npm - @rizom/ops - Versions diffs - 0.2.0-alpha.62 → 0.2.0-alpha.64 - Mend

@rizom/ops 0.2.0-alpha.62 → 0.2.0-alpha.64

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.js CHANGED Viewed

@@ -53,7 +53,7 @@ return `+str.trim()+`;
 `).join(`
 `+Y),$.push(Q+"m+"+hY.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=uB()+q+" "+$[0]}function uB(){if(vz.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function pB(...$){return process.stderr.write(xY.formatWithOptions(vz.inspectOpts,...$)+`
 `)}function lB($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function rB(){return process.env.DEBUG}function dB($){$.inspectOpts={};let q=Object.keys(vz.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=vz.inspectOpts[q[J]]}hY.exports=tX()(vz);var{formatters:_z}=hY.exports;_z.o=function($){return this.inspectOpts.colors=this.useColors,xY.inspect($,this.inspectOpts).split(`
-`).map((q)=>q.trim()).join(" ")};_z.O=function($){return this.inspectOpts.colors=this.useColors,xY.inspect($,this.inspectOpts)}});var fz=X$((Oy,qU)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)qU.exports=Iz();else qU.exports=yz()});var bR=X$((lm,vR)=>{var aY=Object.prototype.hasOwnProperty,_R=Object.prototype.toString,IR=Object.defineProperty,CR=Object.getOwnPropertyDescriptor,PR=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return _R.call(q)==="[object Array]"},LR=function(q){if(!q||_R.call(q)!=="[object Object]")return!1;var J=aY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&aY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||aY.call(q,Q)},FR=function(q,J){if(IR&&J.name==="__proto__")IR(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},gR=function(q,J){if(J==="__proto__"){if(!aY.call(q,J))return;else if(CR)return CR(q,J).value}return q[J]};vR.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],W=1,V=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=gR(U,J),Q=gR(q,J),U!==Q){if(M&&Q&&(LR(Q)||(Y=PR(Q)))){if(Y)Y=!1,X=G&&PR(G)?G:[];else X=G&&LR(G)?G:{};FR(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")FR(U,{name:J,newValue:Q})}}return U}});import{access as uE,chmod as eU,mkdir as pK,readFile as rK,writeFile as lK}from"fs/promises";import{dirname as pE,join as q7}from"path";import{fileURLToPath as lE}from"url";var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.62",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000","test:smoke":"RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var G5=`ARG BUN_VERSION=1.3.10
+`).map((q)=>q.trim()).join(" ")};_z.O=function($){return this.inspectOpts.colors=this.useColors,xY.inspect($,this.inspectOpts)}});var fz=X$((Oy,qU)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)qU.exports=Iz();else qU.exports=yz()});var bR=X$((lm,vR)=>{var aY=Object.prototype.hasOwnProperty,_R=Object.prototype.toString,IR=Object.defineProperty,CR=Object.getOwnPropertyDescriptor,PR=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return _R.call(q)==="[object Array]"},LR=function(q){if(!q||_R.call(q)!=="[object Object]")return!1;var J=aY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&aY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||aY.call(q,Q)},FR=function(q,J){if(IR&&J.name==="__proto__")IR(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},gR=function(q,J){if(J==="__proto__"){if(!aY.call(q,J))return;else if(CR)return CR(q,J).value}return q[J]};vR.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],W=1,V=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=gR(U,J),Q=gR(q,J),U!==Q){if(M&&Q&&(LR(Q)||(Y=PR(Q)))){if(Y)Y=!1,X=G&&PR(G)?G:[];else X=G&&LR(G)?G:{};FR(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")FR(U,{name:J,newValue:Q})}}return U}});import{access as uE,chmod as eU,mkdir as pK,readFile as rK,writeFile as lK}from"fs/promises";import{dirname as pE,join as q7}from"path";import{fileURLToPath as lE}from"url";var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.64",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000","test:smoke":"RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var G5=`ARG BUN_VERSION=1.3.10
 FROM oven/bun:\${BUN_VERSION}-slim AS runtime
 WORKDIR /app
@@ -310,7 +310,7 @@ ${J}
 `)}async function VG($,q,J,G,Q={}){let Y=new Set,X=oK(q.pilot.githubOrg);for(let W of J){let V={};if(G){let N=await G(W);if(N!==void 0)V=N}let M=await X(W),z=V.brainYaml??M.brainYaml,K=V.envFile??M.envFile,R=V.contentRepoFiles??M.contentRepoFiles??[];if(K)await G7($,W.handle,".env",K);if(z)await G7($,W.handle,"brain.yaml",z),Y.add(W.handle);await nK($,q.pilot.githubOrg,W,R,{contentRepoAdminTokenSelector:q.pilot.contentRepoAdminToken,...Q});for(let N of R)await G7($,W.handle,aK("content",N.path),N.content)}let U=Y.size===0?q:{...q,users:q.users.map((W)=>Y.has(W.handle)?{...W,snapshotStatus:"present"}:W)};await J8($,{registry:U})}async function G7($,q,J,G){let Q=aK($,"users",q,J);await jI(ZI(Q),{recursive:!0}),await AI(Q,G)}async function V9($,q){let J=await Cq($),G=J.users.find((Q)=>Q.handle===q);if(!G)throw Error(`Unknown user handle: ${q}`);return{registry:J,user:G}}async function sK($,q){let J=await Cq($),G=J.cohorts.find((Q)=>Q.id===q);if(!G)throw Error(`Unknown cohort: ${q}`);return{registry:J,users:J.users.filter((Q)=>Q.cohort===G.id)}}async function tK($){let q=await Cq($);return{registry:q,users:q.users}}async function Q7($,q,J,G={}){let{registry:Q,user:Y}=await V9($,q);await VG($,Q,[Y],J,G)}import{access as BI,mkdir as eK,readFile as SI,writeFile as qD}from"fs/promises";import{basename as TI,join as MG}from"path";async function Y7($,q,J){let