@rizom/ops 0.2.0-alpha.402 → 0.2.0-alpha.403
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -765,7 +765,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
|
|
|
765
765
|
`).replace(/\\n/g,`
|
|
766
766
|
`).trimEnd()}
|
|
767
767
|
`}var QV,hke;var JO=x(async()=>{Ne();KV();Hi();Mp();await JV();QV=f.object({HCLOUD_TOKEN:f.string().min(1),KAMAL_SSH_PRIVATE_KEY:f.string().min(1)}),hke=f.object({servers:f.array(f.object({status:f.string(),public_net:f.object({ipv4:f.object({ip:f.string().min(1)})})}))})});import{parseArgs as L7}from"util";function mt(e){return e}class Vp extends Error{constructor(e){super(e);this.name="CliUsageError"}}function B7(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function j7(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function q7(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function GO(e,t){let r=B7(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=L7({args:e,options:j7(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(q7(s))throw new Vp(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function QO(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>` ${r.label.padEnd(t)} ${r.description}`)}function U7(e){return QO(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function F7(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function YO(e){return QO(Object.entries(e).map(([t,r])=>({label:F7(t,r),description:r.description})))}function XO(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function M7(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function Z7(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=M7(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(...YO(n.flags));return i}function eR(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...U7(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...YO(e.globalFlags));return t.push(...Z7(e.commands)),t.join(`
|
|
768
|
-
`)}function tR(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function ht(e,t){let r=e[t];return typeof r==="string"?r:void 0}function oc(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Wp={name:"@rizom/ops",version:"0.2.0-alpha.402",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as xQ,mkdirSync as SQ,readFileSync as kw,writeFileSync as Ew}from"fs";import{dirname as wQ,join as lz}from"path";function Bx(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Tt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function rr(e,t,r=""){let i=Bx(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Ai(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Tt(e.outputLen),Tt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function sc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Gp(e,t){rr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Qp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ar(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ac(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var J7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function K7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function V7(e){for(let t=0;t<e.length;t++)e[t]=K7(e[t]);return e}var jx=J7?(e)=>e:V7,nR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),W7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Yp(e){if(rr(e),nR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=W7[e[r]];return t}var Ii={_0:48,_9:57,A:65,F:70,a:97,f:102};function rR(e){if(e>=Ii._0&&e<=Ii._9)return e-Ii._0;if(e>=Ii.A&&e<=Ii.F)return e-(Ii.A-10);if(e>=Ii.a&&e<=Ii.f)return e-(Ii.a-10);return}function Ou(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(nR)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=rR(e.charCodeAt(o)),a=rR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function G7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function qx(e,t=""){if(typeof e==="string")return G7(e);return rr(e,void 0,t)}function Ux(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];rr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Xp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function Fx(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function $i(e=32){Tt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var Mx=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Zx{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Ai(e),rr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ar(i)}update(e){return sc(this),this.iHash.update(e),this}digestInto(e){sc(this),Gp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Xn=(()=>{let e=(t,r,i)=>new Zx(t,r).update(i).digest();return e.create=(t,r)=>new Zx(t,r),e})();function Ru(e,t,r){if(Ai(e),r===void 0)r=new Uint8Array(e.outputLen);return Xn(e,r,t)}var Hx=Uint8Array.of(0),iR=Uint8Array.of();function Jx(e,t,r,i=32){Ai(e),Tt(i,"length"),rr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=iR;else rr(r,void 0,"info");let s=new Uint8Array(o*n),a=Xn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Hx[0]=u+1,c.update(u===0?iR:l).update(r).update(Hx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ar(l,Hx),s.slice(0,i)}var mo=(e,t,r,i,n)=>Jx(e,Ru(e,t,r),i,n);function oR(e,t,r){return e&t^~e&r}function sR(e,t,r){return e&t^e&r^t&r}class em{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ac(this.buffer)}update(e){sc(this),rr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ac(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){sc(this),Gp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ar(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ac(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ci=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var nr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var tm=BigInt(4294967295),aR=BigInt(32);function Q7(e,t=!1){if(t)return{h:Number(e&tm),l:Number(e>>aR&tm)};return{h:Number(e>>aR&tm)|0,l:Number(e&tm)|0}}function cR(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=Q7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var Kx=(e,t,r)=>e>>>r,Vx=(e,t,r)=>e<<32-r|t>>>r,$s=(e,t,r)=>e>>>r|t<<32-r,Cs=(e,t,r)=>e<<32-r|t>>>r,Pu=(e,t,r)=>e<<64-r|t>>>r-32,zu=(e,t,r)=>e>>>r-32|t<<64-r;function ei(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var lR=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),uR=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,dR=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),fR=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,pR=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),mR=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var X7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ho=new Uint32Array(64);class hR extends em{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)ho[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=ho[u-15],p=ho[u-2],m=Pn(d,7)^Pn(d,18)^d>>>3,y=Pn(p,17)^Pn(p,19)^p>>>10;ho[u]=y+ho[u-7]+m+ho[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+d+oR(s,a,c)+X7[u]+ho[u]|0,y=(Pn(r,2)^Pn(r,13)^Pn(r,22))+sR(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ar(ho)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ar(this.buffer)}}class gR extends hR{A=Ci[0]|0;B=Ci[1]|0;C=Ci[2]|0;D=Ci[3]|0;E=Ci[4]|0;F=Ci[5]|0;G=Ci[6]|0;H=Ci[7]|0;constructor(){super(32)}}var yR=(()=>cR(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),eW=(()=>yR[0])(),tW=(()=>yR[1])(),go=new Uint32Array(80),yo=new Uint32Array(80);class bR extends em{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)go[A]=e.getUint32(t),yo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=go[A-15]|0,z=yo[A-15]|0,j=$s(C,z,1)^$s(C,z,8)^Kx(C,z,7),E=Cs(C,z,1)^Cs(C,z,8)^Vx(C,z,7),Z=go[A-2]|0,D=yo[A-2]|0,H=$s(Z,D,19)^Pu(Z,D,61)^Kx(Z,D,6),ee=Cs(Z,D,19)^zu(Z,D,61)^Vx(Z,D,6),F=dR(E,ee,yo[A-7],yo[A-16]),P=fR(F,j,H,go[A-7],go[A-16]);go[A]=P|0,yo[A]=F|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:v}=this;for(let A=0;A<80;A++){let C=$s(u,d,14)^$s(u,d,18)^Pu(u,d,41),z=Cs(u,d,14)^Cs(u,d,18)^zu(u,d,41),j=u&p^~u&y,E=d&m^~d&g,Z=pR(v,z,E,tW[A],yo[A]),D=mR(Z,b,C,j,eW[A],go[A]),H=Z|0,ee=$s(r,i,28)^Pu(r,i,34)^Pu(r,i,39),F=Cs(r,i,28)^zu(r,i,34)^zu(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,v=g|0,y=p|0,g=m|0,p=u|0,m=d|0,{h:u,l:d}=ei(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=lR(H,F,N);r=uR(I,D,ee,P),i=I|0}({h:r,l:i}=ei(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ei(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ei(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ei(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ei(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=ei(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=ei(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:v}=ei(this.Hh|0,this.Hl|0,b|0,v|0),this.set(r,i,n,o,s,a,c,l,u,d,p,m,y,g,b,v)}roundClean(){Ar(go,yo)}destroy(){this.destroyed=!0,Ar(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class xR extends bR{Ah=nr[0]|0;Al=nr[1]|0;Bh=nr[2]|0;Bl=nr[3]|0;Ch=nr[4]|0;Cl=nr[5]|0;Dh=nr[6]|0;Dl=nr[7]|0;Eh=nr[8]|0;El=nr[9]|0;Fh=nr[10]|0;Fl=nr[11]|0;Gh=nr[12]|0;Gl=nr[13]|0;Hh=nr[14]|0;Hl=nr[15]|0;constructor(){super(64)}}var Ot=Fx(()=>new gR,Mx(1));var rm=Fx(()=>new xR,Mx(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function am(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Qx(e){if(!am(e))throw TypeError("Uint8Array expected")}function kR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function ER(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function bo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Du(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function im(e){if(!Array.isArray(e))throw TypeError("array expected")}function om(e,t){if(!kR(!0,t))throw TypeError(`${e}: array of strings expected`)}function Yx(e,t){if(!kR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;om("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(im(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(im(n),n.map((o)=>{bo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return bo("join",e),{encode:(t)=>(om("join.decode",t),t.join(e)),decode:(t)=>(bo("join.decode",t),t.split(e))}}function cm(e,t="="){return Du(e),bo("padding",t),{encode(r){om("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){om("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function IR(e){return ER(e),{encode:(t)=>t,decode:(t)=>e(t)}}function SR(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(im(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Du(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,p=d+u;if(!Number.isSafeInteger(p)||d/t!==a||p-u!==d)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var AR=(e,t)=>t===0?e:AR(t,e%t),sm=(e,t)=>e+(t-AR(e,t)),nm=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Wx(e,t,r,i){if(im(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(sm(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${sm(t,r)}`);let n=0,o=0,s=nm[t],a=nm[r]-1,c=[];for(let l of e){if(Du(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=nm[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function rW(e){Du(e);let t=256;return{encode:(r)=>{if(!am(r))throw TypeError("radix.encode input should be Uint8Array");return SR(Array.from(r),t,e)},decode:(r)=>(Yx("radix.decode",r),Uint8Array.from(SR(r,e,t)))}}function gn(e,t=!1){if(Du(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(sm(8,e)>32||sm(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!am(r))throw TypeError("radix2.encode input should be Uint8Array");return Wx(Array.from(r),8,e,!t)},decode:(r)=>(Yx("radix2.decode",r),Uint8Array.from(Wx(r,e,8,t)))}}function wR(e){return ER(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var Fke=Object.freeze(Xr(gn(4),en("0123456789ABCDEF"),tn(""))),Mke=Object.freeze(Xr(gn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),cm(5),tn(""))),Zke=Object.freeze(Xr(gn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),Hke=Object.freeze(Xr(gn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),cm(5),tn(""))),Jke=Object.freeze(Xr(gn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),Kke=Object.freeze(Xr(gn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),IR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),$R=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),nW=/[\t\n\f\r ]/,CR=(e,t)=>{bo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&nW.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},Xx=Object.freeze($R?{encode(e){return Qx(e),e.toBase64()},decode(e){return CR(e,!1)}}:Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),cm(6),tn(""))),gr=Object.freeze(Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),Vke=Object.freeze($R?{encode(e){return Qx(e),e.toBase64({alphabet:"base64url"})},decode(e){return CR(e,!0)}}:Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),cm(6),tn(""))),Wke=Object.freeze(Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),eS=(e)=>Xr(rW(58),en(e),tn("")),Gke=Object.freeze(eS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Qke=Object.freeze(eS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Yke=Object.freeze(eS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Gx=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),vR=[996825010,642813549,513874426,1027748829,705979059];function Nu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<vR.length;i++)if((t>>i&1)===1)r^=vR[i];return r}function _R(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Nu(n)^s>>5}n=Nu(n);for(let o=0;o<i;o++)n=Nu(n)^e.charCodeAt(o)&31;for(let o of t)n=Nu(n)^o;for(let o=0;o<6;o++)n=Nu(n);return n^=r,Gx.encode(Wx([n%nm[30]],30,5,!1))}function TR(e){let t=e==="bech32"?1:734539939,r=gn(5),i=r.decode,n=r.encode,o=wR(i);function s(d,p,m=90){if(bo("bech32.encode prefix",d),am(p))p=Array.from(p);Yx("bech32.encode",p);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let b=d.toLowerCase(),v=_R(b,p,t);return`${b}1${Gx.encode(p)}${v}`}function a(d,p=90){bo("bech32.decode input",d);let m=d.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${d}). Expected (8..${p})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),v=y.slice(g+1);if(v.length<6)throw Error("Data must be at least 6 characters long");let A=Gx.decode(v).slice(0,-6),C=_R(b,A,t);if(!v.endsWith(C))throw Error(`Invalid checksum in ${d}: expected "${C}"`);return{prefix:b,words:A}}let c=wR(a);function l(d){let{prefix:p,words:m}=a(d,!1);return{prefix:p,words:m,bytes:i(m)}}function u(d,p){return s(d,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(TR("bech32")),Xke=Object.freeze(TR("bech32m"));var iW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),oW={encode(e){return Qx(e),e.toHex()},decode(e){return bo("hex",e),Uint8Array.fromHex(e)}},eEe=Object.freeze(iW?oW:Xr(gn(4),en("0123456789abcdef"),tn(""),IR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function aW(e,t,r,i){Ai(e);let n=Xp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Tt(o,"c"),Tt(s,"dkLen"),Tt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=qx(t,"password"),l=qx(r,"salt"),u=new Uint8Array(s),d=Xn.create(e,c),p=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:p}}function cW(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Ar(n),r}function tS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=aW(e,t,r,i),l,u=new Uint8Array(4),d=ac(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);d.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(p).digestInto(p);for(let v=0;v<g.length;v++)g[v]^=p[v]}}return cW(a,c,s,l,p)}function OR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],d=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],v=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],z=e[t++]^r[i++],j=e[t++]^r[i++],E=s,Z=a,D=c,H=l,ee=u,F=d,P=p,N=m,I=y,R=g,O=b,M=v,L=A,V=C,_=z,re=j;for(let ue=0;ue<8;ue+=2)ee^=Xe(E+L|0,7),I^=Xe(ee+E|0,9),L^=Xe(I+ee|0,13),E^=Xe(L+I|0,18),R^=Xe(F+Z|0,7),V^=Xe(R+F|0,9),Z^=Xe(V+R|0,13),F^=Xe(Z+V|0,18),_^=Xe(O+P|0,7),D^=Xe(_+O|0,9),P^=Xe(D+_|0,13),O^=Xe(P+D|0,18),H^=Xe(re+M|0,7),N^=Xe(H+re|0,9),M^=Xe(N+H|0,13),re^=Xe(M+N|0,18),Z^=Xe(E+H|0,7),D^=Xe(Z+E|0,9),H^=Xe(D+Z|0,13),E^=Xe(H+D|0,18),P^=Xe(F+ee|0,7),N^=Xe(P+F|0,9),ee^=Xe(N+P|0,13),F^=Xe(ee+N|0,18),M^=Xe(O+R|0,7),I^=Xe(M+O|0,9),R^=Xe(I+M|0,13),O^=Xe(R+I|0,18),L^=Xe(re+_|0,7),V^=Xe(L+re|0,9),_^=Xe(V+L|0,13),re^=Xe(_+V|0,18);n[o++]=s+E|0,n[o++]=a+Z|0,n[o++]=c+D|0,n[o++]=l+H|0,n[o++]=u+ee|0,n[o++]=d+F|0,n[o++]=p+P|0,n[o++]=m+N|0,n[o++]=y+I|0,n[o++]=g+R|0,n[o++]=b+O|0,n[o++]=v+M|0,n[o++]=A+L|0,n[o++]=C+V|0,n[o++]=z+_|0,n[o++]=j+re|0}function rS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(OR(r,s,e,t,r,o),a>0)s+=16;OR(r,o,e,t+=16,r,s)}}function lW(e,t,r){let i=Xp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Tt(n,"N"),Tt(o,"r"),Tt(s,"p"),Tt(a,"dkLen"),Tt(c,"asyncTick"),Tt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,p=d/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=tS(Ot,e,t,{c:1,dkLen:d*s}),b=Qp(g),v=Qp(new Uint8Array(d*n)),A=Qp(new Uint8Array(d)),C=()=>{};if(u){let z=2*n*s,j=Math.max(Math.floor(z/1e4),1),E=0;C=()=>{if(E++,u&&(!(E%j)||E===z))u(E/z)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:v,B32:b,B:g,tmp:A,blockMixCb:C,asyncTick:c}}function uW(e,t,r,i,n){let o=tS(Ot,e,r,{c:1,dkLen:t});return Ar(r,i,n),o}function nS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:p}=lW(e,t,r);jx(l);for(let m=0;m<o;m++){let y=a*m;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)rS(c,b,c,b+=a,n),p();rS(c,(i-1)*a,l,y,n),p();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let v=0;v<a;v++)d[v]=l[y+v]^c[b*a+v];rS(d,0,l,y,n),p()}}return jx(l),uW(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function dW(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function lm(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function cc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=dW(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function iS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function RR(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!lc(e))throw Error("invalid output, must be aligned")}function ti(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function zn(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function fW(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Ts=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),pW=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var mW=(e)=>{for(let t=0;t<e.length;t++)e[t]=pW(e[t]);return e},Ti=Ts?(e)=>e:mW;function PR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function zR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function NR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var DR=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Ft(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Ft(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Ft(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(r,e),r};function Lu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!lc(t))throw Error("invalid output, must be aligned");return t}function LR(e,t,r){cc(e),cc(t),lm(r);let i=new Uint8Array(16),n=fW(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function lc(e){return e.byteOffset%4===0}function uc(e){return Uint8Array.from(Ft(e))}var jR=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),hW=(()=>Ti(ti(jR("expand 16-byte k"))))(),gW=(()=>Ti(ti(jR("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var Bu=64,yW=16,oS=(()=>4294967295)(),BR=Uint32Array.of();function bW(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Bu),u=ti(l),d=Ts&&lc(n)&&lc(o),p=d?ti(n):BR,m=d?ti(o):BR;if(!Ts){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ti(u),s>=oS)throw Error("arx: counter overflow");let g=Math.min(Bu,c-y);for(let b=0,v;b<g;b++)v=y+b,o[v]=n[v]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=oS)throw Error("arx: counter overflow");let g=Math.min(Bu,c-y);if(d&&g===Bu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let v=0,A;v<yW;v++)A=b+v,m[A]=p[A]^u[v];y+=Bu;continue}for(let b=0,v;b<g;b++)v=y+b,o[v]=n[v]^l[b];y+=g}}function qR(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=PR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return cc(n),cc(s),lm(o),lm(r),(a,c,l,u,d=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(u=Lu(p,u,!1),cc(d),d<0||d>=oS)throw Error("arx: counter overflow");let m=[],y=a.length,g,b;if(y===32)m.push(g=uc(a)),b=gW;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=hW,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Ts||!lc(c))m.push(c=uc(c));let v=ti(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let z=c.subarray(0,16);if(Ts)i(b,v,ti(z),v);else{let j=Ti(Uint32Array.from(b));i(j,v,ti(z),v),zn(j),Ti(v)}c=c.subarray(16)}else if(!Ts)Ti(v);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let z=new Uint8Array(12);z.set(c,o?0:12-c.length),c=z,m.push(c)}let C=Ti(ti(c));try{return bW(e,b,v,C,l,u,d,s),u}finally{zn(...m)}}}function ir(e,t){return e[t++]&255|(e[t++]&255)<<8}class UR{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=uc(Ft(e,32,"key"));let t=ir(e,0),r=ir(e,2),i=ir(e,4),n=ir(e,6),o=ir(e,8),s=ir(e,10),a=ir(e,12),c=ir(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=ir(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],p=o[6],m=o[7],y=o[8],g=o[9],b=ir(e,t+0),v=ir(e,t+2),A=ir(e,t+4),C=ir(e,t+6),z=ir(e,t+8),j=ir(e,t+10),E=ir(e,t+12),Z=ir(e,t+14),D=n[0]+(b&8191),H=n[1]+((b>>>13|v<<3)&8191),ee=n[2]+((v>>>10|A<<6)&8191),F=n[3]+((A>>>7|C<<9)&8191),P=n[4]+((C>>>4|z<<12)&8191),N=n[5]+(z>>>1&8191),I=n[6]+((z>>>14|j<<2)&8191),R=n[7]+((j>>>11|E<<5)&8191),O=n[8]+((E>>>8|Z<<8)&8191),M=n[9]+(Z>>>5|i),L=0,V=L+D*s+H*(5*g)+ee*(5*y)+F*(5*m)+P*(5*p);L=V>>>13,V&=8191,V+=N*(5*d)+I*(5*u)+R*(5*l)+O*(5*c)+M*(5*a),L+=V>>>13,V&=8191;let _=L+D*a+H*s+ee*(5*g)+F*(5*y)+P*(5*m);L=_>>>13,_&=8191,_+=N*(5*p)+I*(5*d)+R*(5*u)+O*(5*l)+M*(5*c),L+=_>>>13,_&=8191;let re=L+D*c+H*a+ee*s+F*(5*g)+P*(5*y);L=re>>>13,re&=8191,re+=N*(5*m)+I*(5*p)+R*(5*d)+O*(5*u)+M*(5*l),L+=re>>>13,re&=8191;let ue=L+D*l+H*c+ee*a+F*s+P*(5*g);L=ue>>>13,ue&=8191,ue+=N*(5*y)+I*(5*m)+R*(5*p)+O*(5*d)+M*(5*u),L+=ue>>>13,ue&=8191;let T=L+D*u+H*l+ee*c+F*a+P*s;L=T>>>13,T&=8191,T+=N*(5*g)+I*(5*y)+R*(5*m)+O*(5*p)+M*(5*d),L+=T>>>13,T&=8191;let Se=L+D*d+H*u+ee*l+F*c+P*a;L=Se>>>13,Se&=8191,Se+=N*s+I*(5*g)+R*(5*y)+O*(5*m)+M*(5*p),L+=Se>>>13,Se&=8191;let Ee=L+D*p+H*d+ee*u+F*l+P*c;L=Ee>>>13,Ee&=8191,Ee+=N*a+I*s+R*(5*g)+O*(5*y)+M*(5*m),L+=Ee>>>13,Ee&=8191;let Te=L+D*m+H*p+ee*d+F*u+P*l;L=Te>>>13,Te&=8191,Te+=N*c+I*a+R*s+O*(5*g)+M*(5*y),L+=Te>>>13,Te&=8191;let Ce=L+D*y+H*m+ee*p+F*d+P*u;L=Ce>>>13,Ce&=8191,Ce+=N*l+I*c+R*a+O*s+M*(5*g),L+=Ce>>>13,Ce&=8191;let _e=L+D*g+H*y+ee*m+F*p+P*d;L=_e>>>13,_e&=8191,_e+=N*u+I*l+R*c+O*a+M*s,L+=_e>>>13,_e&=8191,L=(L<<2)+L|0,L=L+V|0,V=L&8191,L=L>>>13,_+=L,n[0]=V,n[1]=_,n[2]=re,n[3]=ue,n[4]=T,n[5]=Se,n[6]=Ee,n[7]=Te,n[8]=Ce,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;zn(r)}update(e){iS(this),Ft(e),e=uc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,zn(this.h,this.r,this.buffer,this.pad)}digestInto(e){iS(this),RR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var FR=NR(32,(e)=>new UR(e));function xW(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],p=t[2],m=t[3],y=t[4],g=t[5],b=t[6],v=t[7],A=n,C=r[0],z=r[1],j=r[2],E=s,Z=a,D=c,H=l,ee=u,F=d,P=p,N=m,I=y,R=g,O=b,M=v,L=A,V=C,_=z,re=j;for(let T=0;T<o;T+=2)E=E+ee|0,L=et(L^E,16),I=I+L|0,ee=et(ee^I,12),E=E+ee|0,L=et(L^E,8),I=I+L|0,ee=et(ee^I,7),Z=Z+F|0,V=et(V^Z,16),R=R+V|0,F=et(F^R,12),Z=Z+F|0,V=et(V^Z,8),R=R+V|0,F=et(F^R,7),D=D+P|0,_=et(_^D,16),O=O+_|0,P=et(P^O,12),D=D+P|0,_=et(_^D,8),O=O+_|0,P=et(P^O,7),H=H+N|0,re=et(re^H,16),M=M+re|0,N=et(N^M,12),H=H+N|0,re=et(re^H,8),M=M+re|0,N=et(N^M,7),E=E+F|0,re=et(re^E,16),O=O+re|0,F=et(F^O,12),E=E+F|0,re=et(re^E,8),O=O+re|0,F=et(F^O,7),Z=Z+P|0,L=et(L^Z,16),M=M+L|0,P=et(P^M,12),Z=Z+P|0,L=et(L^Z,8),M=M+L|0,P=et(P^M,7),D=D+N|0,V=et(V^D,16),I=I+V|0,N=et(N^I,12),D=D+N|0,V=et(V^D,8),I=I+V|0,N=et(N^I,7),H=H+ee|0,_=et(_^H,16),R=R+_|0,ee=et(ee^R,12),H=H+ee|0,_=et(_^H,8),R=R+_|0,ee=et(ee^R,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+Z|0,i[ue++]=c+D|0,i[ue++]=l+H|0,i[ue++]=u+ee|0,i[ue++]=d+F|0,i[ue++]=p+P|0,i[ue++]=m+N|0,i[ue++]=y+I|0,i[ue++]=g+R|0,i[ue++]=b+O|0,i[ue++]=v+M|0,i[ue++]=A+L|0,i[ue++]=C+V|0,i[ue++]=z+_|0,i[ue++]=j+re|0}var SW=qR(xW,{counterRight:!1,counterLength:4,allowShortKeys:!1});var wW=new Uint8Array(16),MR=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(wW.subarray(r))},vW=new Uint8Array(32);function ZR(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,vW),s=LR(i.length,n?n.length:0,!0),a=FR.create(o);if(n)MR(a,n);MR(a,i),a.update(s);let c=a.digest();return zn(o,s),c}var _W=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Lu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=ZR(e,t,r,c,i);return s.set(l,a),zn(l),s},decrypt(o,s){s=Lu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=ZR(e,t,r,a,i);if(!zR(c,l))throw zn(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),zn(l),s}}),yn=DR({blockSize:64,nonceLength:12,tagLength:16},_W(SW));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function dc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Vt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function ze(e,t,r=""){let i=dc(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function bn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Vt(e.outputLen),Vt(e.blockLen)}function Ri(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function um(e,t){ze(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function dm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Fr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function fm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Nn(e,t){return e<<32-t|e>>>t}var kW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function EW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function IW(e){for(let t=0;t<e.length;t++)e[t]=EW(e[t]);return e}var sS=kW?