),d=fr.create(e,c),p=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:p}}function RR(e,t,n,i,r){if(e.destroy(),t.destroy(),i)i.destroy();return gt(r),n}function Ud(e,t,n,i){let{c:r,dkLen:o,DK:s,PRF:a,PRFSalt:c}=TR(e,t,n,i),l,u=new Uint8Array(4),d=Mi(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let h=s.subarray(y,y+a.outputLen);d.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),h.set(p.subarray(0,h.length));for(let g=1;g<r;g++){a._cloneInto(l).update(p).digestInto(p);for(let w=0;w<h.length;w++)h[w]^=p[w]}}return RR(a,c,s,l,p)}function kS(e,t,n,i,r,o){let s=e[t++]^n[i++],a=e[t++]^n[i++],c=e[t++]^n[i++],l=e[t++]^n[i++],u=e[t++]^n[i++],d=e[t++]^n[i++],p=e[t++]^n[i++],m=e[t++]^n[i++],y=e[t++]^n[i++],h=e[t++]^n[i++],g=e[t++]^n[i++],w=e[t++]^n[i++],S=e[t++]^n[i++],A=e[t++]^n[i++],I=e[t++]^n[i++],C=e[t++]^n[i++],U=s,F=a,T=c,j=l,X=u,P=d,E=p,N=m,x=y,k=h,_=g,D=w,O=S,L=A,M=I,H=C;for(let re=0;re<8;re+=2)X^=Ie(U+O|0,7),x^=Ie(X+U|0,9),O^=Ie(x+X|0,13),U^=Ie(O+x|0,18),k^=Ie(P+F|0,7),L^=Ie(k+P|0,9),F^=Ie(L+k|0,13),P^=Ie(F+L|0,18),M^=Ie(_+E|0,7),T^=Ie(M+_|0,9),E^=Ie(T+M|0,13),_^=Ie(E+T|0,18),j^=Ie(H+D|0,7),N^=Ie(j+H|0,9),D^=Ie(N+j|0,13),H^=Ie(D+N|0,18),F^=Ie(U+j|0,7),T^=Ie(F+U|0,9),j^=Ie(T+F|0,13),U^=Ie(j+T|0,18),E^=Ie(P+X|0,7),N^=Ie(E+P|0,9),X^=Ie(N+E|0,13),P^=Ie(X+N|0,18),D^=Ie(_+k|0,7),x^=Ie(D+_|0,9),k^=Ie(x+D|0,13),_^=Ie(k+x|0,18),O^=Ie(H+M|0,7),L^=Ie(O+H|0,9),M^=Ie(L+O|0,13),H^=Ie(M+L|0,18);r[o++]=s+U|0,r[o++]=a+F|0,r[o++]=c+T|0,r[o++]=l+j|0,r[o++]=u+X|0,r[o++]=d+P|0,r[o++]=p+E|0,r[o++]=m+N|0,r[o++]=y+x|0,r[o++]=h+k|0,r[o++]=g+_|0,r[o++]=w+D|0,r[o++]=S+O|0,r[o++]=A+L|0,r[o++]=I+M|0,r[o++]=C+H|0}function Ld(e,t,n,i,r){let o=i+0,s=i+16*r;for(let a=0;a<16;a++)n[s+a]=e[t+(2*r-1)*16+a];for(let a=0;a<r;a++,o+=16,t+=16){if(kS(n,s,e,t,n,o),a>0)s+=16;kS(n,o,e,t+=16,n,s)}}function PR(e,t,n){let i=Oc({dkLen:32,asyncTick:10,maxmem:1073742848},n),{N:r,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Fe(r,"N"),Fe(o,"r"),Fe(s,"p"),Fe(a,"dkLen"),Fe(c,"asyncTick"),Fe(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,p=d/4,m=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(r+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let h=Ud(Ke,e,t,{c:1,dkLen:d*s}),g=Ec(h),w=Ec(new Uint8Array(d*r)),S=Ec(new Uint8Array(d)),A=()=>{};if(u){let I=2*r*s,C=Math.max(Math.floor(I/1e4),1),U=0;A=()=>{if(U++,u&&(!(U%C)||U===I))u(U/I)}}return{N:r,r:o,p:s,dkLen:a,blockSize32:p,V:w,B32:g,B:h,tmp:S,blockMixCb:A,asyncTick:c}}function CR(e,t,n,i,r){let o=Ud(Ke,e,n,{c:1,dkLen:t});return gt(n,i,r),o}function Bd(e,t,n){let{N:i,r,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:p}=PR(e,t,n);wd(l);for(let m=0;m<o;m++){let y=a*m;for(let h=0;h<a;h++)c[h]=l[y+h];for(let h=0,g=0;h<i-1;h++)Ld(c,g,c,g+=a,r),p();Ld(c,(i-1)*a,l,y,r),p();for(let h=0;h<i;h++){let g=(l[y+a-16]&i-1)>>>0;for(let w=0;w<a;w++)d[w]=l[y+w]^c[g*a+w];Ld(d,0,l,y,r),p()}}return wd(l),CR(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function NR(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Lc(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Zi(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ye(e,t,n=""){let i=NR(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function jd(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function ES(e,t,n=!1){Ye(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(n&&!Fi(e))throw Error("invalid output, must be aligned")}function pr(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function er(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function DR(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Yn=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),zR=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var UR=(e)=>{for(let t=0;t<e.length;t++)e[t]=zR(e[t]);return e},zr=Yn?(e)=>e:UR;function IS(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function OS(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function AS(e,t,n){let i=t,r=n||(()=>[]),o=(a,c)=>i(c,...r(a)).update(a).digest(),s=i(new Uint8Array(e),...r(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var TS=(e,t)=>{function n(i,...r){if(Ye(i,void 0,"key"),e.nonceLength!==void 0){let u=r[0];Ye(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&r[1]!==void 0)Ye(r[1],void 0,"AAD");let s=t(i,...r),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Ye(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ye(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Ye(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(n,e),n};function bs(e,t,n=!0){if(t===void 0)return new Uint8Array(e);if(Ye(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(n&&!Fi(t))throw Error("invalid output, must be aligned");return t}function RS(e,t,n){Zi(e),Zi(t),Lc(n);let i=new Uint8Array(16),r=DR(i);return r.setBigUint64(0,BigInt(t),n),r.setBigUint64(8,BigInt(e),n),i}function Fi(e){return e.byteOffset%4===0}function Ki(e){return Uint8Array.from(Ye(e))}var CS=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),LR=(()=>zr(pr(CS("expand 16-byte k"))))(),BR=(()=>zr(pr(CS("expand 32-byte k"))))();function Oe(e,t){return e<<t|e>>>32-t}var vs=64,jR=16,Md=(()=>4294967295)(),PS=Uint32Array.of();function MR(e,t,n,i,r,o,s,a){let c=r.length,l=new Uint8Array(vs),u=pr(l),d=Yn&&Fi(r)&&Fi(o),p=d?pr(r):PS,m=d?pr(o):PS;if(!Yn){for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),zr(u),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}return}for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);if(d&&h===vs){let g=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let w=0,S;w<jR;w++)S=g+w,m[S]=p[S]^u[w];y+=vs;continue}for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}}function NS(e,t){let{allowShortKeys:n,extendNonceFn:i,counterLength:r,counterRight:o,rounds:s}=IS({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Zi(r),Zi(s),Lc(o),Lc(n),(a,c,l,u,d=0)=>{Ye(a,void 0,"key"),Ye(c,void 0,"nonce"),Ye(l,void 0,"data");let p=l.length;if(u=bs(p,u,!1),Zi(d),d<0||d>=Md)throw Error("arx: counter overflow");let m=[],y=a.length,h,g;if(y===32)m.push(h=Ki(a)),g=BR;else if(y===16&&n)h=new Uint8Array(32),h.set(a),h.set(a,16),g=LR,m.push(h);else throw Ye(a,32,"arx key"),Error("invalid key size");if(!Yn||!Fi(c))m.push(c=Ki(c));let w=pr(h);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let I=c.subarray(0,16);if(Yn)i(g,w,pr(I),w);else{let C=zr(Uint32Array.from(g));i(C,w,pr(I),w),er(C),zr(w)}c=c.subarray(16)}else if(!Yn)zr(w);let S=16-r;if(S!==c.length)throw Error(`arx: nonce must be ${S} or 16 bytes`);if(S!==12){let I=new Uint8Array(12);I.set(c,o?0:12-c.length),c=I,m.push(c)}let A=zr(pr(c));try{return MR(e,g,w,A,l,u,d,s),u}finally{er(...m)}}}function nt(e,t){return e[t++]&255|(e[t++]&255)<<8}class DS{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ki(Ye(e,32,"key"));let t=nt(e,0),n=nt(e,2),i=nt(e,4),r=nt(e,6),o=nt(e,8),s=nt(e,10),a=nt(e,12),c=nt(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|r<<9)&8191,this.r[4]=(r>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=nt(e,16+2*l)}process(e,t,n=!1){let i=n?0:2048,{h:r,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],p=o[6],m=o[7],y=o[8],h=o[9],g=nt(e,t+0),w=nt(e,t+2),S=nt(e,t+4),A=nt(e,t+6),I=nt(e,t+8),C=nt(e,t+10),U=nt(e,t+12),F=nt(e,t+14),T=r[0]+(g&8191),j=r[1]+((g>>>13|w<<3)&8191),X=r[2]+((w>>>10|S<<6)&8191),P=r[3]+((S>>>7|A<<9)&8191),E=r[4]+((A>>>4|I<<12)&8191),N=r[5]+(I>>>1&8191),x=r[6]+((I>>>14|C<<2)&8191),k=r[7]+((C>>>11|U<<5)&8191),_=r[8]+((U>>>8|F<<8)&8191),D=r[9]+(F>>>5|i),O=0,L=O+T*s+j*(5*h)+X*(5*y)+P*(5*m)+E*(5*p);O=L>>>13,L&=8191,L+=N*(5*d)+x*(5*u)+k*(5*l)+_*(5*c)+D*(5*a),O+=L>>>13,L&=8191;let M=O+T*a+j*s+X*(5*h)+P*(5*y)+E*(5*m);O=M>>>13,M&=8191,M+=N*(5*p)+x*(5*d)+k*(5*u)+_*(5*l)+D*(5*c),O+=M>>>13,M&=8191;let H=O+T*c+j*a+X*s+P*(5*h)+E*(5*y);O=H>>>13,H&=8191,H+=N*(5*m)+x*(5*p)+k*(5*d)+_*(5*u)+D*(5*l),O+=H>>>13,H&=8191;let re=O+T*l+j*c+X*a+P*s+E*(5*h);O=re>>>13,re&=8191,re+=N*(5*y)+x*(5*m)+k*(5*p)+_*(5*d)+D*(5*u),O+=re>>>13,re&=8191;let ae=O+T*u+j*l+X*c+P*a+E*s;O=ae>>>13,ae&=8191,ae+=N*(5*h)+x*(5*y)+k*(5*m)+_*(5*p)+D*(5*d),O+=ae>>>13,ae&=8191;let le=O+T*d+j*u+X*l+P*c+E*a;O=le>>>13,le&=8191,le+=N*s+x*(5*h)+k*(5*y)+_*(5*m)+D*(5*p),O+=le>>>13,le&=8191;let pe=O+T*p+j*d+X*u+P*l+E*c;O=pe>>>13,pe&=8191,pe+=N*a+x*s+k*(5*h)+_*(5*y)+D*(5*m),O+=pe>>>13,pe&=8191;let ye=O+T*m+j*p+X*d+P*u+E*l;O=ye>>>13,ye&=8191,ye+=N*c+x*a+k*s+_*(5*h)+D*(5*y),O+=ye>>>13,ye&=8191;let he=O+T*y+j*m+X*p+P*d+E*u;O=he>>>13,he&=8191,he+=N*l+x*c+k*a+_*s+D*(5*h),O+=he>>>13,he&=8191;let ge=O+T*h+j*y+X*m+P*p+E*d;O=ge>>>13,ge&=8191,ge+=N*u+x*l+k*c+_*a+D*s,O+=ge>>>13,ge&=8191,O=(O<<2)+O|0,O=O+L|0,L=O&8191,O=O>>>13,M+=O,r[0]=L,r[1]=M,r[2]=H,r[3]=re,r[4]=ae,r[5]=le,r[6]=pe,r[7]=ye,r[8]=he,r[9]=ge}finalize(){let{h:e,pad:t}=this,n=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,n[0]=e[0]+5,i=n[0]>>>13,n[0]&=8191;for(let s=1;s<10;s++)n[s]=e[s]+i,i=n[s]>>>13,n[s]&=8191;n[9]-=8192;let r=(i^1)-1;for(let s=0;s<10;s++)n[s]&=r;r=~r;for(let s=0;s<10;s++)e[s]=e[s]&r|n[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;er(n)}update(e){jd(this),Ye(e),e=Ki(e);let{buffer:t,blockLen:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(n-this.pos,i-r);if(o===n){for(;n<=i-r;r+=n)this.process(e,r);continue}if(t.set(e.subarray(r,r+o),this.pos),this.pos+=o,r+=o,this.pos===n)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,er(this.h,this.r,this.buffer,this.pad)}digestInto(e){jd(this),ES(e,this),this.finished=!0;let{buffer:t,h:n}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let r=0;for(let o=0;o<8;o++)e[r++]=n[o]>>>0,e[r++]=n[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}}var zS=AS(32,(e)=>new DS(e));function ZR(e,t,n,i,r,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],p=t[2],m=t[3],y=t[4],h=t[5],g=t[6],w=t[7],S=r,A=n[0],I=n[1],C=n[2],U=s,F=a,T=c,j=l,X=u,P=d,E=p,N=m,x=y,k=h,_=g,D=w,O=S,L=A,M=I,H=C;for(let ae=0;ae<o;ae+=2)U=U+X|0,O=Oe(O^U,16),x=x+O|0,X=Oe(X^x,12),U=U+X|0,O=Oe(O^U,8),x=x+O|0,X=Oe(X^x,7),F=F+P|0,L=Oe(L^F,16),k=k+L|0,P=Oe(P^k,12),F=F+P|0,L=Oe(L^F,8),k=k+L|0,P=Oe(P^k,7),T=T+E|0,M=Oe(M^T,16),_=_+M|0,E=Oe(E^_,12),T=T+E|0,M=Oe(M^T,8),_=_+M|0,E=Oe(E^_,7),j=j+N|0,H=Oe(H^j,16),D=D+H|0,N=Oe(N^D,12),j=j+N|0,H=Oe(H^j,8),D=D+H|0,N=Oe(N^D,7),U=U+P|0,H=Oe(H^U,16),_=_+H|0,P=Oe(P^_,12),U=U+P|0,H=Oe(H^U,8),_=_+H|0,P=Oe(P^_,7),F=F+E|0,O=Oe(O^F,16),D=D+O|0,E=Oe(E^D,12),F=F+E|0,O=Oe(O^F,8),D=D+O|0,E=Oe(E^D,7),T=T+N|0,L=Oe(L^T,16),x=x+L|0,N=Oe(N^x,12),T=T+N|0,L=Oe(L^T,8),x=x+L|0,N=Oe(N^x,7),j=j+X|0,M=Oe(M^j,16),k=k+M|0,X=Oe(X^k,12),j=j+X|0,M=Oe(M^j,8),k=k+M|0,X=Oe(X^k,7);let re=0;i[re++]=s+U|0,i[re++]=a+F|0,i[re++]=c+T|0,i[re++]=l+j|0,i[re++]=u+X|0,i[re++]=d+P|0,i[re++]=p+E|0,i[re++]=m+N|0,i[re++]=y+x|0,i[re++]=h+k|0,i[re++]=g+_|0,i[re++]=w+D|0,i[re++]=S+O|0,i[re++]=A+L|0,i[re++]=I+M|0,i[re++]=C+H|0}var FR=NS(ZR,{counterRight:!1,counterLength:4,allowShortKeys:!1});var KR=new Uint8Array(16),US=(e,t)=>{e.update(t);let n=t.length%16;if(n)e.update(KR.subarray(n))},qR=new Uint8Array(32);function LS(e,t,n,i,r){if(r!