G=wQ.parse(q),Q=wQ.parse(J.cohort),Y=MG($,"users"),X=MG($,"cohorts"),U=MG(Y,`${G}.yaml`),W=MG(Y,`${G}.secrets.yaml`),V=MG(Y,`${G}.secrets.yaml.age`),M=MG(X,`${Q}.yaml`);await Promise.all([eK(Y,{recursive:!0}),eK(X,{recursive:!0})]);let z=await $D(U,CI(G,J.anchorId)),R=await FI(V)?!1:await $D(W,PI(G)),{addedToCohort:N}=await EI(M,G);return{handle:G,cohort:Q,userPath:U,secretsTemplatePath:W,cohortPath:M,createdUser:z,createdSecretsTemplate:R,addedToCohort:N}}async function EI($,q){let J=await II($);if(J.members.includes(q))return{addedToCohort:!1};let G={...J,members:[...J.members,q].sort()};return await qD($,LI(G)),{addedToCohort:!0}}async function II($){try{let q=await SI($,"utf8"),J=NQ(q,W9);if(!J.ok)throw Error(`${TI($)}: ${J.error}`);return J.data}catch(q){if(_I(q))return{members:[]};throw q}}function CI($,q){return[`handle: ${$}`,"anchorProfile:",`  name: ${vI($)}`,"discord:","  enabled: true",...q?[`  anchorUserId: ${JSON.stringify(q)}`]:[],""].join(`
 `)}function PI($){return["# local per-user secret staging file",`# fill values, run \`bunx brains-ops secrets:encrypt . ${$}\`, then the plaintext file will be removed`,"discordBotToken: ",""].join(`
 `)}function LI($){return["members:",...$.members.map((q)=>`  - ${q}`),...$.brainVersionOverride?[`brainVersionOverride: ${$.brainVersionOverride}`]:[],...$.presetOverride?[`presetOverride: ${$.presetOverride}`]:[],...$.aiApiKeyOverride?[`aiApiKeyOverride: ${$.aiApiKeyOverride}`]:[],...$.gitSyncTokenOverride?[`gitSyncTokenOverride: ${$.gitSyncTokenOverride}`]:[],...$.mcpAuthTokenOverride?[`mcpAuthTokenOverride: ${$.mcpAuthTokenOverride}`]:[],""].join(`
-`)}async function $D($,q){try{return await qD($,q,{flag:"wx"}),!0}catch(J){if(gI(J))return!1;throw J}}async function FI($){try{return await BI($),!0}catch{return!1}}function gI($){return JD($,"EEXIST")}function _I($){return JD($,"ENOENT")}function JD($,q){return typeof $==="object"&&$!==null&&"code"in $&&$.code===q}function vI($){return $.split("-").filter((q)=>q.length>0).map((q)=>`${q[0]?.toUpperCase()??""}${q.slice(1)}`).join(" ")}async function X7($,q,J,G={}){let{registry:Q,users:Y}=await sK($,q);await VG($,Q,Y,J,G)}async function U7($,q,J={}){let{registry:G,users:Q}=await tK($);await VG($,G,Q,q,J)}import{parseArgs as bI}from"util";var yI={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function W7($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function V7($,q){let J=$[q];return typeof J==="string"?J:void 0}function fI($){let{values:q,positionals:J}=bI({args:$,options:yI,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:W7(q,"help"),version:W7(q,"version"),dryRun:W7(q,"dry-run"),pushTo:V7(q,"push-to"),cohort:V7(q,"cohort"),anchorId:V7(q,"anchor-id")}}}import{existsSync as HL,mkdirSync as NL,readFileSync as iW,writeFileSync as cW}from"fs";import{dirname as wL,join as QH}from"path";function M7($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function F$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function r$($,q,J=""){let G=M7($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Lq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(F$($.outputLen),F$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function zG($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function M9($,q){r$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function z9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function H0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function RG($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function o0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var kI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function mI($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function xI($){for(let q=0;q<$.length;q++)$[q]=mI($[q]);return $}var z7=kI?($)=>$:xI,QD=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),hI=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function R9($){if(r$($),QD)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=hI[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function GD($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function AQ($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(QD)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=GD($.charCodeAt(Y)),U=GD($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function uI($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function R7($,q=""){if(typeof $==="string")return uI($);return r$($,void 0,q)}function K7(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];r$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function K9($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function D7($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Fq($=32){F$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var O7=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class H7{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Lq($),r$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),H0(G)}update($){return zG(this),this.iHash.update($),this}digestInto($){zG(this),M9($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var gq=(()=>{let $=(q,J,G)=>new H7(q,J).update(G).digest();return $.create=(q,J)=>new H7(q,J),$})();function ZQ($,q,J){if(Lq($),J===void 0)J=new Uint8Array($.outputLen);return gq($,J,q)}var N7=Uint8Array.of(0),YD=Uint8Array.of();function w7($,q,J,G=32){Lq($),F$(G,"length"),r$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=YD;else r$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=gq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)N7[0]=M+1,W.update(M===0?YD:V).update(J).update(N7).