npm - @rizom/ops - Versions diffs - 0.2.0-alpha.46 → 0.2.0-alpha.48 - Mend

@rizom/ops 0.2.0-alpha.46 → 0.2.0-alpha.48

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -54,7 +54,7 @@ return `+str.trim()+`;
 `).join(`
 `+Y),$.push(Q+"m+"+_9.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=ET()+q+" "+$[0]}function ET(){if(BD.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function IT(...$){return process.stderr.write(g9.formatWithOptions(BD.inspectOpts,...$)+`
 `)}function CT($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function PT(){return process.env.DEBUG}function LT($){$.inspectOpts={};let q=Object.keys(BD.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=BD.inspectOpts[q[J]]}_9.exports=k7()(BD);var{formatters:ZD}=_9.exports;ZD.o=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts).split(`
-`).map((q)=>q.trim()).join(" ")};ZD.O=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts)}});var ED=X$((wx,h7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)h7.exports=HD();else h7.exports=TD()});var S1=X$((dp,B1)=>{var p9=Object.prototype.hasOwnProperty,Z1=Object.prototype.toString,H1=Object.defineProperty,O1=Object.getOwnPropertyDescriptor,N1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Z1.call(q)==="[object Array]"},w1=function(q){if(!q||Z1.call(q)!=="[object Object]")return!1;var J=p9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&p9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||p9.call(q,Q)},j1=function(q,J){if(H1&&J.name==="__proto__")H1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},A1=function(q,J){if(J==="__proto__"){if(!p9.call(q,J))return;else if(O1)return O1(q,J).value}return q[J]};B1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=A1(U,J),Q=A1(q,J),U!==Q){if(M&&Q&&(w1(Q)||(Y=N1(Q)))){if(Y)Y=!1,X=G&&N1(G)?G:[];else X=G&&w1(G)?G:{};j1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")j1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as nO}from"util";var oO={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function XX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function UX($,q){let J=$[q];return typeof J==="string"?J:void 0}function n5($){let{values:q,positionals:J}=nO({args:$,options:oO,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:XX(q,"help"),version:XX(q,"version"),dryRun:XX(q,"dry-run"),pushTo:UX(q,"push-to"),cohort:UX(q,"cohort"),anchorId:UX(q,"anchor-id")}}}var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.46",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as g4,mkdirSync as _4,readFileSync as rU,writeFileSync as dU}from"fs";import{dirname as v4,join as aM}from"path";function VX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u$($,q,J=""){let G=VX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Bq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L$($.outputLen),L$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){u$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function K0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function E8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var sO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function tO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function eO($){for(let q=0;q<$.length;q++)$[q]=tO($[q]);return $}var WX=sO?($)=>$:eO,a5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),$6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function UY($){if(u$($),a5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=$6[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function o5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function bG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(a5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=o5($.charCodeAt(Y)),U=o5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function q6($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function MX($,q=""){if(typeof $==="string")return q6($);return u$($,void 0,q)}function zX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function VY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function RX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Sq($=32){L$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var KX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class DX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Bq($),u$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),K0(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),YY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Tq=(()=>{let $=(q,J,G)=>new DX(q,J).update(G).digest();return $.create=(q,J)=>new DX(q,J),$})();function yG($,q,J){if(Bq($),J===void 0)J=new Uint8Array($.outputLen);return Tq($,J,q)}var HX=Uint8Array.of(0),s5=Uint8Array.of();function OX($,q,J,G=32){Bq($),L$(G,"length"),u$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=s5;else u$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Tq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)HX[0]=M+1,V.update(M===0?s5:W).update(J).update(HX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),K0(W,HX),X.slice(0,G)}var fG=($,q,J,G,Q)=>OX($,yG($,q,J),G,Q);function t5($,q,J){return $&q^~$&J}function e5($,q,J){return $&q^$&J^q&J}class WY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=E8(this.buffer)}update($){T8(this),u$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=E8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,K0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=E8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Iq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var MY=BigInt(4294967295),$V=BigInt(32);function J6($,q=!1){if(q)return{h:Number($&MY),l:Number($>>$V&MY)};return{h:Number($>>$V&MY)|0,l:Number($&MY)|0}}function qV($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=J6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var NX=($,q,J)=>$>>>J,wX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,mG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var JV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),GV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,QV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),YV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,XV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),UV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var Q6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class jX extends WY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],K=cq[M-2],R=u0(z,7)^u0(z,18)^z>>>3,N=u0(K,17)^u0(K,19)^K>>>10;cq[M]=N+cq[M-7]+R+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=u0(X,6)^u0(X,11)^u0(X,25),K=W+z+t5(X,U,V)+Q6[M]+cq[M]|0,N=(u0(J,2)^u0(J,13)^u0(J,22))+e5(J,G,Q)|0;W=V,V=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){K0(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),K0(this.buffer)}}class VV extends jX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class Y6 extends jX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(28)}}var WV=(()=>qV(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),X6=(()=>WV[0])(),U6=(()=>WV[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends WY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,k=oq[T-15]|0,u=FJ(_,k,1)^FJ(_,k,8)^NX(_,k,7),F=gJ(_,k,1)^gJ(_,k,8)^wX(_,k,7),x=nq[T-2]|0,f=oq[T-2]|0,y=FJ(x,f,19)^kG(x,f,61)^NX(x,f,6),l=gJ(x,f,19)^mG(x,f,61)^wX(x,f,6),v=QV(F,l,oq[T-7],oq[T-16]),I=YV(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^kG(M,z,41),k=gJ(M,z,14)^gJ(M,z,18)^mG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=XV(A,k,F,U6[T],oq[T]),f=UV(x,j,_,u,X6[T],nq[T]),y=x|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^mG(J,G,34)^mG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Gq(V|0,W|0,f|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=JV(y,v,E);J=GV(Z,f,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Gq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Gq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Gq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Gq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,K,R,N,w,j,A)}roundClean(){K0(nq,oq)}destroy(){this.destroyed=!0,K0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class MV extends xG{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(64)}}class V6 extends xG{Ah=p$[0]|0;Al=p$[1]|0;Bh=p$[2]|0;Bl=p$[3]|0;Ch=p$[4]|0;Cl=p$[5]|0;Dh=p$[6]|0;Dl=p$[7]|0;Eh=p$[8]|0;El=p$[9]|0;Fh=p$[10]|0;Fl=p$[11]|0;Gh=p$[12]|0;Gl=p$[13]|0;Hh=p$[14]|0;Hl=p$[15]|0;constructor(){super(48)}}var e$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class W6 extends xG{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(28)}}class M6 extends xG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(32)}}var r$=RX(()=>new VV,KX(1));var zY=RX(()=>new MV,KX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function OY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function BX($){if(!OY($))throw Error("Uint8Array expected")}function HV($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function OV($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function uG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function KY($){if(!Array.isArray($))throw Error("array expected")}function DY($,q){if(!HV(!0,q))throw Error(`${$}: array of strings expected`)}function SX($,q){if(!HV(!1,q))throw Error(`${$}: array of numbers expected`)}function C0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P0($){let q=typeof $==="string"?$.split(""):$,J=q.length;DY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return KY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return KY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L0($=""){return aq("join",$),{encode:(q)=>{return DY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function NY($,q="="){return uG($),aq("padding",q),{encode(J){DY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){DY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function NV($){return OV($),{encode:(q)=>q,decode:(q)=>$(q)}}function zV($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(KY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(uG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,K=z+M;if(!Number.isSafeInteger(K)||z/q!==U||K-M!==z)throw Error("convertRadix: carry overflow");let R=K/J;U=K%J;let N=Math.floor(R);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==K)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var wV=($,q)=>q===0?$:wV(q,$%q),HY=($,q)=>$+(q-wV($,q)),RY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function AX($,q,J,G){if(KY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(HY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${HY(q,J)}`);let Q=0,Y=0,X=RY[q],U=RY[J]-1,V=[];for(let W of $){if(uG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=RY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function z6($){uG($);let q=256;return{encode:(J)=>{if(!OY(J))throw Error("radix.encode input should be Uint8Array");return zV(Array.from(J),q,$)},decode:(J)=>{return SX("radix.decode",J),Uint8Array.from(zV(J,$,q))}}}function b0($,q=!1){if(uG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(HY(8,$)>32||HY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!OY(J))throw Error("radix2.encode input should be Uint8Array");return AX(Array.from(J),8,$,!q)},decode:(J)=>{return SX("radix2.decode",J),Uint8Array.from(AX(J,$,8,q))}}}function RV($){return OV($),function(...q){try{return $.apply(null,q)}catch(J){}}}var v3=C0(b0(4),P0("0123456789ABCDEF"),L0("")),b3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),NY(5),L0("")),y3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L0("")),f3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),NY(5),L0("")),k3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L0("")),m3=C0(b0(5),P0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L0(""),NV(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),jV=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),AV=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},TX=jV?{encode($){return BX($),$.toBase64()},decode($){return AV($,!1)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),NY(6),L0("")),p0=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L0("")),x3=jV?{encode($){return BX($),$.toBase64({alphabet:"base64url"})},decode($){return AV($,!0)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),NY(6),L0("")),h3=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L0("")),EX=($)=>C0(z6(58),P0($),L0("")),u3=EX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),p3=EX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),l3=EX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var ZX=C0(P0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L0("")),KV=[996825010,642813549,513874426,1027748829,705979059];function hG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<KV.length;G++)if((q>>G&1)===1)J^=KV[G];return J}function DV($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=hG(Q)^X>>5}Q=hG(Q);for(let Y=0;Y<G;Y++)Q=hG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=hG(Q)^Y;for(let Y=0;Y<6;Y++)Q=hG(Q);return Q^=J,ZX.encode(AX([Q%RY[30]],30,5,!1))}function ZV($){let q=$==="bech32"?1:734539939,J=b0(5),G=J.decode,Q=J.encode,Y=RV(G);function X(z,K,R=90){if(aq("bech32.encode prefix",z),OY(K))K=Array.from(K);SX("bech32.encode",K);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+K.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),A=DV(j,K,q);return`${j}1${ZX.encode(K)}${A}`}function U(z,K=90){aq("bech32.decode input",z);let R=z.length;if(R<8||K!==!1&&R>K)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${K})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),A=N.slice(w+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=ZX.decode(A).slice(0,-6),_=DV(j,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:j,words:T}}let V=RV(U);function W(z){let{prefix:K,words:R}=U(z,!1);return{prefix:K,words:R,bytes:G(R)}}function M(z,K){return X(z,Q(K))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l0=ZV("bech32"),r3=ZV("bech32m");var R6=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),K6={encode($){return BX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},d3=R6?K6:C0(b0(4),P0("0123456789abcdef"),L0(""),NV(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function H6($,q,J,G){Bq($);let Q=VY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L$(Y,"c"),L$(X,"dkLen"),L$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=MX(q,"password"),W=MX(J,"salt"),M=new Uint8Array(X),z=Tq.create($,V),K=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:K}}function O6($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return K0(Q),J}function IX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=H6($,q,J,G),W,M=new Uint8Array(4),z=E8(M),K=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(K),w.set(K.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(K).digestInto(K);for(let A=0;A<w.length;A++)w[A]^=K[A]}}return O6(U,V,X,W,K)}function BV($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],K=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],k=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,f=V,y=W,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,O=k,m=u;for(let d=0;d<8;d+=2)l^=N$(F+L|0,7),Z^=N$(l+F|0,9),L^=N$(Z+l|0,13),F^=N$(L+Z|0,18),S^=N$(v+x|0,7),b^=N$(S+v|0,9),x^=N$(b+S|0,13),v^=N$(x+b|0,18),O^=N$(P+I|0,7),f^=N$(O+P|0,9),I^=N$(f+O|0,13),P^=N$(I+f|0,18),y^=N$(m+g|0,7),E^=N$(y+m|0,9),g^=N$(E+y|0,13),m^=N$(g+E|0,18),x^=N$(F+y|0,7),f^=N$(x+F|0,9),y^=N$(f+x|0,13),F^=N$(y+f|0,18),I^=N$(v+l|0,7),E^=N$(I+v|0,9),l^=N$(E+I|0,13),v^=N$(l+E|0,18),g^=N$(P+S|0,7),Z^=N$(g+P|0,9),S^=N$(Z+g|0,13),P^=N$(S+Z|0,18),L^=N$(m+O|0,7),b^=N$(L+m|0,9),O^=N$(b+L|0,13),m^=N$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+f|0,Q[Y++]=W+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=K+I|0,Q[Y++]=R+E|0,Q[Y++]=N+Z|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=k+O|0,Q[Y++]=u+m|0}function CX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(BV(J,X,$,q,J,Y),U>0)X+=16;BV(J,Y,$,q+=16,J,X)}}function N6($,q,J){let G=VY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(L$(Q,"N"),L$(Y,"r"),L$(X,"p"),L$(U,"dkLen"),L$(V,"asyncTick"),L$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,K=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let w=IX(r$,$,q,{c:1,dkLen:z*X}),j=XY(w),A=XY(new Uint8Array(z*Q)),T=XY(new Uint8Array(z)),_=()=>{};if(M){let k=2*Q*X,u=Math.max(Math.floor(k/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===k))M(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:K,V:A,B32:j,B:w,tmp:T,blockMixCb:_,asyncTick:V}}function w6($,q,J,G,Q){let Y=IX(r$,$,J,{c:1,dkLen:q});return K0(J,G,Q),Y}function SV($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:K}=N6($,q,J);WX(W);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)V[w]=W[N+w];for(let w=0,j=0;w<G-1;w++)CX(V,j,V,j+=U,Q),K();CX(V,(G-1)*U,W,N,Q),K();for(let w=0;w<G;w++){let j=(W[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=W[N+A]^V[j*U+A];CX(z,0,W,N,Q),K()}}return WX(W),w6($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function j6($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function wY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,q,J=""){let G=j6($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function PX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function TV($,q,J=!1){b$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!C8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function A6($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),Z6=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var B6=($)=>{for(let q=0;q<$.length;q++)$[q]=Z6($[q]);return $},Cq=_J?($)=>$:B6;function EV($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function IV($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function CV($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var PV=($,q)=>{function J(G,...Q){if(b$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,b$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function pG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!C8(q))throw Error("invalid output, must be aligned");return q}function LV($,q,J){I8($),I8(q),wY(J);let G=new Uint8Array(16),Q=A6(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function C8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b$($))}var gV=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),S6=(()=>Cq(Qq(gV("expand 16-byte k"))))(),T6=(()=>Cq(Qq(gV("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var lG=64,E6=16,LX=(()=>4294967295)(),FV=Uint32Array.of();function I6($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(lG),M=Qq(W),z=_J&&C8(Q)&&C8(Y),K=z?Qq(Q):FV,R=z?Qq(Y):FV;if(!_J){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Cq(M),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,V-N);for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^W[j];N+=w}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,V-N);if(z&&w===lG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<E6;A++)T=j+A,R[T]=K[T]^M[A];N+=lG;continue}for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^W[j];N+=w}}function _V($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=EV({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),wY(Y),wY(J),(U,V,W,M,z=0)=>{b$(U,void 0,"key"),b$(V,void 0,"nonce"),b$(W,void 0,"data");let K=W.length;if(M=pG(K,M,!1),I8(z),z<0||z>=LX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=P8(U)),j=T6;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=S6,R.push(w);else throw b$(U,32,"arx key"),Error("invalid key size");if(!_J||!C8(V))R.push(V=P8(V));let A=Qq(w);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=V.subarray(0,16);if(_J)G(j,A,Qq(k),A);else{let u=Cq(Uint32Array.from(j));G(u,A,Qq(k),A),r0(u),Cq(A)}V=V.subarray(16)}else if(!