@rizom/ops 0.2.0-alpha.381 → 0.2.0-alpha.383
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -766,7 +766,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
|
|
|
766
766
|
`).replace(/\\n/g,`
|
|
767
767
|
`).trimEnd()}
|
|
768
768
|
`}var jK,hSe;var wO=v(async()=>{Ke();LK();qo();Np();await zK();jK=h.object({HCLOUD_TOKEN:h.string().min(1),KAMAL_SSH_PRIVATE_KEY:h.string().min(1)}),hSe=h.object({servers:h.array(h.object({status:h.string(),public_net:h.object({ipv4:h.object({ip:h.string().min(1)})})}))})});import{parseArgs as EV}from"util";function xt(e){return e}class qp extends Error{constructor(e){super(e);this.name="CliUsageError"}}function IV(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function AV(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function $V(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function kO(e,t){let r=IV(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=EV({args:e,options:AV(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if($V(s))throw new qp(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function EO(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>` ${r.label.padEnd(t)} ${r.description}`)}function CV(e){return EO(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function TV(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function IO(e){return EO(Object.entries(e).map(([t,r])=>({label:TV(t,r),description:r.description})))}function AO(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function OV(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function RV(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=OV(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(...IO(n.flags));return i}function $O(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...CV(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...IO(e.globalFlags));return t.push(...RV(e.commands)),t.join(`
|
|
769
|
-
`)}function CO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function wt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Iu(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var jp={name:"@rizom/ops",version:"0.2.0-alpha.381",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as aG,mkdirSync as cG,readFileSync as dw,writeFileSync as fw}from"fs";import{dirname as lG,join as D2}from"path";function Ex(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Tt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function er(e,t,r=""){let i=Ex(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function ki(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Tt(e.outputLen),Tt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function tc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Up(e,t){er(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Mp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ar(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var NV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function zV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function LV(e){for(let t=0;t<e.length;t++)e[t]=zV(e[t]);return e}var Ix=NV?(e)=>e:LV,OO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),DV=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Fp(e){if(er(e),OO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=DV[e[r]];return t}var _i={_0:48,_9:57,A:65,F:70,a:97,f:102};function TO(e){if(e>=_i._0&&e<=_i._9)return e-_i._0;if(e>=_i.A&&e<=_i.F)return e-(_i.A-10);if(e>=_i.a&&e<=_i.f)return e-(_i.a-10);return}function Au(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(OO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=TO(e.charCodeAt(o)),a=TO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function BV(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function Ax(e,t=""){if(typeof e==="string")return BV(e);return er(e,void 0,t)}function $x(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];er(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Zp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function Cx(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ei(e=32){Tt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var Tx=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ox{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(ki(e),er(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ar(i)}update(e){return tc(this),this.iHash.update(e),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Qn=(()=>{let e=(t,r,i)=>new Ox(t,r).update(i).digest();return e.create=(t,r)=>new Ox(t,r),e})();function $u(e,t,r){if(ki(e),r===void 0)r=new Uint8Array(e.outputLen);return Qn(e,r,t)}var Rx=Uint8Array.of(0),RO=Uint8Array.of();function Px(e,t,r,i=32){ki(e),Tt(i,"length"),er(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=RO;else er(r,void 0,"info");let s=new Uint8Array(o*n),a=Qn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Rx[0]=u+1,c.update(u===0?RO:l).update(r).update(Rx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ar(l,Rx),s.slice(0,i)}var ao=(e,t,r,i,n)=>Px(e,$u(e,t,r),i,n);function PO(e,t,r){return e&t^~e&r}function NO(e,t,r){return e&t^e&r^t&r}class Hp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=rc(this.buffer)}update(e){tc(this),er(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=rc(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ar(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=rc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ii=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var tr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Jp=BigInt(4294967295),zO=BigInt(32);function qV(e,t=!1){if(t)return{h:Number(e&Jp),l:Number(e>>zO&Jp)};return{h:Number(e>>zO&Jp)|0,l:Number(e&Jp)|0}}function LO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=qV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var Nx=(e,t,r)=>e>>>r,zx=(e,t,r)=>e<<32-r|t>>>r,Es=(e,t,r)=>e>>>r|t<<32-r,Is=(e,t,r)=>e<<32-r|t>>>r,Cu=(e,t,r)=>e<<64-r|t>>>r-32,Tu=(e,t,r)=>e>>>r-32|t<<64-r;function Yn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var DO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),BO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,qO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),jO=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,UO=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),MO=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var UV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),co=new Uint32Array(64);class FO extends Hp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)co[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=co[u-15],f=co[u-2],p=Pn(d,7)^Pn(d,18)^d>>>3,y=Pn(f,17)^Pn(f,19)^f>>>10;co[u]=y+co[u-7]+p+co[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Pn(s,6)^Pn(s,11)^Pn(s,25),f=l+d+PO(s,a,c)+UV[u]+co[u]|0,y=(Pn(r,2)^Pn(r,13)^Pn(r,22))+NO(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ar(co)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ar(this.buffer)}}class ZO extends FO{A=Ii[0]|0;B=Ii[1]|0;C=Ii[2]|0;D=Ii[3]|0;E=Ii[4]|0;F=Ii[5]|0;G=Ii[6]|0;H=Ii[7]|0;constructor(){super(32)}}var HO=(()=>LO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),MV=(()=>HO[0])(),FV=(()=>HO[1])(),lo=new Uint32Array(80),uo=new Uint32Array(80);class JO extends Hp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)lo[A]=e.getUint32(t),uo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=lo[A-15]|0,N=uo[A-15]|0,q=Es(C,N,1)^Es(C,N,8)^Nx(C,N,7),E=Is(C,N,1)^Is(C,N,8)^zx(C,N,7),Z=lo[A-2]|0,L=uo[A-2]|0,H=Es(Z,L,19)^Cu(Z,L,61)^Nx(Z,L,6),ee=Is(Z,L,19)^Tu(Z,L,61)^zx(Z,L,6),M=qO(E,ee,uo[A-7],uo[A-16]),P=jO(M,q,H,lo[A-7],lo[A-16]);lo[A]=P|0,uo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Es(u,d,14)^Es(u,d,18)^Cu(u,d,41),N=Is(u,d,14)^Is(u,d,18)^Tu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=UO(S,N,E,FV[A],uo[A]),L=MO(Z,b,C,q,MV[A],lo[A]),H=Z|0,ee=Es(r,i,28)^Cu(r,i,34)^Cu(r,i,39),M=Is(r,i,28)^Tu(r,i,34)^Tu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=Yn(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=DO(H,M,z);r=BO(I,L,ee,P),i=I|0}({h:r,l:i}=Yn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Yn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Yn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Yn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=Yn(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=Yn(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=Yn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=Yn(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ar(lo,uo)}destroy(){this.destroyed=!0,Ar(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class KO extends JO{Ah=tr[0]|0;Al=tr[1]|0;Bh=tr[2]|0;Bl=tr[3]|0;Ch=tr[4]|0;Cl=tr[5]|0;Dh=tr[6]|0;Dl=tr[7]|0;Eh=tr[8]|0;El=tr[9]|0;Fh=tr[10]|0;Fl=tr[11]|0;Gh=tr[12]|0;Gl=tr[13]|0;Hh=tr[14]|0;Hl=tr[15]|0;constructor(){super(64)}}var Ot=Cx(()=>new ZO,Tx(1));var Kp=Cx(()=>new KO,Tx(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Yp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Bx(e){if(!Yp(e))throw TypeError("Uint8Array expected")}function YO(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function XO(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function fo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Ru(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Wp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Gp(e,t){if(!YO(!0,t))throw TypeError(`${e}: array of strings expected`)}function qx(e,t){if(!YO(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Yr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Xr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Gp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Wp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Wp(n),n.map((o)=>{fo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function en(e=""){return fo("join",e),{encode:(t)=>(Gp("join.decode",t),t.join(e)),decode:(t)=>(fo("join.decode",t),t.split(e))}}function Xp(e,t="="){return Ru(e),fo("padding",t),{encode(r){Gp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Gp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function eR(e){return XO(e),{encode:(t)=>t,decode:(t)=>e(t)}}function VO(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Wp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Ru(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,f=d+u;if(!Number.isSafeInteger(f)||d/t!==a||f-u!==d)throw Error("convertRadix: carry overflow");let p=f/r;a=f%r;let y=Math.floor(p);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==f)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var tR=(e,t)=>t===0?e:tR(t,e%t),Qp=(e,t)=>e+(t-tR(e,t)),Vp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Lx(e,t,r,i){if(Wp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Qp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Qp(t,r)}`);let n=0,o=0,s=Vp[t],a=Vp[r]-1,c=[];for(let l of e){if(Ru(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Vp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function ZV(e){Ru(e);let t=256;return{encode:(r)=>{if(!Yp(r))throw TypeError("radix.encode input should be Uint8Array");return VO(Array.from(r),t,e)},decode:(r)=>(qx("radix.decode",r),Uint8Array.from(VO(r,e,t)))}}function gn(e,t=!1){if(Ru(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Qp(8,e)>32||Qp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Yp(r))throw TypeError("radix2.encode input should be Uint8Array");return Lx(Array.from(r),8,e,!t)},decode:(r)=>(qx("radix2.decode",r),Uint8Array.from(Lx(r,e,8,t)))}}function WO(e){return XO(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var MSe=Object.freeze(Yr(gn(4),Xr("0123456789ABCDEF"),en(""))),FSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Xp(5),en(""))),ZSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),en(""))),HSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Xp(5),en(""))),JSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),en(""))),KSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),en(""),eR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),rR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),HV=/[\t\n\f\r ]/,nR=(e,t)=>{fo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&HV.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},jx=Object.freeze(rR?{encode(e){return Bx(e),e.toBase64()},decode(e){return nR(e,!1)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Xp(6),en(""))),hr=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),en(""))),VSe=Object.freeze(rR?{encode(e){return Bx(e),e.toBase64({alphabet:"base64url"})},decode(e){return nR(e,!0)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Xp(6),en(""))),WSe=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),en(""))),Ux=(e)=>Yr(ZV(58),Xr(e),en("")),GSe=Object.freeze(Ux("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),QSe=Object.freeze(Ux("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),YSe=Object.freeze(Ux("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Dx=Yr(Xr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),en("")),GO=[996825010,642813549,513874426,1027748829,705979059];function Ou(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<GO.length;i++)if((t>>i&1)===1)r^=GO[i];return r}function QO(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Ou(n)^s>>5}n=Ou(n);for(let o=0;o<i;o++)n=Ou(n)^e.charCodeAt(o)&31;for(let o of t)n=Ou(n)^o;for(let o=0;o<6;o++)n=Ou(n);return n^=r,Dx.encode(Lx([n%Vp[30]],30,5,!1))}function iR(e){let t=e==="bech32"?1:734539939,r=gn(5),i=r.decode,n=r.encode,o=WO(i);function s(d,f,p=90){if(fo("bech32.encode prefix",d),Yp(f))f=Array.from(f);qx("bech32.encode",f);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+f.length;if(p!==!1&&g>p)throw TypeError(`Length ${g} exceeds limit ${p}`);let b=d.toLowerCase(),S=QO(b,f,t);return`${b}1${Dx.encode(f)}${S}`}function a(d,f=90){fo("bech32.decode input",d);let p=d.length;if(p<8||f!==!1&&p>f)throw TypeError(`invalid string length: ${p} (${d}). Expected (8..${f})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),S=y.slice(g+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let A=Dx.decode(S).slice(0,-6),C=QO(b,A,t);if(!S.endsWith(C))throw Error(`Invalid checksum in ${d}: expected "${C}"`);return{prefix:b,words:A}}let c=WO(a);function l(d){let{prefix:f,words:p}=a(d,!1);return{prefix:f,words:p,bytes:i(p)}}function u(d,f){return s(d,n(f))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var tn=Object.freeze(iR("bech32")),XSe=Object.freeze(iR("bech32m"));var JV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),KV={encode(e){return Bx(e),e.toHex()},decode(e){return fo("hex",e),Uint8Array.fromHex(e)}},e_e=Object.freeze(JV?KV:Yr(gn(4),Xr("0123456789abcdef"),en(""),eR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function WV(e,t,r,i){ki(e);let n=Zp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Tt(o,"c"),Tt(s,"dkLen"),Tt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=Ax(t,"password"),l=Ax(r,"salt"),u=new Uint8Array(s),d=Qn.create(e,c),f=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:f}}function GV(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Ar(n),r}function Mx(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=WV(e,t,r,i),l,u=new Uint8Array(4),d=rc(u),f=new Uint8Array(a.outputLen);for(let p=1,y=0;y<o;p++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);d.setInt32(0,p,!1),(l=c._cloneInto(l)).update(u).digestInto(f),g.set(f.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(f).digestInto(f);for(let S=0;S<g.length;S++)g[S]^=f[S]}}return GV(a,c,s,l,f)}function oR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],d=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],S=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],N=e[t++]^r[i++],q=e[t++]^r[i++],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let ue=0;ue<8;ue+=2)ee^=Xe(E+D|0,7),I^=Xe(ee+E|0,9),D^=Xe(I+ee|0,13),E^=Xe(D+I|0,18),R^=Xe(M+Z|0,7),V^=Xe(R+M|0,9),Z^=Xe(V+R|0,13),M^=Xe(Z+V|0,18),_^=Xe(O+P|0,7),L^=Xe(_+O|0,9),P^=Xe(L+_|0,13),O^=Xe(P+L|0,18),H^=Xe(re+F|0,7),z^=Xe(H+re|0,9),F^=Xe(z+H|0,13),re^=Xe(F+z|0,18),Z^=Xe(E+H|0,7),L^=Xe(Z+E|0,9),H^=Xe(L+Z|0,13),E^=Xe(H+L|0,18),P^=Xe(M+ee|0,7),z^=Xe(P+M|0,9),ee^=Xe(z+P|0,13),M^=Xe(ee+z|0,18),F^=Xe(O+R|0,7),I^=Xe(F+O|0,9),R^=Xe(I+F|0,13),O^=Xe(R+I|0,18),D^=Xe(re+_|0,7),V^=Xe(D+re|0,9),_^=Xe(V+D|0,13),re^=Xe(_+V|0,18);n[o++]=s+E|0,n[o++]=a+Z|0,n[o++]=c+L|0,n[o++]=l+H|0,n[o++]=u+ee|0,n[o++]=d+M|0,n[o++]=f+P|0,n[o++]=p+z|0,n[o++]=y+I|0,n[o++]=g+R|0,n[o++]=b+O|0,n[o++]=S+F|0,n[o++]=A+D|0,n[o++]=C+V|0,n[o++]=N+_|0,n[o++]=q+re|0}function Fx(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(oR(r,s,e,t,r,o),a>0)s+=16;oR(r,o,e,t+=16,r,s)}}function QV(e,t,r){let i=Zp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Tt(n,"N"),Tt(o,"r"),Tt(s,"p"),Tt(a,"dkLen"),Tt(c,"asyncTick"),Tt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,f=d/4,p=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>p)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(p-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(p-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=Mx(Ot,e,t,{c:1,dkLen:d*s}),b=Mp(g),S=Mp(new Uint8Array(d*n)),A=Mp(new Uint8Array(d)),C=()=>{};if(u){let N=2*n*s,q=Math.max(Math.floor(N/1e4),1),E=0;C=()=>{if(E++,u&&(!(E%q)||E===N))u(E/N)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:f,V:S,B32:b,B:g,tmp:A,blockMixCb:C,asyncTick:c}}function YV(e,t,r,i,n){let o=Mx(Ot,e,r,{c:1,dkLen:t});return Ar(r,i,n),o}function Zx(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:f}=QV(e,t,r);Ix(l);for(let p=0;p<o;p++){let y=a*p;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)Fx(c,b,c,b+=a,n),f();Fx(c,(i-1)*a,l,y,n),f();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let S=0;S<a;S++)d[S]=l[y+S]^c[b*a+S];Fx(d,0,l,y,n),f()}}return Ix(l),YV(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function XV(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function em(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function nc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Mt(e,t,r=""){let i=XV(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Hx(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function sR(e,t,r=!1){Mt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!ic(e))throw Error("invalid output, must be aligned")}function Xn(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Nn(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function e7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var As=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),t7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var r7=(e)=>{for(let t=0;t<e.length;t++)e[t]=t7(e[t]);return e},Ai=As?(e)=>e:r7;function aR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function cR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function lR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var uR=(e,t)=>{function r(i,...n){if(Mt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Mt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Mt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Mt(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Mt(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Mt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(r,e),r};function Pu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Mt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!ic(t))throw Error("invalid output, must be aligned");return t}function dR(e,t,r){nc(e),nc(t),em(r);let i=new Uint8Array(16),n=e7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function ic(e){return e.byteOffset%4===0}function oc(e){return Uint8Array.from(Mt(e))}var pR=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),n7=(()=>Ai(Xn(pR("expand 16-byte k"))))(),i7=(()=>Ai(Xn(pR("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var Nu=64,o7=16,Jx=(()=>4294967295)(),fR=Uint32Array.of();function s7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Nu),u=Xn(l),d=As&&ic(n)&&ic(o),f=d?Xn(n):fR,p=d?Xn(o):fR;if(!As){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ai(u),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);if(d&&g===Nu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let S=0,A;S<o7;S++)A=b+S,p[A]=f[A]^u[S];y+=Nu;continue}for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}}function mR(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=aR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return nc(n),nc(s),em(o),em(r),(a,c,l,u,d=0)=>{Mt(a,void 0,"key"),Mt(c,void 0,"nonce"),Mt(l,void 0,"data");let f=l.length;if(u=Pu(f,u,!1),nc(d),d<0||d>=Jx)throw Error("arx: counter overflow");let p=[],y=a.length,g,b;if(y===32)p.push(g=oc(a)),b=i7;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=n7,p.push(g);else throw Mt(a,32,"arx key"),Error("invalid key size");if(!As||!ic(c))p.push(c=oc(c));let S=Xn(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let N=c.subarray(0,16);if(As)i(b,S,Xn(N),S);else{let q=Ai(Uint32Array.from(b));i(q,S,Xn(N),S),Nn(q),Ai(S)}c=c.subarray(16)}else if(!As)Ai(S);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let N=new Uint8Array(12);N.set(c,o?0:12-c.length),c=N,p.push(c)}let C=Ai(Xn(c));try{return s7(e,b,S,C,l,u,d,s),u}finally{Nn(...p)}}}function rr(e,t){return e[t++]&255|(e[t++]&255)<<8}class hR{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=oc(Mt(e,32,"key"));let t=rr(e,0),r=rr(e,2),i=rr(e,4),n=rr(e,6),o=rr(e,8),s=rr(e,10),a=rr(e,12),c=rr(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=rr(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],f=o[6],p=o[7],y=o[8],g=o[9],b=rr(e,t+0),S=rr(e,t+2),A=rr(e,t+4),C=rr(e,t+6),N=rr(e,t+8),q=rr(e,t+10),E=rr(e,t+12),Z=rr(e,t+14),L=n[0]+(b&8191),H=n[1]+((b>>>13|S<<3)&8191),ee=n[2]+((S>>>10|A<<6)&8191),M=n[3]+((A>>>7|C<<9)&8191),P=n[4]+((C>>>4|N<<12)&8191),z=n[5]+(N>>>1&8191),I=n[6]+((N>>>14|q<<2)&8191),R=n[7]+((q>>>11|E<<5)&8191),O=n[8]+((E>>>8|Z<<8)&8191),F=n[9]+(Z>>>5|i),D=0,V=D+L*s+H*(5*g)+ee*(5*y)+M*(5*p)+P*(5*f);D=V>>>13,V&=8191,V+=z*(5*d)+I*(5*u)+R*(5*l)+O*(5*c)+F*(5*a),D+=V>>>13,V&=8191;let _=D+L*a+H*s+ee*(5*g)+M*(5*y)+P*(5*p);D=_>>>13,_&=8191,_+=z*(5*f)+I*(5*d)+R*(5*u)+O*(5*l)+F*(5*c),D+=_>>>13,_&=8191;let re=D+L*c+H*a+ee*s+M*(5*g)+P*(5*y);D=re>>>13,re&=8191,re+=z*(5*p)+I*(5*f)+R*(5*d)+O*(5*u)+F*(5*l),D+=re>>>13,re&=8191;let ue=D+L*l+H*c+ee*a+M*s+P*(5*g);D=ue>>>13,ue&=8191,ue+=z*(5*y)+I*(5*p)+R*(5*f)+O*(5*d)+F*(5*u),D+=ue>>>13,ue&=8191;let T=D+L*u+H*l+ee*c+M*a+P*s;D=T>>>13,T&=8191,T+=z*(5*g)+I*(5*y)+R*(5*p)+O*(5*f)+F*(5*d),D+=T>>>13,T&=8191;let we=D+L*d+H*u+ee*l+M*c+P*a;D=we>>>13,we&=8191,we+=z*s+I*(5*g)+R*(5*y)+O*(5*p)+F*(5*f),D+=we>>>13,we&=8191;let Ee=D+L*f+H*d+ee*u+M*l+P*c;D=Ee>>>13,Ee&=8191,Ee+=z*a+I*s+R*(5*g)+O*(5*y)+F*(5*p),D+=Ee>>>13,Ee&=8191;let Te=D+L*p+H*f+ee*d+M*u+P*l;D=Te>>>13,Te&=8191,Te+=z*c+I*a+R*s+O*(5*g)+F*(5*y),D+=Te>>>13,Te&=8191;let Ce=D+L*y+H*p+ee*f+M*d+P*u;D=Ce>>>13,Ce&=8191,Ce+=z*l+I*c+R*a+O*s+F*(5*g),D+=Ce>>>13,Ce&=8191;let _e=D+L*g+H*y+ee*p+M*f+P*d;D=_e>>>13,_e&=8191,_e+=z*u+I*l+R*c+O*a+F*s,D+=_e>>>13,_e&=8191,D=(D<<2)+D|0,D=D+V|0,V=D&8191,D=D>>>13,_+=D,n[0]=V,n[1]=_,n[2]=re,n[3]=ue,n[4]=T,n[5]=we,n[6]=Ee,n[7]=Te,n[8]=Ce,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;Nn(r)}update(e){Hx(this),Mt(e),e=oc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,Nn(this.h,this.r,this.buffer,this.pad)}digestInto(e){Hx(this),sR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var gR=lR(32,(e)=>new hR(e));function a7(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],f=t[2],p=t[3],y=t[4],g=t[5],b=t[6],S=t[7],A=n,C=r[0],N=r[1],q=r[2],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let T=0;T<o;T+=2)E=E+ee|0,D=et(D^E,16),I=I+D|0,ee=et(ee^I,12),E=E+ee|0,D=et(D^E,8),I=I+D|0,ee=et(ee^I,7),Z=Z+M|0,V=et(V^Z,16),R=R+V|0,M=et(M^R,12),Z=Z+M|0,V=et(V^Z,8),R=R+V|0,M=et(M^R,7),L=L+P|0,_=et(_^L,16),O=O+_|0,P=et(P^O,12),L=L+P|0,_=et(_^L,8),O=O+_|0,P=et(P^O,7),H=H+z|0,re=et(re^H,16),F=F+re|0,z=et(z^F,12),H=H+z|0,re=et(re^H,8),F=F+re|0,z=et(z^F,7),E=E+M|0,re=et(re^E,16),O=O+re|0,M=et(M^O,12),E=E+M|0,re=et(re^E,8),O=O+re|0,M=et(M^O,7),Z=Z+P|0,D=et(D^Z,16),F=F+D|0,P=et(P^F,12),Z=Z+P|0,D=et(D^Z,8),F=F+D|0,P=et(P^F,7),L=L+z|0,V=et(V^L,16),I=I+V|0,z=et(z^I,12),L=L+z|0,V=et(V^L,8),I=I+V|0,z=et(z^I,7),H=H+ee|0,_=et(_^H,16),R=R+_|0,ee=et(ee^R,12),H=H+ee|0,_=et(_^H,8),R=R+_|0,ee=et(ee^R,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+Z|0,i[ue++]=c+L|0,i[ue++]=l+H|0,i[ue++]=u+ee|0,i[ue++]=d+M|0,i[ue++]=f+P|0,i[ue++]=p+z|0,i[ue++]=y+I|0,i[ue++]=g+R|0,i[ue++]=b+O|0,i[ue++]=S+F|0,i[ue++]=A+D|0,i[ue++]=C+V|0,i[ue++]=N+_|0,i[ue++]=q+re|0}var c7=mR(a7,{counterRight:!1,counterLength:4,allowShortKeys:!1});var l7=new Uint8Array(16),yR=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(l7.subarray(r))},u7=new Uint8Array(32);function bR(e,t,r,i,n){if(n!