@rizom/ops 0.2.0-alpha.618 → 0.2.0-alpha.619

package/dist/brains-ops.js

@@ -733,7 +733,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var KJ,Axe;var bR=x(async()=>{Re();ZJ();Ln();kp();await qJ();KJ=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),Axe=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{parseArgs as P9}from"util";function yt(e){return e}class $p extends Error{constructor(e){super(e);this.name="CliUsageError"}}function z9(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function N9(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function D9(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function wR(e,t){let r=z9(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=P9({args:e,options:N9(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(D9(s))throw new $p(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function vR(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>`  ${r.label.padEnd(t)}  ${r.description}`)}function L9(e){return vR(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function B9(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function _R(e){return vR(Object.entries(e).map(([t,r])=>({label:B9(t,r),description:r.description})))}function kR(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function j9(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function U9(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=j9(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(..._R(n.flags));return i}function ER(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...L9(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",..._R(e.globalFlags));return t.push(...U9(e.commands)),t.join(`
-`)}function IR(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function ht(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Cs(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Cp={name:"@rizom/ops",version:"0.2.0-alpha.618",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/auth-service":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as hW,mkdirSync as gW,readFileSync as rw,writeFileSync as nw}from"fs";import{dirname as yW,join as Nz}from"path";function gS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Rt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function tr(e,t,r=""){let i=gS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Ci(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Rt(e.outputLen),Rt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Va(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Rp(e,t){tr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Op(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Tr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Wa(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function An(e,t){return e<<32-t|e>>>t}function et(e,t){return e<<t|e>>>32-t>>>0}var Z9=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function M9(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function F9(e){for(let t=0;t<e.length;t++)e[t]=M9(e[t]);return e}var yS=Z9?(e)=>e:F9,AR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),H9=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Pp(e){if(tr(e),AR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=H9[e[r]];return t}var $i={_0:48,_9:57,A:65,F:70,a:97,f:102};function TR(e){if(e>=$i._0&&e<=$i._9)return e-$i._0;if(e>=$i.A&&e<=$i.F)return e-($i.A-10);if(e>=$i.a&&e<=$i.f)return e-($i.a-10);return}function gu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(AR)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=TR(e.charCodeAt(o)),a=TR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function K9(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function bS(e,t=""){if(typeof e==="string")return K9(e);return tr(e,void 0,t)}function SS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];tr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function zp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function xS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ri(e=32){Rt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var wS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class vS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Ci(e),tr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Tr(i)}update(e){return Va(this),this.iHash.update(e),this}digestInto(e){Va(this),Rp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Yn=(()=>{let e=(t,r,i)=>new vS(t,r).update(i).digest();return e.create=(t,r)=>new vS(t,r),e})();function yu(e,t,r){if(Ci(e),r===void 0)r=new Uint8Array(e.outputLen);return Yn(e,r,t)}var _S=Uint8Array.of(0),$R=Uint8Array.of();function kS(e,t,r,i=32){Ci(e),Rt(i,"length"),tr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=$R;else tr(r,void 0,"info");let s=new Uint8Array(o*n),a=Yn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)_S[0]=u+1,c.update(u===0?$R:l).update(r).update(_S).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Tr(l,_S),s.slice(0,i)}var go=(e,t,r,i,n)=>kS(e,yu(e,t,r),i,n);function CR(e,t,r){return e&t^~e&r}function RR(e,t,r){return e&t^e&r^t&r}class Np{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Wa(this.buffer)}update(e){Va(this),tr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Wa(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Va(this),Rp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Tr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Wa(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Oi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var rr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Dp=BigInt(4294967295),OR=BigInt(32);function J9(e,t=!1){if(t)return{h:Number(e&Dp),l:Number(e>>OR&Dp)};return{h:Number(e>>OR&Dp)|0,l:Number(e&Dp)|0}}function PR(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=J9(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var ES=(e,t,r)=>e>>>r,IS=(e,t,r)=>e<<32-r|t>>>r,Rs=(e,t,r)=>e>>>r|t<<32-r,Os=(e,t,r)=>e<<32-r|t>>>r,bu=(e,t,r)=>e<<64-r|t>>>r-32,Su=(e,t,r)=>e>>>r-32|t<<64-r;function Xn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var zR=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),NR=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,DR=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),LR=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,BR=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),jR=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var W9=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),yo=new Uint32Array(64);class UR extends Np{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)yo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=yo[u-15],p=yo[u-2],m=An(f,7)^An(f,18)^f>>>3,b=An(p,17)^An(p,19)^p>>>10;yo[u]=b+yo[u-7]+m+yo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=An(s,6)^An(s,11)^An(s,25),p=l+f+CR(s,a,c)+W9[u]+yo[u]|0,b=(An(r,2)^An(r,13)^An(r,22))+RR(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Tr(yo)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Tr(this.buffer)}}class qR extends UR{A=Oi[0]|0;B=Oi[1]|0;C=Oi[2]|0;D=Oi[3]|0;E=Oi[4]|0;F=Oi[5]|0;G=Oi[6]|0;H=Oi[7]|0;constructor(){super(32)}}var ZR=(()=>PR(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),G9=(()=>ZR[0])(),Q9=(()=>ZR[1])(),bo=new Uint32Array(80),So=new Uint32Array(80);class MR extends Np{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:y}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=y|0}process(e,t){for(let A=0;A<16;A++,t+=4)bo[A]=e.getUint32(t),So[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=bo[A-15]|0,D=So[A-15]|0,U=Rs(C,D,1)^Rs(C,D,8)^ES(C,D,7),T=Os(C,D,1)^Os(C,D,8)^IS(C,D,7),H=bo[A-2]|0,B=So[A-2]|0,V=Rs(H,B,19)^bu(H,B,61)^ES(H,B,6),te=Os(H,B,19)^Su(H,B,61)^IS(H,B,6),K=DR(T,te,So[A-7],So[A-16]),N=LR(K,U,V,bo[A-7],bo[A-16]);bo[A]=N|0,So[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:y,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let C=Rs(u,f,14)^Rs(u,f,18)^bu(u,f,41),D=Os(u,f,14)^Os(u,f,18)^Su(u,f,41),U=u&p^~u&b,T=f&m^~f&y,H=BR(k,D,T,Q9[A],So[A]),B=jR(H,S,C,U,G9[A],bo[A]),V=H|0,te=Rs(r,i,28)^bu(r,i,34)^bu(r,i,39),K=Os(r,i,28)^Su(r,i,34)^Su(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=y|0,b=p|0,y=m|0,p=u|0,m=f|0,{h:u,l:f}=Xn(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=zR(V,K,L);r=NR(I,B,te,N),i=I|0}({h:r,l:i}=Xn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Xn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Xn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Xn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=Xn(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=Xn(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:y}=Xn(this.Gh|0,this.Gl|0,b|0,y|0),{h:S,l:k}=Xn(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,y,S,k)}roundClean(){Tr(bo,So)}destroy(){this.destroyed=!0,Tr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class FR extends MR{Ah=rr[0]|0;Al=rr[1]|0;Bh=rr[2]|0;Bl=rr[3]|0;Ch=rr[4]|0;Cl=rr[5]|0;Dh=rr[6]|0;Dl=rr[7]|0;Eh=rr[8]|0;El=rr[9]|0;Fh=rr[10]|0;Fl=rr[11]|0;Gh=rr[12]|0;Gl=rr[13]|0;Hh=rr[14]|0;Hl=rr[15]|0;constructor(){super(64)}}var Ot=xS(()=>new qR,wS(1));var Lp=xS(()=>new FR,wS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Zp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function $S(e){if(!Zp(e))throw TypeError("Uint8Array expected")}function WR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function GR(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function xo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function wu(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function jp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Up(e,t){if(!WR(!0,t))throw TypeError(`${e}: array of strings expected`)}function CS(e,t){if(!WR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Gr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Qr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Up("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(jp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(jp(n),n.map((o)=>{xo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function Yr(e=""){return xo("join",e),{encode:(t)=>(Up("join.decode",t),t.join(e)),decode:(t)=>(xo("join.decode",t),t.split(e))}}function Mp(e,t="="){return wu(e),xo("padding",t),{encode(r){Up("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Up("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function QR(e){return GR(e),{encode:(t)=>t,decode:(t)=>e(t)}}function HR(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(jp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(wu(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var YR=(e,t)=>t===0?e:YR(t,e%t),qp=(e,t)=>e+(t-YR(e,t)),Bp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function TS(e,t,r,i){if(jp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(qp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${qp(t,r)}`);let n=0,o=0,s=Bp[t],a=Bp[r]-1,c=[];for(let l of e){if(wu(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Bp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function Y9(e){wu(e);let t=256;return{encode:(r)=>{if(!Zp(r))throw TypeError("radix.encode input should be Uint8Array");return HR(Array.from(r),t,e)},decode:(r)=>(CS("radix.decode",r),Uint8Array.from(HR(r,e,t)))}}function fn(e,t=!1){if(wu(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(qp(8,e)>32||qp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Zp(r))throw TypeError("radix2.encode input should be Uint8Array");return TS(Array.from(r),8,e,!t)},decode:(r)=>(CS("radix2.decode",r),Uint8Array.from(TS(r,e,8,t)))}}function KR(e){return GR(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var twe=Object.freeze(Gr(fn(4),Qr("0123456789ABCDEF"),Yr(""))),rwe=Object.freeze(Gr(fn(5),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Mp(5),Yr(""))),nwe=Object.freeze(Gr(fn(5),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Yr(""))),iwe=Object.freeze(Gr(fn(5),Qr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Mp(5),Yr(""))),owe=Object.freeze(Gr(fn(5),Qr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Yr(""))),swe=Object.freeze(Gr(fn(5),Qr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Yr(""),QR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),XR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),X9=/[\t\n\f\r ]/,eO=(e,t)=>{xo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&X9.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},RS=Object.freeze(XR?{encode(e){return $S(e),e.toBase64()},decode(e){return eO(e,!1)}}:Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Mp(6),Yr(""))),gr=Object.freeze(Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Yr(""))),awe=Object.freeze(XR?{encode(e){return $S(e),e.toBase64({alphabet:"base64url"})},decode(e){return eO(e,!0)}}:Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Mp(6),Yr(""))),cwe=Object.freeze(Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Yr(""))),OS=(e)=>Gr(Y9(58),Qr(e),Yr("")),lwe=Object.freeze(OS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),uwe=Object.freeze(OS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),dwe=Object.freeze(OS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var AS=Gr(Qr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Yr("")),JR=[996825010,642813549,513874426,1027748829,705979059];function xu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<JR.length;i++)if((t>>i&1)===1)r^=JR[i];return r}function VR(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=xu(n)^s>>5}n=xu(n);for(let o=0;o<i;o++)n=xu(n)^e.charCodeAt(o)&31;for(let o of t)n=xu(n)^o;for(let o=0;o<6;o++)n=xu(n);return n^=r,AS.encode(TS([n%Bp[30]],30,5,!1))}function tO(e){let t=e==="bech32"?1:734539939,r=fn(5),i=r.decode,n=r.encode,o=KR(i);function s(f,p,m=90){if(xo("bech32.encode prefix",f),Zp(p))p=Array.from(p);CS("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let y=b+7+p.length;if(m!==!1&&y>m)throw TypeError(`Length ${y} exceeds limit ${m}`);let S=f.toLowerCase(),k=VR(S,p,t);return`${S}1${AS.encode(p)}${k}`}function a(f,p=90){xo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let y=b.lastIndexOf("1");if(y===0||y===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,y),k=b.slice(y+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=AS.decode(k).slice(0,-6),C=VR(S,A,t);if(!k.endsWith(C))throw Error(`Invalid checksum in ${f}: expected "${C}"`);return{prefix:S,words:A}}let c=KR(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var Xr=Object.freeze(tO("bech32")),fwe=Object.freeze(tO("bech32m"));var eV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tV={encode(e){return $S(e),e.toHex()},decode(e){return xo("hex",e),Uint8Array.fromHex(e)}},pwe=Object.freeze(eV?tV:Gr(fn(4),Qr("0123456789abcdef"),Yr(""),QR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function nV(e,t,r,i){Ci(e);let n=zp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Rt(o,"c"),Rt(s,"dkLen"),Rt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=bS(t,"password"),l=bS(r,"salt"),u=new Uint8Array(s),f=Yn.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function iV(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Tr(n),r}function PS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=nV(e,t,r,i),l,u=new Uint8Array(4),f=Wa(u),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let y=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),y.set(p.subarray(0,y.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<y.length;k++)y[k]^=p[k]}}return iV(a,c,s,l,p)}function rO(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],y=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=y,P=S,J=k,j=A,Q=C,E=D,se=U;for(let fe=0;fe<8;fe+=2)te^=et(T+j|0,7),I^=et(te+T|0,9),j^=et(I+te|0,13),T^=et(j+I|0,18),z^=et(K+H|0,7),Q^=et(z+K|0,9),H^=et(Q+z|0,13),K^=et(H+Q|0,18),E^=et(P+N|0,7),B^=et(E+P|0,9),N^=et(B+E|0,13),P^=et(N+B|0,18),V^=et(se+J|0,7),L^=et(V+se|0,9),J^=et(L+V|0,13),se^=et(J+L|0,18),H^=et(T+V|0,7),B^=et(H+T|0,9),V^=et(B+H|0,13),T^=et(V+B|0,18),N^=et(K+te|0,7),L^=et(N+K|0,9),te^=et(L+N|0,13),K^=et(te+L|0,18),J^=et(P+z|0,7),I^=et(J+P|0,9),z^=et(I+J|0,13),P^=et(z+I|0,18),j^=et(se+E|0,7),Q^=et(j+se|0,9),E^=et(Q+j|0,13),se^=et(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=u+te|0,n[o++]=f+K|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=y+z|0,n[o++]=S+P|0,n[o++]=k+J|0,n[o++]=A+j|0,n[o++]=C+Q|0,n[o++]=D+E|0,n[o++]=U+se|0}function zS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(rO(r,s,e,t,r,o),a>0)s+=16;rO(r,o,e,t+=16,r,s)}}function oV(e,t,r){let i=zp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Rt(n,"N"),Rt(o,"r"),Rt(s,"p"),Rt(a,"dkLen"),Rt(c,"asyncTick"),Rt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let y=PS(Ot,e,t,{c:1,dkLen:f*s}),S=Op(y),k=Op(new Uint8Array(f*n)),A=Op(new Uint8Array(f)),C=()=>{};if(u){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;C=()=>{if(T++,u&&(!(T%U)||T===D))u(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:y,tmp:A,blockMixCb:C,asyncTick:c}}function sV(e,t,r,i,n){let o=PS(Ot,e,r,{c:1,dkLen:t});return Tr(r,i,n),o}function NS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=oV(e,t,r);yS(l);for(let m=0;m<o;m++){let b=a*m;for(let y=0;y<a;y++)c[y]=l[b+y];for(let y=0,S=0;y<i-1;y++)zS(c,S,c,S+=a,n),p();zS(c,(i-1)*a,l,b,n),p();for(let y=0;y<i;y++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];zS(f,0,l,b,n),p()}}return yS(l),sV(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function aV(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Fp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Ga(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Zt(e,t,r=""){let i=aV(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function DS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function nO(e,t,r=!1){Zt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!Qa(e))throw Error("invalid output, must be aligned")}function ei(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function cV(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Ps=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),lV=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var uV=(e)=>{for(let t=0;t<e.length;t++)e[t]=lV(e[t]);return e},Pi=Ps?(e)=>e:uV;function iO(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function oO(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function sO(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var aO=(e,t)=>{function r(i,...n){if(Zt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Zt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Zt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");Zt(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Zt(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(Zt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function vu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Zt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!Qa(t))throw Error("invalid output, must be aligned");return t}function cO(e,t,r){Ga(e),Ga(t),Fp(r);let i=new Uint8Array(16),n=cV(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function Qa(e){return e.byteOffset%4===0}function Ya(e){return Uint8Array.from(Zt(e))}var uO=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),dV=(()=>Pi(ei(uO("expand 16-byte k"))))(),fV=(()=>Pi(ei(uO("expand 32-byte k"))))();function tt(e,t){return e<<t|e>>>32-t}var _u=64,pV=16,LS=(()=>4294967295)(),lO=Uint32Array.of();function mV(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(_u),u=ei(l),f=Ps&&Qa(n)&&Qa(o),p=f?ei(n):lO,m=f?ei(o):lO;if(!Ps){for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),Pi(u),s>=LS)throw Error("arx: counter overflow");let y=Math.min(_u,c-b);for(let S=0,k;S<y;S++)k=b+S,o[k]=n[k]^l[S];b+=y}return}for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),s>=LS)throw Error("arx: counter overflow");let y=Math.min(_u,c-b);if(f&&y===_u){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<pV;k++)A=S+k,m[A]=p[A]^u[k];b+=_u;continue}for(let S=0,k;S<y;S++)k=b+S,o[k]=n[k]^l[S];b+=y}}function dO(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=iO({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Ga(n),Ga(s),Fp(o),Fp(r),(a,c,l,u,f=0)=>{Zt(a,void 0,"key"),Zt(c,void 0,"nonce"),Zt(l,void 0,"data");let p=l.length;if(u=vu(p,u,!1),Ga(f),f<0||f>=LS)throw Error("arx: counter overflow");let m=[],b=a.length,y,S;if(b===32)m.push(y=Ya(a)),S=fV;else if(b===16&&r)y=new Uint8Array(32),y.set(a),y.set(a,16),S=dV,m.push(y);else throw Zt(a,32,"arx key"),Error("invalid key size");if(!Ps||!Qa(c))m.push(c=Ya(c));let k=ei(y);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Ps)i(S,k,ei(D),k);else{let U=Pi(Uint32Array.from(S));i(U,k,ei(D),k),$n(U),Pi(k)}c=c.subarray(16)}else if(!Ps)Pi(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let C=Pi(ei(c));try{return mV(e,S,k,C,l,u,f,s),u}finally{$n(...m)}}}function nr(e,t){return e[t++]&255|(e[t++]&255)<<8}class fO{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ya(Zt(e,32,"key"));let t=nr(e,0),r=nr(e,2),i=nr(e,4),n=nr(e,6),o=nr(e,8),s=nr(e,10),a=nr(e,12),c=nr(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=nr(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],b=o[8],y=o[9],S=nr(e,t+0),k=nr(e,t+2),A=nr(e,t+4),C=nr(e,t+6),D=nr(e,t+8),U=nr(e,t+10),T=nr(e,t+12),H=nr(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),K=n[3]+((A>>>7|C<<9)&8191),N=n[4]+((C>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),J=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*y)+te*(5*b)+K*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*u)+z*(5*l)+P*(5*c)+J*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*y)+K*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*u)+P*(5*l)+J*(5*c),j+=E>>>13,E&=8191;let se=j+B*c+V*a+te*s+K*(5*y)+N*(5*b);j=se>>>13,se&=8191,se+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*u)+J*(5*l),j+=se>>>13,se&=8191;let fe=j+B*l+V*c+te*a+K*s+N*(5*y);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+J*(5*u),j+=fe>>>13,fe&=8191;let R=j+B*u+V*l+te*c+K*a+N*s;j=R>>>13,R&=8191,R+=L*(5*y)+I*(5*b)+z*(5*m)+P*(5*p)+J*(5*f),j+=R>>>13,R&=8191;let xe=j+B*f+V*u+te*l+K*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*y)+z*(5*b)+P*(5*m)+J*(5*p),j+=xe>>>13,xe&=8191;let Te=j+B*p+V*f+te*u+K*l+N*c;j=Te>>>13,Te&=8191,Te+=L*a+I*s+z*(5*y)+P*(5*b)+J*(5*m),j+=Te>>>13,Te&=8191;let Pe=j+B*m+V*p+te*f+K*u+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*y)+J*(5*b),j+=Pe>>>13,Pe&=8191;let Oe=j+B*b+V*m+te*p+K*f+N*u;j=Oe>>>13,Oe&=8191,Oe+=L*l+I*c+z*a+P*s+J*(5*y),j+=Oe>>>13,Oe&=8191;let _e=j+B*y+V*b+te*m+K*p+N*f;j=_e>>>13,_e&=8191,_e+=L*u+I*l+z*c+P*a+J*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=se,n[3]=fe,n[4]=R,n[5]=xe,n[6]=Te,n[7]=Pe,n[8]=Oe,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){DS(this),Zt(e),e=Ya(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){DS(this),nO(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var pO=sO(32,(e)=>new fO(e));function hV(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],b=t[4],y=t[5],S=t[6],k=t[7],A=n,C=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=y,P=S,J=k,j=A,Q=C,E=D,se=U;for(let R=0;R<o;R+=2)T=T+te|0,j=tt(j^T,16),I=I+j|0,te=tt(te^I,12),T=T+te|0,j=tt(j^T,8),I=I+j|0,te=tt(te^I,7),H=H+K|0,Q=tt(Q^H,16),z=z+Q|0,K=tt(K^z,12),H=H+K|0,Q=tt(Q^H,8),z=z+Q|0,K=tt(K^z,7),B=B+N|0,E=tt(E^B,16),P=P+E|0,N=tt(N^P,12),B=B+N|0,E=tt(E^B,8),P=P+E|0,N=tt(N^P,7),V=V+L|0,se=tt(se^V,16),J=J+se|0,L=tt(L^J,12),V=V+L|0,se=tt(se^V,8),J=J+se|0,L=tt(L^J,7),T=T+K|0,se=tt(se^T,16),P=P+se|0,K=tt(K^P,12),T=T+K|0,se=tt(se^T,8),P=P+se|0,K=tt(K^P,7),H=H+N|0,j=tt(j^H,16),J=J+j|0,N=tt(N^J,12),H=H+N|0,j=tt(j^H,8),J=J+j|0,N=tt(N^J,7),B=B+L|0,Q=tt(Q^B,16),I=I+Q|0,L=tt(L^I,12),B=B+L|0,Q=tt(Q^B,8),I=I+Q|0,L=tt(L^I,7),V=V+te|0,E=tt(E^V,16),z=z+E|0,te=tt(te^z,12),V=V+te|0,E=tt(E^V,8),z=z+E|0,te=tt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=u+te|0,i[fe++]=f+K|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=y+z|0,i[fe++]=S+P|0,i[fe++]=k+J|0,i[fe++]=A+j|0,i[fe++]=C+Q|0,i[fe++]=D+E|0,i[fe++]=U+se|0}var gV=dO(hV,{counterRight:!1,counterLength:4,allowShortKeys:!1});var yV=new Uint8Array(16),mO=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(yV.subarray(r))},bV=new Uint8Array(32);function hO(e,t,r,i,n){if(n!