_J)Cq(A);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let k=new Uint8Array(12);k.set(V,Y?0:12-V.length),V=k,R.push(V)}let _=Cq(Qq(V));try{return I6($,j,A,_,W,M,z,X),M}finally{r0(...R)}}}function d$($,q){return $[q++]&255|($[q++]&255)<<8}class vV{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b$($,32,"key"));let q=d$($,0),J=d$($,2),G=d$($,4),Q=d$($,6),Y=d$($,8),X=d$($,10),U=d$($,12),V=d$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=d$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],K=Y[6],R=Y[7],N=Y[8],w=Y[9],j=d$($,q+0),A=d$($,q+2),T=d$($,q+4),_=d$($,q+6),k=d$($,q+8),u=d$($,q+10),F=d$($,q+12),x=d$($,q+14),f=Q[0]+(j&8191),y=Q[1]+((j>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|k<<12)&8191),E=Q[5]+(k>>>1&8191),Z=Q[6]+((k>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+f*X+y*(5*w)+l*(5*N)+v*(5*R)+I*(5*K);L=b>>>13,b&=8191,b+=E*(5*z)+Z*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+f*U+y*X+l*(5*w)+v*(5*N)+I*(5*R);L=O>>>13,O&=8191,O+=E*(5*K)+Z*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let m=L+f*V+y*U+l*X+v*(5*w)+I*(5*N);L=m>>>13,m&=8191,m+=E*(5*R)+Z*(5*K)+S*(5*z)+P*(5*M)+g*(5*W),L+=m>>>13,m&=8191;let d=L+f*W+y*V+l*U+v*X+I*(5*w);L=d>>>13,d&=8191,d+=E*(5*N)+Z*(5*R)+S*(5*K)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+f*M+y*W+l*V+v*U+I*X;L=B>>>13,B&=8191,B+=E*(5*w)+Z*(5*N)+S*(5*R)+P*(5*K)+g*(5*z),L+=B>>>13,B&=8191;let a=L+f*z+y*M+l*W+v*V+I*U;L=a>>>13,a&=8191,a+=E*X+Z*(5*w)+S*(5*N)+P*(5*R)+g*(5*K),L+=a>>>13,a&=8191;let q$=L+f*K+y*z+l*M+v*W+I*V;L=q$>>>13,q$&=8191,q$+=E*U+Z*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+f*R+y*K+l*z+v*M+I*W;L=Y$>>>13,Y$&=8191,Y$+=E*V+Z*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+f*N+y*R+l*K+v*z+I*M;L=G$>>>13,G$&=8191,G$+=E*W+Z*V+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let t=L+f*w+y*N+l*R+v*K+I*z;L=t>>>13,t&=8191,t+=E*M+Z*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=m,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r0(J)}update($){PX(this),b$($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r0(this.h,this.r,this.buffer,this.pad)}digestInto($){PX(this),TV($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var bV=CV(32,($)=>new vV($));function C6($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],K=q[2],R=q[3],N=q[4],w=q[5],j=q[6],A=q[7],T=Q,_=J[0],k=J[1],u=J[2],F=X,x=U,f=V,y=W,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,O=k,m=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),Z=Z+L|0,l=w$(l^Z,12),F=F+l|0,L=w$(L^F,8),Z=Z+L|0,l=w$(l^Z,7),x=x+v|0,b=w$(b^x,16),S=S+b|0,v=w$(v^S,12),x=x+v|0,b=w$(b^x,8),S=S+b|0,v=w$(v^S,7),f=f+I|0,O=w$(O^f,16),P=P+O|0,I=w$(I^P,12),f=f+I|0,O=w$(O^f,8),P=P+O|0,I=w$(I^P,7),y=y+E|0,m=w$(m^y,16),g=g+m|0,E=w$(E^g,12),y=y+E|0,m=w$(m^y,8),g=g+m|0,E=w$(E^g,7),F=F+v|0,m=w$(m^F,16),P=P+m|0,v=w$(v^P,12),F=F+v|0,m=w$(m^F,8),P=P+m|0,v=w$(v^P,7),x=x+I|0,L=w$(L^x,16),g=g+L|0,I=w$(I^g,12),x=x+I|0,L=w$(L^x,8),g=g+L|0,I=w$(I^g,7),f=f+E|0,b=w$(b^f,16),Z=Z+b|0,E=w$(E^Z,12),f=f+E|0,b=w$(b^f,8),Z=Z+b|0,E=w$(E^Z,7),y=y+l|0,O=w$(O^y,16),S=S+O|0,l=w$(l^S,12),y=y+l|0,O=w$(O^y,8),S=S+O|0,l=w$(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+x|0,G[d++]=V+f|0,G[d++]=W+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=K+I|0,G[d++]=R+E|0,G[d++]=N+Z|0,G[d++]=w+S|0,G[d++]=j+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=k+O|0,G[d++]=u+m|0}var P6=_V(C6,{counterRight:!1,counterLength:4,allowShortKeys:!1});var L6=new Uint8Array(16),yV=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(L6.subarray(J))},F6=new Uint8Array(32);function fV($,q,J,G,Q){if(Q!==void 0)b$(Q,void 0,"AAD");let Y=$(q,J,F6),X=LV(G.length,Q?Q.length:0,!0),U=bV.create(Y);if(Q)yV(U,Q);yV(U,G),U.update(X);let V=U.digest();return r0(Y,X),V}var g6=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=pG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=fV($,q,J,V,G);return X.set(W,U),r0(W),X},decrypt(Y,X){X=pG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=fV($,q,J,U,G);if(!IV(V,W))throw r0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r0(W),X}}},sq=PV({blockSize:64,nonceLength:12,tagLength:16},g6(P6));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function x$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function y0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");x$($.outputLen),x$($.blockLen)}function Lq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function jY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function AY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function ZY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d0($,q){return $<<32-q|$>>>q}var _6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function v6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function b6($){for(let q=0;q<$.length;q++)$[q]=v6($[q]);return $}var FX=_6?($)=>$:b6,mV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),y6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q$($),mV)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=y6[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function kV($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(mV)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=kV($.charCodeAt(Y)),U=kV($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function g$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _X=BigInt(0),gX=BigInt(1);function rG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function xV($){if(typeof $==="bigint"){if(!BY($))throw Error("positive bigint expected, got "+$)}else x$($);return $}function dG($){let q=xV($).toString(16);return q.length&1?"0"+q:q}function hV($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_X:BigInt("0x"+$)}function $J($){return hV(vJ($))}function qJ($){return hV(vJ(SY(Q$($)).reverse()))}function g8($,q){x$(q),$=xV($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function iG($,q){return g8($,q).reverse()}function SY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var BY=($)=>typeof $==="bigint"&&_X<=$;function f6($,q,J){return BY($)&&BY(q)&&BY(J)&&q<=$&&$<J}function cG($,q,J,G){if(!f6(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function vX($){let q;for(q=0;$>_X;$>>=gX,q+=1);return q}var nG=($)=>(gX<<BigInt($))-gX;function uV($,q,J){if(x$($,"hashLen"),x$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},K=(...j)=>J(W,g$(V,...j)),R=(j=Q)=>{if(W=K(Y,j),V=K(),j.length===0)return;W=K(X,j),V=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){V=K();let T=V.slice();A.push(T),j+=V.length}return g$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while(!(T=A(N())))R();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function bX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H0=BigInt(0),q0=BigInt(1),fJ=BigInt(2),rV=BigInt(3),dV=BigInt(4),iV=BigInt(5),k6=BigInt(7),cV=BigInt(8),m6=BigInt(9),nV=BigInt(16);function D0($,q){let J=$%q;return J>=H0?J:q+J}function f0($,q,J){let G=$;while(q-- >H0)G*=G,G%=J;return G}function pV($,q){if($===H0)throw Error("invert: expected non-zero number");if(q<=H0)throw Error("invert: expected positive modulus, got "+q);let J=D0($,q),G=q,Q=H0,Y=q0,X=q0,U=H0;while(J!==H0){let W=G/J,M=G%J,z=Q-X*W,K=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==q0)throw Error("invert: does not exist");return D0(Q,q)}function yX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function oV($,q){let J=($.ORDER+q0)/dV,G=$.pow(q,J);return yX($,G,q),G}function x6($,q){let J=($.ORDER-iV)/cV,G=$.mul(q,fJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,fJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return yX($,U,q),U}function h6($){let q=TY($),J=aV($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+k6)/nV;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),K=U.mul(W,Y),R=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(K,z,N);let w=U.eql(U.sqr(M),V),j=U.cmov(W,M,w);return yX(U,j,V),j}}function aV($){if($<rV)throw Error("sqrt is not defined for small field");let q=$-q0,J=0;while(q%fJ===H0)q/=fJ,J++;let G=fJ,Q=TY($);while(lV(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return oV;let Y=Q.pow(G,q),X=(q+q0)/fJ;return function(V,W){if(V.is0(W))return W;if(lV(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),K=V.pow(W,q),R=V.pow(W,X);while(!V.eql(K,V.ONE)){if(V.is0(K))return V.ZERO;let N=1,w=V.sqr(K);while(!V.eql(w,V.ONE))if(N++,w=V.sqr(w),N===M)throw Error("Cannot find square root");let j=q0<<BigInt(M-N-1),A=V.pow(z,j);M=N,z=V.sqr(A),K=V.mul(K,z),R=V.mul(R,A)}return R}}function u6($){if($%dV===rV)return oV;if($%cV===iV)return x6;if($%nV===m6)return h6($);return aV($)}var p6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function fX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=p6.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function l6($,q,J){if(J<H0)throw Error("invalid exponent, negatives unsupported");if(J===H0)return $.ONE;if(J===q0)return q;let G=$.ONE,Q=q;while(J>H0){if(J&q0)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q0}return G}function oG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function lV($,q){let J=($.ORDER-q0)/fJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function r6($,q){if(q!==void 0)x$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class sV{ORDER;BITS;BYTES;isLE;ZERO=H0;ONE=q0;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=r6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H0<=$&&$<this.ORDER}is0($){return $===H0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q0)===q0}neg($){return D0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D0($*$,this.ORDER)}add($,q){return D0($+q,this.ORDER)}sub($,q){return D0($-q,this.ORDER)}mul($,q){return D0($*q,this.ORDER)}pow($,q){return l6(this,$,q)}div($,q){return D0($*pV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return pV($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=u6(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?iG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return oG(this,$)}cmov($,q,J){return J?q:$}}function TY($,q={}){return new sV($,q)}function tV($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function kX($){let q=tV($);return q+Math.ceil(q/2)}function eV($,q,J=!1){Q$($);let G=$.length,Q=tV(q),Y=kX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D0(X,q-q0)+q0;return J?iG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),kJ=BigInt(1);function aG($,q){let J=q.negate();return $?J:q}function uX($,q){let J=oG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function GW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function mX($,q){GW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=nG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function $W($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=kJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:W}}var xX=new WeakMap,QW=new WeakMap;function hX($){return QW.get($)||1}function qW($){if($!==_8)throw Error("invalid wNAF")}class pX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&kJ)J=J.add(G);G=G.double(),q>>=kJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=mX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=mX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:K}=$W(J,X,Y);if(J=U,W)Q=Q.add(aG(z,q[K]));else G=G.add(aG(M,q[V]))}return qW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=mX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=$W(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return qW(J),G}getPrecomputes($,q,J){let G=xX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);xX.set(q,G)}}return G}cached($,q,J){let G=hX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=hX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){GW(q,this.bits),QW.set($,q),xX.delete($)}hasCache($){return hX($)!==1}}function YW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&kJ)Y=Y.add(Q);if(G&kJ)X=X.add(Q);Q=Q.double(),J>>=kJ,G>>=kJ}return{p1:Y,p2:X}}function JW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return fX(q),q}else return TY($,{isLE:J})}function XW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>_8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=JW(q.p,J.Fp,G),Y=JW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function EY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sG=BigInt(0),v8=BigInt(1),IY=BigInt(2);function d6($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function UW($){let q=d6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||tq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?IY**BigInt(254):IY**BigInt(447),N=U?BigInt(8)*IY**BigInt(251)-v8:BigInt(4)*IY**BigInt(445)-v8,w=R+N+v8,j=(Z)=>D0(Z,J),A=T(z);function T(Z){return iG(j(Z),M)}function _(Z){let S=SY(Q$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(qJ(S))}function k(Z){return qJ(Q(SY(Q$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===sG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){cG("u",Z,sG,J),cG("scalar",S,R,w);let P=S,g=Z,L=v8,b=sG,O=Z,m=v8,d=sG;for(let a=BigInt(W-1);a>=sG;a--){let q$=P>>a&v8;d^=q$,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,I$=O+m,m$=O-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;O=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*O$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=V(M))=>{return Q$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze({keygen:EY(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}class lX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z0(G)}update($){return Lq(this),this.iHash.update($),this}digestInto($){Lq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new lX($,q).update(J).digest();b8.create=($,q)=>new lX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VW=($,q)=>($+($>=0?q:-q)/MW)/q;function i6($,q,J){let[[G,Q],[Y,X]]=q,U=VW(X*$,J),V=VW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Fq,K=M<Fq;if(z)W=-W;if(K)M=-M;let R=nG(Math.ceil(vX(J)/2))+y8;if(W<Fq||W>=R||M<Fq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:K,k2:M}}function dX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function rX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(rG(J.lowS,"lowS"),rG(J.prehash,"prehash"),J.format!==void 0)dX(J.format);return J}class WW extends Error{constructor($=""){super($)}}var GJ={Err:WW,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=dG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?dG(Q.length/2|128):"";return dG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Fq)throw new q("integer: negative integers are not allowed");let J=dG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Fq=BigInt(0),y8=BigInt(1),MW=BigInt(2),CY=BigInt(3),c6=BigInt(4);function iX($,q={}){let J=XW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=RW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,E,Z){let{x:S,y:P}=E.toAffine(),g=G.toBytes(S);if(rG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g$(zW(L),g)}else return g$(Uint8Array.of(4),g,G.toBytes(P))}function K(I){Q$(I,void 0,"Point");let{publicKey:E,publicKeyUncompressed:Z}=W,S=I.length,P=I[0],g=I.subarray(1);if(S===E&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let m=G.isOdd(O);if((P&1)===1!==m)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${E} or uncompressed=${Z}`)}let R=q.toBytes||z,N=q.fromBytes||K;function w(I){let E=G.sqr(I),Z=G.mul(E,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function j(I,E){let Z=G.sqr(E),S=w(I);return G.eql(Z,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,CY),c6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,E,Z=!1){if(!G.isValid(E)||Z&&G.is0(E))throw Error(`bad point coordinate ${I}`);return E}function k(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!V||!V.basises)throw Error("no endo");return i6(I,V.basises,Q.ORDER)}let F=bX((I,E)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),O=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=bX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:E,y:Z}=I.toAffine();if(!G.isValid(E)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!j(E,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function f(I,E,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),E=aG(S,E),Z=aG(P,Z),E.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,E,Z){this.X=_("x",I),this.Y=_("y",E,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:E,y:Z}=I||{};if(!I||!G.isValid(E)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(Z))return y.ZERO;return new y(E,Z,G.ONE)}static fromBytes(I){let E=y.fromAffine(N(Q$(I,void 0,"point")));return E.assertValidity(),E}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,E=!0){if(v.createCache(this,I),!E)this.multiply(CY);return this}assertValidity(){x(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(E,L),G.mul(P,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:E}=Y,Z=G.mul(E,CY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,m=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(I,B),a=G.sub(m,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(m,m),m=G.add(O,m),m=G.add(m,B),m=G.mul(m,a),b=G.add(b,m),B=G.mul(P,g),B=G.add(B,B),m=G.mul(B,a),L=G.sub(L,m),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,m=G.ZERO,d=Y.a,B=G.mul(Y.b,CY),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.mul(S,L),G$=G.add(E,Z),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(a,q$),G$=G.sub(G$,t),t=G.add(E,S);let O$=G.add(P,L);return t=G.mul(t,O$),O$=G.add(a,Y$),t=G.sub(t,O$),O$=G.add(Z,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),m=G.mul(d,t),b=G.mul(B,Y$),m=G.add(b,m),b=G.sub(q$,m),m=G.add(q$,m),O=G.mul(b,m),q$=G.add(a,a),q$=G.add(q$,a),Y$=G.mul(d,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(a,Y$),Y$=G.mul(d,Y$),t=G.add(t,Y$),a=G.mul(q$,t),O=G.add(O,a),a=G.mul(O$,t),b=G.mul(G$,b),b=G.sub(b,a),a=G.mul(G$,q$),m=G.mul(O$,m),m=G.add(m,a),new y(b,O,m)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:E}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>uX(y,L));if(E){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:m,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),Z=f(E.beta,m,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return uX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:E}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Fq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=YW(y,Z,P,L);return f(E.beta,b,O,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return rG(I,"isCompressed"),this.assertValidity(),R(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new pX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function zW($){return Uint8Array.of($?2:3)}function RW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function n6($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(RW($.Fp,J),{seed:kX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R=G(Q.seed)){return eV(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!L8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let A=Q$(R,void 0,"key").length;return A===w||A===j}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=EY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function cX($,q,J={}){y0(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R}=n6($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*MW<Y.ORDER;function j(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){dX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(Z,g)}class k{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:O,s:m}=GJ.toSig(Q$(Z));return new k(O,m)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=R.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new k(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new k(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(g$(zW((g&1)===0),b)),m=X.inv(L),d=F(Q$(Z,void 0,"msgHash")),B=X.create(-d*m),a=X.create(P*m),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(Z=N.format){if(dX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g$(Uint8Array.of(this.assertRecovery()),g,L);return g$(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=nG(V);function f(Z){return cG("num < 2^"+V,Z,Fq,x),X.toBytes(Z)}function y(Z,S){return Q$(Z,void 0,"message"),S?Q$(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=rX(P,N);Z=y(Z,L);let O=F(Z),m=X.fromBytes(S);if(!X.isValidNot0(m))throw Error("invalid private key");let d=[f(m),f(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;d.push(Q$(Y$,void 0,"extraEntropy"))}let B=g$(...d),a=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Fq)return;let I$=X.create(t*X.create(a+A$*m));if(I$===Fq)return;let m$=(O$.x===A$?0:2)|Number(O$.y&y8),R0=I$;if(g&&j(I$))R0=X.neg(I$),m$^=1;return new k(A$,R0,w?void 0:m$)}return{seed:B,k2sig:q$}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return uV(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:O}=rX(g,N);if(P=Q$(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let m=Z instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+m)}_(Z,O);try{let m=k.fromBytes(Z,O),d=$.fromBytes(P);if(L&&m.hasHighS())return!1;let{r:B,s:a}=m,q$=F(S),Y$=X.inv(a),G$=X.create(q$*Y$),t=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(d.multiplyUnsafe(t));if(O$.is0())return!1;return X.create(O$.x)===B}catch(m){return!1}}function E(Z,S,P={}){let{prehash:g}=rX(P,N);return S=y(S,g),k.