@rizom/ops 0.2.0-alpha.34 → 0.2.0-alpha.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -54,7 +54,7 @@ return `+str.trim()+`;
54
54
  `).join(`
55
55
  `+X),$.push(Q+"m+"+LX.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=KT()+q+" "+$[0]}function KT(){if(ND.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function DT(...$){return process.stderr.write(PX.formatWithOptions(ND.inspectOpts,...$)+`
56
56
  `)}function RT($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function HT(){return process.env.DEBUG}function OT($){$.inspectOpts={};let q=Object.keys(ND.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=ND.inspectOpts[q[J]]}LX.exports=v7()(ND);var{formatters:OD}=LX.exports;OD.o=function($){return this.inspectOpts.colors=this.useColors,PX.inspect($,this.inspectOpts).split(`
57
- `).map((q)=>q.trim()).join(" ")};OD.O=function($){return this.inspectOpts.colors=this.useColors,PX.inspect($,this.inspectOpts)}});var ZD=Y0((ex,k7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)k7.exports=zD();else k7.exports=wD()});var j6=Y0((Ip,N6)=>{var mX=Object.prototype.hasOwnProperty,O6=Object.prototype.toString,z6=Object.defineProperty,M6=Object.getOwnPropertyDescriptor,K6=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return O6.call(q)==="[object Array]"},D6=function(q){if(!q||O6.call(q)!=="[object Object]")return!1;var J=mX.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&mX.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||mX.call(q,Q)},R6=function(q,J){if(z6&&J.name==="__proto__")z6(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},H6=function(q,J){if(J==="__proto__"){if(!mX.call(q,J))return;else if(M6)return M6(q,J).value}return q[J]};N6.exports=function $(){var q,J,G,Q,X,Y,U=arguments[0],W=1,V=arguments.length,z=!1;if(typeof U==="boolean")z=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=H6(U,J),Q=H6(q,J),U!==Q){if(z&&Q&&(D6(Q)||(X=K6(Q)))){if(X)X=!1,Y=G&&K6(G)?G:[];else Y=G&&D6(G)?G:{};R6(U,{name:J,newValue:$(z,Y,Q)})}else if(typeof Q<"u")R6(U,{name:J,newValue:Q})}}return U}});import{parseArgs as bH}from"util";var yH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"}};function GY($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function kH($,q){let J=$[q];return typeof J==="string"?J:void 0}function l5($){let{values:q,positionals:J}=bH({args:$,options:yH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:GY(q,"help"),version:GY(q,"version"),dryRun:GY(q,"dry-run"),pushTo:kH(q,"push-to")}}}var q9={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.34",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as jN,mkdirSync as wN,readFileSync as hU,writeFileSync as uU}from"fs";import{dirname as ZN,join as dz}from"path";function QY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=QY($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Aq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function J9($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function G9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function D$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var xH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function mH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function hH($){for(let q=0;q<$.length;q++)$[q]=mH($[q]);return $}var XY=xH?($)=>$:hH,d5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),uH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function Q9($){if(u0($),d5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=uH[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function r5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function vG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(d5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=r5($.charCodeAt(X)),U=r5($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function pH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function YY($,q=""){if(typeof $==="string")return pH($);return u0($,void 0,q)}function UY(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function X9($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function WY($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Bq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var VY=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class zY{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Aq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),D$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),J9($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Sq=(()=>{let $=(q,J,G)=>new zY(q,J).update(G).digest();return $.create=(q,J)=>new zY(q,J),$})();function bG($,q,J){if(Aq($),J===void 0)J=new Uint8Array($.outputLen);return Sq($,J,q)}var MY=Uint8Array.of(0),i5=Uint8Array.of();function KY($,q,J,G=32){Aq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=i5;else u0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=Sq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)MY[0]=z+1,W.update(z===0?i5:V).update(J).update(MY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),D$(V,MY),Y.slice(0,G)}var yG=($,q,J,G,Q)=>KY($,bG($,q,J),G,Q);function c5($,q,J){return $&q^~$&J}function n5($,q,J){return $&q^$&J^q&J}class Y9{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=C8($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),J9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,D$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Tq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var U9=BigInt(4294967295),o5=BigInt(32);function lH($,q=!1){if(q)return{h:Number($&U9),l:Number($>>o5&U9)};return{h:Number($>>o5&U9)|0,l:Number($&U9)|0}}function a5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=lH($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var DY=($,q,J)=>$>>>J,RY=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,fG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var s5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),t5=($,q,J,G)=>q+J+G+($/4294967296|0)|0,e5=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),$W=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,qW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),JW=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var dH=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class HY extends Y9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)cq[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=cq[z-15],D=cq[z-2],K=u$(M,7)^u$(M,18)^M>>>3,N=u$(D,17)^u$(D,19)^D>>>10;cq[z]=N+cq[z-7]+K+cq[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=u$(Y,6)^u$(Y,11)^u$(Y,25),D=V+M+c5(Y,U,W)+dH[z]+cq[z]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+n5(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){D$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),D$(this.buffer)}}class GW extends HY{A=Tq[0]|0;B=Tq[1]|0;C=Tq[2]|0;D=Tq[3]|0;E=Tq[4]|0;F=Tq[5]|0;G=Tq[6]|0;H=Tq[7]|0;constructor(){super(32)}}class iH extends HY{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var QW=(()=>a5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),cH=(()=>QW[0])(),nH=(()=>QW[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends Y9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,u=FJ(_,f,1)^FJ(_,f,8)^DY(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^RY(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^kG(m,k,61)^DY(m,k,6),l=gJ(m,k,19)^fG(m,k,61)^RY(m,k,6),v=e5(F,l,oq[T-7],oq[T-16]),I=$W(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:Z}=this;for(let T=0;T<80;T++){let _=FJ(z,M,14)^FJ(z,M,18)^kG(z,M,41),f=gJ(z,M,14)^gJ(z,M,18)^fG(z,M,41),u=z&D^~z&N,F=M&K^~M&j,m=qW(Z,f,F,nH[T],oq[T]),k=JW(m,w,_,u,cH[T],nq[T]),y=m|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^fG(J,G,34)^fG(J,G,39),I=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,Z=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Gq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let A=s5(y,v,C);J=t5(A,k,l,I),G=A|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Gq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Gq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Gq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Gq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Gq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:Z}=Gq(this.Hh|0,this.Hl|0,w|0,Z|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,Z)}roundClean(){D$(nq,oq)}destroy(){this.destroyed=!0,D$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class XW extends xG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class oH extends xG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class aH extends xG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class sH extends xG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=WY(()=>new GW,VY(1));var W9=WY(()=>new XW,VY(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function D9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function jY($){if(!D9($))throw Error("Uint8Array expected")}function zW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function MW($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function hG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function z9($){if(!Array.isArray($))throw Error("array expected")}function M9($,q){if(!zW(!0,q))throw Error(`${$}: array of strings expected`)}function wY($,q){if(!zW(!1,q))throw Error(`${$}: array of numbers expected`)}function E$(...$){let q=(X)=>X,J=(X,Y)=>(U)=>X(Y(U)),G=$.map((X)=>X.encode).reduceRight(J,q),Q=$.map((X)=>X.decode).reduce(J,q);return{encode:G,decode:Q}}function P$($){let q=typeof $==="string"?$.split(""):$,J=q.length;M9("alphabet",q);let G=new Map(q.map((Q,X)=>[Q,X]));return{encode:(Q)=>{return z9(Q),Q.map((X)=>{if(!Number.isSafeInteger(X)||X<0||X>=J)throw Error(`alphabet.encode: digit index outside alphabet "${X}". Allowed: ${$}`);return q[X]})},decode:(Q)=>{return z9(Q),Q.map((X)=>{aq("alphabet.decode",X);let Y=G.get(X);if(Y===void 0)throw Error(`Unknown letter: "${X}". Allowed: ${$}`);return Y})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return M9("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function R9($,q="="){return hG($),aq("padding",q),{encode(J){M9("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){M9("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function KW($){return MW($),{encode:(q)=>q,decode:(q)=>$(q)}}function YW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(z9($),!$.length)return[];let G=0,Q=[],X=Array.from($,(U)=>{if(hG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),Y=X.length;while(!0){let U=0,W=!0;for(let V=G;V<Y;V++){let z=X[V],M=q*U,D=M+z;if(!Number.isSafeInteger(D)||M/q!==U||D-z!==M)throw Error("convertRadix: carry overflow");let K=D/J;U=D%J;let N=Math.floor(K);if(X[V]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var DW=($,q)=>q===0?$:DW(q,$%q),K9=($,q)=>$+(q-DW($,q)),V9=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function OY($,q,J,G){if(z9($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(K9(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${K9(q,J)}`);let Q=0,X=0,Y=V9[q],U=V9[J]-1,W=[];for(let V of $){if(hG(V),V>=Y)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,X+q>32)throw Error(`convertRadix2: carry overflow pos=${X} from=${q}`);X+=q;for(;X>=J;X-=J)W.push((Q>>X-J&U)>>>0);let z=V9[X];if(z===void 0)throw Error("invalid carry");Q&=z-1}if(Q=Q<<J-X&U,!G&&X>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&X>0)W.push(Q>>>0);return W}function tH($){hG($);let q=256;return{encode:(J)=>{if(!D9(J))throw Error("radix.encode input should be Uint8Array");return YW(Array.from(J),q,$)},decode:(J)=>{return wY("radix.decode",J),Uint8Array.from(YW(J,$,q))}}}function b$($,q=!1){if(hG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(K9(8,$)>32||K9($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!D9(J))throw Error("radix2.encode input should be Uint8Array");return OY(Array.from(J),8,$,!q)},decode:(J)=>{return wY("radix2.decode",J),Uint8Array.from(OY(J,$,8,q))}}}function UW($){return MW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var R3=E$(b$(4),P$("0123456789ABCDEF"),L$("")),H3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),R9(5),L$("")),O3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),N3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),R9(5),L$("")),j3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),w3=E$(b$(5),P$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),KW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),RW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),HW=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},ZY=RW?{encode($){return jY($),$.toBase64()},decode($){return HW($,!1)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),R9(6),L$("")),p$=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),Z3=RW?{encode($){return jY($),$.toBase64({alphabet:"base64url"})},decode($){return HW($,!0)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),R9(6),L$("")),A3=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),AY=($)=>E$(tH(58),P$($),L$("")),B3=AY("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),S3=AY("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),T3=AY("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var NY=E$(P$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),WW=[996825010,642813549,513874426,1027748829,705979059];function mG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<WW.length;G++)if((q>>G&1)===1)J^=WW[G];return J}function VW($,q,J=1){let G=$.length,Q=1;for(let X=0;X<G;X++){let Y=$.charCodeAt(X);if(Y<33||Y>126)throw Error(`Invalid prefix (${$})`);Q=mG(Q)^Y>>5}Q=mG(Q);for(let X=0;X<G;X++)Q=mG(Q)^$.charCodeAt(X)&31;for(let X of q)Q=mG(Q)^X;for(let X=0;X<6;X++)Q=mG(Q);return Q^=J,NY.encode(OY([Q%V9[30]],30,5,!1))}function OW($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,X=UW(G);function Y(M,D,K=90){if(aq("bech32.encode prefix",M),D9(D))D=Array.from(D);wY("bech32.encode",D);let N=M.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+D.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=M.toLowerCase(),Z=VW(w,D,q);return`${w}1${NY.encode(D)}${Z}`}function U(M,D=90){aq("bech32.decode input",M);let K=M.length;if(K<8||D!==!1&&K>D)throw TypeError(`invalid string length: ${K} (${M}). Expected (8..${D})`);let N=M.toLowerCase();if(M!==N&&M!==M.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),Z=N.slice(j+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=NY.decode(Z).slice(0,-6),_=VW(w,T,q);if(!Z.endsWith(_))throw Error(`Invalid checksum in ${M}: expected "${_}"`);return{prefix:w,words:T}}let W=UW(U);function V(M){let{prefix:D,words:K}=U(M,!1);return{prefix:D,words:K,bytes:G(K)}}function z(M,D){return Y(M,Q(D))}return{encode:Y,decode:U,encodeFromBytes:z,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:X,toWords:Q}}var l$=OW("bech32"),C3=OW("bech32m");var eH=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),$4={encode($){return jY($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},I3=eH?$4:E$(b$(4),P$("0123456789abcdef"),L$(""),KW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function J4($,q,J,G){Aq($);let Q=X9({dkLen:32,asyncTick:10},G),{c:X,dkLen:Y,asyncTick:U}=Q;if(L0(X,"c"),L0(Y,"dkLen"),L0(U,"asyncTick"),X<1)throw Error("iterations (c) must be >= 1");if(Y<1)throw Error('"dkLen" must be >= 1');if(Y>4294967295*$.outputLen)throw Error("derived key too long");let W=YY(q,"password"),V=YY(J,"salt"),z=new Uint8Array(Y),M=Sq.create($,W),D=M._cloneInto().update(V);return{c:X,dkLen:Y,asyncTick:U,DK:z,PRF:M,PRFSalt:D}}function G4($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return D$(Q),J}function BY($,q,J,G){let{c:Q,dkLen:X,DK:Y,PRF:U,PRFSalt:W}=J4($,q,J,G),V,z=new Uint8Array(4),M=C8(z),D=new Uint8Array(U.outputLen);for(let K=1,N=0;N<X;K++,N+=U.outputLen){let j=Y.subarray(N,N+U.outputLen);M.setInt32(0,K,!1),(V=W._cloneInto(V)).update(z).digestInto(D),j.set(D.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(V).update(D).digestInto(D);for(let Z=0;Z<j.length;Z++)j[Z]^=D[Z]}}return G4(U,W,Y,V,D)}function NW($,q,J,G,Q,X){let Y=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],z=$[q++]^J[G++],M=$[q++]^J[G++],D=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],u=$[q++]^J[G++],F=Y,m=U,k=W,y=V,l=z,v=M,I=D,C=K,A=N,S=j,P=w,g=Z,L=T,b=_,O=f,x=u;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),A^=N0(l+F|0,9),L^=N0(A+l|0,13),F^=N0(L+A|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(P+I|0,7),k^=N0(O+P|0,9),I^=N0(k+O|0,13),P^=N0(I+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),I^=N0(v+l|0,7),C^=N0(I+v|0,9),l^=N0(C+I|0,13),v^=N0(l+C|0,18),g^=N0(P+S|0,7),A^=N0(g+P|0,9),S^=N0(A+g|0,13),P^=N0(S+A|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[X++]=Y+F|0,Q[X++]=U+m|0,Q[X++]=W+k|0,Q[X++]=V+y|0,Q[X++]=z+l|0,Q[X++]=M+v|0,Q[X++]=D+I|0,Q[X++]=K+C|0,Q[X++]=N+A|0,Q[X++]=j+S|0,Q[X++]=w+P|0,Q[X++]=Z+g|0,Q[X++]=T+L|0,Q[X++]=_+b|0,Q[X++]=f+O|0,Q[X++]=u+x|0}function SY($,q,J,G,Q){let X=G+0,Y=G+16*Q;for(let U=0;U<16;U++)J[Y+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,X+=16,q+=16){if(NW(J,Y,$,q,J,X),U>0)Y+=16;NW(J,X,$,q+=16,J,Y)}}function Q4($,q,J){let G=X9({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:X,p:Y,dkLen:U,asyncTick:W,maxmem:V,onProgress:z}=G;if(L0(Q,"N"),L0(X,"r"),L0(Y,"p"),L0(U,"dkLen"),L0(W,"asyncTick"),L0(V,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let M=128*X,D=M/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(Y<1||Y>(K-1)*32/M)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=M*(Q+Y+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let j=BY(r0,$,q,{c:1,dkLen:M*Y}),w=G9(j),Z=G9(new Uint8Array(M*Q)),T=G9(new Uint8Array(M)),_=()=>{};if(z){let f=2*Q*Y,u=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,z&&(!(F%u)||F===f))z(F/f)}}return{N:Q,r:X,p:Y,dkLen:U,blockSize32:D,V:Z,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:W}}function X4($,q,J,G,Q){let X=BY(r0,$,J,{c:1,dkLen:q});return D$(J,G,Q),X}function jW($,q,J){let{N:G,r:Q,p:X,dkLen:Y,blockSize32:U,V:W,B32:V,B:z,tmp:M,blockMixCb:D}=Q4($,q,J);XY(V);for(let K=0;K<X;K++){let N=U*K;for(let j=0;j<U;j++)W[j]=V[N+j];for(let j=0,w=0;j<G-1;j++)SY(W,w,W,w+=U,Q),D();SY(W,(G-1)*U,V,N,Q),D();for(let j=0;j<G;j++){let w=(V[N+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)M[Z]=V[N+Z]^W[w*U+Z];SY(M,0,V,N,Q),D()}}return XY(V),X4($,Y,z,W,M)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Y4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function H9($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=Y4($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function TY($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function wW($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!E8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function U4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),W4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var V4=($)=>{for(let q=0;q<$.length;q++)$[q]=W4($[q]);return $},Iq=_J?($)=>$:V4;function ZW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function AW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function BW($,q,J){let G=q,Q=J||(()=>[]),X=(U,W)=>G(W,...Q(U)).update(U).digest(),Y=G(new Uint8Array($),...Q(new Uint8Array(0)));return X.outputLen=Y.outputLen,X.blockLen=Y.blockLen,X.create=(U,...W)=>G(U,...W),X}var SW=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let z=Q[0];b0(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let X=$.tagLength;if(X&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let Y=q(G,...Q),U=(z,M)=>{if(M!==void 0){if(z!==2)throw Error("cipher output not supported");b0(M,void 0,"output")}},W=!1;return{encrypt(z,M){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,b0(z),U(Y.encrypt.length,M),Y.encrypt(z,M)},decrypt(z,M){if(b0(z),X&&z.length<X)throw Error('"ciphertext" expected length bigger than tagLength='+X);return U(Y.decrypt.length,M),Y.decrypt(z,M)}}}return Object.assign(J,$),J};function uG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!E8(q))throw Error("invalid output, must be aligned");return q}function TW($,q,J){I8($),I8(q),H9(J);let G=new Uint8Array(16),Q=U4(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function E8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b0($))}var IW=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),z4=(()=>Iq(Qq(IW("expand 16-byte k"))))(),M4=(()=>Iq(Qq(IW("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var pG=64,K4=16,CY=(()=>4294967295)(),CW=Uint32Array.of();function D4($,q,J,G,Q,X,Y,U){let W=Q.length,V=new Uint8Array(pG),z=Qq(V),M=_J&&E8(Q)&&E8(X),D=M?Qq(Q):CW,K=M?Qq(X):CW;if(!_J){for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Iq(z),Y>=CY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);for(let w=0,Z;w<j;w++)Z=N+w,X[Z]=Q[Z]^V[w];N+=j}return}for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Y>=CY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);if(M&&j===pG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<K4;Z++)T=w+Z,K[T]=D[T]^z[Z];N+=pG;continue}for(let w=0,Z;w<j;w++)Z=N+w,X[Z]=Q[Z]^V[w];N+=j}}function EW($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:X,rounds:Y}=ZW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(Y),H9(X),H9(J),(U,W,V,z,M=0)=>{b0(U,void 0,"key"),b0(W,void 0,"nonce"),b0(V,void 0,"data");let D=V.length;if(z=uG(D,z,!1),I8(M),M<0||M>=CY)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=P8(U)),w=M4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=z4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!E8(W))K.push(W=P8(W));let Z=Qq(j);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=W.subarray(0,16);if(_J)G(w,Z,Qq(f),Z);else{let u=Iq(Uint32Array.from(w));G(u,Z,Qq(f),Z),r$(u),Iq(Z)}W=W.subarray(16)}else if(!_J)Iq(Z);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(W,X?0:12-W.length),W=f,K.push(W)}let _=Iq(Qq(W));try{return D4($,w,Z,_,V,z,M,Y),z}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class PW{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),X=d0($,8),Y=d0($,10),U=d0($,12),W=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|X<<12)&255,this.r[5]=X>>>1&8190,this.r[6]=(X>>>14|Y<<2)&8191,this.r[7]=(Y>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=d0($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:X}=this,Y=X[0],U=X[1],W=X[2],V=X[3],z=X[4],M=X[5],D=X[6],K=X[7],N=X[8],j=X[9],w=d0($,q+0),Z=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),u=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),A=Q[6]+((f>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*Y+y*(5*j)+l*(5*N)+v*(5*K)+I*(5*D);L=b>>>13,b&=8191,b+=C*(5*M)+A*(5*z)+S*(5*V)+P*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*Y+l*(5*j)+v*(5*N)+I*(5*K);L=O>>>13,O&=8191,O+=C*(5*D)+A*(5*M)+S*(5*z)+P*(5*V)+g*(5*W),L+=O>>>13,O&=8191;let x=L+k*W+y*U+l*Y+v*(5*j)+I*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+A*(5*D)+S*(5*M)+P*(5*z)+g*(5*V),L+=x>>>13,x&=8191;let d=L+k*V+y*W+l*U+v*Y+I*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+A*(5*K)+S*(5*D)+P*(5*M)+g*(5*z),L+=d>>>13,d&=8191;let B=L+k*z+y*V+l*W+v*U+I*Y;L=B>>>13,B&=8191,B+=C*(5*j)+A*(5*N)+S*(5*K)+P*(5*D)+g*(5*M),L+=B>>>13,B&=8191;let a=L+k*M+y*z+l*V+v*W+I*U;L=a>>>13,a&=8191,a+=C*Y+A*(5*j)+S*(5*N)+P*(5*K)+g*(5*D),L+=a>>>13,a&=8191;let q0=L+k*D+y*M+l*z+v*V+I*W;L=q0>>>13,q0&=8191,q0+=C*U+A*Y+S*(5*j)+P*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let X0=L+k*K+y*D+l*M+v*z+I*V;L=X0>>>13,X0&=8191,X0+=C*W+A*U+S*Y+P*(5*j)+g*(5*N),L+=X0>>>13,X0&=8191;let G0=L+k*N+y*K+l*D+v*M+I*z;L=G0>>>13,G0&=8191,G0+=C*V+A*W+S*U+P*Y+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*D+I*M;L=t>>>13,t&=8191,t+=C*z+A*V+S*W+P*U+g*Y,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=X0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let Y=2;Y<10;Y++)$[Y]+=G,G=$[Y]>>>13,$[Y]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let Y=1;Y<10;Y++)J[Y]=$[Y]+G,G=J[Y]>>>13,J[Y]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let Y=0;Y<10;Y++)J[Y]&=Q;Q=~Q;for(let Y=0;Y<10;Y++)$[Y]=$[Y]&Q|J[Y];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let X=$[0]+q[0];$[0]=X&65535;for(let Y=1;Y<8;Y++)X=($[Y]+q[Y]|0)+(X>>>16)|0,$[Y]=X&65535;r$(J)}update($){TY(this),b0($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(J-this.pos,G-Q);if(X===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){TY(this),wW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let X=0;X<8;X++)$[Q++]=J[X]>>>0,$[Q++]=J[X]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var LW=BW(32,($)=>new PW($));function R4($,q,J,G,Q,X=20){let Y=$[0],U=$[1],W=$[2],V=$[3],z=q[0],M=q[1],D=q[2],K=q[3],N=q[4],j=q[5],w=q[6],Z=q[7],T=Q,_=J[0],f=J[1],u=J[2],F=Y,m=U,k=W,y=V,l=z,v=M,I=D,C=K,A=N,S=j,P=w,g=Z,L=T,b=_,O=f,x=u;for(let B=0;B<X;B+=2)F=F+l|0,L=j0(L^F,16),A=A+L|0,l=j0(l^A,12),F=F+l|0,L=j0(L^F,8),A=A+L|0,l=j0(l^A,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+I|0,O=j0(O^k,16),P=P+O|0,I=j0(I^P,12),k=k+I|0,O=j0(O^k,8),P=P+O|0,I=j0(I^P,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),P=P+x|0,v=j0(v^P,12),F=F+v|0,x=j0(x^F,8),P=P+x|0,v=j0(v^P,7),m=m+I|0,L=j0(L^m,16),g=g+L|0,I=j0(I^g,12),m=m+I|0,L=j0(L^m,8),g=g+L|0,I=j0(I^g,7),k=k+C|0,b=j0(b^k,16),A=A+b|0,C=j0(C^A,12),k=k+C|0,b=j0(b^k,8),A=A+b|0,C=j0(C^A,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=Y+F|0,G[d++]=U+m|0,G[d++]=W+k|0,G[d++]=V+y|0,G[d++]=z+l|0,G[d++]=M+v|0,G[d++]=D+I|0,G[d++]=K+C|0,G[d++]=N+A|0,G[d++]=j+S|0,G[d++]=w+P|0,G[d++]=Z+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=u+x|0}var H4=EW(R4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var O4=new Uint8Array(16),FW=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(O4.subarray(J))},N4=new Uint8Array(32);function gW($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let X=$(q,J,N4),Y=TW(G.length,Q?Q.length:0,!0),U=LW.create(X);if(Q)FW(U,Q);FW(U,G),U.update(Y);let W=U.digest();return r$(X,Y),W}var j4=($)=>(q,J,G)=>{return{encrypt(X,Y){let U=X.length;Y=uG(U+16,Y,!1),Y.set(X);let W=Y.subarray(0,-16);$(q,J,W,W,1);let V=gW($,q,J,W,G);return Y.set(V,U),r$(V),Y},decrypt(X,Y){Y=uG(X.length-16,Y,!1);let U=X.subarray(0,-16),W=X.subarray(-16),V=gW($,q,J,U,G);if(!AW(W,V))throw r$(V),Error("invalid tag");return Y.set(X.subarray(0,-16)),$(q,J,Y,Y,1),r$(V),Y}}},sq=SW({blockSize:64,nonceLength:12,tagLength:16},j4(H4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(Y+"expected Uint8Array"+U+", got "+W)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Pq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function O9($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function N9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function A$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function j9($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var w4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Z4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function A4($){for(let q=0;q<$.length;q++)$[q]=Z4($[q]);return $}var IY=w4?