npm - @rizom/ops - Versions diffs - 0.2.0-alpha.393 → 0.2.0-alpha.395 - Mend

@rizom/ops 0.2.0-alpha.393 → 0.2.0-alpha.395

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -766,7 +766,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var HK,_Se;var _O=v(async()=>{Je();UK();qo();Np();await jK();HK=h.object({HCLOUD_TOKEN:h.string().min(1),KAMAL_SSH_PRIVATE_KEY:h.string().min(1)}),_Se=h.object({servers:h.array(h.object({status:h.string(),public_net:h.object({ipv4:h.object({ip:h.string().min(1)})})}))})});import{parseArgs as TV}from"util";function xt(e){return e}class qp extends Error{constructor(e){super(e);this.name="CliUsageError"}}function OV(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function RV(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function PV(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function AO(e,t){let r=OV(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=TV({args:e,options:RV(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(PV(s))throw new qp(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function $O(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>`  ${r.label.padEnd(t)}  ${r.description}`)}function NV(e){return $O(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function zV(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function CO(e){return $O(Object.entries(e).map(([t,r])=>({label:zV(t,r),description:r.description})))}function TO(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function LV(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function DV(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=LV(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(...CO(n.flags));return i}function OO(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...NV(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...CO(e.globalFlags));return t.push(...DV(e.commands)),t.join(`
-`)}function RO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function wt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Iu(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var jp={name:"@rizom/ops",version:"0.2.0-alpha.393",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as fG,mkdirSync as pG,readFileSync as dw,writeFileSync as fw}from"fs";import{dirname as mG,join as j2}from"path";function Ex(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Tt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function er(e,t,r=""){let i=Ex(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function ki(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Tt(e.outputLen),Tt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function tc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Up(e,t){er(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Mp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ar(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var qV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function jV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function UV(e){for(let t=0;t<e.length;t++)e[t]=jV(e[t]);return e}var Ix=qV?(e)=>e:UV,NO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),MV=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Fp(e){if(er(e),NO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=MV[e[r]];return t}var _i={_0:48,_9:57,A:65,F:70,a:97,f:102};function PO(e){if(e>=_i._0&&e<=_i._9)return e-_i._0;if(e>=_i.A&&e<=_i.F)return e-(_i.A-10);if(e>=_i.a&&e<=_i.f)return e-(_i.a-10);return}function Au(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(NO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=PO(e.charCodeAt(o)),a=PO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function FV(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function Ax(e,t=""){if(typeof e==="string")return FV(e);return er(e,void 0,t)}function $x(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];er(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Zp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function Cx(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ei(e=32){Tt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var Tx=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ox{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(ki(e),er(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ar(i)}update(e){return tc(this),this.iHash.update(e),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Qn=(()=>{let e=(t,r,i)=>new Ox(t,r).update(i).digest();return e.create=(t,r)=>new Ox(t,r),e})();function $u(e,t,r){if(ki(e),r===void 0)r=new Uint8Array(e.outputLen);return Qn(e,r,t)}var Rx=Uint8Array.of(0),zO=Uint8Array.of();function Px(e,t,r,i=32){ki(e),Tt(i,"length"),er(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=zO;else er(r,void 0,"info");let s=new Uint8Array(o*n),a=Qn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Rx[0]=u+1,c.update(u===0?zO:l).update(r).update(Rx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ar(l,Rx),s.slice(0,i)}var ao=(e,t,r,i,n)=>Px(e,$u(e,t,r),i,n);function LO(e,t,r){return e&t^~e&r}function DO(e,t,r){return e&t^e&r^t&r}class Hp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=rc(this.buffer)}update(e){tc(this),er(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=rc(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ar(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=rc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ii=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var tr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Jp=BigInt(4294967295),BO=BigInt(32);function ZV(e,t=!1){if(t)return{h:Number(e&Jp),l:Number(e>>BO&Jp)};return{h:Number(e>>BO&Jp)|0,l:Number(e&Jp)|0}}function qO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=ZV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var Nx=(e,t,r)=>e>>>r,zx=(e,t,r)=>e<<32-r|t>>>r,Es=(e,t,r)=>e>>>r|t<<32-r,Is=(e,t,r)=>e<<32-r|t>>>r,Cu=(e,t,r)=>e<<64-r|t>>>r-32,Tu=(e,t,r)=>e>>>r-32|t<<64-r;function Yn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var jO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),UO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,MO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),FO=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,ZO=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),HO=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var JV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),co=new Uint32Array(64);class JO extends Hp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)co[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=co[u-15],f=co[u-2],p=Pn(d,7)^Pn(d,18)^d>>>3,y=Pn(f,17)^Pn(f,19)^f>>>10;co[u]=y+co[u-7]+p+co[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Pn(s,6)^Pn(s,11)^Pn(s,25),f=l+d+LO(s,a,c)+JV[u]+co[u]|0,y=(Pn(r,2)^Pn(r,13)^Pn(r,22))+DO(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ar(co)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ar(this.buffer)}}class KO extends JO{A=Ii[0]|0;B=Ii[1]|0;C=Ii[2]|0;D=Ii[3]|0;E=Ii[4]|0;F=Ii[5]|0;G=Ii[6]|0;H=Ii[7]|0;constructor(){super(32)}}var VO=(()=>qO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),KV=(()=>VO[0])(),VV=(()=>VO[1])(),lo=new Uint32Array(80),uo=new Uint32Array(80);class WO extends Hp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)lo[A]=e.getUint32(t),uo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=lo[A-15]|0,N=uo[A-15]|0,q=Es(C,N,1)^Es(C,N,8)^Nx(C,N,7),E=Is(C,N,1)^Is(C,N,8)^zx(C,N,7),Z=lo[A-2]|0,L=uo[A-2]|0,H=Es(Z,L,19)^Cu(Z,L,61)^Nx(Z,L,6),ee=Is(Z,L,19)^Tu(Z,L,61)^zx(Z,L,6),M=MO(E,ee,uo[A-7],uo[A-16]),P=FO(M,q,H,lo[A-7],lo[A-16]);lo[A]=P|0,uo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Es(u,d,14)^Es(u,d,18)^Cu(u,d,41),N=Is(u,d,14)^Is(u,d,18)^Tu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=ZO(S,N,E,VV[A],uo[A]),L=HO(Z,b,C,q,KV[A],lo[A]),H=Z|0,ee=Es(r,i,28)^Cu(r,i,34)^Cu(r,i,39),M=Is(r,i,28)^Tu(r,i,34)^Tu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=Yn(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=jO(H,M,z);r=UO(I,L,ee,P),i=I|0}({h:r,l:i}=Yn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Yn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Yn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Yn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=Yn(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=Yn(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=Yn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=Yn(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ar(lo,uo)}destroy(){this.destroyed=!0,Ar(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class GO extends WO{Ah=tr[0]|0;Al=tr[1]|0;Bh=tr[2]|0;Bl=tr[3]|0;Ch=tr[4]|0;Cl=tr[5]|0;Dh=tr[6]|0;Dl=tr[7]|0;Eh=tr[8]|0;El=tr[9]|0;Fh=tr[10]|0;Fl=tr[11]|0;Gh=tr[12]|0;Gl=tr[13]|0;Hh=tr[14]|0;Hl=tr[15]|0;constructor(){super(64)}}var Ot=Cx(()=>new KO,Tx(1));var Kp=Cx(()=>new GO,Tx(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Yp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Bx(e){if(!Yp(e))throw TypeError("Uint8Array expected")}function tR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function rR(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function fo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Ru(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Wp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Gp(e,t){if(!tR(!0,t))throw TypeError(`${e}: array of strings expected`)}function qx(e,t){if(!tR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Yr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Xr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Gp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Wp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Wp(n),n.map((o)=>{fo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function en(e=""){return fo("join",e),{encode:(t)=>(Gp("join.decode",t),t.join(e)),decode:(t)=>(fo("join.decode",t),t.split(e))}}function Xp(e,t="="){return Ru(e),fo("padding",t),{encode(r){Gp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Gp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function nR(e){return rR(e),{encode:(t)=>t,decode:(t)=>e(t)}}function QO(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Wp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Ru(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,f=d+u;if(!Number.isSafeInteger(f)||d/t!==a||f-u!==d)throw Error("convertRadix: carry overflow");let p=f/r;a=f%r;let y=Math.floor(p);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==f)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var iR=(e,t)=>t===0?e:iR(t,e%t),Qp=(e,t)=>e+(t-iR(e,t)),Vp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Lx(e,t,r,i){if(Wp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Qp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Qp(t,r)}`);let n=0,o=0,s=Vp[t],a=Vp[r]-1,c=[];for(let l of e){if(Ru(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Vp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function WV(e){Ru(e);let t=256;return{encode:(r)=>{if(!Yp(r))throw TypeError("radix.encode input should be Uint8Array");return QO(Array.from(r),t,e)},decode:(r)=>(qx("radix.decode",r),Uint8Array.from(QO(r,e,t)))}}function gn(e,t=!1){if(Ru(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Qp(8,e)>32||Qp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Yp(r))throw TypeError("radix2.encode input should be Uint8Array");return Lx(Array.from(r),8,e,!t)},decode:(r)=>(qx("radix2.decode",r),Uint8Array.from(Lx(r,e,8,t)))}}function YO(e){return rR(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var GSe=Object.freeze(Yr(gn(4),Xr("0123456789ABCDEF"),en(""))),QSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Xp(5),en(""))),YSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),en(""))),XSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Xp(5),en(""))),e_e=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),en(""))),t_e=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),en(""),nR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),oR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),GV=/[\t\n\f\r ]/,sR=(e,t)=>{fo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&GV.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},jx=Object.freeze(oR?{encode(e){return Bx(e),e.toBase64()},decode(e){return sR(e,!1)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Xp(6),en(""))),hr=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),en(""))),r_e=Object.freeze(oR?{encode(e){return Bx(e),e.toBase64({alphabet:"base64url"})},decode(e){return sR(e,!0)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Xp(6),en(""))),n_e=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),en(""))),Ux=(e)=>Yr(WV(58),Xr(e),en("")),i_e=Object.freeze(Ux("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),o_e=Object.freeze(Ux("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),s_e=Object.freeze(Ux("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Dx=Yr(Xr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),en("")),XO=[996825010,642813549,513874426,1027748829,705979059];function Ou(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<XO.length;i++)if((t>>i&1)===1)r^=XO[i];return r}function eR(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Ou(n)^s>>5}n=Ou(n);for(let o=0;o<i;o++)n=Ou(n)^e.charCodeAt(o)&31;for(let o of t)n=Ou(n)^o;for(let o=0;o<6;o++)n=Ou(n);return n^=r,Dx.encode(Lx([n%Vp[30]],30,5,!1))}function aR(e){let t=e==="bech32"?1:734539939,r=gn(5),i=r.decode,n=r.encode,o=YO(i);function s(d,f,p=90){if(fo("bech32.encode prefix",d),Yp(f))f=Array.from(f);qx("bech32.encode",f);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+f.length;if(p!==!1&&g>p)throw TypeError(`Length ${g} exceeds limit ${p}`);let b=d.toLowerCase(),S=eR(b,f,t);return`${b}1${Dx.encode(f)}${S}`}function a(d,f=90){fo("bech32.decode input",d);let p=d.length;if(p<8||f!==!1&&p>f)throw TypeError(`invalid string length: ${p} (${d}). Expected (8..${f})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),S=y.slice(g+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let A=Dx.decode(S).slice(0,-6),C=eR(b,A,t);if(!S.endsWith(C))throw Error(`Invalid checksum in ${d}: expected "${C}"`);return{prefix:b,words:A}}let c=YO(a);function l(d){let{prefix:f,words:p}=a(d,!1);return{prefix:f,words:p,bytes:i(p)}}function u(d,f){return s(d,n(f))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var tn=Object.freeze(aR("bech32")),a_e=Object.freeze(aR("bech32m"));var QV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),YV={encode(e){return Bx(e),e.toHex()},decode(e){return fo("hex",e),Uint8Array.fromHex(e)}},c_e=Object.freeze(QV?YV:Yr(gn(4),Xr("0123456789abcdef"),en(""),nR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function e7(e,t,r,i){ki(e);let n=Zp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Tt(o,"c"),Tt(s,"dkLen"),Tt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=Ax(t,"password"),l=Ax(r,"salt"),u=new Uint8Array(s),d=Qn.create(e,c),f=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:f}}function t7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Ar(n),r}function Mx(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=e7(e,t,r,i),l,u=new Uint8Array(4),d=rc(u),f=new Uint8Array(a.outputLen);for(let p=1,y=0;y<o;p++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);d.setInt32(0,p,!1),(l=c._cloneInto(l)).update(u).digestInto(f),g.set(f.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(f).digestInto(f);for(let S=0;S<g.length;S++)g[S]^=f[S]}}return t7(a,c,s,l,f)}function cR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],d=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],S=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],N=e[t++]^r[i++],q=e[t++]^r[i++],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let ue=0;ue<8;ue+=2)ee^=Xe(E+D|0,7),I^=Xe(ee+E|0,9),D^=Xe(I+ee|0,13),E^=Xe(D+I|0,18),R^=Xe(M+Z|0,7),V^=Xe(R+M|0,9),Z^=Xe(V+R|0,13),M^=Xe(Z+V|0,18),_^=Xe(O+P|0,7),L^=Xe(_+O|0,9),P^=Xe(L+_|0,13),O^=Xe(P+L|0,18),H^=Xe(re+F|0,7),z^=Xe(H+re|0,9),F^=Xe(z+H|0,13),re^=Xe(F+z|0,18),Z^=Xe(E+H|0,7),L^=Xe(Z+E|0,9),H^=Xe(L+Z|0,13),E^=Xe(H+L|0,18),P^=Xe(M+ee|0,7),z^=Xe(P+M|0,9),ee^=Xe(z+P|0,13),M^=Xe(ee+z|0,18),F^=Xe(O+R|0,7),I^=Xe(F+O|0,9),R^=Xe(I+F|0,13),O^=Xe(R+I|0,18),D^=Xe(re+_|0,7),V^=Xe(D+re|0,9),_^=Xe(V+D|0,13),re^=Xe(_+V|0,18);n[o++]=s+E|0,n[o++]=a+Z|0,n[o++]=c+L|0,n[o++]=l+H|0,n[o++]=u+ee|0,n[o++]=d+M|0,n[o++]=f+P|0,n[o++]=p+z|0,n[o++]=y+I|0,n[o++]=g+R|0,n[o++]=b+O|0,n[o++]=S+F|0,n[o++]=A+D|0,n[o++]=C+V|0,n[o++]=N+_|0,n[o++]=q+re|0}function Fx(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(cR(r,s,e,t,r,o),a>0)s+=16;cR(r,o,e,t+=16,r,s)}}function r7(e,t,r){let i=Zp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Tt(n,"N"),Tt(o,"r"),Tt(s,"p"),Tt(a,"dkLen"),Tt(c,"asyncTick"),Tt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,f=d/4,p=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>p)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(p-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(p-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=Mx(Ot,e,t,{c:1,dkLen:d*s}),b=Mp(g),S=Mp(new Uint8Array(d*n)),A=Mp(new Uint8Array(d)),C=()=>{};if(u){let N=2*n*s,q=Math.max(Math.floor(N/1e4),1),E=0;C=()=>{if(E++,u&&(!(E%q)||E===N))u(E/N)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:f,V:S,B32:b,B:g,tmp:A,blockMixCb:C,asyncTick:c}}function n7(e,t,r,i,n){let o=Mx(Ot,e,r,{c:1,dkLen:t});return Ar(r,i,n),o}function Zx(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:f}=r7(e,t,r);Ix(l);for(let p=0;p<o;p++){let y=a*p;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)Fx(c,b,c,b+=a,n),f();Fx(c,(i-1)*a,l,y,n),f();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let S=0;S<a;S++)d[S]=l[y+S]^c[b*a+S];Fx(d,0,l,y,n),f()}}return Ix(l),n7(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function i7(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function em(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function nc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Mt(e,t,r=""){let i=i7(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Hx(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function lR(e,t,r=!1){Mt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!ic(e))throw Error("invalid output, must be aligned")}function Xn(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Nn(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function o7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var As=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),s7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var a7=(e)=>{for(let t=0;t<e.length;t++)e[t]=s7(e[t]);return e},Ai=As?(e)=>e:a7;function uR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function dR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function fR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var pR=(e,t)=>{function r(i,...n){if(Mt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Mt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Mt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Mt(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Mt(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Mt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(r,e),r};function Pu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Mt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!ic(t))throw Error("invalid output, must be aligned");return t}function mR(e,t,r){nc(e),nc(t),em(r);let i=new Uint8Array(16),n=o7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function ic(e){return e.byteOffset%4===0}function oc(e){return Uint8Array.from(Mt(e))}var gR=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),c7=(()=>Ai(Xn(gR("expand 16-byte k"))))(),l7=(()=>Ai(Xn(gR("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var Nu=64,u7=16,Jx=(()=>4294967295)(),hR=Uint32Array.of();function d7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Nu),u=Xn(l),d=As&&ic(n)&&ic(o),f=d?Xn(n):hR,p=d?Xn(o):hR;if(!As){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ai(u),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);if(d&&g===Nu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let S=0,A;S<u7;S++)A=b+S,p[A]=f[A]^u[S];y+=Nu;continue}for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}}function yR(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=uR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return nc(n),nc(s),em(o),em(r),(a,c,l,u,d=0)=>{Mt(a,void 0,"key"),Mt(c,void 0,"nonce"),Mt(l,void 0,"data");let f=l.length;if(u=Pu(f,u,!1),nc(d),d<0||d>=Jx)throw Error("arx: counter overflow");let p=[],y=a.length,g,b;if(y===32)p.push(g=oc(a)),b=l7;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=c7,p.push(g);else throw Mt(a,32,"arx key"),Error("invalid key size");if(!As||!ic(c))p.push(c=oc(c));let S=Xn(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let N=c.subarray(0,16);if(As)i(b,S,Xn(N),S);else{let q=Ai(Uint32Array.from(b));i(q,S,Xn(N),S),Nn(q),Ai(S)}c=c.subarray(16)}else if(!As)Ai(S);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let N=new Uint8Array(12);N.set(c,o?0:12-c.length),c=N,p.push(c)}let C=Ai(Xn(c));try{return d7(e,b,S,C,l,u,d,s),u}finally{Nn(...p)}}}function rr(e,t){return e[t++]&255|(e[t++]&255)<<8}class bR{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=oc(Mt(e,32,"key"));let t=rr(e,0),r=rr(e,2),i=rr(e,4),n=rr(e,6),o=rr(e,8),s=rr(e,10),a=rr(e,12),c=rr(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=rr(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],f=o[6],p=o[7],y=o[8],g=o[9],b=rr(e,t+0),S=rr(e,t+2),A=rr(e,t+4),C=rr(e,t+6),N=rr(e,t+8),q=rr(e,t+10),E=rr(e,t+12),Z=rr(e,t+14),L=n[0]+(b&8191),H=n[1]+((b>>>13|S<<3)&8191),ee=n[2]+((S>>>10|A<<6)&8191),M=n[3]+((A>>>7|C<<9)&8191),P=n[4]+((C>>>4|N<<12)&8191),z=n[5]+(N>>>1&8191),I=n[6]+((N>>>14|q<<2)&8191),R=n[7]+((q>>>11|E<<5)&8191),O=n[8]+((E>>>8|Z<<8)&8191),F=n[9]+(Z>>>5|i),D=0,V=D+L*s+H*(5*g)+ee*(5*y)+M*(5*p)+P*(5*f);D=V>>>13,V&=8191,V+=z*(5*d)+I*(5*u)+R*(5*l)+O*(5*c)+F*(5*a),D+=V>>>13,V&=8191;let _=D+L*a+H*s+ee*(5*g)+M*(5*y)+P*(5*p);D=_>>>13,_&=8191,_+=z*(5*f)+I*(5*d)+R*(5*u)+O*(5*l)+F*(5*c),D+=_>>>13,_&=8191;let re=D+L*c+H*a+ee*s+M*(5*g)+P*(5*y);D=re>>>13,re&=8191,re+=z*(5*p)+I*(5*f)+R*(5*d)+O*(5*u)+F*(5*l),D+=re>>>13,re&=8191;let ue=D+L*l+H*c+ee*a+M*s+P*(5*g);D=ue>>>13,ue&=8191,ue+=z*(5*y)+I*(5*p)+R*(5*f)+O*(5*d)+F*(5*u),D+=ue>>>13,ue&=8191;let T=D+L*u+H*l+ee*c+M*a+P*s;D=T>>>13,T&=8191,T+=z*(5*g)+I*(5*y)+R*(5*p)+O*(5*f)+F*(5*d),D+=T>>>13,T&=8191;let we=D+L*d+H*u+ee*l+M*c+P*a;D=we>>>13,we&=8191,we+=z*s+I*(5*g)+R*(5*y)+O*(5*p)+F*(5*f),D+=we>>>13,we&=8191;let Ee=D+L*f+H*d+ee*u+M*l+P*c;D=Ee>>>13,Ee&=8191,Ee+=z*a+I*s+R*(5*g)+O*(5*y)+F*(5*p),D+=Ee>>>13,Ee&=8191;let Te=D+L*p+H*f+ee*d+M*u+P*l;D=Te>>>13,Te&=8191,Te+=z*c+I*a+R*s+O*(5*g)+F*(5*y),D+=Te>>>13,Te&=8191;let Ce=D+L*y+H*p+ee*f+M*d+P*u;D=Ce>>>13,Ce&=8191,Ce+=z*l+I*c+R*a+O*s+F*(5*g),D+=Ce>>>13,Ce&=8191;let _e=D+L*g+H*y+ee*p+M*f+P*d;D=_e>>>13,_e&=8191,_e+=z*u+I*l+R*c+O*a+F*s,D+=_e>>>13,_e&=8191,D=(D<<2)+D|0,D=D+V|0,V=D&8191,D=D>>>13,_+=D,n[0]=V,n[1]=_,n[2]=re,n[3]=ue,n[4]=T,n[5]=we,n[6]=Ee,n[7]=Te,n[8]=Ce,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;Nn(r)}update(e){Hx(this),Mt(e),e=oc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,Nn(this.h,this.r,this.buffer,this.pad)}digestInto(e){Hx(this),lR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var xR=fR(32,(e)=>new bR(e));function f7(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],f=t[2],p=t[3],y=t[4],g=t[5],b=t[6],S=t[7],A=n,C=r[0],N=r[1],q=r[2],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let T=0;T<o;T+=2)E=E+ee|0,D=et(D^E,16),I=I+D|0,ee=et(ee^I,12),E=E+ee|0,D=et(D^E,8),I=I+D|0,ee=et(ee^I,7),Z=Z+M|0,V=et(V^Z,16),R=R+V|0,M=et(M^R,12),Z=Z+M|0,V=et(V^Z,8),R=R+V|0,M=et(M^R,7),L=L+P|0,_=et(_^L,16),O=O+_|0,P=et(P^O,12),L=L+P|0,_=et(_^L,8),O=O+_|0,P=et(P^O,7),H=H+z|0,re=et(re^H,16),F=F+re|0,z=et(z^F,12),H=H+z|0,re=et(re^H,8),F=F+re|0,z=et(z^F,7),E=E+M|0,re=et(re^E,16),O=O+re|0,M=et(M^O,12),E=E+M|0,re=et(re^E,8),O=O+re|0,M=et(M^O,7),Z=Z+P|0,D=et(D^Z,16),F=F+D|0,P=et(P^F,12),Z=Z+P|0,D=et(D^Z,8),F=F+D|0,P=et(P^F,7),L=L+z|0,V=et(V^L,16),I=I+V|0,z=et(z^I,12),L=L+z|0,V=et(V^L,8),I=I+V|0,z=et(z^I,7),H=H+ee|0,_=et(_^H,16),R=R+_|0,ee=et(ee^R,12),H=H+ee|0,_=et(_^H,8),R=R+_|0,ee=et(ee^R,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+Z|0,i[ue++]=c+L|0,i[ue++]=l+H|0,i[ue++]=u+ee|0,i[ue++]=d+M|0,i[ue++]=f+P|0,i[ue++]=p+z|0,i[ue++]=y+I|0,i[ue++]=g+R|0,i[ue++]=b+O|0,i[ue++]=S+F|0,i[ue++]=A+D|0,i[ue++]=C+V|0,i[ue++]=N+_|0,i[ue++]=q+re|0}var p7=yR(f7,{counterRight:!1,counterLength:4,allowShortKeys:!1});var m7=new Uint8Array(16),wR=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(m7.subarray(r))},h7=new Uint8Array(32);function vR(e,t,r,i,n){if(n!