(e)=>e:IW,JR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),AW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Os(e){if(ze(e),JR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=AW[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function HR(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function Rs(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(JR)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=HR(e.charCodeAt(o)),a=HR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Lt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];ze(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function fc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function xo(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var So=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cS=BigInt(0),aS=BigInt(1);function ju(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function KR(e){if(typeof e==="bigint"){if(!pm(e))throw Error("positive bigint expected, got "+e)}else Vt(e);return e}function qu(e){let t=KR(e).toString(16);return t.length&1?"0"+t:t}function VR(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?cS:BigInt("0x"+e)}function wo(e){return VR(Os(e))}function vo(e){return VR(Os(mm(ze(e)).reverse()))}function pc(e,t){Vt(t),e=KR(e);let r=Rs(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Uu(e,t){return pc(e,t).reverse()}function mm(e){return Uint8Array.from(e)}function _o(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var pm=(e)=>typeof e==="bigint"&&cS<=e;function $W(e,t,r){return pm(e)&&pm(t)&&pm(r)&&t<=e&&e<r}function Fu(e,t,r,i){if(!$W(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function lS(e){let t;for(t=0;e>cS;e>>=aS,t+=1);return t}var Mu=(e)=>(aS<<BigInt(e))-aS;function WR(e,t,r){if(Vt(e,"hashLen"),Vt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,Lt(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,v=[];while(b<t){c=p();let A=c.slice();v.push(A),b+=c.length}return Lt(...v)};return(b,v)=>{d(),m(b);let A=void 0;while(!(A=v(y())))m();return d(),A}}function Ps(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function uS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),yr=BigInt(1),zs=BigInt(2),YR=BigInt(3),XR=BigInt(4),eP=BigInt(5),CW=BigInt(7),tP=BigInt(8),TW=BigInt(9),rP=BigInt(16);function $r(e,t){let r=e%t;return r>=Cr?r:t+r}function xn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function GR(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=$r(e,t),i=t,n=Cr,o=yr,s=yr,a=Cr;while(r!==Cr){let l=i/r,u=i%r,d=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=d,a=p}if(i!==yr)throw Error("invert: does not exist");return $r(n,t)}function dS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function nP(e,t){let r=(e.ORDER+yr)/XR,i=e.pow(t,r);return dS(e,i,t),i}function OW(e,t){let r=(e.ORDER-eP)/tP,i=e.mul(t,zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,zs),n),a=e.mul(o,e.sub(s,e.ONE));return dS(e,a,t),a}function RW(e){let t=hm(e),r=iP(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+CW)/rP;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,m),u=a.cmov(p,d,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return dS(a,b,c),b}}function iP(e){if(e<YR)throw Error("sqrt is not defined for small field");let t=e-yr,r=0;while(t%zs===Cr)t/=zs,r++;let i=zs,n=hm(e);while(QR(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return nP;let o=n.pow(i,t),s=(t+yr)/zs;return function(c,l){if(c.is0(l))return l;if(QR(c,l)!==1)throw Error("Cannot find square root");let u=r,d=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=yr<<BigInt(u-y-1),v=c.pow(d,b);u=y,d=c.sqr(v),p=c.mul(p,d),m=c.mul(m,v)}return m}}function PW(e){if(e%XR===YR)return nP;if(e%tP===eP)return OW;if(e%rP===TW)return RW(e);return iP(e)}var zW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function fS(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=zW.reduce((i,n)=>(i[n]="function",i),t);return Ps(e,r),e}function NW(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===yr)return t;let i=e.ONE,n=t;while(r>Cr){if(r&yr)i=e.mul(i,n);n=e.sqr(n),r>>=yr}return i}function Zu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function QR(e,t){let r=(e.ORDER-yr)/zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function DW(e,t){if(t!==void 0)Vt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class oP{ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=yr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=DW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return $r(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&yr)===yr}neg(e){return $r(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return $r(e*e,this.ORDER)}add(e,t){return $r(e+t,this.ORDER)}sub(e,t){return $r(e-t,this.ORDER)}mul(e,t){return $r(e*t,this.ORDER)}pow(e,t){return NW(this,e,t)}div(e,t){return $r(e*GR(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return GR(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=PW(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Uu(e,this.BYTES):pc(e,this.BYTES)}fromBytes(e,t=!1){ze(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?vo(e):wo(e);if(s)a=$r(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Zu(this,e)}cmov(e,t,r){return r?t:e}}function hm(e,t={}){return new oP(e,t)}function sP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function pS(e){let t=sP(e);return t+Math.ceil(t/2)}function aP(e,t,r=!1){ze(e);let i=e.length,n=sP(t),o=pS(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?vo(e):wo(e),a=$r(s,t-yr)+yr;return r?Uu(a,n):pc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mc=BigInt(0),Ns=BigInt(1);function Hu(e,t){let r=t.negate();return e?r:t}function yS(e,t){let r=Zu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function dP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function mS(e,t){dP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Mu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function cP(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ns;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var hS=new WeakMap,fP=new WeakMap;function gS(e){return fP.get(e)||1}function lP(e){if(e!==mc)throw Error("invalid wNAF")}class bS{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>mc){if(t&Ns)r=r.add(i);i=i.double(),t>>=Ns}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=mS(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=mS(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=cP(r,s,o);if(r=a,l)n=n.add(Hu(d,t[p]));else i=i.add(Hu(u,t[c]))}return lP(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=mS(e,this.bits);for(let o=0;o<n.windows;o++){if(r===mc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=cP(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return lP(r),i}getPrecomputes(e,t,r){let i=hS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);hS.set(t,i)}}return i}cached(e,t,r){let i=gS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=gS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){dP(t,this.bits),fP.set(e,t),hS.delete(e)}hasCache(e){return gS(e)!==1}}function pP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>mc||i>mc){if(r&Ns)o=o.add(n);if(i&Ns)s=s.add(n);n=n.double(),r>>=Ns,i>>=Ns}return{p1:o,p2:s}}function uP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return fS(t),t}else return hm(e,{isLE:r})}function mP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>mc))throw Error(`CURVE.${c} must be positive bigint`)}let n=uP(t.p,r.Fp,i),o=uP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function gm(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ju=BigInt(0),hc=BigInt(1),ym=BigInt(2);function LW(e){return Ps(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function hP(e){let t=LW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||xo,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?ym**BigInt(254):ym**BigInt(447),y=a?BigInt(8)*ym**BigInt(251)-hc:BigInt(4)*ym**BigInt(445)-hc,g=m+y+hc,b=(I)=>$r(I,r),v=A(d);function A(I){return Uu(b(I),u)}function C(I){let R=mm(ze(I,u,"uCoordinate"));if(a)R[31]&=127;return b(vo(R))}function z(I){return vo(n(mm(ze(I,u,"scalar"))))}function j(I,R){let O=ee(C(R),z(I));if(O===Ju)throw Error("invalid private or public key received");return A(O)}function E(I){return j(I,v)}let Z=E,D=j;function H(I,R,O){let M=b(I*(R-O));return R=b(R-M),O=b(O+M),{x_2:R,x_3:O}}function ee(I,R){Fu("u",I,Ju,r),Fu("scalar",R,m,g);let O=R,M=I,L=hc,V=Ju,_=I,re=hc,ue=Ju;for(let Se=BigInt(l-1);Se>=Ju;Se--){let Ee=O>>Se&hc;ue^=Ee,{x_2:L,x_3:_}=H(ue,L,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=L+V,Ce=b(Te*Te),_e=L-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,St=_-re,Dt=b(St*Te),hr=b(tt*_e),Qr=Dt+hr,Yr=Dt-hr;_=b(Qr*Qr),re=b(M*b(Yr*Yr)),L=b(Ce*Pe),V=b(Ve*(Ce+b(p*Ve)))}({x_2:L,x_3:_}=H(ue,L,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(L*T)}let F={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(ze(I,F.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze({keygen:gm(P,Z),getSharedSecret:D,getPublicKey:Z,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:v.slice(),lengths:F})}class xS{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(bn(e),ze(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Fr(i)}update(e){return Ri(this),this.iHash.update(e),this}digestInto(e){Ri(this),ze(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var gc=(e,t,r)=>new xS(e,t).update(r).digest();gc.create=(e,t)=>new xS(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gP=(e,t)=>(e+(e>=0?t:-t)/bP)/t;function BW(e,t,r){let[[i,n],[o,s]]=t,a=gP(s*e,r),c=gP(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<Pi,p=u<Pi;if(d)l=-l;if(p)u=-u;let m=Mu(Math.ceil(lS(r)/2))+yc;if(l<Pi||l>=m||u<Pi||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:p,k2:u}}function wS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function SS(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(ju(r.lowS,"lowS"),ju(r.prehash,"prehash"),r.format!==void 0)wS(r.format);return r}class yP extends Error{constructor(e=""){super(e)}}var ko={Err:yP,_tlv:{encode:(e,t)=>{let{Err:r}=ko;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=qu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?qu(n.length/2|128):"";return qu(e)+o+n+t},decode(e,t){let{Err:r}=ko,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=ko;if(e<Pi)throw new t("integer: negative integers are not allowed");let r=qu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=ko;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return wo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=ko,n=ze(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=ko,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Pi=BigInt(0),yc=BigInt(1),bP=BigInt(2),bm=BigInt(3),jW=BigInt(4);function vS(e,t={}){let r=mP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ps(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=SP(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(P,N,I){let{x:R,y:O}=N.toAffine(),M=i.toBytes(R);if(ju(I,"isCompressed"),I){u();let L=!i.isOdd(O);return Lt(xP(L),M)}else return Lt(Uint8Array.of(4),M,i.toBytes(O))}function p(P){ze(P,void 0,"Point");let{publicKey:N,publicKeyUncompressed:I}=l,R=P.length,O=P[0],M=P.subarray(1);if(R===N&&(O===2||O===3)){let L=i.fromBytes(M);if(!i.isValid(L))throw Error("bad point: is not on curve, wrong x");let V=g(L),_;try{_=i.sqrt(V)}catch(T){let Se=T instanceof Error?": "+T.message:"";throw Error("bad point: is not on curve, sqrt error"+Se)}u();let re=i.isOdd(_);if((O&1)===1!==re)_=i.neg(_);return{x:L,y:_}}else if(R===I&&O===4){let L=i.BYTES,V=i.fromBytes(M.subarray(0,L)),_=i.fromBytes(M.subarray(L,L*2));if(!b(V,_))throw Error("bad point: is not on curve");return{x:V,y:_}}else throw Error(`bad point: got length ${R}, expected compressed=${N} or uncompressed=${I}`)}let m=t.toBytes||d,y=t.fromBytes||p;function g(P){let N=i.sqr(P),I=i.mul(N,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,N){let I=i.sqr(N),R=g(P);return i.eql(I,R)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let v=i.mul(i.pow(o.a,bm),jW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(v,A)))throw Error("bad curve params: a or b");function C(P,N,I=!1){if(!i.isValid(N)||I&&i.is0(N))throw Error(`bad point coordinate ${P}`);return N}function z(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function j(P){if(!c||!c.basises)throw Error("no endo");return BW(P,c.basises,n.ORDER)}let E=uS((P,N)=>{let{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(O);let L=i.mul(I,N),V=i.mul(R,N),_=i.mul(O,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}),Z=uS((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:N,y:I}=P.toAffine();if(!i.isValid(N)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(N,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function D(P,N,I,R,O){return I=new H(i.mul(I.X,P),I.Y,I.Z),N=Hu(R,N),I=Hu(O,I),N.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,N,I){this.X=C("x",P),this.Y=C("y",N,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:N,y:I}=P||{};if(!P||!i.isValid(N)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(I))return H.ZERO;return new H(N,I,i.ONE)}static fromBytes(P){let N=H.fromAffine(y(ze(P,void 0,"point")));return N.assertValidity(),N}static fromHex(P){return H.fromBytes(Rs(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,N=!0){if(F.createCache(this,P),!N)this.multiply(bm);return this}assertValidity(){Z(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){z(P);let{X:N,Y:I,Z:R}=this,{X:O,Y:M,Z:L}=P,V=i.eql(i.mul(N,L),i.mul(O,R)),_=i.eql(i.mul(I,L),i.mul(M,R));return V&&_}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:N}=o,I=i.mul(N,bm),{X:R,Y:O,Z:M}=this,L=i.ZERO,V=i.ZERO,_=i.ZERO,re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(M,M),Se=i.mul(R,O);return Se=i.add(Se,Se),_=i.mul(R,M),_=i.add(_,_),L=i.mul(P,_),V=i.mul(I,T),V=i.add(L,V),L=i.sub(ue,V),V=i.add(ue,V),V=i.mul(L,V),L=i.mul(Se,L),_=i.mul(I,_),T=i.mul(P,T),Se=i.sub(re,T),Se=i.mul(P,Se),Se=i.add(Se,_),_=i.add(re,re),re=i.add(_,re),re=i.add(re,T),re=i.mul(re,Se),V=i.add(V,re),T=i.mul(O,M),T=i.add(T,T),re=i.mul(T,Se),L=i.sub(L,re),_=i.mul(T,ue),_=i.add(_,_),_=i.add(_,_),new H(L,V,_)}add(P){z(P);let{X:N,Y:I,Z:R}=this,{X:O,Y:M,Z:L}=P,V=i.ZERO,_=i.ZERO,re=i.ZERO,ue=o.a,T=i.mul(o.b,bm),Se=i.mul(N,O),Ee=i.mul(I,M),Te=i.mul(R,L),Ce=i.add(N,I),_e=i.add(O,M);Ce=i.mul(Ce,_e),_e=i.add(Se,Ee),Ce=i.sub(Ce,_e),_e=i.add(N,R);let Pe=i.add(O,L);return _e=i.mul(_e,Pe),Pe=i.add(Se,Te),_e=i.sub(_e,Pe),Pe=i.add(I,R),V=i.add(M,L),Pe=i.mul(Pe,V),V=i.add(Ee,Te),Pe=i.sub(Pe,V),re=i.mul(ue,_e),V=i.mul(T,Te),re=i.add(V,re),V=i.sub(Ee,re),re=i.add(Ee,re),_=i.mul(V,re),Ee=i.add(Se,Se),Ee=i.add(Ee,Se),Te=i.mul(ue,Te),_e=i.mul(T,_e),Ee=i.add(Ee,Te),Te=i.sub(Se,Te),Te=i.mul(ue,Te),_e=i.add(_e,Te),Se=i.mul(Ee,_e),_=i.add(_,Se),Se=i.mul(Pe,_e),V=i.mul(Ce,V),V=i.sub(V,Se),Se=i.mul(Ce,Ee),re=i.mul(Pe,re),re=i.add(re,Se),new H(V,_,re)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:N}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,R,O=(M)=>F.cached(this,M,(L)=>yS(H,L));if(N){let{k1neg:M,k1:L,k2neg:V,k2:_}=j(P),{p:re,f:ue}=O(L),{p:T,f:Se}=O(_);R=ue.add(Se),I=D(N.beta,re,T,M,V)}else{let{p:M,f:L}=O(P);I=M,R=L}return yS(H,[I,R])[0]}multiplyUnsafe(P){let{endo:N}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Pi||I.is0())return H.ZERO;if(P===yc)return I;if(F.hasCache(this))return this.multiply(P);if(N){let{k1neg:R,k1:O,k2neg:M,k2:L}=j(P),{p1:V,p2:_}=pP(H,I,O,L);return D(N.beta,V,_,R,M)}else return F.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===yc)return!0;if(P)return P(H,this);return F.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===yc)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return ju(P,"isCompressed"),this.assertValidity(),m(H,this,P)}toHex(P=!0){return Os(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let ee=n.BITS,F=new bS(H,t.endo?Math.ceil(ee/2):ee);return H.BASE.precompute(8),H}function xP(e){return Uint8Array.of(e?2:3)}function SP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function qW(e,t={}){let{Fn:r}=e,i=t.randomBytes||xo,n=Object.assign(SP(e.Fp,r),{seed:pS(r.ORDER)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let v=m.length;if(y===!0&&v!==g)return!1;if(y===!1&&v!==b)return!1;return!!e.fromBytes(m)}catch(v){return!1}}function a(m=i(n.seed)){return aP(ze(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!dc(m))return;if("_lengths"in r&&r._lengths||y===g)return;let v=ze(m,void 0,"key").length;return v===g||v===b}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=gm(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:n})}function _S(e,t,r={}){bn(t),Ps(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||xo,n=r.hmac||((I,R)=>gc(t,I,R)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m}=qW(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*bP<o.ORDER;function b(I){let R=a>>yc;return I>R}function v(I,R){if(!s.isValidNot0(R))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,R){wS(R);let O=m.signature,M=R==="compact"?O:R==="recovered"?O+1:void 0;return ze(I,M)}class z{r;s;recovery;constructor(I,R,O){if(this.r=v("r",I),this.s=v("s",R),O!=null){if(A(),![0,1,2,3].includes(O))throw Error("invalid recovery id");this.recovery=O}Object.freeze(this)}static fromBytes(I,R=y.format){C(I,R);let O;if(R==="der"){let{r:_,s:re}=ko.toSig(ze(I));return new z(_,re)}if(R==="recovered")O=I[0],R="compact",I=I.subarray(1);let M=m.signature/2,L=I.subarray(0,M),V=I.subarray(M,M*2);return new z(s.fromBytes(L),s.fromBytes(V),O)}static fromHex(I,R){return this.fromBytes(Rs(I),R)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new z(this.r,this.s,I)}recoverPublicKey(I){let{r:R,s:O}=this,M=this.assertRecovery(),L=M===2||M===3?R+a:R;if(!o.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(L),_=e.fromBytes(Lt(xP((M&1)===0),V)),re=s.inv(L),ue=E(ze(I,void 0,"msgHash")),T=s.create(-ue*re),Se=s.create(O*re),Ee=e.BASE.multiplyUnsafe(T).add(_.multiplyUnsafe(Se));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(wS(I),I==="der")return Rs(ko.hexFromSig(this));let{r:R,s:O}=this,M=s.toBytes(R),L=s.toBytes(O);if(I==="recovered")return A(),Lt(Uint8Array.of(this.assertRecovery()),M,L);return Lt(M,L)}toHex(I){return Os(this.toBytes(I))}}let j=r.bits2int||function(R){if(R.length>8192)throw Error("input is too large");let O=wo(R),M=R.length*8-c;return M>0?O>>BigInt(M):O},E=r.bits2int_modN||function(R){return s.create(j(R))},Z=Mu(c);function D(I){return Fu("num < 2^"+c,I,Pi,Z),s.toBytes(I)}function H(I,R){return ze(I,void 0,"message"),R?ze(t(I),void 0,"prehashed message"):I}function ee(I,R,O){let{lowS:M,prehash:L,extraEntropy:V}=SS(O,y);I=H(I,L);let _=E(I),re=s.fromBytes(R);if(!s.isValidNot0(re))throw Error("invalid private key");let ue=[D(re),D(_)];if(V!=null&&V!==!1){let Te=V===!0?i(m.secretKey):V;ue.push(ze(Te,void 0,"extraEntropy"))}let T=Lt(...ue),Se=_;function Ee(Te){let Ce=j(Te);if(!s.isValidNot0(Ce))return;let _e=s.inv(Ce),Pe=e.BASE.multiply(Ce).toAffine(),Ve=s.create(Pe.x);if(Ve===Pi)return;let tt=s.create(_e*s.create(Se+Ve*re));if(tt===Pi)return;let St=(Pe.x===Ve?0:2)|Number(Pe.y&yc),Dt=tt;if(M&&b(tt))Dt=s.neg(tt),St^=1;return new z(Ve,Dt,g?void 0:St)}return{seed:T,k2sig:Ee}}function F(I,R,O={}){let{seed:M,k2sig:L}=ee(I,R,O);return WR(t.outputLen,s.BYTES,n)(M,L).toBytes(O.format)}function P(I,R,O,M={}){let{lowS:L,prehash:V,format:_}=SS(M,y);if(O=ze(O,void 0,"publicKey"),R=H(R,V),!dc(I)){let re=I instanceof z?