@rizom/ops 0.2.0-alpha.37 → 0.2.0-alpha.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -54,7 +54,7 @@ return `+str.trim()+`;
|
|
|
54
54
|
`).join(`
|
|
55
55
|
`+Y),$.push(Q+"m+"+L9.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=OT()+q+" "+$[0]}function OT(){if(wD.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function NT(...$){return process.stderr.write(P9.formatWithOptions(wD.inspectOpts,...$)+`
|
|
56
56
|
`)}function jT($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function wT(){return process.env.DEBUG}function AT($){$.inspectOpts={};let q=Object.keys(wD.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=wD.inspectOpts[q[J]]}L9.exports=b7()(wD);var{formatters:jD}=L9.exports;jD.o=function($){return this.inspectOpts.colors=this.useColors,P9.inspect($,this.inspectOpts).split(`
|
|
57
|
-
`).map((q)=>q.trim()).join(" ")};jD.O=function($){return this.inspectOpts.colors=this.useColors,P9.inspect($,this.inspectOpts)}});var BD=X0((Um,f7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)f7.exports=KD();else f7.exports=ZD()});var A1=X0((bp,w1)=>{var m9=Object.prototype.hasOwnProperty,j1=Object.prototype.toString,K1=Object.defineProperty,R1=Object.getOwnPropertyDescriptor,D1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return j1.call(q)==="[object Array]"},H1=function(q){if(!q||j1.call(q)!=="[object Object]")return!1;var J=m9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&m9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||m9.call(q,Q)},O1=function(q,J){if(K1&&J.name==="__proto__")K1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},N1=function(q,J){if(J==="__proto__"){if(!m9.call(q,J))return;else if(R1)return R1(q,J).value}return q[J]};w1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=N1(U,J),Q=N1(q,J),U!==Q){if(M&&Q&&(H1(Q)||(Y=D1(Q)))){if(Y)Y=!1,X=G&&D1(G)?G:[];else X=G&&H1(G)?G:{};O1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")O1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as xH}from"util";var mH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"}};function QX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function hH($,q){let J=$[q];return typeof J==="string"?J:void 0}function d5($){let{values:q,positionals:J}=xH({args:$,options:mH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:QX(q,"help"),version:QX(q,"version"),dryRun:QX(q,"dry-run"),pushTo:hH(q,"push-to")}}}var qY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.37",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as BN,mkdirSync as SN,readFileSync as uU,writeFileSync as pU}from"fs";import{dirname as TN,join as cM}from"path";function YX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=YX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Zq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function JY($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function GY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function R$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var pH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function lH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function rH($){for(let q=0;q<$.length;q++)$[q]=lH($[q]);return $}var XX=pH?($)=>$:rH,c5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),dH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function QY($){if(u0($),c5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=dH[$[J]];return q}var Aq={_0:48,_9:57,A:65,F:70,a:97,f:102};function i5($){if($>=Aq._0&&$<=Aq._9)return $-Aq._0;if($>=Aq.A&&$<=Aq.F)return $-(Aq.A-10);if($>=Aq.a&&$<=Aq.f)return $-(Aq.a-10);return}function vG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(c5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=i5($.charCodeAt(Y)),U=i5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function iH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function UX($,q=""){if(typeof $==="string")return iH($);return u0($,void 0,q)}function VX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function YY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function WX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Bq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var MX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class zX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Zq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),R$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),JY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Sq=(()=>{let $=(q,J,G)=>new zX(q,J).update(G).digest();return $.create=(q,J)=>new zX(q,J),$})();function bG($,q,J){if(Zq($),J===void 0)J=new Uint8Array($.outputLen);return Sq($,J,q)}var KX=Uint8Array.of(0),n5=Uint8Array.of();function RX($,q,J,G=32){Zq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=n5;else u0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Sq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)KX[0]=M+1,V.update(M===0?n5:W).update(J).update(KX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),R$(W,KX),X.slice(0,G)}var yG=($,q,J,G,Q)=>RX($,bG($,q,J),G,Q);function o5($,q,J){return $&q^~$&J}function a5($,q,J){return $&q^$&J^q&J}class XY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=C8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),JY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,R$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Tq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var UY=BigInt(4294967295),s5=BigInt(32);function cH($,q=!1){if(q)return{h:Number($&UY),l:Number($>>s5&UY)};return{h:Number($>>s5&UY)|0,l:Number($&UY)|0}}function t5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=cH($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var DX=($,q,J)=>$>>>J,HX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,fG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var e5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),$V=($,q,J,G)=>q+J+G+($/4294967296|0)|0,qV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),JV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,GV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),QV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var oH=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class OX extends XY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],R=cq[M-2],K=u$(z,7)^u$(z,18)^z>>>3,N=u$(R,17)^u$(R,19)^R>>>10;cq[M]=N+cq[M-7]+K+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=u$(X,6)^u$(X,11)^u$(X,25),R=W+z+o5(X,U,V)+oH[M]+cq[M]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+a5(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){R$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),R$(this.buffer)}}class YV extends OX{A=Tq[0]|0;B=Tq[1]|0;C=Tq[2]|0;D=Tq[3]|0;E=Tq[4]|0;F=Tq[5]|0;G=Tq[6]|0;H=Tq[7]|0;constructor(){super(32)}}class aH extends OX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var XV=(()=>t5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),sH=(()=>XV[0])(),tH=(()=>XV[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends XY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,u=FJ(_,f,1)^FJ(_,f,8)^DX(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^HX(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^kG(m,k,61)^DX(m,k,6),l=gJ(m,k,19)^fG(m,k,61)^HX(m,k,6),v=qV(F,l,oq[T-7],oq[T-16]),I=JV(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^kG(M,z,41),f=gJ(M,z,14)^gJ(M,z,18)^fG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=GV(A,f,F,tH[T],oq[T]),k=QV(m,w,_,u,sH[T],nq[T]),y=m|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^fG(J,G,34)^fG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Gq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=e5(y,v,C);J=$V(Z,k,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Gq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Gq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Gq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){R$(nq,oq)}destroy(){this.destroyed=!0,R$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class UV extends xG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class eH extends xG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class $4 extends xG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class q4 extends xG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=WX(()=>new YV,MX(1));var VY=WX(()=>new UV,MX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function RY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function wX($){if(!RY($))throw Error("Uint8Array expected")}function KV($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function RV($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function hG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function MY($){if(!Array.isArray($))throw Error("array expected")}function zY($,q){if(!KV(!0,q))throw Error(`${$}: array of strings expected`)}function AX($,q){if(!KV(!1,q))throw Error(`${$}: array of numbers expected`)}function E$(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P$($){let q=typeof $==="string"?$.split(""):$,J=q.length;zY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return MY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return MY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return zY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function DY($,q="="){return hG($),aq("padding",q),{encode(J){zY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){zY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function DV($){return RV($),{encode:(q)=>q,decode:(q)=>$(q)}}function VV($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(MY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(hG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,R=z+M;if(!Number.isSafeInteger(R)||z/q!==U||R-M!==z)throw Error("convertRadix: carry overflow");let K=R/J;U=R%J;let N=Math.floor(K);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==R)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var HV=($,q)=>q===0?$:HV(q,$%q),KY=($,q)=>$+(q-HV($,q)),WY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function NX($,q,J,G){if(MY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(KY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${KY(q,J)}`);let Q=0,Y=0,X=WY[q],U=WY[J]-1,V=[];for(let W of $){if(hG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=WY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function J4($){hG($);let q=256;return{encode:(J)=>{if(!RY(J))throw Error("radix.encode input should be Uint8Array");return VV(Array.from(J),q,$)},decode:(J)=>{return AX("radix.decode",J),Uint8Array.from(VV(J,$,q))}}}function b$($,q=!1){if(hG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(KY(8,$)>32||KY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!RY(J))throw Error("radix2.encode input should be Uint8Array");return NX(Array.from(J),8,$,!q)},decode:(J)=>{return AX("radix2.decode",J),Uint8Array.from(NX(J,$,8,q))}}}function WV($){return RV($),function(...q){try{return $.apply(null,q)}catch(J){}}}var B3=E$(b$(4),P$("0123456789ABCDEF"),L$("")),S3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),DY(5),L$("")),T3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),C3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),DY(5),L$("")),I3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),E3=E$(b$(5),P$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),DV(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),OV=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),NV=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},ZX=OV?{encode($){return wX($),$.toBase64()},decode($){return NV($,!1)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),DY(6),L$("")),p$=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),P3=OV?{encode($){return wX($),$.toBase64({alphabet:"base64url"})},decode($){return NV($,!0)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),DY(6),L$("")),L3=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),BX=($)=>E$(J4(58),P$($),L$("")),F3=BX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),g3=BX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),_3=BX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var jX=E$(P$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),MV=[996825010,642813549,513874426,1027748829,705979059];function mG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<MV.length;G++)if((q>>G&1)===1)J^=MV[G];return J}function zV($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=mG(Q)^X>>5}Q=mG(Q);for(let Y=0;Y<G;Y++)Q=mG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=mG(Q)^Y;for(let Y=0;Y<6;Y++)Q=mG(Q);return Q^=J,jX.encode(NX([Q%WY[30]],30,5,!1))}function jV($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,Y=WV(G);function X(z,R,K=90){if(aq("bech32.encode prefix",z),RY(R))R=Array.from(R);AX("bech32.encode",R);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+R.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=z.toLowerCase(),A=zV(w,R,q);return`${w}1${jX.encode(R)}${A}`}function U(z,R=90){aq("bech32.decode input",z);let K=z.length;if(K<8||R!==!1&&K>R)throw TypeError(`invalid string length: ${K} (${z}). Expected (8..${R})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),A=N.slice(j+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=jX.decode(A).slice(0,-6),_=zV(w,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:w,words:T}}let V=WV(U);function W(z){let{prefix:R,words:K}=U(z,!1);return{prefix:R,words:K,bytes:G(K)}}function M(z,R){return X(z,Q(R))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l$=jV("bech32"),v3=jV("bech32m");var G4=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Q4={encode($){return wX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},b3=G4?Q4:E$(b$(4),P$("0123456789abcdef"),L$(""),DV(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function X4($,q,J,G){Zq($);let Q=YY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L0(Y,"c"),L0(X,"dkLen"),L0(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=UX(q,"password"),W=UX(J,"salt"),M=new Uint8Array(X),z=Sq.create($,V),R=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:R}}function U4($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return R$(Q),J}function SX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=X4($,q,J,G),W,M=new Uint8Array(4),z=C8(M),R=new Uint8Array(U.outputLen);for(let K=1,N=0;N<Y;K++,N+=U.outputLen){let j=X.subarray(N,N+U.outputLen);z.setInt32(0,K,!1),(W=V._cloneInto(W)).update(M).digestInto(R),j.set(R.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(W).update(R).digestInto(R);for(let A=0;A<j.length;A++)j[A]^=R[A]}}return U4(U,V,X,W,R)}function wV($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],R=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],u=$[q++]^J[G++],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),Z^=N0(l+F|0,9),L^=N0(Z+l|0,13),F^=N0(L+Z|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(P+I|0,7),k^=N0(O+P|0,9),I^=N0(k+O|0,13),P^=N0(I+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),I^=N0(v+l|0,7),C^=N0(I+v|0,9),l^=N0(C+I|0,13),v^=N0(l+C|0,18),g^=N0(P+S|0,7),Z^=N0(g+P|0,9),S^=N0(Z+g|0,13),P^=N0(S+Z|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+m|0,Q[Y++]=V+k|0,Q[Y++]=W+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=R+I|0,Q[Y++]=K+C|0,Q[Y++]=N+Z|0,Q[Y++]=j+S|0,Q[Y++]=w+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=f+O|0,Q[Y++]=u+x|0}function TX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(wV(J,X,$,q,J,Y),U>0)X+=16;wV(J,Y,$,q+=16,J,X)}}function V4($,q,J){let G=YY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(L0(Q,"N"),L0(Y,"r"),L0(X,"p"),L0(U,"dkLen"),L0(V,"asyncTick"),L0(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,R=z/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(K-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let j=SX(r0,$,q,{c:1,dkLen:z*X}),w=GY(j),A=GY(new Uint8Array(z*Q)),T=GY(new Uint8Array(z)),_=()=>{};if(M){let f=2*Q*X,u=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===f))M(F/f)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:R,V:A,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:V}}function W4($,q,J,G,Q){let Y=SX(r0,$,J,{c:1,dkLen:q});return R$(J,G,Q),Y}function AV($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:R}=V4($,q,J);XX(W);for(let K=0;K<Y;K++){let N=U*K;for(let j=0;j<U;j++)V[j]=W[N+j];for(let j=0,w=0;j<G-1;j++)TX(V,w,V,w+=U,Q),R();TX(V,(G-1)*U,W,N,Q),R();for(let j=0;j<G;j++){let w=(W[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=W[N+A]^V[w*U+A];TX(z,0,W,N,Q),R()}}return XX(W),W4($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function M4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function HY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=M4($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function CX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function ZV($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!E8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function z4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),K4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var R4=($)=>{for(let q=0;q<$.length;q++)$[q]=K4($[q]);return $},Iq=_J?($)=>$:R4;function BV($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function SV($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function TV($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var CV=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b0(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b0(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,b0(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b0(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function uG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!E8(q))throw Error("invalid output, must be aligned");return q}function IV($,q,J){I8($),I8(q),HY(J);let G=new Uint8Array(16),Q=z4(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function E8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b0($))}var PV=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),D4=(()=>Iq(Qq(PV("expand 16-byte k"))))(),H4=(()=>Iq(Qq(PV("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var pG=64,O4=16,IX=(()=>4294967295)(),EV=Uint32Array.of();function N4($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(pG),M=Qq(W),z=_J&&E8(Q)&&E8(Y),R=z?Qq(Q):EV,K=z?Qq(Y):EV;if(!_J){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Iq(M),X>=IX)throw Error("arx: counter overflow");let j=Math.min(pG,V-N);for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=IX)throw Error("arx: counter overflow");let j=Math.min(pG,V-N);if(z&&j===pG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<O4;A++)T=w+A,K[T]=R[T]^M[A];N+=pG;continue}for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}}function LV($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=BV({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),HY(Y),HY(J),(U,V,W,M,z=0)=>{b0(U,void 0,"key"),b0(V,void 0,"nonce"),b0(W,void 0,"data");let R=W.length;if(M=uG(R,M,!1),I8(z),z<0||z>=IX)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=P8(U)),w=H4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=D4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!E8(V))K.push(V=P8(V));let A=Qq(j);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=V.subarray(0,16);if(_J)G(w,A,Qq(f),A);else{let u=Iq(Uint32Array.from(w));G(u,A,Qq(f),A),r$(u),Iq(A)}V=V.subarray(16)}else if(!