npm - @rizom/ops - Versions diffs - 0.2.0-alpha.594 → 0.2.0-alpha.595 - Mend

@rizom/ops 0.2.0-alpha.594 → 0.2.0-alpha.595

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -210,10 +210,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 `+v.slice(le,ge),le=ge+1;se=xe}if($e+=`
 `,v.length-le>W&&se>le)$e+=v.slice(le,se)+`
 `+v.slice(se+1);else $e+=v.slice(le);return $e.slice(1)}function Jn(v){let W="",G=0;for(let ce=0;ce<v.length;G>=65536?ce+=2:ce++){G=Ye(v,ce);let le=I[G];if(!le&&Ce(G)){if(W+=v[ce],G>=65536)W+=v[ce+1]}else W+=le||L(G)}return W}function uu(v,W,G){let ce="",le=v.tag;for(let ge=0,se=G.length;ge<se;ge+=1){let xe=G[ge];if(v.replacer)xe=v.replacer.call(G,String(ge),xe);if(q(v,W,xe,!1,!1)||typeof xe>"u"&&q(v,W,null,!1,!1)){if(ce!=="")ce+=","+(!v.condenseFlow?" ":"");ce+=v.dump}}v.tag=le,v.dump="["+ce+"]"}function ee(v,W,G,ce){let le="",ge=v.tag;for(let se=0,xe=G.length;se<xe;se+=1){let $e=G[se];if(v.replacer)$e=v.replacer.call(G,String(se),$e);if(q(v,W+1,$e,!0,!0,!1,!0)||typeof $e>"u"&&q(v,W+1,null,!0,!0,!1,!0)){if(!ce||le!=="")le+=C(v,W);if(v.dump&&a===v.dump.charCodeAt(0))le+="-";else le+="- ";le+=v.dump}}v.tag=ge,v.dump=le||"[]"}function ie(v,W,G){let ce="",le=v.tag,ge=Object.keys(G);for(let se=0,xe=ge.length;se<xe;se+=1){let $e="";if(ce!=="")$e+=", ";if(v.condenseFlow)$e+='"';let De=ge[se],Le=G[De];if(v.replacer)Le=v.replacer.call(G,De,Le);if(!q(v,W,De,!1,!1))continue;if(v.dump.length>1024)$e+="? ";if($e+=v.dump+(v.condenseFlow?'"':"")+":"+(v.condenseFlow?"":" "),!q(v,W,Le,!1,!1))continue;$e+=v.dump,ce+=$e}v.tag=le,v.dump="{"+ce+"}"}function Ie(v,W,G,ce){let le="",ge=v.tag,se=Object.keys(G);if(v.sortKeys===!0)se.sort();else if(typeof v.sortKeys==="function")se.sort(v.sortKeys);else if(v.sortKeys)throw new t("sortKeys must be a boolean or a function");for(let xe=0,$e=se.length;xe<$e;xe+=1){let De="";if(!ce||le!=="")De+=C(v,W);let Le=se[xe],Me=G[Le];if(v.replacer)Me=v.replacer.call(G,Le,Me);if(!q(v,W+1,Le,!0,!0,!0))continue;let Ve=v.tag!==null&&v.tag!=="?"||v.dump&&v.dump.length>1024;if(Ve)if(v.dump&&a===v.dump.charCodeAt(0))De+="?";else De+="? ";if(De+=v.dump,Ve)De+=C(v,W);if(!q(v,W+1,Me,!0,Ve))continue;if(v.dump&&a===v.dump.charCodeAt(0))De+=":";else De+=": ";De+=v.dump,le+=De}v.tag=ge,v.dump=le||"{}"}function h(v,W,G){let ce=G?v.explicitTypes:v.implicitTypes;for(let le=0,ge=ce.length;le<ge;le+=1){let se=ce[le];if((se.instanceOf||se.predicate)&&(!se.instanceOf||typeof W==="object"&&W instanceof se.instanceOf)&&(!se.predicate||se.predicate(W))){if(G)if(se.multi&&se.representName)v.tag=se.representName(W);else v.tag=se.tag;else v.tag="?";if(se.represent){let xe=v.styleMap[se.tag]||se.defaultStyle,$e;if(i.call(se.represent)==="[object Function]")$e=se.represent(W,xe);else if(n.call(se.represent,xe))$e=se.represent[xe](W,xe);else throw new t("!<"+se.tag+'> tag resolver accepts not "'+xe+'" style');v.dump=$e}return!0}}return!1}function q(v,W,G,ce,le,ge,se){if(v.tag=null,v.dump=G,!h(v,G,!1))h(v,G,!0);let xe=i.call(v.dump),$e=ce;if(ce)ce=v.flowLevel<0||v.flowLevel>W;let De=xe==="[object Object]"||xe==="[object Array]",Le,Me;if(De)Le=v.duplicates.indexOf(G),Me=Le!==-1;if(v.tag!==null&&v.tag!=="?"||Me||v.indent!==2&&W>0)le=!1;if(Me&&v.usedDuplicates[Le])v.dump="*ref_"+Le;else{if(De&&Me&&!v.usedDuplicates[Le])v.usedDuplicates[Le]=!0;if(xe==="[object Object]"){if(ce&&Object.keys(v.dump).length!==0){if(Ie(v,W,v.dump,le),Me)v.dump="&ref_"+Le+v.dump}else if(ie(v,W,v.dump),Me)v.dump="&ref_"+Le+" "+v.dump}else if(xe==="[object Array]"){if(ce&&v.dump.length!==0){if(v.noArrayIndent&&!se&&W>0)ee(v,W-1,v.dump,le);else ee(v,W,v.dump,le);if(Me)v.dump="&ref_"+Le+v.dump}else if(uu(v,W,v.dump),Me)v.dump="&ref_"+Le+" "+v.dump}else if(xe==="[object String]"){if(v.tag!=="?")xs(v,v.dump,W,ge,$e)}else if(xe==="[object Undefined]")return!1;else{if(v.skipInvalid)return!1;throw new t("unacceptable kind of an object to dump "+xe)}if(v.tag!==null&&v.tag!=="?"){let Ve=encodeURI(v.tag[0]==="!"?v.tag.slice(1):v.tag).replace(/!/g,"%21");if(v.tag[0]==="!")Ve="!"+Ve;else if(Ve.slice(0,18)==="tag:yaml.org,2002:")Ve="!!"+Ve.slice(18);else Ve="!<"+Ve+">";v.dump=Ve+" "+v.dump}}return!0}function re(v,W){let G=[],ce=[];oe(v,G,ce);let le=ce.length;for(let ge=0;ge<le;ge+=1)W.duplicates.push(G[ce[ge]]);W.usedDuplicates=Array(le)}function oe(v,W,G){if(v!==null&&typeof v==="object"){let ce=W.indexOf(v);if(ce!==-1){if(G.indexOf(ce)===-1)G.push(ce)}else if(W.push(v),Array.isArray(v))for(let le=0,ge=v.length;le<ge;le+=1)oe(v[le],W,G);else{let le=Object.keys(v);for(let ge=0,se=le.length;ge<se;ge+=1)oe(v[le[ge]],W,G)}}}function Y(v,W){W=W||{};let G=new te(W);if(!G.noRefs)re(v,G);let ce=v;if(G.replacer)ce=G.replacer.call({"":ce},"",ce);if(q(G,0,ce,!0,!0))return G.dump+`
-`;return""}return zI.dump=Y,zI}function MY(){if($L)return br;$L=1;let e=qY(),t=ZY();function r(i,n){return function(){throw Error("Function yaml."+i+" is removed in js-yaml 4. Use yaml."+n+" instead, which is now safe by default.")}}return br.Type=Or(),br.Schema=CL(),br.FAILSAFE_SCHEMA=zL(),br.JSON_SCHEMA=jL(),br.CORE_SCHEMA=UL(),br.DEFAULT_SCHEMA=NI(),br.load=e.load,br.loadAll=e.loadAll,br.dump=t.dump,br.YAMLException=jd(),br.types={binary:ML(),float:BL(),map:PL(),null:NL(),pairs:HL(),set:KL(),timestamp:qL(),bool:DL(),int:LL(),merge:ZL(),omap:FL(),seq:OL(),str:RL()},br.safeLoad=r("safeLoad","load"),br.safeLoadAll=r("safeLoadAll","loadAll"),br.safeDump=r("safeDump","dump"),br}var br,sg,jo,oL,pI,sL,mI,aL,hI,cL,gI,lL,yI,uL,bI,dL,SI,fL,xI,pL,wI,mL,vI,hL,_I,gL,kI,yL,EI,bL,II,SL,TI,xL,AI,wL,$I,vL,CI,_L,RI,kL,OI,EL,PI,IL,TL,zI,AL,$L,FY,JL,Hc,HY,KY,JY,VY,DI,Kc,WY,Ud,GY,QY,YY,XY,eX;var Jc=S(()=>{br={},sg={},jo={};zI={};FY=MY(),JL=jY(FY),{Type:Hc,Schema:HY,FAILSAFE_SCHEMA:KY,JSON_SCHEMA:JY,CORE_SCHEMA:VY,DEFAULT_SCHEMA:DI,load:Kc,loadAll:WY,dump:Ud,YAMLException:GY,types:QY,safeLoad:YY,safeLoadAll:XY,safeDump:eX}=JL});function Vc(e){return Ud(e,{skipInvalid:!0,noRefs:!0,sortKeys:!0})}function VL(e){return Kc(e)}function On(e,t){if(!e.trim())return{ok:!1,error:"file is empty"};let r;try{r=Kc(e)}catch(n){return{ok:!1,error:at(n,"YAML parse error")}}if(!tX(r))return{ok:!1,error:"expected a YAML mapping (key: value pairs)"};if(!t)return{ok:!0,data:r};let i=t.safeParse(r);if(!i.success)return{ok:!1,error:`invalid field(s): ${i.error.issues.map((o)=>o.path.map(String).join(".")).join(", ")}`};return{ok:!0,data:i.data}}function tX(e){return Boolean(e)&&typeof e==="object"&&!Array.isArray(e)}var Ui=S(()=>{Jc()});var rX,nX,qt,Pr,ia,iX,oa="capability-bundles-v1",LI,oX,sX,aX,cX,WL,ag,sa,Pn,lX,uX,dX,fX,pX,BI,mX,hX,cg;var qi=S(()=>{Ae();rX=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,nX=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,qt=d.string().regex(rX,"expected exact pinned version"),Pr=d.string().regex(nX,"expected lowercase handle slug"),ia=d.string().min(1),iX=d.string().startsWith("age1").min(1),LI=d.enum(["core","media","automation","web","chat","site","publishing","federation","team"]),oX=["professional","team","organization"],sX=d.enum(oX),aX=["person","team","organization"],cX=d.enum(aX),WL=d.array(LI).min(1),ag=d.array(d.string().min(1)),sa=d.strictObject({brainVersion:qt,bundleContract:d.literal(oa),bundles:WL,add:ag.optional(),remove:ag.optional(),githubOrg:d.string().min(1),contentRepoPrefix:d.string().min(1),domainSuffix:d.string().min(1),aiApiKey:ia,gitSyncToken:ia,contentRepoAdminToken:ia,agePublicKey:iX}).superRefine((e,t)=>{if(new Set(e.bundles).size!==e.bundles.length)t.addIssue({code:d.ZodIssueCode.custom,path:["bundles"],message:"canonical bundles must be unique"})}),Pn=d.strictObject({members:d.array(Pr).min(1),brainVersionOverride:qt.optional(),bundlesOverride:WL.optional(),addOverride:ag.optional(),removeOverride:ag.optional(),aiApiKeyOverride:ia.optional(),gitSyncTokenOverride:ia.optional()}).superRefine((e,t)=>{if(new Set(e.members).size!==e.members.length)t.addIssue({code:d.ZodIssueCode.custom,path:["members"],message:"cohort members must be unique"});if(e.bundlesOverride&&new Set(e.bundlesOverride).size!==e.bundlesOverride.length)t.addIssue({code:d.ZodIssueCode.custom,path:["bundlesOverride"],message:"canonical bundle overrides must be unique"})}),lX=d.strictObject({platform:d.enum(["github","instagram","linkedin","email","website"]),url:d.string().min(1),label:d.string().min(1).optional()}),uX=d.strictObject({name:d.string().min(1).optional(),description:d.string().min(1).optional(),website:d.string().min(1).optional(),email:d.string().min(1).optional(),story:d.string().min(1).optional(),socialLinks:d.array(lX).optional()}),dX=d.strictObject({delivery:d.literal("email"),email:d.string().email()}),fX=d.strictObject({enabled:d.boolean().optional(),endpoint:d.string().url().refine((e)=>new URL(e).protocol==="wss:",{message:"Jetstream endpoint must use wss"}).optional(),replayWindowSeconds:d.number().int().min(60).optional(),denyDids:d.array(d.string().startsWith("did:plc:")).optional(),denyDomains:d.array(d.string().min(1)).optional(),skillKeywords:d.array(d.string().min(1)).optional(),queueLimit:d.number().int().min(1).max(1e4).optional(),concurrency:d.number().int().min(1).max(32).optional(),perDidCooldownSeconds:d.number().int().nonnegative().optional(),fetchBudgetPerMinute:d.number().int().min(1).optional(),newAgentsPerHour:d.number().int().min(1).optional(),pendingCandidateCeiling:d.number().int().min(1).optional(),staleCandidateRetentionDays:d.number().int().min(1).optional(),requestTimeoutMs:d.number().int().min(100).optional(),maxResponseBytes:d.number().int().min(1024).optional(),maxRedirects:d.number().int().nonnegative().optional(),retryAttempts:d.number().int().min(1).optional(),heartbeatIntervalHours:d.number().min(1).optional()}),pX=d.strictObject({identifier:d.string().min(1),accountDid:d.string().min(1).optional(),lexiconAuthority:d.boolean().optional(),jetstream:fX.optional()}),BI=d.strictObject({package:d.string().min(1),version:qt.optional(),theme:d.string().min(1).optional(),themeVersion:qt.optional()}).superRefine((e,t)=>{let r=e.package.startsWith("@rizom/");if(r&&e.version===void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["version"],message:"external @rizom site packages require an exact version pin"});if(!r&&e.version!==void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["version"],message:"version is valid only for external @rizom site packages"});let i=e.theme?.startsWith("@rizom/")===!0;if(i&&e.themeVersion===void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["themeVersion"],message:"external @rizom themes require an exact version pin"});if(!i&&e.themeVersion!==void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["themeVersion"],message:"themeVersion is valid only for external @rizom themes"})}),mX=d.strictObject({onboarding:d.boolean().optional()}),hX=d.record(d.string().min(1),d.record(d.string(),d.unknown())),cg=d.strictObject({handle:Pr,discord:d.strictObject({enabled:d.boolean(),anchorUserId:d.string().min(1).optional()}),aiApiKeyOverride:ia.optional(),gitSyncTokenOverride:ia.optional(),domainOverride:d.string().min(1).optional(),cloudflareZoneId:d.string().min(1).optional(),contentRepoOverride:d.string().min(1).optional(),profileKind:sX.optional(),anchorKind:cX.optional(),plugins:hX.optional(),embeddingEnabled:d.boolean().optional(),topicExtractionEnabled:d.boolean().optional(),skillDerivationEnabled:d.boolean().optional(),swotDerivationEnabled:d.boolean().optional(),addOverride:d.array(d.string().min(1)).optional(),removeOverride:d.array(d.string().min(1)).optional(),siteOverride:BI.optional(),setup:dX.optional(),atproto:pX.optional(),playbooks:mX.optional(),anchorProfile:uX.optional()})});import{access as gX,readdir as yX,readFile as bX}from"fs/promises";import{basename as jI,join as qd,relative as SX}from"path";async function Ct(e,t={}){let[r,i,n]=await Promise.all([UI(qd(e,"pilot.yaml"),sa),xX(e),wX(e)]),o=vX(i,n),s=n.map((c)=>({id:c.id,members:[...c.data.members].sort(),...c.data.brainVersionOverride?{brainVersionOverride:c.data.brainVersionOverride}:{},...c.data.bundlesOverride?{bundlesOverride:c.data.bundlesOverride}:{},...c.data.addOverride?{addOverride:c.data.addOverride}:{},...c.data.removeOverride?{removeOverride:c.data.removeOverride}:{},...c.data.aiApiKeyOverride?{aiApiKeyOverride:c.data.aiApiKeyOverride}:{},...c.data.gitSyncTokenOverride?{gitSyncTokenOverride:c.data.gitSyncTokenOverride}:{}})).sort((c,l)=>c.id.localeCompare(l.id)),a=await Promise.all(i.map(async(c)=>{let l=o.get(c.data.handle);if(!l)throw new aa(`User ${c.data.handle} must belong to exactly one cohort`);let u=l.data.brainVersionOverride??r.brainVersion,f={handle:c.data.handle,cohort:l.id,brainVersion:u,bundleContract:r.bundleContract,bundles:[...l.data.bundlesOverride??r.bundles],add:GL([...l.data.addOverride??(l.data.bundlesOverride?[]:r.add??[]),...c.data.addOverride??[]]),remove:GL([...l.data.removeOverride??(l.data.bundlesOverride?[]:r.remove??[]),...c.data.removeOverride??[]]),domain:c.data.domainOverride??`${c.data.handle}${r.domainSuffix}`,...c.data.cloudflareZoneId?{cloudflareZoneId:c.data.cloudflareZoneId}:{},contentRepo:c.data.contentRepoOverride??`${r.contentRepoPrefix}${c.data.handle}-content`,...c.data.profileKind?{profileKind:c.data.profileKind}:{},...c.data.anchorKind?{anchorKind:c.data.anchorKind}:{},...c.data.embeddingEnabled!==void 0?{embeddingEnabled:c.data.embeddingEnabled}:{},...c.data.plugins!==void 0?{plugins:c.data.plugins}:{},...c.data.topicExtractionEnabled!==void 0?{topicExtractionEnabled:c.data.topicExtractionEnabled}:{},...c.data.skillDerivationEnabled!==void 0?{skillDerivationEnabled:c.data.skillDerivationEnabled}:{},...c.data.swotDerivationEnabled!==void 0?{swotDerivationEnabled:c.data.swotDerivationEnabled}:{},...c.data.siteOverride?{siteOverride:{...c.data.siteOverride}}:{},discordEnabled:c.data.discord.enabled,...c.data.discord.anchorUserId?{discordAnchorUserId:c.data.discord.anchorUserId}:{},effectiveAiApiKey:c.data.aiApiKeyOverride??l.data.aiApiKeyOverride??r.aiApiKey,effectiveGitSyncToken:c.data.gitSyncTokenOverride??l.data.gitSyncTokenOverride??r.gitSyncToken,...c.data.setup?{setup:c.data.setup}:{},...c.data.atproto?{atproto:c.data.atproto}:{},...c.data.playbooks?{playbooks:c.data.playbooks}:{},anchorProfile:_X(c.data.handle,c.data.anchorProfile),snapshotStatus:await EX(e,c.data.handle)},p=await t.resolveStatus?.(f);return{...f,serverStatus:p?.serverStatus??"unknown",deployStatus:p?.deployStatus??"unknown",dnsStatus:p?.dnsStatus??"unknown",mcpStatus:p?.mcpStatus??"unknown"}}));return a.sort((c,l)=>c.handle.localeCompare(l.handle)),{pilot:r,cohorts:s,users:a}}async function xX(e){let t=qd(e,"users"),r=(await QL(t)).filter((n)=>!jI(n).endsWith(".secrets.yaml"));return(await Promise.all(r.map(async(n)=>{let o=YL(jI(n)),s=await UI(n,cg);if(s.handle!==o){let a=XL(SX(e,n));throw new aa(`${a} must declare handle: ${o}`)}return{id:o,data:s}}))).sort((n,o)=>n.id.localeCompare(o.id))}async function wX(e){let t=qd(e,"cohorts"),r=await QL(t);return(await Promise.all(r.map(async(n)=>({id:YL(jI(n)),data:await UI(n,Pn)})))).sort((n,o)=>n.id.localeCompare(o.id))}function vX(e,t){let r=new Map(e.map((n)=>[n.data.handle,n])),i=new Map;for(let n of t)for(let o of n.data.members){if(!r.has(o))throw new aa(`Cohort ${n.id} references unknown user ${o}`);if(i.has(o))throw new aa(`User ${o} must belong to exactly one cohort`);i.set(o,n)}for(let n of e)if(!i.has(n.data.handle))throw new aa(`User ${n.data.handle} must belong to exactly one cohort`);return i}function _X(e,t){return{name:t?.name??kX(e),...t?.description?{description:t.description}:{},...t?.website?{website:t.website}:{},...t?.email?{email:t.email}:{},...t?.story?{story:t.story}:{},...t?.socialLinks?{socialLinks:t.socialLinks.map((r)=>({platform:r.platform,url:r.url,...r.label?{label:r.label}:{}}))}:{}}}function kX(e){return e.split("-").filter((t)=>t.length>0).map((t)=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}async function EX(e,t){let r=qd(e,"users",t,"brain.yaml");try{return await gX(r),"present"}catch{return"missing"}}async function QL(e){return(await yX(e,{withFileTypes:!0})).filter((r)=>r.isFile()&&r.name.endsWith(".yaml")).map((r)=>qd(e,r.name)).sort((r,i)=>r.localeCompare(i))}async function UI(e,t){let r=await bX(e,"utf8"),i=On(r,t);if(!i.ok)throw new aa(`${XL(e)}: ${i.error}`);return i.data}function GL(e){return[...new Set(e)]}function YL(e){return e.replace(/\.ya?ml$/,"")}function XL(e){return e.replaceAll("\\","/")}var aa;var zn=S(()=>{Ui();qi();aa=class aa extends Error{}});import{mkdir as RX,writeFile as OX}from"fs/promises";import{join as nB}from"path";async function Uo(e,t={}){let i=(t.registry??await Ct(e,t)).users.map((o)=>{let s=o.discordEnabled?"on":"off";return[o.handle,o.cohort,o.bundles.join(","),o.add.join(","),o.remove.join(","),o.brainVersion,o.domain,o.contentRepo,s,o.serverStatus,o.deployStatus,o.dnsStatus,o.mcpStatus]}),n=["<!-- generated by brains-ops; do not edit -->","",PX,zX,...i.map((o)=>`| ${o.join(" | ")} |`),""].join(`
+`;return""}return zI.dump=Y,zI}function MY(){if($L)return br;$L=1;let e=qY(),t=ZY();function r(i,n){return function(){throw Error("Function yaml."+i+" is removed in js-yaml 4. Use yaml."+n+" instead, which is now safe by default.")}}return br.Type=Or(),br.Schema=CL(),br.FAILSAFE_SCHEMA=zL(),br.JSON_SCHEMA=jL(),br.CORE_SCHEMA=UL(),br.DEFAULT_SCHEMA=NI(),br.load=e.load,br.loadAll=e.loadAll,br.dump=t.dump,br.YAMLException=jd(),br.types={binary:ML(),float:BL(),map:PL(),null:NL(),pairs:HL(),set:KL(),timestamp:qL(),bool:DL(),int:LL(),merge:ZL(),omap:FL(),seq:OL(),str:RL()},br.safeLoad=r("safeLoad","load"),br.safeLoadAll=r("safeLoadAll","loadAll"),br.safeDump=r("safeDump","dump"),br}var br,sg,jo,oL,pI,sL,mI,aL,hI,cL,gI,lL,yI,uL,bI,dL,SI,fL,xI,pL,wI,mL,vI,hL,_I,gL,kI,yL,EI,bL,II,SL,TI,xL,AI,wL,$I,vL,CI,_L,RI,kL,OI,EL,PI,IL,TL,zI,AL,$L,FY,JL,Hc,HY,KY,JY,VY,DI,Kc,WY,Ud,GY,QY,YY,XY,eX;var Jc=S(()=>{br={},sg={},jo={};zI={};FY=MY(),JL=jY(FY),{Type:Hc,Schema:HY,FAILSAFE_SCHEMA:KY,JSON_SCHEMA:JY,CORE_SCHEMA:VY,DEFAULT_SCHEMA:DI,load:Kc,loadAll:WY,dump:Ud,YAMLException:GY,types:QY,safeLoad:YY,safeLoadAll:XY,safeDump:eX}=JL});function Vc(e){return Ud(e,{skipInvalid:!0,noRefs:!0,sortKeys:!0})}function VL(e){return Kc(e)}function On(e,t){if(!e.trim())return{ok:!1,error:"file is empty"};let r;try{r=Kc(e)}catch(n){return{ok:!1,error:at(n,"YAML parse error")}}if(!tX(r))return{ok:!1,error:"expected a YAML mapping (key: value pairs)"};if(!t)return{ok:!0,data:r};let i=t.safeParse(r);if(!i.success)return{ok:!1,error:`invalid field(s): ${i.error.issues.map((o)=>o.path.map(String).join(".")).join(", ")}`};return{ok:!0,data:i.data}}function tX(e){return Boolean(e)&&typeof e==="object"&&!Array.isArray(e)}var Ui=S(()=>{Jc()});var rX,nX,qt,Pr,ia,iX,oa="capability-bundles-v1",LI,oX,sX,aX,cX,WL,ag,sa,Pn,lX,uX,dX,fX,pX,BI,mX,hX,cg;var qi=S(()=>{Ae();rX=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,nX=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,qt=d.string().regex(rX,"expected exact pinned version"),Pr=d.string().regex(nX,"expected lowercase handle slug"),ia=d.string().min(1),iX=d.string().startsWith("age1").min(1),LI=d.enum(["core","media","automation","web","chat","site","publishing","federation","team"]),oX=["professional","team","organization"],sX=d.enum(oX),aX=["person","team","organization"],cX=d.enum(aX),WL=d.array(LI).min(1),ag=d.array(d.string().min(1)),sa=d.strictObject({brainVersion:qt,bundleContract:d.literal(oa),bundles:WL,add:ag.optional(),remove:ag.optional(),githubOrg:d.string().min(1),contentRepoPrefix:d.string().min(1),domainSuffix:d.string().min(1),aiApiKey:ia,gitSyncToken:ia,contentRepoAdminToken:ia,agePublicKey:iX}).superRefine((e,t)=>{if(new Set(e.bundles).size!==e.bundles.length)t.addIssue({code:d.ZodIssueCode.custom,path:["bundles"],message:"canonical bundles must be unique"})}),Pn=d.strictObject({members:d.array(Pr).min(1),brainVersionOverride:qt.optional(),bundlesOverride:WL.optional(),addOverride:ag.optional(),removeOverride:ag.optional(),aiApiKeyOverride:ia.optional(),gitSyncTokenOverride:ia.optional()}).superRefine((e,t)=>{if(new Set(e.members).size!==e.members.length)t.addIssue({code:d.ZodIssueCode.custom,path:["members"],message:"cohort members must be unique"});if(e.bundlesOverride&&new Set(e.bundlesOverride).size!==e.bundlesOverride.length)t.addIssue({code:d.ZodIssueCode.custom,path:["bundlesOverride"],message:"canonical bundle overrides must be unique"})}),lX=d.strictObject({platform:d.enum(["github","instagram","linkedin","email","website"]),url:d.string().min(1),label:d.string().min(1).optional()}),uX=d.strictObject({name:d.string().min(1).optional(),description:d.string().min(1).optional(),website:d.string().min(1).optional(),email:d.string().min(1).optional(),story:d.string().min(1).optional(),socialLinks:d.array(lX).optional()}),dX=d.strictObject({delivery:d.literal("email"),email:d.string().email()}),fX=d.strictObject({enabled:d.boolean().optional(),endpoint:d.string().url().refine((e)=>new URL(e).protocol==="wss:",{message:"Jetstream endpoint must use wss"}).optional(),replayWindowSeconds:d.number().int().min(60).optional(),denyDids:d.array(d.string().startsWith("did:plc:")).optional(),denyDomains:d.array(d.string().min(1)).optional(),skillKeywords:d.array(d.string().min(1)).optional(),queueLimit:d.number().int().min(1).max(1e4).optional(),concurrency:d.number().int().min(1).max(32).optional(),perDidCooldownSeconds:d.number().int().nonnegative().optional(),fetchBudgetPerMinute:d.number().int().min(1).optional(),newAgentsPerHour:d.number().int().min(1).optional(),pendingCandidateCeiling:d.number().int().min(1).optional(),staleCandidateRetentionDays:d.number().int().min(1).optional(),requestTimeoutMs:d.number().int().min(100).optional(),maxResponseBytes:d.number().int().min(1024).optional(),maxRedirects:d.number().int().nonnegative().optional(),retryAttempts:d.number().int().min(1).optional(),heartbeatIntervalHours:d.number().min(1).optional()}),pX=d.strictObject({identifier:d.string().min(1),accountDid:d.string().min(1).optional(),lexiconAuthority:d.boolean().optional(),jetstream:fX.optional()}),BI=d.strictObject({package:d.string().min(1),version:qt.optional(),theme:d.string().min(1).optional(),themeVersion:qt.optional()}).superRefine((e,t)=>{let r=e.package.startsWith("@rizom/");if(r&&e.version===void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["version"],message:"external @rizom site packages require an exact version pin"});if(!r&&e.version!==void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["version"],message:"version is valid only for external @rizom site packages"});let i=e.theme?.startsWith("@rizom/")===!0;if(i&&e.themeVersion===void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["themeVersion"],message:"external @rizom themes require an exact version pin"});if(!i&&e.themeVersion!==void 0)t.addIssue({code:d.ZodIssueCode.custom,path:["themeVersion"],message:"themeVersion is valid only for external @rizom themes"})}),mX=d.strictObject({onboarding:d.boolean().optional()}),hX=d.record(d.string().min(1),d.record(d.string(),d.unknown())),cg=d.strictObject({handle:Pr,discord:d.strictObject({enabled:d.boolean(),anchorUserId:d.string().min(1).optional()}),aiApiKeyOverride:ia.optional(),gitSyncTokenOverride:ia.optional(),domainOverride:d.string().min(1).optional(),cloudflareZoneId:d.string().min(1).optional(),contentRepoOverride:d.string().min(1).optional(),profileKind:sX.optional(),anchorKind:cX.optional(),plugins:hX.optional(),spaces:d.array(d.string().min(1)).optional(),embeddingEnabled:d.boolean().optional(),topicExtractionEnabled:d.boolean().optional(),skillDerivationEnabled:d.boolean().optional(),swotDerivationEnabled:d.boolean().optional(),addOverride:d.array(d.string().min(1)).optional(),removeOverride:d.array(d.string().min(1)).optional(),siteOverride:BI.optional(),setup:dX.optional(),atproto:pX.optional(),playbooks:mX.optional(),anchorProfile:uX.optional()})});import{access as gX,readdir as yX,readFile as bX}from"fs/promises";import{basename as jI,join as qd,relative as SX}from"path";async function Ct(e,t={}){let[r,i,n]=await Promise.all([UI(qd(e,"pilot.yaml"),sa),xX(e),wX(e)]),o=vX(i,n),s=n.map((c)=>({id:c.id,members:[...c.data.members].sort(),...c.data.brainVersionOverride?{brainVersionOverride:c.data.brainVersionOverride}:{},...c.data.bundlesOverride?{bundlesOverride:c.data.bundlesOverride}:{},...c.data.addOverride?{addOverride:c.data.addOverride}:{},...c.data.removeOverride?{removeOverride:c.data.removeOverride}:{},...c.data.aiApiKeyOverride?{aiApiKeyOverride:c.data.aiApiKeyOverride}:{},...c.data.gitSyncTokenOverride?{gitSyncTokenOverride:c.data.gitSyncTokenOverride}:{}})).sort((c,l)=>c.id.localeCompare(l.id)),a=await Promise.all(i.map(async(c)=>{let l=o.get(c.data.handle);if(!l)throw new aa(`User ${c.data.handle} must belong to exactly one cohort`);let u=l.data.brainVersionOverride??r.brainVersion,f={handle:c.data.handle,cohort:l.id,brainVersion:u,bundleContract:r.bundleContract,bundles:[...l.data.bundlesOverride??r.bundles],add:GL([...l.data.addOverride??(l.data.bundlesOverride?[]:r.add??[]),...c.data.addOverride??[]]),remove:GL([...l.data.removeOverride??(l.data.bundlesOverride?[]:r.remove??[]),...c.data.removeOverride??[]]),domain:c.data.domainOverride??`${c.data.handle}${r.domainSuffix}`,...c.data.cloudflareZoneId?{cloudflareZoneId:c.data.cloudflareZoneId}:{},contentRepo:c.data.contentRepoOverride??`${r.contentRepoPrefix}${c.data.handle}-content`,...c.data.profileKind?{profileKind:c.data.profileKind}:{},...c.data.anchorKind?{anchorKind:c.data.anchorKind}:{},...c.data.embeddingEnabled!==void 0?{embeddingEnabled:c.data.embeddingEnabled}:{},...c.data.spaces!==void 0?{spaces:c.data.spaces}:{},...c.data.plugins!==void 0?{plugins:c.data.plugins}:{},...c.data.topicExtractionEnabled!==void 0?{topicExtractionEnabled:c.data.topicExtractionEnabled}:{},...c.data.skillDerivationEnabled!==void 0?{skillDerivationEnabled:c.data.skillDerivationEnabled}:{},...c.data.swotDerivationEnabled!==void 0?{swotDerivationEnabled:c.data.swotDerivationEnabled}:{},...c.data.siteOverride?{siteOverride:{...c.data.siteOverride}}:{},discordEnabled:c.data.discord.enabled,...c.data.discord.anchorUserId?{discordAnchorUserId:c.data.discord.anchorUserId}:{},effectiveAiApiKey:c.data.aiApiKeyOverride??l.data.aiApiKeyOverride??r.aiApiKey,effectiveGitSyncToken:c.data.gitSyncTokenOverride??l.data.gitSyncTokenOverride??r.gitSyncToken,...c.data.setup?{setup:c.data.setup}:{},...c.data.atproto?{atproto:c.data.atproto}:{},...c.data.playbooks?{playbooks:c.data.playbooks}:{},anchorProfile:_X(c.data.handle,c.data.anchorProfile),snapshotStatus:await EX(e,c.data.handle)},p=await t.resolveStatus?.(f);return{...f,serverStatus:p?.serverStatus??"unknown",deployStatus:p?.deployStatus??"unknown",dnsStatus:p?.dnsStatus??"unknown",mcpStatus:p?.mcpStatus??"unknown"}}));return a.sort((c,l)=>c.handle.localeCompare(l.handle)),{pilot:r,cohorts:s,users:a}}async function xX(e){let t=qd(e,"users"),r=(await QL(t)).filter((n)=>!jI(n).endsWith(".secrets.yaml"));return(await Promise.all(r.map(async(n)=>{let o=YL(jI(n)),s=await UI(n,cg);if(s.handle!==o){let a=XL(SX(e,n));throw new aa(`${a} must declare handle: ${o}`)}return{id:o,data:s}}))).sort((n,o)=>n.id.localeCompare(o.id))}async function wX(e){let t=qd(e,"cohorts"),r=await QL(t);return(await Promise.all(r.map(async(n)=>({id:YL(jI(n)),data:await UI(n,Pn)})))).sort((n,o)=>n.id.localeCompare(o.id))}function vX(e,t){let r=new Map(e.map((n)=>[n.data.handle,n])),i=new Map;for(let n of t)for(let o of n.data.members){if(!r.has(o))throw new aa(`Cohort ${n.id} references unknown user ${o}`);if(i.has(o))throw new aa(`User ${o} must belong to exactly one cohort`);i.set(o,n)}for(let n of e)if(!i.has(n.data.handle))throw new aa(`User ${n.data.handle} must belong to exactly one cohort`);return i}function _X(e,t){return{name:t?.name??kX(e),...t?.description?{description:t.description}:{},...t?.website?{website:t.website}:{},...t?.email?{email:t.email}:{},...t?.story?{story:t.story}:{},...t?.socialLinks?{socialLinks:t.socialLinks.map((r)=>({platform:r.platform,url:r.url,...r.label?{label:r.label}:{}}))}:{}}}function kX(e){return e.split("-").filter((t)=>t.length>0).map((t)=>t.charAt(0).toUpperCase()+t.slice(1)).join(" ")}async function EX(e,t){let r=qd(e,"users",t,"brain.yaml");try{return await gX(r),"present"}catch{return"missing"}}async function QL(e){return(await yX(e,{withFileTypes:!0})).filter((r)=>r.isFile()&&r.name.endsWith(".yaml")).map((r)=>qd(e,r.name)).sort((r,i)=>r.localeCompare(i))}async function UI(e,t){let r=await bX(e,"utf8"),i=On(r,t);if(!i.ok)throw new aa(`${XL(e)}: ${i.error}`);return i.data}function GL(e){return[...new Set(e)]}function YL(e){return e.replace(/\.ya?ml$/,"")}function XL(e){return e.replaceAll("\\","/")}var aa;var zn=S(()=>{Ui();qi();aa=class aa extends Error{}});import{mkdir as RX,writeFile as OX}from"fs/promises";import{join as nB}from"path";async function Uo(e,t={}){let i=(t.registry??await Ct(e,t)).users.map((o)=>{let s=o.discordEnabled?"on":"off";return[o.handle,o.cohort,o.bundles.join(","),o.add.join(","),o.remove.join(","),o.brainVersion,o.domain,o.contentRepo,s,o.serverStatus,o.deployStatus,o.dnsStatus,o.mcpStatus]}),n=["<!-- generated by brains-ops; do not edit -->","",PX,zX,...i.map((o)=>`| ${o.join(" | ")} |`),""].join(`
 `);await RX(nB(e,"views"),{recursive:!0}),await OX(nB(e,"views","users.md"),n)}var PX="| handle | cohort | bundles | add | remove | brainVersion | domain | contentRepo | discord | serverStatus | deployStatus | dnsStatus | mcpStatus |",zX="| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |";var Zd=S(()=>{zn()});var cB=S(()=>{ni()});import{lstat as HI,mkdir as lB,readFile as uB,unlink as tee,writeFile as dB}from"fs/promises";import{join as Nn}from"path";import{isDeepStrictEqual as ree}from"util";function hB(e){return Nn("deploy","runtime",nee.parse(e.tag))}function gB(e){let t={"@rizom/brain":qt.parse(e.brainVersion)};for(let r of[...e.sitePackages].sort()){let i=r.lastIndexOf("@"),n=pB.parse(r.slice(0,i)),o=qt.parse(r.slice(i+1));if(t[n]!==void 0&&t[n]!==o)throw Error(`Conflicting runtime dependency pin: ${r}`);t[n]=o}return mB.parse({name:"rover-pilot-runtime",private:!0,packageManager:"bun@1.4.0",dependencies:t,overrides:{"postcss-selector-parser":"7.1.6"}})}async function KI(e){try{return await HI(e),!0}catch(t){if(t instanceof Error&&"code"in t&&t.code==="ENOENT")return!1;throw t}}async function fB(e){if(!(await HI(e)).isFile())throw Error(`Runtime lock input must be a regular file: ${e}`)}async function yB(e){if(!(await HI(e)).isDirectory())throw Error(`Runtime lock input must be a directory: ${e}`)}async function bB(e){for(let t of["deploy",Nn("deploy","runtime")]){let r=Nn(e,t);if(await KI(r))await yB(r)}}async function FI(e,t){let r=Nn(e,"package.json"),i=Nn(e,"bun.lock");await fB(r),await fB(i);let n=mB.parse(JSON.parse(await uB(r,"utf8")));if(!ree(n,gB(t)))throw Error(`Runtime dependency manifest does not match ${t.tag}`);if(!(await uB(i,"utf8")).trim())throw Error(`Empty runtime dependency lock: ${i}`)}async function SB(e,t){await bB(e);let r=Nn(e,hB(t));if(await yB(r),await KI(Nn(r,".incomplete")))throw Error(`Incomplete runtime dependency lock: ${r}`);await FI(r,t)}async function xB(e,t,r=gr){if(Bun.version!=="1.4.0")throw Error("Runtime dependency locks must be generated with Bun 1.4.0");let i=gB(t);await bB(e);let n=Nn(e,hB(t));if(await KI(n))return await SB(e,t),"existing";await lB(Nn(e,"deploy","runtime"),{recursive:!0}),await lB(n);let o=Nn(n,".incomplete");return await dB(o,`Runtime dependency resolution has not completed.