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}C(I,_);try{let re=z.fromBytes(I,_),ue=e.fromBytes(O);if(L&&re.hasHighS())return!1;let{r:T,s:Se}=re,Ee=E(R),Te=s.inv(Se),Ce=s.create(Ee*Te),_e=s.create(T*Te),Pe=e.BASE.multiplyUnsafe(Ce).add(ue.multiplyUnsafe(_e));if(Pe.is0())return!1;return s.create(Pe.x)===T}catch(re){return!1}}function N(I,R,O={}){let{prehash:M}=SS(O,y);return R=H(R,M),z.fromBytes(I,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m,Point:e,sign:F,verify:P,recoverPublicKey:N,Signature:z,hash:t})}function wP(e,t,r){return e&t^~e&r}function vP(e,t,r){return e&t^e&r^t&r}class xm{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=fm(this.buffer)}update(e){Ri(this),ze(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=fm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ri(this),um(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Fr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=fm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var or=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Sm=BigInt(4294967295),_P=BigInt(32);function UW(e,t=!1){if(t)return{h:Number(e&Sm),l:Number(e>>_P&Sm)};return{h:Number(e>>_P&Sm)|0,l:Number(e&Sm)|0}}function wm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=UW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var kS=(e,t,r)=>e>>>r,ES=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,Ku=(e,t,r)=>e<<64-r|t>>>r-32,Vu=(e,t,r)=>e>>>r-32|t<<64-r;var kP=(e,t,r)=>e<<r|t>>>32-r,EP=(e,t,r)=>t<<r|e>>>32-r,IP=(e,t,r)=>t<<r-32|e>>>64-r,AP=(e,t,r)=>e<<r-32|t>>>64-r;function ri(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var $P=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),CP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,TP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),OP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,RP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),PP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var MW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Eo=new Uint32Array(64);class zP extends xm{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)Eo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=Eo[u-15],p=Eo[u-2],m=Nn(d,7)^Nn(d,18)^d>>>3,y=Nn(p,17)^Nn(p,19)^p>>>10;Eo[u]=y+Eo[u-7]+m+Eo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Nn(s,6)^Nn(s,11)^Nn(s,25),p=l+d+wP(s,a,c)+MW[u]+Eo[u]|0,y=(Nn(r,2)^Nn(r,13)^Nn(r,22))+vP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Fr(Eo)}destroy(){this.set(0,0,0,0,0,0,0,0),Fr(this.buffer)}}class NP extends zP{A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var DP=(()=>wm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),ZW=(()=>DP[0])(),HW=(()=>DP[1])(),Io=new Uint32Array(80),Ao=new Uint32Array(80);class LP extends xm{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Io[A]=e.getUint32(t),Ao[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=Io[A-15]|0,z=Ao[A-15]|0,j=Ds(C,z,1)^Ds(C,z,8)^kS(C,z,7),E=Ls(C,z,1)^Ls(C,z,8)^ES(C,z,7),Z=Io[A-2]|0,D=Ao[A-2]|0,H=Ds(Z,D,19)^Ku(Z,D,61)^kS(Z,D,6),ee=Ls(Z,D,19)^Vu(Z,D,61)^ES(Z,D,6),F=TP(E,ee,Ao[A-7],Ao[A-16]),P=OP(F,j,H,Io[A-7],Io[A-16]);Io[A]=P|0,Ao[A]=F|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:v}=this;for(let A=0;A<80;A++){let C=Ds(u,d,14)^Ds(u,d,18)^Ku(u,d,41),z=Ls(u,d,14)^Ls(u,d,18)^Vu(u,d,41),j=u&p^~u&y,E=d&m^~d&g,Z=RP(v,z,E,HW[A],Ao[A]),D=PP(Z,b,C,j,ZW[A],Io[A]),H=Z|0,ee=Ds(r,i,28)^Ku(r,i,34)^Ku(r,i,39),F=Ls(r,i,28)^Vu(r,i,34)^Vu(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,v=g|0,y=p|0,g=m|0,p=u|0,m=d|0,{h:u,l:d}=ri(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=$P(H,F,N);r=CP(I,D,ee,P),i=I|0}({h:r,l:i}=ri(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ri(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ri(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ri(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ri(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=ri(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=ri(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:v}=ri(this.Hh|0,this.Hl|0,b|0,v|0),this.set(r,i,n,o,s,a,c,l,u,d,p,m,y,g,b,v)}roundClean(){Fr(Io,Ao)}destroy(){Fr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class BP extends LP{Ah=or[0]|0;Al=or[1]|0;Bh=or[2]|0;Bl=or[3]|0;Ch=or[4]|0;Cl=or[5]|0;Dh=or[6]|0;Dl=or[7]|0;Eh=or[8]|0;El=or[9]|0;Fh=or[10]|0;Fl=or[11]|0;Gh=or[12]|0;Gl=or[13]|0;Hh=or[14]|0;Hl=or[15]|0;constructor(){super(48)}}var vm=fc(()=>new NP,So(1));var jP=fc(()=>new BP,So(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var JW=BigInt(1),qP=BigInt(2),KW=BigInt(3),VW=BigInt(5),n1e=BigInt(8),UP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function WW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=UP,a=e*e%o*e%o,c=xn(a,qP,o)*a%o,l=xn(c,JW,o)*e%o,u=xn(l,VW,o)*l%o,d=xn(u,t,o)*u%o,p=xn(d,r,o)*d%o,m=xn(p,i,o)*p%o,y=xn(m,n,o)*m%o,g=xn(y,n,o)*m%o,b=xn(g,t,o)*u%o;return{pow_p_5_8:xn(b,qP,o)*e%o,b2:a}}function GW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var FP=(()=>{let e=UP;return hP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=WW(t);return $r(xn(r,KW,e)*i,e)},adjustScalarBytes:GW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),YW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var XW=vS(QW),IS=_S(XW,vm);var eG=vS(YW),MP=_S(eG,jP);function HP(e,t,r){if(bn(e),r===void 0)r=new Uint8Array(e.outputLen);return gc(e,r,t)}var AS=Uint8Array.of(0),ZP=Uint8Array.of();function JP(e,t,r,i=32){bn(e),Vt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=ZP;else ze(r,void 0,"info");let s=new Uint8Array(o*n),a=gc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)AS[0]=u+1,c.update(u===0?ZP:l).update(r).update(AS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Fr(l,AS),s.slice(0,i)}var tG=BigInt(0),Wu=BigInt(1),rG=BigInt(2),nG=BigInt(7),iG=BigInt(256),oG=BigInt(113),WP=[],GP=[],QP=[];for(let e=0,t=Wu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],WP.push(2*(5*i+r)),GP.push((e+1)*(e+2)/2%64);let n=tG;for(let o=0;o<7;o++)if(t=(t<<Wu^(t>>nG)*oG)%iG,t&rG)n^=Wu<<(Wu<<BigInt(o))-Wu;QP.push(n)}var YP=wm(QP,!0),sG=YP[0],aG=YP[1],KP=(e,t,r)=>r>32?IP(e,t,r):kP(e,t,r),VP=(e,t,r)=>r>32?AP(e,t,r):EP(e,t,r);function cG(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],d=KP(l,u,1)^r[a],p=VP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=d,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=GP[s],c=KP(n,o,a),l=VP(n,o,a),u=WP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=sG[i],e[1]^=aG[i]}Fr(r)}class _m{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Vt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=dm(this.state)}clone(){return this._cloneInto()}keccak(){sS(this.state32),cG(this.state32,this.rounds),sS(this.state32),this.posOut=0,this.pos=0}update(e){Ri(this),ze(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ri(this,!1),ze(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Vt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(um(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Fr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new _m(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var XP=(e,t,r,i={})=>fc(()=>new _m(t,e,r),i);var Bs=XP(6,136,32,So(8));var e2=XP(6,72,64,So(10));var t2=(e,t,r,i={})=>fc((n={})=>new _m(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),r2=t2(31,168,16,So(11)),ni=t2(31,136,32,So(12));function $S(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function i2(e){return $S(e),(e&e-1)===0&&e!==0}function CS(e,t){$S(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function o2(e){return $S(e),31-Math.clz32(e)}function n2(e){let t=e.length;if(t<2||!i2(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=o2(t);for(let i=0;i<t;i++){let n=CS(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var TS=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=o2(r);if(!i2(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)n2(u);for(let d=0,p=1;d<c-s;d++){let m=n?d+1+s:c-d,y=1<<m,g=y>>1,b=r>>m;for(let v=0;v<r;v+=y)for(let A=0,C=p++;A<g;A++){let z=o?n?r-C:C:A*b,j=v+A,E=v+A+g,Z=i[z],D=u[E],H=u[j];if(l){let ee=e.mul(D,Z);u[j]=e.add(H,ee),u[E]=e.sub(H,ee)}else if(o)u[j]=e.add(D,H),u[E]=e.mul(e.sub(D,H),Z);else u[j]=e.add(H,D),u[E]=e.mul(e.sub(H,D),Z)}}if(!n&&a)n2(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ii=xo;function km(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function s2(e){return Uint8Array.from(e)}function js(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(ze(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{ze(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function Em(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{ze(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Mt(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function OS(e){return(1<<e)-1}var b1e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var a2=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let z=A%C|0;return(z>=0?z|0:C+z|0)|0},l=(A,C=i)=>{let z=c(A,C)|0;return(z>C>>1?z-C|0:z)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let z=CS(C,s),j=BigInt(o)**BigInt(z)%BigInt(i);A[C]=Number(j)|0}return A}let d=u(),p={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=TS(p,{dit:!1,...m}),g=TS(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(A)=>y(A),decode:(A)=>{g(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let z=OS(A),j=A*(r/8);return{bytesLen:j,encode:(E)=>{let Z=new Uint8Array(j);for(let D=0,H=0,ee=0,F=0;D<E.length;D++){H|=(C.encode(E[D])&z)<<ee,ee+=A;for(;ee>=8;ee-=8,H>>=8)Z[F++]=H&OS(ee)}return Z},decode:(E)=>{let Z=t(r);for(let D=0,H=0,ee=0,F=0;D<E.length;D++){H|=E[D]<<ee,ee+=8;for(;ee>=A;ee-=A,H>>=A)Z[F++]=C.decode(H&z)}return Z}}}}},lG=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Mt(o,i)}}},c2=lG(r2);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var br=256,Ni=3329,uG=3303,dG=17,{mod:Yu,nttZetas:fG,NTT:qs,bitsCoder:pG}=a2({N:br,Q:Ni,F:uG,ROOT_OF_UNITY:dG,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),RS={512:{N:br,Q:Ni,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:br,Q:Ni,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:br,Q:Ni,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},mG=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ni/2)/Ni,decode:(r)=>r*Ni+t>>>e}},Gu=(e)=>pG(e,mG(e));function Us(e,t){for(let r=0;r<br;r++)e[r]=Yu(e[r]+t[r])}function hG(e,t){for(let r=0;r<br;r++)e[r]=Yu(e[r]-t[r])}function gG(e,t,r,i,n){let o=Yu(t*i*n+e*r),s=Yu(e*i+t*r);return{c0:o,c1:s}}function Im(e,t){for(let r=0;r<br/2;r++){let i=fG[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=gG(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function l2(e){let t=new Uint16Array(br);for(let r=0;r<br;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<br&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ni)t[r++]=o;if(r<br&&s<Ni)t[r++]=s}}return t}function Qu(e,t,r,i){let n=e(i*br/4,t,r),o=new Uint16Array(br),s=dm(n),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Yu(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var yG=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Gu(1),u=Gu(c),d=Gu(a),p=js("publicKey",Em(Gu(12),t),32),m=Em(Gu(12),t),y=js("ciphertext",Em(d,t),u),g=js("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{ze(b,32,"seed");let v=new Uint8Array(33);v.set(b),v[32]=t;let A=n(v),[C,z]=g.decode(A),j=[],E=[];for(let H=0;H<t;H++)j.push(qs.encode(Qu(r,z,H,o)));let Z=i(C);for(let H=0;H<t;H++){let ee=qs.encode(Qu(r,z,t+H,o));for(let F=0;F<t;F++){let P=l2(Z.get(F,H));Us(ee,Im(P,j[F]))}E.push(ee)}Z.clean();let D={publicKey:p.encode([E,C]),secretKey:m.encode(j)};return Mt(C,z,j,E,v,A),D},encrypt:(b,v,A)=>{let[C,z]=p.decode(b),j=[];for(let F=0;F<t;F++)j.push(qs.encode(Qu(r,A,F,o)));let E=i(z),Z=new Uint16Array(br),D=[];for(let F=0;F<t;F++){let P=Qu(r,A,t+F,s),N=new Uint16Array(br);for(let I=0;I<t;I++){let R=l2(E.get(F,I));Us(N,Im(R,j[I]))}Us(P,qs.decode(N)),D.push(P),Us(Z,Im(C[F],j[F])),Mt(N)}E.clean();let H=Qu(r,A,2*t,s);Us(H,qs.decode(Z));let ee=l.decode(v);return Us(ee,H),Mt(C,j,Z,H),y.encode([D,ee])},decrypt:(b,v)=>{let[A,C]=y.decode(b),z=m.decode(v),j=new Uint16Array(br);for(let E=0;E<t;E++)Us(j,Im(z[E],qs.encode(A[E])));return hG(C,qs.decode(j)),Mt(j,z,A),l.encode(C)}}};function PS(e){let t=yG(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=js("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ii(64))=>{ze(u,64,"seed");let{publicKey:d,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(d),y=a.encode([p,d,m,u.subarray(32)]);return Mt(p,m),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,d=ii(32))=>{ze(u,s.publicKey,"publicKey"),ze(d,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(s2(p)));if(!km(m,p))throw Mt(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Mt(m);let y=i.create().update(d).update(r(u)).digest(),g=t.encrypt(u,d,y.subarray(32,64));return Mt(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{ze(d,a.bytesLen,"secretKey"),ze(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=r(d.subarray(p/2,m));if(!km(y,d.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,b,v,A]=a.decode(d),C=t.decrypt(u,g),z=i.create().update(C).update(v).digest(),j=z.subarray(0,32),E=t.encrypt(b,C,z.subarray(32,64)),Z=km(u,E),D=n.create({dkLen:32}).update(A).update(u).digest();return Mt(C,E,!Z?j:D),Z?j:D}}}function bG(e,t,r){return ni.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var zS={HASH256:Bs,HASH512:e2,KDF:ni,XOF:c2,PRF:bG},C1e=PS({...zS,...RS[512]}),Xu=PS({...zS,...RS[768]}),u2=PS({...zS,...RS[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function xG(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ii(r.seed))=>{ze(s,r.seed,"seed");let a=o.isLE?vo(s):wo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function NS(e,t=!1){let r=xG(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ii(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Mt(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function ed(e,t){return js(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function DS(e){return(t,r)=>e(t,{dkLen:r})}function SG(e,t,...r){let i=ed(r,"seed"),n=ed(r,"publicKey");if(e===void 0)e=i.bytesLen;Vt(e);function o(s){ze(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((d,p)=>d.keygen(a[p])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ii(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Mt(a),Mt(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function Am(e,t,r,i,...n){let o=SG(e,r,...n),s=ed(n,"cipherText"),a=ed(n,"publicKey"),c=ed(n,"msg");if(t===void 0)t=c.bytesLen;return Vt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ii(c.bytesLen)){let d=a.decode(l),p=c.decode(u),m=n.map((v,A)=>v.encapsulate(d[A],p[A])),y=m.map((v)=>v.sharedSecret),g=m.map((v)=>v.cipherText),b={sharedSecret:i(d,g,y),cipherText:s.encode(g)};return Mt(y,g),b},decapsulate(l,u){let d=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(d[b],m[b]));return i(p,d,y)}}}function d2(e,t,r,i,n){return bn(i),bn(n),Am(32,32,DS(i),(o,s,a)=>n(Lt(a[0],a[1],s[1],o[1],_o(e))),t,r)}var q1e=d2("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Xu,NS(IS,!0),ni,Bs),U1e=d2("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",u2,NS(MP,!0),ni,Bs);function wG(e,t,r,i,n){return bn(i),bn(n),Am(32,32,DS(i),(o,s,a)=>{let c=Lt(a[0],a[1],s[0],o[0],s[1],o[1],_o(e)),l=32,u=Lt(_o("hybrid_prk"),c),d=HP(n,u),p=Lt(pc(32,2),_o("shared_secret"),_o("")),m=JP(n,d,p,32);return Mt(d,p,u,c),m},t,r)}var f2=NS(FP),F1e=wG("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Xu,f2,ni,vm),vG=(()=>Am(32,32,DS(ni),(e,t,r)=>Bs(Lt(r[0],r[1],t[1],e[1],_o("\\.//^\\"))),Xu,f2))();function _G(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,d),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ii(i)){return ze(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ii(i)){ze(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Mt(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function kG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=_G(r,n,o,i),a=64,c=a+i;return Am(32,32,(l)=>{ze(l,32);let u=ni(l,{dkLen:c}),d=u.subarray(0,a),p=u.subarray(a,c);return Lt(d,p)},(l,u,d)=>Bs(Lt(d[0],d[1],u[1],l[1],_o(e))),t,s)}var EG=(()=>kG("MLKEM768-P256",Xu,IS,128))();var $m=vG,p2=EG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lt=(e,t,r)=>rr(e,t,r),BS=Tt,bc=Yp,sr=(...e)=>Ux(...e),xc=(e)=>Ou(e),Sc=Bx,wc=(e)=>$i(e),Tm=BigInt(0),LS=BigInt(1);function Di(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Om(e){if(typeof e==="bigint"){if(!Cm(e))throw RangeError("positive bigint expected, got "+e)}else BS(e);return e}function oi(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function td(e){let t=Om(e).toString(16);return t.length&1?"0"+t:t}function m2(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?Tm:BigInt("0x"+e)}function Fs(e){return m2(Yp(e))}function Dn(e){return m2(Yp($o(rr(e)).reverse()))}function Rm(e,t){if(Tt(t),t===0)throw RangeError("zero length");e=Om(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return Ou(r.padStart(t*2,"0"))}function rd(e,t){return Rm(e,t).reverse()}function h2(e,t){if(e=lt(e),t=lt(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(lt(e))}function Pm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Cm=(e)=>typeof e==="bigint"&&Tm<=e;function IG(e,t,r){return Cm(e)&&Cm(t)&&Cm(r)&&t<=e&&e<r}function Li(e,t,r,i){if(!IG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function vc(e){if(e<Tm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>Tm;e>>=LS,t+=1);return t}var nd=(e)=>(LS<<BigInt(e))-LS;function g2(e,t,r){if(Tt(e,"hashLen"),Tt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,sr(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,v=[];while(b<t){c=p();let A=c.slice();v.push(A),b+=c.length}return sr(...v)};return(b,v)=>{d(),m(b);let A=void 0;while((A=v(y()))===void 0)m();return d(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var jS=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ar=BigInt(0),Et=BigInt(1),Ms=BigInt(2),S2=BigInt(3),w2=BigInt(4),v2=BigInt(5),AG=BigInt(7),_2=BigInt(8),$G=BigInt(9),k2=BigInt(16);function gt(e,t){if(t<=ar)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=ar?r:t+r}function wn(e,t,r){if(t<ar)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >ar)i*=i,i%=r;return i}function y2(e,t){if(e===ar)throw Error("invert: expected non-zero number");if(t<=ar)throw Error("invert: expected positive modulus, got "+t);let r=gt(e,t),i=t,n=ar,o=Et,s=Et,a=ar;while(r!==ar){let l=i/r,u=i-r*l,d=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=d,a=p}if(i!==Et)throw Error("invert: does not exist");return gt(n,t)}function qS(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function E2(e,t){let r=e,i=(r.ORDER+Et)/w2,n=r.pow(t,i);return qS(r,n,t),n}function CG(e,t){let r=e,i=(r.ORDER-v2)/_2,n=r.mul(t,Ms),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Ms),o),c=r.mul(s,r.sub(a,r.ONE));return qS(r,c,t),c}function TG(e){let t=zm(e),r=I2(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+AG)/k2;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),y=l.eql(l.sqr(d),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,d,y),d=l.cmov(m,p,g);let b=l.eql(l.sqr(d),c),v=l.cmov(u,d,b);return qS(l,v,c),v}}function I2(e){if(e<S2)throw Error("sqrt is not defined for small field");let t=e-Et,r=0;while(t%Ms===ar)t/=Ms,r++;let i=Ms,n=zm(e);while(b2(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return E2;let o=n.pow(i,t),s=(t+Et)/Ms;return function(c,l){let u=c;if(u.is0(l))return l;if(b2(u,l)!==1)throw Error("Cannot find square root");let d=r,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,b=u.sqr(m);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===d)throw Error("Cannot find square root");let v=Et<<BigInt(d-g-1),A=u.pow(p,v);d=g,p=u.sqr(A),m=u.mul(m,p),y=u.mul(y,A)}return y}}function OG(e){if(e%w2===S2)return E2;if(e%_2===v2)return CG;if(e%k2===$G)return TG(e);return I2(e)}var Bi=(e,t)=>(gt(e,t)&Et)===Et,RG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function US(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=RG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),oi(e.BYTES,"BYTES"),oi(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Et)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function PG(e,t,r){let i=e;if(r<ar)throw Error("invalid exponent, negatives unsupported");if(r===ar)return i.ONE;if(r===Et)return t;let n=i.ONE,o=t;while(r>ar){if(r&Et)n=i.mul(n,o);o=i.sqr(o),r>>=Et}return n}function id(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function b2(e,t){let r=e,i=(r.ORDER-Et)/Ms,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function zG(e,t){if(t!==void 0)BS(t);if(e<=ar)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=vc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var x2=new WeakMap;class FS{ORDER;BITS;BYTES;isLE;ZERO=ar;ONE=Et;_lengths;_mod;constructor(e,t={}){if(e<=Et)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=zG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return gt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return ar<=e&&e<this.ORDER}is0(e){return e===ar}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Et)===Et}neg(e){return gt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return gt(e*e,this.ORDER)}add(e,t){return gt(e+t,this.ORDER)}sub(e,t){return gt(e-t,this.ORDER)}mul(e,t){return gt(e*t,this.ORDER)}pow(e,t){return PG(this,e,t)}div(e,t){return gt(e*y2(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return y2(e,this.ORDER)}sqrt(e){let t=x2.get(this);if(!t)x2.set(this,t=OG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?rd(e,this.BYTES):Rm(e,this.BYTES)}fromBytes(e,t=!1){lt(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Dn(e):Fs(e);if(s)a=gt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return id(this,e)}cmov(e,t,r){return Di(r,"condition"),r?t:e}}Object.freeze(FS.prototype);function zm(e,t={}){return new FS(e,t)}function A2(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Et)throw Error("field order must be greater than 1");let t=vc(e-Et);return Math.ceil(t/8)}function MS(e){let t=A2(e);return t+Math.ceil(t/2)}function $2(e,t,r=!1){lt(e);let i=e.length,n=A2(t),o=Math.max(MS(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Dn(e):Fs(e),a=gt(s,t-Et)+Et;return r?rd(a,n):Rm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _c=BigInt(0),Zs=BigInt(1);function od(e,t){let r=t.negate();return e?r:t}function Hs(e,t){let r=id(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function R2(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function ZS(e,t){R2(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=nd(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function C2(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Zs;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var HS=new WeakMap,P2=new WeakMap;function JS(e){return P2.get(e)||1}function T2(e){if(e!==_c)throw Error("invalid wNAF")}class sd{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>_c){if(t&Zs)r=r.add(i);i=i.double(),t>>=Zs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=ZS(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=ZS(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=C2(r,s,o);if(r=a,l)n=n.add(od(d,t[p]));else i=i.add(od(u,t[c]))}return T2(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=ZS(e,this.bits);for(let o=0;o<n.windows;o++){if(r===_c)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=C2(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return T2(r),i}getPrecomputes(e,t,r){let i=HS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);HS.set(t,i)}}return i}cached(e,t,r){let i=JS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=JS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){R2(t,this.bits),P2.set(e,t),HS.delete(e)}hasCache(e){return JS(e)!==1}}function z2(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>_c||i>_c){if(r&Zs)o=o.add(n);if(i&Zs)s=s.add(n);n=n.double(),r>>=Zs,i>>=Zs}return{p1:o,p2:s}}function O2(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return US(t),t}else return zm(e,{isLE:r})}function Nm(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>_c))throw Error(`CURVE.