($)=>$:A4,vW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),B4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),vW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=B4[$[J]];return q}var Eq={_0:48,_9:57,A:65,F:70,a:97,f:102};function _W($){if($>=Eq._0&&$<=Eq._9)return $-Eq._0;if($>=Eq.A&&$<=Eq.F)return $-(Eq.A-10);if($>=Eq.a&&$<=Eq.f)return $-(Eq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(vW)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=_W($.charCodeAt(X)),U=_W($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function F8($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PY=BigInt(0),EY=BigInt(1);function lG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function bW($){if(typeof $==="bigint"){if(!w9($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function rG($){let q=bW($).toString(16);return q.length&1?"0"+q:q}function yW($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?PY:BigInt("0x"+$)}function $J($){return yW(vJ($))}function qJ($){return yW(vJ(Z9(Q0($)).reverse()))}function g8($,q){m0(q),$=bW($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function dG($,q){return g8($,q).reverse()}function Z9($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var w9=($)=>typeof $==="bigint"&&PY<=$;function S4($,q,J){return w9($)&&w9(q)&&w9(J)&&q<=$&&$<J}function iG($,q,J,G){if(!S4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function LY($){let q;for(q=0;$>PY;$>>=EY,q+=1);return q}var cG=($)=>(EY<<BigInt($))-EY;function kW($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,g0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,Z=[];while(w<q){W=D();let T=W.slice();Z.push(T),w+=W.length}return g0(...Z)};return(w,Z)=>{M(),K(w);let T=void 0;while(!(T=Z(N())))K();return M(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(X,Y,U){let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw Error(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}function FY($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let X=$(J,...G);return q.set(J,X),X}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),mW=BigInt(3),hW=BigInt(4),uW=BigInt(5),T4=BigInt(7),pW=BigInt(8),C4=BigInt(9),lW=BigInt(16);function R$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function fW($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=R$($,q),G=q,Q=H$,X=q$,Y=q$,U=H$;while(J!==H$){let V=G/J,z=G%J,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==q$)throw Error("invert: does not exist");return R$(Q,q)}function gY($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function rW($,q){let J=($.ORDER+q$)/hW,G=$.pow(q,J);return gY($,G,q),G}function I4($,q){let J=($.ORDER-uW)/pW,G=$.mul(q,kJ),Q=$.pow(G,J),X=$.mul(q,Q),Y=$.mul($.mul(X,kJ),Q),U=$.mul(X,$.sub(Y,$.ONE));return gY($,U,q),U}function E4($){let q=A9($),J=dW($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+T4)/lW;return(U,W)=>{let V=U.pow(W,Y),z=U.mul(V,G),M=U.mul(V,Q),D=U.mul(V,X),K=U.eql(U.sqr(z),W),N=U.eql(U.sqr(M),W);V=U.cmov(V,z,K),z=U.cmov(D,M,N);let j=U.eql(U.sqr(z),W),w=U.cmov(V,z,j);return gY(U,w,W),w}}function dW($){if($<mW)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=A9($);while(xW(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return rW;let X=Q.pow(G,q),Y=(q+q$)/kJ;return function(W,V){if(W.is0(V))return V;if(xW(W,V)!==1)throw Error("Cannot find square root");let z=J,M=W.mul(W.ONE,X),D=W.pow(V,q),K=W.pow(V,Y);while(!W.eql(D,W.ONE)){if(W.is0(D))return W.ZERO;let N=1,j=W.sqr(D);while(!W.eql(j,W.ONE))if(N++,j=W.sqr(j),N===z)throw Error("Cannot find square root");let w=q$<<BigInt(z-N-1),Z=W.pow(M,w);z=N,M=W.sqr(Z),D=W.mul(D,M),K=W.mul(K,Z)}return K}}function P4($){if($%hW===mW)return rW;if($%pW===uW)return I4;if($%lW===C4)return E4($);return dW($)}var L4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function _Y($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=L4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function F4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function nG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((Y,U,W)=>{if($.is0(U))return Y;return G[W]=Y,$.mul(Y,U)},$.ONE),X=$.inv(Q);return q.reduceRight((Y,U,W)=>{if($.is0(U))return Y;return G[W]=$.mul(Y,G[W]),$.mul(Y,U)},X),G}function xW($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),X=$.eql(G,$.ZERO),Y=$.eql(G,$.neg($.ONE));if(!Q&&!X&&!Y)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function g4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class iW{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=g4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return R$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R$($*$,this.ORDER)}add($,q){return R$($+q,this.ORDER)}sub($,q){return R$($-q,this.ORDER)}mul($,q){return R$($*q,this.ORDER)}pow($,q){return F4(this,$,q)}div($,q){return R$($*fW(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return fW($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=P4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?dG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(Y)U=R$(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return nG(this,$)}cmov($,q,J){return J?q:$}}function A9($,q={}){return new iW($,q)}function cW($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function vY($){let q=cW($);return q+Math.ceil(q/2)}function nW($,q,J=!1){Q0($);let G=$.length,Q=cW(q),X=vY(q);if(G<16||G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?qJ($):$J($),U=R$(Y,q-q$)+q$;return J?dG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function oG($,q){let J=q.negate();return $?J:q}function fY($,q){let J=nG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function tW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function bY($,q){tW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=cG($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function oW($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=fJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var yY=new WeakMap,eW=new WeakMap;function kY($){return eW.get($)||1}function aW($){if($!==_8)throw Error("invalid wNAF")}class xY{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=bY(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=bY($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=oW(J,Y,X);if(J=U,V)Q=Q.add(oG(M,q[D]));else G=G.add(oG(z,q[W]))}return aW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=bY($,this.bits);for(let X=0;X<Q.windows;X++){if(J===_8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=oW(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return aW(J),G}getPrecomputes($,q,J){let G=yY.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);yY.set(q,G)}}return G}cached($,q,J){let G=kY($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=kY($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){tW(q,this.bits),eW.set($,q),yY.delete($)}hasCache($){return kY($)!==1}}function $V($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>_8||G>_8){if(J&fJ)X=X.add(Q);if(G&fJ)Y=Y.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:X,p2:Y}}function sW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return _Y(q),q}else return A9($,{isLE:J})}function qV($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>_8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=sW(q.p,J.Fp,G),X=sW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function B9($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aG=BigInt(0),v8=BigInt(1),S9=BigInt(2);function _4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function JV($){let q=_4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y||tq,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?S9**BigInt(254):S9**BigInt(447),N=U?BigInt(8)*S9**BigInt(251)-v8:BigInt(4)*S9**BigInt(445)-v8,j=K+N+v8,w=(A)=>R$(A,J),Z=T(M);function T(A){return dG(w(A),z)}function _(A){let S=Z9(Q0(A,z,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(A){return qJ(Q(Z9(Q0(A,z,"scalar"))))}function u(A,S){let P=l(_(S),f(A));if(P===aG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let m=F,k=u;function y(A,S,P){let g=w(A*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(A,S){iG("u",A,aG,J),iG("scalar",S,K,j);let P=S,g=A,L=v8,b=aG,O=A,x=v8,d=aG;for(let a=BigInt(V-1);a>=aG;a--){let q0=P>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},I=(A=W(z))=>{return Q0(A,v.seed,"seed"),A},C={randomSecretKey:I};return Object.freeze({keygen:B9(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:Z.slice(),lengths:v})}class mY{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),A$(G)}update($){return Pq(this),this.iHash.update($),this}digestInto($){Pq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new mY($,q).update(J).digest();b8.create=($,q)=>new mY($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GV=($,q)=>($+($>=0?q:-q)/XV)/q;function v4($,q,J){let[[G,Q],[X,Y]]=q,U=GV(Y*$,J),W=GV(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Lq,D=z<Lq;if(M)V=-V;if(D)z=-z;let K=cG(Math.ceil(LY(J)/2))+y8;if(V<Lq||V>=K||z<Lq||z>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:M,k1:V,k2neg:D,k2:z}}function uY($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function hY($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(lG(J.lowS,"lowS"),lG(J.prehash,"prehash"),J.format!==void 0)uY(J.format);return J}class QV extends Error{constructor($=""){super($)}}var GJ={Err:QV,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=rG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?rG(Q.length/2|128):"";return rG($)+X+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=GJ;if($<Lq)throw new q("integer: negative integers are not allowed");let J=rG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}},Lq=BigInt(0),y8=BigInt(1),XV=BigInt(2),T9=BigInt(3),b4=BigInt(4);function pY($,q={}){let J=qV("weierstrass",$,q),{Fp:G,Fn:Q}=J,X=J.CURVE,{h:Y,n:U}=X;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=UV(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function M(I,C,A){let{x:S,y:P}=C.toAffine(),g=G.toBytes(S);if(lG(A,"isCompressed"),A){z();let L=!G.isOdd(P);return g0(YV(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(P))}function D(I){Q0(I,void 0,"Point");let{publicKey:C,publicKeyUncompressed:A}=V,S=I.length,P=I[0],g=I.subarray(1);if(S===C&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}z();let x=G.isOdd(O);if((P&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${A}`)}let K=q.toBytes||M,N=q.fromBytes||D;function j(I){let C=G.sqr(I),A=G.mul(C,I);return G.add(G.add(A,G.mul(I,X.a)),X.b)}function w(I,C){let A=G.sqr(C),S=j(I);return G.eql(A,S)}if(!w(X.Gx,X.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(X.a,T9),b4),T=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function _(I,C,A=!1){if(!G.isValid(C)||A&&G.is0(C))throw Error(`bad point coordinate ${I}`);return C}function f(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!W||!W.basises)throw Error("no endo");return v4(I,W.basises,Q.ORDER)}let F=FY((I,C)=>{let{X:A,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:A,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(A,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=FY((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:C,y:A}=I.toAffine();if(!G.isValid(C)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!w(C,A))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(I,C,A,S,P){return A=new y(G.mul(A.X,I),A.Y,A.Z),C=oG(S,C),A=oG(P,A),C.add(A)}class y{static BASE=new y(X.Gx,X.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,C,A){this.X=_("x",I),this.Y=_("y",C,!0),this.Z=_("z",A),Object.freeze(this)}static CURVE(){return X}static fromAffine(I){let{x:C,y:A}=I||{};if(!I||!G.isValid(C)||!G.isValid(A))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(A))return y.ZERO;return new y(C,A,G.ONE)}static fromBytes(I){let C=y.fromAffine(N(Q0(I,void 0,"point")));return C.assertValidity(),C}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,C=!0){if(v.createCache(this,I),!C)this.multiply(T9);return this}assertValidity(){m(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){f(I);let{X:C,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(C,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:C}=X,A=G.mul(C,T9),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(A,O),B=G.mul(I,B),a=G.sub(x,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(P,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){f(I);let{X:C,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=X.a,B=G.mul(X.b,T9),a=G.mul(C,P),q0=G.mul(A,g),X0=G.mul(S,L),G0=G.add(C,A),t=G.add(P,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(P,L);return t=G.mul(t,O0),O0=G.add(a,X0),t=G.sub(t,O0),O0=G.add(A,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,X0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,X0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),X0=G.mul(d,X0),t=G.mul(B,t),q0=G.add(q0,X0),X0=G.sub(a,X0),X0=G.mul(d,X0),t=G.add(t,X0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:C}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let A,S,P=(g)=>v.cached(this,g,(L)=>fY(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:x,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),A=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=P(I);A=g,S=L}return fY(y,[A,S])[0]}multiplyUnsafe(I){let{endo:C}=q,A=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Lq||A.is0())return y.ZERO;if(I===y8)return A;if(v.hasCache(this))return this.multiply(I);if(C){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=$V(y,A,P,L);return k(C.beta,b,O,S,g)}else return v.unsafe(A,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(Y===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(Y===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(Y)}isSmallOrder(){return this.multiplyUnsafe(Y).is0()}toBytes(I=!0){return lG(I,"isCompressed"),this.assertValidity(),K(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new xY(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function YV($){return Uint8Array.of($?2:3)}function UV($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function y4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(UV($.Fp,J),{seed:vY(J.ORDER)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let Z=K.length;if(N===!0&&Z!==j)return!1;if(N===!1&&Z!==w)return!1;return!!$.fromBytes(K)}catch(Z){return!1}}function U(K=G(Q.seed)){return nW(Q0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let Z=Q0(K,void 0,"key").length;return Z===j||Z===w}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=B9(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function lY($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((A,S)=>b8(q,A,S)),{Fp:X,Fn:Y}=$,{ORDER:U,BITS:W}=Y,{keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K}=y4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*XV<X.ORDER;function w(A){let S=U>>y8;return A>S}function Z(A,S){if(!Y.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(A,S){uY(S);let P=K.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q0(A,g)}class f{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=N.format){_(A,S);let P;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(A));return new f(O,x)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=K.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new f(Y.fromBytes(L),Y.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(bJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new f(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!X.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=X.toBytes(L),O=$.fromBytes(g0(YV((g&1)===0),b)),x=Y.inv(L),d=F(Q0(A,void 0,"msgHash")),B=Y.create(-d*x),a=Y.create(P*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(A=N.format){if(uY(A),A==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=Y.toBytes(S),L=Y.toBytes(P);if(A==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(A){return vJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-W;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return Y.create(u(S))},m=cG(W);function k(A){return iG("num < 2^"+W,A,Lq,m),Y.toBytes(A)}function y(A,S){return Q0(A,void 0,"message"),S?Q0(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=hY(P,N);A=y(A,L);let O=F(A),x=Y.fromBytes(S);if(!Y.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let X0=b===!0?G(K.secretKey):b;d.push(Q0(X0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(X0){let G0=u(X0);if(!Y.isValidNot0(G0))return;let t=Y.inv(G0),O0=$.BASE.multiply(G0).toAffine(),Z0=Y.create(O0.x);if(Z0===Lq)return;let I0=Y.create(t*Y.create(a+Z0*x));if(I0===Lq)return;let x0=(O0.x===Z0?0:2)|Number(O0.y&y8),K$=I0;if(g&&w(I0))K$=Y.neg(I0),x0^=1;return new f(Z0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return kW(q.outputLen,Y.BYTES,Q)(g,L).toBytes(P.format)}function I(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=hY(g,N);if(P=Q0(P,void 0,"publicKey"),S=y(S,b),!L8(A)){let x=A instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(A,O);try{let x=f.fromBytes(A,O),d=$.fromBytes(P);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),X0=Y.inv(a),G0=Y.create(q0*X0),t=Y.create(B*X0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return Y.create(O0.x)===B}catch(x){return!1}}function C(A,S,P={}){let{prehash:g}=hY(P,N);return S=y(S,g),f.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K,Point:$,sign:v,verify:I,recoverPublicKey:C,Signature:f,hash:q})}function WV($,q,J){return $&q^~$&J}function VV($,q,J){return $&q^$&J^q&J}class C9{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=j9(this.buffer)}update($){Pq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=j9($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Pq(this),O9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,A$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=j9($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Fq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),gq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var I9=BigInt(4294967295),zV=BigInt(32);function k4($,q=!1){if(q)return{h:Number($&I9),l:Number($>>zV&I9)};return{h:Number($>>zV&I9)|0,l:Number($&I9)|0}}function E9($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=k4($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var rY=($,q,J)=>$>>>J,dY=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,sG=($,q,J)=>$<<64-J|q>>>J-32,tG=($,q,J)=>$>>>J-32|q<<64-J;var MV=($,q,J)=>$<<J|q>>>32-J,KV=($,q,J)=>q<<J|$>>>32-J,DV=($,q,J)=>q<<J-32|$>>>64-J,RV=($,q,J)=>$<<J-32|q>>>64-J;function Xq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var HV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),OV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,NV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),jV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,wV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),ZV=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var x4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class iY extends C9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)QJ[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=QJ[z-15],D=QJ[z-2],K=d$(M,7)^d$(M,18)^M>>>3,N=d$(D,17)^d$(D,19)^D>>>10;QJ[z]=N+QJ[z-7]+K+QJ[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=d$(Y,6)^d$(Y,11)^d$(Y,25),D=V+M+WV(Y,U,W)+x4[z]+QJ[z]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+VV(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){A$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),A$(this.buffer)}}class AV extends iY{A=Fq[0]|0;B=Fq[1]|0;C=Fq[2]|0;D=Fq[3]|0;E=Fq[4]|0;F=Fq[5]|0;G=Fq[6]|0;H=Fq[7]|0;constructor(){super(32)}}class m4 extends iY{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(28)}}var BV=(()=>E9(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),h4=(()=>BV[0])(),u4=(()=>BV[1])(),XJ=new Uint32Array(80),YJ=new Uint32Array(80);class eG extends C9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)XJ[T]=$.getUint32(q),YJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=XJ[T-15]|0,f=YJ[T-15]|0,u=xJ(_,f,1)^xJ(_,f,8)^rY(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^dY(_,f,7),m=XJ[T-2]|0,k=YJ[T-2]|0,y=xJ(m,k,19)^sG(m,k,61)^rY(m,k,6),l=mJ(m,k,19)^tG(m,k,61)^dY(m,k,6),v=NV(F,l,YJ[T-7],YJ[T-16]),I=jV(v,u,y,XJ[T-7],XJ[T-16]);XJ[T]=I|0,YJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:Z}=this;for(let T=0;T<80;T++){let _=xJ(z,M,14)^xJ(z,M,18)^sG(z,M,41),f=mJ(z,M,14)^mJ(z,M,18)^tG(z,M,41),u=z&D^~z&N,F=M&K^~M&j,m=wV(Z,f,F,u4[T],YJ[T]),k=ZV(m,w,_,u,h4[T],XJ[T]),y=m|0,l=xJ(J,G,28)^sG(J,G,34)^sG(J,G,39),v=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),I=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,Z=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Xq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let A=HV(y,v,C);J=OV(A,k,l,I),G=A|0}({h:J,l:G}=Xq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Xq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Xq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Xq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Xq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Xq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Xq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:Z}=Xq(this.Hh|0,this.Hl|0,w|0,Z|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,Z)}roundClean(){A$(XJ,YJ)}destroy(){A$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class p4 extends eG{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class SV extends eG{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class l4 extends eG{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class r4 extends eG{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var P9=F8(()=>new AV,eq(1));var TV=F8(()=>new SV,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var d4=BigInt(1),CV=BigInt(2),i4=BigInt(3),c4=BigInt(5),EF=BigInt(8),IV=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function n4($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=IV,U=$*$%X*$%X,W=k$(U,CV,X)*U%X,V=k$(W,d4,X)*$%X,z=k$(V,c4,X)*V%X,M=k$(z,q,X)*z%X,D=k$(M,J,X)*M%X,K=k$(D,G,X)*D%X,N=k$(K,Q,X)*K%X,j=k$(N,Q,X)*K%X,w=k$(j,q,X)*z%X;return{pow_p_5_8:k$(w,CV,X)*$%X,b2:U}}function o4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var EV=(()=>{let $=IV;return JV({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=n4(q);return R$(k$(J,i4,$)*G,$)},adjustScalarBytes:o4})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var a4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),s4=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var t4=pY(a4),cY=lY(t4,P9);var e4=pY(s4),PV=lY(e4,TV);function FV($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var nY=Uint8Array.of(0),LV=Uint8Array.of();function gV($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=LV;else Q0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=b8.