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R,Point:$,sign:v,verify:I,recoverPublicKey:E,Signature:k,hash:q})}function KW($,q,J){return $&q^~$&J}function DW($,q,J){return $&q^$&J^q&J}class PY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=ZY(this.buffer)}update($){Lq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=ZY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Lq(this),jY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=ZY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var gq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),_q=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var LY=BigInt(4294967295),HW=BigInt(32);function o6($,q=!1){if(q)return{h:Number($&LY),l:Number($>>HW&LY)};return{h:Number($>>HW&LY)|0,l:Number($&LY)|0}}function FY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=o6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var nX=($,q,J)=>$>>>J,oX=($,q,J)=>$<<32-J|q>>>J,mJ=($,q,J)=>$>>>J|q<<32-J,xJ=($,q,J)=>$<<32-J|q>>>J,tG=($,q,J)=>$<<64-J|q>>>J-32,eG=($,q,J)=>$>>>J-32|q<<64-J;var OW=($,q,J)=>$<<J|q>>>32-J,NW=($,q,J)=>q<<J|$>>>32-J,wW=($,q,J)=>q<<J-32|$>>>64-J,jW=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var AW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),ZW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,BW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),SW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,TW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),EW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var s6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class aX extends PY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],K=QJ[M-2],R=d0(z,7)^d0(z,18)^z>>>3,N=d0(K,17)^d0(K,19)^K>>>10;QJ[M]=N+QJ[M-7]+R+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=d0(X,6)^d0(X,11)^d0(X,25),K=W+z+KW(X,U,V)+s6[M]+QJ[M]|0,N=(d0(J,2)^d0(J,13)^d0(J,22))+DW(J,G,Q)|0;W=V,V=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){Z0(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z0(this.buffer)}}class IW extends aX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(32)}}class t6 extends aX{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(28)}}var CW=(()=>FY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),e6=(()=>CW[0])(),$N=(()=>CW[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class $Q extends PY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,k=XJ[T-15]|0,u=mJ(_,k,1)^mJ(_,k,8)^nX(_,k,7),F=xJ(_,k,1)^xJ(_,k,8)^oX(_,k,7),x=YJ[T-2]|0,f=XJ[T-2]|0,y=mJ(x,f,19)^tG(x,f,61)^nX(x,f,6),l=xJ(x,f,19)^eG(x,f,61)^oX(x,f,6),v=BW(F,l,XJ[T-7],XJ[T-16]),I=SW(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=mJ(M,z,14)^mJ(M,z,18)^tG(M,z,41),k=xJ(M,z,14)^xJ(M,z,18)^eG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=TW(A,k,F,$N[T],XJ[T]),f=EW(x,j,_,u,e6[T],YJ[T]),y=x|0,l=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),v=xJ(J,G,28)^eG(J,G,34)^eG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Yq(V|0,W|0,f|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=AW(y,v,E);J=ZW(Z,f,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Yq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Yq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Yq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Yq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,K,R,N,w,j,A)}roundClean(){Z0(YJ,XJ)}destroy(){Z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class qN extends $Q{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class PW extends $Q{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(48)}}var J0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class JN extends $Q{Ah=J0[0]|0;Al=J0[1]|0;Bh=J0[2]|0;Bl=J0[3]|0;Ch=J0[4]|0;Cl=J0[5]|0;Dh=J0[6]|0;Dl=J0[7]|0;Eh=J0[8]|0;El=J0[9]|0;Fh=J0[10]|0;Fl=J0[11]|0;Gh=J0[12]|0;Gl=J0[13]|0;Hh=J0[14]|0;Hl=J0[15]|0;constructor(){super(28)}}class GN extends $Q{Ah=G0[0]|0;Al=G0[1]|0;Bh=G0[2]|0;Bl=G0[3]|0;Ch=G0[4]|0;Cl=G0[5]|0;Dh=G0[6]|0;Dl=G0[7]|0;Eh=G0[8]|0;El=G0[9]|0;Fh=G0[10]|0;Fl=G0[11]|0;Gh=G0[12]|0;Gl=G0[13]|0;Hh=G0[14]|0;Hl=G0[15]|0;constructor(){super(32)}}var gY=F8(()=>new IW,eq(1));var LW=F8(()=>new PW,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QN=BigInt(1),FW=BigInt(2),YN=BigInt(3),XN=BigInt(5),iF=BigInt(8),gW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function UN($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=gW,U=$*$%Y*$%Y,V=f0(U,FW,Y)*U%Y,W=f0(V,QN,Y)*$%Y,M=f0(W,XN,Y)*W%Y,z=f0(M,q,Y)*M%Y,K=f0(z,J,Y)*z%Y,R=f0(K,G,Y)*K%Y,N=f0(R,Q,Y)*R%Y,w=f0(N,Q,Y)*R%Y,j=f0(w,q,Y)*M%Y;return{pow_p_5_8:f0(j,FW,Y)*$%Y,b2:U}}function VN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var _W=(()=>{let $=gW;return UW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=UN(q);return D0(f0(J,YN,$)*G,$)},adjustScalarBytes:VN})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),MN=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var zN=iX(WN),sX=cX(zN,gY);var RN=iX(MN),vW=cX(RN,LW);function yW($,q,J){if(y0($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var tX=Uint8Array.of(0),bW=Uint8Array.of();function fW($,q,J,G=32){y0($),x$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=bW;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)tX[0]=M+1,V.update(M===0?bW:W).update(J).update(tX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),Z0(W,tX),X.slice(0,G)}var KN=BigInt(0),qQ=BigInt(1),DN=BigInt(2),HN=BigInt(7),ON=BigInt(256),NN=BigInt(113),xW=[],hW=[],uW=[];for(let $=0,q=qQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],xW.push(2*(5*G+J)),hW.push(($+1)*($+2)/2%64);let Q=KN;for(let Y=0;Y<7;Y++)if(q=(q<<qQ^(q>>HN)*NN)%ON,q&DN)Q^=qQ<<(qQ<<BigInt(Y))-qQ;uW.push(Q)}var pW=FY(uW,!0),wN=pW[0],jN=pW[1],kW=($,q,J)=>J>32?wW($,q,J):OW($,q,J),mW=($,q,J)=>J>32?jW($,q,J):NW($,q,J);function AN($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=kW(W,M,1)^J[U],K=mW(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=K}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=hW[X],V=kW(Q,Y,U),W=mW(Q,Y,U),M=xW[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=wN[G],$[1]^=jN[G]}Z0(J)}class _Y{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,x$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=AY(this.state)}clone(){return this._cloneInto()}keccak(){FX(this.state32),AN(this.state32,this.rounds),FX(this.state32),this.posOut=0,this.pos=0}update($){Lq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Lq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return x$($),this.xofInto(new Uint8Array($))}digestInto($){if(jY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new _Y(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var lW=($,q,J,G={})=>F8(()=>new _Y(q,$,J),G);var hJ=lW(6,136,32,eq(8));var rW=lW(6,72,64,eq(10));var dW=($,q,J,G={})=>F8((Q={})=>new _Y(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),iW=dW(31,168,16,eq(11)),Xq=dW(31,136,32,eq(12));function eX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function nW($){return eX($),($&$-1)===0&&$!==0}function $U($,q){eX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function oW($){return eX($),31-Math.clz32($)}function cW($){let q=$.length;if(q<2||!nW(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=oW(q);for(let G=0;G<q;G++){let Q=$U(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var qU=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=oW(J);if(!nW(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)cW(M);for(let z=0,K=1;z<V-X;z++){let R=Q?z+1+X:V-z,N=1<<R,w=N>>1,j=J>>R;for(let A=0;A<J;A+=N)for(let T=0,_=K++;T<w;T++){let k=Y?Q?J-_:_:T*j,u=A+T,F=A+T+w,x=G[k],f=M[F],y=M[u];if(W){let l=$.mul(f,x);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(f,y),M[F]=$.mul($.sub(f,y),x);else M[u]=$.add(y,f),M[F]=$.mul($.sub(y,f),x)}}if(!Q&&U)cW(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function vY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function aW($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function bY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function JU($){return(1<<$)-1}var Ug=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var sW=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,_=G)=>{let k=T%_|0;return(k>=0?k|0:_+k|0)|0},W=(T,_=G)=>{let k=V(T,_)|0;return(k>_>>1?k-_|0:k)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let k=$U(_,X),u=BigInt(Y)**BigInt(k)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),K={add:(T,_)=>V((T|0)+(_|0))|0,sub:(T,_)=>V((T|0)-(_|0))|0,mul:(T,_)=>V((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=qU(K,{dit:!1,...R}),w=qU(K,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let _=0;_<T.length;_++)T[_]=V(Q*T[_]);return T}},bitsCoder:(T,_)=>{let k=JU(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=(_.encode(F[f])&k)<<l,l+=T;for(;l>=8;l-=8,y>>=8)x[v++]=y&JU(l)}return x},decode:(F)=>{let x=q(J);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=F[f]<<l,l+=8;for(;l>=T;l-=T,y>>=T)x[v++]=_.decode(y&k)}return x}}}}},ZN=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),y$(Y,G)}}},tW=ZN(iW);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q0=256,vq=3329,BN=3303,SN=17,{mod:QQ,nttZetas:TN,NTT:pJ,bitsCoder:EN}=sW({N:Q0,Q:vq,F:BN,ROOT_OF_UNITY:SN,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),GU={512:{N:Q0,Q:vq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q0,Q:vq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q0,Q:vq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},IN=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+vq/2)/vq,decode:(J)=>J*vq+q>>>$}},JQ=($)=>EN($,IN($));function lJ($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]+q[J])}function CN($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]-q[J])}function PN($,q,J,G,Q){let Y=QQ(q*G*Q+$*J),X=QQ($*G+q*J);return{c0:Y,c1:X}}function yY($,q){for(let J=0;J<Q0/2;J++){let G=TN[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=PN($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function eW($){let q=new Uint16Array(Q0);for(let J=0;J<Q0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<vq)q[J++]=Y;if(J<Q0&&X<vq)q[J++]=X}}return q}function GQ($,q,J,G){let Q=$(G*Q0/4,q,J),Y=new Uint16Array(Q0),X=AY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let K=X[V];for(let R=0;R<32;R++)if(M+=K&1,K>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=QQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var LN=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=JQ(1),M=JQ(V),z=JQ(U),K=uJ("publicKey",bY(JQ(12),q),32),R=bY(JQ(12),q),N=uJ("ciphertext",bY(z,q),M),w=uJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:K.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let A=new Uint8Array(33);A.set(j),A[32]=q;let T=Q(A),[_,k]=w.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(GQ(J,k,y,Y)));let x=G(_);for(let y=0;y<q;y++){let l=pJ.encode(GQ(J,k,q+y,Y));for(let v=0;v<q;v++){let I=eW(x.get(v,y));lJ(l,yY(I,u[v]))}F.push(l)}x.clean();let f={publicKey:K.encode([F,_]),secretKey:R.encode(u)};return y$(_,k,u,F,A,T),f},encrypt:(j,A,T)=>{let[_,k]=K.decode(j),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(GQ(J,T,v,Y)));let F=G(k),x=new Uint16Array(Q0),f=[];for(let v=0;v<q;v++){let I=GQ(J,T,q+v,X),E=new Uint16Array(Q0);for(let Z=0;Z<q;Z++){let S=eW(F.get(v,Z));lJ(E,yY(S,u[Z]))}lJ(I,pJ.decode(E)),f.push(I),lJ(x,yY(_[v],u[v])),y$(E)}F.clean();let y=GQ(J,T,2*q,X);lJ(y,pJ.decode(x));let l=W.decode(A);return lJ(l,y),y$(_,u,x,y),N.encode([f,l])},decrypt:(j,A)=>{let[T,_]=N.decode(j),k=R.decode(A),u=new Uint16Array(Q0);for(let F=0;F<q;F++)lJ(u,yY(k[F],pJ.encode(T[F])));return CN(_,pJ.decode(u)),y$(u,k,T),W.encode(_)}}};function QU($){let q=LN($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:K}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([K,z,R,M.subarray(32)]);return y$(K,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,K,R,N]=U.decode(M);return Uint8Array.from(K)},encapsulate:(M,z=Uq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let K=M.subarray(0,384*$.K),R=Y.encode(Y.decode(aW(K)));if(!vY(R,K))throw y$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");y$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return y$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let K=U.bytesLen-96,R=K+32,N=J(z.subarray(K/2,R));if(!vY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,A,T]=U.decode(z),_=q.decrypt(M,w),k=G.create().update(_).update(A).digest(),u=k.subarray(0,32),F=q.encrypt(j,_,k.subarray(32,64)),x=vY(M,F),f=Q.create({dkLen:32}).update(T).update(M).digest();return y$(_,F,!x?u:f),x?u:f}}}function FN($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var YU={HASH256:hJ,HASH512:rW,KDF:Xq,XOF:tW,PRF:FN},wg=QU({...YU,...GU[512]}),YQ=QU({...YU,...GU[768]}),$M=QU({...YU,...GU[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function gN($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function XU($,q=!1){let J=gN($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function UU($){return(q,J)=>$(q,{dkLen:J})}function _N($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;x$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,K)=>z.keygen(U[K])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return y$(U),y$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function fY($,q,J,G,...Q){let Y=_N($,J,...Q),X=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),V=XQ(Q,"msg");if(q===void 0)q=V.bytesLen;return x$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Uq(V.bytesLen)){let z=U.decode(W),K=V.decode(M),R=Q.map((A,T)=>A.encapsulate(z[T],K[T])),N=R.map((A)=>A.sharedSecret),w=R.map((A)=>A.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return y$(N,w),j},decapsulate(W,M){let z=X.decode(W),{publicKey:K,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(K,z,N)}}}function qM($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>Q(g$(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var Lg=qM("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YQ,XU(sX,!0),Xq,hJ),Fg=qM("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",$M,XU(vW,!0),Xq,hJ);function vN($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>{let V=g$(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),W=32,M=g$(JJ("hybrid_prk"),V),z=yW(Q,M),K=g$(g8(32,2),JJ("shared_secret"),JJ("")),R=fW(Q,z,K,32);return y$(z,K,M,V),R},q,J)}var JM=XU(_W),gg=vN("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YQ,JM,Xq,gY),bN=(()=>fY(32,32,UU(Xq),($,q,J)=>hJ(g$(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),YQ,JM))();function yN($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return y$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function fN($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=yN(J,Q,Y,G),U=64,V=U+G;return fY(32,32,(W)=>{Q$(W,32);let M=Xq(W,{dkLen:V}),z=M.subarray(0,U),K=M.subarray(U,V);return g$(z,K)},(W,M,z)=>hJ(g$(z[0],z[1],M[1],W[1],JJ($))),q,X)}var kN=(()=>fN("MLKEM768-P256",YQ,sX,128))();var VU=bN,GM=kN;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>u$($,q,J),MU=L$,f8=UY,n$=(...$)=>zX(...$),k8=($)=>bG($),m8=VX,x8=($)=>Sq($),mY=BigInt(0),WU=BigInt(1);function bq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function xY($){if(typeof $==="bigint"){if(!kY($))throw RangeError("positive bigint expected, got "+$)}else MU($);return $}function Vq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function UQ($){let q=xY($).toString(16);return q.length&1?"0"+q:q}function QM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?mY:BigInt("0x"+$)}function rJ($){return QM(UY($))}function i0($){return QM(UY(UJ(u$($)).reverse()))}function hY($,q){if(L$(q),q===0)throw RangeError("zero length");$=xY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return bG(J.padStart(q*2,"0"))}function VQ($,q){return hY($,q).reverse()}function YM($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z$($))}function uY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var kY=($)=>typeof $==="bigint"&&mY<=$;function mN($,q,J){return kY($)&&kY(q)&&kY(J)&&q<=$&&$<J}function yq($,q,J,G){if(!mN(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<mY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>mY;$>>=WU,q+=1);return q}var WQ=($)=>(WU<<BigInt($))-WU;function XM($,q,J){if(L$($,"hashLen"),L$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},K=(...j)=>J(W,n$(V,...j)),R=(j=Q)=>{if(W=K(Y,j),V=K(),j.length===0)return;W=K(X,j),V=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){V=K();let T=V.slice();A.push(T),j+=V.length}return n$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while((T=A(N()))===void 0)R();return z(),T}}function k0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var zU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o$=BigInt(0),C$=BigInt(1),dJ=BigInt(2),MM=BigInt(3),zM=BigInt(4),RM=BigInt(5),xN=BigInt(7),KM=BigInt(8),hN=BigInt(9),DM=BigInt(16);function T$($,q){if(q<=o$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o$?J:q+J}function m0($,q,J){if(q<o$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o$)G*=G,G%=J;return G}function UM($,q){if($===o$)throw Error("invert: expected non-zero number");if(q<=o$)throw Error("invert: expected positive modulus, got "+q);let J=T$($,q),G=q,Q=o$,Y=C$,X=C$,U=o$;while(J!==o$){let W=G/J,M=G-J*W,z=Q-X*W,K=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==C$)throw Error("invert: does not exist");return T$(Q,q)}function RU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function HM($,q){let J=$,G=(J.ORDER+C$)/zM,Q=J.pow(q,G);return RU(J,Q,q),Q}function uN($,q){let J=$,G=(J.ORDER-RM)/KM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),V=J.mul(X,J.sub(U,J.ONE));return RU(J,V,q),V}function pN($){let q=pY($),J=OM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+xN)/DM;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),K=W.mul(M,Q),R=W.mul(M,Y),N=W.eql(W.sqr(z),V),w=W.eql(W.sqr(K),V);M=W.cmov(M,z,N),z=W.cmov(R,K,w);let j=W.eql(W.sqr(z),V),A=W.cmov(M,z,j);return RU(W,A,V),A}}function OM($){if($<MM)throw Error("sqrt is not defined for small field");let q=$-C$,J=0;while(q%dJ===o$)q/=dJ,J++;let G=dJ,Q=pY($);while(VM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return HM;let Y=Q.pow(G,q),X=(q+C$)/dJ;return function(V,W){let M=V;if(M.is0(W))return W;if(VM(M,W)!==1)throw Error("Cannot find square root");let z=J,K=M.mul(M.ONE,Y),R=M.pow(W,q),N=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let A=C$<<BigInt(z-w-1),T=M.pow(K,A);z=w,K=M.sqr(T),R=M.mul(R,K),N=M.mul(N,T)}return N}}function lN($){if($%zM===MM)return HM;if($%KM===RM)return uN;if($%DM===hN)return pN($);return OM($)}var fq=($,q)=>(T$($,q)&C$)===C$,rN=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function KU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=rN.reduce((G,Q)=>{return G[Q]="function",G},q);if(k0($,J),Vq($.BYTES,"BYTES"),Vq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function dN($,q,J){let G=$;if(J<o$)throw Error("invalid exponent, negatives unsupported");if(J===o$)return G.ONE;if(J===C$)return q;let Q=G.ONE,Y=q;while(J>o$){if(J&C$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=C$}return Q}function MQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function VM($,q){let J=$,G=(J.ORDER-C$)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function iN($,q){if(q!==void 0)MU(q);if($<=o$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var WM=new WeakMap;class DU{ORDER;BITS;BYTES;isLE;ZERO=o$;ONE=C$;_lengths;_mod;constructor($,q={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=iN($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o$<=$&&$<this.ORDER}is0($){return $===o$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return T$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T$($*$,this.ORDER)}add($,q){return T$($+q,this.ORDER)}sub($,q){return T$($-q,this.ORDER)}mul($,q){return T$($*q,this.ORDER)}pow($,q){return dN(this,$,q)}div($,q){return T$($*UM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return UM($,this.ORDER)}sqrt($){let q=WM.get(this);if(!q)WM.set(this,q=lN(this.ORDER));return q(this,$)}toBytes($){return this.isLE?VQ($,this.BYTES):hY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i0($):rJ($);if(X)U=T$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return MQ(this,$)}cmov($,q,J){return bq(J,"condition"),J?q:$}}Object.freeze(DU.prototype);function pY($,q={}){return new DU($,q)}function NM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let q=h8($-C$);return Math.ceil(q/8)}function HU($){let q=NM($);return q+Math.ceil(q/2)}function wM($,q,J=!1){Z$($);let G=$.length,Q=NM(q),Y=Math.max(HU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i0($):rJ($),U=T$(X,q-C$)+C$;return J?VQ(U,Q):hY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=MQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function BM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function OU($,q){BM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=WQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function jM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=iJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:W}}var NU=new WeakMap,SM=new WeakMap;function wU($){return SM.get($)||1}function AM($){if($!