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),H0(V,N7),X.slice(0,G)}var BQ=($,q,J,G,Q)=>w7($,ZQ($,q,J),G,Q);function XD($,q,J){return $&q^~$&J}function UD($,q,J){return $&q^$&J^q&J}class D9{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=RG(this.buffer)}update($){zG(this),r$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=RG($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){zG(this),M9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,H0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=RG($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var _q=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),vq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),d$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var O9=BigInt(4294967295),WD=BigInt(32);function pI($,q=!1){if(q)return{h:Number($&O9),l:Number($>>WD&O9)};return{h:Number($>>WD&O9)|0,l:Number($&O9)|0}}function VD($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=pI($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var j7=($,q,J)=>$>>>J,A7=($,q,J)=>$<<32-J|q>>>J,G8=($,q,J)=>$>>>J|q<<32-J,Q8=($,q,J)=>$<<32-J|q>>>J,SQ=($,q,J)=>$<<64-J|q>>>J-32,TQ=($,q,J)=>$>>>J-32|q<<64-J;function zq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var MD=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),zD=($,q,J,G)=>q+J+G+($/4294967296|0)|0,RD=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),KD=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,DD=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),OD=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var rI=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),MJ=new Uint32Array(64);class Z7 extends D9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)MJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=MJ[M-15],K=MJ[M-2],R=o0(z,7)^o0(z,18)^z>>>3,N=o0(K,17)^o0(K,19)^K>>>10;MJ[M]=N+MJ[M-7]+R+MJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=o0(X,6)^o0(X,11)^o0(X,25),K=V+z+XD(X,U,W)+rI[M]+MJ[M]|0,N=(o0(J,2)^o0(J,13)^o0(J,22))+UD(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){H0(MJ)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),H0(this.buffer)}}class HD extends Z7{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(32)}}class dI extends Z7{A=vq[0]|0;B=vq[1]|0;C=vq[2]|0;D=vq[3]|0;E=vq[4]|0;F=vq[5]|0;G=vq[6]|0;H=vq[7]|0;constructor(){super(28)}}var ND=(()=>VD(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),iI=(()=>ND[0])(),cI=(()=>ND[1])(),zJ=new Uint32Array(80),RJ=new Uint32Array(80);class EQ extends D9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)zJ[T]=$.getUint32(q),RJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=zJ[T-15]|0,k=RJ[T-15]|0,u=G8(_,k,1)^G8(_,k,8)^j7(_,k,7),F=Q8(_,k,1)^Q8(_,k,8)^A7(_,k,7),x=zJ[T-2]|0,f=RJ[T-2]|0,y=G8(x,f,19)^SQ(x,f,61)^j7(x,f,6),l=Q8(x,f,19)^TQ(x,f,61)^A7(x,f,6),v=RD(F,l,RJ[T-7],RJ[T-16]),I=KD(v,u,y,zJ[T-7],zJ[T-16]);zJ[T]=I|0,RJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=G8(M,z,14)^G8(M,z,18)^SQ(M,z,41),k=Q8(M,z,14)^Q8(M,z,18)^TQ(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=DD(A,k,F,cI[T],RJ[T]),f=OD(x,j,_,u,iI[T],zJ[T]),y=x|0,l=G8(J,G,28)^SQ(J,G,34)^SQ(J,G,39),v=Q8(J,G,28)^TQ(J,G,34)^TQ(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=zq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=MD(y,v,E);J=zD(Z,f,l,I),G=Z|0}({h:J,l:G}=zq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=zq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=zq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=zq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=zq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=zq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=zq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=zq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){H0(zJ,RJ)}destroy(){this.destroyed=!0,H0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class wD extends EQ{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class nI extends EQ{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(48)}}var X0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),U0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class oI extends EQ{Ah=X0[0]|0;Al=X0[1]|0;Bh=X0[2]|0;Bl=X0[3]|0;Ch=X0[4]|0;Cl=X0[5]|0;Dh=X0[6]|0;Dl=X0[7]|0;Eh=X0[8]|0;El=X0[9]|0;Fh=X0[10]|0;Fl=X0[11]|0;Gh=X0[12]|0;Gl=X0[13]|0;Hh=X0[14]|0;Hl=X0[15]|0;constructor(){super(28)}}class aI extends EQ{Ah=U0[0]|0;Al=U0[1]|0;Bh=U0[2]|0;Bl=U0[3]|0;Ch=U0[4]|0;Cl=U0[5]|0;Dh=U0[6]|0;Dl=U0[7]|0;Eh=U0[8]|0;El=U0[9]|0;Fh=U0[10]|0;Fl=U0[11]|0;Gh=U0[12]|0;Gl=U0[13]|0;Hh=U0[14]|0;Hl=U0[15]|0;constructor(){super(32)}}var c$=D7(()=>new HD,O7(1));var H9=D7(()=>new wD,O7(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Z9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function T7($){if(!Z9($))throw Error("Uint8Array expected")}function SD($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function TD($){if(typeof $!=="function")throw Error("function expected");return!0}function KJ($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function CQ($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function w9($){if(!Array.isArray($))throw Error("array expected")}function j9($,q){if(!SD(!0,q))throw Error(`${$}: array of strings expected`)}function E7($,q){if(!SD(!1,q))throw Error(`${$}: array of numbers expected`)}function g0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function _0($){let q=typeof $==="string"?