npm - @rizom/ops - Versions diffs - 0.2.0-alpha.339 → 0.2.0-alpha.340 - Mend

@rizom/ops 0.2.0-alpha.339 → 0.2.0-alpha.340

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -667,7 +667,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var O6,GK;var Bw=G(async()=>{Rt();$6();Nn();fc();await S6();O6=v.object({HCLOUD_TOKEN:v.string().min(1),KAMAL_SSH_PRIVATE_KEY:v.string().min(1)}),GK=v.object({servers:v.array(v.object({status:v.string(),public_net:v.object({ipv4:v.object({ip:v.string().min(1)})})}))})});import{parseArgs as sP}from"util";function Be(e){return e}class _c extends Error{constructor(e){super(e);this.name="CliUsageError"}}function aP(e,t){let n={...t};for(let i of e)for(let[r,o]of Object.entries(i.flags??{})){let s=n[r];if(s===void 0){n[r]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${r}: commands must agree on type, short, and default`)}return n}function cP(e){let t={};for(let[n,i]of Object.entries(e))t[n]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function lP(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function Kw(e,t){let n=aP(t.commands,t.globalFlags??{}),i,r;try{({values:i,positionals:r}=sP({args:e,options:cP(n),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(lP(s))throw new _c(s.message.split(". ")[0]??s.message);throw s}if("help"in n&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in n&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(n)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:r[0]??"help",args:r.slice(1),flags:o}}function qw(e){let t=e.reduce((n,i)=>Math.max(n,i.label.length),0);return e.map((n)=>`  ${n.label.padEnd(t)}  ${n.description}`)}function uP(e){return qw(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function fP(e,t){let n=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${n}${i}`}function Hw(e){return qw(Object.entries(e).map(([t,n])=>({label:fP(t,n),description:n.description})))}function Vw(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function dP(e){return JSON.stringify(Object.entries(e).map(([t,n])=>[t,n.type,n.short??"",n.description,n.placeholder??"",n.default??""]).sort((t,n)=>String(t[0]).localeCompare(String(n[0]))))}function pP(e){let t=[],n=new Map;for(let r of e){let o=r.flags??{};if(Object.keys(o).length===0)continue;let s=dP(o),a=n.get(s);if(a){a.names.push(r.name);continue}let c={names:[r.name],flags:o};n.set(s,c),t.push(c)}let i=[];for(let r of t)i.push("",`${r.names.join(" / ")} options:`),i.push(...Hw(r.flags));return i}function Yw(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...uP(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...Hw(e.globalFlags));return t.push(...pP(e.commands)),t.join(`
-`)}function Ww(e){let t=new Map;for(let n of e){if(t.has(n.name))throw Error(`Duplicate command name: ${n.name}`);t.set(n.name,n)}return t}function Ze(e,t){let n=e[t];return typeof n==="string"?n:void 0}function Sc(e,t){let n=e[t];return typeof n==="boolean"?n:void 0}var $c={name:"@rizom/ops",version:"0.2.0-alpha.339",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as Z4,mkdirSync as F4,readFileSync as sm,writeFileSync as am}from"fs";import{dirname as K4,join as n$}from"path";function xd(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Fe(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(`${n}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw RangeError(`${n}expected integer >= 0, got ${e}`)}}function tt(e,t,n=""){let i=xd(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Cr(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Fe(e.outputLen),Fe(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function ji(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function kc(e,t){tt(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw RangeError('"digestInto() output" expected to be of length >='+n)}function Ec(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function gt(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mi(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Qt(e,t){return e<<32-t|e>>>t}function Ie(e,t){return e<<t|e>>>32-t>>>0}var hP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function gP(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function yP(e){for(let t=0;t<e.length;t++)e[t]=gP(e[t]);return e}var wd=hP?(e)=>e:yP,Jw=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),bP=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Ic(e){if(tt(e),Jw)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=bP[e[n]];return t}var Rr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Gw(e){if(e>=Rr._0&&e<=Rr._9)return e-Rr._0;if(e>=Rr.A&&e<=Rr.F)return e-(Rr.A-10);if(e>=Rr.a&&e<=Rr.f)return e-(Rr.a-10);return}function ds(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(Jw)try{return Uint8Array.fromHex(e)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let t=e.length,n=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=Gw(e.charCodeAt(o)),a=Gw(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function vP(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function _d(e,t=""){if(typeof e==="string")return vP(e);return tt(e,void 0,t)}function Sd(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];tt(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Oc(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function $d(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.canXOF=i.canXOF,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function Nr(e=32){Fe(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var kd=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ed{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Cr(e),tt(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),gt(i)}update(e){return ji(this),this.iHash.update(e),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var fr=(()=>{let e=(t,n,i)=>new Ed(t,n).update(i).digest();return e.create=(t,n)=>new Ed(t,n),e})();function ps(e,t,n){if(Cr(e),n===void 0)n=new Uint8Array(e.outputLen);return fr(e,n,t)}var Id=Uint8Array.of(0),Xw=Uint8Array.of();function Od(e,t,n,i=32){Cr(e),Fe(i,"length"),tt(t,void 0,"prk");let r=e.outputLen;if(t.length<r)throw Error('"prk" must be at least HashLen octets');if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=Xw;else tt(n,void 0,"info");let s=new Uint8Array(o*r),a=fr.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Id[0]=u+1,c.update(u===0?Xw:l).update(n).update(Id).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),gt(l,Id),s.slice(0,i)}var rn=(e,t,n,i,r)=>Od(e,ps(e,t,n),i,r);function Qw(e,t,n){return e&t^~e&n}function e_(e,t,n){return e&t^e&n^t&n}class Ac{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mi(this.buffer)}update(e){ji(this),tt(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mi(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,gt(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mi(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var Dr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var rt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Tc=BigInt(4294967295),t_=BigInt(32);function xP(e,t=!1){if(t)return{h:Number(e&Tc),l:Number(e>>t_&Tc)};return{h:Number(e>>t_&Tc)|0,l:Number(e&Tc)|0}}function r_(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=xP(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var Ad=(e,t,n)=>e>>>n,Td=(e,t,n)=>e<<32-n|t>>>n,Hn=(e,t,n)=>e>>>n|t<<32-n,Vn=(e,t,n)=>e<<32-n|t>>>n,ms=(e,t,n)=>e<<64-n|t>>>n-32,hs=(e,t,n)=>e>>>n-32|t<<64-n;function dr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var n_=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),i_=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,o_=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),s_=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,a_=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),c_=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var _P=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nn=new Uint32Array(64);class l_ extends Ac{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)nn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=nn[u-15],p=nn[u-2],m=Qt(d,7)^Qt(d,18)^d>>>3,y=Qt(p,17)^Qt(p,19)^p>>>10;nn[u]=y+nn[u-7]+m+nn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Qt(s,6)^Qt(s,11)^Qt(s,25),p=l+d+Qw(s,a,c)+_P[u]+nn[u]|0,y=(Qt(n,2)^Qt(n,13)^Qt(n,22))+e_(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){gt(nn)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),gt(this.buffer)}}class u_ extends l_{A=Dr[0]|0;B=Dr[1]|0;C=Dr[2]|0;D=Dr[3]|0;E=Dr[4]|0;F=Dr[5]|0;G=Dr[6]|0;H=Dr[7]|0;constructor(){super(32)}}var f_=(()=>r_(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),SP=(()=>f_[0])(),$P=(()=>f_[1])(),on=new Uint32Array(80),sn=new Uint32Array(80);class d_ extends Ac{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let _=0;_<16;_++,t+=4)on[_]=e.getUint32(t),sn[_]=e.getUint32(t+=4);for(let _=16;_<80;_++){let A=on[_-15]|0,I=sn[_-15]|0,C=Hn(A,I,1)^Hn(A,I,8)^Ad(A,I,7),U=Vn(A,I,1)^Vn(A,I,8)^Td(A,I,7),F=on[_-2]|0,T=sn[_-2]|0,j=Hn(F,T,19)^ms(F,T,61)^Ad(F,T,6),X=Vn(F,T,19)^hs(F,T,61)^Td(F,T,6),R=o_(U,X,sn[_-7],sn[_-16]),E=s_(R,C,j,on[_-7],on[_-16]);on[_]=E|0,sn[_]=R|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let _=0;_<80;_++){let A=Hn(u,d,14)^Hn(u,d,18)^ms(u,d,41),I=Vn(u,d,14)^Vn(u,d,18)^hs(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=a_(w,I,U,$P[_],sn[_]),T=c_(F,g,A,C,SP[_],on[_]),j=F|0,X=Hn(n,i,28)^ms(n,i,34)^ms(n,i,39),R=Vn(n,i,28)^hs(n,i,34)^hs(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=dr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=n_(j,R,N);n=i_(x,T,X,E),i=x|0}({h:n,l:i}=dr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=dr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=dr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=dr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=dr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=dr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=dr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=dr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){gt(on,sn)}destroy(){this.destroyed=!0,gt(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class p_ extends d_{Ah=rt[0]|0;Al=rt[1]|0;Bh=rt[2]|0;Bl=rt[3]|0;Ch=rt[4]|0;Cl=rt[5]|0;Dh=rt[6]|0;Dl=rt[7]|0;Eh=rt[8]|0;El=rt[9]|0;Fh=rt[10]|0;Fl=rt[11]|0;Gh=rt[12]|0;Gl=rt[13]|0;Hh=rt[14]|0;Hl=rt[15]|0;constructor(){super(64)}}var Ke=$d(()=>new u_,kd(1));var Pc=$d(()=>new p_,kd(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function zc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Cd(e){if(!zc(e))throw TypeError("Uint8Array expected")}function b_(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((n)=>typeof n==="string");else return t.every((n)=>Number.isSafeInteger(n))}function v_(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function an(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function ys(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Cc(e){if(!Array.isArray(e))throw TypeError("array expected")}function Nc(e,t){if(!b_(!0,t))throw TypeError(`${e}: array of strings expected`)}function Nd(e,t){if(!b_(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Nt(...e){let t=(o)=>o,n=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(n,t),r=e.map((o)=>o.decode).reduce(n,t);return{encode:i,decode:r}}function Dt(e){let t=typeof e==="string"?e.split(""):e,n=t.length;Nc("alphabet",t);let i=new Map(t.map((r,o)=>[r,o]));return{encode:(r)=>(Cc(r),r.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=n)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(r)=>(Cc(r),r.map((o)=>{an("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function zt(e=""){return an("join",e),{encode:(t)=>(Nc("join.decode",t),t.join(e)),decode:(t)=>(an("join.decode",t),t.split(e))}}function Uc(e,t="="){return ys(e),an("padding",t),{encode(n){Nc("padding.encode",n);while(n.length*e%8)n.push(t);return n},decode(n){Nc("padding.decode",n);let i=n.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&n[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return n.slice(0,i)}}}function x_(e){return v_(e),{encode:(t)=>t,decode:(t)=>e(t)}}function m_(e,t,n){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(n<2)throw RangeError(`convertRadix: invalid to=${n}, base cannot be less than 2`);if(Cc(e),!e.length)return[];let i=0,r=[],o=Array.from(e,(a)=>{if(ys(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,p=d+u;if(!Number.isSafeInteger(p)||d/t!==a||p-u!==d)throw Error("convertRadix: carry overflow");let m=p/n;a=p%n;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*n+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(r.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)r.push(0);return r.reverse()}var w_=(e,t)=>t===0?e:w_(t,e%t),Dc=(e,t)=>e+(t-w_(e,t)),Rc=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Pd(e,t,n,i){if(Cc(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(n<=0||n>32)throw RangeError(`convertRadix2: wrong to=${n}`);if(Dc(t,n)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${n} carryBits=${Dc(t,n)}`);let r=0,o=0,s=Rc[t],a=Rc[n]-1,c=[];for(let l of e){if(ys(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(r=r<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=n;o-=n)c.push((r>>o-n&a)>>>0);let u=Rc[o];if(u===void 0)throw Error("invalid carry");r&=u-1}if(r=r<<n-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&r>0)throw Error(`Non-zero padding: ${r}`);if(i&&o>0)c.push(r>>>0);return c}function kP(e){ys(e);let t=256;return{encode:(n)=>{if(!zc(n))throw TypeError("radix.encode input should be Uint8Array");return m_(Array.from(n),t,e)},decode:(n)=>(Nd("radix.decode",n),Uint8Array.from(m_(n,e,t)))}}function Kt(e,t=!1){if(ys(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Dc(8,e)>32||Dc(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(n)=>{if(!zc(n))throw TypeError("radix2.encode input should be Uint8Array");return Pd(Array.from(n),8,e,!t)},decode:(n)=>(Nd("radix2.decode",n),Uint8Array.from(Pd(n,e,8,t)))}}function h_(e){return v_(e),function(...t){try{return e.apply(null,t)}catch(n){}}}var _q=Object.freeze(Nt(Kt(4),Dt("0123456789ABCDEF"),zt(""))),Sq=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Uc(5),zt(""))),$q=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),zt(""))),kq=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Uc(5),zt(""))),Eq=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),zt(""))),Iq=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),zt(""),x_((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),__=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),EP=/[\t\n\f\r ]/,S_=(e,t)=>{an("base64",e);let n=t?"base64url":"base64";if(e.length>0&&EP.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:n,lastChunkHandling:"strict"})},Dd=Object.freeze(__?{encode(e){return Cd(e),e.toBase64()},decode(e){return S_(e,!1)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Uc(6),zt(""))),ut=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),zt(""))),Oq=Object.freeze(__?{encode(e){return Cd(e),e.toBase64({alphabet:"base64url"})},decode(e){return S_(e,!0)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Uc(6),zt(""))),Aq=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),zt(""))),zd=(e)=>Nt(kP(58),Dt(e),zt("")),Tq=Object.freeze(zd("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Pq=Object.freeze(zd("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Rq=Object.freeze(zd("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Rd=Nt(Dt("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),zt("")),g_=[996825010,642813549,513874426,1027748829,705979059];function gs(e){let t=e>>25,n=(e&33554431)<<5;for(let i=0;i<g_.length;i++)if((t>>i&1)===1)n^=g_[i];return n}function y_(e,t,n=1){let i=e.length,r=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);r=gs(r)^s>>5}r=gs(r);for(let o=0;o<i;o++)r=gs(r)^e.charCodeAt(o)&31;for(let o of t)r=gs(r)^o;for(let o=0;o<6;o++)r=gs(r);return r^=n,Rd.encode(Pd([r%Rc[30]],30,5,!1))}function $_(e){let t=e==="bech32"?1:734539939,n=Kt(5),i=n.decode,r=n.encode,o=h_(i);function s(d,p,m=90){if(an("bech32.encode prefix",d),zc(p))p=Array.from(p);Nd("bech32.encode",p);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let h=y+7+p.length;if(m!==!1&&h>m)throw TypeError(`Length ${h} exceeds limit ${m}`);let g=d.toLowerCase(),w=y_(g,p,t);return`${g}1${Rd.encode(p)}${w}`}function a(d,p=90){an("bech32.decode input",d);let m=d.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${d}). Expected (8..${p})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let h=y.lastIndexOf("1");if(h===0||h===-1)throw Error('Letter "1" must be present between prefix and data only');let g=y.slice(0,h),w=y.slice(h+1);if(w.length<6)throw Error("Data must be at least 6 characters long");let _=Rd.decode(w).slice(0,-6),A=y_(g,_,t);if(!w.endsWith(A))throw Error(`Invalid checksum in ${d}: expected "${A}"`);return{prefix:g,words:_}}let c=h_(a);function l(d){let{prefix:p,words:m}=a(d,!1);return{prefix:p,words:m,bytes:i(m)}}function u(d,p){return s(d,r(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:r}}var Ut=Object.freeze($_("bech32")),Cq=Object.freeze($_("bech32m"));var IP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),OP={encode(e){return Cd(e),e.toHex()},decode(e){return an("hex",e),Uint8Array.fromHex(e)}},Nq=Object.freeze(IP?OP:Nt(Kt(4),Dt("0123456789abcdef"),zt(""),x_((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function TP(e,t,n,i){Cr(e);let r=Oc({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=r;if(Fe(o,"c"),Fe(s,"dkLen"),Fe(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=_d(t,"password"),l=_d(n,"salt"),u=new Uint8Array(s),d=fr.create(e,c),p=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:p}}function PP(e,t,n,i,r){if(e.destroy(),t.destroy(),i)i.destroy();return gt(r),n}function Ud(e,t,n,i){let{c:r,dkLen:o,DK:s,PRF:a,PRFSalt:c}=TP(e,t,n,i),l,u=new Uint8Array(4),d=Mi(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let h=s.subarray(y,y+a.outputLen);d.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),h.set(p.subarray(0,h.length));for(let g=1;g<r;g++){a._cloneInto(l).update(p).digestInto(p);for(let w=0;w<h.length;w++)h[w]^=p[w]}}return PP(a,c,s,l,p)}function k_(e,t,n,i,r,o){let s=e[t++]^n[i++],a=e[t++]^n[i++],c=e[t++]^n[i++],l=e[t++]^n[i++],u=e[t++]^n[i++],d=e[t++]^n[i++],p=e[t++]^n[i++],m=e[t++]^n[i++],y=e[t++]^n[i++],h=e[t++]^n[i++],g=e[t++]^n[i++],w=e[t++]^n[i++],_=e[t++]^n[i++],A=e[t++]^n[i++],I=e[t++]^n[i++],C=e[t++]^n[i++],U=s,F=a,T=c,j=l,X=u,R=d,E=p,N=m,x=y,k=h,S=g,D=w,O=_,L=A,M=I,H=C;for(let re=0;re<8;re+=2)X^=Ie(U+O|0,7),x^=Ie(X+U|0,9),O^=Ie(x+X|0,13),U^=Ie(O+x|0,18),k^=Ie(R+F|0,7),L^=Ie(k+R|0,9),F^=Ie(L+k|0,13),R^=Ie(F+L|0,18),M^=Ie(S+E|0,7),T^=Ie(M+S|0,9),E^=Ie(T+M|0,13),S^=Ie(E+T|0,18),j^=Ie(H+D|0,7),N^=Ie(j+H|0,9),D^=Ie(N+j|0,13),H^=Ie(D+N|0,18),F^=Ie(U+j|0,7),T^=Ie(F+U|0,9),j^=Ie(T+F|0,13),U^=Ie(j+T|0,18),E^=Ie(R+X|0,7),N^=Ie(E+R|0,9),X^=Ie(N+E|0,13),R^=Ie(X+N|0,18),D^=Ie(S+k|0,7),x^=Ie(D+S|0,9),k^=Ie(x+D|0,13),S^=Ie(k+x|0,18),O^=Ie(H+M|0,7),L^=Ie(O+H|0,9),M^=Ie(L+O|0,13),H^=Ie(M+L|0,18);r[o++]=s+U|0,r[o++]=a+F|0,r[o++]=c+T|0,r[o++]=l+j|0,r[o++]=u+X|0,r[o++]=d+R|0,r[o++]=p+E|0,r[o++]=m+N|0,r[o++]=y+x|0,r[o++]=h+k|0,r[o++]=g+S|0,r[o++]=w+D|0,r[o++]=_+O|0,r[o++]=A+L|0,r[o++]=I+M|0,r[o++]=C+H|0}function Ld(e,t,n,i,r){let o=i+0,s=i+16*r;for(let a=0;a<16;a++)n[s+a]=e[t+(2*r-1)*16+a];for(let a=0;a<r;a++,o+=16,t+=16){if(k_(n,s,e,t,n,o),a>0)s+=16;k_(n,o,e,t+=16,n,s)}}function RP(e,t,n){let i=Oc({dkLen:32,asyncTick:10,maxmem:1073742848},n),{N:r,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Fe(r,"N"),Fe(o,"r"),Fe(s,"p"),Fe(a,"dkLen"),Fe(c,"asyncTick"),Fe(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,p=d/4,m=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(r+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let h=Ud(Ke,e,t,{c:1,dkLen:d*s}),g=Ec(h),w=Ec(new Uint8Array(d*r)),_=Ec(new Uint8Array(d)),A=()=>{};if(u){let I=2*r*s,C=Math.max(Math.floor(I/1e4),1),U=0;A=()=>{if(U++,u&&(!(U%C)||U===I))u(U/I)}}return{N:r,r:o,p:s,dkLen:a,blockSize32:p,V:w,B32:g,B:h,tmp:_,blockMixCb:A,asyncTick:c}}function CP(e,t,n,i,r){let o=Ud(Ke,e,n,{c:1,dkLen:t});return gt(n,i,r),o}function Bd(e,t,n){let{N:i,r,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:p}=RP(e,t,n);wd(l);for(let m=0;m<o;m++){let y=a*m;for(let h=0;h<a;h++)c[h]=l[y+h];for(let h=0,g=0;h<i-1;h++)Ld(c,g,c,g+=a,r),p();Ld(c,(i-1)*a,l,y,r),p();for(let h=0;h<i;h++){let g=(l[y+a-16]&i-1)>>>0;for(let w=0;w<a;w++)d[w]=l[y+w]^c[g*a+w];Ld(d,0,l,y,r),p()}}return wd(l),CP(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function NP(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Lc(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Zi(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ye(e,t,n=""){let i=NP(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function jd(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function E_(e,t,n=!1){Ye(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(n&&!Fi(e))throw Error("invalid output, must be aligned")}function pr(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function er(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function DP(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Yn=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),zP=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var UP=(e)=>{for(let t=0;t<e.length;t++)e[t]=zP(e[t]);return e},zr=Yn?(e)=>e:UP;function I_(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function O_(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function A_(e,t,n){let i=t,r=n||(()=>[]),o=(a,c)=>i(c,...r(a)).update(a).digest(),s=i(new Uint8Array(e),...r(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var T_=(e,t)=>{function n(i,...r){if(Ye(i,void 0,"key"),e.nonceLength!==void 0){let u=r[0];Ye(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&r[1]!==void 0)Ye(r[1],void 0,"AAD");let s=t(i,...r),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Ye(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ye(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Ye(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(n,e),n};function bs(e,t,n=!0){if(t===void 0)return new Uint8Array(e);if(Ye(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(n&&!Fi(t))throw Error("invalid output, must be aligned");return t}function P_(e,t,n){Zi(e),Zi(t),Lc(n);let i=new Uint8Array(16),r=DP(i);return r.setBigUint64(0,BigInt(t),n),r.setBigUint64(8,BigInt(e),n),i}function Fi(e){return e.byteOffset%4===0}function Ki(e){return Uint8Array.from(Ye(e))}var C_=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),LP=(()=>zr(pr(C_("expand 16-byte k"))))(),BP=(()=>zr(pr(C_("expand 32-byte k"))))();function Oe(e,t){return e<<t|e>>>32-t}var vs=64,jP=16,Md=(()=>4294967295)(),R_=Uint32Array.of();function MP(e,t,n,i,r,o,s,a){let c=r.length,l=new Uint8Array(vs),u=pr(l),d=Yn&&Fi(r)&&Fi(o),p=d?pr(r):R_,m=d?pr(o):R_;if(!Yn){for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),zr(u),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}return}for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);if(d&&h===vs){let g=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let w=0,_;w<jP;w++)_=g+w,m[_]=p[_]^u[w];y+=vs;continue}for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}}function N_(e,t){let{allowShortKeys:n,extendNonceFn:i,counterLength:r,counterRight:o,rounds:s}=I_({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Zi(r),Zi(s),Lc(o),Lc(n),(a,c,l,u,d=0)=>{Ye(a,void 0,"key"),Ye(c,void 0,"nonce"),Ye(l,void 0,"data");let p=l.length;if(u=bs(p,u,!1),Zi(d),d<0||d>=Md)throw Error("arx: counter overflow");let m=[],y=a.length,h,g;if(y===32)m.push(h=Ki(a)),g=BP;else if(y===16&&n)h=new Uint8Array(32),h.set(a),h.set(a,16),g=LP,m.push(h);else throw Ye(a,32,"arx key"),Error("invalid key size");if(!Yn||!Fi(c))m.push(c=Ki(c));let w=pr(h);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let I=c.subarray(0,16);if(Yn)i(g,w,pr(I),w);else{let C=zr(Uint32Array.from(g));i(C,w,pr(I),w),er(C),zr(w)}c=c.subarray(16)}else if(!Yn)zr(w);let _=16-r;if(_!==c.length)throw Error(`arx: nonce must be ${_} or 16 bytes`);if(_!==12){let I=new Uint8Array(12);I.set(c,o?0:12-c.length),c=I,m.push(c)}let A=zr(pr(c));try{return MP(e,g,w,A,l,u,d,s),u}finally{er(...m)}}}function nt(e,t){return e[t++]&255|(e[t++]&255)<<8}class D_{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ki(Ye(e,32,"key"));let t=nt(e,0),n=nt(e,2),i=nt(e,4),r=nt(e,6),o=nt(e,8),s=nt(e,10),a=nt(e,12),c=nt(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|r<<9)&8191,this.r[4]=(r>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=nt(e,16+2*l)}process(e,t,n=!1){let i=n?0:2048,{h:r,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],p=o[6],m=o[7],y=o[8],h=o[9],g=nt(e,t+0),w=nt(e,t+2),_=nt(e,t+4),A=nt(e,t+6),I=nt(e,t+8),C=nt(e,t+10),U=nt(e,t+12),F=nt(e,t+14),T=r[0]+(g&8191),j=r[1]+((g>>>13|w<<3)&8191),X=r[2]+((w>>>10|_<<6)&8191),R=r[3]+((_>>>7|A<<9)&8191),E=r[4]+((A>>>4|I<<12)&8191),N=r[5]+(I>>>1&8191),x=r[6]+((I>>>14|C<<2)&8191),k=r[7]+((C>>>11|U<<5)&8191),S=r[8]+((U>>>8|F<<8)&8191),D=r[9]+(F>>>5|i),O=0,L=O+T*s+j*(5*h)+X*(5*y)+R*(5*m)+E*(5*p);O=L>>>13,L&=8191,L+=N*(5*d)+x*(5*u)+k*(5*l)+S*(5*c)+D*(5*a),O+=L>>>13,L&=8191;let M=O+T*a+j*s+X*(5*h)+R*(5*y)+E*(5*m);O=M>>>13,M&=8191,M+=N*(5*p)+x*(5*d)+k*(5*u)+S*(5*l)+D*(5*c),O+=M>>>13,M&=8191;let H=O+T*c+j*a+X*s+R*(5*h)+E*(5*y);O=H>>>13,H&=8191,H+=N*(5*m)+x*(5*p)+k*(5*d)+S*(5*u)+D*(5*l),O+=H>>>13,H&=8191;let re=O+T*l+j*c+X*a+R*s+E*(5*h);O=re>>>13,re&=8191,re+=N*(5*y)+x*(5*m)+k*(5*p)+S*(5*d)+D*(5*u),O+=re>>>13,re&=8191;let ae=O+T*u+j*l+X*c+R*a+E*s;O=ae>>>13,ae&=8191,ae+=N*(5*h)+x*(5*y)+k*(5*m)+S*(5*p)+D*(5*d),O+=ae>>>13,ae&=8191;let le=O+T*d+j*u+X*l+R*c+E*a;O=le>>>13,le&=8191,le+=N*s+x*(5*h)+k*(5*y)+S*(5*m)+D*(5*p),O+=le>>>13,le&=8191;let pe=O+T*p+j*d+X*u+R*l+E*c;O=pe>>>13,pe&=8191,pe+=N*a+x*s+k*(5*h)+S*(5*y)+D*(5*m),O+=pe>>>13,pe&=8191;let ye=O+T*m+j*p+X*d+R*u+E*l;O=ye>>>13,ye&=8191,ye+=N*c+x*a+k*s+S*(5*h)+D*(5*y),O+=ye>>>13,ye&=8191;let he=O+T*y+j*m+X*p+R*d+E*u;O=he>>>13,he&=8191,he+=N*l+x*c+k*a+S*s+D*(5*h),O+=he>>>13,he&=8191;let ge=O+T*h+j*y+X*m+R*p+E*d;O=ge>>>13,ge&=8191,ge+=N*u+x*l+k*c+S*a+D*s,O+=ge>>>13,ge&=8191,O=(O<<2)+O|0,O=O+L|0,L=O&8191,O=O>>>13,M+=O,r[0]=L,r[1]=M,r[2]=H,r[3]=re,r[4]=ae,r[5]=le,r[6]=pe,r[7]=ye,r[8]=he,r[9]=ge}finalize(){let{h:e,pad:t}=this,n=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,n[0]=e[0]+5,i=n[0]>>>13,n[0]&=8191;for(let s=1;s<10;s++)n[s]=e[s]+i,i=n[s]>>>13,n[s]&=8191;n[9]-=8192;let r=(i^1)-1;for(let s=0;s<10;s++)n[s]&=r;r=~r;for(let s=0;s<10;s++)e[s]=e[s]&r|n[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;er(n)}update(e){jd(this),Ye(e),e=Ki(e);let{buffer:t,blockLen:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(n-this.pos,i-r);if(o===n){for(;n<=i-r;r+=n)this.process(e,r);continue}if(t.set(e.subarray(r,r+o),this.pos),this.pos+=o,r+=o,this.pos===n)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,er(this.h,this.r,this.buffer,this.pad)}digestInto(e){jd(this),E_(e,this),this.finished=!0;let{buffer:t,h:n}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let r=0;for(let o=0;o<8;o++)e[r++]=n[o]>>>0,e[r++]=n[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}}var z_=A_(32,(e)=>new D_(e));function ZP(e,t,n,i,r,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],p=t[2],m=t[3],y=t[4],h=t[5],g=t[6],w=t[7],_=r,A=n[0],I=n[1],C=n[2],U=s,F=a,T=c,j=l,X=u,R=d,E=p,N=m,x=y,k=h,S=g,D=w,O=_,L=A,M=I,H=C;for(let ae=0;ae<o;ae+=2)U=U+X|0,O=Oe(O^U,16),x=x+O|0,X=Oe(X^x,12),U=U+X|0,O=Oe(O^U,8),x=x+O|0,X=Oe(X^x,7),F=F+R|0,L=Oe(L^F,16),k=k+L|0,R=Oe(R^k,12),F=F+R|0,L=Oe(L^F,8),k=k+L|0,R=Oe(R^k,7),T=T+E|0,M=Oe(M^T,16),S=S+M|0,E=Oe(E^S,12),T=T+E|0,M=Oe(M^T,8),S=S+M|0,E=Oe(E^S,7),j=j+N|0,H=Oe(H^j,16),D=D+H|0,N=Oe(N^D,12),j=j+N|0,H=Oe(H^j,8),D=D+H|0,N=Oe(N^D,7),U=U+R|0,H=Oe(H^U,16),S=S+H|0,R=Oe(R^S,12),U=U+R|0,H=Oe(H^U,8),S=S+H|0,R=Oe(R^S,7),F=F+E|0,O=Oe(O^F,16),D=D+O|0,E=Oe(E^D,12),F=F+E|0,O=Oe(O^F,8),D=D+O|0,E=Oe(E^D,7),T=T+N|0,L=Oe(L^T,16),x=x+L|0,N=Oe(N^x,12),T=T+N|0,L=Oe(L^T,8),x=x+L|0,N=Oe(N^x,7),j=j+X|0,M=Oe(M^j,16),k=k+M|0,X=Oe(X^k,12),j=j+X|0,M=Oe(M^j,8),k=k+M|0,X=Oe(X^k,7);let re=0;i[re++]=s+U|0,i[re++]=a+F|0,i[re++]=c+T|0,i[re++]=l+j|0,i[re++]=u+X|0,i[re++]=d+R|0,i[re++]=p+E|0,i[re++]=m+N|0,i[re++]=y+x|0,i[re++]=h+k|0,i[re++]=g+S|0,i[re++]=w+D|0,i[re++]=_+O|0,i[re++]=A+L|0,i[re++]=I+M|0,i[re++]=C+H|0}var FP=N_(ZP,{counterRight:!1,counterLength:4,allowShortKeys:!1});var KP=new Uint8Array(16),U_=(e,t)=>{e.update(t);let n=t.length%16;if(n)e.update(KP.subarray(n))},qP=new Uint8Array(32);function L_(e,t,n,i,r){if(r!