==u8)throw Error("invalid wNAF")}class RQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=OU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=OU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:K}=jM(J,X,Y);if(J=U,W)Q=Q.add(zQ(z,q[K]));else G=G.add(zQ(M,q[V]))}return AM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=OU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=jM(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return AM(J),G}getPrecomputes($,q,J){let G=NU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);NU.set(q,G)}}return G}cached($,q,J){let G=wU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=wU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){BM(q,this.bits),SM.set($,q),NU.delete($)}hasCache($){return wU($)!==1}}function TM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function ZM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return KU(q),q}else return pY($,{isLE:J})}function lY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>u8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=ZM(q.p,J.Fp,G),Y=ZM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Vq($),Vq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function cN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function nN($){if(!m8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?uY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function jU($,q,J,G){if(Z$($),Vq(J),q=nN(q),q.length>255)q=G(n$(uY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n$(q,DQ(q.length,1)),V=new Uint8Array(Y),W=DQ(J,2),M=Array(X),z=G(n$(V,$,W,DQ(0,1),U));M[0]=G(n$(z,DQ(1,1),U));for(let R=1;R<X;R++){let N=[cN(z,M[R-1]),DQ(R+1,1),U];M[R]=G(n$(...N))}return n$(...M).slice(0,J)}var EM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IM=($,q)=>($+($>=0?q:-q)/PM)/q;function oN($,q,J){yq("scalar",$,Wq,J);let[[G,Q],[Y,X]]=q,U=IM(X*$,J),V=IM(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Wq,K=M<Wq;if(z)W=-W;if(K)M=-M;let R=WQ(Math.ceil(h8(J)/2))+VJ;if(W<Wq||W>=R||M<Wq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:K,k2:M}}function ZU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function AU($,q){k0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(bq(J.lowS,"lowS"),bq(J.prehash,"prehash"),J.format!==void 0)ZU(J.format);return J}class CM extends Error{constructor($=""){super($)}}var c0={Err:CM,_tlv:{encode:($,q)=>{let{Err:J}=c0;if(Vq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=UQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?UQ(Q.length/2|128):"";return UQ($)+Y+Q+q},decode($,q){let{Err:J}=c0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c0;if(xY($),$<Wq)throw new q("integer: negative integers are not allowed");let J=UQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=c0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c0._tlv);Object.freeze(c0._int);Object.freeze(c0);var Wq=BigInt(0),VJ=BigInt(1),PM=BigInt(2),rY=BigInt(3),aN=BigInt(4);function LM($,q={}){let J=lY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;k0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=gM(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function K(v,I,E){if(W&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(bq(E,"isCompressed"),E){z();let g=!G.isOdd(S);return n$(FM(g),P)}else return n$(Uint8Array.of(4),P,G.toBytes(S))}function R(v){Z$(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:E}=M,Z=v.length,S=v[0],P=v.subarray(1);if(W&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===E&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${E}`)}let N=q.toBytes===void 0?K:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(v){let I=G.sqr(v),E=G.mul(I,v);return G.add(G.add(E,G.mul(v,Y.a)),Y.b)}function A(v,I){let E=G.sqr(I),Z=j(v);return G.eql(E,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,rY),aN),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function k(v,I,E=!1){if(!G.isValid(I)||E&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof f))throw Error("Weierstrass Point expected")}function F(v){if(!V||!V.basises)throw Error("no endo");return oN(v,V.basises,Q.ORDER)}function x(v,I,E,Z,S){return E=new f(G.mul(E.X,v),E.Y,E.Z),I=zQ(Z,I),E=zQ(S,E),I.add(E)}class f{static BASE=new f(Y.Gx,Y.Gy,G.ONE);static ZERO=new f(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,E){this.X=k("x",v),this.Y=k("y",I,!0),this.Z=k("z",E),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:E}=v||{};if(!v||!G.isValid(I)||!G.isValid(E))throw Error("invalid affine point");if(v instanceof f)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(E))return f.ZERO;return new f(I,E,G.ONE)}static fromBytes(v){let I=f.fromAffine(w(Z$(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return f.fromBytes(k8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(rY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:E}=v.toAffine();if(!G.isValid(I)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!A(I,E))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(E,g),G.mul(P,Z));return L&&b}negate(){return new f(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,E=G.mul(I,rY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),m=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(E,d),L=G.add(g,L),g=G.sub(m,L),L=G.add(m,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(E,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,m),b=G.add(b,b),b=G.add(b,b),new f(g,L,b)}add(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,m=Y.a,d=G.mul(Y.b,rY),B=G.mul(I,S),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.add(I,E),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,a),Y$=G.sub(Y$,G$),G$=G.add(I,Z);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(E,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q$),t=G.sub(t,L),O=G.mul(m,G$),L=G.mul(d,q$),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q$=G.mul(m,q$),G$=G.mul(d,G$),a=G.add(a,q$),q$=G.sub(B,q$),q$=G.mul(m,q$),G$=G.add(G$,q$),B=G.mul(a,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,a),O=G.mul(t,O),O=G.add(O,B),new f(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(f.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let E,Z,S=(P)=>l.cached(this,P,(g)=>cJ(f,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:m}=S(g),{p:d,f:B}=S(b);Z=m.add(B),E=x(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);E=P,Z=g}return cJ(f,[E,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,E=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Wq||E.is0())return f.ZERO;if(Z===VJ)return E;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=TM(f,E,P,L);return x(I.beta,b,O,S,g)}else return l.unsafe(E,Z)}toAffine(v){let I=this,E=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),O=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===VJ)return!0;if(v)return v(f,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===VJ)return this;if(v)return v(f,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===VJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return bq(v,"isCompressed"),this.assertValidity(),N(f,this,v)}toHex(v=!0){return f8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new RQ(f,q.endo?Math.ceil(y/2):y);if(y>=8)f.BASE.precompute(8);return Object.freeze(f.prototype),Object.freeze(f),f}function FM($){return Uint8Array.of($?2:3)}function gM($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function sN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?x8:q.randomBytes,Q=Object.assign(gM($.Fp,J),{seed:Math.max(HU(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,wM(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,A=J._lengths;if(!m8(R))return;let T=Z$(R,void 0,"key").length,_=T===w||T===j,k=T===N||!!A?.includes(T);if(_&&k)return;return _}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=KQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function _M($,q,J={}){let G=q;Bq(G),k0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?x8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Tq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N}=sN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*PM+VJ<X.ORDER;function A(S){let P=V>>VJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(S,P){ZU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){k(S,P);let g;if(P==="der"){let{r:m,s:d}=c0.toSig(Z$(S));return new u(m,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(k8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),m=$.fromBytes(n$(FM((L&1)===0),O)),d=U.inv(b),B=x(Z$(S,void 0,"msgHash")),a=U.create(-B*d),q$=U.create(g*d),Y$=$.BASE.multiplyUnsafe(a).add(m.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return A(this.s)}toBytes(S=w.format){if(ZU(S),S==="der")return k8(c0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n$(Uint8Array.of(this.assertRecovery()),L,b);return n$(L,b)}toHex(S){return f8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,f=WQ(W);function y(S){return yq("num < 2^"+W,S,Wq,f),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=AU(g,w);S=l(S,b);let m=x(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(m)];if(O!=null&&O!==!1){let G$=O===!0?Q(N.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let a=n$(...B),q$=m;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let O$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),I$=U.create(A$.x);if(I$===Wq)return;let m$=U.create(O$*U.create(q$+I$*d));if(m$===Wq)return;let R0=(A$.x===I$?0:2)|Number(A$.y&VJ),Jq=m$;if(L&&A(m$))Jq=U.neg(m$),R0^=1;return new u(I$,Jq,j?void 0:R0)}return{seed:a,k2sig:Y$}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return XM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function E(S,P,g,L={}){let{lowS:b,prehash:O,format:m}=AU(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!m8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}k(S,m);try{let d=u.fromBytes(S,m),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q$}=d,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),O$=U.create(a*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=AU(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N,Point:$,sign:I,verify:E,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var tN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var eN=LM(tN),p8=_M(eN,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WJ=BigInt(0),B0=BigInt(1),BU=BigInt(2),$4=BigInt(8);function q4($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function vM($,q={}){let J=q,G=lY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;k0(J,{},{uvRatio:"function"});let V=BU<<BigInt(Y.BYTES*8)-B0,W=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(A){return{isValid:!1,value:WJ}}}:J.uvRatio;if(!q4(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,A=!1){let T=A?B0:WJ;return yq("coordinate "+w,j,T,V),j}function K(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,B0,W(X.Gx*X.Gy));static ZERO=new R(WJ,B0,B0,WJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,A,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:A}=w||{};return z("x",j),z("y",A),new R(j,A,B0,W(j*A))}static fromBytes(w,j=!1){let A=Q.BYTES,{a:T,d:_}=X;w=UJ(Z$(w,A,"point")),bq(j,"zip215");let k=UJ(w),u=w[A-1];k[A-1]=u&-129;let F=i0(k),x=j?V:Q.ORDER;yq("point.y",F,WJ,x);let f=W(F*F),y=W(f-B0),l=W(_*f-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let E=(I&B0)===B0,Z=(u&128)!==0;if(!j&&I===WJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==E)I=W(-I);return R.fromAffine({x:I,y:F})}static fromHex(w,j=!1){return R.fromBytes(k8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(BU);return this}assertValidity(){let w=this,{a:j,d:A}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:k,T:u}=w,F=W(T*T),x=W(_*_),f=W(k*k),y=W(f*f),l=W(F*j),v=W(f*W(l+x)),I=W(y+W(A*W(F*x)));if(v!==I)throw Error("bad point: equation left != right (1)");let E=W(T*_),Z=W(k*u);if(E!==Z)throw Error("bad point: equation left != right (2)")}equals(w){K(w);let{X:j,Y:A,Z:T}=this,{X:_,Y:k,Z:u}=w,F=W(j*u),x=W(_*T),f=W(A*u),y=W(k*T);return F===x&&f===y}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:w}=X,{X:j,Y:A,Z:T}=this,_=W(j*j),k=W(A*A),u=W(BU*W(T*T)),F=W(w*_),x=j+A,f=W(W(x*x)-_-k),y=F+k,l=y-u,v=F-k,I=W(f*l),E=W(y*v),Z=W(f*v),S=W(l*y);return new R(I,E,S,Z)}add(w){K(w);let{a:j,d:A}=X,{X:T,Y:_,Z:k,T:u}=this,{X:F,Y:x,Z:f,T:y}=w,l=W(T*F),v=W(_*x),I=W(u*A*y),E=W(k*f),Z=W((T+_)*(F+x)-l-v),S=E-I,P=E+I,g=W(v-j*l),L=W(Z*S),b=W(P*g),O=W(Z*g),m=W(S*P);return new R(L,b,m,O)}subtract(w){return K(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:A}=N.cached(this,w,(T)=>cJ(R,T));return cJ(R,[j,A])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===WJ)return R.ZERO;if(this.is0()||w===B0)return this;return N.unsafe(this,w,(j)=>cJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,A=w,{X:T,Y:_,Z:k}=j,u=j.is0();if(A==null)A=u?$4:Q.inv(k);let F=W(T*A),x=W(_*A),f=Q.mul(k,A);if(u)return{x:WJ,y:B0};if(f!==B0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===B0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),A=Q.toBytes(j);return A[A.length-1]|=w&B0?128:0,A}toHex(){return f8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new RQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class SU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){zU()}static fromHex($){zU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return f8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HQ=BigInt(0),l8=BigInt(1),dY=BigInt(2);function J4($){return k0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function bM($){let q=J4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?x8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?dY**BigInt(254):dY**BigInt(447),N=U?BigInt(8)*dY**BigInt(251)-l8:BigInt(4)*dY**BigInt(445)-l8,w=R+N+l8,j=(Z)=>T$(Z,J),A=T(z);function T(Z){return VQ(j(Z),M)}function _(Z){let S=UJ(Z$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(i0(S))}function k(Z){return i0(Q(UJ(Z$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===HQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){yq("u",Z,HQ,J),yq("scalar",S,R,w);let P=S,g=Z,L=l8,b=HQ,O=Z,m=l8,d=HQ;for(let a=BigInt(W-1);a>=HQ;a--){let q$=P>>a&l8;d^=q$,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,I$=O+m,m$=O-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;O=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*O$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?V(M):Z,Z$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze(v),Object.freeze(E),Object.freeze({keygen:KQ(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var G4=BigInt(0),kq=BigInt(1),yM=BigInt(2),Q4=BigInt(3),Y4=BigInt(5),X4=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),CU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:X4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function mM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,V=m0(U,yM,Y)*U%Y,W=m0(V,kq,Y)*$%Y,M=m0(W,Y4,Y)*W%Y,z=m0(M,q,Y)*M%Y,K=m0(z,J,Y)*z%Y,R=m0(K,G,Y)*K%Y,N=m0(R,Q,Y)*R%Y,w=m0(N,Q,Y)*R%Y,j=m0(w,q,Y)*M%Y;return{pow_p_5_8:m0(j,yM,Y)*$%Y,b2:U}}function U4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function PU($,q){let J=oJ,G=T$(q*q*q,J),Q=T$(G*G*q,J),Y=mM($*Q).pow_p_5_8,X=T$($*G*Y,J),U=T$(q*X*X,J),V=X,W=T$(X*TU,J),M=U===$,z=U===T$(-$,J),K=U===T$(-$*TU,J);if(M)X=V;if(z||K)X=W;if(fq(X,J))X=T$(-X,J);return{isValid:M||z,value:X}}var nJ=vM(CU,{uvRatio:PU}),MJ=(()=>nJ.Fp)(),xM=(()=>nJ.Fn)();var iY=(()=>{let $=oJ;return bM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=mM(q);return T$(m0(J,Q4,$)*G,$)},adjustScalarBytes:U4})})();var EU=TU,V4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),W4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),M4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),z4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),fM=($)=>PU(kq,$),R4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),IU=($)=>MJ.create(i0($)&R4);function kM($){let{d:q}=CU,J=oJ,G=(A)=>MJ.create(A),Q=G(EU*$*$),Y=G((Q+kq)*M4),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=PU(Y,U),M=G(W*$);if(!fq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-kq)*z4-U),K=W*W,R=G((W+W)*U),N=G(z*V4),w=G(kq-K),j=G(kq+K);return new nJ(G(R*j),G(w*N),G(N*j),G(R*w))}class O0 extends SU{static BASE=(()=>new O0(nJ.BASE))();static ZERO=(()=>new O0(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>xM)();constructor($){super($)}static fromAffine($){return new O0(nJ.fromAffine($))}assertSame($){if(!($ instanceof O0))throw Error("RistrettoPoint expected")}init($){return new O0($)}static fromBytes($){u$($,32);let{a:q,d:J}=CU,G=oJ,Q=(_)=>MJ.create(_),Y=IU($);if(!YM(MJ.toBytes(Y),$)||fq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(kq+q*X),V=Q(kq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:K,value:R}=fM(Q(z*M)),N=Q(R*V),w=Q(R*N*z),j=Q((Y+Y)*N);if(fq(j,G))j=Q(-j);let A=Q(U*w),T=Q(j*A);if(!K||fq(T,G)||A===G4)throw Error("invalid ristretto255 encoding 2");return new O0(new nJ(j,A,kq,T))}static fromHex($){return O0.fromBytes(bG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(w)=>MJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=fM(Y(X*V)),M=Y(W*X),z=Y(W*U),K=Y(M*z*G),R;if(fq(G*K,Q)){let w=Y(q*EU),j=Y($*EU);$=w,q=j,R=Y(M*W4)}else R=z;if(fq($*K,Q))q=Y(-q);let N=Y((J-q)*R);if(fq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>MJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(O0.ZERO)}}Object.freeze(O0.BASE);Object.freeze(O0.ZERO);Object.freeze(O0.prototype);Object.freeze(O0);var K4=Object.freeze({Point:O0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=jU($,J,64,zY);return K4.deriveToCurve(G)},hashToScalar($,q={DST:EM}){let J=jU($,q.DST,64,zY);return xM.create(i0(J))},deriveToCurve($){u$($,64);let q=IU($.subarray(0,32)),J=kM(q),G=IU($.subarray(32,64)),Q=kM(G);return new O0(J.add(Q))}});var hM=!1,D4=!1;async function uM($,q){if(D4)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function FU($,q){return await uM(async()=>{let J=LU($)?$:await O4($),G=await crypto.subtle.importKey("raw",N4(q),{name:"X25519"},hM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMult($,q)})}async function gU($){return await uM(async()=>{return FU($,iY.GuBytes)},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMultBase($)})}var H4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function O4($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...H4,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},hM,["deriveBits"])}function LU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function N4($){return $}class pM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),j4(OQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=OQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:OQ(this.transcript)}}}function j4($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function OQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function cY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function lM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function rM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class mq{args;body;constructor($,q){this.args=$,this.body=q}}function _U($){let q=[];q.push(`age-encryption.org/v1