==void 0)Zt(n,void 0,"AAD");let o=e(t,r,bV),s=cO(i.length,n?n.length:0,!0),a=pO.create(o);if(n)mO(a,n);mO(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var SV=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=vu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=hO(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=vu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=hO(e,t,r,a,i);if(!oO(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),pn=aO({blockSize:64,nonceLength:12,tagLength:16},SV(gV));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Xa(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Wt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Ne(e,t,r=""){let i=Xa(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function mn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Wt(e.outputLen),Wt(e.blockLen)}function Ni(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Hp(e,t){Ne(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Kp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function qr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Jp(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Cn(e,t){return e<<32-t|e>>>t}var xV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function wV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function vV(e){for(let t=0;t<e.length;t++)e[t]=wV(e[t]);return e}var BS=xV?(e)=>e:vV,yO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),_V=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function zs(e){if(Ne(e),yO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=_V[e[r]];return t}var zi={_0:48,_9:57,A:65,F:70,a:97,f:102};function gO(e){if(e>=zi._0&&e<=zi._9)return e-zi._0;if(e>=zi.A&&e<=zi.F)return e-(zi.A-10);if(e>=zi.a&&e<=zi.f)return e-(zi.a-10);return}function Ns(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(yO)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=gO(e.charCodeAt(o)),a=gO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Bt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Ne(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function ec(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function wo(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var vo=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var US=BigInt(0),jS=BigInt(1);function ku(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function bO(e){if(typeof e==="bigint"){if(!Vp(e))throw Error("positive bigint expected, got "+e)}else Wt(e);return e}function Eu(e){let t=bO(e).toString(16);return t.length&1?"0"+t:t}function SO(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?US:BigInt("0x"+e)}function _o(e){return SO(zs(e))}function ko(e){return SO(zs(Wp(Ne(e)).reverse()))}function tc(e,t){Wt(t),e=bO(e);let r=Ns(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Iu(e,t){return tc(e,t).reverse()}function Wp(e){return Uint8Array.from(e)}function Eo(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Vp=(e)=>typeof e==="bigint"&&US<=e;function kV(e,t,r){return Vp(e)&&Vp(t)&&Vp(r)&&t<=e&&e<r}function Tu(e,t,r,i){if(!kV(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function qS(e){let t;for(t=0;e>US;e>>=jS,t+=1);return t}var Au=(e)=>(jS<<BigInt(e))-jS;function xO(e,t,r){if(Wt(e,"hashLen"),Wt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,Bt(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Bt(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function Ds(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function ZS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $r=BigInt(0),yr=BigInt(1),Ls=BigInt(2),_O=BigInt(3),kO=BigInt(4),EO=BigInt(5),EV=BigInt(7),IO=BigInt(8),IV=BigInt(9),TO=BigInt(16);function Ar(e,t){let r=e%t;return r>=$r?r:t+r}function hn(e,t,r){let i=e;while(t-- >$r)i*=i,i%=r;return i}function wO(e,t){if(e===$r)throw Error("invert: expected non-zero number");if(t<=$r)throw Error("invert: expected positive modulus, got "+t);let r=Ar(e,t),i=t,n=$r,o=yr,s=yr,a=$r;while(r!==$r){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==yr)throw Error("invert: does not exist");return Ar(n,t)}function MS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function AO(e,t){let r=(e.ORDER+yr)/kO,i=e.pow(t,r);return MS(e,i,t),i}function TV(e,t){let r=(e.ORDER-EO)/IO,i=e.mul(t,Ls),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Ls),n),a=e.mul(o,e.sub(s,e.ONE));return MS(e,a,t),a}function AV(e){let t=Gp(e),r=$O(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+EV)/TO;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,b);let y=a.eql(a.sqr(u),c),S=a.cmov(l,u,y);return MS(a,S,c),S}}function $O(e){if(e<_O)throw Error("sqrt is not defined for small field");let t=e-yr,r=0;while(t%Ls===$r)t/=Ls,r++;let i=Ls,n=Gp(e);while(vO(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return AO;let o=n.pow(i,t),s=(t+yr)/Ls;return function(c,l){if(c.is0(l))return l;if(vO(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,y=c.sqr(p);while(!c.eql(y,c.ONE))if(b++,y=c.sqr(y),b===u)throw Error("Cannot find square root");let S=yr<<BigInt(u-b-1),k=c.pow(f,S);u=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function $V(e){if(e%kO===_O)return AO;if(e%IO===EO)return TV;if(e%TO===IV)return AV(e);return $O(e)}var CV=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function FS(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=CV.reduce((i,n)=>(i[n]="function",i),t);return Ds(e,r),e}function RV(e,t,r){if(r<$r)throw Error("invalid exponent, negatives unsupported");if(r===$r)return e.ONE;if(r===yr)return t;let i=e.ONE,n=t;while(r>$r){if(r&yr)i=e.mul(i,n);n=e.sqr(n),r>>=yr}return i}function $u(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function vO(e,t){let r=(e.ORDER-yr)/Ls,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function OV(e,t){if(t!==void 0)Wt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class CO{ORDER;BITS;BYTES;isLE;ZERO=$r;ONE=yr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=$r)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=OV(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Ar(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return $r<=e&&e<this.ORDER}is0(e){return e===$r}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&yr)===yr}neg(e){return Ar(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Ar(e*e,this.ORDER)}add(e,t){return Ar(e+t,this.ORDER)}sub(e,t){return Ar(e-t,this.ORDER)}mul(e,t){return Ar(e*t,this.ORDER)}pow(e,t){return RV(this,e,t)}div(e,t){return Ar(e*wO(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return wO(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=$V(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Iu(e,this.BYTES):tc(e,this.BYTES)}fromBytes(e,t=!1){Ne(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?ko(e):_o(e);if(s)a=Ar(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return $u(this,e)}cmov(e,t,r){return r?t:e}}function Gp(e,t={}){return new CO(e,t)}function RO(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function HS(e){let t=RO(e);return t+Math.ceil(t/2)}function OO(e,t,r=!1){Ne(e);let i=e.length,n=RO(t),o=HS(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?ko(e):_o(e),a=Ar(s,t-yr)+yr;return r?Iu(a,n):tc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rc=BigInt(0),Bs=BigInt(1);function Cu(e,t){let r=t.negate();return e?r:t}function WS(e,t){let r=$u(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function DO(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function KS(e,t){DO(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Au(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function PO(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Bs;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var JS=new WeakMap,LO=new WeakMap;function VS(e){return LO.get(e)||1}function zO(e){if(e!==rc)throw Error("invalid wNAF")}class GS{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>rc){if(t&Bs)r=r.add(i);i=i.double(),t>>=Bs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=KS(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=KS(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=PO(r,s,o);if(r=a,l)n=n.add(Cu(f,t[p]));else i=i.add(Cu(u,t[c]))}return zO(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=KS(e,this.bits);for(let o=0;o<n.windows;o++){if(r===rc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=PO(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return zO(r),i}getPrecomputes(e,t,r){let i=JS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);JS.set(t,i)}}return i}cached(e,t,r){let i=VS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=VS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){DO(t,this.bits),LO.set(e,t),JS.delete(e)}hasCache(e){return VS(e)!==1}}function BO(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>rc||i>rc){if(r&Bs)o=o.add(n);if(i&Bs)s=s.add(n);n=n.double(),r>>=Bs,i>>=Bs}return{p1:o,p2:s}}function NO(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return FS(t),t}else return Gp(e,{isLE:r})}function jO(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>rc))throw Error(`CURVE.${c} must be positive bigint`)}let n=NO(t.p,r.Fp,i),o=NO(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Qp(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ru=BigInt(0),nc=BigInt(1),Yp=BigInt(2);function PV(e){return Ds(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function UO(e){let t=PV(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||wo,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Yp**BigInt(254):Yp**BigInt(447),b=a?BigInt(8)*Yp**BigInt(251)-nc:BigInt(4)*Yp**BigInt(445)-nc,y=m+b+nc,S=(I)=>Ar(I,r),k=A(f);function A(I){return Iu(S(I),u)}function C(I){let z=Wp(Ne(I,u,"uCoordinate"));if(a)z[31]&=127;return S(ko(z))}function D(I){return ko(n(Wp(Ne(I,u,"scalar"))))}function U(I,z){let P=te(C(z),D(I));if(P===Ru)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){Tu("u",I,Ru,r),Tu("scalar",z,m,y);let P=z,J=I,j=nc,Q=Ru,E=I,se=nc,fe=Ru;for(let xe=BigInt(l-1);xe>=Ru;xe--){let Te=P>>xe&nc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:se}=V(fe,Q,se),fe=Te;let Pe=j+Q,Oe=S(Pe*Pe),_e=j-Q,Ve=S(_e*_e),De=Oe-Ve,Qe=E+se,lt=E-se,vt=S(lt*Pe),Lt=S(Qe*_e),mt=vt+Lt,mr=vt-Lt;E=S(mt*mt),se=S(J*S(mr*mr)),j=S(Oe*Ve),Q=S(De*(Oe+S(p*De)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:se}=V(fe,Q,se);let R=o(Q);return S(j*R)}let K={secretKey:u,publicKey:u,seed:u},N=(I=c(u))=>(Ne(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:Qp(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}class QS{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(mn(e),Ne(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),qr(i)}update(e){return Ni(this),this.iHash.update(e),this}digestInto(e){Ni(this),Ne(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ic=(e,t,r)=>new QS(e,t).update(r).digest();ic.create=(e,t)=>new QS(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qO=(e,t)=>(e+(e>=0?t:-t)/MO)/t;function zV(e,t,r){let[[i,n],[o,s]]=t,a=qO(s*e,r),c=qO(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Di,p=u<Di;if(f)l=-l;if(p)u=-u;let m=Au(Math.ceil(qS(r)/2))+oc;if(l<Di||l>=m||u<Di||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function XS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function YS(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(ku(r.lowS,"lowS"),ku(r.prehash,"prehash"),r.format!==void 0)XS(r.format);return r}class ZO extends Error{constructor(e=""){super(e)}}var Io={Err:ZO,_tlv:{encode:(e,t)=>{let{Err:r}=Io;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Eu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Eu(n.length/2|128):"";return Eu(e)+o+n+t},decode(e,t){let{Err:r}=Io,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Io;if(e<Di)throw new t("integer: negative integers are not allowed");let r=Eu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Io;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return _o(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Io,n=Ne(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Io,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Di=BigInt(0),oc=BigInt(1),MO=BigInt(2),Xp=BigInt(3),NV=BigInt(4);function ex(e,t={}){let r=jO("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ds(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=HO(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),J=i.toBytes(z);if(ku(I,"isCompressed"),I){u();let j=!i.isOdd(P);return Bt(FO(j),J)}else return Bt(Uint8Array.of(4),J,i.toBytes(P))}function p(N){Ne(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],J=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(J);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=y(j),E;try{E=i.sqrt(Q)}catch(R){let xe=R instanceof Error?": "+R.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}u();let se=i.isOdd(E);if((P&1)===1!==se)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(J.subarray(0,j)),E=i.fromBytes(J.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function y(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=y(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,Xp),NV),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function C(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return zV(N,c.basises,n.ORDER)}let T=ZS((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=ZS((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Cu(z,L),I=Cu(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=C("x",N),this.Y=C("y",L,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(Ne(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Ns(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(K.createCache(this,N),!L)this.multiply(Xp);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(J,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,Xp),{X:z,Y:P,Z:J}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,se=i.mul(z,z),fe=i.mul(P,P),R=i.mul(J,J),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,J),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,R),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),R=i.mul(N,R),xe=i.sub(se,R),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(se,se),se=i.add(E,se),se=i.add(se,R),se=i.mul(se,xe),Q=i.add(Q,se),R=i.mul(P,J),R=i.add(R,R),se=i.mul(R,xe),j=i.sub(j,se),E=i.mul(R,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.ZERO,E=i.ZERO,se=i.ZERO,fe=o.a,R=i.mul(o.b,Xp),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.mul(z,j),Oe=i.add(L,I),_e=i.add(P,J);Oe=i.mul(Oe,_e),_e=i.add(xe,Te),Oe=i.sub(Oe,_e),_e=i.add(L,z);let Ve=i.add(P,j);return _e=i.mul(_e,Ve),Ve=i.add(xe,Pe),_e=i.sub(_e,Ve),Ve=i.add(I,z),Q=i.add(J,j),Ve=i.mul(Ve,Q),Q=i.add(Te,Pe),Ve=i.sub(Ve,Q),se=i.mul(fe,_e),Q=i.mul(R,Pe),se=i.add(Q,se),Q=i.sub(Te,se),se=i.add(Te,se),E=i.mul(Q,se),Te=i.add(xe,xe),Te=i.add(Te,xe),Pe=i.mul(fe,Pe),_e=i.mul(R,_e),Te=i.add(Te,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Te,_e),E=i.add(E,xe),xe=i.mul(Ve,_e),Q=i.mul(Oe,Q),Q=i.sub(Q,xe),xe=i.mul(Oe,Te),se=i.mul(Ve,se),se=i.add(se,xe),new V(Q,E,se)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(J)=>K.cached(this,J,(j)=>WS(V,j));if(L){let{k1neg:J,k1:j,k2neg:Q,k2:E}=U(N),{p:se,f:fe}=P(j),{p:R,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,se,R,J,Q)}else{let{p:J,f:j}=P(N);I=J,z=j}return WS(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Di||I.is0())return V.ZERO;if(N===oc)return I;if(K.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:J,k2:j}=U(N),{p1:Q,p2:E}=BO(V,I,P,j);return B(L.beta,Q,E,z,J)}else return K.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===oc)return!0;if(N)return N(V,this);return K.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===oc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return ku(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return zs(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,K=new GS(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function FO(e){return Uint8Array.of(e?2:3)}function HO(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function DV(e,t={}){let{Fn:r}=e,i=t.randomBytes||wo,n=Object.assign(HO(e.Fp,r),{seed:HS(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:y,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==y)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return OO(Ne(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:y,publicKeyUncompressed:S}=n;if(!Xa(m))return;if("_lengths"in r&&r._lengths||b===y)return;let k=Ne(m,void 0,"key").length;return k===y||k===S}function u(m,b,y=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(y)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Qp(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function tx(e,t,r={}){mn(t),Ds(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||wo,n=r.hmac||((I,z)=>ic(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=DV(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},y=a*MO<o.ORDER;function S(I){let z=a>>oc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(y)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,z){XS(z);let P=m.signature,J=z==="compact"?P:z==="recovered"?P+1:void 0;return Ne(I,J)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){C(I,z);let P;if(z==="der"){let{r:E,s:se}=Io.toSig(Ne(I));return new D(E,se)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let J=m.signature/2,j=I.subarray(0,J),Q=I.subarray(J,J*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Ns(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,J=this.assertRecovery(),j=J===2||J===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Bt(FO((J&1)===0),Q)),se=s.inv(j),fe=T(Ne(I,void 0,"msgHash")),R=s.create(-fe*se),xe=s.create(P*se),Te=e.BASE.multiplyUnsafe(R).add(E.multiplyUnsafe(xe));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(I=b.format){if(XS(I),I==="der")return Ns(Io.hexFromSig(this));let{r:z,s:P}=this,J=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Bt(Uint8Array.of(this.assertRecovery()),J,j);return Bt(J,j)}toHex(I){return zs(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=_o(z),J=z.length*8-c;return J>0?P>>BigInt(J):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=Au(c);function B(I){return Tu("num < 2^"+c,I,Di,H),s.toBytes(I)}function V(I,z){return Ne(I,void 0,"message"),z?Ne(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:J,prehash:j,extraEntropy:Q}=YS(P,b);I=V(I,j);let E=T(I),se=s.fromBytes(z);if(!s.isValidNot0(se))throw Error("invalid private key");let fe=[B(se),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(Ne(Pe,void 0,"extraEntropy"))}let R=Bt(...fe),xe=E;function Te(Pe){let Oe=U(Pe);if(!s.isValidNot0(Oe))return;let _e=s.inv(Oe),Ve=e.BASE.multiply(Oe).toAffine(),De=s.create(Ve.x);if(De===Di)return;let Qe=s.create(_e*s.create(xe+De*se));if(Qe===Di)return;let lt=(Ve.x===De?0:2)|Number(Ve.y&oc),vt=Qe;if(J&&S(Qe))vt=s.neg(Qe),lt^=1;return new D(De,vt,y?void 0:lt)}return{seed:R,k2sig:Te}}function K(I,z,P={}){let{seed:J,k2sig:j}=te(I,z,P);return xO(t.outputLen,s.BYTES,n)(J,j).toBytes(P.format)}function N(I,z,P,J={}){let{lowS:j,prehash:Q,format:E}=YS(J,b);if(P=Ne(P,void 0,"publicKey"),z=V(z,Q),!Xa(I)){let se=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+se)}C(I,E);try{let se=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&se.hasHighS())return!1;let{r:R,s:xe}=se,Te=T(z),Pe=s.inv(xe),Oe=s.create(Te*Pe),_e=s.create(R*Pe),Ve=e.BASE.multiplyUnsafe(Oe).add(fe.multiplyUnsafe(_e));if(Ve.is0())return!1;return s.create(Ve.x)===R}catch(se){return!1}}function L(I,z,P={}){let{prehash:J}=YS(P,b);return z=V(z,J),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:K,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function KO(e,t,r){return e&t^~e&r}function JO(e,t,r){return e&t^e&r^t&r}class em{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Jp(this.buffer)}update(e){Ni(this),Ne(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Jp(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ni(this),Hp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,qr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Jp(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Li=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var tm=BigInt(4294967295),VO=BigInt(32);function LV(e,t=!1){if(t)return{h:Number(e&tm),l:Number(e>>VO&tm)};return{h:Number(e>>VO&tm)|0,l:Number(e&tm)|0}}function rm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=LV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var