_J)Iq(A);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(V,Y?0:12-V.length),V=f,K.push(V)}let _=Iq(Qq(V));try{return N4($,w,A,_,W,M,z,X),M}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class FV{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),Y=d0($,8),X=d0($,10),U=d0($,12),V=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=d0($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],R=Y[6],K=Y[7],N=Y[8],j=Y[9],w=d0($,q+0),A=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),u=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),Z=Q[6]+((f>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*X+y*(5*j)+l*(5*N)+v*(5*K)+I*(5*R);L=b>>>13,b&=8191,b+=C*(5*z)+Z*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*X+l*(5*j)+v*(5*N)+I*(5*K);L=O>>>13,O&=8191,O+=C*(5*R)+Z*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let x=L+k*V+y*U+l*X+v*(5*j)+I*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+Z*(5*R)+S*(5*z)+P*(5*M)+g*(5*W),L+=x>>>13,x&=8191;let d=L+k*W+y*V+l*U+v*X+I*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+Z*(5*K)+S*(5*R)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+k*M+y*W+l*V+v*U+I*X;L=B>>>13,B&=8191,B+=C*(5*j)+Z*(5*N)+S*(5*K)+P*(5*R)+g*(5*z),L+=B>>>13,B&=8191;let a=L+k*z+y*M+l*W+v*V+I*U;L=a>>>13,a&=8191,a+=C*X+Z*(5*j)+S*(5*N)+P*(5*K)+g*(5*R),L+=a>>>13,a&=8191;let q0=L+k*R+y*z+l*M+v*W+I*V;L=q0>>>13,q0&=8191,q0+=C*U+Z*X+S*(5*j)+P*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let Y0=L+k*K+y*R+l*z+v*M+I*W;L=Y0>>>13,Y0&=8191,Y0+=C*V+Z*U+S*X+P*(5*j)+g*(5*N),L+=Y0>>>13,Y0&=8191;let G0=L+k*N+y*K+l*R+v*z+I*M;L=G0>>>13,G0&=8191,G0+=C*W+Z*V+S*U+P*X+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*R+I*z;L=t>>>13,t&=8191,t+=C*M+Z*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=Y0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r$(J)}update($){CX(this),b0($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){CX(this),ZV($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var gV=TV(32,($)=>new FV($));function j4($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],R=q[2],K=q[3],N=q[4],j=q[5],w=q[6],A=q[7],T=Q,_=J[0],f=J[1],u=J[2],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=j0(L^F,16),Z=Z+L|0,l=j0(l^Z,12),F=F+l|0,L=j0(L^F,8),Z=Z+L|0,l=j0(l^Z,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+I|0,O=j0(O^k,16),P=P+O|0,I=j0(I^P,12),k=k+I|0,O=j0(O^k,8),P=P+O|0,I=j0(I^P,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),P=P+x|0,v=j0(v^P,12),F=F+v|0,x=j0(x^F,8),P=P+x|0,v=j0(v^P,7),m=m+I|0,L=j0(L^m,16),g=g+L|0,I=j0(I^g,12),m=m+I|0,L=j0(L^m,8),g=g+L|0,I=j0(I^g,7),k=k+C|0,b=j0(b^k,16),Z=Z+b|0,C=j0(C^Z,12),k=k+C|0,b=j0(b^k,8),Z=Z+b|0,C=j0(C^Z,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+m|0,G[d++]=V+k|0,G[d++]=W+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=R+I|0,G[d++]=K+C|0,G[d++]=N+Z|0,G[d++]=j+S|0,G[d++]=w+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=u+x|0}var w4=LV(j4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var A4=new Uint8Array(16),_V=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(A4.subarray(J))},Z4=new Uint8Array(32);function vV($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let Y=$(q,J,Z4),X=IV(G.length,Q?Q.length:0,!0),U=gV.create(Y);if(Q)_V(U,Q);_V(U,G),U.update(X);let V=U.digest();return r$(Y,X),V}var B4=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=uG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=vV($,q,J,V,G);return X.set(W,U),r$(W),X},decrypt(Y,X){X=uG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=vV($,q,J,U,G);if(!SV(V,W))throw r$(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r$(W),X}}},sq=CV({blockSize:64,nonceLength:12,tagLength:16},B4(w4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Pq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function OY($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function NY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function jY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var S4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function T4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function C4($){for(let q=0;q<$.length;q++)$[q]=T4($[q]);return $}var EX=S4?($)=>$:C4,yV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),I4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),yV)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=I4[$[J]];return q}var Eq={_0:48,_9:57,A:65,F:70,a:97,f:102};function bV($){if($>=Eq._0&&$<=Eq._9)return $-Eq._0;if($>=Eq.A&&$<=Eq.F)return $-(Eq.A-10);if($>=Eq.a&&$<=Eq.f)return $-(Eq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(yV)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=bV($.charCodeAt(Y)),U=bV($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var LX=BigInt(0),PX=BigInt(1);function lG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function kV($){if(typeof $==="bigint"){if(!wY($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function rG($){let q=kV($).toString(16);return q.length&1?"0"+q:q}function fV($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?LX:BigInt("0x"+$)}function $J($){return fV(vJ($))}function qJ($){return fV(vJ(AY(Q0($)).reverse()))}function g8($,q){m0(q),$=kV($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function dG($,q){return g8($,q).reverse()}function AY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var wY=($)=>typeof $==="bigint"&&LX<=$;function E4($,q,J){return wY($)&&wY(q)&&wY(J)&&q<=$&&$<J}function iG($,q,J,G){if(!E4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function FX($){let q;for(q=0;$>LX;$>>=PX,q+=1);return q}var cG=($)=>(PX<<BigInt($))-PX;function xV($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,g0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return g0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while(!(T=A(N())))K();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function gX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),uV=BigInt(3),pV=BigInt(4),lV=BigInt(5),P4=BigInt(7),rV=BigInt(8),L4=BigInt(9),dV=BigInt(16);function D$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function mV($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=D$($,q),G=q,Q=H$,Y=q$,X=q$,U=H$;while(J!==H$){let W=G/J,M=G%J,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==q$)throw Error("invert: does not exist");return D$(Q,q)}function _X($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function iV($,q){let J=($.ORDER+q$)/pV,G=$.pow(q,J);return _X($,G,q),G}function F4($,q){let J=($.ORDER-lV)/rV,G=$.mul(q,kJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,kJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return _X($,U,q),U}function g4($){let q=ZY($),J=cV($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+P4)/dV;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),R=U.mul(W,Y),K=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,K),M=U.cmov(R,z,N);let j=U.eql(U.sqr(M),V),w=U.cmov(W,M,j);return _X(U,w,V),w}}function cV($){if($<uV)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=ZY($);while(hV(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return iV;let Y=Q.pow(G,q),X=(q+q$)/kJ;return function(V,W){if(V.is0(W))return W;if(hV(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),R=V.pow(W,q),K=V.pow(W,X);while(!V.eql(R,V.ONE)){if(V.is0(R))return V.ZERO;let N=1,j=V.sqr(R);while(!V.eql(j,V.ONE))if(N++,j=V.sqr(j),N===M)throw Error("Cannot find square root");let w=q$<<BigInt(M-N-1),A=V.pow(z,w);M=N,z=V.sqr(A),R=V.mul(R,z),K=V.mul(K,A)}return K}}function _4($){if($%pV===uV)return iV;if($%rV===lV)return F4;if($%dV===L4)return g4($);return cV($)}var v4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function vX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=v4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function b4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function nG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function hV($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function y4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class nV{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=y4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return D$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D$($*$,this.ORDER)}add($,q){return D$($+q,this.ORDER)}sub($,q){return D$($-q,this.ORDER)}mul($,q){return D$($*q,this.ORDER)}pow($,q){return b4(this,$,q)}div($,q){return D$($*mV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return mV($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=_4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?dG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return nG(this,$)}cmov($,q,J){return J?q:$}}function ZY($,q={}){return new nV($,q)}function oV($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function bX($){let q=oV($);return q+Math.ceil(q/2)}function aV($,q,J=!1){Q0($);let G=$.length,Q=oV(q),Y=bX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D$(X,q-q$)+q$;return J?dG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function oG($,q){let J=q.negate();return $?J:q}function xX($,q){let J=nG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function $W($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function yX($,q){$W($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=cG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function sV($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=fJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var kX=new WeakMap,qW=new WeakMap;function fX($){return qW.get($)||1}function tV($){if($!==_8)throw Error("invalid wNAF")}class mX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=yX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=yX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=sV(J,X,Y);if(J=U,W)Q=Q.add(oG(z,q[R]));else G=G.add(oG(M,q[V]))}return tV(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=yX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=sV(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return tV(J),G}getPrecomputes($,q,J){let G=kX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);kX.set(q,G)}}return G}cached($,q,J){let G=fX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=fX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){$W(q,this.bits),qW.set($,q),kX.delete($)}hasCache($){return fX($)!==1}}function JW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&fJ)Y=Y.add(Q);if(G&fJ)X=X.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:Y,p2:X}}function eV($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return vX(q),q}else return ZY($,{isLE:J})}function GW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>_8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=eV(q.p,J.Fp,G),Y=eV(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function BY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aG=BigInt(0),v8=BigInt(1),SY=BigInt(2);function k4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function QW($){let q=k4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||tq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?SY**BigInt(254):SY**BigInt(447),N=U?BigInt(8)*SY**BigInt(251)-v8:BigInt(4)*SY**BigInt(445)-v8,j=K+N+v8,w=(Z)=>D$(Z,J),A=T(z);function T(Z){return dG(w(Z),M)}function _(Z){let S=AY(Q0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(Z){return qJ(Q(AY(Q0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===aG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){iG("u",Z,aG,J),iG("scalar",S,K,j);let P=S,g=Z,L=v8,b=aG,O=Z,x=v8,d=aG;for(let a=BigInt(W-1);a>=aG;a--){let q0=P>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=V(M))=>{return Q0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze({keygen:BY(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}class hX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z$(G)}update($){return Pq(this),this.iHash.update($),this}digestInto($){Pq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new hX($,q).update(J).digest();b8.create=($,q)=>new hX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var YW=($,q)=>($+($>=0?q:-q)/UW)/q;function f4($,q,J){let[[G,Q],[Y,X]]=q,U=YW(X*$,J),V=YW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Lq,R=M<Lq;if(z)W=-W;if(R)M=-M;let K=cG(Math.ceil(FX(J)/2))+y8;if(W<Lq||W>=K||M<Lq||M>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:R,k2:M}}function pX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function uX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(lG(J.lowS,"lowS"),lG(J.prehash,"prehash"),J.format!==void 0)pX(J.format);return J}class XW extends Error{constructor($=""){super($)}}var GJ={Err:XW,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=rG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?rG(Q.length/2|128):"";return rG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Lq)throw new q("integer: negative integers are not allowed");let J=rG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Lq=BigInt(0),y8=BigInt(1),UW=BigInt(2),TY=BigInt(3),x4=BigInt(4);function lX($,q={}){let J=GW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=WW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,C,Z){let{x:S,y:P}=C.toAffine(),g=G.toBytes(S);if(lG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g0(VW(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(P))}function R(I){Q0(I,void 0,"Point");let{publicKey:C,publicKeyUncompressed:Z}=W,S=I.length,P=I[0],g=I.subarray(1);if(S===C&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let x=G.isOdd(O);if((P&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${Z}`)}let K=q.toBytes||z,N=q.fromBytes||R;function j(I){let C=G.sqr(I),Z=G.mul(C,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function w(I,C){let Z=G.sqr(C),S=j(I);return G.eql(Z,S)}if(!w(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,TY),x4),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,C,Z=!1){if(!G.isValid(C)||Z&&G.is0(C))throw Error(`bad point coordinate ${I}`);return C}function f(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!V||!V.basises)throw Error("no endo");return f4(I,V.basises,Q.ORDER)}let F=gX((I,C)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=gX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:C,y:Z}=I.toAffine();if(!G.isValid(C)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!w(C,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(I,C,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),C=oG(S,C),Z=oG(P,Z),C.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,C,Z){this.X=_("x",I),this.Y=_("y",C,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:C,y:Z}=I||{};if(!I||!G.isValid(C)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(Z))return y.ZERO;return new y(C,Z,G.ONE)}static fromBytes(I){let C=y.fromAffine(N(Q0(I,void 0,"point")));return C.assertValidity(),C}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,C=!0){if(v.createCache(this,I),!C)this.multiply(TY);return this}assertValidity(){m(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(C,L),G.mul(P,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:C}=Y,Z=G.mul(C,TY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(I,B),a=G.sub(x,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(P,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=Y.a,B=G.mul(Y.b,TY),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.mul(S,L),G0=G.add(C,Z),t=G.add(P,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(P,L);return t=G.mul(t,O0),O0=G.add(a,Y0),t=G.sub(t,O0),O0=G.add(Z,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,Y0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,Y0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),Y0=G.mul(d,Y0),t=G.mul(B,t),q0=G.add(q0,Y0),Y0=G.sub(a,Y0),Y0=G.mul(d,Y0),t=G.add(t,Y0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:C}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>xX(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:x,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),Z=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return xX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:C}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Lq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(C){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=JW(y,Z,P,L);return k(C.beta,b,O,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return lG(I,"isCompressed"),this.assertValidity(),K(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new mX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function VW($){return Uint8Array.of($?2:3)}function WW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function m4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(WW($.Fp,J),{seed:bX(J.ORDER)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K=G(Q.seed)){return aV(Q0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let A=Q0(K,void 0,"key").length;return A===j||A===w}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=BY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function rX($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K}=m4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*UW<Y.ORDER;function w(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){pX(S);let P=K.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q0(Z,g)}class f{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(Z));return new f(O,x)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=K.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new f(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new f(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(g0(VW((g&1)===0),b)),x=X.inv(L),d=F(Q0(Z,void 0,"msgHash")),B=X.create(-d*x),a=X.create(P*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(Z=N.format){if(pX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},m=cG(V);function k(Z){return iG("num < 2^"+V,Z,Lq,m),X.toBytes(Z)}function y(Z,S){return Q0(Z,void 0,"message"),S?Q0(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=uX(P,N);Z=y(Z,L);let O=F(Z),x=X.fromBytes(S);if(!X.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let Y0=b===!0?G(K.secretKey):b;d.push(Q0(Y0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(Y0){let G0=u(Y0);if(!X.isValidNot0(G0))return;let t=X.inv(G0),O0=$.BASE.multiply(G0).toAffine(),A0=X.create(O0.x);if(A0===Lq)return;let I0=X.create(t*X.create(a+A0*x));if(I0===Lq)return;let x0=(O0.x===A0?0:2)|Number(O0.y&y8),K$=I0;if(g&&w(I0))K$=X.neg(I0),x0^=1;return new f(A0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return xV(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:O}=uX(g,N);if(P=Q0(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let x=Z instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(Z,O);try{let x=f.fromBytes(Z,O),d=$.fromBytes(P);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),Y0=X.inv(a),G0=X.create(q0*Y0),t=X.create(B*Y0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return X.create(O0.x)===B}catch(x){return!1}}function C(Z,S,P={}){let{prehash:g}=uX(P,N);return S=y(S,g),f.