+`).map((q)=>q.trim()).join(" ")};ZD.O=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts)}});var ED=X$((wx,h7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)h7.exports=HD();else h7.exports=TD()});var S1=X$((dp,B1)=>{var p9=Object.prototype.hasOwnProperty,Z1=Object.prototype.toString,H1=Object.defineProperty,O1=Object.getOwnPropertyDescriptor,N1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Z1.call(q)==="[object Array]"},w1=function(q){if(!q||Z1.call(q)!=="[object Object]")return!1;var J=p9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&p9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||p9.call(q,Q)},j1=function(q,J){if(H1&&J.name==="__proto__")H1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},A1=function(q,J){if(J==="__proto__"){if(!p9.call(q,J))return;else if(O1)return O1(q,J).value}return q[J]};B1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=A1(U,J),Q=A1(q,J),U!==Q){if(M&&Q&&(w1(Q)||(Y=N1(Q)))){if(Y)Y=!1,X=G&&N1(G)?G:[];else X=G&&w1(G)?G:{};j1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")j1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as nO}from"util";var oO={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function XX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function UX($,q){let J=$[q];return typeof J==="string"?J:void 0}function n5($){let{values:q,positionals:J}=nO({args:$,options:oO,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:XX(q,"help"),version:XX(q,"version"),dryRun:XX(q,"dry-run"),pushTo:UX(q,"push-to"),cohort:UX(q,"cohort"),anchorId:UX(q,"anchor-id")}}}var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.48",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as g4,mkdirSync as _4,readFileSync as rU,writeFileSync as dU}from"fs";import{dirname as v4,join as aM}from"path";function VX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u$($,q,J=""){let G=VX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Bq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L$($.outputLen),L$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){u$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function K0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function E8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var sO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function tO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function eO($){for(let q=0;q<$.length;q++)$[q]=tO($[q]);return $}var WX=sO?($)=>$:eO,a5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),$6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function UY($){if(u$($),a5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=$6[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function o5($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function bG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(a5)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=o5($.charCodeAt(Y)),U=o5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function q6($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function MX($,q=""){if(typeof $==="string")return q6($);return u$($,void 0,q)}function zX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function VY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function RX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Sq($=32){L$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var KX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class DX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Bq($),u$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),K0(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),YY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Tq=(()=>{let $=(q,J,G)=>new DX(q,J).update(G).digest();return $.create=(q,J)=>new DX(q,J),$})();function yG($,q,J){if(Bq($),J===void 0)J=new Uint8Array($.outputLen);return Tq($,J,q)}var HX=Uint8Array.of(0),s5=Uint8Array.of();function OX($,q,J,G=32){Bq($),L$(G,"length"),u$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=s5;else u$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Tq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)HX[0]=M+1,V.update(M===0?s5:W).update(J).update(HX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),K0(W,HX),X.slice(0,G)}var fG=($,q,J,G,Q)=>OX($,yG($,q,J),G,Q);function t5($,q,J){return $&q^~$&J}function e5($,q,J){return $&q^$&J^q&J}class WY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=E8(this.buffer)}update($){T8(this),u$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=E8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,K0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=E8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Iq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var MY=BigInt(4294967295),$V=BigInt(32);function J6($,q=!1){if(q)return{h:Number($&MY),l:Number($>>$V&MY)};return{h:Number($>>$V&MY)|0,l:Number($&MY)|0}}function qV($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=J6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var NX=($,q,J)=>$>>>J,wX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,mG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var JV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),GV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,QV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),YV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,XV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),UV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var Q6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class jX extends WY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],K=cq[M-2],R=u0(z,7)^u0(z,18)^z>>>3,N=u0(K,17)^u0(K,19)^K>>>10;cq[M]=N+cq[M-7]+R+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=u0(X,6)^u0(X,11)^u0(X,25),K=W+z+t5(X,U,V)+Q6[M]+cq[M]|0,N=(u0(J,2)^u0(J,13)^u0(J,22))+e5(J,G,Q)|0;W=V,V=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){K0(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),K0(this.buffer)}}class VV extends jX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class Y6 extends jX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(28)}}var WV=(()=>qV(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),X6=(()=>WV[0])(),U6=(()=>WV[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends WY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,k=oq[T-15]|0,u=FJ(_,k,1)^FJ(_,k,8)^NX(_,k,7),F=gJ(_,k,1)^gJ(_,k,8)^wX(_,k,7),x=nq[T-2]|0,f=oq[T-2]|0,y=FJ(x,f,19)^kG(x,f,61)^NX(x,f,6),l=gJ(x,f,19)^mG(x,f,61)^wX(x,f,6),v=QV(F,l,oq[T-7],oq[T-16]),I=YV(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^kG(M,z,41),k=gJ(M,z,14)^gJ(M,z,18)^mG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=XV(A,k,F,U6[T],oq[T]),f=UV(x,j,_,u,X6[T],nq[T]),y=x|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^mG(J,G,34)^mG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Gq(V|0,W|0,f|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=JV(y,v,E);J=GV(Z,f,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Gq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Gq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Gq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Gq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,K,R,N,w,j,A)}roundClean(){K0(nq,oq)}destroy(){this.destroyed=!0,K0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class MV extends xG{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(64)}}class V6 extends xG{Ah=p$[0]|0;Al=p$[1]|0;Bh=p$[2]|0;Bl=p$[3]|0;Ch=p$[4]|0;Cl=p$[5]|0;Dh=p$[6]|0;Dl=p$[7]|0;Eh=p$[8]|0;El=p$[9]|0;Fh=p$[10]|0;Fl=p$[11]|0;Gh=p$[12]|0;Gl=p$[13]|0;Hh=p$[14]|0;Hl=p$[15]|0;constructor(){super(48)}}var e$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class W6 extends xG{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(28)}}class M6 extends xG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(32)}}var r$=RX(()=>new VV,KX(1));var zY=RX(()=>new MV,KX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function OY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function BX($){if(!OY($))throw Error("Uint8Array expected")}function HV($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function OV($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function uG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function KY($){if(!Array.isArray($))throw Error("array expected")}function DY($,q){if(!HV(!0,q))throw Error(`${$}: array of strings expected`)}function SX($,q){if(!HV(!1,q))throw Error(`${$}: array of numbers expected`)}function C0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P0($){let q=typeof $==="string"?$.split(""):$,J=q.length;DY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return KY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return KY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L0($=""){return aq("join",$),{encode:(q)=>{return DY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function NY($,q="="){return uG($),aq("padding",q),{encode(J){DY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){DY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function NV($){return OV($),{encode:(q)=>q,decode:(q)=>$(q)}}function zV($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(KY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(uG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,K=z+M;if(!Number.isSafeInteger(K)||z/q!==U||K-M!==z)throw Error("convertRadix: carry overflow");let R=K/J;U=K%J;let N=Math.floor(R);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==K)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var wV=($,q)=>q===0?$:wV(q,$%q),HY=($,q)=>$+(q-wV($,q)),RY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function AX($,q,J,G){if(KY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(HY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${HY(q,J)}`);let Q=0,Y=0,X=RY[q],U=RY[J]-1,V=[];for(let W of $){if(uG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=RY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function z6($){uG($);let q=256;return{encode:(J)=>{if(!OY(J))throw Error("radix.encode input should be Uint8Array");return zV(Array.from(J),q,$)},decode:(J)=>{return SX("radix.decode",J),Uint8Array.from(zV(J,$,q))}}}function b0($,q=!1){if(uG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(HY(8,$)>32||HY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!OY(J))throw Error("radix2.encode input should be Uint8Array");return AX(Array.from(J),8,$,!q)},decode:(J)=>{return SX("radix2.decode",J),Uint8Array.from(AX(J,$,8,q))}}}function RV($){return OV($),function(...q){try{return $.apply(null,q)}catch(J){}}}var v3=C0(b0(4),P0("0123456789ABCDEF"),L0("")),b3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),NY(5),L0("")),y3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L0("")),f3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),NY(5),L0("")),k3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L0("")),m3=C0(b0(5),P0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L0(""),NV(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),jV=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),AV=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},TX=jV?{encode($){return BX($),$.toBase64()},decode($){return AV($,!1)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),NY(6),L0("")),p0=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L0("")),x3=jV?{encode($){return BX($),$.toBase64({alphabet:"base64url"})},decode($){return AV($,!0)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),NY(6),L0("")),h3=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L0("")),EX=($)=>C0(z6(58),P0($),L0("")),u3=EX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),p3=EX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),l3=EX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var ZX=C0(P0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L0("")),KV=[996825010,642813549,513874426,1027748829,705979059];function hG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<KV.length;G++)if((q>>G&1)===1)J^=KV[G];return J}function DV($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=hG(Q)^X>>5}Q=hG(Q);for(let Y=0;Y<G;Y++)Q=hG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=hG(Q)^Y;for(let Y=0;Y<6;Y++)Q=hG(Q);return Q^=J,ZX.encode(AX([Q%RY[30]],30,5,!1))}function ZV($){let q=$==="bech32"?1:734539939,J=b0(5),G=J.decode,Q=J.encode,Y=RV(G);function X(z,K,R=90){if(aq("bech32.encode prefix",z),OY(K))K=Array.from(K);SX("bech32.encode",K);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+K.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),A=DV(j,K,q);return`${j}1${ZX.encode(K)}${A}`}function U(z,K=90){aq("bech32.decode input",z);let R=z.length;if(R<8||K!==!1&&R>K)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${K})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),A=N.slice(w+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=ZX.decode(A).slice(0,-6),_=DV(j,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:j,words:T}}let V=RV(U);function W(z){let{prefix:K,words:R}=U(z,!1);return{prefix:K,words:R,bytes:G(R)}}function M(z,K){return X(z,Q(K))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l0=ZV("bech32"),r3=ZV("bech32m");var R6=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),K6={encode($){return BX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},d3=R6?K6:C0(b0(4),P0("0123456789abcdef"),L0(""),NV(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function H6($,q,J,G){Bq($);let Q=VY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L$(Y,"c"),L$(X,"dkLen"),L$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=MX(q,"password"),W=MX(J,"salt"),M=new Uint8Array(X),z=Tq.create($,V),K=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:K}}function O6($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return K0(Q),J}function IX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=H6($,q,J,G),W,M=new Uint8Array(4),z=E8(M),K=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(K),w.set(K.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(K).digestInto(K);for(let A=0;A<w.length;A++)w[A]^=K[A]}}return O6(U,V,X,W,K)}function BV($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],K=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],k=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,f=V,y=W,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,O=k,m=u;for(let d=0;d<8;d+=2)l^=N$(F+L|0,7),Z^=N$(l+F|0,9),L^=N$(Z+l|0,13),F^=N$(L+Z|0,18),S^=N$(v+x|0,7),b^=N$(S+v|0,9),x^=N$(b+S|0,13),v^=N$(x+b|0,18),O^=N$(P+I|0,7),f^=N$(O+P|0,9),I^=N$(f+O|0,13),P^=N$(I+f|0,18),y^=N$(m+g|0,7),E^=N$(y+m|0,9),g^=N$(E+y|0,13),m^=N$(g+E|0,18),x^=N$(F+y|0,7),f^=N$(x+F|0,9),y^=N$(f+x|0,13),F^=N$(y+f|0,18),I^=N$(v+l|0,7),E^=N$(I+v|0,9),l^=N$(E+I|0,13),v^=N$(l+E|0,18),g^=N$(P+S|0,7),Z^=N$(g+P|0,9),S^=N$(Z+g|0,13),P^=N$(S+Z|0,18),L^=N$(m+O|0,7),b^=N$(L+m|0,9),O^=N$(b+L|0,13),m^=N$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+f|0,Q[Y++]=W+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=K+I|0,Q[Y++]=R+E|0,Q[Y++]=N+Z|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=k+O|0,Q[Y++]=u+m|0}function CX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(BV(J,X,$,q,J,Y),U>0)X+=16;BV(J,Y,$,q+=16,J,X)}}function N6($,q,J){let G=VY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(L$(Q,"N"),L$(Y,"r"),L$(X,"p"),L$(U,"dkLen"),L$(V,"asyncTick"),L$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,K=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let w=IX(r$,$,q,{c:1,dkLen:z*X}),j=XY(w),A=XY(new Uint8Array(z*Q)),T=XY(new Uint8Array(z)),_=()=>{};if(M){let k=2*Q*X,u=Math.max(Math.floor(k/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===k))M(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:K,V:A,B32:j,B:w,tmp:T,blockMixCb:_,asyncTick:V}}function w6($,q,J,G,Q){let Y=IX(r$,$,J,{c:1,dkLen:q});return K0(J,G,Q),Y}function SV($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:K}=N6($,q,J);WX(W);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)V[w]=W[N+w];for(let w=0,j=0;w<G-1;w++)CX(V,j,V,j+=U,Q),K();CX(V,(G-1)*U,W,N,Q),K();for(let w=0;w<G;w++){let j=(W[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=W[N+A]^V[j*U+A];CX(z,0,W,N,Q),K()}}return WX(W),w6($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function j6($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function wY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,q,J=""){let G=j6($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function PX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function TV($,q,J=!1){b$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!C8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function A6($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),Z6=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var B6=($)=>{for(let q=0;q<$.length;q++)$[q]=Z6($[q]);return $},Cq=_J?($)=>$:B6;function EV($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function IV($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function CV($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var PV=($,q)=>{function J(G,...Q){if(b$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,b$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function pG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!C8(q))throw Error("invalid output, must be aligned");return q}function LV($,q,J){I8($),I8(q),wY(J);let G=new Uint8Array(16),Q=A6(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function C8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b$($))}var gV=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),S6=(()=>Cq(Qq(gV("expand 16-byte k"))))(),T6=(()=>Cq(Qq(gV("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var lG=64,E6=16,LX=(()=>4294967295)(),FV=Uint32Array.of();function I6($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(lG),M=Qq(W),z=_J&&C8(Q)&&C8(Y),K=z?Qq(Q):FV,R=z?Qq(Y):FV;if(!_J){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Cq(M),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,V-N);for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^W[j];N+=w}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,V-N);if(z&&w===lG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<E6;A++)T=j+A,R[T]=K[T]^M[A];N+=lG;continue}for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^W[j];N+=w}}function _V($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=EV({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),wY(Y),wY(J),(U,V,W,M,z=0)=>{b$(U,void 0,"key"),b$(V,void 0,"nonce"),b$(W,void 0,"data");let K=W.length;if(M=pG(K,M,!1),I8(z),z<0||z>=LX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=P8(U)),j=T6;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=S6,R.push(w);else throw b$(U,32,"arx key"),Error("invalid key size");if(!_J||!C8(V))R.push(V=P8(V));let A=Qq(w);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=V.subarray(0,16);if(_J)G(j,A,Qq(k),A);else{let u=Cq(Uint32Array.from(j));G(u,A,Qq(k),A),r0(u),Cq(A)}V=V.subarray(16)}else if(!_J)Cq(A);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let k=new Uint8Array(12);k.set(V,Y?0:12-V.length),V=k,R.push(V)}let _=Cq(Qq(V));try{return I6($,j,A,_,W,M,z,X),M}finally{r0(...R)}}}function d$($,q){return $[q++]&255|($[q++]&255)<<8}class vV{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b$($,32,"key"));let q=d$($,0),J=d$($,2),G=d$($,4),Q=d$($,6),Y=d$($,8),X=d$($,10),U=d$($,12),V=d$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=d$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],K=Y[6],R=Y[7],N=Y[8],w=Y[9],j=d$($,q+0),A=d$($,q+2),T=d$($,q+4),_=d$($,q+6),k=d$($,q+8),u=d$($,q+10),F=d$($,q+12),x=d$($,q+14),f=Q[0]+(j&8191),y=Q[1]+((j>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|k<<12)&8191),E=Q[5]+(k>>>1&8191),Z=Q[6]+((k>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+f*X+y*(5*w)+l*(5*N)+v*(5*R)+I*(5*K);L=b>>>13,b&=8191,b+=E*(5*z)+Z*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+f*U+y*X+l*(5*w)+v*(5*N)+I*(5*R);L=O>>>13,O&=8191,O+=E*(5*K)+Z*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let m=L+f*V+y*U+l*X+v*(5*w)+I*(5*N);L=m>>>13,m&=8191,m+=E*(5*R)+Z*(5*K)+S*(5*z)+P*(5*M)+g*(5*W),L+=m>>>13,m&=8191;let d=L+f*W+y*V+l*U+v*X+I*(5*w);L=d>>>13,d&=8191,d+=E*(5*N)+Z*(5*R)+S*(5*K)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+f*M+y*W+l*V+v*U+I*X;L=B>>>13,B&=8191,B+=E*(5*w)+Z*(5*N)+S*(5*R)+P*(5*K)+g*(5*z),L+=B>>>13,B&=8191;let a=L+f*z+y*M+l*W+v*V+I*U;L=a>>>13,a&=8191,a+=E*X+Z*(5*w)+S*(5*N)+P*(5*R)+g*(5*K),L+=a>>>13,a&=8191;let q$=L+f*K+y*z+l*M+v*W+I*V;L=q$>>>13,q$&=8191,q$+=E*U+Z*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+f*R+y*K+l*z+v*M+I*W;L=Y$>>>13,Y$&=8191,Y$+=E*V+Z*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+f*N+y*R+l*K+v*z+I*M;L=G$>>>13,G$&=8191,G$+=E*W+Z*V+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let t=L+f*w+y*N+l*R+v*K+I*z;L=t>>>13,t&=8191,t+=E*M+Z*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=m,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r0(J)}update($){PX(this),b$($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r0(this.h,this.r,this.buffer,this.pad)}digestInto($){PX(this),TV($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var bV=CV(32,($)=>new vV($));function C6($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],K=q[2],R=q[3],N=q[4],w=q[5],j=q[6],A=q[7],T=Q,_=J[0],k=J[1],u=J[2],F=X,x=U,f=V,y=W,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,O=k,m=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),Z=Z+L|0,l=w$(l^Z,12),F=F+l|0,L=w$(L^F,8),Z=Z+L|0,l=w$(l^Z,7),x=x+v|0,b=w$(b^x,16),S=S+b|0,v=w$(v^S,12),x=x+v|0,b=w$(b^x,8),S=S+b|0,v=w$(v^S,7),f=f+I|0,O=w$(O^f,16),P=P+O|0,I=w$(I^P,12),f=f+I|0,O=w$(O^f,8),P=P+O|0,I=w$(I^P,7),y=y+E|0,m=w$(m^y,16),g=g+m|0,E=w$(E^g,12),y=y+E|0,m=w$(m^y,8),g=g+m|0,E=w$(E^g,7),F=F+v|0,m=w$(m^F,16),P=P+m|0,v=w$(v^P,12),F=F+v|0,m=w$(m^F,8),P=P+m|0,v=w$(v^P,7),x=x+I|0,L=w$(L^x,16),g=g+L|0,I=w$(I^g,12),x=x+I|0,L=w$(L^x,8),g=g+L|0,I=w$(I^g,7),f=f+E|0,b=w$(b^f,16),Z=Z+b|0,E=w$(E^Z,12),f=f+E|0,b=w$(b^f,8),Z=Z+b|0,E=w$(E^Z,7),y=y+l|0,O=w$(O^y,16),S=S+O|0,l=w$(l^S,12),y=y+l|0,O=w$(O^y,8),S=S+O|0,l=w$(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+x|0,G[d++]=V+f|0,G[d++]=W+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=K+I|0,G[d++]=R+E|0,G[d++]=N+Z|0,G[d++]=w+S|0,G[d++]=j+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=k+O|0,G[d++]=u+m|0}var P6=_V(C6,{counterRight:!1,counterLength:4,allowShortKeys:!1});var L6=new Uint8Array(16),yV=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(L6.subarray(J))},F6=new Uint8Array(32);function fV($,q,J,G,Q){if(Q!