==void 0)Ye(r,void 0,"AAD");let o=e(t,n,qP),s=P_(i.length,r?r.length:0,!0),a=z_.create(o);if(r)U_(a,r);U_(a,i),a.update(s);let c=a.digest();return er(o,s),c}var HP=(e)=>(t,n,i)=>({encrypt(o,s){let a=o.length;s=bs(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,n,c,c,1);let l=L_(e,t,n,c,i);return s.set(l,a),er(l),s},decrypt(o,s){s=bs(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=L_(e,t,n,a,i);if(!O_(c,l))throw er(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,n,s,s,1),er(l),s}}),qt=T_({blockSize:64,nonceLength:12,tagLength:16},HP(FP));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function qi(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Xe(e,t=""){if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw Error(`${n}expected integer >= 0, got ${e}`)}}function ve(e,t,n=""){let i=qi(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function Ht(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Xe(e.outputLen),Xe(e.blockLen)}function Lr(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bc(e,t){ve(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw Error('"digestInto() output" expected to be of length >='+n)}function jc(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function It(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function tr(e,t){return e<<32-t|e>>>t}var VP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function YP(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function WP(e){for(let t=0;t<e.length;t++)e[t]=YP(e[t]);return e}var Zd=VP?(e)=>e:WP,j_=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),GP=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Wn(e){if(ve(e),j_)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=GP[e[n]];return t}var Ur={_0:48,_9:57,A:65,F:70,a:97,f:102};function B_(e){if(e>=Ur._0&&e<=Ur._9)return e-Ur._0;if(e>=Ur.A&&e<=Ur.F)return e-(Ur.A-10);if(e>=Ur.a&&e<=Ur.f)return e-(Ur.a-10);return}function Gn(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(j_)return Uint8Array.fromHex(e);let t=e.length,n=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=B_(e.charCodeAt(o)),a=B_(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function qe(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];ve(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Hi(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function cn(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ln=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Kd=BigInt(0),Fd=BigInt(1);function xs(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw Error(n+"expected boolean, got type="+typeof e)}return e}function M_(e){if(typeof e==="bigint"){if(!Zc(e))throw Error("positive bigint expected, got "+e)}else Xe(e);return e}function ws(e){let t=M_(e).toString(16);return t.length&1?"0"+t:t}function Z_(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Kd:BigInt("0x"+e)}function un(e){return Z_(Wn(e))}function fn(e){return Z_(Wn(Fc(ve(e)).reverse()))}function Vi(e,t){Xe(t),e=M_(e);let n=Gn(e.toString(16).padStart(t*2,"0"));if(n.length!==t)throw Error("number too large");return n}function _s(e,t){return Vi(e,t).reverse()}function Fc(e){return Uint8Array.from(e)}function dn(e){return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var Zc=(e)=>typeof e==="bigint"&&Kd<=e;function JP(e,t,n){return Zc(e)&&Zc(t)&&Zc(n)&&t<=e&&e<n}function Ss(e,t,n,i){if(!JP(t,n,i))throw Error("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function qd(e){let t;for(t=0;e>Kd;e>>=Fd,t+=1);return t}var $s=(e)=>(Fd<<BigInt(e))-Fd;function F_(e,t,n){if(Xe(e,"hashLen"),Xe(t,"qByteLen"),typeof n!=="function")throw Error("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,qe(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let _=c.slice();w.push(_),g+=c.length}return qe(...w)};return(g,w)=>{d(),m(g);let _=void 0;while(!(_=w(y())))m();return d(),_}}function Jn(e,t={},n={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}function Hd(e){let t=new WeakMap;return(n,...i)=>{let r=t.get(n);if(r!==void 0)return r;let o=e(n,...i);return t.set(n,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bt=BigInt(0),ft=BigInt(1),Xn=BigInt(2),H_=BigInt(3),V_=BigInt(4),Y_=BigInt(5),XP=BigInt(7),W_=BigInt(8),QP=BigInt(9),G_=BigInt(16);function yt(e,t){let n=e%t;return n>=bt?n:t+n}function Vt(e,t,n){let i=e;while(t-- >bt)i*=i,i%=n;return i}function K_(e,t){if(e===bt)throw Error("invert: expected non-zero number");if(t<=bt)throw Error("invert: expected positive modulus, got "+t);let n=yt(e,t),i=t,r=bt,o=ft,s=ft,a=bt;while(n!==bt){let l=i/n,u=i%n,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==ft)throw Error("invert: does not exist");return yt(r,t)}function Vd(e,t,n){if(!e.eql(e.sqr(t),n))throw Error("Cannot find square root")}function J_(e,t){let n=(e.ORDER+ft)/V_,i=e.pow(t,n);return Vd(e,i,t),i}function eR(e,t){let n=(e.ORDER-Y_)/W_,i=e.mul(t,Xn),r=e.pow(i,n),o=e.mul(t,r),s=e.mul(e.mul(o,Xn),r),a=e.mul(o,e.sub(s,e.ONE));return Vd(e,a,t),a}function tR(e){let t=Kc(e),n=X_(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+XP)/G_;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,r),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,m),u=a.cmov(p,d,y);let h=a.eql(a.sqr(u),c),g=a.cmov(l,u,h);return Vd(a,g,c),g}}function X_(e){if(e<H_)throw Error("sqrt is not defined for small field");let t=e-ft,n=0;while(t%Xn===bt)t/=Xn,n++;let i=Xn,r=Kc(e);while(q_(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return J_;let o=r.pow(i,t),s=(t+ft)/Xn;return function(c,l){if(c.is0(l))return l;if(q_(c,l)!==1)throw Error("Cannot find square root");let u=n,d=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,h=c.sqr(p);while(!c.eql(h,c.ONE))if(y++,h=c.sqr(h),y===u)throw Error("Cannot find square root");let g=ft<<BigInt(u-y-1),w=c.pow(d,g);u=y,d=c.sqr(w),p=c.mul(p,d),m=c.mul(m,w)}return m}}function rR(e){if(e%V_===H_)return J_;if(e%W_===Y_)return eR;if(e%G_===QP)return tR(e);return X_(e)}var nR=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Yd(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=nR.reduce((i,r)=>(i[r]="function",i),t);return Jn(e,n),e}function iR(e,t,n){if(n<bt)throw Error("invalid exponent, negatives unsupported");if(n===bt)return e.ONE;if(n===ft)return t;let i=e.ONE,r=t;while(n>bt){if(n&ft)i=e.mul(i,r);r=e.sqr(r),n>>=ft}return i}function ks(e,t,n=!1){let i=Array(t.length).fill(n?e.ZERO:void 0),r=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(r);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function q_(e,t){let n=(e.ORDER-ft)/Xn,i=e.pow(t,n),r=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!r&&!o&&!s)throw Error("invalid Legendre symbol result");return r?1:o?0:-1}function oR(e,t){if(t!==void 0)Xe(t);let n=t!==void 0?t:e.toString(2).length,i=Math.ceil(n/8);return{nBitLength:n,nByteLength:i}}class Q_{ORDER;BITS;BYTES;isLE;ZERO=bt;ONE=ft;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=bt)throw Error("invalid field: expected ORDER > 0, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=oR(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return yt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return bt<=e&&e<this.ORDER}is0(e){return e===bt}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&ft)===ft}neg(e){return yt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return yt(e*e,this.ORDER)}add(e,t){return yt(e+t,this.ORDER)}sub(e,t){return yt(e-t,this.ORDER)}mul(e,t){return yt(e*t,this.ORDER)}pow(e,t){return iR(this,e,t)}div(e,t){return yt(e*K_(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return K_(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=rR(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?_s(e,this.BYTES):Vi(e,this.BYTES)}fromBytes(e,t=!1){ve(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?fn(e):un(e);if(s)a=yt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ks(this,e)}cmov(e,t,n){return n?t:e}}function Kc(e,t={}){return new Q_(e,t)}function eS(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function Wd(e){let t=eS(e);return t+Math.ceil(t/2)}function tS(e,t,n=!1){ve(e);let i=e.length,r=eS(t),o=Wd(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?fn(e):un(e),a=yt(s,t-ft)+ft;return n?_s(a,r):Vi(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Yi=BigInt(0),Qn=BigInt(1);function Es(e,t){let n=t.negate();return e?n:t}function Qd(e,t){let n=ks(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function oS(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Gd(e,t){oS(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=$s(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function rS(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=Qn;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Jd=new WeakMap,sS=new WeakMap;function Xd(e){return sS.get(e)||1}function nS(e){if(e!==Yi)throw Error("invalid wNAF")}class ep{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>Yi){if(t&Qn)n=n.add(i);i=i.double(),t>>=Qn}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Gd(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Gd(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=rS(n,s,o);if(n=a,l)r=r.add(Es(d,t[p]));else i=i.add(Es(u,t[c]))}return nS(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Gd(e,this.bits);for(let o=0;o<r.windows;o++){if(n===Yi)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=rS(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return nS(n),i}getPrecomputes(e,t,n){let i=Jd.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Jd.set(t,i)}}return i}cached(e,t,n){let i=Xd(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Xd(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){oS(t,this.bits),sS.set(e,t),Jd.delete(e)}hasCache(e){return Xd(e)!==1}}function aS(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>Yi||i>Yi){if(n&Qn)o=o.add(r);if(i&Qn)s=s.add(r);r=r.double(),n>>=Qn,i>>=Qn}return{p1:o,p2:s}}function iS(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Yd(t),t}else return Kc(e,{isLE:n})}function cS(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>Yi))throw Error(`CURVE.${c} must be positive bigint`)}let r=iS(t.p,n.Fp,i),o=iS(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function qc(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Is=BigInt(0),Wi=BigInt(1),Hc=BigInt(2);function sR(e){return Jn(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function lS(e){let t=sR(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||cn,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Hc**BigInt(254):Hc**BigInt(447),y=a?BigInt(8)*Hc**BigInt(251)-Wi:BigInt(4)*Hc**BigInt(445)-Wi,h=m+y+Wi,g=(x)=>yt(x,n),w=_(d);function _(x){return _s(g(x),u)}function A(x){let k=Fc(ve(x,u,"uCoordinate"));if(a)k[31]&=127;return g(fn(k))}function I(x){return fn(r(Fc(ve(x,u,"scalar"))))}function C(x,k){let S=X(A(k),I(x));if(S===Is)throw Error("invalid private or public key received");return _(S)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,S){let D=g(x*(k-S));return k=g(k-D),S=g(S+D),{x_2:k,x_3:S}}function X(x,k){Ss("u",x,Is,n),Ss("scalar",k,m,h);let S=k,D=x,O=Wi,L=Is,M=x,H=Wi,re=Is;for(let le=BigInt(l-1);le>=Is;le--){let pe=S>>le&Wi;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let R={secretKey:u,publicKey:u,seed:u},E=(x=c(u))=>(ve(x,R.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze({keygen:qc(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:R})}class tp{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(Ht(e),ve(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),It(i)}update(e){return Lr(this),this.iHash.update(e),this}digestInto(e){Lr(this),ve(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Gi=(e,t,n)=>new tp(e,t).update(n).digest();Gi.create=(e,t)=>new tp(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var uS=(e,t)=>(e+(e>=0?t:-t)/dS)/t;function aR(e,t,n){let[[i,r],[o,s]]=t,a=uS(s*e,n),c=uS(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<Br,p=u<Br;if(d)l=-l;if(p)u=-u;let m=$s(Math.ceil(qd(n)/2))+Ji;if(l<Br||l>=m||u<Br||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:p,k2:u}}function np(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function rp(e,t){let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(xs(n.lowS,"lowS"),xs(n.prehash,"prehash"),n.format!==void 0)np(n.format);return n}class fS extends Error{constructor(e=""){super(e)}}var pn={Err:fS,_tlv:{encode:(e,t)=>{let{Err:n}=pn;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=ws(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?ws(r.length/2|128):"";return ws(e)+o+r+t},decode(e,t){let{Err:n}=pn,i=0;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=pn;if(e<Br)throw new t("integer: negative integers are not allowed");let n=ws(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=pn;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return un(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=pn,r=ve(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=pn,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}},Br=BigInt(0),Ji=BigInt(1),dS=BigInt(2),Vc=BigInt(3),cR=BigInt(4);function ip(e,t={}){let n=cS("weierstrass",e,t),{Fp:i,Fn:r}=n,o=n.CURVE,{h:s,n:a}=o;Jn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=mS(i,r);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(E,N,x){let{x:k,y:S}=N.toAffine(),D=i.toBytes(k);if(xs(x,"isCompressed"),x){u();let O=!i.isOdd(S);return qe(pS(O),D)}else return qe(Uint8Array.of(4),D,i.toBytes(S))}function p(E){ve(E,void 0,"Point");let{publicKey:N,publicKeyUncompressed:x}=l,k=E.length,S=E[0],D=E.subarray(1);if(k===N&&(S===2||S===3)){let O=i.fromBytes(D);if(!i.isValid(O))throw Error("bad point: is not on curve, wrong x");let L=h(O),M;try{M=i.sqrt(L)}catch(ae){let le=ae instanceof Error?": "+ae.message:"";throw Error("bad point: is not on curve, sqrt error"+le)}u();let H=i.isOdd(M);if((S&1)===1!==H)M=i.neg(M);return{x:O,y:M}}else if(k===x&&S===4){let O=i.BYTES,L=i.fromBytes(D.subarray(0,O)),M=i.fromBytes(D.subarray(O,O*2));if(!g(L,M))throw Error("bad point: is not on curve");return{x:L,y:M}}else throw Error(`bad point: got length ${k}, expected compressed=${N} or uncompressed=${x}`)}let m=t.toBytes||d,y=t.fromBytes||p;function h(E){let N=i.sqr(E),x=i.mul(N,E);return i.add(i.add(x,i.mul(E,o.a)),o.b)}function g(E,N){let x=i.sqr(N),k=h(E);return i.eql(x,k)}if(!g(o.Gx,o.Gy))throw Error("bad curve params: generator point");let w=i.mul(i.pow(o.a,Vc),cR),_=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(w,_)))throw Error("bad curve params: a or b");function A(E,N,x=!1){if(!i.isValid(N)||x&&i.is0(N))throw Error(`bad point coordinate ${E}`);return N}function I(E){if(!(E instanceof j))throw Error("Weierstrass Point expected")}function C(E){if(!c||!c.basises)throw Error("no endo");return aR(E,c.basises,r.ORDER)}let U=Hd((E,N)=>{let{X:x,Y:k,Z:S}=E;if(i.eql(S,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(S);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(S,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}),F=Hd((E)=>{if(E.is0()){if(t.allowInfinityPoint&&!i.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:N,y:x}=E.toAffine();if(!i.isValid(N)||!i.isValid(x))throw Error("bad point: x or y not field elements");if(!g(N,x))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function T(E,N,x,k,S){return x=new j(i.mul(x.X,E),x.Y,x.Z),N=Es(k,N),x=Es(S,x),N.add(x)}class j{static BASE=new j(o.Gx,o.Gy,i.ONE);static ZERO=new j(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(E,N,x){this.X=A("x",E),this.Y=A("y",N,!0),this.Z=A("z",x),Object.freeze(this)}static CURVE(){return o}static fromAffine(E){let{x:N,y:x}=E||{};if(!E||!i.isValid(N)||!i.isValid(x))throw Error("invalid affine point");if(E instanceof j)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(x))return j.ZERO;return new j(N,x,i.ONE)}static fromBytes(E){let N=j.fromAffine(y(ve(E,void 0,"point")));return N.assertValidity(),N}static fromHex(E){return j.fromBytes(Gn(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,N=!0){if(R.createCache(this,E),!N)this.multiply(Vc);return this}assertValidity(){F(this)}hasEvenY(){let{y:E}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(E)}equals(E){I(E);let{X:N,Y:x,Z:k}=this,{X:S,Y:D,Z:O}=E,L=i.eql(i.mul(N,O),i.mul(S,k)),M=i.eql(i.mul(x,O),i.mul(D,k));return L&&M}negate(){return new j(this.X,i.neg(this.Y),this.Z)}double(){let{a:E,b:N}=o,x=i.mul(N,Vc),{X:k,Y:S,Z:D}=this,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=i.mul(k,k),re=i.mul(S,S),ae=i.mul(D,D),le=i.mul(k,S);return le=i.add(le,le),M=i.mul(k,D),M=i.add(M,M),O=i.mul(E,M),L=i.mul(x,ae),L=i.add(O,L),O=i.sub(re,L),L=i.add(re,L),L=i.mul(O,L),O=i.mul(le,O),M=i.mul(x,M),ae=i.mul(E,ae),le=i.sub(H,ae),le=i.mul(E,le),le=i.add(le,M),M=i.add(H,H),H=i.add(M,H),H=i.add(H,ae),H=i.mul(H,le),L=i.add(L,H),ae=i.mul(S,D),ae=i.add(ae,ae),H=i.mul(ae,le),O=i.sub(O,H),M=i.mul(ae,re),M=i.add(M,M),M=i.add(M,M),new j(O,L,M)}add(E){I(E);let{X:N,Y:x,Z:k}=this,{X:S,Y:D,Z:O}=E,L=i.ZERO,M=i.ZERO,H=i.ZERO,re=o.a,ae=i.mul(o.b,Vc),le=i.mul(N,S),pe=i.mul(x,D),ye=i.mul(k,O),he=i.add(N,x),ge=i.add(S,D);he=i.mul(he,ge),ge=i.add(le,pe),he=i.sub(he,ge),ge=i.add(N,k);let we=i.add(S,O);return ge=i.mul(ge,we),we=i.add(le,ye),ge=i.sub(ge,we),we=i.add(x,k),L=i.add(D,O),we=i.mul(we,L),L=i.add(pe,ye),we=i.sub(we,L),H=i.mul(re,ge),L=i.mul(ae,ye),H=i.add(L,H),L=i.sub(pe,H),H=i.add(pe,H),M=i.mul(L,H),pe=i.add(le,le),pe=i.add(pe,le),ye=i.mul(re,ye),ge=i.mul(ae,ge),pe=i.add(pe,ye),ye=i.sub(le,ye),ye=i.mul(re,ye),ge=i.add(ge,ye),le=i.mul(pe,ge),M=i.add(M,le),le=i.mul(we,ge),L=i.mul(he,L),L=i.sub(L,le),le=i.mul(he,pe),H=i.mul(we,H),H=i.add(H,le),new j(L,M,H)}subtract(E){return this.add(E.negate())}is0(){return this.equals(j.ZERO)}multiply(E){let{endo:N}=t;if(!r.isValidNot0(E))throw Error("invalid scalar: out of range");let x,k,S=(D)=>R.cached(this,D,(O)=>Qd(j,O));if(N){let{k1neg:D,k1:O,k2neg:L,k2:M}=C(E),{p:H,f:re}=S(O),{p:ae,f:le}=S(M);k=re.add(le),x=T(N.beta,H,ae,D,L)}else{let{p:D,f:O}=S(E);x=D,k=O}return Qd(j,[x,k])[0]}multiplyUnsafe(E){let{endo:N}=t,x=this;if(!r.isValid(E))throw Error("invalid scalar: out of range");if(E===Br||x.is0())return j.ZERO;if(E===Ji)return x;if(R.hasCache(this))return this.multiply(E);if(N){let{k1neg:k,k1:S,k2neg:D,k2:O}=C(E),{p1:L,p2:M}=aS(j,x,S,O);return T(N.beta,L,M,k,D)}else return R.unsafe(x,E)}toAffine(E){return U(this,E)}isTorsionFree(){let{isTorsionFree:E}=t;if(s===Ji)return!0;if(E)return E(j,this);return R.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:E}=t;if(s===Ji)return this;if(E)return E(j,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(E=!0){return xs(E,"isCompressed"),this.assertValidity(),m(j,this,E)}toHex(E=!0){return Wn(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let X=r.BITS,R=new ep(j,t.endo?Math.ceil(X/2):X);return j.BASE.precompute(8),j}function pS(e){return Uint8Array.of(e?2:3)}function mS(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function lR(e,t={}){let{Fn:n}=e,i=t.randomBytes||cn,r=Object.assign(mS(e.Fp,n),{seed:Wd(n.ORDER)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m=i(r.seed)){return tS(ve(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r;if(!qi(m))return;if("_lengths"in n&&n._lengths||y===h)return;let w=ve(m,void 0,"key").length;return w===h||w===g}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=qc(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function op(e,t,n={}){Ht(t),Jn(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let i=n.randomBytes||cn,r=n.hmac||((x,k)=>Gi(t,x,k)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m}=lR(e,n),y={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},h=a*dS<o.ORDER;function g(x){let k=a>>Ji;return x>k}function w(x,k){if(!s.isValidNot0(k))throw Error(`invalid signature ${x}: out of range 1..Point.Fn.ORDER`);return k}function _(){if(h)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function A(x,k){np(k);let S=m.signature,D=k==="compact"?S:k==="recovered"?S+1:void 0;return ve(x,D)}class I{r;s;recovery;constructor(x,k,S){if(this.r=w("r",x),this.s=w("s",k),S!=null){if(_(),![0,1,2,3].includes(S))throw Error("invalid recovery id");this.recovery=S}Object.freeze(this)}static fromBytes(x,k=y.format){A(x,k);let S;if(k==="der"){let{r:M,s:H}=pn.toSig(ve(x));return new I(M,H)}if(k==="recovered")S=x[0],k="compact",x=x.subarray(1);let D=m.signature/2,O=x.subarray(0,D),L=x.subarray(D,D*2);return new I(s.fromBytes(O),s.fromBytes(L),S)}static fromHex(x,k){return this.fromBytes(Gn(x),k)}assertRecovery(){let{recovery:x}=this;if(x==null)throw Error("invalid recovery id: must be present");return x}addRecoveryBit(x){return new I(this.r,this.s,x)}recoverPublicKey(x){let{r:k,s:S}=this,D=this.assertRecovery(),O=D===2||D===3?k+a:k;if(!o.isValid(O))throw Error("invalid recovery id: sig.r+curve.n != R.x");let L=o.toBytes(O),M=e.fromBytes(qe(pS((D&1)===0),L)),H=s.inv(O),re=U(ve(x,void 0,"msgHash")),ae=s.create(-re*H),le=s.create(S*H),pe=e.BASE.multiplyUnsafe(ae).add(M.multiplyUnsafe(le));if(pe.is0())throw Error("invalid recovery: point at infinify");return pe.assertValidity(),pe}hasHighS(){return g(this.s)}toBytes(x=y.format){if(np(x),x==="der")return Gn(pn.hexFromSig(this));let{r:k,s:S}=this,D=s.toBytes(k),O=s.toBytes(S);if(x==="recovered")return _(),qe(Uint8Array.of(this.assertRecovery()),D,O);return qe(D,O)}toHex(x){return Wn(this.toBytes(x))}}let C=n.bits2int||function(k){if(k.length>8192)throw Error("input is too large");let S=un(k),D=k.length*8-c;return D>0?S>>BigInt(D):S},U=n.bits2int_modN||function(k){return s.create(C(k))},F=$s(c);function T(x){return Ss("num < 2^"+c,x,Br,F),s.toBytes(x)}function j(x,k){return ve(x,void 0,"message"),k?ve(t(x),void 0,"prehashed message"):x}function X(x,k,S){let{lowS:D,prehash:O,extraEntropy:L}=rp(S,y);x=j(x,O);let M=U(x),H=s.fromBytes(k);if(!s.isValidNot0(H))throw Error("invalid private key");let re=[T(H),T(M)];if(L!=null&&L!==!1){let ye=L===!0?i(m.secretKey):L;re.push(ve(ye,void 0,"extraEntropy"))}let ae=qe(...re),le=M;function pe(ye){let he=C(ye);if(!s.isValidNot0(he))return;let ge=s.inv(he),we=e.BASE.multiply(he).toAffine(),Ne=s.create(we.x);if(Ne===Br)return;let ze=s.create(ge*s.create(le+Ne*H));if(ze===Br)return;let ct=(we.x===Ne?0:2)|Number(we.y&Ji),lt=ze;if(D&&g(ze))lt=s.neg(ze),ct^=1;return new I(Ne,lt,h?void 0:ct)}return{seed:ae,k2sig:pe}}function R(x,k,S={}){let{seed:D,k2sig:O}=X(x,k,S);return F_(t.outputLen,s.BYTES,r)(D,O).toBytes(S.format)}function E(x,k,S,D={}){let{lowS:O,prehash:L,format:M}=rp(D,y);if(S=ve(S,void 0,"publicKey"),k=j(k,L),!qi(x)){let H=x instanceof I?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+H)}A(x,M);try{let H=I.fromBytes(x,M),re=e.fromBytes(S);if(O&&H.hasHighS())return!1;let{r:ae,s:le}=H,pe=U(k),ye=s.inv(le),he=s.create(pe*ye),ge=s.create(ae*ye),we=e.BASE.multiplyUnsafe(he).add(re.multiplyUnsafe(ge));if(we.is0())return!1;return s.create(we.x)===ae}catch(H){return!1}}function N(x,k,S={}){let{prehash:D}=rp(S,y);return k=j(k,D),I.fromBytes(x,"recovered").recoverPublicKey(k).