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K,Point:$,sign:v,verify:I,recoverPublicKey:C,Signature:f,hash:q})}function MW($,q,J){return $&q^~$&J}function zW($,q,J){return $&q^$&J^q&J}class CY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=jY(this.buffer)}update($){Pq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=jY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Pq(this),OY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=jY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Fq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),gq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var IY=BigInt(4294967295),KW=BigInt(32);function h4($,q=!1){if(q)return{h:Number($&IY),l:Number($>>KW&IY)};return{h:Number($>>KW&IY)|0,l:Number($&IY)|0}}function EY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=h4($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var dX=($,q,J)=>$>>>J,iX=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,sG=($,q,J)=>$<<64-J|q>>>J-32,tG=($,q,J)=>$>>>J-32|q<<64-J;var RW=($,q,J)=>$<<J|q>>>32-J,DW=($,q,J)=>q<<J|$>>>32-J,HW=($,q,J)=>q<<J-32|$>>>64-J,OW=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var NW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),jW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,wW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),AW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,ZW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),BW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var p4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class cX extends CY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],R=QJ[M-2],K=d$(z,7)^d$(z,18)^z>>>3,N=d$(R,17)^d$(R,19)^R>>>10;QJ[M]=N+QJ[M-7]+K+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=d$(X,6)^d$(X,11)^d$(X,25),R=W+z+MW(X,U,V)+p4[M]+QJ[M]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+zW(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){Z$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z$(this.buffer)}}class SW extends cX{A=Fq[0]|0;B=Fq[1]|0;C=Fq[2]|0;D=Fq[3]|0;E=Fq[4]|0;F=Fq[5]|0;G=Fq[6]|0;H=Fq[7]|0;constructor(){super(32)}}class l4 extends cX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(28)}}var TW=(()=>EY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),r4=(()=>TW[0])(),d4=(()=>TW[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class eG extends CY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,f=XJ[T-15]|0,u=xJ(_,f,1)^xJ(_,f,8)^dX(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^iX(_,f,7),m=YJ[T-2]|0,k=XJ[T-2]|0,y=xJ(m,k,19)^sG(m,k,61)^dX(m,k,6),l=mJ(m,k,19)^tG(m,k,61)^iX(m,k,6),v=wW(F,l,XJ[T-7],XJ[T-16]),I=AW(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=xJ(M,z,14)^xJ(M,z,18)^sG(M,z,41),f=mJ(M,z,14)^mJ(M,z,18)^tG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=ZW(A,f,F,d4[T],XJ[T]),k=BW(m,w,_,u,r4[T],YJ[T]),y=m|0,l=xJ(J,G,28)^sG(J,G,34)^sG(J,G,39),v=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Yq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=NW(y,v,C);J=jW(Z,k,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Yq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Yq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Yq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Yq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){Z$(YJ,XJ)}destroy(){Z$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class i4 extends eG{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class CW extends eG{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class c4 extends eG{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class n4 extends eG{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var PY=F8(()=>new SW,eq(1));var IW=F8(()=>new CW,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o4=BigInt(1),EW=BigInt(2),a4=BigInt(3),s4=BigInt(5),yF=BigInt(8),PW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function t4($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=PW,U=$*$%Y*$%Y,V=k$(U,EW,Y)*U%Y,W=k$(V,o4,Y)*$%Y,M=k$(W,s4,Y)*W%Y,z=k$(M,q,Y)*M%Y,R=k$(z,J,Y)*z%Y,K=k$(R,G,Y)*R%Y,N=k$(K,Q,Y)*K%Y,j=k$(N,Q,Y)*K%Y,w=k$(j,q,Y)*M%Y;return{pow_p_5_8:k$(w,EW,Y)*$%Y,b2:U}}function e4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var LW=(()=>{let $=PW;return QW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=t4(q);return D$(k$(J,a4,$)*G,$)},adjustScalarBytes:e4})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $O=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),qO=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var JO=lX($O),nX=rX(JO,PY);var GO=lX(qO),FW=rX(GO,IW);function _W($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var oX=Uint8Array.of(0),gW=Uint8Array.of();function vW($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=gW;else Q0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)oX[0]=M+1,V.update(M===0?gW:W).update(J).update(oX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),Z$(W,oX),X.slice(0,G)}var QO=BigInt(0),$Q=BigInt(1),YO=BigInt(2),XO=BigInt(7),UO=BigInt(256),VO=BigInt(113),kW=[],fW=[],xW=[];for(let $=0,q=$Q,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],kW.push(2*(5*G+J)),fW.push(($+1)*($+2)/2%64);let Q=QO;for(let Y=0;Y<7;Y++)if(q=(q<<$Q^(q>>XO)*VO)%UO,q&YO)Q^=$Q<<($Q<<BigInt(Y))-$Q;xW.push(Q)}var mW=EY(xW,!0),WO=mW[0],MO=mW[1],bW=($,q,J)=>J>32?HW($,q,J):RW($,q,J),yW=($,q,J)=>J>32?OW($,q,J):DW($,q,J);function zO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=bW(W,M,1)^J[U],R=yW(W,M,1)^J[U+1];for(let K=0;K<50;K+=10)$[X+K]^=z,$[X+K+1]^=R}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=fW[X],V=bW(Q,Y,U),W=yW(Q,Y,U),M=kW[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=WO[G],$[1]^=MO[G]}Z$(J)}class LY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=NY(this.state)}clone(){return this._cloneInto()}keccak(){EX(this.state32),zO(this.state32,this.rounds),EX(this.state32),this.posOut=0,this.pos=0}update($){Pq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Pq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(OY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new LY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var hW=($,q,J,G={})=>F8(()=>new LY(q,$,J),G);var hJ=hW(6,136,32,eq(8));var uW=hW(6,72,64,eq(10));var pW=($,q,J,G={})=>F8((Q={})=>new LY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),lW=pW(31,168,16,eq(11)),Xq=pW(31,136,32,eq(12));function aX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function dW($){return aX($),($&$-1)===0&&$!==0}function sX($,q){aX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function iW($){return aX($),31-Math.clz32($)}function rW($){let q=$.length;if(q<2||!dW(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=iW(q);for(let G=0;G<q;G++){let Q=sX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var tX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=iW(J);if(!dW(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)rW(M);for(let z=0,R=1;z<V-X;z++){let K=Q?z+1+X:V-z,N=1<<K,j=N>>1,w=J>>K;for(let A=0;A<J;A+=N)for(let T=0,_=R++;T<j;T++){let f=Y?Q?J-_:_:T*w,u=A+T,F=A+T+j,m=G[f],k=M[F],y=M[u];if(W){let l=$.mul(k,m);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),m);else M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)rW(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function FY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function cW($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q0(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q0(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function gY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function eX($){return(1<<$)-1}var aF=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var nW=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},W=(T,_=G)=>{let f=V(T,_)|0;return(f>_>>1?f-_|0:f)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let f=sX(_,X),u=BigInt(Y)**BigInt(f)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),R={add:(T,_)=>V((T|0)+(_|0))|0,sub:(T,_)=>V((T|0)-(_|0))|0,mul:(T,_)=>V((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=tX(R,{dit:!1,...K}),j=tX(R,{dit:!0,...K});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=V(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=eX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let m=new Uint8Array(u);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&eX(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},KO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),y0(Y,G)}}},oW=KO(lW);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,_q=3329,RO=3303,DO=17,{mod:GQ,nttZetas:HO,NTT:pJ,bitsCoder:OO}=nW({N:Q$,Q:_q,F:RO,ROOT_OF_UNITY:DO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),$U={512:{N:Q$,Q:_q,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:_q,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:_q,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},NO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+_q/2)/_q,decode:(J)=>J*_q+q>>>$}},qQ=($)=>OO($,NO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]+q[J])}function jO($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]-q[J])}function wO($,q,J,G,Q){let Y=GQ(q*G*Q+$*J),X=GQ($*G+q*J);return{c0:Y,c1:X}}function _Y($,q){for(let J=0;J<Q$/2;J++){let G=HO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=wO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function aW($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<_q)q[J++]=Y;if(J<Q$&&X<_q)q[J++]=X}}return q}function JQ($,q,J,G){let Q=$(G*Q$/4,q,J),Y=new Uint16Array(Q$),X=NY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let R=X[V];for(let K=0;K<32;K++)if(M+=R&1,R>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=GQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var AO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=qQ(1),M=qQ(V),z=qQ(U),R=uJ("publicKey",gY(qQ(12),q),32),K=gY(qQ(12),q),N=uJ("ciphertext",gY(z,q),M),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:R.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let A=new Uint8Array(33);A.set(w),A[32]=q;let T=Q(A),[_,f]=j.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(JQ(J,f,y,Y)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(JQ(J,f,q+y,Y));for(let v=0;v<q;v++){let I=aW(m.get(v,y));lJ(l,_Y(I,u[v]))}F.push(l)}m.clean();let k={publicKey:R.encode([F,_]),secretKey:K.encode(u)};return y0(_,f,u,F,A,T),k},encrypt:(w,A,T)=>{let[_,f]=R.decode(w),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(JQ(J,T,v,Y)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let I=JQ(J,T,q+v,X),C=new Uint16Array(Q$);for(let Z=0;Z<q;Z++){let S=aW(F.get(v,Z));lJ(C,_Y(S,u[Z]))}lJ(I,pJ.decode(C)),k.push(I),lJ(m,_Y(_[v],u[v])),y0(C)}F.clean();let y=JQ(J,T,2*q,X);lJ(y,pJ.decode(m));let l=W.decode(A);return lJ(l,y),y0(_,u,m,y),N.encode([k,l])},decrypt:(w,A)=>{let[T,_]=N.decode(w),f=K.decode(A),u=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(u,_Y(f[F],pJ.encode(T[F])));return jO(_,pJ.decode(u)),y0(u,f,T),W.encode(_)}}};function qU($){let q=AO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q0(M,64,"seed");let{publicKey:z,secretKey:R}=q.keygen(M.subarray(0,32)),K=J(z),N=U.encode([R,z,K,M.subarray(32)]);return y0(R,K),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,R,K,N]=U.decode(M);return Uint8Array.from(R)},encapsulate:(M,z=Uq(32))=>{Q0(M,X.publicKey,"publicKey"),Q0(z,32,"message");let R=M.subarray(0,384*$.K),K=Y.encode(Y.decode(cW(R)));if(!FY(K,R))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(z).update(J(M)).digest(),j=q.encrypt(M,z,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q0(z,U.bytesLen,"secretKey"),Q0(M,X.cipherText,"cipherText");let R=U.bytesLen-96,K=R+32,N=J(z.subarray(R/2,K));if(!FY(N,z.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,A,T]=U.decode(z),_=q.decrypt(M,j),f=G.create().update(_).update(A).digest(),u=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=FY(M,F),k=Q.create({dkLen:32}).update(T).update(M).digest();return y0(_,F,!m?u:k),m?u:k}}}function ZO($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var JU={HASH256:hJ,HASH512:uW,KDF:Xq,XOF:oW,PRF:ZO},Ug=qU({...JU,...$U[512]}),QQ=qU({...JU,...$U[768]}),sW=qU({...JU,...$U[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function BO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q0(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function GU($,q=!1){let J=BO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y0(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function YQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function QU($){return(q,J)=>$(q,{dkLen:J})}function SO($,q,...J){let G=YQ(J,"seed"),Q=YQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function Y(X){Q0(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,R)=>z.keygen(U[R])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return y0(U),y0(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function vY($,q,J,G,...Q){let Y=SO($,J,...Q),X=YQ(Q,"cipherText"),U=YQ(Q,"publicKey"),V=YQ(Q,"msg");if(q===void 0)q=V.bytesLen;return m0(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Uq(V.bytesLen)){let z=U.decode(W),R=V.decode(M),K=Q.map((A,T)=>A.encapsulate(z[T],R[T])),N=K.map((A)=>A.sharedSecret),j=K.map((A)=>A.cipherText),w={sharedSecret:G(z,j,N),cipherText:X.encode(j)};return y0(N,j),w},decapsulate(W,M){let z=X.decode(W),{publicKey:R,secretKey:K}=Y.expandDecapsulationKey(M),N=Q.map((j,w)=>j.decapsulate(z[w],K[w]));return G(R,z,N)}}}function tW($,q,J,G,Q){return y$(G),y$(Q),vY(32,32,QU(G),(Y,X,U)=>Q(g0(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var jg=tW("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",QQ,GU(nX,!0),Xq,hJ),wg=tW("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",sW,GU(FW,!0),Xq,hJ);function TO($,q,J,G,Q){return y$(G),y$(Q),vY(32,32,QU(G),(Y,X,U)=>{let V=g0(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),W=32,M=g0(JJ("hybrid_prk"),V),z=_W(Q,M),R=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=vW(Q,z,R,32);return y0(z,R,M,V),K},q,J)}var eW=GU(LW),Ag=TO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",QQ,eW,Xq,PY),CO=(()=>vY(32,32,QU(Xq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),QQ,eW))();function IO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q0(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q0(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return y0(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function EO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=IO(J,Q,Y,G),U=64,V=U+G;return vY(32,32,(W)=>{Q0(W,32);let M=Xq(W,{dkLen:V}),z=M.subarray(0,U),R=M.subarray(U,V);return g0(z,R)},(W,M,z)=>hJ(g0(z[0],z[1],M[1],W[1],JJ($))),q,X)}var PO=(()=>EO("MLKEM768-P256",QQ,nX,128))();var YU=CO,$M=PO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z0=($,q,J)=>u0($,q,J),UU=L0,k8=QY,n0=(...$)=>VX(...$),f8=($)=>vG($),x8=YX,m8=($)=>Bq($),yY=BigInt(0),XU=BigInt(1);function vq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function kY($){if(typeof $==="bigint"){if(!bY($))throw RangeError("positive bigint expected, got "+$)}else UU($);return $}function Vq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function XQ($){let q=kY($).toString(16);return q.length&1?"0"+q:q}function qM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?yY:BigInt("0x"+$)}function rJ($){return qM(QY($))}function i$($){return qM(QY(UJ(u0($)).reverse()))}function fY($,q){if(L0(q),q===0)throw RangeError("zero length");$=kY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return vG(J.padStart(q*2,"0"))}function UQ($,q){return fY($,q).reverse()}function JM($,q){if($=Z0($),q=Z0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z0($))}function xY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var bY=($)=>typeof $==="bigint"&&yY<=$;function LO($,q,J){return bY($)&&bY(q)&&bY(J)&&q<=$&&$<J}function bq($,q,J,G){if(!LO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<yY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>yY;$>>=XU,q+=1);return q}var VQ=($)=>(XU<<BigInt($))-XU;function GM($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,n0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return n0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while((T=A(N()))===void 0)K();return z(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var VU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),E0=BigInt(1),dJ=BigInt(2),UM=BigInt(3),VM=BigInt(4),WM=BigInt(5),FO=BigInt(7),MM=BigInt(8),gO=BigInt(9),zM=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function QM($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,Y=E0,X=E0,U=o0;while(J!==o0){let W=G/J,M=G-J*W,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==E0)throw Error("invert: does not exist");return T0(Q,q)}function WU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function KM($,q){let J=$,G=(J.ORDER+E0)/VM,Q=J.pow(q,G);return WU(J,Q,q),Q}function _O($,q){let J=$,G=(J.ORDER-WM)/MM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),V=J.mul(X,J.sub(U,J.ONE));return WU(J,V,q),V}function vO($){let q=mY($),J=RM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+FO)/zM;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),R=W.mul(M,Q),K=W.mul(M,Y),N=W.eql(W.sqr(z),V),j=W.eql(W.sqr(R),V);M=W.cmov(M,z,N),z=W.cmov(K,R,j);let w=W.eql(W.sqr(z),V),A=W.cmov(M,z,w);return WU(W,A,V),A}}function RM($){if($<UM)throw Error("sqrt is not defined for small field");let q=$-E0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=mY($);while(YM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return KM;let Y=Q.pow(G,q),X=(q+E0)/dJ;return function(V,W){let M=V;if(M.is0(W))return W;if(YM(M,W)!==1)throw Error("Cannot find square root");let z=J,R=M.mul(M.ONE,Y),K=M.pow(W,q),N=M.pow(W,X);while(!M.eql(K,M.ONE)){if(M.is0(K))return M.ZERO;let j=1,w=M.sqr(K);while(!M.eql(w,M.ONE))if(j++,w=M.sqr(w),j===z)throw Error("Cannot find square root");let A=E0<<BigInt(z-j-1),T=M.pow(R,A);z=j,R=M.sqr(T),K=M.mul(K,R),N=M.mul(N,T)}return N}}function bO($){if($%VM===UM)return KM;if($%MM===WM)return _O;if($%zM===gO)return vO($);return RM($)}var yq=($,q)=>(T0($,q)&E0)===E0,yO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function MU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=yO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Vq($.BYTES,"BYTES"),Vq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=E0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function kO($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===E0)return q;let Q=G.ONE,Y=q;while(J>o0){if(J&E0)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=E0}return Q}function WQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function YM($,q){let J=$,G=(J.ORDER-E0)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function fO($,q){if(q!==void 0)UU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var XM=new WeakMap;class zU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=E0;_lengths;_mod;constructor($,q={}){if($<=E0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=fO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&E0)===E0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return kO(this,$,q)}div($,q){return T0($*QM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return QM($,this.ORDER)}sqrt($){let q=XM.get(this);if(!q)XM.set(this,q=bO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?UQ($,this.BYTES):fY($,this.BYTES)}fromBytes($,q=!1){Z0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(X)U=T0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return WQ(this,$)}cmov($,q,J){return vq(J,"condition"),J?q:$}}Object.freeze(zU.prototype);function mY($,q={}){return new zU($,q)}function DM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=E0)throw Error("field order must be greater than 1");let q=h8($-E0);return Math.ceil(q/8)}function KU($){let q=DM($);return q+Math.ceil(q/2)}function HM($,q,J=!1){Z0($);let G=$.length,Q=DM(q),Y=Math.max(KU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i$($):rJ($),U=T0(X,q-E0)+E0;return J?UQ(U,Q):fY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function MQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=WQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function wM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function RU($,q){wM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=VQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function OM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=iJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var DU=new WeakMap,AM=new WeakMap;function HU($){return AM.get($)||1}function NM($){if($!