==void 0)Mt(n,void 0,"AAD");let o=e(t,r,u7),s=dR(i.length,n?n.length:0,!0),a=gR.create(o);if(n)yR(a,n);yR(a,i),a.update(s);let c=a.digest();return Nn(o,s),c}var d7=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Pu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=bR(e,t,r,c,i);return s.set(l,a),Nn(l),s},decrypt(o,s){s=Pu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=bR(e,t,r,a,i);if(!cR(c,l))throw Nn(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),Nn(l),s}}),yn=uR({blockSize:64,nonceLength:12,tagLength:16},d7(c7));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function sc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Vt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Ne(e,t,r=""){let i=sc(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function bn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Vt(e.outputLen),Vt(e.blockLen)}function Ci(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function tm(e,t){Ne(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function rm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ur(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function nm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function zn(e,t){return e<<32-t|e>>>t}var f7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function p7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function m7(e){for(let t=0;t<e.length;t++)e[t]=p7(e[t]);return e}var Kx=f7?(e)=>e:m7,wR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),h7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function $s(e){if(Ne(e),wR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=h7[e[r]];return t}var $i={_0:48,_9:57,A:65,F:70,a:97,f:102};function xR(e){if(e>=$i._0&&e<=$i._9)return e-$i._0;if(e>=$i.A&&e<=$i.F)return e-($i.A-10);if(e>=$i.a&&e<=$i.f)return e-($i.a-10);return}function Cs(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(wR)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=xR(e.charCodeAt(o)),a=xR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Lt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Ne(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function ac(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function po(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var mo=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wx=BigInt(0),Vx=BigInt(1);function zu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function vR(e){if(typeof e==="bigint"){if(!im(e))throw Error("positive bigint expected, got "+e)}else Vt(e);return e}function Lu(e){let t=vR(e).toString(16);return t.length&1?"0"+t:t}function SR(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Wx:BigInt("0x"+e)}function ho(e){return SR($s(e))}function go(e){return SR($s(om(Ne(e)).reverse()))}function cc(e,t){Vt(t),e=vR(e);let r=Cs(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Du(e,t){return cc(e,t).reverse()}function om(e){return Uint8Array.from(e)}function yo(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var im=(e)=>typeof e==="bigint"&&Wx<=e;function g7(e,t,r){return im(e)&&im(t)&&im(r)&&t<=e&&e<r}function Bu(e,t,r,i){if(!g7(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function Gx(e){let t;for(t=0;e>Wx;e>>=Vx,t+=1);return t}var qu=(e)=>(Vx<<BigInt(e))-Vx;function _R(e,t,r){if(Vt(e,"hashLen"),Vt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,Lt(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return Lt(...S)};return(b,S)=>{d(),p(b);let A=void 0;while(!(A=S(y())))p();return d(),A}}function Ts(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function Qx(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),gr=BigInt(1),Os=BigInt(2),IR=BigInt(3),AR=BigInt(4),$R=BigInt(5),y7=BigInt(7),CR=BigInt(8),b7=BigInt(9),TR=BigInt(16);function $r(e,t){let r=e%t;return r>=Cr?r:t+r}function xn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function kR(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=$r(e,t),i=t,n=Cr,o=gr,s=gr,a=Cr;while(r!==Cr){let l=i/r,u=i%r,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==gr)throw Error("invert: does not exist");return $r(n,t)}function Yx(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function OR(e,t){let r=(e.ORDER+gr)/AR,i=e.pow(t,r);return Yx(e,i,t),i}function x7(e,t){let r=(e.ORDER-$R)/CR,i=e.mul(t,Os),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Os),n),a=e.mul(o,e.sub(s,e.ONE));return Yx(e,a,t),a}function w7(e){let t=sm(e),r=RR(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+y7)/TR;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,n),f=a.mul(l,o),p=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,p),u=a.cmov(f,d,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return Yx(a,b,c),b}}function RR(e){if(e<IR)throw Error("sqrt is not defined for small field");let t=e-gr,r=0;while(t%Os===Cr)t/=Os,r++;let i=Os,n=sm(e);while(ER(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return OR;let o=n.pow(i,t),s=(t+gr)/Os;return function(c,l){if(c.is0(l))return l;if(ER(c,l)!==1)throw Error("Cannot find square root");let u=r,d=c.mul(c.ONE,o),f=c.pow(l,t),p=c.pow(l,s);while(!c.eql(f,c.ONE)){if(c.is0(f))return c.ZERO;let y=1,g=c.sqr(f);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=gr<<BigInt(u-y-1),S=c.pow(d,b);u=y,d=c.sqr(S),f=c.mul(f,d),p=c.mul(p,S)}return p}}function v7(e){if(e%AR===IR)return OR;if(e%CR===$R)return x7;if(e%TR===b7)return w7(e);return RR(e)}var S7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Xx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=S7.reduce((i,n)=>(i[n]="function",i),t);return Ts(e,r),e}function _7(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===gr)return t;let i=e.ONE,n=t;while(r>Cr){if(r&gr)i=e.mul(i,n);n=e.sqr(n),r>>=gr}return i}function ju(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function ER(e,t){let r=(e.ORDER-gr)/Os,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function k7(e,t){if(t!==void 0)Vt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class PR{ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=gr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=k7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return $r(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&gr)===gr}neg(e){return $r(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return $r(e*e,this.ORDER)}add(e,t){return $r(e+t,this.ORDER)}sub(e,t){return $r(e-t,this.ORDER)}mul(e,t){return $r(e*t,this.ORDER)}pow(e,t){return _7(this,e,t)}div(e,t){return $r(e*kR(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return kR(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=v7(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Du(e,this.BYTES):cc(e,this.BYTES)}fromBytes(e,t=!1){Ne(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?go(e):ho(e);if(s)a=$r(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ju(this,e)}cmov(e,t,r){return r?t:e}}function sm(e,t={}){return new PR(e,t)}function NR(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function e0(e){let t=NR(e);return t+Math.ceil(t/2)}function zR(e,t,r=!1){Ne(e);let i=e.length,n=NR(t),o=e0(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?go(e):ho(e),a=$r(s,t-gr)+gr;return r?Du(a,n):cc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lc=BigInt(0),Rs=BigInt(1);function Uu(e,t){let r=t.negate();return e?r:t}function i0(e,t){let r=ju(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function qR(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function t0(e,t){qR(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=qu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function LR(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Rs;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var r0=new WeakMap,jR=new WeakMap;function n0(e){return jR.get(e)||1}function DR(e){if(e!==lc)throw Error("invalid wNAF")}class o0{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>lc){if(t&Rs)r=r.add(i);i=i.double(),t>>=Rs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=t0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=t0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=LR(r,s,o);if(r=a,l)n=n.add(Uu(d,t[f]));else i=i.add(Uu(u,t[c]))}return DR(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=t0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===lc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=LR(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return DR(r),i}getPrecomputes(e,t,r){let i=r0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);r0.set(t,i)}}return i}cached(e,t,r){let i=n0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=n0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){qR(t,this.bits),jR.set(e,t),r0.delete(e)}hasCache(e){return n0(e)!==1}}function UR(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>lc||i>lc){if(r&Rs)o=o.add(n);if(i&Rs)s=s.add(n);n=n.double(),r>>=Rs,i>>=Rs}return{p1:o,p2:s}}function BR(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Xx(t),t}else return sm(e,{isLE:r})}function MR(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>lc))throw Error(`CURVE.${c} must be positive bigint`)}let n=BR(t.p,r.Fp,i),o=BR(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function am(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mu=BigInt(0),uc=BigInt(1),cm=BigInt(2);function E7(e){return Ts(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function FR(e){let t=E7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||po,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?cm**BigInt(254):cm**BigInt(447),y=a?BigInt(8)*cm**BigInt(251)-uc:BigInt(4)*cm**BigInt(445)-uc,g=p+y+uc,b=(I)=>$r(I,r),S=A(d);function A(I){return Du(b(I),u)}function C(I){let R=om(Ne(I,u,"uCoordinate"));if(a)R[31]&=127;return b(go(R))}function N(I){return go(n(om(Ne(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===Mu)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Bu("u",I,Mu,r),Bu("scalar",R,p,g);let O=R,F=I,D=uc,V=Mu,_=I,re=uc,ue=Mu;for(let we=BigInt(l-1);we>=Mu;we--){let Ee=O>>we&uc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(Ne(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze({keygen:am(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}class s0{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(bn(e),Ne(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ur(i)}update(e){return Ci(this),this.iHash.update(e),this}digestInto(e){Ci(this),Ne(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dc=(e,t,r)=>new s0(e,t).update(r).digest();dc.create=(e,t)=>new s0(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZR=(e,t)=>(e+(e>=0?t:-t)/JR)/t;function I7(e,t,r){let[[i,n],[o,s]]=t,a=ZR(s*e,r),c=ZR(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<Ti,f=u<Ti;if(d)l=-l;if(f)u=-u;let p=qu(Math.ceil(Gx(r)/2))+fc;if(l<Ti||l>=p||u<Ti||u>=p)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:f,k2:u}}function c0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function a0(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(zu(r.lowS,"lowS"),zu(r.prehash,"prehash"),r.format!==void 0)c0(r.format);return r}class HR extends Error{constructor(e=""){super(e)}}var bo={Err:HR,_tlv:{encode:(e,t)=>{let{Err:r}=bo;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Lu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Lu(n.length/2|128):"";return Lu(e)+o+n+t},decode(e,t){let{Err:r}=bo,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=bo;if(e<Ti)throw new t("integer: negative integers are not allowed");let r=Lu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=bo;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return ho(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=bo,n=Ne(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=bo,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Ti=BigInt(0),fc=BigInt(1),JR=BigInt(2),lm=BigInt(3),A7=BigInt(4);function l0(e,t={}){let r=MR("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ts(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=VR(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(P,z,I){let{x:R,y:O}=z.toAffine(),F=i.toBytes(R);if(zu(I,"isCompressed"),I){u();let D=!i.isOdd(O);return Lt(KR(D),F)}else return Lt(Uint8Array.of(4),F,i.toBytes(O))}function f(P){Ne(P,void 0,"Point");let{publicKey:z,publicKeyUncompressed:I}=l,R=P.length,O=P[0],F=P.subarray(1);if(R===z&&(O===2||O===3)){let D=i.fromBytes(F);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let V=g(D),_;try{_=i.sqrt(V)}catch(T){let we=T instanceof Error?": "+T.message:"";throw Error("bad point: is not on curve, sqrt error"+we)}u();let re=i.isOdd(_);if((O&1)===1!==re)_=i.neg(_);return{x:D,y:_}}else if(R===I&&O===4){let D=i.BYTES,V=i.fromBytes(F.subarray(0,D)),_=i.fromBytes(F.subarray(D,D*2));if(!b(V,_))throw Error("bad point: is not on curve");return{x:V,y:_}}else throw Error(`bad point: got length ${R}, expected compressed=${z} or uncompressed=${I}`)}let p=t.toBytes||d,y=t.fromBytes||f;function g(P){let z=i.sqr(P),I=i.mul(z,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,z){let I=i.sqr(z),R=g(P);return i.eql(I,R)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let S=i.mul(i.pow(o.a,lm),A7),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(S,A)))throw Error("bad curve params: a or b");function C(P,z,I=!1){if(!i.isValid(z)||I&&i.is0(z))throw Error(`bad point coordinate ${P}`);return z}function N(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function q(P){if(!c||!c.basises)throw Error("no endo");return I7(P,c.basises,n.ORDER)}let E=Qx((P,z)=>{let{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}),Z=Qx((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:z,y:I}=P.toAffine();if(!i.isValid(z)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(z,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function L(P,z,I,R,O){return I=new H(i.mul(I.X,P),I.Y,I.Z),z=Uu(R,z),I=Uu(O,I),z.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,z,I){this.X=C("x",P),this.Y=C("y",z,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:z,y:I}=P||{};if(!P||!i.isValid(z)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(z)&&i.is0(I))return H.ZERO;return new H(z,I,i.ONE)}static fromBytes(P){let z=H.fromAffine(y(Ne(P,void 0,"point")));return z.assertValidity(),z}static fromHex(P){return H.fromBytes(Cs(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,z=!0){if(M.createCache(this,P),!z)this.multiply(lm);return this}assertValidity(){Z(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.eql(i.mul(z,D),i.mul(O,R)),_=i.eql(i.mul(I,D),i.mul(F,R));return V&&_}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:z}=o,I=i.mul(z,lm),{X:R,Y:O,Z:F}=this,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(F,F),we=i.mul(R,O);return we=i.add(we,we),_=i.mul(R,F),_=i.add(_,_),D=i.mul(P,_),V=i.mul(I,T),V=i.add(D,V),D=i.sub(ue,V),V=i.add(ue,V),V=i.mul(D,V),D=i.mul(we,D),_=i.mul(I,_),T=i.mul(P,T),we=i.sub(re,T),we=i.mul(P,we),we=i.add(we,_),_=i.add(re,re),re=i.add(_,re),re=i.add(re,T),re=i.mul(re,we),V=i.add(V,re),T=i.mul(O,F),T=i.add(T,T),re=i.mul(T,we),D=i.sub(D,re),_=i.mul(T,ue),_=i.add(_,_),_=i.add(_,_),new H(D,V,_)}add(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.ZERO,_=i.ZERO,re=i.ZERO,ue=o.a,T=i.mul(o.b,lm),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.mul(R,D),Ce=i.add(z,I),_e=i.add(O,F);Ce=i.mul(Ce,_e),_e=i.add(we,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,R);let Pe=i.add(O,D);return _e=i.mul(_e,Pe),Pe=i.add(we,Te),_e=i.sub(_e,Pe),Pe=i.add(I,R),V=i.add(F,D),Pe=i.mul(Pe,V),V=i.add(Ee,Te),Pe=i.sub(Pe,V),re=i.mul(ue,_e),V=i.mul(T,Te),re=i.add(V,re),V=i.sub(Ee,re),re=i.add(Ee,re),_=i.mul(V,re),Ee=i.add(we,we),Ee=i.add(Ee,we),Te=i.mul(ue,Te),_e=i.mul(T,_e),Ee=i.add(Ee,Te),Te=i.sub(we,Te),Te=i.mul(ue,Te),_e=i.add(_e,Te),we=i.mul(Ee,_e),_=i.add(_,we),we=i.mul(Pe,_e),V=i.mul(Ce,V),V=i.sub(V,we),we=i.mul(Ce,Ee),re=i.mul(Pe,re),re=i.add(re,we),new H(V,_,re)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:z}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,R,O=(F)=>M.cached(this,F,(D)=>i0(H,D));if(z){let{k1neg:F,k1:D,k2neg:V,k2:_}=q(P),{p:re,f:ue}=O(D),{p:T,f:we}=O(_);R=ue.add(we),I=L(z.beta,re,T,F,V)}else{let{p:F,f:D}=O(P);I=F,R=D}return i0(H,[I,R])[0]}multiplyUnsafe(P){let{endo:z}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Ti||I.is0())return H.ZERO;if(P===fc)return I;if(M.hasCache(this))return this.multiply(P);if(z){let{k1neg:R,k1:O,k2neg:F,k2:D}=q(P),{p1:V,p2:_}=UR(H,I,O,D);return L(z.beta,V,_,R,F)}else return M.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===fc)return!0;if(P)return P(H,this);return M.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===fc)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return zu(P,"isCompressed"),this.assertValidity(),p(H,this,P)}toHex(P=!0){return $s(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let ee=n.BITS,M=new o0(H,t.endo?Math.ceil(ee/2):ee);return H.BASE.precompute(8),H}function KR(e){return Uint8Array.of(e?2:3)}function VR(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function $7(e,t={}){let{Fn:r}=e,i=t.randomBytes||po,n=Object.assign(VR(e.Fp,r),{seed:e0(r.ORDER)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p=i(n.seed)){return zR(Ne(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!sc(p))return;if("_lengths"in r&&r._lengths||y===g)return;let S=Ne(p,void 0,"key").length;return S===g||S===b}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=am(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function u0(e,t,r={}){bn(t),Ts(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||po,n=r.hmac||((I,R)=>dc(t,I,R)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p}=$7(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*JR<o.ORDER;function b(I){let R=a>>fc;return I>R}function S(I,R){if(!s.isValidNot0(R))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,R){c0(R);let O=p.signature,F=R==="compact"?O:R==="recovered"?O+1:void 0;return Ne(I,F)}class N{r;s;recovery;constructor(I,R,O){if(this.r=S("r",I),this.s=S("s",R),O!=null){if(A(),![0,1,2,3].includes(O))throw Error("invalid recovery id");this.recovery=O}Object.freeze(this)}static fromBytes(I,R=y.format){C(I,R);let O;if(R==="der"){let{r:_,s:re}=bo.toSig(Ne(I));return new N(_,re)}if(R==="recovered")O=I[0],R="compact",I=I.subarray(1);let F=p.signature/2,D=I.subarray(0,F),V=I.subarray(F,F*2);return new N(s.fromBytes(D),s.fromBytes(V),O)}static fromHex(I,R){return this.fromBytes(Cs(I),R)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new N(this.r,this.s,I)}recoverPublicKey(I){let{r:R,s:O}=this,F=this.assertRecovery(),D=F===2||F===3?R+a:R;if(!o.isValid(D))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(D),_=e.fromBytes(Lt(KR((F&1)===0),V)),re=s.inv(D),ue=E(Ne(I,void 0,"msgHash")),T=s.create(-ue*re),we=s.create(O*re),Ee=e.BASE.multiplyUnsafe(T).add(_.multiplyUnsafe(we));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(c0(I),I==="der")return Cs(bo.hexFromSig(this));let{r:R,s:O}=this,F=s.toBytes(R),D=s.toBytes(O);if(I==="recovered")return A(),Lt(Uint8Array.of(this.assertRecovery()),F,D);return Lt(F,D)}toHex(I){return $s(this.toBytes(I))}}let q=r.bits2int||function(R){if(R.length>8192)throw Error("input is too large");let O=ho(R),F=R.length*8-c;return F>0?O>>BigInt(F):O},E=r.bits2int_modN||function(R){return s.create(q(R))},Z=qu(c);function L(I){return Bu("num < 2^"+c,I,Ti,Z),s.toBytes(I)}function H(I,R){return Ne(I,void 0,"message"),R?Ne(t(I),void 0,"prehashed message"):I}function ee(I,R,O){let{lowS:F,prehash:D,extraEntropy:V}=a0(O,y);I=H(I,D);let _=E(I),re=s.fromBytes(R);if(!s.isValidNot0(re))throw Error("invalid private key");let ue=[L(re),L(_)];if(V!=null&&V!==!1){let Te=V===!0?i(p.secretKey):V;ue.push(Ne(Te,void 0,"extraEntropy"))}let T=Lt(...ue),we=_;function Ee(Te){let Ce=q(Te);if(!s.isValidNot0(Ce))return;let _e=s.inv(Ce),Pe=e.BASE.multiply(Ce).toAffine(),Ve=s.create(Pe.x);if(Ve===Ti)return;let tt=s.create(_e*s.create(we+Ve*re));if(tt===Ti)return;let bt=(Pe.x===Ve?0:2)|Number(Pe.y&fc),zt=tt;if(F&&b(tt))zt=s.neg(tt),bt^=1;return new N(Ve,zt,g?void 0:bt)}return{seed:T,k2sig:Ee}}function M(I,R,O={}){let{seed:F,k2sig:D}=ee(I,R,O);return _R(t.outputLen,s.BYTES,n)(F,D).toBytes(O.format)}function P(I,R,O,F={}){let{lowS:D,prehash:V,format:_}=a0(F,y);if(O=Ne(O,void 0,"publicKey"),R=H(R,V),!sc(I)){let re=I instanceof N?