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)nY[0]=z+1,W.update(z===0?LV:V).update(J).update(nY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),A$(V,nY),Y.slice(0,G)}var $O=BigInt(0),$Q=BigInt(1),qO=BigInt(2),JO=BigInt(7),GO=BigInt(256),QO=BigInt(113),bV=[],yV=[],kV=[];for(let $=0,q=$Q,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],bV.push(2*(5*G+J)),yV.push(($+1)*($+2)/2%64);let Q=$O;for(let X=0;X<7;X++)if(q=(q<<$Q^(q>>JO)*QO)%GO,q&qO)Q^=$Q<<($Q<<BigInt(X))-$Q;kV.push(Q)}var fV=E9(kV,!0),XO=fV[0],YO=fV[1],_V=($,q,J)=>J>32?DV($,q,J):MV($,q,J),vV=($,q,J)=>J>32?RV($,q,J):KV($,q,J);function UO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let Y=0;Y<10;Y++)J[Y]=$[Y]^$[Y+10]^$[Y+20]^$[Y+30]^$[Y+40];for(let Y=0;Y<10;Y+=2){let U=(Y+8)%10,W=(Y+2)%10,V=J[W],z=J[W+1],M=_V(V,z,1)^J[U],D=vV(V,z,1)^J[U+1];for(let K=0;K<50;K+=10)$[Y+K]^=M,$[Y+K+1]^=D}let Q=$[2],X=$[3];for(let Y=0;Y<24;Y++){let U=yV[Y],W=_V(Q,X,U),V=vV(Q,X,U),z=bV[Y];Q=$[z],X=$[z+1],$[z]=W,$[z+1]=V}for(let Y=0;Y<50;Y+=10){for(let U=0;U<10;U++)J[U]=$[Y+U];for(let U=0;U<10;U++)$[Y+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=XO[G],$[1]^=YO[G]}A$(J)}class L9{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=N9(this.state)}clone(){return this._cloneInto()}keccak(){IY(this.state32),UO(this.state32,this.rounds),IY(this.state32),this.posOut=0,this.pos=0}update($){Pq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(q-this.pos,G-Q);for(let Y=0;Y<X;Y++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Pq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let X=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+X),G),this.posOut+=X,G+=X}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(O9($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,A$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:X}=this;return $||=new L9(q,J,G,X,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=X,$.destroyed=this.destroyed,$}}var xV=($,q,J,G={})=>F8(()=>new L9(q,$,J),G);var hJ=xV(6,136,32,eq(8));var mV=xV(6,72,64,eq(10));var hV=($,q,J,G={})=>F8((Q={})=>new L9(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),uV=hV(31,168,16,eq(11)),Yq=hV(31,136,32,eq(12));function oY($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function lV($){return oY($),($&$-1)===0&&$!==0}function aY($,q){oY($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function rV($){return oY($),31-Math.clz32($)}function pV($){let q=$.length;if(q<2||!lV(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=rV(q);for(let G=0;G<q;G++){let Q=aY(G,J);if(G<Q){let X=$[G];$[G]=$[Q],$[Q]=X}}return $}var sY=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:X=!1,skipStages:Y=0,brp:U=!0}=q,W=rV(J);if(!lV(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==X;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)pV(z);for(let M=0,D=1;M<W-Y;M++){let K=Q?M+1+Y:W-M,N=1<<K,j=N>>1,w=J>>K;for(let Z=0;Z<J;Z+=N)for(let T=0,_=D++;T<j;T++){let f=X?Q?J-_:_:T*w,u=Z+T,F=Z+T+j,m=G[f],k=z[F],y=z[u];if(V){let l=$.mul(k,m);z[u]=$.add(y,l),z[F]=$.sub(y,l)}else if(X)z[u]=$.add(k,y),z[F]=$.mul($.sub(k,y),m);else z[u]=$.add(y,k),z[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)pV(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function F9($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function dV($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,X)=>Q+J(X),0);return{bytesLen:G,encode:(Q)=>{let X=new Uint8Array(G);for(let Y=0,U=0;Y<q.length;Y++){let W=q[Y],V=J(W),z=typeof W==="number"?Q[Y]:W.encode(Q[Y]);if(Q0(z,V,$),X.set(z,U),typeof W!=="number")z.fill(0);U+=V}return X},decode:(Q)=>{Q0(Q,G,$);let X=[];for(let Y of q){let U=J(Y),W=Q.subarray(0,U);X.push(typeof Y==="number"?W:Y.decode(W)),Q=Q.subarray(U)}return X}}}function g9($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let X=0,Y=0;X<G.length;X++){let U=$.encode(G[X]);Q.set(U,Y),U.fill(0),Y+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let X=0;X<G.length;X+=$.bytesLen)Q.push($.decode(G.subarray(X,X+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function tY($){return(1<<$)-1}var pF=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var iV=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:X,brvBits:Y,isKyber:U}=$,W=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},V=(T,_=G)=>{let f=W(T,_)|0;return(f>_>>1?f-_|0:f)|0};function z(){let T=q(J);for(let _=0;_<J;_++){let f=aY(_,Y),u=BigInt(X)**BigInt(f)%BigInt(G);T[_]=Number(u)|0}return T}let M=z(),D={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:M,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=sY(D,{dit:!1,...K}),j=sY(D,{dit:!0,...K});return{mod:W,smod:V,nttZetas:M,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=tY(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let m=new Uint8Array(u);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&tY(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},WO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,X=new Uint8Array(J),Y=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,z)=>{return G[Q+0]=V,G[Q+1]=z,Y.destroy(),Y=$.create({}).update(G),U++,()=>{return W++,Y.xofInto(X)}},clean:()=>{Y.destroy(),y0(X,G)}}},cV=WO(uV);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,_q=3329,VO=3303,zO=17,{mod:GQ,nttZetas:MO,NTT:pJ,bitsCoder:KO}=iV({N:Q$,Q:_q,F:VO,ROOT_OF_UNITY:zO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),eY={512:{N:Q$,Q:_q,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:_q,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:_q,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},DO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+_q/2)/_q,decode:(J)=>J*_q+q>>>$}},qQ=($)=>KO($,DO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]+q[J])}function RO($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]-q[J])}function HO($,q,J,G,Q){let X=GQ(q*G*Q+$*J),Y=GQ($*G+q*J);return{c0:X,c1:Y}}function _9($,q){for(let J=0;J<Q$/2;J++){let G=MO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:X}=HO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=X}return $}function nV($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let X=(G[Q+0]>>0|G[Q+1]<<8)&4095,Y=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(X<_q)q[J++]=X;if(J<Q$&&Y<_q)q[J++]=Y}}return q}function JQ($,q,J,G){let Q=$(G*Q$/4,q,J),X=new Uint16Array(Q$),Y=N9(Q),U=0;for(let W=0,V=0,z=0,M=0;W<Y.length;W++){let D=Y[W];for(let K=0;K<32;K++)if(z+=D&1,D>>=1,U+=1,U===G)M=z,z=0;else if(U===2*G)X[V++]=GQ(M-z),z=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return X}var OO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:X,ETA2:Y,du:U,dv:W}=$,V=qQ(1),z=qQ(W),M=qQ(U),D=uJ("publicKey",g9(qQ(12),q),32),K=g9(qQ(12),q),N=uJ("ciphertext",g9(M,q),z),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let Z=new Uint8Array(33);Z.set(w),Z[32]=q;let T=Q(Z),[_,f]=j.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(JQ(J,f,y,X)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(JQ(J,f,q+y,X));for(let v=0;v<q;v++){let I=nV(m.get(v,y));lJ(l,_9(I,u[v]))}F.push(l)}m.clean();let k={publicKey:D.encode([F,_]),secretKey:K.encode(u)};return y0(_,f,u,F,Z,T),k},encrypt:(w,Z,T)=>{let[_,f]=D.decode(w),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(JQ(J,T,v,X)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let I=JQ(J,T,q+v,Y),C=new Uint16Array(Q$);for(let A=0;A<q;A++){let S=nV(F.get(v,A));lJ(C,_9(S,u[A]))}lJ(I,pJ.decode(C)),k.push(I),lJ(m,_9(_[v],u[v])),y0(C)}F.clean();let y=JQ(J,T,2*q,Y);lJ(y,pJ.decode(m));let l=V.decode(Z);return lJ(l,y),y0(_,u,m,y),N.encode([k,l])},decrypt:(w,Z)=>{let[T,_]=N.decode(w),f=K.decode(Z),u=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(u,_9(f[F],pJ.encode(T[F])));return RO(_,pJ.decode(u)),y0(u,f,T),V.encode(_)}}};function $U($){let q=OO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:X,lengths:Y}=q,U=uJ("secretKey",Y.secretKey,Y.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...Y,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(z=Uq(64))=>{Q0(z,64,"seed");let{publicKey:M,secretKey:D}=q.keygen(z.subarray(0,32)),K=J(M),N=U.encode([D,M,K,z.subarray(32)]);return y0(D,K),{publicKey:M,secretKey:N}},getPublicKey:(z)=>{let[M,D,K,N]=U.decode(z);return Uint8Array.from(D)},encapsulate:(z,M=Uq(32))=>{Q0(z,Y.publicKey,"publicKey"),Q0(M,32,"message");let D=z.subarray(0,384*$.K),K=X.encode(X.decode(dV(D)));if(!F9(K,D))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(M).update(J(z)).digest(),j=q.encrypt(z,M,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(z,M)=>{Q0(M,U.bytesLen,"secretKey"),Q0(z,Y.cipherText,"cipherText");let D=U.bytesLen-96,K=D+32,N=J(M.subarray(D/2,K));if(!F9(N,M.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,Z,T]=U.decode(M),_=q.decrypt(z,j),f=G.create().update(_).update(Z).digest(),u=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=F9(z,F),k=Q.create({dkLen:32}).update(T).update(z).digest();return y0(_,F,!m?u:k),m?u:k}}}function NO($,q,J){return Yq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var qU={HASH256:hJ,HASH512:mV,KDF:Yq,XOF:cV,PRF:NO},eF=$U({...qU,...eY[512]}),QQ=$U({...qU,...eY[768]}),oV=$U({...qU,...eY[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function jO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let X=$.Point.Fn;if(!X)throw Error("No Point.Fn");G=(Y=Uq(J.seed))=>{Q0(Y,J.seed,"seed");let U=X.isLE?qJ(Y):$J(Y),W=X.toBytes(X.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function JU($,q=!1){let J=jO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let X=this.keygen(Q).secretKey,Y=this.decapsulate(G,X),U=$.getPublicKey(X);return y0(X),{sharedSecret:Y,cipherText:U}},decapsulate(G,Q){let X=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?X.subarray(1):X}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function GU($){return(q,J)=>$(q,{dkLen:J})}function wO($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function X(Y){Q0(Y,$);let U=G.decode(q(Y,G.bytesLen)),W=J.map((M,D)=>M.keygen(U[D])),V=W.map((M)=>M.secretKey),z=W.map((M)=>M.publicKey);return{secretKey:V,publicKey:z}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(Y){return this.keygen(Y).publicKey},keygen(Y=Uq($)){let{publicKey:U,secretKey:W}=X(Y),V=Q.encode(U);return y0(U),y0(W),{secretKey:Y,publicKey:V}},expandDecapsulationKey:X,realSeedLen:$}}function v9($,q,J,G,...Q){let X=wO($,J,...Q),Y=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),W=XQ(Q,"msg");if(q===void 0)q=W.bytesLen;return m0(q),{lengths:{...X.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:Y.bytesLen},getPublicKey:X.getPublicKey,keygen:X.keygen,encapsulate(V,z=Uq(W.bytesLen)){let M=U.decode(V),D=W.decode(z),K=Q.map((Z,T)=>Z.encapsulate(M[T],D[T])),N=K.map((Z)=>Z.sharedSecret),j=K.map((Z)=>Z.cipherText),w={sharedSecret:G(M,j,N),cipherText:Y.encode(j)};return y0(N,j),w},decapsulate(V,z){let M=Y.decode(V),{publicKey:D,secretKey:K}=X.expandDecapsulationKey(z),N=Q.map((j,w)=>j.decapsulate(M[w],K[w]));return G(D,M,N)}}}function aV($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,GU(G),(X,Y,U)=>Q(g0(U[0],U[1],Y[1],X[1],JJ($))),q,J)}var zg=aV("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",QQ,JU(cY,!0),Yq,hJ),Mg=aV("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",oV,JU(PV,!0),Yq,hJ);function ZO($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,GU(G),(X,Y,U)=>{let W=g0(U[0],U[1],Y[0],X[0],Y[1],X[1],JJ($)),V=32,z=g0(JJ("hybrid_prk"),W),M=FV(Q,z),D=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=gV(Q,M,D,32);return y0(M,D,z,W),K},q,J)}var sV=JU(EV),Kg=ZO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",QQ,sV,Yq,P9),AO=(()=>v9(32,32,GU(Yq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),QQ,sV))();function BO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function X(Y){let U;for(let z=0,M=q;;z=M,M+=q){if(M>Y.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(Y.subarray(z,M),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(Y=Uq(G)){return Q0(Y,G,"seed"),X(Y)},getPublicKey(Y){return $.getPublicKey(Y,!1)},encapsulate(Y,U=Uq(G)){Q0(U,G,"rand");let{secretKey:W}=X(U),V=this.decapsulate(Y,W),z=$.getPublicKey(W,!1);return y0(W),{sharedSecret:V,cipherText:z}},decapsulate(Y,U){return $.getSharedSecret(U,Y).subarray(1)}}}function SO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:X}=J.lengths;if(!Q||!X)throw Error("wrong curve");let Y=BO(J,Q,X,G),U=64,W=U+G;return v9(32,32,(V)=>{Q0(V,32);let z=Yq(V,{dkLen:W}),M=z.subarray(0,U),D=z.subarray(U,W);return g0(M,D)},(V,z,M)=>hJ(g0(M[0],M[1],z[1],V[1],JJ($))),q,Y)}var TO=(()=>SO("MLKEM768-P256",QQ,cY,128))();var QU=AO,tV=TO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var A0=($,q,J)=>u0($,q,J),YU=L0,k8=Q9,n0=(...$)=>UY(...$),f8=($)=>vG($),x8=QY,m8=($)=>Bq($),y9=BigInt(0),XU=BigInt(1);function vq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function k9($){if(typeof $==="bigint"){if(!b9($))throw RangeError("positive bigint expected, got "+$)}else YU($);return $}function Wq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function YQ($){let q=k9($).toString(16);return q.length&1?"0"+q:q}function eV($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?y9:BigInt("0x"+$)}function rJ($){return eV(Q9($))}function i$($){return eV(Q9(UJ(u0($)).reverse()))}function f9($,q){if(L0(q),q===0)throw RangeError("zero length");$=k9($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return vG(J.padStart(q*2,"0"))}function UQ($,q){return f9($,q).reverse()}function $z($,q){if($=A0($),q=A0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(A0($))}function x9($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var b9=($)=>typeof $==="bigint"&&y9<=$;function CO($,q,J){return b9($)&&b9(q)&&b9(J)&&q<=$&&$<J}function bq($,q,J,G){if(!CO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<y9)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>y9;$>>=XU,q+=1);return q}var WQ=($)=>(XU<<BigInt($))-XU;function qz($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,n0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,Z=[];while(w<q){W=D();let T=W.slice();Z.push(T),w+=W.length}return n0(...Z)};return(w,Z)=>{M(),K(w);let T=void 0;while((T=Z(N()))===void 0)K();return M(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(X,Y,U){if(!U&&Y!=="function"&&!Object.hasOwn($,X))throw TypeError(`param "${X}" is invalid: expected own property`);let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw TypeError(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}var UU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),E0=BigInt(1),dJ=BigInt(2),Xz=BigInt(3),Yz=BigInt(4),Uz=BigInt(5),IO=BigInt(7),Wz=BigInt(8),EO=BigInt(9),Vz=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function Jz($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,X=E0,Y=E0,U=o0;while(J!==o0){let V=G/J,z=G-J*V,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==E0)throw Error("invert: does not exist");return T0(Q,q)}function WU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function zz($,q){let J=$,G=(J.ORDER+E0)/Yz,Q=J.pow(q,G);return WU(J,Q,q),Q}function PO($,q){let J=$,G=(J.ORDER-Uz)/Wz,Q=J.mul(q,dJ),X=J.pow(Q,G),Y=J.mul(q,X),U=J.mul(J.mul(Y,dJ),X),W=J.mul(Y,J.sub(U,J.ONE));return WU(J,W,q),W}function LO($){let q=m9($),J=Mz($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+IO)/Vz;return(U,W)=>{let V=U,z=V.pow(W,Y),M=V.mul(z,G),D=V.mul(z,Q),K=V.mul(z,X),N=V.eql(V.sqr(M),W),j=V.eql(V.sqr(D),W);z=V.cmov(z,M,N),M=V.cmov(K,D,j);let w=V.eql(V.sqr(M),W),Z=V.cmov(z,M,w);return WU(V,Z,W),Z}}function Mz($){if($<Xz)throw Error("sqrt is not defined for small field");let q=$-E0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=m9($);while(Gz(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return zz;let X=Q.pow(G,q),Y=(q+E0)/dJ;return function(W,V){let z=W;if(z.is0(V))return V;if(Gz(z,V)!==1)throw Error("Cannot find square root");let M=J,D=z.mul(z.ONE,X),K=z.pow(V,q),N=z.pow(V,Y);while(!z.eql(K,z.ONE)){if(z.is0(K))return z.ZERO;let j=1,w=z.sqr(K);while(!z.eql(w,z.ONE))if(j++,w=z.sqr(w),j===M)throw Error("Cannot find square root");let Z=E0<<BigInt(M-j-1),T=z.pow(D,Z);M=j,D=z.sqr(T),K=z.mul(K,D),N=z.mul(N,T)}return N}}function FO($){if($%Yz===Xz)return zz;if($%Wz===Uz)return PO;if($%Vz===EO)return LO($);return Mz($)}var yq=($,q)=>(T0($,q)&E0)===E0,gO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function VU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=gO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Wq($.BYTES,"BYTES"),Wq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=E0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function _O($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===E0)return q;let Q=G.ONE,X=q;while(J>o0){if(J&E0)Q=G.mul(Q,X);X=G.sqr(X),J>>=E0}return Q}function VQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),X=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),Y=G.inv(X);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},Y),Q}function Gz($,q){let J=$,G=(J.ORDER-E0)/dJ,Q=J.pow(q,G),X=J.eql(Q,J.ONE),Y=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!X&&!Y&&!U)throw Error("invalid Legendre symbol result");return X?1:Y?0:-1}function vO($,q){if(q!==void 0)YU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var Qz=new WeakMap;class zU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=E0;_lengths;_mod;constructor($,q={}){if($<=E0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=vO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&E0)===E0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return _O(this,$,q)}div($,q){return T0($*Jz(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return Jz($,this.ORDER)}sqrt($){let q=Qz.get(this);if(!q)Qz.set(this,q=FO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?UQ($,this.BYTES):f9($,this.BYTES)}fromBytes($,q=!1){A0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(Y)U=T0(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return VQ(this,$)}cmov($,q,J){return vq(J,"condition"),J?q:$}}Object.freeze(zU.prototype);function m9($,q={}){return new zU($,q)}function Kz($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=E0)throw Error("field order must be greater than 1");let q=h8($-E0);return Math.ceil(q/8)}function MU($){let q=Kz($);return q+Math.ceil(q/2)}function Dz($,q,J=!1){A0($);let G=$.length,Q=Kz(q),X=Math.max(MU(q),16);if(G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?i$($):rJ($),U=T0(Y,q-E0)+E0;return J?UQ(U,Q):f9(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=VQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function Nz($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function KU($,q){Nz($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=WQ($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function Rz($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=iJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var DU=new WeakMap,jz=new WeakMap;function RU($){return jz.get($)||1}function Hz($){if($!==u8)throw Error("invalid wNAF")}class MQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=KU(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=KU($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=Rz(J,Y,X);if(J=U,V)Q=Q.add(zQ(M,q[D]));else G=G.add(zQ(z,q[W]))}return Hz(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=KU($,this.bits);for(let X=0;X<Q.windows;X++){if(J===u8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=Rz(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return Hz(J),G}getPrecomputes($,q,J){let G=DU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);DU.set(q,G)}}return G}cached($,q,J){let G=RU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=RU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){Nz(q,this.bits),jz.set($,q),DU.delete($)}hasCache($){return RU($)!==1}}function wz($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>u8||G>u8){if(J&iJ)X=X.add(Q);if(G&iJ)Y=Y.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:X,p2:Y}}function Oz($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return VU(q),q}else return m9($,{isLE:J})}function h9($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>u8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=Oz(q.p,J.Fp,G),X=Oz(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Wq($),Wq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function bO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function yO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?x9($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function HU($,q,J,G){if(A0($),Wq(J),q=yO(q),q.length>255)q=G(n0(x9("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:X}=G,Y=Math.ceil(J/Q);if(J>65535||Y>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,DQ(q.length,1)),W=new Uint8Array(X),V=DQ(J,2),z=Array(Y),M=G(n0(W,$,V,DQ(0,1),U));z[0]=G(n0(M,DQ(1,1),U));for(let K=1;K<Y;K++){let N=[bO(M,z[K-1]),DQ(K+1,1),U];z[K]=G(n0(...N))}return n0(...z).slice(0,J)}var Zz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Az=($,q)=>($+($>=0?q:-q)/Sz)/q;function kO($,q,J){bq("scalar",$,Vq,J);let[[G,Q],[X,Y]]=q,U=Az(Y*$,J),W=Az(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Vq,D=z<Vq;if(M)V=-V;if(D)z=-z;let K=WQ(Math.ceil(h8(J)/2))+WJ;if(V<Vq||V>=K||z<Vq||z>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:M,k1:V,k2neg:D,k2:z}}function NU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function OU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(vq(J.lowS,"lowS"),vq(J.prehash,"prehash"),J.format!==void 0)NU(J.format);return J}class Bz extends Error{constructor($=""){super($)}}var c$={Err:Bz,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Wq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=YQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?YQ(Q.length/2|128):"";return YQ($)+X+Q+q},decode($,q){let{Err:J}=c$;q=A0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=c$;if(k9($),$<Vq)throw new q("integer: negative integers are not allowed");let J=YQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=A0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Vq=BigInt(0),WJ=BigInt(1),Sz=BigInt(2),u9=BigInt(3),fO=BigInt(4);function Tz($,q={}){let J=h9("weierstrass",$,q),G=J.Fp,Q=J.Fn,X=J.CURVE,{h:Y,n:U}=X;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=Iz(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(v,I,C){if(V&&I.is0())return Uint8Array.of(0);let{x:A,y:S}=I.toAffine(),P=G.toBytes(A);if(vq(C,"isCompressed"),C){M();let g=!G.isOdd(S);return n0(Cz(g),P)}else return n0(Uint8Array.of(4),P,G.toBytes(S))}function K(v){A0(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:C}=z,A=v.length,S=v[0],P=v.subarray(1);if(V&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}M();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===C&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${I} or uncompressed=${C}`)}let N=q.toBytes===void 0?D:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let I=G.sqr(v),C=G.mul(I,v);return G.add(G.add(C,G.mul(v,X.a)),X.b)}function Z(v,I){let C=G.sqr(I),A=w(v);return G.eql(C,A)}if(!Z(X.Gx,X.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(X.a,u9),fO),_=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,I,C=!1){if(!G.isValid(I)||C&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return kO(v,W.basises,Q.ORDER)}function m(v,I,C,A,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),I=zQ(A,I),C=zQ(S,C),I.add(C)}class k{static BASE=new k(X.Gx,X.