$.split(""):$,J=q.length;j9("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return w9(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return w9(Q),Q.map((Y)=>{KJ("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function v0($=""){return KJ("join",$),{encode:(q)=>{return j9("join.decode",q),q.join($)},decode:(q)=>{return KJ("join.decode",q),q.split($)}}}function B9($,q="="){return CQ($),KJ("padding",q),{encode(J){j9("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){j9("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function ED($){return TD($),{encode:(q)=>q,decode:(q)=>$(q)}}function jD($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(w9($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(CQ(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,W=!0;for(let V=G;V<X;V++){let M=Y[V],z=q*U,K=z+M;if(!Number.isSafeInteger(K)||z/q!==U||K-M!==z)throw Error("convertRadix: carry overflow");let R=K/J;U=K%J;let N=Math.floor(R);if(Y[V]=N,!Number.isSafeInteger(N)||N*J+U!==K)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var ID=($,q)=>q===0?$:ID(q,$%q),A9=($,q)=>$+(q-ID($,q)),N9=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function B7($,q,J,G){if(w9($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(A9(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${A9(q,J)}`);let Q=0,Y=0,X=N9[q],U=N9[J]-1,W=[];for(let V of $){if(CQ(V),V>=X)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)W.push((Q>>Y-J&U)>>>0);let M=N9[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)W.push(Q>>>0);return W}function sI($){CQ($);let q=256;return{encode:(J)=>{if(!Z9(J))throw Error("radix.encode input should be Uint8Array");return jD(Array.from(J),q,$)},decode:(J)=>{return E7("radix.decode",J),Uint8Array.from(jD(J,$,q))}}}function f0($,q=!1){if(CQ($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(A9(8,$)>32||A9($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!Z9(J))throw Error("radix2.encode input should be Uint8Array");return B7(Array.from(J),8,$,!q)},decode:(J)=>{return E7("radix2.decode",J),Uint8Array.from(B7(J,$,8,q))}}}function AD($){return TD($),function(...q){try{return $.apply(null,q)}catch(J){}}}var hl=g0(f0(4),_0("0123456789ABCDEF"),v0("")),ul=g0(f0(5),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),B9(5),v0("")),pl=g0(f0(5),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),v0("")),ll=g0(f0(5),_0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),B9(5),v0("")),rl=g0(f0(5),_0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),v0("")),dl=g0(f0(5),_0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),v0(""),ED(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),CD=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),PD=($,q)=>{KJ("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},I7=CD?{encode($){return T7($),$.toBase64()},decode($){return PD($,!1)}}:g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),B9(6),v0("")),a0=g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),v0("")),il=CD?{encode($){return T7($),$.toBase64({alphabet:"base64url"})},decode($){return PD($,!0)}}:g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),B9(6),v0("")),cl=g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),v0("")),C7=($)=>g0(sI(58),_0($),v0("")),nl=C7("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),ol=C7("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),al=C7("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var S7=g0(_0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),v0("")),ZD=[996825010,642813549,513874426,1027748829,705979059];function IQ($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<ZD.length;G++)if((q>>G&1)===1)J^=ZD[G];return J}function BD($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=IQ(Q)^X>>5}Q=IQ(Q);for(let Y=0;Y<G;Y++)Q=IQ(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=IQ(Q)^Y;for(let Y=0;Y<6;Y++)Q=IQ(Q);return Q^=J,S7.encode(B7([Q%N9[30]],30,5,!1))}function LD($){let q=$==="bech32"?1:734539939,J=f0(5),G=J.decode,Q=J.encode,Y=AD(G);function X(z,K,R=90){if(KJ("bech32.encode prefix",z),Z9(K))K=Array.from(K);E7("bech32.encode",K);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+K.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),A=BD(j,K,q);return`${j}1${S7.encode(K)}${A}`}function U(z,K=90){KJ("bech32.decode input",z);let R=z.length;if(R<8||K!==!1&&R>K)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${K})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),A=N.slice(w+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=S7.decode(A).slice(0,-6),_=BD(j,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:j,words:T}}let W=AD(U);function V(z){let{prefix:K,words:R}=U(z,!1);return{prefix:K,words:R,bytes:G(R)}}function M(z,K){return X(z,Q(K))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var s0=LD("bech32"),sl=LD("bech32m");var tI=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),eI={encode($){return T7($),$.toHex()},decode($){return KJ("hex",$),Uint8Array.fromHex($)}},tl=tI?eI:g0(f0(4),_0("0123456789abcdef"),v0(""),ED(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function qC($,q,J,G){Lq($);let Q=K9({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(F$(Y,"c"),F$(X,"dkLen"),F$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let W=R7(q,"password"),V=R7(J,"salt"),M=new Uint8Array(X),z=gq.create($,W),K=z._cloneInto().update(V);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:K}}function JC($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return H0(Q),J}function P7($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:W}=qC($,q,J,G),V,M=new Uint8Array(4),z=RG(M),K=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(V=W._cloneInto(V)).update(M).digestInto(K),w.set(K.