@rizom/ops 0.2.0-alpha.42 → 0.2.0-alpha.44
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -54,7 +54,7 @@ return `+str.trim()+`;
|
|
|
54
54
|
`).join(`
|
|
55
55
|
`+Y),$.push(Q+"m+"+_9.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=ST()+q+" "+$[0]}function ST(){if(SD.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function TT(...$){return process.stderr.write(g9.formatWithOptions(SD.inspectOpts,...$)+`
|
|
56
56
|
`)}function CT($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function IT(){return process.env.DEBUG}function ET($){$.inspectOpts={};let q=Object.keys(SD.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=SD.inspectOpts[q[J]]}_9.exports=m7()(SD);var{formatters:BD}=_9.exports;BD.o=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts).split(`
|
|
57
|
-
`).map((q)=>q.trim()).join(" ")};BD.O=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts)}});var ID=X0((Cm,p7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)p7.exports=OD();else p7.exports=CD()});var T1=X0((tp,S1)=>{var p9=Object.prototype.hasOwnProperty,B1=Object.prototype.toString,O1=Object.defineProperty,N1=Object.getOwnPropertyDescriptor,j1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return B1.call(q)==="[object Array]"},w1=function(q){if(!q||B1.call(q)!=="[object Object]")return!1;var J=p9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&p9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||p9.call(q,Q)},A1=function(q,J){if(O1&&J.name==="__proto__")O1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Z1=function(q,J){if(J==="__proto__"){if(!p9.call(q,J))return;else if(N1)return N1(q,J).value}return q[J]};S1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Z1(U,J),Q=Z1(q,J),U!==Q){if(M&&Q&&(w1(Q)||(Y=j1(Q)))){if(Y)Y=!1,X=G&&j1(G)?G:[];else X=G&&w1(G)?G:{};A1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")A1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as iH}from"util";var cH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function VX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function WX($,q){let J=$[q];return typeof J==="string"?J:void 0}function o5($){let{values:q,positionals:J}=iH({args:$,options:cH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:VX(q,"help"),version:VX(q,"version"),dryRun:VX(q,"dry-run"),pushTo:WX(q,"push-to"),cohort:WX(q,"cohort"),anchorId:WX(q,"anchor-id")}}}var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.42",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as LN,mkdirSync as FN,readFileSync as iU,writeFileSync as cU}from"fs";import{dirname as gN,join as sM}from"path";function MX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=MX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Bq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function R$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var oH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function aH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function sH($){for(let q=0;q<$.length;q++)$[q]=aH($[q]);return $}var zX=oH?($)=>$:sH,s5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function UY($){if(u0($),s5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=tH[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function a5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function bG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(s5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=a5($.charCodeAt(Y)),U=a5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function eH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function KX($,q=""){if(typeof $==="string")return eH($);return u0($,void 0,q)}function RX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function VY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function DX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Sq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var HX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class OX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Bq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),R$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),YY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Tq=(()=>{let $=(q,J,G)=>new OX(q,J).update(G).digest();return $.create=(q,J)=>new OX(q,J),$})();function yG($,q,J){if(Bq($),J===void 0)J=new Uint8Array($.outputLen);return Tq($,J,q)}var NX=Uint8Array.of(0),t5=Uint8Array.of();function jX($,q,J,G=32){Bq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=t5;else u0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Tq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)NX[0]=M+1,V.update(M===0?t5:W).update(J).update(NX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),R$(W,NX),X.slice(0,G)}var kG=($,q,J,G,Q)=>jX($,yG($,q,J),G,Q);function e5($,q,J){return $&q^~$&J}function $V($,q,J){return $&q^$&J^q&J}class WY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=C8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,R$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Cq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Iq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var MY=BigInt(4294967295),qV=BigInt(32);function $4($,q=!1){if(q)return{h:Number($&MY),l:Number($>>qV&MY)};return{h:Number($>>qV&MY)|0,l:Number($&MY)|0}}function JV($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=$4($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var wX=($,q,J)=>$>>>J,AX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,fG=($,q,J)=>$<<64-J|q>>>J-32,xG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var GV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),QV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,YV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),XV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,UV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),VV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var J4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class ZX extends WY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],R=cq[M-2],K=u$(z,7)^u$(z,18)^z>>>3,N=u$(R,17)^u$(R,19)^R>>>10;cq[M]=N+cq[M-7]+K+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=u$(X,6)^u$(X,11)^u$(X,25),R=W+z+e5(X,U,V)+J4[M]+cq[M]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+$V(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){R$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),R$(this.buffer)}}class WV extends ZX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(32)}}class G4 extends ZX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(28)}}var MV=(()=>JV(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),Q4=(()=>MV[0])(),Y4=(()=>MV[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class mG extends WY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,u=FJ(_,f,1)^FJ(_,f,8)^wX(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^AX(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^fG(m,k,61)^wX(m,k,6),l=gJ(m,k,19)^xG(m,k,61)^AX(m,k,6),v=YV(F,l,oq[T-7],oq[T-16]),I=XV(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^fG(M,z,41),f=gJ(M,z,14)^gJ(M,z,18)^xG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=UV(A,f,F,Y4[T],oq[T]),k=VV(m,w,_,u,Q4[T],nq[T]),y=m|0,l=FJ(J,G,28)^fG(J,G,34)^fG(J,G,39),v=gJ(J,G,28)^xG(J,G,34)^xG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Gq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=GV(y,v,C);J=QV(Z,k,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Gq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Gq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Gq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){R$(nq,oq)}destroy(){this.destroyed=!0,R$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class zV extends mG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class X4 extends mG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class U4 extends mG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class V4 extends mG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=DX(()=>new WV,HX(1));var zY=DX(()=>new zV,HX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function OY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function TX($){if(!OY($))throw Error("Uint8Array expected")}function OV($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function NV($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function uG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function RY($){if(!Array.isArray($))throw Error("array expected")}function DY($,q){if(!OV(!0,q))throw Error(`${$}: array of strings expected`)}function CX($,q){if(!OV(!1,q))throw Error(`${$}: array of numbers expected`)}function E$(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P$($){let q=typeof $==="string"?$.split(""):$,J=q.length;DY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return RY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return RY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return DY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function NY($,q="="){return uG($),aq("padding",q),{encode(J){DY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){DY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function jV($){return NV($),{encode:(q)=>q,decode:(q)=>$(q)}}function KV($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(RY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(uG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,R=z+M;if(!Number.isSafeInteger(R)||z/q!==U||R-M!==z)throw Error("convertRadix: carry overflow");let K=R/J;U=R%J;let N=Math.floor(K);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==R)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var wV=($,q)=>q===0?$:wV(q,$%q),HY=($,q)=>$+(q-wV($,q)),KY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function BX($,q,J,G){if(RY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(HY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${HY(q,J)}`);let Q=0,Y=0,X=KY[q],U=KY[J]-1,V=[];for(let W of $){if(uG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=KY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function W4($){uG($);let q=256;return{encode:(J)=>{if(!OY(J))throw Error("radix.encode input should be Uint8Array");return KV(Array.from(J),q,$)},decode:(J)=>{return CX("radix.decode",J),Uint8Array.from(KV(J,$,q))}}}function b$($,q=!1){if(uG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(HY(8,$)>32||HY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!OY(J))throw Error("radix2.encode input should be Uint8Array");return BX(Array.from(J),8,$,!q)},decode:(J)=>{return CX("radix2.decode",J),Uint8Array.from(BX(J,$,8,q))}}}function RV($){return NV($),function(...q){try{return $.apply(null,q)}catch(J){}}}var h3=E$(b$(4),P$("0123456789ABCDEF"),L$("")),u3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),NY(5),L$("")),p3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),l3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),NY(5),L$("")),r3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),d3=E$(b$(5),P$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),jV(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),AV=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),ZV=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},IX=AV?{encode($){return TX($),$.toBase64()},decode($){return ZV($,!1)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),NY(6),L$("")),p$=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),i3=AV?{encode($){return TX($),$.toBase64({alphabet:"base64url"})},decode($){return ZV($,!0)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),NY(6),L$("")),c3=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),EX=($)=>E$(W4(58),P$($),L$("")),n3=EX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),o3=EX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),a3=EX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var SX=E$(P$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),DV=[996825010,642813549,513874426,1027748829,705979059];function hG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<DV.length;G++)if((q>>G&1)===1)J^=DV[G];return J}function HV($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=hG(Q)^X>>5}Q=hG(Q);for(let Y=0;Y<G;Y++)Q=hG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=hG(Q)^Y;for(let Y=0;Y<6;Y++)Q=hG(Q);return Q^=J,SX.encode(BX([Q%KY[30]],30,5,!1))}function BV($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,Y=RV(G);function X(z,R,K=90){if(aq("bech32.encode prefix",z),OY(R))R=Array.from(R);CX("bech32.encode",R);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+R.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=z.toLowerCase(),A=HV(w,R,q);return`${w}1${SX.encode(R)}${A}`}function U(z,R=90){aq("bech32.decode input",z);let K=z.length;if(K<8||R!==!1&&K>R)throw TypeError(`invalid string length: ${K} (${z}). Expected (8..${R})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),A=N.slice(j+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=SX.decode(A).slice(0,-6),_=HV(w,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:w,words:T}}let V=RV(U);function W(z){let{prefix:R,words:K}=U(z,!1);return{prefix:R,words:K,bytes:G(K)}}function M(z,R){return X(z,Q(R))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l$=BV("bech32"),s3=BV("bech32m");var M4=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),z4={encode($){return TX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},t3=M4?z4:E$(b$(4),P$("0123456789abcdef"),L$(""),jV(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function R4($,q,J,G){Bq($);let Q=VY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L0(Y,"c"),L0(X,"dkLen"),L0(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=KX(q,"password"),W=KX(J,"salt"),M=new Uint8Array(X),z=Tq.create($,V),R=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:R}}function D4($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return R$(Q),J}function PX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=R4($,q,J,G),W,M=new Uint8Array(4),z=C8(M),R=new Uint8Array(U.outputLen);for(let K=1,N=0;N<Y;K++,N+=U.outputLen){let j=X.subarray(N,N+U.outputLen);z.setInt32(0,K,!1),(W=V._cloneInto(W)).update(M).digestInto(R),j.set(R.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(W).update(R).digestInto(R);for(let A=0;A<j.length;A++)j[A]^=R[A]}}return D4(U,V,X,W,R)}function SV($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],R=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],u=$[q++]^J[G++],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),Z^=N0(l+F|0,9),L^=N0(Z+l|0,13),F^=N0(L+Z|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(P+I|0,7),k^=N0(O+P|0,9),I^=N0(k+O|0,13),P^=N0(I+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),I^=N0(v+l|0,7),C^=N0(I+v|0,9),l^=N0(C+I|0,13),v^=N0(l+C|0,18),g^=N0(P+S|0,7),Z^=N0(g+P|0,9),S^=N0(Z+g|0,13),P^=N0(S+Z|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+m|0,Q[Y++]=V+k|0,Q[Y++]=W+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=R+I|0,Q[Y++]=K+C|0,Q[Y++]=N+Z|0,Q[Y++]=j+S|0,Q[Y++]=w+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=f+O|0,Q[Y++]=u+x|0}function LX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(SV(J,X,$,q,J,Y),U>0)X+=16;SV(J,Y,$,q+=16,J,X)}}function H4($,q,J){let G=VY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(L0(Q,"N"),L0(Y,"r"),L0(X,"p"),L0(U,"dkLen"),L0(V,"asyncTick"),L0(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,R=z/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(K-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let j=PX(r0,$,q,{c:1,dkLen:z*X}),w=XY(j),A=XY(new Uint8Array(z*Q)),T=XY(new Uint8Array(z)),_=()=>{};if(M){let f=2*Q*X,u=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===f))M(F/f)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:R,V:A,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:V}}function O4($,q,J,G,Q){let Y=PX(r0,$,J,{c:1,dkLen:q});return R$(J,G,Q),Y}function TV($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:R}=H4($,q,J);zX(W);for(let K=0;K<Y;K++){let N=U*K;for(let j=0;j<U;j++)V[j]=W[N+j];for(let j=0,w=0;j<G-1;j++)LX(V,w,V,w+=U,Q),R();LX(V,(G-1)*U,W,N,Q),R();for(let j=0;j<G;j++){let w=(W[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=W[N+A]^V[w*U+A];LX(z,0,W,N,Q),R()}}return zX(W),O4($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function N4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function jY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=N4($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function FX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function CV($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!E8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function j4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),w4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var A4=($)=>{for(let q=0;q<$.length;q++)$[q]=w4($[q]);return $},Eq=_J?($)=>$:A4;function IV($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function EV($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function PV($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var LV=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b0(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b0(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,b0(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b0(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function pG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!E8(q))throw Error("invalid output, must be aligned");return q}function FV($,q,J){I8($),I8(q),jY(J);let G=new Uint8Array(16),Q=j4(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function E8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b0($))}var _V=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),Z4=(()=>Eq(Qq(_V("expand 16-byte k"))))(),B4=(()=>Eq(Qq(_V("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var lG=64,S4=16,gX=(()=>4294967295)(),gV=Uint32Array.of();function T4($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(lG),M=Qq(W),z=_J&&E8(Q)&&E8(Y),R=z?Qq(Q):gV,K=z?Qq(Y):gV;if(!_J){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Eq(M),X>=gX)throw Error("arx: counter overflow");let j=Math.min(lG,V-N);for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=gX)throw Error("arx: counter overflow");let j=Math.min(lG,V-N);if(z&&j===lG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<S4;A++)T=w+A,K[T]=R[T]^M[A];N+=lG;continue}for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}}function vV($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=IV({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),jY(Y),jY(J),(U,V,W,M,z=0)=>{b0(U,void 0,"key"),b0(V,void 0,"nonce"),b0(W,void 0,"data");let R=W.length;if(M=pG(R,M,!1),I8(z),z<0||z>=gX)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=P8(U)),w=B4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=Z4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!E8(V))K.push(V=P8(V));let A=Qq(j);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=V.subarray(0,16);if(_J)G(w,A,Qq(f),A);else{let u=Eq(Uint32Array.from(w));G(u,A,Qq(f),A),r$(u),Eq(A)}V=V.subarray(16)}else if(!