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,C){this.X=f("x",v),this.Y=f("y",I,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return X}static fromAffine(v){let{x:I,y:C}=v||{};if(!v||!G.isValid(I)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(C))return k.ZERO;return new k(I,C,G.ONE)}static fromBytes(v){let I=k.fromAffine(j(A0(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(u9);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:C}=v.toAffine();if(!G.isValid(I)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!Z(I,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:C,Z:A}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,A)),b=G.eql(G.mul(C,g),G.mul(P,A));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=X,C=G.mul(I,u9),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),x=G.mul(S,S),d=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){u(v);let{X:I,Y:C,Z:A}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=X.a,d=G.mul(X.b,u9),B=G.mul(I,S),a=G.mul(C,P),q0=G.mul(A,g),X0=G.add(I,C),G0=G.add(S,P);X0=G.mul(X0,G0),G0=G.add(B,a),X0=G.sub(X0,G0),G0=G.add(I,A);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,A),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(X0,L),L=G.sub(L,B),B=G.mul(X0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,A,S=(P)=>l.cached(this,P,(g)=>cJ(k,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);A=x.add(B),C=m(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);C=P,A=g}return cJ(k,[C,A])[0]}multiplyUnsafe(v){let{endo:I}=q,C=this,A=v;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Vq||C.is0())return k.ZERO;if(A===WJ)return C;if(l.hasCache(this))return this.multiply(A);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=wz(k,C,P,L);return m(I.beta,b,O,S,g)}else return l.unsafe(C,A)}toAffine(v){let I=this,C=v,{X:A,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:A,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(A,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(Y===WJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(Y===WJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(Y)}isSmallOrder(){if(Y===WJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return vq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new MQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function Cz($){return Uint8Array.of($?2:3)}function Iz($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function xO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(Iz($.Fp,J),{seed:Math.max(MU(J.ORDER),16)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let Z=K.length;if(N===!0&&Z!==j)return!1;if(N===!1&&Z!==w)return!1;return!!$.fromBytes(K)}catch(Z){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,Dz(A0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,Z=J._lengths;if(!x8(K))return;let T=A0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!Z?.includes(T);if(_&&f)return;return _}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=KQ(U,W);return Object.freeze(M),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function Ez($,q,J={}){let G=q;Aq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,X=J.hmac===void 0?(S,P)=>Sq(G,S,P):J.hmac,{Fp:Y,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N}=xO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=W*Sz+WJ<Y.ORDER;function Z(S){let P=W>>WJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,P){NU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return A0(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=j.format){f(S,P);let g;if(P==="der"){let{r:x,s:d}=c$.toSig(A0(S));return new u(x,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(f8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+W:P;if(!Y.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=Y.toBytes(b),x=$.fromBytes(n0(Cz((L&1)===0),O)),d=U.inv(b),B=m(A0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),X0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(X0.is0())throw Error("invalid recovery: point at infinify");return X0.assertValidity(),X0}hasHighS(){return Z(this.s)}toBytes(S=j.format){if(NU(S),S==="der")return f8(c$.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,k=WQ(V);function y(S){return bq("num < 2^"+V,S,Vq,k),U.toBytes(S)}function l(S,P){return A0(S,void 0,"message"),P?A0(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=OU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(A0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function X0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),Z0=$.BASE.multiply(t).toAffine(),I0=U.create(Z0.x);if(I0===Vq)return;let x0=U.create(O0*U.create(q0+I0*d));if(x0===Vq)return;let K$=(Z0.x===I0?0:2)|Number(Z0.y&WJ),Jq=x0;if(L&&Z(x0))Jq=U.neg(x0),K$^=1;return new u(I0,Jq,w?void 0:K$)}return{seed:a,k2sig:X0}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return qz(G.outputLen,U.BYTES,X)(L,b).toBytes(g.format)}function C(S,P,g,L={}){let{lowS:b,prehash:O,format:x}=OU(L,j);if(g=A0(g,void 0,"publicKey"),P=l(P,O),!x8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=u.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,X0=m(P),G0=U.inv(q0),t=U.create(X0*G0),O0=U.create(a*G0),Z0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(Z0.is0())return!1;return U.create(Z0.x)===a}catch(d){return!1}}function A(S,P,g={}){let{prehash:L}=OU(g,j);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N,Point:$,sign:I,verify:C,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var hO=Tz(mO),p8=Ez(hO,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VJ=BigInt(0),B$=BigInt(1),jU=BigInt(2),uO=BigInt(8);function pO($,q,J,G){let Q=$.sqr(J),X=$.sqr(G),Y=$.add($.mul(q.a,Q),X),U=$.add($.ONE,$.mul(q.d,$.mul(Q,X)));return $.eql(Y,U)}function Pz($,q={}){let J=q,G=h9("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:X}=G,Y=G.CURVE,{h:U}=Y;f$(J,{},{uvRatio:"function"});let W=jU<<BigInt(X.BYTES*8)-B$,V=(j)=>Q.create(j),z=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(Z){return{isValid:!1,value:VJ}}}:J.uvRatio;if(!pO(Q,Y,Y.Gx,Y.Gy))throw Error("bad curve params: generator point");function M(j,w,Z=!1){let T=Z?B$:VJ;return bq("coordinate "+j,w,T,W),w}function D(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(Y.Gx,Y.Gy,B$,V(Y.Gx*Y.Gy));static ZERO=new K(VJ,B$,B$,VJ);static Fp=Q;static Fn=X;X;Y;Z;T;constructor(j,w,Z,T){this.X=M("x",j),this.Y=M("y",w),this.Z=M("z",Z,!0),this.T=M("t",T),Object.freeze(this)}static CURVE(){return Y}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:Z}=j||{};return M("x",w),M("y",Z),new K(w,Z,B$,V(w*Z))}static fromBytes(j,w=!1){let Z=Q.BYTES,{a:T,d:_}=Y;j=UJ(A0(j,Z,"point")),vq(w,"zip215");let f=UJ(j),u=j[Z-1];f[Z-1]=u&-129;let F=i$(f),m=w?W:Q.ORDER;bq("point.y",F,VJ,m);let k=V(F*F),y=V(k-B$),l=V(_*k-T),{isValid:v,value:I}=z(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(I&B$)===B$,A=(u&128)!==0;if(!w&&I===VJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==C)I=V(-I);return K.fromAffine({x:I,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(jU);return this}assertValidity(){let j=this,{a:w,d:Z}=Y;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:u}=j,F=V(T*T),m=V(_*_),k=V(f*f),y=V(k*k),l=V(F*w),v=V(k*V(l+m)),I=V(y+V(Z*V(F*m)));if(v!==I)throw Error("bad point: equation left != right (1)");let C=V(T*_),A=V(f*u);if(C!==A)throw Error("bad point: equation left != right (2)")}equals(j){D(j);let{X:w,Y:Z,Z:T}=this,{X:_,Y:f,Z:u}=j,F=V(w*u),m=V(_*T),k=V(Z*u),y=V(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:j}=Y,{X:w,Y:Z,Z:T}=this,_=V(w*w),f=V(Z*Z),u=V(jU*V(T*T)),F=V(j*_),m=w+Z,k=V(V(m*m)-_-f),y=F+f,l=y-u,v=F-f,I=V(k*l),C=V(y*v),A=V(k*v),S=V(l*y);return new K(I,C,S,A)}add(j){D(j);let{a:w,d:Z}=Y,{X:T,Y:_,Z:f,T:u}=this,{X:F,Y:m,Z:k,T:y}=j,l=V(T*F),v=V(_*m),I=V(u*Z*y),C=V(f*k),A=V((T+_)*(F+m)-l-v),S=C-I,P=C+I,g=V(v-w*l),L=V(A*S),b=V(P*g),O=V(A*g),x=V(S*P);return new K(L,b,x,O)}subtract(j){return D(j),this.add(j.negate())}multiply(j){if(!X.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:Z}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,Z])[0]}multiplyUnsafe(j){if(!X.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===VJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,Y.n).is0()}toAffine(j){let w=this,Z=j,{X:T,Y:_,Z:f}=w,u=w.is0();if(Z==null)Z=u?uO:Q.inv(f);let F=V(T*Z),m=V(_*Z),k=Q.mul(f,Z);if(u)return{x:VJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),Z=Q.toBytes(w);return Z[Z.length-1]|=j&B$?128:0,Z}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new MQ(K,X.BITS);if(X.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class wU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){UU()}static fromHex($){UU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RQ=BigInt(0),l8=BigInt(1),p9=BigInt(2);function lO($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Lz($){let q=lO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y===void 0?m8:Y,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?p9**BigInt(254):p9**BigInt(447),N=U?BigInt(8)*p9**BigInt(251)-l8:BigInt(4)*p9**BigInt(445)-l8,j=K+N+l8,w=(A)=>T0(A,J),Z=T(M);function T(A){return UQ(w(A),z)}function _(A){let S=UJ(A0(A,z,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(A){return i$(Q(UJ(A0(A,z,"scalar"))))}function u(A,S){let P=l(_(S),f(A));if(P===RQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let m=F,k=u;function y(A,S,P){let g=w(A*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(A,S){bq("u",A,RQ,J),bq("scalar",S,K,j);let P=S,g=A,L=l8,b=RQ,O=A,x=l8,d=RQ;for(let a=BigInt(V-1);a>=RQ;a--){let q0=P>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},I=(A)=>{return A=A===void 0?W(z):A,A0(A,v.seed,"seed"),A},C={randomSecretKey:I};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:KQ(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:Z.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rO=BigInt(0),kq=BigInt(1),Fz=BigInt(2),dO=BigInt(3),iO=BigInt(5),cO=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),SU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:cO,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function vz($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=oJ,U=$*$%X*$%X,W=x$(U,Fz,X)*U%X,V=x$(W,kq,X)*$%X,z=x$(V,iO,X)*V%X,M=x$(z,q,X)*z%X,D=x$(M,J,X)*M%X,K=x$(D,G,X)*D%X,N=x$(K,Q,X)*K%X,j=x$(N,Q,X)*K%X,w=x$(j,q,X)*z%X;return{pow_p_5_8:x$(w,Fz,X)*$%X,b2:U}}function nO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var ZU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function TU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),X=vz($*Q).pow_p_5_8,Y=T0($*G*X,J),U=T0(q*Y*Y,J),W=Y,V=T0(Y*ZU,J),z=U===$,M=U===T0(-$,J),D=U===T0(-$*ZU,J);if(z)Y=W;if(M||D)Y=V;if(yq(Y,J))Y=T0(-Y,J);return{isValid:z||M,value:Y}}var nJ=Pz(SU,{uvRatio:TU}),zJ=(()=>nJ.Fp)(),bz=(()=>nJ.Fn)();var l9=(()=>{let $=oJ;return Lz({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=vz(q);return T0(x$(J,dO,$)*G,$)},adjustScalarBytes:nO})})();var AU=ZU,oO=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),aO=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),sO=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),tO=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),gz=($)=>TU(kq,$),eO=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),BU=($)=>zJ.create(i$($)&eO);function _z($){let{d:q}=SU,J=oJ,G=(Z)=>zJ.create(Z),Q=G(AU*$*$),X=G((Q+kq)*sO),Y=BigInt(-1),U=G((Y-q*Q)*G(Q+q)),{isValid:W,value:V}=TU(X,U),z=G(V*$);if(!yq(z,J))z=G(-z);if(!W)V=z;if(!W)Y=Q;let M=G(Y*(Q-kq)*tO-U),D=V*V,K=G((V+V)*U),N=G(M*oO),j=G(kq-D),w=G(kq+D);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends wU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>zJ)();static Fn=(()=>bz)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=SU,G=oJ,Q=(_)=>zJ.create(_),X=BU($);if(!$z(zJ.toBytes(X),$)||yq(X,G))throw Error("invalid ristretto255 encoding 1");let Y=Q(X*X),U=Q(kq+q*Y),W=Q(kq-q*Y),V=Q(U*U),z=Q(W*W),M=Q(q*J*V-z),{isValid:D,value:K}=gz(Q(M*z)),N=Q(K*W),j=Q(K*N*M),w=Q((X+X)*N);if(yq(w,G))w=Q(-w);let Z=Q(U*j),T=Q(w*Z);if(!D||yq(T,G)||Z===rO)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,Z,kq,T))}static fromHex($){return O$.fromBytes(vG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,X=(j)=>zJ.create(j),Y=X(X(J+q)*X(J-q)),U=X($*q),W=X(U*U),{value:V}=gz(X(Y*W)),z=X(V*Y),M=X(V*U),D=X(z*M*G),K;if(yq(G*D,Q)){let j=X(q*AU),w=X($*AU);$=j,q=w,K=X(z*aO)}else K=M;if(yq($*D,Q))q=X(-q);let N=X((J-q)*K);if(yq(N,Q))N=X(-N);return zJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,X=(W)=>zJ.create(W),Y=X(q*Q)===X(J*G),U=X(J*Q)===X(q*G);return Y||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var $N=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=HU($,J,64,W9);return $N.deriveToCurve(G)},hashToScalar($,q={DST:Zz}){let J=HU($,q.DST,64,W9);return bz.create(i$(J))},deriveToCurve($){u0($,64);let q=BU($.subarray(0,32)),J=_z(q),G=BU($.subarray(32,64)),Q=_z(G);return new O$(J.add(Q))}});var yz=!1,qN=!1;async function kz($,q){if(qN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function IU($,q){return await kz(async()=>{let J=CU($)?$:await GN($),G=await crypto.subtle.importKey("raw",QN(q),{name:"X25519"},yz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(CU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMult($,q)})}async function EU($){return await kz(async()=>{return IU($,l9.GuBytes)},()=>{if(CU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMultBase($)})}var JN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function GN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...JN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},yz,["deriveBits"])}function CU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function QN($){return $}class fz{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),YN(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function YN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,X)=>Q+X.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function r9($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function xz($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function mz($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class fq{args;body;constructor($,q){this.args=$,this.body=q}}function PU($){let q=[];q.push(`age-encryption.org/v1
57
+ `).map((q)=>q.trim()).join(" ")};OD.O=function($){return this.inspectOpts.colors=this.useColors,PX.inspect($,this.inspectOpts)}});var ZD=Y0((ex,k7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)k7.exports=zD();else k7.exports=wD()});var j6=Y0((Ip,N6)=>{var mX=Object.prototype.hasOwnProperty,O6=Object.prototype.toString,z6=Object.defineProperty,M6=Object.getOwnPropertyDescriptor,K6=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return O6.call(q)==="[object Array]"},D6=function(q){if(!q||O6.call(q)!=="[object Object]")return!1;var J=mX.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&mX.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||mX.call(q,Q)},R6=function(q,J){if(z6&&J.name==="__proto__")z6(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},H6=function(q,J){if(J==="__proto__"){if(!mX.call(q,J))return;else if(M6)return M6(q,J).value}return q[J]};N6.exports=function $(){var q,J,G,Q,X,Y,U=arguments[0],W=1,V=arguments.length,z=!1;if(typeof U==="boolean")z=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=H6(U,J),Q=H6(q,J),U!==Q){if(z&&Q&&(D6(Q)||(X=K6(Q)))){if(X)X=!1,Y=G&&K6(G)?G:[];else Y=G&&D6(G)?G:{};R6(U,{name:J,newValue:$(z,Y,Q)})}else if(typeof Q<"u")R6(U,{name:J,newValue:Q})}}return U}});import{parseArgs as bH}from"util";var yH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"}};function GY($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function kH($,q){let J=$[q];return typeof J==="string"?J:void 0}function l5($){let{values:q,positionals:J}=bH({args:$,options:yH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:GY(q,"help"),version:GY(q,"version"),dryRun:GY(q,"dry-run"),pushTo:kH(q,"push-to")}}}var q9={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.36",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as jN,mkdirSync as wN,readFileSync as hU,writeFileSync as uU}from"fs";import{dirname as ZN,join as dz}from"path";function QY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=QY($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Aq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function J9($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function G9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function D$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var xH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function mH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function hH($){for(let q=0;q<$.length;q++)$[q]=mH($[q]);return $}var XY=xH?($)=>$:hH,d5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),uH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function Q9($){if(u0($),d5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=uH[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function r5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function vG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(d5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=r5($.charCodeAt(X)),U=r5($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function pH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function YY($,q=""){if(typeof $==="string")return pH($);return u0($,void 0,q)}function UY(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function X9($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function WY($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Bq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var VY=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class zY{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Aq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),D$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),J9($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Sq=(()=>{let $=(q,J,G)=>new zY(q,J).update(G).digest();return $.create=(q,J)=>new zY(q,J),$})();function bG($,q,J){if(Aq($),J===void 0)J=new Uint8Array($.outputLen);return Sq($,J,q)}var MY=Uint8Array.of(0),i5=Uint8Array.of();function KY($,q,J,G=32){Aq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=i5;else u0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=Sq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)MY[0]=z+1,W.update(z===0?i5:V).update(J).update(MY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),D$(V,MY),Y.slice(0,G)}var yG=($,q,J,G,Q)=>KY($,bG($,q,J),G,Q);function c5($,q,J){return $&q^~$&J}function n5($,q,J){return $&q^$&J^q&J}class Y9{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=C8($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),J9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,D$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Tq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var U9=BigInt(4294967295),o5=BigInt(32);function lH($,q=!1){if(q)return{h:Number($&U9),l:Number($>>o5&U9)};return{h:Number($>>o5&U9)|0,l:Number($&U9)|0}}function a5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=lH($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var DY=($,q,J)=>$>>>J,RY=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,fG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var s5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),t5=($,q,J,G)=>q+J+G+($/4294967296|0)|0,e5=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),$W=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,qW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),JW=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var dH=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class HY extends Y9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)cq[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=cq[z-15],D=cq[z-2],K=u$(M,7)^u$(M,18)^M>>>3,N=u$(D,17)^u$(D,19)^D>>>10;cq[z]=N+cq[z-7]+K+cq[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=u$(Y,6)^u$(Y,11)^u$(Y,25),D=V+M+c5(Y,U,W)+dH[z]+cq[z]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+n5(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){D$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),D$(this.buffer)}}class GW extends HY{A=Tq[0]|0;B=Tq[1]|0;C=Tq[2]|0;D=Tq[3]|0;E=Tq[4]|0;F=Tq[5]|0;G=Tq[6]|0;H=Tq[7]|0;constructor(){super(32)}}class iH extends HY{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var QW=(()=>a5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),cH=(()=>QW[0])(),nH=(()=>QW[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends Y9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,u=FJ(_,f,1)^FJ(_,f,8)^DY(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^RY(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^kG(m,k,61)^DY(m,k,6),l=gJ(m,k,19)^fG(m,k,61)^RY(m,k,6),v=e5(F,l,oq[T-7],oq[T-16]),I=$W(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:Z}=this;for(let T=0;T<80;T++){let _=FJ(z,M,14)^FJ(z,M,18)^kG(z,M,41),f=gJ(z,M,14)^gJ(z,M,18)^fG(z,M,41),u=z&D^~z&N,F=M&K^~M&j,m=qW(Z,f,F,nH[T],oq[T]),k=JW(m,w,_,u,cH[T],nq[T]),y=m|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^fG(J,G,34)^fG(J,G,39),I=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,Z=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Gq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let A=s5(y,v,C);J=t5(A,k,l,I),G=A|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Gq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Gq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Gq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Gq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Gq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:Z}=Gq(this.Hh|0,this.Hl|0,w|0,Z|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,Z)}roundClean(){D$(nq,oq)}destroy(){this.destroyed=!0,D$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class XW extends xG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class oH extends xG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class aH extends xG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class sH extends xG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=WY(()=>new GW,VY(1));var W9=WY(()=>new XW,VY(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function D9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function jY($){if(!D9($))throw Error("Uint8Array expected")}function zW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function MW($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function hG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function z9($){if(!Array.isArray($))throw Error("array expected")}function M9($,q){if(!zW(!0,q))throw Error(`${$}: array of strings expected`)}function wY($,q){if(!zW(!1,q))throw Error(`${$}: array of numbers expected`)}function E$(...$){let q=(X)=>X,J=(X,Y)=>(U)=>X(Y(U)),G=$.map((X)=>X.encode).reduceRight(J,q),Q=$.map((X)=>X.decode).reduce(J,q);return{encode:G,decode:Q}}function P$($){let q=typeof $==="string"?$.split(""):$,J=q.length;M9("alphabet",q);let G=new Map(q.map((Q,X)=>[Q,X]));return{encode:(Q)=>{return z9(Q),Q.map((X)=>{if(!Number.isSafeInteger(X)||X<0||X>=J)throw Error(`alphabet.encode: digit index outside alphabet "${X}". Allowed: ${$}`);return q[X]})},decode:(Q)=>{return z9(Q),Q.map((X)=>{aq("alphabet.decode",X);let Y=G.get(X);if(Y===void 0)throw Error(`Unknown letter: "${X}". Allowed: ${$}`);return Y})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return M9("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function R9($,q="="){return hG($),aq("padding",q),{encode(J){M9("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){M9("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function KW($){return MW($),{encode:(q)=>q,decode:(q)=>$(q)}}function YW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(z9($),!$.length)return[];let G=0,Q=[],X=Array.from($,(U)=>{if(hG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),Y=X.length;while(!0){let U=0,W=!0;for(let V=G;V<Y;V++){let z=X[V],M=q*U,D=M+z;if(!Number.isSafeInteger(D)||M/q!==U||D-z!==M)throw Error("convertRadix: carry overflow");let K=D/J;U=D%J;let N=Math.floor(K);if(X[V]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var DW=($,q)=>q===0?$:DW(q,$%q),K9=($,q)=>$+(q-DW($,q)),V9=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function OY($,q,J,G){if(z9($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(K9(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${K9(q,J)}`);let Q=0,X=0,Y=V9[q],U=V9[J]-1,W=[];for(let V of $){if(hG(V),V>=Y)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,X+q>32)throw Error(`convertRadix2: carry overflow pos=${X} from=${q}`);X+=q;for(;X>=J;X-=J)W.push((Q>>X-J&U)>>>0);let z=V9[X];if(z===void 0)throw Error("invalid carry");Q&=z-1}if(Q=Q<<J-X&U,!G&&X>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&X>0)W.push(Q>>>0);return W}function tH($){hG($);let q=256;return{encode:(J)=>{if(!D9(J))throw Error("radix.encode input should be Uint8Array");return YW(Array.from(J),q,$)},decode:(J)=>{return wY("radix.decode",J),Uint8Array.from(YW(J,$,q))}}}function b$($,q=!1){if(hG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(K9(8,$)>32||K9($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!D9(J))throw Error("radix2.encode input should be Uint8Array");return OY(Array.from(J),8,$,!q)},decode:(J)=>{return wY("radix2.decode",J),Uint8Array.from(OY(J,$,8,q))}}}function UW($){return MW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var R3=E$(b$(4),P$("0123456789ABCDEF"),L$("")),H3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),R9(5),L$("")),O3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),N3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),R9(5),L$("")),j3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),w3=E$(b$(5),P$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),KW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),RW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),HW=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},ZY=RW?