==void 0)b$(Q,void 0,"AAD");let Y=$(q,J,F6),X=LV(G.length,Q?Q.length:0,!0),U=bV.create(Y);if(Q)yV(U,Q);yV(U,G),U.update(X);let V=U.digest();return r0(Y,X),V}var g6=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=pG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=fV($,q,J,V,G);return X.set(W,U),r0(W),X},decrypt(Y,X){X=pG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=fV($,q,J,U,G);if(!IV(V,W))throw r0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r0(W),X}}},sq=PV({blockSize:64,nonceLength:12,tagLength:16},g6(P6));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function x$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function y0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");x$($.outputLen),x$($.blockLen)}function Lq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function jY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function AY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function ZY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d0($,q){return $<<32-q|$>>>q}var _6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function v6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function b6($){for(let q=0;q<$.length;q++)$[q]=v6($[q]);return $}var FX=_6?($)=>$:b6,mV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),y6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q$($),mV)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=y6[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function kV($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(mV)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=kV($.charCodeAt(Y)),U=kV($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function g$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _X=BigInt(0),gX=BigInt(1);function rG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function xV($){if(typeof $==="bigint"){if(!BY($))throw Error("positive bigint expected, got "+$)}else x$($);return $}function dG($){let q=xV($).toString(16);return q.length&1?"0"+q:q}function hV($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_X:BigInt("0x"+$)}function $J($){return hV(vJ($))}function qJ($){return hV(vJ(SY(Q$($)).reverse()))}function g8($,q){x$(q),$=xV($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function iG($,q){return g8($,q).reverse()}function SY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var BY=($)=>typeof $==="bigint"&&_X<=$;function f6($,q,J){return BY($)&&BY(q)&&BY(J)&&q<=$&&$<J}function cG($,q,J,G){if(!f6(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function vX($){let q;for(q=0;$>_X;$>>=gX,q+=1);return q}var nG=($)=>(gX<<BigInt($))-gX;function uV($,q,J){if(x$($,"hashLen"),x$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},K=(...j)=>J(W,g$(V,...j)),R=(j=Q)=>{if(W=K(Y,j),V=K(),j.length===0)return;W=K(X,j),V=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){V=K();let T=V.slice();A.push(T),j+=V.length}return g$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while(!(T=A(N())))R();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function bX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H0=BigInt(0),q0=BigInt(1),fJ=BigInt(2),rV=BigInt(3),dV=BigInt(4),iV=BigInt(5),k6=BigInt(7),cV=BigInt(8),m6=BigInt(9),nV=BigInt(16);function D0($,q){let J=$%q;return J>=H0?J:q+J}function f0($,q,J){let G=$;while(q-- >H0)G*=G,G%=J;return G}function pV($,q){if($===H0)throw Error("invert: expected non-zero number");if(q<=H0)throw Error("invert: expected positive modulus, got "+q);let J=D0($,q),G=q,Q=H0,Y=q0,X=q0,U=H0;while(J!==H0){let W=G/J,M=G%J,z=Q-X*W,K=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==q0)throw Error("invert: does not exist");return D0(Q,q)}function yX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function oV($,q){let J=($.ORDER+q0)/dV,G=$.pow(q,J);return yX($,G,q),G}function x6($,q){let J=($.ORDER-iV)/cV,G=$.mul(q,fJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,fJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return yX($,U,q),U}function h6($){let q=TY($),J=aV($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+k6)/nV;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),K=U.mul(W,Y),R=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(K,z,N);let w=U.eql(U.sqr(M),V),j=U.cmov(W,M,w);return yX(U,j,V),j}}function aV($){if($<rV)throw Error("sqrt is not defined for small field");let q=$-q0,J=0;while(q%fJ===H0)q/=fJ,J++;let G=fJ,Q=TY($);while(lV(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return oV;let Y=Q.pow(G,q),X=(q+q0)/fJ;return function(V,W){if(V.is0(W))return W;if(lV(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),K=V.pow(W,q),R=V.pow(W,X);while(!V.eql(K,V.ONE)){if(V.is0(K))return V.ZERO;let N=1,w=V.sqr(K);while(!V.eql(w,V.ONE))if(N++,w=V.sqr(w),N===M)throw Error("Cannot find square root");let j=q0<<BigInt(M-N-1),A=V.pow(z,j);M=N,z=V.sqr(A),K=V.mul(K,z),R=V.mul(R,A)}return R}}function u6($){if($%dV===rV)return oV;if($%cV===iV)return x6;if($%nV===m6)return h6($);return aV($)}var p6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function fX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=p6.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function l6($,q,J){if(J<H0)throw Error("invalid exponent, negatives unsupported");if(J===H0)return $.ONE;if(J===q0)return q;let G=$.ONE,Q=q;while(J>H0){if(J&q0)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q0}return G}function oG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function lV($,q){let J=($.ORDER-q0)/fJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function r6($,q){if(q!==void 0)x$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class sV{ORDER;BITS;BYTES;isLE;ZERO=H0;ONE=q0;_lengths;_sqrt;_mod;constructor($,q={}){if($<=H0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=r6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return H0<=$&&$<this.ORDER}is0($){return $===H0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q0)===q0}neg($){return D0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D0($*$,this.ORDER)}add($,q){return D0($+q,this.ORDER)}sub($,q){return D0($-q,this.ORDER)}mul($,q){return D0($*q,this.ORDER)}pow($,q){return l6(this,$,q)}div($,q){return D0($*pV(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return pV($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=u6(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?iG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return oG(this,$)}cmov($,q,J){return J?q:$}}function TY($,q={}){return new sV($,q)}function tV($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function kX($){let q=tV($);return q+Math.ceil(q/2)}function eV($,q,J=!1){Q$($);let G=$.length,Q=tV(q),Y=kX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D0(X,q-q0)+q0;return J?iG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),kJ=BigInt(1);function aG($,q){let J=q.negate();return $?J:q}function uX($,q){let J=oG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function GW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function mX($,q){GW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=nG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function $W($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=kJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:W}}var xX=new WeakMap,QW=new WeakMap;function hX($){return QW.get($)||1}function qW($){if($!==_8)throw Error("invalid wNAF")}class pX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&kJ)J=J.add(G);G=G.double(),q>>=kJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=mX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=mX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:K}=$W(J,X,Y);if(J=U,W)Q=Q.add(aG(z,q[K]));else G=G.add(aG(M,q[V]))}return qW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=mX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=$W(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return qW(J),G}getPrecomputes($,q,J){let G=xX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);xX.set(q,G)}}return G}cached($,q,J){let G=hX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=hX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){GW(q,this.bits),QW.set($,q),xX.delete($)}hasCache($){return hX($)!==1}}function YW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&kJ)Y=Y.add(Q);if(G&kJ)X=X.add(Q);Q=Q.double(),J>>=kJ,G>>=kJ}return{p1:Y,p2:X}}function JW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return fX(q),q}else return TY($,{isLE:J})}function XW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>_8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=JW(q.p,J.Fp,G),Y=JW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function EY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sG=BigInt(0),v8=BigInt(1),IY=BigInt(2);function d6($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function UW($){let q=d6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||tq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?IY**BigInt(254):IY**BigInt(447),N=U?BigInt(8)*IY**BigInt(251)-v8:BigInt(4)*IY**BigInt(445)-v8,w=R+N+v8,j=(Z)=>D0(Z,J),A=T(z);function T(Z){return iG(j(Z),M)}function _(Z){let S=SY(Q$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(qJ(S))}function k(Z){return qJ(Q(SY(Q$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===sG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){cG("u",Z,sG,J),cG("scalar",S,R,w);let P=S,g=Z,L=v8,b=sG,O=Z,m=v8,d=sG;for(let a=BigInt(W-1);a>=sG;a--){let q$=P>>a&v8;d^=q$,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,I$=O+m,m$=O-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;O=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*O$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=V(M))=>{return Q$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze({keygen:EY(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}class lX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z0(G)}update($){return Lq(this),this.iHash.update($),this}digestInto($){Lq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new lX($,q).update(J).digest();b8.create=($,q)=>new lX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VW=($,q)=>($+($>=0?q:-q)/MW)/q;function i6($,q,J){let[[G,Q],[Y,X]]=q,U=VW(X*$,J),V=VW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Fq,K=M<Fq;if(z)W=-W;if(K)M=-M;let R=nG(Math.ceil(vX(J)/2))+y8;if(W<Fq||W>=R||M<Fq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:K,k2:M}}function dX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function rX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(rG(J.lowS,"lowS"),rG(J.prehash,"prehash"),J.format!==void 0)dX(J.format);return J}class WW extends Error{constructor($=""){super($)}}var GJ={Err:WW,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=dG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?dG(Q.length/2|128):"";return dG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Fq)throw new q("integer: negative integers are not allowed");let J=dG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Fq=BigInt(0),y8=BigInt(1),MW=BigInt(2),CY=BigInt(3),c6=BigInt(4);function iX($,q={}){let J=XW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=RW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,E,Z){let{x:S,y:P}=E.toAffine(),g=G.toBytes(S);if(rG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g$(zW(L),g)}else return g$(Uint8Array.of(4),g,G.toBytes(P))}function K(I){Q$(I,void 0,"Point");let{publicKey:E,publicKeyUncompressed:Z}=W,S=I.length,P=I[0],g=I.subarray(1);if(S===E&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),O;try{O=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let m=G.isOdd(O);if((P&1)===1!==m)O=G.neg(O);return{x:L,y:O}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${E} or uncompressed=${Z}`)}let R=q.toBytes||z,N=q.fromBytes||K;function w(I){let E=G.sqr(I),Z=G.mul(E,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function j(I,E){let Z=G.sqr(E),S=w(I);return G.eql(Z,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,CY),c6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,E,Z=!1){if(!G.isValid(E)||Z&&G.is0(E))throw Error(`bad point coordinate ${I}`);return E}function k(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!V||!V.basises)throw Error("no endo");return i6(I,V.basises,Q.ORDER)}let F=bX((I,E)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),O=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=bX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:E,y:Z}=I.toAffine();if(!G.isValid(E)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!j(E,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function f(I,E,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),E=aG(S,E),Z=aG(P,Z),E.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,E,Z){this.X=_("x",I),this.Y=_("y",E,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:E,y:Z}=I||{};if(!I||!G.isValid(E)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(Z))return y.ZERO;return new y(E,Z,G.ONE)}static fromBytes(I){let E=y.fromAffine(N(Q$(I,void 0,"point")));return E.assertValidity(),E}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,E=!0){if(v.createCache(this,I),!E)this.multiply(CY);return this}assertValidity(){x(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(E,L),G.mul(P,S)),O=G.eql(G.mul(Z,L),G.mul(g,S));return b&&O}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:E}=Y,Z=G.mul(E,CY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,m=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),O=G.mul(S,g),O=G.add(O,O),L=G.mul(I,O),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),O=G.mul(Z,O),B=G.mul(I,B),a=G.sub(m,B),a=G.mul(I,a),a=G.add(a,O),O=G.add(m,m),m=G.add(O,m),m=G.add(m,B),m=G.mul(m,a),b=G.add(b,m),B=G.mul(P,g),B=G.add(B,B),m=G.mul(B,a),L=G.sub(L,m),O=G.mul(B,d),O=G.add(O,O),O=G.add(O,O),new y(L,b,O)}add(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,O=G.ZERO,m=G.ZERO,d=Y.a,B=G.mul(Y.b,CY),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.mul(S,L),G$=G.add(E,Z),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(a,q$),G$=G.sub(G$,t),t=G.add(E,S);let O$=G.add(P,L);return t=G.mul(t,O$),O$=G.add(a,Y$),t=G.sub(t,O$),O$=G.add(Z,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),m=G.mul(d,t),b=G.mul(B,Y$),m=G.add(b,m),b=G.sub(q$,m),m=G.add(q$,m),O=G.mul(b,m),q$=G.add(a,a),q$=G.add(q$,a),Y$=G.mul(d,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(a,Y$),Y$=G.mul(d,Y$),t=G.add(t,Y$),a=G.mul(q$,t),O=G.add(O,a),a=G.mul(O$,t),b=G.mul(G$,b),b=G.sub(b,a),a=G.mul(G$,q$),m=G.mul(O$,m),m=G.add(m,a),new y(b,O,m)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:E}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>uX(y,L));if(E){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(I),{p:m,f:d}=P(L),{p:B,f:a}=P(O);S=d.add(a),Z=f(E.beta,m,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return uX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:E}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Fq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:O}=YW(y,Z,P,L);return f(E.beta,b,O,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return rG(I,"isCompressed"),this.assertValidity(),R(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new pX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function zW($){return Uint8Array.of($?2:3)}function RW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function n6($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(RW($.Fp,J),{seed:kX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R=G(Q.seed)){return eV(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!L8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let A=Q$(R,void 0,"key").length;return A===w||A===j}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=EY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function cX($,q,J={}){y0(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R}=n6($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*MW<Y.ORDER;function j(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){dX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(Z,g)}class k{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:O,s:m}=GJ.toSig(Q$(Z));return new k(O,m)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=R.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new k(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new k(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(g$(zW((g&1)===0),b)),m=X.inv(L),d=F(Q$(Z,void 0,"msgHash")),B=X.create(-d*m),a=X.create(P*m),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(a));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(Z=N.format){if(dX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g$(Uint8Array.of(this.assertRecovery()),g,L);return g$(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=nG(V);function f(Z){return cG("num < 2^"+V,Z,Fq,x),X.toBytes(Z)}function y(Z,S){return Q$(Z,void 0,"message"),S?Q$(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=rX(P,N);Z=y(Z,L);let O=F(Z),m=X.fromBytes(S);if(!X.isValidNot0(m))throw Error("invalid private key");let d=[f(m),f(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;d.push(Q$(Y$,void 0,"extraEntropy"))}let B=g$(...d),a=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Fq)return;let I$=X.create(t*X.create(a+A$*m));if(I$===Fq)return;let m$=(O$.x===A$?0:2)|Number(O$.y&y8),R0=I$;if(g&&j(I$))R0=X.neg(I$),m$^=1;return new k(A$,R0,w?void 0:m$)}return{seed:B,k2sig:q$}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return uV(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:O}=rX(g,N);if(P=Q$(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let m=Z instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+m)}_(Z,O);try{let m=k.fromBytes(Z,O),d=$.fromBytes(P);if(L&&m.hasHighS())return!1;let{r:B,s:a}=m,q$=F(S),Y$=X.inv(a),G$=X.create(q$*Y$),t=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(d.multiplyUnsafe(t));if(O$.is0())return!1;return X.create(O$.x)===B}catch(m){return!1}}function E(Z,S,P={}){let{prehash:g}=rX(P,N);return S=y(S,g),k.