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}C(I,_);try{let re=N.fromBytes(I,_),ue=e.fromBytes(O);if(D&&re.hasHighS())return!1;let{r:T,s:we}=re,Ee=E(R),Te=s.inv(we),Ce=s.create(Ee*Te),_e=s.create(T*Te),Pe=e.BASE.multiplyUnsafe(Ce).add(ue.multiplyUnsafe(_e));if(Pe.is0())return!1;return s.create(Pe.x)===T}catch(re){return!1}}function z(I,R,O={}){let{prehash:F}=a0(O,y);return R=H(R,F),N.fromBytes(I,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p,Point:e,sign:M,verify:P,recoverPublicKey:z,Signature:N,hash:t})}function WR(e,t,r){return e&t^~e&r}function GR(e,t,r){return e&t^e&r^t&r}class um{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=nm(this.buffer)}update(e){Ci(this),Ne(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=nm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ci(this),tm(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ur(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=nm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Oi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var nr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var dm=BigInt(4294967295),QR=BigInt(32);function C7(e,t=!1){if(t)return{h:Number(e&dm),l:Number(e>>QR&dm)};return{h:Number(e>>QR&dm)|0,l:Number(e&dm)|0}}function fm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=C7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var d0=(e,t,r)=>e>>>r,f0=(e,t,r)=>e<<32-r|t>>>r,Ps=(e,t,r)=>e>>>r|t<<32-r,Ns=(e,t,r)=>e<<32-r|t>>>r,Fu=(e,t,r)=>e<<64-r|t>>>r-32,Zu=(e,t,r)=>e>>>r-32|t<<64-r;var YR=(e,t,r)=>e<<r|t>>>32-r,XR=(e,t,r)=>t<<r|e>>>32-r,eP=(e,t,r)=>t<<r-32|e>>>64-r,tP=(e,t,r)=>e<<r-32|t>>>64-r;function ei(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var rP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),nP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,iP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),oP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,sP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),aP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var O7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),xo=new Uint32Array(64);class cP extends um{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)xo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=xo[u-15],f=xo[u-2],p=zn(d,7)^zn(d,18)^d>>>3,y=zn(f,17)^zn(f,19)^f>>>10;xo[u]=y+xo[u-7]+p+xo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=zn(s,6)^zn(s,11)^zn(s,25),f=l+d+WR(s,a,c)+O7[u]+xo[u]|0,y=(zn(r,2)^zn(r,13)^zn(r,22))+GR(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ur(xo)}destroy(){this.set(0,0,0,0,0,0,0,0),Ur(this.buffer)}}class lP extends cP{A=Oi[0]|0;B=Oi[1]|0;C=Oi[2]|0;D=Oi[3]|0;E=Oi[4]|0;F=Oi[5]|0;G=Oi[6]|0;H=Oi[7]|0;constructor(){super(32)}}var uP=(()=>fm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),R7=(()=>uP[0])(),P7=(()=>uP[1])(),wo=new Uint32Array(80),vo=new Uint32Array(80);class dP extends um{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)wo[A]=e.getUint32(t),vo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=wo[A-15]|0,N=vo[A-15]|0,q=Ps(C,N,1)^Ps(C,N,8)^d0(C,N,7),E=Ns(C,N,1)^Ns(C,N,8)^f0(C,N,7),Z=wo[A-2]|0,L=vo[A-2]|0,H=Ps(Z,L,19)^Fu(Z,L,61)^d0(Z,L,6),ee=Ns(Z,L,19)^Zu(Z,L,61)^f0(Z,L,6),M=iP(E,ee,vo[A-7],vo[A-16]),P=oP(M,q,H,wo[A-7],wo[A-16]);wo[A]=P|0,vo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Ps(u,d,14)^Ps(u,d,18)^Fu(u,d,41),N=Ns(u,d,14)^Ns(u,d,18)^Zu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=sP(S,N,E,P7[A],vo[A]),L=aP(Z,b,C,q,R7[A],wo[A]),H=Z|0,ee=Ps(r,i,28)^Fu(r,i,34)^Fu(r,i,39),M=Ns(r,i,28)^Zu(r,i,34)^Zu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=ei(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=rP(H,M,z);r=nP(I,L,ee,P),i=I|0}({h:r,l:i}=ei(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ei(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ei(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ei(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ei(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=ei(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=ei(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=ei(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ur(wo,vo)}destroy(){Ur(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class fP extends dP{Ah=nr[0]|0;Al=nr[1]|0;Bh=nr[2]|0;Bl=nr[3]|0;Ch=nr[4]|0;Cl=nr[5]|0;Dh=nr[6]|0;Dl=nr[7]|0;Eh=nr[8]|0;El=nr[9]|0;Fh=nr[10]|0;Fl=nr[11]|0;Gh=nr[12]|0;Gl=nr[13]|0;Hh=nr[14]|0;Hl=nr[15]|0;constructor(){super(48)}}var pm=ac(()=>new lP,mo(1));var pP=ac(()=>new fP,mo(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var N7=BigInt(1),mP=BigInt(2),z7=BigInt(3),L7=BigInt(5),nke=BigInt(8),hP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function D7(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=hP,a=e*e%o*e%o,c=xn(a,mP,o)*a%o,l=xn(c,N7,o)*e%o,u=xn(l,L7,o)*l%o,d=xn(u,t,o)*u%o,f=xn(d,r,o)*d%o,p=xn(f,i,o)*f%o,y=xn(p,n,o)*p%o,g=xn(y,n,o)*p%o,b=xn(g,t,o)*u%o;return{pow_p_5_8:xn(b,mP,o)*e%o,b2:a}}function B7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var gP=(()=>{let e=hP;return FR({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=D7(t);return $r(xn(r,z7,e)*i,e)},adjustScalarBytes:B7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var q7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),j7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var U7=l0(q7),p0=u0(U7,pm);var M7=l0(j7),yP=u0(M7,pP);function xP(e,t,r){if(bn(e),r===void 0)r=new Uint8Array(e.outputLen);return dc(e,r,t)}var m0=Uint8Array.of(0),bP=Uint8Array.of();function wP(e,t,r,i=32){bn(e),Vt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=bP;else Ne(r,void 0,"info");let s=new Uint8Array(o*n),a=dc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)m0[0]=u+1,c.update(u===0?bP:l).update(r).update(m0).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ur(l,m0),s.slice(0,i)}var F7=BigInt(0),Hu=BigInt(1),Z7=BigInt(2),H7=BigInt(7),J7=BigInt(256),K7=BigInt(113),_P=[],kP=[],EP=[];for(let e=0,t=Hu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],_P.push(2*(5*i+r)),kP.push((e+1)*(e+2)/2%64);let n=F7;for(let o=0;o<7;o++)if(t=(t<<Hu^(t>>H7)*K7)%J7,t&Z7)n^=Hu<<(Hu<<BigInt(o))-Hu;EP.push(n)}var IP=fm(EP,!0),V7=IP[0],W7=IP[1],vP=(e,t,r)=>r>32?eP(e,t,r):YR(e,t,r),SP=(e,t,r)=>r>32?tP(e,t,r):XR(e,t,r);function G7(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],d=vP(l,u,1)^r[a],f=SP(l,u,1)^r[a+1];for(let p=0;p<50;p+=10)e[s+p]^=d,e[s+p+1]^=f}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=kP[s],c=vP(n,o,a),l=SP(n,o,a),u=_P[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=V7[i],e[1]^=W7[i]}Ur(r)}class mm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Vt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rm(this.state)}clone(){return this._cloneInto()}keccak(){Kx(this.state32),G7(this.state32,this.rounds),Kx(this.state32),this.posOut=0,this.pos=0}update(e){Ci(this),Ne(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ci(this,!1),Ne(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Vt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(tm(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Ur(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new mm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var AP=(e,t,r,i={})=>ac(()=>new mm(t,e,r),i);var zs=AP(6,136,32,mo(8));var $P=AP(6,72,64,mo(10));var CP=(e,t,r,i={})=>ac((n={})=>new mm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),TP=CP(31,168,16,mo(11)),ti=CP(31,136,32,mo(12));function h0(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function RP(e){return h0(e),(e&e-1)===0&&e!==0}function g0(e,t){h0(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function PP(e){return h0(e),31-Math.clz32(e)}function OP(e){let t=e.length;if(t<2||!RP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=PP(t);for(let i=0;i<t;i++){let n=g0(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var y0=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=PP(r);if(!RP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)OP(u);for(let d=0,f=1;d<c-s;d++){let p=n?d+1+s:c-d,y=1<<p,g=y>>1,b=r>>p;for(let S=0;S<r;S+=y)for(let A=0,C=f++;A<g;A++){let N=o?n?r-C:C:A*b,q=S+A,E=S+A+g,Z=i[N],L=u[E],H=u[q];if(l){let ee=e.mul(L,Z);u[q]=e.add(H,ee),u[E]=e.sub(H,ee)}else if(o)u[q]=e.add(L,H),u[E]=e.mul(e.sub(L,H),Z);else u[q]=e.add(H,L),u[E]=e.mul(e.sub(H,L),Z)}}if(!n&&a)OP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ri=po;function hm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function NP(e){return Uint8Array.from(e)}function Ls(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Ne(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Ne(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function gm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Ne(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ft(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function b0(e){return(1<<e)-1}var bke=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var zP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let N=A%C|0;return(N>=0?N|0:C+N|0)|0},l=(A,C=i)=>{let N=c(A,C)|0;return(N>C>>1?N-C|0:N)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let N=g0(C,s),q=BigInt(o)**BigInt(N)%BigInt(i);A[C]=Number(q)|0}return A}let d=u(),f={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},p={N:r,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=y0(f,{dit:!1,...p}),g=y0(f,{dit:!0,...p});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(A)=>y(A),decode:(A)=>{g(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let N=b0(A),q=A*(r/8);return{bytesLen:q,encode:(E)=>{let Z=new Uint8Array(q);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=(C.encode(E[L])&N)<<ee,ee+=A;for(;ee>=8;ee-=8,H>>=8)Z[M++]=H&b0(ee)}return Z},decode:(E)=>{let Z=t(r);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=E[L]<<ee,ee+=8;for(;ee>=A;ee-=A,H>>=A)Z[M++]=C.decode(H&N)}return Z}}}}},Q7=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ft(o,i)}}},LP=Q7(TP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var yr=256,Ri=3329,Y7=3303,X7=17,{mod:Vu,nttZetas:eW,NTT:Ds,bitsCoder:tW}=zP({N:yr,Q:Ri,F:Y7,ROOT_OF_UNITY:X7,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),x0={512:{N:yr,Q:Ri,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:yr,Q:Ri,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:yr,Q:Ri,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},rW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ri/2)/Ri,decode:(r)=>r*Ri+t>>>e}},Ju=(e)=>tW(e,rW(e));function Bs(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]+t[r])}function nW(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]-t[r])}function iW(e,t,r,i,n){let o=Vu(t*i*n+e*r),s=Vu(e*i+t*r);return{c0:o,c1:s}}function ym(e,t){for(let r=0;r<yr/2;r++){let i=eW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=iW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function DP(e){let t=new Uint16Array(yr);for(let r=0;r<yr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<yr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ri)t[r++]=o;if(r<yr&&s<Ri)t[r++]=s}}return t}function Ku(e,t,r,i){let n=e(i*yr/4,t,r),o=new Uint16Array(yr),s=rm(n),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let f=s[c];for(let p=0;p<32;p++)if(u+=f&1,f>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Vu(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var oW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Ju(1),u=Ju(c),d=Ju(a),f=Ls("publicKey",gm(Ju(12),t),32),p=gm(Ju(12),t),y=Ls("ciphertext",gm(d,t),u),g=Ls("seed",32,32);return{secretCoder:p,lengths:{secretKey:p.bytesLen,publicKey:f.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{Ne(b,32,"seed");let S=new Uint8Array(33);S.set(b),S[32]=t;let A=n(S),[C,N]=g.decode(A),q=[],E=[];for(let H=0;H<t;H++)q.push(Ds.encode(Ku(r,N,H,o)));let Z=i(C);for(let H=0;H<t;H++){let ee=Ds.encode(Ku(r,N,t+H,o));for(let M=0;M<t;M++){let P=DP(Z.get(M,H));Bs(ee,ym(P,q[M]))}E.push(ee)}Z.clean();let L={publicKey:f.encode([E,C]),secretKey:p.encode(q)};return Ft(C,N,q,E,S,A),L},encrypt:(b,S,A)=>{let[C,N]=f.decode(b),q=[];for(let M=0;M<t;M++)q.push(Ds.encode(Ku(r,A,M,o)));let E=i(N),Z=new Uint16Array(yr),L=[];for(let M=0;M<t;M++){let P=Ku(r,A,t+M,s),z=new Uint16Array(yr);for(let I=0;I<t;I++){let R=DP(E.get(M,I));Bs(z,ym(R,q[I]))}Bs(P,Ds.decode(z)),L.push(P),Bs(Z,ym(C[M],q[M])),Ft(z)}E.clean();let H=Ku(r,A,2*t,s);Bs(H,Ds.decode(Z));let ee=l.decode(S);return Bs(ee,H),Ft(C,q,Z,H),y.encode([L,ee])},decrypt:(b,S)=>{let[A,C]=y.decode(b),N=p.decode(S),q=new Uint16Array(yr);for(let E=0;E<t;E++)Bs(q,ym(N[E],Ds.encode(A[E])));return nW(C,Ds.decode(q)),Ft(q,N,A),l.encode(C)}}};function w0(e){let t=oW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ls("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ri(64))=>{Ne(u,64,"seed");let{publicKey:d,secretKey:f}=t.keygen(u.subarray(0,32)),p=r(d),y=a.encode([f,d,p,u.subarray(32)]);return Ft(f,p),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,f,p,y]=a.decode(u);return Uint8Array.from(f)},encapsulate:(u,d=ri(32))=>{Ne(u,s.publicKey,"publicKey"),Ne(d,32,"message");let f=u.subarray(0,384*e.K),p=o.encode(o.decode(NP(f)));if(!hm(p,f))throw Ft(p),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ft(p);let y=i.create().update(d).update(r(u)).digest(),g=t.encrypt(u,d,y.subarray(32,64));return Ft(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{Ne(d,a.bytesLen,"secretKey"),Ne(u,s.cipherText,"cipherText");let f=a.bytesLen-96,p=f+32,y=r(d.subarray(f/2,p));if(!hm(y,d.subarray(p,p+32)))throw Error("invalid secretKey: hash check failed");let[g,b,S,A]=a.decode(d),C=t.decrypt(u,g),N=i.create().update(C).update(S).digest(),q=N.subarray(0,32),E=t.encrypt(b,C,N.subarray(32,64)),Z=hm(u,E),L=n.create({dkLen:32}).update(A).update(u).digest();return Ft(C,E,!Z?q:L),Z?q:L}}}function sW(e,t,r){return ti.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var v0={HASH256:zs,HASH512:$P,KDF:ti,XOF:LP,PRF:sW},Cke=w0({...v0,...x0[512]}),Wu=w0({...v0,...x0[768]}),BP=w0({...v0,...x0[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function aW(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ri(r.seed))=>{Ne(s,r.seed,"seed");let a=o.isLE?go(s):ho(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function S0(e,t=!1){let r=aW(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ri(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ft(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Gu(e,t){return Ls(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function _0(e){return(t,r)=>e(t,{dkLen:r})}function cW(e,t,...r){let i=Gu(r,"seed"),n=Gu(r,"publicKey");if(e===void 0)e=i.bytesLen;Vt(e);function o(s){Ne(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((d,f)=>d.keygen(a[f])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ri(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ft(a),Ft(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function bm(e,t,r,i,...n){let o=cW(e,r,...n),s=Gu(n,"cipherText"),a=Gu(n,"publicKey"),c=Gu(n,"msg");if(t===void 0)t=c.bytesLen;return Vt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ri(c.bytesLen)){let d=a.decode(l),f=c.decode(u),p=n.map((S,A)=>S.encapsulate(d[A],f[A])),y=p.map((S)=>S.sharedSecret),g=p.map((S)=>S.cipherText),b={sharedSecret:i(d,g,y),cipherText:s.encode(g)};return Ft(y,g),b},decapsulate(l,u){let d=s.decode(l),{publicKey:f,secretKey:p}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(d[b],p[b]));return i(f,d,y)}}}function qP(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>n(Lt(a[0],a[1],s[1],o[1],yo(e))),t,r)}var jke=qP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Wu,S0(p0,!0),ti,zs),Uke=qP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",BP,S0(yP,!0),ti,zs);function lW(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>{let c=Lt(a[0],a[1],s[0],o[0],s[1],o[1],yo(e)),l=32,u=Lt(yo("hybrid_prk"),c),d=xP(n,u),f=Lt(cc(32,2),yo("shared_secret"),yo("")),p=wP(n,d,f,32);return Ft(d,f,u,c),p},t,r)}var jP=S0(gP),Mke=lW("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Wu,jP,ti,pm),uW=(()=>bm(32,32,_0(ti),(e,t,r)=>zs(Lt(r[0],r[1],t[1],e[1],yo("\\.//^\\"))),Wu,jP))();function dW(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,d),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ri(i)){return Ne(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ri(i)){Ne(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ft(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function fW(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=dW(r,n,o,i),a=64,c=a+i;return bm(32,32,(l)=>{Ne(l,32);let u=ti(l,{dkLen:c}),d=u.subarray(0,a),f=u.subarray(a,c);return Lt(d,f)},(l,u,d)=>zs(Lt(d[0],d[1],u[1],l[1],yo(e))),t,s)}var pW=(()=>fW("MLKEM768-P256",Wu,p0,128))();var xm=uW,UP=pW;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lt=(e,t,r)=>er(e,t,r),E0=Tt,pc=Fp,ir=(...e)=>$x(...e),mc=(e)=>Au(e),hc=Ex,gc=(e)=>Ei(e),vm=BigInt(0),k0=BigInt(1);function Pi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!wm(e))throw RangeError("positive bigint expected, got "+e)}else E0(e);return e}function ni(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Qu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function MP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?vm:BigInt("0x"+e)}function qs(e){return MP(Fp(e))}function Ln(e){return MP(Fp(So(er(e)).reverse()))}function _m(e,t){if(Tt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return Au(r.padStart(t*2,"0"))}function Yu(e,t){return _m(e,t).reverse()}function FP(e,t){if(e=lt(e),t=lt(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function So(e){return Uint8Array.from(lt(e))}function km(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var wm=(e)=>typeof e==="bigint"&&vm<=e;function mW(e,t,r){return wm(e)&&wm(t)&&wm(r)&&t<=e&&e<r}function Ni(e,t,r,i){if(!mW(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function yc(e){if(e<vm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>vm;e>>=k0,t+=1);return t}var Xu=(e)=>(k0<<BigInt(e))-k0;function ZP(e,t,r){if(Tt(e,"hashLen"),Tt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,ir(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return ir(...S)};return(b,S)=>{d(),p(b);let A=void 0;while((A=S(y()))===void 0)p();return d(),A}}function wn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var I0=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var or=BigInt(0),Et=BigInt(1),js=BigInt(2),VP=BigInt(3),WP=BigInt(4),GP=BigInt(5),hW=BigInt(7),QP=BigInt(8),gW=BigInt(9),YP=BigInt(16);function mt(e,t){if(t<=or)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=or?r:t+r}function vn(e,t,r){if(t<or)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >or)i*=i,i%=r;return i}function HP(e,t){if(e===or)throw Error("invert: expected non-zero number");if(t<=or)throw Error("invert: expected positive modulus, got "+t);let r=mt(e,t),i=t,n=or,o=Et,s=Et,a=or;while(r!==or){let l=i/r,u=i-r*l,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==Et)throw Error("invert: does not exist");return mt(n,t)}function A0(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function XP(e,t){let r=e,i=(r.ORDER+Et)/WP,n=r.pow(t,i);return A0(r,n,t),n}function yW(e,t){let r=e,i=(r.ORDER-GP)/QP,n=r.mul(t,js),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,js),o),c=r.mul(s,r.sub(a,r.ONE));return A0(r,c,t),c}function bW(e){let t=Em(e),r=e2(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+hW)/YP;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),f=l.mul(u,n),p=l.mul(u,o),y=l.eql(l.sqr(d),c),g=l.eql(l.sqr(f),c);u=l.cmov(u,d,y),d=l.cmov(p,f,g);let b=l.eql(l.sqr(d),c),S=l.cmov(u,d,b);return A0(l,S,c),S}}function e2(e){if(e<VP)throw Error("sqrt is not defined for small field");let t=e-Et,r=0;while(t%js===or)t/=js,r++;let i=js,n=Em(e);while(JP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return XP;let o=n.pow(i,t),s=(t+Et)/js;return function(c,l){let u=c;if(u.is0(l))return l;if(JP(u,l)!==1)throw Error("Cannot find square root");let d=r,f=u.mul(u.ONE,o),p=u.pow(l,t),y=u.pow(l,s);while(!u.eql(p,u.ONE)){if(u.is0(p))return u.ZERO;let g=1,b=u.sqr(p);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===d)throw Error("Cannot find square root");let S=Et<<BigInt(d-g-1),A=u.pow(f,S);d=g,f=u.sqr(A),p=u.mul(p,f),y=u.mul(y,A)}return y}}function xW(e){if(e%WP===VP)return XP;if(e%QP===GP)return yW;if(e%YP===gW)return bW(e);return e2(e)}var zi=(e,t)=>(mt(e,t)&Et)===Et,wW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function $0(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=wW.reduce((i,n)=>(i[n]="function",i),t);if(wn(e,r),ni(e.BYTES,"BYTES"),ni(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Et)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function vW(e,t,r){let i=e;if(r<or)throw Error("invalid exponent, negatives unsupported");if(r===or)return i.ONE;if(r===Et)return t;let n=i.ONE,o=t;while(r>or){if(r&Et)n=i.mul(n,o);o=i.sqr(o),r>>=Et}return n}function ed(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function JP(e,t){let r=e,i=(r.ORDER-Et)/js,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function SW(e,t){if(t!==void 0)E0(t);if(e<=or)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=yc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var KP=new WeakMap;class C0{ORDER;BITS;BYTES;isLE;ZERO=or;ONE=Et;_lengths;_mod;constructor(e,t={}){if(e<=Et)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=SW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return mt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return or<=e&&e<this.ORDER}is0(e){return e===or}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Et)===Et}neg(e){return mt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return mt(e*e,this.ORDER)}add(e,t){return mt(e+t,this.ORDER)}sub(e,t){return mt(e-t,this.ORDER)}mul(e,t){return mt(e*t,this.ORDER)}pow(e,t){return vW(this,e,t)}div(e,t){return mt(e*HP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return HP(e,this.ORDER)}sqrt(e){let t=KP.get(this);if(!t)KP.set(this,t=xW(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Yu(e,this.BYTES):_m(e,this.BYTES)}fromBytes(e,t=!1){lt(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Ln(e):qs(e);if(s)a=mt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ed(this,e)}cmov(e,t,r){return Pi(r,"condition"),r?t:e}}Object.freeze(C0.prototype);function Em(e,t={}){return new C0(e,t)}function t2(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Et)throw Error("field order must be greater than 1");let t=yc(e-Et);return Math.ceil(t/8)}function T0(e){let t=t2(e);return t+Math.ceil(t/2)}function r2(e,t,r=!1){lt(e);let i=e.length,n=t2(t),o=Math.max(T0(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Ln(e):qs(e),a=mt(s,t-Et)+Et;return r?Yu(a,n):_m(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bc=BigInt(0),Us=BigInt(1);function td(e,t){let r=t.negate();return e?r:t}function Ms(e,t){let r=ed(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function s2(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function O0(e,t){s2(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Xu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function n2(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Us;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var R0=new WeakMap,a2=new WeakMap;function P0(e){return a2.get(e)||1}function i2(e){if(e!==bc)throw Error("invalid wNAF")}class rd{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>bc){if(t&Us)r=r.add(i);i=i.double(),t>>=Us}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=O0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=O0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=n2(r,s,o);if(r=a,l)n=n.add(td(d,t[f]));else i=i.add(td(u,t[c]))}return i2(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=O0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===bc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=n2(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return i2(r),i}getPrecomputes(e,t,r){let i=R0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);R0.set(t,i)}}return i}cached(e,t,r){let i=P0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=P0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){s2(t,this.bits),a2.set(e,t),R0.delete(e)}hasCache(e){return P0(e)!