==void 0)Ye(r,void 0,"AAD");let o=e(t,n,qR),s=RS(i.length,r?r.length:0,!0),a=zS.create(o);if(r)US(a,r);US(a,i),a.update(s);let c=a.digest();return er(o,s),c}var HR=(e)=>(t,n,i)=>({encrypt(o,s){let a=o.length;s=bs(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,n,c,c,1);let l=LS(e,t,n,c,i);return s.set(l,a),er(l),s},decrypt(o,s){s=bs(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=LS(e,t,n,a,i);if(!OS(c,l))throw er(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,n,s,s,1),er(l),s}}),qt=TS({blockSize:64,nonceLength:12,tagLength:16},HR(FR));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function qi(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Xe(e,t=""){if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw Error(`${n}expected integer >= 0, got ${e}`)}}function ve(e,t,n=""){let i=qi(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function Ht(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Xe(e.outputLen),Xe(e.blockLen)}function Lr(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bc(e,t){ve(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw Error('"digestInto() output" expected to be of length >='+n)}function jc(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function It(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function tr(e,t){return e<<32-t|e>>>t}var VR=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function YR(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function WR(e){for(let t=0;t<e.length;t++)e[t]=YR(e[t]);return e}var Zd=VR?(e)=>e:WR,jS=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),GR=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Wn(e){if(ve(e),jS)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=GR[e[n]];return t}var Ur={_0:48,_9:57,A:65,F:70,a:97,f:102};function BS(e){if(e>=Ur._0&&e<=Ur._9)return e-Ur._0;if(e>=Ur.A&&e<=Ur.F)return e-(Ur.A-10);if(e>=Ur.a&&e<=Ur.f)return e-(Ur.a-10);return}function Gn(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(jS)return Uint8Array.fromHex(e);let t=e.length,n=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=BS(e.charCodeAt(o)),a=BS(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function qe(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];ve(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Hi(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function cn(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ln=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Kd=BigInt(0),Fd=BigInt(1);function xs(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw Error(n+"expected boolean, got type="+typeof e)}return e}function MS(e){if(typeof e==="bigint"){if(!Zc(e))throw Error("positive bigint expected, got "+e)}else Xe(e);return e}function ws(e){let t=MS(e).toString(16);return t.length&1?"0"+t:t}function ZS(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Kd:BigInt("0x"+e)}function un(e){return ZS(Wn(e))}function fn(e){return ZS(Wn(Fc(ve(e)).reverse()))}function Vi(e,t){Xe(t),e=MS(e);let n=Gn(e.toString(16).padStart(t*2,"0"));if(n.length!==t)throw Error("number too large");return n}function Ss(e,t){return Vi(e,t).reverse()}function Fc(e){return Uint8Array.from(e)}function dn(e){return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var Zc=(e)=>typeof e==="bigint"&&Kd<=e;function JR(e,t,n){return Zc(e)&&Zc(t)&&Zc(n)&&t<=e&&e<n}function _s(e,t,n,i){if(!JR(t,n,i))throw Error("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function qd(e){let t;for(t=0;e>Kd;e>>=Fd,t+=1);return t}var $s=(e)=>(Fd<<BigInt(e))-Fd;function FS(e,t,n){if(Xe(e,"hashLen"),Xe(t,"qByteLen"),typeof n!=="function")throw Error("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,qe(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let S=c.slice();w.push(S),g+=c.length}return qe(...w)};return(g,w)=>{d(),m(g);let S=void 0;while(!(S=w(y())))m();return d(),S}}function Jn(e,t={},n={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}function Hd(e){let t=new WeakMap;return(n,...i)=>{let r=t.get(n);if(r!==void 0)return r;let o=e(n,...i);return t.set(n,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bt=BigInt(0),ft=BigInt(1),Xn=BigInt(2),HS=BigInt(3),VS=BigInt(4),YS=BigInt(5),XR=BigInt(7),WS=BigInt(8),QR=BigInt(9),GS=BigInt(16);function yt(e,t){let n=e%t;return n>=bt?n:t+n}function Vt(e,t,n){let i=e;while(t-- >bt)i*=i,i%=n;return i}function KS(e,t){if(e===bt)throw Error("invert: expected non-zero number");if(t<=bt)throw Error("invert: expected positive modulus, got "+t);let n=yt(e,t),i=t,r=bt,o=ft,s=ft,a=bt;while(n!==bt){let l=i/n,u=i%n,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==ft)throw Error("invert: does not exist");return yt(r,t)}function Vd(e,t,n){if(!e.eql(e.sqr(t),n))throw Error("Cannot find square root")}function JS(e,t){let n=(e.ORDER+ft)/VS,i=e.pow(t,n);return Vd(e,i,t),i}function eP(e,t){let n=(e.ORDER-YS)/WS,i=e.mul(t,Xn),r=e.pow(i,n),o=e.mul(t,r),s=e.mul(e.mul(o,Xn),r),a=e.mul(o,e.sub(s,e.ONE));return Vd(e,a,t),a}function tP(e){let t=Kc(e),n=XS(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+XR)/GS;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,r),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,m),u=a.cmov(p,d,y);let h=a.eql(a.sqr(u),c),g=a.cmov(l,u,h);return Vd(a,g,c),g}}function XS(e){if(e<HS)throw Error("sqrt is not defined for small field");let t=e-ft,n=0;while(t%Xn===bt)t/=Xn,n++;let i=Xn,r=Kc(e);while(qS(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return JS;let o=r.pow(i,t),s=(t+ft)/Xn;return function(c,l){if(c.is0(l))return l;if(qS(c,l)!==1)throw Error("Cannot find square root");let u=n,d=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,h=c.sqr(p);while(!c.eql(h,c.ONE))if(y++,h=c.sqr(h),y===u)throw Error("Cannot find square root");let g=ft<<BigInt(u-y-1),w=c.pow(d,g);u=y,d=c.sqr(w),p=c.mul(p,d),m=c.mul(m,w)}return m}}function rP(e){if(e%VS===HS)return JS;if(e%WS===YS)return eP;if(e%GS===QR)return tP(e);return XS(e)}var nP=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Yd(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=nP.reduce((i,r)=>(i[r]="function",i),t);return Jn(e,n),e}function iP(e,t,n){if(n<bt)throw Error("invalid exponent, negatives unsupported");if(n===bt)return e.ONE;if(n===ft)return t;let i=e.ONE,r=t;while(n>bt){if(n&ft)i=e.mul(i,r);r=e.sqr(r),n>>=ft}return i}function ks(e,t,n=!1){let i=Array(t.length).fill(n?e.ZERO:void 0),r=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(r);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function qS(e,t){let n=(e.ORDER-ft)/Xn,i=e.pow(t,n),r=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!r&&!o&&!s)throw Error("invalid Legendre symbol result");return r?1:o?0:-1}function oP(e,t){if(t!==void 0)Xe(t);let n=t!==void 0?t:e.toString(2).length,i=Math.ceil(n/8);return{nBitLength:n,nByteLength:i}}class QS{ORDER;BITS;BYTES;isLE;ZERO=bt;ONE=ft;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=bt)throw Error("invalid field: expected ORDER > 0, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=oP(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return yt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return bt<=e&&e<this.ORDER}is0(e){return e===bt}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&ft)===ft}neg(e){return yt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return yt(e*e,this.ORDER)}add(e,t){return yt(e+t,this.ORDER)}sub(e,t){return yt(e-t,this.ORDER)}mul(e,t){return yt(e*t,this.ORDER)}pow(e,t){return iP(this,e,t)}div(e,t){return yt(e*KS(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return KS(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=rP(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Ss(e,this.BYTES):Vi(e,this.BYTES)}fromBytes(e,t=!1){ve(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?fn(e):un(e);if(s)a=yt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ks(this,e)}cmov(e,t,n){return n?t:e}}function Kc(e,t={}){return new QS(e,t)}function e_(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function Wd(e){let t=e_(e);return t+Math.ceil(t/2)}function t_(e,t,n=!1){ve(e);let i=e.length,r=e_(t),o=Wd(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?fn(e):un(e),a=yt(s,t-ft)+ft;return n?Ss(a,r):Vi(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Yi=BigInt(0),Qn=BigInt(1);function Es(e,t){let n=t.negate();return e?n:t}function Qd(e,t){let n=ks(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function o_(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Gd(e,t){o_(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=$s(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function r_(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=Qn;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Jd=new WeakMap,s_=new WeakMap;function Xd(e){return s_.get(e)||1}function n_(e){if(e!==Yi)throw Error("invalid wNAF")}class ep{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>Yi){if(t&Qn)n=n.add(i);i=i.double(),t>>=Qn}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Gd(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Gd(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=r_(n,s,o);if(n=a,l)r=r.add(Es(d,t[p]));else i=i.add(Es(u,t[c]))}return n_(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Gd(e,this.bits);for(let o=0;o<r.windows;o++){if(n===Yi)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=r_(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return n_(n),i}getPrecomputes(e,t,n){let i=Jd.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Jd.set(t,i)}}return i}cached(e,t,n){let i=Xd(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Xd(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){o_(t,this.bits),s_.set(e,t),Jd.delete(e)}hasCache(e){return Xd(e)!==1}}function a_(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>Yi||i>Yi){if(n&Qn)o=o.add(r);if(i&Qn)s=s.add(r);r=r.double(),n>>=Qn,i>>=Qn}return{p1:o,p2:s}}function i_(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Yd(t),t}else return Kc(e,{isLE:n})}function c_(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>Yi))throw Error(`CURVE.${c} must be positive bigint`)}let r=i_(t.p,n.Fp,i),o=i_(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function qc(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Is=BigInt(0),Wi=BigInt(1),Hc=BigInt(2);function sP(e){return Jn(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function l_(e){let t=sP(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||cn,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Hc**BigInt(254):Hc**BigInt(447),y=a?BigInt(8)*Hc**BigInt(251)-Wi:BigInt(4)*Hc**BigInt(445)-Wi,h=m+y+Wi,g=(x)=>yt(x,n),w=S(d);function S(x){return Ss(g(x),u)}function A(x){let k=Fc(ve(x,u,"uCoordinate"));if(a)k[31]&=127;return g(fn(k))}function I(x){return fn(r(Fc(ve(x,u,"scalar"))))}function C(x,k){let _=X(A(k),I(x));if(_===Is)throw Error("invalid private or public key received");return S(_)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,_){let D=g(x*(k-_));return k=g(k-D),_=g(_+D),{x_2:k,x_3:_}}function X(x,k){_s("u",x,Is,n),_s("scalar",k,m,h);let _=k,D=x,O=Wi,L=Is,M=x,H=Wi,re=Is;for(let le=BigInt(l-1);le>=Is;le--){let pe=_>>le&Wi;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let P={secretKey:u,publicKey:u,seed:u},E=(x=c(u))=>(ve(x,P.