_J)Eq(A);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(V,Y?0:12-V.length),V=f,K.push(V)}let _=Eq(Qq(V));try{return T4($,w,A,_,W,M,z,X),M}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class bV{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),Y=d0($,8),X=d0($,10),U=d0($,12),V=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=d0($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],R=Y[6],K=Y[7],N=Y[8],j=Y[9],w=d0($,q+0),A=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),u=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),Z=Q[6]+((f>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*X+y*(5*j)+l*(5*N)+v*(5*K)+I*(5*R);L=b>>>13,b&=8191,b+=C*(5*z)+Z*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*X+l*(5*j)+v*(5*N)+I*(5*K);L=O>>>13,O&=8191,O+=C*(5*R)+Z*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let x=L+k*V+y*U+l*X+v*(5*j)+I*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+Z*(5*R)+S*(5*z)+P*(5*M)+g*(5*W),L+=x>>>13,x&=8191;let d=L+k*W+y*V+l*U+v*X+I*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+Z*(5*K)+S*(5*R)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+k*M+y*W+l*V+v*U+I*X;L=B>>>13,B&=8191,B+=C*(5*j)+Z*(5*N)+S*(5*K)+P*(5*R)+g*(5*z),L+=B>>>13,B&=8191;let a=L+k*z+y*M+l*W+v*V+I*U;L=a>>>13,a&=8191,a+=C*X+Z*(5*j)+S*(5*N)+P*(5*K)+g*(5*R),L+=a>>>13,a&=8191;let q0=L+k*R+y*z+l*M+v*W+I*V;L=q0>>>13,q0&=8191,q0+=C*U+Z*X+S*(5*j)+P*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let Y0=L+k*K+y*R+l*z+v*M+I*W;L=Y0>>>13,Y0&=8191,Y0+=C*V+Z*U+S*X+P*(5*j)+g*(5*N),L+=Y0>>>13,Y0&=8191;let G0=L+k*N+y*K+l*R+v*z+I*M;L=G0>>>13,G0&=8191,G0+=C*W+Z*V+S*U+P*X+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*R+I*z;L=t>>>13,t&=8191,t+=C*M+Z*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=Y0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r$(J)}update($){FX(this),b0($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){FX(this),CV($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var yV=PV(32,($)=>new bV($));function C4($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],R=q[2],K=q[3],N=q[4],j=q[5],w=q[6],A=q[7],T=Q,_=J[0],f=J[1],u=J[2],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=j0(L^F,16),Z=Z+L|0,l=j0(l^Z,12),F=F+l|0,L=j0(L^F,8),Z=Z+L|0,l=j0(l^Z,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+I|0,O=j0(O^k,16),P=P+O|0,I=j0(I^P,12),k=k+I|0,O=j0(O^k,8),P=P+O|0,I=j0(I^P,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),P=P+x|0,v=j0(v^P,12),F=F+v|0,x=j0(x^F,8),P=P+x|0,v=j0(v^P,7),m=m+I|0,L=j0(L^m,16),g=g+L|0,I=j0(I^g,12),m=m+I|0,L=j0(L^m,8),g=g+L|0,I=j0(I^g,7),k=k+C|0,b=j0(b^k,16),Z=Z+b|0,C=j0(C^Z,12),k=k+C|0,b=j0(b^k,8),Z=Z+b|0,C=j0(C^Z,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+m|0,G[d++]=V+k|0,G[d++]=W+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=R+I|0,G[d++]=K+C|0,G[d++]=N+Z|0,G[d++]=j+S|0,G[d++]=w+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=u+x|0}var I4=vV(C4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var E4=new Uint8Array(16),kV=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(E4.subarray(J))},P4=new Uint8Array(32);function fV($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let Y=$(q,J,P4),X=FV(G.length,Q?Q.length:0,!0),U=yV.create(Y);if(Q)kV(U,Q);kV(U,G),U.update(X);let V=U.digest();return r$(Y,X),V}var L4=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=pG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=fV($,q,J,V,G);return X.set(W,U),r$(W),X},decrypt(Y,X){X=pG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=fV($,q,J,U,G);if(!EV(V,W))throw r$(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r$(W),X}}},sq=LV({blockSize:64,nonceLength:12,tagLength:16},L4(I4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Lq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function wY($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function AY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function ZY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var F4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function g4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function _4($){for(let q=0;q<$.length;q++)$[q]=g4($[q]);return $}var _X=F4?($)=>$:_4,mV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),v4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),mV)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=v4[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function xV($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(mV)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=xV($.charCodeAt(Y)),U=xV($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bX=BigInt(0),vX=BigInt(1);function rG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function hV($){if(typeof $==="bigint"){if(!BY($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function dG($){let q=hV($).toString(16);return q.length&1?"0"+q:q}function uV($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?bX:BigInt("0x"+$)}function $J($){return uV(vJ($))}function qJ($){return uV(vJ(SY(Q0($)).reverse()))}function g8($,q){m0(q),$=hV($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function iG($,q){return g8($,q).reverse()}function SY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var BY=($)=>typeof $==="bigint"&&bX<=$;function b4($,q,J){return BY($)&&BY(q)&&BY(J)&&q<=$&&$<J}function cG($,q,J,G){if(!b4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function yX($){let q;for(q=0;$>bX;$>>=vX,q+=1);return q}var nG=($)=>(vX<<BigInt($))-vX;function pV($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,g0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return g0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while(!(T=A(N())))K();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function kX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),dV=BigInt(3),iV=BigInt(4),cV=BigInt(5),y4=BigInt(7),nV=BigInt(8),k4=BigInt(9),oV=BigInt(16);function D$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function lV($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=D$($,q),G=q,Q=H$,Y=q$,X=q$,U=H$;while(J!==H$){let W=G/J,M=G%J,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==q$)throw Error("invert: does not exist");return D$(Q,q)}function fX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function aV($,q){let J=($.ORDER+q$)/iV,G=$.pow(q,J);return fX($,G,q),G}function f4($,q){let J=($.ORDER-cV)/nV,G=$.mul(q,kJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,kJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return fX($,U,q),U}function x4($){let q=TY($),J=sV($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+y4)/oV;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),R=U.mul(W,Y),K=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,K),M=U.cmov(R,z,N);let j=U.eql(U.sqr(M),V),w=U.cmov(W,M,j);return fX(U,w,V),w}}function sV($){if($<dV)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=TY($);while(rV(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return aV;let Y=Q.pow(G,q),X=(q+q$)/kJ;return function(V,W){if(V.is0(W))return W;if(rV(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),R=V.pow(W,q),K=V.pow(W,X);while(!V.eql(R,V.ONE)){if(V.is0(R))return V.ZERO;let N=1,j=V.sqr(R);while(!V.eql(j,V.ONE))if(N++,j=V.sqr(j),N===M)throw Error("Cannot find square root");let w=q$<<BigInt(M-N-1),A=V.pow(z,w);M=N,z=V.sqr(A),R=V.mul(R,z),K=V.mul(K,A)}return K}}function m4($){if($%iV===dV)return aV;if($%nV===cV)return f4;if($%oV===k4)return x4($);return sV($)}var h4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function xX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=h4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function u4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function oG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function rV($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function p4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class tV{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=p4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return D$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D$($*$,this.ORDER)}add($,q){return D$($+q,this.ORDER)}sub($,q){return D$($-q,this.ORDER)}mul($,q){return D$($*q,this.ORDER)}pow($,q){return u4(this,$,q)}div($,q){return D$($*lV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return lV($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=m4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?iG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return oG(this,$)}cmov($,q,J){return J?q:$}}function TY($,q={}){return new tV($,q)}function eV($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function mX($){let q=eV($);return q+Math.ceil(q/2)}function $W($,q,J=!1){Q0($);let G=$.length,Q=eV(q),Y=mX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D$(X,q-q$)+q$;return J?iG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function aG($,q){let J=q.negate();return $?J:q}function lX($,q){let J=oG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function QW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function hX($,q){QW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=nG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function qW($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=fJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var uX=new WeakMap,YW=new WeakMap;function pX($){return YW.get($)||1}function JW($){if($!==_8)throw Error("invalid wNAF")}class rX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=hX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=hX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=qW(J,X,Y);if(J=U,W)Q=Q.add(aG(z,q[R]));else G=G.add(aG(M,q[V]))}return JW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=hX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=qW(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return JW(J),G}getPrecomputes($,q,J){let G=uX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);uX.set(q,G)}}return G}cached($,q,J){let G=pX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=pX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){QW(q,this.bits),YW.set($,q),uX.delete($)}hasCache($){return pX($)!==1}}function XW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&fJ)Y=Y.add(Q);if(G&fJ)X=X.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:Y,p2:X}}function GW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return xX(q),q}else return TY($,{isLE:J})}function UW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>_8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=GW(q.p,J.Fp,G),Y=GW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function CY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sG=BigInt(0),v8=BigInt(1),IY=BigInt(2);function l4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function VW($){let q=l4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||tq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?IY**BigInt(254):IY**BigInt(447),N=U?BigInt(8)*IY**BigInt(251)-v8:BigInt(4)*IY**BigInt(445)-v8,j=K+N+v8,w=(Z)=>D$(Z,J),A=T(z);function T(Z){return iG(w(Z),M)}function _(Z){let S=SY(Q0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(Z){return qJ(Q(SY(Q0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===sG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){cG("u",Z,sG,J),cG("scalar",S,K,j);let P=S,g=Z,L=v8,b=sG,O=Z,x=v8,d=sG;for(let a=BigInt(W-1);a>=sG;a--){let q0=P>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=V(M))=>{return Q0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze({keygen:CY(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}class dX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z$(G)}update($){return Lq(this),this.iHash.update($),this}digestInto($){Lq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new dX($,q).update(J).digest();b8.create=($,q)=>new dX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WW=($,q)=>($+($>=0?q:-q)/zW)/q;function r4($,q,J){let[[G,Q],[Y,X]]=q,U=WW(X*$,J),V=WW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Fq,R=M<Fq;if(z)W=-W;if(R)M=-M;let K=nG(Math.ceil(yX(J)/2))+y8;if(W<Fq||W>=K||M<Fq||M>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:R,k2:M}}function cX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function iX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(rG(J.lowS,"lowS"),rG(J.prehash,"prehash"),J.format!==void 0)cX(J.format);return J}class MW extends Error{constructor($=""){super($)}}var GJ={Err:MW,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=dG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?dG(Q.length/2|128):"";return dG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Fq)throw new q("integer: negative integers are not allowed");let J=dG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Fq=BigInt(0),y8=BigInt(1),zW=BigInt(2),EY=BigInt(3),d4=BigInt(4);function nX($,q={}){let J=UW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=RW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,C,Z){let{x:S,y:P}=C.toAffine(),g=G.toBytes(S);if(rG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g0(KW(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(P))}function R(I){Q0(I,void 0,"Point");let{publicKey:C,publicKeyUncompressed:Z}=W,S=I.length,P=I[0],g=I.subarray(1);if(S===C&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let x=G.isOdd(O);if((P&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${Z}`)}let K=q.toBytes||z,N=q.fromBytes||R;function j(I){let C=G.sqr(I),Z=G.mul(C,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function w(I,C){let Z=G.sqr(C),S=j(I);return G.eql(Z,S)}if(!w(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,EY),d4),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,C,Z=!1){if(!G.isValid(C)||Z&&G.is0(C))throw Error(`bad point coordinate ${I}`);return C}function f(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!V||!V.basises)throw Error("no endo");return r4(I,V.basises,Q.ORDER)}let F=kX((I,C)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=kX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:C,y:Z}=I.toAffine();if(!G.isValid(C)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!w(C,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(I,C,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),C=aG(S,C),Z=aG(P,Z),C.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,C,Z){this.X=_("x",I),this.Y=_("y",C,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:C,y:Z}=I||{};if(!I||!G.isValid(C)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(Z))return y.ZERO;return new y(C,Z,G.ONE)}static fromBytes(I){let C=y.fromAffine(N(Q0(I,void 0,"point")));return C.assertValidity(),C}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,C=!0){if(v.createCache(this,I),!C)this.multiply(EY);return this}assertValidity(){m(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(C,L),G.mul(P,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:C}=Y,Z=G.mul(C,EY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(I,B),a=G.sub(x,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(P,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=Y.a,B=G.mul(Y.b,EY),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.mul(S,L),G0=G.add(C,Z),t=G.add(P,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(P,L);return t=G.mul(t,O0),O0=G.add(a,Y0),t=G.sub(t,O0),O0=G.add(Z,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,Y0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,Y0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),Y0=G.mul(d,Y0),t=G.mul(B,t),q0=G.add(q0,Y0),Y0=G.sub(a,Y0),Y0=G.mul(d,Y0),t=G.add(t,Y0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:C}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>lX(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:x,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),Z=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return lX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:C}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Fq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(C){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=XW(y,Z,P,L);return k(C.beta,b,O,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return rG(I,"isCompressed"),this.assertValidity(),K(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new rX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function KW($){return Uint8Array.of($?2:3)}function RW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function i4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(RW($.Fp,J),{seed:mX(J.ORDER)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K=G(Q.seed)){return $W(Q0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let A=Q0(K,void 0,"key").length;return A===j||A===w}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=CY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function oX($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K}=i4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*zW<Y.ORDER;function w(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){cX(S);let P=K.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q0(Z,g)}class f{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(Z));return new f(O,x)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=K.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new f(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new f(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(g0(KW((g&1)===0),b)),x=X.inv(L),d=F(Q0(Z,void 0,"msgHash")),B=X.create(-d*x),a=X.create(P*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(Z=N.format){if(cX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},m=nG(V);function k(Z){return cG("num < 2^"+V,Z,Fq,m),X.toBytes(Z)}function y(Z,S){return Q0(Z,void 0,"message"),S?Q0(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=iX(P,N);Z=y(Z,L);let O=F(Z),x=X.fromBytes(S);if(!X.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let Y0=b===!0?G(K.secretKey):b;d.push(Q0(Y0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(Y0){let G0=u(Y0);if(!X.isValidNot0(G0))return;let t=X.inv(G0),O0=$.BASE.multiply(G0).toAffine(),A0=X.create(O0.x);if(A0===Fq)return;let I0=X.create(t*X.create(a+A0*x));if(I0===Fq)return;let x0=(O0.x===A0?0:2)|Number(O0.y&y8),K$=I0;if(g&&w(I0))K$=X.neg(I0),x0^=1;return new f(A0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return pV(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:O}=iX(g,N);if(P=Q0(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let x=Z instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(Z,O);try{let x=f.fromBytes(Z,O),d=$.fromBytes(P);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),Y0=X.inv(a),G0=X.create(q0*Y0),t=X.create(B*Y0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return X.create(O0.x)===B}catch(x){return!1}}function C(Z,S,P={}){let{prehash:g}=iX(P,N);return S=y(S,g),f.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K,Point:$,sign:v,verify:I,recoverPublicKey:C,Signature:f,hash:q})}function DW($,q,J){return $&q^~$&J}function HW($,q,J){return $&q^$&J^q&J}class PY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=ZY(this.buffer)}update($){Lq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=ZY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Lq(this),wY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=ZY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var gq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),_q=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var LY=BigInt(4294967295),OW=BigInt(32);function c4($,q=!1){if(q)return{h:Number($&LY),l:Number($>>OW&LY)};return{h:Number($>>OW&LY)|0,l:Number($&LY)|0}}function FY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=c4($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var aX=($,q,J)=>$>>>J,sX=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,tG=($,q,J)=>$<<64-J|q>>>J-32,eG=($,q,J)=>$>>>J-32|q<<64-J;var NW=($,q,J)=>$<<J|q>>>32-J,jW=($,q,J)=>q<<J|$>>>32-J,wW=($,q,J)=>q<<J-32|$>>>64-J,AW=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var ZW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),BW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,SW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),TW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,CW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),IW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var o4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class tX extends PY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],R=QJ[M-2],K=d$(z,7)^d$(z,18)^z>>>3,N=d$(R,17)^d$(R,19)^R>>>10;QJ[M]=N+QJ[M-7]+K+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=d$(X,6)^d$(X,11)^d$(X,25),R=W+z+DW(X,U,V)+o4[M]+QJ[M]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+HW(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){Z$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z$(this.buffer)}}class EW extends tX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(32)}}class a4 extends tX{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(28)}}var PW=(()=>FY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),s4=(()=>PW[0])(),t4=(()=>PW[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class $Q extends PY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,f=XJ[T-15]|0,u=xJ(_,f,1)^xJ(_,f,8)^aX(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^sX(_,f,7),m=YJ[T-2]|0,k=XJ[T-2]|0,y=xJ(m,k,19)^tG(m,k,61)^aX(m,k,6),l=mJ(m,k,19)^eG(m,k,61)^sX(m,k,6),v=SW(F,l,XJ[T-7],XJ[T-16]),I=TW(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=xJ(M,z,14)^xJ(M,z,18)^tG(M,z,41),f=mJ(M,z,14)^mJ(M,z,18)^eG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=CW(A,f,F,t4[T],XJ[T]),k=IW(m,w,_,u,s4[T],YJ[T]),y=m|0,l=xJ(J,G,28)^tG(J,G,34)^tG(J,G,39),v=mJ(J,G,28)^eG(J,G,34)^eG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Yq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=ZW(y,v,C);J=BW(Z,k,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Yq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Yq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Yq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Yq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){Z$(YJ,XJ)}destroy(){Z$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class e4 extends $Q{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class LW extends $Q{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class $O extends $Q{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class qO extends $Q{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var gY=F8(()=>new EW,eq(1));var FW=F8(()=>new LW,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var JO=BigInt(1),gW=BigInt(2),GO=BigInt(3),QO=BigInt(5),eF=BigInt(8),_W=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function YO($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=_W,U=$*$%Y*$%Y,V=k$(U,gW,Y)*U%Y,W=k$(V,JO,Y)*$%Y,M=k$(W,QO,Y)*W%Y,z=k$(M,q,Y)*M%Y,R=k$(z,J,Y)*z%Y,K=k$(R,G,Y)*R%Y,N=k$(K,Q,Y)*K%Y,j=k$(N,Q,Y)*K%Y,w=k$(j,q,Y)*M%Y;return{pow_p_5_8:k$(w,gW,Y)*$%Y,b2:U}}function XO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var vW=(()=>{let $=_W;return VW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=YO(q);return D$(k$(J,GO,$)*G,$)},adjustScalarBytes:XO})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),VO=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var WO=nX(UO),eX=oX(WO,gY);var MO=nX(VO),bW=oX(MO,FW);function kW($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var $U=Uint8Array.of(0),yW=Uint8Array.of();function fW($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=yW;else Q0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)$U[0]=M+1,V.update(M===0?yW:W).update(J).update($U).