rx=(e,t,r)=>e>>>r,nx=(e,t,r)=>e<<32-r|t>>>r,js=(e,t,r)=>e>>>r|t<<32-r,Us=(e,t,r)=>e<<32-r|t>>>r,Ou=(e,t,r)=>e<<64-r|t>>>r-32,Pu=(e,t,r)=>e>>>r-32|t<<64-r;var WO=(e,t,r)=>e<<r|t>>>32-r,GO=(e,t,r)=>t<<r|e>>>32-r,QO=(e,t,r)=>t<<r-32|e>>>64-r,YO=(e,t,r)=>e<<r-32|t>>>64-r;function ti(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var XO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),eP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,tP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),rP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,nP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),iP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var jV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),To=new Uint32Array(64);class oP extends em{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)To[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=To[u-15],p=To[u-2],m=Cn(f,7)^Cn(f,18)^f>>>3,b=Cn(p,17)^Cn(p,19)^p>>>10;To[u]=b+To[u-7]+m+To[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Cn(s,6)^Cn(s,11)^Cn(s,25),p=l+f+KO(s,a,c)+jV[u]+To[u]|0,b=(Cn(r,2)^Cn(r,13)^Cn(r,22))+JO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){qr(To)}destroy(){this.set(0,0,0,0,0,0,0,0),qr(this.buffer)}}class sP extends oP{A=Li[0]|0;B=Li[1]|0;C=Li[2]|0;D=Li[3]|0;E=Li[4]|0;F=Li[5]|0;G=Li[6]|0;H=Li[7]|0;constructor(){super(32)}}var aP=(()=>rm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),UV=(()=>aP[0])(),qV=(()=>aP[1])(),Ao=new Uint32Array(80),$o=new Uint32Array(80);class cP extends em{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:y}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=y|0}process(e,t){for(let A=0;A<16;A++,t+=4)Ao[A]=e.getUint32(t),$o[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=Ao[A-15]|0,D=$o[A-15]|0,U=js(C,D,1)^js(C,D,8)^rx(C,D,7),T=Us(C,D,1)^Us(C,D,8)^nx(C,D,7),H=Ao[A-2]|0,B=$o[A-2]|0,V=js(H,B,19)^Ou(H,B,61)^rx(H,B,6),te=Us(H,B,19)^Pu(H,B,61)^nx(H,B,6),K=tP(T,te,$o[A-7],$o[A-16]),N=rP(K,U,V,Ao[A-7],Ao[A-16]);Ao[A]=N|0,$o[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:y,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let C=js(u,f,14)^js(u,f,18)^Ou(u,f,41),D=Us(u,f,14)^Us(u,f,18)^Pu(u,f,41),U=u&p^~u&b,T=f&m^~f&y,H=nP(k,D,T,qV[A],$o[A]),B=iP(H,S,C,U,UV[A],Ao[A]),V=H|0,te=js(r,i,28)^Ou(r,i,34)^Ou(r,i,39),K=Us(r,i,28)^Pu(r,i,34)^Pu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=y|0,b=p|0,y=m|0,p=u|0,m=f|0,{h:u,l:f}=ti(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=XO(V,K,L);r=eP(I,B,te,N),i=I|0}({h:r,l:i}=ti(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ti(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ti(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ti(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=ti(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=ti(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:y}=ti(this.Gh|0,this.Gl|0,b|0,y|0),{h:S,l:k}=ti(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,y,S,k)}roundClean(){qr(Ao,$o)}destroy(){qr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class lP extends cP{Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(48)}}var nm=ec(()=>new sP,vo(1));var uP=ec(()=>new lP,vo(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZV=BigInt(1),dP=BigInt(2),MV=BigInt(3),FV=BigInt(5),gve=BigInt(8),fP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function HV(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=fP,a=e*e%o*e%o,c=hn(a,dP,o)*a%o,l=hn(c,ZV,o)*e%o,u=hn(l,FV,o)*l%o,f=hn(u,t,o)*u%o,p=hn(f,r,o)*f%o,m=hn(p,i,o)*p%o,b=hn(m,n,o)*m%o,y=hn(b,n,o)*m%o,S=hn(y,t,o)*u%o;return{pow_p_5_8:hn(S,dP,o)*e%o,b2:a}}function KV(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var pP=(()=>{let e=fP;return UO({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=HV(t);return Ar(hn(r,MV,e)*i,e)},adjustScalarBytes:KV})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var JV=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),VV=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var WV=ex(JV),ix=tx(WV,nm);var GV=ex(VV),mP=tx(GV,uP);function gP(e,t,r){if(mn(e),r===void 0)r=new Uint8Array(e.outputLen);return ic(e,r,t)}var ox=Uint8Array.of(0),hP=Uint8Array.of();function yP(e,t,r,i=32){mn(e),Wt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=hP;else Ne(r,void 0,"info");let s=new Uint8Array(o*n),a=ic.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)ox[0]=u+1,c.update(u===0?hP:l).update(r).update(ox).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),qr(l,ox),s.slice(0,i)}var QV=BigInt(0),zu=BigInt(1),YV=BigInt(2),XV=BigInt(7),e7=BigInt(256),t7=BigInt(113),xP=[],wP=[],vP=[];for(let e=0,t=zu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],xP.push(2*(5*i+r)),wP.push((e+1)*(e+2)/2%64);let n=QV;for(let o=0;o<7;o++)if(t=(t<<zu^(t>>XV)*t7)%e7,t&YV)n^=zu<<(zu<<BigInt(o))-zu;vP.push(n)}var _P=rm(vP,!0),r7=_P[0],n7=_P[1],bP=(e,t,r)=>r>32?QO(e,t,r):WO(e,t,r),SP=(e,t,r)=>r>32?YO(e,t,r):GO(e,t,r);function i7(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=bP(l,u,1)^r[a],p=SP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=wP[s],c=bP(n,o,a),l=SP(n,o,a),u=xP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=r7[i],e[1]^=n7[i]}qr(r)}class im{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Wt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Kp(this.state)}clone(){return this._cloneInto()}keccak(){BS(this.state32),i7(this.state32,this.rounds),BS(this.state32),this.posOut=0,this.pos=0}update(e){Ni(this),Ne(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ni(this,!1),Ne(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Wt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Hp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,qr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new im(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var kP=(e,t,r,i={})=>ec(()=>new im(t,e,r),i);var qs=kP(6,136,32,vo(8));var EP=kP(6,72,64,vo(10));var IP=(e,t,r,i={})=>ec((n={})=>new im(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),TP=IP(31,168,16,vo(11)),ri=IP(31,136,32,vo(12));function sx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function $P(e){return sx(e),(e&e-1)===0&&e!==0}function ax(e,t){sx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function CP(e){return sx(e),31-Math.clz32(e)}function AP(e){let t=e.length;if(t<2||!$P(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=CP(t);for(let i=0;i<t;i++){let n=ax(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var cx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=CP(r);if(!$P(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)AP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,y=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,C=p++;A<y;A++){let D=o?n?r-C:C:A*S,U=k+A,T=k+A+y,H=i[D],B=u[T],V=u[U];if(l){let te=e.mul(B,H);u[U]=e.add(V,te),u[T]=e.sub(V,te)}else if(o)u[U]=e.add(B,V),u[T]=e.mul(e.sub(B,V),H);else u[U]=e.add(V,B),u[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)AP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ni=wo;function om(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function RP(e){return Uint8Array.from(e)}function Zs(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Ne(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Ne(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function sm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Ne(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Mt(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function lx(e){return(1<<e)-1}var Rve=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var OP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let D=A%C|0;return(D>=0?D|0:C+D|0)|0},l=(A,C=i)=>{let D=c(A,C)|0;return(D>C>>1?D-C|0:D)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let D=ax(C,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[C]=Number(U)|0}return A}let f=u(),p={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=cx(p,{dit:!1,...m}),y=cx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{y(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let D=lx(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=(C.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[K++]=V&lx(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[K++]=C.decode(V&D)}return H}}}}},o7=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Mt(o,i)}}},PP=o7(TP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var br=256,Bi=3329,s7=3303,a7=17,{mod:Lu,nttZetas:c7,NTT:Ms,bitsCoder:l7}=OP({N:br,Q:Bi,F:s7,ROOT_OF_UNITY:a7,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),ux={512:{N:br,Q:Bi,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:br,Q:Bi,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:br,Q:Bi,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},u7=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Bi/2)/Bi,decode:(r)=>r*Bi+t>>>e}},Nu=(e)=>l7(e,u7(e));function Fs(e,t){for(let r=0;r<br;r++)e[r]=Lu(e[r]+t[r])}function d7(e,t){for(let r=0;r<br;r++)e[r]=Lu(e[r]-t[r])}function f7(e,t,r,i,n){let o=Lu(t*i*n+e*r),s=Lu(e*i+t*r);return{c0:o,c1:s}}function am(e,t){for(let r=0;r<br/2;r++){let i=c7[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=f7(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function zP(e){let t=new Uint16Array(br);for(let r=0;r<br;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<br&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Bi)t[r++]=o;if(r<br&&s<Bi)t[r++]=s}}return t}function Du(e,t,r,i){let n=e(i*br/4,t,r),o=new Uint16Array(br),s=Kp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Lu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var p7=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Nu(1),u=Nu(c),f=Nu(a),p=Zs("publicKey",sm(Nu(12),t),32),m=sm(Nu(12),t),b=Zs("ciphertext",sm(f,t),u),y=Zs("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{Ne(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[C,D]=y.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Ms.encode(Du(r,D,V,o)));let H=i(C);for(let V=0;V<t;V++){let te=Ms.encode(Du(r,D,t+V,o));for(let K=0;K<t;K++){let N=zP(H.get(K,V));Fs(te,am(N,U[K]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,C]),secretKey:m.encode(U)};return Mt(C,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[C,D]=p.decode(S),U=[];for(let K=0;K<t;K++)U.push(Ms.encode(Du(r,A,K,o)));let T=i(D),H=new Uint16Array(br),B=[];for(let K=0;K<t;K++){let N=Du(r,A,t+K,s),L=new Uint16Array(br);for(let I=0;I<t;I++){let z=zP(T.get(K,I));Fs(L,am(z,U[I]))}Fs(N,Ms.decode(L)),B.push(N),Fs(H,am(C[K],U[K])),Mt(L)}T.clean();let V=Du(r,A,2*t,s);Fs(V,Ms.decode(H));let te=l.decode(k);return Fs(te,V),Mt(C,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,C]=b.decode(S),D=m.decode(k),U=new Uint16Array(br);for(let T=0;T<t;T++)Fs(U,am(D[T],Ms.encode(A[T])));return d7(C,Ms.decode(U)),Mt(U,D,A),l.encode(C)}}};function dx(e){let t=p7(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Zs("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ni(64))=>{Ne(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),b=a.encode([p,f,m,u.subarray(32)]);return Mt(p,m),{publicKey:f,secretKey:b}},getPublicKey:(u)=>{let[f,p,m,b]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=ni(32))=>{Ne(u,s.publicKey,"publicKey"),Ne(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(RP(p)));if(!om(m,p))throw Mt(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Mt(m);let b=i.create().update(f).update(r(u)).digest(),y=t.encrypt(u,f,b.subarray(32,64));return Mt(b.subarray(32)),{cipherText:y,sharedSecret:b.subarray(0,32)}},decapsulate:(u,f)=>{Ne(f,a.bytesLen,"secretKey"),Ne(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!om(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[y,S,k,A]=a.decode(f),C=t.decrypt(u,y),D=i.create().update(C).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,C,D.subarray(32,64)),H=om(u,T),B=n.create({dkLen:32}).update(A).update(u).digest();return Mt(C,T,!H?U:B),H?U:B}}}function m7(e,t,r){return ri.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var fx={HASH256:qs,HASH512:EP,KDF:ri,XOF:PP,PRF:m7},Zve=dx({...fx,...ux[512]}),Bu=dx({...fx,...ux[768]}),NP=dx({...fx,...ux[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function h7(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ni(r.seed))=>{Ne(s,r.seed,"seed");let a=o.isLE?ko(s):_o(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function px(e,t=!1){let r=h7(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ni(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Mt(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function ju(e,t){return Zs(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function mx(e){return(t,r)=>e(t,{dkLen:r})}function g7(e,t,...r){let i=ju(r,"seed"),n=ju(r,"publicKey");if(e===void 0)e=i.bytesLen;Wt(e);function o(s){Ne(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ni(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Mt(a),Mt(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function cm(e,t,r,i,...n){let o=g7(e,r,...n),s=ju(n,"cipherText"),a=ju(n,"publicKey"),c=ju(n,"msg");if(t===void 0)t=c.bytesLen;return Wt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ni(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),y=m.map((k)=>k.cipherText),S={sharedSecret:i(f,y,b),cipherText:s.encode(y)};return Mt(b,y),S},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),b=n.map((y,S)=>y.decapsulate(f[S],m[S]));return i(p,f,b)}}}function DP(e,t,r,i,n){return mn(i),mn(n),cm(32,32,mx(i),(o,s,a)=>n(Bt(a[0],a[1],s[1],o[1],Eo(e))),t,r)}var Xve=DP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Bu,px(ix,!0),ri,qs),e0e=DP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",NP,px(mP,!0),ri,qs);function y7(e,t,r,i,n){return mn(i),mn(n),cm(32,32,mx(i),(o,s,a)=>{let c=Bt(a[0],a[1],s[0],o[0],s[1],o[1],Eo(e)),l=32,u=Bt(Eo("hybrid_prk"),c),f=gP(n,u),p=Bt(tc(32,2),Eo("shared_secret"),Eo("")),m=yP(n,f,p,32);return Mt(f,p,u,c),m},t,r)}var LP=px(pP),t0e=y7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Bu,LP,ri,nm),b7=(()=>cm(32,32,mx(ri),(e,t,r)=>qs(Bt(r[0],r[1],t[1],e[1],Eo("\\.//^\\"))),Bu,LP))();function S7(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ni(i)){return Ne(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ni(i)){Ne(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Mt(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function x7(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=S7(r,n,o,i),a=64,c=a+i;return cm(32,32,(l)=>{Ne(l,32);let u=ri(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Bt(f,p)},(l,u,f)=>qs(Bt(f[0],f[1],u[1],l[1],Eo(e))),t,s)}var w7=(()=>x7("MLKEM768-P256",Bu,ix,128))();var lm=b7,BP=w7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ut=(e,t,r)=>tr(e,t,r),gx=Rt,sc=Pp,or=(...e)=>SS(...e),ac=(e)=>gu(e),cc=gS,lc=(e)=>Ri(e),dm=BigInt(0),hx=BigInt(1);function ji(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function fm(e){if(typeof e==="bigint"){if(!um(e))throw RangeError("positive bigint expected, got "+e)}else gx(e);return e}function ii(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Uu(e){let t=fm(e).toString(16);return t.length&1?"0"+t:t}function jP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?dm:BigInt("0x"+e)}function Hs(e){return jP(Pp(e))}function Rn(e){return jP(Pp(Co(tr(e)).reverse()))}function pm(e,t){if(Rt(t),t===0)throw RangeError("zero length");e=fm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return gu(r.padStart(t*2,"0"))}function qu(e,t){return pm(e,t).reverse()}function UP(e,t){if(e=ut(e),t=ut(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function Co(e){return Uint8Array.from(ut(e))}function mm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var um=(e)=>typeof e==="bigint"&&dm<=e;function v7(e,t,r){return um(e)&&um(t)&&um(r)&&t<=e&&e<r}function Ui(e,t,r,i){if(!v7(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function uc(e){if(e<dm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>dm;e>>=hx,t+=1);return t}var Zu=(e)=>(hx<<BigInt(e))-hx;function qP(e,t,r){if(Rt(e,"hashLen"),Rt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,or(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return or(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function gn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var yx=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sr=BigInt(0),It=BigInt(1),Ks=BigInt(2),HP=BigInt(3),KP=BigInt(4),JP=BigInt(5),_7=BigInt(7),VP=BigInt(8),k7=BigInt(9),WP=BigInt(16);function bt(e,t){if(t<=sr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=sr?r:t+r}function yn(e,t,r){if(t<sr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >sr)i*=i,i%=r;return i}function ZP(e,t){if(e===sr)throw Error("invert: expected non-zero number");if(t<=sr)throw Error("invert: expected positive modulus, got "+t);let r=bt(e,t),i=t,n=sr,o=It,s=It,a=sr;while(r!==sr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==It)throw Error("invert: does not exist");return bt(n,t)}function bx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function GP(e,t){let r=e,i=(r.ORDER+It)/KP,n=r.pow(t,i);return bx(r,n,t),n}function E7(e,t){let r=e,i=(r.ORDER-JP)/VP,n=r.mul(t,Ks),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Ks),o),c=r.mul(s,r.sub(a,r.ONE));return bx(r,c,t),c}function I7(e){let t=hm(e),r=QP(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+_7)/WP;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),b=l.eql(l.sqr(f),c),y=l.eql(l.sqr(p),c);u=l.cmov(u,f,b),f=l.cmov(m,p,y);let S=l.eql(l.sqr(f),c),k=l.cmov(u,f,S);return bx(l,k,c),k}}function QP(e){if(e<HP)throw Error("sqrt is not defined for small field");let t=e-It,r=0;while(t%Ks===sr)t/=Ks,r++;let i=Ks,n=hm(e);while(MP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return GP;let o=n.pow(i,t),s=(t+It)/Ks;return function(c,l){let u=c;if(u.is0(l))return l;if(MP(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),b=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let y=1,S=u.sqr(m);while(!u.eql(S,u.ONE))if(y++,S=u.sqr(S),y===f)throw Error("Cannot find square root");let k=It<<BigInt(f-y-1),A=u.pow(p,k);f=y,p=u.sqr(A),m=u.mul(m,p),b=u.mul(b,A)}return b}}function T7(e){if(e%KP===HP)return GP;if(e%VP===JP)return E7;if(e%WP===k7)return I7(e);return QP(e)}var qi=(e,t)=>(bt(e,t)&It)===It,A7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Sx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=A7.reduce((i,n)=>(i[n]="function",i),t);if(gn(e,r),ii(e.BYTES,"BYTES"),ii(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=It)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function $7(e,t,r){let i=e;if(r<sr)throw Error("invalid exponent, negatives unsupported");if(r===sr)return i.ONE;if(r===It)return t;let n=i.ONE,o=t;while(r>sr){if(r&It)n=i.mul(n,o);o=i.sqr(o),r>>=It}return n}function Mu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function MP(e,t){let r=e,i=(r.ORDER-It)/Ks,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function C7(e,t){if(t!==void 0)gx(t);if(e<=sr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=uc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var FP=new WeakMap;class xx{ORDER;BITS;BYTES;isLE;ZERO=sr;ONE=It;_lengths;_mod;constructor(e,t={}){if(e<=It)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=C7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return bt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return sr<=e&&e<this.ORDER}is0(e){return e===sr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&It)===It}neg(e){return bt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return bt(e*e,this.ORDER)}add(e,t){return bt(e+t,this.ORDER)}sub(e,t){return bt(e-t,this.ORDER)}mul(e,t){return bt(e*t,this.ORDER)}pow(e,t){return $7(this,e,t)}div(e,t){return bt(e*ZP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return ZP(e,this.ORDER)}sqrt(e){let t=FP.get(this);if(!t)FP.set(this,t=T7(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?qu(e,this.BYTES):pm(e,this.BYTES)}fromBytes(e,t=!1){ut(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Rn(e):Hs(e);if(s)a=bt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Mu(this,e)}cmov(e,t,r){return ji(r,"condition"),r?t:e}}Object.freeze(xx.prototype);function hm(e,t={}){return new xx(e,t)}function YP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=It)throw Error("field order must be greater than 1");let t=uc(e-It);return Math.ceil(t/8)}function wx(e){let t=YP(e);return t+Math.ceil(t/2)}function XP(e,t,r=!1){ut(e);let i=e.length,n=YP(t),o=Math.max(wx(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Rn(e):Hs(e),a=bt(s,t-It)+It;return r?qu(a,n):pm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var dc=BigInt(0),Js=BigInt(1);function Fu(e,t){let r=t.negate();return e?r:t}function Vs(e,t){let r=Mu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function nz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function vx(e,t){nz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Zu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function ez(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Js;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var _x=new WeakMap,iz=new WeakMap;function kx(e){return iz.get(e)||1}function tz(e){if(e!==dc)throw Error("invalid wNAF")}class Hu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>dc){if(t&Js)r=r.add(i);i=i.double(),t>>=Js}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=vx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=vx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=ez(r,s,o);if(r=a,l)n=n.add(Fu(f,t[p]));else i=i.add(Fu(u,t[c]))}return tz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=vx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===dc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=ez(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return tz(r),i}getPrecomputes(e,t,r){let i=_x.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);_x.set(t,i)}}return i}cached(e,t,r){let i=kx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=kx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){nz(t,this.bits),iz.set(e,t),_x.delete(e)}hasCache(e){return kx(e)!