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze({keygen:qc(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:P})}class tp{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(Ht(e),ve(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),It(i)}update(e){return Lr(this),this.iHash.update(e),this}digestInto(e){Lr(this),ve(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Gi=(e,t,n)=>new tp(e,t).update(n).digest();Gi.create=(e,t)=>new tp(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u_=(e,t)=>(e+(e>=0?t:-t)/d_)/t;function aP(e,t,n){let[[i,r],[o,s]]=t,a=u_(s*e,n),c=u_(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<Br,p=u<Br;if(d)l=-l;if(p)u=-u;let m=$s(Math.ceil(qd(n)/2))+Ji;if(l<Br||l>=m||u<Br||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:p,k2:u}}function np(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function rp(e,t){let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(xs(n.lowS,"lowS"),xs(n.prehash,"prehash"),n.format!==void 0)np(n.format);return n}class f_ extends Error{constructor(e=""){super(e)}}var pn={Err:f_,_tlv:{encode:(e,t)=>{let{Err:n}=pn;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=ws(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?ws(r.length/2|128):"";return ws(e)+o+r+t},decode(e,t){let{Err:n}=pn,i=0;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=pn;if(e<Br)throw new t("integer: negative integers are not allowed");let n=ws(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=pn;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return un(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=pn,r=ve(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=pn,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}},Br=BigInt(0),Ji=BigInt(1),d_=BigInt(2),Vc=BigInt(3),cP=BigInt(4);function ip(e,t={}){let n=c_("weierstrass",e,t),{Fp:i,Fn:r}=n,o=n.CURVE,{h:s,n:a}=o;Jn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=m_(i,r);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(E,N,x){let{x:k,y:_}=N.toAffine(),D=i.toBytes(k);if(xs(x,"isCompressed"),x){u();let O=!i.isOdd(_);return qe(p_(O),D)}else return qe(Uint8Array.of(4),D,i.toBytes(_))}function p(E){ve(E,void 0,"Point");let{publicKey:N,publicKeyUncompressed:x}=l,k=E.length,_=E[0],D=E.subarray(1);if(k===N&&(_===2||_===3)){let O=i.fromBytes(D);if(!i.isValid(O))throw Error("bad point: is not on curve, wrong x");let L=h(O),M;try{M=i.sqrt(L)}catch(ae){let le=ae instanceof Error?": "+ae.message:"";throw Error("bad point: is not on curve, sqrt error"+le)}u();let H=i.isOdd(M);if((_&1)===1!==H)M=i.neg(M);return{x:O,y:M}}else if(k===x&&_===4){let O=i.BYTES,L=i.fromBytes(D.subarray(0,O)),M=i.fromBytes(D.subarray(O,O*2));if(!g(L,M))throw Error("bad point: is not on curve");return{x:L,y:M}}else throw Error(`bad point: got length ${k}, expected compressed=${N} or uncompressed=${x}`)}let m=t.toBytes||d,y=t.fromBytes||p;function h(E){let N=i.sqr(E),x=i.mul(N,E);return i.add(i.add(x,i.mul(E,o.a)),o.b)}function g(E,N){let x=i.sqr(N),k=h(E);return i.eql(x,k)}if(!g(o.Gx,o.Gy))throw Error("bad curve params: generator point");let w=i.mul(i.pow(o.a,Vc),cP),S=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(w,S)))throw Error("bad curve params: a or b");function A(E,N,x=!1){if(!i.isValid(N)||x&&i.is0(N))throw Error(`bad point coordinate ${E}`);return N}function I(E){if(!(E instanceof j))throw Error("Weierstrass Point expected")}function C(E){if(!c||!c.basises)throw Error("no endo");return aP(E,c.basises,r.ORDER)}let U=Hd((E,N)=>{let{X:x,Y:k,Z:_}=E;if(i.eql(_,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(_);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(_,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}),F=Hd((E)=>{if(E.is0()){if(t.allowInfinityPoint&&!i.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:N,y:x}=E.toAffine();if(!i.isValid(N)||!i.isValid(x))throw Error("bad point: x or y not field elements");if(!g(N,x))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function T(E,N,x,k,_){return x=new j(i.mul(x.X,E),x.Y,x.Z),N=Es(k,N),x=Es(_,x),N.add(x)}class j{static BASE=new j(o.Gx,o.Gy,i.ONE);static ZERO=new j(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(E,N,x){this.X=A("x",E),this.Y=A("y",N,!0),this.Z=A("z",x),Object.freeze(this)}static CURVE(){return o}static fromAffine(E){let{x:N,y:x}=E||{};if(!E||!i.isValid(N)||!i.isValid(x))throw Error("invalid affine point");if(E instanceof j)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(x))return j.ZERO;return new j(N,x,i.ONE)}static fromBytes(E){let N=j.fromAffine(y(ve(E,void 0,"point")));return N.assertValidity(),N}static fromHex(E){return j.fromBytes(Gn(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,N=!0){if(P.createCache(this,E),!N)this.multiply(Vc);return this}assertValidity(){F(this)}hasEvenY(){let{y:E}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(E)}equals(E){I(E);let{X:N,Y:x,Z:k}=this,{X:_,Y:D,Z:O}=E,L=i.eql(i.mul(N,O),i.mul(_,k)),M=i.eql(i.mul(x,O),i.mul(D,k));return L&&M}negate(){return new j(this.X,i.neg(this.Y),this.Z)}double(){let{a:E,b:N}=o,x=i.mul(N,Vc),{X:k,Y:_,Z:D}=this,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=i.mul(k,k),re=i.mul(_,_),ae=i.mul(D,D),le=i.mul(k,_);return le=i.add(le,le),M=i.mul(k,D),M=i.add(M,M),O=i.mul(E,M),L=i.mul(x,ae),L=i.add(O,L),O=i.sub(re,L),L=i.add(re,L),L=i.mul(O,L),O=i.mul(le,O),M=i.mul(x,M),ae=i.mul(E,ae),le=i.sub(H,ae),le=i.mul(E,le),le=i.add(le,M),M=i.add(H,H),H=i.add(M,H),H=i.add(H,ae),H=i.mul(H,le),L=i.add(L,H),ae=i.mul(_,D),ae=i.add(ae,ae),H=i.mul(ae,le),O=i.sub(O,H),M=i.mul(ae,re),M=i.add(M,M),M=i.add(M,M),new j(O,L,M)}add(E){I(E);let{X:N,Y:x,Z:k}=this,{X:_,Y:D,Z:O}=E,L=i.ZERO,M=i.ZERO,H=i.ZERO,re=o.a,ae=i.mul(o.b,Vc),le=i.mul(N,_),pe=i.mul(x,D),ye=i.mul(k,O),he=i.add(N,x),ge=i.add(_,D);he=i.mul(he,ge),ge=i.add(le,pe),he=i.sub(he,ge),ge=i.add(N,k);let we=i.add(_,O);return ge=i.mul(ge,we),we=i.add(le,ye),ge=i.sub(ge,we),we=i.add(x,k),L=i.add(D,O),we=i.mul(we,L),L=i.add(pe,ye),we=i.sub(we,L),H=i.mul(re,ge),L=i.mul(ae,ye),H=i.add(L,H),L=i.sub(pe,H),H=i.add(pe,H),M=i.mul(L,H),pe=i.add(le,le),pe=i.add(pe,le),ye=i.mul(re,ye),ge=i.mul(ae,ge),pe=i.add(pe,ye),ye=i.sub(le,ye),ye=i.mul(re,ye),ge=i.add(ge,ye),le=i.mul(pe,ge),M=i.add(M,le),le=i.mul(we,ge),L=i.mul(he,L),L=i.sub(L,le),le=i.mul(he,pe),H=i.mul(we,H),H=i.add(H,le),new j(L,M,H)}subtract(E){return this.add(E.negate())}is0(){return this.equals(j.ZERO)}multiply(E){let{endo:N}=t;if(!r.isValidNot0(E))throw Error("invalid scalar: out of range");let x,k,_=(D)=>P.cached(this,D,(O)=>Qd(j,O));if(N){let{k1neg:D,k1:O,k2neg:L,k2:M}=C(E),{p:H,f:re}=_(O),{p:ae,f:le}=_(M);k=re.add(le),x=T(N.beta,H,ae,D,L)}else{let{p:D,f:O}=_(E);x=D,k=O}return Qd(j,[x,k])[0]}multiplyUnsafe(E){let{endo:N}=t,x=this;if(!r.isValid(E))throw Error("invalid scalar: out of range");if(E===Br||x.is0())return j.ZERO;if(E===Ji)return x;if(P.hasCache(this))return this.multiply(E);if(N){let{k1neg:k,k1:_,k2neg:D,k2:O}=C(E),{p1:L,p2:M}=a_(j,x,_,O);return T(N.beta,L,M,k,D)}else return P.unsafe(x,E)}toAffine(E){return U(this,E)}isTorsionFree(){let{isTorsionFree:E}=t;if(s===Ji)return!0;if(E)return E(j,this);return P.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:E}=t;if(s===Ji)return this;if(E)return E(j,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(E=!0){return xs(E,"isCompressed"),this.assertValidity(),m(j,this,E)}toHex(E=!0){return Wn(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let X=r.BITS,P=new ep(j,t.endo?Math.ceil(X/2):X);return j.BASE.precompute(8),j}function p_(e){return Uint8Array.of(e?2:3)}function m_(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function lP(e,t={}){let{Fn:n}=e,i=t.randomBytes||cn,r=Object.assign(m_(e.Fp,n),{seed:Wd(n.ORDER)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m=i(r.seed)){return t_(ve(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r;if(!qi(m))return;if("_lengths"in n&&n._lengths||y===h)return;let w=ve(m,void 0,"key").length;return w===h||w===g}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=qc(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function op(e,t,n={}){Ht(t),Jn(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let i=n.randomBytes||cn,r=n.hmac||((x,k)=>Gi(t,x,k)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m}=lP(e,n),y={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},h=a*d_<o.ORDER;function g(x){let k=a>>Ji;return x>k}function w(x,k){if(!s.isValidNot0(k))throw Error(`invalid signature ${x}: out of range 1..Point.Fn.ORDER`);return k}function S(){if(h)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function A(x,k){np(k);let _=m.signature,D=k==="compact"?_:k==="recovered"?_+1:void 0;return ve(x,D)}class I{r;s;recovery;constructor(x,k,_){if(this.r=w("r",x),this.s=w("s",k),_!=null){if(S(),![0,1,2,3].includes(_))throw Error("invalid recovery id");this.recovery=_}Object.freeze(this)}static fromBytes(x,k=y.format){A(x,k);let _;if(k==="der"){let{r:M,s:H}=pn.toSig(ve(x));return new I(M,H)}if(k==="recovered")_=x[0],k="compact",x=x.subarray(1);let D=m.signature/2,O=x.subarray(0,D),L=x.subarray(D,D*2);return new I(s.fromBytes(O),s.fromBytes(L),_)}static fromHex(x,k){return this.fromBytes(Gn(x),k)}assertRecovery(){let{recovery:x}=this;if(x==null)throw Error("invalid recovery id: must be present");return x}addRecoveryBit(x){return new I(this.r,this.s,x)}recoverPublicKey(x){let{r:k,s:_}=this,D=this.assertRecovery(),O=D===2||D===3?k+a:k;if(!o.isValid(O))throw Error("invalid recovery id: sig.r+curve.n != R.x");let L=o.toBytes(O),M=e.fromBytes(qe(p_((D&1)===0),L)),H=s.inv(O),re=U(ve(x,void 0,"msgHash")),ae=s.create(-re*H),le=s.create(_*H),pe=e.BASE.multiplyUnsafe(ae).add(M.multiplyUnsafe(le));if(pe.is0())throw Error("invalid recovery: point at infinify");return pe.assertValidity(),pe}hasHighS(){return g(this.s)}toBytes(x=y.format){if(np(x),x==="der")return Gn(pn.hexFromSig(this));let{r:k,s:_}=this,D=s.toBytes(k),O=s.toBytes(_);if(x==="recovered")return S(),qe(Uint8Array.of(this.assertRecovery()),D,O);return qe(D,O)}toHex(x){return Wn(this.toBytes(x))}}let C=n.bits2int||function(k){if(k.length>8192)throw Error("input is too large");let _=un(k),D=k.length*8-c;return D>0?_>>BigInt(D):_},U=n.bits2int_modN||function(k){return s.create(C(k))},F=$s(c);function T(x){return _s("num < 2^"+c,x,Br,F),s.toBytes(x)}function j(x,k){return ve(x,void 0,"message"),k?ve(t(x),void 0,"prehashed message"):x}function X(x,k,_){let{lowS:D,prehash:O,extraEntropy:L}=rp(_,y);x=j(x,O);let M=U(x),H=s.fromBytes(k);if(!s.isValidNot0(H))throw Error("invalid private key");let re=[T(H),T(M)];if(L!=null&&L!==!1){let ye=L===!0?i(m.secretKey):L;re.push(ve(ye,void 0,"extraEntropy"))}let ae=qe(...re),le=M;function pe(ye){let he=C(ye);if(!s.isValidNot0(he))return;let ge=s.inv(he),we=e.BASE.multiply(he).toAffine(),Ne=s.create(we.x);if(Ne===Br)return;let ze=s.create(ge*s.create(le+Ne*H));if(ze===Br)return;let ct=(we.x===Ne?0:2)|Number(we.y&Ji),lt=ze;if(D&&g(ze))lt=s.neg(ze),ct^=1;return new I(Ne,lt,h?void 0:ct)}return{seed:ae,k2sig:pe}}function P(x,k,_={}){let{seed:D,k2sig:O}=X(x,k,_);return FS(t.outputLen,s.BYTES,r)(D,O).toBytes(_.format)}function E(x,k,_,D={}){let{lowS:O,prehash:L,format:M}=rp(D,y);if(_=ve(_,void 0,"publicKey"),k=j(k,L),!qi(x)){let H=x instanceof I?