==void 0)Mt(n,void 0,"AAD");let o=e(t,r,h7),s=mR(i.length,n?n.length:0,!0),a=xR.create(o);if(n)wR(a,n);wR(a,i),a.update(s);let c=a.digest();return Nn(o,s),c}var g7=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Pu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=vR(e,t,r,c,i);return s.set(l,a),Nn(l),s},decrypt(o,s){s=Pu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=vR(e,t,r,a,i);if(!dR(c,l))throw Nn(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),Nn(l),s}}),yn=pR({blockSize:64,nonceLength:12,tagLength:16},g7(p7));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function sc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Vt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Ne(e,t,r=""){let i=sc(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function bn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Vt(e.outputLen),Vt(e.blockLen)}function Ci(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function tm(e,t){Ne(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function rm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ur(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function nm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function zn(e,t){return e<<32-t|e>>>t}var y7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function b7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function x7(e){for(let t=0;t<e.length;t++)e[t]=b7(e[t]);return e}var Kx=y7?(e)=>e:x7,_R=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),w7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function $s(e){if(Ne(e),_R)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=w7[e[r]];return t}var $i={_0:48,_9:57,A:65,F:70,a:97,f:102};function SR(e){if(e>=$i._0&&e<=$i._9)return e-$i._0;if(e>=$i.A&&e<=$i.F)return e-($i.A-10);if(e>=$i.a&&e<=$i.f)return e-($i.a-10);return}function Cs(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(_R)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=SR(e.charCodeAt(o)),a=SR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Lt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Ne(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function ac(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function po(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var mo=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wx=BigInt(0),Vx=BigInt(1);function zu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function kR(e){if(typeof e==="bigint"){if(!im(e))throw Error("positive bigint expected, got "+e)}else Vt(e);return e}function Lu(e){let t=kR(e).toString(16);return t.length&1?"0"+t:t}function ER(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Wx:BigInt("0x"+e)}function ho(e){return ER($s(e))}function go(e){return ER($s(om(Ne(e)).reverse()))}function cc(e,t){Vt(t),e=kR(e);let r=Cs(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Du(e,t){return cc(e,t).reverse()}function om(e){return Uint8Array.from(e)}function yo(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var im=(e)=>typeof e==="bigint"&&Wx<=e;function v7(e,t,r){return im(e)&&im(t)&&im(r)&&t<=e&&e<r}function Bu(e,t,r,i){if(!v7(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function Gx(e){let t;for(t=0;e>Wx;e>>=Vx,t+=1);return t}var qu=(e)=>(Vx<<BigInt(e))-Vx;function IR(e,t,r){if(Vt(e,"hashLen"),Vt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,Lt(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return Lt(...S)};return(b,S)=>{d(),p(b);let A=void 0;while(!(A=S(y())))p();return d(),A}}function Ts(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function Qx(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),gr=BigInt(1),Os=BigInt(2),CR=BigInt(3),TR=BigInt(4),OR=BigInt(5),S7=BigInt(7),RR=BigInt(8),_7=BigInt(9),PR=BigInt(16);function $r(e,t){let r=e%t;return r>=Cr?r:t+r}function xn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function AR(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=$r(e,t),i=t,n=Cr,o=gr,s=gr,a=Cr;while(r!==Cr){let l=i/r,u=i%r,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==gr)throw Error("invert: does not exist");return $r(n,t)}function Yx(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function NR(e,t){let r=(e.ORDER+gr)/TR,i=e.pow(t,r);return Yx(e,i,t),i}function k7(e,t){let r=(e.ORDER-OR)/RR,i=e.mul(t,Os),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Os),n),a=e.mul(o,e.sub(s,e.ONE));return Yx(e,a,t),a}function E7(e){let t=sm(e),r=zR(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+S7)/PR;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,n),f=a.mul(l,o),p=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,p),u=a.cmov(f,d,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return Yx(a,b,c),b}}function zR(e){if(e<CR)throw Error("sqrt is not defined for small field");let t=e-gr,r=0;while(t%Os===Cr)t/=Os,r++;let i=Os,n=sm(e);while($R(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return NR;let o=n.pow(i,t),s=(t+gr)/Os;return function(c,l){if(c.is0(l))return l;if($R(c,l)!==1)throw Error("Cannot find square root");let u=r,d=c.mul(c.ONE,o),f=c.pow(l,t),p=c.pow(l,s);while(!c.eql(f,c.ONE)){if(c.is0(f))return c.ZERO;let y=1,g=c.sqr(f);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=gr<<BigInt(u-y-1),S=c.pow(d,b);u=y,d=c.sqr(S),f=c.mul(f,d),p=c.mul(p,S)}return p}}function I7(e){if(e%TR===CR)return NR;if(e%RR===OR)return k7;if(e%PR===_7)return E7(e);return zR(e)}var A7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Xx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=A7.reduce((i,n)=>(i[n]="function",i),t);return Ts(e,r),e}function $7(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===gr)return t;let i=e.ONE,n=t;while(r>Cr){if(r&gr)i=e.mul(i,n);n=e.sqr(n),r>>=gr}return i}function ju(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function $R(e,t){let r=(e.ORDER-gr)/Os,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function C7(e,t){if(t!==void 0)Vt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class LR{ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=gr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=C7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return $r(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&gr)===gr}neg(e){return $r(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return $r(e*e,this.ORDER)}add(e,t){return $r(e+t,this.ORDER)}sub(e,t){return $r(e-t,this.ORDER)}mul(e,t){return $r(e*t,this.ORDER)}pow(e,t){return $7(this,e,t)}div(e,t){return $r(e*AR(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return AR(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=I7(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Du(e,this.BYTES):cc(e,this.BYTES)}fromBytes(e,t=!1){Ne(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?go(e):ho(e);if(s)a=$r(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ju(this,e)}cmov(e,t,r){return r?t:e}}function sm(e,t={}){return new LR(e,t)}function DR(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function e0(e){let t=DR(e);return t+Math.ceil(t/2)}function BR(e,t,r=!1){Ne(e);let i=e.length,n=DR(t),o=e0(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?go(e):ho(e),a=$r(s,t-gr)+gr;return r?Du(a,n):cc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lc=BigInt(0),Rs=BigInt(1);function Uu(e,t){let r=t.negate();return e?r:t}function i0(e,t){let r=ju(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function MR(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function t0(e,t){MR(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=qu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function qR(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Rs;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var r0=new WeakMap,FR=new WeakMap;function n0(e){return FR.get(e)||1}function jR(e){if(e!==lc)throw Error("invalid wNAF")}class o0{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>lc){if(t&Rs)r=r.add(i);i=i.double(),t>>=Rs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=t0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=t0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=qR(r,s,o);if(r=a,l)n=n.add(Uu(d,t[f]));else i=i.add(Uu(u,t[c]))}return jR(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=t0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===lc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=qR(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return jR(r),i}getPrecomputes(e,t,r){let i=r0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);r0.set(t,i)}}return i}cached(e,t,r){let i=n0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=n0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){MR(t,this.bits),FR.set(e,t),r0.delete(e)}hasCache(e){return n0(e)!==1}}function ZR(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>lc||i>lc){if(r&Rs)o=o.add(n);if(i&Rs)s=s.add(n);n=n.double(),r>>=Rs,i>>=Rs}return{p1:o,p2:s}}function UR(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Xx(t),t}else return sm(e,{isLE:r})}function HR(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>lc))throw Error(`CURVE.${c} must be positive bigint`)}let n=UR(t.p,r.Fp,i),o=UR(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function am(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mu=BigInt(0),uc=BigInt(1),cm=BigInt(2);function T7(e){return Ts(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function JR(e){let t=T7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||po,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?cm**BigInt(254):cm**BigInt(447),y=a?BigInt(8)*cm**BigInt(251)-uc:BigInt(4)*cm**BigInt(445)-uc,g=p+y+uc,b=(I)=>$r(I,r),S=A(d);function A(I){return Du(b(I),u)}function C(I){let R=om(Ne(I,u,"uCoordinate"));if(a)R[31]&=127;return b(go(R))}function N(I){return go(n(om(Ne(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===Mu)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Bu("u",I,Mu,r),Bu("scalar",R,p,g);let O=R,F=I,D=uc,V=Mu,_=I,re=uc,ue=Mu;for(let we=BigInt(l-1);we>=Mu;we--){let Ee=O>>we&uc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(Ne(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze({keygen:am(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}class s0{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(bn(e),Ne(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ur(i)}update(e){return Ci(this),this.iHash.update(e),this}digestInto(e){Ci(this),Ne(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dc=(e,t,r)=>new s0(e,t).update(r).digest();dc.create=(e,t)=>new s0(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KR=(e,t)=>(e+(e>=0?t:-t)/WR)/t;function O7(e,t,r){let[[i,n],[o,s]]=t,a=KR(s*e,r),c=KR(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<Ti,f=u<Ti;if(d)l=-l;if(f)u=-u;let p=qu(Math.ceil(Gx(r)/2))+fc;if(l<Ti||l>=p||u<Ti||u>=p)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:f,k2:u}}function c0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function a0(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(zu(r.lowS,"lowS"),zu(r.prehash,"prehash"),r.format!==void 0)c0(r.format);return r}class VR extends Error{constructor(e=""){super(e)}}var bo={Err:VR,_tlv:{encode:(e,t)=>{let{Err:r}=bo;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Lu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Lu(n.length/2|128):"";return Lu(e)+o+n+t},decode(e,t){let{Err:r}=bo,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=bo;if(e<Ti)throw new t("integer: negative integers are not allowed");let r=Lu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=bo;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return ho(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=bo,n=Ne(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=bo,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Ti=BigInt(0),fc=BigInt(1),WR=BigInt(2),lm=BigInt(3),R7=BigInt(4);function l0(e,t={}){let r=HR("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ts(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=QR(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(P,z,I){let{x:R,y:O}=z.toAffine(),F=i.toBytes(R);if(zu(I,"isCompressed"),I){u();let D=!i.isOdd(O);return Lt(GR(D),F)}else return Lt(Uint8Array.of(4),F,i.toBytes(O))}function f(P){Ne(P,void 0,"Point");let{publicKey:z,publicKeyUncompressed:I}=l,R=P.length,O=P[0],F=P.subarray(1);if(R===z&&(O===2||O===3)){let D=i.fromBytes(F);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let V=g(D),_;try{_=i.sqrt(V)}catch(T){let we=T instanceof Error?": "+T.message:"";throw Error("bad point: is not on curve, sqrt error"+we)}u();let re=i.isOdd(_);if((O&1)===1!==re)_=i.neg(_);return{x:D,y:_}}else if(R===I&&O===4){let D=i.BYTES,V=i.fromBytes(F.subarray(0,D)),_=i.fromBytes(F.subarray(D,D*2));if(!b(V,_))throw Error("bad point: is not on curve");return{x:V,y:_}}else throw Error(`bad point: got length ${R}, expected compressed=${z} or uncompressed=${I}`)}let p=t.toBytes||d,y=t.fromBytes||f;function g(P){let z=i.sqr(P),I=i.mul(z,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,z){let I=i.sqr(z),R=g(P);return i.eql(I,R)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let S=i.mul(i.pow(o.a,lm),R7),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(S,A)))throw Error("bad curve params: a or b");function C(P,z,I=!1){if(!i.isValid(z)||I&&i.is0(z))throw Error(`bad point coordinate ${P}`);return z}function N(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function q(P){if(!c||!c.basises)throw Error("no endo");return O7(P,c.basises,n.ORDER)}let E=Qx((P,z)=>{let{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}),Z=Qx((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:z,y:I}=P.toAffine();if(!i.isValid(z)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(z,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function L(P,z,I,R,O){return I=new H(i.mul(I.X,P),I.Y,I.Z),z=Uu(R,z),I=Uu(O,I),z.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,z,I){this.X=C("x",P),this.Y=C("y",z,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:z,y:I}=P||{};if(!P||!i.isValid(z)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(z)&&i.is0(I))return H.ZERO;return new H(z,I,i.ONE)}static fromBytes(P){let z=H.fromAffine(y(Ne(P,void 0,"point")));return z.assertValidity(),z}static fromHex(P){return H.fromBytes(Cs(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,z=!0){if(M.createCache(this,P),!z)this.multiply(lm);return this}assertValidity(){Z(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.eql(i.mul(z,D),i.mul(O,R)),_=i.eql(i.mul(I,D),i.mul(F,R));return V&&_}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:z}=o,I=i.mul(z,lm),{X:R,Y:O,Z:F}=this,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(F,F),we=i.mul(R,O);return we=i.add(we,we),_=i.mul(R,F),_=i.add(_,_),D=i.mul(P,_),V=i.mul(I,T),V=i.add(D,V),D=i.sub(ue,V),V=i.add(ue,V),V=i.mul(D,V),D=i.mul(we,D),_=i.mul(I,_),T=i.mul(P,T),we=i.sub(re,T),we=i.mul(P,we),we=i.add(we,_),_=i.add(re,re),re=i.add(_,re),re=i.add(re,T),re=i.mul(re,we),V=i.add(V,re),T=i.mul(O,F),T=i.add(T,T),re=i.mul(T,we),D=i.sub(D,re),_=i.mul(T,ue),_=i.add(_,_),_=i.add(_,_),new H(D,V,_)}add(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.ZERO,_=i.ZERO,re=i.ZERO,ue=o.a,T=i.mul(o.b,lm),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.mul(R,D),Ce=i.add(z,I),_e=i.add(O,F);Ce=i.mul(Ce,_e),_e=i.add(we,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,R);let Pe=i.add(O,D);return _e=i.mul(_e,Pe),Pe=i.add(we,Te),_e=i.sub(_e,Pe),Pe=i.add(I,R),V=i.add(F,D),Pe=i.mul(Pe,V),V=i.add(Ee,Te),Pe=i.sub(Pe,V),re=i.mul(ue,_e),V=i.mul(T,Te),re=i.add(V,re),V=i.sub(Ee,re),re=i.add(Ee,re),_=i.mul(V,re),Ee=i.add(we,we),Ee=i.add(Ee,we),Te=i.mul(ue,Te),_e=i.mul(T,_e),Ee=i.add(Ee,Te),Te=i.sub(we,Te),Te=i.mul(ue,Te),_e=i.add(_e,Te),we=i.mul(Ee,_e),_=i.add(_,we),we=i.mul(Pe,_e),V=i.mul(Ce,V),V=i.sub(V,we),we=i.mul(Ce,Ee),re=i.mul(Pe,re),re=i.add(re,we),new H(V,_,re)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:z}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,R,O=(F)=>M.cached(this,F,(D)=>i0(H,D));if(z){let{k1neg:F,k1:D,k2neg:V,k2:_}=q(P),{p:re,f:ue}=O(D),{p:T,f:we}=O(_);R=ue.add(we),I=L(z.beta,re,T,F,V)}else{let{p:F,f:D}=O(P);I=F,R=D}return i0(H,[I,R])[0]}multiplyUnsafe(P){let{endo:z}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Ti||I.is0())return H.ZERO;if(P===fc)return I;if(M.hasCache(this))return this.multiply(P);if(z){let{k1neg:R,k1:O,k2neg:F,k2:D}=q(P),{p1:V,p2:_}=ZR(H,I,O,D);return L(z.beta,V,_,R,F)}else return M.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===fc)return!0;if(P)return P(H,this);return M.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===fc)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return zu(P,"isCompressed"),this.assertValidity(),p(H,this,P)}toHex(P=!0){return $s(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let ee=n.BITS,M=new o0(H,t.endo?Math.ceil(ee/2):ee);return H.BASE.precompute(8),H}function GR(e){return Uint8Array.of(e?2:3)}function QR(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function P7(e,t={}){let{Fn:r}=e,i=t.randomBytes||po,n=Object.assign(QR(e.Fp,r),{seed:e0(r.ORDER)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p=i(n.seed)){return BR(Ne(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!sc(p))return;if("_lengths"in r&&r._lengths||y===g)return;let S=Ne(p,void 0,"key").length;return S===g||S===b}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=am(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function u0(e,t,r={}){bn(t),Ts(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||po,n=r.hmac||((I,R)=>dc(t,I,R)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p}=P7(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*WR<o.ORDER;function b(I){let R=a>>fc;return I>R}function S(I,R){if(!s.isValidNot0(R))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,R){c0(R);let O=p.signature,F=R==="compact"?O:R==="recovered"?O+1:void 0;return Ne(I,F)}class N{r;s;recovery;constructor(I,R,O){if(this.r=S("r",I),this.s=S("s",R),O!=null){if(A(),![0,1,2,3].includes(O))throw Error("invalid recovery id");this.recovery=O}Object.freeze(this)}static fromBytes(I,R=y.format){C(I,R);let O;if(R==="der"){let{r:_,s:re}=bo.toSig(Ne(I));return new N(_,re)}if(R==="recovered")O=I[0],R="compact",I=I.subarray(1);let F=p.signature/2,D=I.subarray(0,F),V=I.subarray(F,F*2);return new N(s.fromBytes(D),s.fromBytes(V),O)}static fromHex(I,R){return this.fromBytes(Cs(I),R)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new N(this.r,this.s,I)}recoverPublicKey(I){let{r:R,s:O}=this,F=this.assertRecovery(),D=F===2||F===3?R+a:R;if(!o.isValid(D))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(D),_=e.fromBytes(Lt(GR((F&1)===0),V)),re=s.inv(D),ue=E(Ne(I,void 0,"msgHash")),T=s.create(-ue*re),we=s.create(O*re),Ee=e.BASE.multiplyUnsafe(T).add(_.multiplyUnsafe(we));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(c0(I),I==="der")return Cs(bo.hexFromSig(this));let{r:R,s:O}=this,F=s.toBytes(R),D=s.toBytes(O);if(I==="recovered")return A(),Lt(Uint8Array.of(this.assertRecovery()),F,D);return Lt(F,D)}toHex(I){return $s(this.toBytes(I))}}let q=r.bits2int||function(R){if(R.length>8192)throw Error("input is too large");let O=ho(R),F=R.length*8-c;return F>0?O>>BigInt(F):O},E=r.bits2int_modN||function(R){return s.create(q(R))},Z=qu(c);function L(I){return Bu("num < 2^"+c,I,Ti,Z),s.toBytes(I)}function H(I,R){return Ne(I,void 0,"message"),R?Ne(t(I),void 0,"prehashed message"):I}function ee(I,R,O){let{lowS:F,prehash:D,extraEntropy:V}=a0(O,y);I=H(I,D);let _=E(I),re=s.fromBytes(R);if(!s.isValidNot0(re))throw Error("invalid private key");let ue=[L(re),L(_)];if(V!=null&&V!==!1){let Te=V===!0?i(p.secretKey):V;ue.push(Ne(Te,void 0,"extraEntropy"))}let T=Lt(...ue),we=_;function Ee(Te){let Ce=q(Te);if(!s.isValidNot0(Ce))return;let _e=s.inv(Ce),Pe=e.BASE.multiply(Ce).toAffine(),Ve=s.create(Pe.x);if(Ve===Ti)return;let tt=s.create(_e*s.create(we+Ve*re));if(tt===Ti)return;let bt=(Pe.x===Ve?0:2)|Number(Pe.y&fc),zt=tt;if(F&&b(tt))zt=s.neg(tt),bt^=1;return new N(Ve,zt,g?void 0:bt)}return{seed:T,k2sig:Ee}}function M(I,R,O={}){let{seed:F,k2sig:D}=ee(I,R,O);return IR(t.outputLen,s.BYTES,n)(F,D).toBytes(O.format)}function P(I,R,O,F={}){let{lowS:D,prehash:V,format:_}=a0(F,y);if(O=Ne(O,void 0,"publicKey"),R=H(R,V),!sc(I)){let re=I instanceof N?