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m,Point:e,sign:R,verify:E,recoverPublicKey:N,Signature:I,hash:t})}function hS(e,t,n){return e&t^~e&n}function gS(e,t,n){return e&t^e&n^t&n}class Yc{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mc(this.buffer)}update(e){Lr(this),ve(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mc(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Lr(this),Bc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,It(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var jr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var it=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Wc=BigInt(4294967295),yS=BigInt(32);function uR(e,t=!1){if(t)return{h:Number(e&Wc),l:Number(e>>yS&Wc)};return{h:Number(e>>yS&Wc)|0,l:Number(e&Wc)|0}}function Gc(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=uR(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var sp=(e,t,n)=>e>>>n,ap=(e,t,n)=>e<<32-n|t>>>n,ei=(e,t,n)=>e>>>n|t<<32-n,ti=(e,t,n)=>e<<32-n|t>>>n,Os=(e,t,n)=>e<<64-n|t>>>n-32,As=(e,t,n)=>e>>>n-32|t<<64-n;var bS=(e,t,n)=>e<<n|t>>>32-n,vS=(e,t,n)=>t<<n|e>>>32-n,xS=(e,t,n)=>t<<n-32|e>>>64-n,wS=(e,t,n)=>e<<n-32|t>>>64-n;function mr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var _S=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),SS=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,$S=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),kS=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,ES=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),IS=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var dR=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),mn=new Uint32Array(64);class OS extends Yc{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)mn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=mn[u-15],p=mn[u-2],m=tr(d,7)^tr(d,18)^d>>>3,y=tr(p,17)^tr(p,19)^p>>>10;mn[u]=y+mn[u-7]+m+mn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=tr(s,6)^tr(s,11)^tr(s,25),p=l+d+hS(s,a,c)+dR[u]+mn[u]|0,y=(tr(n,2)^tr(n,13)^tr(n,22))+gS(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){It(mn)}destroy(){this.set(0,0,0,0,0,0,0,0),It(this.buffer)}}class AS extends OS{A=jr[0]|0;B=jr[1]|0;C=jr[2]|0;D=jr[3]|0;E=jr[4]|0;F=jr[5]|0;G=jr[6]|0;H=jr[7]|0;constructor(){super(32)}}var TS=(()=>Gc(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),pR=(()=>TS[0])(),mR=(()=>TS[1])(),hn=new Uint32Array(80),gn=new Uint32Array(80);class PS extends Yc{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let _=0;_<16;_++,t+=4)hn[_]=e.getUint32(t),gn[_]=e.getUint32(t+=4);for(let _=16;_<80;_++){let A=hn[_-15]|0,I=gn[_-15]|0,C=ei(A,I,1)^ei(A,I,8)^sp(A,I,7),U=ti(A,I,1)^ti(A,I,8)^ap(A,I,7),F=hn[_-2]|0,T=gn[_-2]|0,j=ei(F,T,19)^Os(F,T,61)^sp(F,T,6),X=ti(F,T,19)^As(F,T,61)^ap(F,T,6),R=$S(U,X,gn[_-7],gn[_-16]),E=kS(R,C,j,hn[_-7],hn[_-16]);hn[_]=E|0,gn[_]=R|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let _=0;_<80;_++){let A=ei(u,d,14)^ei(u,d,18)^Os(u,d,41),I=ti(u,d,14)^ti(u,d,18)^As(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=ES(w,I,U,mR[_],gn[_]),T=IS(F,g,A,C,pR[_],hn[_]),j=F|0,X=ei(n,i,28)^Os(n,i,34)^Os(n,i,39),R=ti(n,i,28)^As(n,i,34)^As(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=mr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=_S(j,R,N);n=SS(x,T,X,E),i=x|0}({h:n,l:i}=mr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=mr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=mr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=mr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=mr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=mr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=mr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=mr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){It(hn,gn)}destroy(){It(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class RS extends PS{Ah=it[0]|0;Al=it[1]|0;Bh=it[2]|0;Bl=it[3]|0;Ch=it[4]|0;Cl=it[5]|0;Dh=it[6]|0;Dl=it[7]|0;Eh=it[8]|0;El=it[9]|0;Fh=it[10]|0;Fl=it[11]|0;Gh=it[12]|0;Gl=it[13]|0;Hh=it[14]|0;Hl=it[15]|0;constructor(){super(48)}}var Jc=Hi(()=>new AS,ln(1));var CS=Hi(()=>new RS,ln(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hR=BigInt(1),NS=BigInt(2),gR=BigInt(3),yR=BigInt(5),U7=BigInt(8),DS=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function bR(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=DS,a=e*e%o*e%o,c=Vt(a,NS,o)*a%o,l=Vt(c,hR,o)*e%o,u=Vt(l,yR,o)*l%o,d=Vt(u,t,o)*u%o,p=Vt(d,n,o)*d%o,m=Vt(p,i,o)*p%o,y=Vt(m,r,o)*m%o,h=Vt(y,r,o)*m%o,g=Vt(h,t,o)*u%o;return{pow_p_5_8:Vt(g,NS,o)*e%o,b2:a}}function vR(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var zS=(()=>{let e=DS;return lS({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=bR(t);return yt(Vt(n,gR,e)*i,e)},adjustScalarBytes:vR})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var xR=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),wR=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var _R=ip(xR),cp=op(_R,Jc);var SR=ip(wR),US=op(SR,CS);function BS(e,t,n){if(Ht(e),n===void 0)n=new Uint8Array(e.outputLen);return Gi(e,n,t)}var lp=Uint8Array.of(0),LS=Uint8Array.of();function jS(e,t,n,i=32){Ht(e),Xe(i,"length");let r=e.outputLen;if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=LS;else ve(n,void 0,"info");let s=new Uint8Array(o*r),a=Gi.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)lp[0]=u+1,c.update(u===0?LS:l).update(n).update(lp).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),It(l,lp),s.slice(0,i)}var $R=BigInt(0),Ts=BigInt(1),kR=BigInt(2),ER=BigInt(7),IR=BigInt(256),OR=BigInt(113),FS=[],KS=[],qS=[];for(let e=0,t=Ts,n=1,i=0;e<24;e++){[n,i]=[i,(2*n+3*i)%5],FS.push(2*(5*i+n)),KS.push((e+1)*(e+2)/2%64);let r=$R;for(let o=0;o<7;o++)if(t=(t<<Ts^(t>>ER)*OR)%IR,t&kR)r^=Ts<<(Ts<<BigInt(o))-Ts;qS.push(r)}var HS=Gc(qS,!0),AR=HS[0],TR=HS[1],MS=(e,t,n)=>n>32?xS(e,t,n):bS(e,t,n),ZS=(e,t,n)=>n>32?wS(e,t,n):vS(e,t,n);function PR(e,t=24){let n=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)n[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=n[c],u=n[c+1],d=MS(l,u,1)^n[a],p=ZS(l,u,1)^n[a+1];for(let m=0;m<50;m+=10)e[s+m]^=d,e[s+m+1]^=p}let r=e[2],o=e[3];for(let s=0;s<24;s++){let a=KS[s],c=MS(r,o,a),l=ZS(r,o,a),u=FS[s];r=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)n[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~n[(a+2)%10]&n[(a+4)%10]}e[0]^=AR[i],e[1]^=TR[i]}It(n)}class Xc{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,n,i=!1,r=24){if(this.blockLen=e,this.suffix=t,this.outputLen=n,this.enableXOF=i,this.rounds=r,Xe(n,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=jc(this.state)}clone(){return this._cloneInto()}keccak(){Zd(this.state32),PR(this.state32,this.rounds),Zd(this.state32),this.posOut=0,this.pos=0}update(e){Lr(this),ve(e);let{blockLen:t,state:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(t-this.pos,i-r);for(let s=0;s<o;s++)n[this.pos++]^=e[r++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:n,blockLen:i}=this;if(e[n]^=t,(t&128)!==0&&n===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Lr(this,!1),ve(e),this.finish();let t=this.state,{blockLen:n}=this;for(let i=0,r=e.length;i<r;){if(this.posOut>=n)this.keccak();let o=Math.min(n-this.posOut,r-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Xe(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Bc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,It(this.state)}_cloneInto(e){let{blockLen:t,suffix:n,outputLen:i,rounds:r,enableXOF:o}=this;return e||=new Xc(t,n,i,o,r),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=r,e.suffix=n,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var VS=(e,t,n,i={})=>Hi(()=>new Xc(t,e,n),i);var ri=VS(6,136,32,ln(8));var YS=VS(6,72,64,ln(10));var WS=(e,t,n,i={})=>Hi((r={})=>new Xc(t,e,r.dkLen===void 0?n:r.dkLen,!0),i),GS=WS(31,168,16,ln(11)),hr=WS(31,136,32,ln(12));function up(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function XS(e){return up(e),(e&e-1)===0&&e!==0}function fp(e,t){up(e);let n=0;for(let i=0;i<t;i++,e>>>=1)n=n<<1|e&1;return n}function QS(e){return up(e),31-Math.clz32(e)}function JS(e){let t=e.length;if(t<2||!XS(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let n=QS(t);for(let i=0;i<t;i++){let r=fp(i,n);if(i<r){let o=e[i];e[i]=e[r],e[r]=o}}return e}var dp=(e,t)=>{let{N:n,roots:i,dit:r,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=QS(n);if(!XS(n))throw Error("FFT: Polynomial size should be power of two");let l=r!==o;return(u)=>{if(u.length!==n)throw Error("FFT: wrong Polynomial length");if(r&&a)JS(u);for(let d=0,p=1;d<c-s;d++){let m=r?d+1+s:c-d,y=1<<m,h=y>>1,g=n>>m;for(let w=0;w<n;w+=y)for(let _=0,A=p++;_<h;_++){let I=o?r?n-A:A:_*g,C=w+_,U=w+_+h,F=i[I],T=u[U],j=u[C];if(l){let X=e.mul(T,F);u[C]=e.add(j,X),u[U]=e.sub(j,X)}else if(o)u[C]=e.add(T,j),u[U]=e.mul(e.sub(T,j),F);else u[C]=e.add(j,T),u[U]=e.mul(e.sub(j,T),F)}}if(!r&&a)JS(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var gr=cn;function Qc(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function e1(e){return Uint8Array.from(e)}function ni(e,...t){let n=(r)=>typeof r==="number"?r:r.bytesLen,i=t.reduce((r,o)=>r+n(o),0);return{bytesLen:i,encode:(r)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=n(c),u=typeof c==="number"?r[s]:c.encode(r[s]);if(ve(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(r)=>{ve(r,i,e);let o=[];for(let s of t){let a=n(s),c=r.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),r=r.subarray(a)}return o}}}function el(e,t){let n=t*e.bytesLen;return{bytesLen:n,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let r=new Uint8Array(n);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);r.set(a,s),a.fill(0),s+=a.length}return r},decode:(i)=>{ve(i,n);let r=[];for(let o=0;o<i.length;o+=e.bytesLen)r.push(e.decode(i.subarray(o,o+e.bytesLen)));return r}}}function We(...e){for(let t of e)if(Array.isArray(t))for(let n of t)n.fill(0);else t.fill(0)}function pp(e){return(1<<e)-1}var X7=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var t1=(e)=>{let{newPoly:t,N:n,Q:i,F:r,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(_,A=i)=>{let I=_%A|0;return(I>=0?I|0:A+I|0)|0},l=(_,A=i)=>{let I=c(_,A)|0;return(I>A>>1?I-A|0:I)|0};function u(){let _=t(n);for(let A=0;A<n;A++){let I=fp(A,s),C=BigInt(o)**BigInt(I)%BigInt(i);_[A]=Number(C)|0}return _}let d=u(),p={add:(_,A)=>c((_|0)+(A|0))|0,sub:(_,A)=>c((_|0)-(A|0))|0,mul:(_,A)=>c((_|0)*(A|0))|0,inv:(_)=>{throw Error("not implemented")}},m={N:n,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=dp(p,{dit:!1,...m}),h=dp(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(_)=>y(_),decode:(_)=>{h(_);for(let A=0;A<_.length;A++)_[A]=c(r*_[A]);return _}},bitsCoder:(_,A)=>{let I=pp(_),C=_*(n/8);return{bytesLen:C,encode:(U)=>{let F=new Uint8Array(C);for(let T=0,j=0,X=0,R=0;T<U.length;T++){j|=(A.encode(U[T])&I)<<X,X+=_;for(;X>=8;X-=8,j>>=8)F[R++]=j&pp(X)}return F},decode:(U)=>{let F=t(n);for(let T=0,j=0,X=0,R=0;T<U.length;T++){j|=U[T]<<X,X+=8;for(;X>=_;X-=_,j>>=_)F[R++]=A.decode(j&I)}return F}}}}},RR=(e)=>(t,n)=>{if(!n)n=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let r=t.length,o=new Uint8Array(n),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[r+0]=l,i[r+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),We(o,i)}}},r1=RR(GS);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var dt=256,Mr=3329,CR=3303,NR=17,{mod:Cs,nttZetas:DR,NTT:ii,bitsCoder:zR}=t1({N:dt,Q:Mr,F:CR,ROOT_OF_UNITY:NR,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),mp={512:{N:dt,Q:Mr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:dt,Q:Mr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:dt,Q:Mr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},UR=(e)=>{if(e>=12)return{encode:(n)=>n,decode:(n)=>n};let t=2**(e-1);return{encode:(n)=>((n<<e)+Mr/2)/Mr,decode:(n)=>n*Mr+t>>>e}},Ps=(e)=>zR(e,UR(e));function oi(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]+t[n])}function LR(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]-t[n])}function BR(e,t,n,i,r){let o=Cs(t*i*r+e*n),s=Cs(e*i+t*n);return{c0:o,c1:s}}function tl(e,t){for(let n=0;n<dt/2;n++){let i=DR[64+(n>>1)];if(n&1)i=-i;let{c0:r,c1:o}=BR(e[2*n+0],e[2*n+1],t[2*n+0],t[2*n+1],i);e[2*n+0]=r,e[2*n+1]=o}return e}function n1(e){let t=new Uint16Array(dt);for(let n=0;n<dt;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;n<dt&&r+3<=i.length;r+=3){let o=(i[r+0]>>0|i[r+1]<<8)&4095,s=(i[r+1]>>4|i[r+2]<<4)&4095;if(o<Mr)t[n++]=o;if(n<dt&&s<Mr)t[n++]=s}}return t}function Rs(e,t,n,i){let r=e(i*dt/4,t,n),o=new Uint16Array(dt),s=jc(r),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Cs(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var jR=(e)=>{let{K:t,PRF:n,XOF:i,HASH512:r,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Ps(1),u=Ps(c),d=Ps(a),p=ni("publicKey",el(Ps(12),t),32),m=el(Ps(12),t),y=ni("ciphertext",el(d,t),u),h=ni("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(g)=>{ve(g,32,"seed");let w=new Uint8Array(33);w.set(g),w[32]=t;let _=r(w),[A,I]=h.decode(_),C=[],U=[];for(let j=0;j<t;j++)C.push(ii.encode(Rs(n,I,j,o)));let F=i(A);for(let j=0;j<t;j++){let X=ii.encode(Rs(n,I,t+j,o));for(let R=0;R<t;R++){let E=n1(F.get(R,j));oi(X,tl(E,C[R]))}U.push(X)}F.clean();let T={publicKey:p.encode([U,A]),secretKey:m.encode(C)};return We(A,I,C,U,w,_),T},encrypt:(g,w,_)=>{let[A,I]=p.decode(g),C=[];for(let R=0;R<t;R++)C.push(ii.encode(Rs(n,_,R,o)));let U=i(I),F=new Uint16Array(dt),T=[];for(let R=0;R<t;R++){let E=Rs(n,_,t+R,s),N=new Uint16Array(dt);for(let x=0;x<t;x++){let k=n1(U.get(R,x));oi(N,tl(k,C[x]))}oi(E,ii.decode(N)),T.push(E),oi(F,tl(A[R],C[R])),We(N)}U.clean();let j=Rs(n,_,2*t,s);oi(j,ii.decode(F));let X=l.decode(w);return oi(X,j),We(A,C,F,j),y.encode([T,X])},decrypt:(g,w)=>{let[_,A]=y.decode(g),I=m.decode(w),C=new Uint16Array(dt);for(let U=0;U<t;U++)oi(C,tl(I[U],ii.encode(_[U])));return LR(A,ii.decode(C)),We(C,I,_),l.encode(A)}}};function hp(e){let t=jR(e),{HASH256:n,HASH512:i,KDF:r}=e,{secretCoder:o,lengths:s}=t,a=ni("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=gr(64))=>{ve(u,64,"seed");let{publicKey:d,secretKey:p}=t.keygen(u.subarray(0,32)),m=n(d),y=a.encode([p,d,m,u.subarray(32)]);return We(p,m),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,d=gr(32))=>{ve(u,s.publicKey,"publicKey"),ve(d,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(e1(p)));if(!Qc(m,p))throw We(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");We(m);let y=i.create().update(d).update(n(u)).digest(),h=t.encrypt(u,d,y.subarray(32,64));return We(y.subarray(32)),{cipherText:h,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{ve(d,a.bytesLen,"secretKey"),ve(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=n(d.subarray(p/2,m));if(!Qc(y,d.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[h,g,w,_]=a.decode(d),A=t.decrypt(u,h),I=i.create().update(A).update(w).digest(),C=I.subarray(0,32),U=t.encrypt(g,A,I.subarray(32,64)),F=Qc(u,U),T=r.create({dkLen:32}).update(_).update(u).digest();return We(A,U,!F?C:T),F?C:T}}}function MR(e,t,n){return hr.create({dkLen:e}).update(t).update(new Uint8Array([n])).digest()}var gp={HASH256:ri,HASH512:YS,KDF:hr,XOF:r1,PRF:MR},lH=hp({...gp,...mp[512]}),Ns=hp({...gp,...mp[768]}),i1=hp({...gp,...mp[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function ZR(e,t=!1){let{lengths:n,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=gr(n.seed))=>{ve(s,n.seed,"seed");let a=o.isLE?fn(s):un(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:n.secretKey,publicKey:n.publicKey,seed:n.seed},keygen:i,getPublicKey:(r)=>e.getPublicKey(r)}}function yp(e,t=!1){let n=ZR(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...n.lengths,msg:n.lengths.seed,cipherText:n.lengths.publicKey},keygen:n.keygen,getPublicKey:n.getPublicKey,encapsulate(i,r=gr(e.lengths.seed)){let o=this.keygen(r).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return We(o),{sharedSecret:s,cipherText:a}},decapsulate(i,r){let o=e.getSharedSecret(r,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Ds(e,t){return ni(t,...e.map((n)=>{if(typeof n.lengths[t]!=="number")throw Error("wrong length: "+t);return n.lengths[t]}))}function bp(e){return(t,n)=>e(t,{dkLen:n})}function FR(e,t,...n){let i=Ds(n,"seed"),r=Ds(n,"publicKey");if(e===void 0)e=i.bytesLen;Xe(e);function o(s){ve(s,e);let a=i.decode(t(s,i.bytesLen)),c=n.map((d,p)=>d.keygen(a[p])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:r.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=gr(e)){let{publicKey:a,secretKey:c}=o(s),l=r.encode(a);return We(a),We(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function rl(e,t,n,i,...r){let o=FR(e,n,...r),s=Ds(r,"cipherText"),a=Ds(r,"publicKey"),c=Ds(r,"msg");if(t===void 0)t=c.bytesLen;return Xe(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=gr(c.bytesLen)){let d=a.decode(l),p=c.decode(u),m=r.map((w,_)=>w.encapsulate(d[_],p[_])),y=m.map((w)=>w.sharedSecret),h=m.map((w)=>w.cipherText),g={sharedSecret:i(d,h,y),cipherText:s.encode(h)};return We(y,h),g},decapsulate(l,u){let d=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=r.map((h,g)=>h.decapsulate(d[g],m[g]));return i(p,d,y)}}}function o1(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>r(qe(a[0],a[1],s[1],o[1],dn(e))),t,n)}var xH=o1("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Ns,yp(cp,!0),hr,ri),wH=o1("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",i1,yp(US,!0),hr,ri);function KR(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>{let c=qe(a[0],a[1],s[0],o[0],s[1],o[1],dn(e)),l=32,u=qe(dn("hybrid_prk"),c),d=BS(r,u),p=qe(Vi(32,2),dn("shared_secret"),dn("")),m=jS(r,d,p,32);return We(d,p,u,c),m},t,n)}var s1=yp(zS),_H=KR("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Ns,s1,hr,Jc),qR=(()=>rl(32,32,bp(hr),(e,t,n)=>ri(qe(n[0],n[1],t[1],e[1],dn("\\.//^\\"))),Ns,s1))();function HR(e,t,n,i){let r=e.Point.Fn;if(!r)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=r.fromBytes(s.subarray(u,d),!0),r.isValidNot0(a))break}let c=r.toBytes(r.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:n,seed:i,msg:i,cipherText:n},keygen(s=gr(i)){return ve(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=gr(i)){ve(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return We(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function VR(e,t,n,i){let{secretKey:r,publicKeyUncompressed:o}=n.lengths;if(!r||!o)throw Error("wrong curve");let s=HR(n,r,o,i),a=64,c=a+i;return rl(32,32,(l)=>{ve(l,32);let u=hr(l,{dkLen:c}),d=u.subarray(0,a),p=u.subarray(a,c);return qe(d,p)},(l,u,d)=>ri(qe(d[0],d[1],u[1],l[1],dn(e))),t,s)}var YR=(()=>VR("MLKEM768-P256",Ns,cp,128))();var nl=qR,a1=YR;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Te=(e,t,n)=>tt(e,t,n),xp=Fe,Xi=Ic,ot=(...e)=>Sd(...e),Qi=(e)=>ds(e),eo=xd,to=(e)=>Nr(e),ol=BigInt(0),vp=BigInt(1);function Zr(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw TypeError(n+"expected boolean, got type="+typeof e)}return e}function sl(e){if(typeof e==="bigint"){if(!il(e))throw RangeError("positive bigint expected, got "+e)}else xp(e);return e}function yr(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(n+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let n=t&&`"${t}" `;throw RangeError(n+"expected safe integer, got "+e)}}function zs(e){let t=sl(e).toString(16);return t.length&1?"0"+t:t}function c1(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?ol:BigInt("0x"+e)}function si(e){return c1(Ic(e))}function rr(e){return c1(Ic(yn(tt(e)).reverse()))}function al(e,t){if(Fe(t),t===0)throw RangeError("zero length");e=sl(e);let n=e.toString(16);if(n.length>t*2)throw RangeError("number too large");return ds(n.padStart(t*2,"0"))}function Us(e,t){return al(e,t).reverse()}function l1(e,t){if(e=Te(e),t=Te(t),e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function yn(e){return Uint8Array.from(Te(e))}function cl(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var il=(e)=>typeof e==="bigint"&&ol<=e;function WR(e,t,n){return il(e)&&il(t)&&il(n)&&t<=e&&e<n}function Fr(e,t,n,i){if(!WR(t,n,i))throw RangeError("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function ro(e){if(e<ol)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>ol;e>>=vp,t+=1);return t}var Ls=(e)=>(vp<<BigInt(e))-vp;function u1(e,t,n){if(Fe(e,"hashLen"),Fe(t,"qByteLen"),typeof n!=="function")throw TypeError("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,ot(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let _=c.slice();w.push(_),g+=c.length}return ot(...w)};return(g,w)=>{d(),m(g);let _=void 0;while((_=w(y()))===void 0)m();return d(),_}}function Yt(e,t={},n={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}var wp=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var st=BigInt(0),je=BigInt(1),ai=BigInt(2),m1=BigInt(3),h1=BigInt(4),g1=BigInt(5),GR=BigInt(7),y1=BigInt(8),JR=BigInt(9),b1=BigInt(16);function Ue(e,t){if(t<=st)throw Error("mod: expected positive modulus, got "+t);let n=e%t;return n>=st?n:t+n}function Wt(e,t,n){if(t<st)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >st)i*=i,i%=n;return i}function f1(e,t){if(e===st)throw Error("invert: expected non-zero number");if(t<=st)throw Error("invert: expected positive modulus, got "+t);let n=Ue(e,t),i=t,r=st,o=je,s=je,a=st;while(n!==st){let l=i/n,u=i-n*l,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==je)throw Error("invert: does not exist");return Ue(r,t)}function _p(e,t,n){let i=e;if(!i.eql(i.sqr(t),n))throw Error("Cannot find square root")}function v1(e,t){let n=e,i=(n.ORDER+je)/h1,r=n.pow(t,i);return _p(n,r,t),r}function XR(e,t){let n=e,i=(n.ORDER-g1)/y1,r=n.mul(t,ai),o=n.pow(r,i),s=n.mul(t,o),a=n.mul(n.mul(s,ai),o),c=n.mul(s,n.sub(a,n.ONE));return _p(n,c,t),c}function QR(e){let t=ll(e),n=x1(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+GR)/b1;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),p=l.mul(u,r),m=l.mul(u,o),y=l.eql(l.sqr(d),c),h=l.eql(l.sqr(p),c);u=l.cmov(u,d,y),d=l.cmov(m,p,h);let g=l.eql(l.sqr(d),c),w=l.cmov(u,d,g);return _p(l,w,c),w}}function x1(e){if(e<m1)throw Error("sqrt is not defined for small field");let t=e-je,n=0;while(t%ai===st)t/=ai,n++;let i=ai,r=ll(e);while(d1(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return v1;let o=r.pow(i,t),s=(t+je)/ai;return function(c,l){let u=c;if(u.is0(l))return l;if(d1(u,l)!==1)throw Error("Cannot find square root");let d=n,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let h=1,g=u.sqr(m);while(!u.eql(g,u.ONE))if(h++,g=u.sqr(g),h===d)throw Error("Cannot find square root");let w=je<<BigInt(d-h-1),_=u.pow(p,w);d=h,p=u.sqr(_),m=u.mul(m,p),y=u.mul(y,_)}return y}}function e4(e){if(e%h1===m1)return v1;if(e%y1===g1)return XR;if(e%b1===JR)return QR(e);return x1(e)}var Kr=(e,t)=>(Ue(e,t)&je)===je,t4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Sp(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=t4.reduce((i,r)=>(i[r]="function",i),t);if(Yt(e,n),yr(e.BYTES,"BYTES"),yr(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=je)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function r4(e,t,n){let i=e;if(n<st)throw Error("invalid exponent, negatives unsupported");if(n===st)return i.ONE;if(n===je)return t;let r=i.ONE,o=t;while(n>st){if(n&je)r=i.mul(r,o);o=i.sqr(o),n>>=je}return r}function Bs(e,t,n=!1){let i=e,r=Array(t.length).fill(n?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return r[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return r[l]=i.mul(a,r[l]),i.mul(a,c)},s),r}function d1(e,t){let n=e,i=(n.ORDER-je)/ai,r=n.pow(t,i),o=n.eql(r,n.ONE),s=n.eql(r,n.ZERO),a=n.eql(r,n.neg(n.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function n4(e,t){if(t!==void 0)xp(t);if(e<=st)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let n=ro(e);if(t!==void 0&&t<n)throw Error(`invalid n length: expected bit length (${n}) >= n.length (${t})`);let i=t!==void 0?t:n,r=Math.ceil(i/8);return{nBitLength:i,nByteLength:r}}var p1=new WeakMap;class $p{ORDER;BITS;BYTES;isLE;ZERO=st;ONE=je;_lengths;_mod;constructor(e,t={}){if(e<=je)throw Error("invalid field: expected ORDER > 1, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=n4(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,Object.freeze(this)}create(e){return Ue(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return st<=e&&e<this.ORDER}is0(e){return e===st}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&je)===je}neg(e){return Ue(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Ue(e*e,this.ORDER)}add(e,t){return Ue(e+t,this.ORDER)}sub(e,t){return Ue(e-t,this.ORDER)}mul(e,t){return Ue(e*t,this.ORDER)}pow(e,t){return r4(this,e,t)}div(e,t){return Ue(e*f1(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return f1(e,this.ORDER)}sqrt(e){let t=p1.get(this);if(!t)p1.set(this,t=e4(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Us(e,this.BYTES):al(e,this.BYTES)}fromBytes(e,t=!1){Te(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(e.length<1||!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?rr(e):si(e);if(s)a=Ue(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Bs(this,e)}cmov(e,t,n){return Zr(n,"condition"),n?t:e}}Object.freeze($p.prototype);function ll(e,t={}){return new $p(e,t)}function w1(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=je)throw Error("field order must be greater than 1");let t=ro(e-je);return Math.ceil(t/8)}function kp(e){let t=w1(e);return t+Math.ceil(t/2)}function _1(e,t,n=!1){Te(e);let i=e.length,r=w1(t),o=Math.max(kp(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?rr(e):si(e),a=Ue(s,t-je)+je;return n?Us(a,r):al(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var no=BigInt(0),ci=BigInt(1);function js(e,t){let n=t.negate();return e?n:t}function li(e,t){let n=Bs(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function E1(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Ep(e,t){E1(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=Ls(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function S1(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=ci;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Ip=new WeakMap,I1=new WeakMap;function Op(e){return I1.get(e)||1}function $1(e){if(e!==no)throw Error("invalid wNAF")}class Ms{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>no){if(t&ci)n=n.add(i);i=i.double(),t>>=ci}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Ep(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Ep(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=S1(n,s,o);if(n=a,l)r=r.add(js(d,t[p]));else i=i.add(js(u,t[c]))}return $1(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Ep(e,this.bits);for(let o=0;o<r.windows;o++){if(n===no)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=S1(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return $1(n),i}getPrecomputes(e,t,n){let i=Ip.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Ip.set(t,i)}}return i}cached(e,t,n){let i=Op(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Op(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){E1(t,this.bits),I1.set(e,t),Ip.delete(e)}hasCache(e){return Op(e)!==1}}function O1(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>no||i>no){if(n&ci)o=o.add(r);if(i&ci)s=s.add(r);r=r.double(),n>>=ci,i>>=ci}return{p1:o,p2:s}}function k1(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Sp(t),t}else return ll(e,{isLE:n})}function ul(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>no))throw Error(`CURVE.