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(V).update(K).digestInto(K);for(let A=0;A<w.length;A++)w[A]^=K[A]}}return JC(U,W,X,V,K)}function FD($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],K=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],k=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let d=0;d<8;d+=2)l^=N$(F+L|0,7),Z^=N$(l+F|0,9),L^=N$(Z+l|0,13),F^=N$(L+Z|0,18),S^=N$(v+x|0,7),b^=N$(S+v|0,9),x^=N$(b+S|0,13),v^=N$(x+b|0,18),H^=N$(P+I|0,7),f^=N$(H+P|0,9),I^=N$(f+H|0,13),P^=N$(I+f|0,18),y^=N$(m+g|0,7),E^=N$(y+m|0,9),g^=N$(E+y|0,13),m^=N$(g+E|0,18),x^=N$(F+y|0,7),f^=N$(x+F|0,9),y^=N$(f+x|0,13),F^=N$(y+f|0,18),I^=N$(v+l|0,7),E^=N$(I+v|0,9),l^=N$(E+I|0,13),v^=N$(l+E|0,18),g^=N$(P+S|0,7),Z^=N$(g+P|0,9),S^=N$(Z+g|0,13),P^=N$(S+Z|0,18),L^=N$(m+H|0,7),b^=N$(L+m|0,9),H^=N$(b+L|0,13),m^=N$(H+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=W+f|0,Q[Y++]=V+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=K+I|0,Q[Y++]=R+E|0,Q[Y++]=N+Z|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=k+H|0,Q[Y++]=u+m|0}function L7($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(FD(J,X,$,q,J,Y),U>0)X+=16;FD(J,Y,$,q+=16,J,X)}}function GC($,q,J){let G=K9({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:W,maxmem:V,onProgress:M}=G;if(F$(Q,"N"),F$(Y,"r"),F$(X,"p"),F$(U,"dkLen"),F$(W,"asyncTick"),F$(V,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,K=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let w=P7(c$,$,q,{c:1,dkLen:z*X}),j=z9(w),A=z9(new Uint8Array(z*Q)),T=z9(new Uint8Array(z)),_=()=>{};if(M){let k=2*Q*X,u=Math.max(Math.floor(k/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===k))M(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:K,V:A,B32:j,B:w,tmp:T,blockMixCb:_,asyncTick:W}}function QC($,q,J,G,Q){let Y=P7(c$,$,J,{c:1,dkLen:q});return H0(J,G,Q),Y}function gD($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V:W,B32:V,B:M,tmp:z,blockMixCb:K}=GC($,q,J);z7(V);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)W[w]=V[N+w];for(let w=0,j=0;w<G-1;w++)L7(W,j,W,j+=U,Q),K();L7(W,(G-1)*U,V,N,Q),K();for(let w=0;w<G;w++){let j=(V[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=V[N+A]^W[j*U+A];L7(z,0,V,N,Q),K()}}return z7(V),QC($,X,M,W,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function YC($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function S9($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function KG($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function f$($,q,J=""){let G=YC($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function F7($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function _D($,q,J=!1){f$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!DG($))throw Error("invalid output, must be aligned")}function Rq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function t0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function XC($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Y8=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),UC=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var WC=($)=>{for(let q=0;q<$.length;q++)$[q]=UC($[q]);return $},bq=Y8?($)=>$:WC;function vD($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function bD($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function yD($,q,J){let G=q,Q=J||(()=>[]),Y=(U,W)=>G(W,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...W)=>G(U,...W),Y}var fD=($,q)=>{function J(G,...Q){if(f$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];f$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)f$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");f$(z,void 0,"output")}},W=!1;return{encrypt(M,z){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,f$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(f$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function PQ($,q,J=!0){if(q===void 0)return new Uint8Array($);if(f$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!DG(q))throw Error("invalid output, must be aligned");return q}function kD($,q,J){KG($),KG(q),S9(J);let G=new Uint8Array(16),Q=XC(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function DG($){return $.byteOffset%4===0}function OG($){return Uint8Array.from(f$($))}var xD=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),VC=(()=>bq(Rq(xD("expand 16-byte k"))))(),MC=(()=>bq(Rq(xD("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var LQ=64,zC=16,g7=(()=>4294967295)(),mD=Uint32Array.of();function RC($,q,J,G,Q,Y,X,U){let W=Q.length,V=new Uint8Array(LQ),M=Rq(V),z=Y8&&DG(Q)&&DG(Y),K=z?Rq(Q):mD,R=z?Rq(Y):mD;if(!Y8){for(let N=0;N<W;X++){if($(q,J,G,M,X,U),bq(M),X>=g7)throw Error("arx: counter overflow");let w=Math.min(LQ,W-N);for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}return}for(let N=0;N<W;X++){if($(q,J,G,M,X,U),X>=g7)throw Error("arx: counter overflow");let w=Math.min(LQ,W-N);if(z&&w===LQ){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<zC;A++)T=j+A,R[T]=K[T]^M[A];N+=LQ;continue}for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}}function hD($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=vD({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return KG(Q),KG(X),S9(Y),S9(J),(U,W,V,M,z=0)=>{f$(U,void 0,"key"),f$(W,void 0,"nonce"),f$(V,void 0,"data");let K=V.length;if(M=PQ(K,M,!1),KG(z),z<0||z>=g7)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=OG(U)),j=MC;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=VC,R.push(w);else throw f$(U,32,"arx key"),Error("invalid key size");if(!Y8||!DG(W))R.push(W=OG(W));let A=Rq(w);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=W.subarray(0,16);if(Y8)G(j,A,Rq(k),A);else{let u=bq(Uint32Array.from(j));G(u,A,Rq(k),A),t0(u),bq(A)}W=W.subarray(16)}else