==1}}function c2(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>bc||i>bc){if(r&Us)o=o.add(n);if(i&Us)s=s.add(n);n=n.double(),r>>=Us,i>>=Us}return{p1:o,p2:s}}function o2(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return $0(t),t}else return Em(e,{isLE:r})}function Im(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>bc))throw Error(`CURVE.${c} must be positive bigint`)}let n=o2(t.p,r.Fp,i),o=o2(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function nd(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function id(e,t){if(ni(e),ni(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function _W(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function kW(e){if(!hc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?km(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function N0(e,t,r,i){if(lt(e),ni(r),t=kW(t),t.length>255)t=i(ir(km("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ir(t,id(t.length,1)),c=new Uint8Array(o),l=id(r,2),u=Array(s),d=i(ir(c,e,l,id(0,1),a));u[0]=i(ir(d,id(1,1),a));for(let p=1;p<s;p++){let y=[_W(d,u[p-1]),id(p+1,1),a];u[p]=i(ir(...y))}return ir(...u).slice(0,r)}var l2="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u2=(e,t)=>(e+(e>=0?t:-t)/f2)/t;function EW(e,t,r){Ni("scalar",e,ii,r);let[[i,n],[o,s]]=t,a=u2(s*e,r),c=u2(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<ii,f=u<ii;if(d)l=-l;if(f)u=-u;let p=Xu(Math.ceil(yc(r)/2))+_o;if(l<ii||l>=p||u<ii||u>=p)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:f,k2:u}}function L0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function z0(e,t){wn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Pi(r.lowS,"lowS"),Pi(r.prehash,"prehash"),r.format!==void 0)L0(r.format);return r}class d2 extends Error{constructor(e=""){super(e)}}var Dn={Err:d2,_tlv:{encode:(e,t)=>{let{Err:r}=Dn;if(ni(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Qu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Qu(n.length/2|128):"";return Qu(e)+o+n+t},decode(e,t){let{Err:r}=Dn;t=lt(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Dn;if(Sm(e),e<ii)throw new t("integer: negative integers are not allowed");let r=Qu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Dn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return qs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Dn,n=lt(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Dn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Dn._tlv);Object.freeze(Dn._int);Object.freeze(Dn);var ii=BigInt(0),_o=BigInt(1),f2=BigInt(2),Am=BigInt(3),IW=BigInt(4);function p2(e,t={}){let r=Im("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;wn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=h2(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(M,P,z){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:R}=P.toAffine(),O=i.toBytes(I);if(Pi(z,"isCompressed"),z){d();let F=!i.isOdd(R);return ir(m2(F),O)}else return ir(Uint8Array.of(4),O,i.toBytes(R))}function p(M){lt(M,void 0,"Point");let{publicKey:P,publicKeyUncompressed:z}=u,I=M.length,R=M[0],O=M.subarray(1);if(l&&I===1&&R===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(R===2||R===3)){let F=i.fromBytes(O);if(!i.isValid(F))throw Error("bad point: is not on curve, wrong x");let D=b(F),V;try{V=i.sqrt(D)}catch(ue){let T=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+T)}d();let _=i.isOdd(V);if((R&1)===1!==_)V=i.neg(V);return{x:F,y:V}}else if(I===z&&R===4){let F=i.BYTES,D=i.fromBytes(O.subarray(0,F)),V=i.fromBytes(O.subarray(F,F*2));if(!S(D,V))throw Error("bad point: is not on curve");return{x:D,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${z}`)}let y=t.toBytes===void 0?f:t.toBytes,g=t.fromBytes===void 0?p:t.fromBytes;function b(M){let P=i.sqr(M),z=i.mul(P,M);return i.add(i.add(z,i.mul(M,o.a)),o.b)}function S(M,P){let z=i.sqr(P),I=b(M);return i.eql(z,I)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Am),IW),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function N(M,P,z=!1){if(!i.isValid(P)||z&&i.is0(P))throw Error(`bad point coordinate ${M}`);return P}function q(M){if(!(M instanceof L))throw Error("Weierstrass Point expected")}function E(M){if(!c||!c.basises)throw Error("no endo");return EW(M,c.basises,n.ORDER)}function Z(M,P,z,I,R){return z=new L(i.mul(z.X,M),z.Y,z.Z),P=td(I,P),z=td(R,z),P.add(z)}class L{static BASE=new L(o.Gx,o.Gy,i.ONE);static ZERO=new L(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(M,P,z){this.X=N("x",M),this.Y=N("y",P,!0),this.Z=N("z",z),Object.freeze(this)}static CURVE(){return o}static fromAffine(M){let{x:P,y:z}=M||{};if(!M||!i.isValid(P)||!i.isValid(z))throw Error("invalid affine point");if(M instanceof L)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(z))return L.ZERO;return new L(P,z,i.ONE)}static fromBytes(M){let P=L.fromAffine(g(lt(M,void 0,"point")));return P.assertValidity(),P}static fromHex(M){return L.fromBytes(mc(M))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(M=8,P=!0){if(ee.createCache(this,M),!P)this.multiply(Am);return this}assertValidity(){let M=this;if(M.is0()){if(t.allowInfinityPoint&&i.is0(M.X)&&i.eql(M.Y,i.ONE)&&i.is0(M.Z))return;throw Error("bad point: ZERO")}let{x:P,y:z}=M.toAffine();if(!i.isValid(P)||!i.isValid(z))throw Error("bad point: x or y not field elements");if(!S(P,z))throw Error("bad point: equation left != right");if(!M.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:M}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(M)}equals(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.eql(i.mul(P,F),i.mul(R,I)),V=i.eql(i.mul(z,F),i.mul(O,I));return D&&V}negate(){return new L(this.X,i.neg(this.Y),this.Z)}double(){let{a:M,b:P}=o,z=i.mul(P,Am),{X:I,Y:R,Z:O}=this,F=i.ZERO,D=i.ZERO,V=i.ZERO,_=i.mul(I,I),re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(I,R);return T=i.add(T,T),V=i.mul(I,O),V=i.add(V,V),F=i.mul(M,V),D=i.mul(z,ue),D=i.add(F,D),F=i.sub(re,D),D=i.add(re,D),D=i.mul(F,D),F=i.mul(T,F),V=i.mul(z,V),ue=i.mul(M,ue),T=i.sub(_,ue),T=i.mul(M,T),T=i.add(T,V),V=i.add(_,_),_=i.add(V,_),_=i.add(_,ue),_=i.mul(_,T),D=i.add(D,_),ue=i.mul(R,O),ue=i.add(ue,ue),_=i.mul(ue,T),F=i.sub(F,_),V=i.mul(ue,re),V=i.add(V,V),V=i.add(V,V),new L(F,D,V)}add(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=o.a,ue=i.mul(o.b,Am),T=i.mul(P,R),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.add(P,z),Ce=i.add(R,O);Te=i.mul(Te,Ce),Ce=i.add(T,we),Te=i.sub(Te,Ce),Ce=i.add(P,I);let _e=i.add(R,F);return Ce=i.mul(Ce,_e),_e=i.add(T,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,I),D=i.add(O,F),_e=i.mul(_e,D),D=i.add(we,Ee),_e=i.sub(_e,D),_=i.mul(re,Ce),D=i.mul(ue,Ee),_=i.add(D,_),D=i.sub(we,_),_=i.add(we,_),V=i.mul(D,_),we=i.add(T,T),we=i.add(we,T),Ee=i.mul(re,Ee),Ce=i.mul(ue,Ce),we=i.add(we,Ee),Ee=i.sub(T,Ee),Ee=i.mul(re,Ee),Ce=i.add(Ce,Ee),T=i.mul(we,Ce),V=i.add(V,T),T=i.mul(_e,Ce),D=i.mul(Te,D),D=i.sub(D,T),T=i.mul(Te,we),_=i.mul(_e,_),_=i.add(_,T),new L(D,V,_)}subtract(M){return q(M),this.add(M.negate())}is0(){return this.equals(L.ZERO)}multiply(M){let{endo:P}=t;if(!n.isValidNot0(M))throw RangeError("invalid scalar: out of range");let z,I,R=(O)=>ee.cached(this,O,(F)=>Ms(L,F));if(P){let{k1neg:O,k1:F,k2neg:D,k2:V}=E(M),{p:_,f:re}=R(F),{p:ue,f:T}=R(V);I=re.add(T),z=Z(P.beta,_,ue,O,D)}else{let{p:O,f:F}=R(M);z=O,I=F}return Ms(L,[z,I])[0]}multiplyUnsafe(M){let{endo:P}=t,z=this,I=M;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===ii||z.is0())return L.ZERO;if(I===_o)return z;if(ee.hasCache(this))return this.multiply(I);if(P){let{k1neg:R,k1:O,k2neg:F,k2:D}=E(I),{p1:V,p2:_}=c2(L,z,O,D);return Z(P.beta,V,_,R,F)}else return ee.unsafe(z,I)}toAffine(M){let P=this,z=M,{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}isTorsionFree(){let{isTorsionFree:M}=t;if(s===_o)return!0;if(M)return M(L,this);return ee.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:M}=t;if(s===_o)return this;if(M)return M(L,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===_o)return this.is0();return this.clearCofactor().is0()}toBytes(M=!0){return Pi(M,"isCompressed"),this.assertValidity(),y(L,this,M)}toHex(M=!0){return pc(this.toBytes(M))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,ee=new rd(L,t.endo?Math.ceil(H/2):H);if(H>=8)L.BASE.precompute(8);return Object.freeze(L.prototype),Object.freeze(L),L}function m2(e){return Uint8Array.of(e?2:3)}function h2(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function AW(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?gc:t.randomBytes,n=Object.assign(h2(e.Fp,r),{seed:Math.max(T0(r.ORDER),16)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p){return p=p===void 0?i(n.seed):p,r2(lt(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,S=r._lengths;if(!hc(p))return;let A=lt(p,void 0,"key").length,C=A===g||A===b,N=A===y||!!S?.includes(A);if(C&&N)return;return C}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=nd(a,c);return Object.freeze(d),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function g2(e,t,r={}){let i=t;ki(i),wn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?gc:r.randomBytes,o=r.hmac===void 0?(R,O)=>Qn(i,R,O):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y}=AW(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*f2+_o<s.ORDER;function S(R){let O=c>>_o;return R>O}function A(R,O){if(!a.isValidNot0(O))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return O}function C(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function N(R,O){L0(O);let F=y.signature,D=O==="compact"?F:O==="recovered"?F+1:void 0;return lt(R,D)}class q{r;s;recovery;constructor(R,O,F){if(this.r=A("r",R),this.s=A("s",O),F!=null){if(C(),![0,1,2,3].includes(F))throw Error("invalid recovery id");this.recovery=F}Object.freeze(this)}static fromBytes(R,O=g.format){N(R,O);let F;if(O==="der"){let{r:re,s:ue}=Dn.toSig(lt(R));return new q(re,ue)}if(O==="recovered")F=R[0],O="compact",R=R.subarray(1);let D=y.signature/2,V=R.subarray(0,D),_=R.subarray(D,D*2);return new q(a.fromBytes(V),a.fromBytes(_),F)}static fromHex(R,O){return this.fromBytes(mc(R),O)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new q(this.r,this.s,R)}recoverPublicKey(R){let{r:O,s:F}=this,D=this.assertRecovery(),V=D===2||D===3?O+c:O;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let _=s.toBytes(V),re=e.fromBytes(ir(m2((D&1)===0),_)),ue=a.inv(V),T=Z(lt(R,void 0,"msgHash")),we=a.create(-T*ue),Ee=a.create(F*ue),Te=e.BASE.multiplyUnsafe(we).add(re.multiplyUnsafe(Ee));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(R=g.format){if(L0(R),R==="der")return mc(Dn.hexFromSig(this));let{r:O,s:F}=this,D=a.toBytes(O),V=a.toBytes(F);if(R==="recovered")return C(),ir(Uint8Array.of(this.assertRecovery()),D,V);return ir(D,V)}toHex(R){return pc(this.toBytes(R))}}Object.freeze(q.prototype),Object.freeze(q);let E=r.bits2int===void 0?function(O){if(O.length>8192)throw Error("input is too large");let F=qs(O),D=O.length*8-l;return D>0?F>>BigInt(D):F}:r.bits2int,Z=r.bits2int_modN===void 0?function(O){return a.create(E(O))}:r.bits2int_modN,L=Xu(l);function H(R){return Ni("num < 2^"+l,R,ii,L),a.toBytes(R)}function ee(R,O){return lt(R,void 0,"message"),O?lt(i(R),void 0,"prehashed message"):R}function M(R,O,F){let{lowS:D,prehash:V,extraEntropy:_}=z0(F,g);R=ee(R,V);let re=Z(R),ue=a.fromBytes(O);if(!a.isValidNot0(ue))throw Error("invalid private key");let T=[H(ue),H(re)];if(_!=null&&_!==!1){let Ce=_===!0?n(y.secretKey):_;T.push(lt(Ce,void 0,"extraEntropy"))}let we=ir(...T),Ee=re;function Te(Ce){let _e=E(Ce);if(!a.isValidNot0(_e))return;let Pe=a.inv(_e),Ve=e.BASE.multiply(_e).toAffine(),tt=a.create(Ve.x);if(tt===ii)return;let bt=a.create(Pe*a.create(Ee+tt*ue));if(bt===ii)return;let zt=(Ve.x===tt?0:2)|Number(Ve.y&_o),pr=bt;if(D&&S(bt))pr=a.neg(bt),zt^=1;return new q(tt,pr,b?void 0:zt)}return{seed:we,k2sig:Te}}function P(R,O,F={}){let{seed:D,k2sig:V}=M(R,O,F);return ZP(i.outputLen,a.BYTES,o)(D,V).toBytes(F.format)}function z(R,O,F,D={}){let{lowS:V,prehash:_,format:re}=z0(D,g);if(F=lt(F,void 0,"publicKey"),O=ee(O,_),!hc(R)){let ue=R instanceof q?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}N(R,re);try{let ue=q.fromBytes(R,re),T=e.fromBytes(F);if(V&&ue.hasHighS())return!1;let{r:we,s:Ee}=ue,Te=Z(O),Ce=a.inv(Ee),_e=a.create(Te*Ce),Pe=a.create(we*Ce),Ve=e.BASE.multiplyUnsafe(_e).add(T.multiplyUnsafe(Pe));if(Ve.is0())return!1;return a.create(Ve.x)===we}catch(ue){return!1}}function I(R,O,F={}){let{prehash:D}=z0(F,g);return O=ee(O,D),q.fromBytes(R,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y,Point:e,sign:P,verify:z,recoverPublicKey:I,Signature:q,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $W=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var CW=p2($W),xc=g2(CW,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ko=BigInt(0),Mr=BigInt(1),D0=BigInt(2),TW=BigInt(8);function OW(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function y2(e,t={}){let r=t,i=Im("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;wn(r,{},{uvRatio:"function"});let c=D0<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(S){return{isValid:!1,value:ko}}}:r.uvRatio;if(!OW(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(g,b,S=!1){let A=S?Mr:ko;return Ni("coordinate "+g,b,A,c),b}function f(g){if(!(g instanceof p))throw Error("EdwardsPoint expected")}class p{static BASE=new p(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new p(ko,Mr,Mr,ko);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,S,A){this.X=d("x",g),this.Y=d("y",b),this.Z=d("z",S,!0),this.T=d("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof p)throw Error("extended point not allowed");let{x:b,y:S}=g||{};return d("x",b),d("y",S),new p(b,S,Mr,l(b*S))}static fromBytes(g,b=!1){let S=n.BYTES,{a:A,d:C}=s;g=So(lt(g,S,"point")),Pi(b,"zip215");let N=So(g),q=g[S-1];N[S-1]=q&-129;let E=Ln(N),Z=b?c:n.ORDER;Ni("point.y",E,ko,Z);let L=l(E*E),H=l(L-Mr),ee=l(C*L-A),{isValid:M,value:P}=u(H,ee);if(!M)throw Error("bad point: invalid y coordinate");let z=(P&Mr)===Mr,I=(q&128)!==0;if(!b&&P===ko&&I)throw Error("bad point: x=0 and x_0=1");if(I!==z)P=l(-P);return p.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return p.fromBytes(mc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(D0);return this}assertValidity(){let g=this,{a:b,d:S}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:N,T:q}=g,E=l(A*A),Z=l(C*C),L=l(N*N),H=l(L*L),ee=l(E*b),M=l(L*l(ee+Z)),P=l(H+l(S*l(E*Z)));if(M!==P)throw Error("bad point: equation left != right (1)");let z=l(A*C),I=l(N*q);if(z!==I)throw Error("bad point: equation left != right (2)")}equals(g){f(g);let{X:b,Y:S,Z:A}=this,{X:C,Y:N,Z:q}=g,E=l(b*q),Z=l(C*A),L=l(S*q),H=l(N*A);return E===Z&&L===H}is0(){return this.equals(p.ZERO)}negate(){return new p(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:S,Z:A}=this,C=l(b*b),N=l(S*S),q=l(D0*l(A*A)),E=l(g*C),Z=b+S,L=l(l(Z*Z)-C-N),H=E+N,ee=H-q,M=E-N,P=l(L*ee),z=l(H*M),I=l(L*M),R=l(ee*H);return new p(P,z,R,I)}add(g){f(g);let{a:b,d:S}=s,{X:A,Y:C,Z:N,T:q}=this,{X:E,Y:Z,Z:L,T:H}=g,ee=l(A*E),M=l(C*Z),P=l(q*S*H),z=l(N*L),I=l((A+C)*(E+Z)-ee-M),R=z-P,O=z+P,F=l(M-b*ee),D=l(I*R),V=l(O*F),_=l(I*F),re=l(R*O);return new p(D,V,re,_)}subtract(g){return f(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:S}=y.cached(this,g,(A)=>Ms(p,A));return Ms(p,[b,S])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===ko)return p.ZERO;if(this.is0()||g===Mr)return this;return y.unsafe(this,g,(b)=>Ms(p,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,S=g,{X:A,Y:C,Z:N}=b,q=b.is0();if(S==null)S=q?TW:n.inv(N);let E=l(A*S),Z=l(C*S),L=n.mul(N,S);if(q)return{x:ko,y:Mr};if(L!==Mr)throw Error("invZ was invalid");return{x:E,y:Z}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),S=n.toBytes(b);return S[S.length-1]|=g&Mr?128:0,S}toHex(){return pc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new rd(p,o.BITS);if(o.BITS>=8)p.BASE.precompute(8);return Object.freeze(p.prototype),Object.freeze(p),p}class B0{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){I0()}static fromHex(e){I0()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return pc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var od=BigInt(0),wc=BigInt(1),$m=BigInt(2);function RW(e){return wn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function b2(e){let t=RW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?gc:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?$m**BigInt(254):$m**BigInt(447),y=a?BigInt(8)*$m**BigInt(251)-wc:BigInt(4)*$m**BigInt(445)-wc,g=p+y+wc,b=(I)=>mt(I,r),S=A(d);function A(I){return Yu(b(I),u)}function C(I){let R=So(lt(I,u,"uCoordinate"));if(a)R[31]&=127;return b(Ln(R))}function N(I){return Ln(n(So(lt(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===od)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Ni("u",I,od,r),Ni("scalar",R,p,g);let O=R,F=I,D=wc,V=od,_=I,re=wc,ue=od;for(let we=BigInt(l-1);we>=od;we--){let Ee=O>>we&wc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,lt(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze(M),Object.freeze(z),Object.freeze({keygen:nd(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PW=BigInt(0),Li=BigInt(1),x2=BigInt(2),NW=BigInt(3),zW=BigInt(5),LW=BigInt(8),Zs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),M0=(()=>({p:Zs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:LW,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function S2(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Zs,a=e*e%o*e%o,c=vn(a,x2,o)*a%o,l=vn(c,Li,o)*e%o,u=vn(l,zW,o)*l%o,d=vn(u,t,o)*u%o,f=vn(d,r,o)*d%o,p=vn(f,i,o)*f%o,y=vn(p,n,o)*p%o,g=vn(y,n,o)*p%o,b=vn(g,t,o)*u%o;return{pow_p_5_8:vn(b,x2,o)*e%o,b2:a}}function DW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var q0=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function F0(e,t){let r=Zs,i=mt(t*t*t,r),n=mt(i*i*t,r),o=S2(e*n).pow_p_5_8,s=mt(e*i*o,r),a=mt(t*s*s,r),c=s,l=mt(s*q0,r),u=a===e,d=a===mt(-e,r),f=a===mt(-e*q0,r);if(u)s=c;if(d||f)s=l;if(zi(s,r))s=mt(-s,r);return{isValid:u||d,value:s}}var Fs=y2(M0,{uvRatio:F0}),Eo=(()=>Fs.Fp)(),_2=(()=>Fs.Fn)();var Cm=(()=>{let e=Zs;return b2({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=S2(t);return mt(vn(r,NW,e)*i,e)},adjustScalarBytes:DW})})();var j0=q0,BW=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),qW=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),jW=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),UW=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),w2=(e)=>F0(Li,e),MW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),U0=(e)=>Eo.create(Ln(e)&MW);function v2(e){let{d:t}=M0,r=Zs,i=(S)=>Eo.create(S),n=i(j0*e*e),o=i((n+Li)*jW),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=F0(o,a),u=i(l*e);if(!zi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let d=i(s*(n-Li)*UW-a),f=l*l,p=i((l+l)*a),y=i(d*BW),g=i(Li-f),b=i(Li+f);return new Fs(i(p*b),i(g*y),i(y*b),i(p*g))}class Tr extends B0{static BASE=(()=>new Tr(Fs.BASE))();static ZERO=(()=>new Tr(Fs.ZERO))();static Fp=(()=>Eo)();static Fn=(()=>_2)();constructor(e){super(e)}static fromAffine(e){return new Tr(Fs.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){er(e,32);let{a:t,d:r}=M0,i=Zs,n=(C)=>Eo.create(C),o=U0(e);if(!FP(Eo.toBytes(o),e)||zi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Li+t*s),c=n(Li-t*s),l=n(a*a),u=n(c*c),d=n(t*r*l-u),{isValid:f,value:p}=w2(n(d*u)),y=n(p*c),g=n(p*y*d),b=n((o+o)*y);if(zi(b,i))b=n(-b);let S=n(a*g),A=n(b*S);if(!f||zi(A,i)||S===PW)throw Error("invalid ristretto255 encoding 2");return new Tr(new Fs(b,S,Li,A))}static fromHex(e){return Tr.fromBytes(Au(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Zs,o=(g)=>Eo.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=w2(o(s*c)),u=o(l*s),d=o(l*a),f=o(u*d*i),p;if(zi(i*f,n)){let g=o(t*j0),b=o(e*j0);e=g,t=b,p=o(u*qW)}else p=d;if(zi(e*f,n))t=o(-t);let y=o((r-t)*p);if(zi(y,n))y=o(-y);return Eo.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Eo.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var FW=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=N0(e,r,64,Kp);return FW.deriveToCurve(i)},hashToScalar(e,t={DST:l2}){let r=N0(e,t.DST,64,Kp);return _2.create(Ln(r))},deriveToCurve(e){er(e,64);let t=U0(e.subarray(0,32)),r=v2(t),i=U0(e.subarray(32,64)),n=v2(i);return new Tr(r.add(n))}});var k2=!1,ZW=!1;async function E2(e,t){if(ZW)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Tm(e,t){return await E2(async()=>{let r=Z0(e)?e:await JW(e),i=await crypto.subtle.importKey("raw",KW(t),{name:"X25519"},k2,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMult(e,t)})}async function sd(e){return await E2(async()=>Tm(e,Cm.GuBytes),()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMultBase(e)})}var HW=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function JW(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...HW,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},k2,["deriveBits"])}function Z0(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function KW(e){return e}class H0{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),WW(Hs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Hs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Hs(this.transcript)}}}function WW(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Hs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function vc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Om(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function J0(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function I2(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function A2(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Hs(i),s=o.subarray(0,t),a=vc(e,o.subarray(t));return{data:s,rest:a}}class oi{args;body;constructor(e,t){this.args=e,this.body=t}}async function GW(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=hr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Hs(i);return{s:new oi(r,n)}}async function $2(e){let t=new H0(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await GW(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=hr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:vc(e,a)}}}function K0(e){let t=[];t.push(`age-encryption.org/v1
|
|
769
|
+