${c} must be positive bigint`)}let n=O2(t.p,r.Fp,i),o=O2(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function ad(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function cd(e,t){if(oi(e),oi(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function NG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function DG(e){if(!Sc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?Pm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function KS(e,t,r,i){if(lt(e),oi(r),t=DG(t),t.length>255)t=i(sr(Pm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=sr(t,cd(t.length,1)),c=new Uint8Array(o),l=cd(r,2),u=Array(s),d=i(sr(c,e,l,cd(0,1),a));u[0]=i(sr(d,cd(1,1),a));for(let m=1;m<s;m++){let y=[NG(d,u[m-1]),cd(m+1,1),a];u[m]=i(sr(...y))}return sr(...u).slice(0,r)}var N2="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D2=(e,t)=>(e+(e>=0?t:-t)/B2)/t;function LG(e,t,r){Li("scalar",e,si,r);let[[i,n],[o,s]]=t,a=D2(s*e,r),c=D2(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<si,p=u<si;if(d)l=-l;if(p)u=-u;let m=nd(Math.ceil(vc(r)/2))+Co;if(l<si||l>=m||u<si||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:p,k2:u}}function WS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function VS(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Di(r.lowS,"lowS"),Di(r.prehash,"prehash"),r.format!==void 0)WS(r.format);return r}class L2 extends Error{constructor(e=""){super(e)}}var Ln={Err:L2,_tlv:{encode:(e,t)=>{let{Err:r}=Ln;if(oi(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=td(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?td(n.length/2|128):"";return td(e)+o+n+t},decode(e,t){let{Err:r}=Ln;t=lt(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Ln;if(Om(e),e<si)throw new t("integer: negative integers are not allowed");let r=td(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Ln;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Fs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Ln,n=lt(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Ln,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Ln._tlv);Object.freeze(Ln._int);Object.freeze(Ln);var si=BigInt(0),Co=BigInt(1),B2=BigInt(2),Dm=BigInt(3),BG=BigInt(4);function j2(e,t={}){let r=Nm("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=U2(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(F,P,N){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:R}=P.toAffine(),O=i.toBytes(I);if(Di(N,"isCompressed"),N){d();let M=!i.isOdd(R);return sr(q2(M),O)}else return sr(Uint8Array.of(4),O,i.toBytes(R))}function m(F){lt(F,void 0,"Point");let{publicKey:P,publicKeyUncompressed:N}=u,I=F.length,R=F[0],O=F.subarray(1);if(l&&I===1&&R===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(R===2||R===3)){let M=i.fromBytes(O);if(!i.isValid(M))throw Error("bad point: is not on curve, wrong x");let L=b(M),V;try{V=i.sqrt(L)}catch(ue){let T=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+T)}d();let _=i.isOdd(V);if((R&1)===1!==_)V=i.neg(V);return{x:M,y:V}}else if(I===N&&R===4){let M=i.BYTES,L=i.fromBytes(O.subarray(0,M)),V=i.fromBytes(O.subarray(M,M*2));if(!v(L,V))throw Error("bad point: is not on curve");return{x:L,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function b(F){let P=i.sqr(F),N=i.mul(P,F);return i.add(i.add(N,i.mul(F,o.a)),o.b)}function v(F,P){let N=i.sqr(P),I=b(F);return i.eql(N,I)}if(!v(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Dm),BG),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function z(F,P,N=!1){if(!i.isValid(P)||N&&i.is0(P))throw Error(`bad point coordinate ${F}`);return P}function j(F){if(!(F instanceof D))throw Error("Weierstrass Point expected")}function E(F){if(!c||!c.basises)throw Error("no endo");return LG(F,c.basises,n.ORDER)}function Z(F,P,N,I,R){return N=new D(i.mul(N.X,F),N.Y,N.Z),P=od(I,P),N=od(R,N),P.add(N)}class D{static BASE=new D(o.Gx,o.Gy,i.ONE);static ZERO=new D(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(F,P,N){this.X=z("x",F),this.Y=z("y",P,!0),this.Z=z("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(F){let{x:P,y:N}=F||{};if(!F||!i.isValid(P)||!i.isValid(N))throw Error("invalid affine point");if(F instanceof D)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(N))return D.ZERO;return new D(P,N,i.ONE)}static fromBytes(F){let P=D.fromAffine(g(lt(F,void 0,"point")));return P.assertValidity(),P}static fromHex(F){return D.fromBytes(xc(F))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(F=8,P=!0){if(ee.createCache(this,F),!P)this.multiply(Dm);return this}assertValidity(){let F=this;if(F.is0()){if(t.allowInfinityPoint&&i.is0(F.X)&&i.eql(F.Y,i.ONE)&&i.is0(F.Z))return;throw Error("bad point: ZERO")}let{x:P,y:N}=F.toAffine();if(!i.isValid(P)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!v(P,N))throw Error("bad point: equation left != right");if(!F.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:F}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(F)}equals(F){j(F);let{X:P,Y:N,Z:I}=this,{X:R,Y:O,Z:M}=F,L=i.eql(i.mul(P,M),i.mul(R,I)),V=i.eql(i.mul(N,M),i.mul(O,I));return L&&V}negate(){return new D(this.X,i.neg(this.Y),this.Z)}double(){let{a:F,b:P}=o,N=i.mul(P,Dm),{X:I,Y:R,Z:O}=this,M=i.ZERO,L=i.ZERO,V=i.ZERO,_=i.mul(I,I),re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(I,R);return T=i.add(T,T),V=i.mul(I,O),V=i.add(V,V),M=i.mul(F,V),L=i.mul(N,ue),L=i.add(M,L),M=i.sub(re,L),L=i.add(re,L),L=i.mul(M,L),M=i.mul(T,M),V=i.mul(N,V),ue=i.mul(F,ue),T=i.sub(_,ue),T=i.mul(F,T),T=i.add(T,V),V=i.add(_,_),_=i.add(V,_),_=i.add(_,ue),_=i.mul(_,T),L=i.add(L,_),ue=i.mul(R,O),ue=i.add(ue,ue),_=i.mul(ue,T),M=i.sub(M,_),V=i.mul(ue,re),V=i.add(V,V),V=i.add(V,V),new D(M,L,V)}add(F){j(F);let{X:P,Y:N,Z:I}=this,{X:R,Y:O,Z:M}=F,L=i.ZERO,V=i.ZERO,_=i.ZERO,re=o.a,ue=i.mul(o.b,Dm),T=i.mul(P,R),Se=i.mul(N,O),Ee=i.mul(I,M),Te=i.add(P,N),Ce=i.add(R,O);Te=i.mul(Te,Ce),Ce=i.add(T,Se),Te=i.sub(Te,Ce),Ce=i.add(P,I);let _e=i.add(R,M);return Ce=i.mul(Ce,_e),_e=i.add(T,Ee),Ce=i.sub(Ce,_e),_e=i.add(N,I),L=i.add(O,M),_e=i.mul(_e,L),L=i.add(Se,Ee),_e=i.sub(_e,L),_=i.mul(re,Ce),L=i.mul(ue,Ee),_=i.add(L,_),L=i.sub(Se,_),_=i.add(Se,_),V=i.mul(L,_),Se=i.add(T,T),Se=i.add(Se,T),Ee=i.mul(re,Ee),Ce=i.mul(ue,Ce),Se=i.add(Se,Ee),Ee=i.sub(T,Ee),Ee=i.mul(re,Ee),Ce=i.add(Ce,Ee),T=i.mul(Se,Ce),V=i.add(V,T),T=i.mul(_e,Ce),L=i.mul(Te,L),L=i.sub(L,T),T=i.mul(Te,Se),_=i.mul(_e,_),_=i.add(_,T),new D(L,V,_)}subtract(F){return j(F),this.add(F.negate())}is0(){return this.equals(D.ZERO)}multiply(F){let{endo:P}=t;if(!n.isValidNot0(F))throw RangeError("invalid scalar: out of range");let N,I,R=(O)=>ee.cached(this,O,(M)=>Hs(D,M));if(P){let{k1neg:O,k1:M,k2neg:L,k2:V}=E(F),{p:_,f:re}=R(M),{p:ue,f:T}=R(V);I=re.add(T),N=Z(P.beta,_,ue,O,L)}else{let{p:O,f:M}=R(F);N=O,I=M}return Hs(D,[N,I])[0]}multiplyUnsafe(F){let{endo:P}=t,N=this,I=F;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===si||N.is0())return D.ZERO;if(I===Co)return N;if(ee.hasCache(this))return this.multiply(I);if(P){let{k1neg:R,k1:O,k2neg:M,k2:L}=E(I),{p1:V,p2:_}=z2(D,N,O,L);return Z(P.beta,V,_,R,M)}else return ee.unsafe(N,I)}toAffine(F){let P=this,N=F,{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(O);let L=i.mul(I,N),V=i.mul(R,N),_=i.mul(O,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}isTorsionFree(){let{isTorsionFree:F}=t;if(s===Co)return!0;if(F)return F(D,this);return ee.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:F}=t;if(s===Co)return this;if(F)return F(D,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Co)return this.is0();return this.clearCofactor().is0()}toBytes(F=!0){return Di(F,"isCompressed"),this.assertValidity(),y(D,this,F)}toHex(F=!0){return bc(this.toBytes(F))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,ee=new sd(D,t.endo?Math.ceil(H/2):H);if(H>=8)D.BASE.precompute(8);return Object.freeze(D.prototype),Object.freeze(D),D}function q2(e){return Uint8Array.of(e?2:3)}function U2(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function jG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?wc:t.randomBytes,n=Object.assign(U2(e.Fp,r),{seed:Math.max(MS(r.ORDER),16)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let v=m.length;if(y===!0&&v!==g)return!1;if(y===!1&&v!==b)return!1;return!!e.fromBytes(m)}catch(v){return!1}}function a(m){return m=m===void 0?i(n.seed):m,$2(lt(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,v=r._lengths;if(!Sc(m))return;let A=lt(m,void 0,"key").length,C=A===g||A===b,z=A===y||!!v?.includes(A);if(C&&z)return;return C}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=ad(a,c);return Object.freeze(d),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:n})}function F2(e,t,r={}){let i=t;Ai(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?wc:r.randomBytes,o=r.hmac===void 0?(R,O)=>Xn(i,R,O):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y}=jG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*B2+Co<s.ORDER;function v(R){let O=c>>Co;return R>O}function A(R,O){if(!a.isValidNot0(O))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return O}function C(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function z(R,O){WS(O);let M=y.signature,L=O==="compact"?M:O==="recovered"?M+1:void 0;return lt(R,L)}class j{r;s;recovery;constructor(R,O,M){if(this.r=A("r",R),this.s=A("s",O),M!=null){if(C(),![0,1,2,3].includes(M))throw Error("invalid recovery id");this.recovery=M}Object.freeze(this)}static fromBytes(R,O=g.format){z(R,O);let M;if(O==="der"){let{r:re,s:ue}=Ln.toSig(lt(R));return new j(re,ue)}if(O==="recovered")M=R[0],O="compact",R=R.subarray(1);let L=y.signature/2,V=R.subarray(0,L),_=R.subarray(L,L*2);return new j(a.fromBytes(V),a.fromBytes(_),M)}static fromHex(R,O){return this.fromBytes(xc(R),O)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new j(this.r,this.s,R)}recoverPublicKey(R){let{r:O,s:M}=this,L=this.assertRecovery(),V=L===2||L===3?O+c:O;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let _=s.toBytes(V),re=e.fromBytes(sr(q2((L&1)===0),_)),ue=a.inv(V),T=Z(lt(R,void 0,"msgHash")),Se=a.create(-T*ue),Ee=a.create(M*ue),Te=e.BASE.multiplyUnsafe(Se).add(re.multiplyUnsafe(Ee));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return v(this.s)}toBytes(R=g.format){if(WS(R),R==="der")return xc(Ln.hexFromSig(this));let{r:O,s:M}=this,L=a.toBytes(O),V=a.toBytes(M);if(R==="recovered")return C(),sr(Uint8Array.of(this.assertRecovery()),L,V);return sr(L,V)}toHex(R){return bc(this.toBytes(R))}}Object.freeze(j.prototype),Object.freeze(j);let E=r.bits2int===void 0?function(O){if(O.length>8192)throw Error("input is too large");let M=Fs(O),L=O.length*8-l;return L>0?M>>BigInt(L):M}:r.bits2int,Z=r.bits2int_modN===void 0?function(O){return a.create(E(O))}:r.bits2int_modN,D=nd(l);function H(R){return Li("num < 2^"+l,R,si,D),a.toBytes(R)}function ee(R,O){return lt(R,void 0,"message"),O?lt(i(R),void 0,"prehashed message"):R}function F(R,O,M){let{lowS:L,prehash:V,extraEntropy:_}=VS(M,g);R=ee(R,V);let re=Z(R),ue=a.fromBytes(O);if(!a.isValidNot0(ue))throw Error("invalid private key");let T=[H(ue),H(re)];if(_!=null&&_!==!1){let Ce=_===!0?n(y.secretKey):_;T.push(lt(Ce,void 0,"extraEntropy"))}let Se=sr(...T),Ee=re;function Te(Ce){let _e=E(Ce);if(!a.isValidNot0(_e))return;let Pe=a.inv(_e),Ve=e.BASE.multiply(_e).toAffine(),tt=a.create(Ve.x);if(tt===si)return;let St=a.create(Pe*a.create(Ee+tt*ue));if(St===si)return;let Dt=(Ve.x===tt?0:2)|Number(Ve.y&Co),hr=St;if(L&&v(St))hr=a.neg(St),Dt^=1;return new j(tt,hr,b?void 0:Dt)}return{seed:Se,k2sig:Te}}function P(R,O,M={}){let{seed:L,k2sig:V}=F(R,O,M);return g2(i.outputLen,a.BYTES,o)(L,V).toBytes(M.format)}function N(R,O,M,L={}){let{lowS:V,prehash:_,format:re}=VS(L,g);if(M=lt(M,void 0,"publicKey"),O=ee(O,_),!Sc(R)){let ue=R instanceof j?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}z(R,re);try{let ue=j.fromBytes(R,re),T=e.fromBytes(M);if(V&&ue.hasHighS())return!1;let{r:Se,s:Ee}=ue,Te=Z(O),Ce=a.inv(Ee),_e=a.create(Te*Ce),Pe=a.create(Se*Ce),Ve=e.BASE.multiplyUnsafe(_e).add(T.multiplyUnsafe(Pe));if(Ve.is0())return!1;return a.create(Ve.x)===Se}catch(ue){return!1}}function I(R,O,M={}){let{prehash:L}=VS(M,g);return O=ee(O,L),j.fromBytes(R,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:P,verify:N,recoverPublicKey:I,Signature:j,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var UG=j2(qG),kc=F2(UG,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var To=BigInt(0),Mr=BigInt(1),GS=BigInt(2),FG=BigInt(8);function MG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function M2(e,t={}){let r=t,i=Nm("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=GS<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(v){return{isValid:!1,value:To}}}:r.uvRatio;if(!MG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(g,b,v=!1){let A=v?Mr:To;return Li("coordinate "+g,b,A,c),b}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new m(To,Mr,Mr,To);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,v,A){this.X=d("x",g),this.Y=d("y",b),this.Z=d("z",v,!0),this.T=d("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:b,y:v}=g||{};return d("x",b),d("y",v),new m(b,v,Mr,l(b*v))}static fromBytes(g,b=!1){let v=n.BYTES,{a:A,d:C}=s;g=$o(lt(g,v,"point")),Di(b,"zip215");let z=$o(g),j=g[v-1];z[v-1]=j&-129;let E=Dn(z),Z=b?c:n.ORDER;Li("point.y",E,To,Z);let D=l(E*E),H=l(D-Mr),ee=l(C*D-A),{isValid:F,value:P}=u(H,ee);if(!F)throw Error("bad point: invalid y coordinate");let N=(P&Mr)===Mr,I=(j&128)!==0;if(!b&&P===To&&I)throw Error("bad point: x=0 and x_0=1");if(I!==N)P=l(-P);return m.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return m.fromBytes(xc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(GS);return this}assertValidity(){let g=this,{a:b,d:v}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:z,T:j}=g,E=l(A*A),Z=l(C*C),D=l(z*z),H=l(D*D),ee=l(E*b),F=l(D*l(ee+Z)),P=l(H+l(v*l(E*Z)));if(F!==P)throw Error("bad point: equation left != right (1)");let N=l(A*C),I=l(z*j);if(N!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:b,Y:v,Z:A}=this,{X:C,Y:z,Z:j}=g,E=l(b*j),Z=l(C*A),D=l(v*j),H=l(z*A);return E===Z&&D===H}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:v,Z:A}=this,C=l(b*b),z=l(v*v),j=l(GS*l(A*A)),E=l(g*C),Z=b+v,D=l(l(Z*Z)-C-z),H=E+z,ee=H-j,F=E-z,P=l(D*ee),N=l(H*F),I=l(D*F),R=l(ee*H);return new m(P,N,R,I)}add(g){p(g);let{a:b,d:v}=s,{X:A,Y:C,Z:z,T:j}=this,{X:E,Y:Z,Z:D,T:H}=g,ee=l(A*E),F=l(C*Z),P=l(j*v*H),N=l(z*D),I=l((A+C)*(E+Z)-ee-F),R=N-P,O=N+P,M=l(F-b*ee),L=l(I*R),V=l(O*M),_=l(I*M),re=l(R*O);return new m(L,V,re,_)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:v}=y.cached(this,g,(A)=>Hs(m,A));return Hs(m,[b,v])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===To)return m.ZERO;if(this.is0()||g===Mr)return this;return y.unsafe(this,g,(b)=>Hs(m,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,v=g,{X:A,Y:C,Z:z}=b,j=b.is0();if(v==null)v=j?FG:n.inv(z);let E=l(A*v),Z=l(C*v),D=n.mul(z,v);if(j)return{x:To,y:Mr};if(D!==Mr)throw Error("invZ was invalid");return{x:E,y:Z}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),v=n.toBytes(b);return v[v.length-1]|=g&Mr?128:0,v}toHex(){return bc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new sd(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class QS{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){jS()}static fromHex(e){jS()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return bc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ld=BigInt(0),Ec=BigInt(1),Lm=BigInt(2);function ZG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function Z2(e){let t=ZG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?wc:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Lm**BigInt(254):Lm**BigInt(447),y=a?BigInt(8)*Lm**BigInt(251)-Ec:BigInt(4)*Lm**BigInt(445)-Ec,g=m+y+Ec,b=(I)=>gt(I,r),v=A(d);function A(I){return rd(b(I),u)}function C(I){let R=$o(lt(I,u,"uCoordinate"));if(a)R[31]&=127;return b(Dn(R))}function z(I){return Dn(n($o(lt(I,u,"scalar"))))}function j(I,R){let O=ee(C(R),z(I));if(O===ld)throw Error("invalid private or public key received");return A(O)}function E(I){return j(I,v)}let Z=E,D=j;function H(I,R,O){let M=b(I*(R-O));return R=b(R-M),O=b(O+M),{x_2:R,x_3:O}}function ee(I,R){Li("u",I,ld,r),Li("scalar",R,m,g);let O=R,M=I,L=Ec,V=ld,_=I,re=Ec,ue=ld;for(let Se=BigInt(l-1);Se>=ld;Se--){let Ee=O>>Se&Ec;ue^=Ee,{x_2:L,x_3:_}=H(ue,L,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=L+V,Ce=b(Te*Te),_e=L-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,St=_-re,Dt=b(St*Te),hr=b(tt*_e),Qr=Dt+hr,Yr=Dt-hr;_=b(Qr*Qr),re=b(M*b(Yr*Yr)),L=b(Ce*Pe),V=b(Ve*(Ce+b(p*Ve)))}({x_2:L,x_3:_}=H(ue,L,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(L*T)}let F={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,lt(I,F.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze(F),Object.freeze(N),Object.freeze({keygen:ad(P,Z),getSharedSecret:D,getPublicKey:Z,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:v.slice(),lengths:F})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HG=BigInt(0),ji=BigInt(1),H2=BigInt(2),JG=BigInt(3),KG=BigInt(5),VG=BigInt(8),Ks=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),tw=(()=>({p:Ks,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:VG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function V2(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Ks,a=e*e%o*e%o,c=wn(a,H2,o)*a%o,l=wn(c,ji,o)*e%o,u=wn(l,KG,o)*l%o,d=wn(u,t,o)*u%o,p=wn(d,r,o)*d%o,m=wn(p,i,o)*p%o,y=wn(m,n,o)*m%o,g=wn(y,n,o)*m%o,b=wn(g,t,o)*u%o;return{pow_p_5_8:wn(b,H2,o)*e%o,b2:a}}function WG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var YS=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function rw(e,t){let r=Ks,i=gt(t*t*t,r),n=gt(i*i*t,r),o=V2(e*n).pow_p_5_8,s=gt(e*i*o,r),a=gt(t*s*s,r),c=s,l=gt(s*YS,r),u=a===e,d=a===gt(-e,r),p=a===gt(-e*YS,r);if(u)s=c;if(d||p)s=l;if(Bi(s,r))s=gt(-s,r);return{isValid:u||d,value:s}}var Js=M2(tw,{uvRatio:rw}),Oo=(()=>Js.Fp)(),W2=(()=>Js.Fn)();var Bm=(()=>{let e=Ks;return Z2({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=V2(t);return gt(wn(r,JG,e)*i,e)},adjustScalarBytes:WG})})();var XS=YS,GG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),QG=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),YG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),XG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),J2=(e)=>rw(ji,e),eQ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),ew=(e)=>Oo.create(Dn(e)&eQ);function K2(e){let{d:t}=tw,r=Ks,i=(v)=>Oo.create(v),n=i(XS*e*e),o=i((n+ji)*YG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=rw(o,a),u=i(l*e);if(!Bi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let d=i(s*(n-ji)*XG-a),p=l*l,m=i((l+l)*a),y=i(d*GG),g=i(ji-p),b=i(ji+p);return new Js(i(m*b),i(g*y),i(y*b),i(m*g))}class Tr extends QS{static BASE=(()=>new Tr(Js.BASE))();static ZERO=(()=>new Tr(Js.ZERO))();static Fp=(()=>Oo)();static Fn=(()=>W2)();constructor(e){super(e)}static fromAffine(e){return new Tr(Js.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){rr(e,32);let{a:t,d:r}=tw,i=Ks,n=(C)=>Oo.create(C),o=ew(e);if(!h2(Oo.toBytes(o),e)||Bi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(ji+t*s),c=n(ji-t*s),l=n(a*a),u=n(c*c),d=n(t*r*l-u),{isValid:p,value:m}=J2(n(d*u)),y=n(m*c),g=n(m*y*d),b=n((o+o)*y);if(Bi(b,i))b=n(-b);let v=n(a*g),A=n(b*v);if(!p||Bi(A,i)||v===HG)throw Error("invalid ristretto255 encoding 2");return new Tr(new Js(b,v,ji,A))}static fromHex(e){return Tr.fromBytes(Ou(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Ks,o=(g)=>Oo.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=J2(o(s*c)),u=o(l*s),d=o(l*a),p=o(u*d*i),m;if(Bi(i*p,n)){let g=o(t*XS),b=o(e*XS);e=g,t=b,m=o(u*QG)}else m=d;if(Bi(e*p,n))t=o(-t);let y=o((r-t)*m);if(Bi(y,n))y=o(-y);return Oo.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Oo.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var tQ=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=KS(e,r,64,rm);return tQ.deriveToCurve(i)},hashToScalar(e,t={DST:N2}){let r=KS(e,t.DST,64,rm);return W2.create(Dn(r))},deriveToCurve(e){rr(e,64);let t=ew(e.subarray(0,32)),r=K2(t),i=ew(e.subarray(32,64)),n=K2(i);return new Tr(r.add(n))}});var G2=!1,rQ=!1;async function Q2(e,t){if(rQ)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function jm(e,t){return await Q2(async()=>{let r=nw(e)?e:await iQ(e),i=await crypto.subtle.importKey("raw",oQ(t),{name:"X25519"},G2,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(nw(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Bm.scalarMult(e,t)})}async function ud(e){return await Q2(async()=>jm(e,Bm.GuBytes),()=>{if(nw(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Bm.scalarMultBase(e)})}var nQ=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function iQ(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...nQ,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},G2,["deriveBits"])}function nw(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function oQ(e){return e}class iw{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),aQ(Vs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Vs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Vs(this.transcript)}}}function aQ(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Vs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Ic(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function qm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function ow(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Y2(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function X2(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Vs(i),s=o.subarray(0,t),a=Ic(e,o.subarray(t));return{data:s,rest:a}}class ai{args;body;constructor(e,t){this.args=e,this.body=t}}async function cQ(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=gr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Vs(i);return{s:new ai(r,n)}}async function ez(e){let t=new iw(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await cQ(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=gr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Ic(e,a)}}}function sw(e){let t=[];t.push(`age-encryption.org/v1
|
|
768
|
+