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+H)}A(x,M);try{let H=I.fromBytes(x,M),re=e.fromBytes(_);if(O&&H.hasHighS())return!1;let{r:ae,s:le}=H,pe=U(k),ye=s.inv(le),he=s.create(pe*ye),ge=s.create(ae*ye),we=e.BASE.multiplyUnsafe(he).add(re.multiplyUnsafe(ge));if(we.is0())return!1;return s.create(we.x)===ae}catch(H){return!1}}function N(x,k,_={}){let{prehash:D}=rp(_,y);return k=j(k,D),I.fromBytes(x,"recovered").recoverPublicKey(k).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m,Point:e,sign:P,verify:E,recoverPublicKey:N,Signature:I,hash:t})}function h_(e,t,n){return e&t^~e&n}function g_(e,t,n){return e&t^e&n^t&n}class Yc{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mc(this.buffer)}update(e){Lr(this),ve(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mc(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Lr(this),Bc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,It(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var jr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var it=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Wc=BigInt(4294967295),y_=BigInt(32);function uP(e,t=!1){if(t)return{h:Number(e&Wc),l:Number(e>>y_&Wc)};return{h:Number(e>>y_&Wc)|0,l:Number(e&Wc)|0}}function Gc(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=uP(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var sp=(e,t,n)=>e>>>n,ap=(e,t,n)=>e<<32-n|t>>>n,ei=(e,t,n)=>e>>>n|t<<32-n,ti=(e,t,n)=>e<<32-n|t>>>n,Os=(e,t,n)=>e<<64-n|t>>>n-32,As=(e,t,n)=>e>>>n-32|t<<64-n;var b_=(e,t,n)=>e<<n|t>>>32-n,v_=(e,t,n)=>t<<n|e>>>32-n,x_=(e,t,n)=>t<<n-32|e>>>64-n,w_=(e,t,n)=>e<<n-32|t>>>64-n;function mr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var S_=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),__=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,$_=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),k_=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,E_=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),I_=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var dP=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),mn=new Uint32Array(64);class O_ extends Yc{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)mn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=mn[u-15],p=mn[u-2],m=tr(d,7)^tr(d,18)^d>>>3,y=tr(p,17)^tr(p,19)^p>>>10;mn[u]=y+mn[u-7]+m+mn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=tr(s,6)^tr(s,11)^tr(s,25),p=l+d+h_(s,a,c)+dP[u]+mn[u]|0,y=(tr(n,2)^tr(n,13)^tr(n,22))+g_(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){It(mn)}destroy(){this.set(0,0,0,0,0,0,0,0),It(this.buffer)}}class A_ extends O_{A=jr[0]|0;B=jr[1]|0;C=jr[2]|0;D=jr[3]|0;E=jr[4]|0;F=jr[5]|0;G=jr[6]|0;H=jr[7]|0;constructor(){super(32)}}var T_=(()=>Gc(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),pP=(()=>T_[0])(),mP=(()=>T_[1])(),hn=new Uint32Array(80),gn=new Uint32Array(80);class R_ extends Yc{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let S=0;S<16;S++,t+=4)hn[S]=e.getUint32(t),gn[S]=e.getUint32(t+=4);for(let S=16;S<80;S++){let A=hn[S-15]|0,I=gn[S-15]|0,C=ei(A,I,1)^ei(A,I,8)^sp(A,I,7),U=ti(A,I,1)^ti(A,I,8)^ap(A,I,7),F=hn[S-2]|0,T=gn[S-2]|0,j=ei(F,T,19)^Os(F,T,61)^sp(F,T,6),X=ti(F,T,19)^As(F,T,61)^ap(F,T,6),P=$_(U,X,gn[S-7],gn[S-16]),E=k_(P,C,j,hn[S-7],hn[S-16]);hn[S]=E|0,gn[S]=P|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let S=0;S<80;S++){let A=ei(u,d,14)^ei(u,d,18)^Os(u,d,41),I=ti(u,d,14)^ti(u,d,18)^As(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=E_(w,I,U,mP[S],gn[S]),T=I_(F,g,A,C,pP[S],hn[S]),j=F|0,X=ei(n,i,28)^Os(n,i,34)^Os(n,i,39),P=ti(n,i,28)^As(n,i,34)^As(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=mr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=S_(j,P,N);n=__(x,T,X,E),i=x|0}({h:n,l:i}=mr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=mr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=mr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=mr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=mr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=mr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=mr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=mr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){It(hn,gn)}destroy(){It(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class P_ extends R_{Ah=it[0]|0;Al=it[1]|0;Bh=it[2]|0;Bl=it[3]|0;Ch=it[4]|0;Cl=it[5]|0;Dh=it[6]|0;Dl=it[7]|0;Eh=it[8]|0;El=it[9]|0;Fh=it[10]|0;Fl=it[11]|0;Gh=it[12]|0;Gl=it[13]|0;Hh=it[14]|0;Hl=it[15]|0;constructor(){super(48)}}var Jc=Hi(()=>new A_,ln(1));var C_=Hi(()=>new P_,ln(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hP=BigInt(1),N_=BigInt(2),gP=BigInt(3),yP=BigInt(5),Uq=BigInt(8),D_=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function bP(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=D_,a=e*e%o*e%o,c=Vt(a,N_,o)*a%o,l=Vt(c,hP,o)*e%o,u=Vt(l,yP,o)*l%o,d=Vt(u,t,o)*u%o,p=Vt(d,n,o)*d%o,m=Vt(p,i,o)*p%o,y=Vt(m,r,o)*m%o,h=Vt(y,r,o)*m%o,g=Vt(h,t,o)*u%o;return{pow_p_5_8:Vt(g,N_,o)*e%o,b2:a}}function vP(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var z_=(()=>{let e=D_;return l_({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=bP(t);return yt(Vt(n,gP,e)*i,e)},adjustScalarBytes:vP})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var xP=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),wP=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var SP=ip(xP),cp=op(SP,Jc);var _P=ip(wP),U_=op(_P,C_);function B_(e,t,n){if(Ht(e),n===void 0)n=new Uint8Array(e.outputLen);return Gi(e,n,t)}var lp=Uint8Array.of(0),L_=Uint8Array.of();function j_(e,t,n,i=32){Ht(e),Xe(i,"length");let r=e.outputLen;if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=L_;else ve(n,void 0,"info");let s=new Uint8Array(o*r),a=Gi.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)lp[0]=u+1,c.update(u===0?L_:l).update(n).update(lp).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),It(l,lp),s.slice(0,i)}var $P=BigInt(0),Ts=BigInt(1),kP=BigInt(2),EP=BigInt(7),IP=BigInt(256),OP=BigInt(113),F_=[],K_=[],q_=[];for(let e=0,t=Ts,n=1,i=0;e<24;e++){[n,i]=[i,(2*n+3*i)%5],F_.push(2*(5*i+n)),K_.push((e+1)*(e+2)/2%64);let r=$P;for(let o=0;o<7;o++)if(t=(t<<Ts^(t>>EP)*OP)%IP,t&kP)r^=Ts<<(Ts<<BigInt(o))-Ts;q_.push(r)}var H_=Gc(q_,!0),AP=H_[0],TP=H_[1],M_=(e,t,n)=>n>32?x_(e,t,n):b_(e,t,n),Z_=(e,t,n)=>n>32?w_(e,t,n):v_(e,t,n);function RP(e,t=24){let n=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)n[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=n[c],u=n[c+1],d=M_(l,u,1)^n[a],p=Z_(l,u,1)^n[a+1];for(let m=0;m<50;m+=10)e[s+m]^=d,e[s+m+1]^=p}let r=e[2],o=e[3];for(let s=0;s<24;s++){let a=K_[s],c=M_(r,o,a),l=Z_(r,o,a),u=F_[s];r=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)n[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~n[(a+2)%10]&n[(a+4)%10]}e[0]^=AP[i],e[1]^=TP[i]}It(n)}class Xc{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,n,i=!1,r=24){if(this.blockLen=e,this.suffix=t,this.outputLen=n,this.enableXOF=i,this.rounds=r,Xe(n,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=jc(this.state)}clone(){return this._cloneInto()}keccak(){Zd(this.state32),RP(this.state32,this.rounds),Zd(this.state32),this.posOut=0,this.pos=0}update(e){Lr(this),ve(e);let{blockLen:t,state:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(t-this.pos,i-r);for(let s=0;s<o;s++)n[this.pos++]^=e[r++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:n,blockLen:i}=this;if(e[n]^=t,(t&128)!==0&&n===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Lr(this,!1),ve(e),this.finish();let t=this.state,{blockLen:n}=this;for(let i=0,r=e.length;i<r;){if(this.posOut>=n)this.keccak();let o=Math.min(n-this.posOut,r-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Xe(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Bc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,It(this.state)}_cloneInto(e){let{blockLen:t,suffix:n,outputLen:i,rounds:r,enableXOF:o}=this;return e||=new Xc(t,n,i,o,r),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=r,e.suffix=n,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var V_=(e,t,n,i={})=>Hi(()=>new Xc(t,e,n),i);var ri=V_(6,136,32,ln(8));var Y_=V_(6,72,64,ln(10));var W_=(e,t,n,i={})=>Hi((r={})=>new Xc(t,e,r.dkLen===void 0?n:r.dkLen,!0),i),G_=W_(31,168,16,ln(11)),hr=W_(31,136,32,ln(12));function up(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function X_(e){return up(e),(e&e-1)===0&&e!==0}function fp(e,t){up(e);let n=0;for(let i=0;i<t;i++,e>>>=1)n=n<<1|e&1;return n}function Q_(e){return up(e),31-Math.clz32(e)}function J_(e){let t=e.length;if(t<2||!X_(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let n=Q_(t);for(let i=0;i<t;i++){let r=fp(i,n);if(i<r){let o=e[i];e[i]=e[r],e[r]=o}}return e}var dp=(e,t)=>{let{N:n,roots:i,dit:r,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=Q_(n);if(!X_(n))throw Error("FFT: Polynomial size should be power of two");let l=r!==o;return(u)=>{if(u.length!==n)throw Error("FFT: wrong Polynomial length");if(r&&a)J_(u);for(let d=0,p=1;d<c-s;d++){let m=r?d+1+s:c-d,y=1<<m,h=y>>1,g=n>>m;for(let w=0;w<n;w+=y)for(let S=0,A=p++;S<h;S++){let I=o?r?n-A:A:S*g,C=w+S,U=w+S+h,F=i[I],T=u[U],j=u[C];if(l){let X=e.mul(T,F);u[C]=e.add(j,X),u[U]=e.sub(j,X)}else if(o)u[C]=e.add(T,j),u[U]=e.mul(e.sub(T,j),F);else u[C]=e.add(j,T),u[U]=e.mul(e.sub(j,T),F)}}if(!r&&a)J_(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var gr=cn;function Qc(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function e1(e){return Uint8Array.from(e)}function ni(e,...t){let n=(r)=>typeof r==="number"?r:r.bytesLen,i=t.reduce((r,o)=>r+n(o),0);return{bytesLen:i,encode:(r)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=n(c),u=typeof c==="number"?r[s]:c.encode(r[s]);if(ve(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(r)=>{ve(r,i,e);let o=[];for(let s of t){let a=n(s),c=r.