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}C(I,_);try{let re=N.fromBytes(I,_),ue=e.fromBytes(O);if(D&&re.hasHighS())return!1;let{r:T,s:we}=re,Ee=E(R),Te=s.inv(we),Ce=s.create(Ee*Te),_e=s.create(T*Te),Pe=e.BASE.multiplyUnsafe(Ce).add(ue.multiplyUnsafe(_e));if(Pe.is0())return!1;return s.create(Pe.x)===T}catch(re){return!1}}function z(I,R,O={}){let{prehash:F}=a0(O,y);return R=H(R,F),N.fromBytes(I,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p,Point:e,sign:M,verify:P,recoverPublicKey:z,Signature:N,hash:t})}function YR(e,t,r){return e&t^~e&r}function XR(e,t,r){return e&t^e&r^t&r}class um{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=nm(this.buffer)}update(e){Ci(this),Ne(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=nm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ci(this),tm(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ur(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=nm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Oi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var nr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var dm=BigInt(4294967295),eP=BigInt(32);function N7(e,t=!1){if(t)return{h:Number(e&dm),l:Number(e>>eP&dm)};return{h:Number(e>>eP&dm)|0,l:Number(e&dm)|0}}function fm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=N7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var d0=(e,t,r)=>e>>>r,f0=(e,t,r)=>e<<32-r|t>>>r,Ps=(e,t,r)=>e>>>r|t<<32-r,Ns=(e,t,r)=>e<<32-r|t>>>r,Fu=(e,t,r)=>e<<64-r|t>>>r-32,Zu=(e,t,r)=>e>>>r-32|t<<64-r;var tP=(e,t,r)=>e<<r|t>>>32-r,rP=(e,t,r)=>t<<r|e>>>32-r,nP=(e,t,r)=>t<<r-32|e>>>64-r,iP=(e,t,r)=>e<<r-32|t>>>64-r;function ei(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var oP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),sP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,aP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),cP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,lP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),uP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var L7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),xo=new Uint32Array(64);class dP extends um{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)xo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=xo[u-15],f=xo[u-2],p=zn(d,7)^zn(d,18)^d>>>3,y=zn(f,17)^zn(f,19)^f>>>10;xo[u]=y+xo[u-7]+p+xo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=zn(s,6)^zn(s,11)^zn(s,25),f=l+d+YR(s,a,c)+L7[u]+xo[u]|0,y=(zn(r,2)^zn(r,13)^zn(r,22))+XR(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ur(xo)}destroy(){this.set(0,0,0,0,0,0,0,0),Ur(this.buffer)}}class fP extends dP{A=Oi[0]|0;B=Oi[1]|0;C=Oi[2]|0;D=Oi[3]|0;E=Oi[4]|0;F=Oi[5]|0;G=Oi[6]|0;H=Oi[7]|0;constructor(){super(32)}}var pP=(()=>fm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),D7=(()=>pP[0])(),B7=(()=>pP[1])(),wo=new Uint32Array(80),vo=new Uint32Array(80);class mP extends um{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)wo[A]=e.getUint32(t),vo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=wo[A-15]|0,N=vo[A-15]|0,q=Ps(C,N,1)^Ps(C,N,8)^d0(C,N,7),E=Ns(C,N,1)^Ns(C,N,8)^f0(C,N,7),Z=wo[A-2]|0,L=vo[A-2]|0,H=Ps(Z,L,19)^Fu(Z,L,61)^d0(Z,L,6),ee=Ns(Z,L,19)^Zu(Z,L,61)^f0(Z,L,6),M=aP(E,ee,vo[A-7],vo[A-16]),P=cP(M,q,H,wo[A-7],wo[A-16]);wo[A]=P|0,vo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Ps(u,d,14)^Ps(u,d,18)^Fu(u,d,41),N=Ns(u,d,14)^Ns(u,d,18)^Zu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=lP(S,N,E,B7[A],vo[A]),L=uP(Z,b,C,q,D7[A],wo[A]),H=Z|0,ee=Ps(r,i,28)^Fu(r,i,34)^Fu(r,i,39),M=Ns(r,i,28)^Zu(r,i,34)^Zu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=ei(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=oP(H,M,z);r=sP(I,L,ee,P),i=I|0}({h:r,l:i}=ei(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ei(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ei(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ei(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ei(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=ei(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=ei(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=ei(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ur(wo,vo)}destroy(){Ur(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class hP extends mP{Ah=nr[0]|0;Al=nr[1]|0;Bh=nr[2]|0;Bl=nr[3]|0;Ch=nr[4]|0;Cl=nr[5]|0;Dh=nr[6]|0;Dl=nr[7]|0;Eh=nr[8]|0;El=nr[9]|0;Fh=nr[10]|0;Fl=nr[11]|0;Gh=nr[12]|0;Gl=nr[13]|0;Hh=nr[14]|0;Hl=nr[15]|0;constructor(){super(48)}}var pm=ac(()=>new fP,mo(1));var gP=ac(()=>new hP,mo(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var q7=BigInt(1),yP=BigInt(2),j7=BigInt(3),U7=BigInt(5),dke=BigInt(8),bP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function M7(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=bP,a=e*e%o*e%o,c=xn(a,yP,o)*a%o,l=xn(c,q7,o)*e%o,u=xn(l,U7,o)*l%o,d=xn(u,t,o)*u%o,f=xn(d,r,o)*d%o,p=xn(f,i,o)*f%o,y=xn(p,n,o)*p%o,g=xn(y,n,o)*p%o,b=xn(g,t,o)*u%o;return{pow_p_5_8:xn(b,yP,o)*e%o,b2:a}}function F7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var xP=(()=>{let e=bP;return JR({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=M7(t);return $r(xn(r,j7,e)*i,e)},adjustScalarBytes:F7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),H7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var J7=l0(Z7),p0=u0(J7,pm);var K7=l0(H7),wP=u0(K7,gP);function SP(e,t,r){if(bn(e),r===void 0)r=new Uint8Array(e.outputLen);return dc(e,r,t)}var m0=Uint8Array.of(0),vP=Uint8Array.of();function _P(e,t,r,i=32){bn(e),Vt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=vP;else Ne(r,void 0,"info");let s=new Uint8Array(o*n),a=dc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)m0[0]=u+1,c.update(u===0?vP:l).update(r).update(m0).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ur(l,m0),s.slice(0,i)}var V7=BigInt(0),Hu=BigInt(1),W7=BigInt(2),G7=BigInt(7),Q7=BigInt(256),Y7=BigInt(113),IP=[],AP=[],$P=[];for(let e=0,t=Hu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],IP.push(2*(5*i+r)),AP.push((e+1)*(e+2)/2%64);let n=V7;for(let o=0;o<7;o++)if(t=(t<<Hu^(t>>G7)*Y7)%Q7,t&W7)n^=Hu<<(Hu<<BigInt(o))-Hu;$P.push(n)}var CP=fm($P,!0),X7=CP[0],eW=CP[1],kP=(e,t,r)=>r>32?nP(e,t,r):tP(e,t,r),EP=(e,t,r)=>r>32?iP(e,t,r):rP(e,t,r);function tW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],d=kP(l,u,1)^r[a],f=EP(l,u,1)^r[a+1];for(let p=0;p<50;p+=10)e[s+p]^=d,e[s+p+1]^=f}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=AP[s],c=kP(n,o,a),l=EP(n,o,a),u=IP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=X7[i],e[1]^=eW[i]}Ur(r)}class mm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Vt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rm(this.state)}clone(){return this._cloneInto()}keccak(){Kx(this.state32),tW(this.state32,this.rounds),Kx(this.state32),this.posOut=0,this.pos=0}update(e){Ci(this),Ne(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ci(this,!1),Ne(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Vt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(tm(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Ur(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new mm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var TP=(e,t,r,i={})=>ac(()=>new mm(t,e,r),i);var zs=TP(6,136,32,mo(8));var OP=TP(6,72,64,mo(10));var RP=(e,t,r,i={})=>ac((n={})=>new mm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),PP=RP(31,168,16,mo(11)),ti=RP(31,136,32,mo(12));function h0(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function zP(e){return h0(e),(e&e-1)===0&&e!==0}function g0(e,t){h0(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function LP(e){return h0(e),31-Math.clz32(e)}function NP(e){let t=e.length;if(t<2||!zP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=LP(t);for(let i=0;i<t;i++){let n=g0(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var y0=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=LP(r);if(!zP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)NP(u);for(let d=0,f=1;d<c-s;d++){let p=n?d+1+s:c-d,y=1<<p,g=y>>1,b=r>>p;for(let S=0;S<r;S+=y)for(let A=0,C=f++;A<g;A++){let N=o?n?r-C:C:A*b,q=S+A,E=S+A+g,Z=i[N],L=u[E],H=u[q];if(l){let ee=e.mul(L,Z);u[q]=e.add(H,ee),u[E]=e.sub(H,ee)}else if(o)u[q]=e.add(L,H),u[E]=e.mul(e.sub(L,H),Z);else u[q]=e.add(H,L),u[E]=e.mul(e.sub(H,L),Z)}}if(!n&&a)NP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ri=po;function hm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function DP(e){return Uint8Array.from(e)}function Ls(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Ne(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Ne(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function gm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Ne(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ft(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function b0(e){return(1<<e)-1}var Ike=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var BP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let N=A%C|0;return(N>=0?N|0:C+N|0)|0},l=(A,C=i)=>{let N=c(A,C)|0;return(N>C>>1?N-C|0:N)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let N=g0(C,s),q=BigInt(o)**BigInt(N)%BigInt(i);A[C]=Number(q)|0}return A}let d=u(),f={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},p={N:r,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=y0(f,{dit:!1,...p}),g=y0(f,{dit:!0,...p});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(A)=>y(A),decode:(A)=>{g(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let N=b0(A),q=A*(r/8);return{bytesLen:q,encode:(E)=>{let Z=new Uint8Array(q);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=(C.encode(E[L])&N)<<ee,ee+=A;for(;ee>=8;ee-=8,H>>=8)Z[M++]=H&b0(ee)}return Z},decode:(E)=>{let Z=t(r);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=E[L]<<ee,ee+=8;for(;ee>=A;ee-=A,H>>=A)Z[M++]=C.decode(H&N)}return Z}}}}},rW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ft(o,i)}}},qP=rW(PP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var yr=256,Ri=3329,nW=3303,iW=17,{mod:Vu,nttZetas:oW,NTT:Ds,bitsCoder:sW}=BP({N:yr,Q:Ri,F:nW,ROOT_OF_UNITY:iW,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),x0={512:{N:yr,Q:Ri,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:yr,Q:Ri,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:yr,Q:Ri,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},aW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ri/2)/Ri,decode:(r)=>r*Ri+t>>>e}},Ju=(e)=>sW(e,aW(e));function Bs(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]+t[r])}function cW(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]-t[r])}function lW(e,t,r,i,n){let o=Vu(t*i*n+e*r),s=Vu(e*i+t*r);return{c0:o,c1:s}}function ym(e,t){for(let r=0;r<yr/2;r++){let i=oW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=lW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function jP(e){let t=new Uint16Array(yr);for(let r=0;r<yr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<yr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ri)t[r++]=o;if(r<yr&&s<Ri)t[r++]=s}}return t}function Ku(e,t,r,i){let n=e(i*yr/4,t,r),o=new Uint16Array(yr),s=rm(n),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let f=s[c];for(let p=0;p<32;p++)if(u+=f&1,f>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Vu(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var uW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Ju(1),u=Ju(c),d=Ju(a),f=Ls("publicKey",gm(Ju(12),t),32),p=gm(Ju(12),t),y=Ls("ciphertext",gm(d,t),u),g=Ls("seed",32,32);return{secretCoder:p,lengths:{secretKey:p.bytesLen,publicKey:f.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{Ne(b,32,"seed");let S=new Uint8Array(33);S.set(b),S[32]=t;let A=n(S),[C,N]=g.decode(A),q=[],E=[];for(let H=0;H<t;H++)q.push(Ds.encode(Ku(r,N,H,o)));let Z=i(C);for(let H=0;H<t;H++){let ee=Ds.encode(Ku(r,N,t+H,o));for(let M=0;M<t;M++){let P=jP(Z.get(M,H));Bs(ee,ym(P,q[M]))}E.push(ee)}Z.clean();let L={publicKey:f.encode([E,C]),secretKey:p.encode(q)};return Ft(C,N,q,E,S,A),L},encrypt:(b,S,A)=>{let[C,N]=f.decode(b),q=[];for(let M=0;M<t;M++)q.push(Ds.encode(Ku(r,A,M,o)));let E=i(N),Z=new Uint16Array(yr),L=[];for(let M=0;M<t;M++){let P=Ku(r,A,t+M,s),z=new Uint16Array(yr);for(let I=0;I<t;I++){let R=jP(E.get(M,I));Bs(z,ym(R,q[I]))}Bs(P,Ds.decode(z)),L.push(P),Bs(Z,ym(C[M],q[M])),Ft(z)}E.clean();let H=Ku(r,A,2*t,s);Bs(H,Ds.decode(Z));let ee=l.decode(S);return Bs(ee,H),Ft(C,q,Z,H),y.encode([L,ee])},decrypt:(b,S)=>{let[A,C]=y.decode(b),N=p.decode(S),q=new Uint16Array(yr);for(let E=0;E<t;E++)Bs(q,ym(N[E],Ds.encode(A[E])));return cW(C,Ds.decode(q)),Ft(q,N,A),l.encode(C)}}};function w0(e){let t=uW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ls("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ri(64))=>{Ne(u,64,"seed");let{publicKey:d,secretKey:f}=t.keygen(u.subarray(0,32)),p=r(d),y=a.encode([f,d,p,u.subarray(32)]);return Ft(f,p),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,f,p,y]=a.decode(u);return Uint8Array.from(f)},encapsulate:(u,d=ri(32))=>{Ne(u,s.publicKey,"publicKey"),Ne(d,32,"message");let f=u.subarray(0,384*e.K),p=o.encode(o.decode(DP(f)));if(!hm(p,f))throw Ft(p),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ft(p);let y=i.create().update(d).update(r(u)).digest(),g=t.encrypt(u,d,y.subarray(32,64));return Ft(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{Ne(d,a.bytesLen,"secretKey"),Ne(u,s.cipherText,"cipherText");let f=a.bytesLen-96,p=f+32,y=r(d.subarray(f/2,p));if(!hm(y,d.subarray(p,p+32)))throw Error("invalid secretKey: hash check failed");let[g,b,S,A]=a.decode(d),C=t.decrypt(u,g),N=i.create().update(C).update(S).digest(),q=N.subarray(0,32),E=t.encrypt(b,C,N.subarray(32,64)),Z=hm(u,E),L=n.create({dkLen:32}).update(A).update(u).digest();return Ft(C,E,!Z?q:L),Z?q:L}}}function dW(e,t,r){return ti.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var v0={HASH256:zs,HASH512:OP,KDF:ti,XOF:qP,PRF:dW},Dke=w0({...v0,...x0[512]}),Wu=w0({...v0,...x0[768]}),UP=w0({...v0,...x0[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function fW(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ri(r.seed))=>{Ne(s,r.seed,"seed");let a=o.isLE?go(s):ho(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function S0(e,t=!1){let r=fW(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ri(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ft(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Gu(e,t){return Ls(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function _0(e){return(t,r)=>e(t,{dkLen:r})}function pW(e,t,...r){let i=Gu(r,"seed"),n=Gu(r,"publicKey");if(e===void 0)e=i.bytesLen;Vt(e);function o(s){Ne(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((d,f)=>d.keygen(a[f])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ri(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ft(a),Ft(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function bm(e,t,r,i,...n){let o=pW(e,r,...n),s=Gu(n,"cipherText"),a=Gu(n,"publicKey"),c=Gu(n,"msg");if(t===void 0)t=c.bytesLen;return Vt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ri(c.bytesLen)){let d=a.decode(l),f=c.decode(u),p=n.map((S,A)=>S.encapsulate(d[A],f[A])),y=p.map((S)=>S.sharedSecret),g=p.map((S)=>S.cipherText),b={sharedSecret:i(d,g,y),cipherText:s.encode(g)};return Ft(y,g),b},decapsulate(l,u){let d=s.decode(l),{publicKey:f,secretKey:p}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(d[b],p[b]));return i(f,d,y)}}}function MP(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>n(Lt(a[0],a[1],s[1],o[1],yo(e))),t,r)}var Vke=MP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Wu,S0(p0,!0),ti,zs),Wke=MP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",UP,S0(wP,!0),ti,zs);function mW(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>{let c=Lt(a[0],a[1],s[0],o[0],s[1],o[1],yo(e)),l=32,u=Lt(yo("hybrid_prk"),c),d=SP(n,u),f=Lt(cc(32,2),yo("shared_secret"),yo("")),p=_P(n,d,f,32);return Ft(d,f,u,c),p},t,r)}var FP=S0(xP),Gke=mW("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Wu,FP,ti,pm),hW=(()=>bm(32,32,_0(ti),(e,t,r)=>zs(Lt(r[0],r[1],t[1],e[1],yo("\\.//^\\"))),Wu,FP))();function gW(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,d),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ri(i)){return Ne(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ri(i)){Ne(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ft(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function yW(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=gW(r,n,o,i),a=64,c=a+i;return bm(32,32,(l)=>{Ne(l,32);let u=ti(l,{dkLen:c}),d=u.subarray(0,a),f=u.subarray(a,c);return Lt(d,f)},(l,u,d)=>zs(Lt(d[0],d[1],u[1],l[1],yo(e))),t,s)}var bW=(()=>yW("MLKEM768-P256",Wu,p0,128))();var xm=hW,ZP=bW;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lt=(e,t,r)=>er(e,t,r),E0=Tt,pc=Fp,ir=(...e)=>$x(...e),mc=(e)=>Au(e),hc=Ex,gc=(e)=>Ei(e),vm=BigInt(0),k0=BigInt(1);function Pi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!wm(e))throw RangeError("positive bigint expected, got "+e)}else E0(e);return e}function ni(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Qu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function HP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?vm:BigInt("0x"+e)}function qs(e){return HP(Fp(e))}function Ln(e){return HP(Fp(So(er(e)).reverse()))}function _m(e,t){if(Tt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return Au(r.padStart(t*2,"0"))}function Yu(e,t){return _m(e,t).reverse()}function JP(e,t){if(e=lt(e),t=lt(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function So(e){return Uint8Array.from(lt(e))}function km(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var wm=(e)=>typeof e==="bigint"&&vm<=e;function xW(e,t,r){return wm(e)&&wm(t)&&wm(r)&&t<=e&&e<r}function Ni(e,t,r,i){if(!xW(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function yc(e){if(e<vm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>vm;e>>=k0,t+=1);return t}var Xu=(e)=>(k0<<BigInt(e))-k0;function KP(e,t,r){if(Tt(e,"hashLen"),Tt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,ir(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return ir(...S)};return(b,S)=>{d(),p(b);let A=void 0;while((A=S(y()))===void 0)p();return d(),A}}function wn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var I0=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var or=BigInt(0),Et=BigInt(1),js=BigInt(2),QP=BigInt(3),YP=BigInt(4),XP=BigInt(5),wW=BigInt(7),e2=BigInt(8),vW=BigInt(9),t2=BigInt(16);function mt(e,t){if(t<=or)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=or?r:t+r}function vn(e,t,r){if(t<or)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >or)i*=i,i%=r;return i}function VP(e,t){if(e===or)throw Error("invert: expected non-zero number");if(t<=or)throw Error("invert: expected positive modulus, got "+t);let r=mt(e,t),i=t,n=or,o=Et,s=Et,a=or;while(r!==or){let l=i/r,u=i-r*l,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==Et)throw Error("invert: does not exist");return mt(n,t)}function A0(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function r2(e,t){let r=e,i=(r.ORDER+Et)/YP,n=r.pow(t,i);return A0(r,n,t),n}function SW(e,t){let r=e,i=(r.ORDER-XP)/e2,n=r.mul(t,js),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,js),o),c=r.mul(s,r.sub(a,r.ONE));return A0(r,c,t),c}function _W(e){let t=Em(e),r=n2(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+wW)/t2;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),f=l.mul(u,n),p=l.mul(u,o),y=l.eql(l.sqr(d),c),g=l.eql(l.sqr(f),c);u=l.cmov(u,d,y),d=l.cmov(p,f,g);let b=l.eql(l.sqr(d),c),S=l.cmov(u,d,b);return A0(l,S,c),S}}function n2(e){if(e<QP)throw Error("sqrt is not defined for small field");let t=e-Et,r=0;while(t%js===or)t/=js,r++;let i=js,n=Em(e);while(WP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return r2;let o=n.pow(i,t),s=(t+Et)/js;return function(c,l){let u=c;if(u.is0(l))return l;if(WP(u,l)!==1)throw Error("Cannot find square root");let d=r,f=u.mul(u.ONE,o),p=u.pow(l,t),y=u.pow(l,s);while(!u.eql(p,u.ONE)){if(u.is0(p))return u.ZERO;let g=1,b=u.sqr(p);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===d)throw Error("Cannot find square root");let S=Et<<BigInt(d-g-1),A=u.pow(f,S);d=g,f=u.sqr(A),p=u.mul(p,f),y=u.mul(y,A)}return y}}function kW(e){if(e%YP===QP)return r2;if(e%e2===XP)return SW;if(e%t2===vW)return _W(e);return n2(e)}var zi=(e,t)=>(mt(e,t)&Et)===Et,EW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function $0(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=EW.reduce((i,n)=>(i[n]="function",i),t);if(wn(e,r),ni(e.BYTES,"BYTES"),ni(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Et)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function IW(e,t,r){let i=e;if(r<or)throw Error("invalid exponent, negatives unsupported");if(r===or)return i.ONE;if(r===Et)return t;let n=i.ONE,o=t;while(r>or){if(r&Et)n=i.mul(n,o);o=i.sqr(o),r>>=Et}return n}function ed(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function WP(e,t){let r=e,i=(r.ORDER-Et)/js,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function AW(e,t){if(t!==void 0)E0(t);if(e<=or)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=yc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var GP=new WeakMap;class C0{ORDER;BITS;BYTES;isLE;ZERO=or;ONE=Et;_lengths;_mod;constructor(e,t={}){if(e<=Et)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=AW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return mt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return or<=e&&e<this.ORDER}is0(e){return e===or}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Et)===Et}neg(e){return mt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return mt(e*e,this.ORDER)}add(e,t){return mt(e+t,this.ORDER)}sub(e,t){return mt(e-t,this.ORDER)}mul(e,t){return mt(e*t,this.ORDER)}pow(e,t){return IW(this,e,t)}div(e,t){return mt(e*VP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return VP(e,this.ORDER)}sqrt(e){let t=GP.get(this);if(!t)GP.set(this,t=kW(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Yu(e,this.BYTES):_m(e,this.BYTES)}fromBytes(e,t=!1){lt(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Ln(e):qs(e);if(s)a=mt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ed(this,e)}cmov(e,t,r){return Pi(r,"condition"),r?t:e}}Object.freeze(C0.prototype);function Em(e,t={}){return new C0(e,t)}function i2(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Et)throw Error("field order must be greater than 1");let t=yc(e-Et);return Math.ceil(t/8)}function T0(e){let t=i2(e);return t+Math.ceil(t/2)}function o2(e,t,r=!1){lt(e);let i=e.length,n=i2(t),o=Math.max(T0(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Ln(e):qs(e),a=mt(s,t-Et)+Et;return r?Yu(a,n):_m(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bc=BigInt(0),Us=BigInt(1);function td(e,t){let r=t.negate();return e?r:t}function Ms(e,t){let r=ed(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function l2(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function O0(e,t){l2(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Xu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function s2(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Us;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var R0=new WeakMap,u2=new WeakMap;function P0(e){return u2.get(e)||1}function a2(e){if(e!==bc)throw Error("invalid wNAF")}class rd{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>bc){if(t&Us)r=r.add(i);i=i.double(),t>>=Us}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=O0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=O0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=s2(r,s,o);if(r=a,l)n=n.add(td(d,t[f]));else i=i.add(td(u,t[c]))}return a2(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=O0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===bc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=s2(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return a2(r),i}getPrecomputes(e,t,r){let i=R0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);R0.set(t,i)}}return i}cached(e,t,r){let i=P0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=P0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){l2(t,this.bits),u2.set(e,t),R0.delete(e)}hasCache(e){return P0(e)!==1}}function d2(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>bc||i>bc){if(r&Us)o=o.add(n);if(i&Us)s=s.add(n);n=n.double(),r>>=Us,i>>=Us}return{p1:o,p2:s}}function c2(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return $0(t),t}else return Em(e,{isLE:r})}function Im(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>bc))throw Error(`CURVE.