`)}function tR(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function ht(e,t){let r=e[t];return typeof r==="string"?r:void 0}function oc(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Wp={name:"@rizom/ops",version:"0.2.0-alpha.403",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as xQ,mkdirSync as SQ,readFileSync as kw,writeFileSync as Ew}from"fs";import{dirname as wQ,join as lz}from"path";function Bx(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Tt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function rr(e,t,r=""){let i=Bx(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Ai(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Tt(e.outputLen),Tt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function sc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Gp(e,t){rr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Qp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Ar(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ac(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var J7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function K7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function V7(e){for(let t=0;t<e.length;t++)e[t]=K7(e[t]);return e}var jx=J7?(e)=>e:V7,nR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),W7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Yp(e){if(rr(e),nR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=W7[e[r]];return t}var Ii={_0:48,_9:57,A:65,F:70,a:97,f:102};function rR(e){if(e>=Ii._0&&e<=Ii._9)return e-Ii._0;if(e>=Ii.A&&e<=Ii.F)return e-(Ii.A-10);if(e>=Ii.a&&e<=Ii.f)return e-(Ii.a-10);return}function Ou(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(nR)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=rR(e.charCodeAt(o)),a=rR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function G7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function qx(e,t=""){if(typeof e==="string")return G7(e);return rr(e,void 0,t)}function Ux(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];rr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Xp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function Fx(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function $i(e=32){Tt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var Mx=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class Zx{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Ai(e),rr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Ar(i)}update(e){return sc(this),this.iHash.update(e),this}digestInto(e){sc(this),Gp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Xn=(()=>{let e=(t,r,i)=>new Zx(t,r).update(i).digest();return e.create=(t,r)=>new Zx(t,r),e})();function Ru(e,t,r){if(Ai(e),r===void 0)r=new Uint8Array(e.outputLen);return Xn(e,r,t)}var Hx=Uint8Array.of(0),iR=Uint8Array.of();function Jx(e,t,r,i=32){Ai(e),Tt(i,"length"),rr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=iR;else rr(r,void 0,"info");let s=new Uint8Array(o*n),a=Xn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)Hx[0]=u+1,c.update(u===0?iR:l).update(r).update(Hx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Ar(l,Hx),s.slice(0,i)}var mo=(e,t,r,i,n)=>Jx(e,Ru(e,t,r),i,n);function oR(e,t,r){return e&t^~e&r}function sR(e,t,r){return e&t^e&r^t&r}class em{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ac(this.buffer)}update(e){sc(this),rr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ac(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){sc(this),Gp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Ar(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ac(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ci=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var nr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var tm=BigInt(4294967295),aR=BigInt(32);function Q7(e,t=!1){if(t)return{h:Number(e&tm),l:Number(e>>aR&tm)};return{h:Number(e>>aR&tm)|0,l:Number(e&tm)|0}}function cR(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=Q7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var Kx=(e,t,r)=>e>>>r,Vx=(e,t,r)=>e<<32-r|t>>>r,$s=(e,t,r)=>e>>>r|t<<32-r,Cs=(e,t,r)=>e<<32-r|t>>>r,Pu=(e,t,r)=>e<<64-r|t>>>r-32,zu=(e,t,r)=>e>>>r-32|t<<64-r;function ei(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var lR=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),uR=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,dR=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),fR=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,pR=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),mR=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var X7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ho=new Uint32Array(64);class hR extends em{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)ho[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=ho[u-15],p=ho[u-2],m=Pn(d,7)^Pn(d,18)^d>>>3,y=Pn(p,17)^Pn(p,19)^p>>>10;ho[u]=y+ho[u-7]+m+ho[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+d+oR(s,a,c)+X7[u]+ho[u]|0,y=(Pn(r,2)^Pn(r,13)^Pn(r,22))+sR(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Ar(ho)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Ar(this.buffer)}}class gR extends hR{A=Ci[0]|0;B=Ci[1]|0;C=Ci[2]|0;D=Ci[3]|0;E=Ci[4]|0;F=Ci[5]|0;G=Ci[6]|0;H=Ci[7]|0;constructor(){super(32)}}var yR=(()=>cR(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),eW=(()=>yR[0])(),tW=(()=>yR[1])(),go=new Uint32Array(80),yo=new Uint32Array(80);class bR extends em{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)go[A]=e.getUint32(t),yo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=go[A-15]|0,z=yo[A-15]|0,j=$s(C,z,1)^$s(C,z,8)^Kx(C,z,7),E=Cs(C,z,1)^Cs(C,z,8)^Vx(C,z,7),Z=go[A-2]|0,D=yo[A-2]|0,H=$s(Z,D,19)^Pu(Z,D,61)^Kx(Z,D,6),ee=Cs(Z,D,19)^zu(Z,D,61)^Vx(Z,D,6),F=dR(E,ee,yo[A-7],yo[A-16]),P=fR(F,j,H,go[A-7],go[A-16]);go[A]=P|0,yo[A]=F|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:v}=this;for(let A=0;A<80;A++){let C=$s(u,d,14)^$s(u,d,18)^Pu(u,d,41),z=Cs(u,d,14)^Cs(u,d,18)^zu(u,d,41),j=u&p^~u&y,E=d&m^~d&g,Z=pR(v,z,E,tW[A],yo[A]),D=mR(Z,b,C,j,eW[A],go[A]),H=Z|0,ee=$s(r,i,28)^Pu(r,i,34)^Pu(r,i,39),F=Cs(r,i,28)^zu(r,i,34)^zu(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,v=g|0,y=p|0,g=m|0,p=u|0,m=d|0,{h:u,l:d}=ei(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=lR(H,F,N);r=uR(I,D,ee,P),i=I|0}({h:r,l:i}=ei(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ei(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ei(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ei(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ei(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=ei(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=ei(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:v}=ei(this.Hh|0,this.Hl|0,b|0,v|0),this.set(r,i,n,o,s,a,c,l,u,d,p,m,y,g,b,v)}roundClean(){Ar(go,yo)}destroy(){this.destroyed=!0,Ar(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class xR extends bR{Ah=nr[0]|0;Al=nr[1]|0;Bh=nr[2]|0;Bl=nr[3]|0;Ch=nr[4]|0;Cl=nr[5]|0;Dh=nr[6]|0;Dl=nr[7]|0;Eh=nr[8]|0;El=nr[9]|0;Fh=nr[10]|0;Fl=nr[11]|0;Gh=nr[12]|0;Gl=nr[13]|0;Hh=nr[14]|0;Hl=nr[15]|0;constructor(){super(64)}}var Ot=Fx(()=>new gR,Mx(1));var rm=Fx(()=>new xR,Mx(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function am(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Qx(e){if(!am(e))throw TypeError("Uint8Array expected")}function kR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function ER(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function bo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Du(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function im(e){if(!Array.isArray(e))throw TypeError("array expected")}function om(e,t){if(!kR(!0,t))throw TypeError(`${e}: array of strings expected`)}function Yx(e,t){if(!kR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;om("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(im(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(im(n),n.map((o)=>{bo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return bo("join",e),{encode:(t)=>(om("join.decode",t),t.join(e)),decode:(t)=>(bo("join.decode",t),t.split(e))}}function cm(e,t="="){return Du(e),bo("padding",t),{encode(r){om("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){om("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function IR(e){return ER(e),{encode:(t)=>t,decode:(t)=>e(t)}}function SR(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(im(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Du(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],d=t*a,p=d+u;if(!Number.isSafeInteger(p)||d/t!==a||p-u!==d)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var AR=(e,t)=>t===0?e:AR(t,e%t),sm=(e,t)=>e+(t-AR(e,t)),nm=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function Wx(e,t,r,i){if(im(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(sm(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${sm(t,r)}`);let n=0,o=0,s=nm[t],a=nm[r]-1,c=[];for(let l of e){if(Du(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=nm[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function rW(e){Du(e);let t=256;return{encode:(r)=>{if(!am(r))throw TypeError("radix.encode input should be Uint8Array");return SR(Array.from(r),t,e)},decode:(r)=>(Yx("radix.decode",r),Uint8Array.from(SR(r,e,t)))}}function gn(e,t=!1){if(Du(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(sm(8,e)>32||sm(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!am(r))throw TypeError("radix2.encode input should be Uint8Array");return Wx(Array.from(r),8,e,!t)},decode:(r)=>(Yx("radix2.decode",r),Uint8Array.from(Wx(r,e,8,t)))}}function wR(e){return ER(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var Fke=Object.freeze(Xr(gn(4),en("0123456789ABCDEF"),tn(""))),Mke=Object.freeze(Xr(gn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),cm(5),tn(""))),Zke=Object.freeze(Xr(gn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),Hke=Object.freeze(Xr(gn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),cm(5),tn(""))),Jke=Object.freeze(Xr(gn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),Kke=Object.freeze(Xr(gn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),IR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),$R=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),nW=/[\t\n\f\r ]/,CR=(e,t)=>{bo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&nW.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},Xx=Object.freeze($R?{encode(e){return Qx(e),e.toBase64()},decode(e){return CR(e,!1)}}:Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),cm(6),tn(""))),gr=Object.freeze(Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),Vke=Object.freeze($R?{encode(e){return Qx(e),e.toBase64({alphabet:"base64url"})},decode(e){return CR(e,!0)}}:Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),cm(6),tn(""))),Wke=Object.freeze(Xr(gn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),eS=(e)=>Xr(rW(58),en(e),tn("")),Gke=Object.freeze(eS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Qke=Object.freeze(eS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Yke=Object.freeze(eS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var Gx=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),vR=[996825010,642813549,513874426,1027748829,705979059];function Nu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<vR.length;i++)if((t>>i&1)===1)r^=vR[i];return r}function _R(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Nu(n)^s>>5}n=Nu(n);for(let o=0;o<i;o++)n=Nu(n)^e.charCodeAt(o)&31;for(let o of t)n=Nu(n)^o;for(let o=0;o<6;o++)n=Nu(n);return n^=r,Gx.encode(Wx([n%nm[30]],30,5,!1))}function TR(e){let t=e==="bech32"?1:734539939,r=gn(5),i=r.decode,n=r.encode,o=wR(i);function s(d,p,m=90){if(bo("bech32.encode prefix",d),am(p))p=Array.from(p);Yx("bech32.encode",p);let y=d.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let b=d.toLowerCase(),v=_R(b,p,t);return`${b}1${Gx.encode(p)}${v}`}function a(d,p=90){bo("bech32.decode input",d);let m=d.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${d}). Expected (8..${p})`);let y=d.toLowerCase();if(d!==y&&d!==d.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),v=y.slice(g+1);if(v.length<6)throw Error("Data must be at least 6 characters long");let A=Gx.decode(v).slice(0,-6),C=_R(b,A,t);if(!v.endsWith(C))throw Error(`Invalid checksum in ${d}: expected "${C}"`);return{prefix:b,words:A}}let c=wR(a);function l(d){let{prefix:p,words:m}=a(d,!1);return{prefix:p,words:m,bytes:i(m)}}function u(d,p){return s(d,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(TR("bech32")),Xke=Object.freeze(TR("bech32m"));var iW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),oW={encode(e){return Qx(e),e.toHex()},decode(e){return bo("hex",e),Uint8Array.fromHex(e)}},eEe=Object.freeze(iW?oW:Xr(gn(4),en("0123456789abcdef"),tn(""),IR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function aW(e,t,r,i){Ai(e);let n=Xp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Tt(o,"c"),Tt(s,"dkLen"),Tt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=qx(t,"password"),l=qx(r,"salt"),u=new Uint8Array(s),d=Xn.create(e,c),p=d._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:d,PRFSalt:p}}function cW(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Ar(n),r}function tS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=aW(e,t,r,i),l,u=new Uint8Array(4),d=ac(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);d.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(p).digestInto(p);for(let v=0;v<g.length;v++)g[v]^=p[v]}}return cW(a,c,s,l,p)}function OR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],d=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],v=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],z=e[t++]^r[i++],j=e[t++]^r[i++],E=s,Z=a,D=c,H=l,ee=u,F=d,P=p,N=m,I=y,R=g,O=b,M=v,L=A,V=C,_=z,re=j;for(let ue=0;ue<8;ue+=2)ee^=Xe(E+L|0,7),I^=Xe(ee+E|0,9),L^=Xe(I+ee|0,13),E^=Xe(L+I|0,18),R^=Xe(F+Z|0,7),V^=Xe(R+F|0,9),Z^=Xe(V+R|0,13),F^=Xe(Z+V|0,18),_^=Xe(O+P|0,7),D^=Xe(_+O|0,9),P^=Xe(D+_|0,13),O^=Xe(P+D|0,18),H^=Xe(re+M|0,7),N^=Xe(H+re|0,9),M^=Xe(N+H|0,13),re^=Xe(M+N|0,18),Z^=Xe(E+H|0,7),D^=Xe(Z+E|0,9),H^=Xe(D+Z|0,13),E^=Xe(H+D|0,18),P^=Xe(F+ee|0,7),N^=Xe(P+F|0,9),ee^=Xe(N+P|0,13),F^=Xe(ee+N|0,18),M^=Xe(O+R|0,7),I^=Xe(M+O|0,9),R^=Xe(I+M|0,13),O^=Xe(R+I|0,18),L^=Xe(re+_|0,7),V^=Xe(L+re|0,9),_^=Xe(V+L|0,13),re^=Xe(_+V|0,18);n[o++]=s+E|0,n[o++]=a+Z|0,n[o++]=c+D|0,n[o++]=l+H|0,n[o++]=u+ee|0,n[o++]=d+F|0,n[o++]=p+P|0,n[o++]=m+N|0,n[o++]=y+I|0,n[o++]=g+R|0,n[o++]=b+O|0,n[o++]=v+M|0,n[o++]=A+L|0,n[o++]=C+V|0,n[o++]=z+_|0,n[o++]=j+re|0}function rS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(OR(r,s,e,t,r,o),a>0)s+=16;OR(r,o,e,t+=16,r,s)}}function lW(e,t,r){let i=Xp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Tt(n,"N"),Tt(o,"r"),Tt(s,"p"),Tt(a,"dkLen"),Tt(c,"asyncTick"),Tt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let d=128*o,p=d/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/d)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=d*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=tS(Ot,e,t,{c:1,dkLen:d*s}),b=Qp(g),v=Qp(new Uint8Array(d*n)),A=Qp(new Uint8Array(d)),C=()=>{};if(u){let z=2*n*s,j=Math.max(Math.floor(z/1e4),1),E=0;C=()=>{if(E++,u&&(!(E%j)||E===z))u(E/z)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:v,B32:b,B:g,tmp:A,blockMixCb:C,asyncTick:c}}function uW(e,t,r,i,n){let o=tS(Ot,e,r,{c:1,dkLen:t});return Ar(r,i,n),o}function nS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:d,blockMixCb:p}=lW(e,t,r);jx(l);for(let m=0;m<o;m++){let y=a*m;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)rS(c,b,c,b+=a,n),p();rS(c,(i-1)*a,l,y,n),p();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let v=0;v<a;v++)d[v]=l[y+v]^c[b*a+v];rS(d,0,l,y,n),p()}}return jx(l),uW(e,s,u,c,d)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function dW(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function lm(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function cc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=dW(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function iS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function RR(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!lc(e))throw Error("invalid output, must be aligned")}function ti(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function zn(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function fW(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Ts=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),pW=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var mW=(e)=>{for(let t=0;t<e.length;t++)e[t]=pW(e[t]);return e},Ti=Ts?(e)=>e:mW;function PR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function zR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function NR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var DR=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Ft(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(u,d)=>{if(d!==void 0){if(u!==2)throw Error("cipher output not supported");Ft(d,void 0,"output")}},c=!1;return{encrypt(u,d){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(u),a(s.encrypt.length,d),s.encrypt(u,d)},decrypt(u,d){if(Ft(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,d),s.decrypt(u,d)}}}return Object.assign(r,e),r};function Lu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!lc(t))throw Error("invalid output, must be aligned");return t}function LR(e,t,r){cc(e),cc(t),lm(r);let i=new Uint8Array(16),n=fW(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function lc(e){return e.byteOffset%4===0}function uc(e){return Uint8Array.from(Ft(e))}var jR=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),hW=(()=>Ti(ti(jR("expand 16-byte k"))))(),gW=(()=>Ti(ti(jR("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var Bu=64,yW=16,oS=(()=>4294967295)(),BR=Uint32Array.of();function bW(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Bu),u=ti(l),d=Ts&&lc(n)&&lc(o),p=d?ti(n):BR,m=d?ti(o):BR;if(!Ts){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ti(u),s>=oS)throw Error("arx: counter overflow");let g=Math.min(Bu,c-y);for(let b=0,v;b<g;b++)v=y+b,o[v]=n[v]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=oS)throw Error("arx: counter overflow");let g=Math.min(Bu,c-y);if(d&&g===Bu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let v=0,A;v<yW;v++)A=b+v,m[A]=p[A]^u[v];y+=Bu;continue}for(let b=0,v;b<g;b++)v=y+b,o[v]=n[v]^l[b];y+=g}}function qR(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=PR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return cc(n),cc(s),lm(o),lm(r),(a,c,l,u,d=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(u=Lu(p,u,!1),cc(d),d<0||d>=oS)throw Error("arx: counter overflow");let m=[],y=a.length,g,b;if(y===32)m.push(g=uc(a)),b=gW;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=hW,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Ts||!lc(c))m.push(c=uc(c));let v=ti(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let z=c.subarray(0,16);if(Ts)i(b,v,ti(z),v);else{let j=Ti(Uint32Array.from(b));i(j,v,ti(z),v),zn(j),Ti(v)}c=c.subarray(16)}else if(!Ts)Ti(v);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let z=new Uint8Array(12);z.set(c,o?0:12-c.length),c=z,m.push(c)}let C=Ti(ti(c));try{return bW(e,b,v,C,l,u,d,s),u}finally{zn(...m)}}}function ir(e,t){return e[t++]&255|(e[t++]&255)<<8}class UR{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=uc(Ft(e,32,"key"));let t=ir(e,0),r=ir(e,2),i=ir(e,4),n=ir(e,6),o=ir(e,8),s=ir(e,10),a=ir(e,12),c=ir(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=ir(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],d=o[5],p=o[6],m=o[7],y=o[8],g=o[9],b=ir(e,t+0),v=ir(e,t+2),A=ir(e,t+4),C=ir(e,t+6),z=ir(e,t+8),j=ir(e,t+10),E=ir(e,t+12),Z=ir(e,t+14),D=n[0]+(b&8191),H=n[1]+((b>>>13|v<<3)&8191),ee=n[2]+((v>>>10|A<<6)&8191),F=n[3]+((A>>>7|C<<9)&8191),P=n[4]+((C>>>4|z<<12)&8191),N=n[5]+(z>>>1&8191),I=n[6]+((z>>>14|j<<2)&8191),R=n[7]+((j>>>11|E<<5)&8191),O=n[8]+((E>>>8|Z<<8)&8191),M=n[9]+(Z>>>5|i),L=0,V=L+D*s+H*(5*g)+ee*(5*y)+F*(5*m)+P*(5*p);L=V>>>13,V&=8191,V+=N*(5*d)+I*(5*u)+R*(5*l)+O*(5*c)+M*(5*a),L+=V>>>13,V&=8191;let _=L+D*a+H*s+ee*(5*g)+F*(5*y)+P*(5*m);L=_>>>13,_&=8191,_+=N*(5*p)+I*(5*d)+R*(5*u)+O*(5*l)+M*(5*c),L+=_>>>13,_&=8191;let re=L+D*c+H*a+ee*s+F*(5*g)+P*(5*y);L=re>>>13,re&=8191,re+=N*(5*m)+I*(5*p)+R*(5*d)+O*(5*u)+M*(5*l),L+=re>>>13,re&=8191;let ue=L+D*l+H*c+ee*a+F*s+P*(5*g);L=ue>>>13,ue&=8191,ue+=N*(5*y)+I*(5*m)+R*(5*p)+O*(5*d)+M*(5*u),L+=ue>>>13,ue&=8191;let T=L+D*u+H*l+ee*c+F*a+P*s;L=T>>>13,T&=8191,T+=N*(5*g)+I*(5*y)+R*(5*m)+O*(5*p)+M*(5*d),L+=T>>>13,T&=8191;let Se=L+D*d+H*u+ee*l+F*c+P*a;L=Se>>>13,Se&=8191,Se+=N*s+I*(5*g)+R*(5*y)+O*(5*m)+M*(5*p),L+=Se>>>13,Se&=8191;let Ee=L+D*p+H*d+ee*u+F*l+P*c;L=Ee>>>13,Ee&=8191,Ee+=N*a+I*s+R*(5*g)+O*(5*y)+M*(5*m),L+=Ee>>>13,Ee&=8191;let Te=L+D*m+H*p+ee*d+F*u+P*l;L=Te>>>13,Te&=8191,Te+=N*c+I*a+R*s+O*(5*g)+M*(5*y),L+=Te>>>13,Te&=8191;let Ce=L+D*y+H*m+ee*p+F*d+P*u;L=Ce>>>13,Ce&=8191,Ce+=N*l+I*c+R*a+O*s+M*(5*g),L+=Ce>>>13,Ce&=8191;let _e=L+D*g+H*y+ee*m+F*p+P*d;L=_e>>>13,_e&=8191,_e+=N*u+I*l+R*c+O*a+M*s,L+=_e>>>13,_e&=8191,L=(L<<2)+L|0,L=L+V|0,V=L&8191,L=L>>>13,_+=L,n[0]=V,n[1]=_,n[2]=re,n[3]=ue,n[4]=T,n[5]=Se,n[6]=Ee,n[7]=Te,n[8]=Ce,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;zn(r)}update(e){iS(this),Ft(e),e=uc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,zn(this.h,this.r,this.buffer,this.pad)}digestInto(e){iS(this),RR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var FR=NR(32,(e)=>new UR(e));function xW(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],d=t[1],p=t[2],m=t[3],y=t[4],g=t[5],b=t[6],v=t[7],A=n,C=r[0],z=r[1],j=r[2],E=s,Z=a,D=c,H=l,ee=u,F=d,P=p,N=m,I=y,R=g,O=b,M=v,L=A,V=C,_=z,re=j;for(let T=0;T<o;T+=2)E=E+ee|0,L=et(L^E,16),I=I+L|0,ee=et(ee^I,12),E=E+ee|0,L=et(L^E,8),I=I+L|0,ee=et(ee^I,7),Z=Z+F|0,V=et(V^Z,16),R=R+V|0,F=et(F^R,12),Z=Z+F|0,V=et(V^Z,8),R=R+V|0,F=et(F^R,7),D=D+P|0,_=et(_^D,16),O=O+_|0,P=et(P^O,12),D=D+P|0,_=et(_^D,8),O=O+_|0,P=et(P^O,7),H=H+N|0,re=et(re^H,16),M=M+re|0,N=et(N^M,12),H=H+N|0,re=et(re^H,8),M=M+re|0,N=et(N^M,7),E=E+F|0,re=et(re^E,16),O=O+re|0,F=et(F^O,12),E=E+F|0,re=et(re^E,8),O=O+re|0,F=et(F^O,7),Z=Z+P|0,L=et(L^Z,16),M=M+L|0,P=et(P^M,12),Z=Z+P|0,L=et(L^Z,8),M=M+L|0,P=et(P^M,7),D=D+N|0,V=et(V^D,16),I=I+V|0,N=et(N^I,12),D=D+N|0,V=et(V^D,8),I=I+V|0,N=et(N^I,7),H=H+ee|0,_=et(_^H,16),R=R+_|0,ee=et(ee^R,12),H=H+ee|0,_=et(_^H,8),R=R+_|0,ee=et(ee^R,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+Z|0,i[ue++]=c+D|0,i[ue++]=l+H|0,i[ue++]=u+ee|0,i[ue++]=d+F|0,i[ue++]=p+P|0,i[ue++]=m+N|0,i[ue++]=y+I|0,i[ue++]=g+R|0,i[ue++]=b+O|0,i[ue++]=v+M|0,i[ue++]=A+L|0,i[ue++]=C+V|0,i[ue++]=z+_|0,i[ue++]=j+re|0}var SW=qR(xW,{counterRight:!1,counterLength:4,allowShortKeys:!1});var wW=new Uint8Array(16),MR=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(wW.subarray(r))},vW=new Uint8Array(32);function ZR(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,vW),s=LR(i.length,n?n.length:0,!0),a=FR.create(o);if(n)MR(a,n);MR(a,i),a.update(s);let c=a.digest();return zn(o,s),c}var _W=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Lu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=ZR(e,t,r,c,i);return s.set(l,a),zn(l),s},decrypt(o,s){s=Lu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=ZR(e,t,r,a,i);if(!zR(c,l))throw zn(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),zn(l),s}}),yn=DR({blockSize:64,nonceLength:12,tagLength:16},_W(SW));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function dc(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Vt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function ze(e,t,r=""){let i=dc(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function bn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Vt(e.outputLen),Vt(e.blockLen)}function Ri(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function um(e,t){ze(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function dm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Fr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function fm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Nn(e,t){return e<<32-t|e>>>t}var kW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function EW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function IW(e){for(let t=0;t<e.length;t++)e[t]=EW(e[t]);return e}var sS=kW?