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),Z$(W,$U),X.slice(0,G)}var zO=BigInt(0),qQ=BigInt(1),KO=BigInt(2),RO=BigInt(7),DO=BigInt(256),HO=BigInt(113),hW=[],uW=[],pW=[];for(let $=0,q=qQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],hW.push(2*(5*G+J)),uW.push(($+1)*($+2)/2%64);let Q=zO;for(let Y=0;Y<7;Y++)if(q=(q<<qQ^(q>>RO)*HO)%DO,q&KO)Q^=qQ<<(qQ<<BigInt(Y))-qQ;pW.push(Q)}var lW=FY(pW,!0),OO=lW[0],NO=lW[1],xW=($,q,J)=>J>32?wW($,q,J):NW($,q,J),mW=($,q,J)=>J>32?AW($,q,J):jW($,q,J);function jO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=xW(W,M,1)^J[U],R=mW(W,M,1)^J[U+1];for(let K=0;K<50;K+=10)$[X+K]^=z,$[X+K+1]^=R}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=uW[X],V=xW(Q,Y,U),W=mW(Q,Y,U),M=hW[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=OO[G],$[1]^=NO[G]}Z$(J)}class _Y{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=AY(this.state)}clone(){return this._cloneInto()}keccak(){_X(this.state32),jO(this.state32,this.rounds),_X(this.state32),this.posOut=0,this.pos=0}update($){Lq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Lq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(wY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new _Y(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var rW=($,q,J,G={})=>F8(()=>new _Y(q,$,J),G);var hJ=rW(6,136,32,eq(8));var dW=rW(6,72,64,eq(10));var iW=($,q,J,G={})=>F8((Q={})=>new _Y(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),cW=iW(31,168,16,eq(11)),Xq=iW(31,136,32,eq(12));function qU($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function oW($){return qU($),($&$-1)===0&&$!==0}function JU($,q){qU($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function aW($){return qU($),31-Math.clz32($)}function nW($){let q=$.length;if(q<2||!oW(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=aW(q);for(let G=0;G<q;G++){let Q=JU(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var GU=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=aW(J);if(!oW(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)nW(M);for(let z=0,R=1;z<V-X;z++){let K=Q?z+1+X:V-z,N=1<<K,j=N>>1,w=J>>K;for(let A=0;A<J;A+=N)for(let T=0,_=R++;T<j;T++){let f=Y?Q?J-_:_:T*w,u=A+T,F=A+T+j,m=G[f],k=M[F],y=M[u];if(W){let l=$.mul(k,m);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),m);else M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)nW(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function vY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function sW($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q0(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q0(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function bY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function QU($){return(1<<$)-1}var Dg=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var tW=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},W=(T,_=G)=>{let f=V(T,_)|0;return(f>_>>1?f-_|0:f)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let f=JU(_,X),u=BigInt(Y)**BigInt(f)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),R={add:(T,_)=>V((T|0)+(_|0))|0,sub:(T,_)=>V((T|0)-(_|0))|0,mul:(T,_)=>V((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=GU(R,{dit:!1,...K}),j=GU(R,{dit:!0,...K});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=V(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=QU(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let m=new Uint8Array(u);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&QU(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},wO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),y0(Y,G)}}},eW=wO(cW);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,vq=3329,AO=3303,ZO=17,{mod:QQ,nttZetas:BO,NTT:pJ,bitsCoder:SO}=tW({N:Q$,Q:vq,F:AO,ROOT_OF_UNITY:ZO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),YU={512:{N:Q$,Q:vq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:vq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:vq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},TO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+vq/2)/vq,decode:(J)=>J*vq+q>>>$}},JQ=($)=>SO($,TO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=QQ($[J]+q[J])}function CO($,q){for(let J=0;J<Q$;J++)$[J]=QQ($[J]-q[J])}function IO($,q,J,G,Q){let Y=QQ(q*G*Q+$*J),X=QQ($*G+q*J);return{c0:Y,c1:X}}function yY($,q){for(let J=0;J<Q$/2;J++){let G=BO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=IO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function $M($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<vq)q[J++]=Y;if(J<Q$&&X<vq)q[J++]=X}}return q}function GQ($,q,J,G){let Q=$(G*Q$/4,q,J),Y=new Uint16Array(Q$),X=AY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let R=X[V];for(let K=0;K<32;K++)if(M+=R&1,R>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=QQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var EO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=JQ(1),M=JQ(V),z=JQ(U),R=uJ("publicKey",bY(JQ(12),q),32),K=bY(JQ(12),q),N=uJ("ciphertext",bY(z,q),M),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:R.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let A=new Uint8Array(33);A.set(w),A[32]=q;let T=Q(A),[_,f]=j.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(GQ(J,f,y,Y)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(GQ(J,f,q+y,Y));for(let v=0;v<q;v++){let I=$M(m.get(v,y));lJ(l,yY(I,u[v]))}F.push(l)}m.clean();let k={publicKey:R.encode([F,_]),secretKey:K.encode(u)};return y0(_,f,u,F,A,T),k},encrypt:(w,A,T)=>{let[_,f]=R.decode(w),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(GQ(J,T,v,Y)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let I=GQ(J,T,q+v,X),C=new Uint16Array(Q$);for(let Z=0;Z<q;Z++){let S=$M(F.get(v,Z));lJ(C,yY(S,u[Z]))}lJ(I,pJ.decode(C)),k.push(I),lJ(m,yY(_[v],u[v])),y0(C)}F.clean();let y=GQ(J,T,2*q,X);lJ(y,pJ.decode(m));let l=W.decode(A);return lJ(l,y),y0(_,u,m,y),N.encode([k,l])},decrypt:(w,A)=>{let[T,_]=N.decode(w),f=K.decode(A),u=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(u,yY(f[F],pJ.encode(T[F])));return CO(_,pJ.decode(u)),y0(u,f,T),W.encode(_)}}};function XU($){let q=EO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q0(M,64,"seed");let{publicKey:z,secretKey:R}=q.keygen(M.subarray(0,32)),K=J(z),N=U.encode([R,z,K,M.subarray(32)]);return y0(R,K),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,R,K,N]=U.decode(M);return Uint8Array.from(R)},encapsulate:(M,z=Uq(32))=>{Q0(M,X.publicKey,"publicKey"),Q0(z,32,"message");let R=M.subarray(0,384*$.K),K=Y.encode(Y.decode(sW(R)));if(!vY(K,R))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(z).update(J(M)).digest(),j=q.encrypt(M,z,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q0(z,U.bytesLen,"secretKey"),Q0(M,X.cipherText,"cipherText");let R=U.bytesLen-96,K=R+32,N=J(z.subarray(R/2,K));if(!vY(N,z.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,A,T]=U.decode(z),_=q.decrypt(M,j),f=G.create().update(_).update(A).digest(),u=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=vY(M,F),k=Q.create({dkLen:32}).update(T).update(M).digest();return y0(_,F,!m?u:k),m?u:k}}}function PO($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var UU={HASH256:hJ,HASH512:dW,KDF:Xq,XOF:eW,PRF:PO},Cg=XU({...UU,...YU[512]}),YQ=XU({...UU,...YU[768]}),qM=XU({...UU,...YU[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function LO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q0(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function VU($,q=!1){let J=LO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y0(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function WU($){return(q,J)=>$(q,{dkLen:J})}function FO($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function Y(X){Q0(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,R)=>z.keygen(U[R])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return y0(U),y0(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function kY($,q,J,G,...Q){let Y=FO($,J,...Q),X=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),V=XQ(Q,"msg");if(q===void 0)q=V.bytesLen;return m0(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Uq(V.bytesLen)){let z=U.decode(W),R=V.decode(M),K=Q.map((A,T)=>A.encapsulate(z[T],R[T])),N=K.map((A)=>A.sharedSecret),j=K.map((A)=>A.cipherText),w={sharedSecret:G(z,j,N),cipherText:X.encode(j)};return y0(N,j),w},decapsulate(W,M){let z=X.decode(W),{publicKey:R,secretKey:K}=Y.expandDecapsulationKey(M),N=Q.map((j,w)=>j.decapsulate(z[w],K[w]));return G(R,z,N)}}}function JM($,q,J,G,Q){return y$(G),y$(Q),kY(32,32,WU(G),(Y,X,U)=>Q(g0(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var kg=JM("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YQ,VU(eX,!0),Xq,hJ),fg=JM("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",qM,VU(bW,!0),Xq,hJ);function gO($,q,J,G,Q){return y$(G),y$(Q),kY(32,32,WU(G),(Y,X,U)=>{let V=g0(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),W=32,M=g0(JJ("hybrid_prk"),V),z=kW(Q,M),R=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=fW(Q,z,R,32);return y0(z,R,M,V),K},q,J)}var GM=VU(vW),xg=gO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YQ,GM,Xq,gY),_O=(()=>kY(32,32,WU(Xq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),YQ,GM))();function vO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q0(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q0(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return y0(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function bO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=vO(J,Q,Y,G),U=64,V=U+G;return kY(32,32,(W)=>{Q0(W,32);let M=Xq(W,{dkLen:V}),z=M.subarray(0,U),R=M.subarray(U,V);return g0(z,R)},(W,M,z)=>hJ(g0(z[0],z[1],M[1],W[1],JJ($))),q,X)}var yO=(()=>bO("MLKEM768-P256",YQ,eX,128))();var MU=_O,QM=yO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z0=($,q,J)=>u0($,q,J),KU=L0,k8=UY,n0=(...$)=>RX(...$),f8=($)=>bG($),x8=MX,m8=($)=>Sq($),xY=BigInt(0),zU=BigInt(1);function bq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function mY($){if(typeof $==="bigint"){if(!fY($))throw RangeError("positive bigint expected, got "+$)}else KU($);return $}function Vq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function UQ($){let q=mY($).toString(16);return q.length&1?"0"+q:q}function YM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?xY:BigInt("0x"+$)}function rJ($){return YM(UY($))}function i$($){return YM(UY(UJ(u0($)).reverse()))}function hY($,q){if(L0(q),q===0)throw RangeError("zero length");$=mY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return bG(J.padStart(q*2,"0"))}function VQ($,q){return hY($,q).reverse()}function XM($,q){if($=Z0($),q=Z0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z0($))}function uY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var fY=($)=>typeof $==="bigint"&&xY<=$;function kO($,q,J){return fY($)&&fY(q)&&fY(J)&&q<=$&&$<J}function yq($,q,J,G){if(!kO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<xY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>xY;$>>=zU,q+=1);return q}var WQ=($)=>(zU<<BigInt($))-zU;function UM($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,n0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return n0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while((T=A(N()))===void 0)K();return z(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var RU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),E0=BigInt(1),dJ=BigInt(2),zM=BigInt(3),KM=BigInt(4),RM=BigInt(5),fO=BigInt(7),DM=BigInt(8),xO=BigInt(9),HM=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function VM($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,Y=E0,X=E0,U=o0;while(J!==o0){let W=G/J,M=G-J*W,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==E0)throw Error("invert: does not exist");return T0(Q,q)}function DU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function OM($,q){let J=$,G=(J.ORDER+E0)/KM,Q=J.pow(q,G);return DU(J,Q,q),Q}function mO($,q){let J=$,G=(J.ORDER-RM)/DM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),V=J.mul(X,J.sub(U,J.ONE));return DU(J,V,q),V}function hO($){let q=pY($),J=NM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+fO)/HM;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),R=W.mul(M,Q),K=W.mul(M,Y),N=W.eql(W.sqr(z),V),j=W.eql(W.sqr(R),V);M=W.cmov(M,z,N),z=W.cmov(K,R,j);let w=W.eql(W.sqr(z),V),A=W.cmov(M,z,w);return DU(W,A,V),A}}function NM($){if($<zM)throw Error("sqrt is not defined for small field");let q=$-E0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=pY($);while(WM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return OM;let Y=Q.pow(G,q),X=(q+E0)/dJ;return function(V,W){let M=V;if(M.is0(W))return W;if(WM(M,W)!==1)throw Error("Cannot find square root");let z=J,R=M.mul(M.ONE,Y),K=M.pow(W,q),N=M.pow(W,X);while(!M.eql(K,M.ONE)){if(M.is0(K))return M.ZERO;let j=1,w=M.sqr(K);while(!M.eql(w,M.ONE))if(j++,w=M.sqr(w),j===z)throw Error("Cannot find square root");let A=E0<<BigInt(z-j-1),T=M.pow(R,A);z=j,R=M.sqr(T),K=M.mul(K,R),N=M.mul(N,T)}return N}}function uO($){if($%KM===zM)return OM;if($%DM===RM)return mO;if($%HM===xO)return hO($);return NM($)}var kq=($,q)=>(T0($,q)&E0)===E0,pO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function HU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=pO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Vq($.BYTES,"BYTES"),Vq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=E0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function lO($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===E0)return q;let Q=G.ONE,Y=q;while(J>o0){if(J&E0)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=E0}return Q}function MQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function WM($,q){let J=$,G=(J.ORDER-E0)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function rO($,q){if(q!==void 0)KU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var MM=new WeakMap;class OU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=E0;_lengths;_mod;constructor($,q={}){if($<=E0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=rO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&E0)===E0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return lO(this,$,q)}div($,q){return T0($*VM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return VM($,this.ORDER)}sqrt($){let q=MM.get(this);if(!q)MM.set(this,q=uO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?VQ($,this.BYTES):hY($,this.BYTES)}fromBytes($,q=!1){Z0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(X)U=T0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return MQ(this,$)}cmov($,q,J){return bq(J,"condition"),J?q:$}}Object.freeze(OU.prototype);function pY($,q={}){return new OU($,q)}function jM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=E0)throw Error("field order must be greater than 1");let q=h8($-E0);return Math.ceil(q/8)}function NU($){let q=jM($);return q+Math.ceil(q/2)}function wM($,q,J=!1){Z0($);let G=$.length,Q=jM(q),Y=Math.max(NU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i$($):rJ($),U=T0(X,q-E0)+E0;return J?VQ(U,Q):hY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=MQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function SM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function jU($,q){SM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=WQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function AM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=iJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var wU=new WeakMap,TM=new WeakMap;function AU($){return TM.get($)||1}function ZM($){if($!==u8)throw Error("invalid wNAF")}class KQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=jU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=jU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=AM(J,X,Y);if(J=U,W)Q=Q.add(zQ(z,q[R]));else G=G.add(zQ(M,q[V]))}return ZM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=jU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=AM(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return ZM(J),G}getPrecomputes($,q,J){let G=wU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);wU.set(q,G)}}return G}cached($,q,J){let G=AU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=AU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){SM(q,this.bits),TM.set($,q),wU.delete($)}hasCache($){return AU($)!==1}}function CM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function BM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return HU(q),q}else return pY($,{isLE:J})}function lY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>u8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=BM(q.p,J.Fp,G),Y=BM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function RQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Vq($),Vq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function dO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function iO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?uY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function ZU($,q,J,G){if(Z0($),Vq(J),q=iO(q),q.length>255)q=G(n0(uY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,DQ(q.length,1)),V=new Uint8Array(Y),W=DQ(J,2),M=Array(X),z=G(n0(V,$,W,DQ(0,1),U));M[0]=G(n0(z,DQ(1,1),U));for(let K=1;K<X;K++){let N=[dO(z,M[K-1]),DQ(K+1,1),U];M[K]=G(n0(...N))}return n0(...M).slice(0,J)}var IM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var EM=($,q)=>($+($>=0?q:-q)/LM)/q;function cO($,q,J){yq("scalar",$,Wq,J);let[[G,Q],[Y,X]]=q,U=EM(X*$,J),V=EM(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Wq,R=M<Wq;if(z)W=-W;if(R)M=-M;let K=WQ(Math.ceil(h8(J)/2))+VJ;if(W<Wq||W>=K||M<Wq||M>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:R,k2:M}}function SU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function BU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(bq(J.lowS,"lowS"),bq(J.prehash,"prehash"),J.format!