${c} must be positive bigint`)}let n=c2(t.p,r.Fp,i),o=c2(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function nd(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function id(e,t){if(ni(e),ni(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function $W(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function CW(e){if(!hc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?km(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function N0(e,t,r,i){if(lt(e),ni(r),t=CW(t),t.length>255)t=i(ir(km("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ir(t,id(t.length,1)),c=new Uint8Array(o),l=id(r,2),u=Array(s),d=i(ir(c,e,l,id(0,1),a));u[0]=i(ir(d,id(1,1),a));for(let p=1;p<s;p++){let y=[$W(d,u[p-1]),id(p+1,1),a];u[p]=i(ir(...y))}return ir(...u).slice(0,r)}var f2="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p2=(e,t)=>(e+(e>=0?t:-t)/h2)/t;function TW(e,t,r){Ni("scalar",e,ii,r);let[[i,n],[o,s]]=t,a=p2(s*e,r),c=p2(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<ii,f=u<ii;if(d)l=-l;if(f)u=-u;let p=Xu(Math.ceil(yc(r)/2))+_o;if(l<ii||l>=p||u<ii||u>=p)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:f,k2:u}}function L0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function z0(e,t){wn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Pi(r.lowS,"lowS"),Pi(r.prehash,"prehash"),r.format!==void 0)L0(r.format);return r}class m2 extends Error{constructor(e=""){super(e)}}var Dn={Err:m2,_tlv:{encode:(e,t)=>{let{Err:r}=Dn;if(ni(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Qu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Qu(n.length/2|128):"";return Qu(e)+o+n+t},decode(e,t){let{Err:r}=Dn;t=lt(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Dn;if(Sm(e),e<ii)throw new t("integer: negative integers are not allowed");let r=Qu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Dn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return qs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Dn,n=lt(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Dn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Dn._tlv);Object.freeze(Dn._int);Object.freeze(Dn);var ii=BigInt(0),_o=BigInt(1),h2=BigInt(2),Am=BigInt(3),OW=BigInt(4);function g2(e,t={}){let r=Im("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;wn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=b2(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(M,P,z){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:R}=P.toAffine(),O=i.toBytes(I);if(Pi(z,"isCompressed"),z){d();let F=!i.isOdd(R);return ir(y2(F),O)}else return ir(Uint8Array.of(4),O,i.toBytes(R))}function p(M){lt(M,void 0,"Point");let{publicKey:P,publicKeyUncompressed:z}=u,I=M.length,R=M[0],O=M.subarray(1);if(l&&I===1&&R===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(R===2||R===3)){let F=i.fromBytes(O);if(!i.isValid(F))throw Error("bad point: is not on curve, wrong x");let D=b(F),V;try{V=i.sqrt(D)}catch(ue){let T=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+T)}d();let _=i.isOdd(V);if((R&1)===1!==_)V=i.neg(V);return{x:F,y:V}}else if(I===z&&R===4){let F=i.BYTES,D=i.fromBytes(O.subarray(0,F)),V=i.fromBytes(O.subarray(F,F*2));if(!S(D,V))throw Error("bad point: is not on curve");return{x:D,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${z}`)}let y=t.toBytes===void 0?f:t.toBytes,g=t.fromBytes===void 0?p:t.fromBytes;function b(M){let P=i.sqr(M),z=i.mul(P,M);return i.add(i.add(z,i.mul(M,o.a)),o.b)}function S(M,P){let z=i.sqr(P),I=b(M);return i.eql(z,I)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Am),OW),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function N(M,P,z=!1){if(!i.isValid(P)||z&&i.is0(P))throw Error(`bad point coordinate ${M}`);return P}function q(M){if(!(M instanceof L))throw Error("Weierstrass Point expected")}function E(M){if(!c||!c.basises)throw Error("no endo");return TW(M,c.basises,n.ORDER)}function Z(M,P,z,I,R){return z=new L(i.mul(z.X,M),z.Y,z.Z),P=td(I,P),z=td(R,z),P.add(z)}class L{static BASE=new L(o.Gx,o.Gy,i.ONE);static ZERO=new L(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(M,P,z){this.X=N("x",M),this.Y=N("y",P,!0),this.Z=N("z",z),Object.freeze(this)}static CURVE(){return o}static fromAffine(M){let{x:P,y:z}=M||{};if(!M||!i.isValid(P)||!i.isValid(z))throw Error("invalid affine point");if(M instanceof L)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(z))return L.ZERO;return new L(P,z,i.ONE)}static fromBytes(M){let P=L.fromAffine(g(lt(M,void 0,"point")));return P.assertValidity(),P}static fromHex(M){return L.fromBytes(mc(M))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(M=8,P=!0){if(ee.createCache(this,M),!P)this.multiply(Am);return this}assertValidity(){let M=this;if(M.is0()){if(t.allowInfinityPoint&&i.is0(M.X)&&i.eql(M.Y,i.ONE)&&i.is0(M.Z))return;throw Error("bad point: ZERO")}let{x:P,y:z}=M.toAffine();if(!i.isValid(P)||!i.isValid(z))throw Error("bad point: x or y not field elements");if(!S(P,z))throw Error("bad point: equation left != right");if(!M.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:M}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(M)}equals(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.eql(i.mul(P,F),i.mul(R,I)),V=i.eql(i.mul(z,F),i.mul(O,I));return D&&V}negate(){return new L(this.X,i.neg(this.Y),this.Z)}double(){let{a:M,b:P}=o,z=i.mul(P,Am),{X:I,Y:R,Z:O}=this,F=i.ZERO,D=i.ZERO,V=i.ZERO,_=i.mul(I,I),re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(I,R);return T=i.add(T,T),V=i.mul(I,O),V=i.add(V,V),F=i.mul(M,V),D=i.mul(z,ue),D=i.add(F,D),F=i.sub(re,D),D=i.add(re,D),D=i.mul(F,D),F=i.mul(T,F),V=i.mul(z,V),ue=i.mul(M,ue),T=i.sub(_,ue),T=i.mul(M,T),T=i.add(T,V),V=i.add(_,_),_=i.add(V,_),_=i.add(_,ue),_=i.mul(_,T),D=i.add(D,_),ue=i.mul(R,O),ue=i.add(ue,ue),_=i.mul(ue,T),F=i.sub(F,_),V=i.mul(ue,re),V=i.add(V,V),V=i.add(V,V),new L(F,D,V)}add(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=o.a,ue=i.mul(o.b,Am),T=i.mul(P,R),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.add(P,z),Ce=i.add(R,O);Te=i.mul(Te,Ce),Ce=i.add(T,we),Te=i.sub(Te,Ce),Ce=i.add(P,I);let _e=i.add(R,F);return Ce=i.mul(Ce,_e),_e=i.add(T,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,I),D=i.add(O,F),_e=i.mul(_e,D),D=i.add(we,Ee),_e=i.sub(_e,D),_=i.mul(re,Ce),D=i.mul(ue,Ee),_=i.add(D,_),D=i.sub(we,_),_=i.add(we,_),V=i.mul(D,_),we=i.add(T,T),we=i.add(we,T),Ee=i.mul(re,Ee),Ce=i.mul(ue,Ce),we=i.add(we,Ee),Ee=i.sub(T,Ee),Ee=i.mul(re,Ee),Ce=i.add(Ce,Ee),T=i.mul(we,Ce),V=i.add(V,T),T=i.mul(_e,Ce),D=i.mul(Te,D),D=i.sub(D,T),T=i.mul(Te,we),_=i.mul(_e,_),_=i.add(_,T),new L(D,V,_)}subtract(M){return q(M),this.add(M.negate())}is0(){return this.equals(L.ZERO)}multiply(M){let{endo:P}=t;if(!n.isValidNot0(M))throw RangeError("invalid scalar: out of range");let z,I,R=(O)=>ee.cached(this,O,(F)=>Ms(L,F));if(P){let{k1neg:O,k1:F,k2neg:D,k2:V}=E(M),{p:_,f:re}=R(F),{p:ue,f:T}=R(V);I=re.add(T),z=Z(P.beta,_,ue,O,D)}else{let{p:O,f:F}=R(M);z=O,I=F}return Ms(L,[z,I])[0]}multiplyUnsafe(M){let{endo:P}=t,z=this,I=M;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===ii||z.is0())return L.ZERO;if(I===_o)return z;if(ee.hasCache(this))return this.multiply(I);if(P){let{k1neg:R,k1:O,k2neg:F,k2:D}=E(I),{p1:V,p2:_}=d2(L,z,O,D);return Z(P.beta,V,_,R,F)}else return ee.unsafe(z,I)}toAffine(M){let P=this,z=M,{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}isTorsionFree(){let{isTorsionFree:M}=t;if(s===_o)return!0;if(M)return M(L,this);return ee.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:M}=t;if(s===_o)return this;if(M)return M(L,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===_o)return this.is0();return this.clearCofactor().is0()}toBytes(M=!0){return Pi(M,"isCompressed"),this.assertValidity(),y(L,this,M)}toHex(M=!0){return pc(this.toBytes(M))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,ee=new rd(L,t.endo?Math.ceil(H/2):H);if(H>=8)L.BASE.precompute(8);return Object.freeze(L.prototype),Object.freeze(L),L}function y2(e){return Uint8Array.of(e?2:3)}function b2(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function RW(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?gc:t.randomBytes,n=Object.assign(b2(e.Fp,r),{seed:Math.max(T0(r.ORDER),16)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p){return p=p===void 0?i(n.seed):p,o2(lt(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,S=r._lengths;if(!hc(p))return;let A=lt(p,void 0,"key").length,C=A===g||A===b,N=A===y||!!S?.includes(A);if(C&&N)return;return C}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=nd(a,c);return Object.freeze(d),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function x2(e,t,r={}){let i=t;ki(i),wn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?gc:r.randomBytes,o=r.hmac===void 0?(R,O)=>Qn(i,R,O):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y}=RW(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*h2+_o<s.ORDER;function S(R){let O=c>>_o;return R>O}function A(R,O){if(!a.isValidNot0(O))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return O}function C(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function N(R,O){L0(O);let F=y.signature,D=O==="compact"?F:O==="recovered"?F+1:void 0;return lt(R,D)}class q{r;s;recovery;constructor(R,O,F){if(this.r=A("r",R),this.s=A("s",O),F!=null){if(C(),![0,1,2,3].includes(F))throw Error("invalid recovery id");this.recovery=F}Object.freeze(this)}static fromBytes(R,O=g.format){N(R,O);let F;if(O==="der"){let{r:re,s:ue}=Dn.toSig(lt(R));return new q(re,ue)}if(O==="recovered")F=R[0],O="compact",R=R.subarray(1);let D=y.signature/2,V=R.subarray(0,D),_=R.subarray(D,D*2);return new q(a.fromBytes(V),a.fromBytes(_),F)}static fromHex(R,O){return this.fromBytes(mc(R),O)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new q(this.r,this.s,R)}recoverPublicKey(R){let{r:O,s:F}=this,D=this.assertRecovery(),V=D===2||D===3?O+c:O;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let _=s.toBytes(V),re=e.fromBytes(ir(y2((D&1)===0),_)),ue=a.inv(V),T=Z(lt(R,void 0,"msgHash")),we=a.create(-T*ue),Ee=a.create(F*ue),Te=e.BASE.multiplyUnsafe(we).add(re.multiplyUnsafe(Ee));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(R=g.format){if(L0(R),R==="der")return mc(Dn.hexFromSig(this));let{r:O,s:F}=this,D=a.toBytes(O),V=a.toBytes(F);if(R==="recovered")return C(),ir(Uint8Array.of(this.assertRecovery()),D,V);return ir(D,V)}toHex(R){return pc(this.toBytes(R))}}Object.freeze(q.prototype),Object.freeze(q);let E=r.bits2int===void 0?function(O){if(O.length>8192)throw Error("input is too large");let F=qs(O),D=O.length*8-l;return D>0?F>>BigInt(D):F}:r.bits2int,Z=r.bits2int_modN===void 0?function(O){return a.create(E(O))}:r.bits2int_modN,L=Xu(l);function H(R){return Ni("num < 2^"+l,R,ii,L),a.toBytes(R)}function ee(R,O){return lt(R,void 0,"message"),O?lt(i(R),void 0,"prehashed message"):R}function M(R,O,F){let{lowS:D,prehash:V,extraEntropy:_}=z0(F,g);R=ee(R,V);let re=Z(R),ue=a.fromBytes(O);if(!a.isValidNot0(ue))throw Error("invalid private key");let T=[H(ue),H(re)];if(_!=null&&_!==!1){let Ce=_===!0?n(y.secretKey):_;T.push(lt(Ce,void 0,"extraEntropy"))}let we=ir(...T),Ee=re;function Te(Ce){let _e=E(Ce);if(!a.isValidNot0(_e))return;let Pe=a.inv(_e),Ve=e.BASE.multiply(_e).toAffine(),tt=a.create(Ve.x);if(tt===ii)return;let bt=a.create(Pe*a.create(Ee+tt*ue));if(bt===ii)return;let zt=(Ve.x===tt?0:2)|Number(Ve.y&_o),pr=bt;if(D&&S(bt))pr=a.neg(bt),zt^=1;return new q(tt,pr,b?void 0:zt)}return{seed:we,k2sig:Te}}function P(R,O,F={}){let{seed:D,k2sig:V}=M(R,O,F);return KP(i.outputLen,a.BYTES,o)(D,V).toBytes(F.format)}function z(R,O,F,D={}){let{lowS:V,prehash:_,format:re}=z0(D,g);if(F=lt(F,void 0,"publicKey"),O=ee(O,_),!hc(R)){let ue=R instanceof q?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}N(R,re);try{let ue=q.fromBytes(R,re),T=e.fromBytes(F);if(V&&ue.hasHighS())return!1;let{r:we,s:Ee}=ue,Te=Z(O),Ce=a.inv(Ee),_e=a.create(Te*Ce),Pe=a.create(we*Ce),Ve=e.BASE.multiplyUnsafe(_e).add(T.multiplyUnsafe(Pe));if(Ve.is0())return!1;return a.create(Ve.x)===we}catch(ue){return!1}}function I(R,O,F={}){let{prehash:D}=z0(F,g);return O=ee(O,D),q.fromBytes(R,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y,Point:e,sign:P,verify:z,recoverPublicKey:I,Signature:q,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var NW=g2(PW),xc=x2(NW,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ko=BigInt(0),Mr=BigInt(1),D0=BigInt(2),zW=BigInt(8);function LW(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function w2(e,t={}){let r=t,i=Im("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;wn(r,{},{uvRatio:"function"});let c=D0<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(S){return{isValid:!1,value:ko}}}:r.uvRatio;if(!LW(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(g,b,S=!1){let A=S?Mr:ko;return Ni("coordinate "+g,b,A,c),b}function f(g){if(!(g instanceof p))throw Error("EdwardsPoint expected")}class p{static BASE=new p(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new p(ko,Mr,Mr,ko);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,S,A){this.X=d("x",g),this.Y=d("y",b),this.Z=d("z",S,!0),this.T=d("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof p)throw Error("extended point not allowed");let{x:b,y:S}=g||{};return d("x",b),d("y",S),new p(b,S,Mr,l(b*S))}static fromBytes(g,b=!1){let S=n.BYTES,{a:A,d:C}=s;g=So(lt(g,S,"point")),Pi(b,"zip215");let N=So(g),q=g[S-1];N[S-1]=q&-129;let E=Ln(N),Z=b?c:n.ORDER;Ni("point.y",E,ko,Z);let L=l(E*E),H=l(L-Mr),ee=l(C*L-A),{isValid:M,value:P}=u(H,ee);if(!M)throw Error("bad point: invalid y coordinate");let z=(P&Mr)===Mr,I=(q&128)!==0;if(!b&&P===ko&&I)throw Error("bad point: x=0 and x_0=1");if(I!==z)P=l(-P);return p.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return p.fromBytes(mc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(D0);return this}assertValidity(){let g=this,{a:b,d:S}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:N,T:q}=g,E=l(A*A),Z=l(C*C),L=l(N*N),H=l(L*L),ee=l(E*b),M=l(L*l(ee+Z)),P=l(H+l(S*l(E*Z)));if(M!==P)throw Error("bad point: equation left != right (1)");let z=l(A*C),I=l(N*q);if(z!==I)throw Error("bad point: equation left != right (2)")}equals(g){f(g);let{X:b,Y:S,Z:A}=this,{X:C,Y:N,Z:q}=g,E=l(b*q),Z=l(C*A),L=l(S*q),H=l(N*A);return E===Z&&L===H}is0(){return this.equals(p.ZERO)}negate(){return new p(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:S,Z:A}=this,C=l(b*b),N=l(S*S),q=l(D0*l(A*A)),E=l(g*C),Z=b+S,L=l(l(Z*Z)-C-N),H=E+N,ee=H-q,M=E-N,P=l(L*ee),z=l(H*M),I=l(L*M),R=l(ee*H);return new p(P,z,R,I)}add(g){f(g);let{a:b,d:S}=s,{X:A,Y:C,Z:N,T:q}=this,{X:E,Y:Z,Z:L,T:H}=g,ee=l(A*E),M=l(C*Z),P=l(q*S*H),z=l(N*L),I=l((A+C)*(E+Z)-ee-M),R=z-P,O=z+P,F=l(M-b*ee),D=l(I*R),V=l(O*F),_=l(I*F),re=l(R*O);return new p(D,V,re,_)}subtract(g){return f(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:S}=y.cached(this,g,(A)=>Ms(p,A));return Ms(p,[b,S])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===ko)return p.ZERO;if(this.is0()||g===Mr)return this;return y.unsafe(this,g,(b)=>Ms(p,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,S=g,{X:A,Y:C,Z:N}=b,q=b.is0();if(S==null)S=q?zW:n.inv(N);let E=l(A*S),Z=l(C*S),L=n.mul(N,S);if(q)return{x:ko,y:Mr};if(L!==Mr)throw Error("invZ was invalid");return{x:E,y:Z}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),S=n.toBytes(b);return S[S.length-1]|=g&Mr?128:0,S}toHex(){return pc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new rd(p,o.BITS);if(o.BITS>=8)p.BASE.precompute(8);return Object.freeze(p.prototype),Object.freeze(p),p}class B0{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){I0()}static fromHex(e){I0()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return pc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var od=BigInt(0),wc=BigInt(1),$m=BigInt(2);function DW(e){return wn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function v2(e){let t=DW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?gc:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?$m**BigInt(254):$m**BigInt(447),y=a?BigInt(8)*$m**BigInt(251)-wc:BigInt(4)*$m**BigInt(445)-wc,g=p+y+wc,b=(I)=>mt(I,r),S=A(d);function A(I){return Yu(b(I),u)}function C(I){let R=So(lt(I,u,"uCoordinate"));if(a)R[31]&=127;return b(Ln(R))}function N(I){return Ln(n(So(lt(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===od)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Ni("u",I,od,r),Ni("scalar",R,p,g);let O=R,F=I,D=wc,V=od,_=I,re=wc,ue=od;for(let we=BigInt(l-1);we>=od;we--){let Ee=O>>we&wc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,lt(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze(M),Object.freeze(z),Object.freeze({keygen:nd(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var BW=BigInt(0),Li=BigInt(1),S2=BigInt(2),qW=BigInt(3),jW=BigInt(5),UW=BigInt(8),Zs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),M0=(()=>({p:Zs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:UW,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function E2(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Zs,a=e*e%o*e%o,c=vn(a,S2,o)*a%o,l=vn(c,Li,o)*e%o,u=vn(l,jW,o)*l%o,d=vn(u,t,o)*u%o,f=vn(d,r,o)*d%o,p=vn(f,i,o)*f%o,y=vn(p,n,o)*p%o,g=vn(y,n,o)*p%o,b=vn(g,t,o)*u%o;return{pow_p_5_8:vn(b,S2,o)*e%o,b2:a}}function MW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var q0=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function F0(e,t){let r=Zs,i=mt(t*t*t,r),n=mt(i*i*t,r),o=E2(e*n).pow_p_5_8,s=mt(e*i*o,r),a=mt(t*s*s,r),c=s,l=mt(s*q0,r),u=a===e,d=a===mt(-e,r),f=a===mt(-e*q0,r);if(u)s=c;if(d||f)s=l;if(zi(s,r))s=mt(-s,r);return{isValid:u||d,value:s}}var Fs=w2(M0,{uvRatio:F0}),Eo=(()=>Fs.Fp)(),I2=(()=>Fs.Fn)();var Cm=(()=>{let e=Zs;return v2({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=E2(t);return mt(vn(r,qW,e)*i,e)},adjustScalarBytes:MW})})();var j0=q0,FW=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),ZW=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),HW=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),JW=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),_2=(e)=>F0(Li,e),KW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),U0=(e)=>Eo.create(Ln(e)&KW);function k2(e){let{d:t}=M0,r=Zs,i=(S)=>Eo.create(S),n=i(j0*e*e),o=i((n+Li)*HW),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=F0(o,a),u=i(l*e);if(!zi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let d=i(s*(n-Li)*JW-a),f=l*l,p=i((l+l)*a),y=i(d*FW),g=i(Li-f),b=i(Li+f);return new Fs(i(p*b),i(g*y),i(y*b),i(p*g))}class Tr extends B0{static BASE=(()=>new Tr(Fs.BASE))();static ZERO=(()=>new Tr(Fs.ZERO))();static Fp=(()=>Eo)();static Fn=(()=>I2)();constructor(e){super(e)}static fromAffine(e){return new Tr(Fs.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){er(e,32);let{a:t,d:r}=M0,i=Zs,n=(C)=>Eo.create(C),o=U0(e);if(!JP(Eo.toBytes(o),e)||zi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Li+t*s),c=n(Li-t*s),l=n(a*a),u=n(c*c),d=n(t*r*l-u),{isValid:f,value:p}=_2(n(d*u)),y=n(p*c),g=n(p*y*d),b=n((o+o)*y);if(zi(b,i))b=n(-b);let S=n(a*g),A=n(b*S);if(!f||zi(A,i)||S===BW)throw Error("invalid ristretto255 encoding 2");return new Tr(new Fs(b,S,Li,A))}static fromHex(e){return Tr.fromBytes(Au(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Zs,o=(g)=>Eo.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=_2(o(s*c)),u=o(l*s),d=o(l*a),f=o(u*d*i),p;if(zi(i*f,n)){let g=o(t*j0),b=o(e*j0);e=g,t=b,p=o(u*ZW)}else p=d;if(zi(e*f,n))t=o(-t);let y=o((r-t)*p);if(zi(y,n))y=o(-y);return Eo.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Eo.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var VW=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=N0(e,r,64,Kp);return VW.deriveToCurve(i)},hashToScalar(e,t={DST:f2}){let r=N0(e,t.DST,64,Kp);return I2.create(Ln(r))},deriveToCurve(e){er(e,64);let t=U0(e.subarray(0,32)),r=k2(t),i=U0(e.subarray(32,64)),n=k2(i);return new Tr(r.add(n))}});var A2=!1,WW=!1;async function $2(e,t){if(WW)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Tm(e,t){return await $2(async()=>{let r=Z0(e)?e:await QW(e),i=await crypto.subtle.importKey("raw",YW(t),{name:"X25519"},A2,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMult(e,t)})}async function sd(e){return await $2(async()=>Tm(e,Cm.GuBytes),()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMultBase(e)})}var GW=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function QW(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...GW,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},A2,["deriveBits"])}function Z0(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function YW(e){return e}class H0{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),eG(Hs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Hs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Hs(this.transcript)}}}function eG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Hs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function vc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Om(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function J0(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function C2(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function T2(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Hs(i),s=o.subarray(0,t),a=vc(e,o.subarray(t));return{data:s,rest:a}}class oi{args;body;constructor(e,t){this.args=e,this.body=t}}async function tG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=hr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Hs(i);return{s:new oi(r,n)}}async function O2(e){let t=new H0(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await tG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=hr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:vc(e,a)}}}function K0(e){let t=[];t.push(`age-encryption.org/v1