if(!Y8)bq(A);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let k=new Uint8Array(12);k.set(W,Y?0:12-W.length),W=k,R.push(W)}let _=bq(Rq(W));try{return RC($,j,A,_,V,M,z,X),M}finally{t0(...R)}}}function n$($,q){return $[q++]&255|($[q++]&255)<<8}class uD{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=OG(f$($,32,"key"));let q=n$($,0),J=n$($,2),G=n$($,4),Q=n$($,6),Y=n$($,8),X=n$($,10),U=n$($,12),W=n$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=n$($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],W=Y[2],V=Y[3],M=Y[4],z=Y[5],K=Y[6],R=Y[7],N=Y[8],w=Y[9],j=n$($,q+0),A=n$($,q+2),T=n$($,q+4),_=n$($,q+6),k=n$($,q+8),u=n$($,q+10),F=n$($,q+12),x=n$($,q+14),f=Q[0]+(j&8191),y=Q[1]+((j>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|k<<12)&8191),E=Q[5]+(k>>>1&8191),Z=Q[6]+((k>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+f*X+y*(5*w)+l*(5*N)+v*(5*R)+I*(5*K);L=b>>>13,b&=8191,b+=E*(5*z)+Z*(5*M)+S*(5*V)+P*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let H=L+f*U+y*X+l*(5*w)+v*(5*N)+I*(5*R);L=H>>>13,H&=8191,H+=E*(5*K)+Z*(5*z)+S*(5*M)+P*(5*V)+g*(5*W),L+=H>>>13,H&=8191;let m=L+f*W+y*U+l*X+v*(5*w)+I*(5*N);L=m>>>13,m&=8191,m+=E*(5*R)+Z*(5*K)+S*(5*z)+P*(5*M)+g*(5*V),L+=m>>>13,m&=8191;let d=L+f*V+y*W+l*U+v*X+I*(5*w);L=d>>>13,d&=8191,d+=E*(5*N)+Z*(5*R)+S*(5*K)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+f*M+y*V+l*W+v*U+I*X;L=B>>>13,B&=8191,B+=E*(5*w)+Z*(5*N)+S*(5*R)+P*(5*K)+g*(5*z),L+=B>>>13,B&=8191;let a=L+f*z+y*M+l*V+v*W+I*U;L=a>>>13,a&=8191,a+=E*X+Z*(5*w)+S*(5*N)+P*(5*R)+g*(5*K),L+=a>>>13,a&=8191;let q$=L+f*K+y*z+l*M+v*V+I*W;L=q$>>>13,q$&=8191,q$+=E*U+Z*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+f*R+y*K+l*z+v*M+I*V;L=Y$>>>13,Y$&=8191,Y$+=E*W+Z*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+f*N+y*R+l*K+v*z+I*M;L=G$>>>13,G$&=8191,G$+=E*V+Z*W+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let t=L+f*w+y*N+l*R+v*K+I*z;L=t>>>13,t&=8191,t+=E*M+Z*V+S*W+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,H+=L,Q[0]=b,Q[1]=H,Q[2]=m,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;t0(J)}update($){F7(this),f$($),$=OG($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,t0(this.h,this.r,this.buffer,this.pad)}digestInto($){F7(this),_D($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var pD=yD(32,($)=>new uD($));function KC($,q,J,G,Q,Y=20){let X=$[0],U=$[1],W=$[2],V=$[3],M=q[0],z=q[1],K=q[2],R=q[3],N=q[4],w=q[5],j=q[6],A=q[7],T=Q,_=J[0],k=J[1],u=J[2],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),Z=Z+L|0,l=w$(l^Z,12),F=F+l|0,L=w$(L^F,8),Z=Z+L|0,l=w$(l^Z,7),x=x+v|0,b=w$(b^x,16),S=S+b|0,v=w$(v^S,12),x=x+v|0,b=w$(b^x,8),S=S+b|0,v=w$(v^S,7),f=f+I|0,H=w$(H^f,16),P=P+H|0,I=w$(I^P,12),f=f+I|0,H=w$(H^f,8),P=P+H|0,I=w$(I^P,7),y=y+E|0,m=w$(m^y,16),g=g+m|0,E=w$(E^g,12),y=y+E|0,m=w$(m^y,8),g=g+m|0,E=w$(E^g,7),F=F+v|0,m=w$(m^F,16),P=P+m|0,v=w$(v^P,12),F=F+v|0,m=w$(m^F,8),P=P+m|0,v=w$(v^P,7),x=x+I|0,L=w$(L^x,16),g=g+L|0,I=w$(I^g,12),x=x+I|0,L=w$(L^x,8),g=g+L|0,I=w$(I^g,7),f=f+E|0,b=w$(b^f,16),Z=Z+b|0,E=w$(E^Z,12),f=f+E|0,b=w$(b^f,8),Z=Z+b|0,E=w$(E^Z,7),y=y+l|0,H=w$(H^y,16),S=S+H|0,l=w$(l^S,12),y=y+l|0,H=w$(H^y,8),S=S+H|0,l=w$(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+x|0,G[d++]=W+f|0,G[d++]=V+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=K+I|0,G[d++]=R+E|0,G[d++]=N+Z|0,G[d++]=w+S|0,G[d++]=j+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=k+H|0,G[d++]=u+m|0}var DC=hD(KC,{counterRight:!1,counterLength:4,allowShortKeys:!1});var OC=new Uint8Array(16),lD=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(OC.subarray(J))},HC=new Uint8Array(32);function rD($,q,J,G,Q){if(Q!==void 0)f$(Q,void 0,"AAD");let Y=$(q,J,HC),X=kD(G.length,Q?Q.length:0,!0),U=pD.create(Y);if(Q)lD(U,Q);lD(U,G),U.update(X);let W=U.digest();return t0(Y,X),W}var NC=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=PQ(U+16,X,!1),X.set(Y);let W=X.subarray(0,-16);$(q,J,W,W,1);let V=rD($,q,J,W,G);return X.set(V,U),t0(V),X},decrypt(Y,X){X=PQ(Y.length-16,X,!1);let U=Y.subarray(0,-16),W=Y.subarray(-16),V=rD($,q,J,U,G);if(!bD(W,V))throw t0(V),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),t0(V),X}}},DJ=fD({blockSize:64,nonceLength:12,tagLength:16},NC(DC));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function HG($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function h$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=HG($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+W)}return $}function k0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");h$($.outputLen),h$($.blockLen)}function fq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function T9($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function E9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function T0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function I9($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function e0($,q){return $<<32-q|$>>>q}var wC=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function jC($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function AC($){for(let q=0;q<$.length;q++)$[q]=jC($[q]);return $}var _7=wC?