 `,{flag:"wx"}),await dB(Nn(n,"package.json"),`${JSON.stringify(i,null,2)}
-`,{flag:"wx"}),await r(process.execPath,["install","--lockfile-only","--ignore-scripts"],{cwd:n}),await FI(n,t),await r(process.execPath,["install","--frozen-lockfile","--ignore-scripts","--dry-run"],{cwd:n}),await FI(n,t),await tee(o),"created"}var nee,pB,mB;var JI=S(()=>{Ae();qi();ni();nee=d.string().regex(/^[a-zA-Z0-9_][a-zA-Z0-9_.-]{0,127}$/),pB=d.string().regex(/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/),mB=d.strictObject({name:d.literal("rover-pilot-runtime"),private:d.literal(!0),packageManager:d.literal("bun@1.4.0"),dependencies:d.record(pB,qt),overrides:d.strictObject({"postcss-selector-parser":d.literal("7.1.6")})})});import{createHash as iee}from"crypto";function ug(e,t=[]){let r=`brain-${e}`,i=[...new Set(t)].sort();if(i.length===0)return r;let n=`${r}--${i.map((a)=>a.replace(/^@/,"").replace("/","-").replace(/@(?=[^@]*$)/,"-")).join("--")}`,s=`--s${iee("sha256").update(JSON.stringify([e,...i])).digest("hex").slice(0,12)}`;return`${n.length+s.length<=oee?n:r}${s}`}function VI(e){if(!e)return[];return[wB(e.package,e.version),wB(e.theme,e.themeVersion)].filter((t)=>t!==void 0)}function wB(e,t){if(!e?.startsWith("@rizom/"))return;if(t===void 0)throw Error(`Package ${e} has no explicit version pin`);return`${e}@${t}`}function see(e){let t=new Map;for(let r of e){let i=[...new Set(VI(r.siteOverride))].sort(),n=ug(r.brainVersion,i),o=t.get(n);if(o&&(o.brainVersion!==r.brainVersion||!Bun.deepEquals(o.sitePackages,i)))throw Error(`Image tag collision for distinct runtime requirements: ${n}`);t.set(n,{tag:n,brainVersion:r.brainVersion,sitePackages:i})}return[...t.values()].sort((r,i)=>r.tag.localeCompare(i.tag))}function aee(e,t){let r=new Map;for(let i of[...e,...t]){let n=i.lastIndexOf("@"),o=n>0?i.slice(0,n):i,s=r.get(o);if(s&&s!==i)throw Error(`Fleet shared images have conflicting pins for ${o}: ${s} and ${i}`);r.set(o,i)}return[...r.values()].sort()}async function vB(e){let t=e.brainVersionInput?.trim()??"";if(t){let i=aee([],(e.sitePackagesInput??"").split(/\s+/).filter(Boolean)),n=ug(t,i);if(!e.allowTagOverwrite&&await e.imageExists(n))throw Error(`Image tag ${n} already exists; published tags are immutable. Pick a new version, or pass overwrite=true only when replacing a tag whose containers were never deployed.`);return[{tag:n,brainVersion:t,sitePackages:i}]}let r=[];for(let i of see(e.users))if(!await e.imageExists(i.tag))r.push(i);else await e.verifyImage(i);return r}var oee=128;var WI=S(()=>{cB();JI();zn();ni()});function GI(e,t){let r=e.indexOf("/");if(r===-1)return{org:t,name:e};return{org:e.slice(0,r),name:e.slice(r+1)}}function IB(e,t){let{org:r,name:i}=GI(e,t);return`${r}/${i}`}function RB(e){return kee.safeParse(e).success}function QI(e,t,r={}){let i={...e};for(let n of Object.keys(t)){let o=t[n];if(o===null&&r.nulls!=="preserve")delete i[n];else if(RB(i[n])&&RB(o))i[n]=QI(i[n],o,r);else i[n]=o}return i}var kee;var OB=S(()=>{Ae();kee=d.record(d.string(),d.unknown())});function dg(e){return async(t)=>({brainYaml:Eee(t,e),envFile:Aee(t,e),contentRepoFiles:Iee(t)})}function Eee(e,t){let r={...e.setup?.delivery==="email"?{"auth-service":{setupEmail:e.setup.email},notifications:{defaultRecipient:{type:"email",address:e.setup.email}},email:{transport:"resend",apiKey:"${SETUP_EMAIL_API_KEY}",from:"${SETUP_EMAIL_FROM}"}}:{},...e.playbooks?.onboarding?{onboarding:{enabled:!0}}:{},...e.topicExtractionEnabled!==void 0?{topics:{enableAutoExtraction:e.topicExtractionEnabled}}:{},...e.skillDerivationEnabled!==void 0?{agents:{enableSkillDerivation:e.skillDerivationEnabled}}:{},...e.swotDerivationEnabled!==void 0?{assessment:{enableSwotDerivation:e.swotDerivationEnabled}}:{},"directory-sync":{git:{repo:PB(e,t),authToken:"${GIT_SYNC_TOKEN}"}},...e.atproto?{atproto:{...e.atproto,appPassword:"${ATPROTO_APP_PASSWORD}"}}:{}};return Vc({brain:"brain",bundleContract:e.bundleContract,kind:e.profileKind??"professional",domain:e.domain,bundles:e.bundles,...e.anchorKind?{anchor:e.anchorKind}:{},...e.embeddingEnabled!==void 0?{embedding:{enabled:e.embeddingEnabled}}:{},...e.add.length>0?{add:e.add}:{},...e.remove.length>0?{remove:e.remove}:{},...e.siteOverride?{site:{package:e.siteOverride.package,...e.siteOverride.theme?{theme:e.siteOverride.theme}:{}}}:{},anchors:e.discordEnabled&&e.discordAnchorUserId?[`discord:${e.discordAnchorUserId}`]:[],plugins:QI(r,e.plugins??{},{nulls:"preserve"})})}function PB(e,t){return IB(e.contentRepo,t)}function Iee(e){return[{path:"anchor-profile/anchor-profile.md",content:Tee(e)}]}function Tee(e){let t={name:e.anchorProfile.name,...e.anchorProfile.description?{description:e.anchorProfile.description}:{},...e.anchorProfile.website?{website:e.anchorProfile.website}:{},...e.anchorProfile.email?{email:e.anchorProfile.email}:{},...e.anchorProfile.socialLinks?{socialLinks:e.anchorProfile.socialLinks}:{}},r=e.anchorProfile.story??"This profile was initialized by brains-ops. Edit it in your content repo.";return`---
+`,{flag:"wx"}),await r(process.execPath,["install","--lockfile-only","--ignore-scripts"],{cwd:n}),await FI(n,t),await r(process.execPath,["install","--frozen-lockfile","--ignore-scripts","--dry-run"],{cwd:n}),await FI(n,t),await tee(o),"created"}var nee,pB,mB;var JI=S(()=>{Ae();qi();ni();nee=d.string().regex(/^[a-zA-Z0-9_][a-zA-Z0-9_.-]{0,127}$/),pB=d.string().regex(/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/),mB=d.strictObject({name:d.literal("rover-pilot-runtime"),private:d.literal(!0),packageManager:d.literal("bun@1.4.0"),dependencies:d.record(pB,qt),overrides:d.strictObject({"postcss-selector-parser":d.literal("7.1.6")})})});import{createHash as iee}from"crypto";function ug(e,t=[]){let r=`brain-${e}`,i=[...new Set(t)].sort();if(i.length===0)return r;let n=`${r}--${i.map((a)=>a.replace(/^@/,"").replace("/","-").replace(/@(?=[^@]*$)/,"-")).join("--")}`,s=`--s${iee("sha256").update(JSON.stringify([e,...i])).digest("hex").slice(0,12)}`;return`${n.length+s.length<=oee?n:r}${s}`}function VI(e){if(!e)return[];return[wB(e.package,e.version),wB(e.theme,e.themeVersion)].filter((t)=>t!==void 0)}function wB(e,t){if(!e?.startsWith("@rizom/"))return;if(t===void 0)throw Error(`Package ${e} has no explicit version pin`);return`${e}@${t}`}function see(e){let t=new Map;for(let r of e){let i=[...new Set(VI(r.siteOverride))].sort(),n=ug(r.brainVersion,i),o=t.get(n);if(o&&(o.brainVersion!==r.brainVersion||!Bun.deepEquals(o.sitePackages,i)))throw Error(`Image tag collision for distinct runtime requirements: ${n}`);t.set(n,{tag:n,brainVersion:r.brainVersion,sitePackages:i})}return[...t.values()].sort((r,i)=>r.tag.localeCompare(i.tag))}function aee(e,t){let r=new Map;for(let i of[...e,...t]){let n=i.lastIndexOf("@"),o=n>0?i.slice(0,n):i,s=r.get(o);if(s&&s!==i)throw Error(`Fleet shared images have conflicting pins for ${o}: ${s} and ${i}`);r.set(o,i)}return[...r.values()].sort()}async function vB(e){let t=e.brainVersionInput?.trim()??"";if(t){let i=aee([],(e.sitePackagesInput??"").split(/\s+/).filter(Boolean)),n=ug(t,i);if(!e.allowTagOverwrite&&await e.imageExists(n))throw Error(`Image tag ${n} already exists; published tags are immutable. Pick a new version, or pass overwrite=true only when replacing a tag whose containers were never deployed.`);return[{tag:n,brainVersion:t,sitePackages:i}]}let r=[];for(let i of see(e.users))if(!await e.imageExists(i.tag))r.push(i);else await e.verifyImage(i);return r}var oee=128;var WI=S(()=>{cB();JI();zn();ni()});function GI(e,t){let r=e.indexOf("/");if(r===-1)return{org:t,name:e};return{org:e.slice(0,r),name:e.slice(r+1)}}function IB(e,t){let{org:r,name:i}=GI(e,t);return`${r}/${i}`}function RB(e){return kee.safeParse(e).success}function QI(e,t,r={}){let i={...e};for(let n of Object.keys(t)){let o=t[n];if(o===null&&r.nulls!=="preserve")delete i[n];else if(RB(i[n])&&RB(o))i[n]=QI(i[n],o,r);else i[n]=o}return i}var kee;var OB=S(()=>{Ae();kee=d.record(d.string(),d.unknown())});function dg(e){return async(t)=>({brainYaml:Eee(t,e),envFile:Aee(t,e),contentRepoFiles:Iee(t)})}function Eee(e,t){let r={...e.setup?.delivery==="email"?{"auth-service":{setupEmail:e.setup.email},notifications:{defaultRecipient:{type:"email",address:e.setup.email}},email:{transport:"resend",apiKey:"${SETUP_EMAIL_API_KEY}",from:"${SETUP_EMAIL_FROM}"}}:{},...e.playbooks?.onboarding?{onboarding:{enabled:!0}}:{},...e.topicExtractionEnabled!==void 0?{topics:{enableAutoExtraction:e.topicExtractionEnabled}}:{},...e.skillDerivationEnabled!==void 0?{agents:{enableSkillDerivation:e.skillDerivationEnabled}}:{},...e.swotDerivationEnabled!==void 0?{assessment:{enableSwotDerivation:e.swotDerivationEnabled}}:{},"directory-sync":{git:{repo:PB(e,t),authToken:"${GIT_SYNC_TOKEN}"}},...e.atproto?{atproto:{...e.atproto,appPassword:"${ATPROTO_APP_PASSWORD}"}}:{}};return Vc({brain:"brain",bundleContract:e.bundleContract,kind:e.profileKind??"professional",domain:e.domain,bundles:e.bundles,...e.anchorKind?{anchor:e.anchorKind}:{},...e.embeddingEnabled!==void 0?{embedding:{enabled:e.embeddingEnabled}}:{},...e.add.length>0?{add:e.add}:{},...e.remove.length>0?{remove:e.remove}:{},...e.siteOverride?{site:{package:e.siteOverride.package,...e.siteOverride.theme?{theme:e.siteOverride.theme}:{}}}:{},...e.spaces&&e.spaces.length>0?{spaces:e.spaces}:{},anchors:e.discordEnabled&&e.discordAnchorUserId?[`discord:${e.discordAnchorUserId}`]:[],plugins:QI(r,e.plugins??{},{nulls:"preserve"})})}function PB(e,t){return IB(e.contentRepo,t)}function Iee(e){return[{path:"anchor-profile/anchor-profile.md",content:Tee(e)}]}function Tee(e){let t={name:e.anchorProfile.name,...e.anchorProfile.description?{description:e.anchorProfile.description}:{},...e.anchorProfile.website?{website:e.anchorProfile.website}:{},...e.anchorProfile.email?{email:e.anchorProfile.email}:{},...e.anchorProfile.socialLinks?{socialLinks:e.anchorProfile.socialLinks}:{}},r=e.anchorProfile.story??"This profile was initialized by brains-ops. Edit it in your content repo.";return`---
 ${Vc(t).trimEnd()}
 ---
@@ -721,7 +721,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var PJ,sxe;var dR=S(async()=>{Ae();$J();zn();wp();await AJ();PJ=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),sxe=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{parseArgs as x9}from"util";function ht(e){return e}class Ip extends Error{constructor(e){super(e);this.name="CliUsageError"}}function w9(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function v9(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function _9(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function mR(e,t){let r=w9(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=x9({args:e,options:v9(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(_9(s))throw new Ip(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function hR(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>`  ${r.label.padEnd(t)}  ${r.description}`)}function k9(e){return hR(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function E9(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function gR(e){return hR(Object.entries(e).map(([t,r])=>({label:E9(t,r),description:r.description})))}function yR(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function I9(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function T9(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=I9(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(...gR(n.flags));return i}function bR(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...k9(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...gR(e.globalFlags));return t.push(...T9(e.commands)),t.join(`
-`)}function SR(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function ft(e,t){let r=e[t];return typeof r==="string"?r:void 0}function vs(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Tp={name:"@rizom/ops",version:"0.2.0-alpha.594",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/auth-service":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as rW,mkdirSync as nW,readFileSync as Gx,writeFileSync as Qx}from"fs";import{dirname as iW,join as Az}from"path";function uS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function At(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function Yt(e,t,r=""){let i=uS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function ki(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(At(e.outputLen),At(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Ma(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Ap(e,t){Yt(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function $p(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function kr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Fa(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function En(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var $9=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function C9(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function R9(e){for(let t=0;t<e.length;t++)e[t]=C9(e[t]);return e}var dS=$9?(e)=>e:R9,wR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),O9=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Cp(e){if(Yt(e),wR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=O9[e[r]];return t}var _i={_0:48,_9:57,A:65,F:70,a:97,f:102};function xR(e){if(e>=_i._0&&e<=_i._9)return e-_i._0;if(e>=_i.A&&e<=_i.F)return e-(_i.A-10);if(e>=_i.a&&e<=_i.f)return e-(_i.a-10);return}function mu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(wR)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=xR(e.charCodeAt(o)),a=xR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function P9(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function fS(e,t=""){if(typeof e==="string")return P9(e);return Yt(e,void 0,t)}function pS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Yt(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Rp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function mS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ei(e=32){At(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var hS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class gS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(ki(e),Yt(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),kr(i)}update(e){return Ma(this),this.iHash.update(e),this}digestInto(e){Ma(this),Ap(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Vn=(()=>{let e=(t,r,i)=>new gS(t,r).update(i).digest();return e.create=(t,r)=>new gS(t,r),e})();function hu(e,t,r){if(ki(e),r===void 0)r=new Uint8Array(e.outputLen);return Vn(e,r,t)}var yS=Uint8Array.of(0),vR=Uint8Array.of();function bS(e,t,r,i=32){ki(e),At(i,"length"),Yt(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=vR;else Yt(r,void 0,"info");let s=new Uint8Array(o*n),a=Vn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)yS[0]=u+1,c.update(u===0?vR:l).update(r).update(yS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),kr(l,yS),s.slice(0,i)}var lo=(e,t,r,i,n)=>bS(e,hu(e,t,r),i,n);function _R(e,t,r){return e&t^~e&r}function kR(e,t,r){return e&t^e&r^t&r}class Op{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Fa(this.buffer)}update(e){Ma(this),Yt(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Fa(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ma(this),Ap(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,kr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Fa(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ii=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var Xt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Pp=BigInt(4294967295),ER=BigInt(32);function z9(e,t=!1){if(t)return{h:Number(e&Pp),l:Number(e>>ER&Pp)};return{h:Number(e>>ER&Pp)|0,l:Number(e&Pp)|0}}function IR(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=z9(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var SS=(e,t,r)=>e>>>r,xS=(e,t,r)=>e<<32-r|t>>>r,_s=(e,t,r)=>e>>>r|t<<32-r,ks=(e,t,r)=>e<<32-r|t>>>r,gu=(e,t,r)=>e<<64-r|t>>>r-32,yu=(e,t,r)=>e>>>r-32|t<<64-r;function Wn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var TR=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),AR=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,$R=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),CR=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,RR=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),OR=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var D9=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),uo=new Uint32Array(64);class PR extends Op{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)uo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=uo[u-15],p=uo[u-2],m=En(f,7)^En(f,18)^f>>>3,y=En(p,17)^En(p,19)^p>>>10;uo[u]=y+uo[u-7]+m+uo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=En(s,6)^En(s,11)^En(s,25),p=l+f+_R(s,a,c)+D9[u]+uo[u]|0,y=(En(r,2)^En(r,13)^En(r,22))+kR(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){kr(uo)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),kr(this.buffer)}}class zR extends PR{A=Ii[0]|0;B=Ii[1]|0;C=Ii[2]|0;D=Ii[3]|0;E=Ii[4]|0;F=Ii[5]|0;G=Ii[6]|0;H=Ii[7]|0;constructor(){super(32)}}var NR=(()=>IR(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),L9=(()=>NR[0])(),B9=(()=>NR[1])(),fo=new Uint32Array(80),po=new Uint32Array(80);class DR extends Op{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let T=0;T<16;T++,t+=4)fo[T]=e.getUint32(t),po[T]=e.getUint32(t+=4);for(let T=16;T<80;T++){let A=fo[T-15]|0,z=po[T-15]|0,j=_s(A,z,1)^_s(A,z,8)^SS(A,z,7),E=ks(A,z,1)^ks(A,z,8)^xS(A,z,7),F=fo[T-2]|0,D=po[T-2]|0,H=_s(F,D,19)^gu(F,D,61)^SS(F,D,6),X=ks(F,D,19)^yu(F,D,61)^xS(F,D,6),Z=$R(E,X,po[T-7],po[T-16]),P=CR(Z,j,H,fo[T-7],fo[T-16]);fo[T]=P|0,po[T]=Z|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:_}=this;for(let T=0;T<80;T++){let A=_s(u,f,14)^_s(u,f,18)^gu(u,f,41),z=ks(u,f,14)^ks(u,f,18)^yu(u,f,41),j=u&p^~u&y,E=f&m^~f&g,F=RR(_,z,E,B9[T],po[T]),D=OR(F,b,A,j,L9[T],fo[T]),H=F|0,X=_s(r,i,28)^gu(r,i,34)^gu(r,i,39),Z=ks(r,i,28)^yu(r,i,34)^yu(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,_=g|0,y=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=Wn(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=TR(H,Z,N);r=AR(I,D,X,P),i=I|0}({h:r,l:i}=Wn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Wn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Wn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Wn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=Wn(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=Wn(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=Wn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:_}=Wn(this.Hh|0,this.Hl|0,b|0,_|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,y,g,b,_)}roundClean(){kr(fo,po)}destroy(){this.destroyed=!0,kr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class LR extends DR{Ah=Xt[0]|0;Al=Xt[1]|0;Bh=Xt[2]|0;Bl=Xt[3]|0;Ch=Xt[4]|0;Cl=Xt[5]|0;Dh=Xt[6]|0;Dl=Xt[7]|0;Eh=Xt[8]|0;El=Xt[9]|0;Fh=Xt[10]|0;Fl=Xt[11]|0;Gh=Xt[12]|0;Gl=Xt[13]|0;Hh=Xt[14]|0;Hl=Xt[15]|0;constructor(){super(64)}}var $t=mS(()=>new zR,hS(1));var zp=mS(()=>new LR,hS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function jp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function _S(e){if(!jp(e))throw TypeError("Uint8Array expected")}function ZR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function MR(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function mo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Su(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Dp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Lp(e,t){if(!ZR(!0,t))throw TypeError(`${e}: array of strings expected`)}function kS(e,t){if(!ZR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Vr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Wr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Lp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Dp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Dp(n),n.map((o)=>{mo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function Gr(e=""){return mo("join",e),{encode:(t)=>(Lp("join.decode",t),t.join(e)),decode:(t)=>(mo("join.decode",t),t.split(e))}}function Up(e,t="="){return Su(e),mo("padding",t),{encode(r){Lp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Lp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function FR(e){return MR(e),{encode:(t)=>t,decode:(t)=>e(t)}}function BR(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Dp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Su(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var HR=(e,t)=>t===0?e:HR(t,e%t),Bp=(e,t)=>e+(t-HR(e,t)),Np=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function wS(e,t,r,i){if(Dp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Bp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Bp(t,r)}`);let n=0,o=0,s=Np[t],a=Np[r]-1,c=[];for(let l of e){if(Su(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Np[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function j9(e){Su(e);let t=256;return{encode:(r)=>{if(!jp(r))throw TypeError("radix.encode input should be Uint8Array");return BR(Array.from(r),t,e)},decode:(r)=>(kS("radix.decode",r),Uint8Array.from(BR(r,e,t)))}}function cn(e,t=!1){if(Su(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Bp(8,e)>32||Bp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!jp(r))throw TypeError("radix2.encode input should be Uint8Array");return wS(Array.from(r),8,e,!t)},decode:(r)=>(kS("radix2.decode",r),Uint8Array.from(wS(r,e,8,t)))}}function jR(e){return MR(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var Pxe=Object.freeze(Vr(cn(4),Wr("0123456789ABCDEF"),Gr(""))),zxe=Object.freeze(Vr(cn(5),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Up(5),Gr(""))),Nxe=Object.freeze(Vr(cn(5),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Gr(""))),Dxe=Object.freeze(Vr(cn(5),Wr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Up(5),Gr(""))),Lxe=Object.freeze(Vr(cn(5),Wr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Gr(""))),Bxe=Object.freeze(Vr(cn(5),Wr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Gr(""),FR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),KR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),U9=/[\t\n\f\r ]/,JR=(e,t)=>{mo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&U9.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},ES=Object.freeze(KR?{encode(e){return _S(e),e.toBase64()},decode(e){return JR(e,!1)}}:Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Up(6),Gr(""))),pr=Object.freeze(Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Gr(""))),jxe=Object.freeze(KR?{encode(e){return _S(e),e.toBase64({alphabet:"base64url"})},decode(e){return JR(e,!0)}}:Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Up(6),Gr(""))),Uxe=Object.freeze(Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Gr(""))),IS=(e)=>Vr(j9(58),Wr(e),Gr("")),qxe=Object.freeze(IS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Zxe=Object.freeze(IS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Mxe=Object.freeze(IS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var vS=Vr(Wr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Gr("")),UR=[996825010,642813549,513874426,1027748829,705979059];function bu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<UR.length;i++)if((t>>i&1)===1)r^=UR[i];return r}function qR(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=bu(n)^s>>5}n=bu(n);for(let o=0;o<i;o++)n=bu(n)^e.charCodeAt(o)&31;for(let o of t)n=bu(n)^o;for(let o=0;o<6;o++)n=bu(n);return n^=r,vS.encode(wS([n%Np[30]],30,5,!1))}function VR(e){let t=e==="bech32"?1:734539939,r=cn(5),i=r.decode,n=r.encode,o=jR(i);function s(f,p,m=90){if(mo("bech32.encode prefix",f),jp(p))p=Array.from(p);kS("bech32.encode",p);let y=f.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let b=f.toLowerCase(),_=qR(b,p,t);return`${b}1${vS.encode(p)}${_}`}function a(f,p=90){mo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let y=f.toLowerCase();if(f!==y&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),_=y.slice(g+1);if(_.length<6)throw Error("Data must be at least 6 characters long");let T=vS.decode(_).slice(0,-6),A=qR(b,T,t);if(!_.endsWith(A))throw Error(`Invalid checksum in ${f}: expected "${A}"`);return{prefix:b,words:T}}let c=jR(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var Qr=Object.freeze(VR("bech32")),Fxe=Object.freeze(VR("bech32m"));var q9=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Z9={encode(e){return _S(e),e.toHex()},decode(e){return mo("hex",e),Uint8Array.fromHex(e)}},Hxe=Object.freeze(q9?Z9:Vr(cn(4),Wr("0123456789abcdef"),Gr(""),FR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function F9(e,t,r,i){ki(e);let n=Rp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(At(o,"c"),At(s,"dkLen"),At(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=fS(t,"password"),l=fS(r,"salt"),u=new Uint8Array(s),f=Vn.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function H9(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return kr(n),r}function TS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=F9(e,t,r,i),l,u=new Uint8Array(4),f=Fa(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(p).digestInto(p);for(let _=0;_<g.length;_++)g[_]^=p[_]}}return H9(a,c,s,l,p)}function WR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],_=e[t++]^r[i++],T=e[t++]^r[i++],A=e[t++]^r[i++],z=e[t++]^r[i++],j=e[t++]^r[i++],E=s,F=a,D=c,H=l,X=u,Z=f,P=p,N=m,I=y,O=g,R=b,M=_,L=T,V=A,k=z,te=j;for(let ue=0;ue<8;ue+=2)X^=Xe(E+L|0,7),I^=Xe(X+E|0,9),L^=Xe(I+X|0,13),E^=Xe(L+I|0,18),O^=Xe(Z+F|0,7),V^=Xe(O+Z|0,9),F^=Xe(V+O|0,13),Z^=Xe(F+V|0,18),k^=Xe(R+P|0,7),D^=Xe(k+R|0,9),P^=Xe(D+k|0,13),R^=Xe(P+D|0,18),H^=Xe(te+M|0,7),N^=Xe(H+te|0,9),M^=Xe(N+H|0,13),te^=Xe(M+N|0,18),F^=Xe(E+H|0,7),D^=Xe(F+E|0,9),H^=Xe(D+F|0,13),E^=Xe(H+D|0,18),P^=Xe(Z+X|0,7),N^=Xe(P+Z|0,9),X^=Xe(N+P|0,13),Z^=Xe(X+N|0,18),M^=Xe(R+O|0,7),I^=Xe(M+R|0,9),O^=Xe(I+M|0,13),R^=Xe(O+I|0,18),L^=Xe(te+k|0,7),V^=Xe(L+te|0,9),k^=Xe(V+L|0,13),te^=Xe(k+V|0,18);n[o++]=s+E|0,n[o++]=a+F|0,n[o++]=c+D|0,n[o++]=l+H|0,n[o++]=u+X|0,n[o++]=f+Z|0,n[o++]=p+P|0,n[o++]=m+N|0,n[o++]=y+I|0,n[o++]=g+O|0,n[o++]=b+R|0,n[o++]=_+M|0,n[o++]=T+L|0,n[o++]=A+V|0,n[o++]=z+k|0,n[o++]=j+te|0}function AS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(WR(r,s,e,t,r,o),a>0)s+=16;WR(r,o,e,t+=16,r,s)}}function K9(e,t,r){let i=Rp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(At(n,"N"),At(o,"r"),At(s,"p"),At(a,"dkLen"),At(c,"asyncTick"),At(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=f*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=TS($t,e,t,{c:1,dkLen:f*s}),b=$p(g),_=$p(new Uint8Array(f*n)),T=$p(new Uint8Array(f)),A=()=>{};if(u){let z=2*n*s,j=Math.max(Math.floor(z/1e4),1),E=0;A=()=>{if(E++,u&&(!(E%j)||E===z))u(E/z)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:_,B32:b,B:g,tmp:T,blockMixCb:A,asyncTick:c}}function J9(e,t,r,i,n){let o=TS($t,e,r,{c:1,dkLen:t});return kr(r,i,n),o}function $S(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=K9(e,t,r);dS(l);for(let m=0;m<o;m++){let y=a*m;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)AS(c,b,c,b+=a,n),p();AS(c,(i-1)*a,l,y,n),p();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let _=0;_<a;_++)f[_]=l[y+_]^c[b*a+_];AS(f,0,l,y,n),p()}}return dS(l),J9(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function V9(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function qp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Ha(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function jt(e,t,r=""){let i=V9(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function CS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function GR(e,t,r=!1){jt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!Ka(e))throw Error("invalid output, must be aligned")}function Gn(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function In(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function W9(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Es=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),G9=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var Q9=(e)=>{for(let t=0;t<e.length;t++)e[t]=G9(e[t]);return e},Ti=Es?