+`)}function RO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function wt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Iu(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var jp={name:"@rizom/ops",version:"0.2.0-alpha.395",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as fG,mkdirSync as pG,readFileSync as dw,writeFileSync as fw}from"fs";import{dirname as mG,join as j2}from"path";function Ex(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Tt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function er(e,t,r=""){let i=Ex(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function ki(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Tt(e.outputLen),Tt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function tc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Up(e,t){er(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Mp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ar(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var qV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function jV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function UV(e){for(let t=0;t<e.length;t++)e[t]=jV(e[t]);return e}var Ix=qV?(e)=>e:UV,NO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),MV=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Fp(e){if(er(e),NO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=MV[e[r]];return t}var _i={_0:48,_9:57,A:65,F:70,a:97,f:102};function PO(e){if(e>=_i._0&&e<=_i._9)return e-_i._0;if(e>=_i.A&&e<=_i.F)return e-(_i.A-10);if(e>=_i.a&&e<=_i.f)return e-(_i.a-10);return}function Au(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(NO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=PO(e.charCodeAt(o)),a=PO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function FV(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function Ax(e,t=""){if(typeof e==="string")return FV(e);return er(e,void 0,t)}function $x(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];er(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Zp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function Cx(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ei(e=32){Tt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var Tx=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Ox{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(ki(e),er(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ar(i)}update(e){return tc(this),this.iHash.update(e),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Qn=(()=>{let e=(t,r,i)=>new Ox(t,r).update(i).digest();return e.create=(t,r)=>new Ox(t,r),e})();function $u(e,t,r){if(ki(e),r===void 0)r=new Uint8Array(e.outputLen);return Qn(e,r,t)}var Rx=Uint8Array.of(0),zO=Uint8Array.of();function Px(e,t,r,i=32){ki(e),Tt(i,"length"),er(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=zO;else er(r,void 0,"info");let s=new Uint8Array(o*n),a=Qn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Rx[0]=u+1,c.update(u===0?zO:l).update(r).update(Rx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ar(l,Rx),s.slice(0,i)}var ao=(e,t,r,i,n)=>Px(e,$u(e,t,r),i,n);function LO(e,t,r){return e&t^~e&r}function DO(e,t,r){return e&t^e&r^t&r}class Hp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=rc(this.buffer)}update(e){tc(this),er(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=rc(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){tc(this),Up(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ar(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=rc(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ii=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var tr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Jp=BigInt(4294967295),BO=BigInt(32);function ZV(e,t=!1){if(t)return{h:Number(e&Jp),l:Number(e>>BO&Jp)};return{h:Number(e>>BO&Jp)|0,l:Number(e&Jp)|0}}function qO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=ZV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var Nx=(e,t,r)=>e>>>r,zx=(e,t,r)=>e<<32-r|t>>>r,Es=(e,t,r)=>e>>>r|t<<32-r,Is=(e,t,r)=>e<<32-r|t>>>r,Cu=(e,t,r)=>e<<64-r|t>>>r-32,Tu=(e,t,r)=>e>>>r-32|t<<64-r;function Yn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var jO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),UO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,MO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),FO=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,ZO=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),HO=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var JV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),co=new Uint32Array(64);class JO extends Hp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)co[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=co[u-15],f=co[u-2],p=Pn(d,7)^Pn(d,18)^d>>>3,y=Pn(f,17)^Pn(f,19)^f>>>10;co[u]=y+co[u-7]+p+co[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Pn(s,6)^Pn(s,11)^Pn(s,25),f=l+d+LO(s,a,c)+JV[u]+co[u]|0,y=(Pn(r,2)^Pn(r,13)^Pn(r,22))+DO(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ar(co)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ar(this.buffer)}}class KO extends JO{A=Ii[0]|0;B=Ii[1]|0;C=Ii[2]|0;D=Ii[3]|0;E=Ii[4]|0;F=Ii[5]|0;G=Ii[6]|0;H=Ii[7]|0;constructor(){super(32)}}var VO=(()=>qO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),KV=(()=>VO[0])(),VV=(()=>VO[1])(),lo=new Uint32Array(80),uo=new Uint32Array(80);class WO extends Hp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)lo[A]=e.getUint32(t),uo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=lo[A-15]|0,N=uo[A-15]|0,q=Es(C,N,1)^Es(C,N,8)^Nx(C,N,7),E=Is(C,N,1)^Is(C,N,8)^zx(C,N,7),Z=lo[A-2]|0,L=uo[A-2]|0,H=Es(Z,L,19)^Cu(Z,L,61)^Nx(Z,L,6),ee=Is(Z,L,19)^Tu(Z,L,61)^zx(Z,L,6),M=MO(E,ee,uo[A-7],uo[A-16]),P=FO(M,q,H,lo[A-7],lo[A-16]);lo[A]=P|0,uo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Es(u,d,14)^Es(u,d,18)^Cu(u,d,41),N=Is(u,d,14)^Is(u,d,18)^Tu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=ZO(S,N,E,VV[A],uo[A]),L=HO(Z,b,C,q,KV[A],lo[A]),H=Z|0,ee=Es(r,i,28)^Cu(r,i,34)^Cu(r,i,39),M=Is(r,i,28)^Tu(r,i,34)^Tu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=Yn(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=jO(H,M,z);r=UO(I,L,ee,P),i=I|0}({h:r,l:i}=Yn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Yn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Yn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Yn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=Yn(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=Yn(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=Yn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=Yn(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ar(lo,uo)}destroy(){this.destroyed=!0,Ar(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class GO extends WO{Ah=tr[0]|0;Al=tr[1]|0;Bh=tr[2]|0;Bl=tr[3]|0;Ch=tr[4]|0;Cl=tr[5]|0;Dh=tr[6]|0;Dl=tr[7]|0;Eh=tr[8]|0;El=tr[9]|0;Fh=tr[10]|0;Fl=tr[11]|0;Gh=tr[12]|0;Gl=tr[13]|0;Hh=tr[14]|0;Hl=tr[15]|0;constructor(){super(64)}}var Ot=Cx(()=>new KO,Tx(1));var Kp=Cx(()=>new GO,Tx(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Yp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Bx(e){if(!Yp(e))throw TypeError("Uint8Array expected")}function tR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function rR(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function fo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Ru(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Wp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Gp(e,t){if(!tR(!0,t))throw TypeError(`${e}: array of strings expected`)}function qx(e,t){if(!tR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Yr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Xr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Gp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Wp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Wp(n),n.map((o)=>{fo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function en(e=""){return fo("join",e),{encode:(t)=>(Gp("join.decode",t),t.join(e)),decode:(t)=>(fo("join.decode",t),t.split(e))}}function Xp(e,t="="){return Ru(e),fo("padding",t),{encode(r){Gp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Gp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function nR(e){return rR(e),{encode:(t)=>t,decode:(t)=>e(t)}}function QO(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Wp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Ru(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,f=d+u;if(!Number.isSafeInteger(f)||d/t!==a||f-u!==d)throw Error("convertRadix: carry overflow");let p=f/r;a=f%r;let y=Math.floor(p);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==f)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var iR=(e,t)=>t===0?e:iR(t,e%t),Qp=(e,t)=>e+(t-iR(e,t)),Vp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Lx(e,t,r,i){if(Wp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Qp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Qp(t,r)}`);let n=0,o=0,s=Vp[t],a=Vp[r]-1,c=[];for(let l of e){if(Ru(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Vp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function WV(e){Ru(e);let t=256;return{encode:(r)=>{if(!Yp(r))throw TypeError("radix.encode input should be Uint8Array");return QO(Array.from(r),t,e)},decode:(r)=>(qx("radix.decode",r),Uint8Array.from(QO(r,e,t)))}}function gn(e,t=!1){if(Ru(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Qp(8,e)>32||Qp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Yp(r))throw TypeError("radix2.encode input should be Uint8Array");return Lx(Array.from(r),8,e,!t)},decode:(r)=>(qx("radix2.decode",r),Uint8Array.from(Lx(r,e,8,t)))}}function YO(e){return rR(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var GSe=Object.freeze(Yr(gn(4),Xr("0123456789ABCDEF"),en(""))),QSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Xp(5),en(""))),YSe=Object.freeze(Yr(gn(5),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),en(""))),XSe=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Xp(5),en(""))),e_e=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),en(""))),t_e=Object.freeze(Yr(gn(5),Xr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),en(""),nR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),oR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),GV=/[\t\n\f\r ]/,sR=(e,t)=>{fo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&GV.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},jx=Object.freeze(oR?{encode(e){return Bx(e),e.toBase64()},decode(e){return sR(e,!1)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Xp(6),en(""))),hr=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),en(""))),r_e=Object.freeze(oR?{encode(e){return Bx(e),e.toBase64({alphabet:"base64url"})},decode(e){return sR(e,!0)}}:Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Xp(6),en(""))),n_e=Object.freeze(Yr(gn(6),Xr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),en(""))),Ux=(e)=>Yr(WV(58),Xr(e),en("")),i_e=Object.freeze(Ux("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),o_e=Object.freeze(Ux("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),s_e=Object.freeze(Ux("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Dx=Yr(Xr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),en("")),XO=[996825010,642813549,513874426,1027748829,705979059];function Ou(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<XO.length;i++)if((t>>i&1)===1)r^=XO[i];return r}function eR(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Ou(n)^s>>5}n=Ou(n);for(let o=0;o<i;o++)n=Ou(n)^e.charCodeAt(o)&31;for(let o of t)n=Ou(n)^o;for(let o=0;o<6;o++)n=Ou(n);return n^=r,Dx.encode(Lx([n%Vp[30]],30,5,!1))}function aR(e){let t=e==="bech32"?1:734539939,r=gn(5),i=r.decode,n=r.encode,o=YO(i);function s(d,f,p=90){if(fo("bech32.encode prefix",d),Yp(f))f=Array.from(f);qx("bech32.encode",f);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+f.length;if(p!==!1&&g>p)throw TypeError(`Length ${g} exceeds limit ${p}`);let b=d.toLowerCase(),S=eR(b,f,t);return`${b}1${Dx.encode(f)}${S}`}function a(d,f=90){fo("bech32.decode input",d);let p=d.length;if(p<8||f!==!1&&p>f)throw TypeError(`invalid string length: ${p} (${d}). Expected (8..${f})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),S=y.slice(g+1);if(S.length<6)throw Error("Data must be at least 6 characters long");let A=Dx.decode(S).slice(0,-6),C=eR(b,A,t);if(!S.endsWith(C))throw Error(`Invalid checksum in ${d}: expected "${C}"`);return{prefix:b,words:A}}let c=YO(a);function l(d){let{prefix:f,words:p}=a(d,!1);return{prefix:f,words:p,bytes:i(p)}}function u(d,f){return s(d,n(f))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var tn=Object.freeze(aR("bech32")),a_e=Object.freeze(aR("bech32m"));var QV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),YV={encode(e){return Bx(e),e.toHex()},decode(e){return fo("hex",e),Uint8Array.fromHex(e)}},c_e=Object.freeze(QV?YV:Yr(gn(4),Xr("0123456789abcdef"),en(""),nR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function e7(e,t,r,i){ki(e);let n=Zp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Tt(o,"c"),Tt(s,"dkLen"),Tt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=Ax(t,"password"),l=Ax(r,"salt"),u=new Uint8Array(s),d=Qn.create(e,c),f=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:f}}function t7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Ar(n),r}function Mx(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=e7(e,t,r,i),l,u=new Uint8Array(4),d=rc(u),f=new Uint8Array(a.outputLen);for(let p=1,y=0;y<o;p++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);d.setInt32(0,p,!1),(l=c._cloneInto(l)).update(u).digestInto(f),g.set(f.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(f).digestInto(f);for(let S=0;S<g.length;S++)g[S]^=f[S]}}return t7(a,c,s,l,f)}function cR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],d=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],S=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],N=e[t++]^r[i++],q=e[t++]^r[i++],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let ue=0;ue<8;ue+=2)ee^=Xe(E+D|0,7),I^=Xe(ee+E|0,9),D^=Xe(I+ee|0,13),E^=Xe(D+I|0,18),R^=Xe(M+Z|0,7),V^=Xe(R+M|0,9),Z^=Xe(V+R|0,13),M^=Xe(Z+V|0,18),_^=Xe(O+P|0,7),L^=Xe(_+O|0,9),P^=Xe(L+_|0,13),O^=Xe(P+L|0,18),H^=Xe(re+F|0,7),z^=Xe(H+re|0,9),F^=Xe(z+H|0,13),re^=Xe(F+z|0,18),Z^=Xe(E+H|0,7),L^=Xe(Z+E|0,9),H^=Xe(L+Z|0,13),E^=Xe(H+L|0,18),P^=Xe(M+ee|0,7),z^=Xe(P+M|0,9),ee^=Xe(z+P|0,13),M^=Xe(ee+z|0,18),F^=Xe(O+R|0,7),I^=Xe(F+O|0,9),R^=Xe(I+F|0,13),O^=Xe(R+I|0,18),D^=Xe(re+_|0,7),V^=Xe(D+re|0,9),_^=Xe(V+D|0,13),re^=Xe(_+V|0,18);n[o++]=s+E|0,n[o++]=a+Z|0,n[o++]=c+L|0,n[o++]=l+H|0,n[o++]=u+ee|0,n[o++]=d+M|0,n[o++]=f+P|0,n[o++]=p+z|0,n[o++]=y+I|0,n[o++]=g+R|0,n[o++]=b+O|0,n[o++]=S+F|0,n[o++]=A+D|0,n[o++]=C+V|0,n[o++]=N+_|0,n[o++]=q+re|0}function Fx(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(cR(r,s,e,t,r,o),a>0)s+=16;cR(r,o,e,t+=16,r,s)}}function r7(e,t,r){let i=Zp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Tt(n,"N"),Tt(o,"r"),Tt(s,"p"),Tt(a,"dkLen"),Tt(c,"asyncTick"),Tt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,f=d/4,p=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>p)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(p-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(p-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=Mx(Ot,e,t,{c:1,dkLen:d*s}),b=Mp(g),S=Mp(new Uint8Array(d*n)),A=Mp(new Uint8Array(d)),C=()=>{};if(u){let N=2*n*s,q=Math.max(Math.floor(N/1e4),1),E=0;C=()=>{if(E++,u&&(!(E%q)||E===N))u(E/N)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:f,V:S,B32:b,B:g,tmp:A,blockMixCb:C,asyncTick:c}}function n7(e,t,r,i,n){let o=Mx(Ot,e,r,{c:1,dkLen:t});return Ar(r,i,n),o}function Zx(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:f}=r7(e,t,r);Ix(l);for(let p=0;p<o;p++){let y=a*p;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)Fx(c,b,c,b+=a,n),f();Fx(c,(i-1)*a,l,y,n),f();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let S=0;S<a;S++)d[S]=l[y+S]^c[b*a+S];Fx(d,0,l,y,n),f()}}return Ix(l),n7(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function i7(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function em(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function nc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Mt(e,t,r=""){let i=i7(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Hx(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function lR(e,t,r=!1){Mt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!ic(e))throw Error("invalid output, must be aligned")}function Xn(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Nn(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function o7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var As=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),s7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var a7=(e)=>{for(let t=0;t<e.length;t++)e[t]=s7(e[t]);return e},Ai=As?(e)=>e:a7;function uR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function dR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function fR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var pR=(e,t)=>{function r(i,...n){if(Mt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Mt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Mt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Mt(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Mt(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Mt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(r,e),r};function Pu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Mt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!ic(t))throw Error("invalid output, must be aligned");return t}function mR(e,t,r){nc(e),nc(t),em(r);let i=new Uint8Array(16),n=o7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function ic(e){return e.byteOffset%4===0}function oc(e){return Uint8Array.from(Mt(e))}var gR=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),c7=(()=>Ai(Xn(gR("expand 16-byte k"))))(),l7=(()=>Ai(Xn(gR("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var Nu=64,u7=16,Jx=(()=>4294967295)(),hR=Uint32Array.of();function d7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Nu),u=Xn(l),d=As&&ic(n)&&ic(o),f=d?Xn(n):hR,p=d?Xn(o):hR;if(!As){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ai(u),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=Jx)throw Error("arx: counter overflow");let g=Math.min(Nu,c-y);if(d&&g===Nu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let S=0,A;S<u7;S++)A=b+S,p[A]=f[A]^u[S];y+=Nu;continue}for(let b=0,S;b<g;b++)S=y+b,o[S]=n[S]^l[b];y+=g}}function yR(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=uR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return nc(n),nc(s),em(o),em(r),(a,c,l,u,d=0)=>{Mt(a,void 0,"key"),Mt(c,void 0,"nonce"),Mt(l,void 0,"data");let f=l.length;if(u=Pu(f,u,!1),nc(d),d<0||d>=Jx)throw Error("arx: counter overflow");let p=[],y=a.length,g,b;if(y===32)p.push(g=oc(a)),b=l7;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=c7,p.push(g);else throw Mt(a,32,"arx key"),Error("invalid key size");if(!As||!ic(c))p.push(c=oc(c));let S=Xn(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let N=c.subarray(0,16);if(As)i(b,S,Xn(N),S);else{let q=Ai(Uint32Array.from(b));i(q,S,Xn(N),S),Nn(q),Ai(S)}c=c.subarray(16)}else if(!As)Ai(S);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let N=new Uint8Array(12);N.set(c,o?0:12-c.length),c=N,p.push(c)}let C=Ai(Xn(c));try{return d7(e,b,S,C,l,u,d,s),u}finally{Nn(...p)}}}function rr(e,t){return e[t++]&255|(e[t++]&255)<<8}class bR{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=oc(Mt(e,32,"key"));let t=rr(e,0),r=rr(e,2),i=rr(e,4),n=rr(e,6),o=rr(e,8),s=rr(e,10),a=rr(e,12),c=rr(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=rr(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],f=o[6],p=o[7],y=o[8],g=o[9],b=rr(e,t+0),S=rr(e,t+2),A=rr(e,t+4),C=rr(e,t+6),N=rr(e,t+8),q=rr(e,t+10),E=rr(e,t+12),Z=rr(e,t+14),L=n[0]+(b&8191),H=n[1]+((b>>>13|S<<3)&8191),ee=n[2]+((S>>>10|A<<6)&8191),M=n[3]+((A>>>7|C<<9)&8191),P=n[4]+((C>>>4|N<<12)&8191),z=n[5]+(N>>>1&8191),I=n[6]+((N>>>14|q<<2)&8191),R=n[7]+((q>>>11|E<<5)&8191),O=n[8]+((E>>>8|Z<<8)&8191),F=n[9]+(Z>>>5|i),D=0,V=D+L*s+H*(5*g)+ee*(5*y)+M*(5*p)+P*(5*f);D=V>>>13,V&=8191,V+=z*(5*d)+I*(5*u)+R*(5*l)+O*(5*c)+F*(5*a),D+=V>>>13,V&=8191;let _=D+L*a+H*s+ee*(5*g)+M*(5*y)+P*(5*p);D=_>>>13,_&=8191,_+=z*(5*f)+I*(5*d)+R*(5*u)+O*(5*l)+F*(5*c),D+=_>>>13,_&=8191;let re=D+L*c+H*a+ee*s+M*(5*g)+P*(5*y);D=re>>>13,re&=8191,re+=z*(5*p)+I*(5*f)+R*(5*d)+O*(5*u)+F*(5*l),D+=re>>>13,re&=8191;let ue=D+L*l+H*c+ee*a+M*s+P*(5*g);D=ue>>>13,ue&=8191,ue+=z*(5*y)+I*(5*p)+R*(5*f)+O*(5*d)+F*(5*u),D+=ue>>>13,ue&=8191;let T=D+L*u+H*l+ee*c+M*a+P*s;D=T>>>13,T&=8191,T+=z*(5*g)+I*(5*y)+R*(5*p)+O*(5*f)+F*(5*d),D+=T>>>13,T&=8191;let we=D+L*d+H*u+ee*l+M*c+P*a;D=we>>>13,we&=8191,we+=z*s+I*(5*g)+R*(5*y)+O*(5*p)+F*(5*f),D+=we>>>13,we&=8191;let Ee=D+L*f+H*d+ee*u+M*l+P*c;D=Ee>>>13,Ee&=8191,Ee+=z*a+I*s+R*(5*g)+O*(5*y)+F*(5*p),D+=Ee>>>13,Ee&=8191;let Te=D+L*p+H*f+ee*d+M*u+P*l;D=Te>>>13,Te&=8191,Te+=z*c+I*a+R*s+O*(5*g)+F*(5*y),D+=Te>>>13,Te&=8191;let Ce=D+L*y+H*p+ee*f+M*d+P*u;D=Ce>>>13,Ce&=8191,Ce+=z*l+I*c+R*a+O*s+F*(5*g),D+=Ce>>>13,Ce&=8191;let _e=D+L*g+H*y+ee*p+M*f+P*d;D=_e>>>13,_e&=8191,_e+=z*u+I*l+R*c+O*a+F*s,D+=_e>>>13,_e&=8191,D=(D<<2)+D|0,D=D+V|0,V=D&8191,D=D>>>13,_+=D,n[0]=V,n[1]=_,n[2]=re,n[3]=ue,n[4]=T,n[5]=we,n[6]=Ee,n[7]=Te,n[8]=Ce,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;Nn(r)}update(e){Hx(this),Mt(e),e=oc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,Nn(this.h,this.r,this.buffer,this.pad)}digestInto(e){Hx(this),lR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var xR=fR(32,(e)=>new bR(e));function f7(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],f=t[2],p=t[3],y=t[4],g=t[5],b=t[6],S=t[7],A=n,C=r[0],N=r[1],q=r[2],E=s,Z=a,L=c,H=l,ee=u,M=d,P=f,z=p,I=y,R=g,O=b,F=S,D=A,V=C,_=N,re=q;for(let T=0;T<o;T+=2)E=E+ee|0,D=et(D^E,16),I=I+D|0,ee=et(ee^I,12),E=E+ee|0,D=et(D^E,8),I=I+D|0,ee=et(ee^I,7),Z=Z+M|0,V=et(V^Z,16),R=R+V|0,M=et(M^R,12),Z=Z+M|0,V=et(V^Z,8),R=R+V|0,M=et(M^R,7),L=L+P|0,_=et(_^L,16),O=O+_|0,P=et(P^O,12),L=L+P|0,_=et(_^L,8),O=O+_|0,P=et(P^O,7),H=H+z|0,re=et(re^H,16),F=F+re|0,z=et(z^F,12),H=H+z|0,re=et(re^H,8),F=F+re|0,z=et(z^F,7),E=E+M|0,re=et(re^E,16),O=O+re|0,M=et(M^O,12),E=E+M|0,re=et(re^E,8),O=O+re|0,M=et(M^O,7),Z=Z+P|0,D=et(D^Z,16),F=F+D|0,P=et(P^F,12),Z=Z+P|0,D=et(D^Z,8),F=F+D|0,P=et(P^F,7),L=L+z|0,V=et(V^L,16),I=I+V|0,z=et(z^I,12),L=L+z|0,V=et(V^L,8),I=I+V|0,z=et(z^I,7),H=H+ee|0,_=et(_^H,16),R=R+_|0,ee=et(ee^R,12),H=H+ee|0,_=et(_^H,8),R=R+_|0,ee=et(ee^R,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+Z|0,i[ue++]=c+L|0,i[ue++]=l+H|0,i[ue++]=u+ee|0,i[ue++]=d+M|0,i[ue++]=f+P|0,i[ue++]=p+z|0,i[ue++]=y+I|0,i[ue++]=g+R|0,i[ue++]=b+O|0,i[ue++]=S+F|0,i[ue++]=A+D|0,i[ue++]=C+V|0,i[ue++]=N+_|0,i[ue++]=q+re|0}var p7=yR(f7,{counterRight:!1,counterLength:4,allowShortKeys:!1});var m7=new Uint8Array(16),wR=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(m7.subarray(r))},h7=new Uint8Array(32);function vR(e,t,r,i,n){if(n!==void 0)Mt(n,void 0,"AAD");let o=e(t,r,h7),s=mR(i.length,n?n.length:0,!0),a=xR.create(o);if(n)wR(a,n);wR(a,i),a.update(s);let c=a.digest();return Nn(o,s),c}var g7=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Pu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=vR(e,t,r,c,i);return s.set(l,a),Nn(l),s},decrypt(o,s){s=Pu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=vR(e,t,r,a,i);if(!dR(c,l))throw Nn(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),Nn(l),s}}),yn=pR({blockSize:64,nonceLength:12,tagLength:16},g7(p7));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function sc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Vt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Ne(e,t,r=""){let i=sc(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function bn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Vt(e.outputLen),Vt(e.blockLen)}function Ci(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function tm(e,t){Ne(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function rm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ur(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function nm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function zn(e,t){return e<<32-t|e>>>t}var y7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function b7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function x7(e){for(let t=0;t<e.length;t++)e[t]=b7(e[t]);return e}var Kx=y7?