{encode($){return jY($),$.toBase64()},decode($){return HW($,!1)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),R9(6),L$("")),p$=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),Z3=RW?{encode($){return jY($),$.toBase64({alphabet:"base64url"})},decode($){return HW($,!0)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),R9(6),L$("")),A3=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),AY=($)=>E$(tH(58),P$($),L$("")),B3=AY("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),S3=AY("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),T3=AY("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var NY=E$(P$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),WW=[996825010,642813549,513874426,1027748829,705979059];function mG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<WW.length;G++)if((q>>G&1)===1)J^=WW[G];return J}function VW($,q,J=1){let G=$.length,Q=1;for(let X=0;X<G;X++){let Y=$.charCodeAt(X);if(Y<33||Y>126)throw Error(`Invalid prefix (${$})`);Q=mG(Q)^Y>>5}Q=mG(Q);for(let X=0;X<G;X++)Q=mG(Q)^$.charCodeAt(X)&31;for(let X of q)Q=mG(Q)^X;for(let X=0;X<6;X++)Q=mG(Q);return Q^=J,NY.encode(OY([Q%V9[30]],30,5,!1))}function OW($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,X=UW(G);function Y(M,D,K=90){if(aq("bech32.encode prefix",M),D9(D))D=Array.from(D);wY("bech32.encode",D);let N=M.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+D.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=M.toLowerCase(),Z=VW(w,D,q);return`${w}1${NY.encode(D)}${Z}`}function U(M,D=90){aq("bech32.decode input",M);let K=M.length;if(K<8||D!==!1&&K>D)throw TypeError(`invalid string length: ${K} (${M}). Expected (8..${D})`);let N=M.toLowerCase();if(M!==N&&M!==M.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),Z=N.slice(j+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=NY.decode(Z).slice(0,-6),_=VW(w,T,q);if(!Z.endsWith(_))throw Error(`Invalid checksum in ${M}: expected "${_}"`);return{prefix:w,words:T}}let W=UW(U);function V(M){let{prefix:D,words:K}=U(M,!1);return{prefix:D,words:K,bytes:G(K)}}function z(M,D){return Y(M,Q(D))}return{encode:Y,decode:U,encodeFromBytes:z,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:X,toWords:Q}}var l$=OW("bech32"),C3=OW("bech32m");var eH=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),$4={encode($){return jY($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},I3=eH?$4:E$(b$(4),P$("0123456789abcdef"),L$(""),KW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function J4($,q,J,G){Aq($);let Q=X9({dkLen:32,asyncTick:10},G),{c:X,dkLen:Y,asyncTick:U}=Q;if(L0(X,"c"),L0(Y,"dkLen"),L0(U,"asyncTick"),X<1)throw Error("iterations (c) must be >= 1");if(Y<1)throw Error('"dkLen" must be >= 1');if(Y>4294967295*$.outputLen)throw Error("derived key too long");let W=YY(q,"password"),V=YY(J,"salt"),z=new Uint8Array(Y),M=Sq.create($,W),D=M._cloneInto().update(V);return{c:X,dkLen:Y,asyncTick:U,DK:z,PRF:M,PRFSalt:D}}function G4($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return D$(Q),J}function BY($,q,J,G){let{c:Q,dkLen:X,DK:Y,PRF:U,PRFSalt:W}=J4($,q,J,G),V,z=new Uint8Array(4),M=C8(z),D=new Uint8Array(U.outputLen);for(let K=1,N=0;N<X;K++,N+=U.outputLen){let j=Y.subarray(N,N+U.outputLen);M.setInt32(0,K,!1),(V=W._cloneInto(V)).update(z).digestInto(D),j.set(D.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(V).update(D).digestInto(D);for(let Z=0;Z<j.length;Z++)j[Z]^=D[Z]}}return G4(U,W,Y,V,D)}function NW($,q,J,G,Q,X){let Y=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],z=$[q++]^J[G++],M=$[q++]^J[G++],D=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],u=$[q++]^J[G++],F=Y,m=U,k=W,y=V,l=z,v=M,I=D,C=K,A=N,S=j,P=w,g=Z,L=T,b=_,O=f,x=u;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),A^=N0(l+F|0,9),L^=N0(A+l|0,13),F^=N0(L+A|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(P+I|0,7),k^=N0(O+P|0,9),I^=N0(k+O|0,13),P^=N0(I+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),I^=N0(v+l|0,7),C^=N0(I+v|0,9),l^=N0(C+I|0,13),v^=N0(l+C|0,18),g^=N0(P+S|0,7),A^=N0(g+P|0,9),S^=N0(A+g|0,13),P^=N0(S+A|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[X++]=Y+F|0,Q[X++]=U+m|0,Q[X++]=W+k|0,Q[X++]=V+y|0,Q[X++]=z+l|0,Q[X++]=M+v|0,Q[X++]=D+I|0,Q[X++]=K+C|0,Q[X++]=N+A|0,Q[X++]=j+S|0,Q[X++]=w+P|0,Q[X++]=Z+g|0,Q[X++]=T+L|0,Q[X++]=_+b|0,Q[X++]=f+O|0,Q[X++]=u+x|0}function SY($,q,J,G,Q){let X=G+0,Y=G+16*Q;for(let U=0;U<16;U++)J[Y+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,X+=16,q+=16){if(NW(J,Y,$,q,J,X),U>0)Y+=16;NW(J,X,$,q+=16,J,Y)}}function Q4($,q,J){let G=X9({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:X,p:Y,dkLen:U,asyncTick:W,maxmem:V,onProgress:z}=G;if(L0(Q,"N"),L0(X,"r"),L0(Y,"p"),L0(U,"dkLen"),L0(W,"asyncTick"),L0(V,"maxmem"),z!==void 0&&typeof z!=="function")throw Error("progressCb must be a function");let M=128*X,D=M/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(Y<1||Y>(K-1)*32/M)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=M*(Q+Y+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let j=BY(r0,$,q,{c:1,dkLen:M*Y}),w=G9(j),Z=G9(new Uint8Array(M*Q)),T=G9(new Uint8Array(M)),_=()=>{};if(z){let f=2*Q*Y,u=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,z&&(!(F%u)||F===f))z(F/f)}}return{N:Q,r:X,p:Y,dkLen:U,blockSize32:D,V:Z,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:W}}function X4($,q,J,G,Q){let X=BY(r0,$,J,{c:1,dkLen:q});return D$(J,G,Q),X}function jW($,q,J){let{N:G,r:Q,p:X,dkLen:Y,blockSize32:U,V:W,B32:V,B:z,tmp:M,blockMixCb:D}=Q4($,q,J);XY(V);for(let K=0;K<X;K++){let N=U*K;for(let j=0;j<U;j++)W[j]=V[N+j];for(let j=0,w=0;j<G-1;j++)SY(W,w,W,w+=U,Q),D();SY(W,(G-1)*U,V,N,Q),D();for(let j=0;j<G;j++){let w=(V[N+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)M[Z]=V[N+Z]^W[w*U+Z];SY(M,0,V,N,Q),D()}}return XY(V),X4($,Y,z,W,M)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function Y4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function H9($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=Y4($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=Y+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function TY($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function wW($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!E8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function U4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),W4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var V4=($)=>{for(let q=0;q<$.length;q++)$[q]=W4($[q]);return $},Iq=_J?($)=>$:V4;function ZW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function AW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function BW($,q,J){let G=q,Q=J||(()=>[]),X=(U,W)=>G(W,...Q(U)).update(U).digest(),Y=G(new Uint8Array($),...Q(new Uint8Array(0)));return X.outputLen=Y.outputLen,X.blockLen=Y.blockLen,X.create=(U,...W)=>G(U,...W),X}var SW=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let z=Q[0];b0(z,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let X=$.tagLength;if(X&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let Y=q(G,...Q),U=(z,M)=>{if(M!==void 0){if(z!==2)throw Error("cipher output not supported");b0(M,void 0,"output")}},W=!1;return{encrypt(z,M){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,b0(z),U(Y.encrypt.length,M),Y.encrypt(z,M)},decrypt(z,M){if(b0(z),X&&z.length<X)throw Error('"ciphertext" expected length bigger than tagLength='+X);return U(Y.decrypt.length,M),Y.decrypt(z,M)}}}return Object.assign(J,$),J};function uG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!E8(q))throw Error("invalid output, must be aligned");return q}function TW($,q,J){I8($),I8(q),H9(J);let G=new Uint8Array(16),Q=U4(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function E8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b0($))}var IW=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),z4=(()=>Iq(Qq(IW("expand 16-byte k"))))(),M4=(()=>Iq(Qq(IW("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var pG=64,K4=16,CY=(()=>4294967295)(),CW=Uint32Array.of();function D4($,q,J,G,Q,X,Y,U){let W=Q.length,V=new Uint8Array(pG),z=Qq(V),M=_J&&E8(Q)&&E8(X),D=M?Qq(Q):CW,K=M?Qq(X):CW;if(!_J){for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Iq(z),Y>=CY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);for(let w=0,Z;w<j;w++)Z=N+w,X[Z]=Q[Z]^V[w];N+=j}return}for(let N=0;N<W;Y++){if($(q,J,G,z,Y,U),Y>=CY)throw Error("arx: counter overflow");let j=Math.min(pG,W-N);if(M&&j===pG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<K4;Z++)T=w+Z,K[T]=D[T]^z[Z];N+=pG;continue}for(let w=0,Z;w<j;w++)Z=N+w,X[Z]=Q[Z]^V[w];N+=j}}function EW($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:X,rounds:Y}=ZW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(Y),H9(X),H9(J),(U,W,V,z,M=0)=>{b0(U,void 0,"key"),b0(W,void 0,"nonce"),b0(V,void 0,"data");let D=V.length;if(z=uG(D,z,!1),I8(M),M<0||M>=CY)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=P8(U)),w=M4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=z4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!E8(W))K.push(W=P8(W));let Z=Qq(j);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=W.subarray(0,16);if(_J)G(w,Z,Qq(f),Z);else{let u=Iq(Uint32Array.from(w));G(u,Z,Qq(f),Z),r$(u),Iq(Z)}W=W.subarray(16)}else if(!_J)Iq(Z);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(W,X?0:12-W.length),W=f,K.push(W)}let _=Iq(Qq(W));try{return D4($,w,Z,_,V,z,M,Y),z}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class PW{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),X=d0($,8),Y=d0($,10),U=d0($,12),W=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|X<<12)&255,this.r[5]=X>>>1&8190,this.r[6]=(X>>>14|Y<<2)&8191,this.r[7]=(Y>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=d0($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:X}=this,Y=X[0],U=X[1],W=X[2],V=X[3],z=X[4],M=X[5],D=X[6],K=X[7],N=X[8],j=X[9],w=d0($,q+0),Z=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),u=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),A=Q[6]+((f>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*Y+y*(5*j)+l*(5*N)+v*(5*K)+I*(5*D);L=b>>>13,b&=8191,b+=C*(5*M)+A*(5*z)+S*(5*V)+P*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*Y+l*(5*j)+v*(5*N)+I*(5*K);L=O>>>13,O&=8191,O+=C*(5*D)+A*(5*M)+S*(5*z)+P*(5*V)+g*(5*W),L+=O>>>13,O&=8191;let x=L+k*W+y*U+l*Y+v*(5*j)+I*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+A*(5*D)+S*(5*M)+P*(5*z)+g*(5*V),L+=x>>>13,x&=8191;let d=L+k*V+y*W+l*U+v*Y+I*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+A*(5*K)+S*(5*D)+P*(5*M)+g*(5*z),L+=d>>>13,d&=8191;let B=L+k*z+y*V+l*W+v*U+I*Y;L=B>>>13,B&=8191,B+=C*(5*j)+A*(5*N)+S*(5*K)+P*(5*D)+g*(5*M),L+=B>>>13,B&=8191;let a=L+k*M+y*z+l*V+v*W+I*U;L=a>>>13,a&=8191,a+=C*Y+A*(5*j)+S*(5*N)+P*(5*K)+g*(5*D),L+=a>>>13,a&=8191;let q0=L+k*D+y*M+l*z+v*V+I*W;L=q0>>>13,q0&=8191,q0+=C*U+A*Y+S*(5*j)+P*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let X0=L+k*K+y*D+l*M+v*z+I*V;L=X0>>>13,X0&=8191,X0+=C*W+A*U+S*Y+P*(5*j)+g*(5*N),L+=X0>>>13,X0&=8191;let G0=L+k*N+y*K+l*D+v*M+I*z;L=G0>>>13,G0&=8191,G0+=C*V+A*W+S*U+P*Y+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*D+I*M;L=t>>>13,t&=8191,t+=C*z+A*V+S*W+P*U+g*Y,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=X0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let Y=2;Y<10;Y++)$[Y]+=G,G=$[Y]>>>13,$[Y]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let Y=1;Y<10;Y++)J[Y]=$[Y]+G,G=J[Y]>>>13,J[Y]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let Y=0;Y<10;Y++)J[Y]&=Q;Q=~Q;for(let Y=0;Y<10;Y++)$[Y]=$[Y]&Q|J[Y];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let X=$[0]+q[0];$[0]=X&65535;for(let Y=1;Y<8;Y++)X=($[Y]+q[Y]|0)+(X>>>16)|0,$[Y]=X&65535;r$(J)}update($){TY(this),b0($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(J-this.pos,G-Q);if(X===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){TY(this),wW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let X=0;X<8;X++)$[Q++]=J[X]>>>0,$[Q++]=J[X]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var LW=BW(32,($)=>new PW($));function R4($,q,J,G,Q,X=20){let Y=$[0],U=$[1],W=$[2],V=$[3],z=q[0],M=q[1],D=q[2],K=q[3],N=q[4],j=q[5],w=q[6],Z=q[7],T=Q,_=J[0],f=J[1],u=J[2],F=Y,m=U,k=W,y=V,l=z,v=M,I=D,C=K,A=N,S=j,P=w,g=Z,L=T,b=_,O=f,x=u;for(let B=0;B<X;B+=2)F=F+l|0,L=j0(L^F,16),A=A+L|0,l=j0(l^A,12),F=F+l|0,L=j0(L^F,8),A=A+L|0,l=j0(l^A,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+I|0,O=j0(O^k,16),P=P+O|0,I=j0(I^P,12),k=k+I|0,O=j0(O^k,8),P=P+O|0,I=j0(I^P,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),P=P+x|0,v=j0(v^P,12),F=F+v|0,x=j0(x^F,8),P=P+x|0,v=j0(v^P,7),m=m+I|0,L=j0(L^m,16),g=g+L|0,I=j0(I^g,12),m=m+I|0,L=j0(L^m,8),g=g+L|0,I=j0(I^g,7),k=k+C|0,b=j0(b^k,16),A=A+b|0,C=j0(C^A,12),k=k+C|0,b=j0(b^k,8),A=A+b|0,C=j0(C^A,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=Y+F|0,G[d++]=U+m|0,G[d++]=W+k|0,G[d++]=V+y|0,G[d++]=z+l|0,G[d++]=M+v|0,G[d++]=D+I|0,G[d++]=K+C|0,G[d++]=N+A|0,G[d++]=j+S|0,G[d++]=w+P|0,G[d++]=Z+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=u+x|0}var H4=EW(R4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var O4=new Uint8Array(16),FW=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(O4.subarray(J))},N4=new Uint8Array(32);function gW($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let X=$(q,J,N4),Y=TW(G.length,Q?Q.length:0,!0),U=LW.create(X);if(Q)FW(U,Q);FW(U,G),U.update(Y);let W=U.digest();return r$(X,Y),W}var j4=($)=>(q,J,G)=>{return{encrypt(X,Y){let U=X.length;Y=uG(U+16,Y,!1),Y.set(X);let W=Y.subarray(0,-16);$(q,J,W,W,1);let V=gW($,q,J,W,G);return Y.set(V,U),r$(V),Y},decrypt(X,Y){Y=uG(X.length-16,Y,!1);let U=X.subarray(0,-16),W=X.subarray(-16),V=gW($,q,J,U,G);if(!AW(W,V))throw r$(V),Error("invalid tag");return Y.set(X.subarray(0,-16)),$(q,J,Y,Y,1),r$(V),Y}}},sq=SW({blockSize:64,nonceLength:12,tagLength:16},j4(H4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,X=q!==void 0;if(!G||X&&Q!==q){let Y=J&&`"${J}" `,U=X?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(Y+"expected Uint8Array"+U+", got "+W)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Pq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function O9($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function N9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function A$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function j9($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var w4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function Z4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function A4($){for(let q=0;q<$.length;q++)$[q]=Z4($[q]);return $}var IY=w4?($)=>$:A4,vW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),B4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),vW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=B4[$[J]];return q}var Eq={_0:48,_9:57,A:65,F:70,a:97,f:102};function _W($){if($>=Eq._0&&$<=Eq._9)return $-Eq._0;if($>=Eq.A&&$<=Eq.F)return $-(Eq.A-10);if($>=Eq.a&&$<=Eq.f)return $-(Eq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(vW)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,X=0;Q<J;Q++,X+=2){let Y=_W($.charCodeAt(X)),U=_W($.charCodeAt(X+1));if(Y===void 0||U===void 0){let W=$[X]+$[X+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+X)}G[Q]=Y*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let X=$[G];J.set(X,Q),Q+=X.length}return J}function F8($,q={}){let J=(Q,X)=>$(X).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PY=BigInt(0),EY=BigInt(1);function lG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function bW($){if(typeof $==="bigint"){if(!w9($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function rG($){let q=bW($).toString(16);return q.length&1?"0"+q:q}function yW($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?PY:BigInt("0x"+$)}function $J($){return yW(vJ($))}function qJ($){return yW(vJ(Z9(Q0($)).reverse()))}function g8($,q){m0(q),$=bW($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function dG($,q){return g8($,q).reverse()}function Z9($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var w9=($)=>typeof $==="bigint"&&PY<=$;function S4($,q,J){return w9($)&&w9(q)&&w9(J)&&q<=$&&$<J}function iG($,q,J,G){if(!S4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function LY($){let q;for(q=0;$>PY;$>>=EY,q+=1);return q}var cG=($)=>(EY<<BigInt($))-EY;function kW($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,g0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,Z=[];while(w<q){W=D();let T=W.slice();Z.push(T),w+=W.length}return g0(...Z)};return(w,Z)=>{M(),K(w);let T=void 0;while(!(T=Z(N())))K();return M(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(X,Y,U){let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw Error(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}function FY($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let X=$(J,...G);return q.set(J,X),X}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),mW=BigInt(3),hW=BigInt(4),uW=BigInt(5),T4=BigInt(7),pW=BigInt(8),C4=BigInt(9),lW=BigInt(16);function R$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function fW($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=R$($,q),G=q,Q=H$,X=q$,Y=q$,U=H$;while(J!==H$){let V=G/J,z=G%J,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==q$)throw Error("invert: does not exist");return R$(Q,q)}function gY($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function rW($,q){let J=($.ORDER+q$)/hW,G=$.pow(q,J);return gY($,G,q),G}function I4($,q){let J=($.ORDER-uW)/pW,G=$.mul(q,kJ),Q=$.pow(G,J),X=$.mul(q,Q),Y=$.mul($.mul(X,kJ),Q),U=$.mul(X,$.sub(Y,$.ONE));return gY($,U,q),U}function E4($){let q=A9($),J=dW($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+T4)/lW;return(U,W)=>{let V=U.pow(W,Y),z=U.mul(V,G),M=U.mul(V,Q),D=U.mul(V,X),K=U.eql(U.sqr(z),W),N=U.eql(U.sqr(M),W);V=U.cmov(V,z,K),z=U.cmov(D,M,N);let j=U.eql(U.sqr(z),W),w=U.cmov(V,z,j);return gY(U,w,W),w}}function dW($){if($<mW)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=A9($);while(xW(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return rW;let X=Q.pow(G,q),Y=(q+q$)/kJ;return function(W,V){if(W.is0(V))return V;if(xW(W,V)!==1)throw Error("Cannot find square root");let z=J,M=W.mul(W.ONE,X),D=W.pow(V,q),K=W.pow(V,Y);while(!W.eql(D,W.ONE)){if(W.is0(D))return W.ZERO;let N=1,j=W.sqr(D);while(!W.eql(j,W.ONE))if(N++,j=W.sqr(j),N===z)throw Error("Cannot find square root");let w=q$<<BigInt(z-N-1),Z=W.pow(M,w);z=N,M=W.sqr(Z),D=W.mul(D,M),K=W.mul(K,Z)}return K}}function P4($){if($%hW===mW)return rW;if($%pW===uW)return I4;if($%lW===C4)return E4($);return dW($)}var L4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function _Y($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=L4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function F4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function nG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((Y,U,W)=>{if($.is0(U))return Y;return G[W]=Y,$.mul(Y,U)},$.ONE),X=$.inv(Q);return q.reduceRight((Y,U,W)=>{if($.is0(U))return Y;return G[W]=$.mul(Y,G[W]),$.mul(Y,U)},X),G}function xW($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),X=$.eql(G,$.ZERO),Y=$.eql(G,$.neg($.ONE));if(!Q&&!X&&!Y)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function g4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class iW{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=g4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return R$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R$($*$,this.ORDER)}add($,q){return R$($+q,this.ORDER)}sub($,q){return R$($-q,this.ORDER)}mul($,q){return R$($*q,this.ORDER)}pow($,q){return F4(this,$,q)}div($,q){return R$($*fW(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return fW($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=P4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?dG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(Y)U=R$(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return nG(this,$)}cmov($,q,J){return J?q:$}}function A9($,q={}){return new iW($,q)}function cW($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function vY($){let q=cW($);return q+Math.ceil(q/2)}function nW($,q,J=!1){Q0($);let G=$.length,Q=cW(q),X=vY(q);if(G<16||G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?qJ($):$J($),U=R$(Y,q-q$)+q$;return J?dG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function oG($,q){let J=q.negate();return $?J:q}function fY($,q){let J=nG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function tW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function bY($,q){tW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=cG($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function oW($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=fJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var yY=new WeakMap,eW=new WeakMap;function kY($){return eW.get($)||1}function aW($){if($!==_8)throw Error("invalid wNAF")}class xY{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=bY(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=bY($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=oW(J,Y,X);if(J=U,V)Q=Q.add(oG(M,q[D]));else G=G.add(oG(z,q[W]))}return aW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=bY($,this.bits);for(let X=0;X<Q.windows;X++){if(J===_8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=oW(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return aW(J),G}getPrecomputes($,q,J){let G=yY.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);yY.set(q,G)}}return G}cached($,q,J){let G=kY($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=kY($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){tW(q,this.bits),eW.set($,q),yY.delete($)}hasCache($){return kY($)!==1}}function $V($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>_8||G>_8){if(J&fJ)X=X.add(Q);if(G&fJ)Y=Y.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:X,p2:Y}}function sW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return _Y(q),q}else return A9($,{isLE:J})}function qV($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>_8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=sW(q.p,J.Fp,G),X=sW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function B9($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aG=BigInt(0),v8=BigInt(1),S9=BigInt(2);function _4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function JV($){let q=_4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y||tq,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?S9**BigInt(254):S9**BigInt(447),N=U?BigInt(8)*S9**BigInt(251)-v8:BigInt(4)*S9**BigInt(445)-v8,j=K+N+v8,w=(A)=>R$(A,J),Z=T(M);function T(A){return dG(w(A),z)}function _(A){let S=Z9(Q0(A,z,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(A){return qJ(Q(Z9(Q0(A,z,"scalar"))))}function u(A,S){let P=l(_(S),f(A));if(P===aG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let m=F,k=u;function y(A,S,P){let g=w(A*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(A,S){iG("u",A,aG,J),iG("scalar",S,K,j);let P=S,g=A,L=v8,b=aG,O=A,x=v8,d=aG;for(let a=BigInt(V-1);a>=aG;a--){let q0=P>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},I=(A=W(z))=>{return Q0(A,v.seed,"seed"),A},C={randomSecretKey:I};return Object.freeze({keygen:B9(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:Z.slice(),lengths:v})}class mY{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),A$(G)}update($){return Pq(this),this.iHash.update($),this}digestInto($){Pq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:X,outputLen:Y}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=X,$.outputLen=Y,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new mY($,q).update(J).digest();b8.create=($,q)=>new mY($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GV=($,q)=>($+($>=0?q:-q)/XV)/q;function v4($,q,J){let[[G,Q],[X,Y]]=q,U=GV(Y*$,J),W=GV(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Lq,D=z<Lq;if(M)V=-V;if(D)z=-z;let K=cG(Math.ceil(LY(J)/2))+y8;if(V<Lq||V>=K||z<Lq||z>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:M,k1:V,k2neg:D,k2:z}}function uY($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function hY($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(lG(J.lowS,"lowS"),lG(J.prehash,"prehash"),J.format!