(e)=>e:Q9;function QR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function YR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function XR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var eO=(e,t)=>{function r(i,...n){if(jt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];jt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)jt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");jt(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,jt(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(jt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function xu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(jt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!Ka(t))throw Error("invalid output, must be aligned");return t}function tO(e,t,r){Ha(e),Ha(t),qp(r);let i=new Uint8Array(16),n=W9(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function Ka(e){return e.byteOffset%4===0}function Ja(e){return Uint8Array.from(jt(e))}var nO=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),Y9=(()=>Ti(Gn(nO("expand 16-byte k"))))(),X9=(()=>Ti(Gn(nO("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var wu=64,eV=16,RS=(()=>4294967295)(),rO=Uint32Array.of();function tV(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(wu),u=Gn(l),f=Es&&Ka(n)&&Ka(o),p=f?Gn(n):rO,m=f?Gn(o):rO;if(!Es){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ti(u),s>=RS)throw Error("arx: counter overflow");let g=Math.min(wu,c-y);for(let b=0,_;b<g;b++)_=y+b,o[_]=n[_]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=RS)throw Error("arx: counter overflow");let g=Math.min(wu,c-y);if(f&&g===wu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let _=0,T;_<eV;_++)T=b+_,m[T]=p[T]^u[_];y+=wu;continue}for(let b=0,_;b<g;b++)_=y+b,o[_]=n[_]^l[b];y+=g}}function iO(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=QR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Ha(n),Ha(s),qp(o),qp(r),(a,c,l,u,f=0)=>{jt(a,void 0,"key"),jt(c,void 0,"nonce"),jt(l,void 0,"data");let p=l.length;if(u=xu(p,u,!1),Ha(f),f<0||f>=RS)throw Error("arx: counter overflow");let m=[],y=a.length,g,b;if(y===32)m.push(g=Ja(a)),b=X9;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=Y9,m.push(g);else throw jt(a,32,"arx key"),Error("invalid key size");if(!Es||!Ka(c))m.push(c=Ja(c));let _=Gn(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let z=c.subarray(0,16);if(Es)i(b,_,Gn(z),_);else{let j=Ti(Uint32Array.from(b));i(j,_,Gn(z),_),In(j),Ti(_)}c=c.subarray(16)}else if(!Es)Ti(_);let T=16-n;if(T!==c.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let z=new Uint8Array(12);z.set(c,o?0:12-c.length),c=z,m.push(c)}let A=Ti(Gn(c));try{return tV(e,b,_,A,l,u,f,s),u}finally{In(...m)}}}function er(e,t){return e[t++]&255|(e[t++]&255)<<8}class oO{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ja(jt(e,32,"key"));let t=er(e,0),r=er(e,2),i=er(e,4),n=er(e,6),o=er(e,8),s=er(e,10),a=er(e,12),c=er(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=er(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],y=o[8],g=o[9],b=er(e,t+0),_=er(e,t+2),T=er(e,t+4),A=er(e,t+6),z=er(e,t+8),j=er(e,t+10),E=er(e,t+12),F=er(e,t+14),D=n[0]+(b&8191),H=n[1]+((b>>>13|_<<3)&8191),X=n[2]+((_>>>10|T<<6)&8191),Z=n[3]+((T>>>7|A<<9)&8191),P=n[4]+((A>>>4|z<<12)&8191),N=n[5]+(z>>>1&8191),I=n[6]+((z>>>14|j<<2)&8191),O=n[7]+((j>>>11|E<<5)&8191),R=n[8]+((E>>>8|F<<8)&8191),M=n[9]+(F>>>5|i),L=0,V=L+D*s+H*(5*g)+X*(5*y)+Z*(5*m)+P*(5*p);L=V>>>13,V&=8191,V+=N*(5*f)+I*(5*u)+O*(5*l)+R*(5*c)+M*(5*a),L+=V>>>13,V&=8191;let k=L+D*a+H*s+X*(5*g)+Z*(5*y)+P*(5*m);L=k>>>13,k&=8191,k+=N*(5*p)+I*(5*f)+O*(5*u)+R*(5*l)+M*(5*c),L+=k>>>13,k&=8191;let te=L+D*c+H*a+X*s+Z*(5*g)+P*(5*y);L=te>>>13,te&=8191,te+=N*(5*m)+I*(5*p)+O*(5*f)+R*(5*u)+M*(5*l),L+=te>>>13,te&=8191;let ue=L+D*l+H*c+X*a+Z*s+P*(5*g);L=ue>>>13,ue&=8191,ue+=N*(5*y)+I*(5*m)+O*(5*p)+R*(5*f)+M*(5*u),L+=ue>>>13,ue&=8191;let C=L+D*u+H*l+X*c+Z*a+P*s;L=C>>>13,C&=8191,C+=N*(5*g)+I*(5*y)+O*(5*m)+R*(5*p)+M*(5*f),L+=C>>>13,C&=8191;let be=L+D*f+H*u+X*l+Z*c+P*a;L=be>>>13,be&=8191,be+=N*s+I*(5*g)+O*(5*y)+R*(5*m)+M*(5*p),L+=be>>>13,be&=8191;let Ee=L+D*p+H*f+X*u+Z*l+P*c;L=Ee>>>13,Ee&=8191,Ee+=N*a+I*s+O*(5*g)+R*(5*y)+M*(5*m),L+=Ee>>>13,Ee&=8191;let Ce=L+D*m+H*p+X*f+Z*u+P*l;L=Ce>>>13,Ce&=8191,Ce+=N*c+I*a+O*s+R*(5*g)+M*(5*y),L+=Ce>>>13,Ce&=8191;let Re=L+D*y+H*m+X*p+Z*f+P*u;L=Re>>>13,Re&=8191,Re+=N*l+I*c+O*a+R*s+M*(5*g),L+=Re>>>13,Re&=8191;let _e=L+D*g+H*y+X*m+Z*p+P*f;L=_e>>>13,_e&=8191,_e+=N*u+I*l+O*c+R*a+M*s,L+=_e>>>13,_e&=8191,L=(L<<2)+L|0,L=L+V|0,V=L&8191,L=L>>>13,k+=L,n[0]=V,n[1]=k,n[2]=te,n[3]=ue,n[4]=C,n[5]=be,n[6]=Ee,n[7]=Ce,n[8]=Re,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;In(r)}update(e){CS(this),jt(e),e=Ja(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,In(this.h,this.r,this.buffer,this.pad)}digestInto(e){CS(this),GR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var sO=XR(32,(e)=>new oO(e));function rV(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],y=t[4],g=t[5],b=t[6],_=t[7],T=n,A=r[0],z=r[1],j=r[2],E=s,F=a,D=c,H=l,X=u,Z=f,P=p,N=m,I=y,O=g,R=b,M=_,L=T,V=A,k=z,te=j;for(let C=0;C<o;C+=2)E=E+X|0,L=et(L^E,16),I=I+L|0,X=et(X^I,12),E=E+X|0,L=et(L^E,8),I=I+L|0,X=et(X^I,7),F=F+Z|0,V=et(V^F,16),O=O+V|0,Z=et(Z^O,12),F=F+Z|0,V=et(V^F,8),O=O+V|0,Z=et(Z^O,7),D=D+P|0,k=et(k^D,16),R=R+k|0,P=et(P^R,12),D=D+P|0,k=et(k^D,8),R=R+k|0,P=et(P^R,7),H=H+N|0,te=et(te^H,16),M=M+te|0,N=et(N^M,12),H=H+N|0,te=et(te^H,8),M=M+te|0,N=et(N^M,7),E=E+Z|0,te=et(te^E,16),R=R+te|0,Z=et(Z^R,12),E=E+Z|0,te=et(te^E,8),R=R+te|0,Z=et(Z^R,7),F=F+P|0,L=et(L^F,16),M=M+L|0,P=et(P^M,12),F=F+P|0,L=et(L^F,8),M=M+L|0,P=et(P^M,7),D=D+N|0,V=et(V^D,16),I=I+V|0,N=et(N^I,12),D=D+N|0,V=et(V^D,8),I=I+V|0,N=et(N^I,7),H=H+X|0,k=et(k^H,16),O=O+k|0,X=et(X^O,12),H=H+X|0,k=et(k^H,8),O=O+k|0,X=et(X^O,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+F|0,i[ue++]=c+D|0,i[ue++]=l+H|0,i[ue++]=u+X|0,i[ue++]=f+Z|0,i[ue++]=p+P|0,i[ue++]=m+N|0,i[ue++]=y+I|0,i[ue++]=g+O|0,i[ue++]=b+R|0,i[ue++]=_+M|0,i[ue++]=T+L|0,i[ue++]=A+V|0,i[ue++]=z+k|0,i[ue++]=j+te|0}var nV=iO(rV,{counterRight:!1,counterLength:4,allowShortKeys:!1});var iV=new Uint8Array(16),aO=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(iV.subarray(r))},oV=new Uint8Array(32);function cO(e,t,r,i,n){if(n!==void 0)jt(n,void 0,"AAD");let o=e(t,r,oV),s=tO(i.length,n?n.length:0,!0),a=sO.create(o);if(n)aO(a,n);aO(a,i),a.update(s);let c=a.digest();return In(o,s),c}var sV=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=xu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=cO(e,t,r,c,i);return s.set(l,a),In(l),s},decrypt(o,s){s=xu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=cO(e,t,r,a,i);if(!YR(c,l))throw In(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),In(l),s}}),ln=eO({blockSize:64,nonceLength:12,tagLength:16},sV(nV));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Va(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Kt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Pe(e,t,r=""){let i=Va(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function un(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Kt(e.outputLen),Kt(e.blockLen)}function $i(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Zp(e,t){Pe(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Mp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Br(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Fp(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Tn(e,t){return e<<32-t|e>>>t}var aV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function cV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function lV(e){for(let t=0;t<e.length;t++)e[t]=cV(e[t]);return e}var OS=aV?(e)=>e:lV,uO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),uV=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Is(e){if(Pe(e),uO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=uV[e[r]];return t}var Ai={_0:48,_9:57,A:65,F:70,a:97,f:102};function lO(e){if(e>=Ai._0&&e<=Ai._9)return e-Ai._0;if(e>=Ai.A&&e<=Ai.F)return e-(Ai.A-10);if(e>=Ai.a&&e<=Ai.f)return e-(Ai.a-10);return}function Ts(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(uO)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=lO(e.charCodeAt(o)),a=lO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Nt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Pe(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Wa(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function ho(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var go=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zS=BigInt(0),PS=BigInt(1);function vu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function dO(e){if(typeof e==="bigint"){if(!Hp(e))throw Error("positive bigint expected, got "+e)}else Kt(e);return e}function _u(e){let t=dO(e).toString(16);return t.length&1?"0"+t:t}function fO(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?zS:BigInt("0x"+e)}function yo(e){return fO(Is(e))}function bo(e){return fO(Is(Kp(Pe(e)).reverse()))}function Ga(e,t){Kt(t),e=dO(e);let r=Ts(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function ku(e,t){return Ga(e,t).reverse()}function Kp(e){return Uint8Array.from(e)}function So(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Hp=(e)=>typeof e==="bigint"&&zS<=e;function dV(e,t,r){return Hp(e)&&Hp(t)&&Hp(r)&&t<=e&&e<r}function Eu(e,t,r,i){if(!dV(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function NS(e){let t;for(t=0;e>zS;e>>=PS,t+=1);return t}var Iu=(e)=>(PS<<BigInt(e))-PS;function pO(e,t,r){if(Kt(e,"hashLen"),Kt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,Nt(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,_=[];while(b<t){c=p();let T=c.slice();_.push(T),b+=c.length}return Nt(..._)};return(b,_)=>{f(),m(b);let T=void 0;while(!(T=_(y())))m();return f(),T}}function As(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function DS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ir=BigInt(0),mr=BigInt(1),$s=BigInt(2),gO=BigInt(3),yO=BigInt(4),bO=BigInt(5),fV=BigInt(7),SO=BigInt(8),pV=BigInt(9),xO=BigInt(16);function Er(e,t){let r=e%t;return r>=Ir?r:t+r}function dn(e,t,r){let i=e;while(t-- >Ir)i*=i,i%=r;return i}function mO(e,t){if(e===Ir)throw Error("invert: expected non-zero number");if(t<=Ir)throw Error("invert: expected positive modulus, got "+t);let r=Er(e,t),i=t,n=Ir,o=mr,s=mr,a=Ir;while(r!==Ir){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==mr)throw Error("invert: does not exist");return Er(n,t)}function LS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function wO(e,t){let r=(e.ORDER+mr)/yO,i=e.pow(t,r);return LS(e,i,t),i}function mV(e,t){let r=(e.ORDER-bO)/SO,i=e.mul(t,$s),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,$s),n),a=e.mul(o,e.sub(s,e.ONE));return LS(e,a,t),a}function hV(e){let t=Jp(e),r=vO(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+fV)/xO;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return LS(a,b,c),b}}function vO(e){if(e<gO)throw Error("sqrt is not defined for small field");let t=e-mr,r=0;while(t%$s===Ir)t/=$s,r++;let i=$s,n=Jp(e);while(hO(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return wO;let o=n.pow(i,t),s=(t+mr)/$s;return function(c,l){if(c.is0(l))return l;if(hO(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=mr<<BigInt(u-y-1),_=c.pow(f,b);u=y,f=c.sqr(_),p=c.mul(p,f),m=c.mul(m,_)}return m}}function gV(e){if(e%yO===gO)return wO;if(e%SO===bO)return mV;if(e%xO===pV)return hV(e);return vO(e)}var yV=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function BS(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=yV.reduce((i,n)=>(i[n]="function",i),t);return As(e,r),e}function bV(e,t,r){if(r<Ir)throw Error("invalid exponent, negatives unsupported");if(r===Ir)return e.ONE;if(r===mr)return t;let i=e.ONE,n=t;while(r>Ir){if(r&mr)i=e.mul(i,n);n=e.sqr(n),r>>=mr}return i}function Tu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function hO(e,t){let r=(e.ORDER-mr)/$s,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function SV(e,t){if(t!==void 0)Kt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class _O{ORDER;BITS;BYTES;isLE;ZERO=Ir;ONE=mr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Ir)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=SV(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Er(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Ir<=e&&e<this.ORDER}is0(e){return e===Ir}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&mr)===mr}neg(e){return Er(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Er(e*e,this.ORDER)}add(e,t){return Er(e+t,this.ORDER)}sub(e,t){return Er(e-t,this.ORDER)}mul(e,t){return Er(e*t,this.ORDER)}pow(e,t){return bV(this,e,t)}div(e,t){return Er(e*mO(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return mO(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=gV(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?ku(e,this.BYTES):Ga(e,this.BYTES)}fromBytes(e,t=!1){Pe(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?bo(e):yo(e);if(s)a=Er(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Tu(this,e)}cmov(e,t,r){return r?t:e}}function Jp(e,t={}){return new _O(e,t)}function kO(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function jS(e){let t=kO(e);return t+Math.ceil(t/2)}function EO(e,t,r=!1){Pe(e);let i=e.length,n=kO(t),o=jS(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?bo(e):yo(e),a=Er(s,t-mr)+mr;return r?ku(a,n):Ga(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qa=BigInt(0),Cs=BigInt(1);function Au(e,t){let r=t.negate();return e?r:t}function MS(e,t){let r=Tu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function $O(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function US(e,t){$O(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Iu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function IO(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Cs;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var qS=new WeakMap,CO=new WeakMap;function ZS(e){return CO.get(e)||1}function TO(e){if(e!==Qa)throw Error("invalid wNAF")}class FS{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>Qa){if(t&Cs)r=r.add(i);i=i.double(),t>>=Cs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=US(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=US(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=IO(r,s,o);if(r=a,l)n=n.add(Au(f,t[p]));else i=i.add(Au(u,t[c]))}return TO(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=US(e,this.bits);for(let o=0;o<n.windows;o++){if(r===Qa)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=IO(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return TO(r),i}getPrecomputes(e,t,r){let i=qS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);qS.set(t,i)}}return i}cached(e,t,r){let i=ZS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=ZS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){$O(t,this.bits),CO.set(e,t),qS.delete(e)}hasCache(e){return ZS(e)!==1}}function RO(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>Qa||i>Qa){if(r&Cs)o=o.add(n);if(i&Cs)s=s.add(n);n=n.double(),r>>=Cs,i>>=Cs}return{p1:o,p2:s}}function AO(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return BS(t),t}else return Jp(e,{isLE:r})}function OO(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>Qa))throw Error(`CURVE.${c} must be positive bigint`)}let n=AO(t.p,r.Fp,i),o=AO(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Vp(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $u=BigInt(0),Ya=BigInt(1),Wp=BigInt(2);function xV(e){return As(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function PO(e){let t=xV(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||ho,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Wp**BigInt(254):Wp**BigInt(447),y=a?BigInt(8)*Wp**BigInt(251)-Ya:BigInt(4)*Wp**BigInt(445)-Ya,g=m+y+Ya,b=(I)=>Er(I,r),_=T(f);function T(I){return ku(b(I),u)}function A(I){let O=Kp(Pe(I,u,"uCoordinate"));if(a)O[31]&=127;return b(bo(O))}function z(I){return bo(n(Kp(Pe(I,u,"scalar"))))}function j(I,O){let R=X(A(O),z(I));if(R===$u)throw Error("invalid private or public key received");return T(R)}function E(I){return j(I,_)}let F=E,D=j;function H(I,O,R){let M=b(I*(O-R));return O=b(O-M),R=b(R+M),{x_2:O,x_3:R}}function X(I,O){Eu("u",I,$u,r),Eu("scalar",O,m,g);let R=O,M=I,L=Ya,V=$u,k=I,te=Ya,ue=$u;for(let be=BigInt(l-1);be>=$u;be--){let Ee=R>>be&Ya;ue^=Ee,{x_2:L,x_3:k}=H(ue,L,k),{x_2:V,x_3:te}=H(ue,V,te),ue=Ee;let Ce=L+V,Re=b(Ce*Ce),_e=L-V,Je=b(_e*_e),Ne=Re-Je,Ye=k+te,mt=k-te,zt=b(mt*Ce),dr=b(Ye*_e),Kr=zt+dr,Jr=zt-dr;k=b(Kr*Kr),te=b(M*b(Jr*Jr)),L=b(Re*Je),V=b(Ne*(Re+b(p*Ne)))}({x_2:L,x_3:k}=H(ue,L,k)),{x_2:V,x_3:te}=H(ue,V,te);let C=o(V);return b(L*C)}let Z={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(Pe(I,Z.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze({keygen:Vp(P,F),getSharedSecret:D,getPublicKey:F,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:_.slice(),lengths:Z})}class HS{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(un(e),Pe(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Br(i)}update(e){return $i(this),this.iHash.update(e),this}digestInto(e){$i(this),Pe(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Xa=(e,t,r)=>new HS(e,t).update(r).digest();Xa.create=(e,t)=>new HS(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zO=(e,t)=>(e+(e>=0?t:-t)/DO)/t;function wV(e,t,r){let[[i,n],[o,s]]=t,a=zO(s*e,r),c=zO(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Ci,p=u<Ci;if(f)l=-l;if(p)u=-u;let m=Iu(Math.ceil(NS(r)/2))+ec;if(l<Ci||l>=m||u<Ci||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function JS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function KS(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(vu(r.lowS,"lowS"),vu(r.prehash,"prehash"),r.format!==void 0)JS(r.format);return r}class NO extends Error{constructor(e=""){super(e)}}var xo={Err:NO,_tlv:{encode:(e,t)=>{let{Err:r}=xo;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=_u(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?_u(n.length/2|128):"";return _u(e)+o+n+t},decode(e,t){let{Err:r}=xo,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=xo;if(e<Ci)throw new t("integer: negative integers are not allowed");let r=_u(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=xo;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return yo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=xo,n=Pe(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=xo,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Ci=BigInt(0),ec=BigInt(1),DO=BigInt(2),Gp=BigInt(3),vV=BigInt(4);function VS(e,t={}){let r=OO("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;As(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=BO(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(P,N,I){let{x:O,y:R}=N.toAffine(),M=i.toBytes(O);if(vu(I,"isCompressed"),I){u();let L=!i.isOdd(R);return Nt(LO(L),M)}else return Nt(Uint8Array.of(4),M,i.toBytes(R))}function p(P){Pe(P,void 0,"Point");let{publicKey:N,publicKeyUncompressed:I}=l,O=P.length,R=P[0],M=P.subarray(1);if(O===N&&(R===2||R===3)){let L=i.fromBytes(M);if(!i.isValid(L))throw Error("bad point: is not on curve, wrong x");let V=g(L),k;try{k=i.sqrt(V)}catch(C){let be=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+be)}u();let te=i.isOdd(k);if((R&1)===1!==te)k=i.neg(k);return{x:L,y:k}}else if(O===I&&R===4){let L=i.BYTES,V=i.fromBytes(M.subarray(0,L)),k=i.fromBytes(M.subarray(L,L*2));if(!b(V,k))throw Error("bad point: is not on curve");return{x:V,y:k}}else throw Error(`bad point: got length ${O}, expected compressed=${N} or uncompressed=${I}`)}let m=t.toBytes||f,y=t.fromBytes||p;function g(P){let N=i.sqr(P),I=i.mul(N,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,N){let I=i.sqr(N),O=g(P);return i.eql(I,O)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let _=i.mul(i.pow(o.a,Gp),vV),T=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(_,T)))throw Error("bad curve params: a or b");function A(P,N,I=!1){if(!i.isValid(N)||I&&i.is0(N))throw Error(`bad point coordinate ${P}`);return N}function z(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function j(P){if(!c||!c.basises)throw Error("no endo");return wV(P,c.basises,n.ORDER)}let E=DS((P,N)=>{let{X:I,Y:O,Z:R}=P;if(i.eql(R,i.ONE))return{x:I,y:O};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(R);let L=i.mul(I,N),V=i.mul(O,N),k=i.mul(R,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(k,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}),F=DS((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:N,y:I}=P.toAffine();if(!i.isValid(N)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(N,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function D(P,N,I,O,R){return I=new H(i.mul(I.X,P),I.Y,I.Z),N=Au(O,N),I=Au(R,I),N.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,N,I){this.X=A("x",P),this.Y=A("y",N,!0),this.Z=A("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:N,y:I}=P||{};if(!P||!i.isValid(N)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(I))return H.ZERO;return new H(N,I,i.ONE)}static fromBytes(P){let N=H.fromAffine(y(Pe(P,void 0,"point")));return N.assertValidity(),N}static fromHex(P){return H.fromBytes(Ts(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,N=!0){if(Z.createCache(this,P),!N)this.multiply(Gp);return this}assertValidity(){F(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){z(P);let{X:N,Y:I,Z:O}=this,{X:R,Y:M,Z:L}=P,V=i.eql(i.mul(N,L),i.mul(R,O)),k=i.eql(i.mul(I,L),i.mul(M,O));return V&&k}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:N}=o,I=i.mul(N,Gp),{X:O,Y:R,Z:M}=this,L=i.ZERO,V=i.ZERO,k=i.ZERO,te=i.mul(O,O),ue=i.mul(R,R),C=i.mul(M,M),be=i.mul(O,R);return be=i.add(be,be),k=i.mul(O,M),k=i.add(k,k),L=i.mul(P,k),V=i.mul(I,C),V=i.add(L,V),L=i.sub(ue,V),V=i.add(ue,V),V=i.mul(L,V),L=i.mul(be,L),k=i.mul(I,k),C=i.mul(P,C),be=i.sub(te,C),be=i.mul(P,be),be=i.add(be,k),k=i.add(te,te),te=i.add(k,te),te=i.add(te,C),te=i.mul(te,be),V=i.add(V,te),C=i.mul(R,M),C=i.add(C,C),te=i.mul(C,be),L=i.sub(L,te),k=i.mul(C,ue),k=i.add(k,k),k=i.add(k,k),new H(L,V,k)}add(P){z(P);let{X:N,Y:I,Z:O}=this,{X:R,Y:M,Z:L}=P,V=i.ZERO,k=i.ZERO,te=i.ZERO,ue=o.a,C=i.mul(o.b,Gp),be=i.mul(N,R),Ee=i.mul(I,M),Ce=i.mul(O,L),Re=i.add(N,I),_e=i.add(R,M);Re=i.mul(Re,_e),_e=i.add(be,Ee),Re=i.sub(Re,_e),_e=i.add(N,O);let Je=i.add(R,L);return _e=i.mul(_e,Je),Je=i.add(be,Ce),_e=i.sub(_e,Je),Je=i.add(I,O),V=i.add(M,L),Je=i.mul(Je,V),V=i.add(Ee,Ce),Je=i.sub(Je,V),te=i.mul(ue,_e),V=i.mul(C,Ce),te=i.add(V,te),V=i.sub(Ee,te),te=i.add(Ee,te),k=i.mul(V,te),Ee=i.add(be,be),Ee=i.add(Ee,be),Ce=i.mul(ue,Ce),_e=i.mul(C,_e),Ee=i.add(Ee,Ce),Ce=i.sub(be,Ce),Ce=i.mul(ue,Ce),_e=i.add(_e,Ce),be=i.mul(Ee,_e),k=i.add(k,be),be=i.mul(Je,_e),V=i.mul(Re,V),V=i.sub(V,be),be=i.mul(Re,Ee),te=i.mul(Je,te),te=i.add(te,be),new H(V,k,te)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:N}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,O,R=(M)=>Z.cached(this,M,(L)=>MS(H,L));if(N){let{k1neg:M,k1:L,k2neg:V,k2:k}=j(P),{p:te,f:ue}=R(L),{p:C,f:be}=R(k);O=ue.add(be),I=D(N.beta,te,C,M,V)}else{let{p:M,f:L}=R(P);I=M,O=L}return MS(H,[I,O])[0]}multiplyUnsafe(P){let{endo:N}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Ci||I.is0())return H.ZERO;if(P===ec)return I;if(Z.hasCache(this))return this.multiply(P);if(N){let{k1neg:O,k1:R,k2neg:M,k2:L}=j(P),{p1:V,p2:k}=RO(H,I,R,L);return D(N.beta,V,k,O,M)}else return Z.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===ec)return!0;if(P)return P(H,this);return Z.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===ec)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return vu(P,"isCompressed"),this.assertValidity(),m(H,this,P)}toHex(P=!0){return Is(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let X=n.BITS,Z=new FS(H,t.endo?Math.ceil(X/2):X);return H.BASE.precompute(8),H}function LO(e){return Uint8Array.of(e?2:3)}function BO(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function _V(e,t={}){let{Fn:r}=e,i=t.randomBytes||ho,n=Object.assign(BO(e.Fp,r),{seed:jS(r.ORDER)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let _=m.length;if(y===!0&&_!==g)return!1;if(y===!1&&_!==b)return!1;return!!e.fromBytes(m)}catch(_){return!1}}function a(m=i(n.seed)){return EO(Pe(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!Va(m))return;if("_lengths"in r&&r._lengths||y===g)return;let _=Pe(m,void 0,"key").length;return _===g||_===b}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Vp(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function WS(e,t,r={}){un(t),As(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||ho,n=r.hmac||((I,O)=>Xa(t,I,O)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=_V(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*DO<o.ORDER;function b(I){let O=a>>ec;return I>O}function _(I,O){if(!s.isValidNot0(O))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return O}function T(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function A(I,O){JS(O);let R=m.signature,M=O==="compact"?R:O==="recovered"?R+1:void 0;return Pe(I,M)}class z{r;s;recovery;constructor(I,O,R){if(this.r=_("r",I),this.s=_("s",O),R!=null){if(T(),![0,1,2,3].includes(R))throw Error("invalid recovery id");this.recovery=R}Object.freeze(this)}static fromBytes(I,O=y.format){A(I,O);let R;if(O==="der"){let{r:k,s:te}=xo.toSig(Pe(I));return new z(k,te)}if(O==="recovered")R=I[0],O="compact",I=I.subarray(1);let M=m.signature/2,L=I.subarray(0,M),V=I.subarray(M,M*2);return new z(s.fromBytes(L),s.fromBytes(V),R)}static fromHex(I,O){return this.fromBytes(Ts(I),O)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new z(this.r,this.s,I)}recoverPublicKey(I){let{r:O,s:R}=this,M=this.assertRecovery(),L=M===2||M===3?O+a:O;if(!o.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(L),k=e.fromBytes(Nt(LO((M&1)===0),V)),te=s.inv(L),ue=E(Pe(I,void 0,"msgHash")),C=s.create(-ue*te),be=s.create(R*te),Ee=e.BASE.multiplyUnsafe(C).add(k.multiplyUnsafe(be));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(JS(I),I==="der")return Ts(xo.hexFromSig(this));let{r:O,s:R}=this,M=s.toBytes(O),L=s.toBytes(R);if(I==="recovered")return T(),Nt(Uint8Array.of(this.assertRecovery()),M,L);return Nt(M,L)}toHex(I){return Is(this.toBytes(I))}}let j=r.bits2int||function(O){if(O.length>8192)throw Error("input is too large");let R=yo(O),M=O.length*8-c;return M>0?R>>BigInt(M):R},E=r.bits2int_modN||function(O){return s.create(j(O))},F=Iu(c);function D(I){return Eu("num < 2^"+c,I,Ci,F),s.toBytes(I)}function H(I,O){return Pe(I,void 0,"message"),O?Pe(t(I),void 0,"prehashed message"):I}function X(I,O,R){let{lowS:M,prehash:L,extraEntropy:V}=KS(R,y);I=H(I,L);let k=E(I),te=s.fromBytes(O);if(!s.isValidNot0(te))throw Error("invalid private key");let ue=[D(te),D(k)];if(V!=null&&V!==!1){let Ce=V===!0?i(m.secretKey):V;ue.push(Pe(Ce,void 0,"extraEntropy"))}let C=Nt(...ue),be=k;function Ee(Ce){let Re=j(Ce);if(!s.isValidNot0(Re))return;let _e=s.inv(Re),Je=e.BASE.multiply(Re).toAffine(),Ne=s.create(Je.x);if(Ne===Ci)return;let Ye=s.create(_e*s.create(be+Ne*te));if(Ye===Ci)return;let mt=(Je.x===Ne?0:2)|Number(Je.y&ec),zt=Ye;if(M&&b(Ye))zt=s.neg(Ye),mt^=1;return new z(Ne,zt,g?void 0:mt)}return{seed:C,k2sig:Ee}}function Z(I,O,R={}){let{seed:M,k2sig:L}=X(I,O,R);return pO(t.outputLen,s.BYTES,n)(M,L).toBytes(R.format)}function P(I,O,R,M={}){let{lowS:L,prehash:V,format:k}=KS(M,y);if(R=Pe(R,void 0,"publicKey"),O=H(O,V),!Va(I)){let te=I instanceof z?