(e)=>e:x7,_R=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),w7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function $s(e){if(Ne(e),_R)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=w7[e[r]];return t}var $i={_0:48,_9:57,A:65,F:70,a:97,f:102};function SR(e){if(e>=$i._0&&e<=$i._9)return e-$i._0;if(e>=$i.A&&e<=$i.F)return e-($i.A-10);if(e>=$i.a&&e<=$i.f)return e-($i.a-10);return}function Cs(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(_R)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=SR(e.charCodeAt(o)),a=SR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Lt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Ne(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function ac(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function po(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var mo=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Wx=BigInt(0),Vx=BigInt(1);function zu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function kR(e){if(typeof e==="bigint"){if(!im(e))throw Error("positive bigint expected, got "+e)}else Vt(e);return e}function Lu(e){let t=kR(e).toString(16);return t.length&1?"0"+t:t}function ER(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?Wx:BigInt("0x"+e)}function ho(e){return ER($s(e))}function go(e){return ER($s(om(Ne(e)).reverse()))}function cc(e,t){Vt(t),e=kR(e);let r=Cs(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Du(e,t){return cc(e,t).reverse()}function om(e){return Uint8Array.from(e)}function yo(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var im=(e)=>typeof e==="bigint"&&Wx<=e;function v7(e,t,r){return im(e)&&im(t)&&im(r)&&t<=e&&e<r}function Bu(e,t,r,i){if(!v7(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function Gx(e){let t;for(t=0;e>Wx;e>>=Vx,t+=1);return t}var qu=(e)=>(Vx<<BigInt(e))-Vx;function IR(e,t,r){if(Vt(e,"hashLen"),Vt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,Lt(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return Lt(...S)};return(b,S)=>{d(),p(b);let A=void 0;while(!(A=S(y())))p();return d(),A}}function Ts(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function Qx(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),gr=BigInt(1),Os=BigInt(2),CR=BigInt(3),TR=BigInt(4),OR=BigInt(5),S7=BigInt(7),RR=BigInt(8),_7=BigInt(9),PR=BigInt(16);function $r(e,t){let r=e%t;return r>=Cr?r:t+r}function xn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function AR(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=$r(e,t),i=t,n=Cr,o=gr,s=gr,a=Cr;while(r!==Cr){let l=i/r,u=i%r,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==gr)throw Error("invert: does not exist");return $r(n,t)}function Yx(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function NR(e,t){let r=(e.ORDER+gr)/TR,i=e.pow(t,r);return Yx(e,i,t),i}function k7(e,t){let r=(e.ORDER-OR)/RR,i=e.mul(t,Os),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Os),n),a=e.mul(o,e.sub(s,e.ONE));return Yx(e,a,t),a}function E7(e){let t=sm(e),r=zR(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+S7)/PR;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,n),f=a.mul(l,o),p=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,p),u=a.cmov(f,d,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return Yx(a,b,c),b}}function zR(e){if(e<CR)throw Error("sqrt is not defined for small field");let t=e-gr,r=0;while(t%Os===Cr)t/=Os,r++;let i=Os,n=sm(e);while($R(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return NR;let o=n.pow(i,t),s=(t+gr)/Os;return function(c,l){if(c.is0(l))return l;if($R(c,l)!==1)throw Error("Cannot find square root");let u=r,d=c.mul(c.ONE,o),f=c.pow(l,t),p=c.pow(l,s);while(!c.eql(f,c.ONE)){if(c.is0(f))return c.ZERO;let y=1,g=c.sqr(f);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=gr<<BigInt(u-y-1),S=c.pow(d,b);u=y,d=c.sqr(S),f=c.mul(f,d),p=c.mul(p,S)}return p}}function I7(e){if(e%TR===CR)return NR;if(e%RR===OR)return k7;if(e%PR===_7)return E7(e);return zR(e)}var A7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Xx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=A7.reduce((i,n)=>(i[n]="function",i),t);return Ts(e,r),e}function $7(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===gr)return t;let i=e.ONE,n=t;while(r>Cr){if(r&gr)i=e.mul(i,n);n=e.sqr(n),r>>=gr}return i}function ju(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function $R(e,t){let r=(e.ORDER-gr)/Os,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function C7(e,t){if(t!==void 0)Vt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class LR{ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=gr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=C7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return $r(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&gr)===gr}neg(e){return $r(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return $r(e*e,this.ORDER)}add(e,t){return $r(e+t,this.ORDER)}sub(e,t){return $r(e-t,this.ORDER)}mul(e,t){return $r(e*t,this.ORDER)}pow(e,t){return $7(this,e,t)}div(e,t){return $r(e*AR(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return AR(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=I7(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Du(e,this.BYTES):cc(e,this.BYTES)}fromBytes(e,t=!1){Ne(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?go(e):ho(e);if(s)a=$r(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ju(this,e)}cmov(e,t,r){return r?t:e}}function sm(e,t={}){return new LR(e,t)}function DR(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function e0(e){let t=DR(e);return t+Math.ceil(t/2)}function BR(e,t,r=!1){Ne(e);let i=e.length,n=DR(t),o=e0(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?go(e):ho(e),a=$r(s,t-gr)+gr;return r?Du(a,n):cc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lc=BigInt(0),Rs=BigInt(1);function Uu(e,t){let r=t.negate();return e?r:t}function i0(e,t){let r=ju(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function MR(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function t0(e,t){MR(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=qu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function qR(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Rs;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var r0=new WeakMap,FR=new WeakMap;function n0(e){return FR.get(e)||1}function jR(e){if(e!==lc)throw Error("invalid wNAF")}class o0{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>lc){if(t&Rs)r=r.add(i);i=i.double(),t>>=Rs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=t0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=t0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=qR(r,s,o);if(r=a,l)n=n.add(Uu(d,t[f]));else i=i.add(Uu(u,t[c]))}return jR(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=t0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===lc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=qR(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return jR(r),i}getPrecomputes(e,t,r){let i=r0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);r0.set(t,i)}}return i}cached(e,t,r){let i=n0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=n0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){MR(t,this.bits),FR.set(e,t),r0.delete(e)}hasCache(e){return n0(e)!==1}}function ZR(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>lc||i>lc){if(r&Rs)o=o.add(n);if(i&Rs)s=s.add(n);n=n.double(),r>>=Rs,i>>=Rs}return{p1:o,p2:s}}function UR(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Xx(t),t}else return sm(e,{isLE:r})}function HR(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>lc))throw Error(`CURVE.${c} must be positive bigint`)}let n=UR(t.p,r.Fp,i),o=UR(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function am(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mu=BigInt(0),uc=BigInt(1),cm=BigInt(2);function T7(e){return Ts(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function JR(e){let t=T7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||po,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?cm**BigInt(254):cm**BigInt(447),y=a?BigInt(8)*cm**BigInt(251)-uc:BigInt(4)*cm**BigInt(445)-uc,g=p+y+uc,b=(I)=>$r(I,r),S=A(d);function A(I){return Du(b(I),u)}function C(I){let R=om(Ne(I,u,"uCoordinate"));if(a)R[31]&=127;return b(go(R))}function N(I){return go(n(om(Ne(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===Mu)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Bu("u",I,Mu,r),Bu("scalar",R,p,g);let O=R,F=I,D=uc,V=Mu,_=I,re=uc,ue=Mu;for(let we=BigInt(l-1);we>=Mu;we--){let Ee=O>>we&uc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(Ne(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze({keygen:am(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}class s0{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(bn(e),Ne(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ur(i)}update(e){return Ci(this),this.iHash.update(e),this}digestInto(e){Ci(this),Ne(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var dc=(e,t,r)=>new s0(e,t).update(r).digest();dc.create=(e,t)=>new s0(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var KR=(e,t)=>(e+(e>=0?t:-t)/WR)/t;function O7(e,t,r){let[[i,n],[o,s]]=t,a=KR(s*e,r),c=KR(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<Ti,f=u<Ti;if(d)l=-l;if(f)u=-u;let p=qu(Math.ceil(Gx(r)/2))+fc;if(l<Ti||l>=p||u<Ti||u>=p)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:f,k2:u}}function c0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function a0(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(zu(r.lowS,"lowS"),zu(r.prehash,"prehash"),r.format!==void 0)c0(r.format);return r}class VR extends Error{constructor(e=""){super(e)}}var bo={Err:VR,_tlv:{encode:(e,t)=>{let{Err:r}=bo;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Lu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Lu(n.length/2|128):"";return Lu(e)+o+n+t},decode(e,t){let{Err:r}=bo,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=bo;if(e<Ti)throw new t("integer: negative integers are not allowed");let r=Lu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=bo;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return ho(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=bo,n=Ne(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=bo,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Ti=BigInt(0),fc=BigInt(1),WR=BigInt(2),lm=BigInt(3),R7=BigInt(4);function l0(e,t={}){let r=HR("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ts(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=QR(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(P,z,I){let{x:R,y:O}=z.toAffine(),F=i.toBytes(R);if(zu(I,"isCompressed"),I){u();let D=!i.isOdd(O);return Lt(GR(D),F)}else return Lt(Uint8Array.of(4),F,i.toBytes(O))}function f(P){Ne(P,void 0,"Point");let{publicKey:z,publicKeyUncompressed:I}=l,R=P.length,O=P[0],F=P.subarray(1);if(R===z&&(O===2||O===3)){let D=i.fromBytes(F);if(!i.isValid(D))throw Error("bad point: is not on curve, wrong x");let V=g(D),_;try{_=i.sqrt(V)}catch(T){let we=T instanceof Error?": "+T.message:"";throw Error("bad point: is not on curve, sqrt error"+we)}u();let re=i.isOdd(_);if((O&1)===1!==re)_=i.neg(_);return{x:D,y:_}}else if(R===I&&O===4){let D=i.BYTES,V=i.fromBytes(F.subarray(0,D)),_=i.fromBytes(F.subarray(D,D*2));if(!b(V,_))throw Error("bad point: is not on curve");return{x:V,y:_}}else throw Error(`bad point: got length ${R}, expected compressed=${z} or uncompressed=${I}`)}let p=t.toBytes||d,y=t.fromBytes||f;function g(P){let z=i.sqr(P),I=i.mul(z,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,z){let I=i.sqr(z),R=g(P);return i.eql(I,R)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let S=i.mul(i.pow(o.a,lm),R7),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(S,A)))throw Error("bad curve params: a or b");function C(P,z,I=!1){if(!i.isValid(z)||I&&i.is0(z))throw Error(`bad point coordinate ${P}`);return z}function N(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function q(P){if(!c||!c.basises)throw Error("no endo");return O7(P,c.basises,n.ORDER)}let E=Qx((P,z)=>{let{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}),Z=Qx((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:z,y:I}=P.toAffine();if(!i.isValid(z)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(z,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function L(P,z,I,R,O){return I=new H(i.mul(I.X,P),I.Y,I.Z),z=Uu(R,z),I=Uu(O,I),z.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,z,I){this.X=C("x",P),this.Y=C("y",z,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:z,y:I}=P||{};if(!P||!i.isValid(z)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(z)&&i.is0(I))return H.ZERO;return new H(z,I,i.ONE)}static fromBytes(P){let z=H.fromAffine(y(Ne(P,void 0,"point")));return z.assertValidity(),z}static fromHex(P){return H.fromBytes(Cs(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,z=!0){if(M.createCache(this,P),!z)this.multiply(lm);return this}assertValidity(){Z(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.eql(i.mul(z,D),i.mul(O,R)),_=i.eql(i.mul(I,D),i.mul(F,R));return V&&_}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:z}=o,I=i.mul(z,lm),{X:R,Y:O,Z:F}=this,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(F,F),we=i.mul(R,O);return we=i.add(we,we),_=i.mul(R,F),_=i.add(_,_),D=i.mul(P,_),V=i.mul(I,T),V=i.add(D,V),D=i.sub(ue,V),V=i.add(ue,V),V=i.mul(D,V),D=i.mul(we,D),_=i.mul(I,_),T=i.mul(P,T),we=i.sub(re,T),we=i.mul(P,we),we=i.add(we,_),_=i.add(re,re),re=i.add(_,re),re=i.add(re,T),re=i.mul(re,we),V=i.add(V,re),T=i.mul(O,F),T=i.add(T,T),re=i.mul(T,we),D=i.sub(D,re),_=i.mul(T,ue),_=i.add(_,_),_=i.add(_,_),new H(D,V,_)}add(P){N(P);let{X:z,Y:I,Z:R}=this,{X:O,Y:F,Z:D}=P,V=i.ZERO,_=i.ZERO,re=i.ZERO,ue=o.a,T=i.mul(o.b,lm),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.mul(R,D),Ce=i.add(z,I),_e=i.add(O,F);Ce=i.mul(Ce,_e),_e=i.add(we,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,R);let Pe=i.add(O,D);return _e=i.mul(_e,Pe),Pe=i.add(we,Te),_e=i.sub(_e,Pe),Pe=i.add(I,R),V=i.add(F,D),Pe=i.mul(Pe,V),V=i.add(Ee,Te),Pe=i.sub(Pe,V),re=i.mul(ue,_e),V=i.mul(T,Te),re=i.add(V,re),V=i.sub(Ee,re),re=i.add(Ee,re),_=i.mul(V,re),Ee=i.add(we,we),Ee=i.add(Ee,we),Te=i.mul(ue,Te),_e=i.mul(T,_e),Ee=i.add(Ee,Te),Te=i.sub(we,Te),Te=i.mul(ue,Te),_e=i.add(_e,Te),we=i.mul(Ee,_e),_=i.add(_,we),we=i.mul(Pe,_e),V=i.mul(Ce,V),V=i.sub(V,we),we=i.mul(Ce,Ee),re=i.mul(Pe,re),re=i.add(re,we),new H(V,_,re)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:z}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,R,O=(F)=>M.cached(this,F,(D)=>i0(H,D));if(z){let{k1neg:F,k1:D,k2neg:V,k2:_}=q(P),{p:re,f:ue}=O(D),{p:T,f:we}=O(_);R=ue.add(we),I=L(z.beta,re,T,F,V)}else{let{p:F,f:D}=O(P);I=F,R=D}return i0(H,[I,R])[0]}multiplyUnsafe(P){let{endo:z}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Ti||I.is0())return H.ZERO;if(P===fc)return I;if(M.hasCache(this))return this.multiply(P);if(z){let{k1neg:R,k1:O,k2neg:F,k2:D}=q(P),{p1:V,p2:_}=ZR(H,I,O,D);return L(z.beta,V,_,R,F)}else return M.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===fc)return!0;if(P)return P(H,this);return M.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===fc)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return zu(P,"isCompressed"),this.assertValidity(),p(H,this,P)}toHex(P=!0){return $s(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let ee=n.BITS,M=new o0(H,t.endo?Math.ceil(ee/2):ee);return H.BASE.precompute(8),H}function GR(e){return Uint8Array.of(e?2:3)}function QR(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function P7(e,t={}){let{Fn:r}=e,i=t.randomBytes||po,n=Object.assign(QR(e.Fp,r),{seed:e0(r.ORDER)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p=i(n.seed)){return BR(Ne(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!sc(p))return;if("_lengths"in r&&r._lengths||y===g)return;let S=Ne(p,void 0,"key").length;return S===g||S===b}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=am(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function u0(e,t,r={}){bn(t),Ts(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||po,n=r.hmac||((I,R)=>dc(t,I,R)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p}=P7(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*WR<o.ORDER;function b(I){let R=a>>fc;return I>R}function S(I,R){if(!s.isValidNot0(R))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,R){c0(R);let O=p.signature,F=R==="compact"?O:R==="recovered"?O+1:void 0;return Ne(I,F)}class N{r;s;recovery;constructor(I,R,O){if(this.r=S("r",I),this.s=S("s",R),O!=null){if(A(),![0,1,2,3].includes(O))throw Error("invalid recovery id");this.recovery=O}Object.freeze(this)}static fromBytes(I,R=y.format){C(I,R);let O;if(R==="der"){let{r:_,s:re}=bo.toSig(Ne(I));return new N(_,re)}if(R==="recovered")O=I[0],R="compact",I=I.subarray(1);let F=p.signature/2,D=I.subarray(0,F),V=I.subarray(F,F*2);return new N(s.fromBytes(D),s.fromBytes(V),O)}static fromHex(I,R){return this.fromBytes(Cs(I),R)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new N(this.r,this.s,I)}recoverPublicKey(I){let{r:R,s:O}=this,F=this.assertRecovery(),D=F===2||F===3?R+a:R;if(!o.isValid(D))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(D),_=e.fromBytes(Lt(GR((F&1)===0),V)),re=s.inv(D),ue=E(Ne(I,void 0,"msgHash")),T=s.create(-ue*re),we=s.create(O*re),Ee=e.BASE.multiplyUnsafe(T).add(_.multiplyUnsafe(we));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(c0(I),I==="der")return Cs(bo.hexFromSig(this));let{r:R,s:O}=this,F=s.toBytes(R),D=s.toBytes(O);if(I==="recovered")return A(),Lt(Uint8Array.of(this.assertRecovery()),F,D);return Lt(F,D)}toHex(I){return $s(this.toBytes(I))}}let q=r.bits2int||function(R){if(R.length>8192)throw Error("input is too large");let O=ho(R),F=R.length*8-c;return F>0?O>>BigInt(F):O},E=r.bits2int_modN||function(R){return s.create(q(R))},Z=qu(c);function L(I){return Bu("num < 2^"+c,I,Ti,Z),s.toBytes(I)}function H(I,R){return Ne(I,void 0,"message"),R?Ne(t(I),void 0,"prehashed message"):I}function ee(I,R,O){let{lowS:F,prehash:D,extraEntropy:V}=a0(O,y);I=H(I,D);let _=E(I),re=s.fromBytes(R);if(!s.isValidNot0(re))throw Error("invalid private key");let ue=[L(re),L(_)];if(V!=null&&V!==!1){let Te=V===!0?i(p.secretKey):V;ue.push(Ne(Te,void 0,"extraEntropy"))}let T=Lt(...ue),we=_;function Ee(Te){let Ce=q(Te);if(!s.isValidNot0(Ce))return;let _e=s.inv(Ce),Pe=e.BASE.multiply(Ce).toAffine(),Ve=s.create(Pe.x);if(Ve===Ti)return;let tt=s.create(_e*s.create(we+Ve*re));if(tt===Ti)return;let bt=(Pe.x===Ve?0:2)|Number(Pe.y&fc),zt=tt;if(F&&b(tt))zt=s.neg(tt),bt^=1;return new N(Ve,zt,g?void 0:bt)}return{seed:T,k2sig:Ee}}function M(I,R,O={}){let{seed:F,k2sig:D}=ee(I,R,O);return IR(t.outputLen,s.BYTES,n)(F,D).toBytes(O.format)}function P(I,R,O,F={}){let{lowS:D,prehash:V,format:_}=a0(F,y);if(O=Ne(O,void 0,"publicKey"),R=H(R,V),!sc(I)){let re=I instanceof N?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}C(I,_);try{let re=N.fromBytes(I,_),ue=e.fromBytes(O);if(D&&re.hasHighS())return!1;let{r:T,s:we}=re,Ee=E(R),Te=s.inv(we),Ce=s.create(Ee*Te),_e=s.create(T*Te),Pe=e.BASE.multiplyUnsafe(Ce).add(ue.multiplyUnsafe(_e));if(Pe.is0())return!1;return s.create(Pe.x)===T}catch(re){return!1}}function z(I,R,O={}){let{prehash:F}=a0(O,y);return R=H(R,F),N.fromBytes(I,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:f,lengths:p,Point:e,sign:M,verify:P,recoverPublicKey:z,Signature:N,hash:t})}function YR(e,t,r){return e&t^~e&r}function XR(e,t,r){return e&t^e&r^t&r}class um{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=nm(this.buffer)}update(e){Ci(this),Ne(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=nm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ci(this),tm(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ur(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=nm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Oi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var nr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var dm=BigInt(4294967295),eP=BigInt(32);function N7(e,t=!1){if(t)return{h:Number(e&dm),l:Number(e>>eP&dm)};return{h:Number(e>>eP&dm)|0,l:Number(e&dm)|0}}function fm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=N7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var d0=(e,t,r)=>e>>>r,f0=(e,t,r)=>e<<32-r|t>>>r,Ps=(e,t,r)=>e>>>r|t<<32-r,Ns=(e,t,r)=>e<<32-r|t>>>r,Fu=(e,t,r)=>e<<64-r|t>>>r-32,Zu=(e,t,r)=>e>>>r-32|t<<64-r;var tP=(e,t,r)=>e<<r|t>>>32-r,rP=(e,t,r)=>t<<r|e>>>32-r,nP=(e,t,r)=>t<<r-32|e>>>64-r,iP=(e,t,r)=>e<<r-32|t>>>64-r;function ei(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var oP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),sP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,aP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),cP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,lP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),uP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var L7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),xo=new Uint32Array(64);class dP extends um{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)xo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=xo[u-15],f=xo[u-2],p=zn(d,7)^zn(d,18)^d>>>3,y=zn(f,17)^zn(f,19)^f>>>10;xo[u]=y+xo[u-7]+p+xo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=zn(s,6)^zn(s,11)^zn(s,25),f=l+d+YR(s,a,c)+L7[u]+xo[u]|0,y=(zn(r,2)^zn(r,13)^zn(r,22))+XR(r,i,n)|0;l=c,c=a,a=s,s=o+f|0,o=n,n=i,i=r,r=f+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ur(xo)}destroy(){this.set(0,0,0,0,0,0,0,0),Ur(this.buffer)}}class fP extends dP{A=Oi[0]|0;B=Oi[1]|0;C=Oi[2]|0;D=Oi[3]|0;E=Oi[4]|0;F=Oi[5]|0;G=Oi[6]|0;H=Oi[7]|0;constructor(){super(32)}}var pP=(()=>fm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),D7=(()=>pP[0])(),B7=(()=>pP[1])(),wo=new Uint32Array(80),vo=new Uint32Array(80);class mP extends um{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:f,Gl:p,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,f,p,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=f|0,this.Gl=p|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)wo[A]=e.getUint32(t),vo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=wo[A-15]|0,N=vo[A-15]|0,q=Ps(C,N,1)^Ps(C,N,8)^d0(C,N,7),E=Ns(C,N,1)^Ns(C,N,8)^f0(C,N,7),Z=wo[A-2]|0,L=vo[A-2]|0,H=Ps(Z,L,19)^Fu(Z,L,61)^d0(Z,L,6),ee=Ns(Z,L,19)^Zu(Z,L,61)^f0(Z,L,6),M=aP(E,ee,vo[A-7],vo[A-16]),P=cP(M,q,H,wo[A-7],wo[A-16]);wo[A]=P|0,vo[A]=M|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:f,Fl:p,Gh:y,Gl:g,Hh:b,Hl:S}=this;for(let A=0;A<80;A++){let C=Ps(u,d,14)^Ps(u,d,18)^Fu(u,d,41),N=Ns(u,d,14)^Ns(u,d,18)^Zu(u,d,41),q=u&f^~u&y,E=d&p^~d&g,Z=lP(S,N,E,B7[A],vo[A]),L=uP(Z,b,C,q,D7[A],wo[A]),H=Z|0,ee=Ps(r,i,28)^Fu(r,i,34)^Fu(r,i,39),M=Ns(r,i,28)^Zu(r,i,34)^Zu(r,i,39),P=r&n^r&s^n&s,z=i&o^i&a^o&a;b=y|0,S=g|0,y=f|0,g=p|0,f=u|0,p=d|0,{h:u,l:d}=ei(c|0,l|0,L|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=oP(H,M,z);r=sP(I,L,ee,P),i=I|0}({h:r,l:i}=ei(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ei(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ei(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ei(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ei(this.Eh|0,this.El|0,u|0,d|0),{h:f,l:p}=ei(this.Fh|0,this.Fl|0,f|0,p|0),{h:y,l:g}=ei(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:S}=ei(this.Hh|0,this.Hl|0,b|0,S|0),this.set(r,i,n,o,s,a,c,l,u,d,f,p,y,g,b,S)}roundClean(){Ur(wo,vo)}destroy(){Ur(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class hP extends mP{Ah=nr[0]|0;Al=nr[1]|0;Bh=nr[2]|0;Bl=nr[3]|0;Ch=nr[4]|0;Cl=nr[5]|0;Dh=nr[6]|0;Dl=nr[7]|0;Eh=nr[8]|0;El=nr[9]|0;Fh=nr[10]|0;Fl=nr[11]|0;Gh=nr[12]|0;Gl=nr[13]|0;Hh=nr[14]|0;Hl=nr[15]|0;constructor(){super(48)}}var pm=ac(()=>new fP,mo(1));var gP=ac(()=>new hP,mo(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var q7=BigInt(1),yP=BigInt(2),j7=BigInt(3),U7=BigInt(5),dke=BigInt(8),bP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function M7(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=bP,a=e*e%o*e%o,c=xn(a,yP,o)*a%o,l=xn(c,q7,o)*e%o,u=xn(l,U7,o)*l%o,d=xn(u,t,o)*u%o,f=xn(d,r,o)*d%o,p=xn(f,i,o)*f%o,y=xn(p,n,o)*p%o,g=xn(y,n,o)*p%o,b=xn(g,t,o)*u%o;return{pow_p_5_8:xn(b,yP,o)*e%o,b2:a}}function F7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var xP=(()=>{let e=bP;return JR({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=M7(t);return $r(xn(r,j7,e)*i,e)},adjustScalarBytes:F7})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),H7=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var J7=l0(Z7),p0=u0(J7,pm);var K7=l0(H7),wP=u0(K7,gP);function SP(e,t,r){if(bn(e),r===void 0)r=new Uint8Array(e.outputLen);return dc(e,r,t)}var m0=Uint8Array.of(0),vP=Uint8Array.of();function _P(e,t,r,i=32){bn(e),Vt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=vP;else Ne(r,void 0,"info");let s=new Uint8Array(o*n),a=dc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)m0[0]=u+1,c.update(u===0?vP:l).update(r).update(m0).