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),r=r.subarray(a)}return o}}}function el(e,t){let n=t*e.bytesLen;return{bytesLen:n,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let r=new Uint8Array(n);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);r.set(a,s),a.fill(0),s+=a.length}return r},decode:(i)=>{ve(i,n);let r=[];for(let o=0;o<i.length;o+=e.bytesLen)r.push(e.decode(i.subarray(o,o+e.bytesLen)));return r}}}function We(...e){for(let t of e)if(Array.isArray(t))for(let n of t)n.fill(0);else t.fill(0)}function pp(e){return(1<<e)-1}var Xq=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var t1=(e)=>{let{newPoly:t,N:n,Q:i,F:r,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(S,A=i)=>{let I=S%A|0;return(I>=0?I|0:A+I|0)|0},l=(S,A=i)=>{let I=c(S,A)|0;return(I>A>>1?I-A|0:I)|0};function u(){let S=t(n);for(let A=0;A<n;A++){let I=fp(A,s),C=BigInt(o)**BigInt(I)%BigInt(i);S[A]=Number(C)|0}return S}let d=u(),p={add:(S,A)=>c((S|0)+(A|0))|0,sub:(S,A)=>c((S|0)-(A|0))|0,mul:(S,A)=>c((S|0)*(A|0))|0,inv:(S)=>{throw Error("not implemented")}},m={N:n,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=dp(p,{dit:!1,...m}),h=dp(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(S)=>y(S),decode:(S)=>{h(S);for(let A=0;A<S.length;A++)S[A]=c(r*S[A]);return S}},bitsCoder:(S,A)=>{let I=pp(S),C=S*(n/8);return{bytesLen:C,encode:(U)=>{let F=new Uint8Array(C);for(let T=0,j=0,X=0,P=0;T<U.length;T++){j|=(A.encode(U[T])&I)<<X,X+=S;for(;X>=8;X-=8,j>>=8)F[P++]=j&pp(X)}return F},decode:(U)=>{let F=t(n);for(let T=0,j=0,X=0,P=0;T<U.length;T++){j|=U[T]<<X,X+=8;for(;X>=S;X-=S,j>>=S)F[P++]=A.decode(j&I)}return F}}}}},PP=(e)=>(t,n)=>{if(!n)n=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let r=t.length,o=new Uint8Array(n),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[r+0]=l,i[r+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),We(o,i)}}},r1=PP(G_);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var dt=256,Mr=3329,CP=3303,NP=17,{mod:Cs,nttZetas:DP,NTT:ii,bitsCoder:zP}=t1({N:dt,Q:Mr,F:CP,ROOT_OF_UNITY:NP,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),mp={512:{N:dt,Q:Mr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:dt,Q:Mr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:dt,Q:Mr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},UP=(e)=>{if(e>=12)return{encode:(n)=>n,decode:(n)=>n};let t=2**(e-1);return{encode:(n)=>((n<<e)+Mr/2)/Mr,decode:(n)=>n*Mr+t>>>e}},Rs=(e)=>zP(e,UP(e));function oi(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]+t[n])}function LP(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]-t[n])}function BP(e,t,n,i,r){let o=Cs(t*i*r+e*n),s=Cs(e*i+t*n);return{c0:o,c1:s}}function tl(e,t){for(let n=0;n<dt/2;n++){let i=DP[64+(n>>1)];if(n&1)i=-i;let{c0:r,c1:o}=BP(e[2*n+0],e[2*n+1],t[2*n+0],t[2*n+1],i);e[2*n+0]=r,e[2*n+1]=o}return e}function n1(e){let t=new Uint16Array(dt);for(let n=0;n<dt;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;n<dt&&r+3<=i.length;r+=3){let o=(i[r+0]>>0|i[r+1]<<8)&4095,s=(i[r+1]>>4|i[r+2]<<4)&4095;if(o<Mr)t[n++]=o;if(n<dt&&s<Mr)t[n++]=s}}return t}function Ps(e,t,n,i){let r=e(i*dt/4,t,n),o=new Uint16Array(dt),s=jc(r),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Cs(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var jP=(e)=>{let{K:t,PRF:n,XOF:i,HASH512:r,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Rs(1),u=Rs(c),d=Rs(a),p=ni("publicKey",el(Rs(12),t),32),m=el(Rs(12),t),y=ni("ciphertext",el(d,t),u),h=ni("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(g)=>{ve(g,32,"seed");let w=new Uint8Array(33);w.set(g),w[32]=t;let S=r(w),[A,I]=h.decode(S),C=[],U=[];for(let j=0;j<t;j++)C.push(ii.encode(Ps(n,I,j,o)));let F=i(A);for(let j=0;j<t;j++){let X=ii.encode(Ps(n,I,t+j,o));for(let P=0;P<t;P++){let E=n1(F.get(P,j));oi(X,tl(E,C[P]))}U.push(X)}F.clean();let T={publicKey:p.encode([U,A]),secretKey:m.encode(C)};return We(A,I,C,U,w,S),T},encrypt:(g,w,S)=>{let[A,I]=p.decode(g),C=[];for(let P=0;P<t;P++)C.push(ii.encode(Ps(n,S,P,o)));let U=i(I),F=new Uint16Array(dt),T=[];for(let P=0;P<t;P++){let E=Ps(n,S,t+P,s),N=new Uint16Array(dt);for(let x=0;x<t;x++){let k=n1(U.get(P,x));oi(N,tl(k,C[x]))}oi(E,ii.decode(N)),T.push(E),oi(F,tl(A[P],C[P])),We(N)}U.clean();let j=Ps(n,S,2*t,s);oi(j,ii.decode(F));let X=l.decode(w);return oi(X,j),We(A,C,F,j),y.encode([T,X])},decrypt:(g,w)=>{let[S,A]=y.decode(g),I=m.decode(w),C=new Uint16Array(dt);for(let U=0;U<t;U++)oi(C,tl(I[U],ii.encode(S[U])));return LP(A,ii.decode(C)),We(C,I,S),l.encode(A)}}};function hp(e){let t=jP(e),{HASH256:n,HASH512:i,KDF:r}=e,{secretCoder:o,lengths:s}=t,a=ni("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=gr(64))=>{ve(u,64,"seed");let{publicKey:d,secretKey:p}=t.keygen(u.subarray(0,32)),m=n(d),y=a.encode([p,d,m,u.subarray(32)]);return We(p,m),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,d=gr(32))=>{ve(u,s.publicKey,"publicKey"),ve(d,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(e1(p)));if(!Qc(m,p))throw We(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");We(m);let y=i.create().update(d).update(n(u)).digest(),h=t.encrypt(u,d,y.subarray(32,64));return We(y.subarray(32)),{cipherText:h,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{ve(d,a.bytesLen,"secretKey"),ve(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=n(d.subarray(p/2,m));if(!Qc(y,d.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[h,g,w,S]=a.decode(d),A=t.decrypt(u,h),I=i.create().update(A).update(w).digest(),C=I.subarray(0,32),U=t.encrypt(g,A,I.subarray(32,64)),F=Qc(u,U),T=r.create({dkLen:32}).update(S).update(u).digest();return We(A,U,!F?C:T),F?C:T}}}function MP(e,t,n){return hr.create({dkLen:e}).update(t).update(new Uint8Array([n])).digest()}var gp={HASH256:ri,HASH512:Y_,KDF:hr,XOF:r1,PRF:MP},lH=hp({...gp,...mp[512]}),Ns=hp({...gp,...mp[768]}),i1=hp({...gp,...mp[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function ZP(e,t=!1){let{lengths:n,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=gr(n.seed))=>{ve(s,n.seed,"seed");let a=o.isLE?fn(s):un(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:n.secretKey,publicKey:n.publicKey,seed:n.seed},keygen:i,getPublicKey:(r)=>e.getPublicKey(r)}}function yp(e,t=!1){let n=ZP(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...n.lengths,msg:n.lengths.seed,cipherText:n.lengths.publicKey},keygen:n.keygen,getPublicKey:n.getPublicKey,encapsulate(i,r=gr(e.lengths.seed)){let o=this.keygen(r).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return We(o),{sharedSecret:s,cipherText:a}},decapsulate(i,r){let o=e.getSharedSecret(r,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Ds(e,t){return ni(t,...e.map((n)=>{if(typeof n.lengths[t]!=="number")throw Error("wrong length: "+t);return n.lengths[t]}))}function bp(e){return(t,n)=>e(t,{dkLen:n})}function FP(e,t,...n){let i=Ds(n,"seed"),r=Ds(n,"publicKey");if(e===void 0)e=i.bytesLen;Xe(e);function o(s){ve(s,e);let a=i.decode(t(s,i.bytesLen)),c=n.map((d,p)=>d.keygen(a[p])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:r.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=gr(e)){let{publicKey:a,secretKey:c}=o(s),l=r.encode(a);return We(a),We(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function rl(e,t,n,i,...r){let o=FP(e,n,...r),s=Ds(r,"cipherText"),a=Ds(r,"publicKey"),c=Ds(r,"msg");if(t===void 0)t=c.bytesLen;return Xe(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=gr(c.bytesLen)){let d=a.decode(l),p=c.decode(u),m=r.map((w,S)=>w.encapsulate(d[S],p[S])),y=m.map((w)=>w.sharedSecret),h=m.map((w)=>w.cipherText),g={sharedSecret:i(d,h,y),cipherText:s.encode(h)};return We(y,h),g},decapsulate(l,u){let d=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=r.map((h,g)=>h.decapsulate(d[g],m[g]));return i(p,d,y)}}}function o1(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>r(qe(a[0],a[1],s[1],o[1],dn(e))),t,n)}var xH=o1("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Ns,yp(cp,!0),hr,ri),wH=o1("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",i1,yp(U_,!0),hr,ri);function KP(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>{let c=qe(a[0],a[1],s[0],o[0],s[1],o[1],dn(e)),l=32,u=qe(dn("hybrid_prk"),c),d=B_(r,u),p=qe(Vi(32,2),dn("shared_secret"),dn("")),m=j_(r,d,p,32);return We(d,p,u,c),m},t,n)}var s1=yp(z_),SH=KP("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Ns,s1,hr,Jc),qP=(()=>rl(32,32,bp(hr),(e,t,n)=>ri(qe(n[0],n[1],t[1],e[1],dn("\\.//^\\"))),Ns,s1))();function HP(e,t,n,i){let r=e.Point.Fn;if(!r)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=r.fromBytes(s.subarray(u,d),!0),r.isValidNot0(a))break}let c=r.toBytes(r.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:n,seed:i,msg:i,cipherText:n},keygen(s=gr(i)){return ve(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=gr(i)){ve(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return We(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function VP(e,t,n,i){let{secretKey:r,publicKeyUncompressed:o}=n.lengths;if(!r||!o)throw Error("wrong curve");let s=HP(n,r,o,i),a=64,c=a+i;return rl(32,32,(l)=>{ve(l,32);let u=hr(l,{dkLen:c}),d=u.subarray(0,a),p=u.subarray(a,c);return qe(d,p)},(l,u,d)=>ri(qe(d[0],d[1],u[1],l[1],dn(e))),t,s)}var YP=(()=>VP("MLKEM768-P256",Ns,cp,128))();var nl=qP,a1=YP;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Te=(e,t,n)=>tt(e,t,n),xp=Fe,Xi=Ic,ot=(...e)=>_d(...e),Qi=(e)=>ds(e),eo=xd,to=(e)=>Nr(e),ol=BigInt(0),vp=BigInt(1);function Zr(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw TypeError(n+"expected boolean, got type="+typeof e)}return e}function sl(e){if(typeof e==="bigint"){if(!il(e))throw RangeError("positive bigint expected, got "+e)}else xp(e);return e}function yr(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(n+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let n=t&&`"${t}" `;throw RangeError(n+"expected safe integer, got "+e)}}function zs(e){let t=sl(e).toString(16);return t.length&1?"0"+t:t}function c1(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?ol:BigInt("0x"+e)}function si(e){return c1(Ic(e))}function rr(e){return c1(Ic(yn(tt(e)).reverse()))}function al(e,t){if(Fe(t),t===0)throw RangeError("zero length");e=sl(e);let n=e.toString(16);if(n.length>t*2)throw RangeError("number too large");return ds(n.padStart(t*2,"0"))}function Us(e,t){return al(e,t).reverse()}function l1(e,t){if(e=Te(e),t=Te(t),e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function yn(e){return Uint8Array.from(Te(e))}function cl(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var il=(e)=>typeof e==="bigint"&&ol<=e;function WP(e,t,n){return il(e)&&il(t)&&il(n)&&t<=e&&e<n}function Fr(e,t,n,i){if(!WP(t,n,i))throw RangeError("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function ro(e){if(e<ol)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>ol;e>>=vp,t+=1);return t}var Ls=(e)=>(vp<<BigInt(e))-vp;function u1(e,t,n){if(Fe(e,"hashLen"),Fe(t,"qByteLen"),typeof n!=="function")throw TypeError("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,ot(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let S=c.slice();w.push(S),g+=c.length}return ot(...w)};return(g,w)=>{d(),m(g);let S=void 0;while((S=w(y()))===void 0)m();return d(),S}}function Yt(e,t={},n={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}var wp=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var st=BigInt(0),je=BigInt(1),ai=BigInt(2),m1=BigInt(3),h1=BigInt(4),g1=BigInt(5),GP=BigInt(7),y1=BigInt(8),JP=BigInt(9),b1=BigInt(16);function Ue(e,t){if(t<=st)throw Error("mod: expected positive modulus, got "+t);let n=e%t;return n>=st?n:t+n}function Wt(e,t,n){if(t<st)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >st)i*=i,i%=n;return i}function f1(e,t){if(e===st)throw Error("invert: expected non-zero number");if(t<=st)throw Error("invert: expected positive modulus, got "+t);let n=Ue(e,t),i=t,r=st,o=je,s=je,a=st;while(n!