==void 0)SU(J.format);return J}class PM extends Error{constructor($=""){super($)}}var c$={Err:PM,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Vq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=UQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?UQ(Q.length/2|128):"";return UQ($)+Y+Q+q},decode($,q){let{Err:J}=c$;q=Z0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c$;if(mY($),$<Wq)throw new q("integer: negative integers are not allowed");let J=UQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=Z0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Wq=BigInt(0),VJ=BigInt(1),LM=BigInt(2),rY=BigInt(3),nO=BigInt(4);function FM($,q={}){let J=lY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=_M(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function R(v,I,C){if(W&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(bq(C,"isCompressed"),C){z();let g=!G.isOdd(S);return n0(gM(g),P)}else return n0(Uint8Array.of(4),P,G.toBytes(S))}function K(v){Z0(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:C}=M,Z=v.length,S=v[0],P=v.subarray(1);if(W&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===C&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${C}`)}let N=q.toBytes===void 0?R:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let I=G.sqr(v),C=G.mul(I,v);return G.add(G.add(C,G.mul(v,Y.a)),Y.b)}function A(v,I){let C=G.sqr(I),Z=w(v);return G.eql(C,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,rY),nO),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,I,C=!1){if(!G.isValid(I)||C&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!V||!V.basises)throw Error("no endo");return cO(v,V.basises,Q.ORDER)}function m(v,I,C,Z,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),I=zQ(Z,I),C=zQ(S,C),I.add(C)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,C){this.X=f("x",v),this.Y=f("y",I,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:C}=v||{};if(!v||!G.isValid(I)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(C))return k.ZERO;return new k(I,C,G.ONE)}static fromBytes(v){let I=k.fromAffine(j(Z0(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(rY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:C}=v.toAffine();if(!G.isValid(I)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!A(I,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(C,g),G.mul(P,Z));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,C=G.mul(I,rY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),x=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=Y.a,d=G.mul(Y.b,rY),B=G.mul(I,S),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.add(I,C),G0=G.add(S,P);Y0=G.mul(Y0,G0),G0=G.add(B,a),Y0=G.sub(Y0,G0),G0=G.add(I,Z);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(Y0,L),L=G.sub(L,B),B=G.mul(Y0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,Z,S=(P)=>l.cached(this,P,(g)=>cJ(k,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);Z=x.add(B),C=m(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);C=P,Z=g}return cJ(k,[C,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,C=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Wq||C.is0())return k.ZERO;if(Z===VJ)return C;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=CM(k,C,P,L);return m(I.beta,b,O,S,g)}else return l.unsafe(C,Z)}toAffine(v){let I=this,C=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===VJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===VJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===VJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return bq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new KQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function gM($){return Uint8Array.of($?2:3)}function _M($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function oO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(_M($.Fp,J),{seed:Math.max(NU(J.ORDER),16)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,wM(Z0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,A=J._lengths;if(!x8(K))return;let T=Z0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!A?.includes(T);if(_&&f)return;return _}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=RQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function vM($,q,J={}){let G=q;Bq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Tq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N}=oO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=V*LM+VJ<X.ORDER;function A(S){let P=V>>VJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,P){SU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z0(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=j.format){f(S,P);let g;if(P==="der"){let{r:x,s:d}=c$.toSig(Z0(S));return new u(x,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(f8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),x=$.fromBytes(n0(gM((L&1)===0),O)),d=U.inv(b),B=m(Z0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),Y0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(Y0.is0())throw Error("invalid recovery: point at infinify");return Y0.assertValidity(),Y0}hasHighS(){return A(this.s)}toBytes(S=j.format){if(SU(S),S==="der")return f8(c$.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,k=WQ(W);function y(S){return yq("num < 2^"+W,S,Wq,k),U.toBytes(S)}function l(S,P){return Z0(S,void 0,"message"),P?Z0(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=BU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(Z0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function Y0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),A0=$.BASE.multiply(t).toAffine(),I0=U.create(A0.x);if(I0===Wq)return;let x0=U.create(O0*U.create(q0+I0*d));if(x0===Wq)return;let K$=(A0.x===I0?0:2)|Number(A0.y&VJ),Jq=x0;if(L&&A(x0))Jq=U.neg(x0),K$^=1;return new u(I0,Jq,w?void 0:K$)}return{seed:a,k2sig:Y0}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return UM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function C(S,P,g,L={}){let{lowS:b,prehash:O,format:x}=BU(L,j);if(g=Z0(g,void 0,"publicKey"),P=l(P,O),!x8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=u.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,Y0=m(P),G0=U.inv(q0),t=U.create(Y0*G0),O0=U.create(a*G0),A0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(A0.is0())return!1;return U.create(A0.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=BU(g,j);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N,Point:$,sign:I,verify:C,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var sO=FM(aO),p8=vM(sO,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WJ=BigInt(0),B$=BigInt(1),TU=BigInt(2),tO=BigInt(8);function eO($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function bM($,q={}){let J=q,G=lY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;f$(J,{},{uvRatio:"function"});let V=TU<<BigInt(Y.BYTES*8)-B$,W=(j)=>Q.create(j),M=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(A){return{isValid:!1,value:WJ}}}:J.uvRatio;if(!eO(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(j,w,A=!1){let T=A?B$:WJ;return yq("coordinate "+j,w,T,V),w}function R(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(X.Gx,X.Gy,B$,W(X.Gx*X.Gy));static ZERO=new K(WJ,B$,B$,WJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(j,w,A,T){this.X=z("x",j),this.Y=z("y",w),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:A}=j||{};return z("x",w),z("y",A),new K(w,A,B$,W(w*A))}static fromBytes(j,w=!1){let A=Q.BYTES,{a:T,d:_}=X;j=UJ(Z0(j,A,"point")),bq(w,"zip215");let f=UJ(j),u=j[A-1];f[A-1]=u&-129;let F=i$(f),m=w?V:Q.ORDER;yq("point.y",F,WJ,m);let k=W(F*F),y=W(k-B$),l=W(_*k-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(I&B$)===B$,Z=(u&128)!==0;if(!w&&I===WJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==C)I=W(-I);return K.fromAffine({x:I,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(TU);return this}assertValidity(){let j=this,{a:w,d:A}=X;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:u}=j,F=W(T*T),m=W(_*_),k=W(f*f),y=W(k*k),l=W(F*w),v=W(k*W(l+m)),I=W(y+W(A*W(F*m)));if(v!==I)throw Error("bad point: equation left != right (1)");let C=W(T*_),Z=W(f*u);if(C!==Z)throw Error("bad point: equation left != right (2)")}equals(j){R(j);let{X:w,Y:A,Z:T}=this,{X:_,Y:f,Z:u}=j,F=W(w*u),m=W(_*T),k=W(A*u),y=W(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:j}=X,{X:w,Y:A,Z:T}=this,_=W(w*w),f=W(A*A),u=W(TU*W(T*T)),F=W(j*_),m=w+A,k=W(W(m*m)-_-f),y=F+f,l=y-u,v=F-f,I=W(k*l),C=W(y*v),Z=W(k*v),S=W(l*y);return new K(I,C,S,Z)}add(j){R(j);let{a:w,d:A}=X,{X:T,Y:_,Z:f,T:u}=this,{X:F,Y:m,Z:k,T:y}=j,l=W(T*F),v=W(_*m),I=W(u*A*y),C=W(f*k),Z=W((T+_)*(F+m)-l-v),S=C-I,P=C+I,g=W(v-w*l),L=W(Z*S),b=W(P*g),O=W(Z*g),x=W(S*P);return new K(L,b,x,O)}subtract(j){return R(j),this.add(j.negate())}multiply(j){if(!Y.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:A}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,A])[0]}multiplyUnsafe(j){if(!Y.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===WJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(j){let w=this,A=j,{X:T,Y:_,Z:f}=w,u=w.is0();if(A==null)A=u?tO:Q.inv(f);let F=W(T*A),m=W(_*A),k=Q.mul(f,A);if(u)return{x:WJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),A=Q.toBytes(w);return A[A.length-1]|=j&B$?128:0,A}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new KQ(K,Y.BITS);if(Y.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class CU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){RU()}static fromHex($){RU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HQ=BigInt(0),l8=BigInt(1),dY=BigInt(2);function $N($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function yM($){let q=$N($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?m8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?dY**BigInt(254):dY**BigInt(447),N=U?BigInt(8)*dY**BigInt(251)-l8:BigInt(4)*dY**BigInt(445)-l8,j=K+N+l8,w=(Z)=>T0(Z,J),A=T(z);function T(Z){return VQ(w(Z),M)}function _(Z){let S=UJ(Z0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(Z){return i$(Q(UJ(Z0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===HQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){yq("u",Z,HQ,J),yq("scalar",S,K,j);let P=S,g=Z,L=l8,b=HQ,O=Z,x=l8,d=HQ;for(let a=BigInt(W-1);a>=HQ;a--){let q0=P>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?V(M):Z,Z0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:RQ(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qN=BigInt(0),fq=BigInt(1),kM=BigInt(2),JN=BigInt(3),GN=BigInt(5),QN=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),LU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:QN,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function mM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,V=x$(U,kM,Y)*U%Y,W=x$(V,fq,Y)*$%Y,M=x$(W,GN,Y)*W%Y,z=x$(M,q,Y)*M%Y,R=x$(z,J,Y)*z%Y,K=x$(R,G,Y)*R%Y,N=x$(K,Q,Y)*K%Y,j=x$(N,Q,Y)*K%Y,w=x$(j,q,Y)*M%Y;return{pow_p_5_8:x$(w,kM,Y)*$%Y,b2:U}}function YN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var IU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function FU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),Y=mM($*Q).pow_p_5_8,X=T0($*G*Y,J),U=T0(q*X*X,J),V=X,W=T0(X*IU,J),M=U===$,z=U===T0(-$,J),R=U===T0(-$*IU,J);if(M)X=V;if(z||R)X=W;if(kq(X,J))X=T0(-X,J);return{isValid:M||z,value:X}}var nJ=bM(LU,{uvRatio:FU}),MJ=(()=>nJ.Fp)(),hM=(()=>nJ.Fn)();var iY=(()=>{let $=oJ;return yM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=mM(q);return T0(x$(J,JN,$)*G,$)},adjustScalarBytes:YN})})();var EU=IU,XN=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),UN=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),VN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),WN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),fM=($)=>FU(fq,$),MN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),PU=($)=>MJ.create(i$($)&MN);function xM($){let{d:q}=LU,J=oJ,G=(A)=>MJ.create(A),Q=G(EU*$*$),Y=G((Q+fq)*VN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=FU(Y,U),M=G(W*$);if(!kq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-fq)*WN-U),R=W*W,K=G((W+W)*U),N=G(z*XN),j=G(fq-R),w=G(fq+R);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends CU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>hM)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=LU,G=oJ,Q=(_)=>MJ.create(_),Y=PU($);if(!XM(MJ.toBytes(Y),$)||kq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(fq+q*X),V=Q(fq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:R,value:K}=fM(Q(z*M)),N=Q(K*V),j=Q(K*N*z),w=Q((Y+Y)*N);if(kq(w,G))w=Q(-w);let A=Q(U*j),T=Q(w*A);if(!R||kq(T,G)||A===qN)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,A,fq,T))}static fromHex($){return O$.fromBytes(bG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(j)=>MJ.create(j),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=fM(Y(X*V)),M=Y(W*X),z=Y(W*U),R=Y(M*z*G),K;if(kq(G*R,Q)){let j=Y(q*EU),w=Y($*EU);$=j,q=w,K=Y(M*UN)}else K=z;if(kq($*R,Q))q=Y(-q);let N=Y((J-q)*K);if(kq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>MJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var zN=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=ZU($,J,64,zY);return zN.deriveToCurve(G)},hashToScalar($,q={DST:IM}){let J=ZU($,q.DST,64,zY);return hM.create(i$(J))},deriveToCurve($){u0($,64);let q=PU($.subarray(0,32)),J=xM(q),G=PU($.subarray(32,64)),Q=xM(G);return new O$(J.add(Q))}});var uM=!1,KN=!1;async function pM($,q){if(KN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function _U($,q){return await pM(async()=>{let J=gU($)?$:await DN($),G=await crypto.subtle.importKey("raw",HN(q),{name:"X25519"},uM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(gU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMult($,q)})}async function vU($){return await pM(async()=>{return _U($,iY.GuBytes)},()=>{if(gU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMultBase($)})}var RN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function DN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...RN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},uM,["deriveBits"])}function gU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function HN($){return $}class lM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),NN(OQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=OQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:OQ(this.transcript)}}}function NN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function OQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function cY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function rM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function dM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class xq{args;body;constructor($,q){this.args=$,this.body=q}}function bU($){let q=[];q.push(`age-encryption.org/v1
|
|
57
|
+
`).map((q)=>q.trim()).join(" ")};BD.O=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts)}});var ID=X0((Cm,p7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)p7.exports=OD();else p7.exports=CD()});var T1=X0((tp,S1)=>{var p9=Object.prototype.hasOwnProperty,B1=Object.prototype.toString,O1=Object.defineProperty,N1=Object.getOwnPropertyDescriptor,j1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return B1.call(q)==="[object Array]"},w1=function(q){if(!q||B1.call(q)!=="[object Object]")return!1;var J=p9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&p9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||p9.call(q,Q)},A1=function(q,J){if(O1&&J.name==="__proto__")O1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Z1=function(q,J){if(J==="__proto__"){if(!p9.call(q,J))return;else if(N1)return N1(q,J).value}return q[J]};S1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Z1(U,J),Q=Z1(q,J),U!==Q){if(M&&Q&&(w1(Q)||(Y=j1(Q)))){if(Y)Y=!1,X=G&&j1(G)?G:[];else X=G&&w1(G)?G:{};A1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")A1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as iH}from"util";var cH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function VX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function WX($,q){let J=$[q];return typeof J==="string"?J:void 0}function o5($){let{values:q,positionals:J}=iH({args:$,options:cH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:VX(q,"help"),version:VX(q,"version"),dryRun:VX(q,"dry-run"),pushTo:WX(q,"push-to"),cohort:WX(q,"cohort"),anchorId:WX(q,"anchor-id")}}}var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.44",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as LN,mkdirSync as FN,readFileSync as iU,writeFileSync as cU}from"fs";import{dirname as gN,join as sM}from"path";function MX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L0($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u0($,q,J=""){let G=MX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Bq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L0($.outputLen),L0($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){u0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function R$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function C8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u$($,q){return $<<32-q|$>>>q}function N0($,q){return $<<q|$>>>32-q>>>0}var oH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function aH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function sH($){for(let q=0;q<$.length;q++)$[q]=aH($[q]);return $}var zX=oH?($)=>$:sH,s5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tH=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function UY($){if(u0($),s5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=tH[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function a5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function bG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(s5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=a5($.charCodeAt(Y)),U=a5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function eH($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function KX($,q=""){if(typeof $==="string")return eH($);return u0($,void 0,q)}function RX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function VY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function DX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Sq($=32){L0($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var HX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class OX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Bq($),u0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),R$(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),YY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Tq=(()=>{let $=(q,J,G)=>new OX(q,J).update(G).digest();return $.create=(q,J)=>new OX(q,J),$})();function yG($,q,J){if(Bq($),J===void 0)J=new Uint8Array($.outputLen);return Tq($,J,q)}var NX=Uint8Array.of(0),t5=Uint8Array.of();function jX($,q,J,G=32){Bq($),L0(G,"length"),u0(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=t5;else u0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Tq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)NX[0]=M+1,V.update(M===0?t5:W).update(J).update(NX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),R$(W,NX),X.slice(0,G)}var kG=($,q,J,G,Q)=>jX($,yG($,q,J),G,Q);function e5($,q,J){return $&q^~$&J}function $V($,q,J){return $&q^$&J^q&J}class WY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=C8(this.buffer)}update($){T8(this),u0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=C8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,R$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=C8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Cq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Iq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var MY=BigInt(4294967295),qV=BigInt(32);function $4($,q=!1){if(q)return{h:Number($&MY),l:Number($>>qV&MY)};return{h:Number($>>qV&MY)|0,l:Number($&MY)|0}}function JV($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=$4($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var wX=($,q,J)=>$>>>J,AX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,fG=($,q,J)=>$<<64-J|q>>>J-32,xG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var GV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),QV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,YV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),XV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,UV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),VV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var J4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class ZX extends WY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],R=cq[M-2],K=u$(z,7)^u$(z,18)^z>>>3,N=u$(R,17)^u$(R,19)^R>>>10;cq[M]=N+cq[M-7]+K+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=u$(X,6)^u$(X,11)^u$(X,25),R=W+z+e5(X,U,V)+J4[M]+cq[M]|0,N=(u$(J,2)^u$(J,13)^u$(J,22))+$V(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){R$(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),R$(this.buffer)}}class WV extends ZX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(32)}}class G4 extends ZX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(28)}}var MV=(()=>JV(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),Q4=(()=>MV[0])(),Y4=(()=>MV[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class mG extends WY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,f=oq[T-15]|0,u=FJ(_,f,1)^FJ(_,f,8)^wX(_,f,7),F=gJ(_,f,1)^gJ(_,f,8)^AX(_,f,7),m=nq[T-2]|0,k=oq[T-2]|0,y=FJ(m,k,19)^fG(m,k,61)^wX(m,k,6),l=gJ(m,k,19)^xG(m,k,61)^AX(m,k,6),v=YV(F,l,oq[T-7],oq[T-16]),I=XV(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^fG(M,z,41),f=gJ(M,z,14)^gJ(M,z,18)^xG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=UV(A,f,F,Y4[T],oq[T]),k=VV(m,w,_,u,Q4[T],nq[T]),y=m|0,l=FJ(J,G,28)^fG(J,G,34)^fG(J,G,39),v=gJ(J,G,28)^xG(J,G,34)^xG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Gq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=GV(y,v,C);J=QV(Z,k,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Gq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Gq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Gq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Gq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){R$(nq,oq)}destroy(){this.destroyed=!0,R$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class zV extends mG{Ah=l0[0]|0;Al=l0[1]|0;Bh=l0[2]|0;Bl=l0[3]|0;Ch=l0[4]|0;Cl=l0[5]|0;Dh=l0[6]|0;Dl=l0[7]|0;Eh=l0[8]|0;El=l0[9]|0;Fh=l0[10]|0;Fl=l0[11]|0;Gh=l0[12]|0;Gl=l0[13]|0;Hh=l0[14]|0;Hl=l0[15]|0;constructor(){super(64)}}class X4 extends mG{Ah=p0[0]|0;Al=p0[1]|0;Bh=p0[2]|0;Bl=p0[3]|0;Ch=p0[4]|0;Cl=p0[5]|0;Dh=p0[6]|0;Dl=p0[7]|0;Eh=p0[8]|0;El=p0[9]|0;Fh=p0[10]|0;Fl=p0[11]|0;Gh=p0[12]|0;Gl=p0[13]|0;Hh=p0[14]|0;Hl=p0[15]|0;constructor(){super(48)}}var e0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class U4 extends mG{Ah=e0[0]|0;Al=e0[1]|0;Bh=e0[2]|0;Bl=e0[3]|0;Ch=e0[4]|0;Cl=e0[5]|0;Dh=e0[6]|0;Dl=e0[7]|0;Eh=e0[8]|0;El=e0[9]|0;Fh=e0[10]|0;Fl=e0[11]|0;Gh=e0[12]|0;Gl=e0[13]|0;Hh=e0[14]|0;Hl=e0[15]|0;constructor(){super(28)}}class V4 extends mG{Ah=$$[0]|0;Al=$$[1]|0;Bh=$$[2]|0;Bl=$$[3]|0;Ch=$$[4]|0;Cl=$$[5]|0;Dh=$$[6]|0;Dl=$$[7]|0;Eh=$$[8]|0;El=$$[9]|0;Fh=$$[10]|0;Fl=$$[11]|0;Gh=$$[12]|0;Gl=$$[13]|0;Hh=$$[14]|0;Hl=$$[15]|0;constructor(){super(32)}}var r0=DX(()=>new WV,HX(1));var zY=DX(()=>new zV,HX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function OY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function TX($){if(!OY($))throw Error("Uint8Array expected")}function OV($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function NV($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function uG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function RY($){if(!Array.isArray($))throw Error("array expected")}function DY($,q){if(!OV(!0,q))throw Error(`${$}: array of strings expected`)}function CX($,q){if(!OV(!1,q))throw Error(`${$}: array of numbers expected`)}function E$(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P$($){let q=typeof $==="string"?