==u8)throw Error("invalid wNAF")}class zQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=RU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=RU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=OM(J,X,Y);if(J=U,W)Q=Q.add(MQ(z,q[R]));else G=G.add(MQ(M,q[V]))}return NM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=RU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=OM(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return NM(J),G}getPrecomputes($,q,J){let G=DU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);DU.set(q,G)}}return G}cached($,q,J){let G=HU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=HU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){wM(q,this.bits),AM.set($,q),DU.delete($)}hasCache($){return HU($)!==1}}function ZM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function jM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return MU(q),q}else return mY($,{isLE:J})}function hY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>u8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=jM(q.p,J.Fp,G),Y=jM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function RQ($,q){if(Vq($),Vq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function xO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function mO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?xY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function OU($,q,J,G){if(Z0($),Vq(J),q=mO(q),q.length>255)q=G(n0(xY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,RQ(q.length,1)),V=new Uint8Array(Y),W=RQ(J,2),M=Array(X),z=G(n0(V,$,W,RQ(0,1),U));M[0]=G(n0(z,RQ(1,1),U));for(let K=1;K<X;K++){let N=[xO(z,M[K-1]),RQ(K+1,1),U];M[K]=G(n0(...N))}return n0(...M).slice(0,J)}var BM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SM=($,q)=>($+($>=0?q:-q)/CM)/q;function hO($,q,J){bq("scalar",$,Wq,J);let[[G,Q],[Y,X]]=q,U=SM(X*$,J),V=SM(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Wq,R=M<Wq;if(z)W=-W;if(R)M=-M;let K=VQ(Math.ceil(h8(J)/2))+VJ;if(W<Wq||W>=K||M<Wq||M>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:R,k2:M}}function jU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function NU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(vq(J.lowS,"lowS"),vq(J.prehash,"prehash"),J.format!==void 0)jU(J.format);return J}class TM extends Error{constructor($=""){super($)}}var c$={Err:TM,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Vq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=XQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?XQ(Q.length/2|128):"";return XQ($)+Y+Q+q},decode($,q){let{Err:J}=c$;q=Z0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c$;if(kY($),$<Wq)throw new q("integer: negative integers are not allowed");let J=XQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=Z0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Wq=BigInt(0),VJ=BigInt(1),CM=BigInt(2),uY=BigInt(3),uO=BigInt(4);function IM($,q={}){let J=hY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=PM(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function R(v,I,C){if(W&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(vq(C,"isCompressed"),C){z();let g=!G.isOdd(S);return n0(EM(g),P)}else return n0(Uint8Array.of(4),P,G.toBytes(S))}function K(v){Z0(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:C}=M,Z=v.length,S=v[0],P=v.subarray(1);if(W&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===C&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${C}`)}let N=q.toBytes===void 0?R:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let I=G.sqr(v),C=G.mul(I,v);return G.add(G.add(C,G.mul(v,Y.a)),Y.b)}function A(v,I){let C=G.sqr(I),Z=w(v);return G.eql(C,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,uY),uO),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,I,C=!1){if(!G.isValid(I)||C&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!V||!V.basises)throw Error("no endo");return hO(v,V.basises,Q.ORDER)}function m(v,I,C,Z,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),I=MQ(Z,I),C=MQ(S,C),I.add(C)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,C){this.X=f("x",v),this.Y=f("y",I,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:C}=v||{};if(!v||!G.isValid(I)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(C))return k.ZERO;return new k(I,C,G.ONE)}static fromBytes(v){let I=k.fromAffine(j(Z0(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(uY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:C}=v.toAffine();if(!G.isValid(I)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!A(I,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(C,g),G.mul(P,Z));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,C=G.mul(I,uY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),x=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=Y.a,d=G.mul(Y.b,uY),B=G.mul(I,S),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.add(I,C),G0=G.add(S,P);Y0=G.mul(Y0,G0),G0=G.add(B,a),Y0=G.sub(Y0,G0),G0=G.add(I,Z);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(Y0,L),L=G.sub(L,B),B=G.mul(Y0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,Z,S=(P)=>l.cached(this,P,(g)=>cJ(k,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);Z=x.add(B),C=m(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);C=P,Z=g}return cJ(k,[C,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,C=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Wq||C.is0())return k.ZERO;if(Z===VJ)return C;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=ZM(k,C,P,L);return m(I.beta,b,O,S,g)}else return l.unsafe(C,Z)}toAffine(v){let I=this,C=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===VJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===VJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===VJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return vq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new zQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function EM($){return Uint8Array.of($?2:3)}function PM($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function pO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(PM($.Fp,J),{seed:Math.max(KU(J.ORDER),16)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,HM(Z0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,A=J._lengths;if(!x8(K))return;let T=Z0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!A?.includes(T);if(_&&f)return;return _}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=KQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function LM($,q,J={}){let G=q;Zq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Sq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N}=pO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=V*CM+VJ<X.ORDER;function A(S){let P=V>>VJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,P){jU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z0(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=j.format){f(S,P);let g;if(P==="der"){let{r:x,s:d}=c$.toSig(Z0(S));return new u(x,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(f8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),x=$.fromBytes(n0(EM((L&1)===0),O)),d=U.inv(b),B=m(Z0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),Y0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(Y0.is0())throw Error("invalid recovery: point at infinify");return Y0.assertValidity(),Y0}hasHighS(){return A(this.s)}toBytes(S=j.format){if(jU(S),S==="der")return f8(c$.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,k=VQ(W);function y(S){return bq("num < 2^"+W,S,Wq,k),U.toBytes(S)}function l(S,P){return Z0(S,void 0,"message"),P?Z0(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=NU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(Z0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function Y0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),A0=$.BASE.multiply(t).toAffine(),I0=U.create(A0.x);if(I0===Wq)return;let x0=U.create(O0*U.create(q0+I0*d));if(x0===Wq)return;let K$=(A0.x===I0?0:2)|Number(A0.y&VJ),Jq=x0;if(L&&A(x0))Jq=U.neg(x0),K$^=1;return new u(I0,Jq,w?void 0:K$)}return{seed:a,k2sig:Y0}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return GM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function C(S,P,g,L={}){let{lowS:b,prehash:O,format:x}=NU(L,j);if(g=Z0(g,void 0,"publicKey"),P=l(P,O),!x8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=u.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,Y0=m(P),G0=U.inv(q0),t=U.create(Y0*G0),O0=U.create(a*G0),A0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(A0.is0())return!1;return U.create(A0.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=NU(g,j);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N,Point:$,sign:I,verify:C,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var rO=IM(lO),p8=LM(rO,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WJ=BigInt(0),B$=BigInt(1),wU=BigInt(2),dO=BigInt(8);function iO($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function FM($,q={}){let J=q,G=hY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;f$(J,{},{uvRatio:"function"});let V=wU<<BigInt(Y.BYTES*8)-B$,W=(j)=>Q.create(j),M=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(A){return{isValid:!1,value:WJ}}}:J.uvRatio;if(!iO(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(j,w,A=!1){let T=A?B$:WJ;return bq("coordinate "+j,w,T,V),w}function R(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(X.Gx,X.Gy,B$,W(X.Gx*X.Gy));static ZERO=new K(WJ,B$,B$,WJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(j,w,A,T){this.X=z("x",j),this.Y=z("y",w),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:A}=j||{};return z("x",w),z("y",A),new K(w,A,B$,W(w*A))}static fromBytes(j,w=!1){let A=Q.BYTES,{a:T,d:_}=X;j=UJ(Z0(j,A,"point")),vq(w,"zip215");let f=UJ(j),u=j[A-1];f[A-1]=u&-129;let F=i$(f),m=w?V:Q.ORDER;bq("point.y",F,WJ,m);let k=W(F*F),y=W(k-B$),l=W(_*k-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(I&B$)===B$,Z=(u&128)!==0;if(!w&&I===WJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==C)I=W(-I);return K.fromAffine({x:I,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(wU);return this}assertValidity(){let j=this,{a:w,d:A}=X;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:u}=j,F=W(T*T),m=W(_*_),k=W(f*f),y=W(k*k),l=W(F*w),v=W(k*W(l+m)),I=W(y+W(A*W(F*m)));if(v!==I)throw Error("bad point: equation left != right (1)");let C=W(T*_),Z=W(f*u);if(C!==Z)throw Error("bad point: equation left != right (2)")}equals(j){R(j);let{X:w,Y:A,Z:T}=this,{X:_,Y:f,Z:u}=j,F=W(w*u),m=W(_*T),k=W(A*u),y=W(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:j}=X,{X:w,Y:A,Z:T}=this,_=W(w*w),f=W(A*A),u=W(wU*W(T*T)),F=W(j*_),m=w+A,k=W(W(m*m)-_-f),y=F+f,l=y-u,v=F-f,I=W(k*l),C=W(y*v),Z=W(k*v),S=W(l*y);return new K(I,C,S,Z)}add(j){R(j);let{a:w,d:A}=X,{X:T,Y:_,Z:f,T:u}=this,{X:F,Y:m,Z:k,T:y}=j,l=W(T*F),v=W(_*m),I=W(u*A*y),C=W(f*k),Z=W((T+_)*(F+m)-l-v),S=C-I,P=C+I,g=W(v-w*l),L=W(Z*S),b=W(P*g),O=W(Z*g),x=W(S*P);return new K(L,b,x,O)}subtract(j){return R(j),this.add(j.negate())}multiply(j){if(!Y.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:A}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,A])[0]}multiplyUnsafe(j){if(!Y.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===WJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(j){let w=this,A=j,{X:T,Y:_,Z:f}=w,u=w.is0();if(A==null)A=u?dO:Q.inv(f);let F=W(T*A),m=W(_*A),k=Q.mul(f,A);if(u)return{x:WJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),A=Q.toBytes(w);return A[A.length-1]|=j&B$?128:0,A}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new zQ(K,Y.BITS);if(Y.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class AU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){VU()}static fromHex($){VU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var DQ=BigInt(0),l8=BigInt(1),pY=BigInt(2);function cO($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function gM($){let q=cO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?m8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?pY**BigInt(254):pY**BigInt(447),N=U?BigInt(8)*pY**BigInt(251)-l8:BigInt(4)*pY**BigInt(445)-l8,j=K+N+l8,w=(Z)=>T0(Z,J),A=T(z);function T(Z){return UQ(w(Z),M)}function _(Z){let S=UJ(Z0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(Z){return i$(Q(UJ(Z0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===DQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){bq("u",Z,DQ,J),bq("scalar",S,K,j);let P=S,g=Z,L=l8,b=DQ,O=Z,x=l8,d=DQ;for(let a=BigInt(W-1);a>=DQ;a--){let q0=P>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?V(M):Z,Z0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:KQ(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nO=BigInt(0),kq=BigInt(1),_M=BigInt(2),oO=BigInt(3),aO=BigInt(5),sO=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),TU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:sO,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function yM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,V=x$(U,_M,Y)*U%Y,W=x$(V,kq,Y)*$%Y,M=x$(W,aO,Y)*W%Y,z=x$(M,q,Y)*M%Y,R=x$(z,J,Y)*z%Y,K=x$(R,G,Y)*R%Y,N=x$(K,Q,Y)*K%Y,j=x$(N,Q,Y)*K%Y,w=x$(j,q,Y)*M%Y;return{pow_p_5_8:x$(w,_M,Y)*$%Y,b2:U}}function tO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var ZU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function CU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),Y=yM($*Q).pow_p_5_8,X=T0($*G*Y,J),U=T0(q*X*X,J),V=X,W=T0(X*ZU,J),M=U===$,z=U===T0(-$,J),R=U===T0(-$*ZU,J);if(M)X=V;if(z||R)X=W;if(yq(X,J))X=T0(-X,J);return{isValid:M||z,value:X}}var nJ=FM(TU,{uvRatio:CU}),MJ=(()=>nJ.Fp)(),kM=(()=>nJ.Fn)();var lY=(()=>{let $=oJ;return gM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=yM(q);return T0(x$(J,oO,$)*G,$)},adjustScalarBytes:tO})})();var BU=ZU,eO=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),$N=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),qN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),JN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),vM=($)=>CU(kq,$),GN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),SU=($)=>MJ.create(i$($)&GN);function bM($){let{d:q}=TU,J=oJ,G=(A)=>MJ.create(A),Q=G(BU*$*$),Y=G((Q+kq)*qN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=CU(Y,U),M=G(W*$);if(!yq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-kq)*JN-U),R=W*W,K=G((W+W)*U),N=G(z*eO),j=G(kq-R),w=G(kq+R);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends AU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>kM)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=TU,G=oJ,Q=(_)=>MJ.create(_),Y=SU($);if(!JM(MJ.toBytes(Y),$)||yq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(kq+q*X),V=Q(kq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:R,value:K}=vM(Q(z*M)),N=Q(K*V),j=Q(K*N*z),w=Q((Y+Y)*N);if(yq(w,G))w=Q(-w);let A=Q(U*j),T=Q(w*A);if(!R||yq(T,G)||A===nO)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,A,kq,T))}static fromHex($){return O$.fromBytes(vG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(j)=>MJ.create(j),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=vM(Y(X*V)),M=Y(W*X),z=Y(W*U),R=Y(M*z*G),K;if(yq(G*R,Q)){let j=Y(q*BU),w=Y($*BU);$=j,q=w,K=Y(M*$N)}else K=z;if(yq($*R,Q))q=Y(-q);let N=Y((J-q)*K);if(yq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>MJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var QN=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=OU($,J,64,VY);return QN.deriveToCurve(G)},hashToScalar($,q={DST:BM}){let J=OU($,q.DST,64,VY);return kM.create(i$(J))},deriveToCurve($){u0($,64);let q=SU($.subarray(0,32)),J=bM(q),G=SU($.subarray(32,64)),Q=bM(G);return new O$(J.add(Q))}});var fM=!1,YN=!1;async function xM($,q){if(YN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function EU($,q){return await xM(async()=>{let J=IU($)?$:await UN($),G=await crypto.subtle.importKey("raw",VN(q),{name:"X25519"},fM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(IU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lY.scalarMult($,q)})}async function PU($){return await xM(async()=>{return EU($,lY.GuBytes)},()=>{if(IU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lY.scalarMultBase($)})}var XN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function UN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...XN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},fM,["deriveBits"])}function IU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function VN($){return $}class mM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),MN(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function MN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function rY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function hM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function uM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class fq{args;body;constructor($,q){this.args=$,this.body=q}}function LU($){let q=[];q.push(`age-encryption.org/v1
|
|
57
|
+