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+te)}A(I,k);try{let te=z.fromBytes(I,k),ue=e.fromBytes(R);if(L&&te.hasHighS())return!1;let{r:C,s:be}=te,Ee=E(O),Ce=s.inv(be),Re=s.create(Ee*Ce),_e=s.create(C*Ce),Je=e.BASE.multiplyUnsafe(Re).add(ue.multiplyUnsafe(_e));if(Je.is0())return!1;return s.create(Je.x)===C}catch(te){return!1}}function N(I,O,R={}){let{prehash:M}=KS(R,y);return O=H(O,M),z.fromBytes(I,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:Z,verify:P,recoverPublicKey:N,Signature:z,hash:t})}function jO(e,t,r){return e&t^~e&r}function UO(e,t,r){return e&t^e&r^t&r}class Qp{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Fp(this.buffer)}update(e){$i(this),Pe(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Fp(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){$i(this),Zp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Br(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Fp(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ri=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var tr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Yp=BigInt(4294967295),qO=BigInt(32);function kV(e,t=!1){if(t)return{h:Number(e&Yp),l:Number(e>>qO&Yp)};return{h:Number(e>>qO&Yp)|0,l:Number(e&Yp)|0}}function Xp(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=kV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var GS=(e,t,r)=>e>>>r,QS=(e,t,r)=>e<<32-r|t>>>r,Rs=(e,t,r)=>e>>>r|t<<32-r,Os=(e,t,r)=>e<<32-r|t>>>r,Cu=(e,t,r)=>e<<64-r|t>>>r-32,Ru=(e,t,r)=>e>>>r-32|t<<64-r;var ZO=(e,t,r)=>e<<r|t>>>32-r,MO=(e,t,r)=>t<<r|e>>>32-r,FO=(e,t,r)=>t<<r-32|e>>>64-r,HO=(e,t,r)=>e<<r-32|t>>>64-r;function Qn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var KO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),JO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,VO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),WO=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,GO=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),QO=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var IV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),wo=new Uint32Array(64);class YO extends Qp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)wo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=wo[u-15],p=wo[u-2],m=Tn(f,7)^Tn(f,18)^f>>>3,y=Tn(p,17)^Tn(p,19)^p>>>10;wo[u]=y+wo[u-7]+m+wo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Tn(s,6)^Tn(s,11)^Tn(s,25),p=l+f+jO(s,a,c)+IV[u]+wo[u]|0,y=(Tn(r,2)^Tn(r,13)^Tn(r,22))+UO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Br(wo)}destroy(){this.set(0,0,0,0,0,0,0,0),Br(this.buffer)}}class XO extends YO{A=Ri[0]|0;B=Ri[1]|0;C=Ri[2]|0;D=Ri[3]|0;E=Ri[4]|0;F=Ri[5]|0;G=Ri[6]|0;H=Ri[7]|0;constructor(){super(32)}}var eP=(()=>Xp(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),TV=(()=>eP[0])(),AV=(()=>eP[1])(),vo=new Uint32Array(80),_o=new Uint32Array(80);class tP extends Qp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let T=0;T<16;T++,t+=4)vo[T]=e.getUint32(t),_o[T]=e.getUint32(t+=4);for(let T=16;T<80;T++){let A=vo[T-15]|0,z=_o[T-15]|0,j=Rs(A,z,1)^Rs(A,z,8)^GS(A,z,7),E=Os(A,z,1)^Os(A,z,8)^QS(A,z,7),F=vo[T-2]|0,D=_o[T-2]|0,H=Rs(F,D,19)^Cu(F,D,61)^GS(F,D,6),X=Os(F,D,19)^Ru(F,D,61)^QS(F,D,6),Z=VO(E,X,_o[T-7],_o[T-16]),P=WO(Z,j,H,vo[T-7],vo[T-16]);vo[T]=P|0,_o[T]=Z|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:_}=this;for(let T=0;T<80;T++){let A=Rs(u,f,14)^Rs(u,f,18)^Cu(u,f,41),z=Os(u,f,14)^Os(u,f,18)^Ru(u,f,41),j=u&p^~u&y,E=f&m^~f&g,F=GO(_,z,E,AV[T],_o[T]),D=QO(F,b,A,j,TV[T],vo[T]),H=F|0,X=Rs(r,i,28)^Cu(r,i,34)^Cu(r,i,39),Z=Os(r,i,28)^Ru(r,i,34)^Ru(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,_=g|0,y=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=Qn(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=KO(H,Z,N);r=JO(I,D,X,P),i=I|0}({h:r,l:i}=Qn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Qn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Qn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Qn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=Qn(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=Qn(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=Qn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:_}=Qn(this.Hh|0,this.Hl|0,b|0,_|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,y,g,b,_)}roundClean(){Br(vo,_o)}destroy(){Br(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class rP extends tP{Ah=tr[0]|0;Al=tr[1]|0;Bh=tr[2]|0;Bl=tr[3]|0;Ch=tr[4]|0;Cl=tr[5]|0;Dh=tr[6]|0;Dl=tr[7]|0;Eh=tr[8]|0;El=tr[9]|0;Fh=tr[10]|0;Fl=tr[11]|0;Gh=tr[12]|0;Gl=tr[13]|0;Hh=tr[14]|0;Hl=tr[15]|0;constructor(){super(48)}}var em=Wa(()=>new XO,go(1));var nP=Wa(()=>new rP,go(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $V=BigInt(1),iP=BigInt(2),CV=BigInt(3),RV=BigInt(5),Vwe=BigInt(8),oP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function OV(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=oP,a=e*e%o*e%o,c=dn(a,iP,o)*a%o,l=dn(c,$V,o)*e%o,u=dn(l,RV,o)*l%o,f=dn(u,t,o)*u%o,p=dn(f,r,o)*f%o,m=dn(p,i,o)*p%o,y=dn(m,n,o)*m%o,g=dn(y,n,o)*m%o,b=dn(g,t,o)*u%o;return{pow_p_5_8:dn(b,iP,o)*e%o,b2:a}}function PV(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var sP=(()=>{let e=oP;return PO({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=OV(t);return Er(dn(r,CV,e)*i,e)},adjustScalarBytes:PV})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zV=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),NV=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var DV=VS(zV),YS=WS(DV,em);var LV=VS(NV),aP=WS(LV,nP);function lP(e,t,r){if(un(e),r===void 0)r=new Uint8Array(e.outputLen);return Xa(e,r,t)}var XS=Uint8Array.of(0),cP=Uint8Array.of();function uP(e,t,r,i=32){un(e),Kt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=cP;else Pe(r,void 0,"info");let s=new Uint8Array(o*n),a=Xa.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)XS[0]=u+1,c.update(u===0?cP:l).update(r).update(XS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Br(l,XS),s.slice(0,i)}var BV=BigInt(0),Ou=BigInt(1),jV=BigInt(2),UV=BigInt(7),qV=BigInt(256),ZV=BigInt(113),pP=[],mP=[],hP=[];for(let e=0,t=Ou,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],pP.push(2*(5*i+r)),mP.push((e+1)*(e+2)/2%64);let n=BV;for(let o=0;o<7;o++)if(t=(t<<Ou^(t>>UV)*ZV)%qV,t&jV)n^=Ou<<(Ou<<BigInt(o))-Ou;hP.push(n)}var gP=Xp(hP,!0),MV=gP[0],FV=gP[1],dP=(e,t,r)=>r>32?FO(e,t,r):ZO(e,t,r),fP=(e,t,r)=>r>32?HO(e,t,r):MO(e,t,r);function HV(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=dP(l,u,1)^r[a],p=fP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=mP[s],c=dP(n,o,a),l=fP(n,o,a),u=pP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=MV[i],e[1]^=FV[i]}Br(r)}class tm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Kt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Mp(this.state)}clone(){return this._cloneInto()}keccak(){OS(this.state32),HV(this.state32,this.rounds),OS(this.state32),this.posOut=0,this.pos=0}update(e){$i(this),Pe(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){$i(this,!1),Pe(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Kt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Zp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Br(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new tm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var yP=(e,t,r,i={})=>Wa(()=>new tm(t,e,r),i);var Ps=yP(6,136,32,go(8));var bP=yP(6,72,64,go(10));var SP=(e,t,r,i={})=>Wa((n={})=>new tm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),xP=SP(31,168,16,go(11)),Yn=SP(31,136,32,go(12));function ex(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function vP(e){return ex(e),(e&e-1)===0&&e!==0}function tx(e,t){ex(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function _P(e){return ex(e),31-Math.clz32(e)}function wP(e){let t=e.length;if(t<2||!vP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=_P(t);for(let i=0;i<t;i++){let n=tx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var rx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=_P(r);if(!vP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)wP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,y=1<<m,g=y>>1,b=r>>m;for(let _=0;_<r;_+=y)for(let T=0,A=p++;T<g;T++){let z=o?n?r-A:A:T*b,j=_+T,E=_+T+g,F=i[z],D=u[E],H=u[j];if(l){let X=e.mul(D,F);u[j]=e.add(H,X),u[E]=e.sub(H,X)}else if(o)u[j]=e.add(D,H),u[E]=e.mul(e.sub(D,H),F);else u[j]=e.add(H,D),u[E]=e.mul(e.sub(H,D),F)}}if(!n&&a)wP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Xn=ho;function rm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function kP(e){return Uint8Array.from(e)}function zs(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Pe(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Pe(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function nm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Pe(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ut(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function nx(e){return(1<<e)-1}var lve=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var EP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(T,A=i)=>{let z=T%A|0;return(z>=0?z|0:A+z|0)|0},l=(T,A=i)=>{let z=c(T,A)|0;return(z>A>>1?z-A|0:z)|0};function u(){let T=t(r);for(let A=0;A<r;A++){let z=tx(A,s),j=BigInt(o)**BigInt(z)%BigInt(i);T[A]=Number(j)|0}return T}let f=u(),p={add:(T,A)=>c((T|0)+(A|0))|0,sub:(T,A)=>c((T|0)-(A|0))|0,mul:(T,A)=>c((T|0)*(A|0))|0,inv:(T)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=rx(p,{dit:!1,...m}),g=rx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(T)=>y(T),decode:(T)=>{g(T);for(let A=0;A<T.length;A++)T[A]=c(n*T[A]);return T}},bitsCoder:(T,A)=>{let z=nx(T),j=T*(r/8);return{bytesLen:j,encode:(E)=>{let F=new Uint8Array(j);for(let D=0,H=0,X=0,Z=0;D<E.length;D++){H|=(A.encode(E[D])&z)<<X,X+=T;for(;X>=8;X-=8,H>>=8)F[Z++]=H&nx(X)}return F},decode:(E)=>{let F=t(r);for(let D=0,H=0,X=0,Z=0;D<E.length;D++){H|=E[D]<<X,X+=8;for(;X>=T;X-=T,H>>=T)F[Z++]=A.decode(H&z)}return F}}}}},KV=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ut(o,i)}}},IP=KV(xP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var hr=256,Oi=3329,JV=3303,VV=17,{mod:Nu,nttZetas:WV,NTT:Ns,bitsCoder:GV}=EP({N:hr,Q:Oi,F:JV,ROOT_OF_UNITY:VV,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),ix={512:{N:hr,Q:Oi,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:hr,Q:Oi,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:hr,Q:Oi,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},QV=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Oi/2)/Oi,decode:(r)=>r*Oi+t>>>e}},Pu=(e)=>GV(e,QV(e));function Ds(e,t){for(let r=0;r<hr;r++)e[r]=Nu(e[r]+t[r])}function YV(e,t){for(let r=0;r<hr;r++)e[r]=Nu(e[r]-t[r])}function XV(e,t,r,i,n){let o=Nu(t*i*n+e*r),s=Nu(e*i+t*r);return{c0:o,c1:s}}function im(e,t){for(let r=0;r<hr/2;r++){let i=WV[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=XV(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function TP(e){let t=new Uint16Array(hr);for(let r=0;r<hr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<hr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Oi)t[r++]=o;if(r<hr&&s<Oi)t[r++]=s}}return t}function zu(e,t,r,i){let n=e(i*hr/4,t,r),o=new Uint16Array(hr),s=Mp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Nu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var e7=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Pu(1),u=Pu(c),f=Pu(a),p=zs("publicKey",nm(Pu(12),t),32),m=nm(Pu(12),t),y=zs("ciphertext",nm(f,t),u),g=zs("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{Pe(b,32,"seed");let _=new Uint8Array(33);_.set(b),_[32]=t;let T=n(_),[A,z]=g.decode(T),j=[],E=[];for(let H=0;H<t;H++)j.push(Ns.encode(zu(r,z,H,o)));let F=i(A);for(let H=0;H<t;H++){let X=Ns.encode(zu(r,z,t+H,o));for(let Z=0;Z<t;Z++){let P=TP(F.get(Z,H));Ds(X,im(P,j[Z]))}E.push(X)}F.clean();let D={publicKey:p.encode([E,A]),secretKey:m.encode(j)};return Ut(A,z,j,E,_,T),D},encrypt:(b,_,T)=>{let[A,z]=p.decode(b),j=[];for(let Z=0;Z<t;Z++)j.push(Ns.encode(zu(r,T,Z,o)));let E=i(z),F=new Uint16Array(hr),D=[];for(let Z=0;Z<t;Z++){let P=zu(r,T,t+Z,s),N=new Uint16Array(hr);for(let I=0;I<t;I++){let O=TP(E.get(Z,I));Ds(N,im(O,j[I]))}Ds(P,Ns.decode(N)),D.push(P),Ds(F,im(A[Z],j[Z])),Ut(N)}E.clean();let H=zu(r,T,2*t,s);Ds(H,Ns.decode(F));let X=l.decode(_);return Ds(X,H),Ut(A,j,F,H),y.encode([D,X])},decrypt:(b,_)=>{let[T,A]=y.decode(b),z=m.decode(_),j=new Uint16Array(hr);for(let E=0;E<t;E++)Ds(j,im(z[E],Ns.encode(T[E])));return YV(A,Ns.decode(j)),Ut(j,z,T),l.encode(A)}}};function ox(e){let t=e7(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=zs("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=Xn(64))=>{Pe(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),y=a.encode([p,f,m,u.subarray(32)]);return Ut(p,m),{publicKey:f,secretKey:y}},getPublicKey:(u)=>{let[f,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=Xn(32))=>{Pe(u,s.publicKey,"publicKey"),Pe(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(kP(p)));if(!rm(m,p))throw Ut(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ut(m);let y=i.create().update(f).update(r(u)).digest(),g=t.encrypt(u,f,y.subarray(32,64));return Ut(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,f)=>{Pe(f,a.bytesLen,"secretKey"),Pe(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=r(f.subarray(p/2,m));if(!rm(y,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,b,_,T]=a.decode(f),A=t.decrypt(u,g),z=i.create().update(A).update(_).digest(),j=z.subarray(0,32),E=t.encrypt(b,A,z.subarray(32,64)),F=rm(u,E),D=n.create({dkLen:32}).update(T).update(u).digest();return Ut(A,E,!F?j:D),F?j:D}}}function t7(e,t,r){return Yn.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var sx={HASH256:Ps,HASH512:bP,KDF:Yn,XOF:IP,PRF:t7},xve=ox({...sx,...ix[512]}),Du=ox({...sx,...ix[768]}),AP=ox({...sx,...ix[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function r7(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=Xn(r.seed))=>{Pe(s,r.seed,"seed");let a=o.isLE?bo(s):yo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function ax(e,t=!1){let r=r7(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=Xn(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ut(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Lu(e,t){return zs(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function cx(e){return(t,r)=>e(t,{dkLen:r})}function n7(e,t,...r){let i=Lu(r,"seed"),n=Lu(r,"publicKey");if(e===void 0)e=i.bytesLen;Kt(e);function o(s){Pe(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=Xn(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ut(a),Ut(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function om(e,t,r,i,...n){let o=n7(e,r,...n),s=Lu(n,"cipherText"),a=Lu(n,"publicKey"),c=Lu(n,"msg");if(t===void 0)t=c.bytesLen;return Kt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=Xn(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((_,T)=>_.encapsulate(f[T],p[T])),y=m.map((_)=>_.sharedSecret),g=m.map((_)=>_.cipherText),b={sharedSecret:i(f,g,y),cipherText:s.encode(g)};return Ut(y,g),b},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(f[b],m[b]));return i(p,f,y)}}}function $P(e,t,r,i,n){return un(i),un(n),om(32,32,cx(i),(o,s,a)=>n(Nt(a[0],a[1],s[1],o[1],So(e))),t,r)}var Rve=$P("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Du,ax(YS,!0),Yn,Ps),Ove=$P("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",AP,ax(aP,!0),Yn,Ps);function i7(e,t,r,i,n){return un(i),un(n),om(32,32,cx(i),(o,s,a)=>{let c=Nt(a[0],a[1],s[0],o[0],s[1],o[1],So(e)),l=32,u=Nt(So("hybrid_prk"),c),f=lP(n,u),p=Nt(Ga(32,2),So("shared_secret"),So("")),m=uP(n,f,p,32);return Ut(f,p,u,c),m},t,r)}var CP=ax(sP),Pve=i7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Du,CP,Yn,em),o7=(()=>om(32,32,cx(Yn),(e,t,r)=>Ps(Nt(r[0],r[1],t[1],e[1],So("\\.//^\\"))),Du,CP))();function s7(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=Xn(i)){return Pe(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=Xn(i)){Pe(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ut(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function a7(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=s7(r,n,o,i),a=64,c=a+i;return om(32,32,(l)=>{Pe(l,32);let u=Yn(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Nt(f,p)},(l,u,f)=>Ps(Nt(f[0],f[1],u[1],l[1],So(e))),t,s)}var c7=(()=>a7("MLKEM768-P256",Du,YS,128))();var sm=o7,RP=c7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ct=(e,t,r)=>Yt(e,t,r),ux=At,tc=Cp,rr=(...e)=>pS(...e),rc=(e)=>mu(e),nc=uS,ic=(e)=>Ei(e),cm=BigInt(0),lx=BigInt(1);function Pi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function lm(e){if(typeof e==="bigint"){if(!am(e))throw RangeError("positive bigint expected, got "+e)}else ux(e);return e}function ei(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Bu(e){let t=lm(e).toString(16);return t.length&1?"0"+t:t}function OP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?cm:BigInt("0x"+e)}function Ls(e){return OP(Cp(e))}function An(e){return OP(Cp(ko(Yt(e)).reverse()))}function um(e,t){if(At(t),t===0)throw RangeError("zero length");e=lm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return mu(r.padStart(t*2,"0"))}function ju(e,t){return um(e,t).reverse()}function PP(e,t){if(e=ct(e),t=ct(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function ko(e){return Uint8Array.from(ct(e))}function dm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var am=(e)=>typeof e==="bigint"&&cm<=e;function l7(e,t,r){return am(e)&&am(t)&&am(r)&&t<=e&&e<r}function zi(e,t,r,i){if(!l7(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function oc(e){if(e<cm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>cm;e>>=lx,t+=1);return t}var Uu=(e)=>(lx<<BigInt(e))-lx;function zP(e,t,r){if(At(e,"hashLen"),At(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,rr(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,_=[];while(b<t){c=p();let T=c.slice();_.push(T),b+=c.length}return rr(..._)};return(b,_)=>{f(),m(b);let T=void 0;while((T=_(y()))===void 0)m();return f(),T}}function fn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var dx=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nr=BigInt(0),_t=BigInt(1),Bs=BigInt(2),BP=BigInt(3),jP=BigInt(4),UP=BigInt(5),u7=BigInt(7),qP=BigInt(8),d7=BigInt(9),ZP=BigInt(16);function gt(e,t){if(t<=nr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=nr?r:t+r}function pn(e,t,r){if(t<nr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >nr)i*=i,i%=r;return i}function NP(e,t){if(e===nr)throw Error("invert: expected non-zero number");if(t<=nr)throw Error("invert: expected positive modulus, got "+t);let r=gt(e,t),i=t,n=nr,o=_t,s=_t,a=nr;while(r!==nr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==_t)throw Error("invert: does not exist");return gt(n,t)}function fx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function MP(e,t){let r=e,i=(r.ORDER+_t)/jP,n=r.pow(t,i);return fx(r,n,t),n}function f7(e,t){let r=e,i=(r.ORDER-UP)/qP,n=r.mul(t,Bs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Bs),o),c=r.mul(s,r.sub(a,r.ONE));return fx(r,c,t),c}function p7(e){let t=fm(e),r=FP(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+u7)/ZP;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),y=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,f,y),f=l.cmov(m,p,g);let b=l.eql(l.sqr(f),c),_=l.cmov(u,f,b);return fx(l,_,c),_}}function FP(e){if(e<BP)throw Error("sqrt is not defined for small field");let t=e-_t,r=0;while(t%Bs===nr)t/=Bs,r++;let i=Bs,n=fm(e);while(DP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return MP;let o=n.pow(i,t),s=(t+_t)/Bs;return function(c,l){let u=c;if(u.is0(l))return l;if(DP(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,b=u.sqr(m);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===f)throw Error("Cannot find square root");let _=_t<<BigInt(f-g-1),T=u.pow(p,_);f=g,p=u.sqr(T),m=u.mul(m,p),y=u.mul(y,T)}return y}}function m7(e){if(e%jP===BP)return MP;if(e%qP===UP)return f7;if(e%ZP===d7)return p7(e);return FP(e)}var Ni=(e,t)=>(gt(e,t)&_t)===_t,h7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function px(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=h7.reduce((i,n)=>(i[n]="function",i),t);if(fn(e,r),ei(e.BYTES,"BYTES"),ei(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=_t)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function g7(e,t,r){let i=e;if(r<nr)throw Error("invalid exponent, negatives unsupported");if(r===nr)return i.ONE;if(r===_t)return t;let n=i.ONE,o=t;while(r>nr){if(r&_t)n=i.mul(n,o);o=i.sqr(o),r>>=_t}return n}function qu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function DP(e,t){let r=e,i=(r.ORDER-_t)/Bs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function y7(e,t){if(t!==void 0)ux(t);if(e<=nr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=oc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var LP=new WeakMap;class mx{ORDER;BITS;BYTES;isLE;ZERO=nr;ONE=_t;_lengths;_mod;constructor(e,t={}){if(e<=_t)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=y7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return gt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return nr<=e&&e<this.ORDER}is0(e){return e===nr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&_t)===_t}neg(e){return gt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return gt(e*e,this.ORDER)}add(e,t){return gt(e+t,this.ORDER)}sub(e,t){return gt(e-t,this.ORDER)}mul(e,t){return gt(e*t,this.ORDER)}pow(e,t){return g7(this,e,t)}div(e,t){return gt(e*NP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return NP(e,this.ORDER)}sqrt(e){let t=LP.get(this);if(!t)LP.set(this,t=m7(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?ju(e,this.BYTES):um(e,this.BYTES)}fromBytes(e,t=!1){ct(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?An(e):Ls(e);if(s)a=gt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return qu(this,e)}cmov(e,t,r){return Pi(r,"condition"),r?t:e}}Object.freeze(mx.prototype);function fm(e,t={}){return new mx(e,t)}function HP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=_t)throw Error("field order must be greater than 1");let t=oc(e-_t);return Math.ceil(t/8)}function hx(e){let t=HP(e);return t+Math.ceil(t/2)}function KP(e,t,r=!1){ct(e);let i=e.length,n=HP(t),o=Math.max(hx(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?An(e):Ls(e),a=gt(s,t-_t)+_t;return r?ju(a,n):um(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sc=BigInt(0),js=BigInt(1);function Zu(e,t){let r=t.negate();return e?r:t}function Us(e,t){let r=qu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function GP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function gx(e,t){GP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Uu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function JP(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=js;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var yx=new WeakMap,QP=new WeakMap;function bx(e){return QP.get(e)||1}function VP(e){if(e!==sc)throw Error("invalid wNAF")}class Mu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>sc){if(t&js)r=r.add(i);i=i.double(),t>>=js}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=gx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=gx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=JP(r,s,o);if(r=a,l)n=n.add(Zu(f,t[p]));else i=i.add(Zu(u,t[c]))}return VP(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=gx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===sc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=JP(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return VP(r),i}getPrecomputes(e,t,r){let i=yx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);yx.set(t,i)}}return i}cached(e,t,r){let i=bx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=bx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){GP(t,this.bits),QP.set(e,t),yx.delete(e)}hasCache(e){return bx(e)!==1}}function YP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>sc||i>sc){if(r&js)o=o.add(n);if(i&js)s=s.add(n);n=n.double(),r>>=js,i>>=js}return{p1:o,p2:s}}function WP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return px(t),t}else return fm(e,{isLE:r})}function pm(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>sc))throw Error(`CURVE.${c} must be positive bigint`)}let n=WP(t.p,r.Fp,i),o=WP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Fu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Hu(e,t){if(ei(e),ei(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function b7(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function S7(e){if(!nc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?dm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Sx(e,t,r,i){if(ct(e),ei(r),t=S7(t),t.length>255)t=i(rr(dm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=rr(t,Hu(t.length,1)),c=new Uint8Array(o),l=Hu(r,2),u=Array(s),f=i(rr(c,e,l,Hu(0,1),a));u[0]=i(rr(f,Hu(1,1),a));for(let m=1;m<s;m++){let y=[b7(f,u[m-1]),Hu(m+1,1),a];u[m]=i(rr(...y))}return rr(...u).slice(0,r)}var XP="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ez=(e,t)=>(e+(e>=0?t:-t)/rz)/t;function x7(e,t,r){zi("scalar",e,ti,r);let[[i,n],[o,s]]=t,a=ez(s*e,r),c=ez(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<ti,p=u<ti;if(f)l=-l;if(p)u=-u;let m=Uu(Math.ceil(oc(r)/2))+Eo;if(l<ti||l>=m||u<ti||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function wx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function xx(e,t){fn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Pi(r.lowS,"lowS"),Pi(r.prehash,"prehash"),r.format!==void 0)wx(r.format);return r}class tz extends Error{constructor(e=""){super(e)}}var $n={Err:tz,_tlv:{encode:(e,t)=>{let{Err:r}=$n;if(ei(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Bu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Bu(n.length/2|128):"";return Bu(e)+o+n+t},decode(e,t){let{Err:r}=$n;t=ct(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=$n;if(lm(e),e<ti)throw new t("integer: negative integers are not allowed");let r=Bu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=$n;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Ls(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=$n,n=ct(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=$n,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze($n._tlv);Object.freeze($n._int);Object.freeze($n);var ti=BigInt(0),Eo=BigInt(1),rz=BigInt(2),mm=BigInt(3),w7=BigInt(4);function nz(e,t={}){let r=pm("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;fn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=oz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(Z,P,N){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:O}=P.toAffine(),R=i.toBytes(I);if(Pi(N,"isCompressed"),N){f();let M=!i.isOdd(O);return rr(iz(M),R)}else return rr(Uint8Array.of(4),R,i.toBytes(O))}function m(Z){ct(Z,void 0,"Point");let{publicKey:P,publicKeyUncompressed:N}=u,I=Z.length,O=Z[0],R=Z.subarray(1);if(l&&I===1&&O===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(O===2||O===3)){let M=i.fromBytes(R);if(!i.isValid(M))throw Error("bad point: is not on curve, wrong x");let L=b(M),V;try{V=i.sqrt(L)}catch(ue){let C=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let k=i.isOdd(V);if((O&1)===1!==k)V=i.neg(V);return{x:M,y:V}}else if(I===N&&O===4){let M=i.BYTES,L=i.fromBytes(R.subarray(0,M)),V=i.fromBytes(R.subarray(M,M*2));if(!_(L,V))throw Error("bad point: is not on curve");return{x:L,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function b(Z){let P=i.sqr(Z),N=i.mul(P,Z);return i.add(i.add(N,i.mul(Z,o.a)),o.b)}function _(Z,P){let N=i.sqr(P),I=b(Z);return i.eql(N,I)}if(!_(o.Gx,o.Gy))throw Error("bad curve params: generator point");let T=i.mul(i.pow(o.a,mm),w7),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(T,A)))throw Error("bad curve params: a or b");function z(Z,P,N=!1){if(!i.isValid(P)||N&&i.is0(P))throw Error(`bad point coordinate ${Z}`);return P}function j(Z){if(!