$.split(""):$,J=q.length;DY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return RY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return RY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L$($=""){return aq("join",$),{encode:(q)=>{return DY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function NY($,q="="){return uG($),aq("padding",q),{encode(J){DY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){DY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function jV($){return NV($),{encode:(q)=>q,decode:(q)=>$(q)}}function KV($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(RY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(uG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,R=z+M;if(!Number.isSafeInteger(R)||z/q!==U||R-M!==z)throw Error("convertRadix: carry overflow");let K=R/J;U=R%J;let N=Math.floor(K);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==R)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var wV=($,q)=>q===0?$:wV(q,$%q),HY=($,q)=>$+(q-wV($,q)),KY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function BX($,q,J,G){if(RY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(HY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${HY(q,J)}`);let Q=0,Y=0,X=KY[q],U=KY[J]-1,V=[];for(let W of $){if(uG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=KY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function W4($){uG($);let q=256;return{encode:(J)=>{if(!OY(J))throw Error("radix.encode input should be Uint8Array");return KV(Array.from(J),q,$)},decode:(J)=>{return CX("radix.decode",J),Uint8Array.from(KV(J,$,q))}}}function b$($,q=!1){if(uG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(HY(8,$)>32||HY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!OY(J))throw Error("radix2.encode input should be Uint8Array");return BX(Array.from(J),8,$,!q)},decode:(J)=>{return CX("radix2.decode",J),Uint8Array.from(BX(J,$,8,q))}}}function RV($){return NV($),function(...q){try{return $.apply(null,q)}catch(J){}}}var h3=E$(b$(4),P$("0123456789ABCDEF"),L$("")),u3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),NY(5),L$("")),p3=E$(b$(5),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L$("")),l3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),NY(5),L$("")),r3=E$(b$(5),P$("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L$("")),d3=E$(b$(5),P$("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L$(""),jV(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),AV=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),ZV=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},IX=AV?{encode($){return TX($),$.toBase64()},decode($){return ZV($,!1)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),NY(6),L$("")),p$=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L$("")),i3=AV?{encode($){return TX($),$.toBase64({alphabet:"base64url"})},decode($){return ZV($,!0)}}:E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),NY(6),L$("")),c3=E$(b$(6),P$("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L$("")),EX=($)=>E$(W4(58),P$($),L$("")),n3=EX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),o3=EX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),a3=EX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var SX=E$(P$("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L$("")),DV=[996825010,642813549,513874426,1027748829,705979059];function hG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<DV.length;G++)if((q>>G&1)===1)J^=DV[G];return J}function HV($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=hG(Q)^X>>5}Q=hG(Q);for(let Y=0;Y<G;Y++)Q=hG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=hG(Q)^Y;for(let Y=0;Y<6;Y++)Q=hG(Q);return Q^=J,SX.encode(BX([Q%KY[30]],30,5,!1))}function BV($){let q=$==="bech32"?1:734539939,J=b$(5),G=J.decode,Q=J.encode,Y=RV(G);function X(z,R,K=90){if(aq("bech32.encode prefix",z),OY(R))R=Array.from(R);CX("bech32.encode",R);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let j=N+7+R.length;if(K!==!1&&j>K)throw TypeError(`Length ${j} exceeds limit ${K}`);let w=z.toLowerCase(),A=HV(w,R,q);return`${w}1${SX.encode(R)}${A}`}function U(z,R=90){aq("bech32.decode input",z);let K=z.length;if(K<8||R!==!1&&K>R)throw TypeError(`invalid string length: ${K} (${z}). Expected (8..${R})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let j=N.lastIndexOf("1");if(j===0||j===-1)throw Error('Letter "1" must be present between prefix and data only');let w=N.slice(0,j),A=N.slice(j+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=SX.decode(A).slice(0,-6),_=HV(w,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:w,words:T}}let V=RV(U);function W(z){let{prefix:R,words:K}=U(z,!1);return{prefix:R,words:K,bytes:G(K)}}function M(z,R){return X(z,Q(R))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l$=BV("bech32"),s3=BV("bech32m");var M4=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),z4={encode($){return TX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},t3=M4?z4:E$(b$(4),P$("0123456789abcdef"),L$(""),jV(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function R4($,q,J,G){Bq($);let Q=VY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L0(Y,"c"),L0(X,"dkLen"),L0(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=KX(q,"password"),W=KX(J,"salt"),M=new Uint8Array(X),z=Tq.create($,V),R=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:R}}function D4($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return R$(Q),J}function PX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=R4($,q,J,G),W,M=new Uint8Array(4),z=C8(M),R=new Uint8Array(U.outputLen);for(let K=1,N=0;N<Y;K++,N+=U.outputLen){let j=X.subarray(N,N+U.outputLen);z.setInt32(0,K,!1),(W=V._cloneInto(W)).update(M).digestInto(R),j.set(R.subarray(0,j.length));for(let w=1;w<Q;w++){U._cloneInto(W).update(R).digestInto(R);for(let A=0;A<j.length;A++)j[A]^=R[A]}}return D4(U,V,X,W,R)}function SV($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],R=$[q++]^J[G++],K=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],w=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],f=$[q++]^J[G++],u=$[q++]^J[G++],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let d=0;d<8;d+=2)l^=N0(F+L|0,7),Z^=N0(l+F|0,9),L^=N0(Z+l|0,13),F^=N0(L+Z|0,18),S^=N0(v+m|0,7),b^=N0(S+v|0,9),m^=N0(b+S|0,13),v^=N0(m+b|0,18),O^=N0(P+I|0,7),k^=N0(O+P|0,9),I^=N0(k+O|0,13),P^=N0(I+k|0,18),y^=N0(x+g|0,7),C^=N0(y+x|0,9),g^=N0(C+y|0,13),x^=N0(g+C|0,18),m^=N0(F+y|0,7),k^=N0(m+F|0,9),y^=N0(k+m|0,13),F^=N0(y+k|0,18),I^=N0(v+l|0,7),C^=N0(I+v|0,9),l^=N0(C+I|0,13),v^=N0(l+C|0,18),g^=N0(P+S|0,7),Z^=N0(g+P|0,9),S^=N0(Z+g|0,13),P^=N0(S+Z|0,18),L^=N0(x+O|0,7),b^=N0(L+x|0,9),O^=N0(b+L|0,13),x^=N0(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+m|0,Q[Y++]=V+k|0,Q[Y++]=W+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=R+I|0,Q[Y++]=K+C|0,Q[Y++]=N+Z|0,Q[Y++]=j+S|0,Q[Y++]=w+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=f+O|0,Q[Y++]=u+x|0}function LX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(SV(J,X,$,q,J,Y),U>0)X+=16;SV(J,Y,$,q+=16,J,X)}}function H4($,q,J){let G=VY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(L0(Q,"N"),L0(Y,"r"),L0(X,"p"),L0(U,"dkLen"),L0(V,"asyncTick"),L0(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,R=z/4,K=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>K)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(K-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(K-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let j=PX(r0,$,q,{c:1,dkLen:z*X}),w=XY(j),A=XY(new Uint8Array(z*Q)),T=XY(new Uint8Array(z)),_=()=>{};if(M){let f=2*Q*X,u=Math.max(Math.floor(f/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===f))M(F/f)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:R,V:A,B32:w,B:j,tmp:T,blockMixCb:_,asyncTick:V}}function O4($,q,J,G,Q){let Y=PX(r0,$,J,{c:1,dkLen:q});return R$(J,G,Q),Y}function TV($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:R}=H4($,q,J);zX(W);for(let K=0;K<Y;K++){let N=U*K;for(let j=0;j<U;j++)V[j]=W[N+j];for(let j=0,w=0;j<G-1;j++)LX(V,w,V,w+=U,Q),R();LX(V,(G-1)*U,W,N,Q),R();for(let j=0;j<G;j++){let w=(W[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=W[N+A]^V[w*U+A];LX(z,0,W,N,Q),R()}}return zX(W),O4($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function N4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function jY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b0($,q,J=""){let G=N4($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function FX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function CV($,q,J=!1){b0($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!E8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function j4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),w4=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var A4=($)=>{for(let q=0;q<$.length;q++)$[q]=w4($[q]);return $},Eq=_J?($)=>$:A4;function IV($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function EV($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function PV($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var LV=($,q)=>{function J(G,...Q){if(b0(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b0(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b0(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b0(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,b0(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b0(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function pG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b0(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!E8(q))throw Error("invalid output, must be aligned");return q}function FV($,q,J){I8($),I8(q),jY(J);let G=new Uint8Array(16),Q=j4(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function E8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b0($))}var _V=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),Z4=(()=>Eq(Qq(_V("expand 16-byte k"))))(),B4=(()=>Eq(Qq(_V("expand 32-byte k"))))();function j0($,q){return $<<q|$>>>32-q}var lG=64,S4=16,gX=(()=>4294967295)(),gV=Uint32Array.of();function T4($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(lG),M=Qq(W),z=_J&&E8(Q)&&E8(Y),R=z?Qq(Q):gV,K=z?Qq(Y):gV;if(!_J){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Eq(M),X>=gX)throw Error("arx: counter overflow");let j=Math.min(lG,V-N);for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=gX)throw Error("arx: counter overflow");let j=Math.min(lG,V-N);if(z&&j===lG){let w=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<S4;A++)T=w+A,K[T]=R[T]^M[A];N+=lG;continue}for(let w=0,A;w<j;w++)A=N+w,Y[A]=Q[A]^W[w];N+=j}}function vV($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=IV({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),jY(Y),jY(J),(U,V,W,M,z=0)=>{b0(U,void 0,"key"),b0(V,void 0,"nonce"),b0(W,void 0,"data");let R=W.length;if(M=pG(R,M,!1),I8(z),z<0||z>=gX)throw Error("arx: counter overflow");let K=[],N=U.length,j,w;if(N===32)K.push(j=P8(U)),w=B4;else if(N===16&&J)j=new Uint8Array(32),j.set(U),j.set(U,16),w=Z4,K.push(j);else throw b0(U,32,"arx key"),Error("invalid key size");if(!_J||!E8(V))K.push(V=P8(V));let A=Qq(j);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let f=V.subarray(0,16);if(_J)G(w,A,Qq(f),A);else{let u=Eq(Uint32Array.from(w));G(u,A,Qq(f),A),r$(u),Eq(A)}V=V.subarray(16)}else if(!_J)Eq(A);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let f=new Uint8Array(12);f.set(V,Y?0:12-V.length),V=f,K.push(V)}let _=Eq(Qq(V));try{return T4($,w,A,_,W,M,z,X),M}finally{r$(...K)}}}function d0($,q){return $[q++]&255|($[q++]&255)<<8}class bV{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b0($,32,"key"));let q=d0($,0),J=d0($,2),G=d0($,4),Q=d0($,6),Y=d0($,8),X=d0($,10),U=d0($,12),V=d0($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=d0($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],R=Y[6],K=Y[7],N=Y[8],j=Y[9],w=d0($,q+0),A=d0($,q+2),T=d0($,q+4),_=d0($,q+6),f=d0($,q+8),u=d0($,q+10),F=d0($,q+12),m=d0($,q+14),k=Q[0]+(w&8191),y=Q[1]+((w>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|f<<12)&8191),C=Q[5]+(f>>>1&8191),Z=Q[6]+((f>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|m<<8)&8191),g=Q[9]+(m>>>5|G),L=0,b=L+k*X+y*(5*j)+l*(5*N)+v*(5*K)+I*(5*R);L=b>>>13,b&=8191,b+=C*(5*z)+Z*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+k*U+y*X+l*(5*j)+v*(5*N)+I*(5*K);L=O>>>13,O&=8191,O+=C*(5*R)+Z*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let x=L+k*V+y*U+l*X+v*(5*j)+I*(5*N);L=x>>>13,x&=8191,x+=C*(5*K)+Z*(5*R)+S*(5*z)+P*(5*M)+g*(5*W),L+=x>>>13,x&=8191;let d=L+k*W+y*V+l*U+v*X+I*(5*j);L=d>>>13,d&=8191,d+=C*(5*N)+Z*(5*K)+S*(5*R)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+k*M+y*W+l*V+v*U+I*X;L=B>>>13,B&=8191,B+=C*(5*j)+Z*(5*N)+S*(5*K)+P*(5*R)+g*(5*z),L+=B>>>13,B&=8191;let a=L+k*z+y*M+l*W+v*V+I*U;L=a>>>13,a&=8191,a+=C*X+Z*(5*j)+S*(5*N)+P*(5*K)+g*(5*R),L+=a>>>13,a&=8191;let q0=L+k*R+y*z+l*M+v*W+I*V;L=q0>>>13,q0&=8191,q0+=C*U+Z*X+S*(5*j)+P*(5*N)+g*(5*K),L+=q0>>>13,q0&=8191;let Y0=L+k*K+y*R+l*z+v*M+I*W;L=Y0>>>13,Y0&=8191,Y0+=C*V+Z*U+S*X+P*(5*j)+g*(5*N),L+=Y0>>>13,Y0&=8191;let G0=L+k*N+y*K+l*R+v*z+I*M;L=G0>>>13,G0&=8191,G0+=C*W+Z*V+S*U+P*X+g*(5*j),L+=G0>>>13,G0&=8191;let t=L+k*j+y*N+l*K+v*R+I*z;L=t>>>13,t&=8191,t+=C*M+Z*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=x,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q0,Q[7]=Y0,Q[8]=G0,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r$(J)}update($){FX(this),b0($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r$(this.h,this.r,this.buffer,this.pad)}digestInto($){FX(this),CV($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var yV=PV(32,($)=>new bV($));function C4($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],R=q[2],K=q[3],N=q[4],j=q[5],w=q[6],A=q[7],T=Q,_=J[0],f=J[1],u=J[2],F=X,m=U,k=V,y=W,l=M,v=z,I=R,C=K,Z=N,S=j,P=w,g=A,L=T,b=_,O=f,x=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=j0(L^F,16),Z=Z+L|0,l=j0(l^Z,12),F=F+l|0,L=j0(L^F,8),Z=Z+L|0,l=j0(l^Z,7),m=m+v|0,b=j0(b^m,16),S=S+b|0,v=j0(v^S,12),m=m+v|0,b=j0(b^m,8),S=S+b|0,v=j0(v^S,7),k=k+I|0,O=j0(O^k,16),P=P+O|0,I=j0(I^P,12),k=k+I|0,O=j0(O^k,8),P=P+O|0,I=j0(I^P,7),y=y+C|0,x=j0(x^y,16),g=g+x|0,C=j0(C^g,12),y=y+C|0,x=j0(x^y,8),g=g+x|0,C=j0(C^g,7),F=F+v|0,x=j0(x^F,16),P=P+x|0,v=j0(v^P,12),F=F+v|0,x=j0(x^F,8),P=P+x|0,v=j0(v^P,7),m=m+I|0,L=j0(L^m,16),g=g+L|0,I=j0(I^g,12),m=m+I|0,L=j0(L^m,8),g=g+L|0,I=j0(I^g,7),k=k+C|0,b=j0(b^k,16),Z=Z+b|0,C=j0(C^Z,12),k=k+C|0,b=j0(b^k,8),Z=Z+b|0,C=j0(C^Z,7),y=y+l|0,O=j0(O^y,16),S=S+O|0,l=j0(l^S,12),y=y+l|0,O=j0(O^y,8),S=S+O|0,l=j0(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+m|0,G[d++]=V+k|0,G[d++]=W+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=R+I|0,G[d++]=K+C|0,G[d++]=N+Z|0,G[d++]=j+S|0,G[d++]=w+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=f+O|0,G[d++]=u+x|0}var I4=vV(C4,{counterRight:!1,counterLength:4,allowShortKeys:!1});var E4=new Uint8Array(16),kV=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(E4.subarray(J))},P4=new Uint8Array(32);function fV($,q,J,G,Q){if(Q!==void 0)b0(Q,void 0,"AAD");let Y=$(q,J,P4),X=FV(G.length,Q?Q.length:0,!0),U=yV.create(Y);if(Q)kV(U,Q);kV(U,G),U.update(X);let V=U.digest();return r$(Y,X),V}var L4=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=pG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=fV($,q,J,V,G);return X.set(W,U),r$(W),X},decrypt(Y,X){X=pG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=fV($,q,J,U,G);if(!EV(V,W))throw r$(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r$(W),X}}},sq=LV({blockSize:64,nonceLength:12,tagLength:16},L4(I4));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m0($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q0($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function y$($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m0($.outputLen),m0($.blockLen)}function Lq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function wY($,q){Q0($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function AY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z$(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function ZY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d$($,q){return $<<32-q|$>>>q}var F4=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function g4($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function _4($){for(let q=0;q<$.length;q++)$[q]=g4($[q]);return $}var _X=F4?($)=>$:_4,mV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),v4=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q0($),mV)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=v4[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function xV($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(mV)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=xV($.charCodeAt(Y)),U=xV($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function g0(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q0(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bX=BigInt(0),vX=BigInt(1);function rG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function hV($){if(typeof $==="bigint"){if(!BY($))throw Error("positive bigint expected, got "+$)}else m0($);return $}function dG($){let q=hV($).toString(16);return q.length&1?"0"+q:q}function uV($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?bX:BigInt("0x"+$)}function $J($){return uV(vJ($))}function qJ($){return uV(vJ(SY(Q0($)).reverse()))}function g8($,q){m0(q),$=hV($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function iG($,q){return g8($,q).reverse()}function SY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var BY=($)=>typeof $==="bigint"&&bX<=$;function b4($,q,J){return BY($)&&BY(q)&&BY(J)&&q<=$&&$<J}function cG($,q,J,G){if(!b4(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function yX($){let q;for(q=0;$>bX;$>>=vX,q+=1);return q}var nG=($)=>(vX<<BigInt($))-vX;function pV($,q,J){if(m0($,"hashLen"),m0(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,g0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return g0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while(!(T=A(N())))K();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function kX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H$=BigInt(0),q$=BigInt(1),kJ=BigInt(2),dV=BigInt(3),iV=BigInt(4),cV=BigInt(5),y4=BigInt(7),nV=BigInt(8),k4=BigInt(9),oV=BigInt(16);function D$($,q){let J=$%q;return J>=H$?J:q+J}function k$($,q,J){let G=$;while(q-- >H$)G*=G,G%=J;return G}function lV($,q){if($===H$)throw Error("invert: expected non-zero number");if(q<=H$)throw Error("invert: expected positive modulus, got "+q);let J=D$($,q),G=q,Q=H$,Y=q$,X=q$,U=H$;while(J!