`)}function CO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function wt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Iu(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var jp={name:"@rizom/ops",version:"0.2.0-alpha.383",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as aG,mkdirSync as cG,readFileSync as dw,writeFileSync as fw}from"fs";import{dirname as lG,join as D2}from"path";function Ex(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Tt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function er(e,t,r=""){let i=Ex(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function ki(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Tt(e.outputLen),Tt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function tc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Up(e,t){er(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Mp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ar(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var NV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function zV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function LV(e){for(let t=0;t<e.length;t++)e[t]=zV(e[t]);return e}var Ix=NV?(e)=>e:LV,OO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),DV=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Fp(e){if(er(e),OO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=DV[e[r]];return t}var _i={_0:48,_9:57,A:65,F:70,a:97,f:102};function TO(e){if(e>=_i._0&&e<=_i._9)return e-_i._0;if(e>=_i.A&&e<=_i.F)return e-(_i.A-10);if(e>=_i.a&&e<=_i.f)return e-(_i.a-10);return}function Au(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(OO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=TO(e.charCodeAt(o)),a=TO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function BV(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function Ax(e,t=""){if(typeof e==="string")return BV(e);return er(e,void 0,t)}function $x(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];er(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Zp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function Cx(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ei(e=32){Tt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var Tx=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ox{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(ki(e),er(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ar(i)}update(e){return tc(this),this.iHash.update(e),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Qn=(()=>{let e=(t,r,i)=>new Ox(t,r).update(i).digest();return e.create=(t,r)=>new Ox(t,r),e})();function $u(e,t,r){if(ki(e),r===void 0)r=new Uint8Array(e.outputLen);return Qn(e,r,t)}var Rx=Uint8Array.of(0),RO=Uint8Array.of();function Px(e,t,r,i=32){ki(e),Tt(i,"length"),er(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=RO;else er(r,void 0,"info");let s=new Uint8Array(o*n),a=Qn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Rx[0]=u+1,c.update(u===0?RO:l).update(r).update(Rx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ar(l,Rx),s.slice(0,i)}var ao=(e,t,r,i,n)=>Px(e,$u(e,t,r),i,n);function PO(e,t,r){return e&t^~e&r}function NO(e,t,r){return e&t^e&r^t&r}class Hp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=rc(this.buffer)}update(e){tc(this),er(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=rc(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ar(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=rc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ii=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var tr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Jp=BigInt(4294967295),zO=BigInt(32);function qV(e,t=!1){if(t)return{h:Number(e&Jp),l:Number(e>>zO&Jp)};return{h:Number(e>>zO&Jp)|0,l:Number(e&Jp)|0}}function LO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=qV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var Nx=(e,t,r)=>e>>>r,zx=(e,t,r)=>e<<32-r|t>>>r,Es=(e,t,r)=>e>>>r|t<<32-r,Is=(e,t,r)=>e<<32-r|t>>>r,Cu=(e,t,r)=>e<<64-r|t>>>r-32,Tu=(e,t,r)=>e>>>r-32|t<<64-r;function Yn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var DO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),BO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,qO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),jO=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,UO=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),MO=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var UV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),co=new Uint32Array(64);class FO extends Hp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)co[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=co[u-15],f=co[u-2],p=Pn(d,7)^Pn(d,18)^d>>>3,y=Pn(f,17)^Pn(f,19)^f>>>10;co[u]=y+co[u-7]+p+co[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Pn(s,6)^Pn(s,11)^Pn(s,25),f=l+d+PO(s,a,c)+UV[u]+co[u]|0,y=(Pn(r,2)^Pn(r,13)^Pn(r,22))+NO(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ar(co)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ar(this.buffer)}}class ZO extends FO{A=Ii[0]|0;B=Ii[1]|0;C=Ii[2]|0;D=Ii[3]|0;E=Ii[4]|0;F=Ii[5]|0;G=Ii[6]|0;H=Ii[7]|0;constructor(){super(32)}}var HO=(()=>LO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),MV=(()=>HO[0])(),FV=(()=>HO[1])(),lo=new Uint32Array(80),uo=new Uint32Array(80);class JO extends Hp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)lo[A]=e.getUint32(t),uo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=lo[A-15]|0,N=uo[A-15]|0,q=Es(C,N,1)^Es(C,N,8)^Nx(C,N,7),E=Is(C,N,1)^Is(C,N,8)^zx(C,N,7),Z=lo[A-2]|0,L=uo[A-2]|0,H=Es(Z,L,19)^Cu(Z,L,61)^Nx(Z,L,6),ee=Is(Z,L,19)^Tu(Z,L,61)^zx(Z,L,6),M=qO(E,ee,uo[A-7],uo[A-16]),P=jO(M,q,H,lo[A-7],lo[A-16]);lo[A]=P|0,uo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Es(u,d,14)^Es(u,d,18)^Cu(u,d,41),N=Is(u,d,14)^Is(u,d,18)^Tu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=UO(S,N,E,FV[A],uo[A]),L=MO(Z,b,C,q,MV[A],lo[A]),H=Z|0,ee=Es(r,i,28)^Cu(r,i,34)^Cu(r,i,39),M=Is(r,i,28)^Tu(r,i,34)^Tu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=Yn(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=DO(H,M,z);r=BO(I,L,ee,P),i=I|0}({h:r,l:i}=Yn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Yn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Yn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Yn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=Yn(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=Yn(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=Yn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=Yn(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ar(lo,uo)}destroy(){this.destroyed=!0,Ar(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class KO extends JO{Ah=tr[0]|0;Al=tr[1]|0;Bh=tr[2]|0;Bl=tr[3]|0;Ch=tr[4]|0;Cl=tr[5]|0;Dh=tr[6]|0;Dl=tr[7]|0;Eh=tr[8]|0;El=tr[9]|0;Fh=tr[10]|0;Fl=tr[11]|0;Gh=tr[12]|0;Gl=tr[13]|0;Hh=tr[14]|0;Hl=tr[15]|0;constructor(){super(64)}}var Ot=Cx(()=>new ZO,Tx(1));var Kp=Cx(()=>new KO,Tx(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Yp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Bx(e){if(!Yp(e))throw TypeError("Uint8Array expected")}function YO(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function XO(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function fo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Ru(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Wp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Gp(e,t){if(!YO(!0,t))throw TypeError(`${e}: array of strings expected`)}function qx(e,t){if(!YO(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Yr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Xr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Gp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Wp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Wp(n),n.map((o)=>{fo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function en(e=""){return fo("join",e),{encode:(t)=>(Gp("join.decode",t),t.join(e)),decode:(t)=>(fo("join.decode",t),t.split(e))}}function Xp(e,t="="){return Ru(e),fo("padding",t),{encode(r){Gp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Gp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function eR(e){return XO(e),{encode:(t)=>t,decode:(t)=>e(t)}}function VO(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Wp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Ru(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,f=d+u;if(!Number.isSafeInteger(f)||d/t!==a||f-u!==d)throw Error("convertRadix: carry overflow");let p=f/r;a=f%r;let y=Math.floor(p);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==f)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var tR=(e,t)=>t===0?e:tR(t,e%t),Qp=(e,t)=>e+(t-tR(e,t)),Vp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Lx(e,t,r,i){if(Wp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Qp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Qp(t,r)}`);let n=0,o=0,s=Vp[t],a=Vp[r]-1,c=[];for(let l of e){if(Ru(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Vp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function ZV(e){Ru(e);let t=256;return{encode:(r)=>{if(!Yp(r))throw TypeError("radix.encode input should be Uint8Array");return VO(Array.from(r),t,e)},decode:(r)=>(qx("radix.decode",r),Uint8Array.from(VO(r,e,t)))}}function gn(e,t=!1){if(Ru(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Qp(8,e)>32||Qp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Yp(r))throw TypeError("radix2.encode input should be Uint8Array");return Lx(Array.from(r),8,e,!t)},decode:(r)=>(qx("radix2.decode",r),Uint8Array.from(Lx(r,e,8,t)))}}function WO(e){return XO(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var MSe=Object.freeze(Yr(gn(4),Xr("0123456789ABCDEF"),en(""))),FSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Xp(5),en(""))),ZSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),en(""))),HSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Xp(5),en(""))),JSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),en(""))),KSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),en(""),eR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),rR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),HV=/[\t\n\f\r ]/,nR=(e,t)=>{fo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&HV.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},jx=Object.freeze(rR?{encode(e){return Bx(e),e.toBase64()},decode(e){return nR(e,!1)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Xp(6),en(""))),hr=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),en(""))),VSe=Object.freeze(rR?{encode(e){return Bx(e),e.toBase64({alphabet:"base64url"})},decode(e){return nR(e,!0)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Xp(6),en(""))),WSe=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),en(""))),Ux=(e)=>Yr(ZV(58),Xr(e),en("")),GSe=Object.freeze(Ux("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),QSe=Object.freeze(Ux("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),YSe=Object.freeze(Ux("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Dx=Yr(Xr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),en("")),GO=[996825010,642813549,513874426,1027748829,705979059];function Ou(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<GO.length;i++)if((t>>i&1)===1)r^=GO[i];return r}function QO(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Ou(n)^s>>5}n=Ou(n);for(let o=0;o<i;o++)n=Ou(n)^e.charCodeAt(o)&31;for(let o of t)n=Ou(n)^o;for(let o=0;o<6;o++)n=Ou(n);return n^=r,Dx.encode(Lx([n%Vp[30]],30,5,!1))}function iR(e){let t=e==="bech32"?1:734539939,r=gn(5),i=r.decode,n=r.encode,o=WO(i);function s(d,f,p=90){if(fo("bech32.encode prefix",d),Yp(f))f=Array.from(f);qx("bech32.encode",f);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+f.length;if(p!==!1&&g>p)throw TypeError(`Length ${g} exceeds limit ${p}`);let b=d.toLowerCase(),S=QO(b,f,t);return`${b}1${Dx.encode(f)}${S}`}function a(d,f=90){fo("bech32.decode input",d);let p=d.length;if(p<8||f!==!1&&p>f)throw TypeError(`invalid string length: ${p} (${d}). Expected (8..${f})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),S=y.slice(g+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let A=Dx.decode(S).slice(0,-6),C=QO(b,A,t);if(!S.endsWith(C))throw Error(`Invalid checksum in ${d}: expected "${C}"`);return{prefix:b,words:A}}let c=WO(a);function l(d){let{prefix:f,words:p}=a(d,!1);return{prefix:f,words:p,bytes:i(p)}}function u(d,f){return s(d,n(f))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var tn=Object.freeze(iR("bech32")),XSe=Object.freeze(iR("bech32m"));var JV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),KV={encode(e){return Bx(e),e.toHex()},decode(e){return fo("hex",e),Uint8Array.fromHex(e)}},e_e=Object.freeze(JV?KV:Yr(gn(4),Xr("0123456789abcdef"),en(""),eR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function WV(e,t,r,i){ki(e);let n=Zp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Tt(o,"c"),Tt(s,"dkLen"),Tt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=Ax(t,"password"),l=Ax(r,"salt"),u=new Uint8Array(s),d=Qn.create(e,c),f=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:f}}function GV(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Ar(n),r}function Mx(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=WV(e,t,r,i),l,u=new Uint8Array(4),d=rc(u),f=new Uint8Array(a.outputLen);for(let p=1,y=0;y<o;p++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);d.setInt32(0,p,!1),(l=c._cloneInto(l)).update(u).digestInto(f),g.set(f.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(f).digestInto(f);for(let S=0;S<g.length;S++)g[S]^=f[S]}}return GV(a,c,s,l,f)}function oR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],d=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],S=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],N=e[t++]^r[i++],q=e[t++]^r[i++],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let ue=0;ue<8;ue+=2)ee^=Xe(E+D|0,7),I^=Xe(ee+E|0,9),D^=Xe(I+ee|0,13),E^=Xe(D+I|0,18),R^=Xe(M+Z|0,7),V^=Xe(R+M|0,9),Z^=Xe(V+R|0,13),M^=Xe(Z+V|0,18),_^=Xe(O+P|0,7),L^=Xe(_+O|0,9),P^=Xe(L+_|0,13),O^=Xe(P+L|0,18),H^=Xe(re+F|0,7),z^=Xe(H+re|0,9),F^=Xe(z+H|0,13),re^=Xe(F+z|0,18),Z^=Xe(E+H|0,7),L^=Xe(Z+E|0,9),H^=Xe(L+Z|0,13),E^=Xe(H+L|0,18),P^=Xe(M+ee|0,7),z^=Xe(P+M|0,9),ee^=Xe(z+P|0,13),M^=Xe(ee+z|0,18),F^=Xe(O+R|0,7),I^=Xe(F+O|0,9),R^=Xe(I+F|0,13),O^=Xe(R+I|0,18),D^=Xe(re+_|0,7),V^=Xe(D+re|0,9),_^=Xe(V+D|0,13),re^=Xe(_+V|0,18);n[o++]=s+E|0,n[o++]=a+Z|0,n[o++]=c+L|0,n[o++]=l+H|0,n[o++]=u+ee|0,n[o++]=d+M|0,n[o++]=f+P|0,n[o++]=p+z|0,n[o++]=y+I|0,n[o++]=g+R|0,n[o++]=b+O|0,n[o++]=S+F|0,n[o++]=A+D|0,n[o++]=C+V|0,n[o++]=N+_|0,n[o++]=q+re|0}function Fx(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(oR(r,s,e,t,r,o),a>0)s+=16;oR(r,o,e,t+=16,r,s)}}function QV(e,t,r){let i=Zp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Tt(n,"N"),Tt(o,"r"),Tt(s,"p"),Tt(a,"dkLen"),Tt(c,"asyncTick"),Tt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,f=d/4,p=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>p)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(p-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(p-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=Mx(Ot,e,t,{c:1,dkLen:d*s}),b=Mp(g),S=Mp(new Uint8Array(d*n)),A=Mp(new Uint8Array(d)),C=()=>{};if(u){let N=2*n*s,q=Math.max(Math.floor(N/1e4),1),E=0;C=()=>{if(E++,u&&(!(E%q)||E===N))u(E/N)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:f,V:S,B32:b,B:g,tmp:A,blockMixCb:C,asyncTick:c}}function YV(e,t,r,i,n){let o=Mx(Ot,e,r,{c:1,dkLen:t});return Ar(r,i,n),o}function Zx(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:f}=QV(e,t,r);Ix(l);for(let p=0;p<o;p++){let y=a*p;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)Fx(c,b,c,b+=a,n),f();Fx(c,(i-1)*a,l,y,n),f();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let S=0;S<a;S++)d[S]=l[y+S]^c[b*a+S];Fx(d,0,l,y,n),f()}}return Ix(l),YV(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function XV(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function em(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function nc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Mt(e,t,r=""){let i=XV(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Hx(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function sR(e,t,r=!1){Mt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!ic(e))throw Error("invalid output, must be aligned")}function Xn(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Nn(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function e7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var As=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),t7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var r7=(e)=>{for(let t=0;t<e.length;t++)e[t]=t7(e[t]);return e},Ai=As?(e)=>e:r7;function aR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function cR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function lR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var uR=(e,t)=>{function r(i,...n){if(Mt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Mt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Mt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Mt(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Mt(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Mt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(r,e),r};function Pu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Mt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!ic(t))throw Error("invalid output, must be aligned");return t}function dR(e,t,r){nc(e),nc(t),em(r);let i=new Uint8Array(16),n=e7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function ic(e){return e.byteOffset%4===0}function oc(e){return Uint8Array.from(Mt(e))}var pR=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),n7=(()=>Ai(Xn(pR("expand 16-byte k"))))(),i7=(()=>Ai(Xn(pR("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var Nu=64,o7=16,Jx=(()=>4294967295)(),fR=Uint32Array.of();function s7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Nu),u=Xn(l),d=As&&ic(n)&&ic(o),f=d?Xn(n):fR,p=d?Xn(o):fR;if(!As){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ai(u),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);if(d&&g===Nu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let S=0,A;S<o7;S++)A=b+S,p[A]=f[A]^u[S];y+=Nu;continue}for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}}function mR(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=aR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return nc(n),nc(s),em(o),em(r),(a,c,l,u,d=0)=>{Mt(a,void 0,"key"),Mt(c,void 0,"nonce"),Mt(l,void 0,"data");let f=l.length;if(u=Pu(f,u,!1),nc(d),d<0||d>=Jx)throw Error("arx: counter overflow");let p=[],y=a.length,g,b;if(y===32)p.push(g=oc(a)),b=i7;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=n7,p.push(g);else throw Mt(a,32,"arx key"),Error("invalid key size");if(!As||!ic(c))p.push(c=oc(c));let S=Xn(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let N=c.subarray(0,16);if(As)i(b,S,Xn(N),S);else{let q=Ai(Uint32Array.from(b));i(q,S,Xn(N),S),Nn(q),Ai(S)}c=c.subarray(16)}else if(!As)Ai(S);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let N=new Uint8Array(12);N.set(c,o?0:12-c.length),c=N,p.push(c)}let C=Ai(Xn(c));try{return s7(e,b,S,C,l,u,d,s),u}finally{Nn(...p)}}}function rr(e,t){return e[t++]&255|(e[t++]&255)<<8}class hR{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=oc(Mt(e,32,"key"));let t=rr(e,0),r=rr(e,2),i=rr(e,4),n=rr(e,6),o=rr(e,8),s=rr(e,10),a=rr(e,12),c=rr(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=rr(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],f=o[6],p=o[7],y=o[8],g=o[9],b=rr(e,t+0),S=rr(e,t+2),A=rr(e,t+4),C=rr(e,t+6),N=rr(e,t+8),q=rr(e,t+10),E=rr(e,t+12),Z=rr(e,t+14),L=n[0]+(b&8191),H=n[1]+((b>>>13|S<<3)&8191),ee=n[2]+((S>>>10|A<<6)&8191),M=n[3]+((A>>>7|C<<9)&8191),P=n[4]+((C>>>4|N<<12)&8191),z=n[5]+(N>>>1&8191),I=n[6]+((N>>>14|q<<2)&8191),R=n[7]+((q>>>11|E<<5)&8191),O=n[8]+((E>>>8|Z<<8)&8191),F=n[9]+(Z>>>5|i),D=0,V=D+L*s+H*(5*g)+ee*(5*y)+M*(5*p)+P*(5*f);D=V>>>13,V&=8191,V+=z*(5*d)+I*(5*u)+R*(5*l)+O*(5*c)+F*(5*a),D+=V>>>13,V&=8191;let _=D+L*a+H*s+ee*(5*g)+M*(5*y)+P*(5*p);D=_>>>13,_&=8191,_+=z*(5*f)+I*(5*d)+R*(5*u)+O*(5*l)+F*(5*c),D+=_>>>13,_&=8191;let re=D+L*c+H*a+ee*s+M*(5*g)+P*(5*y);D=re>>>13,re&=8191,re+=z*(5*p)+I*(5*f)+R*(5*d)+O*(5*u)+F*(5*l),D+=re>>>13,re&=8191;let ue=D+L*l+H*c+ee*a+M*s+P*(5*g);D=ue>>>13,ue&=8191,ue+=z*(5*y)+I*(5*p)+R*(5*f)+O*(5*d)+F*(5*u),D+=ue>>>13,ue&=8191;let T=D+L*u+H*l+ee*c+M*a+P*s;D=T>>>13,T&=8191,T+=z*(5*g)+I*(5*y)+R*(5*p)+O*(5*f)+F*(5*d),D+=T>>>13,T&=8191;let we=D+L*d+H*u+ee*l+M*c+P*a;D=we>>>13,we&=8191,we+=z*s+I*(5*g)+R*(5*y)+O*(5*p)+F*(5*f),D+=we>>>13,we&=8191;let Ee=D+L*f+H*d+ee*u+M*l+P*c;D=Ee>>>13,Ee&=8191,Ee+=z*a+I*s+R*(5*g)+O*(5*y)+F*(5*p),D+=Ee>>>13,Ee&=8191;let Te=D+L*p+H*f+ee*d+M*u+P*l;D=Te>>>13,Te&=8191,Te+=z*c+I*a+R*s+O*(5*g)+F*(5*y),D+=Te>>>13,Te&=8191;let Ce=D+L*y+H*p+ee*f+M*d+P*u;D=Ce>>>13,Ce&=8191,Ce+=z*l+I*c+R*a+O*s+F*(5*g),D+=Ce>>>13,Ce&=8191;let _e=D+L*g+H*y+ee*p+M*f+P*d;D=_e>>>13,_e&=8191,_e+=z*u+I*l+R*c+O*a+F*s,D+=_e>>>13,_e&=8191,D=(D<<2)+D|0,D=D+V|0,V=D&8191,D=D>>>13,_+=D,n[0]=V,n[1]=_,n[2]=re,n[3]=ue,n[4]=T,n[5]=we,n[6]=Ee,n[7]=Te,n[8]=Ce,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;Nn(r)}update(e){Hx(this),Mt(e),e=oc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,Nn(this.h,this.r,this.buffer,this.pad)}digestInto(e){Hx(this),sR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var gR=lR(32,(e)=>new hR(e));function a7(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],f=t[2],p=t[3],y=t[4],g=t[5],b=t[6],S=t[7],A=n,C=r[0],N=r[1],q=r[2],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let T=0;T<o;T+=2)E=E+ee|0,D=et(D^E,16),I=I+D|0,ee=et(ee^I,12),E=E+ee|0,D=et(D^E,8),I=I+D|0,ee=et(ee^I,7),Z=Z+M|0,V=et(V^Z,16),R=R+V|0,M=et(M^R,12),Z=Z+M|0,V=et(V^Z,8),R=R+V|0,M=et(M^R,7),L=L+P|0,_=et(_^L,16),O=O+_|0,P=et(P^O,12),L=L+P|0,_=et(_^L,8),O=O+_|0,P=et(P^O,7),H=H+z|0,re=et(re^H,16),F=F+re|0,z=et(z^F,12),H=H+z|0,re=et(re^H,8),F=F+re|0,z=et(z^F,7),E=E+M|0,re=et(re^E,16),O=O+re|0,M=et(M^O,12),E=E+M|0,re=et(re^E,8),O=O+re|0,M=et(M^O,7),Z=Z+P|0,D=et(D^Z,16),F=F+D|0,P=et(P^F,12),Z=Z+P|0,D=et(D^Z,8),F=F+D|0,P=et(P^F,7),L=L+z|0,V=et(V^L,16),I=I+V|0,z=et(z^I,12),L=L+z|0,V=et(V^L,8),I=I+V|0,z=et(z^I,7),H=H+ee|0,_=et(_^H,16),R=R+_|0,ee=et(ee^R,12),H=H+ee|0,_=et(_^H,8),R=R+_|0,ee=et(ee^R,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+Z|0,i[ue++]=c+L|0,i[ue++]=l+H|0,i[ue++]=u+ee|0,i[ue++]=d+M|0,i[ue++]=f+P|0,i[ue++]=p+z|0,i[ue++]=y+I|0,i[ue++]=g+R|0,i[ue++]=b+O|0,i[ue++]=S+F|0,i[ue++]=A+D|0,i[ue++]=C+V|0,i[ue++]=N+_|0,i[ue++]=q+re|0}var c7=mR(a7,{counterRight:!1,counterLength:4,allowShortKeys:!1});var l7=new Uint8Array(16),yR=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(l7.subarray(r))},u7=new Uint8Array(32);function bR(e,t,r,i,n){if(n!