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ur(l,m0),s.slice(0,i)}var V7=BigInt(0),Hu=BigInt(1),W7=BigInt(2),G7=BigInt(7),Q7=BigInt(256),Y7=BigInt(113),IP=[],AP=[],$P=[];for(let e=0,t=Hu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],IP.push(2*(5*i+r)),AP.push((e+1)*(e+2)/2%64);let n=V7;for(let o=0;o<7;o++)if(t=(t<<Hu^(t>>G7)*Y7)%Q7,t&W7)n^=Hu<<(Hu<<BigInt(o))-Hu;$P.push(n)}var CP=fm($P,!0),X7=CP[0],eW=CP[1],kP=(e,t,r)=>r>32?nP(e,t,r):tP(e,t,r),EP=(e,t,r)=>r>32?iP(e,t,r):rP(e,t,r);function tW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],d=kP(l,u,1)^r[a],f=EP(l,u,1)^r[a+1];for(let p=0;p<50;p+=10)e[s+p]^=d,e[s+p+1]^=f}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=AP[s],c=kP(n,o,a),l=EP(n,o,a),u=IP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=X7[i],e[1]^=eW[i]}Ur(r)}class mm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Vt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=rm(this.state)}clone(){return this._cloneInto()}keccak(){Kx(this.state32),tW(this.state32,this.rounds),Kx(this.state32),this.posOut=0,this.pos=0}update(e){Ci(this),Ne(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ci(this,!1),Ne(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Vt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(tm(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Ur(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new mm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var TP=(e,t,r,i={})=>ac(()=>new mm(t,e,r),i);var zs=TP(6,136,32,mo(8));var OP=TP(6,72,64,mo(10));var RP=(e,t,r,i={})=>ac((n={})=>new mm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),PP=RP(31,168,16,mo(11)),ti=RP(31,136,32,mo(12));function h0(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function zP(e){return h0(e),(e&e-1)===0&&e!==0}function g0(e,t){h0(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function LP(e){return h0(e),31-Math.clz32(e)}function NP(e){let t=e.length;if(t<2||!zP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=LP(t);for(let i=0;i<t;i++){let n=g0(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var y0=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=LP(r);if(!zP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)NP(u);for(let d=0,f=1;d<c-s;d++){let p=n?d+1+s:c-d,y=1<<p,g=y>>1,b=r>>p;for(let S=0;S<r;S+=y)for(let A=0,C=f++;A<g;A++){let N=o?n?r-C:C:A*b,q=S+A,E=S+A+g,Z=i[N],L=u[E],H=u[q];if(l){let ee=e.mul(L,Z);u[q]=e.add(H,ee),u[E]=e.sub(H,ee)}else if(o)u[q]=e.add(L,H),u[E]=e.mul(e.sub(L,H),Z);else u[q]=e.add(H,L),u[E]=e.mul(e.sub(H,L),Z)}}if(!n&&a)NP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ri=po;function hm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function DP(e){return Uint8Array.from(e)}function Ls(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Ne(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Ne(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function gm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Ne(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ft(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function b0(e){return(1<<e)-1}var Ike=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var BP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let N=A%C|0;return(N>=0?N|0:C+N|0)|0},l=(A,C=i)=>{let N=c(A,C)|0;return(N>C>>1?N-C|0:N)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let N=g0(C,s),q=BigInt(o)**BigInt(N)%BigInt(i);A[C]=Number(q)|0}return A}let d=u(),f={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},p={N:r,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=y0(f,{dit:!1,...p}),g=y0(f,{dit:!0,...p});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(A)=>y(A),decode:(A)=>{g(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let N=b0(A),q=A*(r/8);return{bytesLen:q,encode:(E)=>{let Z=new Uint8Array(q);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=(C.encode(E[L])&N)<<ee,ee+=A;for(;ee>=8;ee-=8,H>>=8)Z[M++]=H&b0(ee)}return Z},decode:(E)=>{let Z=t(r);for(let L=0,H=0,ee=0,M=0;L<E.length;L++){H|=E[L]<<ee,ee+=8;for(;ee>=A;ee-=A,H>>=A)Z[M++]=C.decode(H&N)}return Z}}}}},rW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ft(o,i)}}},qP=rW(PP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var yr=256,Ri=3329,nW=3303,iW=17,{mod:Vu,nttZetas:oW,NTT:Ds,bitsCoder:sW}=BP({N:yr,Q:Ri,F:nW,ROOT_OF_UNITY:iW,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),x0={512:{N:yr,Q:Ri,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:yr,Q:Ri,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:yr,Q:Ri,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},aW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ri/2)/Ri,decode:(r)=>r*Ri+t>>>e}},Ju=(e)=>sW(e,aW(e));function Bs(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]+t[r])}function cW(e,t){for(let r=0;r<yr;r++)e[r]=Vu(e[r]-t[r])}function lW(e,t,r,i,n){let o=Vu(t*i*n+e*r),s=Vu(e*i+t*r);return{c0:o,c1:s}}function ym(e,t){for(let r=0;r<yr/2;r++){let i=oW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=lW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function jP(e){let t=new Uint16Array(yr);for(let r=0;r<yr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<yr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ri)t[r++]=o;if(r<yr&&s<Ri)t[r++]=s}}return t}function Ku(e,t,r,i){let n=e(i*yr/4,t,r),o=new Uint16Array(yr),s=rm(n),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let f=s[c];for(let p=0;p<32;p++)if(u+=f&1,f>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Vu(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var uW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Ju(1),u=Ju(c),d=Ju(a),f=Ls("publicKey",gm(Ju(12),t),32),p=gm(Ju(12),t),y=Ls("ciphertext",gm(d,t),u),g=Ls("seed",32,32);return{secretCoder:p,lengths:{secretKey:p.bytesLen,publicKey:f.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{Ne(b,32,"seed");let S=new Uint8Array(33);S.set(b),S[32]=t;let A=n(S),[C,N]=g.decode(A),q=[],E=[];for(let H=0;H<t;H++)q.push(Ds.encode(Ku(r,N,H,o)));let Z=i(C);for(let H=0;H<t;H++){let ee=Ds.encode(Ku(r,N,t+H,o));for(let M=0;M<t;M++){let P=jP(Z.get(M,H));Bs(ee,ym(P,q[M]))}E.push(ee)}Z.clean();let L={publicKey:f.encode([E,C]),secretKey:p.encode(q)};return Ft(C,N,q,E,S,A),L},encrypt:(b,S,A)=>{let[C,N]=f.decode(b),q=[];for(let M=0;M<t;M++)q.push(Ds.encode(Ku(r,A,M,o)));let E=i(N),Z=new Uint16Array(yr),L=[];for(let M=0;M<t;M++){let P=Ku(r,A,t+M,s),z=new Uint16Array(yr);for(let I=0;I<t;I++){let R=jP(E.get(M,I));Bs(z,ym(R,q[I]))}Bs(P,Ds.decode(z)),L.push(P),Bs(Z,ym(C[M],q[M])),Ft(z)}E.clean();let H=Ku(r,A,2*t,s);Bs(H,Ds.decode(Z));let ee=l.decode(S);return Bs(ee,H),Ft(C,q,Z,H),y.encode([L,ee])},decrypt:(b,S)=>{let[A,C]=y.decode(b),N=p.decode(S),q=new Uint16Array(yr);for(let E=0;E<t;E++)Bs(q,ym(N[E],Ds.encode(A[E])));return cW(C,Ds.decode(q)),Ft(q,N,A),l.encode(C)}}};function w0(e){let t=uW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ls("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ri(64))=>{Ne(u,64,"seed");let{publicKey:d,secretKey:f}=t.keygen(u.subarray(0,32)),p=r(d),y=a.encode([f,d,p,u.subarray(32)]);return Ft(f,p),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,f,p,y]=a.decode(u);return Uint8Array.from(f)},encapsulate:(u,d=ri(32))=>{Ne(u,s.publicKey,"publicKey"),Ne(d,32,"message");let f=u.subarray(0,384*e.K),p=o.encode(o.decode(DP(f)));if(!hm(p,f))throw Ft(p),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ft(p);let y=i.create().update(d).update(r(u)).digest(),g=t.encrypt(u,d,y.subarray(32,64));return Ft(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{Ne(d,a.bytesLen,"secretKey"),Ne(u,s.cipherText,"cipherText");let f=a.bytesLen-96,p=f+32,y=r(d.subarray(f/2,p));if(!hm(y,d.subarray(p,p+32)))throw Error("invalid secretKey: hash check failed");let[g,b,S,A]=a.decode(d),C=t.decrypt(u,g),N=i.create().update(C).update(S).digest(),q=N.subarray(0,32),E=t.encrypt(b,C,N.subarray(32,64)),Z=hm(u,E),L=n.create({dkLen:32}).update(A).update(u).digest();return Ft(C,E,!Z?q:L),Z?q:L}}}function dW(e,t,r){return ti.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var v0={HASH256:zs,HASH512:OP,KDF:ti,XOF:qP,PRF:dW},Dke=w0({...v0,...x0[512]}),Wu=w0({...v0,...x0[768]}),UP=w0({...v0,...x0[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function fW(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ri(r.seed))=>{Ne(s,r.seed,"seed");let a=o.isLE?go(s):ho(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function S0(e,t=!1){let r=fW(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ri(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ft(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Gu(e,t){return Ls(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function _0(e){return(t,r)=>e(t,{dkLen:r})}function pW(e,t,...r){let i=Gu(r,"seed"),n=Gu(r,"publicKey");if(e===void 0)e=i.bytesLen;Vt(e);function o(s){Ne(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((d,f)=>d.keygen(a[f])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ri(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ft(a),Ft(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function bm(e,t,r,i,...n){let o=pW(e,r,...n),s=Gu(n,"cipherText"),a=Gu(n,"publicKey"),c=Gu(n,"msg");if(t===void 0)t=c.bytesLen;return Vt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ri(c.bytesLen)){let d=a.decode(l),f=c.decode(u),p=n.map((S,A)=>S.encapsulate(d[A],f[A])),y=p.map((S)=>S.sharedSecret),g=p.map((S)=>S.cipherText),b={sharedSecret:i(d,g,y),cipherText:s.encode(g)};return Ft(y,g),b},decapsulate(l,u){let d=s.decode(l),{publicKey:f,secretKey:p}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(d[b],p[b]));return i(f,d,y)}}}function MP(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>n(Lt(a[0],a[1],s[1],o[1],yo(e))),t,r)}var Vke=MP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Wu,S0(p0,!0),ti,zs),Wke=MP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",UP,S0(wP,!0),ti,zs);function mW(e,t,r,i,n){return bn(i),bn(n),bm(32,32,_0(i),(o,s,a)=>{let c=Lt(a[0],a[1],s[0],o[0],s[1],o[1],yo(e)),l=32,u=Lt(yo("hybrid_prk"),c),d=SP(n,u),f=Lt(cc(32,2),yo("shared_secret"),yo("")),p=_P(n,d,f,32);return Ft(d,f,u,c),p},t,r)}var FP=S0(xP),Gke=mW("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Wu,FP,ti,pm),hW=(()=>bm(32,32,_0(ti),(e,t,r)=>zs(Lt(r[0],r[1],t[1],e[1],yo("\\.//^\\"))),Wu,FP))();function gW(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,d),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ri(i)){return Ne(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ri(i)){Ne(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ft(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function yW(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=gW(r,n,o,i),a=64,c=a+i;return bm(32,32,(l)=>{Ne(l,32);let u=ti(l,{dkLen:c}),d=u.subarray(0,a),f=u.subarray(a,c);return Lt(d,f)},(l,u,d)=>zs(Lt(d[0],d[1],u[1],l[1],yo(e))),t,s)}var bW=(()=>yW("MLKEM768-P256",Wu,p0,128))();var xm=hW,ZP=bW;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lt=(e,t,r)=>er(e,t,r),E0=Tt,pc=Fp,ir=(...e)=>$x(...e),mc=(e)=>Au(e),hc=Ex,gc=(e)=>Ei(e),vm=BigInt(0),k0=BigInt(1);function Pi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!wm(e))throw RangeError("positive bigint expected, got "+e)}else E0(e);return e}function ni(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Qu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function HP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?vm:BigInt("0x"+e)}function qs(e){return HP(Fp(e))}function Ln(e){return HP(Fp(So(er(e)).reverse()))}function _m(e,t){if(Tt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return Au(r.padStart(t*2,"0"))}function Yu(e,t){return _m(e,t).reverse()}function JP(e,t){if(e=lt(e),t=lt(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function So(e){return Uint8Array.from(lt(e))}function km(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var wm=(e)=>typeof e==="bigint"&&vm<=e;function xW(e,t,r){return wm(e)&&wm(t)&&wm(r)&&t<=e&&e<r}function Ni(e,t,r,i){if(!xW(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function yc(e){if(e<vm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>vm;e>>=k0,t+=1);return t}var Xu=(e)=>(k0<<BigInt(e))-k0;function KP(e,t,r){if(Tt(e,"hashLen"),Tt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},f=(...b)=>r(l,ir(c,...b)),p=(b=n)=>{if(l=f(o,b),c=f(),b.length===0)return;l=f(s,b),c=f()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,S=[];while(b<t){c=f();let A=c.slice();S.push(A),b+=c.length}return ir(...S)};return(b,S)=>{d(),p(b);let A=void 0;while((A=S(y()))===void 0)p();return d(),A}}function wn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var I0=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var or=BigInt(0),Et=BigInt(1),js=BigInt(2),QP=BigInt(3),YP=BigInt(4),XP=BigInt(5),wW=BigInt(7),e2=BigInt(8),vW=BigInt(9),t2=BigInt(16);function mt(e,t){if(t<=or)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=or?r:t+r}function vn(e,t,r){if(t<or)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >or)i*=i,i%=r;return i}function VP(e,t){if(e===or)throw Error("invert: expected non-zero number");if(t<=or)throw Error("invert: expected positive modulus, got "+t);let r=mt(e,t),i=t,n=or,o=Et,s=Et,a=or;while(r!==or){let l=i/r,u=i-r*l,d=n-s*l,f=o-a*l;i=r,r=u,n=s,o=a,s=d,a=f}if(i!==Et)throw Error("invert: does not exist");return mt(n,t)}function A0(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function r2(e,t){let r=e,i=(r.ORDER+Et)/YP,n=r.pow(t,i);return A0(r,n,t),n}function SW(e,t){let r=e,i=(r.ORDER-XP)/e2,n=r.mul(t,js),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,js),o),c=r.mul(s,r.sub(a,r.ONE));return A0(r,c,t),c}function _W(e){let t=Em(e),r=n2(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+wW)/t2;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),f=l.mul(u,n),p=l.mul(u,o),y=l.eql(l.sqr(d),c),g=l.eql(l.sqr(f),c);u=l.cmov(u,d,y),d=l.cmov(p,f,g);let b=l.eql(l.sqr(d),c),S=l.cmov(u,d,b);return A0(l,S,c),S}}function n2(e){if(e<QP)throw Error("sqrt is not defined for small field");let t=e-Et,r=0;while(t%js===or)t/=js,r++;let i=js,n=Em(e);while(WP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return r2;let o=n.pow(i,t),s=(t+Et)/js;return function(c,l){let u=c;if(u.is0(l))return l;if(WP(u,l)!==1)throw Error("Cannot find square root");let d=r,f=u.mul(u.ONE,o),p=u.pow(l,t),y=u.pow(l,s);while(!u.eql(p,u.ONE)){if(u.is0(p))return u.ZERO;let g=1,b=u.sqr(p);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===d)throw Error("Cannot find square root");let S=Et<<BigInt(d-g-1),A=u.pow(f,S);d=g,f=u.sqr(A),p=u.mul(p,f),y=u.mul(y,A)}return y}}function kW(e){if(e%YP===QP)return r2;if(e%e2===XP)return SW;if(e%t2===vW)return _W(e);return n2(e)}var zi=(e,t)=>(mt(e,t)&Et)===Et,EW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function $0(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=EW.reduce((i,n)=>(i[n]="function",i),t);if(wn(e,r),ni(e.BYTES,"BYTES"),ni(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Et)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function IW(e,t,r){let i=e;if(r<or)throw Error("invalid exponent, negatives unsupported");if(r===or)return i.ONE;if(r===Et)return t;let n=i.ONE,o=t;while(r>or){if(r&Et)n=i.mul(n,o);o=i.sqr(o),r>>=Et}return n}function ed(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function WP(e,t){let r=e,i=(r.ORDER-Et)/js,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function AW(e,t){if(t!==void 0)E0(t);if(e<=or)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=yc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var GP=new WeakMap;class C0{ORDER;BITS;BYTES;isLE;ZERO=or;ONE=Et;_lengths;_mod;constructor(e,t={}){if(e<=Et)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=AW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return mt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return or<=e&&e<this.ORDER}is0(e){return e===or}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Et)===Et}neg(e){return mt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return mt(e*e,this.ORDER)}add(e,t){return mt(e+t,this.ORDER)}sub(e,t){return mt(e-t,this.ORDER)}mul(e,t){return mt(e*t,this.ORDER)}pow(e,t){return IW(this,e,t)}div(e,t){return mt(e*VP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return VP(e,this.ORDER)}sqrt(e){let t=GP.get(this);if(!t)GP.set(this,t=kW(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Yu(e,this.BYTES):_m(e,this.BYTES)}fromBytes(e,t=!1){lt(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Ln(e):qs(e);if(s)a=mt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return ed(this,e)}cmov(e,t,r){return Pi(r,"condition"),r?t:e}}Object.freeze(C0.prototype);function Em(e,t={}){return new C0(e,t)}function i2(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Et)throw Error("field order must be greater than 1");let t=yc(e-Et);return Math.ceil(t/8)}function T0(e){let t=i2(e);return t+Math.ceil(t/2)}function o2(e,t,r=!1){lt(e);let i=e.length,n=i2(t),o=Math.max(T0(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Ln(e):qs(e),a=mt(s,t-Et)+Et;return r?Yu(a,n):_m(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bc=BigInt(0),Us=BigInt(1);function td(e,t){let r=t.negate();return e?r:t}function Ms(e,t){let r=ed(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function l2(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function O0(e,t){l2(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Xu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function s2(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Us;let l=t*i,u=l+Math.abs(a)-1,d=a===0,f=a<0,p=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:f,isNegF:p,offsetF:l}}var R0=new WeakMap,u2=new WeakMap;function P0(e){return u2.get(e)||1}function a2(e){if(e!==bc)throw Error("invalid wNAF")}class rd{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>bc){if(t&Us)r=r.add(i);i=i.double(),t>>=Us}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=O0(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=O0(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:f}=s2(r,s,o);if(r=a,l)n=n.add(td(d,t[f]));else i=i.add(td(u,t[c]))}return a2(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=O0(e,this.bits);for(let o=0;o<n.windows;o++){if(r===bc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=s2(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return a2(r),i}getPrecomputes(e,t,r){let i=R0.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);R0.set(t,i)}}return i}cached(e,t,r){let i=P0(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=P0(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){l2(t,this.bits),u2.set(e,t),R0.delete(e)}hasCache(e){return P0(e)!==1}}function d2(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>bc||i>bc){if(r&Us)o=o.add(n);if(i&Us)s=s.add(n);n=n.double(),r>>=Us,i>>=Us}return{p1:o,p2:s}}function c2(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return $0(t),t}else return Em(e,{isLE:r})}function Im(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>bc))throw Error(`CURVE.${c} must be positive bigint`)}let n=c2(t.p,r.Fp,i),o=c2(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function nd(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function id(e,t){if(ni(e),ni(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function $W(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function CW(e){if(!hc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?km(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function N0(e,t,r,i){if(lt(e),ni(r),t=CW(t),t.length>255)t=i(ir(km("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ir(t,id(t.length,1)),c=new Uint8Array(o),l=id(r,2),u=Array(s),d=i(ir(c,e,l,id(0,1),a));u[0]=i(ir(d,id(1,1),a));for(let p=1;p<s;p++){let y=[$W(d,u[p-1]),id(p+1,1),a];u[p]=i(ir(...y))}return ir(...u).slice(0,r)}var f2="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var p2=(e,t)=>(e+(e>=0?t:-t)/h2)/t;function TW(e,t,r){Ni("scalar",e,ii,r);let[[i,n],[o,s]]=t,a=p2(s*e,r),c=p2(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<ii,f=u<ii;if(d)l=-l;if(f)u=-u;let p=Xu(Math.ceil(yc(r)/2))+_o;if(l<ii||l>=p||u<ii||u>=p)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:f,k2:u}}function L0(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function z0(e,t){wn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Pi(r.lowS,"lowS"),Pi(r.prehash,"prehash"),r.format!==void 0)L0(r.format);return r}class m2 extends Error{constructor(e=""){super(e)}}var Dn={Err:m2,_tlv:{encode:(e,t)=>{let{Err:r}=Dn;if(ni(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Qu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Qu(n.length/2|128):"";return Qu(e)+o+n+t},decode(e,t){let{Err:r}=Dn;t=lt(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Dn;if(Sm(e),e<ii)throw new t("integer: negative integers are not allowed");let r=Qu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Dn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return qs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Dn,n=lt(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Dn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Dn._tlv);Object.freeze(Dn._int);Object.freeze(Dn);var ii=BigInt(0),_o=BigInt(1),h2=BigInt(2),Am=BigInt(3),OW=BigInt(4);function g2(e,t={}){let r=Im("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;wn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=b2(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(M,P,z){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:R}=P.toAffine(),O=i.toBytes(I);if(Pi(z,"isCompressed"),z){d();let F=!i.isOdd(R);return ir(y2(F),O)}else return ir(Uint8Array.of(4),O,i.toBytes(R))}function p(M){lt(M,void 0,"Point");let{publicKey:P,publicKeyUncompressed:z}=u,I=M.length,R=M[0],O=M.subarray(1);if(l&&I===1&&R===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(R===2||R===3)){let F=i.fromBytes(O);if(!i.isValid(F))throw Error("bad point: is not on curve, wrong x");let D=b(F),V;try{V=i.sqrt(D)}catch(ue){let T=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+T)}d();let _=i.isOdd(V);if((R&1)===1!