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R,Point:$,sign:v,verify:I,recoverPublicKey:E,Signature:k,hash:q})}function KW($,q,J){return $&q^~$&J}function DW($,q,J){return $&q^$&J^q&J}class PY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=ZY(this.buffer)}update($){Lq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=ZY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Lq(this),jY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=ZY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var gq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),_q=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var LY=BigInt(4294967295),HW=BigInt(32);function o6($,q=!1){if(q)return{h:Number($&LY),l:Number($>>HW&LY)};return{h:Number($>>HW&LY)|0,l:Number($&LY)|0}}function FY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=o6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var nX=($,q,J)=>$>>>J,oX=($,q,J)=>$<<32-J|q>>>J,mJ=($,q,J)=>$>>>J|q<<32-J,xJ=($,q,J)=>$<<32-J|q>>>J,tG=($,q,J)=>$<<64-J|q>>>J-32,eG=($,q,J)=>$>>>J-32|q<<64-J;var OW=($,q,J)=>$<<J|q>>>32-J,NW=($,q,J)=>q<<J|$>>>32-J,wW=($,q,J)=>q<<J-32|$>>>64-J,jW=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var AW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),ZW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,BW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),SW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,TW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),EW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var s6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class aX extends PY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],K=QJ[M-2],R=d0(z,7)^d0(z,18)^z>>>3,N=d0(K,17)^d0(K,19)^K>>>10;QJ[M]=N+QJ[M-7]+R+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=d0(X,6)^d0(X,11)^d0(X,25),K=W+z+KW(X,U,V)+s6[M]+QJ[M]|0,N=(d0(J,2)^d0(J,13)^d0(J,22))+DW(J,G,Q)|0;W=V,V=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){Z0(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z0(this.buffer)}}class IW extends aX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(32)}}class t6 extends aX{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(28)}}var CW=(()=>FY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),e6=(()=>CW[0])(),$N=(()=>CW[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class $Q extends PY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,k=XJ[T-15]|0,u=mJ(_,k,1)^mJ(_,k,8)^nX(_,k,7),F=xJ(_,k,1)^xJ(_,k,8)^oX(_,k,7),x=YJ[T-2]|0,f=XJ[T-2]|0,y=mJ(x,f,19)^tG(x,f,61)^nX(x,f,6),l=xJ(x,f,19)^eG(x,f,61)^oX(x,f,6),v=BW(F,l,XJ[T-7],XJ[T-16]),I=SW(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=mJ(M,z,14)^mJ(M,z,18)^tG(M,z,41),k=xJ(M,z,14)^xJ(M,z,18)^eG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=TW(A,k,F,$N[T],XJ[T]),f=EW(x,j,_,u,e6[T],YJ[T]),y=x|0,l=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),v=xJ(J,G,28)^eG(J,G,34)^eG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Yq(V|0,W|0,f|0,y|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=AW(y,v,E);J=ZW(Z,f,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Yq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Yq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Yq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Yq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,V,W,M,z,K,R,N,w,j,A)}roundClean(){Z0(YJ,XJ)}destroy(){Z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class qN extends $Q{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class PW extends $Q{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(48)}}var J0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class JN extends $Q{Ah=J0[0]|0;Al=J0[1]|0;Bh=J0[2]|0;Bl=J0[3]|0;Ch=J0[4]|0;Cl=J0[5]|0;Dh=J0[6]|0;Dl=J0[7]|0;Eh=J0[8]|0;El=J0[9]|0;Fh=J0[10]|0;Fl=J0[11]|0;Gh=J0[12]|0;Gl=J0[13]|0;Hh=J0[14]|0;Hl=J0[15]|0;constructor(){super(28)}}class GN extends $Q{Ah=G0[0]|0;Al=G0[1]|0;Bh=G0[2]|0;Bl=G0[3]|0;Ch=G0[4]|0;Cl=G0[5]|0;Dh=G0[6]|0;Dl=G0[7]|0;Eh=G0[8]|0;El=G0[9]|0;Fh=G0[10]|0;Fl=G0[11]|0;Gh=G0[12]|0;Gl=G0[13]|0;Hh=G0[14]|0;Hl=G0[15]|0;constructor(){super(32)}}var gY=F8(()=>new IW,eq(1));var LW=F8(()=>new PW,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QN=BigInt(1),FW=BigInt(2),YN=BigInt(3),XN=BigInt(5),iF=BigInt(8),gW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function UN($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=gW,U=$*$%Y*$%Y,V=f0(U,FW,Y)*U%Y,W=f0(V,QN,Y)*$%Y,M=f0(W,XN,Y)*W%Y,z=f0(M,q,Y)*M%Y,K=f0(z,J,Y)*z%Y,R=f0(K,G,Y)*K%Y,N=f0(R,Q,Y)*R%Y,w=f0(N,Q,Y)*R%Y,j=f0(w,q,Y)*M%Y;return{pow_p_5_8:f0(j,FW,Y)*$%Y,b2:U}}function VN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var _W=(()=>{let $=gW;return UW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=UN(q);return D0(f0(J,YN,$)*G,$)},adjustScalarBytes:VN})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),MN=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var zN=iX(WN),sX=cX(zN,gY);var RN=iX(MN),vW=cX(RN,LW);function yW($,q,J){if(y0($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var tX=Uint8Array.of(0),bW=Uint8Array.of();function fW($,q,J,G=32){y0($),x$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=bW;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)tX[0]=M+1,V.update(M===0?bW:W).update(J).update(tX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),Z0(W,tX),X.slice(0,G)}var KN=BigInt(0),qQ=BigInt(1),DN=BigInt(2),HN=BigInt(7),ON=BigInt(256),NN=BigInt(113),xW=[],hW=[],uW=[];for(let $=0,q=qQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],xW.push(2*(5*G+J)),hW.push(($+1)*($+2)/2%64);let Q=KN;for(let Y=0;Y<7;Y++)if(q=(q<<qQ^(q>>HN)*NN)%ON,q&DN)Q^=qQ<<(qQ<<BigInt(Y))-qQ;uW.push(Q)}var pW=FY(uW,!0),wN=pW[0],jN=pW[1],kW=($,q,J)=>J>32?wW($,q,J):OW($,q,J),mW=($,q,J)=>J>32?jW($,q,J):NW($,q,J);function AN($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=kW(W,M,1)^J[U],K=mW(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=K}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=hW[X],V=kW(Q,Y,U),W=mW(Q,Y,U),M=xW[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=wN[G],$[1]^=jN[G]}Z0(J)}class _Y{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,x$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=AY(this.state)}clone(){return this._cloneInto()}keccak(){FX(this.state32),AN(this.state32,this.rounds),FX(this.state32),this.posOut=0,this.pos=0}update($){Lq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Lq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return x$($),this.xofInto(new Uint8Array($))}digestInto($){if(jY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new _Y(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var lW=($,q,J,G={})=>F8(()=>new _Y(q,$,J),G);var hJ=lW(6,136,32,eq(8));var rW=lW(6,72,64,eq(10));var dW=($,q,J,G={})=>F8((Q={})=>new _Y(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),iW=dW(31,168,16,eq(11)),Xq=dW(31,136,32,eq(12));function eX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function nW($){return eX($),($&$-1)===0&&$!==0}function $U($,q){eX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function oW($){return eX($),31-Math.clz32($)}function cW($){let q=$.length;if(q<2||!nW(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=oW(q);for(let G=0;G<q;G++){let Q=$U(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var qU=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=oW(J);if(!nW(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)cW(M);for(let z=0,K=1;z<V-X;z++){let R=Q?z+1+X:V-z,N=1<<R,w=N>>1,j=J>>R;for(let A=0;A<J;A+=N)for(let T=0,_=K++;T<w;T++){let k=Y?Q?J-_:_:T*j,u=A+T,F=A+T+w,x=G[k],f=M[F],y=M[u];if(W){let l=$.mul(f,x);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(f,y),M[F]=$.mul($.sub(f,y),x);else M[u]=$.add(y,f),M[F]=$.mul($.sub(y,f),x)}}if(!Q&&U)cW(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function vY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function aW($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function bY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function JU($){return(1<<$)-1}var Ug=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var sW=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,_=G)=>{let k=T%_|0;return(k>=0?k|0:_+k|0)|0},W=(T,_=G)=>{let k=V(T,_)|0;return(k>_>>1?k-_|0:k)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let k=$U(_,X),u=BigInt(Y)**BigInt(k)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),K={add:(T,_)=>V((T|0)+(_|0))|0,sub:(T,_)=>V((T|0)-(_|0))|0,mul:(T,_)=>V((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=qU(K,{dit:!1,...R}),w=qU(K,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let _=0;_<T.length;_++)T[_]=V(Q*T[_]);return T}},bitsCoder:(T,_)=>{let k=JU(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=(_.encode(F[f])&k)<<l,l+=T;for(;l>=8;l-=8,y>>=8)x[v++]=y&JU(l)}return x},decode:(F)=>{let x=q(J);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=F[f]<<l,l+=8;for(;l>=T;l-=T,y>>=T)x[v++]=_.decode(y&k)}return x}}}}},ZN=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),y$(Y,G)}}},tW=ZN(iW);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q0=256,vq=3329,BN=3303,SN=17,{mod:QQ,nttZetas:TN,NTT:pJ,bitsCoder:EN}=sW({N:Q0,Q:vq,F:BN,ROOT_OF_UNITY:SN,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),GU={512:{N:Q0,Q:vq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q0,Q:vq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q0,Q:vq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},IN=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+vq/2)/vq,decode:(J)=>J*vq+q>>>$}},JQ=($)=>EN($,IN($));function lJ($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]+q[J])}function CN($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]-q[J])}function PN($,q,J,G,Q){let Y=QQ(q*G*Q+$*J),X=QQ($*G+q*J);return{c0:Y,c1:X}}function yY($,q){for(let J=0;J<Q0/2;J++){let G=TN[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=PN($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function eW($){let q=new Uint16Array(Q0);for(let J=0;J<Q0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<vq)q[J++]=Y;if(J<Q0&&X<vq)q[J++]=X}}return q}function GQ($,q,J,G){let Q=$(G*Q0/4,q,J),Y=new Uint16Array(Q0),X=AY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let K=X[V];for(let R=0;R<32;R++)if(M+=K&1,K>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=QQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var LN=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=JQ(1),M=JQ(V),z=JQ(U),K=uJ("publicKey",bY(JQ(12),q),32),R=bY(JQ(12),q),N=uJ("ciphertext",bY(z,q),M),w=uJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:K.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let A=new Uint8Array(33);A.set(j),A[32]=q;let T=Q(A),[_,k]=w.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(GQ(J,k,y,Y)));let x=G(_);for(let y=0;y<q;y++){let l=pJ.encode(GQ(J,k,q+y,Y));for(let v=0;v<q;v++){let I=eW(x.get(v,y));lJ(l,yY(I,u[v]))}F.push(l)}x.clean();let f={publicKey:K.encode([F,_]),secretKey:R.encode(u)};return y$(_,k,u,F,A,T),f},encrypt:(j,A,T)=>{let[_,k]=K.decode(j),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(GQ(J,T,v,Y)));let F=G(k),x=new Uint16Array(Q0),f=[];for(let v=0;v<q;v++){let I=GQ(J,T,q+v,X),E=new Uint16Array(Q0);for(let Z=0;Z<q;Z++){let S=eW(F.get(v,Z));lJ(E,yY(S,u[Z]))}lJ(I,pJ.decode(E)),f.push(I),lJ(x,yY(_[v],u[v])),y$(E)}F.clean();let y=GQ(J,T,2*q,X);lJ(y,pJ.decode(x));let l=W.decode(A);return lJ(l,y),y$(_,u,x,y),N.encode([f,l])},decrypt:(j,A)=>{let[T,_]=N.decode(j),k=R.decode(A),u=new Uint16Array(Q0);for(let F=0;F<q;F++)lJ(u,yY(k[F],pJ.encode(T[F])));return CN(_,pJ.decode(u)),y$(u,k,T),W.encode(_)}}};function QU($){let q=LN($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:K}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([K,z,R,M.subarray(32)]);return y$(K,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,K,R,N]=U.decode(M);return Uint8Array.from(K)},encapsulate:(M,z=Uq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let K=M.subarray(0,384*$.K),R=Y.encode(Y.decode(aW(K)));if(!vY(R,K))throw y$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");y$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return y$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let K=U.bytesLen-96,R=K+32,N=J(z.subarray(K/2,R));if(!vY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,A,T]=U.decode(z),_=q.decrypt(M,w),k=G.create().update(_).update(A).digest(),u=k.subarray(0,32),F=q.encrypt(j,_,k.subarray(32,64)),x=vY(M,F),f=Q.create({dkLen:32}).update(T).update(M).digest();return y$(_,F,!x?u:f),x?u:f}}}function FN($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var YU={HASH256:hJ,HASH512:rW,KDF:Xq,XOF:tW,PRF:FN},wg=QU({...YU,...GU[512]}),YQ=QU({...YU,...GU[768]}),$M=QU({...YU,...GU[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function gN($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function XU($,q=!1){let J=gN($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function UU($){return(q,J)=>$(q,{dkLen:J})}function _N($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;x$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,K)=>z.keygen(U[K])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return y$(U),y$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function fY($,q,J,G,...Q){let Y=_N($,J,...Q),X=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),V=XQ(Q,"msg");if(q===void 0)q=V.bytesLen;return x$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Uq(V.bytesLen)){let z=U.decode(W),K=V.decode(M),R=Q.map((A,T)=>A.encapsulate(z[T],K[T])),N=R.map((A)=>A.sharedSecret),w=R.map((A)=>A.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return y$(N,w),j},decapsulate(W,M){let z=X.decode(W),{publicKey:K,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(K,z,N)}}}function qM($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>Q(g$(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var Lg=qM("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YQ,XU(sX,!0),Xq,hJ),Fg=qM("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",$M,XU(vW,!0),Xq,hJ);function vN($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>{let V=g$(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),W=32,M=g$(JJ("hybrid_prk"),V),z=yW(Q,M),K=g$(g8(32,2),JJ("shared_secret"),JJ("")),R=fW(Q,z,K,32);return y$(z,K,M,V),R},q,J)}var JM=XU(_W),gg=vN("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YQ,JM,Xq,gY),bN=(()=>fY(32,32,UU(Xq),($,q,J)=>hJ(g$(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),YQ,JM))();function yN($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return y$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function fN($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=yN(J,Q,Y,G),U=64,V=U+G;return fY(32,32,(W)=>{Q$(W,32);let M=Xq(W,{dkLen:V}),z=M.subarray(0,U),K=M.subarray(U,V);return g$(z,K)},(W,M,z)=>hJ(g$(z[0],z[1],M[1],W[1],JJ($))),q,X)}var kN=(()=>fN("MLKEM768-P256",YQ,sX,128))();var VU=bN,GM=kN;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>u$($,q,J),MU=L$,f8=UY,n$=(...$)=>zX(...$),k8=($)=>bG($),m8=VX,x8=($)=>Sq($),mY=BigInt(0),WU=BigInt(1);function bq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function xY($){if(typeof $==="bigint"){if(!kY($))throw RangeError("positive bigint expected, got "+$)}else MU($);return $}function Vq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function UQ($){let q=xY($).toString(16);return q.length&1?"0"+q:q}function QM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?mY:BigInt("0x"+$)}function rJ($){return QM(UY($))}function i0($){return QM(UY(UJ(u$($)).reverse()))}function hY($,q){if(L$(q),q===0)throw RangeError("zero length");$=xY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return bG(J.padStart(q*2,"0"))}function VQ($,q){return hY($,q).reverse()}function YM($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z$($))}function uY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var kY=($)=>typeof $==="bigint"&&mY<=$;function mN($,q,J){return kY($)&&kY(q)&&kY(J)&&q<=$&&$<J}function yq($,q,J,G){if(!mN(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<mY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>mY;$>>=WU,q+=1);return q}var WQ=($)=>(WU<<BigInt($))-WU;function XM($,q,J){if(L$($,"hashLen"),L$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},K=(...j)=>J(W,n$(V,...j)),R=(j=Q)=>{if(W=K(Y,j),V=K(),j.length===0)return;W=K(X,j),V=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){V=K();let T=V.slice();A.push(T),j+=V.length}return n$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while((T=A(N()))===void 0)R();return z(),T}}function k0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var zU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o$=BigInt(0),C$=BigInt(1),dJ=BigInt(2),MM=BigInt(3),zM=BigInt(4),RM=BigInt(5),xN=BigInt(7),KM=BigInt(8),hN=BigInt(9),DM=BigInt(16);function T$($,q){if(q<=o$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o$?J:q+J}function m0($,q,J){if(q<o$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o$)G*=G,G%=J;return G}function UM($,q){if($===o$)throw Error("invert: expected non-zero number");if(q<=o$)throw Error("invert: expected positive modulus, got "+q);let J=T$($,q),G=q,Q=o$,Y=C$,X=C$,U=o$;while(J!==o$){let W=G/J,M=G-J*W,z=Q-X*W,K=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==C$)throw Error("invert: does not exist");return T$(Q,q)}function RU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function HM($,q){let J=$,G=(J.ORDER+C$)/zM,Q=J.pow(q,G);return RU(J,Q,q),Q}function uN($,q){let J=$,G=(J.ORDER-RM)/KM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),V=J.mul(X,J.sub(U,J.ONE));return RU(J,V,q),V}function pN($){let q=pY($),J=OM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+xN)/DM;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),K=W.mul(M,Q),R=W.mul(M,Y),N=W.eql(W.sqr(z),V),w=W.eql(W.sqr(K),V);M=W.cmov(M,z,N),z=W.cmov(R,K,w);let j=W.eql(W.sqr(z),V),A=W.cmov(M,z,j);return RU(W,A,V),A}}function OM($){if($<MM)throw Error("sqrt is not defined for small field");let q=$-C$,J=0;while(q%dJ===o$)q/=dJ,J++;let G=dJ,Q=pY($);while(VM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return HM;let Y=Q.pow(G,q),X=(q+C$)/dJ;return function(V,W){let M=V;if(M.is0(W))return W;if(VM(M,W)!==1)throw Error("Cannot find square root");let z=J,K=M.mul(M.ONE,Y),R=M.pow(W,q),N=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let A=C$<<BigInt(z-w-1),T=M.pow(K,A);z=w,K=M.sqr(T),R=M.mul(R,K),N=M.mul(N,T)}return N}}function lN($){if($%zM===MM)return HM;if($%KM===RM)return uN;if($%DM===hN)return pN($);return OM($)}var fq=($,q)=>(T$($,q)&C$)===C$,rN=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function KU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=rN.reduce((G,Q)=>{return G[Q]="function",G},q);if(k0($,J),Vq($.BYTES,"BYTES"),Vq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function dN($,q,J){let G=$;if(J<o$)throw Error("invalid exponent, negatives unsupported");if(J===o$)return G.ONE;if(J===C$)return q;let Q=G.ONE,Y=q;while(J>o$){if(J&C$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=C$}return Q}function MQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function VM($,q){let J=$,G=(J.ORDER-C$)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function iN($,q){if(q!==void 0)MU(q);if($<=o$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var WM=new WeakMap;class DU{ORDER;BITS;BYTES;isLE;ZERO=o$;ONE=C$;_lengths;_mod;constructor($,q={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=iN($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o$<=$&&$<this.ORDER}is0($){return $===o$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return T$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T$($*$,this.ORDER)}add($,q){return T$($+q,this.ORDER)}sub($,q){return T$($-q,this.ORDER)}mul($,q){return T$($*q,this.ORDER)}pow($,q){return dN(this,$,q)}div($,q){return T$($*UM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return UM($,this.ORDER)}sqrt($){let q=WM.get(this);if(!q)WM.set(this,q=lN(this.ORDER));return q(this,$)}toBytes($){return this.isLE?VQ($,this.BYTES):hY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i0($):rJ($);if(X)U=T$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return MQ(this,$)}cmov($,q,J){return bq(J,"condition"),J?q:$}}Object.freeze(DU.prototype);function pY($,q={}){return new DU($,q)}function NM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let q=h8($-C$);return Math.ceil(q/8)}function HU($){let q=NM($);return q+Math.ceil(q/2)}function wM($,q,J=!1){Z$($);let G=$.length,Q=NM(q),Y=Math.max(HU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i0($):rJ($),U=T$(X,q-C$)+C$;return J?VQ(U,Q):hY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=MQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function BM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function OU($,q){BM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=WQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function jM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=iJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:W}}var NU=new WeakMap,SM=new WeakMap;function wU($){return SM.get($)||1}function AM($){if($!==u8)throw Error("invalid wNAF")}class RQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=OU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=OU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:K}=jM(J,X,Y);if(J=U,W)Q=Q.add(zQ(z,q[K]));else G=G.add(zQ(M,q[V]))}return AM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=OU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=jM(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return AM(J),G}getPrecomputes($,q,J){let G=NU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);NU.set(q,G)}}return G}cached($,q,J){let G=wU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=wU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){BM(q,this.bits),SM.set($,q),NU.delete($)}hasCache($){return wU($)!==1}}function TM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function ZM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return KU(q),q}else return pY($,{isLE:J})}function lY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>u8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=ZM(q.p,J.Fp,G),Y=ZM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Vq($),Vq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function cN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function nN($){if(!m8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?uY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function jU($,q,J,G){if(Z$($),Vq(J),q=nN(q),q.length>255)q=G(n$(uY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n$(q,DQ(q.length,1)),V=new Uint8Array(Y),W=DQ(J,2),M=Array(X),z=G(n$(V,$,W,DQ(0,1),U));M[0]=G(n$(z,DQ(1,1),U));for(let R=1;R<X;R++){let N=[cN(z,M[R-1]),DQ(R+1,1),U];M[R]=G(n$(...N))}return n$(...M).slice(0,J)}var EM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IM=($,q)=>($+($>=0?q:-q)/PM)/q;function oN($,q,J){yq("scalar",$,Wq,J);let[[G,Q],[Y,X]]=q,U=IM(X*$,J),V=IM(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Wq,K=M<Wq;if(z)W=-W;if(K)M=-M;let R=WQ(Math.ceil(h8(J)/2))+VJ;if(W<Wq||W>=R||M<Wq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:K,k2:M}}function ZU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function AU($,q){k0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(bq(J.lowS,"lowS"),bq(J.prehash,"prehash"),J.format!