==H$){let W=G/J,M=G%J,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==q$)throw Error("invert: does not exist");return D$(Q,q)}function fX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function aV($,q){let J=($.ORDER+q$)/iV,G=$.pow(q,J);return fX($,G,q),G}function f4($,q){let J=($.ORDER-cV)/nV,G=$.mul(q,kJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,kJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return fX($,U,q),U}function x4($){let q=TY($),J=sV($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+y4)/oV;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),R=U.mul(W,Y),K=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,K),M=U.cmov(R,z,N);let j=U.eql(U.sqr(M),V),w=U.cmov(W,M,j);return fX(U,w,V),w}}function sV($){if($<dV)throw Error("sqrt is not defined for small field");let q=$-q$,J=0;while(q%kJ===H$)q/=kJ,J++;let G=kJ,Q=TY($);while(rV(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return aV;let Y=Q.pow(G,q),X=(q+q$)/kJ;return function(V,W){if(V.is0(W))return W;if(rV(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),R=V.pow(W,q),K=V.pow(W,X);while(!V.eql(R,V.ONE)){if(V.is0(R))return V.ZERO;let N=1,j=V.sqr(R);while(!V.eql(j,V.ONE))if(N++,j=V.sqr(j),N===M)throw Error("Cannot find square root");let w=q$<<BigInt(M-N-1),A=V.pow(z,w);M=N,z=V.sqr(A),R=V.mul(R,z),K=V.mul(K,A)}return K}}function m4($){if($%iV===dV)return aV;if($%nV===cV)return f4;if($%oV===k4)return x4($);return sV($)}var h4=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function xX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=h4.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function u4($,q,J){if(J<H$)throw Error("invalid exponent, negatives unsupported");if(J===H$)return $.ONE;if(J===q$)return q;let G=$.ONE,Q=q;while(J>H$){if(J&q$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q$}return G}function oG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function rV($,q){let J=($.ORDER-q$)/kJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function p4($,q){if(q!==void 0)m0(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class tV{ORDER;BITS;BYTES;isLE;ZERO=H$;ONE=q$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H$)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=p4($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H$<=$&&$<this.ORDER}is0($){return $===H$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q$)===q$}neg($){return D$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D$($*$,this.ORDER)}add($,q){return D$($+q,this.ORDER)}sub($,q){return D$($-q,this.ORDER)}mul($,q){return D$($*q,this.ORDER)}pow($,q){return u4(this,$,q)}div($,q){return D$($*lV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return lV($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=m4(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?iG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return oG(this,$)}cmov($,q,J){return J?q:$}}function TY($,q={}){return new tV($,q)}function eV($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function mX($){let q=eV($);return q+Math.ceil(q/2)}function $W($,q,J=!1){Q0($);let G=$.length,Q=eV(q),Y=mX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D$(X,q-q$)+q$;return J?iG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),fJ=BigInt(1);function aG($,q){let J=q.negate();return $?J:q}function lX($,q){let J=oG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function QW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function hX($,q){QW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=nG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function qW($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=fJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var uX=new WeakMap,YW=new WeakMap;function pX($){return YW.get($)||1}function JW($){if($!==_8)throw Error("invalid wNAF")}class rX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&fJ)J=J.add(G);G=G.double(),q>>=fJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=hX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=hX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=qW(J,X,Y);if(J=U,W)Q=Q.add(aG(z,q[R]));else G=G.add(aG(M,q[V]))}return JW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=hX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=qW(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return JW(J),G}getPrecomputes($,q,J){let G=uX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);uX.set(q,G)}}return G}cached($,q,J){let G=pX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=pX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){QW(q,this.bits),YW.set($,q),uX.delete($)}hasCache($){return pX($)!==1}}function XW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&fJ)Y=Y.add(Q);if(G&fJ)X=X.add(Q);Q=Q.double(),J>>=fJ,G>>=fJ}return{p1:Y,p2:X}}function GW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return xX(q),q}else return TY($,{isLE:J})}function UW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>_8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=GW(q.p,J.Fp,G),Y=GW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function CY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sG=BigInt(0),v8=BigInt(1),IY=BigInt(2);function l4($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function VW($){let q=l4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||tq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?IY**BigInt(254):IY**BigInt(447),N=U?BigInt(8)*IY**BigInt(251)-v8:BigInt(4)*IY**BigInt(445)-v8,j=K+N+v8,w=(Z)=>D$(Z,J),A=T(z);function T(Z){return iG(w(Z),M)}function _(Z){let S=SY(Q0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(qJ(S))}function f(Z){return qJ(Q(SY(Q0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===sG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){cG("u",Z,sG,J),cG("scalar",S,K,j);let P=S,g=Z,L=v8,b=sG,O=Z,x=v8,d=sG;for(let a=BigInt(W-1);a>=sG;a--){let q0=P>>a&v8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=V(M))=>{return Q0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze({keygen:CY(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}class dX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y$($),Q0(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z$(G)}update($){return Lq(this),this.iHash.update($),this}digestInto($){Lq(this),Q0($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new dX($,q).update(J).digest();b8.create=($,q)=>new dX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WW=($,q)=>($+($>=0?q:-q)/zW)/q;function r4($,q,J){let[[G,Q],[Y,X]]=q,U=WW(X*$,J),V=WW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Fq,R=M<Fq;if(z)W=-W;if(R)M=-M;let K=nG(Math.ceil(yX(J)/2))+y8;if(W<Fq||W>=K||M<Fq||M>=K)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:R,k2:M}}function cX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function iX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(rG(J.lowS,"lowS"),rG(J.prehash,"prehash"),J.format!==void 0)cX(J.format);return J}class MW extends Error{constructor($=""){super($)}}var GJ={Err:MW,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=dG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?dG(Q.length/2|128):"";return dG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Fq)throw new q("integer: negative integers are not allowed");let J=dG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Fq=BigInt(0),y8=BigInt(1),zW=BigInt(2),EY=BigInt(3),d4=BigInt(4);function nX($,q={}){let J=UW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=RW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,C,Z){let{x:S,y:P}=C.toAffine(),g=G.toBytes(S);if(rG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g0(KW(L),g)}else return g0(Uint8Array.of(4),g,G.toBytes(P))}function R(I){Q0(I,void 0,"Point");let{publicKey:C,publicKeyUncompressed:Z}=W,S=I.length,P=I[0],g=I.subarray(1);if(S===C&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=j(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let x=G.isOdd(O);if((P&1)===1!==x)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!w(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${C} or uncompressed=${Z}`)}let K=q.toBytes||z,N=q.fromBytes||R;function j(I){let C=G.sqr(I),Z=G.mul(C,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function w(I,C){let Z=G.sqr(C),S=j(I);return G.eql(Z,S)}if(!w(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,EY),d4),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,C,Z=!1){if(!G.isValid(C)||Z&&G.is0(C))throw Error(`bad point coordinate ${I}`);return C}function f(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!V||!V.basises)throw Error("no endo");return r4(I,V.basises,Q.ORDER)}let F=kX((I,C)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),m=kX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:C,y:Z}=I.toAffine();if(!G.isValid(C)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!w(C,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function k(I,C,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),C=aG(S,C),Z=aG(P,Z),C.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,C,Z){this.X=_("x",I),this.Y=_("y",C,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:C,y:Z}=I||{};if(!I||!G.isValid(C)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(C)&&G.is0(Z))return y.ZERO;return new y(C,Z,G.ONE)}static fromBytes(I){let C=y.fromAffine(N(Q0(I,void 0,"point")));return C.assertValidity(),C}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,C=!0){if(v.createCache(this,I),!C)this.multiply(EY);return this}assertValidity(){m(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(C,L),G.mul(P,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:C}=Y,Z=G.mul(C,EY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(I,B),a=G.sub(x,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(x,x),x=G.add(O,x),x=G.add(x,B),x=G.mul(x,a),b=G.add(b,x),B=G.mul(P,g),B=G.add(B,B),x=G.mul(B,a),L=G.sub(L,x),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){f(I);let{X:C,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,x=G.ZERO,d=Y.a,B=G.mul(Y.b,EY),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.mul(S,L),G0=G.add(C,Z),t=G.add(P,g);G0=G.mul(G0,t),t=G.add(a,q0),G0=G.sub(G0,t),t=G.add(C,S);let O0=G.add(P,L);return t=G.mul(t,O0),O0=G.add(a,Y0),t=G.sub(t,O0),O0=G.add(Z,S),b=G.add(g,L),O0=G.mul(O0,b),b=G.add(q0,Y0),O0=G.sub(O0,b),x=G.mul(d,t),b=G.mul(B,Y0),x=G.add(b,x),b=G.sub(q0,x),x=G.add(q0,x),O=G.mul(b,x),q0=G.add(a,a),q0=G.add(q0,a),Y0=G.mul(d,Y0),t=G.mul(B,t),q0=G.add(q0,Y0),Y0=G.sub(a,Y0),Y0=G.mul(d,Y0),t=G.add(t,Y0),a=G.mul(q0,t),O=G.add(O,a),a=G.mul(O0,t),b=G.mul(G0,b),b=G.sub(b,a),a=G.mul(G0,q0),x=G.mul(O0,x),x=G.add(x,a),new y(b,O,x)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:C}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>lX(y,L));if(C){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:x,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),Z=k(C.beta,x,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return lX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:C}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Fq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(C){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=XW(y,Z,P,L);return k(C.beta,b,O,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return rG(I,"isCompressed"),this.assertValidity(),K(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new rX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function KW($){return Uint8Array.of($?2:3)}function RW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function i4($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(RW($.Fp,J),{seed:mX(J.ORDER)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K=G(Q.seed)){return $W(Q0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q;if(!L8(K))return;if("_lengths"in J&&J._lengths||N===j)return;let A=Q0(K,void 0,"key").length;return A===j||A===w}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=CY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function oX($,q,J={}){y$(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K}=i4($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=U*zW<Y.ORDER;function w(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){cX(S);let P=K.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q0(Z,g)}class f{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:O,s:x}=GJ.toSig(Q0(Z));return new f(O,x)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=K.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new f(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new f(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(g0(KW((g&1)===0),b)),x=X.inv(L),d=F(Q0(Z,void 0,"msgHash")),B=X.create(-d*x),a=X.create(P*x),q0=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q0.is0())throw Error("invalid recovery: point at infinify");return q0.assertValidity(),q0}hasHighS(){return w(this.s)}toBytes(Z=N.format){if(cX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g0(Uint8Array.of(this.assertRecovery()),g,L);return g0(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},m=nG(V);function k(Z){return cG("num < 2^"+V,Z,Fq,m),X.toBytes(Z)}function y(Z,S){return Q0(Z,void 0,"message"),S?Q0(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=iX(P,N);Z=y(Z,L);let O=F(Z),x=X.fromBytes(S);if(!X.isValidNot0(x))throw Error("invalid private key");let d=[k(x),k(O)];if(b!=null&&b!==!1){let Y0=b===!0?G(K.secretKey):b;d.push(Q0(Y0,void 0,"extraEntropy"))}let B=g0(...d),a=O;function q0(Y0){let G0=u(Y0);if(!X.isValidNot0(G0))return;let t=X.inv(G0),O0=$.BASE.multiply(G0).toAffine(),A0=X.create(O0.x);if(A0===Fq)return;let I0=X.create(t*X.create(a+A0*x));if(I0===Fq)return;let x0=(O0.x===A0?0:2)|Number(O0.y&y8),K$=I0;if(g&&w(I0))K$=X.neg(I0),x0^=1;return new f(A0,K$,j?void 0:x0)}return{seed:B,k2sig:q0}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return pV(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:O}=iX(g,N);if(P=Q0(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let x=Z instanceof f?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+x)}_(Z,O);try{let x=f.fromBytes(Z,O),d=$.fromBytes(P);if(L&&x.hasHighS())return!1;let{r:B,s:a}=x,q0=F(S),Y0=X.inv(a),G0=X.create(q0*Y0),t=X.create(B*Y0),O0=$.BASE.multiplyUnsafe(G0).add(d.multiplyUnsafe(t));if(O0.is0())return!1;return X.create(O0.x)===B}catch(x){return!1}}function C(Z,S,P={}){let{prehash:g}=iX(P,N);return S=y(S,g),f.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:R,lengths:K,Point:$,sign:v,verify:I,recoverPublicKey:C,Signature:f,hash:q})}function DW($,q,J){return $&q^~$&J}function HW($,q,J){return $&q^$&J^q&J}class PY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=ZY(this.buffer)}update($){Lq(this),Q0($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=ZY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Lq(this),wY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z$(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=ZY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var gq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),_q=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var LY=BigInt(4294967295),OW=BigInt(32);function c4($,q=!1){if(q)return{h:Number($&LY),l:Number($>>OW&LY)};return{h:Number($>>OW&LY)|0,l:Number($&LY)|0}}function FY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=c4($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var aX=($,q,J)=>$>>>J,sX=($,q,J)=>$<<32-J|q>>>J,xJ=($,q,J)=>$>>>J|q<<32-J,mJ=($,q,J)=>$<<32-J|q>>>J,tG=($,q,J)=>$<<64-J|q>>>J-32,eG=($,q,J)=>$>>>J-32|q<<64-J;var NW=($,q,J)=>$<<J|q>>>32-J,jW=($,q,J)=>q<<J|$>>>32-J,wW=($,q,J)=>q<<J-32|$>>>64-J,AW=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var ZW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),BW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,SW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),TW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,CW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),IW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var o4=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class tX extends PY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],R=QJ[M-2],K=d$(z,7)^d$(z,18)^z>>>3,N=d$(R,17)^d$(R,19)^R>>>10;QJ[M]=N+QJ[M-7]+K+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=d$(X,6)^d$(X,11)^d$(X,25),R=W+z+DW(X,U,V)+o4[M]+QJ[M]|0,N=(d$(J,2)^d$(J,13)^d$(J,22))+HW(J,G,Q)|0;W=V,V=U,U=X,X=Y+R|0,Y=Q,Q=G,G=J,J=R+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){Z$(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z$(this.buffer)}}class EW extends tX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(32)}}class a4 extends tX{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(28)}}var PW=(()=>FY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),s4=(()=>PW[0])(),t4=(()=>PW[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class $Q extends PY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:R,Gl:K,Hh:N,Hl:j}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j]}set($,q,J,G,Q,Y,X,U,V,W,M,z,R,K,N,j){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=R|0,this.Gl=K|0,this.Hh=N|0,this.Hl=j|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,f=XJ[T-15]|0,u=xJ(_,f,1)^xJ(_,f,8)^aX(_,f,7),F=mJ(_,f,1)^mJ(_,f,8)^sX(_,f,7),m=YJ[T-2]|0,k=XJ[T-2]|0,y=xJ(m,k,19)^tG(m,k,61)^aX(m,k,6),l=mJ(m,k,19)^eG(m,k,61)^sX(m,k,6),v=SW(F,l,XJ[T-7],XJ[T-16]),I=TW(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:R,Fl:K,Gh:N,Gl:j,Hh:w,Hl:A}=this;for(let T=0;T<80;T++){let _=xJ(M,z,14)^xJ(M,z,18)^tG(M,z,41),f=mJ(M,z,14)^mJ(M,z,18)^eG(M,z,41),u=M&R^~M&N,F=z&K^~z&j,m=CW(A,f,F,t4[T],XJ[T]),k=IW(m,w,_,u,s4[T],YJ[T]),y=m|0,l=xJ(J,G,28)^tG(J,G,34)^tG(J,G,39),v=mJ(J,G,28)^eG(J,G,34)^eG(J,G,39),I=J&Q^J&X^Q&X,C=G&Y^G&U^Y&U;w=N|0,A=j|0,N=R|0,j=K|0,R=M|0,K=z|0,{h:M,l:z}=Yq(V|0,W|0,k|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=ZW(y,v,C);J=BW(Z,k,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Yq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:R,l:K}=Yq(this.Fh|0,this.Fl|0,R|0,K|0),{h:N,l:j}=Yq(this.Gh|0,this.Gl|0,N|0,j|0),{h:w,l:A}=Yq(this.Hh|0,this.Hl|0,w|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,R,K,N,j,w,A)}roundClean(){Z$(YJ,XJ)}destroy(){Z$(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class e4 extends $Q{Ah=c0[0]|0;Al=c0[1]|0;Bh=c0[2]|0;Bl=c0[3]|0;Ch=c0[4]|0;Cl=c0[5]|0;Dh=c0[6]|0;Dl=c0[7]|0;Eh=c0[8]|0;El=c0[9]|0;Fh=c0[10]|0;Fl=c0[11]|0;Gh=c0[12]|0;Gl=c0[13]|0;Hh=c0[14]|0;Hl=c0[15]|0;constructor(){super(64)}}class LW extends $Q{Ah=i0[0]|0;Al=i0[1]|0;Bh=i0[2]|0;Bl=i0[3]|0;Ch=i0[4]|0;Cl=i0[5]|0;Dh=i0[6]|0;Dl=i0[7]|0;Eh=i0[8]|0;El=i0[9]|0;Fh=i0[10]|0;Fl=i0[11]|0;Gh=i0[12]|0;Gl=i0[13]|0;Hh=i0[14]|0;Hl=i0[15]|0;constructor(){super(48)}}var J$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class $O extends $Q{Ah=J$[0]|0;Al=J$[1]|0;Bh=J$[2]|0;Bl=J$[3]|0;Ch=J$[4]|0;Cl=J$[5]|0;Dh=J$[6]|0;Dl=J$[7]|0;Eh=J$[8]|0;El=J$[9]|0;Fh=J$[10]|0;Fl=J$[11]|0;Gh=J$[12]|0;Gl=J$[13]|0;Hh=J$[14]|0;Hl=J$[15]|0;constructor(){super(28)}}class qO extends $Q{Ah=G$[0]|0;Al=G$[1]|0;Bh=G$[2]|0;Bl=G$[3]|0;Ch=G$[4]|0;Cl=G$[5]|0;Dh=G$[6]|0;Dl=G$[7]|0;Eh=G$[8]|0;El=G$[9]|0;Fh=G$[10]|0;Fl=G$[11]|0;Gh=G$[12]|0;Gl=G$[13]|0;Hh=G$[14]|0;Hl=G$[15]|0;constructor(){super(32)}}var gY=F8(()=>new EW,eq(1));var FW=F8(()=>new LW,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var JO=BigInt(1),gW=BigInt(2),GO=BigInt(3),QO=BigInt(5),eF=BigInt(8),_W=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function YO($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=_W,U=$*$%Y*$%Y,V=k$(U,gW,Y)*U%Y,W=k$(V,JO,Y)*$%Y,M=k$(W,QO,Y)*W%Y,z=k$(M,q,Y)*M%Y,R=k$(z,J,Y)*z%Y,K=k$(R,G,Y)*R%Y,N=k$(K,Q,Y)*K%Y,j=k$(N,Q,Y)*K%Y,w=k$(j,q,Y)*M%Y;return{pow_p_5_8:k$(w,gW,Y)*$%Y,b2:U}}function XO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var vW=(()=>{let $=_W;return VW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=YO(q);return D$(k$(J,GO,$)*G,$)},adjustScalarBytes:XO})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var UO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),VO=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var WO=nX(UO),eX=oX(WO,gY);var MO=nX(VO),bW=oX(MO,FW);function kW($,q,J){if(y$($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var $U=Uint8Array.of(0),yW=Uint8Array.of();function fW($,q,J,G=32){y$($),m0(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=yW;else Q0(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)$U[0]=M+1,V.update(M===0?yW:W).update(J).update($U).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),Z$(W,$U),X.slice(0,G)}var zO=BigInt(0),qQ=BigInt(1),KO=BigInt(2),RO=BigInt(7),DO=BigInt(256),HO=BigInt(113),hW=[],uW=[],pW=[];for(let $=0,q=qQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],hW.push(2*(5*G+J)),uW.push(($+1)*($+2)/2%64);let Q=zO;for(let Y=0;Y<7;Y++)if(q=(q<<qQ^(q>>RO)*HO)%DO,q&KO)Q^=qQ<<(qQ<<BigInt(Y))-qQ;pW.push(Q)}var lW=FY(pW,!0),OO=lW[0],NO=lW[1],xW=($,q,J)=>J>32?wW($,q,J):NW($,q,J),mW=($,q,J)=>J>32?AW($,q,J):jW($,q,J);function jO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=xW(W,M,1)^J[U],R=mW(W,M,1)^J[U+1];for(let K=0;K<50;K+=10)$[X+K]^=z,$[X+K+1]^=R}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=uW[X],V=xW(Q,Y,U),W=mW(Q,Y,U),M=hW[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=OO[G],$[1]^=NO[G]}Z$(J)}class _Y{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m0(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=AY(this.state)}clone(){return this._cloneInto()}keccak(){_X(this.state32),jO(this.state32,this.rounds),_X(this.state32),this.posOut=0,this.pos=0}update($){Lq(this),Q0($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Lq(this,!1),Q0($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m0($),this.xofInto(new Uint8Array($))}digestInto($){if(wY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z$(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new _Y(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var rW=($,q,J,G={})=>F8(()=>new _Y(q,$,J),G);var hJ=rW(6,136,32,eq(8));var dW=rW(6,72,64,eq(10));var iW=($,q,J,G={})=>F8((Q={})=>new _Y(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),cW=iW(31,168,16,eq(11)),Xq=iW(31,136,32,eq(12));function qU($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function oW($){return qU($),($&$-1)===0&&$!