(Z instanceof D))throw Error("Weierstrass Point expected")}function E(Z){if(!c||!c.basises)throw Error("no endo");return x7(Z,c.basises,n.ORDER)}function F(Z,P,N,I,O){return N=new D(i.mul(N.X,Z),N.Y,N.Z),P=Zu(I,P),N=Zu(O,N),P.add(N)}class D{static BASE=new D(o.Gx,o.Gy,i.ONE);static ZERO=new D(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(Z,P,N){this.X=z("x",Z),this.Y=z("y",P,!0),this.Z=z("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(Z){let{x:P,y:N}=Z||{};if(!Z||!i.isValid(P)||!i.isValid(N))throw Error("invalid affine point");if(Z instanceof D)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(N))return D.ZERO;return new D(P,N,i.ONE)}static fromBytes(Z){let P=D.fromAffine(g(ct(Z,void 0,"point")));return P.assertValidity(),P}static fromHex(Z){return D.fromBytes(rc(Z))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(Z=8,P=!0){if(X.createCache(this,Z),!P)this.multiply(mm);return this}assertValidity(){let Z=this;if(Z.is0()){if(t.allowInfinityPoint&&i.is0(Z.X)&&i.eql(Z.Y,i.ONE)&&i.is0(Z.Z))return;throw Error("bad point: ZERO")}let{x:P,y:N}=Z.toAffine();if(!i.isValid(P)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!_(P,N))throw Error("bad point: equation left != right");if(!Z.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:Z}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(Z)}equals(Z){j(Z);let{X:P,Y:N,Z:I}=this,{X:O,Y:R,Z:M}=Z,L=i.eql(i.mul(P,M),i.mul(O,I)),V=i.eql(i.mul(N,M),i.mul(R,I));return L&&V}negate(){return new D(this.X,i.neg(this.Y),this.Z)}double(){let{a:Z,b:P}=o,N=i.mul(P,mm),{X:I,Y:O,Z:R}=this,M=i.ZERO,L=i.ZERO,V=i.ZERO,k=i.mul(I,I),te=i.mul(O,O),ue=i.mul(R,R),C=i.mul(I,O);return C=i.add(C,C),V=i.mul(I,R),V=i.add(V,V),M=i.mul(Z,V),L=i.mul(N,ue),L=i.add(M,L),M=i.sub(te,L),L=i.add(te,L),L=i.mul(M,L),M=i.mul(C,M),V=i.mul(N,V),ue=i.mul(Z,ue),C=i.sub(k,ue),C=i.mul(Z,C),C=i.add(C,V),V=i.add(k,k),k=i.add(V,k),k=i.add(k,ue),k=i.mul(k,C),L=i.add(L,k),ue=i.mul(O,R),ue=i.add(ue,ue),k=i.mul(ue,C),M=i.sub(M,k),V=i.mul(ue,te),V=i.add(V,V),V=i.add(V,V),new D(M,L,V)}add(Z){j(Z);let{X:P,Y:N,Z:I}=this,{X:O,Y:R,Z:M}=Z,L=i.ZERO,V=i.ZERO,k=i.ZERO,te=o.a,ue=i.mul(o.b,mm),C=i.mul(P,O),be=i.mul(N,R),Ee=i.mul(I,M),Ce=i.add(P,N),Re=i.add(O,R);Ce=i.mul(Ce,Re),Re=i.add(C,be),Ce=i.sub(Ce,Re),Re=i.add(P,I);let _e=i.add(O,M);return Re=i.mul(Re,_e),_e=i.add(C,Ee),Re=i.sub(Re,_e),_e=i.add(N,I),L=i.add(R,M),_e=i.mul(_e,L),L=i.add(be,Ee),_e=i.sub(_e,L),k=i.mul(te,Re),L=i.mul(ue,Ee),k=i.add(L,k),L=i.sub(be,k),k=i.add(be,k),V=i.mul(L,k),be=i.add(C,C),be=i.add(be,C),Ee=i.mul(te,Ee),Re=i.mul(ue,Re),be=i.add(be,Ee),Ee=i.sub(C,Ee),Ee=i.mul(te,Ee),Re=i.add(Re,Ee),C=i.mul(be,Re),V=i.add(V,C),C=i.mul(_e,Re),L=i.mul(Ce,L),L=i.sub(L,C),C=i.mul(Ce,be),k=i.mul(_e,k),k=i.add(k,C),new D(L,V,k)}subtract(Z){return j(Z),this.add(Z.negate())}is0(){return this.equals(D.ZERO)}multiply(Z){let{endo:P}=t;if(!n.isValidNot0(Z))throw RangeError("invalid scalar: out of range");let N,I,O=(R)=>X.cached(this,R,(M)=>Us(D,M));if(P){let{k1neg:R,k1:M,k2neg:L,k2:V}=E(Z),{p:k,f:te}=O(M),{p:ue,f:C}=O(V);I=te.add(C),N=F(P.beta,k,ue,R,L)}else{let{p:R,f:M}=O(Z);N=R,I=M}return Us(D,[N,I])[0]}multiplyUnsafe(Z){let{endo:P}=t,N=this,I=Z;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===ti||N.is0())return D.ZERO;if(I===Eo)return N;if(X.hasCache(this))return this.multiply(I);if(P){let{k1neg:O,k1:R,k2neg:M,k2:L}=E(I),{p1:V,p2:k}=YP(D,N,R,L);return F(P.beta,V,k,O,M)}else return X.unsafe(N,I)}toAffine(Z){let P=this,N=Z,{X:I,Y:O,Z:R}=P;if(i.eql(R,i.ONE))return{x:I,y:O};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(R);let L=i.mul(I,N),V=i.mul(O,N),k=i.mul(R,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(k,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}isTorsionFree(){let{isTorsionFree:Z}=t;if(s===Eo)return!0;if(Z)return Z(D,this);return X.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:Z}=t;if(s===Eo)return this;if(Z)return Z(D,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Eo)return this.is0();return this.clearCofactor().is0()}toBytes(Z=!0){return Pi(Z,"isCompressed"),this.assertValidity(),y(D,this,Z)}toHex(Z=!0){return tc(this.toBytes(Z))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,X=new Mu(D,t.endo?Math.ceil(H/2):H);if(H>=8)D.BASE.precompute(8);return Object.freeze(D.prototype),Object.freeze(D),D}function iz(e){return Uint8Array.of(e?2:3)}function oz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function v7(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?ic:t.randomBytes,n=Object.assign(oz(e.Fp,r),{seed:Math.max(hx(r.ORDER),16)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let _=m.length;if(y===!0&&_!==g)return!1;if(y===!1&&_!==b)return!1;return!!e.fromBytes(m)}catch(_){return!1}}function a(m){return m=m===void 0?i(n.seed):m,KP(ct(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,_=r._lengths;if(!nc(m))return;let T=ct(m,void 0,"key").length,A=T===g||T===b,z=T===y||!!_?.includes(T);if(A&&z)return;return A}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Fu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function sz(e,t,r={}){let i=t;ki(i),fn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?ic:r.randomBytes,o=r.hmac===void 0?(O,R)=>Vn(i,O,R):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:y}=v7(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*rz+Eo<s.ORDER;function _(O){let R=c>>Eo;return O>R}function T(O,R){if(!a.isValidNot0(R))throw Error(`invalid signature ${O}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function z(O,R){wx(R);let M=y.signature,L=R==="compact"?M:R==="recovered"?M+1:void 0;return ct(O,L)}class j{r;s;recovery;constructor(O,R,M){if(this.r=T("r",O),this.s=T("s",R),M!=null){if(A(),![0,1,2,3].includes(M))throw Error("invalid recovery id");this.recovery=M}Object.freeze(this)}static fromBytes(O,R=g.format){z(O,R);let M;if(R==="der"){let{r:te,s:ue}=$n.toSig(ct(O));return new j(te,ue)}if(R==="recovered")M=O[0],R="compact",O=O.subarray(1);let L=y.signature/2,V=O.subarray(0,L),k=O.subarray(L,L*2);return new j(a.fromBytes(V),a.fromBytes(k),M)}static fromHex(O,R){return this.fromBytes(rc(O),R)}assertRecovery(){let{recovery:O}=this;if(O==null)throw Error("invalid recovery id: must be present");return O}addRecoveryBit(O){return new j(this.r,this.s,O)}recoverPublicKey(O){let{r:R,s:M}=this,L=this.assertRecovery(),V=L===2||L===3?R+c:R;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let k=s.toBytes(V),te=e.fromBytes(rr(iz((L&1)===0),k)),ue=a.inv(V),C=F(ct(O,void 0,"msgHash")),be=a.create(-C*ue),Ee=a.create(M*ue),Ce=e.BASE.multiplyUnsafe(be).add(te.multiplyUnsafe(Ee));if(Ce.is0())throw Error("invalid recovery: point at infinify");return Ce.assertValidity(),Ce}hasHighS(){return _(this.s)}toBytes(O=g.format){if(wx(O),O==="der")return rc($n.hexFromSig(this));let{r:R,s:M}=this,L=a.toBytes(R),V=a.toBytes(M);if(O==="recovered")return A(),rr(Uint8Array.of(this.assertRecovery()),L,V);return rr(L,V)}toHex(O){return tc(this.toBytes(O))}}Object.freeze(j.prototype),Object.freeze(j);let E=r.bits2int===void 0?function(R){if(R.length>8192)throw Error("input is too large");let M=Ls(R),L=R.length*8-l;return L>0?M>>BigInt(L):M}:r.bits2int,F=r.bits2int_modN===void 0?function(R){return a.create(E(R))}:r.bits2int_modN,D=Uu(l);function H(O){return zi("num < 2^"+l,O,ti,D),a.toBytes(O)}function X(O,R){return ct(O,void 0,"message"),R?ct(i(O),void 0,"prehashed message"):O}function Z(O,R,M){let{lowS:L,prehash:V,extraEntropy:k}=xx(M,g);O=X(O,V);let te=F(O),ue=a.fromBytes(R);if(!a.isValidNot0(ue))throw Error("invalid private key");let C=[H(ue),H(te)];if(k!=null&&k!==!1){let Re=k===!0?n(y.secretKey):k;C.push(ct(Re,void 0,"extraEntropy"))}let be=rr(...C),Ee=te;function Ce(Re){let _e=E(Re);if(!a.isValidNot0(_e))return;let Je=a.inv(_e),Ne=e.BASE.multiply(_e).toAffine(),Ye=a.create(Ne.x);if(Ye===ti)return;let mt=a.create(Je*a.create(Ee+Ye*ue));if(mt===ti)return;let zt=(Ne.x===Ye?0:2)|Number(Ne.y&Eo),dr=mt;if(L&&_(mt))dr=a.neg(mt),zt^=1;return new j(Ye,dr,b?void 0:zt)}return{seed:be,k2sig:Ce}}function P(O,R,M={}){let{seed:L,k2sig:V}=Z(O,R,M);return zP(i.outputLen,a.BYTES,o)(L,V).toBytes(M.format)}function N(O,R,M,L={}){let{lowS:V,prehash:k,format:te}=xx(L,g);if(M=ct(M,void 0,"publicKey"),R=X(R,k),!nc(O)){let ue=O instanceof j?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}z(O,te);try{let ue=j.fromBytes(O,te),C=e.fromBytes(M);if(V&&ue.hasHighS())return!1;let{r:be,s:Ee}=ue,Ce=F(R),Re=a.inv(Ee),_e=a.create(Ce*Re),Je=a.create(be*Re),Ne=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(Je));if(Ne.is0())return!1;return a.create(Ne.x)===be}catch(ue){return!1}}function I(O,R,M={}){let{prehash:L}=xx(M,g);return R=X(R,L),j.fromBytes(O,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:P,verify:N,recoverPublicKey:I,Signature:j,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var k7=nz(_7),ac=sz(k7,$t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Io=BigInt(0),jr=BigInt(1),vx=BigInt(2),E7=BigInt(8);function I7(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function az(e,t={}){let r=t,i=pm("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;fn(r,{},{uvRatio:"function"});let c=vx<<BigInt(o.BYTES*8)-jr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(_){return{isValid:!1,value:Io}}}:r.uvRatio;if(!I7(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,b,_=!1){let T=_?jr:Io;return zi("coordinate "+g,b,T,c),b}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,jr,l(s.Gx*s.Gy));static ZERO=new m(Io,jr,jr,Io);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,_,T){this.X=f("x",g),this.Y=f("y",b),this.Z=f("z",_,!0),this.T=f("t",T),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:b,y:_}=g||{};return f("x",b),f("y",_),new m(b,_,jr,l(b*_))}static fromBytes(g,b=!1){let _=n.BYTES,{a:T,d:A}=s;g=ko(ct(g,_,"point")),Pi(b,"zip215");let z=ko(g),j=g[_-1];z[_-1]=j&-129;let E=An(z),F=b?c:n.ORDER;zi("point.y",E,Io,F);let D=l(E*E),H=l(D-jr),X=l(A*D-T),{isValid:Z,value:P}=u(H,X);if(!Z)throw Error("bad point: invalid y coordinate");let N=(P&jr)===jr,I=(j&128)!==0;if(!b&&P===Io&&I)throw Error("bad point: x=0 and x_0=1");if(I!==N)P=l(-P);return m.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return m.fromBytes(rc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(vx);return this}assertValidity(){let g=this,{a:b,d:_}=s;if(g.is0())throw Error("bad point: ZERO");let{X:T,Y:A,Z:z,T:j}=g,E=l(T*T),F=l(A*A),D=l(z*z),H=l(D*D),X=l(E*b),Z=l(D*l(X+F)),P=l(H+l(_*l(E*F)));if(Z!==P)throw Error("bad point: equation left != right (1)");let N=l(T*A),I=l(z*j);if(N!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:b,Y:_,Z:T}=this,{X:A,Y:z,Z:j}=g,E=l(b*j),F=l(A*T),D=l(_*j),H=l(z*T);return E===F&&D===H}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:_,Z:T}=this,A=l(b*b),z=l(_*_),j=l(vx*l(T*T)),E=l(g*A),F=b+_,D=l(l(F*F)-A-z),H=E+z,X=H-j,Z=E-z,P=l(D*X),N=l(H*Z),I=l(D*Z),O=l(X*H);return new m(P,N,O,I)}add(g){p(g);let{a:b,d:_}=s,{X:T,Y:A,Z:z,T:j}=this,{X:E,Y:F,Z:D,T:H}=g,X=l(T*E),Z=l(A*F),P=l(j*_*H),N=l(z*D),I=l((T+A)*(E+F)-X-Z),O=N-P,R=N+P,M=l(Z-b*X),L=l(I*O),V=l(R*M),k=l(I*M),te=l(O*R);return new m(L,V,te,k)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:_}=y.cached(this,g,(T)=>Us(m,T));return Us(m,[b,_])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===Io)return m.ZERO;if(this.is0()||g===jr)return this;return y.unsafe(this,g,(b)=>Us(m,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,_=g,{X:T,Y:A,Z:z}=b,j=b.is0();if(_==null)_=j?E7:n.inv(z);let E=l(T*_),F=l(A*_),D=n.mul(z,_);if(j)return{x:Io,y:jr};if(D!==jr)throw Error("invZ was invalid");return{x:E,y:F}}clearCofactor(){if(a===jr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),_=n.toBytes(b);return _[_.length-1]|=g&jr?128:0,_}toHex(){return tc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new Mu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class _x{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){dx()}static fromHex(e){dx()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return tc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ku=BigInt(0),cc=BigInt(1),hm=BigInt(2);function T7(e){return fn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function cz(e){let t=T7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?ic:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?hm**BigInt(254):hm**BigInt(447),y=a?BigInt(8)*hm**BigInt(251)-cc:BigInt(4)*hm**BigInt(445)-cc,g=m+y+cc,b=(I)=>gt(I,r),_=T(f);function T(I){return ju(b(I),u)}function A(I){let O=ko(ct(I,u,"uCoordinate"));if(a)O[31]&=127;return b(An(O))}function z(I){return An(n(ko(ct(I,u,"scalar"))))}function j(I,O){let R=X(A(O),z(I));if(R===Ku)throw Error("invalid private or public key received");return T(R)}function E(I){return j(I,_)}let F=E,D=j;function H(I,O,R){let M=b(I*(O-R));return O=b(O-M),R=b(R+M),{x_2:O,x_3:R}}function X(I,O){zi("u",I,Ku,r),zi("scalar",O,m,g);let R=O,M=I,L=cc,V=Ku,k=I,te=cc,ue=Ku;for(let be=BigInt(l-1);be>=Ku;be--){let Ee=R>>be&cc;ue^=Ee,{x_2:L,x_3:k}=H(ue,L,k),{x_2:V,x_3:te}=H(ue,V,te),ue=Ee;let Ce=L+V,Re=b(Ce*Ce),_e=L-V,Je=b(_e*_e),Ne=Re-Je,Ye=k+te,mt=k-te,zt=b(mt*Ce),dr=b(Ye*_e),Kr=zt+dr,Jr=zt-dr;k=b(Kr*Kr),te=b(M*b(Jr*Jr)),L=b(Re*Je),V=b(Ne*(Re+b(p*Ne)))}({x_2:L,x_3:k}=H(ue,L,k)),{x_2:V,x_3:te}=H(ue,V,te);let C=o(V);return b(L*C)}let Z={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,ct(I,Z.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze(Z),Object.freeze(N),Object.freeze({keygen:Fu(P,F),getSharedSecret:D,getPublicKey:F,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:_.slice(),lengths:Z})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var A7=BigInt(0),Di=BigInt(1),lz=BigInt(2),$7=BigInt(3),C7=BigInt(5),R7=BigInt(8),Zs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Tx=(()=>({p:Zs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:R7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function fz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Zs,a=e*e%o*e%o,c=pn(a,lz,o)*a%o,l=pn(c,Di,o)*e%o,u=pn(l,C7,o)*l%o,f=pn(u,t,o)*u%o,p=pn(f,r,o)*f%o,m=pn(p,i,o)*p%o,y=pn(m,n,o)*m%o,g=pn(y,n,o)*m%o,b=pn(g,t,o)*u%o;return{pow_p_5_8:pn(b,lz,o)*e%o,b2:a}}function O7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var kx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Ax(e,t){let r=Zs,i=gt(t*t*t,r),n=gt(i*i*t,r),o=fz(e*n).pow_p_5_8,s=gt(e*i*o,r),a=gt(t*s*s,r),c=s,l=gt(s*kx,r),u=a===e,f=a===gt(-e,r),p=a===gt(-e*kx,r);if(u)s=c;if(f||p)s=l;if(Ni(s,r))s=gt(-s,r);return{isValid:u||f,value:s}}var qs=az(Tx,{uvRatio:Ax}),To=(()=>qs.Fp)(),pz=(()=>qs.Fn)();var gm=(()=>{let e=Zs;return cz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=fz(t);return gt(pn(r,$7,e)*i,e)},adjustScalarBytes:O7})})();var Ex=kx,P7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),z7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),N7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),D7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),uz=(e)=>Ax(Di,e),L7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Ix=(e)=>To.create(An(e)&L7);function dz(e){let{d:t}=Tx,r=Zs,i=(_)=>To.create(_),n=i(Ex*e*e),o=i((n+Di)*N7),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Ax(o,a),u=i(l*e);if(!Ni(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Di)*D7-a),p=l*l,m=i((l+l)*a),y=i(f*P7),g=i(Di-p),b=i(Di+p);return new qs(i(m*b),i(g*y),i(y*b),i(m*g))}class Tr extends _x{static BASE=(()=>new Tr(qs.BASE))();static ZERO=(()=>new Tr(qs.ZERO))();static Fp=(()=>To)();static Fn=(()=>pz)();constructor(e){super(e)}static fromAffine(e){return new Tr(qs.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){Yt(e,32);let{a:t,d:r}=Tx,i=Zs,n=(A)=>To.create(A),o=Ix(e);if(!PP(To.toBytes(o),e)||Ni(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Di+t*s),c=n(Di-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=uz(n(f*u)),y=n(m*c),g=n(m*y*f),b=n((o+o)*y);if(Ni(b,i))b=n(-b);let _=n(a*g),T=n(b*_);if(!p||Ni(T,i)||_===A7)throw Error("invalid ristretto255 encoding 2");return new Tr(new qs(b,_,Di,T))}static fromHex(e){return Tr.fromBytes(mu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Zs,o=(g)=>To.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=uz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(Ni(i*p,n)){let g=o(t*Ex),b=o(e*Ex);e=g,t=b,m=o(u*z7)}else m=f;if(Ni(e*p,n))t=o(-t);let y=o((r-t)*m);if(Ni(y,n))y=o(-y);return To.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>To.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var B7=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Sx(e,r,64,zp);return B7.deriveToCurve(i)},hashToScalar(e,t={DST:XP}){let r=Sx(e,t.DST,64,zp);return pz.create(An(r))},deriveToCurve(e){Yt(e,64);let t=Ix(e.subarray(0,32)),r=dz(t),i=Ix(e.subarray(32,64)),n=dz(i);return new Tr(r.add(n))}});var mz=!1,j7=!1;async function hz(e,t){if(j7)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function ym(e,t){return await hz(async()=>{let r=$x(e)?e:await q7(e),i=await crypto.subtle.importKey("raw",Z7(t),{name:"X25519"},mz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if($x(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return gm.scalarMult(e,t)})}async function Ju(e){return await hz(async()=>ym(e,gm.GuBytes),()=>{if($x(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return gm.scalarMultBase(e)})}var U7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function q7(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...U7,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},mz,["deriveBits"])}function $x(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function Z7(e){return e}class Cx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),F7(Ms(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Ms(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Ms(this.transcript)}}}function F7(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Ms(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function lc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function bm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Rx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function gz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function yz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Ms(i),s=o.subarray(0,t),a=lc(e,o.subarray(t));return{data:s,rest:a}}class ri{args;body;constructor(e,t){this.args=e,this.body=t}}async function H7(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=pr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Ms(i);return{s:new ri(r,n)}}async function bz(e){let t=new Cx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await H7(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=pr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:lc(e,a)}}}function Ox(e){let t=[];t.push(`age-encryption.org/v1
+`)}function SR(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function ft(e,t){let r=e[t];return typeof r==="string"?r:void 0}function vs(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Tp={name:"@rizom/ops",version:"0.2.0-alpha.595",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/auth-service":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as rW,mkdirSync as nW,readFileSync as Gx,writeFileSync as Qx}from"fs";import{dirname as iW,join as Az}from"path";function uS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function At(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function Yt(e,t,r=""){let i=uS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function ki(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(At(e.outputLen),At(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Ma(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Ap(e,t){Yt(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function $p(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function kr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Fa(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function En(e,t){return e<<32-t|e>>>t}function Xe(e,t){return e<<t|e>>>32-t>>>0}var $9=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function C9(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function R9(e){for(let t=0;t<e.length;t++)e[t]=C9(e[t]);return e}var dS=$9?(e)=>e:R9,wR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),O9=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Cp(e){if(Yt(e),wR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=O9[e[r]];return t}var _i={_0:48,_9:57,A:65,F:70,a:97,f:102};function xR(e){if(e>=_i._0&&e<=_i._9)return e-_i._0;if(e>=_i.A&&e<=_i.F)return e-(_i.A-10);if(e>=_i.a&&e<=_i.f)return e-(_i.a-10);return}function mu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(wR)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=xR(e.charCodeAt(o)),a=xR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function P9(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function fS(e,t=""){if(typeof e==="string")return P9(e);return Yt(e,void 0,t)}function pS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Yt(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Rp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function mS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ei(e=32){At(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var hS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class gS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(ki(e),Yt(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),kr(i)}update(e){return Ma(this),this.iHash.update(e),this}digestInto(e){Ma(this),Ap(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Vn=(()=>{let e=(t,r,i)=>new gS(t,r).update(i).digest();return e.create=(t,r)=>new gS(t,r),e})();function hu(e,t,r){if(ki(e),r===void 0)r=new Uint8Array(e.outputLen);return Vn(e,r,t)}var yS=Uint8Array.of(0),vR=Uint8Array.of();function bS(e,t,r,i=32){ki(e),At(i,"length"),Yt(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=vR;else Yt(r,void 0,"info");let s=new Uint8Array(o*n),a=Vn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)yS[0]=u+1,c.update(u===0?vR:l).update(r).update(yS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),kr(l,yS),s.slice(0,i)}var lo=(e,t,r,i,n)=>bS(e,hu(e,t,r),i,n);function _R(e,t,r){return e&t^~e&r}function kR(e,t,r){return e&t^e&r^t&r}class Op{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Fa(this.buffer)}update(e){Ma(this),Yt(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Fa(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ma(this),Ap(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,kr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Fa(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ii=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var Xt=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Pp=BigInt(4294967295),ER=BigInt(32);function z9(e,t=!1){if(t)return{h:Number(e&Pp),l:Number(e>>ER&Pp)};return{h:Number(e>>ER&Pp)|0,l:Number(e&Pp)|0}}function IR(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=z9(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var SS=(e,t,r)=>e>>>r,xS=(e,t,r)=>e<<32-r|t>>>r,_s=(e,t,r)=>e>>>r|t<<32-r,ks=(e,t,r)=>e<<32-r|t>>>r,gu=(e,t,r)=>e<<64-r|t>>>r-32,yu=(e,t,r)=>e>>>r-32|t<<64-r;function Wn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var TR=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),AR=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,$R=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),CR=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,RR=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),OR=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var D9=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),uo=new Uint32Array(64);class PR extends Op{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)uo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=uo[u-15],p=uo[u-2],m=En(f,7)^En(f,18)^f>>>3,y=En(p,17)^En(p,19)^p>>>10;uo[u]=y+uo[u-7]+m+uo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=En(s,6)^En(s,11)^En(s,25),p=l+f+_R(s,a,c)+D9[u]+uo[u]|0,y=(En(r,2)^En(r,13)^En(r,22))+kR(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){kr(uo)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),kr(this.buffer)}}class zR extends PR{A=Ii[0]|0;B=Ii[1]|0;C=Ii[2]|0;D=Ii[3]|0;E=Ii[4]|0;F=Ii[5]|0;G=Ii[6]|0;H=Ii[7]|0;constructor(){super(32)}}var NR=(()=>IR(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),L9=(()=>NR[0])(),B9=(()=>NR[1])(),fo=new Uint32Array(80),po=new Uint32Array(80);class DR extends Op{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let T=0;T<16;T++,t+=4)fo[T]=e.getUint32(t),po[T]=e.getUint32(t+=4);for(let T=16;T<80;T++){let A=fo[T-15]|0,z=po[T-15]|0,j=_s(A,z,1)^_s(A,z,8)^SS(A,z,7),E=ks(A,z,1)^ks(A,z,8)^xS(A,z,7),F=fo[T-2]|0,D=po[T-2]|0,H=_s(F,D,19)^gu(F,D,61)^SS(F,D,6),X=ks(F,D,19)^yu(F,D,61)^xS(F,D,6),Z=$R(E,X,po[T-7],po[T-16]),P=CR(Z,j,H,fo[T-7],fo[T-16]);fo[T]=P|0,po[T]=Z|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:_}=this;for(let T=0;T<80;T++){let A=_s(u,f,14)^_s(u,f,18)^gu(u,f,41),z=ks(u,f,14)^ks(u,f,18)^yu(u,f,41),j=u&p^~u&y,E=f&m^~f&g,F=RR(_,z,E,B9[T],po[T]),D=OR(F,b,A,j,L9[T],fo[T]),H=F|0,X=_s(r,i,28)^gu(r,i,34)^gu(r,i,39),Z=ks(r,i,28)^yu(r,i,34)^yu(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,_=g|0,y=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=Wn(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=TR(H,Z,N);r=AR(I,D,X,P),i=I|0}({h:r,l:i}=Wn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Wn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Wn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Wn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=Wn(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=Wn(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=Wn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:_}=Wn(this.Hh|0,this.Hl|0,b|0,_|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,y,g,b,_)}roundClean(){kr(fo,po)}destroy(){this.destroyed=!0,kr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class LR extends DR{Ah=Xt[0]|0;Al=Xt[1]|0;Bh=Xt[2]|0;Bl=Xt[3]|0;Ch=Xt[4]|0;Cl=Xt[5]|0;Dh=Xt[6]|0;Dl=Xt[7]|0;Eh=Xt[8]|0;El=Xt[9]|0;Fh=Xt[10]|0;Fl=Xt[11]|0;Gh=Xt[12]|0;Gl=Xt[13]|0;Hh=Xt[14]|0;Hl=Xt[15]|0;constructor(){super(64)}}var $t=mS(()=>new zR,hS(1));var zp=mS(()=>new LR,hS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function jp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function _S(e){if(!jp(e))throw TypeError("Uint8Array expected")}function ZR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function MR(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function mo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Su(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Dp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Lp(e,t){if(!ZR(!0,t))throw TypeError(`${e}: array of strings expected`)}function kS(e,t){if(!ZR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Vr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Wr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Lp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Dp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Dp(n),n.map((o)=>{mo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function Gr(e=""){return mo("join",e),{encode:(t)=>(Lp("join.decode",t),t.join(e)),decode:(t)=>(mo("join.decode",t),t.split(e))}}function Up(e,t="="){return Su(e),mo("padding",t),{encode(r){Lp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Lp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function FR(e){return MR(e),{encode:(t)=>t,decode:(t)=>e(t)}}function BR(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Dp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Su(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let y=Math.floor(m);if(o[l]=y,!Number.isSafeInteger(y)||y*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!y)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var HR=(e,t)=>t===0?e:HR(t,e%t),Bp=(e,t)=>e+(t-HR(e,t)),Np=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function wS(e,t,r,i){if(Dp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Bp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Bp(t,r)}`);let n=0,o=0,s=Np[t],a=Np[r]-1,c=[];for(let l of e){if(Su(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Np[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function j9(e){Su(e);let t=256;return{encode:(r)=>{if(!jp(r))throw TypeError("radix.encode input should be Uint8Array");return BR(Array.from(r),t,e)},decode:(r)=>(kS("radix.decode",r),Uint8Array.from(BR(r,e,t)))}}function cn(e,t=!1){if(Su(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Bp(8,e)>32||Bp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!jp(r))throw TypeError("radix2.encode input should be Uint8Array");return wS(Array.from(r),8,e,!t)},decode:(r)=>(kS("radix2.decode",r),Uint8Array.from(wS(r,e,8,t)))}}function jR(e){return MR(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var Pxe=Object.freeze(Vr(cn(4),Wr("0123456789ABCDEF"),Gr(""))),zxe=Object.freeze(Vr(cn(5),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Up(5),Gr(""))),Nxe=Object.freeze(Vr(cn(5),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Gr(""))),Dxe=Object.freeze(Vr(cn(5),Wr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Up(5),Gr(""))),Lxe=Object.freeze(Vr(cn(5),Wr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Gr(""))),Bxe=Object.freeze(Vr(cn(5),Wr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Gr(""),FR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),KR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),U9=/[\t\n\f\r ]/,JR=(e,t)=>{mo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&U9.