(e)=>e:IW,JR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),AW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Os(e){if(ze(e),JR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=AW[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function HR(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function Rs(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(JR)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=HR(e.charCodeAt(o)),a=HR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Lt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];ze(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function fc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function xo(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var So=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cS=BigInt(0),aS=BigInt(1);function ju(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function KR(e){if(typeof e==="bigint"){if(!pm(e))throw Error("positive bigint expected, got "+e)}else Vt(e);return e}function qu(e){let t=KR(e).toString(16);return t.length&1?"0"+t:t}function VR(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?cS:BigInt("0x"+e)}function wo(e){return VR(Os(e))}function vo(e){return VR(Os(mm(ze(e)).reverse()))}function pc(e,t){Vt(t),e=KR(e);let r=Rs(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Uu(e,t){return pc(e,t).reverse()}function mm(e){return Uint8Array.from(e)}function _o(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var pm=(e)=>typeof e==="bigint"&&cS<=e;function $W(e,t,r){return pm(e)&&pm(t)&&pm(r)&&t<=e&&e<r}function Fu(e,t,r,i){if(!$W(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function lS(e){let t;for(t=0;e>cS;e>>=aS,t+=1);return t}var Mu=(e)=>(aS<<BigInt(e))-aS;function WR(e,t,r){if(Vt(e,"hashLen"),Vt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,Lt(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,v=[];while(b<t){c=p();let A=c.slice();v.push(A),b+=c.length}return Lt(...v)};return(b,v)=>{d(),m(b);let A=void 0;while(!(A=v(y())))m();return d(),A}}function Ps(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function uS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),yr=BigInt(1),zs=BigInt(2),YR=BigInt(3),XR=BigInt(4),eP=BigInt(5),CW=BigInt(7),tP=BigInt(8),TW=BigInt(9),rP=BigInt(16);function $r(e,t){let r=e%t;return r>=Cr?r:t+r}function xn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function GR(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=$r(e,t),i=t,n=Cr,o=yr,s=yr,a=Cr;while(r!==Cr){let l=i/r,u=i%r,d=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=d,a=p}if(i!==yr)throw Error("invert: does not exist");return $r(n,t)}function dS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function nP(e,t){let r=(e.ORDER+yr)/XR,i=e.pow(t,r);return dS(e,i,t),i}function OW(e,t){let r=(e.ORDER-eP)/tP,i=e.mul(t,zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,zs),n),a=e.mul(o,e.sub(s,e.ONE));return dS(e,a,t),a}function RW(e){let t=hm(e),r=iP(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+CW)/rP;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),d=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(d),c);l=a.cmov(l,u,m),u=a.cmov(p,d,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return dS(a,b,c),b}}function iP(e){if(e<YR)throw Error("sqrt is not defined for small field");let t=e-yr,r=0;while(t%zs===Cr)t/=zs,r++;let i=zs,n=hm(e);while(QR(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return nP;let o=n.pow(i,t),s=(t+yr)/zs;return function(c,l){if(c.is0(l))return l;if(QR(c,l)!==1)throw Error("Cannot find square root");let u=r,d=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=yr<<BigInt(u-y-1),v=c.pow(d,b);u=y,d=c.sqr(v),p=c.mul(p,d),m=c.mul(m,v)}return m}}function PW(e){if(e%XR===YR)return nP;if(e%tP===eP)return OW;if(e%rP===TW)return RW(e);return iP(e)}var zW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function fS(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=zW.reduce((i,n)=>(i[n]="function",i),t);return Ps(e,r),e}function NW(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===yr)return t;let i=e.ONE,n=t;while(r>Cr){if(r&yr)i=e.mul(i,n);n=e.sqr(n),r>>=yr}return i}function Zu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function QR(e,t){let r=(e.ORDER-yr)/zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function DW(e,t){if(t!==void 0)Vt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class oP{ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=yr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=DW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return $r(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&yr)===yr}neg(e){return $r(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return $r(e*e,this.ORDER)}add(e,t){return $r(e+t,this.ORDER)}sub(e,t){return $r(e-t,this.ORDER)}mul(e,t){return $r(e*t,this.ORDER)}pow(e,t){return NW(this,e,t)}div(e,t){return $r(e*GR(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return GR(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=PW(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Uu(e,this.BYTES):pc(e,this.BYTES)}fromBytes(e,t=!1){ze(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?vo(e):wo(e);if(s)a=$r(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Zu(this,e)}cmov(e,t,r){return r?t:e}}function hm(e,t={}){return new oP(e,t)}function sP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function pS(e){let t=sP(e);return t+Math.ceil(t/2)}function aP(e,t,r=!1){ze(e);let i=e.length,n=sP(t),o=pS(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?vo(e):wo(e),a=$r(s,t-yr)+yr;return r?Uu(a,n):pc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mc=BigInt(0),Ns=BigInt(1);function Hu(e,t){let r=t.negate();return e?r:t}function yS(e,t){let r=Zu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function dP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function mS(e,t){dP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Mu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function cP(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ns;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var hS=new WeakMap,fP=new WeakMap;function gS(e){return fP.get(e)||1}function lP(e){if(e!==mc)throw Error("invalid wNAF")}class bS{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>mc){if(t&Ns)r=r.add(i);i=i.double(),t>>=Ns}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=mS(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=mS(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=cP(r,s,o);if(r=a,l)n=n.add(Hu(d,t[p]));else i=i.add(Hu(u,t[c]))}return lP(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=mS(e,this.bits);for(let o=0;o<n.windows;o++){if(r===mc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=cP(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return lP(r),i}getPrecomputes(e,t,r){let i=hS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);hS.set(t,i)}}return i}cached(e,t,r){let i=gS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=gS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){dP(t,this.bits),fP.set(e,t),hS.delete(e)}hasCache(e){return gS(e)!==1}}function pP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>mc||i>mc){if(r&Ns)o=o.add(n);if(i&Ns)s=s.add(n);n=n.double(),r>>=Ns,i>>=Ns}return{p1:o,p2:s}}function uP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return fS(t),t}else return hm(e,{isLE:r})}function mP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>mc))throw Error(`CURVE.${c} must be positive bigint`)}let n=uP(t.p,r.Fp,i),o=uP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function gm(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ju=BigInt(0),hc=BigInt(1),ym=BigInt(2);function LW(e){return Ps(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function hP(e){let t=LW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||xo,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?ym**BigInt(254):ym**BigInt(447),y=a?BigInt(8)*ym**BigInt(251)-hc:BigInt(4)*ym**BigInt(445)-hc,g=m+y+hc,b=(I)=>$r(I,r),v=A(d);function A(I){return Uu(b(I),u)}function C(I){let R=mm(ze(I,u,"uCoordinate"));if(a)R[31]&=127;return b(vo(R))}function z(I){return vo(n(mm(ze(I,u,"scalar"))))}function j(I,R){let O=ee(C(R),z(I));if(O===Ju)throw Error("invalid private or public key received");return A(O)}function E(I){return j(I,v)}let Z=E,D=j;function H(I,R,O){let M=b(I*(R-O));return R=b(R-M),O=b(O+M),{x_2:R,x_3:O}}function ee(I,R){Fu("u",I,Ju,r),Fu("scalar",R,m,g);let O=R,M=I,L=hc,V=Ju,_=I,re=hc,ue=Ju;for(let Se=BigInt(l-1);Se>=Ju;Se--){let Ee=O>>Se&hc;ue^=Ee,{x_2:L,x_3:_}=H(ue,L,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=L+V,Ce=b(Te*Te),_e=L-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,St=_-re,Dt=b(St*Te),hr=b(tt*_e),Qr=Dt+hr,Yr=Dt-hr;_=b(Qr*Qr),re=b(M*b(Yr*Yr)),L=b(Ce*Pe),V=b(Ve*(Ce+b(p*Ve)))}({x_2:L,x_3:_}=H(ue,L,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(L*T)}let F={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(ze(I,F.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze({keygen:gm(P,Z),getSharedSecret:D,getPublicKey:Z,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:v.slice(),lengths:F})}class xS{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(bn(e),ze(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Fr(i)}update(e){return Ri(this),this.iHash.update(e),this}digestInto(e){Ri(this),ze(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var gc=(e,t,r)=>new xS(e,t).update(r).digest();gc.create=(e,t)=>new xS(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gP=(e,t)=>(e+(e>=0?t:-t)/bP)/t;function BW(e,t,r){let[[i,n],[o,s]]=t,a=gP(s*e,r),c=gP(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<Pi,p=u<Pi;if(d)l=-l;if(p)u=-u;let m=Mu(Math.ceil(lS(r)/2))+yc;if(l<Pi||l>=m||u<Pi||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:d,k1:l,k2neg:p,k2:u}}function wS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function SS(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(ju(r.lowS,"lowS"),ju(r.prehash,"prehash"),r.format!==void 0)wS(r.format);return r}class yP extends Error{constructor(e=""){super(e)}}var ko={Err:yP,_tlv:{encode:(e,t)=>{let{Err:r}=ko;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=qu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?qu(n.length/2|128):"";return qu(e)+o+n+t},decode(e,t){let{Err:r}=ko,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=ko;if(e<Pi)throw new t("integer: negative integers are not allowed");let r=qu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=ko;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return wo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=ko,n=ze(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=ko,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Pi=BigInt(0),yc=BigInt(1),bP=BigInt(2),bm=BigInt(3),jW=BigInt(4);function vS(e,t={}){let r=mP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ps(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=SP(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function d(P,N,I){let{x:R,y:O}=N.toAffine(),M=i.toBytes(R);if(ju(I,"isCompressed"),I){u();let L=!i.isOdd(O);return Lt(xP(L),M)}else return Lt(Uint8Array.of(4),M,i.toBytes(O))}function p(P){ze(P,void 0,"Point");let{publicKey:N,publicKeyUncompressed:I}=l,R=P.length,O=P[0],M=P.subarray(1);if(R===N&&(O===2||O===3)){let L=i.fromBytes(M);if(!i.isValid(L))throw Error("bad point: is not on curve, wrong x");let V=g(L),_;try{_=i.sqrt(V)}catch(T){let Se=T instanceof Error?": "+T.message:"";throw Error("bad point: is not on curve, sqrt error"+Se)}u();let re=i.isOdd(_);if((O&1)===1!==re)_=i.neg(_);return{x:L,y:_}}else if(R===I&&O===4){let L=i.BYTES,V=i.fromBytes(M.subarray(0,L)),_=i.fromBytes(M.subarray(L,L*2));if(!b(V,_))throw Error("bad point: is not on curve");return{x:V,y:_}}else throw Error(`bad point: got length ${R}, expected compressed=${N} or uncompressed=${I}`)}let m=t.toBytes||d,y=t.fromBytes||p;function g(P){let N=i.sqr(P),I=i.mul(N,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,N){let I=i.sqr(N),R=g(P);return i.eql(I,R)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let v=i.mul(i.pow(o.a,bm),jW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(v,A)))throw Error("bad curve params: a or b");function C(P,N,I=!1){if(!i.isValid(N)||I&&i.is0(N))throw Error(`bad point coordinate ${P}`);return N}function z(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function j(P){if(!c||!c.basises)throw Error("no endo");return BW(P,c.basises,n.ORDER)}let E=uS((P,N)=>{let{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(O);let L=i.mul(I,N),V=i.mul(R,N),_=i.mul(O,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}),Z=uS((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:N,y:I}=P.toAffine();if(!i.isValid(N)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(N,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function D(P,N,I,R,O){return I=new H(i.mul(I.X,P),I.Y,I.Z),N=Hu(R,N),I=Hu(O,I),N.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,N,I){this.X=C("x",P),this.Y=C("y",N,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:N,y:I}=P||{};if(!P||!i.isValid(N)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(I))return H.ZERO;return new H(N,I,i.ONE)}static fromBytes(P){let N=H.fromAffine(y(ze(P,void 0,"point")));return N.assertValidity(),N}static fromHex(P){return H.fromBytes(Rs(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,N=!0){if(F.createCache(this,P),!N)this.multiply(bm);return this}assertValidity(){Z(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){z(P);let{X:N,Y:I,Z:R}=this,{X:O,Y:M,Z:L}=P,V=i.eql(i.mul(N,L),i.mul(O,R)),_=i.eql(i.mul(I,L),i.mul(M,R));return V&&_}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:N}=o,I=i.mul(N,bm),{X:R,Y:O,Z:M}=this,L=i.ZERO,V=i.ZERO,_=i.ZERO,re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(M,M),Se=i.mul(R,O);return Se=i.add(Se,Se),_=i.mul(R,M),_=i.add(_,_),L=i.mul(P,_),V=i.mul(I,T),V=i.add(L,V),L=i.sub(ue,V),V=i.add(ue,V),V=i.mul(L,V),L=i.mul(Se,L),_=i.mul(I,_),T=i.mul(P,T),Se=i.sub(re,T),Se=i.mul(P,Se),Se=i.add(Se,_),_=i.add(re,re),re=i.add(_,re),re=i.add(re,T),re=i.mul(re,Se),V=i.add(V,re),T=i.mul(O,M),T=i.add(T,T),re=i.mul(T,Se),L=i.sub(L,re),_=i.mul(T,ue),_=i.add(_,_),_=i.add(_,_),new H(L,V,_)}add(P){z(P);let{X:N,Y:I,Z:R}=this,{X:O,Y:M,Z:L}=P,V=i.ZERO,_=i.ZERO,re=i.ZERO,ue=o.a,T=i.mul(o.b,bm),Se=i.mul(N,O),Ee=i.mul(I,M),Te=i.mul(R,L),Ce=i.add(N,I),_e=i.add(O,M);Ce=i.mul(Ce,_e),_e=i.add(Se,Ee),Ce=i.sub(Ce,_e),_e=i.add(N,R);let Pe=i.add(O,L);return _e=i.mul(_e,Pe),Pe=i.add(Se,Te),_e=i.sub(_e,Pe),Pe=i.add(I,R),V=i.add(M,L),Pe=i.mul(Pe,V),V=i.add(Ee,Te),Pe=i.sub(Pe,V),re=i.mul(ue,_e),V=i.mul(T,Te),re=i.add(V,re),V=i.sub(Ee,re),re=i.add(Ee,re),_=i.mul(V,re),Ee=i.add(Se,Se),Ee=i.add(Ee,Se),Te=i.mul(ue,Te),_e=i.mul(T,_e),Ee=i.add(Ee,Te),Te=i.sub(Se,Te),Te=i.mul(ue,Te),_e=i.add(_e,Te),Se=i.mul(Ee,_e),_=i.add(_,Se),Se=i.mul(Pe,_e),V=i.mul(Ce,V),V=i.sub(V,Se),Se=i.mul(Ce,Ee),re=i.mul(Pe,re),re=i.add(re,Se),new H(V,_,re)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:N}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,R,O=(M)=>F.cached(this,M,(L)=>yS(H,L));if(N){let{k1neg:M,k1:L,k2neg:V,k2:_}=j(P),{p:re,f:ue}=O(L),{p:T,f:Se}=O(_);R=ue.add(Se),I=D(N.beta,re,T,M,V)}else{let{p:M,f:L}=O(P);I=M,R=L}return yS(H,[I,R])[0]}multiplyUnsafe(P){let{endo:N}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Pi||I.is0())return H.ZERO;if(P===yc)return I;if(F.hasCache(this))return this.multiply(P);if(N){let{k1neg:R,k1:O,k2neg:M,k2:L}=j(P),{p1:V,p2:_}=pP(H,I,O,L);return D(N.beta,V,_,R,M)}else return F.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===yc)return!0;if(P)return P(H,this);return F.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===yc)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return ju(P,"isCompressed"),this.assertValidity(),m(H,this,P)}toHex(P=!0){return Os(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let ee=n.BITS,F=new bS(H,t.endo?Math.ceil(ee/2):ee);return H.BASE.precompute(8),H}function xP(e){return Uint8Array.of(e?2:3)}function SP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function qW(e,t={}){let{Fn:r}=e,i=t.randomBytes||xo,n=Object.assign(SP(e.Fp,r),{seed:pS(r.ORDER)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let v=m.length;if(y===!0&&v!==g)return!1;if(y===!1&&v!==b)return!1;return!!e.fromBytes(m)}catch(v){return!1}}function a(m=i(n.seed)){return aP(ze(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!dc(m))return;if("_lengths"in r&&r._lengths||y===g)return;let v=ze(m,void 0,"key").length;return v===g||v===b}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=gm(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:n})}function _S(e,t,r={}){bn(t),Ps(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||xo,n=r.hmac||((I,R)=>gc(t,I,R)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m}=qW(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*bP<o.ORDER;function b(I){let R=a>>yc;return I>R}function v(I,R){if(!s.isValidNot0(R))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,R){wS(R);let O=m.signature,M=R==="compact"?O:R==="recovered"?O+1:void 0;return ze(I,M)}class z{r;s;recovery;constructor(I,R,O){if(this.r=v("r",I),this.s=v("s",R),O!=null){if(A(),![0,1,2,3].includes(O))throw Error("invalid recovery id");this.recovery=O}Object.freeze(this)}static fromBytes(I,R=y.format){C(I,R);let O;if(R==="der"){let{r:_,s:re}=ko.toSig(ze(I));return new z(_,re)}if(R==="recovered")O=I[0],R="compact",I=I.subarray(1);let M=m.signature/2,L=I.subarray(0,M),V=I.subarray(M,M*2);return new z(s.fromBytes(L),s.fromBytes(V),O)}static fromHex(I,R){return this.fromBytes(Rs(I),R)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new z(this.r,this.s,I)}recoverPublicKey(I){let{r:R,s:O}=this,M=this.assertRecovery(),L=M===2||M===3?R+a:R;if(!o.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(L),_=e.fromBytes(Lt(xP((M&1)===0),V)),re=s.inv(L),ue=E(ze(I,void 0,"msgHash")),T=s.create(-ue*re),Se=s.create(O*re),Ee=e.BASE.multiplyUnsafe(T).add(_.multiplyUnsafe(Se));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(wS(I),I==="der")return Rs(ko.hexFromSig(this));let{r:R,s:O}=this,M=s.toBytes(R),L=s.toBytes(O);if(I==="recovered")return A(),Lt(Uint8Array.of(this.assertRecovery()),M,L);return Lt(M,L)}toHex(I){return Os(this.toBytes(I))}}let j=r.bits2int||function(R){if(R.length>8192)throw Error("input is too large");let O=wo(R),M=R.length*8-c;return M>0?O>>BigInt(M):O},E=r.bits2int_modN||function(R){return s.create(j(R))},Z=Mu(c);function D(I){return Fu("num < 2^"+c,I,Pi,Z),s.toBytes(I)}function H(I,R){return ze(I,void 0,"message"),R?ze(t(I),void 0,"prehashed message"):I}function ee(I,R,O){let{lowS:M,prehash:L,extraEntropy:V}=SS(O,y);I=H(I,L);let _=E(I),re=s.fromBytes(R);if(!s.isValidNot0(re))throw Error("invalid private key");let ue=[D(re),D(_)];if(V!=null&&V!==!1){let Te=V===!0?i(m.secretKey):V;ue.push(ze(Te,void 0,"extraEntropy"))}let T=Lt(...ue),Se=_;function Ee(Te){let Ce=j(Te);if(!s.isValidNot0(Ce))return;let _e=s.inv(Ce),Pe=e.BASE.multiply(Ce).toAffine(),Ve=s.create(Pe.x);if(Ve===Pi)return;let tt=s.create(_e*s.create(Se+Ve*re));if(tt===Pi)return;let St=(Pe.x===Ve?0:2)|Number(Pe.y&yc),Dt=tt;if(M&&b(tt))Dt=s.neg(tt),St^=1;return new z(Ve,Dt,g?void 0:St)}return{seed:T,k2sig:Ee}}function F(I,R,O={}){let{seed:M,k2sig:L}=ee(I,R,O);return WR(t.outputLen,s.BYTES,n)(M,L).toBytes(O.format)}function P(I,R,O,M={}){let{lowS:L,prehash:V,format:_}=SS(M,y);if(O=ze(O,void 0,"publicKey"),R=H(R,V),!dc(I)){let re=I instanceof z?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+re)}C(I,_);try{let re=z.fromBytes(I,_),ue=e.fromBytes(O);if(L&&re.hasHighS())return!1;let{r:T,s:Se}=re,Ee=E(R),Te=s.inv(Se),Ce=s.create(Ee*Te),_e=s.create(T*Te),Pe=e.BASE.multiplyUnsafe(Ce).add(ue.multiplyUnsafe(_e));if(Pe.is0())return!1;return s.create(Pe.x)===T}catch(re){return!1}}function N(I,R,O={}){let{prehash:M}=SS(O,y);return R=H(R,M),z.fromBytes(I,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:d,utils:p,lengths:m,Point:e,sign:F,verify:P,recoverPublicKey:N,Signature:z,hash:t})}function wP(e,t,r){return e&t^~e&r}function vP(e,t,r){return e&t^e&r^t&r}class xm{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=fm(this.buffer)}update(e){Ri(this),ze(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=fm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ri(this),um(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Fr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=fm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var or=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Sm=BigInt(4294967295),_P=BigInt(32);function UW(e,t=!1){if(t)return{h:Number(e&Sm),l:Number(e>>_P&Sm)};return{h:Number(e>>_P&Sm)|0,l:Number(e&Sm)|0}}function wm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=UW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var kS=(e,t,r)=>e>>>r,ES=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,Ku=(e,t,r)=>e<<64-r|t>>>r-32,Vu=(e,t,r)=>e>>>r-32|t<<64-r;var kP=(e,t,r)=>e<<r|t>>>32-r,EP=(e,t,r)=>t<<r|e>>>32-r,IP=(e,t,r)=>t<<r-32|e>>>64-r,AP=(e,t,r)=>e<<r-32|t>>>64-r;function ri(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var $P=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),CP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,TP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),OP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,RP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),PP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var MW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Eo=new Uint32Array(64);class zP extends xm{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)Eo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let d=Eo[u-15],p=Eo[u-2],m=Nn(d,7)^Nn(d,18)^d>>>3,y=Nn(p,17)^Nn(p,19)^p>>>10;Eo[u]=y+Eo[u-7]+m+Eo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let d=Nn(s,6)^Nn(s,11)^Nn(s,25),p=l+d+wP(s,a,c)+MW[u]+Eo[u]|0,y=(Nn(r,2)^Nn(r,13)^Nn(r,22))+vP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Fr(Eo)}destroy(){this.set(0,0,0,0,0,0,0,0),Fr(this.buffer)}}class NP extends zP{A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var DP=(()=>wm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),ZW=(()=>DP[0])(),HW=(()=>DP[1])(),Io=new Uint32Array(80),Ao=new Uint32Array(80);class LP extends xm{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:d,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,d,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=d|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Io[A]=e.getUint32(t),Ao[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=Io[A-15]|0,z=Ao[A-15]|0,j=Ds(C,z,1)^Ds(C,z,8)^kS(C,z,7),E=Ls(C,z,1)^Ls(C,z,8)^ES(C,z,7),Z=Io[A-2]|0,D=Ao[A-2]|0,H=Ds(Z,D,19)^Ku(Z,D,61)^kS(Z,D,6),ee=Ls(Z,D,19)^Vu(Z,D,61)^ES(Z,D,6),F=TP(E,ee,Ao[A-7],Ao[A-16]),P=OP(F,j,H,Io[A-7],Io[A-16]);Io[A]=P|0,Ao[A]=F|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:d,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:v}=this;for(let A=0;A<80;A++){let