==void 0)uY(J.format);return J}class QV extends Error{constructor($=""){super($)}}var GJ={Err:QV,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=rG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?rG(Q.length/2|128):"";return rG($)+X+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=GJ;if($<Lq)throw new q("integer: negative integers are not allowed");let J=rG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}},Lq=BigInt(0),y8=BigInt(1),XV=BigInt(2),T9=BigInt(3),b4=BigInt(4);function pY($,q={}){let J=qV("weierstrass",$,q),{Fp:G,Fn:Q}=J,X=J.CURVE,{h:Y,n:U}=X;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=UV(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function M(I,C,A){let{x:S,y:P}=C.toAffine(),g=G.toBytes(S);if(lG(A,"isCompressed"),A){z();let L=!G.isOdd(P);return g0(YV(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(P))}function D(I){Q0(I,void 0,"Point");let{publicKey:C,publicKeyUncompressed:A}=V,S=I.length,P=I[0],g=I.subarray(1);if(S===C&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}z();let x=G.isOdd(O);if((P&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${A}`)}let K=q.toBytes||M,N=q.fromBytes||D;function j(I){let C=G.sqr(I),A=G.mul(C,I);return G.add(G.add(A,G.mul(I,X.a)),X.b)}function w(I,C){let A=G.sqr(C),S=j(I);return G.eql(A,S)}if(!w(X.Gx,X.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(X.a,T9),b4),T=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function _(I,C,A=!1){if(!G.isValid(C)||A&&G.is0(C))throw Error(`bad point coordinate ${I}`);return C}function f(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!W||!W.basises)throw Error("no endo");return v4(I,W.basises,Q.ORDER)}let F=FY((I,C)=>{let{X:A,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:A,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(A,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=FY((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:C,y:A}=I.toAffine();if(!G.isValid(C)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!w(C,A))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(I,C,A,S,P){return A=new y(G.mul(A.X,I),A.Y,A.Z),C=oG(S,C),A=oG(P,A),C.add(A)}class y{static BASE=new y(X.Gx,X.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,C,A){this.X=_("x",I),this.Y=_("y",C,!0),this.Z=_("z",A),Object.freeze(this)}static CURVE(){return X}static fromAffine(I){let{x:C,y:A}=I||{};if(!I||!G.isValid(C)||!G.isValid(A))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(A))return y.ZERO;return new y(C,A,G.ONE)}static fromBytes(I){let C=y.fromAffine(N(Q0(I,void 0,"point")));return C.assertValidity(),C}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,C=!0){if(v.createCache(this,I),!C)this.multiply(T9);return this}assertValidity(){m(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){f(I);let{X:C,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(C,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:C}=X,A=G.mul(C,T9),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(A,O),B=G.mul(I,B),a=G.sub(x,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(P,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){f(I);let{X:C,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=X.a,B=G.mul(X.b,T9),a=G.mul(C,P),q0=G.mul(A,g),X0=G.mul(S,L),G0=G.add(C,A),t=G.add(P,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(P,L);return t=G.mul(t,O0),O0=G.add(a,X0),t=G.sub(t,O0),O0=G.add(A,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,X0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,X0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),X0=G.mul(d,X0),t=G.mul(B,t),q0=G.add(q0,X0),X0=G.sub(a,X0),X0=G.mul(d,X0),t=G.add(t,X0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:C}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let A,S,P=(g)=>v.cached(this,g,(L)=>fY(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:x,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),A=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=P(I);A=g,S=L}return fY(y,[A,S])[0]}multiplyUnsafe(I){let{endo:C}=q,A=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Lq||A.is0())return y.ZERO;if(I===y8)return A;if(v.hasCache(this))return this.multiply(I);if(C){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=$V(y,A,P,L);return k(C.beta,b,O,S,g)}else return v.unsafe(A,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(Y===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(Y===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(Y)}isSmallOrder(){return this.multiplyUnsafe(Y).is0()}toBytes(I=!0){return lG(I,"isCompressed"),this.assertValidity(),K(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new xY(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function YV($){return Uint8Array.of($?2:3)}function UV($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function y4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(UV($.Fp,J),{seed:vY(J.ORDER)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let Z=K.length;if(N===!0&&Z!==j)return!1;if(N===!1&&Z!==w)return!1;return!!$.fromBytes(K)}catch(Z){return!1}}function U(K=G(Q.seed)){return nW(Q0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let Z=Q0(K,void 0,"key").length;return Z===j||Z===w}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=B9(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function lY($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((A,S)=>b8(q,A,S)),{Fp:X,Fn:Y}=$,{ORDER:U,BITS:W}=Y,{keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K}=y4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*XV<X.ORDER;function w(A){let S=U>>y8;return A>S}function Z(A,S){if(!Y.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(A,S){uY(S);let P=K.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q0(A,g)}class f{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=N.format){_(A,S);let P;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(A));return new f(O,x)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=K.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new f(Y.fromBytes(L),Y.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(bJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new f(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!X.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=X.toBytes(L),O=$.fromBytes(g0(YV((g&1)===0),b)),x=Y.inv(L),d=F(Q0(A,void 0,"msgHash")),B=Y.create(-d*x),a=Y.create(P*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(A=N.format){if(uY(A),A==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=Y.toBytes(S),L=Y.toBytes(P);if(A==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(A){return vJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-W;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return Y.create(u(S))},m=cG(W);function k(A){return iG("num < 2^"+W,A,Lq,m),Y.toBytes(A)}function y(A,S){return Q0(A,void 0,"message"),S?Q0(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=hY(P,N);A=y(A,L);let O=F(A),x=Y.fromBytes(S);if(!Y.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let X0=b===!0?G(K.secretKey):b;d.push(Q0(X0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(X0){let G0=u(X0);if(!Y.isValidNot0(G0))return;let t=Y.inv(G0),O0=$.BASE.multiply(G0).toAffine(),Z0=Y.create(O0.x);if(Z0===Lq)return;let I0=Y.create(t*Y.create(a+Z0*x));if(I0===Lq)return;let x0=(O0.x===Z0?0:2)|Number(O0.y&y8),K$=I0;if(g&&w(I0))K$=Y.neg(I0),x0^=1;return new f(Z0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return kW(q.outputLen,Y.BYTES,Q)(g,L).toBytes(P.format)}function I(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=hY(g,N);if(P=Q0(P,void 0,"publicKey"),S=y(S,b),!L8(A)){let x=A instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(A,O);try{let x=f.fromBytes(A,O),d=$.fromBytes(P);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),X0=Y.inv(a),G0=Y.create(q0*X0),t=Y.create(B*X0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return Y.create(O0.x)===B}catch(x){return!1}}function C(A,S,P={}){let{prehash:g}=hY(P,N);return S=y(S,g),f.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:z,getSharedSecret:M,utils:D,lengths:K,Point:$,sign:v,verify:I,recoverPublicKey:C,Signature:f,hash:q})}function WV($,q,J){return $&q^~$&J}function VV($,q,J){return $&q^$&J^q&J}class C9{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=j9(this.buffer)}update($){Pq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let X=0;X<Q;){let Y=Math.min(G-this.pos,Q-X);if(Y===G){let U=j9($);for(;G<=Q-X;X+=G)this.process(U,X);continue}if(J.set($.subarray(X,X+Y),this.pos),this.pos+=Y,X+=Y,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Pq(this),O9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:X}=this;if(q[X++]=128,A$(this.buffer.subarray(X)),this.padOffset>G-X)this.process(J,0),X=0;for(let z=X;z<G;z++)q[z]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let Y=j9($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let z=0;z<W;z++)Y.setUint32(4*z,V[z],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:X,pos:Y}=this;if($.destroyed=X,$.finished=Q,$.length=G,$.pos=Y,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Fq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),gq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var I9=BigInt(4294967295),zV=BigInt(32);function k4($,q=!1){if(q)return{h:Number($&I9),l:Number($>>zV&I9)};return{h:Number($>>zV&I9)|0,l:Number($&I9)|0}}function E9($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let X=0;X<J;X++){let{h:Y,l:U}=k4($[X],q);[G[X],Q[X]]=[Y,U]}return[G,Q]}var rY=($,q,J)=>$>>>J,dY=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,sG=($,q,J)=>$<<64-J|q>>>J-32,tG=($,q,J)=>$>>>J-32|q<<64-J;var MV=($,q,J)=>$<<J|q>>>32-J,KV=($,q,J)=>q<<J|$>>>32-J,DV=($,q,J)=>q<<J-32|$>>>64-J,RV=($,q,J)=>$<<J-32|q>>>64-J;function Xq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var HV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),OV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,NV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),jV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,wV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),ZV=($,q,J,G,Q,X)=>q+J+G+Q+X+($/4294967296|0)|0;var x4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class iY extends C9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:X,G:Y,H:U}=this;return[$,q,J,G,Q,X,Y,U]}set($,q,J,G,Q,X,Y,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=X|0,this.G=Y|0,this.H=U|0}process($,q){for(let z=0;z<16;z++,q+=4)QJ[z]=$.getUint32(q,!1);for(let z=16;z<64;z++){let M=QJ[z-15],D=QJ[z-2],K=d$(M,7)^d$(M,18)^M>>>3,N=d$(D,17)^d$(D,19)^D>>>10;QJ[z]=N+QJ[z-7]+K+QJ[z-16]|0}let{A:J,B:G,C:Q,D:X,E:Y,F:U,G:W,H:V}=this;for(let z=0;z<64;z++){let M=d$(Y,6)^d$(Y,11)^d$(Y,25),D=V+M+WV(Y,U,W)+x4[z]+QJ[z]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+VV(J,G,Q)|0;V=W,W=U,U=Y,Y=X+D|0,X=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,X=X+this.D|0,Y=Y+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,X,Y,U,W,V)}roundClean(){A$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),A$(this.buffer)}}class AV extends iY{A=Fq[0]|0;B=Fq[1]|0;C=Fq[2]|0;D=Fq[3]|0;E=Fq[4]|0;F=Fq[5]|0;G=Fq[6]|0;H=Fq[7]|0;constructor(){super(32)}}class m4 extends iY{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(28)}}var BV=(()=>E9(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),h4=(()=>BV[0])(),u4=(()=>BV[1])(),XJ=new Uint32Array(80),YJ=new Uint32Array(80);class eG extends C9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:X,Dh:Y,Dl:U,Eh:W,El:V,Fh:z,Fl:M,Gh:D,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j]}set($,q,J,G,Q,X,Y,U,W,V,z,M,D,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=X|0,this.Dh=Y|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=z|0,this.Fl=M|0,this.Gh=D|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)XJ[T]=$.getUint32(q),YJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=XJ[T-15]|0,f=YJ[T-15]|0,u=xJ(_,f,1)^xJ(_,f,8)^rY(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^dY(_,f,7),m=XJ[T-2]|0,k=YJ[T-2]|0,y=xJ(m,k,19)^sG(m,k,61)^rY(m,k,6),l=mJ(m,k,19)^tG(m,k,61)^dY(m,k,6),v=NV(F,l,YJ[T-7],YJ[T-16]),I=jV(v,u,y,XJ[T-7],XJ[T-16]);XJ[T]=I|0,YJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:X,Ch:Y,Cl:U,Dh:W,Dl:V,Eh:z,El:M,Fh:D,Fl:K,Gh:N,Gl:j,Hh:w,Hl:Z}=this;for(let T=0;T<80;T++){let _=xJ(z,M,14)^xJ(z,M,18)^sG(z,M,41),f=mJ(z,M,14)^mJ(z,M,18)^tG(z,M,41),u=z&D^~z&N,F=M&K^~M&j,m=wV(Z,f,F,u4[T],YJ[T]),k=ZV(m,w,_,u,h4[T],XJ[T]),y=m|0,l=xJ(J,G,28)^sG(J,G,34)^sG(J,G,39),v=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),I=J&Q^J&Y^Q&Y,C=G&X^G&U^X&U;w=N|0,Z=j|0,N=D|0,j=K|0,D=z|0,K=M|0,{h:z,l:M}=Xq(W|0,V|0,k|0,y|0),W=Y|0,V=U|0,Y=Q|0,U=X|0,Q=J|0,X=G|0;let A=HV(y,v,C);J=OV(A,k,l,I),G=A|0}({h:J,l:G}=Xq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:X}=Xq(this.Bh|0,this.Bl|0,Q|0,X|0),{h:Y,l:U}=Xq(this.Ch|0,this.Cl|0,Y|0,U|0),{h:W,l:V}=Xq(this.Dh|0,this.Dl|0,W|0,V|0),{h:z,l:M}=Xq(this.Eh|0,this.El|0,z|0,M|0),{h:D,l:K}=Xq(this.Fh|0,this.Fl|0,D|0,K|0),{h:N,l:j}=Xq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:Z}=Xq(this.Hh|0,this.Hl|0,w|0,Z|0),this.set(J,G,Q,X,Y,U,W,V,z,M,D,K,N,j,w,Z)}roundClean(){A$(XJ,YJ)}destroy(){A$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class p4 extends eG{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class SV extends eG{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class l4 extends eG{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class r4 extends eG{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var P9=F8(()=>new AV,eq(1));var TV=F8(()=>new SV,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var d4=BigInt(1),CV=BigInt(2),i4=BigInt(3),c4=BigInt(5),EF=BigInt(8),IV=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function n4($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=IV,U=$*$%X*$%X,W=k$(U,CV,X)*U%X,V=k$(W,d4,X)*$%X,z=k$(V,c4,X)*V%X,M=k$(z,q,X)*z%X,D=k$(M,J,X)*M%X,K=k$(D,G,X)*D%X,N=k$(K,Q,X)*K%X,j=k$(N,Q,X)*K%X,w=k$(j,q,X)*z%X;return{pow_p_5_8:k$(w,CV,X)*$%X,b2:U}}function o4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var EV=(()=>{let $=IV;return JV({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=n4(q);return R$(k$(J,i4,$)*G,$)},adjustScalarBytes:o4})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var a4=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),s4=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var t4=pY(a4),cY=lY(t4,P9);var e4=pY(s4),PV=lY(e4,TV);function FV($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var nY=Uint8Array.of(0),LV=Uint8Array.of();function gV($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let X=Math.ceil(G/Q);if(J===void 0)J=LV;else Q0(J,void 0,"info");let Y=new Uint8Array(X*Q),U=b8.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let z=0;z<X;z++)nY[0]=z+1,W.update(z===0?LV:V).update(J).update(nY).digestInto(V),Y.set(V,Q*z),U._cloneInto(W);return U.destroy(),W.destroy(),A$(V,nY),Y.slice(0,G)}var $O=BigInt(0),$Q=BigInt(1),qO=BigInt(2),JO=BigInt(7),GO=BigInt(256),QO=BigInt(113),bV=[],yV=[],kV=[];for(let $=0,q=$Q,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],bV.push(2*(5*G+J)),yV.push(($+1)*($+2)/2%64);let Q=$O;for(let X=0;X<7;X++)if(q=(q<<$Q^(q>>JO)*QO)%GO,q&qO)Q^=$Q<<($Q<<BigInt(X))-$Q;kV.push(Q)}var fV=E9(kV,!0),XO=fV[0],YO=fV[1],_V=($,q,J)=>J>32?DV($,q,J):MV($,q,J),vV=($,q,J)=>J>32?RV($,q,J):KV($,q,J);function UO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let Y=0;Y<10;Y++)J[Y]=$[Y]^$[Y+10]^$[Y+20]^$[Y+30]^$[Y+40];for(let Y=0;Y<10;Y+=2){let U=(Y+8)%10,W=(Y+2)%10,V=J[W],z=J[W+1],M=_V(V,z,1)^J[U],D=vV(V,z,1)^J[U+1];for(let K=0;K<50;K+=10)$[Y+K]^=M,$[Y+K+1]^=D}let Q=$[2],X=$[3];for(let Y=0;Y<24;Y++){let U=yV[Y],W=_V(Q,X,U),V=vV(Q,X,U),z=bV[Y];Q=$[z],X=$[z+1],$[z]=W,$[z+1]=V}for(let Y=0;Y<50;Y+=10){for(let U=0;U<10;U++)J[U]=$[Y+U];for(let U=0;U<10;U++)$[Y+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=XO[G],$[1]^=YO[G]}A$(J)}class L9{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=N9(this.state)}clone(){return this._cloneInto()}keccak(){IY(this.state32),UO(this.state32,this.rounds),IY(this.state32),this.posOut=0,this.pos=0}update($){Pq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let X=Math.min(q-this.pos,G-Q);for(let Y=0;Y<X;Y++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Pq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let X=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+X),G),this.posOut+=X,G+=X}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(O9($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,A$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:X}=this;return $||=new L9(q,J,G,X,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=X,$.destroyed=this.destroyed,$}}var xV=($,q,J,G={})=>F8(()=>new L9(q,$,J),G);var hJ=xV(6,136,32,eq(8));var mV=xV(6,72,64,eq(10));var hV=($,q,J,G={})=>F8((Q={})=>new L9(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),uV=hV(31,168,16,eq(11)),Yq=hV(31,136,32,eq(12));function oY($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function lV($){return oY($),($&$-1)===0&&$!==0}function aY($,q){oY($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function rV($){return oY($),31-Math.clz32($)}function pV($){let q=$.length;if(q<2||!lV(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=rV(q);for(let G=0;G<q;G++){let Q=aY(G,J);if(G<Q){let X=$[G];$[G]=$[Q],$[Q]=X}}return $}var sY=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:X=!1,skipStages:Y=0,brp:U=!0}=q,W=rV(J);if(!lV(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==X;return(z)=>{if(z.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)pV(z);for(let M=0,D=1;M<W-Y;M++){let K=Q?M+1+Y:W-M,N=1<<K,j=N>>1,w=J>>K;for(let Z=0;Z<J;Z+=N)for(let T=0,_=D++;T<j;T++){let f=X?Q?J-_:_:T*w,u=Z+T,F=Z+T+j,m=G[f],k=z[F],y=z[u];if(V){let l=$.mul(k,m);z[u]=$.add(y,l),z[F]=$.sub(y,l)}else if(X)z[u]=$.add(k,y),z[F]=$.mul($.sub(k,y),m);else z[u]=$.add(y,k),z[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)pV(z);return z}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function F9($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function dV($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,X)=>Q+J(X),0);return{bytesLen:G,encode:(Q)=>{let X=new Uint8Array(G);for(let Y=0,U=0;Y<q.length;Y++){let W=q[Y],V=J(W),z=typeof W==="number"?Q[Y]:W.encode(Q[Y]);if(Q0(z,V,$),X.set(z,U),typeof W!=="number")z.fill(0);U+=V}return X},decode:(Q)=>{Q0(Q,G,$);let X=[];for(let Y of q){let U=J(Y),W=Q.subarray(0,U);X.push(typeof Y==="number"?W:Y.decode(W)),Q=Q.subarray(U)}return X}}}function g9($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let X=0,Y=0;X<G.length;X++){let U=$.encode(G[X]);Q.set(U,Y),U.fill(0),Y+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let X=0;X<G.length;X+=$.bytesLen)Q.push($.decode(G.subarray(X,X+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function tY($){return(1<<$)-1}var pF=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var iV=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:X,brvBits:Y,isKyber:U}=$,W=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},V=(T,_=G)=>{let f=W(T,_)|0;return(f>_>>1?f-_|0:f)|0};function z(){let T=q(J);for(let _=0;_<J;_++){let f=aY(_,Y),u=BigInt(X)**BigInt(f)%BigInt(G);T[_]=Number(u)|0}return T}let M=z(),D={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:M,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=sY(D,{dit:!1,...K}),j=sY(D,{dit:!0,...K});return{mod:W,smod:V,nttZetas:M,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=tY(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let m=new Uint8Array(u);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&tY(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},WO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,X=new Uint8Array(J),Y=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,z)=>{return G[Q+0]=V,G[Q+1]=z,Y.destroy(),Y=$.create({}).update(G),U++,()=>{return W++,Y.xofInto(X)}},clean:()=>{Y.destroy(),y0(X,G)}}},cV=WO(uV);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,_q=3329,VO=3303,zO=17,{mod:GQ,nttZetas:MO,NTT:pJ,bitsCoder:KO}=iV({N:Q$,Q:_q,F:VO,ROOT_OF_UNITY:zO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),eY={512:{N:Q$,Q:_q,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:_q,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:_q,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},DO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+_q/2)/_q,decode:(J)=>J*_q+q>>>$}},qQ=($)=>KO($,DO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]+q[J])}function RO($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]-q[J])}function HO($,q,J,G,Q){let X=GQ(q*G*Q+$*J),Y=GQ($*G+q*J);return{c0:X,c1:Y}}function _9($,q){for(let J=0;J<Q$/2;J++){let G=MO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:X}=HO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=X}return $}function nV($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let X=(G[Q+0]>>0|G[Q+1]<<8)&4095,Y=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(X<_q)q[J++]=X;if(J<Q$&&Y<_q)q[J++]=Y}}return q}function JQ($,q,J,G){let Q=$(G*Q$/4,q,J),X=new Uint16Array(Q$),Y=N9(Q),U=0;for(let W=0,V=0,z=0,M=0;W<Y.length;W++){let D=Y[W];for(let K=0;K<32;K++)if(z+=D&1,D>>=1,U+=1,U===G)M=z,z=0;else if(U===2*G)X[V++]=GQ(M-z),z=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return X}var OO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:X,ETA2:Y,du:U,dv:W}=$,V=qQ(1),z=qQ(W),M=qQ(U),D=uJ("publicKey",g9(qQ(12),q),32),K=g9(qQ(12),q),N=uJ("ciphertext",g9(M,q),z),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let Z=new Uint8Array(33);Z.set(w),Z[32]=q;let T=Q(Z),[_,f]=j.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(JQ(J,f,y,X)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(JQ(J,f,q+y,X));for(let v=0;v<q;v++){let I=nV(m.get(v,y));lJ(l,_9(I,u[v]))}F.push(l)}m.clean();let k={publicKey:D.encode([F,_]),secretKey:K.encode(u)};return y0(_,f,u,F,Z,T),k},encrypt:(w,Z,T)=>{let[_,f]=D.decode(w),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(JQ(J,T,v,X)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let I=JQ(J,T,q+v,Y),C=new Uint16Array(Q$);for(let A=0;A<q;A++){let S=nV(F.get(v,A));lJ(C,_9(S,u[A]))}lJ(I,pJ.decode(C)),k.push(I),lJ(m,_9(_[v],u[v])),y0(C)}F.clean();let y=JQ(J,T,2*q,Y);lJ(y,pJ.decode(m));let l=V.decode(Z);return lJ(l,y),y0(_,u,m,y),N.encode([k,l])},decrypt:(w,Z)=>{let[T,_]=N.decode(w),f=K.decode(Z),u=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(u,_9(f[F],pJ.encode(T[F])));return RO(_,pJ.decode(u)),y0(u,f,T),V.encode(_)}}};function $U($){let q=OO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:X,lengths:Y}=q,U=uJ("secretKey",Y.secretKey,Y.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...Y,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(z=Uq(64))=>{Q0(z,64,"seed");let{publicKey:M,secretKey:D}=q.keygen(z.subarray(0,32)),K=J(M),N=U.encode([D,M,K,z.subarray(32)]);return y0(D,K),{publicKey:M,secretKey:N}},getPublicKey:(z)=>{let[M,D,K,N]=U.decode(z);return Uint8Array.from(D)},encapsulate:(z,M=Uq(32))=>{Q0(z,Y.publicKey,"publicKey"),Q0(M,32,"message");let D=z.subarray(0,384*$.K),K=X.encode(X.decode(dV(D)));if(!F9(K,D))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(M).update(J(z)).digest(),j=q.encrypt(z,M,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(z,M)=>{Q0(M,U.bytesLen,"secretKey"),Q0(z,Y.cipherText,"cipherText");let D=U.bytesLen-96,K=D+32,N=J(M.subarray(D/2,K));if(!F9(N,M.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,Z,T]=U.decode(M),_=q.decrypt(z,j),f=G.create().update(_).update(Z).digest(),u=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=F9(z,F),k=Q.create({dkLen:32}).update(T).update(z).digest();return y0(_,F,!m?u:k),m?u:k}}}function NO($,q,J){return Yq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var qU={HASH256:hJ,HASH512:mV,KDF:Yq,XOF:cV,PRF:NO},eF=$U({...qU,...eY[512]}),QQ=$U({...qU,...eY[768]}),oV=$U({...qU,...eY[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function jO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let X=$.Point.Fn;if(!X)throw Error("No Point.Fn");G=(Y=Uq(J.seed))=>{Q0(Y,J.seed,"seed");let U=X.isLE?qJ(Y):$J(Y),W=X.toBytes(X.