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},ES=Object.freeze(KR?{encode(e){return _S(e),e.toBase64()},decode(e){return JR(e,!1)}}:Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Up(6),Gr(""))),pr=Object.freeze(Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Gr(""))),jxe=Object.freeze(KR?{encode(e){return _S(e),e.toBase64({alphabet:"base64url"})},decode(e){return JR(e,!0)}}:Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Up(6),Gr(""))),Uxe=Object.freeze(Vr(cn(6),Wr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Gr(""))),IS=(e)=>Vr(j9(58),Wr(e),Gr("")),qxe=Object.freeze(IS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Zxe=Object.freeze(IS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),Mxe=Object.freeze(IS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var vS=Vr(Wr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Gr("")),UR=[996825010,642813549,513874426,1027748829,705979059];function bu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<UR.length;i++)if((t>>i&1)===1)r^=UR[i];return r}function qR(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=bu(n)^s>>5}n=bu(n);for(let o=0;o<i;o++)n=bu(n)^e.charCodeAt(o)&31;for(let o of t)n=bu(n)^o;for(let o=0;o<6;o++)n=bu(n);return n^=r,vS.encode(wS([n%Np[30]],30,5,!1))}function VR(e){let t=e==="bech32"?1:734539939,r=cn(5),i=r.decode,n=r.encode,o=jR(i);function s(f,p,m=90){if(mo("bech32.encode prefix",f),jp(p))p=Array.from(p);kS("bech32.encode",p);let y=f.length;if(y===0)throw TypeError(`Invalid prefix length ${y}`);let g=y+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let b=f.toLowerCase(),_=qR(b,p,t);return`${b}1${vS.encode(p)}${_}`}function a(f,p=90){mo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let y=f.toLowerCase();if(f!==y&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=y.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let b=y.slice(0,g),_=y.slice(g+1);if(_.length<6)throw Error("Data must be at least 6 characters long");let T=vS.decode(_).slice(0,-6),A=qR(b,T,t);if(!_.endsWith(A))throw Error(`Invalid checksum in ${f}: expected "${A}"`);return{prefix:b,words:T}}let c=jR(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var Qr=Object.freeze(VR("bech32")),Fxe=Object.freeze(VR("bech32m"));var q9=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Z9={encode(e){return _S(e),e.toHex()},decode(e){return mo("hex",e),Uint8Array.fromHex(e)}},Hxe=Object.freeze(q9?Z9:Vr(cn(4),Wr("0123456789abcdef"),Gr(""),FR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function F9(e,t,r,i){ki(e);let n=Rp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(At(o,"c"),At(s,"dkLen"),At(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=fS(t,"password"),l=fS(r,"salt"),u=new Uint8Array(s),f=Vn.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function H9(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return kr(n),r}function TS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=F9(e,t,r,i),l,u=new Uint8Array(4),f=Fa(u),p=new Uint8Array(a.outputLen);for(let m=1,y=0;y<o;m++,y+=a.outputLen){let g=s.subarray(y,y+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let b=1;b<n;b++){a._cloneInto(l).update(p).digestInto(p);for(let _=0;_<g.length;_++)g[_]^=p[_]}}return H9(a,c,s,l,p)}function WR(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],y=e[t++]^r[i++],g=e[t++]^r[i++],b=e[t++]^r[i++],_=e[t++]^r[i++],T=e[t++]^r[i++],A=e[t++]^r[i++],z=e[t++]^r[i++],j=e[t++]^r[i++],E=s,F=a,D=c,H=l,X=u,Z=f,P=p,N=m,I=y,O=g,R=b,M=_,L=T,V=A,k=z,te=j;for(let ue=0;ue<8;ue+=2)X^=Xe(E+L|0,7),I^=Xe(X+E|0,9),L^=Xe(I+X|0,13),E^=Xe(L+I|0,18),O^=Xe(Z+F|0,7),V^=Xe(O+Z|0,9),F^=Xe(V+O|0,13),Z^=Xe(F+V|0,18),k^=Xe(R+P|0,7),D^=Xe(k+R|0,9),P^=Xe(D+k|0,13),R^=Xe(P+D|0,18),H^=Xe(te+M|0,7),N^=Xe(H+te|0,9),M^=Xe(N+H|0,13),te^=Xe(M+N|0,18),F^=Xe(E+H|0,7),D^=Xe(F+E|0,9),H^=Xe(D+F|0,13),E^=Xe(H+D|0,18),P^=Xe(Z+X|0,7),N^=Xe(P+Z|0,9),X^=Xe(N+P|0,13),Z^=Xe(X+N|0,18),M^=Xe(R+O|0,7),I^=Xe(M+R|0,9),O^=Xe(I+M|0,13),R^=Xe(O+I|0,18),L^=Xe(te+k|0,7),V^=Xe(L+te|0,9),k^=Xe(V+L|0,13),te^=Xe(k+V|0,18);n[o++]=s+E|0,n[o++]=a+F|0,n[o++]=c+D|0,n[o++]=l+H|0,n[o++]=u+X|0,n[o++]=f+Z|0,n[o++]=p+P|0,n[o++]=m+N|0,n[o++]=y+I|0,n[o++]=g+O|0,n[o++]=b+R|0,n[o++]=_+M|0,n[o++]=T+L|0,n[o++]=A+V|0,n[o++]=z+k|0,n[o++]=j+te|0}function AS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(WR(r,s,e,t,r,o),a>0)s+=16;WR(r,o,e,t+=16,r,s)}}function K9(e,t,r){let i=Rp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(At(n,"N"),At(o,"r"),At(s,"p"),At(a,"dkLen"),At(c,"asyncTick"),At(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let y=f*(n+s+1);if(y>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+y+", maxmem="+l);let g=TS($t,e,t,{c:1,dkLen:f*s}),b=$p(g),_=$p(new Uint8Array(f*n)),T=$p(new Uint8Array(f)),A=()=>{};if(u){let z=2*n*s,j=Math.max(Math.floor(z/1e4),1),E=0;A=()=>{if(E++,u&&(!(E%j)||E===z))u(E/z)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:_,B32:b,B:g,tmp:T,blockMixCb:A,asyncTick:c}}function J9(e,t,r,i,n){let o=TS($t,e,r,{c:1,dkLen:t});return kr(r,i,n),o}function $S(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=K9(e,t,r);dS(l);for(let m=0;m<o;m++){let y=a*m;for(let g=0;g<a;g++)c[g]=l[y+g];for(let g=0,b=0;g<i-1;g++)AS(c,b,c,b+=a,n),p();AS(c,(i-1)*a,l,y,n),p();for(let g=0;g<i;g++){let b=(l[y+a-16]&i-1)>>>0;for(let _=0;_<a;_++)f[_]=l[y+_]^c[b*a+_];AS(f,0,l,y,n),p()}}return dS(l),J9(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function V9(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function qp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Ha(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function jt(e,t,r=""){let i=V9(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function CS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function GR(e,t,r=!1){jt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!Ka(e))throw Error("invalid output, must be aligned")}function Gn(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function In(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function W9(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Es=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),G9=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var Q9=(e)=>{for(let t=0;t<e.length;t++)e[t]=G9(e[t]);return e},Ti=Es?(e)=>e:Q9;function QR(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function YR(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function XR(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var eO=(e,t)=>{function r(i,...n){if(jt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];jt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)jt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");jt(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,jt(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(jt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function xu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(jt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!Ka(t))throw Error("invalid output, must be aligned");return t}function tO(e,t,r){Ha(e),Ha(t),qp(r);let i=new Uint8Array(16),n=W9(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function Ka(e){return e.byteOffset%4===0}function Ja(e){return Uint8Array.from(jt(e))}var nO=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),Y9=(()=>Ti(Gn(nO("expand 16-byte k"))))(),X9=(()=>Ti(Gn(nO("expand 32-byte k"))))();function et(e,t){return e<<t|e>>>32-t}var wu=64,eV=16,RS=(()=>4294967295)(),rO=Uint32Array.of();function tV(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(wu),u=Gn(l),f=Es&&Ka(n)&&Ka(o),p=f?Gn(n):rO,m=f?Gn(o):rO;if(!Es){for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),Ti(u),s>=RS)throw Error("arx: counter overflow");let g=Math.min(wu,c-y);for(let b=0,_;b<g;b++)_=y+b,o[_]=n[_]^l[b];y+=g}return}for(let y=0;y<c;s++){if(e(t,r,i,u,s,a),s>=RS)throw Error("arx: counter overflow");let g=Math.min(wu,c-y);if(f&&g===wu){let b=y/4;if(y%4!==0)throw Error("arx: invalid block position");for(let _=0,T;_<eV;_++)T=b+_,m[T]=p[T]^u[_];y+=wu;continue}for(let b=0,_;b<g;b++)_=y+b,o[_]=n[_]^l[b];y+=g}}function iO(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=QR({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Ha(n),Ha(s),qp(o),qp(r),(a,c,l,u,f=0)=>{jt(a,void 0,"key"),jt(c,void 0,"nonce"),jt(l,void 0,"data");let p=l.length;if(u=xu(p,u,!1),Ha(f),f<0||f>=RS)throw Error("arx: counter overflow");let m=[],y=a.length,g,b;if(y===32)m.push(g=Ja(a)),b=X9;else if(y===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),b=Y9,m.push(g);else throw jt(a,32,"arx key"),Error("invalid key size");if(!Es||!Ka(c))m.push(c=Ja(c));let _=Gn(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let z=c.subarray(0,16);if(Es)i(b,_,Gn(z),_);else{let j=Ti(Uint32Array.from(b));i(j,_,Gn(z),_),In(j),Ti(_)}c=c.subarray(16)}else if(!Es)Ti(_);let T=16-n;if(T!==c.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let z=new Uint8Array(12);z.set(c,o?0:12-c.length),c=z,m.push(c)}let A=Ti(Gn(c));try{return tV(e,b,_,A,l,u,f,s),u}finally{In(...m)}}}function er(e,t){return e[t++]&255|(e[t++]&255)<<8}class oO{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ja(jt(e,32,"key"));let t=er(e,0),r=er(e,2),i=er(e,4),n=er(e,6),o=er(e,8),s=er(e,10),a=er(e,12),c=er(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=er(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],y=o[8],g=o[9],b=er(e,t+0),_=er(e,t+2),T=er(e,t+4),A=er(e,t+6),z=er(e,t+8),j=er(e,t+10),E=er(e,t+12),F=er(e,t+14),D=n[0]+(b&8191),H=n[1]+((b>>>13|_<<3)&8191),X=n[2]+((_>>>10|T<<6)&8191),Z=n[3]+((T>>>7|A<<9)&8191),P=n[4]+((A>>>4|z<<12)&8191),N=n[5]+(z>>>1&8191),I=n[6]+((z>>>14|j<<2)&8191),O=n[7]+((j>>>11|E<<5)&8191),R=n[8]+((E>>>8|F<<8)&8191),M=n[9]+(F>>>5|i),L=0,V=L+D*s+H*(5*g)+X*(5*y)+Z*(5*m)+P*(5*p);L=V>>>13,V&=8191,V+=N*(5*f)+I*(5*u)+O*(5*l)+R*(5*c)+M*(5*a),L+=V>>>13,V&=8191;let k=L+D*a+H*s+X*(5*g)+Z*(5*y)+P*(5*m);L=k>>>13,k&=8191,k+=N*(5*p)+I*(5*f)+O*(5*u)+R*(5*l)+M*(5*c),L+=k>>>13,k&=8191;let te=L+D*c+H*a+X*s+Z*(5*g)+P*(5*y);L=te>>>13,te&=8191,te+=N*(5*m)+I*(5*p)+O*(5*f)+R*(5*u)+M*(5*l),L+=te>>>13,te&=8191;let ue=L+D*l+H*c+X*a+Z*s+P*(5*g);L=ue>>>13,ue&=8191,ue+=N*(5*y)+I*(5*m)+O*(5*p)+R*(5*f)+M*(5*u),L+=ue>>>13,ue&=8191;let C=L+D*u+H*l+X*c+Z*a+P*s;L=C>>>13,C&=8191,C+=N*(5*g)+I*(5*y)+O*(5*m)+R*(5*p)+M*(5*f),L+=C>>>13,C&=8191;let be=L+D*f+H*u+X*l+Z*c+P*a;L=be>>>13,be&=8191,be+=N*s+I*(5*g)+O*(5*y)+R*(5*m)+M*(5*p),L+=be>>>13,be&=8191;let Ee=L+D*p+H*f+X*u+Z*l+P*c;L=Ee>>>13,Ee&=8191,Ee+=N*a+I*s+O*(5*g)+R*(5*y)+M*(5*m),L+=Ee>>>13,Ee&=8191;let Ce=L+D*m+H*p+X*f+Z*u+P*l;L=Ce>>>13,Ce&=8191,Ce+=N*c+I*a+O*s+R*(5*g)+M*(5*y),L+=Ce>>>13,Ce&=8191;let Re=L+D*y+H*m+X*p+Z*f+P*u;L=Re>>>13,Re&=8191,Re+=N*l+I*c+O*a+R*s+M*(5*g),L+=Re>>>13,Re&=8191;let _e=L+D*g+H*y+X*m+Z*p+P*f;L=_e>>>13,_e&=8191,_e+=N*u+I*l+O*c+R*a+M*s,L+=_e>>>13,_e&=8191,L=(L<<2)+L|0,L=L+V|0,V=L&8191,L=L>>>13,k+=L,n[0]=V,n[1]=k,n[2]=te,n[3]=ue,n[4]=C,n[5]=be,n[6]=Ee,n[7]=Ce,n[8]=Re,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;In(r)}update(e){CS(this),jt(e),e=Ja(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,In(this.h,this.r,this.buffer,this.pad)}digestInto(e){CS(this),GR(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var sO=XR(32,(e)=>new oO(e));function rV(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],y=t[4],g=t[5],b=t[6],_=t[7],T=n,A=r[0],z=r[1],j=r[2],E=s,F=a,D=c,H=l,X=u,Z=f,P=p,N=m,I=y,O=g,R=b,M=_,L=T,V=A,k=z,te=j;for(let C=0;C<o;C+=2)E=E+X|0,L=et(L^E,16),I=I+L|0,X=et(X^I,12),E=E+X|0,L=et(L^E,8),I=I+L|0,X=et(X^I,7),F=F+Z|0,V=et(V^F,16),O=O+V|0,Z=et(Z^O,12),F=F+Z|0,V=et(V^F,8),O=O+V|0,Z=et(Z^O,7),D=D+P|0,k=et(k^D,16),R=R+k|0,P=et(P^R,12),D=D+P|0,k=et(k^D,8),R=R+k|0,P=et(P^R,7),H=H+N|0,te=et(te^H,16),M=M+te|0,N=et(N^M,12),H=H+N|0,te=et(te^H,8),M=M+te|0,N=et(N^M,7),E=E+Z|0,te=et(te^E,16),R=R+te|0,Z=et(Z^R,12),E=E+Z|0,te=et(te^E,8),R=R+te|0,Z=et(Z^R,7),F=F+P|0,L=et(L^F,16),M=M+L|0,P=et(P^M,12),F=F+P|0,L=et(L^F,8),M=M+L|0,P=et(P^M,7),D=D+N|0,V=et(V^D,16),I=I+V|0,N=et(N^I,12),D=D+N|0,V=et(V^D,8),I=I+V|0,N=et(N^I,7),H=H+X|0,k=et(k^H,16),O=O+k|0,X=et(X^O,12),H=H+X|0,k=et(k^H,8),O=O+k|0,X=et(X^O,7);let ue=0;i[ue++]=s+E|0,i[ue++]=a+F|0,i[ue++]=c+D|0,i[ue++]=l+H|0,i[ue++]=u+X|0,i[ue++]=f+Z|0,i[ue++]=p+P|0,i[ue++]=m+N|0,i[ue++]=y+I|0,i[ue++]=g+O|0,i[ue++]=b+R|0,i[ue++]=_+M|0,i[ue++]=T+L|0,i[ue++]=A+V|0,i[ue++]=z+k|0,i[ue++]=j+te|0}var nV=iO(rV,{counterRight:!1,counterLength:4,allowShortKeys:!1});var iV=new Uint8Array(16),aO=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(iV.subarray(r))},oV=new Uint8Array(32);function cO(e,t,r,i,n){if(n!==void 0)jt(n,void 0,"AAD");let o=e(t,r,oV),s=tO(i.length,n?n.length:0,!0),a=sO.create(o);if(n)aO(a,n);aO(a,i),a.update(s);let c=a.digest();return In(o,s),c}var sV=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=xu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=cO(e,t,r,c,i);return s.set(l,a),In(l),s},decrypt(o,s){s=xu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=cO(e,t,r,a,i);if(!YR(c,l))throw In(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),In(l),s}}),ln=eO({blockSize:64,nonceLength:12,tagLength:16},sV(nV));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Va(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Kt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Pe(e,t,r=""){let i=Va(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function un(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Kt(e.outputLen),Kt(e.blockLen)}function $i(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Zp(e,t){Pe(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Mp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Br(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Fp(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Tn(e,t){return e<<32-t|e>>>t}var aV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function cV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function lV(e){for(let t=0;t<e.length;t++)e[t]=cV(e[t]);return e}var OS=aV?(e)=>e:lV,uO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),uV=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Is(e){if(Pe(e),uO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=uV[e[r]];return t}var Ai={_0:48,_9:57,A:65,F:70,a:97,f:102};function lO(e){if(e>=Ai._0&&e<=Ai._9)return e-Ai._0;if(e>=Ai.A&&e<=Ai.F)return e-(Ai.A-10);if(e>=Ai.a&&e<=Ai.f)return e-(Ai.a-10);return}function Ts(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(uO)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=lO(e.charCodeAt(o)),a=lO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Nt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Pe(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Wa(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function ho(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var go=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zS=BigInt(0),PS=BigInt(1);function vu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function dO(e){if(typeof e==="bigint"){if(!Hp(e))throw Error("positive bigint expected, got "+e)}else Kt(e);return e}function _u(e){let t=dO(e).toString(16);return t.length&1?"0"+t:t}function fO(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?zS:BigInt("0x"+e)}function yo(e){return fO(Is(e))}function bo(e){return fO(Is(Kp(Pe(e)).reverse()))}function Ga(e,t){Kt(t),e=dO(e);let r=Ts(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function ku(e,t){return Ga(e,t).reverse()}function Kp(e){return Uint8Array.from(e)}function So(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Hp=(e)=>typeof e==="bigint"&&zS<=e;function dV(e,t,r){return Hp(e)&&Hp(t)&&Hp(r)&&t<=e&&e<r}function Eu(e,t,r,i){if(!dV(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function NS(e){let t;for(t=0;e>zS;e>>=PS,t+=1);return t}var Iu=(e)=>(PS<<BigInt(e))-PS;function pO(e,t,r){if(Kt(e,"hashLen"),Kt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,Nt(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,_=[];while(b<t){c=p();let T=c.slice();_.push(T),b+=c.length}return Nt(..._)};return(b,_)=>{f(),m(b);let T=void 0;while(!(T=_(y())))m();return f(),T}}function As(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function DS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ir=BigInt(0),mr=BigInt(1),$s=BigInt(2),gO=BigInt(3),yO=BigInt(4),bO=BigInt(5),fV=BigInt(7),SO=BigInt(8),pV=BigInt(9),xO=BigInt(16);function Er(e,t){let r=e%t;return r>=Ir?r:t+r}function dn(e,t,r){let i=e;while(t-- >Ir)i*=i,i%=r;return i}function mO(e,t){if(e===Ir)throw Error("invert: expected non-zero number");if(t<=Ir)throw Error("invert: expected positive modulus, got "+t);let r=Er(e,t),i=t,n=Ir,o=mr,s=mr,a=Ir;while(r!==Ir){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==mr)throw Error("invert: does not exist");return Er(n,t)}function LS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function wO(e,t){let r=(e.ORDER+mr)/yO,i=e.pow(t,r);return LS(e,i,t),i}function mV(e,t){let r=(e.ORDER-bO)/SO,i=e.mul(t,$s),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,$s),n),a=e.mul(o,e.sub(s,e.ONE));return LS(e,a,t),a}function hV(e){let t=Jp(e),r=vO(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+fV)/xO;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),y=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,y);let g=a.eql(a.sqr(u),c),b=a.cmov(l,u,g);return LS(a,b,c),b}}function vO(e){if(e<gO)throw Error("sqrt is not defined for small field");let t=e-mr,r=0;while(t%$s===Ir)t/=$s,r++;let i=$s,n=Jp(e);while(hO(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return wO;let o=n.pow(i,t),s=(t+mr)/$s;return function(c,l){if(c.is0(l))return l;if(hO(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let y=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(y++,g=c.sqr(g),y===u)throw Error("Cannot find square root");let b=mr<<BigInt(u-y-1),_=c.pow(f,b);u=y,f=c.sqr(_),p=c.mul(p,f),m=c.mul(m,_)}return m}}function gV(e){if(e%yO===gO)return wO;if(e%SO===bO)return mV;if(e%xO===pV)return hV(e);return vO(e)}var yV=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function BS(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=yV.reduce((i,n)=>(i[n]="function",i),t);return As(e,r),e}function bV(e,t,r){if(r<Ir)throw Error("invalid exponent, negatives unsupported");if(r===Ir)return e.ONE;if(r===mr)return t;let i=e.ONE,n=t;while(r>Ir){if(r&mr)i=e.mul(i,n);n=e.sqr(n),r>>=mr}return i}function Tu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function hO(e,t){let r=(e.ORDER-mr)/$s,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function SV(e,t){if(t!==void 0)Kt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class _O{ORDER;BITS;BYTES;isLE;ZERO=Ir;ONE=mr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Ir)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=SV(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Er(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Ir<=e&&e<this.ORDER}is0(e){return e===Ir}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&mr)===mr}neg(e){return Er(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Er(e*e,this.ORDER)}add(e,t){return Er(e+t,this.ORDER)}sub(e,t){return Er(e-t,this.ORDER)}mul(e,t){return Er(e*t,this.ORDER)}pow(e,t){return bV(this,e,t)}div(e,t){return Er(e*mO(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return mO(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=gV(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?ku(e,this.BYTES):Ga(e,this.BYTES)}fromBytes(e,t=!1){Pe(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?bo(e):yo(e);if(s)a=Er(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Tu(this,e)}cmov(e,t,r){return r?t:e}}function Jp(e,t={}){return new _O(e,t)}function kO(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function jS(e){let t=kO(e);return t+Math.ceil(t/2)}function EO(e,t,r=!1){Pe(e);let i=e.length,n=kO(t),o=jS(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?bo(e):yo(e),a=Er(s,t-mr)+mr;return r?ku(a,n):Ga(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Qa=BigInt(0),Cs=BigInt(1);function Au(e,t){let r=t.negate();return e?r:t}function MS(e,t){let r=Tu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function $O(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function US(e,t){$O(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Iu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function IO(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Cs;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var qS=new WeakMap,CO=new WeakMap;function ZS(e){return CO.get(e)||1}function TO(e){if(e!==Qa)throw Error("invalid wNAF")}class FS{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>Qa){if(t&Cs)r=r.add(i);i=i.double(),t>>=Cs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=US(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=US(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=IO(r,s,o);if(r=a,l)n=n.add(Au(f,t[p]));else i=i.add(Au(u,t[c]))}return TO(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=US(e,this.bits);for(let o=0;o<n.windows;o++){if(r===Qa)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=IO(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return TO(r),i}getPrecomputes(e,t,r){let i=qS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);qS.set(t,i)}}return i}cached(e,t,r){let i=ZS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=ZS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){$O(t,this.bits),CO.set(e,t),qS.delete(e)}hasCache(e){return ZS(e)!==1}}function RO(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>Qa||i>Qa){if(r&Cs)o=o.add(n);if(i&Cs)s=s.add(n);n=n.double(),r>>=Cs,i>>=Cs}return{p1:o,p2:s}}function AO(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return BS(t),t}else return Jp(e,{isLE:r})}function OO(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>Qa))throw Error(`CURVE.${c} must be positive bigint`)}let n=AO(t.p,r.Fp,i),o=AO(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Vp(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $u=BigInt(0),Ya=BigInt(1),Wp=BigInt(2);function xV(e){return As(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function PO(e){let t=xV(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||ho,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Wp**BigInt(254):Wp**BigInt(447),y=a?BigInt(8)*Wp**BigInt(251)-Ya:BigInt(4)*Wp**BigInt(445)-Ya,g=m+y+Ya,b=(I)=>Er(I,r),_=T(f);function T(I){return ku(b(I),u)}function A(I){let O=Kp(Pe(I,u,"uCoordinate"));if(a)O[31]&=127;return b(bo(O))}function z(I){return bo(n(Kp(Pe(I,u,"scalar"))))}function j(I,O){let R=X(A(O),z(I));if(R===$u)throw Error("invalid private or public key received");return T(R)}function E(I){return j(I,_)}let F=E,D=j;function H(I,O,R){let M=b(I*(O-R));return O=b(O-M),R=b(R+M),{x_2:O,x_3:R}}function X(I,O){Eu("u",I,$u,r),Eu("scalar",O,m,g);let R=O,M=I,L=Ya,V=$u,k=I,te=Ya,ue=$u;for(let be=BigInt(l-1);be>=$u;be--){let Ee=R>>be&Ya;ue^=Ee,{x_2:L,x_3:k}=H(ue,L,k),{x_2:V,x_3:te}=H(ue,V,te),ue=Ee;let Ce=L+V,Re=b(Ce*Ce),_e=L-V,Je=b(_e*_e),Ne=Re-Je,Ye=k+te,mt=k-te,zt=b(mt*Ce),dr=b(Ye*_e),Kr=zt+dr,Jr=zt-dr;k=b(Kr*Kr),te=b(M*b(Jr*Jr)),L=b(Re*Je),V=b(Ne*(Re+b(p*Ne)))}({x_2:L,x_3:k}=H(ue,L,k)),{x_2:V,x_3:te}=H(ue,V,te);let C=o(V);return b(L*C)}let Z={secretKey:u,publicKey:u,seed:u},P=(I=c(u))=>(Pe(I,Z.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze({keygen:Vp(P,F),getSharedSecret:D,getPublicKey:F,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:_.slice(),lengths:Z})}class HS{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(un(e),Pe(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Br(i)}update(e){return $i(this),this.iHash.update(e),this}digestInto(e){$i(this),Pe(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Xa=(e,t,r)=>new HS(e,t).update(r).digest();Xa.create=(e,t)=>new HS(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zO=(e,t)=>(e+(e>=0?t:-t)/DO)/t;function wV(e,t,r){let[[i,n],[o,s]]=t,a=zO(s*e,r),c=zO(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Ci,p=u<Ci;if(f)l=-l;if(p)u=-u;let m=Iu(Math.ceil(NS(r)/2))+ec;if(l<Ci||l>=m||u<Ci||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function JS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function KS(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(vu(r.lowS,"lowS"),vu(r.prehash,"prehash"),r.format!==void 0)JS(r.format);return r}class NO extends Error{constructor(e=""){super(e)}}var xo={Err:NO,_tlv:{encode:(e,t)=>{let{Err:r}=xo;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=_u(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?_u(n.length/2|128):"";return _u(e)+o+n+t},decode(e,t){let{Err:r}=xo,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=xo;if(e<Ci)throw new t("integer: negative integers are not allowed");let r=_u(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=xo;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return yo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=xo,n=Pe(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=xo,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Ci=BigInt(0),ec=BigInt(1),DO=BigInt(2),Gp=BigInt(3),vV=BigInt(4);function VS(e,t={}){let r=OO("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;As(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=BO(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(P,N,I){let{x:O,y:R}=N.toAffine(),M=i.toBytes(O);if(vu(I,"isCompressed"),I){u();let L=!i.isOdd(R);return Nt(LO(L),M)}else return Nt(Uint8Array.of(4),M,i.toBytes(R))}function p(P){Pe(P,void 0,"Point");let{publicKey:N,publicKeyUncompressed:I}=l,O=P.length,R=P[0],M=P.subarray(1);if(O===N&&(R===2||R===3)){let L=i.fromBytes(M);if(!i.isValid(L))throw Error("bad point: is not on curve, wrong x");let V=g(L),k;try{k=i.sqrt(V)}catch(C){let be=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+be)}u();let te=i.isOdd(k);if((R&1)===1!==te)k=i.neg(k);return{x:L,y:k}}else if(O===I&&R===4){let L=i.BYTES,V=i.fromBytes(M.subarray(0,L)),k=i.fromBytes(M.subarray(L,L*2));if(!b(V,k))throw Error("bad point: is not on curve");return{x:V,y:k}}else throw Error(`bad point: got length ${O}, expected compressed=${N} or uncompressed=${I}`)}let m=t.toBytes||f,y=t.fromBytes||p;function g(P){let N=i.sqr(P),I=i.mul(N,P);return i.add(i.add(I,i.mul(P,o.a)),o.b)}function b(P,N){let I=i.sqr(N),O=g(P);return i.eql(I,O)}if(!b(o.Gx,o.Gy))throw Error("bad curve params: generator point");let _=i.mul(i.pow(o.a,Gp),vV),T=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(_,T)))throw Error("bad curve params: a or b");function A(P,N,I=!1){if(!i.isValid(N)||I&&i.is0(N))throw Error(`bad point coordinate ${P}`);return N}function z(P){if(!(P instanceof H))throw Error("Weierstrass Point expected")}function j(P){if(!c||!c.basises)throw Error("no endo");return wV(P,c.basises,n.ORDER)}let E=DS((P,N)=>{let{X:I,Y:O,Z:R}=P;if(i.eql(R,i.ONE))return{x:I,y:O};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(R);let L=i.mul(I,N),V=i.mul(O,N),k=i.mul(R,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(k,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}),F=DS((P)=>{if(P.is0()){if(t.allowInfinityPoint&&!i.is0(P.Y))return;throw Error("bad point: ZERO")}let{x:N,y:I}=P.toAffine();if(!i.isValid(N)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!b(N,I))throw Error("bad point: equation left != right");if(!P.