==1}}function oz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>dc||i>dc){if(r&Js)o=o.add(n);if(i&Js)s=s.add(n);n=n.double(),r>>=Js,i>>=Js}return{p1:o,p2:s}}function rz(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Sx(t),t}else return hm(e,{isLE:r})}function gm(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>dc))throw Error(`CURVE.${c} must be positive bigint`)}let n=rz(t.p,r.Fp,i),o=rz(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Ku(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Ju(e,t){if(ii(e),ii(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function R7(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function O7(e){if(!cc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?mm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Ex(e,t,r,i){if(ut(e),ii(r),t=O7(t),t.length>255)t=i(or(mm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=or(t,Ju(t.length,1)),c=new Uint8Array(o),l=Ju(r,2),u=Array(s),f=i(or(c,e,l,Ju(0,1),a));u[0]=i(or(f,Ju(1,1),a));for(let m=1;m<s;m++){let b=[R7(f,u[m-1]),Ju(m+1,1),a];u[m]=i(or(...b))}return or(...u).slice(0,r)}var sz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var az=(e,t)=>(e+(e>=0?t:-t)/lz)/t;function P7(e,t,r){Ui("scalar",e,oi,r);let[[i,n],[o,s]]=t,a=az(s*e,r),c=az(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<oi,p=u<oi;if(f)l=-l;if(p)u=-u;let m=Zu(Math.ceil(uc(r)/2))+Ro;if(l<oi||l>=m||u<oi||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function Tx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Ix(e,t){gn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(ji(r.lowS,"lowS"),ji(r.prehash,"prehash"),r.format!==void 0)Tx(r.format);return r}class cz extends Error{constructor(e=""){super(e)}}var On={Err:cz,_tlv:{encode:(e,t)=>{let{Err:r}=On;if(ii(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Uu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Uu(n.length/2|128):"";return Uu(e)+o+n+t},decode(e,t){let{Err:r}=On;t=ut(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=On;if(fm(e),e<oi)throw new t("integer: negative integers are not allowed");let r=Uu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=On;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Hs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=On,n=ut(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=On,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(On._tlv);Object.freeze(On._int);Object.freeze(On);var oi=BigInt(0),Ro=BigInt(1),lz=BigInt(2),ym=BigInt(3),z7=BigInt(4);function uz(e,t={}){let r=gm("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;gn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=fz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(K,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(ji(L,"isCompressed"),L){f();let J=!i.isOdd(z);return or(dz(J),P)}else return or(Uint8Array.of(4),P,i.toBytes(z))}function m(K){ut(K,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=u,I=K.length,z=K[0],P=K.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let J=i.fromBytes(P);if(!i.isValid(J))throw Error("bad point: is not on curve, wrong x");let j=S(J),Q;try{Q=i.sqrt(j)}catch(fe){let R=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+R)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:J,y:Q}}else if(I===L&&z===4){let J=i.BYTES,j=i.fromBytes(P.subarray(0,J)),Q=i.fromBytes(P.subarray(J,J*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,y=t.fromBytes===void 0?m:t.fromBytes;function S(K){let N=i.sqr(K),L=i.mul(N,K);return i.add(i.add(L,i.mul(K,o.a)),o.b)}function k(K,N){let L=i.sqr(N),I=S(K);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,ym),z7),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function D(K,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${K}`);return N}function U(K){if(!(K instanceof B))throw Error("Weierstrass Point expected")}function T(K){if(!c||!c.basises)throw Error("no endo");return P7(K,c.basises,n.ORDER)}function H(K,N,L,I,z){return L=new B(i.mul(L.X,K),L.Y,L.Z),N=Fu(I,N),L=Fu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(K,N,L){this.X=D("x",K),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(K){let{x:N,y:L}=K||{};if(!K||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(K instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(K){let N=B.fromAffine(y(ut(K,void 0,"point")));return N.assertValidity(),N}static fromHex(K){return B.fromBytes(ac(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,N=!0){if(te.createCache(this,K),!N)this.multiply(ym);return this}assertValidity(){let K=this;if(K.is0()){if(t.allowInfinityPoint&&i.is0(K.X)&&i.eql(K.Y,i.ONE)&&i.is0(K.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=K.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:K}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(K)}equals(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.eql(i.mul(N,J),i.mul(z,I)),Q=i.eql(i.mul(L,J),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:K,b:N}=o,L=i.mul(N,ym),{X:I,Y:z,Z:P}=this,J=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),se=i.mul(z,z),fe=i.mul(P,P),R=i.mul(I,z);return R=i.add(R,R),Q=i.mul(I,P),Q=i.add(Q,Q),J=i.mul(K,Q),j=i.mul(L,fe),j=i.add(J,j),J=i.sub(se,j),j=i.add(se,j),j=i.mul(J,j),J=i.mul(R,J),Q=i.mul(L,Q),fe=i.mul(K,fe),R=i.sub(E,fe),R=i.mul(K,R),R=i.add(R,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,R),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,R),J=i.sub(J,E),Q=i.mul(fe,se),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(J,j,Q)}add(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.ZERO,Q=i.ZERO,E=i.ZERO,se=o.a,fe=i.mul(o.b,ym),R=i.mul(N,z),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.add(N,L),Oe=i.add(z,P);Pe=i.mul(Pe,Oe),Oe=i.add(R,xe),Pe=i.sub(Pe,Oe),Oe=i.add(N,I);let _e=i.add(z,J);return Oe=i.mul(Oe,_e),_e=i.add(R,Te),Oe=i.sub(Oe,_e),_e=i.add(L,I),j=i.add(P,J),_e=i.mul(_e,j),j=i.add(xe,Te),_e=i.sub(_e,j),E=i.mul(se,Oe),j=i.mul(fe,Te),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(R,R),xe=i.add(xe,R),Te=i.mul(se,Te),Oe=i.mul(fe,Oe),xe=i.add(xe,Te),Te=i.sub(R,Te),Te=i.mul(se,Te),Oe=i.add(Oe,Te),R=i.mul(xe,Oe),Q=i.add(Q,R),R=i.mul(_e,Oe),j=i.mul(Pe,j),j=i.sub(j,R),R=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,R),new B(j,Q,E)}subtract(K){return U(K),this.add(K.negate())}is0(){return this.equals(B.ZERO)}multiply(K){let{endo:N}=t;if(!n.isValidNot0(K))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(J)=>Vs(B,J));if(N){let{k1neg:P,k1:J,k2neg:j,k2:Q}=T(K),{p:E,f:se}=z(J),{p:fe,f:R}=z(Q);I=se.add(R),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:J}=z(K);L=P,I=J}return Vs(B,[L,I])[0]}multiplyUnsafe(K){let{endo:N}=t,L=this,I=K;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===oi||L.is0())return B.ZERO;if(I===Ro)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:J,k2:j}=T(I),{p1:Q,p2:E}=oz(B,L,P,j);return H(N.beta,Q,E,z,J)}else return te.unsafe(L,I)}toAffine(K){let N=this,L=K,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:K}=t;if(s===Ro)return!0;if(K)return K(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:K}=t;if(s===Ro)return this;if(K)return K(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Ro)return this.is0();return this.clearCofactor().is0()}toBytes(K=!0){return ji(K,"isCompressed"),this.assertValidity(),b(B,this,K)}toHex(K=!0){return sc(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Hu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function dz(e){return Uint8Array.of(e?2:3)}function fz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function N7(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?lc:t.randomBytes,n=Object.assign(fz(e.Fp,r),{seed:Math.max(wx(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:y,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==y)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,XP(ut(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:y,publicKeyUncompressed:S}=n,k=r._lengths;if(!cc(m))return;let A=ut(m,void 0,"key").length,C=A===y||A===S,D=A===b||!!k?.includes(A);if(C&&D)return;return C}function u(m,b,y=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(y)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Ku(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function pz(e,t,r={}){let i=t;Ci(i),gn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?lc:r.randomBytes,o=r.hmac===void 0?(z,P)=>Yn(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=N7(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*lz+Ro<s.ORDER;function k(z){let P=c>>Ro;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function C(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){Tx(P);let J=b.signature,j=P==="compact"?J:P==="recovered"?J+1:void 0;return ut(z,j)}class U{r;s;recovery;constructor(z,P,J){if(this.r=A("r",z),this.s=A("s",P),J!=null){if(C(),![0,1,2,3].includes(J))throw Error("invalid recovery id");this.recovery=J}Object.freeze(this)}static fromBytes(z,P=y.format){D(z,P);let J;if(P==="der"){let{r:se,s:fe}=On.toSig(ut(z));return new U(se,fe)}if(P==="recovered")J=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),J)}static fromHex(z,P){return this.fromBytes(ac(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:J}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),se=e.fromBytes(or(dz((j&1)===0),E)),fe=a.inv(Q),R=H(ut(z,void 0,"msgHash")),xe=a.create(-R*fe),Te=a.create(J*fe),Pe=e.BASE.multiplyUnsafe(xe).add(se.multiplyUnsafe(Te));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=y.format){if(Tx(z),z==="der")return ac(On.hexFromSig(this));let{r:P,s:J}=this,j=a.toBytes(P),Q=a.toBytes(J);if(z==="recovered")return C(),or(Uint8Array.of(this.assertRecovery()),j,Q);return or(j,Q)}toHex(z){return sc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let J=Hs(P),j=P.length*8-l;return j>0?J>>BigInt(j):J}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Zu(l);function V(z){return Ui("num < 2^"+l,z,oi,B),a.toBytes(z)}function te(z,P){return ut(z,void 0,"message"),P?ut(i(z),void 0,"prehashed message"):z}function K(z,P,J){let{lowS:j,prehash:Q,extraEntropy:E}=Ix(J,y);z=te(z,Q);let se=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let R=[V(fe),V(se)];if(E!=null&&E!==!1){let Oe=E===!0?n(b.secretKey):E;R.push(ut(Oe,void 0,"extraEntropy"))}let xe=or(...R),Te=se;function Pe(Oe){let _e=T(Oe);if(!a.isValidNot0(_e))return;let Ve=a.inv(_e),De=e.BASE.multiply(_e).toAffine(),Qe=a.create(De.x);if(Qe===oi)return;let lt=a.create(Ve*a.create(Te+Qe*fe));if(lt===oi)return;let vt=(De.x===Qe?0:2)|Number(De.y&Ro),Lt=lt;if(j&&k(lt))Lt=a.neg(lt),vt^=1;return new U(Qe,Lt,S?void 0:vt)}return{seed:xe,k2sig:Pe}}function N(z,P,J={}){let{seed:j,k2sig:Q}=K(z,P,J);return qP(i.outputLen,a.BYTES,o)(j,Q).toBytes(J.format)}function L(z,P,J,j={}){let{lowS:Q,prehash:E,format:se}=Ix(j,y);if(J=ut(J,void 0,"publicKey"),P=te(P,E),!cc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,se);try{let fe=U.fromBytes(z,se),R=e.fromBytes(J);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Te}=fe,Pe=H(P),Oe=a.inv(Te),_e=a.create(Pe*Oe),Ve=a.create(xe*Oe),De=e.BASE.multiplyUnsafe(_e).add(R.multiplyUnsafe(Ve));if(De.is0())return!1;return a.create(De.x)===xe}catch(fe){return!1}}function I(z,P,J={}){let{prehash:j}=Ix(J,y);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var L7=uz(D7),fc=pz(L7,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Oo=BigInt(0),Zr=BigInt(1),Ax=BigInt(2),B7=BigInt(8);function j7(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function mz(e,t={}){let r=t,i=gm("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;gn(r,{},{uvRatio:"function"});let c=Ax<<BigInt(o.BYTES*8)-Zr,l=(y)=>n.create(y),u=r.uvRatio===void 0?(y,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(y,S))}}catch(k){return{isValid:!1,value:Oo}}}:r.uvRatio;if(!j7(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(y,S,k=!1){let A=k?Zr:Oo;return Ui("coordinate "+y,S,A,c),S}function p(y){if(!(y instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Zr,l(s.Gx*s.Gy));static ZERO=new m(Oo,Zr,Zr,Oo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(y,S,k,A){this.X=f("x",y),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(y){if(y instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=y||{};return f("x",S),f("y",k),new m(S,k,Zr,l(S*k))}static fromBytes(y,S=!1){let k=n.BYTES,{a:A,d:C}=s;y=Co(ut(y,k,"point")),ji(S,"zip215");let D=Co(y),U=y[k-1];D[k-1]=U&-129;let T=Rn(D),H=S?c:n.ORDER;Ui("point.y",T,Oo,H);let B=l(T*T),V=l(B-Zr),te=l(C*B-A),{isValid:K,value:N}=u(V,te);if(!K)throw Error("bad point: invalid y coordinate");let L=(N&Zr)===Zr,I=(U&128)!==0;if(!S&&N===Oo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(y,S=!1){return m.fromBytes(ac(y),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(y=8,S=!0){if(b.createCache(this,y),!S)this.multiply(Ax);return this}assertValidity(){let y=this,{a:S,d:k}=s;if(y.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:D,T:U}=y,T=l(A*A),H=l(C*C),B=l(D*D),V=l(B*B),te=l(T*S),K=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(K!==N)throw Error("bad point: equation left != right (1)");let L=l(A*C),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(y){p(y);let{X:S,Y:k,Z:A}=this,{X:C,Y:D,Z:U}=y,T=l(S*U),H=l(C*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:y}=s,{X:S,Y:k,Z:A}=this,C=l(S*S),D=l(k*k),U=l(Ax*l(A*A)),T=l(y*C),H=S+k,B=l(l(H*H)-C-D),V=T+D,te=V-U,K=T-D,N=l(B*te),L=l(V*K),I=l(B*K),z=l(te*V);return new m(N,L,z,I)}add(y){p(y);let{a:S,d:k}=s,{X:A,Y:C,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=y,te=l(A*T),K=l(C*H),N=l(U*k*V),L=l(D*B),I=l((A+C)*(T+H)-te-K),z=L-N,P=L+N,J=l(K-S*te),j=l(I*z),Q=l(P*J),E=l(I*J),se=l(z*P);return new m(j,Q,se,E)}subtract(y){return p(y),this.add(y.negate())}multiply(y){if(!o.isValidNot0(y))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,y,(A)=>Vs(m,A));return Vs(m,[S,k])[0]}multiplyUnsafe(y){if(!o.isValid(y))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(y===Oo)return m.ZERO;if(this.is0()||y===Zr)return this;return b.unsafe(this,y,(S)=>Vs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(y){let S=this,k=y,{X:A,Y:C,Z:D}=S,U=S.is0();if(k==null)k=U?B7:n.inv(D);let T=l(A*k),H=l(C*k),B=n.mul(D,k);if(U)return{x:Oo,y:Zr};if(B!==Zr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Zr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:y,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=y&Zr?128:0,k}toHex(){return sc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Hu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class $x{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){yx()}static fromHex(e){yx()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return sc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Vu=BigInt(0),pc=BigInt(1),bm=BigInt(2);function U7(e){return gn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function hz(e){let t=U7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?lc:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?bm**BigInt(254):bm**BigInt(447),b=a?BigInt(8)*bm**BigInt(251)-pc:BigInt(4)*bm**BigInt(445)-pc,y=m+b+pc,S=(I)=>bt(I,r),k=A(f);function A(I){return qu(S(I),u)}function C(I){let z=Co(ut(I,u,"uCoordinate"));if(a)z[31]&=127;return S(Rn(z))}function D(I){return Rn(n(Co(ut(I,u,"scalar"))))}function U(I,z){let P=te(C(z),D(I));if(P===Vu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){Ui("u",I,Vu,r),Ui("scalar",z,m,y);let P=z,J=I,j=pc,Q=Vu,E=I,se=pc,fe=Vu;for(let xe=BigInt(l-1);xe>=Vu;xe--){let Te=P>>xe&pc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:se}=V(fe,Q,se),fe=Te;let Pe=j+Q,Oe=S(Pe*Pe),_e=j-Q,Ve=S(_e*_e),De=Oe-Ve,Qe=E+se,lt=E-se,vt=S(lt*Pe),Lt=S(Qe*_e),mt=vt+Lt,mr=vt-Lt;E=S(mt*mt),se=S(J*S(mr*mr)),j=S(Oe*Ve),Q=S(De*(Oe+S(p*De)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:se}=V(fe,Q,se);let R=o(Q);return S(j*R)}let K={secretKey:u,publicKey:u,seed:u},N=(I)=>(I=I===void 0?c(u):I,ut(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(K),Object.freeze(L),Object.freeze({keygen:Ku(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var q7=BigInt(0),Zi=BigInt(1),gz=BigInt(2),Z7=BigInt(3),M7=BigInt(5),F7=BigInt(8),Gs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Px=(()=>({p:Gs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:F7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Sz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Gs,a=e*e%o*e%o,c=yn(a,gz,o)*a%o,l=yn(c,Zi,o)*e%o,u=yn(l,M7,o)*l%o,f=yn(u,t,o)*u%o,p=yn(f,r,o)*f%o,m=yn(p,i,o)*p%o,b=yn(m,n,o)*m%o,y=yn(b,n,o)*m%o,S=yn(y,t,o)*u%o;return{pow_p_5_8:yn(S,gz,o)*e%o,b2:a}}function H7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Cx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function zx(e,t){let r=Gs,i=bt(t*t*t,r),n=bt(i*i*t,r),o=Sz(e*n).pow_p_5_8,s=bt(e*i*o,r),a=bt(t*s*s,r),c=s,l=bt(s*Cx,r),u=a===e,f=a===bt(-e,r),p=a===bt(-e*Cx,r);if(u)s=c;if(f||p)s=l;if(qi(s,r))s=bt(-s,r);return{isValid:u||f,value:s}}var Ws=mz(Px,{uvRatio:zx}),Po=(()=>Ws.Fp)(),xz=(()=>Ws.Fn)();var Sm=(()=>{let e=Gs;return hz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Sz(t);return bt(yn(r,Z7,e)*i,e)},adjustScalarBytes:H7})})();var Rx=Cx,K7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),J7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),V7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),W7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),yz=(e)=>zx(Zi,e),G7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Ox=(e)=>Po.create(Rn(e)&G7);function bz(e){let{d:t}=Px,r=Gs,i=(k)=>Po.create(k),n=i(Rx*e*e),o=i((n+Zi)*V7),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=zx(o,a),u=i(l*e);if(!qi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Zi)*W7-a),p=l*l,m=i((l+l)*a),b=i(f*K7),y=i(Zi-p),S=i(Zi+p);return new Ws(i(m*S),i(y*b),i(b*S),i(m*y))}class Cr extends $x{static BASE=(()=>new Cr(Ws.BASE))();static ZERO=(()=>new Cr(Ws.ZERO))();static Fp=(()=>Po)();static Fn=(()=>xz)();constructor(e){super(e)}static fromAffine(e){return new Cr(Ws.fromAffine(e))}assertSame(e){if(!(e instanceof Cr))throw Error("RistrettoPoint expected")}init(e){return new Cr(e)}static fromBytes(e){tr(e,32);let{a:t,d:r}=Px,i=Gs,n=(C)=>Po.create(C),o=Ox(e);if(!UP(Po.toBytes(o),e)||qi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Zi+t*s),c=n(Zi-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=yz(n(f*u)),b=n(m*c),y=n(m*b*f),S=n((o+o)*b);if(qi(S,i))S=n(-S);let k=n(a*y),A=n(S*k);if(!p||qi(A,i)||k===q7)throw Error("invalid ristretto255 encoding 2");return new Cr(new Ws(S,k,Zi,A))}static fromHex(e){return Cr.fromBytes(gu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Gs,o=(y)=>Po.create(y),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=yz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(qi(i*p,n)){let y=o(t*Rx),S=o(e*Rx);e=y,t=S,m=o(u*J7)}else m=f;if(qi(e*p,n))t=o(-t);let b=o((r-t)*m);if(qi(b,n))b=o(-b);return Po.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Po.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Cr.ZERO)}}Object.freeze(Cr.BASE);Object.freeze(Cr.ZERO);Object.freeze(Cr.prototype);Object.freeze(Cr);var Q7=Object.freeze({Point:Cr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Ex(e,r,64,Lp);return Q7.deriveToCurve(i)},hashToScalar(e,t={DST:sz}){let r=Ex(e,t.DST,64,Lp);return xz.create(Rn(r))},deriveToCurve(e){tr(e,64);let t=Ox(e.subarray(0,32)),r=bz(t),i=Ox(e.subarray(32,64)),n=bz(i);return new Cr(r.add(n))}});var wz=!1,Y7=!1;async function vz(e,t){if(Y7)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function xm(e,t){return await vz(async()=>{let r=Nx(e)?e:await eW(e),i=await crypto.subtle.importKey("raw",tW(t),{name:"X25519"},wz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Nx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Sm.scalarMult(e,t)})}async function Wu(e){return await vz(async()=>xm(e,Sm.GuBytes),()=>{if(Nx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Sm.scalarMultBase(e)})}var X7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function eW(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...X7,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},wz,["deriveBits"])}function Nx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function tW(e){return e}class Dx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),nW(Qs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Qs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Qs(this.transcript)}}}function nW(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Qs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function mc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function wm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Lx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function _z(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function kz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Qs(i),s=o.subarray(0,t),a=mc(e,o.subarray(t));return{data:s,rest:a}}class si{args;body;constructor(e,t){this.args=e,this.body=t}}async function iW(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=gr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Qs(i);return{s:new si(r,n)}}async function Ez(e){let t=new Dx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await iW(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=gr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:mc(e,a)}}}function Bx(e){let t=[];t.push(`age-encryption.org/v1