${c} must be positive bigint`)}let r=k1(t.p,n.Fp,i),o=k1(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function Zs(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}function Fs(e,t){if(yr(e),yr(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let n=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)n[i]=e&255,e>>>=8;return new Uint8Array(n)}function i4(e,t){let n=new Uint8Array(e.length);for(let i=0;i<e.length;i++)n[i]=e[i]^t[i];return n}function o4(e){if(!eo(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?cl(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Ap(e,t,n,i){if(Te(e),yr(n),t=o4(t),t.length>255)t=i(ot(cl("H2C-OVERSIZE-DST-"),t));let{outputLen:r,blockLen:o}=i,s=Math.ceil(n/r);if(n>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ot(t,Fs(t.length,1)),c=new Uint8Array(o),l=Fs(n,2),u=Array(s),d=i(ot(c,e,l,Fs(0,1),a));u[0]=i(ot(d,Fs(1,1),a));for(let m=1;m<s;m++){let y=[i4(d,u[m-1]),Fs(m+1,1),a];u[m]=i(ot(...y))}return ot(...u).slice(0,n)}var A1="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T1=(e,t)=>(e+(e>=0?t:-t)/R1)/t;function s4(e,t,n){Fr("scalar",e,br,n);let[[i,r],[o,s]]=t,a=T1(s*e,n),c=T1(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<br,p=u<br;if(d)l=-l;if(p)u=-u;let m=Ls(Math.ceil(ro(n)/2))+bn;if(l<br||l>=m||u<br||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:p,k2:u}}function Pp(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Tp(e,t){Yt(e);let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(Zr(n.lowS,"lowS"),Zr(n.prehash,"prehash"),n.format!==void 0)Pp(n.format);return n}class P1 extends Error{constructor(e=""){super(e)}}var nr={Err:P1,_tlv:{encode:(e,t)=>{let{Err:n}=nr;if(yr(e,"tag"),e<0||e>255)throw new n("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=zs(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?zs(r.length/2|128):"";return zs(e)+o+r+t},decode(e,t){let{Err:n}=nr;t=Te(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=nr;if(sl(e),e<br)throw new t("integer: negative integers are not allowed");let n=zs(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=nr;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return si(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=nr,r=Te(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=nr,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}};Object.freeze(nr._tlv);Object.freeze(nr._int);Object.freeze(nr);var br=BigInt(0),bn=BigInt(1),R1=BigInt(2),fl=BigInt(3),a4=BigInt(4);function C1(e,t={}){let n=ul("weierstrass",e,t),i=n.Fp,r=n.Fn,o=n.CURVE,{h:s,n:a}=o;Yt(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=D1(i,r);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(R,E,N){if(l&&E.is0())return Uint8Array.of(0);let{x,y:k}=E.toAffine(),S=i.toBytes(x);if(Zr(N,"isCompressed"),N){d();let D=!i.isOdd(k);return ot(N1(D),S)}else return ot(Uint8Array.of(4),S,i.toBytes(k))}function m(R){Te(R,void 0,"Point");let{publicKey:E,publicKeyUncompressed:N}=u,x=R.length,k=R[0],S=R.subarray(1);if(l&&x===1&&k===0)return{x:i.ZERO,y:i.ZERO};if(x===E&&(k===2||k===3)){let D=i.fromBytes(S);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let O=g(D),L;try{L=i.sqrt(O)}catch(re){let ae=re instanceof Error?": "+re.message:"";throw Error("bad point: is not on curve, sqrt error"+ae)}d();let M=i.isOdd(L);if((k&1)===1!==M)L=i.neg(L);return{x:D,y:L}}else if(x===N&&k===4){let D=i.BYTES,O=i.fromBytes(S.subarray(0,D)),L=i.fromBytes(S.subarray(D,D*2));if(!w(O,L))throw Error("bad point: is not on curve");return{x:O,y:L}}else throw Error(`bad point: got length ${x}, expected compressed=${E} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,h=t.fromBytes===void 0?m:t.fromBytes;function g(R){let E=i.sqr(R),N=i.mul(E,R);return i.add(i.add(N,i.mul(R,o.a)),o.b)}function w(R,E){let N=i.sqr(E),x=g(R);return i.eql(N,x)}if(!w(o.Gx,o.Gy))throw Error("bad curve params: generator point");let _=i.mul(i.pow(o.a,fl),a4),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(_,A)))throw Error("bad curve params: a or b");function I(R,E,N=!1){if(!i.isValid(E)||N&&i.is0(E))throw Error(`bad point coordinate ${R}`);return E}function C(R){if(!(R instanceof T))throw Error("Weierstrass Point expected")}function U(R){if(!c||!c.basises)throw Error("no endo");return s4(R,c.basises,r.ORDER)}function F(R,E,N,x,k){return N=new T(i.mul(N.X,R),N.Y,N.Z),E=js(x,E),N=js(k,N),E.add(N)}class T{static BASE=new T(o.Gx,o.Gy,i.ONE);static ZERO=new T(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(R,E,N){this.X=I("x",R),this.Y=I("y",E,!0),this.Z=I("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(R){let{x:E,y:N}=R||{};if(!R||!i.isValid(E)||!i.isValid(N))throw Error("invalid affine point");if(R instanceof T)throw Error("projective point not allowed");if(i.is0(E)&&i.is0(N))return T.ZERO;return new T(E,N,i.ONE)}static fromBytes(R){let E=T.fromAffine(h(Te(R,void 0,"point")));return E.assertValidity(),E}static fromHex(R){return T.fromBytes(Qi(R))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(R=8,E=!0){if(X.createCache(this,R),!E)this.multiply(fl);return this}assertValidity(){let R=this;if(R.is0()){if(t.allowInfinityPoint&&i.is0(R.X)&&i.eql(R.Y,i.ONE)&&i.is0(R.Z))return;throw Error("bad point: ZERO")}let{x:E,y:N}=R.toAffine();if(!i.isValid(E)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!w(E,N))throw Error("bad point: equation left != right");if(!R.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:R}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(R)}equals(R){C(R);let{X:E,Y:N,Z:x}=this,{X:k,Y:S,Z:D}=R,O=i.eql(i.mul(E,D),i.mul(k,x)),L=i.eql(i.mul(N,D),i.mul(S,x));return O&&L}negate(){return new T(this.X,i.neg(this.Y),this.Z)}double(){let{a:R,b:E}=o,N=i.mul(E,fl),{X:x,Y:k,Z:S}=this,D=i.ZERO,O=i.ZERO,L=i.ZERO,M=i.mul(x,x),H=i.mul(k,k),re=i.mul(S,S),ae=i.mul(x,k);return ae=i.add(ae,ae),L=i.mul(x,S),L=i.add(L,L),D=i.mul(R,L),O=i.mul(N,re),O=i.add(D,O),D=i.sub(H,O),O=i.add(H,O),O=i.mul(D,O),D=i.mul(ae,D),L=i.mul(N,L),re=i.mul(R,re),ae=i.sub(M,re),ae=i.mul(R,ae),ae=i.add(ae,L),L=i.add(M,M),M=i.add(L,M),M=i.add(M,re),M=i.mul(M,ae),O=i.add(O,M),re=i.mul(k,S),re=i.add(re,re),M=i.mul(re,ae),D=i.sub(D,M),L=i.mul(re,H),L=i.add(L,L),L=i.add(L,L),new T(D,O,L)}add(R){C(R);let{X:E,Y:N,Z:x}=this,{X:k,Y:S,Z:D}=R,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=o.a,re=i.mul(o.b,fl),ae=i.mul(E,k),le=i.mul(N,S),pe=i.mul(x,D),ye=i.add(E,N),he=i.add(k,S);ye=i.mul(ye,he),he=i.add(ae,le),ye=i.sub(ye,he),he=i.add(E,x);let ge=i.add(k,D);return he=i.mul(he,ge),ge=i.add(ae,pe),he=i.sub(he,ge),ge=i.add(N,x),O=i.add(S,D),ge=i.mul(ge,O),O=i.add(le,pe),ge=i.sub(ge,O),M=i.mul(H,he),O=i.mul(re,pe),M=i.add(O,M),O=i.sub(le,M),M=i.add(le,M),L=i.mul(O,M),le=i.add(ae,ae),le=i.add(le,ae),pe=i.mul(H,pe),he=i.mul(re,he),le=i.add(le,pe),pe=i.sub(ae,pe),pe=i.mul(H,pe),he=i.add(he,pe),ae=i.mul(le,he),L=i.add(L,ae),ae=i.mul(ge,he),O=i.mul(ye,O),O=i.sub(O,ae),ae=i.mul(ye,le),M=i.mul(ge,M),M=i.add(M,ae),new T(O,L,M)}subtract(R){return C(R),this.add(R.negate())}is0(){return this.equals(T.ZERO)}multiply(R){let{endo:E}=t;if(!r.isValidNot0(R))throw RangeError("invalid scalar: out of range");let N,x,k=(S)=>X.cached(this,S,(D)=>li(T,D));if(E){let{k1neg:S,k1:D,k2neg:O,k2:L}=U(R),{p:M,f:H}=k(D),{p:re,f:ae}=k(L);x=H.add(ae),N=F(E.beta,M,re,S,O)}else{let{p:S,f:D}=k(R);N=S,x=D}return li(T,[N,x])[0]}multiplyUnsafe(R){let{endo:E}=t,N=this,x=R;if(!r.isValid(x))throw RangeError("invalid scalar: out of range");if(x===br||N.is0())return T.ZERO;if(x===bn)return N;if(X.hasCache(this))return this.multiply(x);if(E){let{k1neg:k,k1:S,k2neg:D,k2:O}=U(x),{p1:L,p2:M}=O1(T,N,S,O);return F(E.beta,L,M,k,D)}else return X.unsafe(N,x)}toAffine(R){let E=this,N=R,{X:x,Y:k,Z:S}=E;if(i.eql(S,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(S);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(S,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}isTorsionFree(){let{isTorsionFree:R}=t;if(s===bn)return!0;if(R)return R(T,this);return X.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:R}=t;if(s===bn)return this;if(R)return R(T,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===bn)return this.is0();return this.clearCofactor().is0()}toBytes(R=!0){return Zr(R,"isCompressed"),this.assertValidity(),y(T,this,R)}toHex(R=!0){return Xi(this.toBytes(R))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let j=r.BITS,X=new Ms(T,t.endo?Math.ceil(j/2):j);if(j>=8)T.BASE.precompute(8);return Object.freeze(T.prototype),Object.freeze(T),T}function N1(e){return Uint8Array.of(e?2:3)}function D1(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function c4(e,t={}){let{Fn:n}=e,i=t.randomBytes===void 0?to:t.randomBytes,r=Object.assign(D1(e.Fp,n),{seed:Math.max(kp(n.ORDER),16)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m){return m=m===void 0?i(r.seed):m,_1(Te(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r,w=n._lengths;if(!eo(m))return;let _=Te(m,void 0,"key").length,A=_===h||_===g,I=_===y||!!w?.includes(_);if(A&&I)return;return A}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Zs(a,c);return Object.freeze(d),Object.freeze(r),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function z1(e,t,n={}){let i=t;Cr(i),Yt(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let r=n.randomBytes===void 0?to:n.randomBytes,o=n.hmac===void 0?(k,S)=>fr(i,k,S):n.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y}=c4(e,n),h={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},g=c*R1+bn<s.ORDER;function w(k){let S=c>>bn;return k>S}function _(k,S){if(!a.isValidNot0(S))throw Error(`invalid signature ${k}: out of range 1..Point.Fn.ORDER`);return S}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function I(k,S){Pp(S);let D=y.signature,O=S==="compact"?D:S==="recovered"?D+1:void 0;return Te(k,O)}class C{r;s;recovery;constructor(k,S,D){if(this.r=_("r",k),this.s=_("s",S),D!=null){if(A(),![0,1,2,3].includes(D))throw Error("invalid recovery id");this.recovery=D}Object.freeze(this)}static fromBytes(k,S=h.format){I(k,S);let D;if(S==="der"){let{r:H,s:re}=nr.toSig(Te(k));return new C(H,re)}if(S==="recovered")D=k[0],S="compact",k=k.subarray(1);let O=y.signature/2,L=k.subarray(0,O),M=k.subarray(O,O*2);return new C(a.fromBytes(L),a.fromBytes(M),D)}static fromHex(k,S){return this.fromBytes(Qi(k),S)}assertRecovery(){let{recovery:k}=this;if(k==null)throw Error("invalid recovery id: must be present");return k}addRecoveryBit(k){return new C(this.r,this.s,k)}recoverPublicKey(k){let{r:S,s:D}=this,O=this.assertRecovery(),L=O===2||O===3?S+c:S;if(!s.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let M=s.toBytes(L),H=e.fromBytes(ot(N1((O&1)===0),M)),re=a.inv(L),ae=F(Te(k,void 0,"msgHash")),le=a.create(-ae*re),pe=a.create(D*re),ye=e.BASE.multiplyUnsafe(le).add(H.multiplyUnsafe(pe));if(ye.is0())throw Error("invalid recovery: point at infinify");return ye.assertValidity(),ye}hasHighS(){return w(this.s)}toBytes(k=h.format){if(Pp(k),k==="der")return Qi(nr.hexFromSig(this));let{r:S,s:D}=this,O=a.toBytes(S),L=a.toBytes(D);if(k==="recovered")return A(),ot(Uint8Array.of(this.assertRecovery()),O,L);return ot(O,L)}toHex(k){return Xi(this.toBytes(k))}}Object.freeze(C.prototype),Object.freeze(C);let U=n.bits2int===void 0?function(S){if(S.length>8192)throw Error("input is too large");let D=si(S),O=S.length*8-l;return O>0?D>>BigInt(O):D}:n.bits2int,F=n.bits2int_modN===void 0?function(S){return a.create(U(S))}:n.bits2int_modN,T=Ls(l);function j(k){return Fr("num < 2^"+l,k,br,T),a.toBytes(k)}function X(k,S){return Te(k,void 0,"message"),S?Te(i(k),void 0,"prehashed message"):k}function R(k,S,D){let{lowS:O,prehash:L,extraEntropy:M}=Tp(D,h);k=X(k,L);let H=F(k),re=a.fromBytes(S);if(!a.isValidNot0(re))throw Error("invalid private key");let ae=[j(re),j(H)];if(M!=null&&M!==!1){let he=M===!0?r(y.secretKey):M;ae.push(Te(he,void 0,"extraEntropy"))}let le=ot(...ae),pe=H;function ye(he){let ge=U(he);if(!a.isValidNot0(ge))return;let we=a.inv(ge),Ne=e.BASE.multiply(ge).toAffine(),ze=a.create(Ne.x);if(ze===br)return;let ct=a.create(we*a.create(pe+ze*re));if(ct===br)return;let lt=(Ne.x===ze?0:2)|Number(Ne.y&bn),kt=ct;if(O&&w(ct))kt=a.neg(ct),lt^=1;return new C(ze,kt,g?void 0:lt)}return{seed:le,k2sig:ye}}function E(k,S,D={}){let{seed:O,k2sig:L}=R(k,S,D);return u1(i.outputLen,a.BYTES,o)(O,L).toBytes(D.format)}function N(k,S,D,O={}){let{lowS:L,prehash:M,format:H}=Tp(O,h);if(D=Te(D,void 0,"publicKey"),S=X(S,M),!eo(k)){let re=k instanceof C?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}I(k,H);try{let re=C.fromBytes(k,H),ae=e.fromBytes(D);if(L&&re.hasHighS())return!1;let{r:le,s:pe}=re,ye=F(S),he=a.inv(pe),ge=a.create(ye*he),we=a.create(le*he),Ne=e.BASE.multiplyUnsafe(ge).add(ae.multiplyUnsafe(we));if(Ne.is0())return!1;return a.create(Ne.x)===le}catch(re){return!1}}function x(k,S,D={}){let{prehash:O}=Tp(D,h);return S=X(S,O),C.fromBytes(k,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:E,verify:N,recoverPublicKey:x,Signature:C,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var l4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var u4=C1(l4),io=z1(u4,Ke);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vn=BigInt(0),Ot=BigInt(1),Rp=BigInt(2),f4=BigInt(8);function d4(e,t,n,i){let r=e.sqr(n),o=e.sqr(i),s=e.add(e.mul(t.a,r),o),a=e.add(e.ONE,e.mul(t.d,e.mul(r,o)));return e.eql(s,a)}function U1(e,t={}){let n=t,i=ul("edwards",e,n,n.FpFnLE),{Fp:r,Fn:o}=i,s=i.CURVE,{h:a}=s;Yt(n,{},{uvRatio:"function"});let c=Rp<<BigInt(o.BYTES*8)-Ot,l=(h)=>r.create(h),u=n.uvRatio===void 0?(h,g)=>{try{return{isValid:!0,value:r.sqrt(r.div(h,g))}}catch(w){return{isValid:!1,value:vn}}}:n.uvRatio;if(!d4(r,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(h,g,w=!1){let _=w?Ot:vn;return Fr("coordinate "+h,g,_,c),g}function p(h){if(!(h instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Ot,l(s.Gx*s.Gy));static ZERO=new m(vn,Ot,Ot,vn);static Fp=r;static Fn=o;X;Y;Z;T;constructor(h,g,w,_){this.X=d("x",h),this.Y=d("y",g),this.Z=d("z",w,!0),this.T=d("t",_),Object.freeze(this)}static CURVE(){return s}static fromAffine(h){if(h instanceof m)throw Error("extended point not allowed");let{x:g,y:w}=h||{};return d("x",g),d("y",w),new m(g,w,Ot,l(g*w))}static fromBytes(h,g=!1){let w=r.BYTES,{a:_,d:A}=s;h=yn(Te(h,w,"point")),Zr(g,"zip215");let I=yn(h),C=h[w-1];I[w-1]=C&-129;let U=rr(I),F=g?c:r.ORDER;Fr("point.y",U,vn,F);let T=l(U*U),j=l(T-Ot),X=l(A*T-_),{isValid:R,value:E}=u(j,X);if(!R)throw Error("bad point: invalid y coordinate");let N=(E&Ot)===Ot,x=(C&128)!==0;if(!g&&E===vn&&x)throw Error("bad point: x=0 and x_0=1");if(x!==N)E=l(-E);return m.fromAffine({x:E,y:U})}static fromHex(h,g=!1){return m.fromBytes(Qi(h),g)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(h=8,g=!0){if(y.createCache(this,h),!g)this.multiply(Rp);return this}assertValidity(){let h=this,{a:g,d:w}=s;if(h.is0())throw Error("bad point: ZERO");let{X:_,Y:A,Z:I,T:C}=h,U=l(_*_),F=l(A*A),T=l(I*I),j=l(T*T),X=l(U*g),R=l(T*l(X+F)),E=l(j+l(w*l(U*F)));if(R!==E)throw Error("bad point: equation left != right (1)");let N=l(_*A),x=l(I*C);if(N!==x)throw Error("bad point: equation left != right (2)")}equals(h){p(h);let{X:g,Y:w,Z:_}=this,{X:A,Y:I,Z:C}=h,U=l(g*C),F=l(A*_),T=l(w*C),j=l(I*_);return U===F&&T===j}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:h}=s,{X:g,Y:w,Z:_}=this,A=l(g*g),I=l(w*w),C=l(Rp*l(_*_)),U=l(h*A),F=g+w,T=l(l(F*F)-A-I),j=U+I,X=j-C,R=U-I,E=l(T*X),N=l(j*R),x=l(T*R),k=l(X*j);return new m(E,N,k,x)}add(h){p(h);let{a:g,d:w}=s,{X:_,Y:A,Z:I,T:C}=this,{X:U,Y:F,Z:T,T:j}=h,X=l(_*U),R=l(A*F),E=l(C*w*j),N=l(I*T),x=l((_+A)*(U+F)-X-R),k=N-E,S=N+E,D=l(R-g*X),O=l(x*k),L=l(S*D),M=l(x*D),H=l(k*S);return new m(O,L,H,M)}subtract(h){return p(h),this.add(h.negate())}multiply(h){if(!o.isValidNot0(h))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:g,f:w}=y.cached(this,h,(_)=>li(m,_));return li(m,[g,w])[0]}multiplyUnsafe(h){if(!o.isValid(h))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(h===vn)return m.ZERO;if(this.is0()||h===Ot)return this;return y.unsafe(this,h,(g)=>li(m,g))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(h){let g=this,w=h,{X:_,Y:A,Z:I}=g,C=g.is0();if(w==null)w=C?f4:r.inv(I);let U=l(_*w),F=l(A*w),T=r.mul(I,w);if(C)return{x:vn,y:Ot};if(T!==Ot)throw Error("invZ was invalid");return{x:U,y:F}}clearCofactor(){if(a===Ot)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:h,y:g}=this.toAffine(),w=r.toBytes(g);return w[w.length-1]|=h&Ot?128:0,w}toHex(){return Xi(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new Ms(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Cp{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){wp()}static fromHex(e){wp()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return Xi(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ks=BigInt(0),oo=BigInt(1),dl=BigInt(2);function p4(e){return Yt(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function L1(e){let t=p4(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?to:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?dl**BigInt(254):dl**BigInt(447),y=a?BigInt(8)*dl**BigInt(251)-oo:BigInt(4)*dl**BigInt(445)-oo,h=m+y+oo,g=(x)=>Ue(x,n),w=_(d);function _(x){return Us(g(x),u)}function A(x){let k=yn(Te(x,u,"uCoordinate"));if(a)k[31]&=127;return g(rr(k))}function I(x){return rr(r(yn(Te(x,u,"scalar"))))}function C(x,k){let S=X(A(k),I(x));if(S===Ks)throw Error("invalid private or public key received");return _(S)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,S){let D=g(x*(k-S));return k=g(k-D),S=g(S+D),{x_2:k,x_3:S}}function X(x,k){Fr("u",x,Ks,n),Fr("scalar",k,m,h);let S=k,D=x,O=oo,L=Ks,M=x,H=oo,re=Ks;for(let le=BigInt(l-1);le>=Ks;le--){let pe=S>>le&oo;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let R={secretKey:u,publicKey:u,seed:u},E=(x)=>(x=x===void 0?c(u):x,Te(x,R.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze(R),Object.freeze(N),Object.freeze({keygen:Zs(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:R})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var m4=BigInt(0),qr=BigInt(1),B1=BigInt(2),h4=BigInt(3),g4=BigInt(5),y4=BigInt(8),fi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Up=(()=>({p:fi,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:y4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Z1(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=fi,a=e*e%o*e%o,c=Wt(a,B1,o)*a%o,l=Wt(c,qr,o)*e%o,u=Wt(l,g4,o)*l%o,d=Wt(u,t,o)*u%o,p=Wt(d,n,o)*d%o,m=Wt(p,i,o)*p%o,y=Wt(m,r,o)*m%o,h=Wt(y,r,o)*m%o,g=Wt(h,t,o)*u%o;return{pow_p_5_8:Wt(g,B1,o)*e%o,b2:a}}function b4(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Np=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Lp(e,t){let n=fi,i=Ue(t*t*t,n),r=Ue(i*i*t,n),o=Z1(e*r).pow_p_5_8,s=Ue(e*i*o,n),a=Ue(t*s*s,n),c=s,l=Ue(s*Np,n),u=a===e,d=a===Ue(-e,n),p=a===Ue(-e*Np,n);if(u)s=c;if(d||p)s=l;if(Kr(s,n))s=Ue(-s,n);return{isValid:u||d,value:s}}var ui=U1(Up,{uvRatio:Lp}),xn=(()=>ui.Fp)(),F1=(()=>ui.Fn)();var pl=(()=>{let e=fi;return L1({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=Z1(t);return Ue(Wt(n,h4,e)*i,e)},adjustScalarBytes:b4})})();var Dp=Np,v4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),x4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),w4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),_4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),j1=(e)=>Lp(qr,e),S4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),zp=(e)=>xn.create(rr(e)&S4);function M1(e){let{d:t}=Up,n=fi,i=(w)=>xn.create(w),r=i(Dp*e*e),o=i((r+qr)*w4),s=BigInt(-1),a=i((s-t*r)*i(r+t)),{isValid:c,value:l}=Lp(o,a),u=i(l*e);if(!Kr(u,n))u=i(-u);if(!c)l=u;if(!c)s=r;let d=i(s*(r-qr)*_4-a),p=l*l,m=i((l+l)*a),y=i(d*v4),h=i(qr-p),g=i(qr+p);return new ui(i(m*g),i(h*y),i(y*g),i(m*h))}class vt extends Cp{static BASE=(()=>new vt(ui.BASE))();static ZERO=(()=>new vt(ui.ZERO))();static Fp=(()=>xn)();static Fn=(()=>F1)();constructor(e){super(e)}static fromAffine(e){return new vt(ui.fromAffine(e))}assertSame(e){if(!(e instanceof vt))throw Error("RistrettoPoint expected")}init(e){return new vt(e)}static fromBytes(e){tt(e,32);let{a:t,d:n}=Up,i=fi,r=(A)=>xn.create(A),o=zp(e);if(!l1(xn.toBytes(o),e)||Kr(o,i))throw Error("invalid ristretto255 encoding 1");let s=r(o*o),a=r(qr+t*s),c=r(qr-t*s),l=r(a*a),u=r(c*c),d=r(t*n*l-u),{isValid:p,value:m}=j1(r(d*u)),y=r(m*c),h=r(m*y*d),g=r((o+o)*y);if(Kr(g,i))g=r(-g);let w=r(a*h),_=r(g*w);if(!p||Kr(_,i)||w===m4)throw Error("invalid ristretto255 encoding 2");return new vt(new ui(g,w,qr,_))}static fromHex(e){return vt.fromBytes(ds(e))}toBytes(){let{X:e,Y:t,Z:n,T:i}=this.ep,r=fi,o=(h)=>xn.create(h),s=o(o(n+t)*o(n-t)),a=o(e*t),c=o(a*a),{value:l}=j1(o(s*c)),u=o(l*s),d=o(l*a),p=o(u*d*i),m;if(Kr(i*p,r)){let h=o(t*Dp),g=o(e*Dp);e=h,t=g,m=o(u*x4)}else m=d;if(Kr(e*p,r))t=o(-t);let y=o((n-t)*m);if(Kr(y,r))y=o(-y);return xn.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:n}=this.ep,{X:i,Y:r}=e.ep,o=(c)=>xn.create(c),s=o(t*r)===o(n*i),a=o(n*r)===o(t*i);return s||a}is0(){return this.equals(vt.ZERO)}}Object.freeze(vt.BASE);Object.freeze(vt.ZERO);Object.freeze(vt.prototype);Object.freeze(vt);var $4=Object.freeze({Point:vt,hashToCurve(e,t){let n=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Ap(e,n,64,Pc);return $4.deriveToCurve(i)},hashToScalar(e,t={DST:A1}){let n=Ap(e,t.DST,64,Pc);return F1.create(rr(n))},deriveToCurve(e){tt(e,64);let t=zp(e.subarray(0,32)),n=M1(t),i=zp(e.subarray(32,64)),r=M1(i);return new vt(n.add(r))}});var K1=!1,k4=!1;async function q1(e,t){if(k4)return await t();try{return await e()}catch(n){if(n instanceof ReferenceError||n instanceof DOMException&&n.name==="NotSupportedError")return await t();else throw n}}async function ml(e,t){return await q1(async()=>{let n=Bp(e)?e:await I4(e),i=await crypto.subtle.importKey("raw",O4(t),{name:"X25519"},K1,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},n,256))},()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMult(e,t)})}async function qs(e){return await q1(async()=>ml(e,pl.GuBytes),()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMultBase(e)})}var E4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function I4(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...E4,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},K1,["deriveBits"])}function Bp(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function O4(e){return e}class jp{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),T4(di(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let n=await this.s.read();if(n.done)return this.buf=di(e),null;this.buf=n.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:di(this.transcript)}}}function T4(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function di(e){let t=e.reduce((r,o)=>r+o.length,0),n=new Uint8Array(t),i=0;for(let r of e)n.set(r,i),i+=r.length;return n}function so(e,...t){return e.pipeThrough(new TransformStream({start(n){for(let i of t)n.enqueue(i)}}))}function hl(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Mp(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function H1(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function V1(e,t){let n=e.getReader(),i=[],r=0;while(r<t){let{done:c,value:l}=await n.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),r+=l.length}n.releaseLock();let o=di(i),s=o.subarray(0,t),a=so(e,o.subarray(t));return{data:s,rest:a}}class vr{args;body;constructor(e,t){this.args=e,this.body=t}}async function P4(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let n=t.split(" ");if(n.length<2||n.shift()!=="->")return{next:t};for(let o of n)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=ut.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let r=di(i);return{s:new vr(n,r)}}async function Y1(e){let t=new jp(e),n=await t.readLine();if(n!=="age-encryption.org/v1")throw Error("invalid version "+(n??"line"));let i=[];for(;;){let{s:r,next:o}=await P4(t);if(r!==void 0){i.push(r);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=ut.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:so(e,a)}}}function Zp(e){let t=[];t.push(`age-encryption.org/v1