==st){let l=i/n,u=i-n*l,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==je)throw Error("invert: does not exist");return Ue(r,t)}function Sp(e,t,n){let i=e;if(!i.eql(i.sqr(t),n))throw Error("Cannot find square root")}function v1(e,t){let n=e,i=(n.ORDER+je)/h1,r=n.pow(t,i);return Sp(n,r,t),r}function XP(e,t){let n=e,i=(n.ORDER-g1)/y1,r=n.mul(t,ai),o=n.pow(r,i),s=n.mul(t,o),a=n.mul(n.mul(s,ai),o),c=n.mul(s,n.sub(a,n.ONE));return Sp(n,c,t),c}function QP(e){let t=ll(e),n=x1(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+GP)/b1;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),p=l.mul(u,r),m=l.mul(u,o),y=l.eql(l.sqr(d),c),h=l.eql(l.sqr(p),c);u=l.cmov(u,d,y),d=l.cmov(m,p,h);let g=l.eql(l.sqr(d),c),w=l.cmov(u,d,g);return Sp(l,w,c),w}}function x1(e){if(e<m1)throw Error("sqrt is not defined for small field");let t=e-je,n=0;while(t%ai===st)t/=ai,n++;let i=ai,r=ll(e);while(d1(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return v1;let o=r.pow(i,t),s=(t+je)/ai;return function(c,l){let u=c;if(u.is0(l))return l;if(d1(u,l)!==1)throw Error("Cannot find square root");let d=n,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let h=1,g=u.sqr(m);while(!u.eql(g,u.ONE))if(h++,g=u.sqr(g),h===d)throw Error("Cannot find square root");let w=je<<BigInt(d-h-1),S=u.pow(p,w);d=h,p=u.sqr(S),m=u.mul(m,p),y=u.mul(y,S)}return y}}function e4(e){if(e%h1===m1)return v1;if(e%y1===g1)return XP;if(e%b1===JP)return QP(e);return x1(e)}var Kr=(e,t)=>(Ue(e,t)&je)===je,t4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function _p(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=t4.reduce((i,r)=>(i[r]="function",i),t);if(Yt(e,n),yr(e.BYTES,"BYTES"),yr(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=je)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function r4(e,t,n){let i=e;if(n<st)throw Error("invalid exponent, negatives unsupported");if(n===st)return i.ONE;if(n===je)return t;let r=i.ONE,o=t;while(n>st){if(n&je)r=i.mul(r,o);o=i.sqr(o),n>>=je}return r}function Bs(e,t,n=!1){let i=e,r=Array(t.length).fill(n?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return r[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return r[l]=i.mul(a,r[l]),i.mul(a,c)},s),r}function d1(e,t){let n=e,i=(n.ORDER-je)/ai,r=n.pow(t,i),o=n.eql(r,n.ONE),s=n.eql(r,n.ZERO),a=n.eql(r,n.neg(n.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function n4(e,t){if(t!==void 0)xp(t);if(e<=st)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let n=ro(e);if(t!==void 0&&t<n)throw Error(`invalid n length: expected bit length (${n}) >= n.length (${t})`);let i=t!==void 0?t:n,r=Math.ceil(i/8);return{nBitLength:i,nByteLength:r}}var p1=new WeakMap;class $p{ORDER;BITS;BYTES;isLE;ZERO=st;ONE=je;_lengths;_mod;constructor(e,t={}){if(e<=je)throw Error("invalid field: expected ORDER > 1, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=n4(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,Object.freeze(this)}create(e){return Ue(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return st<=e&&e<this.ORDER}is0(e){return e===st}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&je)===je}neg(e){return Ue(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Ue(e*e,this.ORDER)}add(e,t){return Ue(e+t,this.ORDER)}sub(e,t){return Ue(e-t,this.ORDER)}mul(e,t){return Ue(e*t,this.ORDER)}pow(e,t){return r4(this,e,t)}div(e,t){return Ue(e*f1(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return f1(e,this.ORDER)}sqrt(e){let t=p1.get(this);if(!t)p1.set(this,t=e4(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Us(e,this.BYTES):al(e,this.BYTES)}fromBytes(e,t=!1){Te(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(e.length<1||!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?rr(e):si(e);if(s)a=Ue(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Bs(this,e)}cmov(e,t,n){return Zr(n,"condition"),n?t:e}}Object.freeze($p.prototype);function ll(e,t={}){return new $p(e,t)}function w1(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=je)throw Error("field order must be greater than 1");let t=ro(e-je);return Math.ceil(t/8)}function kp(e){let t=w1(e);return t+Math.ceil(t/2)}function S1(e,t,n=!1){Te(e);let i=e.length,r=w1(t),o=Math.max(kp(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?rr(e):si(e),a=Ue(s,t-je)+je;return n?Us(a,r):al(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var no=BigInt(0),ci=BigInt(1);function js(e,t){let n=t.negate();return e?n:t}function li(e,t){let n=Bs(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function E1(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Ep(e,t){E1(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=Ls(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function _1(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=ci;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Ip=new WeakMap,I1=new WeakMap;function Op(e){return I1.get(e)||1}function $1(e){if(e!==no)throw Error("invalid wNAF")}class Ms{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>no){if(t&ci)n=n.add(i);i=i.double(),t>>=ci}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Ep(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Ep(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=_1(n,s,o);if(n=a,l)r=r.add(js(d,t[p]));else i=i.add(js(u,t[c]))}return $1(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Ep(e,this.bits);for(let o=0;o<r.windows;o++){if(n===no)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=_1(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return $1(n),i}getPrecomputes(e,t,n){let i=Ip.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Ip.set(t,i)}}return i}cached(e,t,n){let i=Op(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Op(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){E1(t,this.bits),I1.set(e,t),Ip.delete(e)}hasCache(e){return Op(e)!==1}}function O1(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>no||i>no){if(n&ci)o=o.add(r);if(i&ci)s=s.add(r);r=r.double(),n>>=ci,i>>=ci}return{p1:o,p2:s}}function k1(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return _p(t),t}else return ll(e,{isLE:n})}function ul(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>no))throw Error(`CURVE.${c} must be positive bigint`)}let r=k1(t.p,n.Fp,i),o=k1(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function Zs(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}function Fs(e,t){if(yr(e),yr(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let n=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)n[i]=e&255,e>>>=8;return new Uint8Array(n)}function i4(e,t){let n=new Uint8Array(e.length);for(let i=0;i<e.length;i++)n[i]=e[i]^t[i];return n}function o4(e){if(!eo(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?cl(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Ap(e,t,n,i){if(Te(e),yr(n),t=o4(t),t.length>255)t=i(ot(cl("H2C-OVERSIZE-DST-"),t));let{outputLen:r,blockLen:o}=i,s=Math.ceil(n/r);if(n>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ot(t,Fs(t.length,1)),c=new Uint8Array(o),l=Fs(n,2),u=Array(s),d=i(ot(c,e,l,Fs(0,1),a));u[0]=i(ot(d,Fs(1,1),a));for(let m=1;m<s;m++){let y=[i4(d,u[m-1]),Fs(m+1,1),a];u[m]=i(ot(...y))}return ot(...u).slice(0,n)}var A1="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T1=(e,t)=>(e+(e>=0?t:-t)/P1)/t;function s4(e,t,n){Fr("scalar",e,br,n);let[[i,r],[o,s]]=t,a=T1(s*e,n),c=T1(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<br,p=u<br;if(d)l=-l;if(p)u=-u;let m=Ls(Math.ceil(ro(n)/2))+bn;if(l<br||l>=m||u<br||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:p,k2:u}}function Rp(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Tp(e,t){Yt(e);let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(Zr(n.lowS,"lowS"),Zr(n.prehash,"prehash"),n.format!==void 0)Rp(n.format);return n}class R1 extends Error{constructor(e=""){super(e)}}var nr={Err:R1,_tlv:{encode:(e,t)=>{let{Err:n}=nr;if(yr(e,"tag"),e<0||e>255)throw new n("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=zs(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?zs(r.length/2|128):"";return zs(e)+o+r+t},decode(e,t){let{Err:n}=nr;t=Te(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=nr;if(sl(e),e<br)throw new t("integer: negative integers are not allowed");let n=zs(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=nr;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return si(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=nr,r=Te(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=nr,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}};Object.freeze(nr._tlv);Object.freeze(nr._int);Object.freeze(nr);var br=BigInt(0),bn=BigInt(1),P1=BigInt(2),fl=BigInt(3),a4=BigInt(4);function C1(e,t={}){let n=ul("weierstrass",e,t),i=n.Fp,r=n.Fn,o=n.CURVE,{h:s,n:a}=o;Yt(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=D1(i,r);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(P,E,N){if(l&&E.is0())return Uint8Array.of(0);let{x,y:k}=E.toAffine(),_=i.toBytes(x);if(Zr(N,"isCompressed"),N){d();let D=!i.isOdd(k);return ot(N1(D),_)}else return ot(Uint8Array.of(4),_,i.toBytes(k))}function m(P){Te(P,void 0,"Point");let{publicKey:E,publicKeyUncompressed:N}=u,x=P.length,k=P[0],_=P.subarray(1);if(l&&x===1&&k===0)return{x:i.ZERO,y:i.ZERO};if(x===E&&(k===2||k===3)){let D=i.fromBytes(_);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let O=g(D),L;try{L=i.sqrt(O)}catch(re){let ae=re instanceof Error?": "+re.message:"";throw Error("bad point: is not on curve, sqrt error"+ae)}d();let M=i.isOdd(L);if((k&1)===1!==M)L=i.neg(L);return{x:D,y:L}}else if(x===N&&k===4){let D=i.BYTES,O=i.fromBytes(_.subarray(0,D)),L=i.fromBytes(_.subarray(D,D*2));if(!w(O,L))throw Error("bad point: is not on curve");return{x:O,y:L}}else throw Error(`bad point: got length ${x}, expected compressed=${E} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,h=t.fromBytes===void 0?m:t.fromBytes;function g(P){let E=i.sqr(P),N=i.mul(E,P);return i.add(i.add(N,i.mul(P,o.a)),o.b)}function w(P,E){let N=i.sqr(E),x=g(P);return i.eql(N,x)}if(!w(o.Gx,o.Gy))throw Error("bad curve params: generator point");let S=i.mul(i.pow(o.a,fl),a4),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(S,A)))throw Error("bad curve params: a or b");function I(P,E,N=!1){if(!i.isValid(E)||N&&i.is0(E))throw Error(`bad point coordinate ${P}`);return E}function C(P){if(!