+`)}function IR(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function ht(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Cs(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Cp={name:"@rizom/ops",version:"0.2.0-alpha.619",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/auth-service":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as hW,mkdirSync as gW,readFileSync as rw,writeFileSync as nw}from"fs";import{dirname as yW,join as Nz}from"path";function gS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Rt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function tr(e,t,r=""){let i=gS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function Ci(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Rt(e.outputLen),Rt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Va(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Rp(e,t){tr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function Op(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Tr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Wa(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function An(e,t){return e<<32-t|e>>>t}function et(e,t){return e<<t|e>>>32-t>>>0}var Z9=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function M9(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function F9(e){for(let t=0;t<e.length;t++)e[t]=M9(e[t]);return e}var yS=Z9?(e)=>e:F9,AR=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),H9=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Pp(e){if(tr(e),AR)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=H9[e[r]];return t}var $i={_0:48,_9:57,A:65,F:70,a:97,f:102};function TR(e){if(e>=$i._0&&e<=$i._9)return e-$i._0;if(e>=$i.A&&e<=$i.F)return e-($i.A-10);if(e>=$i.a&&e<=$i.f)return e-($i.a-10);return}function gu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(AR)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=TR(e.charCodeAt(o)),a=TR(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function K9(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function bS(e,t=""){if(typeof e==="string")return K9(e);return tr(e,void 0,t)}function SS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];tr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function zp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function xS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Ri(e=32){Rt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var wS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class vS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(Ci(e),tr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Tr(i)}update(e){return Va(this),this.iHash.update(e),this}digestInto(e){Va(this),Rp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Yn=(()=>{let e=(t,r,i)=>new vS(t,r).update(i).digest();return e.create=(t,r)=>new vS(t,r),e})();function yu(e,t,r){if(Ci(e),r===void 0)r=new Uint8Array(e.outputLen);return Yn(e,r,t)}var _S=Uint8Array.of(0),$R=Uint8Array.of();function kS(e,t,r,i=32){Ci(e),Rt(i,"length"),tr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=$R;else tr(r,void 0,"info");let s=new Uint8Array(o*n),a=Yn.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)_S[0]=u+1,c.update(u===0?$R:l).update(r).update(_S).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Tr(l,_S),s.slice(0,i)}var go=(e,t,r,i,n)=>kS(e,yu(e,t,r),i,n);function CR(e,t,r){return e&t^~e&r}function RR(e,t,r){return e&t^e&r^t&r}class Np{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Wa(this.buffer)}update(e){Va(this),tr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Wa(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Va(this),Rp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Tr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Wa(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Oi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var rr=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Dp=BigInt(4294967295),OR=BigInt(32);function J9(e,t=!1){if(t)return{h:Number(e&Dp),l:Number(e>>OR&Dp)};return{h:Number(e>>OR&Dp)|0,l:Number(e&Dp)|0}}function PR(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=J9(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var ES=(e,t,r)=>e>>>r,IS=(e,t,r)=>e<<32-r|t>>>r,Rs=(e,t,r)=>e>>>r|t<<32-r,Os=(e,t,r)=>e<<32-r|t>>>r,bu=(e,t,r)=>e<<64-r|t>>>r-32,Su=(e,t,r)=>e>>>r-32|t<<64-r;function Xn(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var zR=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),NR=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,DR=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),LR=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,BR=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),jR=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var W9=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),yo=new Uint32Array(64);class UR extends Np{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)yo[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=yo[u-15],p=yo[u-2],m=An(f,7)^An(f,18)^f>>>3,b=An(p,17)^An(p,19)^p>>>10;yo[u]=b+yo[u-7]+m+yo[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=An(s,6)^An(s,11)^An(s,25),p=l+f+CR(s,a,c)+W9[u]+yo[u]|0,b=(An(r,2)^An(r,13)^An(r,22))+RR(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Tr(yo)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Tr(this.buffer)}}class qR extends UR{A=Oi[0]|0;B=Oi[1]|0;C=Oi[2]|0;D=Oi[3]|0;E=Oi[4]|0;F=Oi[5]|0;G=Oi[6]|0;H=Oi[7]|0;constructor(){super(32)}}var ZR=(()=>PR(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),G9=(()=>ZR[0])(),Q9=(()=>ZR[1])(),bo=new Uint32Array(80),So=new Uint32Array(80);class MR extends Np{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:y}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=y|0}process(e,t){for(let A=0;A<16;A++,t+=4)bo[A]=e.getUint32(t),So[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=bo[A-15]|0,D=So[A-15]|0,U=Rs(C,D,1)^Rs(C,D,8)^ES(C,D,7),T=Os(C,D,1)^Os(C,D,8)^IS(C,D,7),H=bo[A-2]|0,B=So[A-2]|0,V=Rs(H,B,19)^bu(H,B,61)^ES(H,B,6),te=Os(H,B,19)^Su(H,B,61)^IS(H,B,6),K=DR(T,te,So[A-7],So[A-16]),N=LR(K,U,V,bo[A-7],bo[A-16]);bo[A]=N|0,So[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:y,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let C=Rs(u,f,14)^Rs(u,f,18)^bu(u,f,41),D=Os(u,f,14)^Os(u,f,18)^Su(u,f,41),U=u&p^~u&b,T=f&m^~f&y,H=BR(k,D,T,Q9[A],So[A]),B=jR(H,S,C,U,G9[A],bo[A]),V=H|0,te=Rs(r,i,28)^bu(r,i,34)^bu(r,i,39),K=Os(r,i,28)^Su(r,i,34)^Su(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=y|0,b=p|0,y=m|0,p=u|0,m=f|0,{h:u,l:f}=Xn(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=zR(V,K,L);r=NR(I,B,te,N),i=I|0}({h:r,l:i}=Xn(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=Xn(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=Xn(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=Xn(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=Xn(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=Xn(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:y}=Xn(this.Gh|0,this.Gl|0,b|0,y|0),{h:S,l:k}=Xn(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,y,S,k)}roundClean(){Tr(bo,So)}destroy(){this.destroyed=!0,Tr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class FR extends MR{Ah=rr[0]|0;Al=rr[1]|0;Bh=rr[2]|0;Bl=rr[3]|0;Ch=rr[4]|0;Cl=rr[5]|0;Dh=rr[6]|0;Dl=rr[7]|0;Eh=rr[8]|0;El=rr[9]|0;Fh=rr[10]|0;Fl=rr[11]|0;Gh=rr[12]|0;Gl=rr[13]|0;Hh=rr[14]|0;Hl=rr[15]|0;constructor(){super(64)}}var Ot=xS(()=>new qR,wS(1));var Lp=xS(()=>new FR,wS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Zp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function $S(e){if(!Zp(e))throw TypeError("Uint8Array expected")}function WR(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function GR(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function xo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function wu(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function jp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Up(e,t){if(!WR(!0,t))throw TypeError(`${e}: array of strings expected`)}function CS(e,t){if(!WR(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Gr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function Qr(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Up("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(jp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(jp(n),n.map((o)=>{xo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function Yr(e=""){return xo("join",e),{encode:(t)=>(Up("join.decode",t),t.join(e)),decode:(t)=>(xo("join.decode",t),t.split(e))}}function Mp(e,t="="){return wu(e),xo("padding",t),{encode(r){Up("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Up("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function QR(e){return GR(e),{encode:(t)=>t,decode:(t)=>e(t)}}function HR(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(jp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(wu(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var YR=(e,t)=>t===0?e:YR(t,e%t),qp=(e,t)=>e+(t-YR(e,t)),Bp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function TS(e,t,r,i){if(jp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(qp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${qp(t,r)}`);let n=0,o=0,s=Bp[t],a=Bp[r]-1,c=[];for(let l of e){if(wu(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Bp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function Y9(e){wu(e);let t=256;return{encode:(r)=>{if(!Zp(r))throw TypeError("radix.encode input should be Uint8Array");return HR(Array.from(r),t,e)},decode:(r)=>(CS("radix.decode",r),Uint8Array.from(HR(r,e,t)))}}function fn(e,t=!1){if(wu(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(qp(8,e)>32||qp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Zp(r))throw TypeError("radix2.encode input should be Uint8Array");return TS(Array.from(r),8,e,!t)},decode:(r)=>(CS("radix2.decode",r),Uint8Array.from(TS(r,e,8,t)))}}function KR(e){return GR(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var twe=Object.freeze(Gr(fn(4),Qr("0123456789ABCDEF"),Yr(""))),rwe=Object.freeze(Gr(fn(5),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Mp(5),Yr(""))),nwe=Object.freeze(Gr(fn(5),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Yr(""))),iwe=Object.freeze(Gr(fn(5),Qr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Mp(5),Yr(""))),owe=Object.freeze(Gr(fn(5),Qr("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Yr(""))),swe=Object.freeze(Gr(fn(5),Qr("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),Yr(""),QR((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),XR=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),X9=/[\t\n\f\r ]/,eO=(e,t)=>{xo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&X9.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},RS=Object.freeze(XR?{encode(e){return $S(e),e.toBase64()},decode(e){return eO(e,!1)}}:Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Mp(6),Yr(""))),gr=Object.freeze(Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Yr(""))),awe=Object.freeze(XR?{encode(e){return $S(e),e.toBase64({alphabet:"base64url"})},decode(e){return eO(e,!0)}}:Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Mp(6),Yr(""))),cwe=Object.freeze(Gr(fn(6),Qr("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Yr(""))),OS=(e)=>Gr(Y9(58),Qr(e),Yr("")),lwe=Object.freeze(OS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),uwe=Object.freeze(OS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),dwe=Object.freeze(OS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var AS=Gr(Qr("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),Yr("")),JR=[996825010,642813549,513874426,1027748829,705979059];function xu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<JR.length;i++)if((t>>i&1)===1)r^=JR[i];return r}function VR(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=xu(n)^s>>5}n=xu(n);for(let o=0;o<i;o++)n=xu(n)^e.charCodeAt(o)&31;for(let o of t)n=xu(n)^o;for(let o=0;o<6;o++)n=xu(n);return n^=r,AS.encode(TS([n%Bp[30]],30,5,!1))}function tO(e){let t=e==="bech32"?1:734539939,r=fn(5),i=r.decode,n=r.encode,o=KR(i);function s(f,p,m=90){if(xo("bech32.encode prefix",f),Zp(p))p=Array.from(p);CS("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let y=b+7+p.length;if(m!==!1&&y>m)throw TypeError(`Length ${y} exceeds limit ${m}`);let S=f.toLowerCase(),k=VR(S,p,t);return`${S}1${AS.encode(p)}${k}`}function a(f,p=90){xo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let y=b.lastIndexOf("1");if(y===0||y===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,y),k=b.slice(y+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=AS.decode(k).slice(0,-6),C=VR(S,A,t);if(!k.endsWith(C))throw Error(`Invalid checksum in ${f}: expected "${C}"`);return{prefix:S,words:A}}let c=KR(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var Xr=Object.freeze(tO("bech32")),fwe=Object.freeze(tO("bech32m"));var eV=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),tV={encode(e){return $S(e),e.toHex()},decode(e){return xo("hex",e),Uint8Array.fromHex(e)}},pwe=Object.freeze(eV?tV:Gr(fn(4),Qr("0123456789abcdef"),Yr(""),QR((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function nV(e,t,r,i){Ci(e);let n=zp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Rt(o,"c"),Rt(s,"dkLen"),Rt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=bS(t,"password"),l=bS(r,"salt"),u=new Uint8Array(s),f=Yn.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function iV(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Tr(n),r}function PS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=nV(e,t,r,i),l,u=new Uint8Array(4),f=Wa(u),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let y=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),y.set(p.subarray(0,y.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<y.length;k++)y[k]^=p[k]}}return iV(a,c,s,l,p)}function rO(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],y=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],C=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=y,P=S,J=k,j=A,Q=C,E=D,se=U;for(let fe=0;fe<8;fe+=2)te^=et(T+j|0,7),I^=et(te+T|0,9),j^=et(I+te|0,13),T^=et(j+I|0,18),z^=et(K+H|0,7),Q^=et(z+K|0,9),H^=et(Q+z|0,13),K^=et(H+Q|0,18),E^=et(P+N|0,7),B^=et(E+P|0,9),N^=et(B+E|0,13),P^=et(N+B|0,18),V^=et(se+J|0,7),L^=et(V+se|0,9),J^=et(L+V|0,13),se^=et(J+L|0,18),H^=et(T+V|0,7),B^=et(H+T|0,9),V^=et(B+H|0,13),T^=et(V+B|0,18),N^=et(K+te|0,7),L^=et(N+K|0,9),te^=et(L+N|0,13),K^=et(te+L|0,18),J^=et(P+z|0,7),I^=et(J+P|0,9),z^=et(I+J|0,13),P^=et(z+I|0,18),j^=et(se+E|0,7),Q^=et(j+se|0,9),E^=et(Q+j|0,13),se^=et(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=u+te|0,n[o++]=f+K|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=y+z|0,n[o++]=S+P|0,n[o++]=k+J|0,n[o++]=A+j|0,n[o++]=C+Q|0,n[o++]=D+E|0,n[o++]=U+se|0}function zS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(rO(r,s,e,t,r,o),a>0)s+=16;rO(r,o,e,t+=16,r,s)}}function oV(e,t,r){let i=zp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Rt(n,"N"),Rt(o,"r"),Rt(s,"p"),Rt(a,"dkLen"),Rt(c,"asyncTick"),Rt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let y=PS(Ot,e,t,{c:1,dkLen:f*s}),S=Op(y),k=Op(new Uint8Array(f*n)),A=Op(new Uint8Array(f)),C=()=>{};if(u){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;C=()=>{if(T++,u&&(!(T%U)||T===D))u(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:y,tmp:A,blockMixCb:C,asyncTick:c}}function sV(e,t,r,i,n){let o=PS(Ot,e,r,{c:1,dkLen:t});return Tr(r,i,n),o}function NS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=oV(e,t,r);yS(l);for(let m=0;m<o;m++){let b=a*m;for(let y=0;y<a;y++)c[y]=l[b+y];for(let y=0,S=0;y<i-1;y++)zS(c,S,c,S+=a,n),p();zS(c,(i-1)*a,l,b,n),p();for(let y=0;y<i;y++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];zS(f,0,l,b,n),p()}}return yS(l),sV(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function aV(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Fp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function Ga(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Zt(e,t,r=""){let i=aV(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function DS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function nO(e,t,r=!1){Zt(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!Qa(e))throw Error("invalid output, must be aligned")}function ei(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function cV(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Ps=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),lV=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var uV=(e)=>{for(let t=0;t<e.length;t++)e[t]=lV(e[t]);return e},Pi=Ps?(e)=>e:uV;function iO(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function oO(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function sO(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var aO=(e,t)=>{function r(i,...n){if(Zt(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Zt(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Zt(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");Zt(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Zt(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(Zt(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function vu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Zt(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!Qa(t))throw Error("invalid output, must be aligned");return t}function cO(e,t,r){Ga(e),Ga(t),Fp(r);let i=new Uint8Array(16),n=cV(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function Qa(e){return e.byteOffset%4===0}function Ya(e){return Uint8Array.from(Zt(e))}var uO=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),dV=(()=>Pi(ei(uO("expand 16-byte k"))))(),fV=(()=>Pi(ei(uO("expand 32-byte k"))))();function tt(e,t){return e<<t|e>>>32-t}var _u=64,pV=16,LS=(()=>4294967295)(),lO=Uint32Array.of();function mV(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(_u),u=ei(l),f=Ps&&Qa(n)&&Qa(o),p=f?ei(n):lO,m=f?ei(o):lO;if(!Ps){for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),Pi(u),s>=LS)throw Error("arx: counter overflow");let y=Math.min(_u,c-b);for(let S=0,k;S<y;S++)k=b+S,o[k]=n[k]^l[S];b+=y}return}for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),s>=LS)throw Error("arx: counter overflow");let y=Math.min(_u,c-b);if(f&&y===_u){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<pV;k++)A=S+k,m[A]=p[A]^u[k];b+=_u;continue}for(let S=0,k;S<y;S++)k=b+S,o[k]=n[k]^l[S];b+=y}}function dO(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=iO({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return Ga(n),Ga(s),Fp(o),Fp(r),(a,c,l,u,f=0)=>{Zt(a,void 0,"key"),Zt(c,void 0,"nonce"),Zt(l,void 0,"data");let p=l.length;if(u=vu(p,u,!1),Ga(f),f<0||f>=LS)throw Error("arx: counter overflow");let m=[],b=a.length,y,S;if(b===32)m.push(y=Ya(a)),S=fV;else if(b===16&&r)y=new Uint8Array(32),y.set(a),y.set(a,16),S=dV,m.push(y);else throw Zt(a,32,"arx key"),Error("invalid key size");if(!Ps||!Qa(c))m.push(c=Ya(c));let k=ei(y);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Ps)i(S,k,ei(D),k);else{let U=Pi(Uint32Array.from(S));i(U,k,ei(D),k),$n(U),Pi(k)}c=c.subarray(16)}else if(!Ps)Pi(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let C=Pi(ei(c));try{return mV(e,S,k,C,l,u,f,s),u}finally{$n(...m)}}}function nr(e,t){return e[t++]&255|(e[t++]&255)<<8}class fO{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=Ya(Zt(e,32,"key"));let t=nr(e,0),r=nr(e,2),i=nr(e,4),n=nr(e,6),o=nr(e,8),s=nr(e,10),a=nr(e,12),c=nr(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=nr(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],b=o[8],y=o[9],S=nr(e,t+0),k=nr(e,t+2),A=nr(e,t+4),C=nr(e,t+6),D=nr(e,t+8),U=nr(e,t+10),T=nr(e,t+12),H=nr(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),K=n[3]+((A>>>7|C<<9)&8191),N=n[4]+((C>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),J=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*y)+te*(5*b)+K*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*u)+z*(5*l)+P*(5*c)+J*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*y)+K*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*u)+P*(5*l)+J*(5*c),j+=E>>>13,E&=8191;let se=j+B*c+V*a+te*s+K*(5*y)+N*(5*b);j=se>>>13,se&=8191,se+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*u)+J*(5*l),j+=se>>>13,se&=8191;let fe=j+B*l+V*c+te*a+K*s+N*(5*y);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+J*(5*u),j+=fe>>>13,fe&=8191;let R=j+B*u+V*l+te*c+K*a+N*s;j=R>>>13,R&=8191,R+=L*(5*y)+I*(5*b)+z*(5*m)+P*(5*p)+J*(5*f),j+=R>>>13,R&=8191;let xe=j+B*f+V*u+te*l+K*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*y)+z*(5*b)+P*(5*m)+J*(5*p),j+=xe>>>13,xe&=8191;let Te=j+B*p+V*f+te*u+K*l+N*c;j=Te>>>13,Te&=8191,Te+=L*a+I*s+z*(5*y)+P*(5*b)+J*(5*m),j+=Te>>>13,Te&=8191;let Pe=j+B*m+V*p+te*f+K*u+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*y)+J*(5*b),j+=Pe>>>13,Pe&=8191;let Oe=j+B*b+V*m+te*p+K*f+N*u;j=Oe>>>13,Oe&=8191,Oe+=L*l+I*c+z*a+P*s+J*(5*y),j+=Oe>>>13,Oe&=8191;let _e=j+B*y+V*b+te*m+K*p+N*f;j=_e>>>13,_e&=8191,_e+=L*u+I*l+z*c+P*a+J*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=se,n[3]=fe,n[4]=R,n[5]=xe,n[6]=Te,n[7]=Pe,n[8]=Oe,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){DS(this),Zt(e),e=Ya(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){DS(this),nO(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var pO=sO(32,(e)=>new fO(e));function hV(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],b=t[4],y=t[5],S=t[6],k=t[7],A=n,C=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=y,P=S,J=k,j=A,Q=C,E=D,se=U;for(let R=0;R<o;R+=2)T=T+te|0,j=tt(j^T,16),I=I+j|0,te=tt(te^I,12),T=T+te|0,j=tt(j^T,8),I=I+j|0,te=tt(te^I,7),H=H+K|0,Q=tt(Q^H,16),z=z+Q|0,K=tt(K^z,12),H=H+K|0,Q=tt(Q^H,8),z=z+Q|0,K=tt(K^z,7),B=B+N|0,E=tt(E^B,16),P=P+E|0,N=tt(N^P,12),B=B+N|0,E=tt(E^B,8),P=P+E|0,N=tt(N^P,7),V=V+L|0,se=tt(se^V,16),J=J+se|0,L=tt(L^J,12),V=V+L|0,se=tt(se^V,8),J=J+se|0,L=tt(L^J,7),T=T+K|0,se=tt(se^T,16),P=P+se|0,K=tt(K^P,12),T=T+K|0,se=tt(se^T,8),P=P+se|0,K=tt(K^P,7),H=H+N|0,j=tt(j^H,16),J=J+j|0,N=tt(N^J,12),H=H+N|0,j=tt(j^H,8),J=J+j|0,N=tt(N^J,7),B=B+L|0,Q=tt(Q^B,16),I=I+Q|0,L=tt(L^I,12),B=B+L|0,Q=tt(Q^B,8),I=I+Q|0,L=tt(L^I,7),V=V+te|0,E=tt(E^V,16),z=z+E|0,te=tt(te^z,12),V=V+te|0,E=tt(E^V,8),z=z+E|0,te=tt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=u+te|0,i[fe++]=f+K|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=y+z|0,i[fe++]=S+P|0,i[fe++]=k+J|0,i[fe++]=A+j|0,i[fe++]=C+Q|0,i[fe++]=D+E|0,i[fe++]=U+se|0}var gV=dO(hV,{counterRight:!1,counterLength:4,allowShortKeys:!1});var yV=new Uint8Array(16),mO=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(yV.subarray(r))},bV=new Uint8Array(32);function hO(e,t,r,i,n){if(n!