+`)}function Ww(e){let t=new Map;for(let n of e){if(t.has(n.name))throw Error(`Duplicate command name: ${n.name}`);t.set(n.name,n)}return t}function Ze(e,t){let n=e[t];return typeof n==="string"?n:void 0}function Sc(e,t){let n=e[t];return typeof n==="boolean"?n:void 0}var $c={name:"@rizom/ops",version:"0.2.0-alpha.340",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as Z4,mkdirSync as F4,readFileSync as sm,writeFileSync as am}from"fs";import{dirname as K4,join as n$}from"path";function xd(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Fe(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(`${n}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw RangeError(`${n}expected integer >= 0, got ${e}`)}}function tt(e,t,n=""){let i=xd(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Cr(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Fe(e.outputLen),Fe(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function ji(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function kc(e,t){tt(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw RangeError('"digestInto() output" expected to be of length >='+n)}function Ec(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function gt(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mi(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Qt(e,t){return e<<32-t|e>>>t}function Ie(e,t){return e<<t|e>>>32-t>>>0}var hP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function gP(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function yP(e){for(let t=0;t<e.length;t++)e[t]=gP(e[t]);return e}var wd=hP?(e)=>e:yP,Jw=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),bP=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Ic(e){if(tt(e),Jw)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=bP[e[n]];return t}var Rr={_0:48,_9:57,A:65,F:70,a:97,f:102};function Gw(e){if(e>=Rr._0&&e<=Rr._9)return e-Rr._0;if(e>=Rr.A&&e<=Rr.F)return e-(Rr.A-10);if(e>=Rr.a&&e<=Rr.f)return e-(Rr.a-10);return}function ds(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(Jw)try{return Uint8Array.fromHex(e)}catch(r){if(r instanceof SyntaxError)throw RangeError(r.message);throw r}let t=e.length,n=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=Gw(e.charCodeAt(o)),a=Gw(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function vP(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function _d(e,t=""){if(typeof e==="string")return vP(e);return tt(e,void 0,t)}function Sd(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];tt(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Oc(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function $d(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.canXOF=i.canXOF,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function Nr(e=32){Fe(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var kd=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ed{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Cr(e),tt(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),gt(i)}update(e){return ji(this),this.iHash.update(e),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var fr=(()=>{let e=(t,n,i)=>new Ed(t,n).update(i).digest();return e.create=(t,n)=>new Ed(t,n),e})();function ps(e,t,n){if(Cr(e),n===void 0)n=new Uint8Array(e.outputLen);return fr(e,n,t)}var Id=Uint8Array.of(0),Xw=Uint8Array.of();function Od(e,t,n,i=32){Cr(e),Fe(i,"length"),tt(t,void 0,"prk");let r=e.outputLen;if(t.length<r)throw Error('"prk" must be at least HashLen octets');if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=Xw;else tt(n,void 0,"info");let s=new Uint8Array(o*r),a=fr.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Id[0]=u+1,c.update(u===0?Xw:l).update(n).update(Id).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),gt(l,Id),s.slice(0,i)}var rn=(e,t,n,i,r)=>Od(e,ps(e,t,n),i,r);function Qw(e,t,n){return e&t^~e&n}function e_(e,t,n){return e&t^e&n^t&n}class Ac{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mi(this.buffer)}update(e){ji(this),tt(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mi(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){ji(this),kc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,gt(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mi(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var Dr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var rt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Tc=BigInt(4294967295),t_=BigInt(32);function xP(e,t=!1){if(t)return{h:Number(e&Tc),l:Number(e>>t_&Tc)};return{h:Number(e>>t_&Tc)|0,l:Number(e&Tc)|0}}function r_(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=xP(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var Ad=(e,t,n)=>e>>>n,Td=(e,t,n)=>e<<32-n|t>>>n,Hn=(e,t,n)=>e>>>n|t<<32-n,Vn=(e,t,n)=>e<<32-n|t>>>n,ms=(e,t,n)=>e<<64-n|t>>>n-32,hs=(e,t,n)=>e>>>n-32|t<<64-n;function dr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var n_=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),i_=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,o_=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),s_=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,a_=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),c_=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var _P=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nn=new Uint32Array(64);class l_ extends Ac{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)nn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=nn[u-15],p=nn[u-2],m=Qt(d,7)^Qt(d,18)^d>>>3,y=Qt(p,17)^Qt(p,19)^p>>>10;nn[u]=y+nn[u-7]+m+nn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Qt(s,6)^Qt(s,11)^Qt(s,25),p=l+d+Qw(s,a,c)+_P[u]+nn[u]|0,y=(Qt(n,2)^Qt(n,13)^Qt(n,22))+e_(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){gt(nn)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),gt(this.buffer)}}class u_ extends l_{A=Dr[0]|0;B=Dr[1]|0;C=Dr[2]|0;D=Dr[3]|0;E=Dr[4]|0;F=Dr[5]|0;G=Dr[6]|0;H=Dr[7]|0;constructor(){super(32)}}var f_=(()=>r_(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),SP=(()=>f_[0])(),$P=(()=>f_[1])(),on=new Uint32Array(80),sn=new Uint32Array(80);class d_ extends Ac{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let _=0;_<16;_++,t+=4)on[_]=e.getUint32(t),sn[_]=e.getUint32(t+=4);for(let _=16;_<80;_++){let A=on[_-15]|0,I=sn[_-15]|0,C=Hn(A,I,1)^Hn(A,I,8)^Ad(A,I,7),U=Vn(A,I,1)^Vn(A,I,8)^Td(A,I,7),F=on[_-2]|0,T=sn[_-2]|0,j=Hn(F,T,19)^ms(F,T,61)^Ad(F,T,6),X=Vn(F,T,19)^hs(F,T,61)^Td(F,T,6),R=o_(U,X,sn[_-7],sn[_-16]),E=s_(R,C,j,on[_-7],on[_-16]);on[_]=E|0,sn[_]=R|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let _=0;_<80;_++){let A=Hn(u,d,14)^Hn(u,d,18)^ms(u,d,41),I=Vn(u,d,14)^Vn(u,d,18)^hs(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=a_(w,I,U,$P[_],sn[_]),T=c_(F,g,A,C,SP[_],on[_]),j=F|0,X=Hn(n,i,28)^ms(n,i,34)^ms(n,i,39),R=Vn(n,i,28)^hs(n,i,34)^hs(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=dr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=n_(j,R,N);n=i_(x,T,X,E),i=x|0}({h:n,l:i}=dr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=dr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=dr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=dr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=dr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=dr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=dr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=dr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){gt(on,sn)}destroy(){this.destroyed=!0,gt(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class p_ extends d_{Ah=rt[0]|0;Al=rt[1]|0;Bh=rt[2]|0;Bl=rt[3]|0;Ch=rt[4]|0;Cl=rt[5]|0;Dh=rt[6]|0;Dl=rt[7]|0;Eh=rt[8]|0;El=rt[9]|0;Fh=rt[10]|0;Fl=rt[11]|0;Gh=rt[12]|0;Gl=rt[13]|0;Hh=rt[14]|0;Hl=rt[15]|0;constructor(){super(64)}}var Ke=$d(()=>new u_,kd(1));var Pc=$d(()=>new p_,kd(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function zc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Cd(e){if(!zc(e))throw TypeError("Uint8Array expected")}function b_(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((n)=>typeof n==="string");else return t.every((n)=>Number.isSafeInteger(n))}function v_(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function an(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function ys(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Cc(e){if(!Array.isArray(e))throw TypeError("array expected")}function Nc(e,t){if(!b_(!0,t))throw TypeError(`${e}: array of strings expected`)}function Nd(e,t){if(!b_(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Nt(...e){let t=(o)=>o,n=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(n,t),r=e.map((o)=>o.decode).reduce(n,t);return{encode:i,decode:r}}function Dt(e){let t=typeof e==="string"?e.split(""):e,n=t.length;Nc("alphabet",t);let i=new Map(t.map((r,o)=>[r,o]));return{encode:(r)=>(Cc(r),r.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=n)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(r)=>(Cc(r),r.map((o)=>{an("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function zt(e=""){return an("join",e),{encode:(t)=>(Nc("join.decode",t),t.join(e)),decode:(t)=>(an("join.decode",t),t.split(e))}}function Uc(e,t="="){return ys(e),an("padding",t),{encode(n){Nc("padding.encode",n);while(n.length*e%8)n.push(t);return n},decode(n){Nc("padding.decode",n);let i=n.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&n[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return n.slice(0,i)}}}function x_(e){return v_(e),{encode:(t)=>t,decode:(t)=>e(t)}}function m_(e,t,n){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(n<2)throw RangeError(`convertRadix: invalid to=${n}, base cannot be less than 2`);if(Cc(e),!e.length)return[];let i=0,r=[],o=Array.from(e,(a)=>{if(ys(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,p=d+u;if(!Number.isSafeInteger(p)||d/t!==a||p-u!==d)throw Error("convertRadix: carry overflow");let m=p/n;a=p%n;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*n+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(r.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)r.push(0);return r.reverse()}var w_=(e,t)=>t===0?e:w_(t,e%t),Dc=(e,t)=>e+(t-w_(e,t)),Rc=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Pd(e,t,n,i){if(Cc(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(n<=0||n>32)throw RangeError(`convertRadix2: wrong to=${n}`);if(Dc(t,n)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${n} carryBits=${Dc(t,n)}`);let r=0,o=0,s=Rc[t],a=Rc[n]-1,c=[];for(let l of e){if(ys(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(r=r<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=n;o-=n)c.push((r>>o-n&a)>>>0);let u=Rc[o];if(u===void 0)throw Error("invalid carry");r&=u-1}if(r=r<<n-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&r>0)throw Error(`Non-zero padding: ${r}`);if(i&&o>0)c.push(r>>>0);return c}function kP(e){ys(e);let t=256;return{encode:(n)=>{if(!zc(n))throw TypeError("radix.encode input should be Uint8Array");return m_(Array.from(n),t,e)},decode:(n)=>(Nd("radix.decode",n),Uint8Array.from(m_(n,e,t)))}}function Kt(e,t=!1){if(ys(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Dc(8,e)>32||Dc(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(n)=>{if(!zc(n))throw TypeError("radix2.encode input should be Uint8Array");return Pd(Array.from(n),8,e,!t)},decode:(n)=>(Nd("radix2.decode",n),Uint8Array.from(Pd(n,e,8,t)))}}function h_(e){return v_(e),function(...t){try{return e.apply(null,t)}catch(n){}}}var _q=Object.freeze(Nt(Kt(4),Dt("0123456789ABCDEF"),zt(""))),Sq=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Uc(5),zt(""))),$q=Object.freeze(Nt(Kt(5),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),zt(""))),kq=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Uc(5),zt(""))),Eq=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHIJKLMNOPQRSTUV"),zt(""))),Iq=Object.freeze(Nt(Kt(5),Dt("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),zt(""),x_((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),__=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),EP=/[\t\n\f\r ]/,S_=(e,t)=>{an("base64",e);let n=t?"base64url":"base64";if(e.length>0&&EP.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:n,lastChunkHandling:"strict"})},Dd=Object.freeze(__?{encode(e){return Cd(e),e.toBase64()},decode(e){return S_(e,!1)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Uc(6),zt(""))),ut=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),zt(""))),Oq=Object.freeze(__?{encode(e){return Cd(e),e.toBase64({alphabet:"base64url"})},decode(e){return S_(e,!0)}}:Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Uc(6),zt(""))),Aq=Object.freeze(Nt(Kt(6),Dt("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),zt(""))),zd=(e)=>Nt(kP(58),Dt(e),zt("")),Tq=Object.freeze(zd("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Pq=Object.freeze(zd("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Rq=Object.freeze(zd("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Rd=Nt(Dt("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),zt("")),g_=[996825010,642813549,513874426,1027748829,705979059];function gs(e){let t=e>>25,n=(e&33554431)<<5;for(let i=0;i<g_.length;i++)if((t>>i&1)===1)n^=g_[i];return n}function y_(e,t,n=1){let i=e.length,r=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);r=gs(r)^s>>5}r=gs(r);for(let o=0;o<i;o++)r=gs(r)^e.charCodeAt(o)&31;for(let o of t)r=gs(r)^o;for(let o=0;o<6;o++)r=gs(r);return r^=n,Rd.encode(Pd([r%Rc[30]],30,5,!1))}function $_(e){let t=e==="bech32"?1:734539939,n=Kt(5),i=n.decode,r=n.encode,o=h_(i);function s(d,p,m=90){if(an("bech32.encode prefix",d),zc(p))p=Array.from(p);Nd("bech32.encode",p);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let h=y+7+p.length;if(m!==!1&&h>m)throw TypeError(`Length ${h} exceeds limit ${m}`);let g=d.toLowerCase(),w=y_(g,p,t);return`${g}1${Rd.encode(p)}${w}`}function a(d,p=90){an("bech32.decode input",d);let m=d.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${d}). Expected (8..${p})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let h=y.lastIndexOf("1");if(h===0||h===-1)throw Error('Letter "1" must be present between prefix and data only');let g=y.slice(0,h),w=y.slice(h+1);if(w.length<6)throw Error("Data must be at least 6 characters long");let _=Rd.decode(w).slice(0,-6),A=y_(g,_,t);if(!w.endsWith(A))throw Error(`Invalid checksum in ${d}: expected "${A}"`);return{prefix:g,words:_}}let c=h_(a);function l(d){let{prefix:p,words:m}=a(d,!1);return{prefix:p,words:m,bytes:i(m)}}function u(d,p){return s(d,r(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:r}}var Ut=Object.freeze($_("bech32")),Cq=Object.freeze($_("bech32m"));var IP=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),OP={encode(e){return Cd(e),e.toHex()},decode(e){return an("hex",e),Uint8Array.fromHex(e)}},Nq=Object.freeze(IP?OP:Nt(Kt(4),Dt("0123456789abcdef"),zt(""),x_((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function TP(e,t,n,i){Cr(e);let r=Oc({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=r;if(Fe(o,"c"),Fe(s,"dkLen"),Fe(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=_d(t,"password"),l=_d(n,"salt"),u=new Uint8Array(s),d=fr.create(e,c),p=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:p}}function PP(e,t,n,i,r){if(e.destroy(),t.destroy(),i)i.destroy();return gt(r),n}function Ud(e,t,n,i){let{c:r,dkLen:o,DK:s,PRF:a,PRFSalt:c}=TP(e,t,n,i),l,u=new Uint8Array(4),d=Mi(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let h=s.subarray(y,y+a.outputLen);d.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),h.set(p.subarray(0,h.length));for(let g=1;g<r;g++){a._cloneInto(l).update(p).digestInto(p);for(let w=0;w<h.length;w++)h[w]^=p[w]}}return PP(a,c,s,l,p)}function k_(e,t,n,i,r,o){let s=e[t++]^n[i++],a=e[t++]^n[i++],c=e[t++]^n[i++],l=e[t++]^n[i++],u=e[t++]^n[i++],d=e[t++]^n[i++],p=e[t++]^n[i++],m=e[t++]^n[i++],y=e[t++]^n[i++],h=e[t++]^n[i++],g=e[t++]^n[i++],w=e[t++]^n[i++],_=e[t++]^n[i++],A=e[t++]^n[i++],I=e[t++]^n[i++],C=e[t++]^n[i++],U=s,F=a,T=c,j=l,X=u,R=d,E=p,N=m,x=y,k=h,S=g,D=w,O=_,L=A,M=I,H=C;for(let re=0;re<8;re+=2)X^=Ie(U+O|0,7),x^=Ie(X+U|0,9),O^=Ie(x+X|0,13),U^=Ie(O+x|0,18),k^=Ie(R+F|0,7),L^=Ie(k+R|0,9),F^=Ie(L+k|0,13),R^=Ie(F+L|0,18),M^=Ie(S+E|0,7),T^=Ie(M+S|0,9),E^=Ie(T+M|0,13),S^=Ie(E+T|0,18),j^=Ie(H+D|0,7),N^=Ie(j+H|0,9),D^=Ie(N+j|0,13),H^=Ie(D+N|0,18),F^=Ie(U+j|0,7),T^=Ie(F+U|0,9),j^=Ie(T+F|0,13),U^=Ie(j+T|0,18),E^=Ie(R+X|0,7),N^=Ie(E+R|0,9),X^=Ie(N+E|0,13),R^=Ie(X+N|0,18),D^=Ie(S+k|0,7),x^=Ie(D+S|0,9),k^=Ie(x+D|0,13),S^=Ie(k+x|0,18),O^=Ie(H+M|0,7),L^=Ie(O+H|0,9),M^=Ie(L+O|0,13),H^=Ie(M+L|0,18);r[o++]=s+U|0,r[o++]=a+F|0,r[o++]=c+T|0,r[o++]=l+j|0,r[o++]=u+X|0,r[o++]=d+R|0,r[o++]=p+E|0,r[o++]=m+N|0,r[o++]=y+x|0,r[o++]=h+k|0,r[o++]=g+S|0,r[o++]=w+D|0,r[o++]=_+O|0,r[o++]=A+L|0,r[o++]=I+M|0,r[o++]=C+H|0}function Ld(e,t,n,i,r){let o=i+0,s=i+16*r;for(let a=0;a<16;a++)n[s+a]=e[t+(2*r-1)*16+a];for(let a=0;a<r;a++,o+=16,t+=16){if(k_(n,s,e,t,n,o),a>0)s+=16;k_(n,o,e,t+=16,n,s)}}function RP(e,t,n){let i=Oc({dkLen:32,asyncTick:10,maxmem:1073742848},n),{N:r,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Fe(r,"N"),Fe(o,"r"),Fe(s,"p"),Fe(a,"dkLen"),Fe(c,"asyncTick"),Fe(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,p=d/4,m=Math.pow(2,32);if(r<=1||(r&r-1)!==0||r>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(r+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let h=Ud(Ke,e,t,{c:1,dkLen:d*s}),g=Ec(h),w=Ec(new Uint8Array(d*r)),_=Ec(new Uint8Array(d)),A=()=>{};if(u){let I=2*r*s,C=Math.max(Math.floor(I/1e4),1),U=0;A=()=>{if(U++,u&&(!(U%C)||U===I))u(U/I)}}return{N:r,r:o,p:s,dkLen:a,blockSize32:p,V:w,B32:g,B:h,tmp:_,blockMixCb:A,asyncTick:c}}function CP(e,t,n,i,r){let o=Ud(Ke,e,n,{c:1,dkLen:t});return gt(n,i,r),o}function Bd(e,t,n){let{N:i,r,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:p}=RP(e,t,n);wd(l);for(let m=0;m<o;m++){let y=a*m;for(let h=0;h<a;h++)c[h]=l[y+h];for(let h=0,g=0;h<i-1;h++)Ld(c,g,c,g+=a,r),p();Ld(c,(i-1)*a,l,y,r),p();for(let h=0;h<i;h++){let g=(l[y+a-16]&i-1)>>>0;for(let w=0;w<a;w++)d[w]=l[y+w]^c[g*a+w];Ld(d,0,l,y,r),p()}}return wd(l),CP(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function NP(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Lc(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Zi(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ye(e,t,n=""){let i=NP(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function jd(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function E_(e,t,n=!1){Ye(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(n&&!Fi(e))throw Error("invalid output, must be aligned")}function pr(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function er(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function DP(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Yn=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),zP=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var UP=(e)=>{for(let t=0;t<e.length;t++)e[t]=zP(e[t]);return e},zr=Yn?(e)=>e:UP;function I_(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function O_(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function A_(e,t,n){let i=t,r=n||(()=>[]),o=(a,c)=>i(c,...r(a)).update(a).digest(),s=i(new Uint8Array(e),...r(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var T_=(e,t)=>{function n(i,...r){if(Ye(i,void 0,"key"),e.nonceLength!==void 0){let u=r[0];Ye(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&r[1]!==void 0)Ye(r[1],void 0,"AAD");let s=t(i,...r),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Ye(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ye(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Ye(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(n,e),n};function bs(e,t,n=!0){if(t===void 0)return new Uint8Array(e);if(Ye(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(n&&!Fi(t))throw Error("invalid output, must be aligned");return t}function P_(e,t,n){Zi(e),Zi(t),Lc(n);let i=new Uint8Array(16),r=DP(i);return r.setBigUint64(0,BigInt(t),n),r.setBigUint64(8,BigInt(e),n),i}function Fi(e){return e.byteOffset%4===0}function Ki(e){return Uint8Array.from(Ye(e))}var C_=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),LP=(()=>zr(pr(C_("expand 16-byte k"))))(),BP=(()=>zr(pr(C_("expand 32-byte k"))))();function Oe(e,t){return e<<t|e>>>32-t}var vs=64,jP=16,Md=(()=>4294967295)(),R_=Uint32Array.of();function MP(e,t,n,i,r,o,s,a){let c=r.length,l=new Uint8Array(vs),u=pr(l),d=Yn&&Fi(r)&&Fi(o),p=d?pr(r):R_,m=d?pr(o):R_;if(!Yn){for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),zr(u),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}return}for(let y=0;y<c;s++){if(e(t,n,i,u,s,a),s>=Md)throw Error("arx: counter overflow");let h=Math.min(vs,c-y);if(d&&h===vs){let g=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let w=0,_;w<jP;w++)_=g+w,m[_]=p[_]^u[w];y+=vs;continue}for(let g=0,w;g<h;g++)w=y+g,o[w]=r[w]^l[g];y+=h}}function N_(e,t){let{allowShortKeys:n,extendNonceFn:i,counterLength:r,counterRight:o,rounds:s}=I_({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Zi(r),Zi(s),Lc(o),Lc(n),(a,c,l,u,d=0)=>{Ye(a,void 0,"key"),Ye(c,void 0,"nonce"),Ye(l,void 0,"data");let p=l.length;if(u=bs(p,u,!1),Zi(d),d<0||d>=Md)throw Error("arx: counter overflow");let m=[],y=a.length,h,g;if(y===32)m.push(h=Ki(a)),g=BP;else if(y===16&&n)h=new Uint8Array(32),h.set(a),h.set(a,16),g=LP,m.push(h);else throw Ye(a,32,"arx key"),Error("invalid key size");if(!Yn||!Fi(c))m.push(c=Ki(c));let w=pr(h);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let I=c.subarray(0,16);if(Yn)i(g,w,pr(I),w);else{let C=zr(Uint32Array.from(g));i(C,w,pr(I),w),er(C),zr(w)}c=c.subarray(16)}else if(!Yn)zr(w);let _=16-r;if(_!==c.length)throw Error(`arx: nonce must be ${_} or 16 bytes`);if(_!==12){let I=new Uint8Array(12);I.set(c,o?0:12-c.length),c=I,m.push(c)}let A=zr(pr(c));try{return MP(e,g,w,A,l,u,d,s),u}finally{er(...m)}}}function nt(e,t){return e[t++]&255|(e[t++]&255)<<8}class D_{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ki(Ye(e,32,"key"));let t=nt(e,0),n=nt(e,2),i=nt(e,4),r=nt(e,6),o=nt(e,8),s=nt(e,10),a=nt(e,12),c=nt(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|r<<9)&8191,this.r[4]=(r>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=nt(e,16+2*l)}process(e,t,n=!1){let i=n?0:2048,{h:r,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],p=o[6],m=o[7],y=o[8],h=o[9],g=nt(e,t+0),w=nt(e,t+2),_=nt(e,t+4),A=nt(e,t+6),I=nt(e,t+8),C=nt(e,t+10),U=nt(e,t+12),F=nt(e,t+14),T=r[0]+(g&8191),j=r[1]+((g>>>13|w<<3)&8191),X=r[2]+((w>>>10|_<<6)&8191),R=r[3]+((_>>>7|A<<9)&8191),E=r[4]+((A>>>4|I<<12)&8191),N=r[5]+(I>>>1&8191),x=r[6]+((I>>>14|C<<2)&8191),k=r[7]+((C>>>11|U<<5)&8191),S=r[8]+((U>>>8|F<<8)&8191),D=r[9]+(F>>>5|i),O=0,L=O+T*s+j*(5*h)+X*(5*y)+R*(5*m)+E*(5*p);O=L>>>13,L&=8191,L+=N*(5*d)+x*(5*u)+k*(5*l)+S*(5*c)+D*(5*a),O+=L>>>13,L&=8191;let M=O+T*a+j*s+X*(5*h)+R*(5*y)+E*(5*m);O=M>>>13,M&=8191,M+=N*(5*p)+x*(5*d)+k*(5*u)+S*(5*l)+D*(5*c),O+=M>>>13,M&=8191;let H=O+T*c+j*a+X*s+R*(5*h)+E*(5*y);O=H>>>13,H&=8191,H+=N*(5*m)+x*(5*p)+k*(5*d)+S*(5*u)+D*(5*l),O+=H>>>13,H&=8191;let re=O+T*l+j*c+X*a+R*s+E*(5*h);O=re>>>13,re&=8191,re+=N*(5*y)+x*(5*m)+k*(5*p)+S*(5*d)+D*(5*u),O+=re>>>13,re&=8191;let ae=O+T*u+j*l+X*c+R*a+E*s;O=ae>>>13,ae&=8191,ae+=N*(5*h)+x*(5*y)+k*(5*m)+S*(5*p)+D*(5*d),O+=ae>>>13,ae&=8191;let le=O+T*d+j*u+X*l+R*c+E*a;O=le>>>13,le&=8191,le+=N*s+x*(5*h)+k*(5*y)+S*(5*m)+D*(5*p),O+=le>>>13,le&=8191;let pe=O+T*p+j*d+X*u+R*l+E*c;O=pe>>>13,pe&=8191,pe+=N*a+x*s+k*(5*h)+S*(5*y)+D*(5*m),O+=pe>>>13,pe&=8191;let ye=O+T*m+j*p+X*d+R*u+E*l;O=ye>>>13,ye&=8191,ye+=N*c+x*a+k*s+S*(5*h)+D*(5*y),O+=ye>>>13,ye&=8191;let he=O+T*y+j*m+X*p+R*d+E*u;O=he>>>13,he&=8191,he+=N*l+x*c+k*a+S*s+D*(5*h),O+=he>>>13,he&=8191;let ge=O+T*h+j*y+X*m+R*p+E*d;O=ge>>>13,ge&=8191,ge+=N*u+x*l+k*c+S*a+D*s,O+=ge>>>13,ge&=8191,O=(O<<2)+O|0,O=O+L|0,L=O&8191,O=O>>>13,M+=O,r[0]=L,r[1]=M,r[2]=H,r[3]=re,r[4]=ae,r[5]=le,r[6]=pe,r[7]=ye,r[8]=he,r[9]=ge}finalize(){let{h:e,pad:t}=this,n=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,n[0]=e[0]+5,i=n[0]>>>13,n[0]&=8191;for(let s=1;s<10;s++)n[s]=e[s]+i,i=n[s]>>>13,n[s]&=8191;n[9]-=8192;let r=(i^1)-1;for(let s=0;s<10;s++)n[s]&=r;r=~r;for(let s=0;s<10;s++)e[s]=e[s]&r|n[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;er(n)}update(e){jd(this),Ye(e),e=Ki(e);let{buffer:t,blockLen:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(n-this.pos,i-r);if(o===n){for(;n<=i-r;r+=n)this.process(e,r);continue}if(t.set(e.subarray(r,r+o),this.pos),this.pos+=o,r+=o,this.pos===n)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,er(this.h,this.r,this.buffer,this.pad)}digestInto(e){jd(this),E_(e,this),this.finished=!0;let{buffer:t,h:n}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let r=0;for(let o=0;o<8;o++)e[r++]=n[o]>>>0,e[r++]=n[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}}var z_=A_(32,(e)=>new D_(e));function ZP(e,t,n,i,r,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],p=t[2],m=t[3],y=t[4],h=t[5],g=t[6],w=t[7],_=r,A=n[0],I=n[1],C=n[2],U=s,F=a,T=c,j=l,X=u,R=d,E=p,N=m,x=y,k=h,S=g,D=w,O=_,L=A,M=I,H=C;for(let ae=0;ae<o;ae+=2)U=U+X|0,O=Oe(O^U,16),x=x+O|0,X=Oe(X^x,12),U=U+X|0,O=Oe(O^U,8),x=x+O|0,X=Oe(X^x,7),F=F+R|0,L=Oe(L^F,16),k=k+L|0,R=Oe(R^k,12),F=F+R|0,L=Oe(L^F,8),k=k+L|0,R=Oe(R^k,7),T=T+E|0,M=Oe(M^T,16),S=S+M|0,E=Oe(E^S,12),T=T+E|0,M=Oe(M^T,8),S=S+M|0,E=Oe(E^S,7),j=j+N|0,H=Oe(H^j,16),D=D+H|0,N=Oe(N^D,12),j=j+N|0,H=Oe(H^j,8),D=D+H|0,N=Oe(N^D,7),U=U+R|0,H=Oe(H^U,16),S=S+H|0,R=Oe(R^S,12),U=U+R|0,H=Oe(H^U,8),S=S+H|0,R=Oe(R^S,7),F=F+E|0,O=Oe(O^F,16),D=D+O|0,E=Oe(E^D,12),F=F+E|0,O=Oe(O^F,8),D=D+O|0,E=Oe(E^D,7),T=T+N|0,L=Oe(L^T,16),x=x+L|0,N=Oe(N^x,12),T=T+N|0,L=Oe(L^T,8),x=x+L|0,N=Oe(N^x,7),j=j+X|0,M=Oe(M^j,16),k=k+M|0,X=Oe(X^k,12),j=j+X|0,M=Oe(M^j,8),k=k+M|0,X=Oe(X^k,7);let re=0;i[re++]=s+U|0,i[re++]=a+F|0,i[re++]=c+T|0,i[re++]=l+j|0,i[re++]=u+X|0,i[re++]=d+R|0,i[re++]=p+E|0,i[re++]=m+N|0,i[re++]=y+x|0,i[re++]=h+k|0,i[re++]=g+S|0,i[re++]=w+D|0,i[re++]=_+O|0,i[re++]=A+L|0,i[re++]=I+M|0,i[re++]=C+H|0}var FP=N_(ZP,{counterRight:!1,counterLength:4,allowShortKeys:!1});var KP=new Uint8Array(16),U_=(e,t)=>{e.update(t);let n=t.length%16;if(n)e.update(KP.subarray(n))},qP=new Uint8Array(32);function L_(e,t,n,i,r){if(r!==void 0)Ye(r,void 0,"AAD");let o=e(t,n,qP),s=P_(i.length,r?r.length:0,!0),a=z_.create(o);if(r)U_(a,r);U_(a,i),a.update(s);let c=a.digest();return er(o,s),c}var HP=(e)=>(t,n,i)=>({encrypt(o,s){let a=o.length;s=bs(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,n,c,c,1);let l=L_(e,t,n,c,i);return s.set(l,a),er(l),s},decrypt(o,s){s=bs(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=L_(e,t,n,a,i);if(!O_(c,l))throw er(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,n,s,s,1),er(l),s}}),qt=T_({blockSize:64,nonceLength:12,tagLength:16},HP(FP));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function qi(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Xe(e,t=""){if(!Number.isSafeInteger(e)||e<0){let n=t&&`"${t}" `;throw Error(`${n}expected integer >= 0, got ${e}`)}}function ve(e,t,n=""){let i=qi(e),r=e?.length,o=t!==void 0;if(!i||o&&r!==t){let s=n&&`"${n}" `,a=o?` of length ${t}`:"",c=i?`length=${r}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function Ht(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Xe(e.outputLen),Xe(e.blockLen)}function Lr(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bc(e,t){ve(e,void 0,"digestInto() output");let n=t.outputLen;if(e.length<n)throw Error('"digestInto() output" expected to be of length >='+n)}function jc(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function It(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Mc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function tr(e,t){return e<<32-t|e>>>t}var VP=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function YP(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function WP(e){for(let t=0;t<e.length;t++)e[t]=YP(e[t]);return e}var Zd=VP?(e)=>e:WP,j_=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),GP=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Wn(e){if(ve(e),j_)return e.toHex();let t="";for(let n=0;n<e.length;n++)t+=GP[e[n]];return t}var Ur={_0:48,_9:57,A:65,F:70,a:97,f:102};function B_(e){if(e>=Ur._0&&e<=Ur._9)return e-Ur._0;if(e>=Ur.A&&e<=Ur.F)return e-(Ur.A-10);if(e>=Ur.a&&e<=Ur.f)return e-(Ur.a-10);return}function Gn(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(j_)return Uint8Array.fromHex(e);let t=e.length,n=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(n);for(let r=0,o=0;r<n;r++,o+=2){let s=B_(e.charCodeAt(o)),a=B_(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[r]=s*16+a}return i}function qe(...e){let t=0;for(let i=0;i<e.length;i++){let r=e[i];ve(r),t+=r.length}let n=new Uint8Array(t);for(let i=0,r=0;i<e.length;i++){let o=e[i];n.set(o,r),r+=o.length}return n}function Hi(e,t={}){let n=(r,o)=>e(o).update(r).digest(),i=e(void 0);return n.outputLen=i.outputLen,n.blockLen=i.blockLen,n.create=(r)=>e(r),Object.assign(n,t),Object.freeze(n)}function cn(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ln=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Kd=BigInt(0),Fd=BigInt(1);function xs(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw Error(n+"expected boolean, got type="+typeof e)}return e}function M_(e){if(typeof e==="bigint"){if(!Zc(e))throw Error("positive bigint expected, got "+e)}else Xe(e);return e}function ws(e){let t=M_(e).toString(16);return t.length&1?"0"+t:t}function Z_(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Kd:BigInt("0x"+e)}function un(e){return Z_(Wn(e))}function fn(e){return Z_(Wn(Fc(ve(e)).reverse()))}function Vi(e,t){Xe(t),e=M_(e);let n=Gn(e.toString(16).padStart(t*2,"0"));if(n.length!