`).map((q)=>q.trim()).join(" ")};jD.O=function($){return this.inspectOpts.colors=this.useColors,P9.inspect($,this.inspectOpts)}});var BD=X0((Um,f7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)f7.exports=KD();else f7.exports=ZD()});var A1=X0((bp,w1)=>{var m9=Object.prototype.hasOwnProperty,j1=Object.prototype.toString,K1=Object.defineProperty,R1=Object.getOwnPropertyDescriptor,D1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return j1.call(q)==="[object Array]"},H1=function(q){if(!q||j1.call(q)!=="[object Object]")return!1;var J=m9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&m9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||m9.call(q,Q)},O1=function(q,J){if(K1&&J.name==="__proto__")K1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},N1=function(q,J){if(J==="__proto__"){if(!m9.call(q,J))return;else if(R1)return R1(q,J).value}return q[J]};w1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=N1(U,J),Q=N1(q,J),U!==Q){if(M&&Q&&(H1(Q)||(Y=D1(Q)))){if(Y)Y=!1,X=G&&D1(G)?G:[];else X=G&&H1(G)?G:{};O1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")O1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as xH}from"util";var mH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"}};function QX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function hH($,q){let J=$[q];return typeof J==="string"?J:void 0}function d5($){let{values:q,positionals:J}=xH({args:$,options:mH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:QX(q,"help"),version:QX(q,"version"),dryRun:QX(q,"dry-run"),pushTo:hH(q,"push-to")}}}var qY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.39",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as BN,mkdirSync as SN,readFileSync as uU,writeFileSync as pU}from"fs";import{dirname as TN,join as cM}from"path";function YX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=YX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Zq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function JY($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function GY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function R$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var pH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function lH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function rH($){for(let q=0;q<$.length;q++)$[q]=lH($[q]);return $}var XX=pH?($)=>$:rH,c5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),dH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function QY($){if(u0($),c5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=dH[$[J]];return q}var Aq={_0:48,_9:57,A:65,F:70,a:97,f:102};function i5($){if($>=Aq._0&&$<=Aq._9)return $-Aq._0;if($>=Aq.A&&$<=Aq.F)return $-(Aq.A-10);if($>=Aq.a&&$<=Aq.f)return $-(Aq.a-10);return}function vG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(c5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=i5($.charCodeAt(Y)),U=i5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function iH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function UX($,q=""){if(typeof $==="string")return iH($);return u0($,void 0,q)}function VX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function YY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function WX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Bq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var MX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class zX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Zq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),R$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),JY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Sq=(()=>{let $=(q,J,G)=>new zX(q,J).update(G).digest();return $.create=(q,J)=>new zX(q,J),$})();function bG($,q,J){if(Zq($),J===void 0)J=new Uint8Array($.outputLen);return Sq($,J,q)}var KX=Uint8Array.of(0),n5=Uint8Array.of();function RX($,q,J,G=32){Zq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=n5;else u0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Sq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)KX[0]=M+1,V.update(M===0?n5:W).update(J).update(KX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),R$(W,KX),X.slice(0,G)}var yG=($,q,J,G,Q)=>RX($,bG($,q,J),G,Q);function o5($,q,J){return $&q^~$&J}function a5($,q,J){return $&q^$&J^q&J}class XY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=C8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),JY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,R$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Tq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var UY=BigInt(4294967295),s5=BigInt(32);function cH($,q=!1){if(q)return{h:Number($&UY),l:Number($>>s5&UY)};return{h:Number($>>s5&UY)|0,l:Number($&UY)|0}}function t5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=cH($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var DX=($,q,J)=>$>>>J,HX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,fG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var e5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),$V=($,q,J,G)=>q+J+G+($/4294967296|0)|0,qV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),JV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,GV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),QV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var oH=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class OX extends XY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],R=cq[M-2],K=u$(z,7)^u$(z,18)^z>>>3,N=u$(R,17)^u$(R,19)^R>>>10;cq[M]=N+cq[M-7]+K+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=u$(X,6)^u$(X,11)^u$(X,25),R=W+z+o5(X,U,V)+oH[M]+cq[M]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+a5(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){R$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),R$(this.buffer)}}class YV extends OX{A=Tq[0]|0;B=Tq[1]|0;C=Tq[2]|0;D=Tq[3]|0;E=Tq[4]|0;F=Tq[5]|0;G=Tq[6]|0;H=Tq[7]|0;constructor(){super(32)}}class aH extends OX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var XV=(()=>t5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),sH=(()=>XV[0])(),tH=(()=>XV[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends XY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,u=FJ(_,f,1)^FJ(_,f,8)^DX(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^HX(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^kG(m,k,61)^DX(m,k,6),l=gJ(m,k,19)^fG(m,k,61)^HX(m,k,6),v=qV(F,l,oq[T-7],oq[T-16]),I=JV(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^kG(M,z,41),f=gJ(M,z,14)^gJ(M,z,18)^fG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=GV(A,f,F,tH[T],oq[T]),k=QV(m,w,_,u,sH[T],nq[T]),y=m|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^fG(J,G,34)^fG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Gq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=e5(y,v,C);J=$V(Z,k,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Gq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Gq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Gq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){R$(nq,oq)}destroy(){this.destroyed=!0,R$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class UV extends xG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class eH extends xG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class $4 extends xG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class q4 extends xG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=WX(()=>new YV,MX(1));var VY=WX(()=>new UV,MX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function RY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function wX($){if(!RY($))throw Error("Uint8Array expected")}function KV($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function RV($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function hG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function MY($){if(!Array.isArray($))throw Error("array expected")}function zY($,q){if(!KV(!0,q))throw Error(`${$}: array of strings expected`)}function AX($,q){if(!KV(!1,q))throw Error(`${$}: array of numbers expected`)}function E$(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P$($){let q=typeof $==="string"?$.split(""):$,J=q.length;zY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return MY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return MY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return zY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function DY($,q="="){return hG($),aq("padding",q),{encode(J){zY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){zY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function DV($){return RV($),{encode:(q)=>q,decode:(q)=>$(q)}}function VV($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(MY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(hG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,R=z+M;if(!Number.isSafeInteger(R)||z/q!==U||R-M!==z)throw Error("convertRadix: carry overflow");let K=R/J;U=R%J;let N=Math.floor(K);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==R)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var HV=($,q)=>q===0?$:HV(q,$%q),KY=($,q)=>$+(q-HV($,q)),WY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function NX($,q,J,G){if(MY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(KY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${KY(q,J)}`);let Q=0,Y=0,X=WY[q],U=WY[J]-1,V=[];for(let W of $){if(hG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=WY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function J4($){hG($);let q=256;return{encode:(J)=>{if(!RY(J))throw Error("radix.encode input should be Uint8Array");return VV(Array.from(J),q,$)},decode:(J)=>{return AX("radix.decode",J),Uint8Array.from(VV(J,$,q))}}}function b$($,q=!1){if(hG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(KY(8,$)>32||KY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!RY(J))throw Error("radix2.encode input should be Uint8Array");return NX(Array.from(J),8,$,!q)},decode:(J)=>{return AX("radix2.decode",J),Uint8Array.from(NX(J,$,8,q))}}}function WV($){return RV($),function(...q){try{return $.apply(null,q)}catch(J){}}}var B3=E$(b$(4),P$("0123456789ABCDEF"),L$("")),S3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),DY(5),L$("")),T3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),C3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),DY(5),L$("")),I3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),E3=E$(b$(5),P$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),DV(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),OV=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),NV=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},ZX=OV?{encode($){return wX($),$.toBase64()},decode($){return NV($,!1)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),DY(6),L$("")),p$=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),P3=OV?{encode($){return wX($),$.toBase64({alphabet:"base64url"})},decode($){return NV($,!0)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),DY(6),L$("")),L3=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),BX=($)=>E$(J4(58),P$($),L$("")),F3=BX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),g3=BX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),_3=BX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var jX=E$(P$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),MV=[996825010,642813549,513874426,1027748829,705979059];function mG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<MV.length;G++)if((q>>G&1)===1)J^=MV[G];return J}function zV($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=mG(Q)^X>>5}Q=mG(Q);for(let Y=0;Y<G;Y++)Q=mG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=mG(Q)^Y;for(let Y=0;Y<6;Y++)Q=mG(Q);return Q^=J,jX.encode(NX([Q%WY[30]],30,5,!1))}function jV($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,Y=WV(G);function X(z,R,K=90){if(aq("bech32.encode prefix",z),RY(R))R=Array.from(R);AX("bech32.encode",R);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+R.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=z.toLowerCase(),A=zV(w,R,q);return`${w}1${jX.encode(R)}${A}`}function U(z,R=90){aq("bech32.decode input",z);let K=z.length;if(K<8||R!==!1&&K>R)throw TypeError(`invalid string length: ${K} (${z}). Expected (8..${R})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),A=N.slice(j+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=jX.decode(A).slice(0,-6),_=zV(w,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:w,words:T}}let V=WV(U);function W(z){let{prefix:R,words:K}=U(z,!1);return{prefix:R,words:K,bytes:G(K)}}function M(z,R){return X(z,Q(R))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l$=jV("bech32"),v3=jV("bech32m");var G4=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Q4={encode($){return wX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},b3=G4?Q4:E$(b$(4),P$("0123456789abcdef"),L$(""),DV(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function X4($,q,J,G){Zq($);let Q=YY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L0(Y,"c"),L0(X,"dkLen"),L0(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=UX(q,"password"),W=UX(J,"salt"),M=new Uint8Array(X),z=Sq.create($,V),R=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:R}}function U4($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return R$(Q),J}function SX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=X4($,q,J,G),W,M=new Uint8Array(4),z=C8(M),R=new Uint8Array(U.outputLen);for(let K=1,N=0;N<Y;K++,N+=U.outputLen){let j=X.subarray(N,N+U.outputLen);z.setInt32(0,K,!1),(W=V._cloneInto(W)).update(M).digestInto(R),j.set(R.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(W).update(R).digestInto(R);for(let A=0;A<j.length;A++)j[A]^=R[A]}}return U4(U,V,X,W,R)}function wV($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],R=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],u=$[q++]^J[G++],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),Z^=N0(l+F|0,9),L^=N0(Z+l|0,13),F^=N0(L+Z|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(P+I|0,7),k^=N0(O+P|0,9),I^=N0(k+O|0,13),P^=N0(I+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),I^=N0(v+l|0,7),C^=N0(I+v|0,9),l^=N0(C+I|0,13),v^=N0(l+C|0,18),g^=N0(P+S|0,7),Z^=N0(g+P|0,9),S^=N0(Z+g|0,13),P^=N0(S+Z|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+m|0,Q[Y++]=V+k|0,Q[Y++]=W+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=R+I|0,Q[Y++]=K+C|0,Q[Y++]=N+Z|0,Q[Y++]=j+S|0,Q[Y++]=w+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=f+O|0,Q[Y++]=u+x|0}function TX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(wV(J,X,$,q,J,Y),U>0)X+=16;wV(J,Y,$,q+=16,J,X)}}function V4($,q,J){let G=YY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(L0(Q,"N"),L0(Y,"r"),L0(X,"p"),L0(U,"dkLen"),L0(V,"asyncTick"),L0(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,R=z/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(K-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let j=SX(r0,$,q,{c:1,dkLen:z*X}),w=GY(j),A=GY(new Uint8Array(z*Q)),T=GY(new Uint8Array(z)),_=()=>{};if(M){let f=2*Q*X,u=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===f))M(F/f)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:R,V:A,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:V}}function W4($,q,J,G,Q){let Y=SX(r0,$,J,{c:1,dkLen:q});return R$(J,G,Q),Y}function AV($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:R}=V4($,q,J);XX(W);for(let K=0;K<Y;K++){let N=U*K;for(let j=0;j<U;j++)V[j]=W[N+j];for(let j=0,w=0;j<G-1;j++)TX(V,w,V,w+=U,Q),R();TX(V,(G-1)*U,W,N,Q),R();for(let j=0;j<G;j++){let w=(W[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=W[N+A]^V[w*U+A];TX(z,0,W,N,Q),R()}}return XX(W),W4($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function M4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function HY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=M4($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function CX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function ZV($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!E8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function z4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),K4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var R4=($)=>{for(let q=0;q<$.length;q++)$[q]=K4($[q]);return $},Iq=_J?($)=>$:R4;function BV($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function SV($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function TV($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var CV=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b0(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b0(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,b0(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b0(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function uG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!E8(q))throw Error("invalid output, must be aligned");return q}function IV($,q,J){I8($),I8(q),HY(J);let G=new Uint8Array(16),Q=z4(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function E8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b0($))}var PV=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),D4=(()=>Iq(Qq(PV("expand 16-byte k"))))(),H4=(()=>Iq(Qq(PV("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var pG=64,O4=16,IX=(()=>4294967295)(),EV=Uint32Array.of();function N4($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(pG),M=Qq(W),z=_J&&E8(Q)&&E8(Y),R=z?Qq(Q):EV,K=z?Qq(Y):EV;if(!_J){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Iq(M),X>=IX)throw Error("arx: counter overflow");let j=Math.min(pG,V-N);for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=IX)throw Error("arx: counter overflow");let j=Math.min(pG,V-N);if(z&&j===pG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<O4;A++)T=w+A,K[T]=R[T]^M[A];N+=pG;continue}for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}}function LV($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=BV({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),HY(Y),HY(J),(U,V,W,M,z=0)=>{b0(U,void 0,"key"),b0(V,void 0,"nonce"),b0(W,void 0,"data");let R=W.length;if(M=uG(R,M,!1),I8(z),z<0||z>=IX)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=P8(U)),w=H4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=D4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!E8(V))K.push(V=P8(V));let A=Qq(j);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=V.subarray(0,16);if(_J)G(w,A,Qq(f),A);else{let u=Iq(Uint32Array.from(w));G(u,A,Qq(f),A),r$(u),Iq(A)}V=V.subarray(16)}else if(!_J)Iq(A);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(V,Y?0:12-V.length),V=f,K.push(V)}let _=Iq(Qq(V));try{return N4($,w,A,_,W,M,z,X),M}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class FV{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),Y=d0($,8),X=d0($,10),U=d0($,12),V=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=d0($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],R=Y[6],K=Y[7],N=Y[8],j=Y[9],w=d0($,q+0),A=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),u=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),Z=Q[6]+((f>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*X+y*(5*j)+l*(5*N)+v*(5*K)+I*(5*R);L=b>>>13,b&=8191,b+=C*(5*z)+Z*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*X+l*(5*j)+v*(5*N)+I*(5*K);L=O>>>13,O&=8191,O+=C*(5*R)+Z*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let x=L+k*V+y*U+l*X+v*(5*j)+I*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+Z*(5*R)+S*(5*z)+P*(5*M)+g*(5*W),L+=x>>>13,x&=8191;let d=L+k*W+y*V+l*U+v*X+I*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+Z*(5*K)+S*(5*R)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+k*M+y*W+l*V+v*U+I*X;L=B>>>13,B&=8191,B+=C*(5*j)+Z*(5*N)+S*(5*K)+P*(5*R)+g*(5*z),L+=B>>>13,B&=8191;let a=L+k*z+y*M+l*W+v*V+I*U;L=a>>>13,a&=8191,a+=C*X+Z*(5*j)+S*(5*N)+P*(5*K)+g*(5*R),L+=a>>>13,a&=8191;let q0=L+k*R+y*z+l*M+v*W+I*V;L=q0>>>13,q0&=8191,q0+=C*U+Z*X+S*(5*j)+P*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let Y0=L+k*K+y*R+l*z+v*M+I*W;L=Y0>>>13,Y0&=8191,Y0+=C*V+Z*U+S*X+P*(5*j)+g*(5*N),L+=Y0>>>13,Y0&=8191;let G0=L+k*N+y*K+l*R+v*z+I*M;L=G0>>>13,G0&=8191,G0+=C*W+Z*V+S*U+P*X+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*R+I*z;L=t>>>13,t&=8191,t+=C*M+Z*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=Y0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r$(J)}update($){CX(this),b0($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){CX(this),ZV($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var gV=TV(32,($)=>new FV($));function j4($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],R=q[2],K=q[3],N=q[4],j=q[5],w=q[6],A=q[7],T=Q,_=J[0],f=J[1],u=J[2],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=j0(L^F,16),Z=Z+L|0,l=j0(l^Z,12),F=F+l|0,L=j0(L^F,8),Z=Z+L|0,l=j0(l^Z,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+I|0,O=j0(O^k,16),P=P+O|0,I=j0(I^P,12),k=k+I|0,O=j0(O^k,8),P=P+O|0,I=j0(I^P,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),P=P+x|0,v=j0(v^P,12),F=F+v|0,x=j0(x^F,8),P=P+x|0,v=j0(v^P,7),m=m+I|0,L=j0(L^m,16),g=g+L|0,I=j0(I^g,12),m=m+I|0,L=j0(L^m,8),g=g+L|0,I=j0(I^g,7),k=k+C|0,b=j0(b^k,16),Z=Z+b|0,C=j0(C^Z,12),k=k+C|0,b=j0(b^k,8),Z=Z+b|0,C=j0(C^Z,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+m|0,G[d++]=V+k|0,G[d++]=W+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=R+I|0,G[d++]=K+C|0,G[d++]=N+Z|0,G[d++]=j+S|0,G[d++]=w+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=u+x|0}var w4=LV(j4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var A4=new Uint8Array(16),_V=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(A4.subarray(J))},Z4=new Uint8Array(32);function vV($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let Y=$(q,J,Z4),X=IV(G.length,Q?Q.length:0,!0),U=gV.create(Y);if(Q)_V(U,Q);_V(U,G),U.update(X);let V=U.digest();return r$(Y,X),V}var B4=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=uG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=vV($,q,J,V,G);return X.set(W,U),r$(W),X},decrypt(Y,X){X=uG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=vV($,q,J,U,G);if(!SV(V,W))throw r$(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r$(W),X}}},sq=CV({blockSize:64,nonceLength:12,tagLength:16},B4(w4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Pq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function OY($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function NY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function jY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var S4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function T4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function C4($){for(let q=0;q<$.length;q++)$[q]=T4($[q]);return $}var EX=S4?