==void 0)Mt(n,void 0,"AAD");let o=e(t,r,u7),s=dR(i.length,n?n.length:0,!0),a=gR.create(o);if(n)yR(a,n);yR(a,i),a.update(s);let c=a.digest();return Nn(o,s),c}var d7=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Pu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=bR(e,t,r,c,i);return s.set(l,a),Nn(l),s},decrypt(o,s){s=Pu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=bR(e,t,r,a,i);if(!cR(c,l))throw Nn(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),Nn(l),s}}),yn=uR({blockSize:64,nonceLength:12,tagLength:16},d7(c7));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function sc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Vt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Ne(e,t,r=""){let i=sc(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function bn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Vt(e.outputLen),Vt(e.blockLen)}function Ci(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function tm(e,t){Ne(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function rm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ur(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function nm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function zn(e,t){return e<<32-t|e>>>t}var f7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function p7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function m7(e){for(let t=0;t<e.length;t++)e[t]=p7(e[t]);return e}var Kx=f7?(e)=>e:m7,wR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),h7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function $s(e){if(Ne(e),wR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=h7[e[r]];return t}var $i={_0:48,_9:57,A:65,F:70,a:97,f:102};function xR(e){if(e>=$i._0&&e<=$i._9)return e-$i._0;if(e>=$i.A&&e<=$i.F)return e-($i.A-10);if(e>=$i.a&&e<=$i.f)return e-($i.a-10);return}function Cs(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(wR)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=xR(e.charCodeAt(o)),a=xR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Lt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Ne(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function ac(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function po(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var mo=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wx=BigInt(0),Vx=BigInt(1);function zu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function vR(e){if(typeof e==="bigint"){if(!im(e))throw Error("positive bigint expected, got "+e)}else Vt(e);return e}function Lu(e){let t=vR(e).toString(16);return t.length&1?"0"+t:t}function SR(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Wx:BigInt("0x"+e)}function ho(e){return SR($s(e))}function go(e){return SR($s(om(Ne(e)).reverse()))}function cc(e,t){Vt(t),e=vR(e);let r=Cs(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Du(e,t){return cc(e,t).reverse()}function om(e){return Uint8Array.from(e)}function yo(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var im=(e)=>typeof e==="bigint"&&Wx<=e;function g7(e,t,r){return im(e)&&im(t)&&im(r)&&t<=e&&e<r}function Bu(e,t,r,i){if(!g7(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function Gx(e){let t;for(t=0;e>Wx;e>>=Vx,t+=1);return t}var qu=(e)=>(Vx<<BigInt(e))-Vx;function _R(e,t,r){if(Vt(e,"hashLen"),Vt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,Lt(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return Lt(...S)};return(b,S)=>{d(),p(b);let A=void 0;while(!(A=S(y())))p();return d(),A}}function Ts(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function Qx(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),gr=BigInt(1),Os=BigInt(2),IR=BigInt(3),AR=BigInt(4),$R=BigInt(5),y7=BigInt(7),CR=BigInt(8),b7=BigInt(9),TR=BigInt(16);function $r(e,t){let r=e%t;return r>=Cr?r:t+r}function xn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function kR(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=$r(e,t),i=t,n=Cr,o=gr,s=gr,a=Cr;while(r!==Cr){let l=i/r,u=i%r,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==gr)throw Error("invert: does not exist");return $r(n,t)}function Yx(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function OR(e,t){let r=(e.ORDER+gr)/AR,i=e.pow(t,r);return Yx(e,i,t),i}function x7(e,t){let r=(e.ORDER-$R)/CR,i=e.mul(t,Os),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Os),n),a=e.mul(o,e.sub(s,e.ONE));return Yx(e,a,t),a}function w7(e){let t=sm(e),r=RR(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+y7)/TR;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,n),f=a.mul(l,o),p=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,p),u=a.cmov(f,d,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return Yx(a,b,c),b}}function RR(e){if(e<IR)throw Error("sqrt is not defined for small field");let t=e-gr,r=0;while(t%Os===Cr)t/=Os,r++;let i=Os,n=sm(e);while(ER(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return OR;let o=n.pow(i,t),s=(t+gr)/Os;return function(c,l){if(c.is0(l))return l;if(ER(c,l)!==1)throw Error("Cannot find square root");let u=r,d=c.mul(c.ONE,o),f=c.pow(l,t),p=c.pow(l,s);while(!c.eql(f,c.ONE)){if(c.is0(f))return c.ZERO;let y=1,g=c.sqr(f);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=gr<<BigInt(u-y-1),S=c.pow(d,b);u=y,d=c.sqr(S),f=c.mul(f,d),p=c.mul(p,S)}return p}}function v7(e){if(e%AR===IR)return OR;if(e%CR===$R)return x7;if(e%TR===b7)return w7(e);return RR(e)}var S7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Xx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=S7.reduce((i,n)=>(i[n]="function",i),t);return Ts(e,r),e}function _7(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===gr)return t;let i=e.ONE,n=t;while(r>Cr){if(r&gr)i=e.mul(i,n);n=e.sqr(n),r>>=gr}return i}function ju(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function ER(e,t){let r=(e.ORDER-gr)/Os,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function k7(e,t){if(t!==void 0)Vt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class PR{ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=gr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=k7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return $r(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&gr)===gr}neg(e){return $r(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return $r(e*e,this.ORDER)}add(e,t){return $r(e+t,this.ORDER)}sub(e,t){return $r(e-t,this.ORDER)}mul(e,t){return $r(e*t,this.ORDER)}pow(e,t){return _7(this,e,t)}div(e,t){return $r(e*kR(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return kR(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=v7(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Du(e,this.BYTES):cc(e,this.BYTES)}fromBytes(e,t=!1){Ne(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?go(e):ho(e);if(s)a=$r(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ju(this,e)}cmov(e,t,r){return r?t:e}}function sm(e,t={}){return new PR(e,t)}function NR(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function e0(e){let t=NR(e);return t+Math.ceil(t/2)}function zR(e,t,r=!1){Ne(e);let i=e.length,n=NR(t),o=e0(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?go(e):ho(e),a=$r(s,t-gr)+gr;return r?Du(a,n):cc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lc=BigInt(0),Rs=BigInt(1);function Uu(e,t){let r=t.negate();return e?r:t}function i0(e,t){let r=ju(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function qR(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function t0(e,t){qR(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=qu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function LR(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Rs;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var r0=new WeakMap,jR=new WeakMap;function n0(e){return jR.get(e)||1}function DR(e){if(e!==lc)throw Error("invalid wNAF")}class o0{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>lc){if(t&Rs)r=r.add(i);i=i.double(),t>>=Rs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=t0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=t0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=LR(r,s,o);if(r=a,l)n=n.add(Uu(d,t[f]));else i=i.add(Uu(u,t[c]))}return DR(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=t0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===lc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=LR(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return DR(r),i}getPrecomputes(e,t,r){let i=r0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);r0.set(t,i)}}return i}cached(e,t,r){let i=n0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=n0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){qR(t,this.bits),jR.set(e,t),r0.delete(e)}hasCache(e){return n0(e)!==1}}function UR(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>lc||i>lc){if(r&Rs)o=o.add(n);if(i&Rs)s=s.add(n);n=n.double(),r>>=Rs,i>>=Rs}return{p1:o,p2:s}}function BR(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Xx(t),t}else return sm(e,{isLE:r})}function MR(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>lc))throw Error(`CURVE.${c} must be positive bigint`)}let n=BR(t.p,r.Fp,i),o=BR(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function am(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mu=BigInt(0),uc=BigInt(1),cm=BigInt(2);function E7(e){return Ts(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function FR(e){let t=E7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||po,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?cm**BigInt(254):cm**BigInt(447),y=a?BigInt(8)*cm**BigInt(251)-uc:BigInt(4)*cm**BigInt(445)-uc,g=p+y+uc,b=(I)=>$r(I,r),S=A(d);function A(I){return Du(b(I),u)}function C(I){let R=om(Ne(I,u,"uCoordinate"));if(a)R[31]&=127;return b(go(R))}function N(I){return go(n(om(Ne(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===Mu)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Bu("u",I,Mu,r),Bu("scalar",R,p,g);let O=R,F=I,D=uc,V=Mu,_=I,re=uc,ue=Mu;for(let we=BigInt(l-1);we>=Mu;we--){let Ee=O>>we&uc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(Ne(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze({keygen:am(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}class s0{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(bn(e),Ne(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ur(i)}update(e){return Ci(this),this.iHash.update(e),this}digestInto(e){Ci(this),Ne(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dc=(e,t,r)=>new s0(e,t).update(r).digest();dc.create=(e,t)=>new s0(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZR=(e,t)=>(e+(e>=0?t:-t)/JR)/t;function I7(e,t,r){let[[i,n],[o,s]]=t,a=ZR(s*e,r),c=ZR(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<Ti,f=u<Ti;if(d)l=-l;if(f)u=-u;let p=qu(Math.ceil(Gx(r)/2))+fc;if(l<Ti||l>=p||u<Ti||u>=p)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:f,k2:u}}function c0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function a0(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(zu(r.lowS,"lowS"),zu(r.prehash,"prehash"),r.format!==void 0)c0(r.format);return r}class HR extends Error{constructor(e=""){super(e)}}var bo={Err:HR,_tlv:{encode:(e,t)=>{let{Err:r}=bo;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Lu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Lu(n.length/2|128):"";return Lu(e)+o+n+t},decode(e,t){let{Err:r}=bo,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=bo;if(e<Ti)throw new t("integer: negative integers are not allowed");let r=Lu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=bo;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return ho(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=bo,n=Ne(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=bo,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Ti=BigInt(0),fc=BigInt(1),JR=BigInt(2),lm=BigInt(3),A7=BigInt(4);function l0(e,t={}){let r=MR("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ts(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=VR(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(P,z,I){let{x:R,y:O}=z.toAffine(),F=i.toBytes(R);if(zu(I,"isCompressed"),I){u();let D=!i.isOdd(O);return Lt(KR(D),F)}else return Lt(Uint8Array.of(4),F,i.toBytes(O))}function f(P){Ne(P,void 0,"Point");let{publicKey:z,publicKeyUncompressed:I}=l,R=P.length,O=P[0],F=P.subarray(1);if(R===z&&(O===2||O===3)){let D=i.fromBytes(F);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let V=g(D),_;try{_=i.sqrt(V)}catch(T){let we=T instanceof Error?": "+T.message:"";throw Error("bad point: is not on curve, sqrt error"+we)}u();let re=i.isOdd(_);if((O&1)===1!==re)_=i.neg(_);return{x:D,y:_}}else if(R===I&&O===4){let D=i.BYTES,V=i.fromBytes(F.subarray(0,D)),_=i.fromBytes(F.subarray(D,D*2));if(!b(V,_))throw Error("bad point: is not on curve");return{x:V,y:_}}else throw Error(`bad point: got length ${R}, expected compressed=${z} or uncompressed=${I}`)}let p=t.toBytes||d,y=t.fromBytes||f;function g(P){let z=i.sqr(P),I=i.mul(z,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,z){let I=i.sqr(z),R=g(P);return i.eql(I,R)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let S=i.mul(i.pow(o.a,lm),A7),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(S,A)))throw Error("bad curve params: a or b");function C(P,z,I=!1){if(!i.isValid(z)||I&&i.is0(z))throw Error(`bad point coordinate ${P}`);return z}function N(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function q(P){if(!c||!c.basises)throw Error("no endo");return I7(P,c.basises,n.ORDER)}let E=Qx((P,z)=>{let{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}),Z=Qx((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:z,y:I}=P.toAffine();if(!i.isValid(z)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(z,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function L(P,z,I,R,O){return I=new H(i.mul(I.X,P),I.Y,I.Z),z=Uu(R,z),I=Uu(O,I),z.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,z,I){this.X=C("x",P),this.Y=C("y",z,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:z,y:I}=P||{};if(!P||!i.isValid(z)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(z)&&i.is0(I))return H.ZERO;return new H(z,I,i.ONE)}static fromBytes(P){let z=H.fromAffine(y(Ne(P,void 0,"point")));return z.assertValidity(),z}static fromHex(P){return H.fromBytes(Cs(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,z=!0){if(M.createCache(this,P),!z)this.multiply(lm);return this}assertValidity(){Z(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.eql(i.mul(z,D),i.mul(O,R)),_=i.eql(i.mul(I,D),i.mul(F,R));return V&&_}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:z}=o,I=i.mul(z,lm),{X:R,Y:O,Z:F}=this,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(F,F),we=i.mul(R,O);return we=i.add(we,we),_=i.mul(R,F),_=i.add(_,_),D=i.mul(P,_),V=i.mul(I,T),V=i.add(D,V),D=i.sub(ue,V),V=i.add(ue,V),V=i.mul(D,V),D=i.mul(we,D),_=i.mul(I,_),T=i.mul(P,T),we=i.sub(re,T),we=i.mul(P,we),we=i.add(we,_),_=i.add(re,re),re=i.add(_,re),re=i.add(re,T),re=i.mul(re,we),V=i.add(V,re),T=i.mul(O,F),T=i.add(T,T),re=i.mul(T,we),D=i.sub(D,re),_=i.mul(T,ue),_=i.add(_,_),_=i.add(_,_),new H(D,V,_)}add(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.ZERO,_=i.ZERO,re=i.ZERO,ue=o.a,T=i.mul(o.b,lm),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.mul(R,D),Ce=i.add(z,I),_e=i.add(O,F);Ce=i.mul(Ce,_e),_e=i.add(we,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,R);let Pe=i.add(O,D);return _e=i.mul(_e,Pe),Pe=i.add(we,Te),_e=i.sub(_e,Pe),Pe=i.add(I,R),V=i.add(F,D),Pe=i.mul(Pe,V),V=i.add(Ee,Te),Pe=i.sub(Pe,V),re=i.mul(ue,_e),V=i.mul(T,Te),re=i.add(V,re),V=i.sub(Ee,re),re=i.add(Ee,re),_=i.mul(V,re),Ee=i.add(we,we),Ee=i.add(Ee,we),Te=i.mul(ue,Te),_e=i.mul(T,_e),Ee=i.add(Ee,Te),Te=i.sub(we,Te),Te=i.mul(ue,Te),_e=i.add(_e,Te),we=i.mul(Ee,_e),_=i.add(_,we),we=i.mul(Pe,_e),V=i.mul(Ce,V),V=i.sub(V,we),we=i.mul(Ce,Ee),re=i.mul(Pe,re),re=i.add(re,we),new H(V,_,re)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:z}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,R,O=(F)=>M.cached(this,F,(D)=>i0(H,D));if(z){let{k1neg:F,k1:D,k2neg:V,k2:_}=q(P),{p:re,f:ue}=O(D),{p:T,f:we}=O(_);R=ue.add(we),I=L(z.beta,re,T,F,V)}else{let{p:F,f:D}=O(P);I=F,R=D}return i0(H,[I,R])[0]}multiplyUnsafe(P){let{endo:z}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Ti||I.is0())return H.ZERO;if(P===fc)return I;if(M.hasCache(this))return this.multiply(P);if(z){let{k1neg:R,k1:O,k2neg:F,k2:D}=q(P),{p1:V,p2:_}=UR(H,I,O,D);return L(z.beta,V,_,R,F)}else return M.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===fc)return!0;if(P)return P(H,this);return M.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===fc)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return zu(P,"isCompressed"),this.assertValidity(),p(H,this,P)}toHex(P=!0){return $s(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let ee=n.BITS,M=new o0(H,t.endo?Math.ceil(ee/2):ee);return H.BASE.precompute(8),H}function KR(e){return Uint8Array.of(e?2:3)}function VR(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function $7(e,t={}){let{Fn:r}=e,i=t.randomBytes||po,n=Object.assign(VR(e.Fp,r),{seed:e0(r.ORDER)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p=i(n.seed)){return zR(Ne(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!sc(p))return;if("_lengths"in r&&r._lengths||y===g)return;let S=Ne(p,void 0,"key").length;return S===g||S===b}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=am(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function u0(e,t,r={}){bn(t),Ts(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||po,n=r.hmac||((I,R)=>dc(t,I,R)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p}=$7(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*JR<o.ORDER;function b(I){let R=a>>fc;return I>R}function S(I,R){if(!s.isValidNot0(R))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,R){c0(R);let O=p.signature,F=R==="compact"?O:R==="recovered"?O+1:void 0;return Ne(I,F)}class N{r;s;recovery;constructor(I,R,O){if(this.r=S("r",I),this.s=S("s",R),O!=null){if(A(),![0,1,2,3].includes(O))throw Error("invalid recovery id");this.recovery=O}Object.freeze(this)}static fromBytes(I,R=y.format){C(I,R);let O;if(R==="der"){let{r:_,s:re}=bo.toSig(Ne(I));return new N(_,re)}if(R==="recovered")O=I[0],R="compact",I=I.subarray(1);let F=p.signature/2,D=I.subarray(0,F),V=I.subarray(F,F*2);return new N(s.fromBytes(D),s.fromBytes(V),O)}static fromHex(I,R){return this.fromBytes(Cs(I),R)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new N(this.r,this.s,I)}recoverPublicKey(I){let{r:R,s:O}=this,F=this.assertRecovery(),D=F===2||F===3?R+a:R;if(!o.isValid(D))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(D),_=e.fromBytes(Lt(KR((F&1)===0),V)),re=s.inv(D),ue=E(Ne(I,void 0,"msgHash")),T=s.create(-ue*re),we=s.create(O*re),Ee=e.BASE.multiplyUnsafe(T).add(_.multiplyUnsafe(we));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(c0(I),I==="der")return Cs(bo.hexFromSig(this));let{r:R,s:O}=this,F=s.toBytes(R),D=s.toBytes(O);if(I==="recovered")return A(),Lt(Uint8Array.of(this.assertRecovery()),F,D);return Lt(F,D)}toHex(I){return $s(this.toBytes(I))}}let q=r.bits2int||function(R){if(R.length>8192)throw Error("input is too large");let O=ho(R),F=R.length*8-c;return F>0?O>>BigInt(F):O},E=r.bits2int_modN||function(R){return s.create(q(R))},Z=qu(c);function L(I){return Bu("num < 2^"+c,I,Ti,Z),s.toBytes(I)}function H(I,R){return Ne(I,void 0,"message"),R?Ne(t(I),void 0,"prehashed message"):I}function ee(I,R,O){let{lowS:F,prehash:D,extraEntropy:V}=a0(O,y);I=H(I,D);let _=E(I),re=s.fromBytes(R);if(!s.isValidNot0(re))throw Error("invalid private key");let ue=[L(re),L(_)];if(V!=null&&V!==!1){let Te=V===!0?i(p.secretKey):V;ue.push(Ne(Te,void 0,"extraEntropy"))}let T=Lt(...ue),we=_;function Ee(Te){let Ce=q(Te);if(!s.isValidNot0(Ce))return;let _e=s.inv(Ce),Pe=e.BASE.multiply(Ce).toAffine(),Ve=s.create(Pe.x);if(Ve===Ti)return;let tt=s.create(_e*s.create(we+Ve*re));if(tt===Ti)return;let bt=(Pe.x===Ve?0:2)|Number(Pe.y&fc),zt=tt;if(F&&b(tt))zt=s.neg(tt),bt^=1;return new N(Ve,zt,g?void 0:bt)}return{seed:T,k2sig:Ee}}function M(I,R,O={}){let{seed:F,k2sig:D}=ee(I,R,O);return _R(t.outputLen,s.BYTES,n)(F,D).toBytes(O.format)}function P(I,R,O,F={}){let{lowS:D,prehash:V,format:_}=a0(F,y);if(O=Ne(O,void 0,"publicKey"),R=H(R,V),!sc(I)){let re=I instanceof N?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}C(I,_);try{let re=N.fromBytes(I,_),ue=e.fromBytes(O);if(D&&re.hasHighS())return!1;let{r:T,s:we}=re,Ee=E(R),Te=s.inv(we),Ce=s.create(Ee*Te),_e=s.create(T*Te),Pe=e.BASE.multiplyUnsafe(Ce).add(ue.multiplyUnsafe(_e));if(Pe.is0())return!1;return s.create(Pe.x)===T}catch(re){return!1}}function z(I,R,O={}){let{prehash:F}=a0(O,y);return R=H(R,F),N.fromBytes(I,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p,Point:e,sign:M,verify:P,recoverPublicKey:z,Signature:N,hash:t})}function WR(e,t,r){return e&t^~e&r}function GR(e,t,r){return e&t^e&r^t&r}class um{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=nm(this.buffer)}update(e){Ci(this),Ne(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=nm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ci(this),tm(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ur(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=nm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Oi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var nr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var dm=BigInt(4294967295),QR=BigInt(32);function C7(e,t=!1){if(t)return{h:Number(e&dm),l:Number(e>>QR&dm)};return{h:Number(e>>QR&dm)|0,l:Number(e&dm)|0}}function fm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=C7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var d0=(e,t,r)=>e>>>r,f0=(e,t,r)=>e<<32-r|t>>>r,Ps=(e,t,r)=>e>>>r|t<<32-r,Ns=(e,t,r)=>e<<32-r|t>>>r,Fu=(e,t,r)=>e<<64-r|t>>>r-32,Zu=(e,t,r)=>e>>>r-32|t<<64-r;var YR=(e,t,r)=>e<<r|t>>>32-r,XR=(e,t,r)=>t<<r|e>>>32-r,eP=(e,t,r)=>t<<r-32|e>>>64-r,tP=(e,t,r)=>e<<r-32|t>>>64-r;function ei(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var rP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),nP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,iP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),oP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,sP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),aP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var O7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),xo=new Uint32Array(64);class cP extends um{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)xo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=xo[u-15],f=xo[u-2],p=zn(d,7)^zn(d,18)^d>>>3,y=zn(f,17)^zn(f,19)^f>>>10;xo[u]=y+xo[u-7]+p+xo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=zn(s,6)^zn(s,11)^zn(s,25),f=l+d+WR(s,a,c)+O7[u]+xo[u]|0,y=(zn(r,2)^zn(r,13)^zn(r,22))+GR(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ur(xo)}destroy(){this.set(0,0,0,0,0,0,0,0),Ur(this.buffer)}}class lP extends cP{A=Oi[0]|0;B=Oi[1]|0;C=Oi[2]|0;D=Oi[3]|0;E=Oi[4]|0;F=Oi[5]|0;G=Oi[6]|0;H=Oi[7]|0;constructor(){super(32)}}var uP=(()=>fm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),R7=(()=>uP[0])(),P7=(()=>uP[1])(),wo=new Uint32Array(80),vo=new Uint32Array(80);class dP extends um{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)wo[A]=e.getUint32(t),vo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=wo[A-15]|0,N=vo[A-15]|0,q=Ps(C,N,1)^Ps(C,N,8)^d0(C,N,7),E=Ns(C,N,1)^Ns(C,N,8)^f0(C,N,7),Z=wo[A-2]|0,L=vo[A-2]|0,H=Ps(Z,L,19)^Fu(Z,L,61)^d0(Z,L,6),ee=Ns(Z,L,19)^Zu(Z,L,61)^f0(Z,L,6),M=iP(E,ee,vo[A-7],vo[A-16]),P=oP(M,q,H,wo[A-7],wo[A-16]);wo[A]=P|0,vo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Ps(u,d,14)^Ps(u,d,18)^Fu(u,d,41),N=Ns(u,d,14)^Ns(u,d,18)^Zu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=sP(S,N,E,P7[A],vo[A]),L=aP(Z,b,C,q,R7[A],wo[A]),H=Z|0,ee=Ps(r,i,28)^Fu(r,i,34)^Fu(r,i,39),M=Ns(r,i,28)^Zu(r,i,34)^Zu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=ei(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=rP(H,M,z);r=nP(I,L,ee,P),i=I|0}({h:r,l:i}=ei(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ei(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ei(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ei(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ei(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=ei(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=ei(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=ei(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ur(wo,vo)}destroy(){Ur(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class fP extends dP{Ah=nr[0]|0;Al=nr[1]|0;Bh=nr[2]|0;Bl=nr[3]|0;Ch=nr[4]|0;Cl=nr[5]|0;Dh=nr[6]|0;Dl=nr[7]|0;Eh=nr[8]|0;El=nr[9]|0;Fh=nr[10]|0;Fl=nr[11]|0;Gh=nr[12]|0;Gl=nr[13]|0;Hh=nr[14]|0;Hl=nr[15]|0;constructor(){super(48)}}var pm=ac(()=>new lP,mo(1));var pP=ac(()=>new fP,mo(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var N7=BigInt(1),mP=BigInt(2),z7=BigInt(3),L7=BigInt(5),nke=BigInt(8),hP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function D7(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=hP,a=e*e%o*e%o,c=xn(a,mP,o)*a%o,l=xn(c,N7,o)*e%o,u=xn(l,L7,o)*l%o,d=xn(u,t,o)*u%o,f=xn(d,r,o)*d%o,p=xn(f,i,o)*f%o,y=xn(p,n,o)*p%o,g=xn(y,n,o)*p%o,b=xn(g,t,o)*u%o;return{pow_p_5_8:xn(b,mP,o)*e%o,b2:a}}function B7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var gP=(()=>{let e=hP;return FR({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=D7(t);return $r(xn(r,z7,e)*i,e)},adjustScalarBytes:B7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var q7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),j7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var U7=l0(q7),p0=u0(U7,pm);var M7=l0(j7),yP=u0(M7,pP);function xP(e,t,r){if(bn(e),r===void 0)r=new Uint8Array(e.outputLen);return dc(e,r,t)}var m0=Uint8Array.of(0),bP=Uint8Array.of();function wP(e,t,r,i=32){bn(e),Vt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=bP;else Ne(r,void 0,"info");let s=new Uint8Array(o*n),a=dc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)m0[0]=u+1,c.update(u===0?bP:l).update(r).update(m0).