(P instanceof T))throw Error("Weierstrass Point expected")}function U(P){if(!c||!c.basises)throw Error("no endo");return s4(P,c.basises,r.ORDER)}function F(P,E,N,x,k){return N=new T(i.mul(N.X,P),N.Y,N.Z),E=js(x,E),N=js(k,N),E.add(N)}class T{static BASE=new T(o.Gx,o.Gy,i.ONE);static ZERO=new T(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(P,E,N){this.X=I("x",P),this.Y=I("y",E,!0),this.Z=I("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:E,y:N}=P||{};if(!P||!i.isValid(E)||!i.isValid(N))throw Error("invalid affine point");if(P instanceof T)throw Error("projective point not allowed");if(i.is0(E)&&i.is0(N))return T.ZERO;return new T(E,N,i.ONE)}static fromBytes(P){let E=T.fromAffine(h(Te(P,void 0,"point")));return E.assertValidity(),E}static fromHex(P){return T.fromBytes(Qi(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,E=!0){if(X.createCache(this,P),!E)this.multiply(fl);return this}assertValidity(){let P=this;if(P.is0()){if(t.allowInfinityPoint&&i.is0(P.X)&&i.eql(P.Y,i.ONE)&&i.is0(P.Z))return;throw Error("bad point: ZERO")}let{x:E,y:N}=P.toAffine();if(!i.isValid(E)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!w(E,N))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){C(P);let{X:E,Y:N,Z:x}=this,{X:k,Y:_,Z:D}=P,O=i.eql(i.mul(E,D),i.mul(k,x)),L=i.eql(i.mul(N,D),i.mul(_,x));return O&&L}negate(){return new T(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:E}=o,N=i.mul(E,fl),{X:x,Y:k,Z:_}=this,D=i.ZERO,O=i.ZERO,L=i.ZERO,M=i.mul(x,x),H=i.mul(k,k),re=i.mul(_,_),ae=i.mul(x,k);return ae=i.add(ae,ae),L=i.mul(x,_),L=i.add(L,L),D=i.mul(P,L),O=i.mul(N,re),O=i.add(D,O),D=i.sub(H,O),O=i.add(H,O),O=i.mul(D,O),D=i.mul(ae,D),L=i.mul(N,L),re=i.mul(P,re),ae=i.sub(M,re),ae=i.mul(P,ae),ae=i.add(ae,L),L=i.add(M,M),M=i.add(L,M),M=i.add(M,re),M=i.mul(M,ae),O=i.add(O,M),re=i.mul(k,_),re=i.add(re,re),M=i.mul(re,ae),D=i.sub(D,M),L=i.mul(re,H),L=i.add(L,L),L=i.add(L,L),new T(D,O,L)}add(P){C(P);let{X:E,Y:N,Z:x}=this,{X:k,Y:_,Z:D}=P,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=o.a,re=i.mul(o.b,fl),ae=i.mul(E,k),le=i.mul(N,_),pe=i.mul(x,D),ye=i.add(E,N),he=i.add(k,_);ye=i.mul(ye,he),he=i.add(ae,le),ye=i.sub(ye,he),he=i.add(E,x);let ge=i.add(k,D);return he=i.mul(he,ge),ge=i.add(ae,pe),he=i.sub(he,ge),ge=i.add(N,x),O=i.add(_,D),ge=i.mul(ge,O),O=i.add(le,pe),ge=i.sub(ge,O),M=i.mul(H,he),O=i.mul(re,pe),M=i.add(O,M),O=i.sub(le,M),M=i.add(le,M),L=i.mul(O,M),le=i.add(ae,ae),le=i.add(le,ae),pe=i.mul(H,pe),he=i.mul(re,he),le=i.add(le,pe),pe=i.sub(ae,pe),pe=i.mul(H,pe),he=i.add(he,pe),ae=i.mul(le,he),L=i.add(L,ae),ae=i.mul(ge,he),O=i.mul(ye,O),O=i.sub(O,ae),ae=i.mul(ye,le),M=i.mul(ge,M),M=i.add(M,ae),new T(O,L,M)}subtract(P){return C(P),this.add(P.negate())}is0(){return this.equals(T.ZERO)}multiply(P){let{endo:E}=t;if(!r.isValidNot0(P))throw RangeError("invalid scalar: out of range");let N,x,k=(_)=>X.cached(this,_,(D)=>li(T,D));if(E){let{k1neg:_,k1:D,k2neg:O,k2:L}=U(P),{p:M,f:H}=k(D),{p:re,f:ae}=k(L);x=H.add(ae),N=F(E.beta,M,re,_,O)}else{let{p:_,f:D}=k(P);N=_,x=D}return li(T,[N,x])[0]}multiplyUnsafe(P){let{endo:E}=t,N=this,x=P;if(!r.isValid(x))throw RangeError("invalid scalar: out of range");if(x===br||N.is0())return T.ZERO;if(x===bn)return N;if(X.hasCache(this))return this.multiply(x);if(E){let{k1neg:k,k1:_,k2neg:D,k2:O}=U(x),{p1:L,p2:M}=O1(T,N,_,O);return F(E.beta,L,M,k,D)}else return X.unsafe(N,x)}toAffine(P){let E=this,N=P,{X:x,Y:k,Z:_}=E;if(i.eql(_,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(_);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(_,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}isTorsionFree(){let{isTorsionFree:P}=t;if(s===bn)return!0;if(P)return P(T,this);return X.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===bn)return this;if(P)return P(T,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===bn)return this.is0();return this.clearCofactor().is0()}toBytes(P=!0){return Zr(P,"isCompressed"),this.assertValidity(),y(T,this,P)}toHex(P=!0){return Xi(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let j=r.BITS,X=new Ms(T,t.endo?Math.ceil(j/2):j);if(j>=8)T.BASE.precompute(8);return Object.freeze(T.prototype),Object.freeze(T),T}function N1(e){return Uint8Array.of(e?2:3)}function D1(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function c4(e,t={}){let{Fn:n}=e,i=t.randomBytes===void 0?to:t.randomBytes,r=Object.assign(D1(e.Fp,n),{seed:Math.max(kp(n.ORDER),16)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m){return m=m===void 0?i(r.seed):m,S1(Te(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r,w=n._lengths;if(!eo(m))return;let S=Te(m,void 0,"key").length,A=S===h||S===g,I=S===y||!!w?.includes(S);if(A&&I)return;return A}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Zs(a,c);return Object.freeze(d),Object.freeze(r),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function z1(e,t,n={}){let i=t;Cr(i),Yt(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let r=n.randomBytes===void 0?to:n.randomBytes,o=n.hmac===void 0?(k,_)=>fr(i,k,_):n.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y}=c4(e,n),h={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},g=c*P1+bn<s.ORDER;function w(k){let _=c>>bn;return k>_}function S(k,_){if(!a.isValidNot0(_))throw Error(`invalid signature ${k}: out of range 1..Point.Fn.ORDER`);return _}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function I(k,_){Rp(_);let D=y.signature,O=_==="compact"?D:_==="recovered"?D+1:void 0;return Te(k,O)}class C{r;s;recovery;constructor(k,_,D){if(this.r=S("r",k),this.s=S("s",_),D!=null){if(A(),![0,1,2,3].includes(D))throw Error("invalid recovery id");this.recovery=D}Object.freeze(this)}static fromBytes(k,_=h.format){I(k,_);let D;if(_==="der"){let{r:H,s:re}=nr.toSig(Te(k));return new C(H,re)}if(_==="recovered")D=k[0],_="compact",k=k.subarray(1);let O=y.signature/2,L=k.subarray(0,O),M=k.subarray(O,O*2);return new C(a.fromBytes(L),a.fromBytes(M),D)}static fromHex(k,_){return this.fromBytes(Qi(k),_)}assertRecovery(){let{recovery:k}=this;if(k==null)throw Error("invalid recovery id: must be present");return k}addRecoveryBit(k){return new C(this.r,this.s,k)}recoverPublicKey(k){let{r:_,s:D}=this,O=this.assertRecovery(),L=O===2||O===3?_+c:_;if(!s.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let M=s.toBytes(L),H=e.fromBytes(ot(N1((O&1)===0),M)),re=a.inv(L),ae=F(Te(k,void 0,"msgHash")),le=a.create(-ae*re),pe=a.create(D*re),ye=e.BASE.multiplyUnsafe(le).add(H.multiplyUnsafe(pe));if(ye.is0())throw Error("invalid recovery: point at infinify");return ye.assertValidity(),ye}hasHighS(){return w(this.s)}toBytes(k=h.format){if(Rp(k),k==="der")return Qi(nr.hexFromSig(this));let{r:_,s:D}=this,O=a.toBytes(_),L=a.toBytes(D);if(k==="recovered")return A(),ot(Uint8Array.of(this.assertRecovery()),O,L);return ot(O,L)}toHex(k){return Xi(this.toBytes(k))}}Object.freeze(C.prototype),Object.freeze(C);let U=n.bits2int===void 0?function(_){if(_.length>8192)throw Error("input is too large");let D=si(_),O=_.length*8-l;return O>0?D>>BigInt(O):D}:n.bits2int,F=n.bits2int_modN===void 0?function(_){return a.create(U(_))}:n.bits2int_modN,T=Ls(l);function j(k){return Fr("num < 2^"+l,k,br,T),a.toBytes(k)}function X(k,_){return Te(k,void 0,"message"),_?Te(i(k),void 0,"prehashed message"):k}function P(k,_,D){let{lowS:O,prehash:L,extraEntropy:M}=Tp(D,h);k=X(k,L);let H=F(k),re=a.fromBytes(_);if(!a.isValidNot0(re))throw Error("invalid private key");let ae=[j(re),j(H)];if(M!=null&&M!==!1){let he=M===!0?r(y.secretKey):M;ae.push(Te(he,void 0,"extraEntropy"))}let le=ot(...ae),pe=H;function ye(he){let ge=U(he);if(!a.isValidNot0(ge))return;let we=a.inv(ge),Ne=e.BASE.multiply(ge).toAffine(),ze=a.create(Ne.x);if(ze===br)return;let ct=a.create(we*a.create(pe+ze*re));if(ct===br)return;let lt=(Ne.x===ze?0:2)|Number(Ne.y&bn),kt=ct;if(O&&w(ct))kt=a.neg(ct),lt^=1;return new C(ze,kt,g?void 0:lt)}return{seed:le,k2sig:ye}}function E(k,_,D={}){let{seed:O,k2sig:L}=P(k,_,D);return u1(i.outputLen,a.BYTES,o)(O,L).toBytes(D.format)}function N(k,_,D,O={}){let{lowS:L,prehash:M,format:H}=Tp(O,h);if(D=Te(D,void 0,"publicKey"),_=X(_,M),!eo(k)){let re=k instanceof C?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}I(k,H);try{let re=C.fromBytes(k,H),ae=e.fromBytes(D);if(L&&re.hasHighS())return!1;let{r:le,s:pe}=re,ye=F(_),he=a.inv(pe),ge=a.create(ye*he),we=a.create(le*he),Ne=e.BASE.multiplyUnsafe(ge).add(ae.multiplyUnsafe(we));if(Ne.is0())return!1;return a.create(Ne.x)===le}catch(re){return!1}}function x(k,_,D={}){let{prehash:O}=Tp(D,h);return _=X(_,O),C.fromBytes(k,"recovered").recoverPublicKey(_).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:E,verify:N,recoverPublicKey:x,Signature:C,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var l4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var u4=C1(l4),io=z1(u4,Ke);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vn=BigInt(0),Ot=BigInt(1),Pp=BigInt(2),f4=BigInt(8);function d4(e,t,n,i){let r=e.sqr(n),o=e.sqr(i),s=e.add(e.mul(t.a,r),o),a=e.add(e.ONE,e.mul(t.d,e.mul(r,o)));return e.eql(s,a)}function U1(e,t={}){let n=t,i=ul("edwards",e,n,n.FpFnLE),{Fp:r,Fn:o}=i,s=i.CURVE,{h:a}=s;Yt(n,{},{uvRatio:"function"});let c=Pp<<BigInt(o.BYTES*8)-Ot,l=(h)=>r.create(h),u=n.uvRatio===void 0?(h,g)=>{try{return{isValid:!0,value:r.sqrt(r.div(h,g))}}catch(w){return{isValid:!1,value:vn}}}:n.uvRatio;if(!d4(r,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(h,g,w=!1){let S=w?Ot:vn;return Fr("coordinate "+h,g,S,c),g}function p(h){if(!(h instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Ot,l(s.Gx*s.Gy));static ZERO=new m(vn,Ot,Ot,vn);static Fp=r;static Fn=o;X;Y;Z;T;constructor(h,g,w,S){this.X=d("x",h),this.Y=d("y",g),this.Z=d("z",w,!0),this.T=d("t",S),Object.freeze(this)}static CURVE(){return s}static fromAffine(h){if(h instanceof m)throw Error("extended point not allowed");let{x:g,y:w}=h||{};return d("x",g),d("y",w),new m(g,w,Ot,l(g*w))}static fromBytes(h,g=!1){let w=r.BYTES,{a:S,d:A}=s;h=yn(Te(h,w,"point")),Zr(g,"zip215");let I=yn(h),C=h[w-1];I[w-1]=C&-129;let U=rr(I),F=g?c:r.ORDER;Fr("point.y",U,vn,F);let T=l(U*U),j=l(T-Ot),X=l(A*T-S),{isValid:P,value:E}=u(j,X);if(!P)throw Error("bad point: invalid y coordinate");let N=(E&Ot)===Ot,x=(C&128)!==0;if(!g&&E===vn&&x)throw Error("bad point: x=0 and x_0=1");if(x!==N)E=l(-E);return m.fromAffine({x:E,y:U})}static fromHex(h,g=!1){return m.fromBytes(Qi(h),g)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(h=8,g=!0){if(y.createCache(this,h),!g)this.multiply(Pp);return this}assertValidity(){let h=this,{a:g,d:w}=s;if(h.is0())throw Error("bad point: ZERO");let{X:S,Y:A,Z:I,T:C}=h,U=l(S*S),F=l(A*A),T=l(I*I),j=l(T*T),X=l(U*g),P=l(T*l(X+F)),E=l(j+l(w*l(U*F)));if(P!==E)throw Error("bad point: equation left != right (1)");let N=l(S*A),x=l(I*C);if(N!==x)throw Error("bad point: equation left != right (2)")}equals(h){p(h);let{X:g,Y:w,Z:S}=this,{X:A,Y:I,Z:C}=h,U=l(g*C),F=l(A*S),T=l(w*C),j=l(I*S);return U===F&&T===j}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:h}=s,{X:g,Y:w,Z:S}=this,A=l(g*g),I=l(w*w),C=l(Pp*l(S*S)),U=l(h*A),F=g+w,T=l(l(F*F)-A-I),j=U+I,X=j-C,P=U-I,E=l(T*X),N=l(j*P),x=l(T*P),k=l(X*j);return new m(E,N,k,x)}add(h){p(h);let{a:g,d:w}=s,{X:S,Y:A,Z:I,T:C}=this,{X:U,Y:F,Z:T,T:j}=h,X=l(S*U),P=l(A*F),E=l(C*w*j),N=l(I*T),x=l((S+A)*(U+F)-X-P),k=N-E,_=N+E,D=l(P-g*X),O=l(x*k),L=l(_*D),M=l(x*D),H=l(k*_);return new m(O,L,H,M)}subtract(h){return p(h),this.add(h.negate())}multiply(h){if(!o.isValidNot0(h))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:g,f:w}=y.cached(this,h,(S)=>li(m,S));return li(m,[g,w])[0]}multiplyUnsafe(h){if(!o.isValid(h))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(h===vn)return m.ZERO;if(this.is0()||h===Ot)return this;return y.unsafe(this,h,(g)=>li(m,g))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(h){let g=this,w=h,{X:S,Y:A,Z:I}=g,C=g.is0();if(w==null)w=C?f4:r.inv(I);let U=l(S*w),F=l(A*w),T=r.mul(I,w);if(C)return{x:vn,y:Ot};if(T!