==t)throw Error("number too large");return n}function _s(e,t){return Vi(e,t).reverse()}function Fc(e){return Uint8Array.from(e)}function dn(e){return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var Zc=(e)=>typeof e==="bigint"&&Kd<=e;function JP(e,t,n){return Zc(e)&&Zc(t)&&Zc(n)&&t<=e&&e<n}function Ss(e,t,n,i){if(!JP(t,n,i))throw Error("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function qd(e){let t;for(t=0;e>Kd;e>>=Fd,t+=1);return t}var $s=(e)=>(Fd<<BigInt(e))-Fd;function F_(e,t,n){if(Xe(e,"hashLen"),Xe(t,"qByteLen"),typeof n!=="function")throw Error("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,qe(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let _=c.slice();w.push(_),g+=c.length}return qe(...w)};return(g,w)=>{d(),m(g);let _=void 0;while(!(_=w(y())))m();return d(),_}}function Jn(e,t={},n={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}function Hd(e){let t=new WeakMap;return(n,...i)=>{let r=t.get(n);if(r!==void 0)return r;let o=e(n,...i);return t.set(n,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bt=BigInt(0),ft=BigInt(1),Xn=BigInt(2),H_=BigInt(3),V_=BigInt(4),Y_=BigInt(5),XP=BigInt(7),W_=BigInt(8),QP=BigInt(9),G_=BigInt(16);function yt(e,t){let n=e%t;return n>=bt?n:t+n}function Vt(e,t,n){let i=e;while(t-- >bt)i*=i,i%=n;return i}function K_(e,t){if(e===bt)throw Error("invert: expected non-zero number");if(t<=bt)throw Error("invert: expected positive modulus, got "+t);let n=yt(e,t),i=t,r=bt,o=ft,s=ft,a=bt;while(n!==bt){let l=i/n,u=i%n,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==ft)throw Error("invert: does not exist");return yt(r,t)}function Vd(e,t,n){if(!e.eql(e.sqr(t),n))throw Error("Cannot find square root")}function J_(e,t){let n=(e.ORDER+ft)/V_,i=e.pow(t,n);return Vd(e,i,t),i}function eR(e,t){let n=(e.ORDER-Y_)/W_,i=e.mul(t,Xn),r=e.pow(i,n),o=e.mul(t,r),s=e.mul(e.mul(o,Xn),r),a=e.mul(o,e.sub(s,e.ONE));return Vd(e,a,t),a}function tR(e){let t=Kc(e),n=X_(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+XP)/G_;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,r),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,m),u=a.cmov(p,d,y);let h=a.eql(a.sqr(u),c),g=a.cmov(l,u,h);return Vd(a,g,c),g}}function X_(e){if(e<H_)throw Error("sqrt is not defined for small field");let t=e-ft,n=0;while(t%Xn===bt)t/=Xn,n++;let i=Xn,r=Kc(e);while(q_(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return J_;let o=r.pow(i,t),s=(t+ft)/Xn;return function(c,l){if(c.is0(l))return l;if(q_(c,l)!==1)throw Error("Cannot find square root");let u=n,d=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,h=c.sqr(p);while(!c.eql(h,c.ONE))if(y++,h=c.sqr(h),y===u)throw Error("Cannot find square root");let g=ft<<BigInt(u-y-1),w=c.pow(d,g);u=y,d=c.sqr(w),p=c.mul(p,d),m=c.mul(m,w)}return m}}function rR(e){if(e%V_===H_)return J_;if(e%W_===Y_)return eR;if(e%G_===QP)return tR(e);return X_(e)}var nR=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Yd(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=nR.reduce((i,r)=>(i[r]="function",i),t);return Jn(e,n),e}function iR(e,t,n){if(n<bt)throw Error("invalid exponent, negatives unsupported");if(n===bt)return e.ONE;if(n===ft)return t;let i=e.ONE,r=t;while(n>bt){if(n&ft)i=e.mul(i,r);r=e.sqr(r),n>>=ft}return i}function ks(e,t,n=!1){let i=Array(t.length).fill(n?e.ZERO:void 0),r=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(r);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function q_(e,t){let n=(e.ORDER-ft)/Xn,i=e.pow(t,n),r=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!r&&!o&&!s)throw Error("invalid Legendre symbol result");return r?1:o?0:-1}function oR(e,t){if(t!==void 0)Xe(t);let n=t!==void 0?t:e.toString(2).length,i=Math.ceil(n/8);return{nBitLength:n,nByteLength:i}}class Q_{ORDER;BITS;BYTES;isLE;ZERO=bt;ONE=ft;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=bt)throw Error("invalid field: expected ORDER > 0, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=oR(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return yt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return bt<=e&&e<this.ORDER}is0(e){return e===bt}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&ft)===ft}neg(e){return yt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return yt(e*e,this.ORDER)}add(e,t){return yt(e+t,this.ORDER)}sub(e,t){return yt(e-t,this.ORDER)}mul(e,t){return yt(e*t,this.ORDER)}pow(e,t){return iR(this,e,t)}div(e,t){return yt(e*K_(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return K_(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=rR(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?_s(e,this.BYTES):Vi(e,this.BYTES)}fromBytes(e,t=!1){ve(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?fn(e):un(e);if(s)a=yt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ks(this,e)}cmov(e,t,n){return n?t:e}}function Kc(e,t={}){return new Q_(e,t)}function eS(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function Wd(e){let t=eS(e);return t+Math.ceil(t/2)}function tS(e,t,n=!1){ve(e);let i=e.length,r=eS(t),o=Wd(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?fn(e):un(e),a=yt(s,t-ft)+ft;return n?_s(a,r):Vi(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Yi=BigInt(0),Qn=BigInt(1);function Es(e,t){let n=t.negate();return e?n:t}function Qd(e,t){let n=ks(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function oS(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Gd(e,t){oS(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=$s(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function rS(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=Qn;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Jd=new WeakMap,sS=new WeakMap;function Xd(e){return sS.get(e)||1}function nS(e){if(e!==Yi)throw Error("invalid wNAF")}class ep{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>Yi){if(t&Qn)n=n.add(i);i=i.double(),t>>=Qn}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Gd(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Gd(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=rS(n,s,o);if(n=a,l)r=r.add(Es(d,t[p]));else i=i.add(Es(u,t[c]))}return nS(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Gd(e,this.bits);for(let o=0;o<r.windows;o++){if(n===Yi)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=rS(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return nS(n),i}getPrecomputes(e,t,n){let i=Jd.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Jd.set(t,i)}}return i}cached(e,t,n){let i=Xd(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Xd(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){oS(t,this.bits),sS.set(e,t),Jd.delete(e)}hasCache(e){return Xd(e)!==1}}function aS(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>Yi||i>Yi){if(n&Qn)o=o.add(r);if(i&Qn)s=s.add(r);r=r.double(),n>>=Qn,i>>=Qn}return{p1:o,p2:s}}function iS(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Yd(t),t}else return Kc(e,{isLE:n})}function cS(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>Yi))throw Error(`CURVE.${c} must be positive bigint`)}let r=iS(t.p,n.Fp,i),o=iS(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function qc(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Is=BigInt(0),Wi=BigInt(1),Hc=BigInt(2);function sR(e){return Jn(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function lS(e){let t=sR(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||cn,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Hc**BigInt(254):Hc**BigInt(447),y=a?BigInt(8)*Hc**BigInt(251)-Wi:BigInt(4)*Hc**BigInt(445)-Wi,h=m+y+Wi,g=(x)=>yt(x,n),w=_(d);function _(x){return _s(g(x),u)}function A(x){let k=Fc(ve(x,u,"uCoordinate"));if(a)k[31]&=127;return g(fn(k))}function I(x){return fn(r(Fc(ve(x,u,"scalar"))))}function C(x,k){let S=X(A(k),I(x));if(S===Is)throw Error("invalid private or public key received");return _(S)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,S){let D=g(x*(k-S));return k=g(k-D),S=g(S+D),{x_2:k,x_3:S}}function X(x,k){Ss("u",x,Is,n),Ss("scalar",k,m,h);let S=k,D=x,O=Wi,L=Is,M=x,H=Wi,re=Is;for(let le=BigInt(l-1);le>=Is;le--){let pe=S>>le&Wi;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let R={secretKey:u,publicKey:u,seed:u},E=(x=c(u))=>(ve(x,R.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze({keygen:qc(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:R})}class tp{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(Ht(e),ve(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,i=new Uint8Array(n);i.set(t.length>n?e.create().update(t).digest():t);for(let r=0;r<i.length;r++)i[r]^=54;this.iHash.update(i),this.oHash=e.create();for(let r=0;r<i.length;r++)i[r]^=106;this.oHash.update(i),It(i)}update(e){return Lr(this),this.iHash.update(e),this}digestInto(e){Lr(this),ve(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:i,destroyed:r,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=r,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Gi=(e,t,n)=>new tp(e,t).update(n).digest();Gi.create=(e,t)=>new tp(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var uS=(e,t)=>(e+(e>=0?t:-t)/dS)/t;function aR(e,t,n){let[[i,r],[o,s]]=t,a=uS(s*e,n),c=uS(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<Br,p=u<Br;if(d)l=-l;if(p)u=-u;let m=$s(Math.ceil(qd(n)/2))+Ji;if(l<Br||l>=m||u<Br||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:p,k2:u}}function np(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function rp(e,t){let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(xs(n.lowS,"lowS"),xs(n.prehash,"prehash"),n.format!==void 0)np(n.format);return n}class fS extends Error{constructor(e=""){super(e)}}var pn={Err:fS,_tlv:{encode:(e,t)=>{let{Err:n}=pn;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=ws(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?ws(r.length/2|128):"";return ws(e)+o+r+t},decode(e,t){let{Err:n}=pn,i=0;if(e<0||e>256)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=pn;if(e<Br)throw new t("integer: negative integers are not allowed");let n=ws(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=pn;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return un(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=pn,r=ve(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=pn,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}},Br=BigInt(0),Ji=BigInt(1),dS=BigInt(2),Vc=BigInt(3),cR=BigInt(4);function ip(e,t={}){let n=cS("weierstrass",e,t),{Fp:i,Fn:r}=n,o=n.CURVE,{h:s,n:a}=o;Jn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=mS(i,r);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(E,N,x){let{x:k,y:S}=N.toAffine(),D=i.toBytes(k);if(xs(x,"isCompressed"),x){u();let O=!i.isOdd(S);return qe(pS(O),D)}else return qe(Uint8Array.of(4),D,i.toBytes(S))}function p(E){ve(E,void 0,"Point");let{publicKey:N,publicKeyUncompressed:x}=l,k=E.length,S=E[0],D=E.subarray(1);if(k===N&&(S===2||S===3)){let O=i.fromBytes(D);if(!i.isValid(O))throw Error("bad point: is not on curve, wrong x");let L=h(O),M;try{M=i.sqrt(L)}catch(ae){let le=ae instanceof Error?": "+ae.message:"";throw Error("bad point: is not on curve, sqrt error"+le)}u();let H=i.isOdd(M);if((S&1)===1!==H)M=i.neg(M);return{x:O,y:M}}else if(k===x&&S===4){let O=i.BYTES,L=i.fromBytes(D.subarray(0,O)),M=i.fromBytes(D.subarray(O,O*2));if(!g(L,M))throw Error("bad point: is not on curve");return{x:L,y:M}}else throw Error(`bad point: got length ${k}, expected compressed=${N} or uncompressed=${x}`)}let m=t.toBytes||d,y=t.fromBytes||p;function h(E){let N=i.sqr(E),x=i.mul(N,E);return i.add(i.add(x,i.mul(E,o.a)),o.b)}function g(E,N){let x=i.sqr(N),k=h(E);return i.eql(x,k)}if(!g(o.Gx,o.Gy))throw Error("bad curve params: generator point");let w=i.mul(i.pow(o.a,Vc),cR),_=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(w,_)))throw Error("bad curve params: a or b");function A(E,N,x=!1){if(!i.isValid(N)||x&&i.is0(N))throw Error(`bad point coordinate ${E}`);return N}function I(E){if(!(E instanceof j))throw Error("Weierstrass Point expected")}function C(E){if(!c||!c.basises)throw Error("no endo");return aR(E,c.basises,r.ORDER)}let U=Hd((E,N)=>{let{X:x,Y:k,Z:S}=E;if(i.eql(S,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(S);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(S,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}),F=Hd((E)=>{if(E.is0()){if(t.allowInfinityPoint&&!i.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:N,y:x}=E.toAffine();if(!i.isValid(N)||!i.isValid(x))throw Error("bad point: x or y not field elements");if(!g(N,x))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function T(E,N,x,k,S){return x=new j(i.mul(x.X,E),x.Y,x.Z),N=Es(k,N),x=Es(S,x),N.add(x)}class j{static BASE=new j(o.Gx,o.Gy,i.ONE);static ZERO=new j(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(E,N,x){this.X=A("x",E),this.Y=A("y",N,!0),this.Z=A("z",x),Object.freeze(this)}static CURVE(){return o}static fromAffine(E){let{x:N,y:x}=E||{};if(!E||!i.isValid(N)||!i.isValid(x))throw Error("invalid affine point");if(E instanceof j)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(x))return j.ZERO;return new j(N,x,i.ONE)}static fromBytes(E){let N=j.fromAffine(y(ve(E,void 0,"point")));return N.assertValidity(),N}static fromHex(E){return j.fromBytes(Gn(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,N=!0){if(R.createCache(this,E),!N)this.multiply(Vc);return this}assertValidity(){F(this)}hasEvenY(){let{y:E}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(E)}equals(E){I(E);let{X:N,Y:x,Z:k}=this,{X:S,Y:D,Z:O}=E,L=i.eql(i.mul(N,O),i.mul(S,k)),M=i.eql(i.mul(x,O),i.mul(D,k));return L&&M}negate(){return new j(this.X,i.neg(this.Y),this.Z)}double(){let{a:E,b:N}=o,x=i.mul(N,Vc),{X:k,Y:S,Z:D}=this,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=i.mul(k,k),re=i.mul(S,S),ae=i.mul(D,D),le=i.mul(k,S);return le=i.add(le,le),M=i.mul(k,D),M=i.add(M,M),O=i.mul(E,M),L=i.mul(x,ae),L=i.add(O,L),O=i.sub(re,L),L=i.add(re,L),L=i.mul(O,L),O=i.mul(le,O),M=i.mul(x,M),ae=i.mul(E,ae),le=i.sub(H,ae),le=i.mul(E,le),le=i.add(le,M),M=i.add(H,H),H=i.add(M,H),H=i.add(H,ae),H=i.mul(H,le),L=i.add(L,H),ae=i.mul(S,D),ae=i.add(ae,ae),H=i.mul(ae,le),O=i.sub(O,H),M=i.mul(ae,re),M=i.add(M,M),M=i.add(M,M),new j(O,L,M)}add(E){I(E);let{X:N,Y:x,Z:k}=this,{X:S,Y:D,Z:O}=E,L=i.ZERO,M=i.ZERO,H=i.ZERO,re=o.a,ae=i.mul(o.b,Vc),le=i.mul(N,S),pe=i.mul(x,D),ye=i.mul(k,O),he=i.add(N,x),ge=i.add(S,D);he=i.mul(he,ge),ge=i.add(le,pe),he=i.sub(he,ge),ge=i.add(N,k);let we=i.add(S,O);return ge=i.mul(ge,we),we=i.add(le,ye),ge=i.sub(ge,we),we=i.add(x,k),L=i.add(D,O),we=i.mul(we,L),L=i.add(pe,ye),we=i.sub(we,L),H=i.mul(re,ge),L=i.mul(ae,ye),H=i.add(L,H),L=i.sub(pe,H),H=i.add(pe,H),M=i.mul(L,H),pe=i.add(le,le),pe=i.add(pe,le),ye=i.mul(re,ye),ge=i.mul(ae,ge),pe=i.add(pe,ye),ye=i.sub(le,ye),ye=i.mul(re,ye),ge=i.add(ge,ye),le=i.mul(pe,ge),M=i.add(M,le),le=i.mul(we,ge),L=i.mul(he,L),L=i.sub(L,le),le=i.mul(he,pe),H=i.mul(we,H),H=i.add(H,le),new j(L,M,H)}subtract(E){return this.add(E.negate())}is0(){return this.equals(j.ZERO)}multiply(E){let{endo:N}=t;if(!r.isValidNot0(E))throw Error("invalid scalar: out of range");let x,k,S=(D)=>R.cached(this,D,(O)=>Qd(j,O));if(N){let{k1neg:D,k1:O,k2neg:L,k2:M}=C(E),{p:H,f:re}=S(O),{p:ae,f:le}=S(M);k=re.add(le),x=T(N.beta,H,ae,D,L)}else{let{p:D,f:O}=S(E);x=D,k=O}return Qd(j,[x,k])[0]}multiplyUnsafe(E){let{endo:N}=t,x=this;if(!r.isValid(E))throw Error("invalid scalar: out of range");if(E===Br||x.is0())return j.ZERO;if(E===Ji)return x;if(R.hasCache(this))return this.multiply(E);if(N){let{k1neg:k,k1:S,k2neg:D,k2:O}=C(E),{p1:L,p2:M}=aS(j,x,S,O);return T(N.beta,L,M,k,D)}else return R.unsafe(x,E)}toAffine(E){return U(this,E)}isTorsionFree(){let{isTorsionFree:E}=t;if(s===Ji)return!0;if(E)return E(j,this);return R.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:E}=t;if(s===Ji)return this;if(E)return E(j,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(E=!0){return xs(E,"isCompressed"),this.assertValidity(),m(j,this,E)}toHex(E=!0){return Wn(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let X=r.BITS,R=new ep(j,t.endo?Math.ceil(X/2):X);return j.BASE.precompute(8),j}function pS(e){return Uint8Array.of(e?2:3)}function mS(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function lR(e,t={}){let{Fn:n}=e,i=t.randomBytes||cn,r=Object.assign(mS(e.Fp,n),{seed:Wd(n.ORDER)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m=i(r.seed)){return tS(ve(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r;if(!qi(m))return;if("_lengths"in n&&n._lengths||y===h)return;let w=ve(m,void 0,"key").length;return w===h||w===g}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=qc(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function op(e,t,n={}){Ht(t),Jn(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let i=n.randomBytes||cn,r=n.hmac||((x,k)=>Gi(t,x,k)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m}=lR(e,n),y={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},h=a*dS<o.ORDER;function g(x){let k=a>>Ji;return x>k}function w(x,k){if(!s.isValidNot0(k))throw Error(`invalid signature ${x}: out of range 1..Point.Fn.ORDER`);return k}function _(){if(h)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function A(x,k){np(k);let S=m.signature,D=k==="compact"?S:k==="recovered"?S+1:void 0;return ve(x,D)}class I{r;s;recovery;constructor(x,k,S){if(this.r=w("r",x),this.s=w("s",k),S!=null){if(_(),![0,1,2,3].includes(S))throw Error("invalid recovery id");this.recovery=S}Object.freeze(this)}static fromBytes(x,k=y.format){A(x,k);let S;if(k==="der"){let{r:M,s:H}=pn.toSig(ve(x));return new I(M,H)}if(k==="recovered")S=x[0],k="compact",x=x.subarray(1);let D=m.signature/2,O=x.subarray(0,D),L=x.subarray(D,D*2);return new I(s.fromBytes(O),s.fromBytes(L),S)}static fromHex(x,k){return this.fromBytes(Gn(x),k)}assertRecovery(){let{recovery:x}=this;if(x==null)throw Error("invalid recovery id: must be present");return x}addRecoveryBit(x){return new I(this.r,this.s,x)}recoverPublicKey(x){let{r:k,s:S}=this,D=this.assertRecovery(),O=D===2||D===3?k+a:k;if(!o.isValid(O))throw Error("invalid recovery id: sig.r+curve.n != R.x");let L=o.toBytes(O),M=e.fromBytes(qe(pS((D&1)===0),L)),H=s.inv(O),re=U(ve(x,void 0,"msgHash")),ae=s.create(-re*H),le=s.create(S*H),pe=e.BASE.multiplyUnsafe(ae).add(M.multiplyUnsafe(le));if(pe.is0())throw Error("invalid recovery: point at infinify");return pe.assertValidity(),pe}hasHighS(){return g(this.s)}toBytes(x=y.format){if(np(x),x==="der")return Gn(pn.hexFromSig(this));let{r:k,s:S}=this,D=s.toBytes(k),O=s.toBytes(S);if(x==="recovered")return _(),qe(Uint8Array.of(this.assertRecovery()),D,O);return qe(D,O)}toHex(x){return Wn(this.toBytes(x))}}let C=n.bits2int||function(k){if(k.length>8192)throw Error("input is too large");let S=un(k),D=k.length*8-c;return D>0?S>>BigInt(D):S},U=n.bits2int_modN||function(k){return s.create(C(k))},F=$s(c);function T(x){return Ss("num < 2^"+c,x,Br,F),s.toBytes(x)}function j(x,k){return ve(x,void 0,"message"),k?ve(t(x),void 0,"prehashed message"):x}function X(x,k,S){let{lowS:D,prehash:O,extraEntropy:L}=rp(S,y);x=j(x,O);let M=U(x),H=s.fromBytes(k);if(!s.isValidNot0(H))throw Error("invalid private key");let re=[T(H),T(M)];if(L!=null&&L!==!1){let ye=L===!0?i(m.secretKey):L;re.push(ve(ye,void 0,"extraEntropy"))}let ae=qe(...re),le=M;function pe(ye){let he=C(ye);if(!s.isValidNot0(he))return;let ge=s.inv(he),we=e.BASE.multiply(he).toAffine(),Ne=s.create(we.x);if(Ne===Br)return;let ze=s.create(ge*s.create(le+Ne*H));if(ze===Br)return;let ct=(we.x===Ne?0:2)|Number(we.y&Ji),lt=ze;if(D&&g(ze))lt=s.neg(ze),ct^=1;return new I(Ne,lt,h?void 0:ct)}return{seed:ae,k2sig:pe}}function R(x,k,S={}){let{seed:D,k2sig:O}=X(x,k,S);return F_(t.outputLen,s.BYTES,r)(D,O).toBytes(S.format)}function E(x,k,S,D={}){let{lowS:O,prehash:L,format:M}=rp(D,y);if(S=ve(S,void 0,"publicKey"),k=j(k,L),!qi(x)){let H=x instanceof I?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+H)}A(x,M);try{let H=I.fromBytes(x,M),re=e.fromBytes(S);if(O&&H.hasHighS())return!1;let{r:ae,s:le}=H,pe=U(k),ye=s.inv(le),he=s.create(pe*ye),ge=s.create(ae*ye),we=e.BASE.multiplyUnsafe(he).add(re.multiplyUnsafe(ge));if(we.is0())return!1;return s.create(we.x)===ae}catch(H){return!1}}function N(x,k,S={}){let{prehash:D}=rp(S,y);return k=j(k,D),I.fromBytes(x,"recovered").recoverPublicKey(k).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m,Point:e,sign:R,verify:E,recoverPublicKey:N,Signature:I,hash:t})}function hS(e,t,n){return e&t^~e&n}function gS(e,t,n){return e&t^e&n^t&n}class Yc{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,n,i){this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Mc(this.buffer)}update(e){Lr(this),ve(e);let{view:t,buffer:n,blockLen:i}=this,r=e.length;for(let o=0;o<r;){let s=Math.min(i-this.pos,r-o);if(s===i){let a=Mc(e);for(;i<=r-o;o+=i)this.process(a,o);continue}if(n.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Lr(this),Bc(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:r}=this,{pos:o}=this;if(t[o++]=128,It(this.buffer.subarray(o)),this.padOffset>i-o)this.process(n,0),o=0;for(let u=o;u<i;u++)t[u]=0;n.setBigUint64(i-8,BigInt(this.length*8),r),this.process(n,0);let s=Mc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],r)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:r,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=r,e.length=i,e.pos=s,i%t)e.buffer.set(n);return e}clone(){return this._cloneInto()}}var jr=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var it=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Wc=BigInt(4294967295),yS=BigInt(32);function uR(e,t=!1){if(t)return{h:Number(e&Wc),l:Number(e>>yS&Wc)};return{h:Number(e>>yS&Wc)|0,l:Number(e&Wc)|0}}function Gc(e,t=!1){let n=e.length,i=new Uint32Array(n),r=new Uint32Array(n);for(let o=0;o<n;o++){let{h:s,l:a}=uR(e[o],t);[i[o],r[o]]=[s,a]}return[i,r]}var sp=(e,t,n)=>e>>>n,ap=(e,t,n)=>e<<32-n|t>>>n,ei=(e,t,n)=>e>>>n|t<<32-n,ti=(e,t,n)=>e<<32-n|t>>>n,Os=(e,t,n)=>e<<64-n|t>>>n-32,As=(e,t,n)=>e>>>n-32|t<<64-n;var bS=(e,t,n)=>e<<n|t>>>32-n,vS=(e,t,n)=>t<<n|e>>>32-n,xS=(e,t,n)=>t<<n-32|e>>>64-n,wS=(e,t,n)=>e<<n-32|t>>>64-n;function mr(e,t,n,i){let r=(t>>>0)+(i>>>0);return{h:e+n+(r/4294967296|0)|0,l:r|0}}var _S=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),SS=(e,t,n,i)=>t+n+i+(e/4294967296|0)|0,$S=(e,t,n,i)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),kS=(e,t,n,i,r)=>t+n+i+r+(e/4294967296|0)|0,ES=(e,t,n,i,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0)+(r>>>0),IS=(e,t,n,i,r,o)=>t+n+i+r+o+(e/4294967296|0)|0;var dR=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),mn=new Uint32Array(64);class OS extends Yc{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:n,D:i,E:r,F:o,G:s,H:a}=this;return[e,t,n,i,r,o,s,a]}set(e,t,n,i,r,o,s,a){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=r|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)mn[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=mn[u-15],p=mn[u-2],m=tr(d,7)^tr(d,18)^d>>>3,y=tr(p,17)^tr(p,19)^p>>>10;mn[u]=y+mn[u-7]+m+mn[u-16]|0}let{A:n,B:i,C:r,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=tr(s,6)^tr(s,11)^tr(s,25),p=l+d+hS(s,a,c)+dR[u]+mn[u]|0,y=(tr(n,2)^tr(n,13)^tr(n,22))+gS(n,i,r)|0;l=c,c=a,a=s,s=o+p|0,o=r,r=i,i=n,n=p+y|0}n=n+this.A|0,i=i+this.B|0,r=r+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(n,i,r,o,s,a,c,l)}roundClean(){It(mn)}destroy(){this.set(0,0,0,0,0,0,0,0),It(this.buffer)}}class AS extends OS{A=jr[0]|0;B=jr[1]|0;C=jr[2]|0;D=jr[3]|0;E=jr[4]|0;F=jr[5]|0;G=jr[6]|0;H=jr[7]|0;constructor(){super(32)}}var TS=(()=>Gc(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),pR=(()=>TS[0])(),mR=(()=>TS[1])(),hn=new Uint32Array(80),gn=new Uint32Array(80);class PS extends Yc{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:r,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:h}=this;return[e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h]}set(e,t,n,i,r,o,s,a,c,l,u,d,p,m,y,h){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=r|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=h|0}process(e,t){for(let _=0;_<16;_++,t+=4)hn[_]=e.getUint32(t),gn[_]=e.getUint32(t+=4);for(let _=16;_<80;_++){let A=hn[_-15]|0,I=gn[_-15]|0,C=ei(A,I,1)^ei(A,I,8)^sp(A,I,7),U=ti(A,I,1)^ti(A,I,8)^ap(A,I,7),F=hn[_-2]|0,T=gn[_-2]|0,j=ei(F,T,19)^Os(F,T,61)^sp(F,T,6),X=ti(F,T,19)^As(F,T,61)^ap(F,T,6),R=$S(U,X,gn[_-7],gn[_-16]),E=kS(R,C,j,hn[_-7],hn[_-16]);hn[_]=E|0,gn[_]=R|0}let{Ah:n,Al:i,Bh:r,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:h,Hh:g,Hl:w}=this;for(let _=0;_<80;_++){let A=ei(u,d,14)^ei(u,d,18)^Os(u,d,41),I=ti(u,d,14)^ti(u,d,18)^As(u,d,41),C=u&p^~u&y,U=d&m^~d&h,F=ES(w,I,U,mR[_],gn[_]),T=IS(F,g,A,C,pR[_],hn[_]),j=F|0,X=ei(n,i,28)^Os(n,i,34)^Os(n,i,39),R=ti(n,i,28)^As(n,i,34)^As(n,i,39),E=n&r^n&s^r&s,N=i&o^i&a^o&a;g=y|0,w=h|0,y=p|0,h=m|0,p=u|0,m=d|0,{h:u,l:d}=mr(c|0,l|0,T|0,j|0),c=s|0,l=a|0,s=r|0,a=o|0,r=n|0,o=i|0;let x=_S(j,R,N);n=SS(x,T,X,E),i=x|0}({h:n,l:i}=mr(this.Ah|0,this.Al|0,n|0,i|0)),{h:r,l:o}=mr(this.Bh|0,this.Bl|0,r|0,o|0),{h:s,l:a}=mr(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=mr(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=mr(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=mr(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:h}=mr(this.Gh|0,this.Gl|0,y|0,h|0),{h:g,l:w}=mr(this.Hh|0,this.Hl|0,g|0,w|0),this.set(n,i,r,o,s,a,c,l,u,d,p,m,y,h,g,w)}roundClean(){It(hn,gn)}destroy(){It(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class RS extends PS{Ah=it[0]|0;Al=it[1]|0;Bh=it[2]|0;Bl=it[3]|0;Ch=it[4]|0;Cl=it[5]|0;Dh=it[6]|0;Dl=it[7]|0;Eh=it[8]|0;El=it[9]|0;Fh=it[10]|0;Fl=it[11]|0;Gh=it[12]|0;Gl=it[13]|0;Hh=it[14]|0;Hl=it[15]|0;constructor(){super(48)}}var Jc=Hi(()=>new AS,ln(1));var CS=Hi(()=>new RS,ln(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var hR=BigInt(1),NS=BigInt(2),gR=BigInt(3),yR=BigInt(5),U7=BigInt(8),DS=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function bR(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=DS,a=e*e%o*e%o,c=Vt(a,NS,o)*a%o,l=Vt(c,hR,o)*e%o,u=Vt(l,yR,o)*l%o,d=Vt(u,t,o)*u%o,p=Vt(d,n,o)*d%o,m=Vt(p,i,o)*p%o,y=Vt(m,r,o)*m%o,h=Vt(y,r,o)*m%o,g=Vt(h,t,o)*u%o;return{pow_p_5_8:Vt(g,NS,o)*e%o,b2:a}}function vR(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var zS=(()=>{let e=DS;return lS({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=bR(t);return yt(Vt(n,gR,e)*i,e)},adjustScalarBytes:vR})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var xR=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),wR=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var _R=ip(xR),cp=op(_R,Jc);var SR=ip(wR),US=op(SR,CS);function BS(e,t,n){if(Ht(e),n===void 0)n=new Uint8Array(e.outputLen);return Gi(e,n,t)}var lp=Uint8Array.of(0),LS=Uint8Array.of();function jS(e,t,n,i=32){Ht(e),Xe(i,"length");let r=e.outputLen;if(i>255*r)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/r);if(n===void 0)n=LS;else ve(n,void 0,"info");let s=new Uint8Array(o*r),a=Gi.