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ur(l,m0),s.slice(0,i)}var F7=BigInt(0),Hu=BigInt(1),Z7=BigInt(2),H7=BigInt(7),J7=BigInt(256),K7=BigInt(113),_P=[],kP=[],EP=[];for(let e=0,t=Hu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],_P.push(2*(5*i+r)),kP.push((e+1)*(e+2)/2%64);let n=F7;for(let o=0;o<7;o++)if(t=(t<<Hu^(t>>H7)*K7)%J7,t&Z7)n^=Hu<<(Hu<<BigInt(o))-Hu;EP.push(n)}var IP=fm(EP,!0),V7=IP[0],W7=IP[1],vP=(e,t,r)=>r>32?eP(e,t,r):YR(e,t,r),SP=(e,t,r)=>r>32?tP(e,t,r):XR(e,t,r);function G7(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],d=vP(l,u,1)^r[a],f=SP(l,u,1)^r[a+1];for(let p=0;p<50;p+=10)e[s+p]^=d,e[s+p+1]^=f}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=kP[s],c=vP(n,o,a),l=SP(n,o,a),u=_P[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=V7[i],e[1]^=W7[i]}Ur(r)}class mm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Vt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rm(this.state)}clone(){return this._cloneInto()}keccak(){Kx(this.state32),G7(this.state32,this.rounds),Kx(this.state32),this.posOut=0,this.pos=0}update(e){Ci(this),Ne(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ci(this,!1),Ne(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Vt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(tm(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Ur(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new mm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var AP=(e,t,r,i={})=>ac(()=>new mm(t,e,r),i);var zs=AP(6,136,32,mo(8));var $P=AP(6,72,64,mo(10));var CP=(e,t,r,i={})=>ac((n={})=>new mm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),TP=CP(31,168,16,mo(11)),ti=CP(31,136,32,mo(12));function h0(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function RP(e){return h0(e),(e&e-1)===0&&e!==0}function g0(e,t){h0(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function PP(e){return h0(e),31-Math.clz32(e)}function OP(e){let t=e.length;if(t<2||!RP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=PP(t);for(let i=0;i<t;i++){let n=g0(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var y0=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=PP(r);if(!RP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)OP(u);for(let d=0,f=1;d<c-s;d++){let p=n?d+1+s:c-d,y=1<<p,g=y>>1,b=r>>p;for(let S=0;S<r;S+=y)for(let A=0,C=f++;A<g;A++){let N=o?n?r-C:C:A*b,q=S+A,E=S+A+g,Z=i[N],L=u[E],H=u[q];if(l){let ee=e.mul(L,Z);u[q]=e.add(H,ee),u[E]=e.sub(H,ee)}else if(o)u[q]=e.add(L,H),u[E]=e.mul(e.sub(L,H),Z);else u[q]=e.add(H,L),u[E]=e.mul(e.sub(H,L),Z)}}if(!n&&a)OP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ri=po;function hm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function NP(e){return Uint8Array.from(e)}function Ls(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Ne(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Ne(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function gm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Ne(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ft(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function b0(e){return(1<<e)-1}var bke=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var zP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let N=A%C|0;return(N>=0?N|0:C+N|0)|0},l=(A,C=i)=>{let N=c(A,C)|0;return(N>C>>1?N-C|0:N)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let N=g0(C,s),q=BigInt(o)**BigInt(N)%BigInt(i);A[C]=Number(q)|0}return A}let d=u(),f={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},p={N:r,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=y0(f,{dit:!1,...p}),g=y0(f,{dit:!0,...p});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(A)=>y(A),decode:(A)=>{g(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let N=b0(A),q=A*(r/8);return{bytesLen:q,encode:(E)=>{let Z=new Uint8Array(q);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=(C.encode(E[L])&N)<<ee,ee+=A;for(;ee>=8;ee-=8,H>>=8)Z[M++]=H&b0(ee)}return Z},decode:(E)=>{let Z=t(r);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=E[L]<<ee,ee+=8;for(;ee>=A;ee-=A,H>>=A)Z[M++]=C.decode(H&N)}return Z}}}}},Q7=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ft(o,i)}}},LP=Q7(TP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var yr=256,Ri=3329,Y7=3303,X7=17,{mod:Vu,nttZetas:eW,NTT:Ds,bitsCoder:tW}=zP({N:yr,Q:Ri,F:Y7,ROOT_OF_UNITY:X7,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),x0={512:{N:yr,Q:Ri,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:yr,Q:Ri,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:yr,Q:Ri,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},rW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ri/2)/Ri,decode:(r)=>r*Ri+t>>>e}},Ju=(e)=>tW(e,rW(e));function Bs(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]+t[r])}function nW(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]-t[r])}function iW(e,t,r,i,n){let o=Vu(t*i*n+e*r),s=Vu(e*i+t*r);return{c0:o,c1:s}}function ym(e,t){for(let r=0;r<yr/2;r++){let i=eW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=iW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function DP(e){let t=new Uint16Array(yr);for(let r=0;r<yr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<yr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ri)t[r++]=o;if(r<yr&&s<Ri)t[r++]=s}}return t}function Ku(e,t,r,i){let n=e(i*yr/4,t,r),o=new Uint16Array(yr),s=rm(n),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let f=s[c];for(let p=0;p<32;p++)if(u+=f&1,f>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Vu(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var oW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Ju(1),u=Ju(c),d=Ju(a),f=Ls("publicKey",gm(Ju(12),t),32),p=gm(Ju(12),t),y=Ls("ciphertext",gm(d,t),u),g=Ls("seed",32,32);return{secretCoder:p,lengths:{secretKey:p.bytesLen,publicKey:f.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{Ne(b,32,"seed");let S=new Uint8Array(33);S.set(b),S[32]=t;let A=n(S),[C,N]=g.decode(A),q=[],E=[];for(let H=0;H<t;H++)q.push(Ds.encode(Ku(r,N,H,o)));let Z=i(C);for(let H=0;H<t;H++){let ee=Ds.encode(Ku(r,N,t+H,o));for(let M=0;M<t;M++){let P=DP(Z.get(M,H));Bs(ee,ym(P,q[M]))}E.push(ee)}Z.clean();let L={publicKey:f.encode([E,C]),secretKey:p.encode(q)};return Ft(C,N,q,E,S,A),L},encrypt:(b,S,A)=>{let[C,N]=f.decode(b),q=[];for(let M=0;M<t;M++)q.push(Ds.encode(Ku(r,A,M,o)));let E=i(N),Z=new Uint16Array(yr),L=[];for(let M=0;M<t;M++){let P=Ku(r,A,t+M,s),z=new Uint16Array(yr);for(let I=0;I<t;I++){let R=DP(E.get(M,I));Bs(z,ym(R,q[I]))}Bs(P,Ds.decode(z)),L.push(P),Bs(Z,ym(C[M],q[M])),Ft(z)}E.clean();let H=Ku(r,A,2*t,s);Bs(H,Ds.decode(Z));let ee=l.decode(S);return Bs(ee,H),Ft(C,q,Z,H),y.encode([L,ee])},decrypt:(b,S)=>{let[A,C]=y.decode(b),N=p.decode(S),q=new Uint16Array(yr);for(let E=0;E<t;E++)Bs(q,ym(N[E],Ds.encode(A[E])));return nW(C,Ds.decode(q)),Ft(q,N,A),l.encode(C)}}};function w0(e){let t=oW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ls("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ri(64))=>{Ne(u,64,"seed");let{publicKey:d,secretKey:f}=t.keygen(u.subarray(0,32)),p=r(d),y=a.encode([f,d,p,u.subarray(32)]);return Ft(f,p),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,f,p,y]=a.decode(u);return Uint8Array.from(f)},encapsulate:(u,d=ri(32))=>{Ne(u,s.publicKey,"publicKey"),Ne(d,32,"message");let f=u.subarray(0,384*e.K),p=o.encode(o.decode(NP(f)));if(!hm(p,f))throw Ft(p),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ft(p);let y=i.create().update(d).update(r(u)).digest(),g=t.encrypt(u,d,y.subarray(32,64));return Ft(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{Ne(d,a.bytesLen,"secretKey"),Ne(u,s.cipherText,"cipherText");let f=a.bytesLen-96,p=f+32,y=r(d.subarray(f/2,p));if(!hm(y,d.subarray(p,p+32)))throw Error("invalid secretKey: hash check failed");let[g,b,S,A]=a.decode(d),C=t.decrypt(u,g),N=i.create().update(C).update(S).digest(),q=N.subarray(0,32),E=t.encrypt(b,C,N.subarray(32,64)),Z=hm(u,E),L=n.create({dkLen:32}).update(A).update(u).digest();return Ft(C,E,!Z?q:L),Z?q:L}}}function sW(e,t,r){return ti.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var v0={HASH256:zs,HASH512:$P,KDF:ti,XOF:LP,PRF:sW},Cke=w0({...v0,...x0[512]}),Wu=w0({...v0,...x0[768]}),BP=w0({...v0,...x0[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function aW(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ri(r.seed))=>{Ne(s,r.seed,"seed");let a=o.isLE?go(s):ho(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function S0(e,t=!1){let r=aW(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ri(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ft(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Gu(e,t){return Ls(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function _0(e){return(t,r)=>e(t,{dkLen:r})}function cW(e,t,...r){let i=Gu(r,"seed"),n=Gu(r,"publicKey");if(e===void 0)e=i.bytesLen;Vt(e);function o(s){Ne(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((d,f)=>d.keygen(a[f])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ri(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ft(a),Ft(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function bm(e,t,r,i,...n){let o=cW(e,r,...n),s=Gu(n,"cipherText"),a=Gu(n,"publicKey"),c=Gu(n,"msg");if(t===void 0)t=c.bytesLen;return Vt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ri(c.bytesLen)){let d=a.decode(l),f=c.decode(u),p=n.map((S,A)=>S.encapsulate(d[A],f[A])),y=p.map((S)=>S.sharedSecret),g=p.map((S)=>S.cipherText),b={sharedSecret:i(d,g,y),cipherText:s.encode(g)};return Ft(y,g),b},decapsulate(l,u){let d=s.decode(l),{publicKey:f,secretKey:p}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(d[b],p[b]));return i(f,d,y)}}}function qP(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>n(Lt(a[0],a[1],s[1],o[1],yo(e))),t,r)}var jke=qP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Wu,S0(p0,!0),ti,zs),Uke=qP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",BP,S0(yP,!0),ti,zs);function lW(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>{let c=Lt(a[0],a[1],s[0],o[0],s[1],o[1],yo(e)),l=32,u=Lt(yo("hybrid_prk"),c),d=xP(n,u),f=Lt(cc(32,2),yo("shared_secret"),yo("")),p=wP(n,d,f,32);return Ft(d,f,u,c),p},t,r)}var jP=S0(gP),Mke=lW("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Wu,jP,ti,pm),uW=(()=>bm(32,32,_0(ti),(e,t,r)=>zs(Lt(r[0],r[1],t[1],e[1],yo("\\.//^\\"))),Wu,jP))();function dW(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,d),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ri(i)){return Ne(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ri(i)){Ne(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ft(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function fW(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=dW(r,n,o,i),a=64,c=a+i;return bm(32,32,(l)=>{Ne(l,32);let u=ti(l,{dkLen:c}),d=u.subarray(0,a),f=u.subarray(a,c);return Lt(d,f)},(l,u,d)=>zs(Lt(d[0],d[1],u[1],l[1],yo(e))),t,s)}var pW=(()=>fW("MLKEM768-P256",Wu,p0,128))();var xm=uW,UP=pW;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lt=(e,t,r)=>er(e,t,r),E0=Tt,pc=Fp,ir=(...e)=>$x(...e),mc=(e)=>Au(e),hc=Ex,gc=(e)=>Ei(e),vm=BigInt(0),k0=BigInt(1);function Pi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!wm(e))throw RangeError("positive bigint expected, got "+e)}else E0(e);return e}function ni(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Qu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function MP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?vm:BigInt("0x"+e)}function qs(e){return MP(Fp(e))}function Ln(e){return MP(Fp(So(er(e)).reverse()))}function _m(e,t){if(Tt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return Au(r.padStart(t*2,"0"))}function Yu(e,t){return _m(e,t).reverse()}function FP(e,t){if(e=lt(e),t=lt(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function So(e){return Uint8Array.from(lt(e))}function km(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var wm=(e)=>typeof e==="bigint"&&vm<=e;function mW(e,t,r){return wm(e)&&wm(t)&&wm(r)&&t<=e&&e<r}function Ni(e,t,r,i){if(!mW(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function yc(e){if(e<vm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>vm;e>>=k0,t+=1);return t}var Xu=(e)=>(k0<<BigInt(e))-k0;function ZP(e,t,r){if(Tt(e,"hashLen"),Tt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,ir(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return ir(...S)};return(b,S)=>{d(),p(b);let A=void 0;while((A=S(y()))===void 0)p();return d(),A}}function wn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var I0=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var or=BigInt(0),Et=BigInt(1),js=BigInt(2),VP=BigInt(3),WP=BigInt(4),GP=BigInt(5),hW=BigInt(7),QP=BigInt(8),gW=BigInt(9),YP=BigInt(16);function mt(e,t){if(t<=or)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=or?r:t+r}function vn(e,t,r){if(t<or)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >or)i*=i,i%=r;return i}function HP(e,t){if(e===or)throw Error("invert: expected non-zero number");if(t<=or)throw Error("invert: expected positive modulus, got "+t);let r=mt(e,t),i=t,n=or,o=Et,s=Et,a=or;while(r!==or){let l=i/r,u=i-r*l,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==Et)throw Error("invert: does not exist");return mt(n,t)}function A0(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function XP(e,t){let r=e,i=(r.ORDER+Et)/WP,n=r.pow(t,i);return A0(r,n,t),n}function yW(e,t){let r=e,i=(r.ORDER-GP)/QP,n=r.mul(t,js),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,js),o),c=r.mul(s,r.sub(a,r.ONE));return A0(r,c,t),c}function bW(e){let t=Em(e),r=e2(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+hW)/YP;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),f=l.mul(u,n),p=l.mul(u,o),y=l.eql(l.sqr(d),c),g=l.eql(l.sqr(f),c);u=l.cmov(u,d,y),d=l.cmov(p,f,g);let b=l.eql(l.sqr(d),c),S=l.cmov(u,d,b);return A0(l,S,c),S}}function e2(e){if(e<VP)throw Error("sqrt is not defined for small field");let t=e-Et,r=0;while(t%js===or)t/=js,r++;let i=js,n=Em(e);while(JP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return XP;let o=n.pow(i,t),s=(t+Et)/js;return function(c,l){let u=c;if(u.is0(l))return l;if(JP(u,l)!==1)throw Error("Cannot find square root");let d=r,f=u.mul(u.ONE,o),p=u.pow(l,t),y=u.pow(l,s);while(!u.eql(p,u.ONE)){if(u.is0(p))return u.ZERO;let g=1,b=u.sqr(p);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===d)throw Error("Cannot find square root");let S=Et<<BigInt(d-g-1),A=u.pow(f,S);d=g,f=u.sqr(A),p=u.mul(p,f),y=u.mul(y,A)}return y}}function xW(e){if(e%WP===VP)return XP;if(e%QP===GP)return yW;if(e%YP===gW)return bW(e);return e2(e)}var zi=(e,t)=>(mt(e,t)&Et)===Et,wW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function $0(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=wW.reduce((i,n)=>(i[n]="function",i),t);if(wn(e,r),ni(e.BYTES,"BYTES"),ni(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Et)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function vW(e,t,r){let i=e;if(r<or)throw Error("invalid exponent, negatives unsupported");if(r===or)return i.ONE;if(r===Et)return t;let n=i.ONE,o=t;while(r>or){if(r&Et)n=i.mul(n,o);o=i.sqr(o),r>>=Et}return n}function ed(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function JP(e,t){let r=e,i=(r.ORDER-Et)/js,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function SW(e,t){if(t!==void 0)E0(t);if(e<=or)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=yc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var KP=new WeakMap;class C0{ORDER;BITS;BYTES;isLE;ZERO=or;ONE=Et;_lengths;_mod;constructor(e,t={}){if(e<=Et)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=SW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return mt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return or<=e&&e<this.ORDER}is0(e){return e===or}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Et)===Et}neg(e){return mt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return mt(e*e,this.ORDER)}add(e,t){return mt(e+t,this.ORDER)}sub(e,t){return mt(e-t,this.ORDER)}mul(e,t){return mt(e*t,this.ORDER)}pow(e,t){return vW(this,e,t)}div(e,t){return mt(e*HP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return HP(e,this.ORDER)}sqrt(e){let t=KP.get(this);if(!t)KP.set(this,t=xW(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Yu(e,this.BYTES):_m(e,this.BYTES)}fromBytes(e,t=!1){lt(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Ln(e):qs(e);if(s)a=mt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ed(this,e)}cmov(e,t,r){return Pi(r,"condition"),r?t:e}}Object.freeze(C0.prototype);function Em(e,t={}){return new C0(e,t)}function t2(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Et)throw Error("field order must be greater than 1");let t=yc(e-Et);return Math.ceil(t/8)}function T0(e){let t=t2(e);return t+Math.ceil(t/2)}function r2(e,t,r=!1){lt(e);let i=e.length,n=t2(t),o=Math.max(T0(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Ln(e):qs(e),a=mt(s,t-Et)+Et;return r?Yu(a,n):_m(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bc=BigInt(0),Us=BigInt(1);function td(e,t){let r=t.negate();return e?r:t}function Ms(e,t){let r=ed(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function s2(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function O0(e,t){s2(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Xu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function n2(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Us;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var R0=new WeakMap,a2=new WeakMap;function P0(e){return a2.get(e)||1}function i2(e){if(e!==bc)throw Error("invalid wNAF")}class rd{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>bc){if(t&Us)r=r.add(i);i=i.double(),t>>=Us}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=O0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=O0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=n2(r,s,o);if(r=a,l)n=n.add(td(d,t[f]));else i=i.add(td(u,t[c]))}return i2(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=O0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===bc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=n2(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return i2(r),i}getPrecomputes(e,t,r){let i=R0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);R0.set(t,i)}}return i}cached(e,t,r){let i=P0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=P0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){s2(t,this.bits),a2.set(e,t),R0.delete(e)}hasCache(e){return P0(e)!==1}}function c2(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>bc||i>bc){if(r&Us)o=o.add(n);if(i&Us)s=s.add(n);n=n.double(),r>>=Us,i>>=Us}return{p1:o,p2:s}}function o2(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return $0(t),t}else return Em(e,{isLE:r})}function Im(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>bc))throw Error(`CURVE.${c} must be positive bigint`)}let n=o2(t.p,r.Fp,i),o=o2(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function nd(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function id(e,t){if(ni(e),ni(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function _W(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function kW(e){if(!hc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?km(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function N0(e,t,r,i){if(lt(e),ni(r),t=kW(t),t.length>255)t=i(ir(km("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ir(t,id(t.length,1)),c=new Uint8Array(o),l=id(r,2),u=Array(s),d=i(ir(c,e,l,id(0,1),a));u[0]=i(ir(d,id(1,1),a));for(let p=1;p<s;p++){let y=[_W(d,u[p-1]),id(p+1,1),a];u[p]=i(ir(...y))}return ir(...u).slice(0,r)}var l2="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u2=(e,t)=>(e+(e>=0?t:-t)/f2)/t;function EW(e,t,r){Ni("scalar",e,ii,r);let[[i,n],[o,s]]=t,a=u2(s*e,r),c=u2(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<ii,f=u<ii;if(d)l=-l;if(f)u=-u;let p=Xu(Math.ceil(yc(r)/2))+_o;if(l<ii||l>=p||u<ii||u>=p)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:f,k2:u}}function L0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function z0(e,t){wn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Pi(r.lowS,"lowS"),Pi(r.prehash,"prehash"),r.format!