==Ot)throw Error("invZ was invalid");return{x:U,y:F}}clearCofactor(){if(a===Ot)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:h,y:g}=this.toAffine(),w=r.toBytes(g);return w[w.length-1]|=h&Ot?128:0,w}toHex(){return Xi(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new Ms(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Cp{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){wp()}static fromHex(e){wp()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return Xi(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ks=BigInt(0),oo=BigInt(1),dl=BigInt(2);function p4(e){return Yt(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function L1(e){let t=p4(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?to:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?dl**BigInt(254):dl**BigInt(447),y=a?BigInt(8)*dl**BigInt(251)-oo:BigInt(4)*dl**BigInt(445)-oo,h=m+y+oo,g=(x)=>Ue(x,n),w=S(d);function S(x){return Us(g(x),u)}function A(x){let k=yn(Te(x,u,"uCoordinate"));if(a)k[31]&=127;return g(rr(k))}function I(x){return rr(r(yn(Te(x,u,"scalar"))))}function C(x,k){let _=X(A(k),I(x));if(_===Ks)throw Error("invalid private or public key received");return S(_)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,_){let D=g(x*(k-_));return k=g(k-D),_=g(_+D),{x_2:k,x_3:_}}function X(x,k){Fr("u",x,Ks,n),Fr("scalar",k,m,h);let _=k,D=x,O=oo,L=Ks,M=x,H=oo,re=Ks;for(let le=BigInt(l-1);le>=Ks;le--){let pe=_>>le&oo;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let P={secretKey:u,publicKey:u,seed:u},E=(x)=>(x=x===void 0?c(u):x,Te(x,P.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze(P),Object.freeze(N),Object.freeze({keygen:Zs(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:P})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var m4=BigInt(0),qr=BigInt(1),B1=BigInt(2),h4=BigInt(3),g4=BigInt(5),y4=BigInt(8),fi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Up=(()=>({p:fi,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:y4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Z1(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=fi,a=e*e%o*e%o,c=Wt(a,B1,o)*a%o,l=Wt(c,qr,o)*e%o,u=Wt(l,g4,o)*l%o,d=Wt(u,t,o)*u%o,p=Wt(d,n,o)*d%o,m=Wt(p,i,o)*p%o,y=Wt(m,r,o)*m%o,h=Wt(y,r,o)*m%o,g=Wt(h,t,o)*u%o;return{pow_p_5_8:Wt(g,B1,o)*e%o,b2:a}}function b4(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Np=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Lp(e,t){let n=fi,i=Ue(t*t*t,n),r=Ue(i*i*t,n),o=Z1(e*r).pow_p_5_8,s=Ue(e*i*o,n),a=Ue(t*s*s,n),c=s,l=Ue(s*Np,n),u=a===e,d=a===Ue(-e,n),p=a===Ue(-e*Np,n);if(u)s=c;if(d||p)s=l;if(Kr(s,n))s=Ue(-s,n);return{isValid:u||d,value:s}}var ui=U1(Up,{uvRatio:Lp}),xn=(()=>ui.Fp)(),F1=(()=>ui.Fn)();var pl=(()=>{let e=fi;return L1({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=Z1(t);return Ue(Wt(n,h4,e)*i,e)},adjustScalarBytes:b4})})();var Dp=Np,v4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),x4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),w4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),S4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),j1=(e)=>Lp(qr,e),_4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),zp=(e)=>xn.create(rr(e)&_4);function M1(e){let{d:t}=Up,n=fi,i=(w)=>xn.create(w),r=i(Dp*e*e),o=i((r+qr)*w4),s=BigInt(-1),a=i((s-t*r)*i(r+t)),{isValid:c,value:l}=Lp(o,a),u=i(l*e);if(!Kr(u,n))u=i(-u);if(!c)l=u;if(!c)s=r;let d=i(s*(r-qr)*S4-a),p=l*l,m=i((l+l)*a),y=i(d*v4),h=i(qr-p),g=i(qr+p);return new ui(i(m*g),i(h*y),i(y*g),i(m*h))}class vt extends Cp{static BASE=(()=>new vt(ui.BASE))();static ZERO=(()=>new vt(ui.ZERO))();static Fp=(()=>xn)();static Fn=(()=>F1)();constructor(e){super(e)}static fromAffine(e){return new vt(ui.fromAffine(e))}assertSame(e){if(!(e instanceof vt))throw Error("RistrettoPoint expected")}init(e){return new vt(e)}static fromBytes(e){tt(e,32);let{a:t,d:n}=Up,i=fi,r=(A)=>xn.create(A),o=zp(e);if(!l1(xn.toBytes(o),e)||Kr(o,i))throw Error("invalid ristretto255 encoding 1");let s=r(o*o),a=r(qr+t*s),c=r(qr-t*s),l=r(a*a),u=r(c*c),d=r(t*n*l-u),{isValid:p,value:m}=j1(r(d*u)),y=r(m*c),h=r(m*y*d),g=r((o+o)*y);if(Kr(g,i))g=r(-g);let w=r(a*h),S=r(g*w);if(!p||Kr(S,i)||w===m4)throw Error("invalid ristretto255 encoding 2");return new vt(new ui(g,w,qr,S))}static fromHex(e){return vt.fromBytes(ds(e))}toBytes(){let{X:e,Y:t,Z:n,T:i}=this.ep,r=fi,o=(h)=>xn.create(h),s=o(o(n+t)*o(n-t)),a=o(e*t),c=o(a*a),{value:l}=j1(o(s*c)),u=o(l*s),d=o(l*a),p=o(u*d*i),m;if(Kr(i*p,r)){let h=o(t*Dp),g=o(e*Dp);e=h,t=g,m=o(u*x4)}else m=d;if(Kr(e*p,r))t=o(-t);let y=o((n-t)*m);if(Kr(y,r))y=o(-y);return xn.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:n}=this.ep,{X:i,Y:r}=e.ep,o=(c)=>xn.create(c),s=o(t*r)===o(n*i),a=o(n*r)===o(t*i);return s||a}is0(){return this.equals(vt.ZERO)}}Object.freeze(vt.BASE);Object.freeze(vt.ZERO);Object.freeze(vt.prototype);Object.freeze(vt);var $4=Object.freeze({Point:vt,hashToCurve(e,t){let n=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Ap(e,n,64,Rc);return $4.deriveToCurve(i)},hashToScalar(e,t={DST:A1}){let n=Ap(e,t.DST,64,Rc);return F1.create(rr(n))},deriveToCurve(e){tt(e,64);let t=zp(e.subarray(0,32)),n=M1(t),i=zp(e.subarray(32,64)),r=M1(i);return new vt(n.add(r))}});var K1=!1,k4=!1;async function q1(e,t){if(k4)return await t();try{return await e()}catch(n){if(n instanceof ReferenceError||n instanceof DOMException&&n.name==="NotSupportedError")return await t();else throw n}}async function ml(e,t){return await q1(async()=>{let n=Bp(e)?e:await I4(e),i=await crypto.subtle.importKey("raw",O4(t),{name:"X25519"},K1,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},n,256))},()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMult(e,t)})}async function qs(e){return await q1(async()=>ml(e,pl.GuBytes),()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMultBase(e)})}var E4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function I4(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...E4,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},K1,["deriveBits"])}function Bp(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function O4(e){return e}class jp{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),T4(di(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let n=await this.s.read();if(n.done)return this.buf=di(e),null;this.buf=n.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:di(this.transcript)}}}function T4(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function di(e){let t=e.reduce((r,o)=>r+o.length,0),n=new Uint8Array(t),i=0;for(let r of e)n.set(r,i),i+=r.length;return n}function so(e,...t){return e.pipeThrough(new TransformStream({start(n){for(let i of t)n.enqueue(i)}}))}function hl(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Mp(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function H1(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function V1(e,t){let n=e.getReader(),i=[],r=0;while(r<t){let{done:c,value:l}=await n.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),r+=l.length}n.releaseLock();let o=di(i),s=o.subarray(0,t),a=so(e,o.subarray(t));return{data:s,rest:a}}class vr{args;body;constructor(e,t){this.args=e,this.body=t}}async function R4(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let n=t.split(" ");if(n.length<2||n.shift()!=="->")return{next:t};for(let o of n)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=ut.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let r=di(i);return{s:new vr(n,r)}}async function Y1(e){let t=new jp(e),n=await t.readLine();if(n!=="age-encryption.org/v1")throw Error("invalid version "+(n??"line"));let i=[];for(;;){let{s:r,next:o}=await R4(t);if(r!==void 0){i.push(r);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=ut.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:so(e,a)}}}function Zp(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let n of e){t.push("-> "+n.args.join(" ")+`
 `);for(let i=0;i<n.body.length;i+=48){let r=i+48;if(r>n.body.length)r=n.body.length;t.push(ut.encode(n.body.subarray(i,r))+`
 `)}if(n.body.length%48===0)t.push(`

package/dist/index.js

@@ -724,7 +724,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),o}async function yB(e,t){let n=await ut(e),i=n.users.find((r)=>r.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:n.pilot,user:i}}async function bB(e){let t=await Ose(ur(Rse(),"brains-ops-watchdog-smoke-")),n=ur(t,"id_ed25519"),i=ur(t,"known_hosts");try{let r=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${r}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=Pse.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await Da(n,zse(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await Cse(n,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await Da(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:n,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(r){throw await H_(t,{recursive:!0,force:!0}),r}}async function Z_(e,t,n){return e.commandRunner("ssh",[...xB(e),`root@${e.serverIp}`,"bash","-s","--",t,n],{stdin:K_()})}async function Nse(e,t,n){return e.commandRunner("scp",[...xB(e),"-r",`root@${e.serverIp}:${t}/.`,n])}function xB(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function Dse(e){try{return await Tse(e),!0}catch{return!1}}async function Hm(e,t,n){await Promise.all([Da(ur(e,`${t}.stdout.log`),n.stdout),Da(ur(e,`${t}.stderr.log`),n.stderr)])}function zse(e){return`${e.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var mB,Pse;var Vm=se(async()=>{Ne();uB();Yn();su();await lB();mB=h.object({HCLOUD_TOKEN:h.string().min(1),KAMAL_SSH_PRIVATE_KEY:h.string().min(1)}),Pse=h.object({servers:h.array(h.object({status:h.string(),public_net:h.object({ipv4:h.object({ip:h.string().min(1)})})}))})});import{access as dT,chmod as jv,mkdir as td,readFile as mT,writeFile as pT}from"fs/promises";import{dirname as zF,join as As}from"path";import{fileURLToPath as LF}from"url";var fu={name:"@rizom/ops",version:"0.2.0-alpha.320",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};zi();Cc();var BF=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],Fv=new Set([".kamal/hooks/pre-deploy"]),UF=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),jF=LF(new URL("../templates/rover-pilot/",import.meta.url)),FF=[`service: rover
+`}var mB,Pse;var Vm=se(async()=>{Ne();uB();Yn();su();await lB();mB=h.object({HCLOUD_TOKEN:h.string().min(1),KAMAL_SSH_PRIVATE_KEY:h.string().min(1)}),Pse=h.object({servers:h.array(h.object({status:h.string(),public_net:h.object({ipv4:h.object({ip:h.string().min(1)})})}))})});import{access as dT,chmod as jv,mkdir as td,readFile as mT,writeFile as pT}from"fs/promises";import{dirname as zF,join as As}from"path";import{fileURLToPath as LF}from"url";var fu={name:"@rizom/ops",version:"0.2.0-alpha.322",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};zi();Cc();var BF=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],Fv=new Set([".kamal/hooks/pre-deploy"]),UF=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),jF=LF(new URL("../templates/rover-pilot/",import.meta.url)),FF=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 
 servers:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.320",
+  "version": "0.2.0-alpha.322",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",