==void 0)Zt(n,void 0,"AAD");let o=e(t,r,bV),s=cO(i.length,n?n.length:0,!0),a=pO.create(o);if(n)mO(a,n);mO(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var SV=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=vu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=hO(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=vu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=hO(e,t,r,a,i);if(!oO(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),pn=aO({blockSize:64,nonceLength:12,tagLength:16},SV(gV));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Xa(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Wt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function Ne(e,t,r=""){let i=Xa(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function mn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Wt(e.outputLen),Wt(e.blockLen)}function Ni(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Hp(e,t){Ne(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Kp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function qr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Jp(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Cn(e,t){return e<<32-t|e>>>t}var xV=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function wV(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function vV(e){for(let t=0;t<e.length;t++)e[t]=wV(e[t]);return e}var BS=xV?(e)=>e:vV,yO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),_V=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function zs(e){if(Ne(e),yO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=_V[e[r]];return t}var zi={_0:48,_9:57,A:65,F:70,a:97,f:102};function gO(e){if(e>=zi._0&&e<=zi._9)return e-zi._0;if(e>=zi.A&&e<=zi.F)return e-(zi.A-10);if(e>=zi.a&&e<=zi.f)return e-(zi.a-10);return}function Ns(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(yO)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=gO(e.charCodeAt(o)),a=gO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Bt(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];Ne(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function ec(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function wo(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var vo=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var US=BigInt(0),jS=BigInt(1);function ku(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function bO(e){if(typeof e==="bigint"){if(!Vp(e))throw Error("positive bigint expected, got "+e)}else Wt(e);return e}function Eu(e){let t=bO(e).toString(16);return t.length&1?"0"+t:t}function SO(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?US:BigInt("0x"+e)}function _o(e){return SO(zs(e))}function ko(e){return SO(zs(Wp(Ne(e)).reverse()))}function tc(e,t){Wt(t),e=bO(e);let r=Ns(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Iu(e,t){return tc(e,t).reverse()}function Wp(e){return Uint8Array.from(e)}function Eo(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Vp=(e)=>typeof e==="bigint"&&US<=e;function kV(e,t,r){return Vp(e)&&Vp(t)&&Vp(r)&&t<=e&&e<r}function Tu(e,t,r,i){if(!kV(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function qS(e){let t;for(t=0;e>US;e>>=jS,t+=1);return t}var Au=(e)=>(jS<<BigInt(e))-jS;function xO(e,t,r){if(Wt(e,"hashLen"),Wt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,Bt(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Bt(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function Ds(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function ZS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $r=BigInt(0),yr=BigInt(1),Ls=BigInt(2),_O=BigInt(3),kO=BigInt(4),EO=BigInt(5),EV=BigInt(7),IO=BigInt(8),IV=BigInt(9),TO=BigInt(16);function Ar(e,t){let r=e%t;return r>=$r?r:t+r}function hn(e,t,r){let i=e;while(t-- >$r)i*=i,i%=r;return i}function wO(e,t){if(e===$r)throw Error("invert: expected non-zero number");if(t<=$r)throw Error("invert: expected positive modulus, got "+t);let r=Ar(e,t),i=t,n=$r,o=yr,s=yr,a=$r;while(r!==$r){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==yr)throw Error("invert: does not exist");return Ar(n,t)}function MS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function AO(e,t){let r=(e.ORDER+yr)/kO,i=e.pow(t,r);return MS(e,i,t),i}function TV(e,t){let r=(e.ORDER-EO)/IO,i=e.mul(t,Ls),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Ls),n),a=e.mul(o,e.sub(s,e.ONE));return MS(e,a,t),a}function AV(e){let t=Gp(e),r=$O(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+EV)/TO;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,b);let y=a.eql(a.sqr(u),c),S=a.cmov(l,u,y);return MS(a,S,c),S}}function $O(e){if(e<_O)throw Error("sqrt is not defined for small field");let t=e-yr,r=0;while(t%Ls===$r)t/=Ls,r++;let i=Ls,n=Gp(e);while(vO(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return AO;let o=n.pow(i,t),s=(t+yr)/Ls;return function(c,l){if(c.is0(l))return l;if(vO(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,y=c.sqr(p);while(!c.eql(y,c.ONE))if(b++,y=c.sqr(y),b===u)throw Error("Cannot find square root");let S=yr<<BigInt(u-b-1),k=c.pow(f,S);u=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function $V(e){if(e%kO===_O)return AO;if(e%IO===EO)return TV;if(e%TO===IV)return AV(e);return $O(e)}var CV=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function FS(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=CV.reduce((i,n)=>(i[n]="function",i),t);return Ds(e,r),e}function RV(e,t,r){if(r<$r)throw Error("invalid exponent, negatives unsupported");if(r===$r)return e.ONE;if(r===yr)return t;let i=e.ONE,n=t;while(r>$r){if(r&yr)i=e.mul(i,n);n=e.sqr(n),r>>=yr}return i}function $u(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function vO(e,t){let r=(e.ORDER-yr)/Ls,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function OV(e,t){if(t!==void 0)Wt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class CO{ORDER;BITS;BYTES;isLE;ZERO=$r;ONE=yr;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=$r)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=OV(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Ar(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return $r<=e&&e<this.ORDER}is0(e){return e===$r}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&yr)===yr}neg(e){return Ar(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Ar(e*e,this.ORDER)}add(e,t){return Ar(e+t,this.ORDER)}sub(e,t){return Ar(e-t,this.ORDER)}mul(e,t){return Ar(e*t,this.ORDER)}pow(e,t){return RV(this,e,t)}div(e,t){return Ar(e*wO(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return wO(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=$V(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Iu(e,this.BYTES):tc(e,this.BYTES)}fromBytes(e,t=!1){Ne(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?ko(e):_o(e);if(s)a=Ar(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return $u(this,e)}cmov(e,t,r){return r?t:e}}function Gp(e,t={}){return new CO(e,t)}function RO(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function HS(e){let t=RO(e);return t+Math.ceil(t/2)}function OO(e,t,r=!1){Ne(e);let i=e.length,n=RO(t),o=HS(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?ko(e):_o(e),a=Ar(s,t-yr)+yr;return r?Iu(a,n):tc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rc=BigInt(0),Bs=BigInt(1);function Cu(e,t){let r=t.negate();return e?r:t}function WS(e,t){let r=$u(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function DO(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function KS(e,t){DO(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Au(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function PO(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Bs;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var JS=new WeakMap,LO=new WeakMap;function VS(e){return LO.get(e)||1}function zO(e){if(e!==rc)throw Error("invalid wNAF")}class GS{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>rc){if(t&Bs)r=r.add(i);i=i.double(),t>>=Bs}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=KS(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=KS(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=PO(r,s,o);if(r=a,l)n=n.add(Cu(f,t[p]));else i=i.add(Cu(u,t[c]))}return zO(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=KS(e,this.bits);for(let o=0;o<n.windows;o++){if(r===rc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=PO(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return zO(r),i}getPrecomputes(e,t,r){let i=JS.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);JS.set(t,i)}}return i}cached(e,t,r){let i=VS(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=VS(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){DO(t,this.bits),LO.set(e,t),JS.delete(e)}hasCache(e){return VS(e)!==1}}function BO(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>rc||i>rc){if(r&Bs)o=o.add(n);if(i&Bs)s=s.add(n);n=n.double(),r>>=Bs,i>>=Bs}return{p1:o,p2:s}}function NO(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return FS(t),t}else return Gp(e,{isLE:r})}function jO(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>rc))throw Error(`CURVE.${c} must be positive bigint`)}let n=NO(t.p,r.Fp,i),o=NO(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Qp(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Ru=BigInt(0),nc=BigInt(1),Yp=BigInt(2);function PV(e){return Ds(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function UO(e){let t=PV(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||wo,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Yp**BigInt(254):Yp**BigInt(447),b=a?BigInt(8)*Yp**BigInt(251)-nc:BigInt(4)*Yp**BigInt(445)-nc,y=m+b+nc,S=(I)=>Ar(I,r),k=A(f);function A(I){return Iu(S(I),u)}function C(I){let z=Wp(Ne(I,u,"uCoordinate"));if(a)z[31]&=127;return S(ko(z))}function D(I){return ko(n(Wp(Ne(I,u,"scalar"))))}function U(I,z){let P=te(C(z),D(I));if(P===Ru)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){Tu("u",I,Ru,r),Tu("scalar",z,m,y);let P=z,J=I,j=nc,Q=Ru,E=I,se=nc,fe=Ru;for(let xe=BigInt(l-1);xe>=Ru;xe--){let Te=P>>xe&nc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:se}=V(fe,Q,se),fe=Te;let Pe=j+Q,Oe=S(Pe*Pe),_e=j-Q,Ve=S(_e*_e),De=Oe-Ve,Qe=E+se,lt=E-se,vt=S(lt*Pe),Lt=S(Qe*_e),mt=vt+Lt,mr=vt-Lt;E=S(mt*mt),se=S(J*S(mr*mr)),j=S(Oe*Ve),Q=S(De*(Oe+S(p*De)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:se}=V(fe,Q,se);let R=o(Q);return S(j*R)}let K={secretKey:u,publicKey:u,seed:u},N=(I=c(u))=>(Ne(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:Qp(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}class QS{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(mn(e),Ne(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),qr(i)}update(e){return Ni(this),this.iHash.update(e),this}digestInto(e){Ni(this),Ne(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ic=(e,t,r)=>new QS(e,t).update(r).digest();ic.create=(e,t)=>new QS(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qO=(e,t)=>(e+(e>=0?t:-t)/MO)/t;function zV(e,t,r){let[[i,n],[o,s]]=t,a=qO(s*e,r),c=qO(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Di,p=u<Di;if(f)l=-l;if(p)u=-u;let m=Au(Math.ceil(qS(r)/2))+oc;if(l<Di||l>=m||u<Di||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function XS(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function YS(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(ku(r.lowS,"lowS"),ku(r.prehash,"prehash"),r.format!==void 0)XS(r.format);return r}class ZO extends Error{constructor(e=""){super(e)}}var Io={Err:ZO,_tlv:{encode:(e,t)=>{let{Err:r}=Io;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Eu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Eu(n.length/2|128):"";return Eu(e)+o+n+t},decode(e,t){let{Err:r}=Io,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Io;if(e<Di)throw new t("integer: negative integers are not allowed");let r=Eu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Io;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return _o(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Io,n=Ne(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Io,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Di=BigInt(0),oc=BigInt(1),MO=BigInt(2),Xp=BigInt(3),NV=BigInt(4);function ex(e,t={}){let r=jO("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;Ds(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=HO(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),J=i.toBytes(z);if(ku(I,"isCompressed"),I){u();let j=!i.isOdd(P);return Bt(FO(j),J)}else return Bt(Uint8Array.of(4),J,i.toBytes(P))}function p(N){Ne(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],J=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(J);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=y(j),E;try{E=i.sqrt(Q)}catch(R){let xe=R instanceof Error?": "+R.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}u();let se=i.isOdd(E);if((P&1)===1!==se)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(J.subarray(0,j)),E=i.fromBytes(J.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function y(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=y(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,Xp),NV),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function C(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return zV(N,c.basises,n.ORDER)}let T=ZS((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=ZS((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Cu(z,L),I=Cu(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=C("x",N),this.Y=C("y",L,!0),this.Z=C("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(Ne(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Ns(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(K.createCache(this,N),!L)this.multiply(Xp);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(J,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,Xp),{X:z,Y:P,Z:J}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,se=i.mul(z,z),fe=i.mul(P,P),R=i.mul(J,J),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,J),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,R),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),R=i.mul(N,R),xe=i.sub(se,R),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(se,se),se=i.add(E,se),se=i.add(se,R),se=i.mul(se,xe),Q=i.add(Q,se),R=i.mul(P,J),R=i.add(R,R),se=i.mul(R,xe),j=i.sub(j,se),E=i.mul(R,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.ZERO,E=i.ZERO,se=i.ZERO,fe=o.a,R=i.mul(o.b,Xp),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.mul(z,j),Oe=i.add(L,I),_e=i.add(P,J);Oe=i.mul(Oe,_e),_e=i.add(xe,Te),Oe=i.sub(Oe,_e),_e=i.add(L,z);let Ve=i.add(P,j);return _e=i.mul(_e,Ve),Ve=i.add(xe,Pe),_e=i.sub(_e,Ve),Ve=i.add(I,z),Q=i.add(J,j),Ve=i.mul(Ve,Q),Q=i.add(Te,Pe),Ve=i.sub(Ve,Q),se=i.mul(fe,_e),Q=i.mul(R,Pe),se=i.add(Q,se),Q=i.sub(Te,se),se=i.add(Te,se),E=i.mul(Q,se),Te=i.add(xe,xe),Te=i.add(Te,xe),Pe=i.mul(fe,Pe),_e=i.mul(R,_e),Te=i.add(Te,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Te,_e),E=i.add(E,xe),xe=i.mul(Ve,_e),Q=i.mul(Oe,Q),Q=i.sub(Q,xe),xe=i.mul(Oe,Te),se=i.mul(Ve,se),se=i.add(se,xe),new V(Q,E,se)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(J)=>K.cached(this,J,(j)=>WS(V,j));if(L){let{k1neg:J,k1:j,k2neg:Q,k2:E}=U(N),{p:se,f:fe}=P(j),{p:R,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,se,R,J,Q)}else{let{p:J,f:j}=P(N);I=J,z=j}return WS(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Di||I.is0())return V.ZERO;if(N===oc)return I;if(K.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:J,k2:j}=U(N),{p1:Q,p2:E}=BO(V,I,P,j);return B(L.beta,Q,E,z,J)}else return K.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===oc)return!0;if(N)return N(V,this);return K.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===oc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return ku(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return zs(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,K=new GS(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function FO(e){return Uint8Array.of(e?2:3)}function HO(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function DV(e,t={}){let{Fn:r}=e,i=t.randomBytes||wo,n=Object.assign(HO(e.Fp,r),{seed:HS(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:y,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==y)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return OO(Ne(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:y,publicKeyUncompressed:S}=n;if(!Xa(m))return;if("_lengths"in r&&r._lengths||b===y)return;let k=Ne(m,void 0,"key").length;return k===y||k===S}function u(m,b,y=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(y)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Qp(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function tx(e,t,r={}){mn(t),Ds(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||wo,n=r.hmac||((I,z)=>ic(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=DV(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},y=a*MO<o.ORDER;function S(I){let z=a>>oc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(y)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function C(I,z){XS(z);let P=m.signature,J=z==="compact"?P:z==="recovered"?P+1:void 0;return Ne(I,J)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){C(I,z);let P;if(z==="der"){let{r:E,s:se}=Io.toSig(Ne(I));return new D(E,se)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let J=m.signature/2,j=I.subarray(0,J),Q=I.subarray(J,J*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Ns(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,J=this.assertRecovery(),j=J===2||J===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Bt(FO((J&1)===0),Q)),se=s.inv(j),fe=T(Ne(I,void 0,"msgHash")),R=s.create(-fe*se),xe=s.create(P*se),Te=e.BASE.multiplyUnsafe(R).add(E.multiplyUnsafe(xe));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(I=b.format){if(XS(I),I==="der")return Ns(Io.hexFromSig(this));let{r:z,s:P}=this,J=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Bt(Uint8Array.of(this.assertRecovery()),J,j);return Bt(J,j)}toHex(I){return zs(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=_o(z),J=z.length*8-c;return J>0?P>>BigInt(J):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=Au(c);function B(I){return Tu("num < 2^"+c,I,Di,H),s.toBytes(I)}function V(I,z){return Ne(I,void 0,"message"),z?Ne(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:J,prehash:j,extraEntropy:Q}=YS(P,b);I=V(I,j);let E=T(I),se=s.fromBytes(z);if(!s.isValidNot0(se))throw Error("invalid private key");let fe=[B(se),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(Ne(Pe,void 0,"extraEntropy"))}let R=Bt(...fe),xe=E;function Te(Pe){let Oe=U(Pe);if(!s.isValidNot0(Oe))return;let _e=s.inv(Oe),Ve=e.BASE.multiply(Oe).toAffine(),De=s.create(Ve.x);if(De===Di)return;let Qe=s.create(_e*s.create(xe+De*se));if(Qe===Di)return;let lt=(Ve.x===De?0:2)|Number(Ve.y&oc),vt=Qe;if(J&&S(Qe))vt=s.neg(Qe),lt^=1;return new D(De,vt,y?void 0:lt)}return{seed:R,k2sig:Te}}function K(I,z,P={}){let{seed:J,k2sig:j}=te(I,z,P);return xO(t.outputLen,s.BYTES,n)(J,j).toBytes(P.format)}function N(I,z,P,J={}){let{lowS:j,prehash:Q,format:E}=YS(J,b);if(P=Ne(P,void 0,"publicKey"),z=V(z,Q),!Xa(I)){let se=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+se)}C(I,E);try{let se=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&se.hasHighS())return!1;let{r:R,s:xe}=se,Te=T(z),Pe=s.inv(xe),Oe=s.create(Te*Pe),_e=s.create(R*Pe),Ve=e.BASE.multiplyUnsafe(Oe).add(fe.multiplyUnsafe(_e));if(Ve.is0())return!1;return s.create(Ve.x)===R}catch(se){return!1}}function L(I,z,P={}){let{prehash:J}=YS(P,b);return z=V(z,J),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:K,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function KO(e,t,r){return e&t^~e&r}function JO(e,t,r){return e&t^e&r^t&r}class em{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=Jp(this.buffer)}update(e){Ni(this),Ne(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=Jp(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Ni(this),Hp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,qr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=Jp(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var Li=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var tm=BigInt(4294967295),VO=BigInt(32);function LV(e,t=!1){if(t)return{h:Number(e&tm),l:Number(e>>VO&tm)};return{h:Number(e>>VO&tm)|0,l:Number(e&tm)|0}}function rm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=LV(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var rx=(e,t,r)=>e>>>r,nx=(e,t,r)=>e<<32-r|t>>>r,js=(e,t,r)=>e>>>r|t<<32-r,Us=(e,t,r)=>e<<32-r|t>>>r,Ou=(e,t,r)=>e<<64-r|t>>>r-32,Pu=(e,t,r)=>e>>>r-32|t<<64-r;var WO=(e,t,r)=>e<<r|t>>>32-r,GO=(e,t,r)=>t<<r|e>>>32-r,QO=(e,t,r)=>t<<r-32|e>>>64-r,YO=(e,t,r)=>e<<r-32|t>>>64-r;function ti(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var XO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),eP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,tP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),rP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,nP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),iP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var jV=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),To=new Uint32Array(64);class oP extends em{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)To[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=To[u-15],p=To[u-2],m=Cn(f,7)^Cn(f,18)^f>>>3,b=Cn(p,17)^Cn(p,19)^p>>>10;To[u]=b+To[u-7]+m+To[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Cn(s,6)^Cn(s,11)^Cn(s,25),p=l+f+KO(s,a,c)+jV[u]+To[u]|0,b=(Cn(r,2)^Cn(r,13)^Cn(r,22))+JO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){qr(To)}destroy(){this.set(0,0,0,0,0,0,0,0),qr(this.buffer)}}class sP extends oP{A=Li[0]|0;B=Li[1]|0;C=Li[2]|0;D=Li[3]|0;E=Li[4]|0;F=Li[5]|0;G=Li[6]|0;H=Li[7]|0;constructor(){super(32)}}var aP=(()=>rm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),UV=(()=>aP[0])(),qV=(()=>aP[1])(),Ao=new Uint32Array(80),$o=new Uint32Array(80);class cP extends em{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:y}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,y){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=y|0}process(e,t){for(let A=0;A<16;A++,t+=4)Ao[A]=e.getUint32(t),$o[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let C=Ao[A-15]|0,D=$o[A-15]|0,U=js(C,D,1)^js(C,D,8)^rx(C,D,7),T=Us(C,D,1)^Us(C,D,8)^nx(C,D,7),H=Ao[A-2]|0,B=$o[A-2]|0,V=js(H,B,19)^Ou(H,B,61)^rx(H,B,6),te=Us(H,B,19)^Pu(H,B,61)^nx(H,B,6),K=tP(T,te,$o[A-7],$o[A-16]),N=rP(K,U,V,Ao[A-7],Ao[A-16]);Ao[A]=N|0,$o[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:y,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let C=js(u,f,14)^js(u,f,18)^Ou(u,f,41),D=Us(u,f,14)^Us(u,f,18)^Pu(u,f,41),U=u&p^~u&b,T=f&m^~f&y,H=nP(k,D,T,qV[A],$o[A]),B=iP(H,S,C,U,UV[A],Ao[A]),V=H|0,te=js(r,i,28)^Ou(r,i,34)^Ou(r,i,39),K=Us(r,i,28)^Pu(r,i,34)^Pu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=y|0,b=p|0,y=m|0,p=u|0,m=f|0,{h:u,l:f}=ti(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=XO(V,K,L);r=eP(I,B,te,N),i=I|0}({h:r,l:i}=ti(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ti(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ti(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ti(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=ti(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=ti(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:y}=ti(this.Gh|0,this.Gl|0,b|0,y|0),{h:S,l:k}=ti(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,y,S,k)}roundClean(){qr(Ao,$o)}destroy(){qr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class lP extends cP{Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(48)}}var nm=ec(()=>new sP,vo(1));var uP=ec(()=>new lP,vo(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ZV=BigInt(1),dP=BigInt(2),MV=BigInt(3),FV=BigInt(5),gve=BigInt(8),fP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function HV(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=fP,a=e*e%o*e%o,c=hn(a,dP,o)*a%o,l=hn(c,ZV,o)*e%o,u=hn(l,FV,o)*l%o,f=hn(u,t,o)*u%o,p=hn(f,r,o)*f%o,m=hn(p,i,o)*p%o,b=hn(m,n,o)*m%o,y=hn(b,n,o)*m%o,S=hn(y,t,o)*u%o;return{pow_p_5_8:hn(S,dP,o)*e%o,b2:a}}function KV(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var pP=(()=>{let e=fP;return UO({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=HV(t);return Ar(hn(r,MV,e)*i,e)},adjustScalarBytes:KV})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var JV=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),VV=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var WV=ex(JV),ix=tx(WV,nm);var GV=ex(VV),mP=tx(GV,uP);function gP(e,t,r){if(mn(e),r===void 0)r=new Uint8Array(e.outputLen);return ic(e,r,t)}var ox=Uint8Array.of(0),hP=Uint8Array.of();function yP(e,t,r,i=32){mn(e),Wt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=hP;else Ne(r,void 0,"info");let s=new Uint8Array(o*n),a=ic.