==void 0)L0(r.format);return r}class d2 extends Error{constructor(e=""){super(e)}}var Dn={Err:d2,_tlv:{encode:(e,t)=>{let{Err:r}=Dn;if(ni(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Qu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Qu(n.length/2|128):"";return Qu(e)+o+n+t},decode(e,t){let{Err:r}=Dn;t=lt(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Dn;if(Sm(e),e<ii)throw new t("integer: negative integers are not allowed");let r=Qu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Dn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return qs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Dn,n=lt(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Dn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Dn._tlv);Object.freeze(Dn._int);Object.freeze(Dn);var ii=BigInt(0),_o=BigInt(1),f2=BigInt(2),Am=BigInt(3),IW=BigInt(4);function p2(e,t={}){let r=Im("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;wn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=h2(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(M,P,z){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:R}=P.toAffine(),O=i.toBytes(I);if(Pi(z,"isCompressed"),z){d();let F=!i.isOdd(R);return ir(m2(F),O)}else return ir(Uint8Array.of(4),O,i.toBytes(R))}function p(M){lt(M,void 0,"Point");let{publicKey:P,publicKeyUncompressed:z}=u,I=M.length,R=M[0],O=M.subarray(1);if(l&&I===1&&R===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(R===2||R===3)){let F=i.fromBytes(O);if(!i.isValid(F))throw Error("bad point: is not on curve, wrong x");let D=b(F),V;try{V=i.sqrt(D)}catch(ue){let T=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+T)}d();let _=i.isOdd(V);if((R&1)===1!==_)V=i.neg(V);return{x:F,y:V}}else if(I===z&&R===4){let F=i.BYTES,D=i.fromBytes(O.subarray(0,F)),V=i.fromBytes(O.subarray(F,F*2));if(!S(D,V))throw Error("bad point: is not on curve");return{x:D,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${z}`)}let y=t.toBytes===void 0?f:t.toBytes,g=t.fromBytes===void 0?p:t.fromBytes;function b(M){let P=i.sqr(M),z=i.mul(P,M);return i.add(i.add(z,i.mul(M,o.a)),o.b)}function S(M,P){let z=i.sqr(P),I=b(M);return i.eql(z,I)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Am),IW),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function N(M,P,z=!1){if(!i.isValid(P)||z&&i.is0(P))throw Error(`bad point coordinate ${M}`);return P}function q(M){if(!(M instanceof L))throw Error("Weierstrass Point expected")}function E(M){if(!c||!c.basises)throw Error("no endo");return EW(M,c.basises,n.ORDER)}function Z(M,P,z,I,R){return z=new L(i.mul(z.X,M),z.Y,z.Z),P=td(I,P),z=td(R,z),P.add(z)}class L{static BASE=new L(o.Gx,o.Gy,i.ONE);static ZERO=new L(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(M,P,z){this.X=N("x",M),this.Y=N("y",P,!0),this.Z=N("z",z),Object.freeze(this)}static CURVE(){return o}static fromAffine(M){let{x:P,y:z}=M||{};if(!M||!i.isValid(P)||!i.isValid(z))throw Error("invalid affine point");if(M instanceof L)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(z))return L.ZERO;return new L(P,z,i.ONE)}static fromBytes(M){let P=L.fromAffine(g(lt(M,void 0,"point")));return P.assertValidity(),P}static fromHex(M){return L.fromBytes(mc(M))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(M=8,P=!0){if(ee.createCache(this,M),!P)this.multiply(Am);return this}assertValidity(){let M=this;if(M.is0()){if(t.allowInfinityPoint&&i.is0(M.X)&&i.eql(M.Y,i.ONE)&&i.is0(M.Z))return;throw Error("bad point: ZERO")}let{x:P,y:z}=M.toAffine();if(!i.isValid(P)||!i.isValid(z))throw Error("bad point: x or y not field elements");if(!S(P,z))throw Error("bad point: equation left != right");if(!M.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:M}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(M)}equals(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.eql(i.mul(P,F),i.mul(R,I)),V=i.eql(i.mul(z,F),i.mul(O,I));return D&&V}negate(){return new L(this.X,i.neg(this.Y),this.Z)}double(){let{a:M,b:P}=o,z=i.mul(P,Am),{X:I,Y:R,Z:O}=this,F=i.ZERO,D=i.ZERO,V=i.ZERO,_=i.mul(I,I),re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(I,R);return T=i.add(T,T),V=i.mul(I,O),V=i.add(V,V),F=i.mul(M,V),D=i.mul(z,ue),D=i.add(F,D),F=i.sub(re,D),D=i.add(re,D),D=i.mul(F,D),F=i.mul(T,F),V=i.mul(z,V),ue=i.mul(M,ue),T=i.sub(_,ue),T=i.mul(M,T),T=i.add(T,V),V=i.add(_,_),_=i.add(V,_),_=i.add(_,ue),_=i.mul(_,T),D=i.add(D,_),ue=i.mul(R,O),ue=i.add(ue,ue),_=i.mul(ue,T),F=i.sub(F,_),V=i.mul(ue,re),V=i.add(V,V),V=i.add(V,V),new L(F,D,V)}add(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=o.a,ue=i.mul(o.b,Am),T=i.mul(P,R),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.add(P,z),Ce=i.add(R,O);Te=i.mul(Te,Ce),Ce=i.add(T,we),Te=i.sub(Te,Ce),Ce=i.add(P,I);let _e=i.add(R,F);return Ce=i.mul(Ce,_e),_e=i.add(T,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,I),D=i.add(O,F),_e=i.mul(_e,D),D=i.add(we,Ee),_e=i.sub(_e,D),_=i.mul(re,Ce),D=i.mul(ue,Ee),_=i.add(D,_),D=i.sub(we,_),_=i.add(we,_),V=i.mul(D,_),we=i.add(T,T),we=i.add(we,T),Ee=i.mul(re,Ee),Ce=i.mul(ue,Ce),we=i.add(we,Ee),Ee=i.sub(T,Ee),Ee=i.mul(re,Ee),Ce=i.add(Ce,Ee),T=i.mul(we,Ce),V=i.add(V,T),T=i.mul(_e,Ce),D=i.mul(Te,D),D=i.sub(D,T),T=i.mul(Te,we),_=i.mul(_e,_),_=i.add(_,T),new L(D,V,_)}subtract(M){return q(M),this.add(M.negate())}is0(){return this.equals(L.ZERO)}multiply(M){let{endo:P}=t;if(!n.isValidNot0(M))throw RangeError("invalid scalar: out of range");let z,I,R=(O)=>ee.cached(this,O,(F)=>Ms(L,F));if(P){let{k1neg:O,k1:F,k2neg:D,k2:V}=E(M),{p:_,f:re}=R(F),{p:ue,f:T}=R(V);I=re.add(T),z=Z(P.beta,_,ue,O,D)}else{let{p:O,f:F}=R(M);z=O,I=F}return Ms(L,[z,I])[0]}multiplyUnsafe(M){let{endo:P}=t,z=this,I=M;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===ii||z.is0())return L.ZERO;if(I===_o)return z;if(ee.hasCache(this))return this.multiply(I);if(P){let{k1neg:R,k1:O,k2neg:F,k2:D}=E(I),{p1:V,p2:_}=c2(L,z,O,D);return Z(P.beta,V,_,R,F)}else return ee.unsafe(z,I)}toAffine(M){let P=this,z=M,{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}isTorsionFree(){let{isTorsionFree:M}=t;if(s===_o)return!0;if(M)return M(L,this);return ee.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:M}=t;if(s===_o)return this;if(M)return M(L,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===_o)return this.is0();return this.clearCofactor().is0()}toBytes(M=!0){return Pi(M,"isCompressed"),this.assertValidity(),y(L,this,M)}toHex(M=!0){return pc(this.toBytes(M))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,ee=new rd(L,t.endo?Math.ceil(H/2):H);if(H>=8)L.BASE.precompute(8);return Object.freeze(L.prototype),Object.freeze(L),L}function m2(e){return Uint8Array.of(e?2:3)}function h2(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function AW(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?gc:t.randomBytes,n=Object.assign(h2(e.Fp,r),{seed:Math.max(T0(r.ORDER),16)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p){return p=p===void 0?i(n.seed):p,r2(lt(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,S=r._lengths;if(!hc(p))return;let A=lt(p,void 0,"key").length,C=A===g||A===b,N=A===y||!!S?.includes(A);if(C&&N)return;return C}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=nd(a,c);return Object.freeze(d),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function g2(e,t,r={}){let i=t;ki(i),wn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?gc:r.randomBytes,o=r.hmac===void 0?(R,O)=>Qn(i,R,O):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y}=AW(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*f2+_o<s.ORDER;function S(R){let O=c>>_o;return R>O}function A(R,O){if(!a.isValidNot0(O))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return O}function C(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function N(R,O){L0(O);let F=y.signature,D=O==="compact"?F:O==="recovered"?F+1:void 0;return lt(R,D)}class q{r;s;recovery;constructor(R,O,F){if(this.r=A("r",R),this.s=A("s",O),F!=null){if(C(),![0,1,2,3].includes(F))throw Error("invalid recovery id");this.recovery=F}Object.freeze(this)}static fromBytes(R,O=g.format){N(R,O);let F;if(O==="der"){let{r:re,s:ue}=Dn.toSig(lt(R));return new q(re,ue)}if(O==="recovered")F=R[0],O="compact",R=R.subarray(1);let D=y.signature/2,V=R.subarray(0,D),_=R.subarray(D,D*2);return new q(a.fromBytes(V),a.fromBytes(_),F)}static fromHex(R,O){return this.fromBytes(mc(R),O)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new q(this.r,this.s,R)}recoverPublicKey(R){let{r:O,s:F}=this,D=this.assertRecovery(),V=D===2||D===3?O+c:O;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let _=s.toBytes(V),re=e.fromBytes(ir(m2((D&1)===0),_)),ue=a.inv(V),T=Z(lt(R,void 0,"msgHash")),we=a.create(-T*ue),Ee=a.create(F*ue),Te=e.BASE.multiplyUnsafe(we).add(re.multiplyUnsafe(Ee));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(R=g.format){if(L0(R),R==="der")return mc(Dn.hexFromSig(this));let{r:O,s:F}=this,D=a.toBytes(O),V=a.toBytes(F);if(R==="recovered")return C(),ir(Uint8Array.of(this.assertRecovery()),D,V);return ir(D,V)}toHex(R){return pc(this.toBytes(R))}}Object.freeze(q.prototype),Object.freeze(q);let E=r.bits2int===void 0?function(O){if(O.length>8192)throw Error("input is too large");let F=qs(O),D=O.length*8-l;return D>0?F>>BigInt(D):F}:r.bits2int,Z=r.bits2int_modN===void 0?function(O){return a.create(E(O))}:r.bits2int_modN,L=Xu(l);function H(R){return Ni("num < 2^"+l,R,ii,L),a.toBytes(R)}function ee(R,O){return lt(R,void 0,"message"),O?lt(i(R),void 0,"prehashed message"):R}function M(R,O,F){let{lowS:D,prehash:V,extraEntropy:_}=z0(F,g);R=ee(R,V);let re=Z(R),ue=a.fromBytes(O);if(!a.isValidNot0(ue))throw Error("invalid private key");let T=[H(ue),H(re)];if(_!=null&&_!==!1){let Ce=_===!0?n(y.secretKey):_;T.push(lt(Ce,void 0,"extraEntropy"))}let we=ir(...T),Ee=re;function Te(Ce){let _e=E(Ce);if(!a.isValidNot0(_e))return;let Pe=a.inv(_e),Ve=e.BASE.multiply(_e).toAffine(),tt=a.create(Ve.x);if(tt===ii)return;let bt=a.create(Pe*a.create(Ee+tt*ue));if(bt===ii)return;let zt=(Ve.x===tt?0:2)|Number(Ve.y&_o),pr=bt;if(D&&S(bt))pr=a.neg(bt),zt^=1;return new q(tt,pr,b?void 0:zt)}return{seed:we,k2sig:Te}}function P(R,O,F={}){let{seed:D,k2sig:V}=M(R,O,F);return ZP(i.outputLen,a.BYTES,o)(D,V).toBytes(F.format)}function z(R,O,F,D={}){let{lowS:V,prehash:_,format:re}=z0(D,g);if(F=lt(F,void 0,"publicKey"),O=ee(O,_),!hc(R)){let ue=R instanceof q?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}N(R,re);try{let ue=q.fromBytes(R,re),T=e.fromBytes(F);if(V&&ue.hasHighS())return!1;let{r:we,s:Ee}=ue,Te=Z(O),Ce=a.inv(Ee),_e=a.create(Te*Ce),Pe=a.create(we*Ce),Ve=e.BASE.multiplyUnsafe(_e).add(T.multiplyUnsafe(Pe));if(Ve.is0())return!1;return a.create(Ve.x)===we}catch(ue){return!1}}function I(R,O,F={}){let{prehash:D}=z0(F,g);return O=ee(O,D),q.fromBytes(R,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y,Point:e,sign:P,verify:z,recoverPublicKey:I,Signature:q,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $W=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var CW=p2($W),xc=g2(CW,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ko=BigInt(0),Mr=BigInt(1),D0=BigInt(2),TW=BigInt(8);function OW(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function y2(e,t={}){let r=t,i=Im("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;wn(r,{},{uvRatio:"function"});let c=D0<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(S){return{isValid:!1,value:ko}}}:r.uvRatio;if(!OW(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(g,b,S=!1){let A=S?Mr:ko;return Ni("coordinate "+g,b,A,c),b}function f(g){if(!(g instanceof p))throw Error("EdwardsPoint expected")}class p{static BASE=new p(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new p(ko,Mr,Mr,ko);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,S,A){this.X=d("x",g),this.Y=d("y",b),this.Z=d("z",S,!0),this.T=d("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof p)throw Error("extended point not allowed");let{x:b,y:S}=g||{};return d("x",b),d("y",S),new p(b,S,Mr,l(b*S))}static fromBytes(g,b=!1){let S=n.BYTES,{a:A,d:C}=s;g=So(lt(g,S,"point")),Pi(b,"zip215");let N=So(g),q=g[S-1];N[S-1]=q&-129;let E=Ln(N),Z=b?c:n.ORDER;Ni("point.y",E,ko,Z);let L=l(E*E),H=l(L-Mr),ee=l(C*L-A),{isValid:M,value:P}=u(H,ee);if(!M)throw Error("bad point: invalid y coordinate");let z=(P&Mr)===Mr,I=(q&128)!==0;if(!b&&P===ko&&I)throw Error("bad point: x=0 and x_0=1");if(I!==z)P=l(-P);return p.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return p.fromBytes(mc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(D0);return this}assertValidity(){let g=this,{a:b,d:S}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:N,T:q}=g,E=l(A*A),Z=l(C*C),L=l(N*N),H=l(L*L),ee=l(E*b),M=l(L*l(ee+Z)),P=l(H+l(S*l(E*Z)));if(M!==P)throw Error("bad point: equation left != right (1)");let z=l(A*C),I=l(N*q);if(z!==I)throw Error("bad point: equation left != right (2)")}equals(g){f(g);let{X:b,Y:S,Z:A}=this,{X:C,Y:N,Z:q}=g,E=l(b*q),Z=l(C*A),L=l(S*q),H=l(N*A);return E===Z&&L===H}is0(){return this.equals(p.ZERO)}negate(){return new p(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:S,Z:A}=this,C=l(b*b),N=l(S*S),q=l(D0*l(A*A)),E=l(g*C),Z=b+S,L=l(l(Z*Z)-C-N),H=E+N,ee=H-q,M=E-N,P=l(L*ee),z=l(H*M),I=l(L*M),R=l(ee*H);return new p(P,z,R,I)}add(g){f(g);let{a:b,d:S}=s,{X:A,Y:C,Z:N,T:q}=this,{X:E,Y:Z,Z:L,T:H}=g,ee=l(A*E),M=l(C*Z),P=l(q*S*H),z=l(N*L),I=l((A+C)*(E+Z)-ee-M),R=z-P,O=z+P,F=l(M-b*ee),D=l(I*R),V=l(O*F),_=l(I*F),re=l(R*O);return new p(D,V,re,_)}subtract(g){return f(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:S}=y.cached(this,g,(A)=>Ms(p,A));return Ms(p,[b,S])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===ko)return p.ZERO;if(this.is0()||g===Mr)return this;return y.unsafe(this,g,(b)=>Ms(p,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,S=g,{X:A,Y:C,Z:N}=b,q=b.is0();if(S==null)S=q?TW:n.inv(N);let E=l(A*S),Z=l(C*S),L=n.mul(N,S);if(q)return{x:ko,y:Mr};if(L!==Mr)throw Error("invZ was invalid");return{x:E,y:Z}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),S=n.toBytes(b);return S[S.length-1]|=g&Mr?128:0,S}toHex(){return pc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new rd(p,o.BITS);if(o.BITS>=8)p.BASE.precompute(8);return Object.freeze(p.prototype),Object.freeze(p),p}class B0{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){I0()}static fromHex(e){I0()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return pc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var od=BigInt(0),wc=BigInt(1),$m=BigInt(2);function RW(e){return wn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function b2(e){let t=RW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?gc:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?$m**BigInt(254):$m**BigInt(447),y=a?BigInt(8)*$m**BigInt(251)-wc:BigInt(4)*$m**BigInt(445)-wc,g=p+y+wc,b=(I)=>mt(I,r),S=A(d);function A(I){return Yu(b(I),u)}function C(I){let R=So(lt(I,u,"uCoordinate"));if(a)R[31]&=127;return b(Ln(R))}function N(I){return Ln(n(So(lt(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===od)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Ni("u",I,od,r),Ni("scalar",R,p,g);let O=R,F=I,D=wc,V=od,_=I,re=wc,ue=od;for(let we=BigInt(l-1);we>=od;we--){let Ee=O>>we&wc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,lt(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze(M),Object.freeze(z),Object.freeze({keygen:nd(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PW=BigInt(0),Li=BigInt(1),x2=BigInt(2),NW=BigInt(3),zW=BigInt(5),LW=BigInt(8),Zs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),M0=(()=>({p:Zs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:LW,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function S2(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Zs,a=e*e%o*e%o,c=vn(a,x2,o)*a%o,l=vn(c,Li,o)*e%o,u=vn(l,zW,o)*l%o,d=vn(u,t,o)*u%o,f=vn(d,r,o)*d%o,p=vn(f,i,o)*f%o,y=vn(p,n,o)*p%o,g=vn(y,n,o)*p%o,b=vn(g,t,o)*u%o;return{pow_p_5_8:vn(b,x2,o)*e%o,b2:a}}function DW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var q0=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function F0(e,t){let r=Zs,i=mt(t*t*t,r),n=mt(i*i*t,r),o=S2(e*n).pow_p_5_8,s=mt(e*i*o,r),a=mt(t*s*s,r),c=s,l=mt(s*q0,r),u=a===e,d=a===mt(-e,r),f=a===mt(-e*q0,r);if(u)s=c;if(d||f)s=l;if(zi(s,r))s=mt(-s,r);return{isValid:u||d,value:s}}var Fs=y2(M0,{uvRatio:F0}),Eo=(()=>Fs.Fp)(),_2=(()=>Fs.Fn)();var Cm=(()=>{let e=Zs;return b2({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=S2(t);return mt(vn(r,NW,e)*i,e)},adjustScalarBytes:DW})})();var j0=q0,BW=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),qW=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),jW=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),UW=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),w2=(e)=>F0(Li,e),MW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),U0=(e)=>Eo.create(Ln(e)&MW);function v2(e){let{d:t}=M0,r=Zs,i=(S)=>Eo.create(S),n=i(j0*e*e),o=i((n+Li)*jW),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=F0(o,a),u=i(l*e);if(!zi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let d=i(s*(n-Li)*UW-a),f=l*l,p=i((l+l)*a),y=i(d*BW),g=i(Li-f),b=i(Li+f);return new Fs(i(p*b),i(g*y),i(y*b),i(p*g))}class Tr extends B0{static BASE=(()=>new Tr(Fs.BASE))();static ZERO=(()=>new Tr(Fs.ZERO))();static Fp=(()=>Eo)();static Fn=(()=>_2)();constructor(e){super(e)}static fromAffine(e){return new Tr(Fs.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){er(e,32);let{a:t,d:r}=M0,i=Zs,n=(C)=>Eo.create(C),o=U0(e);if(!FP(Eo.toBytes(o),e)||zi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Li+t*s),c=n(Li-t*s),l=n(a*a),u=n(c*c),d=n(t*r*l-u),{isValid:f,value:p}=w2(n(d*u)),y=n(p*c),g=n(p*y*d),b=n((o+o)*y);if(zi(b,i))b=n(-b);let S=n(a*g),A=n(b*S);if(!f||zi(A,i)||S===PW)throw Error("invalid ristretto255 encoding 2");return new Tr(new Fs(b,S,Li,A))}static fromHex(e){return Tr.fromBytes(Au(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Zs,o=(g)=>Eo.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=w2(o(s*c)),u=o(l*s),d=o(l*a),f=o(u*d*i),p;if(zi(i*f,n)){let g=o(t*j0),b=o(e*j0);e=g,t=b,p=o(u*qW)}else p=d;if(zi(e*f,n))t=o(-t);let y=o((r-t)*p);if(zi(y,n))y=o(-y);return Eo.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Eo.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var FW=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=N0(e,r,64,Kp);return FW.deriveToCurve(i)},hashToScalar(e,t={DST:l2}){let r=N0(e,t.DST,64,Kp);return _2.create(Ln(r))},deriveToCurve(e){er(e,64);let t=U0(e.subarray(0,32)),r=v2(t),i=U0(e.subarray(32,64)),n=v2(i);return new Tr(r.add(n))}});var k2=!1,ZW=!1;async function E2(e,t){if(ZW)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Tm(e,t){return await E2(async()=>{let r=Z0(e)?e:await JW(e),i=await crypto.subtle.importKey("raw",KW(t),{name:"X25519"},k2,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMult(e,t)})}async function sd(e){return await E2(async()=>Tm(e,Cm.GuBytes),()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMultBase(e)})}var HW=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function JW(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...HW,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},k2,["deriveBits"])}function Z0(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function KW(e){return e}class H0{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),WW(Hs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Hs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Hs(this.transcript)}}}function WW(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Hs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function vc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Om(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function J0(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function I2(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function A2(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Hs(i),s=o.subarray(0,t),a=vc(e,o.subarray(t));return{data:s,rest:a}}class oi{args;body;constructor(e,t){this.args=e,this.body=t}}async function GW(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=hr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Hs(i);return{s:new oi(r,n)}}async function $2(e){let t=new H0(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await GW(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=hr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:vc(e,a)}}}function K0(e){let t=[];t.push(`age-encryption.org/v1
|
|
770
770
|
`);for(let r of e){t.push("-> "+r.args.join(" ")+`
|
|
771
771
|
`);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(hr.encode(r.body.subarray(i,n))+`
|
|
772
772
|
`)}if(r.body.length%48===0)t.push(`
|
package/dist/index.js
CHANGED
|
@@ -764,7 +764,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
|
|
|
764
764
|
`),o}async function _V(e,t){let r=await Mt(e),i=r.users.find((n)=>n.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:r.pilot,user:i}}async function kV(e){let t=await h_e(ki(g_e(),"brains-ops-watchdog-smoke-")),r=ki(t,"id_ed25519"),i=ki(t,"known_hosts");try{let n=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${n}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=y_e.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await vu(r,S_e(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await m_e(r,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await vu(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:r,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(n){throw await MO(t,{recursive:!0,force:!0}),n}}async function UO(e,t,r){return e.commandRunner("ssh",[...EV(e),`root@${e.serverIp}`,"bash","-s","--",t,r],{stdin:FO()})}async function b_e(e,t,r){return e.commandRunner("scp",[...EV(e),"-r",`root@${e.serverIp}:${t}/.`,r])}function EV(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function x_e(e){try{return await p_e(e),!0}catch{return!1}}async function $x(e,t,r){await Promise.all([vu(ki(e,`${t}.stdout.log`),r.stdout),vu(ki(e,`${t}.stderr.log`),r.stderr)])}function S_e(e){return`${e.replace(/\r\n/g,`
|
|
765
765
|
`).replace(/\\n/g,`
|
|
766
766
|
`).trimEnd()}
|
|
767
|
-
`}var SV,y_e;var Tx=w(async()=>{Be();gV();ni();jp();await hV();SV=f.object({HCLOUD_TOKEN:f.string().min(1),KAMAL_SSH_PRIVATE_KEY:f.string().min(1)}),y_e=f.object({servers:f.array(f.object({status:f.string(),public_net:f.object({ipv4:f.object({ip:f.string().min(1)})})}))})});import{access as cN,chmod as _E,mkdir as Ph,readFile as uN,writeFile as lN}from"fs/promises";import{dirname as FQ,join as Lc}from"path";import{fileURLToPath as ZQ}from"url";var Zp={name:"@rizom/ops",version:"0.2.0-alpha.
|
|
767
|
+
`}var SV,y_e;var Tx=w(async()=>{Be();gV();ni();jp();await hV();SV=f.object({HCLOUD_TOKEN:f.string().min(1),KAMAL_SSH_PRIVATE_KEY:f.string().min(1)}),y_e=f.object({servers:f.array(f.object({status:f.string(),public_net:f.object({ipv4:f.object({ip:f.string().min(1)})})}))})});import{access as cN,chmod as _E,mkdir as Ph,readFile as uN,writeFile as lN}from"fs/promises";import{dirname as FQ,join as Lc}from"path";import{fileURLToPath as ZQ}from"url";var Zp={name:"@rizom/ops",version:"0.2.0-alpha.383",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};$s();yd();var HQ=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],kE=new Set([".kamal/hooks/pre-deploy"]),JQ=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),KQ=ZQ(new URL("../templates/rover-pilot/",import.meta.url)),VQ=[`service: rover
|
|
768
768
|
image: <%= ENV['IMAGE_REPOSITORY'] %>
|
|
769
769
|
|
|
770
770
|
servers:
|