==0}function JU($,q){qU($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function aW($){return qU($),31-Math.clz32($)}function nW($){let q=$.length;if(q<2||!oW(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=aW(q);for(let G=0;G<q;G++){let Q=JU(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var GU=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=aW(J);if(!oW(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)nW(M);for(let z=0,R=1;z<V-X;z++){let K=Q?z+1+X:V-z,N=1<<K,j=N>>1,w=J>>K;for(let A=0;A<J;A+=N)for(let T=0,_=R++;T<j;T++){let f=Y?Q?J-_:_:T*w,u=A+T,F=A+T+j,m=G[f],k=M[F],y=M[u];if(W){let l=$.mul(k,m);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),m);else M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),m)}}if(!Q&&U)nW(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function vY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function sW($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q0(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q0(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function bY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q0(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y0(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function QU($){return(1<<$)-1}var Dg=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var tW=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,_=G)=>{let f=T%_|0;return(f>=0?f|0:_+f|0)|0},W=(T,_=G)=>{let f=V(T,_)|0;return(f>_>>1?f-_|0:f)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let f=JU(_,X),u=BigInt(Y)**BigInt(f)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),R={add:(T,_)=>V((T|0)+(_|0))|0,sub:(T,_)=>V((T|0)-(_|0))|0,mul:(T,_)=>V((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},K={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=GU(R,{dit:!1,...K}),j=GU(R,{dit:!0,...K});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{j(T);for(let _=0;_<T.length;_++)T[_]=V(Q*T[_]);return T}},bitsCoder:(T,_)=>{let f=QU(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let m=new Uint8Array(u);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=(_.encode(F[k])&f)<<l,l+=T;for(;l>=8;l-=8,y>>=8)m[v++]=y&QU(l)}return m},decode:(F)=>{let m=q(J);for(let k=0,y=0,l=0,v=0;k<F.length;k++){y|=F[k]<<l,l+=8;for(;l>=T;l-=T,y>>=T)m[v++]=_.decode(y&f)}return m}}}}},wO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),y0(Y,G)}}},eW=wO(cW);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q$=256,vq=3329,AO=3303,ZO=17,{mod:QQ,nttZetas:BO,NTT:pJ,bitsCoder:SO}=tW({N:Q$,Q:vq,F:AO,ROOT_OF_UNITY:ZO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),YU={512:{N:Q$,Q:vq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q$,Q:vq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q$,Q:vq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},TO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+vq/2)/vq,decode:(J)=>J*vq+q>>>$}},JQ=($)=>SO($,TO($));function lJ($,q){for(let J=0;J<Q$;J++)$[J]=QQ($[J]+q[J])}function CO($,q){for(let J=0;J<Q$;J++)$[J]=QQ($[J]-q[J])}function IO($,q,J,G,Q){let Y=QQ(q*G*Q+$*J),X=QQ($*G+q*J);return{c0:Y,c1:X}}function yY($,q){for(let J=0;J<Q$/2;J++){let G=BO[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=IO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function $M($){let q=new Uint16Array(Q$);for(let J=0;J<Q$;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q$&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<vq)q[J++]=Y;if(J<Q$&&X<vq)q[J++]=X}}return q}function GQ($,q,J,G){let Q=$(G*Q$/4,q,J),Y=new Uint16Array(Q$),X=AY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let R=X[V];for(let K=0;K<32;K++)if(M+=R&1,R>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=QQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var EO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=JQ(1),M=JQ(V),z=JQ(U),R=uJ("publicKey",bY(JQ(12),q),32),K=bY(JQ(12),q),N=uJ("ciphertext",bY(z,q),M),j=uJ("seed",32,32);return{secretCoder:K,lengths:{secretKey:K.bytesLen,publicKey:R.bytesLen,cipherText:N.bytesLen},keygen:(w)=>{Q0(w,32,"seed");let A=new Uint8Array(33);A.set(w),A[32]=q;let T=Q(A),[_,f]=j.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(GQ(J,f,y,Y)));let m=G(_);for(let y=0;y<q;y++){let l=pJ.encode(GQ(J,f,q+y,Y));for(let v=0;v<q;v++){let I=$M(m.get(v,y));lJ(l,yY(I,u[v]))}F.push(l)}m.clean();let k={publicKey:R.encode([F,_]),secretKey:K.encode(u)};return y0(_,f,u,F,A,T),k},encrypt:(w,A,T)=>{let[_,f]=R.decode(w),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(GQ(J,T,v,Y)));let F=G(f),m=new Uint16Array(Q$),k=[];for(let v=0;v<q;v++){let I=GQ(J,T,q+v,X),C=new Uint16Array(Q$);for(let Z=0;Z<q;Z++){let S=$M(F.get(v,Z));lJ(C,yY(S,u[Z]))}lJ(I,pJ.decode(C)),k.push(I),lJ(m,yY(_[v],u[v])),y0(C)}F.clean();let y=GQ(J,T,2*q,X);lJ(y,pJ.decode(m));let l=W.decode(A);return lJ(l,y),y0(_,u,m,y),N.encode([k,l])},decrypt:(w,A)=>{let[T,_]=N.decode(w),f=K.decode(A),u=new Uint16Array(Q$);for(let F=0;F<q;F++)lJ(u,yY(f[F],pJ.encode(T[F])));return CO(_,pJ.decode(u)),y0(u,f,T),W.encode(_)}}};function XU($){let q=EO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q0(M,64,"seed");let{publicKey:z,secretKey:R}=q.keygen(M.subarray(0,32)),K=J(z),N=U.encode([R,z,K,M.subarray(32)]);return y0(R,K),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,R,K,N]=U.decode(M);return Uint8Array.from(R)},encapsulate:(M,z=Uq(32))=>{Q0(M,X.publicKey,"publicKey"),Q0(z,32,"message");let R=M.subarray(0,384*$.K),K=Y.encode(Y.decode(sW(R)));if(!vY(K,R))throw y0(K),Error("ML-KEM.encapsulate: wrong publicKey modulus");y0(K);let N=G.create().update(z).update(J(M)).digest(),j=q.encrypt(M,z,N.subarray(32,64));return y0(N.subarray(32)),{cipherText:j,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q0(z,U.bytesLen,"secretKey"),Q0(M,X.cipherText,"cipherText");let R=U.bytesLen-96,K=R+32,N=J(z.subarray(R/2,K));if(!vY(N,z.subarray(K,K+32)))throw Error("invalid secretKey: hash check failed");let[j,w,A,T]=U.decode(z),_=q.decrypt(M,j),f=G.create().update(_).update(A).digest(),u=f.subarray(0,32),F=q.encrypt(w,_,f.subarray(32,64)),m=vY(M,F),k=Q.create({dkLen:32}).update(T).update(M).digest();return y0(_,F,!m?u:k),m?u:k}}}function PO($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var UU={HASH256:hJ,HASH512:dW,KDF:Xq,XOF:eW,PRF:PO},Cg=XU({...UU,...YU[512]}),YQ=XU({...UU,...YU[768]}),qM=XU({...UU,...YU[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function LO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q0(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function VU($,q=!1){let J=LO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y0(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function WU($){return(q,J)=>$(q,{dkLen:J})}function FO($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;m0($);function Y(X){Q0(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,R)=>z.keygen(U[R])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return y0(U),y0(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function kY($,q,J,G,...Q){let Y=FO($,J,...Q),X=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),V=XQ(Q,"msg");if(q===void 0)q=V.bytesLen;return m0(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Uq(V.bytesLen)){let z=U.decode(W),R=V.decode(M),K=Q.map((A,T)=>A.encapsulate(z[T],R[T])),N=K.map((A)=>A.sharedSecret),j=K.map((A)=>A.cipherText),w={sharedSecret:G(z,j,N),cipherText:X.encode(j)};return y0(N,j),w},decapsulate(W,M){let z=X.decode(W),{publicKey:R,secretKey:K}=Y.expandDecapsulationKey(M),N=Q.map((j,w)=>j.decapsulate(z[w],K[w]));return G(R,z,N)}}}function JM($,q,J,G,Q){return y$(G),y$(Q),kY(32,32,WU(G),(Y,X,U)=>Q(g0(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var kg=JM("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YQ,VU(eX,!0),Xq,hJ),fg=JM("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",qM,VU(bW,!0),Xq,hJ);function gO($,q,J,G,Q){return y$(G),y$(Q),kY(32,32,WU(G),(Y,X,U)=>{let V=g0(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),W=32,M=g0(JJ("hybrid_prk"),V),z=kW(Q,M),R=g0(g8(32,2),JJ("shared_secret"),JJ("")),K=fW(Q,z,R,32);return y0(z,R,M,V),K},q,J)}var GM=VU(vW),xg=gO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YQ,GM,Xq,gY),_O=(()=>kY(32,32,WU(Xq),($,q,J)=>hJ(g0(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),YQ,GM))();function vO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q0(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q0(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return y0(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function bO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=vO(J,Q,Y,G),U=64,V=U+G;return kY(32,32,(W)=>{Q0(W,32);let M=Xq(W,{dkLen:V}),z=M.subarray(0,U),R=M.subarray(U,V);return g0(z,R)},(W,M,z)=>hJ(g0(z[0],z[1],M[1],W[1],JJ($))),q,X)}var yO=(()=>bO("MLKEM768-P256",YQ,eX,128))();var MU=_O,QM=yO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z0=($,q,J)=>u0($,q,J),KU=L0,k8=UY,n0=(...$)=>RX(...$),f8=($)=>bG($),x8=MX,m8=($)=>Sq($),xY=BigInt(0),zU=BigInt(1);function bq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function mY($){if(typeof $==="bigint"){if(!fY($))throw RangeError("positive bigint expected, got "+$)}else KU($);return $}function Vq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function UQ($){let q=mY($).toString(16);return q.length&1?"0"+q:q}function YM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?xY:BigInt("0x"+$)}function rJ($){return YM(UY($))}function i$($){return YM(UY(UJ(u0($)).reverse()))}function hY($,q){if(L0(q),q===0)throw RangeError("zero length");$=mY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return bG(J.padStart(q*2,"0"))}function VQ($,q){return hY($,q).reverse()}function XM($,q){if($=Z0($),q=Z0(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z0($))}function uY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var fY=($)=>typeof $==="bigint"&&xY<=$;function kO($,q,J){return fY($)&&fY(q)&&fY(J)&&q<=$&&$<J}function yq($,q,J,G){if(!kO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<xY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>xY;$>>=zU,q+=1);return q}var WQ=($)=>(zU<<BigInt($))-zU;function UM($,q,J){if(L0($,"hashLen"),L0(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(w)=>new Uint8Array(w),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},R=(...w)=>J(W,n0(V,...w)),K=(w=Q)=>{if(W=R(Y,w),V=R(),w.length===0)return;W=R(X,w),V=R()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let w=0,A=[];while(w<q){V=R();let T=V.slice();A.push(T),w+=V.length}return n0(...A)};return(w,A)=>{z(),K(w);let T=void 0;while((T=A(N()))===void 0)K();return z(),T}}function f$($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var RU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o0=BigInt(0),E0=BigInt(1),dJ=BigInt(2),zM=BigInt(3),KM=BigInt(4),RM=BigInt(5),fO=BigInt(7),DM=BigInt(8),xO=BigInt(9),HM=BigInt(16);function T0($,q){if(q<=o0)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o0?J:q+J}function x$($,q,J){if(q<o0)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o0)G*=G,G%=J;return G}function VM($,q){if($===o0)throw Error("invert: expected non-zero number");if(q<=o0)throw Error("invert: expected positive modulus, got "+q);let J=T0($,q),G=q,Q=o0,Y=E0,X=E0,U=o0;while(J!==o0){let W=G/J,M=G-J*W,z=Q-X*W,R=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=R}if(G!==E0)throw Error("invert: does not exist");return T0(Q,q)}function DU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function OM($,q){let J=$,G=(J.ORDER+E0)/KM,Q=J.pow(q,G);return DU(J,Q,q),Q}function mO($,q){let J=$,G=(J.ORDER-RM)/DM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),V=J.mul(X,J.sub(U,J.ONE));return DU(J,V,q),V}function hO($){let q=pY($),J=NM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+fO)/HM;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),R=W.mul(M,Q),K=W.mul(M,Y),N=W.eql(W.sqr(z),V),j=W.eql(W.sqr(R),V);M=W.cmov(M,z,N),z=W.cmov(K,R,j);let w=W.eql(W.sqr(z),V),A=W.cmov(M,z,w);return DU(W,A,V),A}}function NM($){if($<zM)throw Error("sqrt is not defined for small field");let q=$-E0,J=0;while(q%dJ===o0)q/=dJ,J++;let G=dJ,Q=pY($);while(WM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return OM;let Y=Q.pow(G,q),X=(q+E0)/dJ;return function(V,W){let M=V;if(M.is0(W))return W;if(WM(M,W)!==1)throw Error("Cannot find square root");let z=J,R=M.mul(M.ONE,Y),K=M.pow(W,q),N=M.pow(W,X);while(!M.eql(K,M.ONE)){if(M.is0(K))return M.ZERO;let j=1,w=M.sqr(K);while(!M.eql(w,M.ONE))if(j++,w=M.sqr(w),j===z)throw Error("Cannot find square root");let A=E0<<BigInt(z-j-1),T=M.pow(R,A);z=j,R=M.sqr(T),K=M.mul(K,R),N=M.mul(N,T)}return N}}function uO($){if($%KM===zM)return OM;if($%DM===RM)return mO;if($%HM===xO)return hO($);return NM($)}var kq=($,q)=>(T0($,q)&E0)===E0,pO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function HU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=pO.reduce((G,Q)=>{return G[Q]="function",G},q);if(f$($,J),Vq($.BYTES,"BYTES"),Vq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=E0)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function lO($,q,J){let G=$;if(J<o0)throw Error("invalid exponent, negatives unsupported");if(J===o0)return G.ONE;if(J===E0)return q;let Q=G.ONE,Y=q;while(J>o0){if(J&E0)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=E0}return Q}function MQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function WM($,q){let J=$,G=(J.ORDER-E0)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function rO($,q){if(q!==void 0)KU(q);if($<=o0)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var MM=new WeakMap;class OU{ORDER;BITS;BYTES;isLE;ZERO=o0;ONE=E0;_lengths;_mod;constructor($,q={}){if($<=E0)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=rO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o0<=$&&$<this.ORDER}is0($){return $===o0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&E0)===E0}neg($){return T0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T0($*$,this.ORDER)}add($,q){return T0($+q,this.ORDER)}sub($,q){return T0($-q,this.ORDER)}mul($,q){return T0($*q,this.ORDER)}pow($,q){return lO(this,$,q)}div($,q){return T0($*VM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return VM($,this.ORDER)}sqrt($){let q=MM.get(this);if(!q)MM.set(this,q=uO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?VQ($,this.BYTES):hY($,this.BYTES)}fromBytes($,q=!1){Z0($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i$($):rJ($);if(X)U=T0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return MQ(this,$)}cmov($,q,J){return bq(J,"condition"),J?q:$}}Object.freeze(OU.prototype);function pY($,q={}){return new OU($,q)}function jM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=E0)throw Error("field order must be greater than 1");let q=h8($-E0);return Math.ceil(q/8)}function NU($){let q=jM($);return q+Math.ceil(q/2)}function wM($,q,J=!1){Z0($);let G=$.length,Q=jM(q),Y=Math.max(NU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i$($):rJ($),U=T0(X,q-E0)+E0;return J?VQ(U,Q):hY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=MQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function SM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function jU($,q){SM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=WQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function AM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=iJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,R=U<0,K=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:R,isNegF:K,offsetF:W}}var wU=new WeakMap,TM=new WeakMap;function AU($){return TM.get($)||1}function ZM($){if($!==u8)throw Error("invalid wNAF")}class KQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=jU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=jU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:R}=AM(J,X,Y);if(J=U,W)Q=Q.add(zQ(z,q[R]));else G=G.add(zQ(M,q[V]))}return ZM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=jU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=AM(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return ZM(J),G}getPrecomputes($,q,J){let G=wU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);wU.set(q,G)}}return G}cached($,q,J){let G=AU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=AU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){SM(q,this.bits),TM.set($,q),wU.delete($)}hasCache($){return AU($)!==1}}function CM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function BM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return HU(q),q}else return pY($,{isLE:J})}function lY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>u8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=BM(q.p,J.Fp,G),Y=BM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function RQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Vq($),Vq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function dO($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function iO($){if(!x8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?uY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function ZU($,q,J,G){if(Z0($),Vq(J),q=iO(q),q.length>255)q=G(n0(uY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n0(q,DQ(q.length,1)),V=new Uint8Array(Y),W=DQ(J,2),M=Array(X),z=G(n0(V,$,W,DQ(0,1),U));M[0]=G(n0(z,DQ(1,1),U));for(let K=1;K<X;K++){let N=[dO(z,M[K-1]),DQ(K+1,1),U];M[K]=G(n0(...N))}return n0(...M).slice(0,J)}var IM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var EM=($,q)=>($+($>=0?q:-q)/LM)/q;function cO($,q,J){yq("scalar",$,Wq,J);let[[G,Q],[Y,X]]=q,U=EM(X*$,J),V=EM(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Wq,R=M<Wq;if(z)W=-W;if(R)M=-M;let K=WQ(Math.ceil(h8(J)/2))+VJ;if(W<Wq||W>=K||M<Wq||M>=K)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:R,k2:M}}function SU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function BU($,q){f$($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(bq(J.lowS,"lowS"),bq(J.prehash,"prehash"),J.format!==void 0)SU(J.format);return J}class PM extends Error{constructor($=""){super($)}}var c$={Err:PM,_tlv:{encode:($,q)=>{let{Err:J}=c$;if(Vq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=UQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?UQ(Q.length/2|128):"";return UQ($)+Y+Q+q},decode($,q){let{Err:J}=c$;q=Z0(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c$;if(mY($),$<Wq)throw new q("integer: negative integers are not allowed");let J=UQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c$;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c$,Q=Z0($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=c$,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c$._tlv);Object.freeze(c$._int);Object.freeze(c$);var Wq=BigInt(0),VJ=BigInt(1),LM=BigInt(2),rY=BigInt(3),nO=BigInt(4);function FM($,q={}){let J=lY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;f$(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=_M(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function R(v,I,C){if(W&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(bq(C,"isCompressed"),C){z();let g=!G.isOdd(S);return n0(gM(g),P)}else return n0(Uint8Array.of(4),P,G.toBytes(S))}function K(v){Z0(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:C}=M,Z=v.length,S=v[0],P=v.subarray(1);if(W&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=w(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===C&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${C}`)}let N=q.toBytes===void 0?R:q.toBytes,j=q.fromBytes===void 0?K:q.fromBytes;function w(v){let I=G.sqr(v),C=G.mul(I,v);return G.add(G.add(C,G.mul(v,Y.a)),Y.b)}function A(v,I){let C=G.sqr(I),Z=w(v);return G.eql(C,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,rY),nO),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function f(v,I,C=!1){if(!G.isValid(I)||C&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof k))throw Error("Weierstrass Point expected")}function F(v){if(!V||!V.basises)throw Error("no endo");return cO(v,V.basises,Q.ORDER)}function m(v,I,C,Z,S){return C=new k(G.mul(C.X,v),C.Y,C.Z),I=zQ(Z,I),C=zQ(S,C),I.add(C)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,C){this.X=f("x",v),this.Y=f("y",I,!0),this.Z=f("z",C),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:C}=v||{};if(!v||!G.isValid(I)||!G.isValid(C))throw Error("invalid affine point");if(v instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(C))return k.ZERO;return new k(I,C,G.ONE)}static fromBytes(v){let I=k.fromAffine(j(Z0(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return k.fromBytes(f8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(rY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:C}=v.toAffine();if(!G.isValid(I)||!G.isValid(C))throw Error("bad point: x or y not field elements");if(!A(I,C))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(C,g),G.mul(P,Z));return L&&b}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,C=G.mul(I,rY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),x=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(C,d),L=G.add(g,L),g=G.sub(x,L),L=G.add(x,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(C,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,x),b=G.add(b,b),b=G.add(b,b),new k(g,L,b)}add(v){u(v);let{X:I,Y:C,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,x=Y.a,d=G.mul(Y.b,rY),B=G.mul(I,S),a=G.mul(C,P),q0=G.mul(Z,g),Y0=G.add(I,C),G0=G.add(S,P);Y0=G.mul(Y0,G0),G0=G.add(B,a),Y0=G.sub(Y0,G0),G0=G.add(I,Z);let t=G.add(S,g);return G0=G.mul(G0,t),t=G.add(B,q0),G0=G.sub(G0,t),t=G.add(C,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q0),t=G.sub(t,L),O=G.mul(x,G0),L=G.mul(d,q0),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q0=G.mul(x,q0),G0=G.mul(d,G0),a=G.add(a,q0),q0=G.sub(B,q0),q0=G.mul(x,q0),G0=G.add(G0,q0),B=G.mul(a,G0),b=G.add(b,B),B=G.mul(t,G0),L=G.mul(Y0,L),L=G.sub(L,B),B=G.mul(Y0,a),O=G.mul(t,O),O=G.add(O,B),new k(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(k.