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)ox[0]=u+1,c.update(u===0?hP:l).update(r).update(ox).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),qr(l,ox),s.slice(0,i)}var QV=BigInt(0),zu=BigInt(1),YV=BigInt(2),XV=BigInt(7),e7=BigInt(256),t7=BigInt(113),xP=[],wP=[],vP=[];for(let e=0,t=zu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],xP.push(2*(5*i+r)),wP.push((e+1)*(e+2)/2%64);let n=QV;for(let o=0;o<7;o++)if(t=(t<<zu^(t>>XV)*t7)%e7,t&YV)n^=zu<<(zu<<BigInt(o))-zu;vP.push(n)}var _P=rm(vP,!0),r7=_P[0],n7=_P[1],bP=(e,t,r)=>r>32?QO(e,t,r):WO(e,t,r),SP=(e,t,r)=>r>32?YO(e,t,r):GO(e,t,r);function i7(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=bP(l,u,1)^r[a],p=SP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=wP[s],c=bP(n,o,a),l=SP(n,o,a),u=xP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=r7[i],e[1]^=n7[i]}qr(r)}class im{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Wt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Kp(this.state)}clone(){return this._cloneInto()}keccak(){BS(this.state32),i7(this.state32,this.rounds),BS(this.state32),this.posOut=0,this.pos=0}update(e){Ni(this),Ne(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Ni(this,!1),Ne(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Wt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Hp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,qr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new im(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var kP=(e,t,r,i={})=>ec(()=>new im(t,e,r),i);var qs=kP(6,136,32,vo(8));var EP=kP(6,72,64,vo(10));var IP=(e,t,r,i={})=>ec((n={})=>new im(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),TP=IP(31,168,16,vo(11)),ri=IP(31,136,32,vo(12));function sx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function $P(e){return sx(e),(e&e-1)===0&&e!==0}function ax(e,t){sx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function CP(e){return sx(e),31-Math.clz32(e)}function AP(e){let t=e.length;if(t<2||!$P(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=CP(t);for(let i=0;i<t;i++){let n=ax(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var cx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=CP(r);if(!$P(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)AP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,y=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,C=p++;A<y;A++){let D=o?n?r-C:C:A*S,U=k+A,T=k+A+y,H=i[D],B=u[T],V=u[U];if(l){let te=e.mul(B,H);u[U]=e.add(V,te),u[T]=e.sub(V,te)}else if(o)u[U]=e.add(B,V),u[T]=e.mul(e.sub(B,V),H);else u[U]=e.add(V,B),u[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)AP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ni=wo;function om(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function RP(e){return Uint8Array.from(e)}function Zs(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(Ne(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{Ne(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function sm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{Ne(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Mt(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function lx(e){return(1<<e)-1}var Rve=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var OP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,C=i)=>{let D=A%C|0;return(D>=0?D|0:C+D|0)|0},l=(A,C=i)=>{let D=c(A,C)|0;return(D>C>>1?D-C|0:D)|0};function u(){let A=t(r);for(let C=0;C<r;C++){let D=ax(C,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[C]=Number(U)|0}return A}let f=u(),p={add:(A,C)=>c((A|0)+(C|0))|0,sub:(A,C)=>c((A|0)-(C|0))|0,mul:(A,C)=>c((A|0)*(C|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=cx(p,{dit:!1,...m}),y=cx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{y(A);for(let C=0;C<A.length;C++)A[C]=c(n*A[C]);return A}},bitsCoder:(A,C)=>{let D=lx(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=(C.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[K++]=V&lx(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[K++]=C.decode(V&D)}return H}}}}},o7=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Mt(o,i)}}},PP=o7(TP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var br=256,Bi=3329,s7=3303,a7=17,{mod:Lu,nttZetas:c7,NTT:Ms,bitsCoder:l7}=OP({N:br,Q:Bi,F:s7,ROOT_OF_UNITY:a7,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),ux={512:{N:br,Q:Bi,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:br,Q:Bi,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:br,Q:Bi,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},u7=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Bi/2)/Bi,decode:(r)=>r*Bi+t>>>e}},Nu=(e)=>l7(e,u7(e));function Fs(e,t){for(let r=0;r<br;r++)e[r]=Lu(e[r]+t[r])}function d7(e,t){for(let r=0;r<br;r++)e[r]=Lu(e[r]-t[r])}function f7(e,t,r,i,n){let o=Lu(t*i*n+e*r),s=Lu(e*i+t*r);return{c0:o,c1:s}}function am(e,t){for(let r=0;r<br/2;r++){let i=c7[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=f7(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function zP(e){let t=new Uint16Array(br);for(let r=0;r<br;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<br&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Bi)t[r++]=o;if(r<br&&s<Bi)t[r++]=s}}return t}function Du(e,t,r,i){let n=e(i*br/4,t,r),o=new Uint16Array(br),s=Kp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Lu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var p7=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Nu(1),u=Nu(c),f=Nu(a),p=Zs("publicKey",sm(Nu(12),t),32),m=sm(Nu(12),t),b=Zs("ciphertext",sm(f,t),u),y=Zs("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{Ne(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[C,D]=y.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Ms.encode(Du(r,D,V,o)));let H=i(C);for(let V=0;V<t;V++){let te=Ms.encode(Du(r,D,t+V,o));for(let K=0;K<t;K++){let N=zP(H.get(K,V));Fs(te,am(N,U[K]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,C]),secretKey:m.encode(U)};return Mt(C,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[C,D]=p.decode(S),U=[];for(let K=0;K<t;K++)U.push(Ms.encode(Du(r,A,K,o)));let T=i(D),H=new Uint16Array(br),B=[];for(let K=0;K<t;K++){let N=Du(r,A,t+K,s),L=new Uint16Array(br);for(let I=0;I<t;I++){let z=zP(T.get(K,I));Fs(L,am(z,U[I]))}Fs(N,Ms.decode(L)),B.push(N),Fs(H,am(C[K],U[K])),Mt(L)}T.clean();let V=Du(r,A,2*t,s);Fs(V,Ms.decode(H));let te=l.decode(k);return Fs(te,V),Mt(C,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,C]=b.decode(S),D=m.decode(k),U=new Uint16Array(br);for(let T=0;T<t;T++)Fs(U,am(D[T],Ms.encode(A[T])));return d7(C,Ms.decode(U)),Mt(U,D,A),l.encode(C)}}};function dx(e){let t=p7(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Zs("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ni(64))=>{Ne(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),b=a.encode([p,f,m,u.subarray(32)]);return Mt(p,m),{publicKey:f,secretKey:b}},getPublicKey:(u)=>{let[f,p,m,b]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=ni(32))=>{Ne(u,s.publicKey,"publicKey"),Ne(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(RP(p)));if(!om(m,p))throw Mt(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Mt(m);let b=i.create().update(f).update(r(u)).digest(),y=t.encrypt(u,f,b.subarray(32,64));return Mt(b.subarray(32)),{cipherText:y,sharedSecret:b.subarray(0,32)}},decapsulate:(u,f)=>{Ne(f,a.bytesLen,"secretKey"),Ne(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!om(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[y,S,k,A]=a.decode(f),C=t.decrypt(u,y),D=i.create().update(C).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,C,D.subarray(32,64)),H=om(u,T),B=n.create({dkLen:32}).update(A).update(u).digest();return Mt(C,T,!H?U:B),H?U:B}}}function m7(e,t,r){return ri.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var fx={HASH256:qs,HASH512:EP,KDF:ri,XOF:PP,PRF:m7},Zve=dx({...fx,...ux[512]}),Bu=dx({...fx,...ux[768]}),NP=dx({...fx,...ux[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function h7(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ni(r.seed))=>{Ne(s,r.seed,"seed");let a=o.isLE?ko(s):_o(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function px(e,t=!1){let r=h7(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ni(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Mt(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function ju(e,t){return Zs(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function mx(e){return(t,r)=>e(t,{dkLen:r})}function g7(e,t,...r){let i=ju(r,"seed"),n=ju(r,"publicKey");if(e===void 0)e=i.bytesLen;Wt(e);function o(s){Ne(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ni(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Mt(a),Mt(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function cm(e,t,r,i,...n){let o=g7(e,r,...n),s=ju(n,"cipherText"),a=ju(n,"publicKey"),c=ju(n,"msg");if(t===void 0)t=c.bytesLen;return Wt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ni(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),y=m.map((k)=>k.cipherText),S={sharedSecret:i(f,y,b),cipherText:s.encode(y)};return Mt(b,y),S},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),b=n.map((y,S)=>y.decapsulate(f[S],m[S]));return i(p,f,b)}}}function DP(e,t,r,i,n){return mn(i),mn(n),cm(32,32,mx(i),(o,s,a)=>n(Bt(a[0],a[1],s[1],o[1],Eo(e))),t,r)}var Xve=DP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Bu,px(ix,!0),ri,qs),e0e=DP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",NP,px(mP,!0),ri,qs);function y7(e,t,r,i,n){return mn(i),mn(n),cm(32,32,mx(i),(o,s,a)=>{let c=Bt(a[0],a[1],s[0],o[0],s[1],o[1],Eo(e)),l=32,u=Bt(Eo("hybrid_prk"),c),f=gP(n,u),p=Bt(tc(32,2),Eo("shared_secret"),Eo("")),m=yP(n,f,p,32);return Mt(f,p,u,c),m},t,r)}var LP=px(pP),t0e=y7("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Bu,LP,ri,nm),b7=(()=>cm(32,32,mx(ri),(e,t,r)=>qs(Bt(r[0],r[1],t[1],e[1],Eo("\\.//^\\"))),Bu,LP))();function S7(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ni(i)){return Ne(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ni(i)){Ne(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Mt(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function x7(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=S7(r,n,o,i),a=64,c=a+i;return cm(32,32,(l)=>{Ne(l,32);let u=ri(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Bt(f,p)},(l,u,f)=>qs(Bt(f[0],f[1],u[1],l[1],Eo(e))),t,s)}var w7=(()=>x7("MLKEM768-P256",Bu,ix,128))();var lm=b7,BP=w7;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ut=(e,t,r)=>tr(e,t,r),gx=Rt,sc=Pp,or=(...e)=>SS(...e),ac=(e)=>gu(e),cc=gS,lc=(e)=>Ri(e),dm=BigInt(0),hx=BigInt(1);function ji(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function fm(e){if(typeof e==="bigint"){if(!um(e))throw RangeError("positive bigint expected, got "+e)}else gx(e);return e}function ii(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Uu(e){let t=fm(e).toString(16);return t.length&1?"0"+t:t}function jP(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?dm:BigInt("0x"+e)}function Hs(e){return jP(Pp(e))}function Rn(e){return jP(Pp(Co(tr(e)).reverse()))}function pm(e,t){if(Rt(t),t===0)throw RangeError("zero length");e=fm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return gu(r.padStart(t*2,"0"))}function qu(e,t){return pm(e,t).reverse()}function UP(e,t){if(e=ut(e),t=ut(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function Co(e){return Uint8Array.from(ut(e))}function mm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var um=(e)=>typeof e==="bigint"&&dm<=e;function v7(e,t,r){return um(e)&&um(t)&&um(r)&&t<=e&&e<r}function Ui(e,t,r,i){if(!v7(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function uc(e){if(e<dm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>dm;e>>=hx,t+=1);return t}var Zu=(e)=>(hx<<BigInt(e))-hx;function qP(e,t,r){if(Rt(e,"hashLen"),Rt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,or(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return or(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function gn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var yx=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sr=BigInt(0),It=BigInt(1),Ks=BigInt(2),HP=BigInt(3),KP=BigInt(4),JP=BigInt(5),_7=BigInt(7),VP=BigInt(8),k7=BigInt(9),WP=BigInt(16);function bt(e,t){if(t<=sr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=sr?r:t+r}function yn(e,t,r){if(t<sr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >sr)i*=i,i%=r;return i}function ZP(e,t){if(e===sr)throw Error("invert: expected non-zero number");if(t<=sr)throw Error("invert: expected positive modulus, got "+t);let r=bt(e,t),i=t,n=sr,o=It,s=It,a=sr;while(r!==sr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==It)throw Error("invert: does not exist");return bt(n,t)}function bx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function GP(e,t){let r=e,i=(r.ORDER+It)/KP,n=r.pow(t,i);return bx(r,n,t),n}function E7(e,t){let r=e,i=(r.ORDER-JP)/VP,n=r.mul(t,Ks),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Ks),o),c=r.mul(s,r.sub(a,r.ONE));return bx(r,c,t),c}function I7(e){let t=hm(e),r=QP(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+_7)/WP;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),b=l.eql(l.sqr(f),c),y=l.eql(l.sqr(p),c);u=l.cmov(u,f,b),f=l.cmov(m,p,y);let S=l.eql(l.sqr(f),c),k=l.cmov(u,f,S);return bx(l,k,c),k}}function QP(e){if(e<HP)throw Error("sqrt is not defined for small field");let t=e-It,r=0;while(t%Ks===sr)t/=Ks,r++;let i=Ks,n=hm(e);while(MP(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return GP;let o=n.pow(i,t),s=(t+It)/Ks;return function(c,l){let u=c;if(u.is0(l))return l;if(MP(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),b=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let y=1,S=u.sqr(m);while(!u.eql(S,u.ONE))if(y++,S=u.sqr(S),y===f)throw Error("Cannot find square root");let k=It<<BigInt(f-y-1),A=u.pow(p,k);f=y,p=u.sqr(A),m=u.mul(m,p),b=u.mul(b,A)}return b}}function T7(e){if(e%KP===HP)return GP;if(e%VP===JP)return E7;if(e%WP===k7)return I7(e);return QP(e)}var qi=(e,t)=>(bt(e,t)&It)===It,A7=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Sx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=A7.reduce((i,n)=>(i[n]="function",i),t);if(gn(e,r),ii(e.BYTES,"BYTES"),ii(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=It)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function $7(e,t,r){let i=e;if(r<sr)throw Error("invalid exponent, negatives unsupported");if(r===sr)return i.ONE;if(r===It)return t;let n=i.ONE,o=t;while(r>sr){if(r&It)n=i.mul(n,o);o=i.sqr(o),r>>=It}return n}function Mu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function MP(e,t){let r=e,i=(r.ORDER-It)/Ks,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function C7(e,t){if(t!==void 0)gx(t);if(e<=sr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=uc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var FP=new WeakMap;class xx{ORDER;BITS;BYTES;isLE;ZERO=sr;ONE=It;_lengths;_mod;constructor(e,t={}){if(e<=It)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=C7(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return bt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return sr<=e&&e<this.ORDER}is0(e){return e===sr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&It)===It}neg(e){return bt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return bt(e*e,this.ORDER)}add(e,t){return bt(e+t,this.ORDER)}sub(e,t){return bt(e-t,this.ORDER)}mul(e,t){return bt(e*t,this.ORDER)}pow(e,t){return $7(this,e,t)}div(e,t){return bt(e*ZP(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return ZP(e,this.ORDER)}sqrt(e){let t=FP.get(this);if(!t)FP.set(this,t=T7(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?qu(e,this.BYTES):pm(e,this.BYTES)}fromBytes(e,t=!1){ut(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Rn(e):Hs(e);if(s)a=bt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Mu(this,e)}cmov(e,t,r){return ji(r,"condition"),r?t:e}}Object.freeze(xx.prototype);function hm(e,t={}){return new xx(e,t)}function YP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=It)throw Error("field order must be greater than 1");let t=uc(e-It);return Math.ceil(t/8)}function wx(e){let t=YP(e);return t+Math.ceil(t/2)}function XP(e,t,r=!1){ut(e);let i=e.length,n=YP(t),o=Math.max(wx(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Rn(e):Hs(e),a=bt(s,t-It)+It;return r?qu(a,n):pm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var dc=BigInt(0),Js=BigInt(1);function Fu(e,t){let r=t.negate();return e?r:t}function Vs(e,t){let r=Mu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function nz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function vx(e,t){nz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Zu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function ez(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Js;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var _x=new WeakMap,iz=new WeakMap;function kx(e){return iz.get(e)||1}function tz(e){if(e!==dc)throw Error("invalid wNAF")}class Hu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>dc){if(t&Js)r=r.add(i);i=i.double(),t>>=Js}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=vx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=vx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=ez(r,s,o);if(r=a,l)n=n.add(Fu(f,t[p]));else i=i.add(Fu(u,t[c]))}return tz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=vx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===dc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=ez(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return tz(r),i}getPrecomputes(e,t,r){let i=_x.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);_x.set(t,i)}}return i}cached(e,t,r){let i=kx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=kx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){nz(t,this.bits),iz.set(e,t),_x.delete(e)}hasCache(e){return kx(e)!==1}}function oz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>dc||i>dc){if(r&Js)o=o.add(n);if(i&Js)s=s.add(n);n=n.double(),r>>=Js,i>>=Js}return{p1:o,p2:s}}function rz(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Sx(t),t}else return hm(e,{isLE:r})}function gm(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>dc))throw Error(`CURVE.${c} must be positive bigint`)}let n=rz(t.p,r.Fp,i),o=rz(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Ku(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Ju(e,t){if(ii(e),ii(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function R7(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function O7(e){if(!cc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?mm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Ex(e,t,r,i){if(ut(e),ii(r),t=O7(t),t.length>255)t=i(or(mm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=or(t,Ju(t.length,1)),c=new Uint8Array(o),l=Ju(r,2),u=Array(s),f=i(or(c,e,l,Ju(0,1),a));u[0]=i(or(f,Ju(1,1),a));for(let m=1;m<s;m++){let b=[R7(f,u[m-1]),Ju(m+1,1),a];u[m]=i(or(...b))}return or(...u).slice(0,r)}var sz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var az=(e,t)=>(e+(e>=0?t:-t)/lz)/t;function P7(e,t,r){Ui("scalar",e,oi,r);let[[i,n],[o,s]]=t,a=az(s*e,r),c=az(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<oi,p=u<oi;if(f)l=-l;if(p)u=-u;let m=Zu(Math.ceil(uc(r)/2))+Ro;if(l<oi||l>=m||u<oi||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function Tx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Ix(e,t){gn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(ji(r.lowS,"lowS"),ji(r.prehash,"prehash"),r.format!==void 0)Tx(r.format);return r}class cz extends Error{constructor(e=""){super(e)}}var On={Err:cz,_tlv:{encode:(e,t)=>{let{Err:r}=On;if(ii(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Uu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Uu(n.length/2|128):"";return Uu(e)+o+n+t},decode(e,t){let{Err:r}=On;t=ut(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=On;if(fm(e),e<oi)throw new t("integer: negative integers are not allowed");let r=Uu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=On;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Hs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=On,n=ut(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=On,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(On._tlv);Object.freeze(On._int);Object.freeze(On);var oi=BigInt(0),Ro=BigInt(1),lz=BigInt(2),ym=BigInt(3),z7=BigInt(4);function uz(e,t={}){let r=gm("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;gn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=fz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(K,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(ji(L,"isCompressed"),L){f();let J=!i.isOdd(z);return or(dz(J),P)}else return or(Uint8Array.of(4),P,i.toBytes(z))}function m(K){ut(K,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=u,I=K.length,z=K[0],P=K.