($)=>$:C4,yV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),I4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),yV)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=I4[$[J]];return q}var Eq={_0:48,_9:57,A:65,F:70,a:97,f:102};function bV($){if($>=Eq._0&&$<=Eq._9)return $-Eq._0;if($>=Eq.A&&$<=Eq.F)return $-(Eq.A-10);if($>=Eq.a&&$<=Eq.f)return $-(Eq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(yV)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=bV($.charCodeAt(Y)),U=bV($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var LX=BigInt(0),PX=BigInt(1);function lG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function kV($){if(typeof $==="bigint"){if(!wY($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function rG($){let q=kV($).toString(16);return q.length&1?"0"+q:q}function fV($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?LX:BigInt("0x"+$)}function $J($){return fV(vJ($))}function qJ($){return fV(vJ(AY(Q0($)).reverse()))}function g8($,q){m0(q),$=kV($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function dG($,q){return g8($,q).reverse()}function AY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var wY=($)=>typeof $==="bigint"&&LX<=$;function E4($,q,J){return wY($)&&wY(q)&&wY(J)&&q<=$&&$<J}function iG($,q,J,G){if(!E4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function FX($){let q;for(q=0;$>LX;$>>=PX,q+=1);return q}var cG=($)=>(PX<<BigInt($))-PX;function xV($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,g0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return g0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while(!(T=A(N())))K();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function gX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),uV=BigInt(3),pV=BigInt(4),lV=BigInt(5),P4=BigInt(7),rV=BigInt(8),L4=BigInt(9),dV=BigInt(16);function D$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function mV($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=D$($,q),G=q,Q=H$,Y=q$,X=q$,U=H$;while(J!==H$){let W=G/J,M=G%J,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==q$)throw Error("invert: does not exist");return D$(Q,q)}function _X($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function iV($,q){let J=($.ORDER+q$)/pV,G=$.pow(q,J);return _X($,G,q),G}function F4($,q){let J=($.ORDER-lV)/rV,G=$.mul(q,kJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,kJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return _X($,U,q),U}function g4($){let q=ZY($),J=cV($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+P4)/dV;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),R=U.mul(W,Y),K=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,K),M=U.cmov(R,z,N);let j=U.eql(U.sqr(M),V),w=U.cmov(W,M,j);return _X(U,w,V),w}}function cV($){if($<uV)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=ZY($);while(hV(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return iV;let Y=Q.pow(G,q),X=(q+q$)/kJ;return function(V,W){if(V.is0(W))return W;if(hV(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),R=V.pow(W,q),K=V.pow(W,X);while(!V.eql(R,V.ONE)){if(V.is0(R))return V.ZERO;let N=1,j=V.sqr(R);while(!V.eql(j,V.ONE))if(N++,j=V.sqr(j),N===M)throw Error("Cannot find square root");let w=q$<<BigInt(M-N-1),A=V.pow(z,w);M=N,z=V.sqr(A),R=V.mul(R,z),K=V.mul(K,A)}return K}}function _4($){if($%pV===uV)return iV;if($%rV===lV)return F4;if($%dV===L4)return g4($);return cV($)}var v4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function vX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=v4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function b4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function nG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function hV($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function y4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class nV{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=y4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return D$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D$($*$,this.ORDER)}add($,q){return D$($+q,this.ORDER)}sub($,q){return D$($-q,this.ORDER)}mul($,q){return D$($*q,this.ORDER)}pow($,q){return b4(this,$,q)}div($,q){return D$($*mV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return mV($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=_4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?dG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return nG(this,$)}cmov($,q,J){return J?q:$}}function ZY($,q={}){return new nV($,q)}function oV($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function bX($){let q=oV($);return q+Math.ceil(q/2)}function aV($,q,J=!1){Q0($);let G=$.length,Q=oV(q),Y=bX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D$(X,q-q$)+q$;return J?dG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function oG($,q){let J=q.negate();return $?J:q}function xX($,q){let J=nG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function $W($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function yX($,q){$W($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=cG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function sV($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=fJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var kX=new WeakMap,qW=new WeakMap;function fX($){return qW.get($)||1}function tV($){if($!==_8)throw Error("invalid wNAF")}class mX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=yX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=yX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=sV(J,X,Y);if(J=U,W)Q=Q.add(oG(z,q[R]));else G=G.add(oG(M,q[V]))}return tV(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=yX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=sV(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return tV(J),G}getPrecomputes($,q,J){let G=kX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);kX.set(q,G)}}return G}cached($,q,J){let G=fX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=fX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){$W(q,this.bits),qW.set($,q),kX.delete($)}hasCache($){return fX($)!==1}}function JW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&fJ)Y=Y.add(Q);if(G&fJ)X=X.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:Y,p2:X}}function eV($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return vX(q),q}else return ZY($,{isLE:J})}function GW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>_8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=eV(q.p,J.Fp,G),Y=eV(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function BY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aG=BigInt(0),v8=BigInt(1),SY=BigInt(2);function k4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function QW($){let q=k4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||tq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?SY**BigInt(254):SY**BigInt(447),N=U?BigInt(8)*SY**BigInt(251)-v8:BigInt(4)*SY**BigInt(445)-v8,j=K+N+v8,w=(Z)=>D$(Z,J),A=T(z);function T(Z){return dG(w(Z),M)}function _(Z){let S=AY(Q0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(Z){return qJ(Q(AY(Q0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===aG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){iG("u",Z,aG,J),iG("scalar",S,K,j);let P=S,g=Z,L=v8,b=aG,O=Z,x=v8,d=aG;for(let a=BigInt(W-1);a>=aG;a--){let q0=P>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=V(M))=>{return Q0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze({keygen:BY(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}class hX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z$(G)}update($){return Pq(this),this.iHash.update($),this}digestInto($){Pq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new hX($,q).update(J).digest();b8.create=($,q)=>new hX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var YW=($,q)=>($+($>=0?q:-q)/UW)/q;function f4($,q,J){let[[G,Q],[Y,X]]=q,U=YW(X*$,J),V=YW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Lq,R=M<Lq;if(z)W=-W;if(R)M=-M;let K=cG(Math.ceil(FX(J)/2))+y8;if(W<Lq||W>=K||M<Lq||M>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:R,k2:M}}function pX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function uX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(lG(J.lowS,"lowS"),lG(J.prehash,"prehash"),J.format!==void 0)pX(J.format);return J}class XW extends Error{constructor($=""){super($)}}var GJ={Err:XW,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=rG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?rG(Q.length/2|128):"";return rG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Lq)throw new q("integer: negative integers are not allowed");let J=rG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Lq=BigInt(0),y8=BigInt(1),UW=BigInt(2),TY=BigInt(3),x4=BigInt(4);function lX($,q={}){let J=GW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=WW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,C,Z){let{x:S,y:P}=C.toAffine(),g=G.toBytes(S);if(lG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g0(VW(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(P))}function R(I){Q0(I,void 0,"Point");let{publicKey:C,publicKeyUncompressed:Z}=W,S=I.length,P=I[0],g=I.subarray(1);if(S===C&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let x=G.isOdd(O);if((P&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${Z}`)}let K=q.toBytes||z,N=q.fromBytes||R;function j(I){let C=G.sqr(I),Z=G.mul(C,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function w(I,C){let Z=G.sqr(C),S=j(I);return G.eql(Z,S)}if(!w(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,TY),x4),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,C,Z=!1){if(!G.isValid(C)||Z&&G.is0(C))throw Error(`bad point coordinate ${I}`);return C}function f(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!V||!V.basises)throw Error("no endo");return f4(I,V.basises,Q.ORDER)}let F=gX((I,C)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=gX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:C,y:Z}=I.toAffine();if(!G.isValid(C)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!w(C,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(I,C,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),C=oG(S,C),Z=oG(P,Z),C.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,C,Z){this.X=_("x",I),this.Y=_("y",C,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:C,y:Z}=I||{};if(!I||!G.isValid(C)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(Z))return y.ZERO;return new y(C,Z,G.ONE)}static fromBytes(I){let C=y.fromAffine(N(Q0(I,void 0,"point")));return C.assertValidity(),C}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,C=!0){if(v.createCache(this,I),!C)this.multiply(TY);return this}assertValidity(){m(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(C,L),G.mul(P,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:C}=Y,Z=G.mul(C,TY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(I,B),a=G.sub(x,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(P,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=Y.a,B=G.mul(Y.b,TY),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.mul(S,L),G0=G.add(C,Z),t=G.add(P,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(P,L);return t=G.mul(t,O0),O0=G.add(a,Y0),t=G.sub(t,O0),O0=G.add(Z,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,Y0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,Y0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),Y0=G.mul(d,Y0),t=G.mul(B,t),q0=G.add(q0,Y0),Y0=G.sub(a,Y0),Y0=G.mul(d,Y0),t=G.add(t,Y0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:C}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>xX(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:x,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),Z=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return xX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:C}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Lq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(C){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=JW(y,Z,P,L);return k(C.beta,b,O,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return lG(I,"isCompressed"),this.assertValidity(),K(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new mX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function VW($){return Uint8Array.of($?2:3)}function WW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function m4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(WW($.Fp,J),{seed:bX(J.ORDER)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K=G(Q.seed)){return aV(Q0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let A=Q0(K,void 0,"key").length;return A===j||A===w}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=BY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function rX($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K}=m4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*UW<Y.ORDER;function w(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){pX(S);let P=K.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q0(Z,g)}class f{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(Z));return new f(O,x)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=K.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new f(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new f(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(g0(VW((g&1)===0),b)),x=X.inv(L),d=F(Q0(Z,void 0,"msgHash")),B=X.create(-d*x),a=X.create(P*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(Z=N.format){if(pX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},m=cG(V);function k(Z){return iG("num < 2^"+V,Z,Lq,m),X.toBytes(Z)}function y(Z,S){return Q0(Z,void 0,"message"),S?Q0(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=uX(P,N);Z=y(Z,L);let O=F(Z),x=X.fromBytes(S);if(!X.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let Y0=b===!0?G(K.secretKey):b;d.push(Q0(Y0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(Y0){let G0=u(Y0);if(!X.isValidNot0(G0))return;let t=X.inv(G0),O0=$.BASE.multiply(G0).toAffine(),A0=X.create(O0.x);if(A0===Lq)return;let I0=X.create(t*X.create(a+A0*x));if(I0===Lq)return;let x0=(O0.x===A0?0:2)|Number(O0.y&y8),K$=I0;if(g&&w(I0))K$=X.neg(I0),x0^=1;return new f(A0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return xV(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:O}=uX(g,N);if(P=Q0(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let x=Z instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(Z,O);try{let x=f.fromBytes(Z,O),d=$.fromBytes(P);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),Y0=X.inv(a),G0=X.create(q0*Y0),t=X.create(B*Y0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return X.create(O0.x)===B}catch(x){return!1}}function C(Z,S,P={}){let{prehash:g}=uX(P,N);return S=y(S,g),f.