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function JU($,q=!1){let J=jO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let X=this.keygen(Q).secretKey,Y=this.decapsulate(G,X),U=$.getPublicKey(X);return y0(X),{sharedSecret:Y,cipherText:U}},decapsulate(G,Q){let X=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?X.subarray(1):X}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function GU($){return(q,J)=>$(q,{dkLen:J})}function wO($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function X(Y){Q0(Y,$);let U=G.decode(q(Y,G.bytesLen)),W=J.map((M,D)=>M.keygen(U[D])),V=W.map((M)=>M.secretKey),z=W.map((M)=>M.publicKey);return{secretKey:V,publicKey:z}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(Y){return this.keygen(Y).publicKey},keygen(Y=Uq($)){let{publicKey:U,secretKey:W}=X(Y),V=Q.encode(U);return y0(U),y0(W),{secretKey:Y,publicKey:V}},expandDecapsulationKey:X,realSeedLen:$}}function v9($,q,J,G,...Q){let X=wO($,J,...Q),Y=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),W=XQ(Q,"msg");if(q===void 0)q=W.bytesLen;return m0(q),{lengths:{...X.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:Y.bytesLen},getPublicKey:X.getPublicKey,keygen:X.keygen,encapsulate(V,z=Uq(W.bytesLen)){let M=U.decode(V),D=W.decode(z),K=Q.map((Z,T)=>Z.encapsulate(M[T],D[T])),N=K.map((Z)=>Z.sharedSecret),j=K.map((Z)=>Z.cipherText),w={sharedSecret:G(M,j,N),cipherText:Y.encode(j)};return y0(N,j),w},decapsulate(V,z){let M=Y.decode(V),{publicKey:D,secretKey:K}=X.expandDecapsulationKey(z),N=Q.map((j,w)=>j.decapsulate(M[w],K[w]));return G(D,M,N)}}}function aV($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,GU(G),(X,Y,U)=>Q(g0(U[0],U[1],Y[1],X[1],JJ($))),q,J)}var zg=aV("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",QQ,JU(cY,!0),Yq,hJ),Mg=aV("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",oV,JU(PV,!0),Yq,hJ);function ZO($,q,J,G,Q){return y$(G),y$(Q),v9(32,32,GU(G),(X,Y,U)=>{let W=g0(U[0],U[1],Y[0],X[0],Y[1],X[1],JJ($)),V=32,z=g0(JJ("hybrid_prk"),W),M=FV(Q,z),D=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=gV(Q,M,D,32);return y0(M,D,z,W),K},q,J)}var sV=JU(EV),Kg=ZO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",QQ,sV,Yq,P9),AO=(()=>v9(32,32,GU(Yq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),QQ,sV))();function BO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function X(Y){let U;for(let z=0,M=q;;z=M,M+=q){if(M>Y.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(Y.subarray(z,M),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(Y=Uq(G)){return Q0(Y,G,"seed"),X(Y)},getPublicKey(Y){return $.getPublicKey(Y,!1)},encapsulate(Y,U=Uq(G)){Q0(U,G,"rand");let{secretKey:W}=X(U),V=this.decapsulate(Y,W),z=$.getPublicKey(W,!1);return y0(W),{sharedSecret:V,cipherText:z}},decapsulate(Y,U){return $.getSharedSecret(U,Y).subarray(1)}}}function SO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:X}=J.lengths;if(!Q||!X)throw Error("wrong curve");let Y=BO(J,Q,X,G),U=64,W=U+G;return v9(32,32,(V)=>{Q0(V,32);let z=Yq(V,{dkLen:W}),M=z.subarray(0,U),D=z.subarray(U,W);return g0(M,D)},(V,z,M)=>hJ(g0(M[0],M[1],z[1],V[1],JJ($))),q,Y)}var TO=(()=>SO("MLKEM768-P256",QQ,cY,128))();var QU=AO,tV=TO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var A0=($,q,J)=>u0($,q,J),YU=L0,k8=Q9,n0=(...$)=>UY(...$),f8=($)=>vG($),x8=QY,m8=($)=>Bq($),y9=BigInt(0),XU=BigInt(1);function vq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function k9($){if(typeof $==="bigint"){if(!b9($))throw RangeError("positive bigint expected, got "+$)}else YU($);return $}function Wq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function YQ($){let q=k9($).toString(16);return q.length&1?"0"+q:q}function eV($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?y9:BigInt("0x"+$)}function rJ($){return eV(Q9($))}function i$($){return eV(Q9(UJ(u0($)).reverse()))}function f9($,q){if(L0(q),q===0)throw RangeError("zero length");$=k9($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return vG(J.padStart(q*2,"0"))}function UQ($,q){return f9($,q).reverse()}function $z($,q){if($=A0($),q=A0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(A0($))}function x9($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var b9=($)=>typeof $==="bigint"&&y9<=$;function CO($,q,J){return b9($)&&b9(q)&&b9(J)&&q<=$&&$<J}function bq($,q,J,G){if(!CO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<y9)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>y9;$>>=XU,q+=1);return q}var WQ=($)=>(XU<<BigInt($))-XU;function qz($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),X=Uint8Array.of(0),Y=Uint8Array.of(1),U=1000,W=G($),V=G($),z=0,M=()=>{W.fill(1),V.fill(0),z=0},D=(...w)=>J(V,n0(W,...w)),K=(w=Q)=>{if(V=D(X,w),W=D(),w.length===0)return;V=D(Y,w),W=D()},N=()=>{if(z++>=U)throw Error("drbg: tried max amount of iterations");let w=0,Z=[];while(w<q){W=D();let T=W.slice();Z.push(T),w+=W.length}return n0(...Z)};return(w,Z)=>{M(),K(w);let T=void 0;while((T=Z(N()))===void 0)K();return M(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(X,Y,U){if(!U&&Y!=="function"&&!Object.hasOwn($,X))throw TypeError(`param "${X}" is invalid: expected own property`);let W=$[X];if(U&&W===void 0)return;let V=typeof W;if(V!==Y||W===null)throw TypeError(`param "${X}" is invalid: expected ${Y}, got ${V}`)}let Q=(X,Y)=>Object.entries(X).forEach(([U,W])=>G(U,W,Y));Q(q,!1),Q(J,!0)}var UU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),E0=BigInt(1),dJ=BigInt(2),Xz=BigInt(3),Yz=BigInt(4),Uz=BigInt(5),IO=BigInt(7),Wz=BigInt(8),EO=BigInt(9),Vz=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function Jz($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,X=E0,Y=E0,U=o0;while(J!==o0){let V=G/J,z=G-J*V,M=Q-Y*V,D=X-U*V;G=J,J=z,Q=Y,X=U,Y=M,U=D}if(G!==E0)throw Error("invert: does not exist");return T0(Q,q)}function WU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function zz($,q){let J=$,G=(J.ORDER+E0)/Yz,Q=J.pow(q,G);return WU(J,Q,q),Q}function PO($,q){let J=$,G=(J.ORDER-Uz)/Wz,Q=J.mul(q,dJ),X=J.pow(Q,G),Y=J.mul(q,X),U=J.mul(J.mul(Y,dJ),X),W=J.mul(Y,J.sub(U,J.ONE));return WU(J,W,q),W}function LO($){let q=m9($),J=Mz($),G=J(q,q.neg(q.ONE)),Q=J(q,G),X=J(q,q.neg(G)),Y=($+IO)/Vz;return(U,W)=>{let V=U,z=V.pow(W,Y),M=V.mul(z,G),D=V.mul(z,Q),K=V.mul(z,X),N=V.eql(V.sqr(M),W),j=V.eql(V.sqr(D),W);z=V.cmov(z,M,N),M=V.cmov(K,D,j);let w=V.eql(V.sqr(M),W),Z=V.cmov(z,M,w);return WU(V,Z,W),Z}}function Mz($){if($<Xz)throw Error("sqrt is not defined for small field");let q=$-E0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=m9($);while(Gz(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return zz;let X=Q.pow(G,q),Y=(q+E0)/dJ;return function(W,V){let z=W;if(z.is0(V))return V;if(Gz(z,V)!==1)throw Error("Cannot find square root");let M=J,D=z.mul(z.ONE,X),K=z.pow(V,q),N=z.pow(V,Y);while(!z.eql(K,z.ONE)){if(z.is0(K))return z.ZERO;let j=1,w=z.sqr(K);while(!z.eql(w,z.ONE))if(j++,w=z.sqr(w),j===M)throw Error("Cannot find square root");let Z=E0<<BigInt(M-j-1),T=z.pow(D,Z);M=j,D=z.sqr(T),K=z.mul(K,D),N=z.mul(N,T)}return N}}function FO($){if($%Yz===Xz)return zz;if($%Wz===Uz)return PO;if($%Vz===EO)return LO($);return Mz($)}var yq=($,q)=>(T0($,q)&E0)===E0,gO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function VU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=gO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Wq($.BYTES,"BYTES"),Wq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=E0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function _O($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===E0)return q;let Q=G.ONE,X=q;while(J>o0){if(J&E0)Q=G.mul(Q,X);X=G.sqr(X),J>>=E0}return Q}function VQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),X=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),Y=G.inv(X);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},Y),Q}function Gz($,q){let J=$,G=(J.ORDER-E0)/dJ,Q=J.pow(q,G),X=J.eql(Q,J.ONE),Y=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!X&&!Y&&!U)throw Error("invalid Legendre symbol result");return X?1:Y?0:-1}function vO($,q){if(q!==void 0)YU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var Qz=new WeakMap;class zU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=E0;_lengths;_mod;constructor($,q={}){if($<=E0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=vO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&E0)===E0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return _O(this,$,q)}div($,q){return T0($*Jz(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return Jz($,this.ORDER)}sqrt($){let q=Qz.get(this);if(!q)Qz.set(this,q=FO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?UQ($,this.BYTES):f9($,this.BYTES)}fromBytes($,q=!1){A0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:X,_mod:Y}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(Y)U=T0(U,X);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return VQ(this,$)}cmov($,q,J){return vq(J,"condition"),J?q:$}}Object.freeze(zU.prototype);function m9($,q={}){return new zU($,q)}function Kz($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=E0)throw Error("field order must be greater than 1");let q=h8($-E0);return Math.ceil(q/8)}function MU($){let q=Kz($);return q+Math.ceil(q/2)}function Dz($,q,J=!1){A0($);let G=$.length,Q=Kz(q),X=Math.max(MU(q),16);if(G<X||G>1024)throw Error("expected "+X+"-1024 bytes of input, got "+G);let Y=J?i$($):rJ($),U=T0(Y,q-E0)+E0;return J?UQ(U,Q):f9(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=VQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function Nz($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function KU($,q){Nz($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,X=WQ($),Y=BigInt($);return{windows:J,windowSize:G,mask:X,maxNumber:Q,shiftBy:Y}}function Rz($,q,J){let{windowSize:G,mask:Q,maxNumber:X,shiftBy:Y}=J,U=Number($&Q),W=$>>Y;if(U>G)U-=X,W+=iJ;let V=q*G,z=V+Math.abs(U)-1,M=U===0,D=U<0,K=q%2!==0;return{nextN:W,offset:z,isZero:M,isNeg:D,isNegF:K,offsetF:V}}var DU=new WeakMap,jz=new WeakMap;function RU($){return jz.get($)||1}function Hz($){if($!==u8)throw Error("invalid wNAF")}class MQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=KU(q,this.bits),Q=[],X=$,Y=X;for(let U=0;U<J;U++){Y=X,Q.push(Y);for(let W=1;W<G;W++)Y=Y.add(X),Q.push(Y);X=Y.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,X=KU($,this.bits);for(let Y=0;Y<X.windows;Y++){let{nextN:U,offset:W,isZero:V,isNeg:z,isNegF:M,offsetF:D}=Rz(J,Y,X);if(J=U,V)Q=Q.add(zQ(M,q[D]));else G=G.add(zQ(z,q[W]))}return Hz(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=KU($,this.bits);for(let X=0;X<Q.windows;X++){if(J===u8)break;let{nextN:Y,offset:U,isZero:W,isNeg:V}=Rz(J,X,Q);if(J=Y,W)continue;else{let z=q[U];G=G.add(V?z.negate():z)}}return Hz(J),G}getPrecomputes($,q,J){let G=DU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);DU.set(q,G)}}return G}cached($,q,J){let G=RU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=RU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){Nz(q,this.bits),jz.set($,q),DU.delete($)}hasCache($){return RU($)!==1}}function wz($,q,J,G){let Q=q,X=$.ZERO,Y=$.ZERO;while(J>u8||G>u8){if(J&iJ)X=X.add(Q);if(G&iJ)Y=Y.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:X,p2:Y}}function Oz($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return VU(q),q}else return m9($,{isLE:J})}function h9($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>u8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=Oz(q.p,J.Fp,G),X=Oz(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:X}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Wq($),Wq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function bO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function yO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?x9($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function HU($,q,J,G){if(A0($),Wq(J),q=yO(q),q.length>255)q=G(n0(x9("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:X}=G,Y=Math.ceil(J/Q);if(J>65535||Y>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,DQ(q.length,1)),W=new Uint8Array(X),V=DQ(J,2),z=Array(Y),M=G(n0(W,$,V,DQ(0,1),U));z[0]=G(n0(M,DQ(1,1),U));for(let K=1;K<Y;K++){let N=[bO(M,z[K-1]),DQ(K+1,1),U];z[K]=G(n0(...N))}return n0(...z).slice(0,J)}var Zz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Az=($,q)=>($+($>=0?q:-q)/Sz)/q;function kO($,q,J){bq("scalar",$,Vq,J);let[[G,Q],[X,Y]]=q,U=Az(Y*$,J),W=Az(-Q*$,J),V=$-U*G-W*X,z=-U*Q-W*Y,M=V<Vq,D=z<Vq;if(M)V=-V;if(D)z=-z;let K=WQ(Math.ceil(h8(J)/2))+WJ;if(V<Vq||V>=K||z<Vq||z>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:M,k1:V,k2neg:D,k2:z}}function NU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function OU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(vq(J.lowS,"lowS"),vq(J.prehash,"prehash"),J.format!==void 0)NU(J.format);return J}class Bz extends Error{constructor($=""){super($)}}var c$={Err:Bz,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Wq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=YQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let X=G>127?YQ(Q.length/2|128):"";return YQ($)+X+Q+q},decode($,q){let{Err:J}=c$;q=A0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],X=!!(Q&128),Y=0;if(!X)Y=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let z of V)Y=Y<<8|z;if(G+=W,Y<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+Y);if(U.length!==Y)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+Y)}}},_int:{encode($){let{Err:q}=c$;if(k9($),$<Vq)throw new q("integer: negative integers are not allowed");let J=YQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=A0($,void 0,"signature"),{v:X,l:Y}=G.decode(48,Q);if(Y.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,X),{v:V,l:z}=G.decode(2,W);if(z.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),X=G+Q;return q.encode(48,X)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Vq=BigInt(0),WJ=BigInt(1),Sz=BigInt(2),u9=BigInt(3),fO=BigInt(4);function Tz($,q={}){let J=h9("weierstrass",$,q),G=J.Fp,Q=J.Fn,X=J.CURVE,{h:Y,n:U}=X;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(X.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let z=Iz(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(v,I,C){if(V&&I.is0())return Uint8Array.of(0);let{x:A,y:S}=I.toAffine(),P=G.toBytes(A);if(vq(C,"isCompressed"),C){M();let g=!G.isOdd(S);return n0(Cz(g),P)}else return n0(Uint8Array.of(4),P,G.toBytes(S))}function K(v){A0(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:C}=z,A=v.length,S=v[0],P=v.subarray(1);if(V&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}M();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===C&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${I} or uncompressed=${C}`)}let N=q.toBytes===void 0?D:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let I=G.sqr(v),C=G.mul(I,v);return G.add(G.add(C,G.mul(v,X.a)),X.b)}function Z(v,I){let C=G.sqr(I),A=w(v);return G.eql(C,A)}if(!Z(X.Gx,X.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(X.a,u9),fO),_=G.mul(G.sqr(X.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,I,C=!1){if(!G.isValid(I)||C&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return kO(v,W.basises,Q.ORDER)}function m(v,I,C,A,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),I=zQ(A,I),C=zQ(S,C),I.add(C)}class k{static BASE=new k(X.Gx,X.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,C){this.X=f("x",v),this.Y=f("y",I,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return X}static fromAffine(v){let{x:I,y:C}=v||{};if(!v||!G.isValid(I)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(C))return k.ZERO;return new k(I,C,G.ONE)}static fromBytes(v){let I=k.fromAffine(j(A0(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(u9);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:C}=v.toAffine();if(!G.isValid(I)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!Z(I,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:C,Z:A}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,A)),b=G.eql(G.mul(C,g),G.mul(P,A));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=X,C=G.mul(I,u9),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),x=G.mul(S,S),d=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){u(v);let{X:I,Y:C,Z:A}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=X.a,d=G.mul(X.b,u9),B=G.mul(I,S),a=G.mul(C,P),q0=G.mul(A,g),X0=G.add(I,C),G0=G.add(S,P);X0=G.mul(X0,G0),G0=G.add(B,a),X0=G.sub(X0,G0),G0=G.add(I,A);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,A),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(X0,L),L=G.sub(L,B),B=G.mul(X0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,A,S=(P)=>l.cached(this,P,(g)=>cJ(k,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);A=x.add(B),C=m(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);C=P,A=g}return cJ(k,[C,A])[0]}multiplyUnsafe(v){let{endo:I}=q,C=this,A=v;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Vq||C.is0())return k.ZERO;if(A===WJ)return C;if(l.hasCache(this))return this.multiply(A);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=wz(k,C,P,L);return m(I.beta,b,O,S,g)}else return l.unsafe(C,A)}toAffine(v){let I=this,C=v,{X:A,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:A,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(A,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(Y===WJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(Y===WJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(Y)}isSmallOrder(){if(Y===WJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return vq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new MQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function Cz($){return Uint8Array.of($?2:3)}function Iz($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function xO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(Iz($.Fp,J),{seed:Math.max(MU(J.ORDER),16)});function X(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function Y(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let Z=K.length;if(N===!0&&Z!==j)return!1;if(N===!1&&Z!==w)return!1;return!!$.fromBytes(K)}catch(Z){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,Dz(A0(K,Q.seed,"seed"),J.ORDER)}function W(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function V(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,Z=J._lengths;if(!x8(K))return;let T=A0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!Z?.includes(T);if(_&&f)return;return _}function z(K,N,j=!0){if(V(K)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let M={isValidSecretKey:X,isValidPublicKey:Y,randomSecretKey:U},D=KQ(U,W);return Object.freeze(M),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:z,keygen:D,Point:$,utils:M,lengths:Q})}function Ez($,q,J={}){let G=q;Aq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,X=J.hmac===void 0?(S,P)=>Sq(G,S,P):J.hmac,{Fp:Y,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N}=xO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=W*Sz+WJ<Y.ORDER;function Z(S){let P=W>>WJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,P){NU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return A0(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=j.format){f(S,P);let g;if(P==="der"){let{r:x,s:d}=c$.toSig(A0(S));return new u(x,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(f8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+W:P;if(!Y.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=Y.toBytes(b),x=$.fromBytes(n0(Cz((L&1)===0),O)),d=U.inv(b),B=m(A0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),X0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(X0.is0())throw Error("invalid recovery: point at infinify");return X0.assertValidity(),X0}hasHighS(){return Z(this.s)}toBytes(S=j.format){if(NU(S),S==="der")return f8(c$.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,k=WQ(V);function y(S){return bq("num < 2^"+V,S,Vq,k),U.toBytes(S)}function l(S,P){return A0(S,void 0,"message"),P?A0(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=OU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(A0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function X0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),Z0=$.BASE.multiply(t).toAffine(),I0=U.create(Z0.x);if(I0===Vq)return;let x0=U.create(O0*U.create(q0+I0*d));if(x0===Vq)return;let K$=(Z0.x===I0?0:2)|Number(Z0.y&WJ),Jq=x0;if(L&&Z(x0))Jq=U.neg(x0),K$^=1;return new u(I0,Jq,w?void 0:K$)}return{seed:a,k2sig:X0}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return qz(G.outputLen,U.BYTES,X)(L,b).toBytes(g.format)}function C(S,P,g,L={}){let{lowS:b,prehash:O,format:x}=OU(L,j);if(g=A0(g,void 0,"publicKey"),P=l(P,O),!x8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=u.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,X0=m(P),G0=U.inv(q0),t=U.create(X0*G0),O0=U.create(a*G0),Z0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(Z0.is0())return!1;return U.create(Z0.x)===a}catch(d){return!1}}function A(S,P,g={}){let{prehash:L}=OU(g,j);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:z,getPublicKey:M,getSharedSecret:D,utils:K,lengths:N,Point:$,sign:I,verify:C,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var hO=Tz(mO),p8=Ez(hO,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VJ=BigInt(0),B$=BigInt(1),jU=BigInt(2),uO=BigInt(8);function pO($,q,J,G){let Q=$.sqr(J),X=$.sqr(G),Y=$.add($.mul(q.a,Q),X),U=$.add($.ONE,$.mul(q.d,$.mul(Q,X)));return $.eql(Y,U)}function Pz($,q={}){let J=q,G=h9("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:X}=G,Y=G.CURVE,{h:U}=Y;f$(J,{},{uvRatio:"function"});let W=jU<<BigInt(X.BYTES*8)-B$,V=(j)=>Q.create(j),z=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(Z){return{isValid:!1,value:VJ}}}:J.uvRatio;if(!pO(Q,Y,Y.Gx,Y.Gy))throw Error("bad curve params: generator point");function M(j,w,Z=!1){let T=Z?B$:VJ;return bq("coordinate "+j,w,T,W),w}function D(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(Y.Gx,Y.Gy,B$,V(Y.Gx*Y.Gy));static ZERO=new K(VJ,B$,B$,VJ);static Fp=Q;static Fn=X;X;Y;Z;T;constructor(j,w,Z,T){this.X=M("x",j),this.Y=M("y",w),this.Z=M("z",Z,!0),this.T=M("t",T),Object.freeze(this)}static CURVE(){return Y}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:Z}=j||{};return M("x",w),M("y",Z),new K(w,Z,B$,V(w*Z))}static fromBytes(j,w=!1){let Z=Q.BYTES,{a:T,d:_}=Y;j=UJ(A0(j,Z,"point")),vq(w,"zip215");let f=UJ(j),u=j[Z-1];f[Z-1]=u&-129;let F=i$(f),m=w?W:Q.ORDER;bq("point.y",F,VJ,m);let k=V(F*F),y=V(k-B$),l=V(_*k-T),{isValid:v,value:I}=z(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(I&B$)===B$,A=(u&128)!==0;if(!w&&I===VJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==C)I=V(-I);return K.fromAffine({x:I,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(jU);return this}assertValidity(){let j=this,{a:w,d:Z}=Y;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:u}=j,F=V(T*T),m=V(_*_),k=V(f*f),y=V(k*k),l=V(F*w),v=V(k*V(l+m)),I=V(y+V(Z*V(F*m)));if(v!==I)throw Error("bad point: equation left != right (1)");let C=V(T*_),A=V(f*u);if(C!==A)throw Error("bad point: equation left != right (2)")}equals(j){D(j);let{X:w,Y:Z,Z:T}=this,{X:_,Y:f,Z:u}=j,F=V(w*u),m=V(_*T),k=V(Z*u),y=V(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:j}=Y,{X:w,Y:Z,Z:T}=this,_=V(w*w),f=V(Z*Z),u=V(jU*V(T*T)),F=V(j*_),m=w+Z,k=V(V(m*m)-_-f),y=F+f,l=y-u,v=F-f,I=V(k*l),C=V(y*v),A=V(k*v),S=V(l*y);return new K(I,C,S,A)}add(j){D(j);let{a:w,d:Z}=Y,{X:T,Y:_,Z:f,T:u}=this,{X:F,Y:m,Z:k,T:y}=j,l=V(T*F),v=V(_*m),I=V(u*Z*y),C=V(f*k),A=V((T+_)*(F+m)-l-v),S=C-I,P=C+I,g=V(v-w*l),L=V(A*S),b=V(P*g),O=V(A*g),x=V(S*P);return new K(L,b,x,O)}subtract(j){return D(j),this.add(j.negate())}multiply(j){if(!X.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:Z}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,Z])[0]}multiplyUnsafe(j){if(!X.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===VJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,Y.n).is0()}toAffine(j){let w=this,Z=j,{X:T,Y:_,Z:f}=w,u=w.is0();if(Z==null)Z=u?uO:Q.inv(f);let F=V(T*Z),m=V(_*Z),k=Q.mul(f,Z);if(u)return{x:VJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),Z=Q.toBytes(w);return Z[Z.length-1]|=j&B$?128:0,Z}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new MQ(K,X.BITS);if(X.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class wU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){UU()}static fromHex($){UU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RQ=BigInt(0),l8=BigInt(1),p9=BigInt(2);function lO($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function Lz($){let q=lO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:X,randomBytes:Y}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=Y===void 0?m8:Y,V=U?255:448,z=U?32:56,M=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),K=U?p9**BigInt(254):p9**BigInt(447),N=U?BigInt(8)*p9**BigInt(251)-l8:BigInt(4)*p9**BigInt(445)-l8,j=K+N+l8,w=(A)=>T0(A,J),Z=T(M);function T(A){return UQ(w(A),z)}function _(A){let S=UJ(A0(A,z,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(A){return i$(Q(UJ(A0(A,z,"scalar"))))}function u(A,S){let P=l(_(S),f(A));if(P===RQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let m=F,k=u;function y(A,S,P){let g=w(A*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(A,S){bq("u",A,RQ,J),bq("scalar",S,K,j);let P=S,g=A,L=l8,b=RQ,O=A,x=l8,d=RQ;for(let a=BigInt(V-1);a>=RQ;a--){let q0=P>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let X0=L+b,G0=w(X0*X0),t=L-b,O0=w(t*t),Z0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*X0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(Z0*(G0+w(D*Z0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=X(b);return w(L*B)}let v={secretKey:z,publicKey:z,seed:z},I=(A)=>{return A=A===void 0?W(z):A,A0(A,v.seed,"seed"),A},C={randomSecretKey:I};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:KQ(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:Z.