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function D(P,N,I,O,R){return I=new H(i.mul(I.X,P),I.Y,I.Z),N=Au(O,N),I=Au(R,I),N.add(I)}class H{static BASE=new H(o.Gx,o.Gy,i.ONE);static ZERO=new H(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(P,N,I){this.X=A("x",P),this.Y=A("y",N,!0),this.Z=A("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(P){let{x:N,y:I}=P||{};if(!P||!i.isValid(N)||!i.isValid(I))throw Error("invalid affine point");if(P instanceof H)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(I))return H.ZERO;return new H(N,I,i.ONE)}static fromBytes(P){let N=H.fromAffine(y(Pe(P,void 0,"point")));return N.assertValidity(),N}static fromHex(P){return H.fromBytes(Ts(P))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(P=8,N=!0){if(Z.createCache(this,P),!N)this.multiply(Gp);return this}assertValidity(){F(this)}hasEvenY(){let{y:P}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(P)}equals(P){z(P);let{X:N,Y:I,Z:O}=this,{X:R,Y:M,Z:L}=P,V=i.eql(i.mul(N,L),i.mul(R,O)),k=i.eql(i.mul(I,L),i.mul(M,O));return V&&k}negate(){return new H(this.X,i.neg(this.Y),this.Z)}double(){let{a:P,b:N}=o,I=i.mul(N,Gp),{X:O,Y:R,Z:M}=this,L=i.ZERO,V=i.ZERO,k=i.ZERO,te=i.mul(O,O),ue=i.mul(R,R),C=i.mul(M,M),be=i.mul(O,R);return be=i.add(be,be),k=i.mul(O,M),k=i.add(k,k),L=i.mul(P,k),V=i.mul(I,C),V=i.add(L,V),L=i.sub(ue,V),V=i.add(ue,V),V=i.mul(L,V),L=i.mul(be,L),k=i.mul(I,k),C=i.mul(P,C),be=i.sub(te,C),be=i.mul(P,be),be=i.add(be,k),k=i.add(te,te),te=i.add(k,te),te=i.add(te,C),te=i.mul(te,be),V=i.add(V,te),C=i.mul(R,M),C=i.add(C,C),te=i.mul(C,be),L=i.sub(L,te),k=i.mul(C,ue),k=i.add(k,k),k=i.add(k,k),new H(L,V,k)}add(P){z(P);let{X:N,Y:I,Z:O}=this,{X:R,Y:M,Z:L}=P,V=i.ZERO,k=i.ZERO,te=i.ZERO,ue=o.a,C=i.mul(o.b,Gp),be=i.mul(N,R),Ee=i.mul(I,M),Ce=i.mul(O,L),Re=i.add(N,I),_e=i.add(R,M);Re=i.mul(Re,_e),_e=i.add(be,Ee),Re=i.sub(Re,_e),_e=i.add(N,O);let Je=i.add(R,L);return _e=i.mul(_e,Je),Je=i.add(be,Ce),_e=i.sub(_e,Je),Je=i.add(I,O),V=i.add(M,L),Je=i.mul(Je,V),V=i.add(Ee,Ce),Je=i.sub(Je,V),te=i.mul(ue,_e),V=i.mul(C,Ce),te=i.add(V,te),V=i.sub(Ee,te),te=i.add(Ee,te),k=i.mul(V,te),Ee=i.add(be,be),Ee=i.add(Ee,be),Ce=i.mul(ue,Ce),_e=i.mul(C,_e),Ee=i.add(Ee,Ce),Ce=i.sub(be,Ce),Ce=i.mul(ue,Ce),_e=i.add(_e,Ce),be=i.mul(Ee,_e),k=i.add(k,be),be=i.mul(Je,_e),V=i.mul(Re,V),V=i.sub(V,be),be=i.mul(Re,Ee),te=i.mul(Je,te),te=i.add(te,be),new H(V,k,te)}subtract(P){return this.add(P.negate())}is0(){return this.equals(H.ZERO)}multiply(P){let{endo:N}=t;if(!n.isValidNot0(P))throw Error("invalid scalar: out of range");let I,O,R=(M)=>Z.cached(this,M,(L)=>MS(H,L));if(N){let{k1neg:M,k1:L,k2neg:V,k2:k}=j(P),{p:te,f:ue}=R(L),{p:C,f:be}=R(k);O=ue.add(be),I=D(N.beta,te,C,M,V)}else{let{p:M,f:L}=R(P);I=M,O=L}return MS(H,[I,O])[0]}multiplyUnsafe(P){let{endo:N}=t,I=this;if(!n.isValid(P))throw Error("invalid scalar: out of range");if(P===Ci||I.is0())return H.ZERO;if(P===ec)return I;if(Z.hasCache(this))return this.multiply(P);if(N){let{k1neg:O,k1:R,k2neg:M,k2:L}=j(P),{p1:V,p2:k}=RO(H,I,R,L);return D(N.beta,V,k,O,M)}else return Z.unsafe(I,P)}toAffine(P){return E(this,P)}isTorsionFree(){let{isTorsionFree:P}=t;if(s===ec)return!0;if(P)return P(H,this);return Z.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:P}=t;if(s===ec)return this;if(P)return P(H,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(P=!0){return vu(P,"isCompressed"),this.assertValidity(),m(H,this,P)}toHex(P=!0){return Is(this.toBytes(P))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let X=n.BITS,Z=new FS(H,t.endo?Math.ceil(X/2):X);return H.BASE.precompute(8),H}function LO(e){return Uint8Array.of(e?2:3)}function BO(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function _V(e,t={}){let{Fn:r}=e,i=t.randomBytes||ho,n=Object.assign(BO(e.Fp,r),{seed:jS(r.ORDER)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let _=m.length;if(y===!0&&_!==g)return!1;if(y===!1&&_!==b)return!1;return!!e.fromBytes(m)}catch(_){return!1}}function a(m=i(n.seed)){return EO(Pe(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n;if(!Va(m))return;if("_lengths"in r&&r._lengths||y===g)return;let _=Pe(m,void 0,"key").length;return _===g||_===b}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Vp(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function WS(e,t,r={}){un(t),As(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||ho,n=r.hmac||((I,O)=>Xa(t,I,O)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=_V(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*DO<o.ORDER;function b(I){let O=a>>ec;return I>O}function _(I,O){if(!s.isValidNot0(O))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return O}function T(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function A(I,O){JS(O);let R=m.signature,M=O==="compact"?R:O==="recovered"?R+1:void 0;return Pe(I,M)}class z{r;s;recovery;constructor(I,O,R){if(this.r=_("r",I),this.s=_("s",O),R!=null){if(T(),![0,1,2,3].includes(R))throw Error("invalid recovery id");this.recovery=R}Object.freeze(this)}static fromBytes(I,O=y.format){A(I,O);let R;if(O==="der"){let{r:k,s:te}=xo.toSig(Pe(I));return new z(k,te)}if(O==="recovered")R=I[0],O="compact",I=I.subarray(1);let M=m.signature/2,L=I.subarray(0,M),V=I.subarray(M,M*2);return new z(s.fromBytes(L),s.fromBytes(V),R)}static fromHex(I,O){return this.fromBytes(Ts(I),O)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new z(this.r,this.s,I)}recoverPublicKey(I){let{r:O,s:R}=this,M=this.assertRecovery(),L=M===2||M===3?O+a:O;if(!o.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let V=o.toBytes(L),k=e.fromBytes(Nt(LO((M&1)===0),V)),te=s.inv(L),ue=E(Pe(I,void 0,"msgHash")),C=s.create(-ue*te),be=s.create(R*te),Ee=e.BASE.multiplyUnsafe(C).add(k.multiplyUnsafe(be));if(Ee.is0())throw Error("invalid recovery: point at infinify");return Ee.assertValidity(),Ee}hasHighS(){return b(this.s)}toBytes(I=y.format){if(JS(I),I==="der")return Ts(xo.hexFromSig(this));let{r:O,s:R}=this,M=s.toBytes(O),L=s.toBytes(R);if(I==="recovered")return T(),Nt(Uint8Array.of(this.assertRecovery()),M,L);return Nt(M,L)}toHex(I){return Is(this.toBytes(I))}}let j=r.bits2int||function(O){if(O.length>8192)throw Error("input is too large");let R=yo(O),M=O.length*8-c;return M>0?R>>BigInt(M):R},E=r.bits2int_modN||function(O){return s.create(j(O))},F=Iu(c);function D(I){return Eu("num < 2^"+c,I,Ci,F),s.toBytes(I)}function H(I,O){return Pe(I,void 0,"message"),O?Pe(t(I),void 0,"prehashed message"):I}function X(I,O,R){let{lowS:M,prehash:L,extraEntropy:V}=KS(R,y);I=H(I,L);let k=E(I),te=s.fromBytes(O);if(!s.isValidNot0(te))throw Error("invalid private key");let ue=[D(te),D(k)];if(V!=null&&V!==!1){let Ce=V===!0?i(m.secretKey):V;ue.push(Pe(Ce,void 0,"extraEntropy"))}let C=Nt(...ue),be=k;function Ee(Ce){let Re=j(Ce);if(!s.isValidNot0(Re))return;let _e=s.inv(Re),Je=e.BASE.multiply(Re).toAffine(),Ne=s.create(Je.x);if(Ne===Ci)return;let Ye=s.create(_e*s.create(be+Ne*te));if(Ye===Ci)return;let mt=(Je.x===Ne?0:2)|Number(Je.y&ec),zt=Ye;if(M&&b(Ye))zt=s.neg(Ye),mt^=1;return new z(Ne,zt,g?void 0:mt)}return{seed:C,k2sig:Ee}}function Z(I,O,R={}){let{seed:M,k2sig:L}=X(I,O,R);return pO(t.outputLen,s.BYTES,n)(M,L).toBytes(R.format)}function P(I,O,R,M={}){let{lowS:L,prehash:V,format:k}=KS(M,y);if(R=Pe(R,void 0,"publicKey"),O=H(O,V),!Va(I)){let te=I instanceof z?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+te)}A(I,k);try{let te=z.fromBytes(I,k),ue=e.fromBytes(R);if(L&&te.hasHighS())return!1;let{r:C,s:be}=te,Ee=E(O),Ce=s.inv(be),Re=s.create(Ee*Ce),_e=s.create(C*Ce),Je=e.BASE.multiplyUnsafe(Re).add(ue.multiplyUnsafe(_e));if(Je.is0())return!1;return s.create(Je.x)===C}catch(te){return!1}}function N(I,O,R={}){let{prehash:M}=KS(R,y);return O=H(O,M),z.fromBytes(I,"recovered").recoverPublicKey(O).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:Z,verify:P,recoverPublicKey:N,Signature:z,hash:t})}function jO(e,t,r){return e&t^~e&r}function UO(e,t,r){return e&t^e&r^t&r}class Qp{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Fp(this.buffer)}update(e){$i(this),Pe(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Fp(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){$i(this),Zp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Br(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Fp(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Ri=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var tr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var Yp=BigInt(4294967295),qO=BigInt(32);function kV(e,t=!1){if(t)return{h:Number(e&Yp),l:Number(e>>qO&Yp)};return{h:Number(e>>qO&Yp)|0,l:Number(e&Yp)|0}}function Xp(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=kV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var GS=(e,t,r)=>e>>>r,QS=(e,t,r)=>e<<32-r|t>>>r,Rs=(e,t,r)=>e>>>r|t<<32-r,Os=(e,t,r)=>e<<32-r|t>>>r,Cu=(e,t,r)=>e<<64-r|t>>>r-32,Ru=(e,t,r)=>e>>>r-32|t<<64-r;var ZO=(e,t,r)=>e<<r|t>>>32-r,MO=(e,t,r)=>t<<r|e>>>32-r,FO=(e,t,r)=>t<<r-32|e>>>64-r,HO=(e,t,r)=>e<<r-32|t>>>64-r;function Qn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var KO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),JO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,VO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),WO=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,GO=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),QO=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var IV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),wo=new Uint32Array(64);class YO extends Qp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)wo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=wo[u-15],p=wo[u-2],m=Tn(f,7)^Tn(f,18)^f>>>3,y=Tn(p,17)^Tn(p,19)^p>>>10;wo[u]=y+wo[u-7]+m+wo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Tn(s,6)^Tn(s,11)^Tn(s,25),p=l+f+jO(s,a,c)+IV[u]+wo[u]|0,y=(Tn(r,2)^Tn(r,13)^Tn(r,22))+UO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+y|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Br(wo)}destroy(){this.set(0,0,0,0,0,0,0,0),Br(this.buffer)}}class XO extends YO{A=Ri[0]|0;B=Ri[1]|0;C=Ri[2]|0;D=Ri[3]|0;E=Ri[4]|0;F=Ri[5]|0;G=Ri[6]|0;H=Ri[7]|0;constructor(){super(32)}}var eP=(()=>Xp(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),TV=(()=>eP[0])(),AV=(()=>eP[1])(),vo=new Uint32Array(80),_o=new Uint32Array(80);class tP extends Qp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:y,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,y,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=y|0,this.Hl=g|0}process(e,t){for(let T=0;T<16;T++,t+=4)vo[T]=e.getUint32(t),_o[T]=e.getUint32(t+=4);for(let T=16;T<80;T++){let A=vo[T-15]|0,z=_o[T-15]|0,j=Rs(A,z,1)^Rs(A,z,8)^GS(A,z,7),E=Os(A,z,1)^Os(A,z,8)^QS(A,z,7),F=vo[T-2]|0,D=_o[T-2]|0,H=Rs(F,D,19)^Cu(F,D,61)^GS(F,D,6),X=Os(F,D,19)^Ru(F,D,61)^QS(F,D,6),Z=VO(E,X,_o[T-7],_o[T-16]),P=WO(Z,j,H,vo[T-7],vo[T-16]);vo[T]=P|0,_o[T]=Z|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:y,Gl:g,Hh:b,Hl:_}=this;for(let T=0;T<80;T++){let A=Rs(u,f,14)^Rs(u,f,18)^Cu(u,f,41),z=Os(u,f,14)^Os(u,f,18)^Ru(u,f,41),j=u&p^~u&y,E=f&m^~f&g,F=GO(_,z,E,AV[T],_o[T]),D=QO(F,b,A,j,TV[T],vo[T]),H=F|0,X=Rs(r,i,28)^Cu(r,i,34)^Cu(r,i,39),Z=Os(r,i,28)^Ru(r,i,34)^Ru(r,i,39),P=r&n^r&s^n&s,N=i&o^i&a^o&a;b=y|0,_=g|0,y=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=Qn(c|0,l|0,D|0,H|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=KO(H,Z,N);r=JO(I,D,X,P),i=I|0}({h:r,l:i}=Qn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Qn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Qn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Qn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=Qn(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=Qn(this.Fh|0,this.Fl|0,p|0,m|0),{h:y,l:g}=Qn(this.Gh|0,this.Gl|0,y|0,g|0),{h:b,l:_}=Qn(this.Hh|0,this.Hl|0,b|0,_|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,y,g,b,_)}roundClean(){Br(vo,_o)}destroy(){Br(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class rP extends tP{Ah=tr[0]|0;Al=tr[1]|0;Bh=tr[2]|0;Bl=tr[3]|0;Ch=tr[4]|0;Cl=tr[5]|0;Dh=tr[6]|0;Dl=tr[7]|0;Eh=tr[8]|0;El=tr[9]|0;Fh=tr[10]|0;Fl=tr[11]|0;Gh=tr[12]|0;Gl=tr[13]|0;Hh=tr[14]|0;Hl=tr[15]|0;constructor(){super(48)}}var em=Wa(()=>new XO,go(1));var nP=Wa(()=>new rP,go(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $V=BigInt(1),iP=BigInt(2),CV=BigInt(3),RV=BigInt(5),Vwe=BigInt(8),oP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function OV(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=oP,a=e*e%o*e%o,c=dn(a,iP,o)*a%o,l=dn(c,$V,o)*e%o,u=dn(l,RV,o)*l%o,f=dn(u,t,o)*u%o,p=dn(f,r,o)*f%o,m=dn(p,i,o)*p%o,y=dn(m,n,o)*m%o,g=dn(y,n,o)*m%o,b=dn(g,t,o)*u%o;return{pow_p_5_8:dn(b,iP,o)*e%o,b2:a}}function PV(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var sP=(()=>{let e=oP;return PO({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=OV(t);return Er(dn(r,CV,e)*i,e)},adjustScalarBytes:PV})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zV=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),NV=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var DV=VS(zV),YS=WS(DV,em);var LV=VS(NV),aP=WS(LV,nP);function lP(e,t,r){if(un(e),r===void 0)r=new Uint8Array(e.outputLen);return Xa(e,r,t)}var XS=Uint8Array.of(0),cP=Uint8Array.of();function uP(e,t,r,i=32){un(e),Kt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=cP;else Pe(r,void 0,"info");let s=new Uint8Array(o*n),a=Xa.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)XS[0]=u+1,c.update(u===0?cP:l).update(r).update(XS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Br(l,XS),s.slice(0,i)}var BV=BigInt(0),Ou=BigInt(1),jV=BigInt(2),UV=BigInt(7),qV=BigInt(256),ZV=BigInt(113),pP=[],mP=[],hP=[];for(let e=0,t=Ou,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],pP.push(2*(5*i+r)),mP.push((e+1)*(e+2)/2%64);let n=BV;for(let o=0;o<7;o++)if(t=(t<<Ou^(t>>UV)*ZV)%qV,t&jV)n^=Ou<<(Ou<<BigInt(o))-Ou;hP.push(n)}var gP=Xp(hP,!0),MV=gP[0],FV=gP[1],dP=(e,t,r)=>r>32?FO(e,t,r):ZO(e,t,r),fP=(e,t,r)=>r>32?HO(e,t,r):MO(e,t,r);function HV(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=dP(l,u,1)^r[a],p=fP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=mP[s],c=dP(n,o,a),l=fP(n,o,a),u=pP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=MV[i],e[1]^=FV[i]}Br(r)}class tm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Kt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Mp(this.state)}clone(){return this._cloneInto()}keccak(){OS(this.state32),HV(this.state32,this.rounds),OS(this.state32),this.posOut=0,this.pos=0}update(e){$i(this),Pe(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){$i(this,!1),Pe(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Kt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Zp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Br(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new tm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var yP=(e,t,r,i={})=>Wa(()=>new tm(t,e,r),i);var Ps=yP(6,136,32,go(8));var bP=yP(6,72,64,go(10));var SP=(e,t,r,i={})=>Wa((n={})=>new tm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),xP=SP(31,168,16,go(11)),Yn=SP(31,136,32,go(12));function ex(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function vP(e){return ex(e),(e&e-1)===0&&e!==0}function tx(e,t){ex(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function _P(e){return ex(e),31-Math.clz32(e)}function wP(e){let t=e.length;if(t<2||!vP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=_P(t);for(let i=0;i<t;i++){let n=tx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var rx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=_P(r);if(!vP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)wP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,y=1<<m,g=y>>1,b=r>>m;for(let _=0;_<r;_+=y)for(let T=0,A=p++;T<g;T++){let z=o?n?r-A:A:T*b,j=_+T,E=_+T+g,F=i[z],D=u[E],H=u[j];if(l){let X=e.mul(D,F);u[j]=e.add(H,X),u[E]=e.sub(H,X)}else if(o)u[j]=e.add(D,H),u[E]=e.mul(e.sub(D,H),F);else u[j]=e.add(H,D),u[E]=e.mul(e.sub(H,D),F)}}if(!n&&a)wP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Xn=ho;function rm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function kP(e){return Uint8Array.from(e)}function zs(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Pe(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Pe(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function nm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Pe(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ut(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function nx(e){return(1<<e)-1}var lve=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var EP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(T,A=i)=>{let z=T%A|0;return(z>=0?z|0:A+z|0)|0},l=(T,A=i)=>{let z=c(T,A)|0;return(z>A>>1?z-A|0:z)|0};function u(){let T=t(r);for(let A=0;A<r;A++){let z=tx(A,s),j=BigInt(o)**BigInt(z)%BigInt(i);T[A]=Number(j)|0}return T}let f=u(),p={add:(T,A)=>c((T|0)+(A|0))|0,sub:(T,A)=>c((T|0)-(A|0))|0,mul:(T,A)=>c((T|0)*(A|0))|0,inv:(T)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},y=rx(p,{dit:!1,...m}),g=rx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(T)=>y(T),decode:(T)=>{g(T);for(let A=0;A<T.length;A++)T[A]=c(n*T[A]);return T}},bitsCoder:(T,A)=>{let z=nx(T),j=T*(r/8);return{bytesLen:j,encode:(E)=>{let F=new Uint8Array(j);for(let D=0,H=0,X=0,Z=0;D<E.length;D++){H|=(A.encode(E[D])&z)<<X,X+=T;for(;X>=8;X-=8,H>>=8)F[Z++]=H&nx(X)}return F},decode:(E)=>{let F=t(r);for(let D=0,H=0,X=0,Z=0;D<E.length;D++){H|=E[D]<<X,X+=8;for(;X>=T;X-=T,H>>=T)F[Z++]=A.decode(H&z)}return F}}}}},KV=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ut(o,i)}}},IP=KV(xP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var hr=256,Oi=3329,JV=3303,VV=17,{mod:Nu,nttZetas:WV,NTT:Ns,bitsCoder:GV}=EP({N:hr,Q:Oi,F:JV,ROOT_OF_UNITY:VV,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),ix={512:{N:hr,Q:Oi,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:hr,Q:Oi,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:hr,Q:Oi,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},QV=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Oi/2)/Oi,decode:(r)=>r*Oi+t>>>e}},Pu=(e)=>GV(e,QV(e));function Ds(e,t){for(let r=0;r<hr;r++)e[r]=Nu(e[r]+t[r])}function YV(e,t){for(let r=0;r<hr;r++)e[r]=Nu(e[r]-t[r])}function XV(e,t,r,i,n){let o=Nu(t*i*n+e*r),s=Nu(e*i+t*r);return{c0:o,c1:s}}function im(e,t){for(let r=0;r<hr/2;r++){let i=WV[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=XV(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function TP(e){let t=new Uint16Array(hr);for(let r=0;r<hr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<hr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Oi)t[r++]=o;if(r<hr&&s<Oi)t[r++]=s}}return t}function zu(e,t,r,i){let n=e(i*hr/4,t,r),o=new Uint16Array(hr),s=Mp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Nu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var e7=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Pu(1),u=Pu(c),f=Pu(a),p=zs("publicKey",nm(Pu(12),t),32),m=nm(Pu(12),t),y=zs("ciphertext",nm(f,t),u),g=zs("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:y.bytesLen},keygen:(b)=>{Pe(b,32,"seed");let _=new Uint8Array(33);_.set(b),_[32]=t;let T=n(_),[A,z]=g.decode(T),j=[],E=[];for(let H=0;H<t;H++)j.push(Ns.encode(zu(r,z,H,o)));let F=i(A);for(let H=0;H<t;H++){let X=Ns.encode(zu(r,z,t+H,o));for(let Z=0;Z<t;Z++){let P=TP(F.get(Z,H));Ds(X,im(P,j[Z]))}E.push(X)}F.clean();let D={publicKey:p.encode([E,A]),secretKey:m.encode(j)};return Ut(A,z,j,E,_,T),D},encrypt:(b,_,T)=>{let[A,z]=p.decode(b),j=[];for(let Z=0;Z<t;Z++)j.push(Ns.encode(zu(r,T,Z,o)));let E=i(z),F=new Uint16Array(hr),D=[];for(let Z=0;Z<t;Z++){let P=zu(r,T,t+Z,s),N=new Uint16Array(hr);for(let I=0;I<t;I++){let O=TP(E.get(Z,I));Ds(N,im(O,j[I]))}Ds(P,Ns.decode(N)),D.push(P),Ds(F,im(A[Z],j[Z])),Ut(N)}E.clean();let H=zu(r,T,2*t,s);Ds(H,Ns.decode(F));let X=l.decode(_);return Ds(X,H),Ut(A,j,F,H),y.encode([D,X])},decrypt:(b,_)=>{let[T,A]=y.decode(b),z=m.decode(_),j=new Uint16Array(hr);for(let E=0;E<t;E++)Ds(j,im(z[E],Ns.encode(T[E])));return YV(A,Ns.decode(j)),Ut(j,z,T),l.encode(A)}}};function ox(e){let t=e7(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=zs("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=Xn(64))=>{Pe(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),y=a.encode([p,f,m,u.subarray(32)]);return Ut(p,m),{publicKey:f,secretKey:y}},getPublicKey:(u)=>{let[f,p,m,y]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=Xn(32))=>{Pe(u,s.publicKey,"publicKey"),Pe(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(kP(p)));if(!rm(m,p))throw Ut(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ut(m);let y=i.create().update(f).update(r(u)).digest(),g=t.encrypt(u,f,y.subarray(32,64));return Ut(y.subarray(32)),{cipherText:g,sharedSecret:y.subarray(0,32)}},decapsulate:(u,f)=>{Pe(f,a.bytesLen,"secretKey"),Pe(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,y=r(f.subarray(p/2,m));if(!rm(y,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,b,_,T]=a.decode(f),A=t.decrypt(u,g),z=i.create().update(A).update(_).digest(),j=z.subarray(0,32),E=t.encrypt(b,A,z.subarray(32,64)),F=rm(u,E),D=n.create({dkLen:32}).update(T).update(u).digest();return Ut(A,E,!F?j:D),F?j:D}}}function t7(e,t,r){return Yn.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var sx={HASH256:Ps,HASH512:bP,KDF:Yn,XOF:IP,PRF:t7},xve=ox({...sx,...ix[512]}),Du=ox({...sx,...ix[768]}),AP=ox({...sx,...ix[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function r7(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=Xn(r.seed))=>{Pe(s,r.seed,"seed");let a=o.isLE?bo(s):yo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function ax(e,t=!1){let r=r7(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=Xn(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ut(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Lu(e,t){return zs(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function cx(e){return(t,r)=>e(t,{dkLen:r})}function n7(e,t,...r){let i=Lu(r,"seed"),n=Lu(r,"publicKey");if(e===void 0)e=i.bytesLen;Kt(e);function o(s){Pe(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=Xn(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ut(a),Ut(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function om(e,t,r,i,...n){let o=n7(e,r,...n),s=Lu(n,"cipherText"),a=Lu(n,"publicKey"),c=Lu(n,"msg");if(t===void 0)t=c.bytesLen;return Kt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=Xn(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((_,T)=>_.encapsulate(f[T],p[T])),y=m.map((_)=>_.sharedSecret),g=m.map((_)=>_.cipherText),b={sharedSecret:i(f,g,y),cipherText:s.encode(g)};return Ut(y,g),b},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),y=n.map((g,b)=>g.decapsulate(f[b],m[b]));return i(p,f,y)}}}function $P(e,t,r,i,n){return un(i),un(n),om(32,32,cx(i),(o,s,a)=>n(Nt(a[0],a[1],s[1],o[1],So(e))),t,r)}var Rve=$P("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Du,ax(YS,!0),Yn,Ps),Ove=$P("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",AP,ax(aP,!0),Yn,Ps);function i7(e,t,r,i,n){return un(i),un(n),om(32,32,cx(i),(o,s,a)=>{let c=Nt(a[0],a[1],s[0],o[0],s[1],o[1],So(e)),l=32,u=Nt(So("hybrid_prk"),c),f=lP(n,u),p=Nt(Ga(32,2),So("shared_secret"),So("")),m=uP(n,f,p,32);return Ut(f,p,u,c),m},t,r)}var CP=ax(sP),Pve=i7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Du,CP,Yn,em),o7=(()=>om(32,32,cx(Yn),(e,t,r)=>Ps(Nt(r[0],r[1],t[1],e[1],So("\\.//^\\"))),Du,CP))();function s7(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=Xn(i)){return Pe(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=Xn(i)){Pe(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ut(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function a7(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=s7(r,n,o,i),a=64,c=a+i;return om(32,32,(l)=>{Pe(l,32);let u=Yn(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Nt(f,p)},(l,u,f)=>Ps(Nt(f[0],f[1],u[1],l[1],So(e))),t,s)}var c7=(()=>a7("MLKEM768-P256",Du,YS,128))();var sm=o7,RP=c7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ct=(e,t,r)=>Yt(e,t,r),ux=At,tc=Cp,rr=(...e)=>pS(...e),rc=(e)=>mu(e),nc=uS,ic=(e)=>Ei(e),cm=BigInt(0),lx=BigInt(1);function Pi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function lm(e){if(typeof e==="bigint"){if(!am(e))throw RangeError("positive bigint expected, got "+e)}else ux(e);return e}function ei(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Bu(e){let t=lm(e).toString(16);return t.length&1?"0"+t:t}function OP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?cm:BigInt("0x"+e)}function Ls(e){return OP(Cp(e))}function An(e){return OP(Cp(ko(Yt(e)).reverse()))}function um(e,t){if(At(t),t===0)throw RangeError("zero length");e=lm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return mu(r.padStart(t*2,"0"))}function ju(e,t){return um(e,t).reverse()}function PP(e,t){if(e=ct(e),t=ct(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function ko(e){return Uint8Array.from(ct(e))}function dm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var am=(e)=>typeof e==="bigint"&&cm<=e;function l7(e,t,r){return am(e)&&am(t)&&am(r)&&t<=e&&e<r}function zi(e,t,r,i){if(!l7(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function oc(e){if(e<cm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>cm;e>>=lx,t+=1);return t}var Uu=(e)=>(lx<<BigInt(e))-lx;function zP(e,t,r){if(At(e,"hashLen"),At(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(b)=>new Uint8Array(b),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...b)=>r(l,rr(c,...b)),m=(b=n)=>{if(l=p(o,b),c=p(),b.length===0)return;l=p(s,b),c=p()},y=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let b=0,_=[];while(b<t){c=p();let T=c.slice();_.push(T),b+=c.length}return rr(..._)};return(b,_)=>{f(),m(b);let T=void 0;while((T=_(y()))===void 0)m();return f(),T}}function fn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var dx=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var nr=BigInt(0),_t=BigInt(1),Bs=BigInt(2),BP=BigInt(3),jP=BigInt(4),UP=BigInt(5),u7=BigInt(7),qP=BigInt(8),d7=BigInt(9),ZP=BigInt(16);function gt(e,t){if(t<=nr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=nr?r:t+r}function pn(e,t,r){if(t<nr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >nr)i*=i,i%=r;return i}function NP(e,t){if(e===nr)throw Error("invert: expected non-zero number");if(t<=nr)throw Error("invert: expected positive modulus, got "+t);let r=gt(e,t),i=t,n=nr,o=_t,s=_t,a=nr;while(r!==nr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==_t)throw Error("invert: does not exist");return gt(n,t)}function fx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function MP(e,t){let r=e,i=(r.ORDER+_t)/jP,n=r.pow(t,i);return fx(r,n,t),n}function f7(e,t){let r=e,i=(r.ORDER-UP)/qP,n=r.mul(t,Bs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Bs),o),c=r.mul(s,r.sub(a,r.ONE));return fx(r,c,t),c}function p7(e){let t=fm(e),r=FP(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+u7)/ZP;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),y=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,f,y),f=l.cmov(m,p,g);let b=l.eql(l.sqr(f),c),_=l.cmov(u,f,b);return fx(l,_,c),_}}function FP(e){if(e<BP)throw Error("sqrt is not defined for small field");let t=e-_t,r=0;while(t%Bs===nr)t/=Bs,r++;let i=Bs,n=fm(e);while(DP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return MP;let o=n.pow(i,t),s=(t+_t)/Bs;return function(c,l){let u=c;if(u.is0(l))return l;if(DP(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),y=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,b=u.sqr(m);while(!u.eql(b,u.ONE))if(g++,b=u.sqr(b),g===f)throw Error("Cannot find square root");let _=_t<<BigInt(f-g-1),T=u.pow(p,_);f=g,p=u.sqr(T),m=u.mul(m,p),y=u.mul(y,T)}return y}}function m7(e){if(e%jP===BP)return MP;if(e%qP===UP)return f7;if(e%ZP===d7)return p7(e);return FP(e)}var Ni=(e,t)=>(gt(e,t)&_t)===_t,h7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function px(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=h7.reduce((i,n)=>(i[n]="function",i),t);if(fn(e,r),ei(e.BYTES,"BYTES"),ei(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=_t)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function g7(e,t,r){let i=e;if(r<nr)throw Error("invalid exponent, negatives unsupported");if(r===nr)return i.ONE;if(r===_t)return t;let n=i.ONE,o=t;while(r>nr){if(r&_t)n=i.mul(n,o);o=i.sqr(o),r>>=_t}return n}function qu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function DP(e,t){let r=e,i=(r.ORDER-_t)/Bs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function y7(e,t){if(t!