==_)V=i.neg(V);return{x:F,y:V}}else if(I===z&&R===4){let F=i.BYTES,D=i.fromBytes(O.subarray(0,F)),V=i.fromBytes(O.subarray(F,F*2));if(!S(D,V))throw Error("bad point: is not on curve");return{x:D,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${z}`)}let y=t.toBytes===void 0?f:t.toBytes,g=t.fromBytes===void 0?p:t.fromBytes;function b(M){let P=i.sqr(M),z=i.mul(P,M);return i.add(i.add(z,i.mul(M,o.a)),o.b)}function S(M,P){let z=i.sqr(P),I=b(M);return i.eql(z,I)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Am),OW),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function N(M,P,z=!1){if(!i.isValid(P)||z&&i.is0(P))throw Error(`bad point coordinate ${M}`);return P}function q(M){if(!(M instanceof L))throw Error("Weierstrass Point expected")}function E(M){if(!c||!c.basises)throw Error("no endo");return TW(M,c.basises,n.ORDER)}function Z(M,P,z,I,R){return z=new L(i.mul(z.X,M),z.Y,z.Z),P=td(I,P),z=td(R,z),P.add(z)}class L{static BASE=new L(o.Gx,o.Gy,i.ONE);static ZERO=new L(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(M,P,z){this.X=N("x",M),this.Y=N("y",P,!0),this.Z=N("z",z),Object.freeze(this)}static CURVE(){return o}static fromAffine(M){let{x:P,y:z}=M||{};if(!M||!i.isValid(P)||!i.isValid(z))throw Error("invalid affine point");if(M instanceof L)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(z))return L.ZERO;return new L(P,z,i.ONE)}static fromBytes(M){let P=L.fromAffine(g(lt(M,void 0,"point")));return P.assertValidity(),P}static fromHex(M){return L.fromBytes(mc(M))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(M=8,P=!0){if(ee.createCache(this,M),!P)this.multiply(Am);return this}assertValidity(){let M=this;if(M.is0()){if(t.allowInfinityPoint&&i.is0(M.X)&&i.eql(M.Y,i.ONE)&&i.is0(M.Z))return;throw Error("bad point: ZERO")}let{x:P,y:z}=M.toAffine();if(!i.isValid(P)||!i.isValid(z))throw Error("bad point: x or y not field elements");if(!S(P,z))throw Error("bad point: equation left != right");if(!M.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:M}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(M)}equals(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.eql(i.mul(P,F),i.mul(R,I)),V=i.eql(i.mul(z,F),i.mul(O,I));return D&&V}negate(){return new L(this.X,i.neg(this.Y),this.Z)}double(){let{a:M,b:P}=o,z=i.mul(P,Am),{X:I,Y:R,Z:O}=this,F=i.ZERO,D=i.ZERO,V=i.ZERO,_=i.mul(I,I),re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(I,R);return T=i.add(T,T),V=i.mul(I,O),V=i.add(V,V),F=i.mul(M,V),D=i.mul(z,ue),D=i.add(F,D),F=i.sub(re,D),D=i.add(re,D),D=i.mul(F,D),F=i.mul(T,F),V=i.mul(z,V),ue=i.mul(M,ue),T=i.sub(_,ue),T=i.mul(M,T),T=i.add(T,V),V=i.add(_,_),_=i.add(V,_),_=i.add(_,ue),_=i.mul(_,T),D=i.add(D,_),ue=i.mul(R,O),ue=i.add(ue,ue),_=i.mul(ue,T),F=i.sub(F,_),V=i.mul(ue,re),V=i.add(V,V),V=i.add(V,V),new L(F,D,V)}add(M){q(M);let{X:P,Y:z,Z:I}=this,{X:R,Y:O,Z:F}=M,D=i.ZERO,V=i.ZERO,_=i.ZERO,re=o.a,ue=i.mul(o.b,Am),T=i.mul(P,R),we=i.mul(z,O),Ee=i.mul(I,F),Te=i.add(P,z),Ce=i.add(R,O);Te=i.mul(Te,Ce),Ce=i.add(T,we),Te=i.sub(Te,Ce),Ce=i.add(P,I);let _e=i.add(R,F);return Ce=i.mul(Ce,_e),_e=i.add(T,Ee),Ce=i.sub(Ce,_e),_e=i.add(z,I),D=i.add(O,F),_e=i.mul(_e,D),D=i.add(we,Ee),_e=i.sub(_e,D),_=i.mul(re,Ce),D=i.mul(ue,Ee),_=i.add(D,_),D=i.sub(we,_),_=i.add(we,_),V=i.mul(D,_),we=i.add(T,T),we=i.add(we,T),Ee=i.mul(re,Ee),Ce=i.mul(ue,Ce),we=i.add(we,Ee),Ee=i.sub(T,Ee),Ee=i.mul(re,Ee),Ce=i.add(Ce,Ee),T=i.mul(we,Ce),V=i.add(V,T),T=i.mul(_e,Ce),D=i.mul(Te,D),D=i.sub(D,T),T=i.mul(Te,we),_=i.mul(_e,_),_=i.add(_,T),new L(D,V,_)}subtract(M){return q(M),this.add(M.negate())}is0(){return this.equals(L.ZERO)}multiply(M){let{endo:P}=t;if(!n.isValidNot0(M))throw RangeError("invalid scalar: out of range");let z,I,R=(O)=>ee.cached(this,O,(F)=>Ms(L,F));if(P){let{k1neg:O,k1:F,k2neg:D,k2:V}=E(M),{p:_,f:re}=R(F),{p:ue,f:T}=R(V);I=re.add(T),z=Z(P.beta,_,ue,O,D)}else{let{p:O,f:F}=R(M);z=O,I=F}return Ms(L,[z,I])[0]}multiplyUnsafe(M){let{endo:P}=t,z=this,I=M;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===ii||z.is0())return L.ZERO;if(I===_o)return z;if(ee.hasCache(this))return this.multiply(I);if(P){let{k1neg:R,k1:O,k2neg:F,k2:D}=E(I),{p1:V,p2:_}=d2(L,z,O,D);return Z(P.beta,V,_,R,F)}else return ee.unsafe(z,I)}toAffine(M){let P=this,z=M,{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let F=P.is0();if(z==null)z=F?i.ONE:i.inv(O);let D=i.mul(I,z),V=i.mul(R,z),_=i.mul(O,z);if(F)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:D,y:V}}isTorsionFree(){let{isTorsionFree:M}=t;if(s===_o)return!0;if(M)return M(L,this);return ee.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:M}=t;if(s===_o)return this;if(M)return M(L,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===_o)return this.is0();return this.clearCofactor().is0()}toBytes(M=!0){return Pi(M,"isCompressed"),this.assertValidity(),y(L,this,M)}toHex(M=!0){return pc(this.toBytes(M))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,ee=new rd(L,t.endo?Math.ceil(H/2):H);if(H>=8)L.BASE.precompute(8);return Object.freeze(L.prototype),Object.freeze(L),L}function y2(e){return Uint8Array.of(e?2:3)}function b2(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function RW(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?gc:t.randomBytes,n=Object.assign(b2(e.Fp,r),{seed:Math.max(T0(r.ORDER),16)});function o(p){try{let y=r.fromBytes(p);return r.isValidNot0(y)}catch(y){return!1}}function s(p,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let S=p.length;if(y===!0&&S!==g)return!1;if(y===!1&&S!==b)return!1;return!!e.fromBytes(p)}catch(S){return!1}}function a(p){return p=p===void 0?i(n.seed):p,o2(lt(p,n.seed,"seed"),r.ORDER)}function c(p,y=!0){return e.BASE.multiply(r.fromBytes(p)).toBytes(y)}function l(p){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,S=r._lengths;if(!hc(p))return;let A=lt(p,void 0,"key").length,C=A===g||A===b,N=A===y||!!S?.includes(A);if(C&&N)return;return C}function u(p,y,g=!0){if(l(p)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(p);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},f=nd(a,c);return Object.freeze(d),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:f,Point:e,utils:d,lengths:n})}function x2(e,t,r={}){let i=t;ki(i),wn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?gc:r.randomBytes,o=r.hmac===void 0?(R,O)=>Qn(i,R,O):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y}=RW(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*h2+_o<s.ORDER;function S(R){let O=c>>_o;return R>O}function A(R,O){if(!a.isValidNot0(O))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return O}function C(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function N(R,O){L0(O);let F=y.signature,D=O==="compact"?F:O==="recovered"?F+1:void 0;return lt(R,D)}class q{r;s;recovery;constructor(R,O,F){if(this.r=A("r",R),this.s=A("s",O),F!=null){if(C(),![0,1,2,3].includes(F))throw Error("invalid recovery id");this.recovery=F}Object.freeze(this)}static fromBytes(R,O=g.format){N(R,O);let F;if(O==="der"){let{r:re,s:ue}=Dn.toSig(lt(R));return new q(re,ue)}if(O==="recovered")F=R[0],O="compact",R=R.subarray(1);let D=y.signature/2,V=R.subarray(0,D),_=R.subarray(D,D*2);return new q(a.fromBytes(V),a.fromBytes(_),F)}static fromHex(R,O){return this.fromBytes(mc(R),O)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new q(this.r,this.s,R)}recoverPublicKey(R){let{r:O,s:F}=this,D=this.assertRecovery(),V=D===2||D===3?O+c:O;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let _=s.toBytes(V),re=e.fromBytes(ir(y2((D&1)===0),_)),ue=a.inv(V),T=Z(lt(R,void 0,"msgHash")),we=a.create(-T*ue),Ee=a.create(F*ue),Te=e.BASE.multiplyUnsafe(we).add(re.multiplyUnsafe(Ee));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(R=g.format){if(L0(R),R==="der")return mc(Dn.hexFromSig(this));let{r:O,s:F}=this,D=a.toBytes(O),V=a.toBytes(F);if(R==="recovered")return C(),ir(Uint8Array.of(this.assertRecovery()),D,V);return ir(D,V)}toHex(R){return pc(this.toBytes(R))}}Object.freeze(q.prototype),Object.freeze(q);let E=r.bits2int===void 0?function(O){if(O.length>8192)throw Error("input is too large");let F=qs(O),D=O.length*8-l;return D>0?F>>BigInt(D):F}:r.bits2int,Z=r.bits2int_modN===void 0?function(O){return a.create(E(O))}:r.bits2int_modN,L=Xu(l);function H(R){return Ni("num < 2^"+l,R,ii,L),a.toBytes(R)}function ee(R,O){return lt(R,void 0,"message"),O?lt(i(R),void 0,"prehashed message"):R}function M(R,O,F){let{lowS:D,prehash:V,extraEntropy:_}=z0(F,g);R=ee(R,V);let re=Z(R),ue=a.fromBytes(O);if(!a.isValidNot0(ue))throw Error("invalid private key");let T=[H(ue),H(re)];if(_!=null&&_!==!1){let Ce=_===!0?n(y.secretKey):_;T.push(lt(Ce,void 0,"extraEntropy"))}let we=ir(...T),Ee=re;function Te(Ce){let _e=E(Ce);if(!a.isValidNot0(_e))return;let Pe=a.inv(_e),Ve=e.BASE.multiply(_e).toAffine(),tt=a.create(Ve.x);if(tt===ii)return;let bt=a.create(Pe*a.create(Ee+tt*ue));if(bt===ii)return;let zt=(Ve.x===tt?0:2)|Number(Ve.y&_o),pr=bt;if(D&&S(bt))pr=a.neg(bt),zt^=1;return new q(tt,pr,b?void 0:zt)}return{seed:we,k2sig:Te}}function P(R,O,F={}){let{seed:D,k2sig:V}=M(R,O,F);return KP(i.outputLen,a.BYTES,o)(D,V).toBytes(F.format)}function z(R,O,F,D={}){let{lowS:V,prehash:_,format:re}=z0(D,g);if(F=lt(F,void 0,"publicKey"),O=ee(O,_),!hc(R)){let ue=R instanceof q?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}N(R,re);try{let ue=q.fromBytes(R,re),T=e.fromBytes(F);if(V&&ue.hasHighS())return!1;let{r:we,s:Ee}=ue,Te=Z(O),Ce=a.inv(Ee),_e=a.create(Te*Ce),Pe=a.create(we*Ce),Ve=e.BASE.multiplyUnsafe(_e).add(T.multiplyUnsafe(Pe));if(Ve.is0())return!1;return a.create(Ve.x)===we}catch(ue){return!1}}function I(R,O,F={}){let{prehash:D}=z0(F,g);return O=ee(O,D),q.fromBytes(R,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:f,utils:p,lengths:y,Point:e,sign:P,verify:z,recoverPublicKey:I,Signature:q,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var NW=g2(PW),xc=x2(NW,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ko=BigInt(0),Mr=BigInt(1),D0=BigInt(2),zW=BigInt(8);function LW(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function w2(e,t={}){let r=t,i=Im("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;wn(r,{},{uvRatio:"function"});let c=D0<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(S){return{isValid:!1,value:ko}}}:r.uvRatio;if(!LW(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(g,b,S=!1){let A=S?Mr:ko;return Ni("coordinate "+g,b,A,c),b}function f(g){if(!(g instanceof p))throw Error("EdwardsPoint expected")}class p{static BASE=new p(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new p(ko,Mr,Mr,ko);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,S,A){this.X=d("x",g),this.Y=d("y",b),this.Z=d("z",S,!0),this.T=d("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof p)throw Error("extended point not allowed");let{x:b,y:S}=g||{};return d("x",b),d("y",S),new p(b,S,Mr,l(b*S))}static fromBytes(g,b=!1){let S=n.BYTES,{a:A,d:C}=s;g=So(lt(g,S,"point")),Pi(b,"zip215");let N=So(g),q=g[S-1];N[S-1]=q&-129;let E=Ln(N),Z=b?c:n.ORDER;Ni("point.y",E,ko,Z);let L=l(E*E),H=l(L-Mr),ee=l(C*L-A),{isValid:M,value:P}=u(H,ee);if(!M)throw Error("bad point: invalid y coordinate");let z=(P&Mr)===Mr,I=(q&128)!==0;if(!b&&P===ko&&I)throw Error("bad point: x=0 and x_0=1");if(I!==z)P=l(-P);return p.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return p.fromBytes(mc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(D0);return this}assertValidity(){let g=this,{a:b,d:S}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:N,T:q}=g,E=l(A*A),Z=l(C*C),L=l(N*N),H=l(L*L),ee=l(E*b),M=l(L*l(ee+Z)),P=l(H+l(S*l(E*Z)));if(M!==P)throw Error("bad point: equation left != right (1)");let z=l(A*C),I=l(N*q);if(z!==I)throw Error("bad point: equation left != right (2)")}equals(g){f(g);let{X:b,Y:S,Z:A}=this,{X:C,Y:N,Z:q}=g,E=l(b*q),Z=l(C*A),L=l(S*q),H=l(N*A);return E===Z&&L===H}is0(){return this.equals(p.ZERO)}negate(){return new p(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:S,Z:A}=this,C=l(b*b),N=l(S*S),q=l(D0*l(A*A)),E=l(g*C),Z=b+S,L=l(l(Z*Z)-C-N),H=E+N,ee=H-q,M=E-N,P=l(L*ee),z=l(H*M),I=l(L*M),R=l(ee*H);return new p(P,z,R,I)}add(g){f(g);let{a:b,d:S}=s,{X:A,Y:C,Z:N,T:q}=this,{X:E,Y:Z,Z:L,T:H}=g,ee=l(A*E),M=l(C*Z),P=l(q*S*H),z=l(N*L),I=l((A+C)*(E+Z)-ee-M),R=z-P,O=z+P,F=l(M-b*ee),D=l(I*R),V=l(O*F),_=l(I*F),re=l(R*O);return new p(D,V,re,_)}subtract(g){return f(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:S}=y.cached(this,g,(A)=>Ms(p,A));return Ms(p,[b,S])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===ko)return p.ZERO;if(this.is0()||g===Mr)return this;return y.unsafe(this,g,(b)=>Ms(p,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,S=g,{X:A,Y:C,Z:N}=b,q=b.is0();if(S==null)S=q?zW:n.inv(N);let E=l(A*S),Z=l(C*S),L=n.mul(N,S);if(q)return{x:ko,y:Mr};if(L!==Mr)throw Error("invZ was invalid");return{x:E,y:Z}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),S=n.toBytes(b);return S[S.length-1]|=g&Mr?128:0,S}toHex(){return pc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new rd(p,o.BITS);if(o.BITS>=8)p.BASE.precompute(8);return Object.freeze(p.prototype),Object.freeze(p),p}class B0{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){I0()}static fromHex(e){I0()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return pc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var od=BigInt(0),wc=BigInt(1),$m=BigInt(2);function DW(e){return wn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function v2(e){let t=DW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?gc:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),f=a?BigInt(121665):BigInt(39081),p=a?$m**BigInt(254):$m**BigInt(447),y=a?BigInt(8)*$m**BigInt(251)-wc:BigInt(4)*$m**BigInt(445)-wc,g=p+y+wc,b=(I)=>mt(I,r),S=A(d);function A(I){return Yu(b(I),u)}function C(I){let R=So(lt(I,u,"uCoordinate"));if(a)R[31]&=127;return b(Ln(R))}function N(I){return Ln(n(So(lt(I,u,"scalar"))))}function q(I,R){let O=ee(C(R),N(I));if(O===od)throw Error("invalid private or public key received");return A(O)}function E(I){return q(I,S)}let Z=E,L=q;function H(I,R,O){let F=b(I*(R-O));return R=b(R-F),O=b(O+F),{x_2:R,x_3:O}}function ee(I,R){Ni("u",I,od,r),Ni("scalar",R,p,g);let O=R,F=I,D=wc,V=od,_=I,re=wc,ue=od;for(let we=BigInt(l-1);we>=od;we--){let Ee=O>>we&wc;ue^=Ee,{x_2:D,x_3:_}=H(ue,D,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=D+V,Ce=b(Te*Te),_e=D-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,bt=_-re,zt=b(bt*Te),pr=b(tt*_e),Gr=zt+pr,Qr=zt-pr;_=b(Gr*Gr),re=b(F*b(Qr*Qr)),D=b(Ce*Pe),V=b(Ve*(Ce+b(f*Ve)))}({x_2:D,x_3:_}=H(ue,D,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(D*T)}let M={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,lt(I,M.seed,"seed"),I),z={randomSecretKey:P};return Object.freeze(M),Object.freeze(z),Object.freeze({keygen:nd(P,Z),getSharedSecret:L,getPublicKey:Z,scalarMult:q,scalarMultBase:E,utils:z,GuBytes:S.slice(),lengths:M})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var BW=BigInt(0),Li=BigInt(1),S2=BigInt(2),qW=BigInt(3),jW=BigInt(5),UW=BigInt(8),Zs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),M0=(()=>({p:Zs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:UW,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function E2(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Zs,a=e*e%o*e%o,c=vn(a,S2,o)*a%o,l=vn(c,Li,o)*e%o,u=vn(l,jW,o)*l%o,d=vn(u,t,o)*u%o,f=vn(d,r,o)*d%o,p=vn(f,i,o)*f%o,y=vn(p,n,o)*p%o,g=vn(y,n,o)*p%o,b=vn(g,t,o)*u%o;return{pow_p_5_8:vn(b,S2,o)*e%o,b2:a}}function MW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var q0=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function F0(e,t){let r=Zs,i=mt(t*t*t,r),n=mt(i*i*t,r),o=E2(e*n).pow_p_5_8,s=mt(e*i*o,r),a=mt(t*s*s,r),c=s,l=mt(s*q0,r),u=a===e,d=a===mt(-e,r),f=a===mt(-e*q0,r);if(u)s=c;if(d||f)s=l;if(zi(s,r))s=mt(-s,r);return{isValid:u||d,value:s}}var Fs=w2(M0,{uvRatio:F0}),Eo=(()=>Fs.Fp)(),I2=(()=>Fs.Fn)();var Cm=(()=>{let e=Zs;return v2({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=E2(t);return mt(vn(r,qW,e)*i,e)},adjustScalarBytes:MW})})();var j0=q0,FW=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),ZW=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),HW=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),JW=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),_2=(e)=>F0(Li,e),KW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),U0=(e)=>Eo.create(Ln(e)&KW);function k2(e){let{d:t}=M0,r=Zs,i=(S)=>Eo.create(S),n=i(j0*e*e),o=i((n+Li)*HW),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=F0(o,a),u=i(l*e);if(!zi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let d=i(s*(n-Li)*JW-a),f=l*l,p=i((l+l)*a),y=i(d*FW),g=i(Li-f),b=i(Li+f);return new Fs(i(p*b),i(g*y),i(y*b),i(p*g))}class Tr extends B0{static BASE=(()=>new Tr(Fs.BASE))();static ZERO=(()=>new Tr(Fs.ZERO))();static Fp=(()=>Eo)();static Fn=(()=>I2)();constructor(e){super(e)}static fromAffine(e){return new Tr(Fs.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){er(e,32);let{a:t,d:r}=M0,i=Zs,n=(C)=>Eo.create(C),o=U0(e);if(!JP(Eo.toBytes(o),e)||zi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Li+t*s),c=n(Li-t*s),l=n(a*a),u=n(c*c),d=n(t*r*l-u),{isValid:f,value:p}=_2(n(d*u)),y=n(p*c),g=n(p*y*d),b=n((o+o)*y);if(zi(b,i))b=n(-b);let S=n(a*g),A=n(b*S);if(!f||zi(A,i)||S===BW)throw Error("invalid ristretto255 encoding 2");return new Tr(new Fs(b,S,Li,A))}static fromHex(e){return Tr.fromBytes(Au(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Zs,o=(g)=>Eo.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=_2(o(s*c)),u=o(l*s),d=o(l*a),f=o(u*d*i),p;if(zi(i*f,n)){let g=o(t*j0),b=o(e*j0);e=g,t=b,p=o(u*ZW)}else p=d;if(zi(e*f,n))t=o(-t);let y=o((r-t)*p);if(zi(y,n))y=o(-y);return Eo.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Eo.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var VW=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=N0(e,r,64,Kp);return VW.deriveToCurve(i)},hashToScalar(e,t={DST:f2}){let r=N0(e,t.DST,64,Kp);return I2.create(Ln(r))},deriveToCurve(e){er(e,64);let t=U0(e.subarray(0,32)),r=k2(t),i=U0(e.subarray(32,64)),n=k2(i);return new Tr(r.add(n))}});var A2=!1,WW=!1;async function $2(e,t){if(WW)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Tm(e,t){return await $2(async()=>{let r=Z0(e)?e:await QW(e),i=await crypto.subtle.importKey("raw",YW(t),{name:"X25519"},A2,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMult(e,t)})}async function sd(e){return await $2(async()=>Tm(e,Cm.GuBytes),()=>{if(Z0(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Cm.scalarMultBase(e)})}var GW=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function QW(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...GW,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},A2,["deriveBits"])}function Z0(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function YW(e){return e}class H0{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),eG(Hs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Hs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Hs(this.transcript)}}}function eG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Hs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function vc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Om(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function J0(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function C2(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function T2(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Hs(i),s=o.subarray(0,t),a=vc(e,o.subarray(t));return{data:s,rest:a}}class oi{args;body;constructor(e,t){this.args=e,this.body=t}}async function tG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=hr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Hs(i);return{s:new oi(r,n)}}async function O2(e){let t=new H0(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await tG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=hr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:vc(e,a)}}}function K0(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let r of e){t.push("-> "+r.args.join(" ")+`
 `);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(hr.encode(r.body.subarray(i,n))+`
 `)}if(r.body.length%48===0)t.push(`

package/dist/index.js CHANGED Viewed

@@ -764,7 +764,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),o}async function CV(e,t){let r=await Ft(e),i=r.users.find((n)=>n.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:r.pilot,user:i}}async function TV(e){let t=await v_e(ki(__e(),"brains-ops-watchdog-smoke-")),r=ki(t,"id_ed25519"),i=ki(t,"known_hosts");try{let n=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${n}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=k_e.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await vu(r,A_e(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await w_e(r,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await vu(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:r,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(n){throw await ZO(t,{recursive:!0,force:!0}),n}}async function MO(e,t,r){return e.commandRunner("ssh",[...OV(e),`root@${e.serverIp}`,"bash","-s","--",t,r],{stdin:HO()})}async function E_e(e,t,r){return e.commandRunner("scp",[...OV(e),"-r",`root@${e.serverIp}:${t}/.`,r])}function OV(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function I_e(e){try{return await S_e(e),!0}catch{return!1}}async function Cx(e,t,r){await Promise.all([vu(ki(e,`${t}.stdout.log`),r.stdout),vu(ki(e,`${t}.stderr.log`),r.stderr)])}function A_e(e){return`${e.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var IV,k_e;var Ox=w(async()=>{Le();vV();ni();jp();await wV();IV=f.object({HCLOUD_TOKEN:f.string().min(1),KAMAL_SSH_PRIVATE_KEY:f.string().min(1)}),k_e=f.object({servers:f.array(f.object({status:f.string(),public_net:f.object({ipv4:f.object({ip:f.string().min(1)})})}))})});import{access as uN,chmod as kE,mkdir as Ph,readFile as fN,writeFile as dN}from"fs/promises";import{dirname as WQ,join as Lc}from"path";import{fileURLToPath as GQ}from"url";var Zp={name:"@rizom/ops",version:"0.2.0-alpha.393",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};$s();yd();var QQ=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],EE=new Set([".kamal/hooks/pre-deploy"]),YQ=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),XQ=GQ(new URL("../templates/rover-pilot/",import.meta.url)),eY=[`service: rover
+`}var IV,k_e;var Ox=w(async()=>{Le();vV();ni();jp();await wV();IV=f.object({HCLOUD_TOKEN:f.string().min(1),KAMAL_SSH_PRIVATE_KEY:f.string().min(1)}),k_e=f.object({servers:f.array(f.object({status:f.string(),public_net:f.object({ipv4:f.object({ip:f.string().min(1)})})}))})});import{access as uN,chmod as kE,mkdir as Ph,readFile as fN,writeFile as dN}from"fs/promises";import{dirname as WQ,join as Lc}from"path";import{fileURLToPath as GQ}from"url";var Zp={name:"@rizom/ops",version:"0.2.0-alpha.395",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};$s();yd();var QQ=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],EE=new Set([".kamal/hooks/pre-deploy"]),YQ=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),XQ=GQ(new URL("../templates/rover-pilot/",import.meta.url)),eY=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 servers:

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.393",
+  "version": "0.2.0-alpha.395",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",