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rO=BigInt(0),kq=BigInt(1),Fz=BigInt(2),dO=BigInt(3),iO=BigInt(5),cO=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),SU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:cO,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function vz($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),X=oJ,U=$*$%X*$%X,W=x$(U,Fz,X)*U%X,V=x$(W,kq,X)*$%X,z=x$(V,iO,X)*V%X,M=x$(z,q,X)*z%X,D=x$(M,J,X)*M%X,K=x$(D,G,X)*D%X,N=x$(K,Q,X)*K%X,j=x$(N,Q,X)*K%X,w=x$(j,q,X)*z%X;return{pow_p_5_8:x$(w,Fz,X)*$%X,b2:U}}function nO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var ZU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function TU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),X=vz($*Q).pow_p_5_8,Y=T0($*G*X,J),U=T0(q*Y*Y,J),W=Y,V=T0(Y*ZU,J),z=U===$,M=U===T0(-$,J),D=U===T0(-$*ZU,J);if(z)Y=W;if(M||D)Y=V;if(yq(Y,J))Y=T0(-Y,J);return{isValid:z||M,value:Y}}var nJ=Pz(SU,{uvRatio:TU}),zJ=(()=>nJ.Fp)(),bz=(()=>nJ.Fn)();var l9=(()=>{let $=oJ;return Lz({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=vz(q);return T0(x$(J,dO,$)*G,$)},adjustScalarBytes:nO})})();var AU=ZU,oO=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),aO=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),sO=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),tO=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),gz=($)=>TU(kq,$),eO=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),BU=($)=>zJ.create(i$($)&eO);function _z($){let{d:q}=SU,J=oJ,G=(Z)=>zJ.create(Z),Q=G(AU*$*$),X=G((Q+kq)*sO),Y=BigInt(-1),U=G((Y-q*Q)*G(Q+q)),{isValid:W,value:V}=TU(X,U),z=G(V*$);if(!yq(z,J))z=G(-z);if(!W)V=z;if(!W)Y=Q;let M=G(Y*(Q-kq)*tO-U),D=V*V,K=G((V+V)*U),N=G(M*oO),j=G(kq-D),w=G(kq+D);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends wU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>zJ)();static Fn=(()=>bz)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=SU,G=oJ,Q=(_)=>zJ.create(_),X=BU($);if(!$z(zJ.toBytes(X),$)||yq(X,G))throw Error("invalid ristretto255 encoding 1");let Y=Q(X*X),U=Q(kq+q*Y),W=Q(kq-q*Y),V=Q(U*U),z=Q(W*W),M=Q(q*J*V-z),{isValid:D,value:K}=gz(Q(M*z)),N=Q(K*W),j=Q(K*N*M),w=Q((X+X)*N);if(yq(w,G))w=Q(-w);let Z=Q(U*j),T=Q(w*Z);if(!D||yq(T,G)||Z===rO)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,Z,kq,T))}static fromHex($){return O$.fromBytes(vG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,X=(j)=>zJ.create(j),Y=X(X(J+q)*X(J-q)),U=X($*q),W=X(U*U),{value:V}=gz(X(Y*W)),z=X(V*Y),M=X(V*U),D=X(z*M*G),K;if(yq(G*D,Q)){let j=X(q*AU),w=X($*AU);$=j,q=w,K=X(z*aO)}else K=M;if(yq($*D,Q))q=X(-q);let N=X((J-q)*K);if(yq(N,Q))N=X(-N);return zJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,X=(W)=>zJ.create(W),Y=X(q*Q)===X(J*G),U=X(J*Q)===X(q*G);return Y||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var $N=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=HU($,J,64,W9);return $N.deriveToCurve(G)},hashToScalar($,q={DST:Zz}){let J=HU($,q.DST,64,W9);return bz.create(i$(J))},deriveToCurve($){u0($,64);let q=BU($.subarray(0,32)),J=_z(q),G=BU($.subarray(32,64)),Q=_z(G);return new O$(J.add(Q))}});var yz=!1,qN=!1;async function kz($,q){if(qN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function IU($,q){return await kz(async()=>{let J=CU($)?$:await GN($),G=await crypto.subtle.importKey("raw",QN(q),{name:"X25519"},yz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(CU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMult($,q)})}async function EU($){return await kz(async()=>{return IU($,l9.GuBytes)},()=>{if(CU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return l9.scalarMultBase($)})}var JN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function GN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...JN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},yz,["deriveBits"])}function CU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function QN($){return $}class fz{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),YN(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function YN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,X)=>Q+X.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function r9($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function xz($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function mz($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class fq{args;body;constructor($,q){this.args=$,this.body=q}}function PU($){let q=[];q.push(`age-encryption.org/v1
58
58
  `);for(let J of $){q.push("-> "+J.args.join(" ")+`
59
59
  `);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(p$.encode(J.body.subarray(G,Q))+`
60
60
  `)}if(J.body.length%48===0)q.push(`
@@ -183,7 +183,7 @@ Please report this to https://github.com/markedjs/marked.`,$){let G="<p>An error
183
183
  `}format($){try{let q=[`# ${this.config.title}`,""];for(let J of this.config.mappings)this.formatField($,J,q,2);return q.join(`
184
184
  `)}catch{throw Error("Failed to format structured content")}}parse($){try{let q=this.processor.parse($),J=this.extractSections(q,2),G=this.buildDataFromSections(J,this.config.mappings);return this.schema.parse(G)}catch{throw Error("Failed to parse structured content")}}formatField($,q,J,G){let Q="#".repeat(G)+" "+q.label,X=this.getValueByPath($,q.key);if(q.type==="custom"&&q.formatter){if(X!==void 0&&X!==null){J.push(Q,"");let Y=q.formatter(X);if(Y)J.push(Y,"")}return}switch(q.type){case"string":case"number":J.push(Q,String(X??""),"");break;case"object":if(J.push(Q),q.children&&X)for(let Y of q.children)this.formatField(X,Y,J,G+1);break;case"array":if(J.push(Q,""),Array.isArray(X))if(q.itemType==="object"&&q.itemMappings)X.forEach((Y,U)=>{if(J.push(`${"#".repeat(G+1)} ${q.label.slice(0,-1)} ${U+1}`),J.push(""),q.itemMappings)for(let W of q.itemMappings)this.formatField(Y,W,J,G+2)});else{for(let Y of X){let U=this.defaultArrayItemFormat(Y);J.push(`- ${U}`)}J.push("")}break}}getValueByPath($,q){let J=q.split("."),G=$;for(let Q of J)if(G&&typeof G==="object"&&Q in G)G=G[Q];else return;return G}defaultArrayItemFormat($){if(typeof $==="string"||typeof $==="number")return String($);return JSON.stringify($)}extractSections($,q){let J=new Map,G=null,Q=[];for(let X of $.children)if(X.type==="heading"&&X.depth===q){if(G)J.set(G.toLowerCase(),Q);G=this.getHeadingText(X),Q=[]}else if(G)Q.push(X);if(G)J.set(G.toLowerCase(),Q);return J}extractSubsections($,q){let J=new Map,G=null,Q=[];for(let X of $)if(X.type==="heading"&&X.depth===q){if(G)J.set(G.toLowerCase(),Q);G=this.getHeadingText(X),Q=[]}else if(G)Q.push(X);if(G)J.set(G.toLowerCase(),Q);return J}textNodeSchema=r.object({type:r.literal("text"),value:r.string()});extractTextValue($){let q=this.textNodeSchema.safeParse($);return q.success?q.data.value:""}getHeadingText($){return $.children.filter((J)=>J.type==="text").map((J)=>this.extractTextValue(J)).join("")}buildDataFromSections($,q,J=2){let G={};for(let Q of q){let X=$.get(Q.label.toLowerCase());if(Q.type==="custom"&&Q.parser&&X){let Y=this.getTextFromSection(X),U=Q.parser(Y);this.setValueByPath(G,Q.key,U)}else if(Q.type==="object"&&Q.children&&X){let Y=this.extractSubsections(X,J+1),U=this.buildDataFromSections(Y,Q.children,J+1);this.setValueByPath(G,Q.key,U)}else if(Q.type==="array"&&X)if(Q.itemType==="object"&&Q.itemMappings){let Y=this.extractObjectArrayItems(X,J+1,Q.itemMappings);this.setValueByPath(G,Q.key,Y)}else{let Y=this.extractSimpleArrayItems(X);this.setValueByPath(G,Q.key,Y)}else if(X){let Y=this.getTextFromSection(X),U=Q.type==="number"?Number(Y):Y;this.setValueByPath(G,Q.key,U)}}return G}setValueByPath($,q,J){let G=q.split("."),Q=$;for(let Y=0;Y<G.length-1;Y++){let U=G[Y];if(!U)continue;if(!(U in Q))Q[U]={};Q=Q[U]}let X=G[G.length-1];if(X)Q[X]=J}getTextFromSection($){let q=[];for(let J of $)if(J.type==="paragraph"){let G=this.extractTextFromParagraph(J);if(G)q.push(G)}else if(J.type==="list"){let G=J;for(let Q of G.children){let X=this.extractTextFromListItem(Q);if(X)q.push(`- ${X}`)}}return q.join(`
185
185
  `)}extractTextFromParagraph($){return this.extractInlineText($.children).trim()}extractInlineText($){let q=[];for(let J of $)if(J.type==="text")q.push(this.extractTextValue(J));else if(J.type==="emphasis"){let G=this.extractInlineText(J.children);if(G)q.push(`*${G}*`)}else if(J.type==="strong"){let G=this.extractInlineText(J.children);if(G)q.push(`**${G}**`)}return q.join("")}extractSimpleArrayItems($){let q=[];for(let J of $)if(J.type==="list"){let G=J;for(let Q of G.children){let X=this.extractTextFromListItem(Q);if(X)q.push(X)}}return q}extractObjectArrayItems($,q,J){let G=[],Q=[],X=!1;for(let Y of $)if(Y.type==="heading"&&Y.depth===q){if(X&&Q.length>0){let U=this.extractSubsections(Q,q+1),W=this.buildDataFromSections(U,J,q+1);G.push(W)}Q=[],X=!0}else if(X)Q.push(Y);if(X&&Q.length>0){let Y=this.extractSubsections(Q,q+1),U=this.buildDataFromSections(Y,J,q+1);G.push(U)}return G}extractTextFromListItem($){let q=[];for(let J of $.children)if(J.type==="paragraph"){let G=this.extractTextFromParagraph(J);if(G)q.push(G)}return q.join(`
186
- `)}}var Kr=r.object({slug:r.string(),title:r.string(),type:r.string(),entityId:r.string(),contentHash:r.string()});var kE=r.object({success:r.boolean(),entityId:r.string().optional(),error:r.string().optional()});import{appendFileSync as yr,readFileSync as fE}from"fs";var xE=/^# ---- .+ ----$/;function OR($,q){let J=[],G=new Set,Q=q?.skipSections??new Set,X=!1,Y=!1,U=!1;for(let W of $.split(/\r?\n/)){let V=W.trim();if(xE.test(V)){X=Q.has(V),Y=!1,U=!1;continue}if(X)continue;if(V.startsWith("#")){if(V.includes("@required"))Y=!0;if(V.includes("@sensitive"))U=!0;continue}let z=V.match(/^([A-Z][A-Z0-9_]*)=/);if(!z?.[1]){Y=!1,U=!1;continue}let M=z[1];if(!G.has(M))G.add(M),J.push({key:M,required:Y,sensitive:U});Y=!1,U=!1}return J}function g5($,q){return OR(fE($,"utf8"),q)}import{existsSync as mE,readFileSync as hE}from"fs";import{homedir as uE}from"os";import{isAbsolute as pE,join as _5,resolve as lE}from"path";function qq($){let q={};for(let J of[_5($,".env"),_5($,".env.local")]){if(!mE(J))continue;let G=rE(hE(J,"utf8"));for(let[Q,X]of Object.entries(G))q[Q]=X}return q}function M$($,q,J){return q[$]??J[$]}function Z8($,q){if($.startsWith("~/"))return _5(process.env.HOME??uE(),$.slice(2));if(pE($))return $;return lE(q,$)}function rE($){let q={};for(let J of $.split(/\r?\n/)){let G=J.trim();if(G.length===0||G.startsWith("#"))continue;let Q=J.match(/^\s*(?:export\s+)?([A-Z][A-Z0-9_]*)\s*=\s*(.*)\s*$/),X=Q?.[1],Y=Q?.[2];if(!X||Y===void 0)continue;q[X]=dE(Y)}return q}function dE($){if($.length>=2&&$.startsWith("'")&&$.endsWith("'"))return $.slice(1,-1);if($.length>=2&&$.startsWith('"')&&$.endsWith('"'))return $.slice(1,-1).replace(/\\n/g,`
186
+ `)}}var Kr=r.object({slug:r.string(),title:r.string(),type:r.string(),entityId:r.string(),contentHash:r.string()});var kE=r.object({success:r.boolean(),entityId:r.string().optional(),error:r.string().optional()});import{appendFileSync as kr,readFileSync as fE}from"fs";var xE=/^# ---- .+ ----$/;function OR($,q){let J=[],G=new Set,Q=q?.skipSections??new Set,X=!1,Y=!1,U=!1;for(let W of $.split(/\r?\n/)){let V=W.trim();if(xE.test(V)){X=Q.has(V),Y=!1,U=!1;continue}if(X)continue;if(V.startsWith("#")){if(V.includes("@required"))Y=!0;if(V.includes("@sensitive"))U=!0;continue}let z=V.match(/^([A-Z][A-Z0-9_]*)=/);if(!z?.[1]){Y=!1,U=!1;continue}let M=z[1];if(!G.has(M))G.add(M),J.push({key:M,required:Y,sensitive:U});Y=!1,U=!1}return J}function g5($,q){return OR(fE($,"utf8"),q)}import{existsSync as mE,readFileSync as hE}from"fs";import{homedir as uE}from"os";import{isAbsolute as pE,join as _5,resolve as lE}from"path";function qq($){let q={};for(let J of[_5($,".env"),_5($,".env.local")]){if(!mE(J))continue;let G=rE(hE(J,"utf8"));for(let[Q,X]of Object.entries(G))q[Q]=X}return q}function M$($,q,J){return q[$]??J[$]}function Z8($,q){if($.startsWith("~/"))return _5(process.env.HOME??uE(),$.slice(2));if(pE($))return $;return lE(q,$)}function rE($){let q={};for(let J of $.split(/\r?\n/)){let G=J.trim();if(G.length===0||G.startsWith("#"))continue;let Q=J.match(/^\s*(?:export\s+)?([A-Z][A-Z0-9_]*)\s*=\s*(.*)\s*$/),X=Q?.[1],Y=Q?.[2];if(!X||Y===void 0)continue;q[X]=dE(Y)}return q}function dE($){if($.length>=2&&$.startsWith("'")&&$.endsWith("'"))return $.slice(1,-1);if($.length>=2&&$.startsWith('"')&&$.endsWith('"'))return $.slice(1,-1).replace(/\\n/g,`
187
187
  `).replace(/\\r/g,"\r").replace(/\\t/g,"\t").replace(/\\"/g,'"').replace(/\\\\/g,"\\");return $}async function NR($){let q=await $.text();if(!q.trim())return;try{return JSON.parse(q)}catch{return q}}async function A8($,q,J){let G=await NR($),Q=q.safeParse(G);if(!$.ok||!Q.success){let X=J.formatError??iE;throw Error(`${J.label}${X($,G)}`)}return Q.data}function iE($,q){let J=q===void 0?"":`: ${typeof q==="string"?q:JSON.stringify(q)}`;return` (${$.status} ${$.statusText}${J})`}import{createSign as cE,generateKeyPairSync as nE}from"crypto";var oE="2.5.4.3",aE="1.2.840.113549.1.1.11",ZR="https://api.cloudflare.com/client/v4",sE="origin-rsa",tE=5475,AR=15000;function BR($){return{Authorization:`Bearer ${$}`,"Content-Type":"application/json"}}var jR=r.object({message:r.string().optional()}).passthrough(),eE=r.object({errors:r.array(jR).optional(),messages:r.array(jR).optional()}).passthrough(),$P=r.object({certificate:r.string().min(1),expires_on:r.string().optional()}).passthrough(),qP=r.object({success:r.literal(!0),result:$P}).passthrough(),JP=r.object({success:r.literal(!0)}).passthrough();function SR(){let{privateKey:$,publicKey:q}=nE("rsa",{modulusLength:2048,privateKeyEncoding:{type:"pkcs8",format:"pem"},publicKeyEncoding:{type:"spki",format:"der"}});return{privateKeyPem:$,publicKeyDer:Buffer.from(q)}}function TR($,q){let J=eQ(WP(eQ(wR(oE),XP($)))),G=eQ(QP(0),J,Buffer.from(q.publicKeyDer),VP(0,Buffer.alloc(0))),Q=cE("sha256").update(G).sign(q.privateKeyPem),X=eQ(G,eQ(wR(aE),UP()),YP(Q));return{csrPem:GP("CERTIFICATE REQUEST",X),certificationRequestInfoDer:G,signature:Q}}async function CR($,q,J,G){let Q=await $(`${ZR}/certificates`,{method:"POST",headers:BR(q),body:JSON.stringify({hostnames:[G,`*.${G}`],requested_validity:tE,request_type:sE,csr:J}),signal:AbortSignal.timeout(AR)}),X=await A8(Q,qP,{label:"Cloudflare Origin CA request failed",formatError:ER}),U={certificatePem:`${X.result.certificate.trim()}
188
188
  `};if(X.result.expires_on)U.expiresOn=X.result.expires_on;return U}async function IR($,q,J){let G=await $(`${ZR}/zones/${J}/settings/ssl`,{method:"PATCH",headers:BR(q),body:JSON.stringify({value:"strict"}),signal:AbortSignal.timeout(AR)});await A8(G,JP,{label:"Cloudflare zone SSL update failed",formatError:ER})}function GP($,q){let G=q.toString("base64").match(/.{1,64}/g)??[];return[`-----BEGIN ${$}-----`,...G,`-----END ${$}-----`,""].join(`
189
189
  `)}function QP($){if($!==0)throw Error("Only zero-valued INTEGER encoding is currently supported");return Buffer.from([2,1,0])}function wR($){let q=$.split(".").map((Y)=>Number(Y));if(q.length<2||q.some((Y)=>Number.isNaN(Y)))throw Error(`Invalid OID: ${$}`);let J=q[0],G=q[1];if(J===void 0||G===void 0)throw Error(`Invalid OID: ${$}`);let X=[J*40+G];for(let Y of q.slice(2)){let U=MP(Y);X.push(...U)}return PG(6,Buffer.from(X))}function XP($){return PG(12,Buffer.from($,"utf8"))}function YP($){return PG(3,Buffer.concat([Buffer.from([0]),$]))}function UP(){return Buffer.from([5,0])}function eQ(...$){return PG(48,Buffer.concat($))}function WP(...$){return PG(49,Buffer.concat($))}function VP($,q){return PG(160+$,q)}function PG($,q){return Buffer.concat([Buffer.from([$]),zP(q.length),q])}function zP($){if($<128)return Buffer.from([$]);let q=[],J=$;while(J>0)q.unshift(J&255),J>>=8;return Buffer.from([128|q.length,...q])}function MP($){if(!Number.isInteger($)||$<0)throw Error(`Invalid OID component: ${$}`);if($===0)return[0];let q=[],J=$;while(J>0)q.unshift(J&127),J>>=7;for(let G=0;G<q.length-1;G+=1)q[G]=(q[G]??0)|128;return q}function ER($,q){let J=KP(q),G=J.length>0?`: ${J.join("; ")}`:"";return` (${$.status} ${$.statusText}${G})`}function KP($){let q=eE.safeParse($);if(!q.success)return[];return[...q.data.errors??[],...q.data.messages??[]].map((J)=>J.message).filter((J)=>typeof J==="string"&&J.length>0)}import{access as jP,readdir as wP,readFile as ZP}from"fs/promises";import{basename as v5,join as $9,relative as AP}from"path";var DP=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,RP=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,PR=r.enum(["core","default","pro"]),LR=r.string().regex(DP,"expected exact pinned version"),FR=r.string().regex(RP,"expected lowercase handle slug"),rq=r.string().min(1),HP=r.string().startsWith("age1").min(1),gR=r.object({schemaVersion:r.literal(1),brainVersion:LR,model:r.literal("rover"),githubOrg:r.string().min(1),contentRepoPrefix:r.string().min(1),domainSuffix:r.string().min(1),preset:PR,aiApiKey:rq,gitSyncToken:rq,mcpAuthToken:rq,agePublicKey:HP}).strict(),OP=r.object({platform:r.enum(["github","instagram","linkedin","email","website"]),url:r.string().min(1),label:r.string().min(1).optional()}).strict(),NP=r.object({name:r.string().min(1).optional(),description:r.string().min(1).optional(),website:r.string().min(1).optional(),email:r.string().min(1).optional(),story:r.string().min(1).optional(),socialLinks:r.array(OP).optional()}).strict(),_R=r.object({handle:FR,discord:r.object({enabled:r.boolean(),anchorUserId:r.string().min(1).optional()}).strict(),aiApiKeyOverride:rq.optional(),gitSyncTokenOverride:rq.optional(),mcpAuthTokenOverride:rq.optional(),anchorProfile:NP.optional()}).strict(),vR=r.object({members:r.array(FR).min(1),brainVersionOverride:LR.optional(),presetOverride:PR.optional(),aiApiKeyOverride:rq.optional(),gitSyncTokenOverride:rq.optional(),mcpAuthTokenOverride:rq.optional()}).strict().superRefine(($,q)=>{let J=new Set;for(let G of $.members){if(J.has(G)){q.addIssue({code:r.ZodIssueCode.custom,path:["members"],message:`duplicate cohort member: ${G}`});continue}J.add(G)}});class B8 extends Error{}async function PJ($,q={}){let[J,G,Q]=await Promise.all([b5($9($,"pilot.yaml"),gR),BP($),SP($)]),X=TP(G,Q),Y=Q.map((W)=>({id:W.id,members:[...W.data.members].sort(),...W.data.brainVersionOverride?{brainVersionOverride:W.data.brainVersionOverride}:{},...W.data.presetOverride?{presetOverride:W.data.presetOverride}:{},...W.data.aiApiKeyOverride?{aiApiKeyOverride:W.data.aiApiKeyOverride}:{},...W.data.gitSyncTokenOverride?{gitSyncTokenOverride:W.data.gitSyncTokenOverride}:{},...W.data.mcpAuthTokenOverride?{mcpAuthTokenOverride:W.data.mcpAuthTokenOverride}:{}})).sort((W,V)=>W.id.localeCompare(V.id)),U=await Promise.all(G.map(async(W)=>{let V=X.get(W.data.handle);if(!V)throw new B8(`User ${W.data.handle} must belong to exactly one cohort`);let z={handle:W.data.handle,cohort:V.id,brainVersion:V.data.brainVersionOverride??J.brainVersion,model:J.model,preset:V.data.presetOverride??J.preset,domain:`${W.data.handle}${J.domainSuffix}`,contentRepo:`${J.contentRepoPrefix}${W.data.handle}-content`,discordEnabled:W.data.discord.enabled,...W.data.discord.anchorUserId?{discordAnchorUserId:W.data.discord.anchorUserId}:{},effectiveAiApiKey:W.data.aiApiKeyOverride??V.data.aiApiKeyOverride??J.aiApiKey,effectiveGitSyncToken:W.data.gitSyncTokenOverride??V.data.gitSyncTokenOverride??J.gitSyncToken,effectiveMcpAuthToken:W.data.mcpAuthTokenOverride??V.data.mcpAuthTokenOverride??J.mcpAuthToken,anchorProfile:CP(W.data.handle,W.data.anchorProfile),snapshotStatus:await EP($,W.data.handle)},M=await q.resolveStatus?.(z);return{...z,serverStatus:M?.serverStatus??"unknown",deployStatus:M?.deployStatus??"unknown",dnsStatus:M?.dnsStatus??"unknown",mcpStatus:M?.mcpStatus??"unknown"}}));return U.sort((W,V)=>W.handle.localeCompare(V.handle)),{pilot:J,cohorts:Y,users:U}}async function BP($){let q=$9($,"users"),J=(await bR(q)).filter((Q)=>!v5(Q).endsWith(".secrets.yaml"));return(await Promise.all(J.map(async(Q)=>{let X=yR(v5(Q)),Y=await b5(Q,_R);if(Y.handle!==X){let U=kR(AP($,Q));throw new B8(`${U} must declare handle: ${X}`)}return{id:X,data:Y}}))).sort((Q,X)=>Q.id.localeCompare(X.id))}async function SP($){let q=$9($,"cohorts"),J=await bR(q);return(await Promise.all(J.map(async(Q)=>({id:yR(v5(Q)),data:await b5(Q,vR)})))).sort((Q,X)=>Q.id.localeCompare(X.id))}function TP($,q){let J=new Map($.map((Q)=>[Q.data.handle,Q])),G=new Map;for(let Q of q)for(let X of Q.data.members){if(!J.has(X))throw new B8(`Cohort ${Q.id} references unknown user ${X}`);if(G.has(X))throw new B8(`User ${X} must belong to exactly one cohort`);G.set(X,Q)}for(let Q of $)if(!G.has(Q.data.handle))throw new B8(`User ${Q.data.handle} must belong to exactly one cohort`);return G}function CP($,q){return{name:q?.name??IP($),...q?.description?{description:q.description}:{},...q?.website?{website:q.website}:{},...q?.email?{email:q.email}:{},...q?.story?{story:q.story}:{},...q?.socialLinks?{socialLinks:q.socialLinks.map((J)=>({platform:J.platform,url:J.url,...J.label?{label:J.label}:{}}))}:{}}}function IP($){return $.split("-").filter((q)=>q.length>0).map((q)=>q.charAt(0).toUpperCase()+q.slice(1)).join(" ")}async function EP($,q){let J=$9($,"users",q,"brain.yaml");try{return await jP(J),"present"}catch{return"missing"}}async function bR($){return(await wP($,{withFileTypes:!0})).filter((J)=>J.isFile()&&J.name.endsWith(".yaml")).map((J)=>$9($,J.name)).sort((J,G)=>J.localeCompare(G))}async function b5($,q){let J=await ZP($,"utf8"),G=L5(J,q);if(!G.ok)throw new B8(`${kR($)}: ${G.error}`);return G.data}function yR($){return $.replace(/\.ya?ml$/,"")}function kR($){return $.replaceAll("\\","/")}async function mR($,q={}){try{return await FP($,q),{success:!0}}catch(J){return{success:!1,message:J instanceof Error?J.message:"Certificate bootstrap failed"}}}async function FP($,q={}){let J=await PJ($),G=gP(J.pilot.domainSuffix),Q=q.env??process.env,X=qq($),Y=q.cfApiToken??M$("CF_API_TOKEN",Q,X),U=q.cfZoneId??M$("CF_ZONE_ID",Q,X);if(!Y)throw Error("Missing CF_API_TOKEN");if(!U)throw Error("Missing CF_ZONE_ID");let W=q.fetchImpl??fetch,V=q.logger??console.log,z=SR(),{csrPem:M}=TR(G,z),D=await CR(W,Y,M,G),K=xR($,".brains-ops","certs","shared","origin.pem"),N=xR($,".brains-ops","certs","shared","origin.key");await PP(LP(K),{recursive:!0}),await Promise.all([fR(K,D.certificatePem,"utf-8"),fR(N,z.privateKeyPem,{encoding:"utf-8",mode:384})]),await IR(W,Y,U);let j=aJ(q.pushTo);if(j)await MJ(j,[["CERTIFICATE_PEM",D.certificatePem],["PRIVATE_KEY_PEM",z.privateKeyPem]],{logger:V,runCommand:q.runCommand??m$});if(V(`Issued shared Origin CA cert for ${G} and *.${G}`),V(`Wrote ${K}`),V(`Wrote ${N}`),D.expiresOn)V(`Expires on ${D.expiresOn}`);if(V("Cloudflare zone SSL mode set to Full (strict)"),j)V(`Pushed CERTIFICATE_PEM and PRIVATE_KEY_PEM to ${j}`);return{domain:G,certificatePath:K,privateKeyPath:N,certificatePem:D.certificatePem}}function gP($){let q=$.trim().replace(/^\./,"").replace(/\.$/,"");if(!q||q.includes("*"))throw Error(`Invalid pilot domainSuffix: ${$}`);return q}import{access as kP,chmod as y5,mkdir as uR,readFile as f5,unlink as fP,writeFile as pR}from"fs/promises";import{dirname as xP,join as sX}from"path";import{fileURLToPath as mP}from"url";import{mkdir as _P,writeFile as vP}from"fs/promises";import{join as hR}from"path";var bP="| handle | cohort | model | preset | brainVersion | domain | contentRepo | discord | serverStatus | deployStatus | dnsStatus | mcpStatus |",yP="| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |";async function LG($,q={}){let G=(q.registry??await PJ($,q)).users.map((X)=>{let Y=X.discordEnabled?"on":"off";return[X.handle,X.cohort,X.model,X.preset,X.brainVersion,X.domain,X.contentRepo,Y,X.serverStatus,X.deployStatus,X.dnsStatus,X.mcpStatus]}),Q=["<!-- generated by brains-ops; do not edit -->","",bP,yP,...G.map((X)=>`| ${X.join(" | ")} |`),""].join(`