($)=>$:AC,iD=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),ZC=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function X8($){if(Q$($),iD)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=ZC[$[J]];return q}var yq={_0:48,_9:57,A:65,F:70,a:97,f:102};function dD($){if($>=yq._0&&$<=yq._9)return $-yq._0;if($>=yq.A&&$<=yq.F)return $-(yq.A-10);if($>=yq.a&&$<=yq.f)return $-(yq.a-10);return}function U8($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(iD)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=dD($.charCodeAt(Y)),U=dD($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function v$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function NG($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function OJ($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var HJ=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b7=BigInt(0),v7=BigInt(1);function FQ($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function cD($){if(typeof $==="bigint"){if(!C9($))throw Error("positive bigint expected, got "+$)}else h$($);return $}function gQ($){let q=cD($).toString(16);return q.length&1?"0"+q:q}function nD($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?b7:BigInt("0x"+$)}function NJ($){return nD(X8($))}function wJ($){return nD(X8(P9(Q$($)).reverse()))}function wG($,q){h$(q),$=cD($);let J=U8($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function _Q($,q){return wG($,q).reverse()}function P9($){return Uint8Array.from($)}function jJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var C9=($)=>typeof $==="bigint"&&b7<=$;function BC($,q,J){return C9($)&&C9(q)&&C9(J)&&q<=$&&$<J}function vQ($,q,J,G){if(!BC(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function y7($){let q;for(q=0;$>b7;$>>=v7,q+=1);return q}var bQ=($)=>(v7<<BigInt($))-v7;function oD($,q,J){if(h$($,"hashLen"),h$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,v$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return v$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while(!(T=A(N())))R();return z(),T}}function W8($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}function f7($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var w0=BigInt(0),W0=BigInt(1),V8=BigInt(2),tD=BigInt(3),eD=BigInt(4),$1=BigInt(5),SC=BigInt(7),q1=BigInt(8),TC=BigInt(9),J1=BigInt(16);function N0($,q){let J=$%q;return J>=w0?J:q+J}function m0($,q,J){let G=$;while(q-- >w0)G*=G,G%=J;return G}function aD($,q){if($===w0)throw Error("invert: expected non-zero number");if(q<=w0)throw Error("invert: expected positive modulus, got "+q);let J=N0($,q),G=q,Q=w0,Y=W0,X=W0,U=w0;while(J!==w0){let V=G/J,M=G%J,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==W0)throw Error("invert: does not exist");return N0(Q,q)}function k7($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function G1($,q){let J=($.ORDER+W0)/eD,G=$.pow(q,J);return k7($,G,q),G}function EC($,q){let J=($.ORDER-$1)/q1,G=$.mul(q,V8),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,V8),Q),U=$.mul(Y,$.sub(X,$.ONE));return k7($,U,q),U}function IC($){let q=L9($),J=Q1($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+SC)/J1;return(U,W)=>{let V=U.pow(W,X),M=U.mul(V,G),z=U.mul(V,Q),K=U.mul(V,Y),R=U.eql(U.sqr(M),W),N=U.eql(U.sqr(z),W);V=U.cmov(V,M,R),M=U.cmov(K,z,N);let w=U.eql(U.sqr(M),W),j=U.cmov(V,M,w);return k7(U,j,W),j}}function Q1($){if($<tD)throw Error("sqrt is not defined for small field");let q=$-W0,J=0;while(q%V8===w0)q/=V8,J++;let G=V8,Q=L9($);while(sD(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return G1;let Y=Q.pow(G,q),X=(q+W0)/V8;return function(W,V){if(W.is0(V))return V;if(sD(W,V)!==1)throw Error("Cannot find square root");let M=J,z=W.mul(W.ONE,Y),K=W.pow(V,q),R=W.pow(V,X);while(!W.eql(K,W.ONE)){if(W.is0(K))return W.ZERO;let N=1,w=W.sqr(K);while(!W.eql(w,W.ONE))if(N++,w=W.sqr(w),N===M)throw Error("Cannot find square root");let j=W0<<BigInt(M-N-1),A=W.pow(z,j);M=N,z=W.sqr(A),K=W.mul(K,z),R=W.mul(R,A)}return R}}function CC($){if($%eD===tD)return G1;if($%q1===$1)return EC;if($%J1===TC)return IC($);return Q1($)}var PC=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function m7($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=PC.reduce((G,Q)=>{return G[Q]="function",G},q);return W8($,J),$}function LC($,q,J){if(J<w0)throw Error("invalid exponent, negatives unsupported");if(J===w0)return $.ONE;if(J===W0)return q;let G=$.ONE,Q=q;while(J>w0){if(J&W0)G=$.mul(G,Q);Q=$.sqr(Q),J>>=W0}return G}function yQ($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,W)=>{if($.is0(U))return X;return G[W]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,W)=>{if($.is0(U))return X;return G[W]=$.mul(X,G[W]),$.mul(X,U)},Y),G}function sD($,q){let J=($.ORDER-W0)/V8,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function FC($,q){if(q!==void 0)h$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class Y1{ORDER;BITS;BYTES;isLE;ZERO=w0;ONE=W0;_lengths;_sqrt;_mod;constructor($,q={}){if($<=w0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=FC($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return N0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return w0<=$&&$<this.ORDER}is0($){return $===w0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&W0)===W0}neg($){return N0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return N0($*$,this.ORDER)}add($,q){return N0($+q,this.ORDER)}sub($,q){return N0($-q,this.ORDER)}mul($,q){return N0($*q,this.ORDER)}pow($,q){return LC(this,$,q)}div($,q){return N0($*aD(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return aD($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=CC(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?_Q($,this.BYTES):wG($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?wJ($):NJ($);if(X)U=N0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return yQ(this,$)}cmov($,q,J){return J?q:$}}function L9($,q={}){return new Y1($,q)}function X1($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function x7($){let q=X1($);return q+Math.ceil(q/2)}function U1($,q,J=!1){Q$($);let G=$.length,Q=X1(q),Y=x7(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?wJ($):NJ($),U=N0(X,q-W0)+W0;return J?