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)lp[0]=u+1,c.update(u===0?LS:l).update(n).update(lp).digestInto(l),s.set(l,r*u),a._cloneInto(c);return a.destroy(),c.destroy(),It(l,lp),s.slice(0,i)}var $R=BigInt(0),Ts=BigInt(1),kR=BigInt(2),ER=BigInt(7),IR=BigInt(256),OR=BigInt(113),FS=[],KS=[],qS=[];for(let e=0,t=Ts,n=1,i=0;e<24;e++){[n,i]=[i,(2*n+3*i)%5],FS.push(2*(5*i+n)),KS.push((e+1)*(e+2)/2%64);let r=$R;for(let o=0;o<7;o++)if(t=(t<<Ts^(t>>ER)*OR)%IR,t&kR)r^=Ts<<(Ts<<BigInt(o))-Ts;qS.push(r)}var HS=Gc(qS,!0),AR=HS[0],TR=HS[1],MS=(e,t,n)=>n>32?xS(e,t,n):bS(e,t,n),ZS=(e,t,n)=>n>32?wS(e,t,n):vS(e,t,n);function PR(e,t=24){let n=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)n[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=n[c],u=n[c+1],d=MS(l,u,1)^n[a],p=ZS(l,u,1)^n[a+1];for(let m=0;m<50;m+=10)e[s+m]^=d,e[s+m+1]^=p}let r=e[2],o=e[3];for(let s=0;s<24;s++){let a=KS[s],c=MS(r,o,a),l=ZS(r,o,a),u=FS[s];r=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)n[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~n[(a+2)%10]&n[(a+4)%10]}e[0]^=AR[i],e[1]^=TR[i]}It(n)}class Xc{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,n,i=!1,r=24){if(this.blockLen=e,this.suffix=t,this.outputLen=n,this.enableXOF=i,this.rounds=r,Xe(n,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=jc(this.state)}clone(){return this._cloneInto()}keccak(){Zd(this.state32),PR(this.state32,this.rounds),Zd(this.state32),this.posOut=0,this.pos=0}update(e){Lr(this),ve(e);let{blockLen:t,state:n}=this,i=e.length;for(let r=0;r<i;){let o=Math.min(t-this.pos,i-r);for(let s=0;s<o;s++)n[this.pos++]^=e[r++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:n,blockLen:i}=this;if(e[n]^=t,(t&128)!==0&&n===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Lr(this,!1),ve(e),this.finish();let t=this.state,{blockLen:n}=this;for(let i=0,r=e.length;i<r;){if(this.posOut>=n)this.keccak();let o=Math.min(n-this.posOut,r-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Xe(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Bc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,It(this.state)}_cloneInto(e){let{blockLen:t,suffix:n,outputLen:i,rounds:r,enableXOF:o}=this;return e||=new Xc(t,n,i,o,r),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=r,e.suffix=n,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var VS=(e,t,n,i={})=>Hi(()=>new Xc(t,e,n),i);var ri=VS(6,136,32,ln(8));var YS=VS(6,72,64,ln(10));var WS=(e,t,n,i={})=>Hi((r={})=>new Xc(t,e,r.dkLen===void 0?n:r.dkLen,!0),i),GS=WS(31,168,16,ln(11)),hr=WS(31,136,32,ln(12));function up(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function XS(e){return up(e),(e&e-1)===0&&e!==0}function fp(e,t){up(e);let n=0;for(let i=0;i<t;i++,e>>>=1)n=n<<1|e&1;return n}function QS(e){return up(e),31-Math.clz32(e)}function JS(e){let t=e.length;if(t<2||!XS(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let n=QS(t);for(let i=0;i<t;i++){let r=fp(i,n);if(i<r){let o=e[i];e[i]=e[r],e[r]=o}}return e}var dp=(e,t)=>{let{N:n,roots:i,dit:r,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=QS(n);if(!XS(n))throw Error("FFT: Polynomial size should be power of two");let l=r!==o;return(u)=>{if(u.length!==n)throw Error("FFT: wrong Polynomial length");if(r&&a)JS(u);for(let d=0,p=1;d<c-s;d++){let m=r?d+1+s:c-d,y=1<<m,h=y>>1,g=n>>m;for(let w=0;w<n;w+=y)for(let _=0,A=p++;_<h;_++){let I=o?r?n-A:A:_*g,C=w+_,U=w+_+h,F=i[I],T=u[U],j=u[C];if(l){let X=e.mul(T,F);u[C]=e.add(j,X),u[U]=e.sub(j,X)}else if(o)u[C]=e.add(T,j),u[U]=e.mul(e.sub(T,j),F);else u[C]=e.add(j,T),u[U]=e.mul(e.sub(j,T),F)}}if(!r&&a)JS(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var gr=cn;function Qc(e,t){if(e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function e1(e){return Uint8Array.from(e)}function ni(e,...t){let n=(r)=>typeof r==="number"?r:r.bytesLen,i=t.reduce((r,o)=>r+n(o),0);return{bytesLen:i,encode:(r)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=n(c),u=typeof c==="number"?r[s]:c.encode(r[s]);if(ve(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(r)=>{ve(r,i,e);let o=[];for(let s of t){let a=n(s),c=r.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),r=r.subarray(a)}return o}}}function el(e,t){let n=t*e.bytesLen;return{bytesLen:n,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let r=new Uint8Array(n);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);r.set(a,s),a.fill(0),s+=a.length}return r},decode:(i)=>{ve(i,n);let r=[];for(let o=0;o<i.length;o+=e.bytesLen)r.push(e.decode(i.subarray(o,o+e.bytesLen)));return r}}}function We(...e){for(let t of e)if(Array.isArray(t))for(let n of t)n.fill(0);else t.fill(0)}function pp(e){return(1<<e)-1}var X7=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var t1=(e)=>{let{newPoly:t,N:n,Q:i,F:r,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(_,A=i)=>{let I=_%A|0;return(I>=0?I|0:A+I|0)|0},l=(_,A=i)=>{let I=c(_,A)|0;return(I>A>>1?I-A|0:I)|0};function u(){let _=t(n);for(let A=0;A<n;A++){let I=fp(A,s),C=BigInt(o)**BigInt(I)%BigInt(i);_[A]=Number(C)|0}return _}let d=u(),p={add:(_,A)=>c((_|0)+(A|0))|0,sub:(_,A)=>c((_|0)-(A|0))|0,mul:(_,A)=>c((_|0)*(A|0))|0,inv:(_)=>{throw Error("not implemented")}},m={N:n,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=dp(p,{dit:!1,...m}),h=dp(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(_)=>y(_),decode:(_)=>{h(_);for(let A=0;A<_.length;A++)_[A]=c(r*_[A]);return _}},bitsCoder:(_,A)=>{let I=pp(_),C=_*(n/8);return{bytesLen:C,encode:(U)=>{let F=new Uint8Array(C);for(let T=0,j=0,X=0,R=0;T<U.length;T++){j|=(A.encode(U[T])&I)<<X,X+=_;for(;X>=8;X-=8,j>>=8)F[R++]=j&pp(X)}return F},decode:(U)=>{let F=t(n);for(let T=0,j=0,X=0,R=0;T<U.length;T++){j|=U[T]<<X,X+=8;for(;X>=_;X-=_,j>>=_)F[R++]=A.decode(j&I)}return F}}}}},RR=(e)=>(t,n)=>{if(!n)n=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let r=t.length,o=new Uint8Array(n),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[r+0]=l,i[r+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),We(o,i)}}},r1=RR(GS);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var dt=256,Mr=3329,CR=3303,NR=17,{mod:Cs,nttZetas:DR,NTT:ii,bitsCoder:zR}=t1({N:dt,Q:Mr,F:CR,ROOT_OF_UNITY:NR,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),mp={512:{N:dt,Q:Mr,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:dt,Q:Mr,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:dt,Q:Mr,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},UR=(e)=>{if(e>=12)return{encode:(n)=>n,decode:(n)=>n};let t=2**(e-1);return{encode:(n)=>((n<<e)+Mr/2)/Mr,decode:(n)=>n*Mr+t>>>e}},Ps=(e)=>zR(e,UR(e));function oi(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]+t[n])}function LR(e,t){for(let n=0;n<dt;n++)e[n]=Cs(e[n]-t[n])}function BR(e,t,n,i,r){let o=Cs(t*i*r+e*n),s=Cs(e*i+t*n);return{c0:o,c1:s}}function tl(e,t){for(let n=0;n<dt/2;n++){let i=DR[64+(n>>1)];if(n&1)i=-i;let{c0:r,c1:o}=BR(e[2*n+0],e[2*n+1],t[2*n+0],t[2*n+1],i);e[2*n+0]=r,e[2*n+1]=o}return e}function n1(e){let t=new Uint16Array(dt);for(let n=0;n<dt;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let r=0;n<dt&&r+3<=i.length;r+=3){let o=(i[r+0]>>0|i[r+1]<<8)&4095,s=(i[r+1]>>4|i[r+2]<<4)&4095;if(o<Mr)t[n++]=o;if(n<dt&&s<Mr)t[n++]=s}}return t}function Rs(e,t,n,i){let r=e(i*dt/4,t,n),o=new Uint16Array(dt),s=jc(r),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Cs(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var jR=(e)=>{let{K:t,PRF:n,XOF:i,HASH512:r,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Ps(1),u=Ps(c),d=Ps(a),p=ni("publicKey",el(Ps(12),t),32),m=el(Ps(12),t),y=ni("ciphertext",el(d,t),u),h=ni("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(g)=>{ve(g,32,"seed");let w=new Uint8Array(33);w.set(g),w[32]=t;let _=r(w),[A,I]=h.decode(_),C=[],U=[];for(let j=0;j<t;j++)C.push(ii.encode(Rs(n,I,j,o)));let F=i(A);for(let j=0;j<t;j++){let X=ii.encode(Rs(n,I,t+j,o));for(let R=0;R<t;R++){let E=n1(F.get(R,j));oi(X,tl(E,C[R]))}U.push(X)}F.clean();let T={publicKey:p.encode([U,A]),secretKey:m.encode(C)};return We(A,I,C,U,w,_),T},encrypt:(g,w,_)=>{let[A,I]=p.decode(g),C=[];for(let R=0;R<t;R++)C.push(ii.encode(Rs(n,_,R,o)));let U=i(I),F=new Uint16Array(dt),T=[];for(let R=0;R<t;R++){let E=Rs(n,_,t+R,s),N=new Uint16Array(dt);for(let x=0;x<t;x++){let k=n1(U.get(R,x));oi(N,tl(k,C[x]))}oi(E,ii.decode(N)),T.push(E),oi(F,tl(A[R],C[R])),We(N)}U.clean();let j=Rs(n,_,2*t,s);oi(j,ii.decode(F));let X=l.decode(w);return oi(X,j),We(A,C,F,j),y.encode([T,X])},decrypt:(g,w)=>{let[_,A]=y.decode(g),I=m.decode(w),C=new Uint16Array(dt);for(let U=0;U<t;U++)oi(C,tl(I[U],ii.encode(_[U])));return LR(A,ii.decode(C)),We(C,I,_),l.encode(A)}}};function hp(e){let t=jR(e),{HASH256:n,HASH512:i,KDF:r}=e,{secretCoder:o,lengths:s}=t,a=ni("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=gr(64))=>{ve(u,64,"seed");let{publicKey:d,secretKey:p}=t.keygen(u.subarray(0,32)),m=n(d),y=a.encode([p,d,m,u.subarray(32)]);return We(p,m),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,d=gr(32))=>{ve(u,s.publicKey,"publicKey"),ve(d,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(e1(p)));if(!Qc(m,p))throw We(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");We(m);let y=i.create().update(d).update(n(u)).digest(),h=t.encrypt(u,d,y.subarray(32,64));return We(y.subarray(32)),{cipherText:h,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{ve(d,a.bytesLen,"secretKey"),ve(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=n(d.subarray(p/2,m));if(!Qc(y,d.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[h,g,w,_]=a.decode(d),A=t.decrypt(u,h),I=i.create().update(A).update(w).digest(),C=I.subarray(0,32),U=t.encrypt(g,A,I.subarray(32,64)),F=Qc(u,U),T=r.create({dkLen:32}).update(_).update(u).digest();return We(A,U,!F?C:T),F?C:T}}}function MR(e,t,n){return hr.create({dkLen:e}).update(t).update(new Uint8Array([n])).digest()}var gp={HASH256:ri,HASH512:YS,KDF:hr,XOF:r1,PRF:MR},lH=hp({...gp,...mp[512]}),Ns=hp({...gp,...mp[768]}),i1=hp({...gp,...mp[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function ZR(e,t=!1){let{lengths:n,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=gr(n.seed))=>{ve(s,n.seed,"seed");let a=o.isLE?fn(s):un(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:n.secretKey,publicKey:n.publicKey,seed:n.seed},keygen:i,getPublicKey:(r)=>e.getPublicKey(r)}}function yp(e,t=!1){let n=ZR(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...n.lengths,msg:n.lengths.seed,cipherText:n.lengths.publicKey},keygen:n.keygen,getPublicKey:n.getPublicKey,encapsulate(i,r=gr(e.lengths.seed)){let o=this.keygen(r).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return We(o),{sharedSecret:s,cipherText:a}},decapsulate(i,r){let o=e.getSharedSecret(r,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Ds(e,t){return ni(t,...e.map((n)=>{if(typeof n.lengths[t]!=="number")throw Error("wrong length: "+t);return n.lengths[t]}))}function bp(e){return(t,n)=>e(t,{dkLen:n})}function FR(e,t,...n){let i=Ds(n,"seed"),r=Ds(n,"publicKey");if(e===void 0)e=i.bytesLen;Xe(e);function o(s){ve(s,e);let a=i.decode(t(s,i.bytesLen)),c=n.map((d,p)=>d.keygen(a[p])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:r.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=gr(e)){let{publicKey:a,secretKey:c}=o(s),l=r.encode(a);return We(a),We(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function rl(e,t,n,i,...r){let o=FR(e,n,...r),s=Ds(r,"cipherText"),a=Ds(r,"publicKey"),c=Ds(r,"msg");if(t===void 0)t=c.bytesLen;return Xe(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=gr(c.bytesLen)){let d=a.decode(l),p=c.decode(u),m=r.map((w,_)=>w.encapsulate(d[_],p[_])),y=m.map((w)=>w.sharedSecret),h=m.map((w)=>w.cipherText),g={sharedSecret:i(d,h,y),cipherText:s.encode(h)};return We(y,h),g},decapsulate(l,u){let d=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=r.map((h,g)=>h.decapsulate(d[g],m[g]));return i(p,d,y)}}}function o1(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>r(qe(a[0],a[1],s[1],o[1],dn(e))),t,n)}var xH=o1("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Ns,yp(cp,!0),hr,ri),wH=o1("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",i1,yp(US,!0),hr,ri);function KR(e,t,n,i,r){return Ht(i),Ht(r),rl(32,32,bp(i),(o,s,a)=>{let c=qe(a[0],a[1],s[0],o[0],s[1],o[1],dn(e)),l=32,u=qe(dn("hybrid_prk"),c),d=BS(r,u),p=qe(Vi(32,2),dn("shared_secret"),dn("")),m=jS(r,d,p,32);return We(d,p,u,c),m},t,n)}var s1=yp(zS),_H=KR("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Ns,s1,hr,Jc),qR=(()=>rl(32,32,bp(hr),(e,t,n)=>ri(qe(n[0],n[1],t[1],e[1],dn("\\.//^\\"))),Ns,s1))();function HR(e,t,n,i){let r=e.Point.Fn;if(!r)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=r.fromBytes(s.subarray(u,d),!0),r.isValidNot0(a))break}let c=r.toBytes(r.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:n,seed:i,msg:i,cipherText:n},keygen(s=gr(i)){return ve(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=gr(i)){ve(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return We(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function VR(e,t,n,i){let{secretKey:r,publicKeyUncompressed:o}=n.lengths;if(!r||!o)throw Error("wrong curve");let s=HR(n,r,o,i),a=64,c=a+i;return rl(32,32,(l)=>{ve(l,32);let u=hr(l,{dkLen:c}),d=u.subarray(0,a),p=u.subarray(a,c);return qe(d,p)},(l,u,d)=>ri(qe(d[0],d[1],u[1],l[1],dn(e))),t,s)}var YR=(()=>VR("MLKEM768-P256",Ns,cp,128))();var nl=qR,a1=YR;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Te=(e,t,n)=>tt(e,t,n),xp=Fe,Xi=Ic,ot=(...e)=>Sd(...e),Qi=(e)=>ds(e),eo=xd,to=(e)=>Nr(e),ol=BigInt(0),vp=BigInt(1);function Zr(e,t=""){if(typeof e!=="boolean"){let n=t&&`"${t}" `;throw TypeError(n+"expected boolean, got type="+typeof e)}return e}function sl(e){if(typeof e==="bigint"){if(!il(e))throw RangeError("positive bigint expected, got "+e)}else xp(e);return e}function yr(e,t=""){if(typeof e!=="number"){let n=t&&`"${t}" `;throw TypeError(n+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let n=t&&`"${t}" `;throw RangeError(n+"expected safe integer, got "+e)}}function zs(e){let t=sl(e).toString(16);return t.length&1?"0"+t:t}function c1(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?ol:BigInt("0x"+e)}function si(e){return c1(Ic(e))}function rr(e){return c1(Ic(yn(tt(e)).reverse()))}function al(e,t){if(Fe(t),t===0)throw RangeError("zero length");e=sl(e);let n=e.toString(16);if(n.length>t*2)throw RangeError("number too large");return ds(n.padStart(t*2,"0"))}function Us(e,t){return al(e,t).reverse()}function l1(e,t){if(e=Te(e),t=Te(t),e.length!==t.length)return!1;let n=0;for(let i=0;i<e.length;i++)n|=e[i]^t[i];return n===0}function yn(e){return Uint8Array.from(Te(e))}function cl(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,n)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[n]}" with code ${i} at position ${n}`);return i})}var il=(e)=>typeof e==="bigint"&&ol<=e;function WR(e,t,n){return il(e)&&il(t)&&il(n)&&t<=e&&e<n}function Fr(e,t,n,i){if(!WR(t,n,i))throw RangeError("expected valid "+e+": "+n+" <= n < "+i+", got "+t)}function ro(e){if(e<ol)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>ol;e>>=vp,t+=1);return t}var Ls=(e)=>(vp<<BigInt(e))-vp;function u1(e,t,n){if(Fe(e,"hashLen"),Fe(t,"qByteLen"),typeof n!=="function")throw TypeError("hmacFn must be a function");let i=(g)=>new Uint8Array(g),r=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...g)=>n(l,ot(c,...g)),m=(g=r)=>{if(l=p(o,g),c=p(),g.length===0)return;l=p(s,g),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let g=0,w=[];while(g<t){c=p();let _=c.slice();w.push(_),g+=c.length}return ot(...w)};return(g,w)=>{d(),m(g);let _=void 0;while((_=w(y()))===void 0)m();return d(),_}}function Yt(e,t={},n={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let r=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));r(t,!1),r(n,!0)}var wp=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var st=BigInt(0),je=BigInt(1),ai=BigInt(2),m1=BigInt(3),h1=BigInt(4),g1=BigInt(5),GR=BigInt(7),y1=BigInt(8),JR=BigInt(9),b1=BigInt(16);function Ue(e,t){if(t<=st)throw Error("mod: expected positive modulus, got "+t);let n=e%t;return n>=st?n:t+n}function Wt(e,t,n){if(t<st)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >st)i*=i,i%=n;return i}function f1(e,t){if(e===st)throw Error("invert: expected non-zero number");if(t<=st)throw Error("invert: expected positive modulus, got "+t);let n=Ue(e,t),i=t,r=st,o=je,s=je,a=st;while(n!==st){let l=i/n,u=i-n*l,d=r-s*l,p=o-a*l;i=n,n=u,r=s,o=a,s=d,a=p}if(i!==je)throw Error("invert: does not exist");return Ue(r,t)}function _p(e,t,n){let i=e;if(!i.eql(i.sqr(t),n))throw Error("Cannot find square root")}function v1(e,t){let n=e,i=(n.ORDER+je)/h1,r=n.pow(t,i);return _p(n,r,t),r}function XR(e,t){let n=e,i=(n.ORDER-g1)/y1,r=n.mul(t,ai),o=n.pow(r,i),s=n.mul(t,o),a=n.mul(n.mul(s,ai),o),c=n.mul(s,n.sub(a,n.ONE));return _p(n,c,t),c}function QR(e){let t=ll(e),n=x1(e),i=n(t,t.neg(t.ONE)),r=n(t,i),o=n(t,t.neg(i)),s=(e+GR)/b1;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),p=l.mul(u,r),m=l.mul(u,o),y=l.eql(l.sqr(d),c),h=l.eql(l.sqr(p),c);u=l.cmov(u,d,y),d=l.cmov(m,p,h);let g=l.eql(l.sqr(d),c),w=l.cmov(u,d,g);return _p(l,w,c),w}}function x1(e){if(e<m1)throw Error("sqrt is not defined for small field");let t=e-je,n=0;while(t%ai===st)t/=ai,n++;let i=ai,r=ll(e);while(d1(r,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(n===1)return v1;let o=r.pow(i,t),s=(t+je)/ai;return function(c,l){let u=c;if(u.is0(l))return l;if(d1(u,l)!==1)throw Error("Cannot find square root");let d=n,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let h=1,g=u.sqr(m);while(!u.eql(g,u.ONE))if(h++,g=u.sqr(g),h===d)throw Error("Cannot find square root");let w=je<<BigInt(d-h-1),_=u.pow(p,w);d=h,p=u.sqr(_),m=u.mul(m,p),y=u.mul(y,_)}return y}}function e4(e){if(e%h1===m1)return v1;if(e%y1===g1)return XR;if(e%b1===JR)return QR(e);return x1(e)}var Kr=(e,t)=>(Ue(e,t)&je)===je,t4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Sp(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},n=t4.reduce((i,r)=>(i[r]="function",i),t);if(Yt(e,n),yr(e.BYTES,"BYTES"),yr(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=je)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function r4(e,t,n){let i=e;if(n<st)throw Error("invalid exponent, negatives unsupported");if(n===st)return i.ONE;if(n===je)return t;let r=i.ONE,o=t;while(n>st){if(n&je)r=i.mul(r,o);o=i.sqr(o),n>>=je}return r}function Bs(e,t,n=!1){let i=e,r=Array(t.length).fill(n?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return r[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return r[l]=i.mul(a,r[l]),i.mul(a,c)},s),r}function d1(e,t){let n=e,i=(n.ORDER-je)/ai,r=n.pow(t,i),o=n.eql(r,n.ONE),s=n.eql(r,n.ZERO),a=n.eql(r,n.neg(n.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function n4(e,t){if(t!==void 0)xp(t);if(e<=st)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let n=ro(e);if(t!==void 0&&t<n)throw Error(`invalid n length: expected bit length (${n}) >= n.length (${t})`);let i=t!==void 0?t:n,r=Math.ceil(i/8);return{nBitLength:i,nByteLength:r}}var p1=new WeakMap;class $p{ORDER;BITS;BYTES;isLE;ZERO=st;ONE=je;_lengths;_mod;constructor(e,t={}){if(e<=je)throw Error("invalid field: expected ORDER > 1, got "+e);let n=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")n=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:r}=n4(e,n);if(r>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=r,Object.freeze(this)}create(e){return Ue(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return st<=e&&e<this.ORDER}is0(e){return e===st}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&je)===je}neg(e){return Ue(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Ue(e*e,this.ORDER)}add(e,t){return Ue(e+t,this.ORDER)}sub(e,t){return Ue(e-t,this.ORDER)}mul(e,t){return Ue(e*t,this.ORDER)}pow(e,t){return r4(this,e,t)}div(e,t){return Ue(e*f1(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return f1(e,this.ORDER)}sqrt(e){let t=p1.get(this);if(!t)p1.set(this,t=e4(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Us(e,this.BYTES):al(e,this.BYTES)}fromBytes(e,t=!1){Te(e);let{_lengths:n,BYTES:i,isLE:r,ORDER:o,_mod:s}=this;if(n){if(e.length<1||!n.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+n+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,r?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=r?rr(e):si(e);if(s)a=Ue(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Bs(this,e)}cmov(e,t,n){return Zr(n,"condition"),n?t:e}}Object.freeze($p.prototype);function ll(e,t={}){return new $p(e,t)}function w1(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=je)throw Error("field order must be greater than 1");let t=ro(e-je);return Math.ceil(t/8)}function kp(e){let t=w1(e);return t+Math.ceil(t/2)}function _1(e,t,n=!1){Te(e);let i=e.length,r=w1(t),o=Math.max(kp(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=n?rr(e):si(e),a=Ue(s,t-je)+je;return n?Us(a,r):al(a,r)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var no=BigInt(0),ci=BigInt(1);function js(e,t){let n=t.negate();return e?n:t}function li(e,t){let n=Bs(e.Fp,t.map((i)=>i.Z));return t.map((i,r)=>e.fromAffine(i.toAffine(n[r])))}function E1(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Ep(e,t){E1(e,t);let n=Math.ceil(t/e)+1,i=2**(e-1),r=2**e,o=Ls(e),s=BigInt(e);return{windows:n,windowSize:i,mask:o,maxNumber:r,shiftBy:s}}function S1(e,t,n){let{windowSize:i,mask:r,maxNumber:o,shiftBy:s}=n,a=Number(e&r),c=e>>s;if(a>i)a-=o,c+=ci;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var Ip=new WeakMap,I1=new WeakMap;function Op(e){return I1.get(e)||1}function $1(e){if(e!==no)throw Error("invalid wNAF")}class Ms{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,n=this.ZERO){let i=e;while(t>no){if(t&ci)n=n.add(i);i=i.double(),t>>=ci}return n}precomputeWindow(e,t){let{windows:n,windowSize:i}=Ep(t,this.bits),r=[],o=e,s=o;for(let a=0;a<n;a++){s=o,r.push(s);for(let c=1;c<i;c++)s=s.add(o),r.push(s);o=s.double()}return r}wNAF(e,t,n){if(!this.Fn.isValid(n))throw Error("invalid scalar");let i=this.ZERO,r=this.BASE,o=Ep(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=S1(n,s,o);if(n=a,l)r=r.add(js(d,t[p]));else i=i.add(js(u,t[c]))}return $1(n),{p:i,f:r}}wNAFUnsafe(e,t,n,i=this.ZERO){let r=Ep(e,this.bits);for(let o=0;o<r.windows;o++){if(n===no)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=S1(n,o,r);if(n=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return $1(n),i}getPrecomputes(e,t,n){let i=Ip.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof n==="function")i=n(i);Ip.set(t,i)}}return i}cached(e,t,n){let i=Op(e);return this.wNAF(i,this.getPrecomputes(i,e,n),t)}unsafe(e,t,n,i){let r=Op(e);if(r===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(r,this.getPrecomputes(r,e,n),t,i)}createCache(e,t){E1(t,this.bits),I1.set(e,t),Ip.delete(e)}hasCache(e){return Op(e)!==1}}function O1(e,t,n,i){let r=t,o=e.ZERO,s=e.ZERO;while(n>no||i>no){if(n&ci)o=o.add(r);if(i&ci)s=s.add(r);r=r.double(),n>>=ci,i>>=ci}return{p1:o,p2:s}}function k1(e,t,n){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Sp(t),t}else return ll(e,{isLE:n})}function ul(e,t,n={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>no))throw Error(`CURVE.${c} must be positive bigint`)}let r=k1(t.p,n.Fp,i),o=k1(t.n,n.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!r.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:r,Fn:o}}function Zs(e,t){return function(i){let r=e(i);return{secretKey:r,publicKey:t(r)}}}function Fs(e,t){if(yr(e),yr(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let n=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)n[i]=e&255,e>>>=8;return new Uint8Array(n)}function i4(e,t){let n=new Uint8Array(e.length);for(let i=0;i<e.length;i++)n[i]=e[i]^t[i];return n}function o4(e){if(!eo(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?cl(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Ap(e,t,n,i){if(Te(e),yr(n),t=o4(t),t.length>255)t=i(ot(cl("H2C-OVERSIZE-DST-"),t));let{outputLen:r,blockLen:o}=i,s=Math.ceil(n/r);if(n>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ot(t,Fs(t.length,1)),c=new Uint8Array(o),l=Fs(n,2),u=Array(s),d=i(ot(c,e,l,Fs(0,1),a));u[0]=i(ot(d,Fs(1,1),a));for(let m=1;m<s;m++){let y=[i4(d,u[m-1]),Fs(m+1,1),a];u[m]=i(ot(...y))}return ot(...u).slice(0,n)}var A1="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T1=(e,t)=>(e+(e>=0?t:-t)/R1)/t;function s4(e,t,n){Fr("scalar",e,br,n);let[[i,r],[o,s]]=t,a=T1(s*e,n),c=T1(-r*e,n),l=e-a*i-c*o,u=-a*r-c*s,d=l<br,p=u<br;if(d)l=-l;if(p)u=-u;let m=Ls(Math.ceil(ro(n)/2))+bn;if(l<br||l>=m||u<br||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:p,k2:u}}function Pp(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Tp(e,t){Yt(e);let n={};for(let i of Object.keys(t))n[i]=e[i]===void 0?t[i]:e[i];if(Zr(n.lowS,"lowS"),Zr(n.prehash,"prehash"),n.format!==void 0)Pp(n.format);return n}class P1 extends Error{constructor(e=""){super(e)}}var nr={Err:P1,_tlv:{encode:(e,t)=>{let{Err:n}=nr;if(yr(e,"tag"),e<0||e>255)throw new n("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new n("tlv.encode: unpadded data");let i=t.length/2,r=zs(i);if(r.length/2&128)throw new n("tlv.encode: long form length too big");let o=i>127?zs(r.length/2|128):"";return zs(e)+o+r+t},decode(e,t){let{Err:n}=nr;t=Te(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new n("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new n("tlv.decode: wrong tlv");let r=t[i++],o=!!(r&128),s=0;if(!o)s=r;else{let c=r&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=nr;if(sl(e),e<br)throw new t("integer: negative integers are not allowed");let n=zs(e);if(Number.parseInt(n[0],16)&8)n="00"+n;if(n.