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K,Point:$,sign:v,verify:I,recoverPublicKey:C,Signature:f,hash:q})}function MW($,q,J){return $&q^~$&J}function zW($,q,J){return $&q^$&J^q&J}class CY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=jY(this.buffer)}update($){Pq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=jY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Pq(this),OY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=jY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Fq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),gq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var IY=BigInt(4294967295),KW=BigInt(32);function h4($,q=!1){if(q)return{h:Number($&IY),l:Number($>>KW&IY)};return{h:Number($>>KW&IY)|0,l:Number($&IY)|0}}function EY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=h4($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var dX=($,q,J)=>$>>>J,iX=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,sG=($,q,J)=>$<<64-J|q>>>J-32,tG=($,q,J)=>$>>>J-32|q<<64-J;var RW=($,q,J)=>$<<J|q>>>32-J,DW=($,q,J)=>q<<J|$>>>32-J,HW=($,q,J)=>q<<J-32|$>>>64-J,OW=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var NW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),jW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,wW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),AW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,ZW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),BW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var p4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class cX extends CY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],R=QJ[M-2],K=d$(z,7)^d$(z,18)^z>>>3,N=d$(R,17)^d$(R,19)^R>>>10;QJ[M]=N+QJ[M-7]+K+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=d$(X,6)^d$(X,11)^d$(X,25),R=W+z+MW(X,U,V)+p4[M]+QJ[M]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+zW(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){Z$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z$(this.buffer)}}class SW extends cX{A=Fq[0]|0;B=Fq[1]|0;C=Fq[2]|0;D=Fq[3]|0;E=Fq[4]|0;F=Fq[5]|0;G=Fq[6]|0;H=Fq[7]|0;constructor(){super(32)}}class l4 extends cX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(28)}}var TW=(()=>EY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),r4=(()=>TW[0])(),d4=(()=>TW[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class eG extends CY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,f=XJ[T-15]|0,u=xJ(_,f,1)^xJ(_,f,8)^dX(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^iX(_,f,7),m=YJ[T-2]|0,k=XJ[T-2]|0,y=xJ(m,k,19)^sG(m,k,61)^dX(m,k,6),l=mJ(m,k,19)^tG(m,k,61)^iX(m,k,6),v=wW(F,l,XJ[T-7],XJ[T-16]),I=AW(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=xJ(M,z,14)^xJ(M,z,18)^sG(M,z,41),f=mJ(M,z,14)^mJ(M,z,18)^tG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=ZW(A,f,F,d4[T],XJ[T]),k=BW(m,w,_,u,r4[T],YJ[T]),y=m|0,l=xJ(J,G,28)^sG(J,G,34)^sG(J,G,39),v=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Yq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=NW(y,v,C);J=jW(Z,k,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Yq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Yq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Yq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Yq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){Z$(YJ,XJ)}destroy(){Z$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class i4 extends eG{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class CW extends eG{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class c4 extends eG{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class n4 extends eG{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var PY=F8(()=>new SW,eq(1));var IW=F8(()=>new CW,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o4=BigInt(1),EW=BigInt(2),a4=BigInt(3),s4=BigInt(5),yF=BigInt(8),PW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function t4($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=PW,U=$*$%Y*$%Y,V=k$(U,EW,Y)*U%Y,W=k$(V,o4,Y)*$%Y,M=k$(W,s4,Y)*W%Y,z=k$(M,q,Y)*M%Y,R=k$(z,J,Y)*z%Y,K=k$(R,G,Y)*R%Y,N=k$(K,Q,Y)*K%Y,j=k$(N,Q,Y)*K%Y,w=k$(j,q,Y)*M%Y;return{pow_p_5_8:k$(w,EW,Y)*$%Y,b2:U}}function e4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var LW=(()=>{let $=PW;return QW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=t4(q);return D$(k$(J,a4,$)*G,$)},adjustScalarBytes:e4})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $O=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),qO=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var JO=lX($O),nX=rX(JO,PY);var GO=lX(qO),FW=rX(GO,IW);function _W($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var oX=Uint8Array.of(0),gW=Uint8Array.of();function vW($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=gW;else Q0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)oX[0]=M+1,V.update(M===0?gW:W).update(J).update(oX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),Z$(W,oX),X.slice(0,G)}var QO=BigInt(0),$Q=BigInt(1),YO=BigInt(2),XO=BigInt(7),UO=BigInt(256),VO=BigInt(113),kW=[],fW=[],xW=[];for(let $=0,q=$Q,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],kW.push(2*(5*G+J)),fW.push(($+1)*($+2)/2%64);let Q=QO;for(let Y=0;Y<7;Y++)if(q=(q<<$Q^(q>>XO)*VO)%UO,q&YO)Q^=$Q<<($Q<<BigInt(Y))-$Q;xW.push(Q)}var mW=EY(xW,!0),WO=mW[0],MO=mW[1],bW=($,q,J)=>J>32?HW($,q,J):RW($,q,J),yW=($,q,J)=>J>32?OW($,q,J):DW($,q,J);function zO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=bW(W,M,1)^J[U],R=yW(W,M,1)^J[U+1];for(let K=0;K<50;K+=10)$[X+K]^=z,$[X+K+1]^=R}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=fW[X],V=bW(Q,Y,U),W=yW(Q,Y,U),M=kW[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=WO[G],$[1]^=MO[G]}Z$(J)}class LY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=NY(this.state)}clone(){return this._cloneInto()}keccak(){EX(this.state32),zO(this.state32,this.rounds),EX(this.state32),this.posOut=0,this.pos=0}update($){Pq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Pq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(OY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new LY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var hW=($,q,J,G={})=>F8(()=>new LY(q,$,J),G);var hJ=hW(6,136,32,eq(8));var uW=hW(6,72,64,eq(10));var pW=($,q,J,G={})=>F8((Q={})=>new LY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),lW=pW(31,168,16,eq(11)),Xq=pW(31,136,32,eq(12));function aX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function dW($){return aX($),($&$-1)===0&&$!==0}function sX($,q){aX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function iW($){return aX($),31-Math.clz32($)}function rW($){let q=$.length;if(q<2||!dW(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=iW(q);for(let G=0;G<q;G++){let Q=sX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var tX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=iW(J);if(!dW(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)rW(M);for(let z=0,R=1;z<V-X;z++){let K=Q?z+1+X:V-z,N=1<<K,j=N>>1,w=J>>K;for(let A=0;A<J;A+=N)for(let T=0,_=R++;T<j;T++){let f=Y?Q?J-_:_:T*w,u=A+T,F=A+T+j,m=G[f],k=M[F],y=M[u];if(W){let l=$.mul(k,m);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),m);else M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)rW(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function FY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function cW($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q0(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q0(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function gY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function eX($){return(1<<$)-1}var aF=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var nW=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},W=(T,_=G)=>{let f=V(T,_)|0;return(f>_>>1?f-_|0:f)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let f=sX(_,X),u=BigInt(Y)**BigInt(f)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),R={add:(T,_)=>V((T|0)+(_|0))|0,sub:(T,_)=>V((T|0)-(_|0))|0,mul:(T,_)=>V((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=tX(R,{dit:!1,...K}),j=tX(R,{dit:!0,...K});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=V(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=eX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let m=new Uint8Array(u);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&eX(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},KO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),y0(Y,G)}}},oW=KO(lW);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,_q=3329,RO=3303,DO=17,{mod:GQ,nttZetas:HO,NTT:pJ,bitsCoder:OO}=nW({N:Q$,Q:_q,F:RO,ROOT_OF_UNITY:DO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),$U={512:{N:Q$,Q:_q,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:_q,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:_q,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},NO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+_q/2)/_q,decode:(J)=>J*_q+q>>>$}},qQ=($)=>OO($,NO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]+q[J])}function jO($,q){for(let J=0;J<Q$;J++)$[J]=GQ($[J]-q[J])}function wO($,q,J,G,Q){let Y=GQ(q*G*Q+$*J),X=GQ($*G+q*J);return{c0:Y,c1:X}}function _Y($,q){for(let J=0;J<Q$/2;J++){let G=HO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=wO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function aW($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<_q)q[J++]=Y;if(J<Q$&&X<_q)q[J++]=X}}return q}function JQ($,q,J,G){let Q=$(G*Q$/4,q,J),Y=new Uint16Array(Q$),X=NY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let R=X[V];for(let K=0;K<32;K++)if(M+=R&1,R>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=GQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var AO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=qQ(1),M=qQ(V),z=qQ(U),R=uJ("publicKey",gY(qQ(12),q),32),K=gY(qQ(12),q),N=uJ("ciphertext",gY(z,q),M),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:R.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let A=new Uint8Array(33);A.set(w),A[32]=q;let T=Q(A),[_,f]=j.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(JQ(J,f,y,Y)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(JQ(J,f,q+y,Y));for(let v=0;v<q;v++){let I=aW(m.get(v,y));lJ(l,_Y(I,u[v]))}F.push(l)}m.clean();let k={publicKey:R.encode([F,_]),secretKey:K.encode(u)};return y0(_,f,u,F,A,T),k},encrypt:(w,A,T)=>{let[_,f]=R.decode(w),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(JQ(J,T,v,Y)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let I=JQ(J,T,q+v,X),C=new Uint16Array(Q$);for(let Z=0;Z<q;Z++){let S=aW(F.get(v,Z));lJ(C,_Y(S,u[Z]))}lJ(I,pJ.decode(C)),k.push(I),lJ(m,_Y(_[v],u[v])),y0(C)}F.clean();let y=JQ(J,T,2*q,X);lJ(y,pJ.decode(m));let l=W.decode(A);return lJ(l,y),y0(_,u,m,y),N.encode([k,l])},decrypt:(w,A)=>{let[T,_]=N.decode(w),f=K.decode(A),u=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(u,_Y(f[F],pJ.encode(T[F])));return jO(_,pJ.decode(u)),y0(u,f,T),W.encode(_)}}};function qU($){let q=AO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q0(M,64,"seed");let{publicKey:z,secretKey:R}=q.keygen(M.subarray(0,32)),K=J(z),N=U.encode([R,z,K,M.subarray(32)]);return y0(R,K),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,R,K,N]=U.decode(M);return Uint8Array.from(R)},encapsulate:(M,z=Uq(32))=>{Q0(M,X.publicKey,"publicKey"),Q0(z,32,"message");let R=M.subarray(0,384*$.K),K=Y.encode(Y.decode(cW(R)));if(!FY(K,R))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(z).update(J(M)).digest(),j=q.encrypt(M,z,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q0(z,U.bytesLen,"secretKey"),Q0(M,X.cipherText,"cipherText");let R=U.bytesLen-96,K=R+32,N=J(z.subarray(R/2,K));if(!FY(N,z.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,A,T]=U.decode(z),_=q.decrypt(M,j),f=G.create().update(_).update(A).digest(),u=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=FY(M,F),k=Q.create({dkLen:32}).update(T).update(M).digest();return y0(_,F,!m?u:k),m?u:k}}}function ZO($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var JU={HASH256:hJ,HASH512:uW,KDF:Xq,XOF:oW,PRF:ZO},Ug=qU({...JU,...$U[512]}),QQ=qU({...JU,...$U[768]}),sW=qU({...JU,...$U[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function BO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q0(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function GU($,q=!1){let J=BO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y0(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function YQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function QU($){return(q,J)=>$(q,{dkLen:J})}function SO($,q,...J){let G=YQ(J,"seed"),Q=YQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function Y(X){Q0(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,R)=>z.keygen(U[R])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return y0(U),y0(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function vY($,q,J,G,...Q){let Y=SO($,J,...Q),X=YQ(Q,"cipherText"),U=YQ(Q,"publicKey"),V=YQ(Q,"msg");if(q===void 0)q=V.bytesLen;return m0(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Uq(V.bytesLen)){let z=U.decode(W),R=V.decode(M),K=Q.map((A,T)=>A.encapsulate(z[T],R[T])),N=K.map((A)=>A.sharedSecret),j=K.map((A)=>A.cipherText),w={sharedSecret:G(z,j,N),cipherText:X.encode(j)};return y0(N,j),w},decapsulate(W,M){let z=X.decode(W),{publicKey:R,secretKey:K}=Y.expandDecapsulationKey(M),N=Q.map((j,w)=>j.decapsulate(z[w],K[w]));return G(R,z,N)}}}function tW($,q,J,G,Q){return y$(G),y$(Q),vY(32,32,QU(G),(Y,X,U)=>Q(g0(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var jg=tW("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",QQ,GU(nX,!0),Xq,hJ),wg=tW("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",sW,GU(FW,!0),Xq,hJ);function TO($,q,J,G,Q){return y$(G),y$(Q),vY(32,32,QU(G),(Y,X,U)=>{let V=g0(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),W=32,M=g0(JJ("hybrid_prk"),V),z=_W(Q,M),R=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=vW(Q,z,R,32);return y0(z,R,M,V),K},q,J)}var eW=GU(LW),Ag=TO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",QQ,eW,Xq,PY),CO=(()=>vY(32,32,QU(Xq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),QQ,eW))();function IO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q0(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q0(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return y0(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function EO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=IO(J,Q,Y,G),U=64,V=U+G;return vY(32,32,(W)=>{Q0(W,32);let M=Xq(W,{dkLen:V}),z=M.subarray(0,U),R=M.subarray(U,V);return g0(z,R)},(W,M,z)=>hJ(g0(z[0],z[1],M[1],W[1],JJ($))),q,X)}var PO=(()=>EO("MLKEM768-P256",QQ,nX,128))();var YU=CO,$M=PO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z0=($,q,J)=>u0($,q,J),UU=L0,k8=QY,n0=(...$)=>VX(...$),f8=($)=>vG($),x8=YX,m8=($)=>Bq($),yY=BigInt(0),XU=BigInt(1);function vq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function kY($){if(typeof $==="bigint"){if(!bY($))throw RangeError("positive bigint expected, got "+$)}else UU($);return $}function Vq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function XQ($){let q=kY($).toString(16);return q.length&1?"0"+q:q}function qM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?yY:BigInt("0x"+$)}function rJ($){return qM(QY($))}function i$($){return qM(QY(UJ(u0($)).reverse()))}function fY($,q){if(L0(q),q===0)throw RangeError("zero length");$=kY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return vG(J.padStart(q*2,"0"))}function UQ($,q){return fY($,q).reverse()}function JM($,q){if($=Z0($),q=Z0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z0($))}function xY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var bY=($)=>typeof $==="bigint"&&yY<=$;function LO($,q,J){return bY($)&&bY(q)&&bY(J)&&q<=$&&$<J}function bq($,q,J,G){if(!LO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<yY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>yY;$>>=XU,q+=1);return q}var VQ=($)=>(XU<<BigInt($))-XU;function GM($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,n0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return n0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while((T=A(N()))===void 0)K();return z(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var VU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),E0=BigInt(1),dJ=BigInt(2),UM=BigInt(3),VM=BigInt(4),WM=BigInt(5),FO=BigInt(7),MM=BigInt(8),gO=BigInt(9),zM=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function QM($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,Y=E0,X=E0,U=o0;while(J!==o0){let W=G/J,M=G-J*W,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==E0)throw Error("invert: does not exist");return T0(Q,q)}function WU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function KM($,q){let J=$,G=(J.ORDER+E0)/VM,Q=J.pow(q,G);return WU(J,Q,q),Q}function _O($,q){let J=$,G=(J.ORDER-WM)/MM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),V=J.mul(X,J.sub(U,J.ONE));return WU(J,V,q),V}function vO($){let q=mY($),J=RM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+FO)/zM;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),R=W.mul(M,Q),K=W.mul(M,Y),N=W.eql(W.sqr(z),V),j=W.eql(W.sqr(R),V);M=W.cmov(M,z,N),z=W.cmov(K,R,j);let w=W.eql(W.sqr(z),V),A=W.cmov(M,z,w);return WU(W,A,V),A}}function RM($){if($<UM)throw Error("sqrt is not defined for small field");let q=$-E0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=mY($);while(YM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return KM;let Y=Q.pow(G,q),X=(q+E0)/dJ;return function(V,W){let M=V;if(M.is0(W))return W;if(YM(M,W)!==1)throw Error("Cannot find square root");let z=J,R=M.mul(M.ONE,Y),K=M.pow(W,q),N=M.pow(W,X);while(!M.eql(K,M.ONE)){if(M.is0(K))return M.ZERO;let j=1,w=M.sqr(K);while(!M.eql(w,M.ONE))if(j++,w=M.sqr(w),j===z)throw Error("Cannot find square root");let A=E0<<BigInt(z-j-1),T=M.pow(R,A);z=j,R=M.sqr(T),K=M.mul(K,R),N=M.mul(N,T)}return N}}function bO($){if($%VM===UM)return KM;if($%MM===WM)return _O;if($%zM===gO)return vO($);return RM($)}var yq=($,q)=>(T0($,q)&E0)===E0,yO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function MU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=yO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Vq($.BYTES,"BYTES"),Vq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=E0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function kO($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===E0)return q;let Q=G.ONE,Y=q;while(J>o0){if(J&E0)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=E0}return Q}function WQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function YM($,q){let J=$,G=(J.ORDER-E0)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function fO($,q){if(q!==void 0)UU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var XM=new WeakMap;class zU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=E0;_lengths;_mod;constructor($,q={}){if($<=E0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=fO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&E0)===E0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return kO(this,$,q)}div($,q){return T0($*QM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return QM($,this.ORDER)}sqrt($){let q=XM.get(this);if(!q)XM.set(this,q=bO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?UQ($,this.BYTES):fY($,this.BYTES)}fromBytes($,q=!1){Z0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(X)U=T0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return WQ(this,$)}cmov($,q,J){return vq(J,"condition"),J?q:$}}Object.freeze(zU.prototype);function mY($,q={}){return new zU($,q)}function DM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=E0)throw Error("field order must be greater than 1");let q=h8($-E0);return Math.ceil(q/8)}function KU($){let q=DM($);return q+Math.ceil(q/2)}function HM($,q,J=!1){Z0($);let G=$.length,Q=DM(q),Y=Math.max(KU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i$($):rJ($),U=T0(X,q-E0)+E0;return J?UQ(U,Q):fY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function MQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=WQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function wM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function RU($,q){wM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=VQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function OM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=iJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var DU=new WeakMap,AM=new WeakMap;function HU($){return AM.get($)||1}function NM($){if($!==u8)throw Error("invalid wNAF")}class zQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=RU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=RU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=OM(J,X,Y);if(J=U,W)Q=Q.add(MQ(z,q[R]));else G=G.add(MQ(M,q[V]))}return NM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=RU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=OM(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return NM(J),G}getPrecomputes($,q,J){let G=DU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);DU.set(q,G)}}return G}cached($,q,J){let G=HU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=HU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){wM(q,this.bits),AM.set($,q),DU.delete($)}hasCache($){return HU($)!