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let C,Z,S=(P)=>l.cached(this,P,(g)=>cJ(k,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:x}=S(g),{p:d,f:B}=S(b);Z=x.add(B),C=m(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);C=P,Z=g}return cJ(k,[C,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,C=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Wq||C.is0())return k.ZERO;if(Z===VJ)return C;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=CM(k,C,P,L);return m(I.beta,b,O,S,g)}else return l.unsafe(C,Z)}toAffine(v){let I=this,C=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(C==null)C=g?G.ONE:G.inv(P);let L=G.mul(Z,C),b=G.mul(S,C),O=G.mul(P,C);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===VJ)return!0;if(v)return v(k,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===VJ)return this;if(v)return v(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===VJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return bq(v,"isCompressed"),this.assertValidity(),N(k,this,v)}toHex(v=!0){return k8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new KQ(k,q.endo?Math.ceil(y/2):y);if(y>=8)k.BASE.precompute(8);return Object.freeze(k.prototype),Object.freeze(k),k}function gM($){return Uint8Array.of($?2:3)}function _M($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function oO($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?m8:q.randomBytes,Q=Object.assign(_M($.Fp,J),{seed:Math.max(NU(J.ORDER),16)});function Y(K){try{let N=J.fromBytes(K);return J.isValidNot0(N)}catch(N){return!1}}function X(K,N){let{publicKey:j,publicKeyUncompressed:w}=Q;try{let A=K.length;if(N===!0&&A!==j)return!1;if(N===!1&&A!==w)return!1;return!!$.fromBytes(K)}catch(A){return!1}}function U(K){return K=K===void 0?G(Q.seed):K,wM(Z0(K,Q.seed,"seed"),J.ORDER)}function V(K,N=!0){return $.BASE.multiply(J.fromBytes(K)).toBytes(N)}function W(K){let{secretKey:N,publicKey:j,publicKeyUncompressed:w}=Q,A=J._lengths;if(!x8(K))return;let T=Z0(K,void 0,"key").length,_=T===j||T===w,f=T===N||!!A?.includes(T);if(_&&f)return;return _}function M(K,N,j=!0){if(W(K)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let w=J.fromBytes(K);return $.fromBytes(N).multiply(w).toBytes(j)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},R=RQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:R,Point:$,utils:z,lengths:Q})}function vM($,q,J={}){let G=q;Bq(G),f$(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?m8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Tq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N}=oO($,J),j={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=V*LM+VJ<X.ORDER;function A(S){let P=V>>VJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function f(S,P){SU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z0(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=j.format){f(S,P);let g;if(P==="der"){let{r:x,s:d}=c$.toSig(Z0(S));return new u(x,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(f8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),x=$.fromBytes(n0(gM((L&1)===0),O)),d=U.inv(b),B=m(Z0(S,void 0,"msgHash")),a=U.create(-B*d),q0=U.create(g*d),Y0=$.BASE.multiplyUnsafe(a).add(x.multiplyUnsafe(q0));if(Y0.is0())throw Error("invalid recovery: point at infinify");return Y0.assertValidity(),Y0}hasHighS(){return A(this.s)}toBytes(S=j.format){if(SU(S),S==="der")return f8(c$.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n0(Uint8Array.of(this.assertRecovery()),L,b);return n0(L,b)}toHex(S){return k8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,m=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,k=WQ(W);function y(S){return yq("num < 2^"+W,S,Wq,k),U.toBytes(S)}function l(S,P){return Z0(S,void 0,"message"),P?Z0(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=BU(g,j);S=l(S,b);let x=m(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(x)];if(O!=null&&O!==!1){let G0=O===!0?Q(N.secretKey):O;B.push(Z0(G0,void 0,"extraEntropy"))}let a=n0(...B),q0=x;function Y0(G0){let t=F(G0);if(!U.isValidNot0(t))return;let O0=U.inv(t),A0=$.BASE.multiply(t).toAffine(),I0=U.create(A0.x);if(I0===Wq)return;let x0=U.create(O0*U.create(q0+I0*d));if(x0===Wq)return;let K$=(A0.x===I0?0:2)|Number(A0.y&VJ),Jq=x0;if(L&&A(x0))Jq=U.neg(x0),K$^=1;return new u(I0,Jq,w?void 0:K$)}return{seed:a,k2sig:Y0}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return UM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function C(S,P,g,L={}){let{lowS:b,prehash:O,format:x}=BU(L,j);if(g=Z0(g,void 0,"publicKey"),P=l(P,O),!x8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}f(S,x);try{let d=u.fromBytes(S,x),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q0}=d,Y0=m(P),G0=U.inv(q0),t=U.create(Y0*G0),O0=U.create(a*G0),A0=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O0));if(A0.is0())return!1;return U.create(A0.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=BU(g,j);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:R,utils:K,lengths:N,Point:$,sign:I,verify:C,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var sO=FM(aO),p8=vM(sO,r0);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WJ=BigInt(0),B$=BigInt(1),TU=BigInt(2),tO=BigInt(8);function eO($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function bM($,q={}){let J=q,G=lY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;f$(J,{},{uvRatio:"function"});let V=TU<<BigInt(Y.BYTES*8)-B$,W=(j)=>Q.create(j),M=J.uvRatio===void 0?(j,w)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(j,w))}}catch(A){return{isValid:!1,value:WJ}}}:J.uvRatio;if(!eO(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(j,w,A=!1){let T=A?B$:WJ;return yq("coordinate "+j,w,T,V),w}function R(j){if(!(j instanceof K))throw Error("EdwardsPoint expected")}class K{static BASE=new K(X.Gx,X.Gy,B$,W(X.Gx*X.Gy));static ZERO=new K(WJ,B$,B$,WJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(j,w,A,T){this.X=z("x",j),this.Y=z("y",w),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(j){if(j instanceof K)throw Error("extended point not allowed");let{x:w,y:A}=j||{};return z("x",w),z("y",A),new K(w,A,B$,W(w*A))}static fromBytes(j,w=!1){let A=Q.BYTES,{a:T,d:_}=X;j=UJ(Z0(j,A,"point")),bq(w,"zip215");let f=UJ(j),u=j[A-1];f[A-1]=u&-129;let F=i$(f),m=w?V:Q.ORDER;yq("point.y",F,WJ,m);let k=W(F*F),y=W(k-B$),l=W(_*k-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let C=(I&B$)===B$,Z=(u&128)!==0;if(!w&&I===WJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==C)I=W(-I);return K.fromAffine({x:I,y:F})}static fromHex(j,w=!1){return K.fromBytes(f8(j),w)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(j=8,w=!0){if(N.createCache(this,j),!w)this.multiply(TU);return this}assertValidity(){let j=this,{a:w,d:A}=X;if(j.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:f,T:u}=j,F=W(T*T),m=W(_*_),k=W(f*f),y=W(k*k),l=W(F*w),v=W(k*W(l+m)),I=W(y+W(A*W(F*m)));if(v!==I)throw Error("bad point: equation left != right (1)");let C=W(T*_),Z=W(f*u);if(C!==Z)throw Error("bad point: equation left != right (2)")}equals(j){R(j);let{X:w,Y:A,Z:T}=this,{X:_,Y:f,Z:u}=j,F=W(w*u),m=W(_*T),k=W(A*u),y=W(f*T);return F===m&&k===y}is0(){return this.equals(K.ZERO)}negate(){return new K(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:j}=X,{X:w,Y:A,Z:T}=this,_=W(w*w),f=W(A*A),u=W(TU*W(T*T)),F=W(j*_),m=w+A,k=W(W(m*m)-_-f),y=F+f,l=y-u,v=F-f,I=W(k*l),C=W(y*v),Z=W(k*v),S=W(l*y);return new K(I,C,S,Z)}add(j){R(j);let{a:w,d:A}=X,{X:T,Y:_,Z:f,T:u}=this,{X:F,Y:m,Z:k,T:y}=j,l=W(T*F),v=W(_*m),I=W(u*A*y),C=W(f*k),Z=W((T+_)*(F+m)-l-v),S=C-I,P=C+I,g=W(v-w*l),L=W(Z*S),b=W(P*g),O=W(Z*g),x=W(S*P);return new K(L,b,x,O)}subtract(j){return R(j),this.add(j.negate())}multiply(j){if(!Y.isValidNot0(j))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:w,f:A}=N.cached(this,j,(T)=>cJ(K,T));return cJ(K,[w,A])[0]}multiplyUnsafe(j){if(!Y.isValid(j))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(j===WJ)return K.ZERO;if(this.is0()||j===B$)return this;return N.unsafe(this,j,(w)=>cJ(K,w))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(j){let w=this,A=j,{X:T,Y:_,Z:f}=w,u=w.is0();if(A==null)A=u?tO:Q.inv(f);let F=W(T*A),m=W(_*A),k=Q.mul(f,A);if(u)return{x:WJ,y:B$};if(k!==B$)throw Error("invZ was invalid");return{x:F,y:m}}clearCofactor(){if(U===B$)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:j,y:w}=this.toAffine(),A=Q.toBytes(w);return A[A.length-1]|=j&B$?128:0,A}toHex(){return k8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new KQ(K,Y.BITS);if(Y.BITS>=8)K.BASE.precompute(8);return Object.freeze(K.prototype),Object.freeze(K),K}class CU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){RU()}static fromHex($){RU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return k8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HQ=BigInt(0),l8=BigInt(1),dY=BigInt(2);function $N($){return f$($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function yM($){let q=$N($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?m8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),R=U?BigInt(121665):BigInt(39081),K=U?dY**BigInt(254):dY**BigInt(447),N=U?BigInt(8)*dY**BigInt(251)-l8:BigInt(4)*dY**BigInt(445)-l8,j=K+N+l8,w=(Z)=>T0(Z,J),A=T(z);function T(Z){return VQ(w(Z),M)}function _(Z){let S=UJ(Z0(Z,M,"uCoordinate"));if(U)S[31]&=127;return w(i$(S))}function f(Z){return i$(Q(UJ(Z0(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),f(Z));if(P===HQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let m=F,k=u;function y(Z,S,P){let g=w(Z*(S-P));return S=w(S-g),P=w(P+g),{x_2:S,x_3:P}}function l(Z,S){yq("u",Z,HQ,J),yq("scalar",S,K,j);let P=S,g=Z,L=l8,b=HQ,O=Z,x=l8,d=HQ;for(let a=BigInt(W-1);a>=HQ;a--){let q0=P>>a&l8;d^=q0,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:x}=y(d,b,x),d=q0;let Y0=L+b,G0=w(Y0*Y0),t=L-b,O0=w(t*t),A0=G0-O0,I0=O+x,x0=O-x,K$=w(x0*Y0),Jq=w(I0*t),dq=K$+Jq,iq=K$-Jq;O=w(dq*dq),x=w(g*w(iq*iq)),L=w(G0*O0),b=w(A0*(G0+w(R*A0)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:x}=y(d,b,x);let B=Y(b);return w(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?V(M):Z,Z0(Z,v.seed,"seed"),Z},C={randomSecretKey:I};return Object.freeze(v),Object.freeze(C),Object.freeze({keygen:RQ(I,m),getSharedSecret:k,getPublicKey:m,scalarMult:u,scalarMultBase:F,utils:C,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qN=BigInt(0),fq=BigInt(1),kM=BigInt(2),JN=BigInt(3),GN=BigInt(5),QN=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),LU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:QN,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function mM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,V=x$(U,kM,Y)*U%Y,W=x$(V,fq,Y)*$%Y,M=x$(W,GN,Y)*W%Y,z=x$(M,q,Y)*M%Y,R=x$(z,J,Y)*z%Y,K=x$(R,G,Y)*R%Y,N=x$(K,Q,Y)*K%Y,j=x$(N,Q,Y)*K%Y,w=x$(j,q,Y)*M%Y;return{pow_p_5_8:x$(w,kM,Y)*$%Y,b2:U}}function YN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var IU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function FU($,q){let J=oJ,G=T0(q*q*q,J),Q=T0(G*G*q,J),Y=mM($*Q).pow_p_5_8,X=T0($*G*Y,J),U=T0(q*X*X,J),V=X,W=T0(X*IU,J),M=U===$,z=U===T0(-$,J),R=U===T0(-$*IU,J);if(M)X=V;if(z||R)X=W;if(kq(X,J))X=T0(-X,J);return{isValid:M||z,value:X}}var nJ=bM(LU,{uvRatio:FU}),MJ=(()=>nJ.Fp)(),hM=(()=>nJ.Fn)();var iY=(()=>{let $=oJ;return yM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=mM(q);return T0(x$(J,JN,$)*G,$)},adjustScalarBytes:YN})})();var EU=IU,XN=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),UN=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),VN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),WN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),fM=($)=>FU(fq,$),MN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),PU=($)=>MJ.create(i$($)&MN);function xM($){let{d:q}=LU,J=oJ,G=(A)=>MJ.create(A),Q=G(EU*$*$),Y=G((Q+fq)*VN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=FU(Y,U),M=G(W*$);if(!kq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-fq)*WN-U),R=W*W,K=G((W+W)*U),N=G(z*XN),j=G(fq-R),w=G(fq+R);return new nJ(G(K*w),G(j*N),G(N*w),G(K*j))}class O$ extends CU{static BASE=(()=>new O$(nJ.BASE))();static ZERO=(()=>new O$(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>hM)();constructor($){super($)}static fromAffine($){return new O$(nJ.fromAffine($))}assertSame($){if(!($ instanceof O$))throw Error("RistrettoPoint expected")}init($){return new O$($)}static fromBytes($){u0($,32);let{a:q,d:J}=LU,G=oJ,Q=(_)=>MJ.create(_),Y=PU($);if(!XM(MJ.toBytes(Y),$)||kq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(fq+q*X),V=Q(fq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:R,value:K}=fM(Q(z*M)),N=Q(K*V),j=Q(K*N*z),w=Q((Y+Y)*N);if(kq(w,G))w=Q(-w);let A=Q(U*j),T=Q(w*A);if(!R||kq(T,G)||A===qN)throw Error("invalid ristretto255 encoding 2");return new O$(new nJ(w,A,fq,T))}static fromHex($){return O$.fromBytes(bG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(j)=>MJ.create(j),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=fM(Y(X*V)),M=Y(W*X),z=Y(W*U),R=Y(M*z*G),K;if(kq(G*R,Q)){let j=Y(q*EU),w=Y($*EU);$=j,q=w,K=Y(M*UN)}else K=z;if(kq($*R,Q))q=Y(-q);let N=Y((J-q)*K);if(kq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>MJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(O$.ZERO)}}Object.freeze(O$.BASE);Object.freeze(O$.ZERO);Object.freeze(O$.prototype);Object.freeze(O$);var zN=Object.freeze({Point:O$,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=ZU($,J,64,zY);return zN.deriveToCurve(G)},hashToScalar($,q={DST:IM}){let J=ZU($,q.DST,64,zY);return hM.create(i$(J))},deriveToCurve($){u0($,64);let q=PU($.subarray(0,32)),J=xM(q),G=PU($.subarray(32,64)),Q=xM(G);return new O$(J.add(Q))}});var uM=!1,KN=!1;async function pM($,q){if(KN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function _U($,q){return await pM(async()=>{let J=gU($)?$:await DN($),G=await crypto.subtle.importKey("raw",HN(q),{name:"X25519"},uM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(gU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMult($,q)})}async function vU($){return await pM(async()=>{return _U($,iY.GuBytes)},()=>{if(gU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMultBase($)})}var RN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function DN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...RN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},uM,["deriveBits"])}function gU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function HN($){return $}class lM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),NN(OQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=OQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:OQ(this.transcript)}}}function NN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function OQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function cY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function rM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function dM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class xq{args;body;constructor($,q){this.args=$,this.body=q}}function bU($){let q=[];q.push(`age-encryption.org/v1
|
|
58
58
|
`);for(let J of $){q.push("-> "+J.args.join(" ")+`
|
|
59
59
|
`);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(p$.encode(J.body.subarray(G,Q))+`
|
|
60
60
|
`)}if(J.body.length%48===0)q.push(`
|
package/dist/index.js
CHANGED
|
@@ -53,7 +53,7 @@ return `+str.trim()+`;
|
|
|
53
53
|
`).join(`
|
|
54
54
|
`+Y),$.push(Q+"m+"+uY.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=xB()+q+" "+$[0]}function xB(){if(Fz.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function mB(...$){return process.stderr.write(hY.formatWithOptions(Fz.inspectOpts,...$)+`
|
|
55
55
|
`)}function hB($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function uB(){return process.env.DEBUG}function pB($){$.inspectOpts={};let q=Object.keys(Fz.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=Fz.inspectOpts[q[J]]}uY.exports=eX()(Fz);var{formatters:Lz}=uY.exports;Lz.o=function($){return this.inspectOpts.colors=this.useColors,hY.inspect($,this.inspectOpts).split(`
|
|
56
|
-
`).map((q)=>q.trim()).join(" ")};Lz.O=function($){return this.inspectOpts.colors=this.useColors,hY.inspect($,this.inspectOpts)}});var vz=X0((Oy,JU)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)JU.exports=Sz();else JU.exports=_z()});var gK=X0((rx,FK)=>{var sY=Object.prototype.hasOwnProperty,LK=Object.prototype.toString,SK=Object.defineProperty,TK=Object.getOwnPropertyDescriptor,CK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return LK.call(q)==="[object Array]"},IK=function(q){if(!q||LK.call(q)!=="[object Object]")return!1;var J=sY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&sY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||sY.call(q,Q)},EK=function(q,J){if(SK&&J.name==="__proto__")SK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},PK=function(q,J){if(J==="__proto__"){if(!sY.call(q,J))return;else if(TK)return TK(q,J).value}return q[J]};FK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=PK(U,J),Q=PK(q,J),U!==Q){if(M&&Q&&(IK(Q)||(Y=CK(Q)))){if(Y)Y=!1,X=G&&CK(G)?G:[];else X=G&&IK(G)?G:{};EK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")EK(U,{name:J,newValue:Q})}}return U}});import{access as xC,chmod as $7,mkdir as mR,readFile as J7,unlink as mC,writeFile as hR}from"fs/promises";import{dirname as hC,join as M9}from"path";import{fileURLToPath as uC}from"url";var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.
|
|
56
|
+
`).map((q)=>q.trim()).join(" ")};Lz.O=function($){return this.inspectOpts.colors=this.useColors,hY.inspect($,this.inspectOpts)}});var vz=X0((Oy,JU)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)JU.exports=Sz();else JU.exports=_z()});var gK=X0((rx,FK)=>{var sY=Object.prototype.hasOwnProperty,LK=Object.prototype.toString,SK=Object.defineProperty,TK=Object.getOwnPropertyDescriptor,CK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return LK.call(q)==="[object Array]"},IK=function(q){if(!q||LK.call(q)!=="[object Object]")return!1;var J=sY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&sY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||sY.call(q,Q)},EK=function(q,J){if(SK&&J.name==="__proto__")SK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},PK=function(q,J){if(J==="__proto__"){if(!sY.call(q,J))return;else if(TK)return TK(q,J).value}return q[J]};FK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=PK(U,J),Q=PK(q,J),U!==Q){if(M&&Q&&(IK(Q)||(Y=CK(Q)))){if(Y)Y=!1,X=G&&CK(G)?G:[];else X=G&&IK(G)?G:{};EK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")EK(U,{name:J,newValue:Q})}}return U}});import{access as xC,chmod as $7,mkdir as mR,readFile as J7,unlink as mC,writeFile as hR}from"fs/promises";import{dirname as hC,join as M9}from"path";import{fileURLToPath as uC}from"url";var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.44",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var UX=`ARG BUN_VERSION=1.3.10
|
|
57
57
|
FROM oven/bun:\${BUN_VERSION}-slim AS runtime
|
|
58
58
|
|
|
59
59
|
WORKDIR /app
|