==void 0)ux(t);if(e<=nr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=oc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var LP=new WeakMap;class mx{ORDER;BITS;BYTES;isLE;ZERO=nr;ONE=_t;_lengths;_mod;constructor(e,t={}){if(e<=_t)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=y7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return gt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return nr<=e&&e<this.ORDER}is0(e){return e===nr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&_t)===_t}neg(e){return gt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return gt(e*e,this.ORDER)}add(e,t){return gt(e+t,this.ORDER)}sub(e,t){return gt(e-t,this.ORDER)}mul(e,t){return gt(e*t,this.ORDER)}pow(e,t){return g7(this,e,t)}div(e,t){return gt(e*NP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return NP(e,this.ORDER)}sqrt(e){let t=LP.get(this);if(!t)LP.set(this,t=m7(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?ju(e,this.BYTES):um(e,this.BYTES)}fromBytes(e,t=!1){ct(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?An(e):Ls(e);if(s)a=gt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return qu(this,e)}cmov(e,t,r){return Pi(r,"condition"),r?t:e}}Object.freeze(mx.prototype);function fm(e,t={}){return new mx(e,t)}function HP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=_t)throw Error("field order must be greater than 1");let t=oc(e-_t);return Math.ceil(t/8)}function hx(e){let t=HP(e);return t+Math.ceil(t/2)}function KP(e,t,r=!1){ct(e);let i=e.length,n=HP(t),o=Math.max(hx(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?An(e):Ls(e),a=gt(s,t-_t)+_t;return r?ju(a,n):um(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sc=BigInt(0),js=BigInt(1);function Zu(e,t){let r=t.negate();return e?r:t}function Us(e,t){let r=qu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function GP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function gx(e,t){GP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Uu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function JP(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=js;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var yx=new WeakMap,QP=new WeakMap;function bx(e){return QP.get(e)||1}function VP(e){if(e!==sc)throw Error("invalid wNAF")}class Mu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>sc){if(t&js)r=r.add(i);i=i.double(),t>>=js}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=gx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=gx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=JP(r,s,o);if(r=a,l)n=n.add(Zu(f,t[p]));else i=i.add(Zu(u,t[c]))}return VP(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=gx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===sc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=JP(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return VP(r),i}getPrecomputes(e,t,r){let i=yx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);yx.set(t,i)}}return i}cached(e,t,r){let i=bx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=bx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){GP(t,this.bits),QP.set(e,t),yx.delete(e)}hasCache(e){return bx(e)!==1}}function YP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>sc||i>sc){if(r&js)o=o.add(n);if(i&js)s=s.add(n);n=n.double(),r>>=js,i>>=js}return{p1:o,p2:s}}function WP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return px(t),t}else return fm(e,{isLE:r})}function pm(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>sc))throw Error(`CURVE.${c} must be positive bigint`)}let n=WP(t.p,r.Fp,i),o=WP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Fu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Hu(e,t){if(ei(e),ei(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function b7(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function S7(e){if(!nc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?dm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Sx(e,t,r,i){if(ct(e),ei(r),t=S7(t),t.length>255)t=i(rr(dm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=rr(t,Hu(t.length,1)),c=new Uint8Array(o),l=Hu(r,2),u=Array(s),f=i(rr(c,e,l,Hu(0,1),a));u[0]=i(rr(f,Hu(1,1),a));for(let m=1;m<s;m++){let y=[b7(f,u[m-1]),Hu(m+1,1),a];u[m]=i(rr(...y))}return rr(...u).slice(0,r)}var XP="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ez=(e,t)=>(e+(e>=0?t:-t)/rz)/t;function x7(e,t,r){zi("scalar",e,ti,r);let[[i,n],[o,s]]=t,a=ez(s*e,r),c=ez(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<ti,p=u<ti;if(f)l=-l;if(p)u=-u;let m=Uu(Math.ceil(oc(r)/2))+Eo;if(l<ti||l>=m||u<ti||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function wx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function xx(e,t){fn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Pi(r.lowS,"lowS"),Pi(r.prehash,"prehash"),r.format!==void 0)wx(r.format);return r}class tz extends Error{constructor(e=""){super(e)}}var $n={Err:tz,_tlv:{encode:(e,t)=>{let{Err:r}=$n;if(ei(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Bu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Bu(n.length/2|128):"";return Bu(e)+o+n+t},decode(e,t){let{Err:r}=$n;t=ct(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=$n;if(lm(e),e<ti)throw new t("integer: negative integers are not allowed");let r=Bu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=$n;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Ls(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=$n,n=ct(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=$n,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze($n._tlv);Object.freeze($n._int);Object.freeze($n);var ti=BigInt(0),Eo=BigInt(1),rz=BigInt(2),mm=BigInt(3),w7=BigInt(4);function nz(e,t={}){let r=pm("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;fn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=oz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(Z,P,N){if(l&&P.is0())return Uint8Array.of(0);let{x:I,y:O}=P.toAffine(),R=i.toBytes(I);if(Pi(N,"isCompressed"),N){f();let M=!i.isOdd(O);return rr(iz(M),R)}else return rr(Uint8Array.of(4),R,i.toBytes(O))}function m(Z){ct(Z,void 0,"Point");let{publicKey:P,publicKeyUncompressed:N}=u,I=Z.length,O=Z[0],R=Z.subarray(1);if(l&&I===1&&O===0)return{x:i.ZERO,y:i.ZERO};if(I===P&&(O===2||O===3)){let M=i.fromBytes(R);if(!i.isValid(M))throw Error("bad point: is not on curve, wrong x");let L=b(M),V;try{V=i.sqrt(L)}catch(ue){let C=ue instanceof Error?": "+ue.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let k=i.isOdd(V);if((O&1)===1!==k)V=i.neg(V);return{x:M,y:V}}else if(I===N&&O===4){let M=i.BYTES,L=i.fromBytes(R.subarray(0,M)),V=i.fromBytes(R.subarray(M,M*2));if(!_(L,V))throw Error("bad point: is not on curve");return{x:L,y:V}}else throw Error(`bad point: got length ${I}, expected compressed=${P} or uncompressed=${N}`)}let y=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function b(Z){let P=i.sqr(Z),N=i.mul(P,Z);return i.add(i.add(N,i.mul(Z,o.a)),o.b)}function _(Z,P){let N=i.sqr(P),I=b(Z);return i.eql(N,I)}if(!_(o.Gx,o.Gy))throw Error("bad curve params: generator point");let T=i.mul(i.pow(o.a,mm),w7),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(T,A)))throw Error("bad curve params: a or b");function z(Z,P,N=!1){if(!i.isValid(P)||N&&i.is0(P))throw Error(`bad point coordinate ${Z}`);return P}function j(Z){if(!(Z instanceof D))throw Error("Weierstrass Point expected")}function E(Z){if(!c||!c.basises)throw Error("no endo");return x7(Z,c.basises,n.ORDER)}function F(Z,P,N,I,O){return N=new D(i.mul(N.X,Z),N.Y,N.Z),P=Zu(I,P),N=Zu(O,N),P.add(N)}class D{static BASE=new D(o.Gx,o.Gy,i.ONE);static ZERO=new D(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(Z,P,N){this.X=z("x",Z),this.Y=z("y",P,!0),this.Z=z("z",N),Object.freeze(this)}static CURVE(){return o}static fromAffine(Z){let{x:P,y:N}=Z||{};if(!Z||!i.isValid(P)||!i.isValid(N))throw Error("invalid affine point");if(Z instanceof D)throw Error("projective point not allowed");if(i.is0(P)&&i.is0(N))return D.ZERO;return new D(P,N,i.ONE)}static fromBytes(Z){let P=D.fromAffine(g(ct(Z,void 0,"point")));return P.assertValidity(),P}static fromHex(Z){return D.fromBytes(rc(Z))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(Z=8,P=!0){if(X.createCache(this,Z),!P)this.multiply(mm);return this}assertValidity(){let Z=this;if(Z.is0()){if(t.allowInfinityPoint&&i.is0(Z.X)&&i.eql(Z.Y,i.ONE)&&i.is0(Z.Z))return;throw Error("bad point: ZERO")}let{x:P,y:N}=Z.toAffine();if(!i.isValid(P)||!i.isValid(N))throw Error("bad point: x or y not field elements");if(!_(P,N))throw Error("bad point: equation left != right");if(!Z.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:Z}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(Z)}equals(Z){j(Z);let{X:P,Y:N,Z:I}=this,{X:O,Y:R,Z:M}=Z,L=i.eql(i.mul(P,M),i.mul(O,I)),V=i.eql(i.mul(N,M),i.mul(R,I));return L&&V}negate(){return new D(this.X,i.neg(this.Y),this.Z)}double(){let{a:Z,b:P}=o,N=i.mul(P,mm),{X:I,Y:O,Z:R}=this,M=i.ZERO,L=i.ZERO,V=i.ZERO,k=i.mul(I,I),te=i.mul(O,O),ue=i.mul(R,R),C=i.mul(I,O);return C=i.add(C,C),V=i.mul(I,R),V=i.add(V,V),M=i.mul(Z,V),L=i.mul(N,ue),L=i.add(M,L),M=i.sub(te,L),L=i.add(te,L),L=i.mul(M,L),M=i.mul(C,M),V=i.mul(N,V),ue=i.mul(Z,ue),C=i.sub(k,ue),C=i.mul(Z,C),C=i.add(C,V),V=i.add(k,k),k=i.add(V,k),k=i.add(k,ue),k=i.mul(k,C),L=i.add(L,k),ue=i.mul(O,R),ue=i.add(ue,ue),k=i.mul(ue,C),M=i.sub(M,k),V=i.mul(ue,te),V=i.add(V,V),V=i.add(V,V),new D(M,L,V)}add(Z){j(Z);let{X:P,Y:N,Z:I}=this,{X:O,Y:R,Z:M}=Z,L=i.ZERO,V=i.ZERO,k=i.ZERO,te=o.a,ue=i.mul(o.b,mm),C=i.mul(P,O),be=i.mul(N,R),Ee=i.mul(I,M),Ce=i.add(P,N),Re=i.add(O,R);Ce=i.mul(Ce,Re),Re=i.add(C,be),Ce=i.sub(Ce,Re),Re=i.add(P,I);let _e=i.add(O,M);return Re=i.mul(Re,_e),_e=i.add(C,Ee),Re=i.sub(Re,_e),_e=i.add(N,I),L=i.add(R,M),_e=i.mul(_e,L),L=i.add(be,Ee),_e=i.sub(_e,L),k=i.mul(te,Re),L=i.mul(ue,Ee),k=i.add(L,k),L=i.sub(be,k),k=i.add(be,k),V=i.mul(L,k),be=i.add(C,C),be=i.add(be,C),Ee=i.mul(te,Ee),Re=i.mul(ue,Re),be=i.add(be,Ee),Ee=i.sub(C,Ee),Ee=i.mul(te,Ee),Re=i.add(Re,Ee),C=i.mul(be,Re),V=i.add(V,C),C=i.mul(_e,Re),L=i.mul(Ce,L),L=i.sub(L,C),C=i.mul(Ce,be),k=i.mul(_e,k),k=i.add(k,C),new D(L,V,k)}subtract(Z){return j(Z),this.add(Z.negate())}is0(){return this.equals(D.ZERO)}multiply(Z){let{endo:P}=t;if(!n.isValidNot0(Z))throw RangeError("invalid scalar: out of range");let N,I,O=(R)=>X.cached(this,R,(M)=>Us(D,M));if(P){let{k1neg:R,k1:M,k2neg:L,k2:V}=E(Z),{p:k,f:te}=O(M),{p:ue,f:C}=O(V);I=te.add(C),N=F(P.beta,k,ue,R,L)}else{let{p:R,f:M}=O(Z);N=R,I=M}return Us(D,[N,I])[0]}multiplyUnsafe(Z){let{endo:P}=t,N=this,I=Z;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===ti||N.is0())return D.ZERO;if(I===Eo)return N;if(X.hasCache(this))return this.multiply(I);if(P){let{k1neg:O,k1:R,k2neg:M,k2:L}=E(I),{p1:V,p2:k}=YP(D,N,R,L);return F(P.beta,V,k,O,M)}else return X.unsafe(N,I)}toAffine(Z){let P=this,N=Z,{X:I,Y:O,Z:R}=P;if(i.eql(R,i.ONE))return{x:I,y:O};let M=P.is0();if(N==null)N=M?i.ONE:i.inv(R);let L=i.mul(I,N),V=i.mul(O,N),k=i.mul(R,N);if(M)return{x:i.ZERO,y:i.ZERO};if(!i.eql(k,i.ONE))throw Error("invZ was invalid");return{x:L,y:V}}isTorsionFree(){let{isTorsionFree:Z}=t;if(s===Eo)return!0;if(Z)return Z(D,this);return X.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:Z}=t;if(s===Eo)return this;if(Z)return Z(D,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Eo)return this.is0();return this.clearCofactor().is0()}toBytes(Z=!0){return Pi(Z,"isCompressed"),this.assertValidity(),y(D,this,Z)}toHex(Z=!0){return tc(this.toBytes(Z))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let H=n.BITS,X=new Mu(D,t.endo?Math.ceil(H/2):H);if(H>=8)D.BASE.precompute(8);return Object.freeze(D.prototype),Object.freeze(D),D}function iz(e){return Uint8Array.of(e?2:3)}function oz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function v7(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?ic:t.randomBytes,n=Object.assign(oz(e.Fp,r),{seed:Math.max(hx(r.ORDER),16)});function o(m){try{let y=r.fromBytes(m);return r.isValidNot0(y)}catch(y){return!1}}function s(m,y){let{publicKey:g,publicKeyUncompressed:b}=n;try{let _=m.length;if(y===!0&&_!==g)return!1;if(y===!1&&_!==b)return!1;return!!e.fromBytes(m)}catch(_){return!1}}function a(m){return m=m===void 0?i(n.seed):m,KP(ct(m,n.seed,"seed"),r.ORDER)}function c(m,y=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(y)}function l(m){let{secretKey:y,publicKey:g,publicKeyUncompressed:b}=n,_=r._lengths;if(!nc(m))return;let T=ct(m,void 0,"key").length,A=T===g||T===b,z=T===y||!!_?.includes(T);if(A&&z)return;return A}function u(m,y,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(y)===!1)throw Error("second arg must be public key");let b=r.fromBytes(m);return e.fromBytes(y).multiply(b).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Fu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function sz(e,t,r={}){let i=t;ki(i),fn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?ic:r.randomBytes,o=r.hmac===void 0?(O,R)=>Vn(i,O,R):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:y}=v7(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},b=c*rz+Eo<s.ORDER;function _(O){let R=c>>Eo;return O>R}function T(O,R){if(!a.isValidNot0(R))throw Error(`invalid signature ${O}: out of range 1..Point.Fn.ORDER`);return R}function A(){if(b)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function z(O,R){wx(R);let M=y.signature,L=R==="compact"?M:R==="recovered"?M+1:void 0;return ct(O,L)}class j{r;s;recovery;constructor(O,R,M){if(this.r=T("r",O),this.s=T("s",R),M!=null){if(A(),![0,1,2,3].includes(M))throw Error("invalid recovery id");this.recovery=M}Object.freeze(this)}static fromBytes(O,R=g.format){z(O,R);let M;if(R==="der"){let{r:te,s:ue}=$n.toSig(ct(O));return new j(te,ue)}if(R==="recovered")M=O[0],R="compact",O=O.subarray(1);let L=y.signature/2,V=O.subarray(0,L),k=O.subarray(L,L*2);return new j(a.fromBytes(V),a.fromBytes(k),M)}static fromHex(O,R){return this.fromBytes(rc(O),R)}assertRecovery(){let{recovery:O}=this;if(O==null)throw Error("invalid recovery id: must be present");return O}addRecoveryBit(O){return new j(this.r,this.s,O)}recoverPublicKey(O){let{r:R,s:M}=this,L=this.assertRecovery(),V=L===2||L===3?R+c:R;if(!s.isValid(V))throw Error("invalid recovery id: sig.r+curve.n != R.x");let k=s.toBytes(V),te=e.fromBytes(rr(iz((L&1)===0),k)),ue=a.inv(V),C=F(ct(O,void 0,"msgHash")),be=a.create(-C*ue),Ee=a.create(M*ue),Ce=e.BASE.multiplyUnsafe(be).add(te.multiplyUnsafe(Ee));if(Ce.is0())throw Error("invalid recovery: point at infinify");return Ce.assertValidity(),Ce}hasHighS(){return _(this.s)}toBytes(O=g.format){if(wx(O),O==="der")return rc($n.hexFromSig(this));let{r:R,s:M}=this,L=a.toBytes(R),V=a.toBytes(M);if(O==="recovered")return A(),rr(Uint8Array.of(this.assertRecovery()),L,V);return rr(L,V)}toHex(O){return tc(this.toBytes(O))}}Object.freeze(j.prototype),Object.freeze(j);let E=r.bits2int===void 0?function(R){if(R.length>8192)throw Error("input is too large");let M=Ls(R),L=R.length*8-l;return L>0?M>>BigInt(L):M}:r.bits2int,F=r.bits2int_modN===void 0?function(R){return a.create(E(R))}:r.bits2int_modN,D=Uu(l);function H(O){return zi("num < 2^"+l,O,ti,D),a.toBytes(O)}function X(O,R){return ct(O,void 0,"message"),R?ct(i(O),void 0,"prehashed message"):O}function Z(O,R,M){let{lowS:L,prehash:V,extraEntropy:k}=xx(M,g);O=X(O,V);let te=F(O),ue=a.fromBytes(R);if(!a.isValidNot0(ue))throw Error("invalid private key");let C=[H(ue),H(te)];if(k!=null&&k!==!1){let Re=k===!0?n(y.secretKey):k;C.push(ct(Re,void 0,"extraEntropy"))}let be=rr(...C),Ee=te;function Ce(Re){let _e=E(Re);if(!a.isValidNot0(_e))return;let Je=a.inv(_e),Ne=e.BASE.multiply(_e).toAffine(),Ye=a.create(Ne.x);if(Ye===ti)return;let mt=a.create(Je*a.create(Ee+Ye*ue));if(mt===ti)return;let zt=(Ne.x===Ye?0:2)|Number(Ne.y&Eo),dr=mt;if(L&&_(mt))dr=a.neg(mt),zt^=1;return new j(Ye,dr,b?void 0:zt)}return{seed:be,k2sig:Ce}}function P(O,R,M={}){let{seed:L,k2sig:V}=Z(O,R,M);return zP(i.outputLen,a.BYTES,o)(L,V).toBytes(M.format)}function N(O,R,M,L={}){let{lowS:V,prehash:k,format:te}=xx(L,g);if(M=ct(M,void 0,"publicKey"),R=X(R,k),!nc(O)){let ue=O instanceof j?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ue)}z(O,te);try{let ue=j.fromBytes(O,te),C=e.fromBytes(M);if(V&&ue.hasHighS())return!1;let{r:be,s:Ee}=ue,Ce=F(R),Re=a.inv(Ee),_e=a.create(Ce*Re),Je=a.create(be*Re),Ne=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(Je));if(Ne.is0())return!1;return a.create(Ne.x)===be}catch(ue){return!1}}function I(O,R,M={}){let{prehash:L}=xx(M,g);return R=X(R,L),j.fromBytes(O,"recovered").recoverPublicKey(R).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:y,Point:e,sign:P,verify:N,recoverPublicKey:I,Signature:j,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var k7=nz(_7),ac=sz(k7,$t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Io=BigInt(0),jr=BigInt(1),vx=BigInt(2),E7=BigInt(8);function I7(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function az(e,t={}){let r=t,i=pm("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;fn(r,{},{uvRatio:"function"});let c=vx<<BigInt(o.BYTES*8)-jr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,b)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,b))}}catch(_){return{isValid:!1,value:Io}}}:r.uvRatio;if(!I7(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,b,_=!1){let T=_?jr:Io;return zi("coordinate "+g,b,T,c),b}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,jr,l(s.Gx*s.Gy));static ZERO=new m(Io,jr,jr,Io);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,b,_,T){this.X=f("x",g),this.Y=f("y",b),this.Z=f("z",_,!0),this.T=f("t",T),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:b,y:_}=g||{};return f("x",b),f("y",_),new m(b,_,jr,l(b*_))}static fromBytes(g,b=!1){let _=n.BYTES,{a:T,d:A}=s;g=ko(ct(g,_,"point")),Pi(b,"zip215");let z=ko(g),j=g[_-1];z[_-1]=j&-129;let E=An(z),F=b?c:n.ORDER;zi("point.y",E,Io,F);let D=l(E*E),H=l(D-jr),X=l(A*D-T),{isValid:Z,value:P}=u(H,X);if(!Z)throw Error("bad point: invalid y coordinate");let N=(P&jr)===jr,I=(j&128)!==0;if(!b&&P===Io&&I)throw Error("bad point: x=0 and x_0=1");if(I!==N)P=l(-P);return m.fromAffine({x:P,y:E})}static fromHex(g,b=!1){return m.fromBytes(rc(g),b)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,b=!0){if(y.createCache(this,g),!b)this.multiply(vx);return this}assertValidity(){let g=this,{a:b,d:_}=s;if(g.is0())throw Error("bad point: ZERO");let{X:T,Y:A,Z:z,T:j}=g,E=l(T*T),F=l(A*A),D=l(z*z),H=l(D*D),X=l(E*b),Z=l(D*l(X+F)),P=l(H+l(_*l(E*F)));if(Z!==P)throw Error("bad point: equation left != right (1)");let N=l(T*A),I=l(z*j);if(N!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:b,Y:_,Z:T}=this,{X:A,Y:z,Z:j}=g,E=l(b*j),F=l(A*T),D=l(_*j),H=l(z*T);return E===F&&D===H}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:b,Y:_,Z:T}=this,A=l(b*b),z=l(_*_),j=l(vx*l(T*T)),E=l(g*A),F=b+_,D=l(l(F*F)-A-z),H=E+z,X=H-j,Z=E-z,P=l(D*X),N=l(H*Z),I=l(D*Z),O=l(X*H);return new m(P,N,O,I)}add(g){p(g);let{a:b,d:_}=s,{X:T,Y:A,Z:z,T:j}=this,{X:E,Y:F,Z:D,T:H}=g,X=l(T*E),Z=l(A*F),P=l(j*_*H),N=l(z*D),I=l((T+A)*(E+F)-X-Z),O=N-P,R=N+P,M=l(Z-b*X),L=l(I*O),V=l(R*M),k=l(I*M),te=l(O*R);return new m(L,V,te,k)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:b,f:_}=y.cached(this,g,(T)=>Us(m,T));return Us(m,[b,_])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===Io)return m.ZERO;if(this.is0()||g===jr)return this;return y.unsafe(this,g,(b)=>Us(m,b))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return y.unsafe(this,s.n).is0()}toAffine(g){let b=this,_=g,{X:T,Y:A,Z:z}=b,j=b.is0();if(_==null)_=j?E7:n.inv(z);let E=l(T*_),F=l(A*_),D=n.mul(z,_);if(j)return{x:Io,y:jr};if(D!==jr)throw Error("invZ was invalid");return{x:E,y:F}}clearCofactor(){if(a===jr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:b}=this.toAffine(),_=n.toBytes(b);return _[_.length-1]|=g&jr?128:0,_}toHex(){return tc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=new Mu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class _x{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){dx()}static fromHex(e){dx()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return tc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ku=BigInt(0),cc=BigInt(1),hm=BigInt(2);function T7(e){return fn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function cz(e){let t=T7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?ic:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?hm**BigInt(254):hm**BigInt(447),y=a?BigInt(8)*hm**BigInt(251)-cc:BigInt(4)*hm**BigInt(445)-cc,g=m+y+cc,b=(I)=>gt(I,r),_=T(f);function T(I){return ju(b(I),u)}function A(I){let O=ko(ct(I,u,"uCoordinate"));if(a)O[31]&=127;return b(An(O))}function z(I){return An(n(ko(ct(I,u,"scalar"))))}function j(I,O){let R=X(A(O),z(I));if(R===Ku)throw Error("invalid private or public key received");return T(R)}function E(I){return j(I,_)}let F=E,D=j;function H(I,O,R){let M=b(I*(O-R));return O=b(O-M),R=b(R+M),{x_2:O,x_3:R}}function X(I,O){zi("u",I,Ku,r),zi("scalar",O,m,g);let R=O,M=I,L=cc,V=Ku,k=I,te=cc,ue=Ku;for(let be=BigInt(l-1);be>=Ku;be--){let Ee=R>>be&cc;ue^=Ee,{x_2:L,x_3:k}=H(ue,L,k),{x_2:V,x_3:te}=H(ue,V,te),ue=Ee;let Ce=L+V,Re=b(Ce*Ce),_e=L-V,Je=b(_e*_e),Ne=Re-Je,Ye=k+te,mt=k-te,zt=b(mt*Ce),dr=b(Ye*_e),Kr=zt+dr,Jr=zt-dr;k=b(Kr*Kr),te=b(M*b(Jr*Jr)),L=b(Re*Je),V=b(Ne*(Re+b(p*Ne)))}({x_2:L,x_3:k}=H(ue,L,k)),{x_2:V,x_3:te}=H(ue,V,te);let C=o(V);return b(L*C)}let Z={secretKey:u,publicKey:u,seed:u},P=(I)=>(I=I===void 0?c(u):I,ct(I,Z.seed,"seed"),I),N={randomSecretKey:P};return Object.freeze(Z),Object.freeze(N),Object.freeze({keygen:Fu(P,F),getSharedSecret:D,getPublicKey:F,scalarMult:j,scalarMultBase:E,utils:N,GuBytes:_.slice(),lengths:Z})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var A7=BigInt(0),Di=BigInt(1),lz=BigInt(2),$7=BigInt(3),C7=BigInt(5),R7=BigInt(8),Zs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Tx=(()=>({p:Zs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:R7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function fz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Zs,a=e*e%o*e%o,c=pn(a,lz,o)*a%o,l=pn(c,Di,o)*e%o,u=pn(l,C7,o)*l%o,f=pn(u,t,o)*u%o,p=pn(f,r,o)*f%o,m=pn(p,i,o)*p%o,y=pn(m,n,o)*m%o,g=pn(y,n,o)*m%o,b=pn(g,t,o)*u%o;return{pow_p_5_8:pn(b,lz,o)*e%o,b2:a}}function O7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var kx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Ax(e,t){let r=Zs,i=gt(t*t*t,r),n=gt(i*i*t,r),o=fz(e*n).pow_p_5_8,s=gt(e*i*o,r),a=gt(t*s*s,r),c=s,l=gt(s*kx,r),u=a===e,f=a===gt(-e,r),p=a===gt(-e*kx,r);if(u)s=c;if(f||p)s=l;if(Ni(s,r))s=gt(-s,r);return{isValid:u||f,value:s}}var qs=az(Tx,{uvRatio:Ax}),To=(()=>qs.Fp)(),pz=(()=>qs.Fn)();var gm=(()=>{let e=Zs;return cz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=fz(t);return gt(pn(r,$7,e)*i,e)},adjustScalarBytes:O7})})();var Ex=kx,P7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),z7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),N7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),D7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),uz=(e)=>Ax(Di,e),L7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Ix=(e)=>To.create(An(e)&L7);function dz(e){let{d:t}=Tx,r=Zs,i=(_)=>To.create(_),n=i(Ex*e*e),o=i((n+Di)*N7),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Ax(o,a),u=i(l*e);if(!Ni(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Di)*D7-a),p=l*l,m=i((l+l)*a),y=i(f*P7),g=i(Di-p),b=i(Di+p);return new qs(i(m*b),i(g*y),i(y*b),i(m*g))}class Tr extends _x{static BASE=(()=>new Tr(qs.BASE))();static ZERO=(()=>new Tr(qs.ZERO))();static Fp=(()=>To)();static Fn=(()=>pz)();constructor(e){super(e)}static fromAffine(e){return new Tr(qs.fromAffine(e))}assertSame(e){if(!(e instanceof Tr))throw Error("RistrettoPoint expected")}init(e){return new Tr(e)}static fromBytes(e){Yt(e,32);let{a:t,d:r}=Tx,i=Zs,n=(A)=>To.create(A),o=Ix(e);if(!PP(To.toBytes(o),e)||Ni(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Di+t*s),c=n(Di-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=uz(n(f*u)),y=n(m*c),g=n(m*y*f),b=n((o+o)*y);if(Ni(b,i))b=n(-b);let _=n(a*g),T=n(b*_);if(!p||Ni(T,i)||_===A7)throw Error("invalid ristretto255 encoding 2");return new Tr(new qs(b,_,Di,T))}static fromHex(e){return Tr.fromBytes(mu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Zs,o=(g)=>To.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=uz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(Ni(i*p,n)){let g=o(t*Ex),b=o(e*Ex);e=g,t=b,m=o(u*z7)}else m=f;if(Ni(e*p,n))t=o(-t);let y=o((r-t)*m);if(Ni(y,n))y=o(-y);return To.toBytes(y)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>To.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Tr.ZERO)}}Object.freeze(Tr.BASE);Object.freeze(Tr.ZERO);Object.freeze(Tr.prototype);Object.freeze(Tr);var B7=Object.freeze({Point:Tr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Sx(e,r,64,zp);return B7.deriveToCurve(i)},hashToScalar(e,t={DST:XP}){let r=Sx(e,t.DST,64,zp);return pz.create(An(r))},deriveToCurve(e){Yt(e,64);let t=Ix(e.subarray(0,32)),r=dz(t),i=Ix(e.subarray(32,64)),n=dz(i);return new Tr(r.add(n))}});var mz=!1,j7=!1;async function hz(e,t){if(j7)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function ym(e,t){return await hz(async()=>{let r=$x(e)?e:await q7(e),i=await crypto.subtle.importKey("raw",Z7(t),{name:"X25519"},mz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if($x(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return gm.scalarMult(e,t)})}async function Ju(e){return await hz(async()=>ym(e,gm.GuBytes),()=>{if($x(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return gm.scalarMultBase(e)})}var U7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function q7(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...U7,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},mz,["deriveBits"])}function $x(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function Z7(e){return e}class Cx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),F7(Ms(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Ms(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Ms(this.transcript)}}}function F7(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Ms(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function lc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function bm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Rx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function gz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function yz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Ms(i),s=o.subarray(0,t),a=lc(e,o.subarray(t));return{data:s,rest:a}}class ri{args;body;constructor(e,t){this.args=e,this.body=t}}async function H7(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=pr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Ms(i);return{s:new ri(r,n)}}async function bz(e){let t=new Cx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await H7(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=pr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:lc(e,a)}}}function Ox(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let r of e){t.push("-> "+r.args.join(" ")+`
 `);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(pr.encode(r.body.subarray(i,n))+`
 `)}if(r.body.length%48===0)t.push(`