C=Ds(u,d,14)^Ds(u,d,18)^Ku(u,d,41),z=Ls(u,d,14)^Ls(u,d,18)^Vu(u,d,41),j=u&p^~u&y,E=d&m^~d&g,Z=RP(v,z,E,HW[A],Ao[A]),D=PP(Z,b,C,j,ZW[A],Io[A]),H=Z|0,ee=Ds(r,i,28)^Ku(r,i,34)^Ku(r,i,39),F=Ls(r,i,28)^Vu(r,i,34)^Vu(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,v=g|0,y=p|0,g=m|0,p=u|0,m=d|0,{h:u,l:d}=ri(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=$P(H,F,N);r=CP(I,D,ee,P),i=I|0}({h:r,l:i}=ri(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ri(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ri(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ri(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:d}=ri(this.Eh|0,this.El|0,u|0,d|0),{h:p,l:m}=ri(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=ri(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:v}=ri(this.Hh|0,this.Hl|0,b|0,v|0),this.set(r,i,n,o,s,a,c,l,u,d,p,m,y,g,b,v)}roundClean(){Fr(Io,Ao)}destroy(){Fr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class BP extends LP{Ah=or[0]|0;Al=or[1]|0;Bh=or[2]|0;Bl=or[3]|0;Ch=or[4]|0;Cl=or[5]|0;Dh=or[6]|0;Dl=or[7]|0;Eh=or[8]|0;El=or[9]|0;Fh=or[10]|0;Fl=or[11]|0;Gh=or[12]|0;Gl=or[13]|0;Hh=or[14]|0;Hl=or[15]|0;constructor(){super(48)}}var vm=fc(()=>new NP,So(1));var jP=fc(()=>new BP,So(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var JW=BigInt(1),qP=BigInt(2),KW=BigInt(3),VW=BigInt(5),n1e=BigInt(8),UP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function WW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=UP,a=e*e%o*e%o,c=xn(a,qP,o)*a%o,l=xn(c,JW,o)*e%o,u=xn(l,VW,o)*l%o,d=xn(u,t,o)*u%o,p=xn(d,r,o)*d%o,m=xn(p,i,o)*p%o,y=xn(m,n,o)*m%o,g=xn(y,n,o)*m%o,b=xn(g,t,o)*u%o;return{pow_p_5_8:xn(b,qP,o)*e%o,b2:a}}function GW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var FP=(()=>{let e=UP;return hP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=WW(t);return $r(xn(r,KW,e)*i,e)},adjustScalarBytes:GW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),YW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var XW=vS(QW),IS=_S(XW,vm);var eG=vS(YW),MP=_S(eG,jP);function HP(e,t,r){if(bn(e),r===void 0)r=new Uint8Array(e.outputLen);return gc(e,r,t)}var AS=Uint8Array.of(0),ZP=Uint8Array.of();function JP(e,t,r,i=32){bn(e),Vt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=ZP;else ze(r,void 0,"info");let s=new Uint8Array(o*n),a=gc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)AS[0]=u+1,c.update(u===0?ZP:l).update(r).update(AS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Fr(l,AS),s.slice(0,i)}var tG=BigInt(0),Wu=BigInt(1),rG=BigInt(2),nG=BigInt(7),iG=BigInt(256),oG=BigInt(113),WP=[],GP=[],QP=[];for(let e=0,t=Wu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],WP.push(2*(5*i+r)),GP.push((e+1)*(e+2)/2%64);let n=tG;for(let o=0;o<7;o++)if(t=(t<<Wu^(t>>nG)*oG)%iG,t&rG)n^=Wu<<(Wu<<BigInt(o))-Wu;QP.push(n)}var YP=wm(QP,!0),sG=YP[0],aG=YP[1],KP=(e,t,r)=>r>32?IP(e,t,r):kP(e,t,r),VP=(e,t,r)=>r>32?AP(e,t,r):EP(e,t,r);function cG(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],d=KP(l,u,1)^r[a],p=VP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=d,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=GP[s],c=KP(n,o,a),l=VP(n,o,a),u=WP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=sG[i],e[1]^=aG[i]}Fr(r)}class _m{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Vt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=dm(this.state)}clone(){return this._cloneInto()}keccak(){sS(this.state32),cG(this.state32,this.rounds),sS(this.state32),this.posOut=0,this.pos=0}update(e){Ri(this),ze(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ri(this,!1),ze(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Vt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(um(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Fr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new _m(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var XP=(e,t,r,i={})=>fc(()=>new _m(t,e,r),i);var Bs=XP(6,136,32,So(8));var e2=XP(6,72,64,So(10));var t2=(e,t,r,i={})=>fc((n={})=>new _m(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),r2=t2(31,168,16,So(11)),ni=t2(31,136,32,So(12));function $S(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function i2(e){return $S(e),(e&e-1)===0&&e!==0}function CS(e,t){$S(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function o2(e){return $S(e),31-Math.clz32(e)}function n2(e){let t=e.length;if(t<2||!i2(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=o2(t);for(let i=0;i<t;i++){let n=CS(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var TS=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=o2(r);if(!i2(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)n2(u);for(let d=0,p=1;d<c-s;d++){let m=n?d+1+s:c-d,y=1<<m,g=y>>1,b=r>>m;for(let v=0;v<r;v+=y)for(let A=0,C=p++;A<g;A++){let z=o?n?r-C:C:A*b,j=v+A,E=v+A+g,Z=i[z],D=u[E],H=u[j];if(l){let ee=e.mul(D,Z);u[j]=e.add(H,ee),u[E]=e.sub(H,ee)}else if(o)u[j]=e.add(D,H),u[E]=e.mul(e.sub(D,H),Z);else u[j]=e.add(H,D),u[E]=e.mul(e.sub(H,D),Z)}}if(!n&&a)n2(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ii=xo;function km(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function s2(e){return Uint8Array.from(e)}function js(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(ze(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{ze(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function Em(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{ze(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Mt(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function OS(e){return(1<<e)-1}var b1e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var a2=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let z=A%C|0;return(z>=0?z|0:C+z|0)|0},l=(A,C=i)=>{let z=c(A,C)|0;return(z>C>>1?z-C|0:z)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let z=CS(C,s),j=BigInt(o)**BigInt(z)%BigInt(i);A[C]=Number(j)|0}return A}let d=u(),p={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:d,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=TS(p,{dit:!1,...m}),g=TS(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:d,NTT:{encode:(A)=>y(A),decode:(A)=>{g(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let z=OS(A),j=A*(r/8);return{bytesLen:j,encode:(E)=>{let Z=new Uint8Array(j);for(let D=0,H=0,ee=0,F=0;D<E.length;D++){H|=(C.encode(E[D])&z)<<ee,ee+=A;for(;ee>=8;ee-=8,H>>=8)Z[F++]=H&OS(ee)}return Z},decode:(E)=>{let Z=t(r);for(let D=0,H=0,ee=0,F=0;D<E.length;D++){H|=E[D]<<ee,ee+=8;for(;ee>=A;ee-=A,H>>=A)Z[F++]=C.decode(H&z)}return Z}}}}},lG=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Mt(o,i)}}},c2=lG(r2);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var br=256,Ni=3329,uG=3303,dG=17,{mod:Yu,nttZetas:fG,NTT:qs,bitsCoder:pG}=a2({N:br,Q:Ni,F:uG,ROOT_OF_UNITY:dG,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),RS={512:{N:br,Q:Ni,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:br,Q:Ni,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:br,Q:Ni,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},mG=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ni/2)/Ni,decode:(r)=>r*Ni+t>>>e}},Gu=(e)=>pG(e,mG(e));function Us(e,t){for(let r=0;r<br;r++)e[r]=Yu(e[r]+t[r])}function hG(e,t){for(let r=0;r<br;r++)e[r]=Yu(e[r]-t[r])}function gG(e,t,r,i,n){let o=Yu(t*i*n+e*r),s=Yu(e*i+t*r);return{c0:o,c1:s}}function Im(e,t){for(let r=0;r<br/2;r++){let i=fG[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=gG(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function l2(e){let t=new Uint16Array(br);for(let r=0;r<br;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<br&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ni)t[r++]=o;if(r<br&&s<Ni)t[r++]=s}}return t}function Qu(e,t,r,i){let n=e(i*br/4,t,r),o=new Uint16Array(br),s=dm(n),a=0;for(let c=0,l=0,u=0,d=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)d=u,u=0;else if(a===2*i)o[l++]=Yu(d-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var yG=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Gu(1),u=Gu(c),d=Gu(a),p=js("publicKey",Em(Gu(12),t),32),m=Em(Gu(12),t),y=js("ciphertext",Em(d,t),u),g=js("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{ze(b,32,"seed");let v=new Uint8Array(33);v.set(b),v[32]=t;let A=n(v),[C,z]=g.decode(A),j=[],E=[];for(let H=0;H<t;H++)j.push(qs.encode(Qu(r,z,H,o)));let Z=i(C);for(let H=0;H<t;H++){let ee=qs.encode(Qu(r,z,t+H,o));for(let F=0;F<t;F++){let P=l2(Z.get(F,H));Us(ee,Im(P,j[F]))}E.push(ee)}Z.clean();let D={publicKey:p.encode([E,C]),secretKey:m.encode(j)};return Mt(C,z,j,E,v,A),D},encrypt:(b,v,A)=>{let[C,z]=p.decode(b),j=[];for(let F=0;F<t;F++)j.push(qs.encode(Qu(r,A,F,o)));let E=i(z),Z=new Uint16Array(br),D=[];for(let F=0;F<t;F++){let P=Qu(r,A,t+F,s),N=new Uint16Array(br);for(let I=0;I<t;I++){let R=l2(E.get(F,I));Us(N,Im(R,j[I]))}Us(P,qs.decode(N)),D.push(P),Us(Z,Im(C[F],j[F])),Mt(N)}E.clean();let H=Qu(r,A,2*t,s);Us(H,qs.decode(Z));let ee=l.decode(v);return Us(ee,H),Mt(C,j,Z,H),y.encode([D,ee])},decrypt:(b,v)=>{let[A,C]=y.decode(b),z=m.decode(v),j=new Uint16Array(br);for(let E=0;E<t;E++)Us(j,Im(z[E],qs.encode(A[E])));return hG(C,qs.decode(j)),Mt(j,z,A),l.encode(C)}}};function PS(e){let t=yG(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=js("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ii(64))=>{ze(u,64,"seed");let{publicKey:d,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(d),y=a.encode([p,d,m,u.subarray(32)]);return Mt(p,m),{publicKey:d,secretKey:y}},getPublicKey:(u)=>{let[d,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,d=ii(32))=>{ze(u,s.publicKey,"publicKey"),ze(d,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(s2(p)));if(!km(m,p))throw Mt(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Mt(m);let y=i.create().update(d).update(r(u)).digest(),g=t.encrypt(u,d,y.subarray(32,64));return Mt(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,d)=>{ze(d,a.bytesLen,"secretKey"),ze(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=r(d.subarray(p/2,m));if(!km(y,d.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,b,v,A]=a.decode(d),C=t.decrypt(u,g),z=i.create().update(C).update(v).digest(),j=z.subarray(0,32),E=t.encrypt(b,C,z.subarray(32,64)),Z=km(u,E),D=n.create({dkLen:32}).update(A).update(u).digest();return Mt(C,E,!Z?j:D),Z?j:D}}}function bG(e,t,r){return ni.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var zS={HASH256:Bs,HASH512:e2,KDF:ni,XOF:c2,PRF:bG},C1e=PS({...zS,...RS[512]}),Xu=PS({...zS,...RS[768]}),u2=PS({...zS,...RS[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function xG(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ii(r.seed))=>{ze(s,r.seed,"seed");let a=o.isLE?vo(s):wo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function NS(e,t=!1){let r=xG(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ii(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Mt(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function ed(e,t){return js(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function DS(e){return(t,r)=>e(t,{dkLen:r})}function SG(e,t,...r){let i=ed(r,"seed"),n=ed(r,"publicKey");if(e===void 0)e=i.bytesLen;Vt(e);function o(s){ze(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((d,p)=>d.keygen(a[p])),l=c.map((d)=>d.secretKey),u=c.map((d)=>d.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ii(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Mt(a),Mt(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function Am(e,t,r,i,...n){let o=SG(e,r,...n),s=ed(n,"cipherText"),a=ed(n,"publicKey"),c=ed(n,"msg");if(t===void 0)t=c.bytesLen;return Vt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ii(c.bytesLen)){let d=a.decode(l),p=c.decode(u),m=n.map((v,A)=>v.encapsulate(d[A],p[A])),y=m.map((v)=>v.sharedSecret),g=m.map((v)=>v.cipherText),b={sharedSecret:i(d,g,y),cipherText:s.encode(g)};return Mt(y,g),b},decapsulate(l,u){let d=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(d[b],m[b]));return i(p,d,y)}}}function d2(e,t,r,i,n){return bn(i),bn(n),Am(32,32,DS(i),(o,s,a)=>n(Lt(a[0],a[1],s[1],o[1],_o(e))),t,r)}var q1e=d2("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Xu,NS(IS,!0),ni,Bs),U1e=d2("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",u2,NS(MP,!0),ni,Bs);function wG(e,t,r,i,n){return bn(i),bn(n),Am(32,32,DS(i),(o,s,a)=>{let c=Lt(a[0],a[1],s[0],o[0],s[1],o[1],_o(e)),l=32,u=Lt(_o("hybrid_prk"),c),d=HP(n,u),p=Lt(pc(32,2),_o("shared_secret"),_o("")),m=JP(n,d,p,32);return Mt(d,p,u,c),m},t,r)}var f2=NS(FP),F1e=wG("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Xu,f2,ni,vm),vG=(()=>Am(32,32,DS(ni),(e,t,r)=>Bs(Lt(r[0],r[1],t[1],e[1],_o("\\.//^\\"))),Xu,f2))();function _G(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,d=t;;u=d,d+=t){if(d>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,d),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ii(i)){return ze(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ii(i)){ze(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Mt(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function kG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=_G(r,n,o,i),a=64,c=a+i;return Am(32,32,(l)=>{ze(l,32);let u=ni(l,{dkLen:c}),d=u.subarray(0,a),p=u.subarray(a,c);return Lt(d,p)},(l,u,d)=>Bs(Lt(d[0],d[1],u[1],l[1],_o(e))),t,s)}var EG=(()=>kG("MLKEM768-P256",Xu,IS,128))();var $m=vG,p2=EG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lt=(e,t,r)=>rr(e,t,r),BS=Tt,bc=Yp,sr=(...e)=>Ux(...e),xc=(e)=>Ou(e),Sc=Bx,wc=(e)=>$i(e),Tm=BigInt(0),LS=BigInt(1);function Di(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Om(e){if(typeof e==="bigint"){if(!Cm(e))throw RangeError("positive bigint expected, got "+e)}else BS(e);return e}function oi(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function td(e){let t=Om(e).toString(16);return t.length&1?"0"+t:t}function m2(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?Tm:BigInt("0x"+e)}function Fs(e){return m2(Yp(e))}function Dn(e){return m2(Yp($o(rr(e)).reverse()))}function Rm(e,t){if(Tt(t),t===0)throw RangeError("zero length");e=Om(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return Ou(r.padStart(t*2,"0"))}function rd(e,t){return Rm(e,t).reverse()}function h2(e,t){if(e=lt(e),t=lt(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(lt(e))}function Pm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Cm=(e)=>typeof e==="bigint"&&Tm<=e;function IG(e,t,r){return Cm(e)&&Cm(t)&&Cm(r)&&t<=e&&e<r}function Li(e,t,r,i){if(!IG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function vc(e){if(e<Tm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>Tm;e>>=LS,t+=1);return t}var nd=(e)=>(LS<<BigInt(e))-LS;function g2(e,t,r){if(Tt(e,"hashLen"),Tt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,d=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,sr(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,v=[];while(b<t){c=p();let A=c.slice();v.push(A),b+=c.length}return sr(...v)};return(b,v)=>{d(),m(b);let A=void 0;while((A=v(y()))===void 0)m();return d(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var jS=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ar=BigInt(0),Et=BigInt(1),Ms=BigInt(2),S2=BigInt(3),w2=BigInt(4),v2=BigInt(5),AG=BigInt(7),_2=BigInt(8),$G=BigInt(9),k2=BigInt(16);function gt(e,t){if(t<=ar)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=ar?r:t+r}function wn(e,t,r){if(t<ar)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >ar)i*=i,i%=r;return i}function y2(e,t){if(e===ar)throw Error("invert: expected non-zero number");if(t<=ar)throw Error("invert: expected positive modulus, got "+t);let r=gt(e,t),i=t,n=ar,o=Et,s=Et,a=ar;while(r!==ar){let l=i/r,u=i-r*l,d=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=d,a=p}if(i!==Et)throw Error("invert: does not exist");return gt(n,t)}function qS(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function E2(e,t){let r=e,i=(r.ORDER+Et)/w2,n=r.pow(t,i);return qS(r,n,t),n}function CG(e,t){let r=e,i=(r.ORDER-v2)/_2,n=r.mul(t,Ms),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Ms),o),c=r.mul(s,r.sub(a,r.ONE));return qS(r,c,t),c}function TG(e){let t=zm(e),r=I2(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+AG)/k2;return(a,c)=>{let l=a,u=l.pow(c,s),d=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),y=l.eql(l.sqr(d),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,d,y),d=l.cmov(m,p,g);let b=l.eql(l.sqr(d),c),v=l.cmov(u,d,b);return qS(l,v,c),v}}function I2(e){if(e<S2)throw Error("sqrt is not defined for small field");let t=e-Et,r=0;while(t%Ms===ar)t/=Ms,r++;let i=Ms,n=zm(e);while(b2(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return E2;let o=n.pow(i,t),s=(t+Et)/Ms;return function(c,l){let u=c;if(u.is0(l))return l;if(b2(u,l)!==1)throw Error("Cannot find square root");let d=r,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,b=u.sqr(m);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===d)throw Error("Cannot find square root");let v=Et<<BigInt(d-g-1),A=u.pow(p,v);d=g,p=u.sqr(A),m=u.mul(m,p),y=u.mul(y,A)}return y}}function OG(e){if(e%w2===S2)return E2;if(e%_2===v2)return CG;if(e%k2===$G)return TG(e);return I2(e)}var Bi=(e,t)=>(gt(e,t)&Et)===Et,RG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function US(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=RG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),oi(e.BYTES,"BYTES"),oi(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Et)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function PG(e,t,r){let i=e;if(r<ar)throw Error("invalid exponent, negatives unsupported");if(r===ar)return i.ONE;if(r===Et)return t;let n=i.ONE,o=t;while(r>ar){if(r&Et)n=i.mul(n,o);o=i.sqr(o),r>>=Et}return n}function id(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function b2(e,t){let r=e,i=(r.ORDER-Et)/Ms,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function zG(e,t){if(t!==void 0)BS(t);if(e<=ar)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=vc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var x2=new WeakMap;class FS{ORDER;BITS;BYTES;isLE;ZERO=ar;ONE=Et;_lengths;_mod;constructor(e,t={}){if(e<=Et)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=zG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return gt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return ar<=e&&e<this.ORDER}is0(e){return e===ar}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Et)===Et}neg(e){return gt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return gt(e*e,this.ORDER)}add(e,t){return gt(e+t,this.ORDER)}sub(e,t){return gt(e-t,this.ORDER)}mul(e,t){return gt(e*t,this.ORDER)}pow(e,t){return PG(this,e,t)}div(e,t){return gt(e*y2(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return y2(e,this.ORDER)}sqrt(e){let t=x2.get(this);if(!t)x2.set(this,t=OG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?rd(e,this.BYTES):Rm(e,this.BYTES)}fromBytes(e,t=!1){lt(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Dn(e):Fs(e);if(s)a=gt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return id(this,e)}cmov(e,t,r){return Di(r,"condition"),r?t:e}}Object.freeze(FS.prototype);function zm(e,t={}){return new FS(e,t)}function A2(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Et)throw Error("field order must be greater than 1");let t=vc(e-Et);return Math.ceil(t/8)}function MS(e){let t=A2(e);return t+Math.ceil(t/2)}function $2(e,t,r=!1){lt(e);let i=e.length,n=A2(t),o=Math.max(MS(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Dn(e):Fs(e),a=gt(s,t-Et)+Et;return r?rd(a,n):Rm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _c=BigInt(0),Zs=BigInt(1);function od(e,t){let r=t.negate();return e?r:t}function Hs(e,t){let r=id(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function R2(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function ZS(e,t){R2(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=nd(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function C2(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Zs;let l=t*i,u=l+Math.abs(a)-1,d=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:d,isNeg:p,isNegF:m,offsetF:l}}var HS=new WeakMap,P2=new WeakMap;function JS(e){return P2.get(e)||1}function T2(e){if(e!==_c)throw Error("invalid wNAF")}class sd{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>_c){if(t&Zs)r=r.add(i);i=i.double(),t>>=Zs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=ZS(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=ZS(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:d,offsetF:p}=C2(r,s,o);if(r=a,l)n=n.add(od(d,t[p]));else i=i.add(od(u,t[c]))}return T2(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=ZS(e,this.bits);for(let o=0;o<n.windows;o++){if(r===_c)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=C2(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return T2(r),i}getPrecomputes(e,t,r){let i=HS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);HS.set(t,i)}}return i}cached(e,t,r){let i=JS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=JS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){R2(t,this.bits),P2.set(e,t),HS.delete(e)}hasCache(e){return JS(e)!==1}}function z2(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>_c||i>_c){if(r&Zs)o=o.add(n);if(i&Zs)s=s.add(n);n=n.double(),r>>=Zs,i>>=Zs}return{p1:o,p2:s}}function O2(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return US(t),t}else return zm(e,{isLE:r})}function Nm(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>_c))throw Error(`CURVE.${c} must be positive bigint`)}let n=O2(t.p,r.Fp,i),o=O2(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function ad(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function cd(e,t){if(oi(e),oi(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function NG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function DG(e){if(!Sc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?Pm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function KS(e,t,r,i){if(lt(e),oi(r),t=DG(t),t.length>255)t=i(sr(Pm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=sr(t,cd(t.length,1)),c=new Uint8Array(o),l=cd(r,2),u=Array(s),d=i(sr(c,e,l,cd(0,1),a));u[0]=i(sr(d,cd(1,1),a));for(let m=1;m<s;m++){let y=[NG(d,u[m-1]),cd(m+1,1),a];u[m]=i(sr(...y))}return sr(...u).slice(0,r)}var N2="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D2=(e,t)=>(e+(e>=0?t:-t)/B2)/t;function LG(e,t,r){Li("scalar",e,si,r);let[[i,n],[o,s]]=t,a=D2(s*e,r),c=D2(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,d=l<si,p=u<si;if(d)l=-l;if(p)u=-u;let m=nd(Math.ceil(vc(r)/2))+Co;if(l<si||l>=m||u<si||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:d,k1:l,k2neg:p,k2:u}}function WS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function VS(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Di(r.lowS,"lowS"),Di(r.prehash,"prehash"),r.format!==void 0)WS(r.format);return r}class L2 extends Error{constructor(e=""){super(e)}}var Ln={Err:L2,_tlv:{encode:(e,t)=>{let{Err:r}=Ln;if(oi(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=td(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?td(n.length/2|128):"";return td(e)+o+n+t},decode(e,t){let{Err:r}=Ln;t=lt(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Ln;if(Om(e),e<si)throw new t("integer: negative integers are not allowed");let r=td(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Ln;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Fs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Ln,n=lt(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Ln,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Ln._tlv);Object.freeze(Ln._int);Object.freeze(Ln);var si=BigInt(0),Co=BigInt(1),B2=BigInt(2),Dm=BigInt(3),BG=BigInt(4);function j2(e,t={}){let r=Nm("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=U2(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(F,P,N){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:R}=P.toAffine(),O=i.toBytes(I);if(Di(N,"isCompressed"),N){d();let M=!i.isOdd(R);return sr(q2(M),O)}else return sr(Uint8Array.of(4),O,i.toBytes(R))}function m(F){lt(F,void 0,"Point");let{publicKey:P,publicKeyUncompressed:N}=u,I=F.length,R=F[0],O=F.subarray(1);if(l&&I===1&&R===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(R===2||R===3)){let M=i.fromBytes(O);if(!i.isValid(M))throw Error("bad point: is not on curve, wrong x");let L=b(M),V;try{V=i.sqrt(L)}catch(ue){let T=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+T)}d();let _=i.isOdd(V);if((R&1)===1!