==void 0)ZU(J.format);return J}class CM extends Error{constructor($=""){super($)}}var c0={Err:CM,_tlv:{encode:($,q)=>{let{Err:J}=c0;if(Vq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=UQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?UQ(Q.length/2|128):"";return UQ($)+Y+Q+q},decode($,q){let{Err:J}=c0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c0;if(xY($),$<Wq)throw new q("integer: negative integers are not allowed");let J=UQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=c0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c0._tlv);Object.freeze(c0._int);Object.freeze(c0);var Wq=BigInt(0),VJ=BigInt(1),PM=BigInt(2),rY=BigInt(3),aN=BigInt(4);function LM($,q={}){let J=lY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;k0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=gM(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function K(v,I,E){if(W&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(bq(E,"isCompressed"),E){z();let g=!G.isOdd(S);return n$(FM(g),P)}else return n$(Uint8Array.of(4),P,G.toBytes(S))}function R(v){Z$(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:E}=M,Z=v.length,S=v[0],P=v.subarray(1);if(W&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(Z===E&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${E}`)}let N=q.toBytes===void 0?K:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(v){let I=G.sqr(v),E=G.mul(I,v);return G.add(G.add(E,G.mul(v,Y.a)),Y.b)}function A(v,I){let E=G.sqr(I),Z=j(v);return G.eql(E,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,rY),aN),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function k(v,I,E=!1){if(!G.isValid(I)||E&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof f))throw Error("Weierstrass Point expected")}function F(v){if(!V||!V.basises)throw Error("no endo");return oN(v,V.basises,Q.ORDER)}function x(v,I,E,Z,S){return E=new f(G.mul(E.X,v),E.Y,E.Z),I=zQ(Z,I),E=zQ(S,E),I.add(E)}class f{static BASE=new f(Y.Gx,Y.Gy,G.ONE);static ZERO=new f(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,E){this.X=k("x",v),this.Y=k("y",I,!0),this.Z=k("z",E),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:E}=v||{};if(!v||!G.isValid(I)||!G.isValid(E))throw Error("invalid affine point");if(v instanceof f)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(E))return f.ZERO;return new f(I,E,G.ONE)}static fromBytes(v){let I=f.fromAffine(w(Z$(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return f.fromBytes(k8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(rY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:E}=v.toAffine();if(!G.isValid(I)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!A(I,E))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(E,g),G.mul(P,Z));return L&&b}negate(){return new f(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,E=G.mul(I,rY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(Z,Z),m=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(E,d),L=G.add(g,L),g=G.sub(m,L),L=G.add(m,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(E,b),d=G.mul(v,d),B=G.sub(O,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,d),O=G.mul(O,B),L=G.add(L,O),d=G.mul(S,P),d=G.add(d,d),O=G.mul(d,B),g=G.sub(g,O),b=G.mul(d,m),b=G.add(b,b),b=G.add(b,b),new f(g,L,b)}add(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,O=G.ZERO,m=Y.a,d=G.mul(Y.b,rY),B=G.mul(I,S),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.add(I,E),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,a),Y$=G.sub(Y$,G$),G$=G.add(I,Z);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(E,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q$),t=G.sub(t,L),O=G.mul(m,G$),L=G.mul(d,q$),O=G.add(L,O),L=G.sub(a,O),O=G.add(a,O),b=G.mul(L,O),a=G.add(B,B),a=G.add(a,B),q$=G.mul(m,q$),G$=G.mul(d,G$),a=G.add(a,q$),q$=G.sub(B,q$),q$=G.mul(m,q$),G$=G.add(G$,q$),B=G.mul(a,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,a),O=G.mul(t,O),O=G.add(O,B),new f(L,b,O)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(f.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let E,Z,S=(P)=>l.cached(this,P,(g)=>cJ(f,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:O,f:m}=S(g),{p:d,f:B}=S(b);Z=m.add(B),E=x(I.beta,O,d,P,L)}else{let{p:P,f:g}=S(v);E=P,Z=g}return cJ(f,[E,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,E=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Wq||E.is0())return f.ZERO;if(Z===VJ)return E;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:O}=TM(f,E,P,L);return x(I.beta,b,O,S,g)}else return l.unsafe(E,Z)}toAffine(v){let I=this,E=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),O=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===VJ)return!0;if(v)return v(f,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===VJ)return this;if(v)return v(f,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===VJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return bq(v,"isCompressed"),this.assertValidity(),N(f,this,v)}toHex(v=!0){return f8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new RQ(f,q.endo?Math.ceil(y/2):y);if(y>=8)f.BASE.precompute(8);return Object.freeze(f.prototype),Object.freeze(f),f}function FM($){return Uint8Array.of($?2:3)}function gM($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function sN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?x8:q.randomBytes,Q=Object.assign(gM($.Fp,J),{seed:Math.max(HU(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,wM(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,A=J._lengths;if(!m8(R))return;let T=Z$(R,void 0,"key").length,_=T===w||T===j,k=T===N||!!A?.includes(T);if(_&&k)return;return _}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=KQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function _M($,q,J={}){let G=q;Bq(G),k0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?x8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Tq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N}=sN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*PM+VJ<X.ORDER;function A(S){let P=V>>VJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(S,P){ZU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){k(S,P);let g;if(P==="der"){let{r:m,s:d}=c0.toSig(Z$(S));return new u(m,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(k8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),m=$.fromBytes(n$(FM((L&1)===0),O)),d=U.inv(b),B=x(Z$(S,void 0,"msgHash")),a=U.create(-B*d),q$=U.create(g*d),Y$=$.BASE.multiplyUnsafe(a).add(m.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return A(this.s)}toBytes(S=w.format){if(ZU(S),S==="der")return k8(c0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n$(Uint8Array.of(this.assertRecovery()),L,b);return n$(L,b)}toHex(S){return f8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,f=WQ(W);function y(S){return yq("num < 2^"+W,S,Wq,f),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=AU(g,w);S=l(S,b);let m=x(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(m)];if(O!=null&&O!==!1){let G$=O===!0?Q(N.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let a=n$(...B),q$=m;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let O$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),I$=U.create(A$.x);if(I$===Wq)return;let m$=U.create(O$*U.create(q$+I$*d));if(m$===Wq)return;let R0=(A$.x===I$?0:2)|Number(A$.y&VJ),Jq=m$;if(L&&A(m$))Jq=U.neg(m$),R0^=1;return new u(I$,Jq,j?void 0:R0)}return{seed:a,k2sig:Y$}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return XM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function E(S,P,g,L={}){let{lowS:b,prehash:O,format:m}=AU(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!m8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}k(S,m);try{let d=u.fromBytes(S,m),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q$}=d,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),O$=U.create(a*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=AU(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N,Point:$,sign:I,verify:E,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var tN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var eN=LM(tN),p8=_M(eN,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WJ=BigInt(0),B0=BigInt(1),BU=BigInt(2),$4=BigInt(8);function q4($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function vM($,q={}){let J=q,G=lY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;k0(J,{},{uvRatio:"function"});let V=BU<<BigInt(Y.BYTES*8)-B0,W=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(A){return{isValid:!1,value:WJ}}}:J.uvRatio;if(!q4(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,A=!1){let T=A?B0:WJ;return yq("coordinate "+w,j,T,V),j}function K(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,B0,W(X.Gx*X.Gy));static ZERO=new R(WJ,B0,B0,WJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,A,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:A}=w||{};return z("x",j),z("y",A),new R(j,A,B0,W(j*A))}static fromBytes(w,j=!1){let A=Q.BYTES,{a:T,d:_}=X;w=UJ(Z$(w,A,"point")),bq(j,"zip215");let k=UJ(w),u=w[A-1];k[A-1]=u&-129;let F=i0(k),x=j?V:Q.ORDER;yq("point.y",F,WJ,x);let f=W(F*F),y=W(f-B0),l=W(_*f-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let E=(I&B0)===B0,Z=(u&128)!==0;if(!j&&I===WJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==E)I=W(-I);return R.fromAffine({x:I,y:F})}static fromHex(w,j=!1){return R.fromBytes(k8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(BU);return this}assertValidity(){let w=this,{a:j,d:A}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:k,T:u}=w,F=W(T*T),x=W(_*_),f=W(k*k),y=W(f*f),l=W(F*j),v=W(f*W(l+x)),I=W(y+W(A*W(F*x)));if(v!==I)throw Error("bad point: equation left != right (1)");let E=W(T*_),Z=W(k*u);if(E!==Z)throw Error("bad point: equation left != right (2)")}equals(w){K(w);let{X:j,Y:A,Z:T}=this,{X:_,Y:k,Z:u}=w,F=W(j*u),x=W(_*T),f=W(A*u),y=W(k*T);return F===x&&f===y}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:w}=X,{X:j,Y:A,Z:T}=this,_=W(j*j),k=W(A*A),u=W(BU*W(T*T)),F=W(w*_),x=j+A,f=W(W(x*x)-_-k),y=F+k,l=y-u,v=F-k,I=W(f*l),E=W(y*v),Z=W(f*v),S=W(l*y);return new R(I,E,S,Z)}add(w){K(w);let{a:j,d:A}=X,{X:T,Y:_,Z:k,T:u}=this,{X:F,Y:x,Z:f,T:y}=w,l=W(T*F),v=W(_*x),I=W(u*A*y),E=W(k*f),Z=W((T+_)*(F+x)-l-v),S=E-I,P=E+I,g=W(v-j*l),L=W(Z*S),b=W(P*g),O=W(Z*g),m=W(S*P);return new R(L,b,m,O)}subtract(w){return K(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:A}=N.cached(this,w,(T)=>cJ(R,T));return cJ(R,[j,A])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===WJ)return R.ZERO;if(this.is0()||w===B0)return this;return N.unsafe(this,w,(j)=>cJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,A=w,{X:T,Y:_,Z:k}=j,u=j.is0();if(A==null)A=u?$4:Q.inv(k);let F=W(T*A),x=W(_*A),f=Q.mul(k,A);if(u)return{x:WJ,y:B0};if(f!==B0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===B0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),A=Q.toBytes(j);return A[A.length-1]|=w&B0?128:0,A}toHex(){return f8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new RQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class SU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){zU()}static fromHex($){zU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return f8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HQ=BigInt(0),l8=BigInt(1),dY=BigInt(2);function J4($){return k0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function bM($){let q=J4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?x8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?dY**BigInt(254):dY**BigInt(447),N=U?BigInt(8)*dY**BigInt(251)-l8:BigInt(4)*dY**BigInt(445)-l8,w=R+N+l8,j=(Z)=>T$(Z,J),A=T(z);function T(Z){return VQ(j(Z),M)}function _(Z){let S=UJ(Z$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(i0(S))}function k(Z){return i0(Q(UJ(Z$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===HQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){yq("u",Z,HQ,J),yq("scalar",S,R,w);let P=S,g=Z,L=l8,b=HQ,O=Z,m=l8,d=HQ;for(let a=BigInt(W-1);a>=HQ;a--){let q$=P>>a&l8;d^=q$,{x_2:L,x_3:O}=y(d,L,O),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,I$=O+m,m$=O-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;O=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*O$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:O}=y(d,L,O)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?V(M):Z,Z$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze(v),Object.freeze(E),Object.freeze({keygen:KQ(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var G4=BigInt(0),kq=BigInt(1),yM=BigInt(2),Q4=BigInt(3),Y4=BigInt(5),X4=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),CU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:X4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function mM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,V=m0(U,yM,Y)*U%Y,W=m0(V,kq,Y)*$%Y,M=m0(W,Y4,Y)*W%Y,z=m0(M,q,Y)*M%Y,K=m0(z,J,Y)*z%Y,R=m0(K,G,Y)*K%Y,N=m0(R,Q,Y)*R%Y,w=m0(N,Q,Y)*R%Y,j=m0(w,q,Y)*M%Y;return{pow_p_5_8:m0(j,yM,Y)*$%Y,b2:U}}function U4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function PU($,q){let J=oJ,G=T$(q*q*q,J),Q=T$(G*G*q,J),Y=mM($*Q).pow_p_5_8,X=T$($*G*Y,J),U=T$(q*X*X,J),V=X,W=T$(X*TU,J),M=U===$,z=U===T$(-$,J),K=U===T$(-$*TU,J);if(M)X=V;if(z||K)X=W;if(fq(X,J))X=T$(-X,J);return{isValid:M||z,value:X}}var nJ=vM(CU,{uvRatio:PU}),MJ=(()=>nJ.Fp)(),xM=(()=>nJ.Fn)();var iY=(()=>{let $=oJ;return bM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=mM(q);return T$(m0(J,Q4,$)*G,$)},adjustScalarBytes:U4})})();var EU=TU,V4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),W4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),M4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),z4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),fM=($)=>PU(kq,$),R4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),IU=($)=>MJ.create(i0($)&R4);function kM($){let{d:q}=CU,J=oJ,G=(A)=>MJ.create(A),Q=G(EU*$*$),Y=G((Q+kq)*M4),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=PU(Y,U),M=G(W*$);if(!fq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-kq)*z4-U),K=W*W,R=G((W+W)*U),N=G(z*V4),w=G(kq-K),j=G(kq+K);return new nJ(G(R*j),G(w*N),G(N*j),G(R*w))}class O0 extends SU{static BASE=(()=>new O0(nJ.BASE))();static ZERO=(()=>new O0(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>xM)();constructor($){super($)}static fromAffine($){return new O0(nJ.fromAffine($))}assertSame($){if(!($ instanceof O0))throw Error("RistrettoPoint expected")}init($){return new O0($)}static fromBytes($){u$($,32);let{a:q,d:J}=CU,G=oJ,Q=(_)=>MJ.create(_),Y=IU($);if(!YM(MJ.toBytes(Y),$)||fq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(kq+q*X),V=Q(kq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:K,value:R}=fM(Q(z*M)),N=Q(R*V),w=Q(R*N*z),j=Q((Y+Y)*N);if(fq(j,G))j=Q(-j);let A=Q(U*w),T=Q(j*A);if(!K||fq(T,G)||A===G4)throw Error("invalid ristretto255 encoding 2");return new O0(new nJ(j,A,kq,T))}static fromHex($){return O0.fromBytes(bG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(w)=>MJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=fM(Y(X*V)),M=Y(W*X),z=Y(W*U),K=Y(M*z*G),R;if(fq(G*K,Q)){let w=Y(q*EU),j=Y($*EU);$=w,q=j,R=Y(M*W4)}else R=z;if(fq($*K,Q))q=Y(-q);let N=Y((J-q)*R);if(fq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>MJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(O0.ZERO)}}Object.freeze(O0.BASE);Object.freeze(O0.ZERO);Object.freeze(O0.prototype);Object.freeze(O0);var K4=Object.freeze({Point:O0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=jU($,J,64,zY);return K4.deriveToCurve(G)},hashToScalar($,q={DST:EM}){let J=jU($,q.DST,64,zY);return xM.create(i0(J))},deriveToCurve($){u$($,64);let q=IU($.subarray(0,32)),J=kM(q),G=IU($.subarray(32,64)),Q=kM(G);return new O0(J.add(Q))}});var hM=!1,D4=!1;async function uM($,q){if(D4)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function FU($,q){return await uM(async()=>{let J=LU($)?$:await O4($),G=await crypto.subtle.importKey("raw",N4(q),{name:"X25519"},hM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMult($,q)})}async function gU($){return await uM(async()=>{return FU($,iY.GuBytes)},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMultBase($)})}var H4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function O4($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...H4,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},hM,["deriveBits"])}function LU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function N4($){return $}class pM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),j4(OQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=OQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:OQ(this.transcript)}}}function j4($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function OQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function cY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function lM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function rM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class mq{args;body;constructor($,q){this.args=$,this.body=q}}function _U($){let q=[];q.push(`age-encryption.org/v1
 `);for(let J of $){q.push("-> "+J.args.join(" ")+`
 `);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(p0.encode(J.body.subarray(G,Q))+`
 `)}if(J.body.length%48===0)q.push(`

package/dist/index.js CHANGED Viewed

@@ -53,7 +53,7 @@ return `+str.trim()+`;
 `).join(`
 `+Y),$.push(Q+"m+"+hY.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=hB()+q+" "+$[0]}function hB(){if(_z.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function uB(...$){return process.stderr.write(xY.formatWithOptions(_z.inspectOpts,...$)+`
 `)}function pB($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function lB(){return process.env.DEBUG}function rB($){$.inspectOpts={};let q=Object.keys(_z.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=_z.inspectOpts[q[J]]}hY.exports=tX()(_z);var{formatters:gz}=hY.exports;gz.o=function($){return this.inspectOpts.colors=this.useColors,xY.inspect($,this.inspectOpts).split(`
-`).map((q)=>q.trim()).join(" ")};gz.O=function($){return this.inspectOpts.colors=this.useColors,xY.inspect($,this.inspectOpts)}});var yz=X$((Dy,qU)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)qU.exports=Ez();else qU.exports=bz()});var vR=X$((pm,_R)=>{var aY=Object.prototype.hasOwnProperty,gR=Object.prototype.toString,ER=Object.defineProperty,IR=Object.getOwnPropertyDescriptor,CR=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return gR.call(q)==="[object Array]"},PR=function(q){if(!q||gR.call(q)!=="[object Object]")return!1;var J=aY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&aY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||aY.call(q,Q)},LR=function(q,J){if(ER&&J.name==="__proto__")ER(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},FR=function(q,J){if(J==="__proto__"){if(!aY.call(q,J))return;else if(IR)return IR(q,J).value}return q[J]};_R.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=FR(U,J),Q=FR(q,J),U!==Q){if(M&&Q&&(PR(Q)||(Y=CR(Q)))){if(Y)Y=!1,X=G&&CR(G)?G:[];else X=G&&PR(G)?G:{};LR(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")LR(U,{name:J,newValue:Q})}}return U}});import{access as hE,chmod as eU,mkdir as uK,readFile as lK,writeFile as pK}from"fs/promises";import{dirname as uE,join as q7}from"path";import{fileURLToPath as pE}from"url";var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.46",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var GV=`ARG BUN_VERSION=1.3.10
+`).map((q)=>q.trim()).join(" ")};gz.O=function($){return this.inspectOpts.colors=this.useColors,xY.inspect($,this.inspectOpts)}});var yz=X$((Dy,qU)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)qU.exports=Ez();else qU.exports=bz()});var vR=X$((pm,_R)=>{var aY=Object.prototype.hasOwnProperty,gR=Object.prototype.toString,ER=Object.defineProperty,IR=Object.getOwnPropertyDescriptor,CR=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return gR.call(q)==="[object Array]"},PR=function(q){if(!q||gR.call(q)!=="[object Object]")return!1;var J=aY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&aY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||aY.call(q,Q)},LR=function(q,J){if(ER&&J.name==="__proto__")ER(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},FR=function(q,J){if(J==="__proto__"){if(!aY.call(q,J))return;else if(IR)return IR(q,J).value}return q[J]};_R.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=FR(U,J),Q=FR(q,J),U!==Q){if(M&&Q&&(PR(Q)||(Y=CR(Q)))){if(Y)Y=!1,X=G&&CR(G)?G:[];else X=G&&PR(G)?G:{};LR(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")LR(U,{name:J,newValue:Q})}}return U}});import{access as hE,chmod as eU,mkdir as uK,readFile as lK,writeFile as pK}from"fs/promises";import{dirname as uE,join as q7}from"path";import{fileURLToPath as pE}from"url";var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.48",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var GV=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app

package/package.json CHANGED Viewed

@@ -4,7 +4,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.2.0-alpha.46",
+  "version": "0.2.0-alpha.48",
   "type": "module",
   "exports": {
     ".": {