==1}}function ZM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function jM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return MU(q),q}else return mY($,{isLE:J})}function hY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>u8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=jM(q.p,J.Fp,G),Y=jM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function RQ($,q){if(Vq($),Vq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function xO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function mO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?xY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function OU($,q,J,G){if(Z0($),Vq(J),q=mO(q),q.length>255)q=G(n0(xY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,RQ(q.length,1)),V=new Uint8Array(Y),W=RQ(J,2),M=Array(X),z=G(n0(V,$,W,RQ(0,1),U));M[0]=G(n0(z,RQ(1,1),U));for(let K=1;K<X;K++){let N=[xO(z,M[K-1]),RQ(K+1,1),U];M[K]=G(n0(...N))}return n0(...M).slice(0,J)}var BM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var SM=($,q)=>($+($>=0?q:-q)/CM)/q;function hO($,q,J){bq("scalar",$,Wq,J);let[[G,Q],[Y,X]]=q,U=SM(X*$,J),V=SM(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Wq,R=M<Wq;if(z)W=-W;if(R)M=-M;let K=VQ(Math.ceil(h8(J)/2))+VJ;if(W<Wq||W>=K||M<Wq||M>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:R,k2:M}}function jU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function NU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(vq(J.lowS,"lowS"),vq(J.prehash,"prehash"),J.format!==void 0)jU(J.format);return J}class TM extends Error{constructor($=""){super($)}}var c$={Err:TM,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Vq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=XQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?XQ(Q.length/2|128):"";return XQ($)+Y+Q+q},decode($,q){let{Err:J}=c$;q=Z0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c$;if(kY($),$<Wq)throw new q("integer: negative integers are not allowed");let J=XQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=Z0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Wq=BigInt(0),VJ=BigInt(1),CM=BigInt(2),uY=BigInt(3),uO=BigInt(4);function IM($,q={}){let J=hY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=PM(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function R(v,I,C){if(W&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(vq(C,"isCompressed"),C){z();let g=!G.isOdd(S);return n0(EM(g),P)}else return n0(Uint8Array.of(4),P,G.toBytes(S))}function K(v){Z0(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:C}=M,Z=v.length,S=v[0],P=v.subarray(1);if(W&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===C&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${C}`)}let N=q.toBytes===void 0?R:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let I=G.sqr(v),C=G.mul(I,v);return G.add(G.add(C,G.mul(v,Y.a)),Y.b)}function A(v,I){let C=G.sqr(I),Z=w(v);return G.eql(C,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,uY),uO),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,I,C=!1){if(!G.isValid(I)||C&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!V||!V.basises)throw Error("no endo");return hO(v,V.basises,Q.ORDER)}function m(v,I,C,Z,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),I=MQ(Z,I),C=MQ(S,C),I.add(C)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,C){this.X=f("x",v),this.Y=f("y",I,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:C}=v||{};if(!v||!G.isValid(I)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(C))return k.ZERO;return new k(I,C,G.ONE)}static fromBytes(v){let I=k.fromAffine(j(Z0(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(uY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:C}=v.toAffine();if(!G.isValid(I)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!A(I,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(C,g),G.mul(P,Z));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,C=G.mul(I,uY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),x=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=Y.a,d=G.mul(Y.b,uY),B=G.mul(I,S),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.add(I,C),G0=G.add(S,P);Y0=G.mul(Y0,G0),G0=G.add(B,a),Y0=G.sub(Y0,G0),G0=G.add(I,Z);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(Y0,L),L=G.sub(L,B),B=G.mul(Y0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,Z,S=(P)=>l.cached(this,P,(g)=>cJ(k,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);Z=x.add(B),C=m(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);C=P,Z=g}return cJ(k,[C,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,C=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Wq||C.is0())return k.ZERO;if(Z===VJ)return C;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=ZM(k,C,P,L);return m(I.beta,b,O,S,g)}else return l.unsafe(C,Z)}toAffine(v){let I=this,C=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===VJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===VJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===VJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return vq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new zQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function EM($){return Uint8Array.of($?2:3)}function PM($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function pO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(PM($.Fp,J),{seed:Math.max(KU(J.ORDER),16)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,HM(Z0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,A=J._lengths;if(!x8(K))return;let T=Z0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!A?.includes(T);if(_&&f)return;return _}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=KQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function LM($,q,J={}){let G=q;Zq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Sq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N}=pO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=V*CM+VJ<X.ORDER;function A(S){let P=V>>VJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,P){jU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z0(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=j.format){f(S,P);let g;if(P==="der"){let{r:x,s:d}=c$.toSig(Z0(S));return new u(x,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(f8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),x=$.fromBytes(n0(EM((L&1)===0),O)),d=U.inv(b),B=m(Z0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),Y0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(Y0.is0())throw Error("invalid recovery: point at infinify");return Y0.assertValidity(),Y0}hasHighS(){return A(this.s)}toBytes(S=j.format){if(jU(S),S==="der")return f8(c$.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,k=VQ(W);function y(S){return bq("num < 2^"+W,S,Wq,k),U.toBytes(S)}function l(S,P){return Z0(S,void 0,"message"),P?Z0(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=NU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(Z0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function Y0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),A0=$.BASE.multiply(t).toAffine(),I0=U.create(A0.x);if(I0===Wq)return;let x0=U.create(O0*U.create(q0+I0*d));if(x0===Wq)return;let K$=(A0.x===I0?0:2)|Number(A0.y&VJ),Jq=x0;if(L&&A(x0))Jq=U.neg(x0),K$^=1;return new u(I0,Jq,w?void 0:K$)}return{seed:a,k2sig:Y0}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return GM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function C(S,P,g,L={}){let{lowS:b,prehash:O,format:x}=NU(L,j);if(g=Z0(g,void 0,"publicKey"),P=l(P,O),!x8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=u.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,Y0=m(P),G0=U.inv(q0),t=U.create(Y0*G0),O0=U.create(a*G0),A0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(A0.is0())return!1;return U.create(A0.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=NU(g,j);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N,Point:$,sign:I,verify:C,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var rO=IM(lO),p8=LM(rO,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WJ=BigInt(0),B$=BigInt(1),wU=BigInt(2),dO=BigInt(8);function iO($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function FM($,q={}){let J=q,G=hY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;f$(J,{},{uvRatio:"function"});let V=wU<<BigInt(Y.BYTES*8)-B$,W=(j)=>Q.create(j),M=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(A){return{isValid:!1,value:WJ}}}:J.uvRatio;if(!iO(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(j,w,A=!1){let T=A?B$:WJ;return bq("coordinate "+j,w,T,V),w}function R(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(X.Gx,X.Gy,B$,W(X.Gx*X.Gy));static ZERO=new K(WJ,B$,B$,WJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(j,w,A,T){this.X=z("x",j),this.Y=z("y",w),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:A}=j||{};return z("x",w),z("y",A),new K(w,A,B$,W(w*A))}static fromBytes(j,w=!1){let A=Q.BYTES,{a:T,d:_}=X;j=UJ(Z0(j,A,"point")),vq(w,"zip215");let f=UJ(j),u=j[A-1];f[A-1]=u&-129;let F=i$(f),m=w?V:Q.ORDER;bq("point.y",F,WJ,m);let k=W(F*F),y=W(k-B$),l=W(_*k-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(I&B$)===B$,Z=(u&128)!==0;if(!w&&I===WJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==C)I=W(-I);return K.fromAffine({x:I,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(wU);return this}assertValidity(){let j=this,{a:w,d:A}=X;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:u}=j,F=W(T*T),m=W(_*_),k=W(f*f),y=W(k*k),l=W(F*w),v=W(k*W(l+m)),I=W(y+W(A*W(F*m)));if(v!==I)throw Error("bad point: equation left != right (1)");let C=W(T*_),Z=W(f*u);if(C!==Z)throw Error("bad point: equation left != right (2)")}equals(j){R(j);let{X:w,Y:A,Z:T}=this,{X:_,Y:f,Z:u}=j,F=W(w*u),m=W(_*T),k=W(A*u),y=W(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:j}=X,{X:w,Y:A,Z:T}=this,_=W(w*w),f=W(A*A),u=W(wU*W(T*T)),F=W(j*_),m=w+A,k=W(W(m*m)-_-f),y=F+f,l=y-u,v=F-f,I=W(k*l),C=W(y*v),Z=W(k*v),S=W(l*y);return new K(I,C,S,Z)}add(j){R(j);let{a:w,d:A}=X,{X:T,Y:_,Z:f,T:u}=this,{X:F,Y:m,Z:k,T:y}=j,l=W(T*F),v=W(_*m),I=W(u*A*y),C=W(f*k),Z=W((T+_)*(F+m)-l-v),S=C-I,P=C+I,g=W(v-w*l),L=W(Z*S),b=W(P*g),O=W(Z*g),x=W(S*P);return new K(L,b,x,O)}subtract(j){return R(j),this.add(j.negate())}multiply(j){if(!Y.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:A}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,A])[0]}multiplyUnsafe(j){if(!Y.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===WJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(j){let w=this,A=j,{X:T,Y:_,Z:f}=w,u=w.is0();if(A==null)A=u?dO:Q.inv(f);let F=W(T*A),m=W(_*A),k=Q.mul(f,A);if(u)return{x:WJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),A=Q.toBytes(w);return A[A.length-1]|=j&B$?128:0,A}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new zQ(K,Y.BITS);if(Y.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class AU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){VU()}static fromHex($){VU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var DQ=BigInt(0),l8=BigInt(1),pY=BigInt(2);function cO($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function gM($){let q=cO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?m8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?pY**BigInt(254):pY**BigInt(447),N=U?BigInt(8)*pY**BigInt(251)-l8:BigInt(4)*pY**BigInt(445)-l8,j=K+N+l8,w=(Z)=>T0(Z,J),A=T(z);function T(Z){return UQ(w(Z),M)}function _(Z){let S=UJ(Z0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(Z){return i$(Q(UJ(Z0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===DQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){bq("u",Z,DQ,J),bq("scalar",S,K,j);let P=S,g=Z,L=l8,b=DQ,O=Z,x=l8,d=DQ;for(let a=BigInt(W-1);a>=DQ;a--){let q0=P>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?V(M):Z,Z0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:KQ(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nO=BigInt(0),kq=BigInt(1),_M=BigInt(2),oO=BigInt(3),aO=BigInt(5),sO=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),TU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:sO,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function yM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,V=x$(U,_M,Y)*U%Y,W=x$(V,kq,Y)*$%Y,M=x$(W,aO,Y)*W%Y,z=x$(M,q,Y)*M%Y,R=x$(z,J,Y)*z%Y,K=x$(R,G,Y)*R%Y,N=x$(K,Q,Y)*K%Y,j=x$(N,Q,Y)*K%Y,w=x$(j,q,Y)*M%Y;return{pow_p_5_8:x$(w,_M,Y)*$%Y,b2:U}}function tO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var ZU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function CU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),Y=yM($*Q).pow_p_5_8,X=T0($*G*Y,J),U=T0(q*X*X,J),V=X,W=T0(X*ZU,J),M=U===$,z=U===T0(-$,J),R=U===T0(-$*ZU,J);if(M)X=V;if(z||R)X=W;if(yq(X,J))X=T0(-X,J);return{isValid:M||z,value:X}}var nJ=FM(TU,{uvRatio:CU}),MJ=(()=>nJ.Fp)(),kM=(()=>nJ.Fn)();var lY=(()=>{let $=oJ;return gM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=yM(q);return T0(x$(J,oO,$)*G,$)},adjustScalarBytes:tO})})();var BU=ZU,eO=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),$N=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),qN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),JN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),vM=($)=>CU(kq,$),GN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),SU=($)=>MJ.create(i$($)&GN);function bM($){let{d:q}=TU,J=oJ,G=(A)=>MJ.create(A),Q=G(BU*$*$),Y=G((Q+kq)*qN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=CU(Y,U),M=G(W*$);if(!yq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-kq)*JN-U),R=W*W,K=G((W+W)*U),N=G(z*eO),j=G(kq-R),w=G(kq+R);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends AU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>kM)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=TU,G=oJ,Q=(_)=>MJ.create(_),Y=SU($);if(!JM(MJ.toBytes(Y),$)||yq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(kq+q*X),V=Q(kq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:R,value:K}=vM(Q(z*M)),N=Q(K*V),j=Q(K*N*z),w=Q((Y+Y)*N);if(yq(w,G))w=Q(-w);let A=Q(U*j),T=Q(w*A);if(!R||yq(T,G)||A===nO)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,A,kq,T))}static fromHex($){return O$.fromBytes(vG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(j)=>MJ.create(j),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=vM(Y(X*V)),M=Y(W*X),z=Y(W*U),R=Y(M*z*G),K;if(yq(G*R,Q)){let j=Y(q*BU),w=Y($*BU);$=j,q=w,K=Y(M*$N)}else K=z;if(yq($*R,Q))q=Y(-q);let N=Y((J-q)*K);if(yq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>MJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var QN=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=OU($,J,64,VY);return QN.deriveToCurve(G)},hashToScalar($,q={DST:BM}){let J=OU($,q.DST,64,VY);return kM.create(i$(J))},deriveToCurve($){u0($,64);let q=SU($.subarray(0,32)),J=bM(q),G=SU($.subarray(32,64)),Q=bM(G);return new O$(J.add(Q))}});var fM=!1,YN=!1;async function xM($,q){if(YN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function EU($,q){return await xM(async()=>{let J=IU($)?$:await UN($),G=await crypto.subtle.importKey("raw",VN(q),{name:"X25519"},fM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(IU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lY.scalarMult($,q)})}async function PU($){return await xM(async()=>{return EU($,lY.GuBytes)},()=>{if(IU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return lY.scalarMultBase($)})}var XN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function UN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...XN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},fM,["deriveBits"])}function IU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function VN($){return $}class mM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),MN(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function MN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function rY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function hM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function uM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class fq{args;body;constructor($,q){this.args=$,this.body=q}}function LU($){let q=[];q.push(`age-encryption.org/v1
|
|
58
58
|
`);for(let J of $){q.push("-> "+J.args.join(" ")+`
|
|
59
59
|
`);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(p$.encode(J.body.subarray(G,Q))+`
|
|
60
60
|
`)}if(J.body.length%48===0)q.push(`
|
package/dist/index.js
CHANGED
|
@@ -53,7 +53,7 @@ return `+str.trim()+`;
|
|
|
53
53
|
`).join(`
|
|
54
54
|
`+Y),$.push(Q+"m+"+xY.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=FB()+q+" "+$[0]}function FB(){if(Cz.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function gB(...$){return process.stderr.write(fY.formatWithOptions(Cz.inspectOpts,...$)+`
|
|
55
55
|
`)}function _B($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function vB(){return process.env.DEBUG}function bB($){$.inspectOpts={};let q=Object.keys(Cz.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=Cz.inspectOpts[q[J]]}xY.exports=oX()(Cz);var{formatters:Tz}=xY.exports;Tz.o=function($){return this.inspectOpts.colors=this.useColors,fY.inspect($,this.inspectOpts).split(`
|
|
56
|
-
`).map((q)=>q.trim()).join(" ")};Tz.O=function($){return this.inspectOpts.colors=this.useColors,fY.inspect($,this.inspectOpts)}});var Pz=X0((tb,tX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)tX.exports=jz();else tX.exports=Ez()});var IK=X0((Ix,CK)=>{var nY=Object.prototype.hasOwnProperty,TK=Object.prototype.toString,jK=Object.defineProperty,wK=Object.getOwnPropertyDescriptor,AK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return TK.call(q)==="[object Array]"},ZK=function(q){if(!q||TK.call(q)!=="[object Object]")return!1;var J=nY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&nY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||nY.call(q,Q)},BK=function(q,J){if(jK&&J.name==="__proto__")jK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},SK=function(q,J){if(J==="__proto__"){if(!nY.call(q,J))return;else if(wK)return wK(q,J).value}return q[J]};CK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=SK(U,J),Q=SK(q,J),U!==Q){if(M&&Q&&(ZK(Q)||(Y=AK(Q)))){if(Y)Y=!1,X=G&&AK(G)?G:[];else X=G&&ZK(G)?G:{};BK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")BK(U,{name:J,newValue:Q})}}return U}});import{access as FC,chmod as sU,mkdir as kR,readFile as eU,unlink as gC,writeFile as fR}from"fs/promises";import{dirname as _C,join as X9}from"path";import{fileURLToPath as vC}from"url";var qY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.
|
|
56
|
+
`).map((q)=>q.trim()).join(" ")};Tz.O=function($){return this.inspectOpts.colors=this.useColors,fY.inspect($,this.inspectOpts)}});var Pz=X0((tb,tX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)tX.exports=jz();else tX.exports=Ez()});var IK=X0((Ix,CK)=>{var nY=Object.prototype.hasOwnProperty,TK=Object.prototype.toString,jK=Object.defineProperty,wK=Object.getOwnPropertyDescriptor,AK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return TK.call(q)==="[object Array]"},ZK=function(q){if(!q||TK.call(q)!=="[object Object]")return!1;var J=nY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&nY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||nY.call(q,Q)},BK=function(q,J){if(jK&&J.name==="__proto__")jK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},SK=function(q,J){if(J==="__proto__"){if(!nY.call(q,J))return;else if(wK)return wK(q,J).value}return q[J]};CK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=SK(U,J),Q=SK(q,J),U!==Q){if(M&&Q&&(ZK(Q)||(Y=AK(Q)))){if(Y)Y=!1,X=G&&AK(G)?G:[];else X=G&&ZK(G)?G:{};BK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")BK(U,{name:J,newValue:Q})}}return U}});import{access as FC,chmod as sU,mkdir as kR,readFile as eU,unlink as gC,writeFile as fR}from"fs/promises";import{dirname as _C,join as X9}from"path";import{fileURLToPath as vC}from"url";var qY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.39",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var GX=`ARG BUN_VERSION=1.3.10
|
|
57
57
|
FROM oven/bun:\${BUN_VERSION}-slim AS runtime
|
|
58
58
|
|
|
59
59
|
WORKDIR /app
|