==_)V=i.neg(V);return{x:M,y:V}}else if(I===N&&R===4){let M=i.BYTES,L=i.fromBytes(O.subarray(0,M)),V=i.fromBytes(O.subarray(M,M*2));if(!v(L,V))throw Error("bad point: is not on curve");return{x:L,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function b(F){let P=i.sqr(F),N=i.mul(P,F);return i.add(i.add(N,i.mul(F,o.a)),o.b)}function v(F,P){let N=i.sqr(P),I=b(F);return i.eql(N,I)}if(!v(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Dm),BG),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function z(F,P,N=!1){if(!i.isValid(P)||N&&i.is0(P))throw Error(`bad point coordinate ${F}`);return P}function j(F){if(!(F instanceof D))throw Error("Weierstrass Point expected")}function E(F){if(!c||!c.basises)throw Error("no endo");return LG(F,c.basises,n.ORDER)}function Z(F,P,N,I,R){return N=new D(i.mul(N.X,F),N.Y,N.Z),P=od(I,P),N=od(R,N),P.add(N)}class D{static BASE=new D(o.Gx,o.Gy,i.ONE);static ZERO=new D(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(F,P,N){this.X=z("x",F),this.Y=z("y",P,!0),this.Z=z("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(F){let{x:P,y:N}=F||{};if(!F||!i.isValid(P)||!i.isValid(N))throw Error("invalid affine point");if(F instanceof D)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(N))return D.ZERO;return new D(P,N,i.ONE)}static fromBytes(F){let P=D.fromAffine(g(lt(F,void 0,"point")));return P.assertValidity(),P}static fromHex(F){return D.fromBytes(xc(F))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(F=8,P=!0){if(ee.createCache(this,F),!P)this.multiply(Dm);return this}assertValidity(){let F=this;if(F.is0()){if(t.allowInfinityPoint&&i.is0(F.X)&&i.eql(F.Y,i.ONE)&&i.is0(F.Z))return;throw Error("bad point: ZERO")}let{x:P,y:N}=F.toAffine();if(!i.isValid(P)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!v(P,N))throw Error("bad point: equation left != right");if(!F.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:F}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(F)}equals(F){j(F);let{X:P,Y:N,Z:I}=this,{X:R,Y:O,Z:M}=F,L=i.eql(i.mul(P,M),i.mul(R,I)),V=i.eql(i.mul(N,M),i.mul(O,I));return L&&V}negate(){return new D(this.X,i.neg(this.Y),this.Z)}double(){let{a:F,b:P}=o,N=i.mul(P,Dm),{X:I,Y:R,Z:O}=this,M=i.ZERO,L=i.ZERO,V=i.ZERO,_=i.mul(I,I),re=i.mul(R,R),ue=i.mul(O,O),T=i.mul(I,R);return T=i.add(T,T),V=i.mul(I,O),V=i.add(V,V),M=i.mul(F,V),L=i.mul(N,ue),L=i.add(M,L),M=i.sub(re,L),L=i.add(re,L),L=i.mul(M,L),M=i.mul(T,M),V=i.mul(N,V),ue=i.mul(F,ue),T=i.sub(_,ue),T=i.mul(F,T),T=i.add(T,V),V=i.add(_,_),_=i.add(V,_),_=i.add(_,ue),_=i.mul(_,T),L=i.add(L,_),ue=i.mul(R,O),ue=i.add(ue,ue),_=i.mul(ue,T),M=i.sub(M,_),V=i.mul(ue,re),V=i.add(V,V),V=i.add(V,V),new D(M,L,V)}add(F){j(F);let{X:P,Y:N,Z:I}=this,{X:R,Y:O,Z:M}=F,L=i.ZERO,V=i.ZERO,_=i.ZERO,re=o.a,ue=i.mul(o.b,Dm),T=i.mul(P,R),Se=i.mul(N,O),Ee=i.mul(I,M),Te=i.add(P,N),Ce=i.add(R,O);Te=i.mul(Te,Ce),Ce=i.add(T,Se),Te=i.sub(Te,Ce),Ce=i.add(P,I);let _e=i.add(R,M);return Ce=i.mul(Ce,_e),_e=i.add(T,Ee),Ce=i.sub(Ce,_e),_e=i.add(N,I),L=i.add(O,M),_e=i.mul(_e,L),L=i.add(Se,Ee),_e=i.sub(_e,L),_=i.mul(re,Ce),L=i.mul(ue,Ee),_=i.add(L,_),L=i.sub(Se,_),_=i.add(Se,_),V=i.mul(L,_),Se=i.add(T,T),Se=i.add(Se,T),Ee=i.mul(re,Ee),Ce=i.mul(ue,Ce),Se=i.add(Se,Ee),Ee=i.sub(T,Ee),Ee=i.mul(re,Ee),Ce=i.add(Ce,Ee),T=i.mul(Se,Ce),V=i.add(V,T),T=i.mul(_e,Ce),L=i.mul(Te,L),L=i.sub(L,T),T=i.mul(Te,Se),_=i.mul(_e,_),_=i.add(_,T),new D(L,V,_)}subtract(F){return j(F),this.add(F.negate())}is0(){return this.equals(D.ZERO)}multiply(F){let{endo:P}=t;if(!n.isValidNot0(F))throw RangeError("invalid scalar: out of range");let N,I,R=(O)=>ee.cached(this,O,(M)=>Hs(D,M));if(P){let{k1neg:O,k1:M,k2neg:L,k2:V}=E(F),{p:_,f:re}=R(M),{p:ue,f:T}=R(V);I=re.add(T),N=Z(P.beta,_,ue,O,L)}else{let{p:O,f:M}=R(F);N=O,I=M}return Hs(D,[N,I])[0]}multiplyUnsafe(F){let{endo:P}=t,N=this,I=F;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===si||N.is0())return D.ZERO;if(I===Co)return N;if(ee.hasCache(this))return this.multiply(I);if(P){let{k1neg:R,k1:O,k2neg:M,k2:L}=E(I),{p1:V,p2:_}=z2(D,N,O,L);return Z(P.beta,V,_,R,M)}else return ee.unsafe(N,I)}toAffine(F){let P=this,N=F,{X:I,Y:R,Z:O}=P;if(i.eql(O,i.ONE))return{x:I,y:R};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(O);let L=i.mul(I,N),V=i.mul(R,N),_=i.mul(O,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(_,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}isTorsionFree(){let{isTorsionFree:F}=t;if(s===Co)return!0;if(F)return F(D,this);return ee.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:F}=t;if(s===Co)return this;if(F)return F(D,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Co)return this.is0();return this.clearCofactor().is0()}toBytes(F=!0){return Di(F,"isCompressed"),this.assertValidity(),y(D,this,F)}toHex(F=!0){return bc(this.toBytes(F))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,ee=new sd(D,t.endo?Math.ceil(H/2):H);if(H>=8)D.BASE.precompute(8);return Object.freeze(D.prototype),Object.freeze(D),D}function q2(e){return Uint8Array.of(e?2:3)}function U2(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function jG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?wc:t.randomBytes,n=Object.assign(U2(e.Fp,r),{seed:Math.max(MS(r.ORDER),16)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let v=m.length;if(y===!0&&v!==g)return!1;if(y===!1&&v!==b)return!1;return!!e.fromBytes(m)}catch(v){return!1}}function a(m){return m=m===void 0?i(n.seed):m,$2(lt(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,v=r._lengths;if(!Sc(m))return;let A=lt(m,void 0,"key").length,C=A===g||A===b,z=A===y||!!v?.includes(A);if(C&&z)return;return C}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let d={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=ad(a,c);return Object.freeze(d),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:d,lengths:n})}function F2(e,t,r={}){let i=t;Ai(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?wc:r.randomBytes,o=r.hmac===void 0?(R,O)=>Xn(i,R,O):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y}=jG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*B2+Co<s.ORDER;function v(R){let O=c>>Co;return R>O}function A(R,O){if(!a.isValidNot0(O))throw Error(`invalid signature ${R}: out of range 1..Point.Fn.ORDER`);return O}function C(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function z(R,O){WS(O);let M=y.signature,L=O==="compact"?M:O==="recovered"?M+1:void 0;return lt(R,L)}class j{r;s;recovery;constructor(R,O,M){if(this.r=A("r",R),this.s=A("s",O),M!=null){if(C(),![0,1,2,3].includes(M))throw Error("invalid recovery id");this.recovery=M}Object.freeze(this)}static fromBytes(R,O=g.format){z(R,O);let M;if(O==="der"){let{r:re,s:ue}=Ln.toSig(lt(R));return new j(re,ue)}if(O==="recovered")M=R[0],O="compact",R=R.subarray(1);let L=y.signature/2,V=R.subarray(0,L),_=R.subarray(L,L*2);return new j(a.fromBytes(V),a.fromBytes(_),M)}static fromHex(R,O){return this.fromBytes(xc(R),O)}assertRecovery(){let{recovery:R}=this;if(R==null)throw Error("invalid recovery id: must be present");return R}addRecoveryBit(R){return new j(this.r,this.s,R)}recoverPublicKey(R){let{r:O,s:M}=this,L=this.assertRecovery(),V=L===2||L===3?O+c:O;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let _=s.toBytes(V),re=e.fromBytes(sr(q2((L&1)===0),_)),ue=a.inv(V),T=Z(lt(R,void 0,"msgHash")),Se=a.create(-T*ue),Ee=a.create(M*ue),Te=e.BASE.multiplyUnsafe(Se).add(re.multiplyUnsafe(Ee));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return v(this.s)}toBytes(R=g.format){if(WS(R),R==="der")return xc(Ln.hexFromSig(this));let{r:O,s:M}=this,L=a.toBytes(O),V=a.toBytes(M);if(R==="recovered")return C(),sr(Uint8Array.of(this.assertRecovery()),L,V);return sr(L,V)}toHex(R){return bc(this.toBytes(R))}}Object.freeze(j.prototype),Object.freeze(j);let E=r.bits2int===void 0?function(O){if(O.length>8192)throw Error("input is too large");let M=Fs(O),L=O.length*8-l;return L>0?M>>BigInt(L):M}:r.bits2int,Z=r.bits2int_modN===void 0?function(O){return a.create(E(O))}:r.bits2int_modN,D=nd(l);function H(R){return Li("num < 2^"+l,R,si,D),a.toBytes(R)}function ee(R,O){return lt(R,void 0,"message"),O?lt(i(R),void 0,"prehashed message"):R}function F(R,O,M){let{lowS:L,prehash:V,extraEntropy:_}=VS(M,g);R=ee(R,V);let re=Z(R),ue=a.fromBytes(O);if(!a.isValidNot0(ue))throw Error("invalid private key");let T=[H(ue),H(re)];if(_!=null&&_!==!1){let Ce=_===!0?n(y.secretKey):_;T.push(lt(Ce,void 0,"extraEntropy"))}let Se=sr(...T),Ee=re;function Te(Ce){let _e=E(Ce);if(!a.isValidNot0(_e))return;let Pe=a.inv(_e),Ve=e.BASE.multiply(_e).toAffine(),tt=a.create(Ve.x);if(tt===si)return;let St=a.create(Pe*a.create(Ee+tt*ue));if(St===si)return;let Dt=(Ve.x===tt?0:2)|Number(Ve.y&Co),hr=St;if(L&&v(St))hr=a.neg(St),Dt^=1;return new j(tt,hr,b?void 0:Dt)}return{seed:Se,k2sig:Te}}function P(R,O,M={}){let{seed:L,k2sig:V}=F(R,O,M);return g2(i.outputLen,a.BYTES,o)(L,V).toBytes(M.format)}function N(R,O,M,L={}){let{lowS:V,prehash:_,format:re}=VS(L,g);if(M=lt(M,void 0,"publicKey"),O=ee(O,_),!Sc(R)){let ue=R instanceof j?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}z(R,re);try{let ue=j.fromBytes(R,re),T=e.fromBytes(M);if(V&&ue.hasHighS())return!1;let{r:Se,s:Ee}=ue,Te=Z(O),Ce=a.inv(Ee),_e=a.create(Te*Ce),Pe=a.create(Se*Ce),Ve=e.BASE.multiplyUnsafe(_e).add(T.multiplyUnsafe(Pe));if(Ve.is0())return!1;return a.create(Ve.x)===Se}catch(ue){return!1}}function I(R,O,M={}){let{prehash:L}=VS(M,g);return O=ee(O,L),j.fromBytes(R,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:u,getPublicKey:d,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:P,verify:N,recoverPublicKey:I,Signature:j,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var UG=j2(qG),kc=F2(UG,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var To=BigInt(0),Mr=BigInt(1),GS=BigInt(2),FG=BigInt(8);function MG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function M2(e,t={}){let r=t,i=Nm("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=GS<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(v){return{isValid:!1,value:To}}}:r.uvRatio;if(!MG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function d(g,b,v=!1){let A=v?Mr:To;return Li("coordinate "+g,b,A,c),b}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new m(To,Mr,Mr,To);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,v,A){this.X=d("x",g),this.Y=d("y",b),this.Z=d("z",v,!0),this.T=d("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:b,y:v}=g||{};return d("x",b),d("y",v),new m(b,v,Mr,l(b*v))}static fromBytes(g,b=!1){let v=n.BYTES,{a:A,d:C}=s;g=$o(lt(g,v,"point")),Di(b,"zip215");let z=$o(g),j=g[v-1];z[v-1]=j&-129;let E=Dn(z),Z=b?c:n.ORDER;Li("point.y",E,To,Z);let D=l(E*E),H=l(D-Mr),ee=l(C*D-A),{isValid:F,value:P}=u(H,ee);if(!F)throw Error("bad point: invalid y coordinate");let N=(P&Mr)===Mr,I=(j&128)!==0;if(!b&&P===To&&I)throw Error("bad point: x=0 and x_0=1");if(I!==N)P=l(-P);return m.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return m.fromBytes(xc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(GS);return this}assertValidity(){let g=this,{a:b,d:v}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:z,T:j}=g,E=l(A*A),Z=l(C*C),D=l(z*z),H=l(D*D),ee=l(E*b),F=l(D*l(ee+Z)),P=l(H+l(v*l(E*Z)));if(F!==P)throw Error("bad point: equation left != right (1)");let N=l(A*C),I=l(z*j);if(N!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:b,Y:v,Z:A}=this,{X:C,Y:z,Z:j}=g,E=l(b*j),Z=l(C*A),D=l(v*j),H=l(z*A);return E===Z&&D===H}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:v,Z:A}=this,C=l(b*b),z=l(v*v),j=l(GS*l(A*A)),E=l(g*C),Z=b+v,D=l(l(Z*Z)-C-z),H=E+z,ee=H-j,F=E-z,P=l(D*ee),N=l(H*F),I=l(D*F),R=l(ee*H);return new m(P,N,R,I)}add(g){p(g);let{a:b,d:v}=s,{X:A,Y:C,Z:z,T:j}=this,{X:E,Y:Z,Z:D,T:H}=g,ee=l(A*E),F=l(C*Z),P=l(j*v*H),N=l(z*D),I=l((A+C)*(E+Z)-ee-F),R=N-P,O=N+P,M=l(F-b*ee),L=l(I*R),V=l(O*M),_=l(I*M),re=l(R*O);return new m(L,V,re,_)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:v}=y.cached(this,g,(A)=>Hs(m,A));return Hs(m,[b,v])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===To)return m.ZERO;if(this.is0()||g===Mr)return this;return y.unsafe(this,g,(b)=>Hs(m,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,v=g,{X:A,Y:C,Z:z}=b,j=b.is0();if(v==null)v=j?FG:n.inv(z);let E=l(A*v),Z=l(C*v),D=n.mul(z,v);if(j)return{x:To,y:Mr};if(D!==Mr)throw Error("invZ was invalid");return{x:E,y:Z}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),v=n.toBytes(b);return v[v.length-1]|=g&Mr?128:0,v}toHex(){return bc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new sd(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class QS{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){jS()}static fromHex(e){jS()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return bc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ld=BigInt(0),Ec=BigInt(1),Lm=BigInt(2);function ZG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function Z2(e){let t=ZG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?wc:s,l=a?255:448,u=a?32:56,d=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Lm**BigInt(254):Lm**BigInt(447),y=a?BigInt(8)*Lm**BigInt(251)-Ec:BigInt(4)*Lm**BigInt(445)-Ec,g=m+y+Ec,b=(I)=>gt(I,r),v=A(d);function A(I){return rd(b(I),u)}function C(I){let R=$o(lt(I,u,"uCoordinate"));if(a)R[31]&=127;return b(Dn(R))}function z(I){return Dn(n($o(lt(I,u,"scalar"))))}function j(I,R){let O=ee(C(R),z(I));if(O===ld)throw Error("invalid private or public key received");return A(O)}function E(I){return j(I,v)}let Z=E,D=j;function H(I,R,O){let M=b(I*(R-O));return R=b(R-M),O=b(O+M),{x_2:R,x_3:O}}function ee(I,R){Li("u",I,ld,r),Li("scalar",R,m,g);let O=R,M=I,L=Ec,V=ld,_=I,re=Ec,ue=ld;for(let Se=BigInt(l-1);Se>=ld;Se--){let Ee=O>>Se&Ec;ue^=Ee,{x_2:L,x_3:_}=H(ue,L,_),{x_2:V,x_3:re}=H(ue,V,re),ue=Ee;let Te=L+V,Ce=b(Te*Te),_e=L-V,Pe=b(_e*_e),Ve=Ce-Pe,tt=_+re,St=_-re,Dt=b(St*Te),hr=b(tt*_e),Qr=Dt+hr,Yr=Dt-hr;_=b(Qr*Qr),re=b(M*b(Yr*Yr)),L=b(Ce*Pe),V=b(Ve*(Ce+b(p*Ve)))}({x_2:L,x_3:_}=H(ue,L,_)),{x_2:V,x_3:re}=H(ue,V,re);let T=o(V);return b(L*T)}let F={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,lt(I,F.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze(F),Object.freeze(N),Object.freeze({keygen:ad(P,Z),getSharedSecret:D,getPublicKey:Z,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:v.slice(),lengths:F})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HG=BigInt(0),ji=BigInt(1),H2=BigInt(2),JG=BigInt(3),KG=BigInt(5),VG=BigInt(8),Ks=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),tw=(()=>({p:Ks,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:VG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function V2(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Ks,a=e*e%o*e%o,c=wn(a,H2,o)*a%o,l=wn(c,ji,o)*e%o,u=wn(l,KG,o)*l%o,d=wn(u,t,o)*u%o,p=wn(d,r,o)*d%o,m=wn(p,i,o)*p%o,y=wn(m,n,o)*m%o,g=wn(y,n,o)*m%o,b=wn(g,t,o)*u%o;return{pow_p_5_8:wn(b,H2,o)*e%o,b2:a}}function WG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var YS=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function rw(e,t){let r=Ks,i=gt(t*t*t,r),n=gt(i*i*t,r),o=V2(e*n).pow_p_5_8,s=gt(e*i*o,r),a=gt(t*s*s,r),c=s,l=gt(s*YS,r),u=a===e,d=a===gt(-e,r),p=a===gt(-e*YS,r);if(u)s=c;if(d||p)s=l;if(Bi(s,r))s=gt(-s,r);return{isValid:u||d,value:s}}var Js=M2(tw,{uvRatio:rw}),Oo=(()=>Js.Fp)(),W2=(()=>Js.Fn)();var Bm=(()=>{let e=Ks;return Z2({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=V2(t);return gt(wn(r,JG,e)*i,e)},adjustScalarBytes:WG})})();var XS=YS,GG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),QG=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),YG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),XG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),J2=(e)=>rw(ji,e),eQ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),ew=(e)=>Oo.create(Dn(e)&eQ);function K2(e){let{d:t}=tw,r=Ks,i=(v)=>Oo.create(v),n=i(XS*e*e),o=i((n+ji)*YG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=rw(o,a),u=i(l*e);if(!Bi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let d=i(s*(n-ji)*XG-a),p=l*l,m=i((l+l)*a),y=i(d*GG),g=i(ji-p),b=i(ji+p);return new Js(i(m*b),i(g*y),i(y*b),i(m*g))}class Tr extends QS{static BASE=(()=>new Tr(Js.BASE))();static ZERO=(()=>new Tr(Js.ZERO))();static Fp=(()=>Oo)();static Fn=(()=>W2)();constructor(e){super(e)}static fromAffine(e){return new Tr(Js.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){rr(e,32);let{a:t,d:r}=tw,i=Ks,n=(C)=>Oo.create(C),o=ew(e);if(!h2(Oo.toBytes(o),e)||Bi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(ji+t*s),c=n(ji-t*s),l=n(a*a),u=n(c*c),d=n(t*r*l-u),{isValid:p,value:m}=J2(n(d*u)),y=n(m*c),g=n(m*y*d),b=n((o+o)*y);if(Bi(b,i))b=n(-b);let v=n(a*g),A=n(b*v);if(!p||Bi(A,i)||v===HG)throw Error("invalid ristretto255 encoding 2");return new Tr(new Js(b,v,ji,A))}static fromHex(e){return Tr.fromBytes(Ou(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Ks,o=(g)=>Oo.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=J2(o(s*c)),u=o(l*s),d=o(l*a),p=o(u*d*i),m;if(Bi(i*p,n)){let g=o(t*XS),b=o(e*XS);e=g,t=b,m=o(u*QG)}else m=d;if(Bi(e*p,n))t=o(-t);let y=o((r-t)*m);if(Bi(y,n))y=o(-y);return Oo.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Oo.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var tQ=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=KS(e,r,64,rm);return tQ.deriveToCurve(i)},hashToScalar(e,t={DST:N2}){let r=KS(e,t.DST,64,rm);return W2.create(Dn(r))},deriveToCurve(e){rr(e,64);let t=ew(e.subarray(0,32)),r=K2(t),i=ew(e.subarray(32,64)),n=K2(i);return new Tr(r.add(n))}});var G2=!1,rQ=!1;async function Q2(e,t){if(rQ)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function jm(e,t){return await Q2(async()=>{let r=nw(e)?e:await iQ(e),i=await crypto.subtle.importKey("raw",oQ(t),{name:"X25519"},G2,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(nw(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Bm.scalarMult(e,t)})}async function ud(e){return await Q2(async()=>jm(e,Bm.GuBytes),()=>{if(nw(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Bm.scalarMultBase(e)})}var nQ=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function iQ(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...nQ,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},G2,["deriveBits"])}function nw(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function oQ(e){return e}class iw{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),aQ(Vs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Vs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Vs(this.transcript)}}}function aQ(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Vs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Ic(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function qm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function ow(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Y2(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function X2(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Vs(i),s=o.subarray(0,t),a=Ic(e,o.subarray(t));return{data:s,rest:a}}class ai{args;body;constructor(e,t){this.args=e,this.body=t}}async function cQ(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=gr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Vs(i);return{s:new ai(r,n)}}async function ez(e){let t=new iw(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await cQ(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=gr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Ic(e,a)}}}function sw(e){let t=[];t.push(`age-encryption.org/v1
|
|
769
769
|
`);for(let r of e){t.push("-> "+r.args.join(" ")+`
|
|
770
770
|
`);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(gr.encode(r.body.subarray(i,n))+`
|
|
771
771
|
`)}if(r.body.length%48===0)t.push(`
|
package/dist/index.js
CHANGED
|
@@ -763,7 +763,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
|
|
|
763
763
|
`),o}async function h7(e,t){let r=await Tt(e),i=r.users.find((n)=>n.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:r.pilot,user:i}}async function g7(e){let t=await vke(Ii(_ke(),"brains-ops-watchdog-smoke-")),r=Ii(t,"id_ed25519"),i=Ii(t,"known_hosts");try{let n=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${n}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=kke.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await $u(r,Ake(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await wke(r,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await $u(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:r,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(n){throw await cR(t,{recursive:!0,force:!0}),n}}async function aR(e,t,r){return e.commandRunner("ssh",[...y7(e),`root@${e.serverIp}`,"bash","-s","--",t,r],{stdin:lR()})}async function Eke(e,t,r){return e.commandRunner("scp",[...y7(e),"-r",`root@${e.serverIp}:${t}/.`,r])}function y7(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function Ike(e){try{return await Ske(e),!0}catch{return!1}}async function Dx(e,t,r){await Promise.all([$u(Ii(e,`${t}.stdout.log`),r.stdout),$u(Ii(e,`${t}.stderr.log`),r.stderr)])}function Ake(e){return`${e.replace(/\r\n/g,`
|
|
764
764
|
`).replace(/\\n/g,`
|
|
765
765
|
`).trimEnd()}
|
|
766
|
-
`}var f7,kke;var Bx=x(async()=>{Ne();c7();Ln();Kp();await a7();f7=f.object({HCLOUD_TOKEN:f.string().min(1),KAMAL_SSH_PRIVATE_KEY:f.string().min(1)}),kke=f.object({servers:f.array(f.object({status:f.string(),public_net:f.object({ipv4:f.object({ip:f.string().min(1)})})}))})});import{access as $N,chmod as OE,mkdir as Uh,readFile as TN,writeFile as CN}from"fs/promises";import{dirname as LY,join as jc}from"path";import{fileURLToPath as BY}from"url";var Yp={name:"@rizom/ops",version:"0.2.0-alpha.
|
|
766
|
+
`}var f7,kke;var Bx=x(async()=>{Ne();c7();Ln();Kp();await a7();f7=f.object({HCLOUD_TOKEN:f.string().min(1),KAMAL_SSH_PRIVATE_KEY:f.string().min(1)}),kke=f.object({servers:f.array(f.object({status:f.string(),public_net:f.object({ipv4:f.object({ip:f.string().min(1)})})}))})});import{access as $N,chmod as OE,mkdir as Uh,readFile as TN,writeFile as CN}from"fs/promises";import{dirname as LY,join as jc}from"path";import{fileURLToPath as BY}from"url";var Yp={name:"@rizom/ops",version:"0.2.0-alpha.403",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Os();Bc();var jY=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],RE=new Set([".kamal/hooks/pre-deploy"]),qY=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),UY=BY(new URL("../templates/rover-pilot/",import.meta.url)),FY=[`service: rover
|
|
767
767
|
image: <%= ENV['IMAGE_REPOSITORY'] %>
|
|
768
768
|
|
|
769
769
|
servers:
|