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let J=i.fromBytes(P);if(!i.isValid(J))throw Error("bad point: is not on curve, wrong x");let j=S(J),Q;try{Q=i.sqrt(j)}catch(fe){let R=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+R)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:J,y:Q}}else if(I===L&&z===4){let J=i.BYTES,j=i.fromBytes(P.subarray(0,J)),Q=i.fromBytes(P.subarray(J,J*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,y=t.fromBytes===void 0?m:t.fromBytes;function S(K){let N=i.sqr(K),L=i.mul(N,K);return i.add(i.add(L,i.mul(K,o.a)),o.b)}function k(K,N){let L=i.sqr(N),I=S(K);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,ym),z7),C=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,C)))throw Error("bad curve params: a or b");function D(K,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${K}`);return N}function U(K){if(!(K instanceof B))throw Error("Weierstrass Point expected")}function T(K){if(!c||!c.basises)throw Error("no endo");return P7(K,c.basises,n.ORDER)}function H(K,N,L,I,z){return L=new B(i.mul(L.X,K),L.Y,L.Z),N=Fu(I,N),L=Fu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(K,N,L){this.X=D("x",K),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(K){let{x:N,y:L}=K||{};if(!K||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(K instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(K){let N=B.fromAffine(y(ut(K,void 0,"point")));return N.assertValidity(),N}static fromHex(K){return B.fromBytes(ac(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,N=!0){if(te.createCache(this,K),!N)this.multiply(ym);return this}assertValidity(){let K=this;if(K.is0()){if(t.allowInfinityPoint&&i.is0(K.X)&&i.eql(K.Y,i.ONE)&&i.is0(K.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=K.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:K}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(K)}equals(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.eql(i.mul(N,J),i.mul(z,I)),Q=i.eql(i.mul(L,J),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:K,b:N}=o,L=i.mul(N,ym),{X:I,Y:z,Z:P}=this,J=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),se=i.mul(z,z),fe=i.mul(P,P),R=i.mul(I,z);return R=i.add(R,R),Q=i.mul(I,P),Q=i.add(Q,Q),J=i.mul(K,Q),j=i.mul(L,fe),j=i.add(J,j),J=i.sub(se,j),j=i.add(se,j),j=i.mul(J,j),J=i.mul(R,J),Q=i.mul(L,Q),fe=i.mul(K,fe),R=i.sub(E,fe),R=i.mul(K,R),R=i.add(R,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,R),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,R),J=i.sub(J,E),Q=i.mul(fe,se),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(J,j,Q)}add(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.ZERO,Q=i.ZERO,E=i.ZERO,se=o.a,fe=i.mul(o.b,ym),R=i.mul(N,z),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.add(N,L),Oe=i.add(z,P);Pe=i.mul(Pe,Oe),Oe=i.add(R,xe),Pe=i.sub(Pe,Oe),Oe=i.add(N,I);let _e=i.add(z,J);return Oe=i.mul(Oe,_e),_e=i.add(R,Te),Oe=i.sub(Oe,_e),_e=i.add(L,I),j=i.add(P,J),_e=i.mul(_e,j),j=i.add(xe,Te),_e=i.sub(_e,j),E=i.mul(se,Oe),j=i.mul(fe,Te),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(R,R),xe=i.add(xe,R),Te=i.mul(se,Te),Oe=i.mul(fe,Oe),xe=i.add(xe,Te),Te=i.sub(R,Te),Te=i.mul(se,Te),Oe=i.add(Oe,Te),R=i.mul(xe,Oe),Q=i.add(Q,R),R=i.mul(_e,Oe),j=i.mul(Pe,j),j=i.sub(j,R),R=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,R),new B(j,Q,E)}subtract(K){return U(K),this.add(K.negate())}is0(){return this.equals(B.ZERO)}multiply(K){let{endo:N}=t;if(!n.isValidNot0(K))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(J)=>Vs(B,J));if(N){let{k1neg:P,k1:J,k2neg:j,k2:Q}=T(K),{p:E,f:se}=z(J),{p:fe,f:R}=z(Q);I=se.add(R),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:J}=z(K);L=P,I=J}return Vs(B,[L,I])[0]}multiplyUnsafe(K){let{endo:N}=t,L=this,I=K;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===oi||L.is0())return B.ZERO;if(I===Ro)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:J,k2:j}=T(I),{p1:Q,p2:E}=oz(B,L,P,j);return H(N.beta,Q,E,z,J)}else return te.unsafe(L,I)}toAffine(K){let N=this,L=K,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:K}=t;if(s===Ro)return!0;if(K)return K(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:K}=t;if(s===Ro)return this;if(K)return K(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Ro)return this.is0();return this.clearCofactor().is0()}toBytes(K=!0){return ji(K,"isCompressed"),this.assertValidity(),b(B,this,K)}toHex(K=!0){return sc(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Hu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function dz(e){return Uint8Array.of(e?2:3)}function fz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function N7(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?lc:t.randomBytes,n=Object.assign(fz(e.Fp,r),{seed:Math.max(wx(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:y,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==y)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,XP(ut(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:y,publicKeyUncompressed:S}=n,k=r._lengths;if(!cc(m))return;let A=ut(m,void 0,"key").length,C=A===y||A===S,D=A===b||!!k?.includes(A);if(C&&D)return;return C}function u(m,b,y=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(y)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Ku(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function pz(e,t,r={}){let i=t;Ci(i),gn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?lc:r.randomBytes,o=r.hmac===void 0?(z,P)=>Yn(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=N7(e,r),y={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*lz+Ro<s.ORDER;function k(z){let P=c>>Ro;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function C(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){Tx(P);let J=b.signature,j=P==="compact"?J:P==="recovered"?J+1:void 0;return ut(z,j)}class U{r;s;recovery;constructor(z,P,J){if(this.r=A("r",z),this.s=A("s",P),J!=null){if(C(),![0,1,2,3].includes(J))throw Error("invalid recovery id");this.recovery=J}Object.freeze(this)}static fromBytes(z,P=y.format){D(z,P);let J;if(P==="der"){let{r:se,s:fe}=On.toSig(ut(z));return new U(se,fe)}if(P==="recovered")J=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),J)}static fromHex(z,P){return this.fromBytes(ac(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:J}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),se=e.fromBytes(or(dz((j&1)===0),E)),fe=a.inv(Q),R=H(ut(z,void 0,"msgHash")),xe=a.create(-R*fe),Te=a.create(J*fe),Pe=e.BASE.multiplyUnsafe(xe).add(se.multiplyUnsafe(Te));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=y.format){if(Tx(z),z==="der")return ac(On.hexFromSig(this));let{r:P,s:J}=this,j=a.toBytes(P),Q=a.toBytes(J);if(z==="recovered")return C(),or(Uint8Array.of(this.assertRecovery()),j,Q);return or(j,Q)}toHex(z){return sc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let J=Hs(P),j=P.length*8-l;return j>0?J>>BigInt(j):J}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Zu(l);function V(z){return Ui("num < 2^"+l,z,oi,B),a.toBytes(z)}function te(z,P){return ut(z,void 0,"message"),P?ut(i(z),void 0,"prehashed message"):z}function K(z,P,J){let{lowS:j,prehash:Q,extraEntropy:E}=Ix(J,y);z=te(z,Q);let se=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let R=[V(fe),V(se)];if(E!=null&&E!==!1){let Oe=E===!0?n(b.secretKey):E;R.push(ut(Oe,void 0,"extraEntropy"))}let xe=or(...R),Te=se;function Pe(Oe){let _e=T(Oe);if(!a.isValidNot0(_e))return;let Ve=a.inv(_e),De=e.BASE.multiply(_e).toAffine(),Qe=a.create(De.x);if(Qe===oi)return;let lt=a.create(Ve*a.create(Te+Qe*fe));if(lt===oi)return;let vt=(De.x===Qe?0:2)|Number(De.y&Ro),Lt=lt;if(j&&k(lt))Lt=a.neg(lt),vt^=1;return new U(Qe,Lt,S?void 0:vt)}return{seed:xe,k2sig:Pe}}function N(z,P,J={}){let{seed:j,k2sig:Q}=K(z,P,J);return qP(i.outputLen,a.BYTES,o)(j,Q).toBytes(J.format)}function L(z,P,J,j={}){let{lowS:Q,prehash:E,format:se}=Ix(j,y);if(J=ut(J,void 0,"publicKey"),P=te(P,E),!cc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,se);try{let fe=U.fromBytes(z,se),R=e.fromBytes(J);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Te}=fe,Pe=H(P),Oe=a.inv(Te),_e=a.create(Pe*Oe),Ve=a.create(xe*Oe),De=e.BASE.multiplyUnsafe(_e).add(R.multiplyUnsafe(Ve));if(De.is0())return!1;return a.create(De.x)===xe}catch(fe){return!1}}function I(z,P,J={}){let{prehash:j}=Ix(J,y);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D7=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var L7=uz(D7),fc=pz(L7,Ot);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Oo=BigInt(0),Zr=BigInt(1),Ax=BigInt(2),B7=BigInt(8);function j7(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function mz(e,t={}){let r=t,i=gm("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;gn(r,{},{uvRatio:"function"});let c=Ax<<BigInt(o.BYTES*8)-Zr,l=(y)=>n.create(y),u=r.uvRatio===void 0?(y,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(y,S))}}catch(k){return{isValid:!1,value:Oo}}}:r.uvRatio;if(!j7(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(y,S,k=!1){let A=k?Zr:Oo;return Ui("coordinate "+y,S,A,c),S}function p(y){if(!(y instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Zr,l(s.Gx*s.Gy));static ZERO=new m(Oo,Zr,Zr,Oo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(y,S,k,A){this.X=f("x",y),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(y){if(y instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=y||{};return f("x",S),f("y",k),new m(S,k,Zr,l(S*k))}static fromBytes(y,S=!1){let k=n.BYTES,{a:A,d:C}=s;y=Co(ut(y,k,"point")),ji(S,"zip215");let D=Co(y),U=y[k-1];D[k-1]=U&-129;let T=Rn(D),H=S?c:n.ORDER;Ui("point.y",T,Oo,H);let B=l(T*T),V=l(B-Zr),te=l(C*B-A),{isValid:K,value:N}=u(V,te);if(!K)throw Error("bad point: invalid y coordinate");let L=(N&Zr)===Zr,I=(U&128)!==0;if(!S&&N===Oo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(y,S=!1){return m.fromBytes(ac(y),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(y=8,S=!0){if(b.createCache(this,y),!S)this.multiply(Ax);return this}assertValidity(){let y=this,{a:S,d:k}=s;if(y.is0())throw Error("bad point: ZERO");let{X:A,Y:C,Z:D,T:U}=y,T=l(A*A),H=l(C*C),B=l(D*D),V=l(B*B),te=l(T*S),K=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(K!==N)throw Error("bad point: equation left != right (1)");let L=l(A*C),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(y){p(y);let{X:S,Y:k,Z:A}=this,{X:C,Y:D,Z:U}=y,T=l(S*U),H=l(C*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:y}=s,{X:S,Y:k,Z:A}=this,C=l(S*S),D=l(k*k),U=l(Ax*l(A*A)),T=l(y*C),H=S+k,B=l(l(H*H)-C-D),V=T+D,te=V-U,K=T-D,N=l(B*te),L=l(V*K),I=l(B*K),z=l(te*V);return new m(N,L,z,I)}add(y){p(y);let{a:S,d:k}=s,{X:A,Y:C,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=y,te=l(A*T),K=l(C*H),N=l(U*k*V),L=l(D*B),I=l((A+C)*(T+H)-te-K),z=L-N,P=L+N,J=l(K-S*te),j=l(I*z),Q=l(P*J),E=l(I*J),se=l(z*P);return new m(j,Q,se,E)}subtract(y){return p(y),this.add(y.negate())}multiply(y){if(!o.isValidNot0(y))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,y,(A)=>Vs(m,A));return Vs(m,[S,k])[0]}multiplyUnsafe(y){if(!o.isValid(y))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(y===Oo)return m.ZERO;if(this.is0()||y===Zr)return this;return b.unsafe(this,y,(S)=>Vs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(y){let S=this,k=y,{X:A,Y:C,Z:D}=S,U=S.is0();if(k==null)k=U?B7:n.inv(D);let T=l(A*k),H=l(C*k),B=n.mul(D,k);if(U)return{x:Oo,y:Zr};if(B!==Zr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Zr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:y,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=y&Zr?128:0,k}toHex(){return sc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Hu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class $x{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){yx()}static fromHex(e){yx()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return sc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Vu=BigInt(0),pc=BigInt(1),bm=BigInt(2);function U7(e){return gn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function hz(e){let t=U7(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?lc:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?bm**BigInt(254):bm**BigInt(447),b=a?BigInt(8)*bm**BigInt(251)-pc:BigInt(4)*bm**BigInt(445)-pc,y=m+b+pc,S=(I)=>bt(I,r),k=A(f);function A(I){return qu(S(I),u)}function C(I){let z=Co(ut(I,u,"uCoordinate"));if(a)z[31]&=127;return S(Rn(z))}function D(I){return Rn(n(Co(ut(I,u,"scalar"))))}function U(I,z){let P=te(C(z),D(I));if(P===Vu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){Ui("u",I,Vu,r),Ui("scalar",z,m,y);let P=z,J=I,j=pc,Q=Vu,E=I,se=pc,fe=Vu;for(let xe=BigInt(l-1);xe>=Vu;xe--){let Te=P>>xe&pc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:se}=V(fe,Q,se),fe=Te;let Pe=j+Q,Oe=S(Pe*Pe),_e=j-Q,Ve=S(_e*_e),De=Oe-Ve,Qe=E+se,lt=E-se,vt=S(lt*Pe),Lt=S(Qe*_e),mt=vt+Lt,mr=vt-Lt;E=S(mt*mt),se=S(J*S(mr*mr)),j=S(Oe*Ve),Q=S(De*(Oe+S(p*De)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:se}=V(fe,Q,se);let R=o(Q);return S(j*R)}let K={secretKey:u,publicKey:u,seed:u},N=(I)=>(I=I===void 0?c(u):I,ut(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(K),Object.freeze(L),Object.freeze({keygen:Ku(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var q7=BigInt(0),Zi=BigInt(1),gz=BigInt(2),Z7=BigInt(3),M7=BigInt(5),F7=BigInt(8),Gs=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Px=(()=>({p:Gs,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:F7,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Sz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=Gs,a=e*e%o*e%o,c=yn(a,gz,o)*a%o,l=yn(c,Zi,o)*e%o,u=yn(l,M7,o)*l%o,f=yn(u,t,o)*u%o,p=yn(f,r,o)*f%o,m=yn(p,i,o)*p%o,b=yn(m,n,o)*m%o,y=yn(b,n,o)*m%o,S=yn(y,t,o)*u%o;return{pow_p_5_8:yn(S,gz,o)*e%o,b2:a}}function H7(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Cx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function zx(e,t){let r=Gs,i=bt(t*t*t,r),n=bt(i*i*t,r),o=Sz(e*n).pow_p_5_8,s=bt(e*i*o,r),a=bt(t*s*s,r),c=s,l=bt(s*Cx,r),u=a===e,f=a===bt(-e,r),p=a===bt(-e*Cx,r);if(u)s=c;if(f||p)s=l;if(qi(s,r))s=bt(-s,r);return{isValid:u||f,value:s}}var Ws=mz(Px,{uvRatio:zx}),Po=(()=>Ws.Fp)(),xz=(()=>Ws.Fn)();var Sm=(()=>{let e=Gs;return hz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Sz(t);return bt(yn(r,Z7,e)*i,e)},adjustScalarBytes:H7})})();var Rx=Cx,K7=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),J7=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),V7=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),W7=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),yz=(e)=>zx(Zi,e),G7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Ox=(e)=>Po.create(Rn(e)&G7);function bz(e){let{d:t}=Px,r=Gs,i=(k)=>Po.create(k),n=i(Rx*e*e),o=i((n+Zi)*V7),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=zx(o,a),u=i(l*e);if(!qi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Zi)*W7-a),p=l*l,m=i((l+l)*a),b=i(f*K7),y=i(Zi-p),S=i(Zi+p);return new Ws(i(m*S),i(y*b),i(b*S),i(m*y))}class Cr extends $x{static BASE=(()=>new Cr(Ws.BASE))();static ZERO=(()=>new Cr(Ws.ZERO))();static Fp=(()=>Po)();static Fn=(()=>xz)();constructor(e){super(e)}static fromAffine(e){return new Cr(Ws.fromAffine(e))}assertSame(e){if(!(e instanceof Cr))throw Error("RistrettoPoint expected")}init(e){return new Cr(e)}static fromBytes(e){tr(e,32);let{a:t,d:r}=Px,i=Gs,n=(C)=>Po.create(C),o=Ox(e);if(!UP(Po.toBytes(o),e)||qi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Zi+t*s),c=n(Zi-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=yz(n(f*u)),b=n(m*c),y=n(m*b*f),S=n((o+o)*b);if(qi(S,i))S=n(-S);let k=n(a*y),A=n(S*k);if(!p||qi(A,i)||k===q7)throw Error("invalid ristretto255 encoding 2");return new Cr(new Ws(S,k,Zi,A))}static fromHex(e){return Cr.fromBytes(gu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=Gs,o=(y)=>Po.create(y),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=yz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(qi(i*p,n)){let y=o(t*Rx),S=o(e*Rx);e=y,t=S,m=o(u*J7)}else m=f;if(qi(e*p,n))t=o(-t);let b=o((r-t)*m);if(qi(b,n))b=o(-b);return Po.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>Po.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Cr.ZERO)}}Object.freeze(Cr.BASE);Object.freeze(Cr.ZERO);Object.freeze(Cr.prototype);Object.freeze(Cr);var Q7=Object.freeze({Point:Cr,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Ex(e,r,64,Lp);return Q7.deriveToCurve(i)},hashToScalar(e,t={DST:sz}){let r=Ex(e,t.DST,64,Lp);return xz.create(Rn(r))},deriveToCurve(e){tr(e,64);let t=Ox(e.subarray(0,32)),r=bz(t),i=Ox(e.subarray(32,64)),n=bz(i);return new Cr(r.add(n))}});var wz=!1,Y7=!1;async function vz(e,t){if(Y7)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function xm(e,t){return await vz(async()=>{let r=Nx(e)?e:await eW(e),i=await crypto.subtle.importKey("raw",tW(t),{name:"X25519"},wz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Nx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Sm.scalarMult(e,t)})}async function Wu(e){return await vz(async()=>xm(e,Sm.GuBytes),()=>{if(Nx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Sm.scalarMultBase(e)})}var X7=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function eW(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...X7,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},wz,["deriveBits"])}function Nx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function tW(e){return e}class Dx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),nW(Qs(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=Qs(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:Qs(this.transcript)}}}function nW(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function Qs(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function mc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function wm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Lx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function _z(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function kz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=Qs(i),s=o.subarray(0,t),a=mc(e,o.subarray(t));return{data:s,rest:a}}class si{args;body;constructor(e,t){this.args=e,this.body=t}}async function iW(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=gr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=Qs(i);return{s:new si(r,n)}}async function Ez(e){let t=new Dx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await iW(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=gr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:mc(e,a)}}}function Bx(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let r of e){t.push("-> "+r.args.join(" ")+`
 `);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(gr.encode(r.body.subarray(i,n))+`
 `)}if(r.body.length%48===0)t.push(`

package/dist/index.js

@@ -743,7 +743,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),o}async function o9(e,t){let r=await _t(e),i=r.users.find((n)=>n.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:r.pilot,user:i}}async function s9(e){let t=await Cxe(Ti($xe(),"brains-ops-watchdog-smoke-")),r=Ti(t,"id_ed25519"),i=Ti(t,"known_hosts");try{let n=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${n}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=Rxe.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await gu(r,zxe(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await Axe(r,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await gu(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:r,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(n){throw await zR(t,{recursive:!0,force:!0}),n}}async function PR(e,t,r){return e.commandRunner("ssh",[...a9(e),`root@${e.serverIp}`,"bash","-s","--",t,r],{stdin:NR()})}async function Oxe(e,t,r){return e.commandRunner("scp",[...a9(e),"-r",`root@${e.serverIp}:${t}/.`,r])}function a9(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function Pxe(e){try{return await Txe(e),!0}catch{return!1}}async function yS(e,t,r){await Promise.all([gu(Ti(e,`${t}.stdout.log`),r.stdout),gu(Ti(e,`${t}.stderr.log`),r.stderr)])}function zxe(e){return`${e.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var r9,Rxe;var SS=x(async()=>{Re();YJ();mn();Cp();await QJ();r9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),Rxe=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{access as XN,chmod as dE,mkdir as vh,readFile as t2,writeFile as e2}from"fs/promises";import{dirname as qG,join as Oc}from"path";import{fileURLToPath as ZG}from"url";var zp={name:"@rizom/ops",version:"0.2.0-alpha.618",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/auth-service":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Os();Rc();var MG=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],fE=new Set([".kamal/hooks/pre-deploy"]),FG=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),HG=ZG(new URL("../templates/rover-pilot/",import.meta.url)),KG=[`service: rover
+`}var r9,Rxe;var SS=x(async()=>{Re();YJ();mn();Cp();await QJ();r9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),Rxe=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{access as XN,chmod as dE,mkdir as vh,readFile as t2,writeFile as e2}from"fs/promises";import{dirname as qG,join as Oc}from"path";import{fileURLToPath as ZG}from"url";var zp={name:"@rizom/ops",version:"0.2.0-alpha.619",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/auth-service":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Os();Rc();var MG=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],fE=new Set([".kamal/hooks/pre-deploy"]),FG=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),HG=ZG(new URL("../templates/rover-pilot/",import.meta.url)),KG=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 
 servers:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.618",
+  "version": "0.2.0-alpha.619",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",