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return n},decode(e){let{Err:t}=nr;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return si(e)}},toSig(e){let{Err:t,_int:n,_tlv:i}=nr,r=Te(e,void 0,"signature"),{v:o,l:s}=i.decode(48,r);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(e){let{_tlv:t,_int:n}=nr,i=t.encode(2,n.encode(e.r)),r=t.encode(2,n.encode(e.s)),o=i+r;return t.encode(48,o)}};Object.freeze(nr._tlv);Object.freeze(nr._int);Object.freeze(nr);var br=BigInt(0),bn=BigInt(1),R1=BigInt(2),fl=BigInt(3),a4=BigInt(4);function C1(e,t={}){let n=ul("weierstrass",e,t),i=n.Fp,r=n.Fn,o=n.CURVE,{h:s,n:a}=o;Yt(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=D1(i,r);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(R,E,N){if(l&&E.is0())return Uint8Array.of(0);let{x,y:k}=E.toAffine(),S=i.toBytes(x);if(Zr(N,"isCompressed"),N){d();let D=!i.isOdd(k);return ot(N1(D),S)}else return ot(Uint8Array.of(4),S,i.toBytes(k))}function m(R){Te(R,void 0,"Point");let{publicKey:E,publicKeyUncompressed:N}=u,x=R.length,k=R[0],S=R.subarray(1);if(l&&x===1&&k===0)return{x:i.ZERO,y:i.ZERO};if(x===E&&(k===2||k===3)){let D=i.fromBytes(S);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let O=g(D),L;try{L=i.sqrt(O)}catch(re){let ae=re instanceof Error?": "+re.message:"";throw Error("bad point: is not on curve, sqrt error"+ae)}d();let M=i.isOdd(L);if((k&1)===1!==M)L=i.neg(L);return{x:D,y:L}}else if(x===N&&k===4){let D=i.BYTES,O=i.fromBytes(S.subarray(0,D)),L=i.fromBytes(S.subarray(D,D*2));if(!w(O,L))throw Error("bad point: is not on curve");return{x:O,y:L}}else throw Error(`bad point: got length ${x}, expected compressed=${E} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,h=t.fromBytes===void 0?m:t.fromBytes;function g(R){let E=i.sqr(R),N=i.mul(E,R);return i.add(i.add(N,i.mul(R,o.a)),o.b)}function w(R,E){let N=i.sqr(E),x=g(R);return i.eql(N,x)}if(!w(o.Gx,o.Gy))throw Error("bad curve params: generator point");let _=i.mul(i.pow(o.a,fl),a4),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(_,A)))throw Error("bad curve params: a or b");function I(R,E,N=!1){if(!i.isValid(E)||N&&i.is0(E))throw Error(`bad point coordinate ${R}`);return E}function C(R){if(!(R instanceof T))throw Error("Weierstrass Point expected")}function U(R){if(!c||!c.basises)throw Error("no endo");return s4(R,c.basises,r.ORDER)}function F(R,E,N,x,k){return N=new T(i.mul(N.X,R),N.Y,N.Z),E=js(x,E),N=js(k,N),E.add(N)}class T{static BASE=new T(o.Gx,o.Gy,i.ONE);static ZERO=new T(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=r;X;Y;Z;constructor(R,E,N){this.X=I("x",R),this.Y=I("y",E,!0),this.Z=I("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(R){let{x:E,y:N}=R||{};if(!R||!i.isValid(E)||!i.isValid(N))throw Error("invalid affine point");if(R instanceof T)throw Error("projective point not allowed");if(i.is0(E)&&i.is0(N))return T.ZERO;return new T(E,N,i.ONE)}static fromBytes(R){let E=T.fromAffine(h(Te(R,void 0,"point")));return E.assertValidity(),E}static fromHex(R){return T.fromBytes(Qi(R))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(R=8,E=!0){if(X.createCache(this,R),!E)this.multiply(fl);return this}assertValidity(){let R=this;if(R.is0()){if(t.allowInfinityPoint&&i.is0(R.X)&&i.eql(R.Y,i.ONE)&&i.is0(R.Z))return;throw Error("bad point: ZERO")}let{x:E,y:N}=R.toAffine();if(!i.isValid(E)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!w(E,N))throw Error("bad point: equation left != right");if(!R.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:R}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(R)}equals(R){C(R);let{X:E,Y:N,Z:x}=this,{X:k,Y:S,Z:D}=R,O=i.eql(i.mul(E,D),i.mul(k,x)),L=i.eql(i.mul(N,D),i.mul(S,x));return O&&L}negate(){return new T(this.X,i.neg(this.Y),this.Z)}double(){let{a:R,b:E}=o,N=i.mul(E,fl),{X:x,Y:k,Z:S}=this,D=i.ZERO,O=i.ZERO,L=i.ZERO,M=i.mul(x,x),H=i.mul(k,k),re=i.mul(S,S),ae=i.mul(x,k);return ae=i.add(ae,ae),L=i.mul(x,S),L=i.add(L,L),D=i.mul(R,L),O=i.mul(N,re),O=i.add(D,O),D=i.sub(H,O),O=i.add(H,O),O=i.mul(D,O),D=i.mul(ae,D),L=i.mul(N,L),re=i.mul(R,re),ae=i.sub(M,re),ae=i.mul(R,ae),ae=i.add(ae,L),L=i.add(M,M),M=i.add(L,M),M=i.add(M,re),M=i.mul(M,ae),O=i.add(O,M),re=i.mul(k,S),re=i.add(re,re),M=i.mul(re,ae),D=i.sub(D,M),L=i.mul(re,H),L=i.add(L,L),L=i.add(L,L),new T(D,O,L)}add(R){C(R);let{X:E,Y:N,Z:x}=this,{X:k,Y:S,Z:D}=R,O=i.ZERO,L=i.ZERO,M=i.ZERO,H=o.a,re=i.mul(o.b,fl),ae=i.mul(E,k),le=i.mul(N,S),pe=i.mul(x,D),ye=i.add(E,N),he=i.add(k,S);ye=i.mul(ye,he),he=i.add(ae,le),ye=i.sub(ye,he),he=i.add(E,x);let ge=i.add(k,D);return he=i.mul(he,ge),ge=i.add(ae,pe),he=i.sub(he,ge),ge=i.add(N,x),O=i.add(S,D),ge=i.mul(ge,O),O=i.add(le,pe),ge=i.sub(ge,O),M=i.mul(H,he),O=i.mul(re,pe),M=i.add(O,M),O=i.sub(le,M),M=i.add(le,M),L=i.mul(O,M),le=i.add(ae,ae),le=i.add(le,ae),pe=i.mul(H,pe),he=i.mul(re,he),le=i.add(le,pe),pe=i.sub(ae,pe),pe=i.mul(H,pe),he=i.add(he,pe),ae=i.mul(le,he),L=i.add(L,ae),ae=i.mul(ge,he),O=i.mul(ye,O),O=i.sub(O,ae),ae=i.mul(ye,le),M=i.mul(ge,M),M=i.add(M,ae),new T(O,L,M)}subtract(R){return C(R),this.add(R.negate())}is0(){return this.equals(T.ZERO)}multiply(R){let{endo:E}=t;if(!r.isValidNot0(R))throw RangeError("invalid scalar: out of range");let N,x,k=(S)=>X.cached(this,S,(D)=>li(T,D));if(E){let{k1neg:S,k1:D,k2neg:O,k2:L}=U(R),{p:M,f:H}=k(D),{p:re,f:ae}=k(L);x=H.add(ae),N=F(E.beta,M,re,S,O)}else{let{p:S,f:D}=k(R);N=S,x=D}return li(T,[N,x])[0]}multiplyUnsafe(R){let{endo:E}=t,N=this,x=R;if(!r.isValid(x))throw RangeError("invalid scalar: out of range");if(x===br||N.is0())return T.ZERO;if(x===bn)return N;if(X.hasCache(this))return this.multiply(x);if(E){let{k1neg:k,k1:S,k2neg:D,k2:O}=U(x),{p1:L,p2:M}=O1(T,N,S,O);return F(E.beta,L,M,k,D)}else return X.unsafe(N,x)}toAffine(R){let E=this,N=R,{X:x,Y:k,Z:S}=E;if(i.eql(S,i.ONE))return{x,y:k};let D=E.is0();if(N==null)N=D?i.ONE:i.inv(S);let O=i.mul(x,N),L=i.mul(k,N),M=i.mul(S,N);if(D)return{x:i.ZERO,y:i.ZERO};if(!i.eql(M,i.ONE))throw Error("invZ was invalid");return{x:O,y:L}}isTorsionFree(){let{isTorsionFree:R}=t;if(s===bn)return!0;if(R)return R(T,this);return X.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:R}=t;if(s===bn)return this;if(R)return R(T,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===bn)return this.is0();return this.clearCofactor().is0()}toBytes(R=!0){return Zr(R,"isCompressed"),this.assertValidity(),y(T,this,R)}toHex(R=!0){return Xi(this.toBytes(R))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let j=r.BITS,X=new Ms(T,t.endo?Math.ceil(j/2):j);if(j>=8)T.BASE.precompute(8);return Object.freeze(T.prototype),Object.freeze(T),T}function N1(e){return Uint8Array.of(e?2:3)}function D1(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function c4(e,t={}){let{Fn:n}=e,i=t.randomBytes===void 0?to:t.randomBytes,r=Object.assign(D1(e.Fp,n),{seed:Math.max(kp(n.ORDER),16)});function o(m){try{let y=n.fromBytes(m);return n.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:h,publicKeyUncompressed:g}=r;try{let w=m.length;if(y===!0&&w!==h)return!1;if(y===!1&&w!==g)return!1;return!!e.fromBytes(m)}catch(w){return!1}}function a(m){return m=m===void 0?i(r.seed):m,_1(Te(m,r.seed,"seed"),n.ORDER)}function c(m,y=!0){return e.BASE.multiply(n.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:h,publicKeyUncompressed:g}=r,w=n._lengths;if(!eo(m))return;let _=Te(m,void 0,"key").length,A=_===h||_===g,I=_===y||!!w?.includes(_);if(A&&I)return;return A}function u(m,y,h=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let g=n.fromBytes(m);return e.fromBytes(y).multiply(g).toBytes(h)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Zs(a,c);return Object.freeze(d),Object.freeze(r),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:r})}function z1(e,t,n={}){let i=t;Cr(i),Yt(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let r=n.randomBytes===void 0?to:n.randomBytes,o=n.hmac===void 0?(k,S)=>fr(i,k,S):n.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y}=c4(e,n),h={prehash:!0,lowS:typeof n.lowS==="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},g=c*R1+bn<s.ORDER;function w(k){let S=c>>bn;return k>S}function _(k,S){if(!a.isValidNot0(S))throw Error(`invalid signature ${k}: out of range 1..Point.Fn.ORDER`);return S}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function I(k,S){Pp(S);let D=y.signature,O=S==="compact"?D:S==="recovered"?D+1:void 0;return Te(k,O)}class C{r;s;recovery;constructor(k,S,D){if(this.r=_("r",k),this.s=_("s",S),D!=null){if(A(),![0,1,2,3].includes(D))throw Error("invalid recovery id");this.recovery=D}Object.freeze(this)}static fromBytes(k,S=h.format){I(k,S);let D;if(S==="der"){let{r:H,s:re}=nr.toSig(Te(k));return new C(H,re)}if(S==="recovered")D=k[0],S="compact",k=k.subarray(1);let O=y.signature/2,L=k.subarray(0,O),M=k.subarray(O,O*2);return new C(a.fromBytes(L),a.fromBytes(M),D)}static fromHex(k,S){return this.fromBytes(Qi(k),S)}assertRecovery(){let{recovery:k}=this;if(k==null)throw Error("invalid recovery id: must be present");return k}addRecoveryBit(k){return new C(this.r,this.s,k)}recoverPublicKey(k){let{r:S,s:D}=this,O=this.assertRecovery(),L=O===2||O===3?S+c:S;if(!s.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let M=s.toBytes(L),H=e.fromBytes(ot(N1((O&1)===0),M)),re=a.inv(L),ae=F(Te(k,void 0,"msgHash")),le=a.create(-ae*re),pe=a.create(D*re),ye=e.BASE.multiplyUnsafe(le).add(H.multiplyUnsafe(pe));if(ye.is0())throw Error("invalid recovery: point at infinify");return ye.assertValidity(),ye}hasHighS(){return w(this.s)}toBytes(k=h.format){if(Pp(k),k==="der")return Qi(nr.hexFromSig(this));let{r:S,s:D}=this,O=a.toBytes(S),L=a.toBytes(D);if(k==="recovered")return A(),ot(Uint8Array.of(this.assertRecovery()),O,L);return ot(O,L)}toHex(k){return Xi(this.toBytes(k))}}Object.freeze(C.prototype),Object.freeze(C);let U=n.bits2int===void 0?function(S){if(S.length>8192)throw Error("input is too large");let D=si(S),O=S.length*8-l;return O>0?D>>BigInt(O):D}:n.bits2int,F=n.bits2int_modN===void 0?function(S){return a.create(U(S))}:n.bits2int_modN,T=Ls(l);function j(k){return Fr("num < 2^"+l,k,br,T),a.toBytes(k)}function X(k,S){return Te(k,void 0,"message"),S?Te(i(k),void 0,"prehashed message"):k}function R(k,S,D){let{lowS:O,prehash:L,extraEntropy:M}=Tp(D,h);k=X(k,L);let H=F(k),re=a.fromBytes(S);if(!a.isValidNot0(re))throw Error("invalid private key");let ae=[j(re),j(H)];if(M!=null&&M!==!1){let he=M===!0?r(y.secretKey):M;ae.push(Te(he,void 0,"extraEntropy"))}let le=ot(...ae),pe=H;function ye(he){let ge=U(he);if(!a.isValidNot0(ge))return;let we=a.inv(ge),Ne=e.BASE.multiply(ge).toAffine(),ze=a.create(Ne.x);if(ze===br)return;let ct=a.create(we*a.create(pe+ze*re));if(ct===br)return;let lt=(Ne.x===ze?0:2)|Number(Ne.y&bn),kt=ct;if(O&&w(ct))kt=a.neg(ct),lt^=1;return new C(ze,kt,g?void 0:lt)}return{seed:le,k2sig:ye}}function E(k,S,D={}){let{seed:O,k2sig:L}=R(k,S,D);return u1(i.outputLen,a.BYTES,o)(O,L).toBytes(D.format)}function N(k,S,D,O={}){let{lowS:L,prehash:M,format:H}=Tp(O,h);if(D=Te(D,void 0,"publicKey"),S=X(S,M),!eo(k)){let re=k instanceof C?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}I(k,H);try{let re=C.fromBytes(k,H),ae=e.fromBytes(D);if(L&&re.hasHighS())return!1;let{r:le,s:pe}=re,ye=F(S),he=a.inv(pe),ge=a.create(ye*he),we=a.create(le*he),Ne=e.BASE.multiplyUnsafe(ge).add(ae.multiplyUnsafe(we));if(Ne.is0())return!1;return a.create(Ne.x)===le}catch(re){return!1}}function x(k,S,D={}){let{prehash:O}=Tp(D,h);return S=X(S,O),C.fromBytes(k,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:E,verify:N,recoverPublicKey:x,Signature:C,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var l4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var u4=C1(l4),io=z1(u4,Ke);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vn=BigInt(0),Ot=BigInt(1),Rp=BigInt(2),f4=BigInt(8);function d4(e,t,n,i){let r=e.sqr(n),o=e.sqr(i),s=e.add(e.mul(t.a,r),o),a=e.add(e.ONE,e.mul(t.d,e.mul(r,o)));return e.eql(s,a)}function U1(e,t={}){let n=t,i=ul("edwards",e,n,n.FpFnLE),{Fp:r,Fn:o}=i,s=i.CURVE,{h:a}=s;Yt(n,{},{uvRatio:"function"});let c=Rp<<BigInt(o.BYTES*8)-Ot,l=(h)=>r.create(h),u=n.uvRatio===void 0?(h,g)=>{try{return{isValid:!0,value:r.sqrt(r.div(h,g))}}catch(w){return{isValid:!1,value:vn}}}:n.uvRatio;if(!d4(r,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(h,g,w=!1){let _=w?Ot:vn;return Fr("coordinate "+h,g,_,c),g}function p(h){if(!(h instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Ot,l(s.Gx*s.Gy));static ZERO=new m(vn,Ot,Ot,vn);static Fp=r;static Fn=o;X;Y;Z;T;constructor(h,g,w,_){this.X=d("x",h),this.Y=d("y",g),this.Z=d("z",w,!0),this.T=d("t",_),Object.freeze(this)}static CURVE(){return s}static fromAffine(h){if(h instanceof m)throw Error("extended point not allowed");let{x:g,y:w}=h||{};return d("x",g),d("y",w),new m(g,w,Ot,l(g*w))}static fromBytes(h,g=!1){let w=r.BYTES,{a:_,d:A}=s;h=yn(Te(h,w,"point")),Zr(g,"zip215");let I=yn(h),C=h[w-1];I[w-1]=C&-129;let U=rr(I),F=g?c:r.ORDER;Fr("point.y",U,vn,F);let T=l(U*U),j=l(T-Ot),X=l(A*T-_),{isValid:R,value:E}=u(j,X);if(!R)throw Error("bad point: invalid y coordinate");let N=(E&Ot)===Ot,x=(C&128)!==0;if(!g&&E===vn&&x)throw Error("bad point: x=0 and x_0=1");if(x!==N)E=l(-E);return m.fromAffine({x:E,y:U})}static fromHex(h,g=!1){return m.fromBytes(Qi(h),g)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(h=8,g=!0){if(y.createCache(this,h),!g)this.multiply(Rp);return this}assertValidity(){let h=this,{a:g,d:w}=s;if(h.is0())throw Error("bad point: ZERO");let{X:_,Y:A,Z:I,T:C}=h,U=l(_*_),F=l(A*A),T=l(I*I),j=l(T*T),X=l(U*g),R=l(T*l(X+F)),E=l(j+l(w*l(U*F)));if(R!==E)throw Error("bad point: equation left != right (1)");let N=l(_*A),x=l(I*C);if(N!==x)throw Error("bad point: equation left != right (2)")}equals(h){p(h);let{X:g,Y:w,Z:_}=this,{X:A,Y:I,Z:C}=h,U=l(g*C),F=l(A*_),T=l(w*C),j=l(I*_);return U===F&&T===j}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:h}=s,{X:g,Y:w,Z:_}=this,A=l(g*g),I=l(w*w),C=l(Rp*l(_*_)),U=l(h*A),F=g+w,T=l(l(F*F)-A-I),j=U+I,X=j-C,R=U-I,E=l(T*X),N=l(j*R),x=l(T*R),k=l(X*j);return new m(E,N,k,x)}add(h){p(h);let{a:g,d:w}=s,{X:_,Y:A,Z:I,T:C}=this,{X:U,Y:F,Z:T,T:j}=h,X=l(_*U),R=l(A*F),E=l(C*w*j),N=l(I*T),x=l((_+A)*(U+F)-X-R),k=N-E,S=N+E,D=l(R-g*X),O=l(x*k),L=l(S*D),M=l(x*D),H=l(k*S);return new m(O,L,H,M)}subtract(h){return p(h),this.add(h.negate())}multiply(h){if(!o.isValidNot0(h))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:g,f:w}=y.cached(this,h,(_)=>li(m,_));return li(m,[g,w])[0]}multiplyUnsafe(h){if(!o.isValid(h))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(h===vn)return m.ZERO;if(this.is0()||h===Ot)return this;return y.unsafe(this,h,(g)=>li(m,g))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(h){let g=this,w=h,{X:_,Y:A,Z:I}=g,C=g.is0();if(w==null)w=C?f4:r.inv(I);let U=l(_*w),F=l(A*w),T=r.mul(I,w);if(C)return{x:vn,y:Ot};if(T!==Ot)throw Error("invZ was invalid");return{x:U,y:F}}clearCofactor(){if(a===Ot)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:h,y:g}=this.toAffine(),w=r.toBytes(g);return w[w.length-1]|=h&Ot?128:0,w}toHex(){return Xi(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new Ms(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Cp{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){wp()}static fromHex(e){wp()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return Xi(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ks=BigInt(0),oo=BigInt(1),dl=BigInt(2);function p4(e){return Yt(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function L1(e){let t=p4(e),{P:n,type:i,adjustScalarBytes:r,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?to:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?dl**BigInt(254):dl**BigInt(447),y=a?BigInt(8)*dl**BigInt(251)-oo:BigInt(4)*dl**BigInt(445)-oo,h=m+y+oo,g=(x)=>Ue(x,n),w=_(d);function _(x){return Us(g(x),u)}function A(x){let k=yn(Te(x,u,"uCoordinate"));if(a)k[31]&=127;return g(rr(k))}function I(x){return rr(r(yn(Te(x,u,"scalar"))))}function C(x,k){let S=X(A(k),I(x));if(S===Ks)throw Error("invalid private or public key received");return _(S)}function U(x){return C(x,w)}let F=U,T=C;function j(x,k,S){let D=g(x*(k-S));return k=g(k-D),S=g(S+D),{x_2:k,x_3:S}}function X(x,k){Fr("u",x,Ks,n),Fr("scalar",k,m,h);let S=k,D=x,O=oo,L=Ks,M=x,H=oo,re=Ks;for(let le=BigInt(l-1);le>=Ks;le--){let pe=S>>le&oo;re^=pe,{x_2:O,x_3:M}=j(re,O,M),{x_2:L,x_3:H}=j(re,L,H),re=pe;let ye=O+L,he=g(ye*ye),ge=O-L,we=g(ge*ge),Ne=he-we,ze=M+H,ct=M-H,lt=g(ct*ye),kt=g(ze*ge),lr=lt+kt,ur=lt-kt;M=g(lr*lr),H=g(D*g(ur*ur)),O=g(he*we),L=g(Ne*(he+g(p*Ne)))}({x_2:O,x_3:M}=j(re,O,M)),{x_2:L,x_3:H}=j(re,L,H);let ae=o(L);return g(O*ae)}let R={secretKey:u,publicKey:u,seed:u},E=(x)=>(x=x===void 0?c(u):x,Te(x,R.seed,"seed"),x),N={randomSecretKey:E};return Object.freeze(R),Object.freeze(N),Object.freeze({keygen:Zs(E,F),getSharedSecret:T,getPublicKey:F,scalarMult:C,scalarMultBase:U,utils:N,GuBytes:w.slice(),lengths:R})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var m4=BigInt(0),qr=BigInt(1),B1=BigInt(2),h4=BigInt(3),g4=BigInt(5),y4=BigInt(8),fi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Up=(()=>({p:fi,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:y4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Z1(e){let t=BigInt(10),n=BigInt(20),i=BigInt(40),r=BigInt(80),o=fi,a=e*e%o*e%o,c=Wt(a,B1,o)*a%o,l=Wt(c,qr,o)*e%o,u=Wt(l,g4,o)*l%o,d=Wt(u,t,o)*u%o,p=Wt(d,n,o)*d%o,m=Wt(p,i,o)*p%o,y=Wt(m,r,o)*m%o,h=Wt(y,r,o)*m%o,g=Wt(h,t,o)*u%o;return{pow_p_5_8:Wt(g,B1,o)*e%o,b2:a}}function b4(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Np=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Lp(e,t){let n=fi,i=Ue(t*t*t,n),r=Ue(i*i*t,n),o=Z1(e*r).pow_p_5_8,s=Ue(e*i*o,n),a=Ue(t*s*s,n),c=s,l=Ue(s*Np,n),u=a===e,d=a===Ue(-e,n),p=a===Ue(-e*Np,n);if(u)s=c;if(d||p)s=l;if(Kr(s,n))s=Ue(-s,n);return{isValid:u||d,value:s}}var ui=U1(Up,{uvRatio:Lp}),xn=(()=>ui.Fp)(),F1=(()=>ui.Fn)();var pl=(()=>{let e=fi;return L1({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:n,b2:i}=Z1(t);return Ue(Wt(n,h4,e)*i,e)},adjustScalarBytes:b4})})();var Dp=Np,v4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),x4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),w4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),_4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),j1=(e)=>Lp(qr,e),S4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),zp=(e)=>xn.create(rr(e)&S4);function M1(e){let{d:t}=Up,n=fi,i=(w)=>xn.create(w),r=i(Dp*e*e),o=i((r+qr)*w4),s=BigInt(-1),a=i((s-t*r)*i(r+t)),{isValid:c,value:l}=Lp(o,a),u=i(l*e);if(!Kr(u,n))u=i(-u);if(!c)l=u;if(!c)s=r;let d=i(s*(r-qr)*_4-a),p=l*l,m=i((l+l)*a),y=i(d*v4),h=i(qr-p),g=i(qr+p);return new ui(i(m*g),i(h*y),i(y*g),i(m*h))}class vt extends Cp{static BASE=(()=>new vt(ui.BASE))();static ZERO=(()=>new vt(ui.ZERO))();static Fp=(()=>xn)();static Fn=(()=>F1)();constructor(e){super(e)}static fromAffine(e){return new vt(ui.fromAffine(e))}assertSame(e){if(!(e instanceof vt))throw Error("RistrettoPoint expected")}init(e){return new vt(e)}static fromBytes(e){tt(e,32);let{a:t,d:n}=Up,i=fi,r=(A)=>xn.create(A),o=zp(e);if(!l1(xn.toBytes(o),e)||Kr(o,i))throw Error("invalid ristretto255 encoding 1");let s=r(o*o),a=r(qr+t*s),c=r(qr-t*s),l=r(a*a),u=r(c*c),d=r(t*n*l-u),{isValid:p,value:m}=j1(r(d*u)),y=r(m*c),h=r(m*y*d),g=r((o+o)*y);if(Kr(g,i))g=r(-g);let w=r(a*h),_=r(g*w);if(!p||Kr(_,i)||w===m4)throw Error("invalid ristretto255 encoding 2");return new vt(new ui(g,w,qr,_))}static fromHex(e){return vt.fromBytes(ds(e))}toBytes(){let{X:e,Y:t,Z:n,T:i}=this.ep,r=fi,o=(h)=>xn.create(h),s=o(o(n+t)*o(n-t)),a=o(e*t),c=o(a*a),{value:l}=j1(o(s*c)),u=o(l*s),d=o(l*a),p=o(u*d*i),m;if(Kr(i*p,r)){let h=o(t*Dp),g=o(e*Dp);e=h,t=g,m=o(u*x4)}else m=d;if(Kr(e*p,r))t=o(-t);let y=o((n-t)*m);if(Kr(y,r))y=o(-y);return xn.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:n}=this.ep,{X:i,Y:r}=e.ep,o=(c)=>xn.create(c),s=o(t*r)===o(n*i),a=o(n*r)===o(t*i);return s||a}is0(){return this.equals(vt.ZERO)}}Object.freeze(vt.BASE);Object.freeze(vt.ZERO);Object.freeze(vt.prototype);Object.freeze(vt);var $4=Object.freeze({Point:vt,hashToCurve(e,t){let n=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Ap(e,n,64,Pc);return $4.deriveToCurve(i)},hashToScalar(e,t={DST:A1}){let n=Ap(e,t.DST,64,Pc);return F1.create(rr(n))},deriveToCurve(e){tt(e,64);let t=zp(e.subarray(0,32)),n=M1(t),i=zp(e.subarray(32,64)),r=M1(i);return new vt(n.add(r))}});var K1=!1,k4=!1;async function q1(e,t){if(k4)return await t();try{return await e()}catch(n){if(n instanceof ReferenceError||n instanceof DOMException&&n.name==="NotSupportedError")return await t();else throw n}}async function ml(e,t){return await q1(async()=>{let n=Bp(e)?e:await I4(e),i=await crypto.subtle.importKey("raw",O4(t),{name:"X25519"},K1,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},n,256))},()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMult(e,t)})}async function qs(e){return await q1(async()=>ml(e,pl.GuBytes),()=>{if(Bp(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return pl.scalarMultBase(e)})}var E4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function I4(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...E4,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},K1,["deriveBits"])}function Bp(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function O4(e){return e}class jp{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),T4(di(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let n=await this.s.read();if(n.done)return this.buf=di(e),null;this.buf=n.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:di(this.transcript)}}}function T4(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function di(e){let t=e.reduce((r,o)=>r+o.length,0),n=new Uint8Array(t),i=0;for(let r of e)n.set(r,i),i+=r.length;return n}function so(e,...t){return e.pipeThrough(new TransformStream({start(n){for(let i of t)n.enqueue(i)}}))}function hl(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Mp(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function H1(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function V1(e,t){let n=e.getReader(),i=[],r=0;while(r<t){let{done:c,value:l}=await n.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),r+=l.length}n.releaseLock();let o=di(i),s=o.subarray(0,t),a=so(e,o.subarray(t));return{data:s,rest:a}}class vr{args;body;constructor(e,t){this.args=e,this.body=t}}async function P4(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let n=t.split(" ");if(n.length<2||n.shift()!=="->")return{next:t};for(let o of n)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=ut.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let r=di(i);return{s:new vr(n,r)}}async function Y1(e){let t=new jp(e),n=await t.readLine();if(n!=="age-encryption.org/v1")throw Error("invalid version "+(n??"line"));let i=[];for(;;){let{s:r,next:o}=await P4(t);if(r!==void 0){i.push(r);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=ut.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:so(e,a)}}}function Zp(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let n of e){t.push("-> "+n.args.join(" ")+`
 `);for(let i=0;i<n.body.length;i+=48){let r=i+48;if(r>n.body.length)r=n.body.length;t.push(ut.encode(n.body.subarray(i,r))+`
 `)}if(n.body.length%48===0)t.push(`

package/dist/index.js CHANGED Viewed

@@ -719,7 +719,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),o}async function yB(e,t){let n=await ut(e),i=n.users.find((r)=>r.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:n.pilot,user:i}}async function bB(e){let t=await Ose(ur(Rse(),"brains-ops-watchdog-smoke-")),n=ur(t,"id_ed25519"),i=ur(t,"known_hosts");try{let r=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${r}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=Pse.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await Da(n,zse(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await Cse(n,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await Da(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:n,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(r){throw await H_(t,{recursive:!0,force:!0}),r}}async function Z_(e,t,n){return e.commandRunner("ssh",[...xB(e),`root@${e.serverIp}`,"bash","-s","--",t,n],{stdin:K_()})}async function Nse(e,t,n){return e.commandRunner("scp",[...xB(e),"-r",`root@${e.serverIp}:${t}/.`,n])}function xB(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function Dse(e){try{return await Tse(e),!0}catch{return!1}}async function Hm(e,t,n){await Promise.all([Da(ur(e,`${t}.stdout.log`),n.stdout),Da(ur(e,`${t}.stderr.log`),n.stderr)])}function zse(e){return`${e.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var mB,Pse;var Vm=se(async()=>{Ne();uB();Yn();su();await lB();mB=h.object({HCLOUD_TOKEN:h.string().min(1),KAMAL_SSH_PRIVATE_KEY:h.string().min(1)}),Pse=h.object({servers:h.array(h.object({status:h.string(),public_net:h.object({ipv4:h.object({ip:h.string().min(1)})})}))})});import{access as dT,chmod as jv,mkdir as td,readFile as mT,writeFile as pT}from"fs/promises";import{dirname as zF,join as As}from"path";import{fileURLToPath as LF}from"url";var fu={name:"@rizom/ops",version:"0.2.0-alpha.339",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};zi();Cc();var BF=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],Fv=new Set([".kamal/hooks/pre-deploy"]),UF=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),jF=LF(new URL("../templates/rover-pilot/",import.meta.url)),FF=[`service: rover
+`}var mB,Pse;var Vm=se(async()=>{Ne();uB();Yn();su();await lB();mB=h.object({HCLOUD_TOKEN:h.string().min(1),KAMAL_SSH_PRIVATE_KEY:h.string().min(1)}),Pse=h.object({servers:h.array(h.object({status:h.string(),public_net:h.object({ipv4:h.object({ip:h.string().min(1)})})}))})});import{access as dT,chmod as jv,mkdir as td,readFile as mT,writeFile as pT}from"fs/promises";import{dirname as zF,join as As}from"path";import{fileURLToPath as LF}from"url";var fu={name:"@rizom/ops",version:"0.2.0-alpha.340",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};zi();Cc();var BF=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],Fv=new Set([".kamal/hooks/pre-deploy"]),UF=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),jF=LF(new URL("../templates/rover-pilot/",import.meta.url)),FF=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 servers:

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.339",
+  "version": "0.2.0-alpha.340",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",