_Q(U,Q):wG(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var jG=BigInt(0),M8=BigInt(1);function fQ($,q){let J=q.negate();return $?J:q}function l7($,q){let J=yQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function z1($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function h7($,q){z1($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=bQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function W1($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=M8;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var u7=new WeakMap,R1=new WeakMap;function p7($){return R1.get($)||1}function V1($){if($!==jG)throw Error("invalid wNAF")}class r7{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>jG){if(q&M8)J=J.add(G);G=G.double(),q>>=M8}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=h7(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=h7($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=W1(J,X,Y);if(J=U,V)Q=Q.add(fQ(z,q[K]));else G=G.add(fQ(M,q[W]))}return V1(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=h7($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===jG)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=W1(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return V1(J),G}getPrecomputes($,q,J){let G=u7.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);u7.set(q,G)}}return G}cached($,q,J){let G=p7($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=p7($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){z1(q,this.bits),R1.set($,q),u7.delete($)}hasCache($){return p7($)!==1}}function K1($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>jG||G>jG){if(J&M8)Y=Y.add(Q);if(G&M8)X=X.add(Q);Q=Q.double(),J>>=M8,G>>=M8}return{p1:Y,p2:X}}function M1($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return m7(q),q}else return L9($,{isLE:J})}function D1($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>jG))throw Error(`CURVE.${W} must be positive bigint`)}let Q=M1(q.p,J.Fp,G),Y=M1(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function F9($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var kQ=BigInt(0),AG=BigInt(1),g9=BigInt(2);function gC($){return W8($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function O1($){let q=gC($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X||OJ,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?g9**BigInt(254):g9**BigInt(447),N=U?BigInt(8)*g9**BigInt(251)-AG:BigInt(4)*g9**BigInt(445)-AG,w=R+N+AG,j=(Z)=>N0(Z,J),A=T(z);function T(Z){return _Q(j(Z),M)}function _(Z){let S=P9(Q$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(wJ(S))}function k(Z){return wJ(Q(P9(Q$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===kQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){vQ("u",Z,kQ,J),vQ("scalar",S,R,w);let P=S,g=Z,L=AG,b=kQ,H=Z,m=AG,d=kQ;for(let a=BigInt(V-1);a>=kQ;a--){let q$=P>>a&AG;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),iq=R0+Jq,cq=R0-Jq;H=j(iq*iq),m=j(g*j(cq*cq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=W(M))=>{return Q$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze({keygen:F9(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}class d7{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(k0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),T0(G)}update($){return fq(this),this.iHash.update($),this}digestInto($){fq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ZG=($,q,J)=>new d7($,q).update(J).digest();ZG.create=($,q)=>new d7($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H1=($,q)=>($+($>=0?q:-q)/w1)/q;function _C($,q,J){let[[G,Q],[Y,X]]=q,U=H1(X*$,J),W=H1(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<kq,K=M<kq;if(z)V=-V;if(K)M=-M;let R=bQ(Math.ceil(y7(J)/2))+BG;if(V<kq||V>=R||M<kq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:V,k2neg:K,k2:M}}function c7($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function i7($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(FQ(J.lowS,"lowS"),FQ(J.prehash,"prehash"),J.format!==void 0)c7(J.format);return J}class N1 extends Error{constructor($=""){super($)}}var AJ={Err:N1,_tlv:{encode:($,q)=>{let{Err:J}=AJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=gQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?gQ(Q.length/2|128):"";return gQ($)+Y+Q+q},decode($,q){let{Err:J}=AJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=AJ;if($<kq)throw new q("integer: negative integers are not allowed");let J=gQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=AJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return NJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=AJ,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=AJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},kq=BigInt(0),BG=BigInt(1),w1=BigInt(2),_9=BigInt(3),vC=BigInt(4);function n7($,q={}){let J=D1("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;W8(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=A1(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,E,Z){let{x:S,y:P}=E.toAffine(),g=G.toBytes(S);if(FQ(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return v$(j1(L),g)}else return v$(Uint8Array.of(4),g,G.toBytes(P))}function K(I){Q$(I,void 0,"Point");let{publicKey:E,publicKeyUncompressed:Z}=V,S=I.length,P=I[0],g=I.subarray(1);if(S===E&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),H;try{H=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let m=G.isOdd(H);if((P&1)===1!==m)H=G.neg(H);return{x:L,y:H}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),H=G.fromBytes(g.subarray(L,L*2));if(!j(b,H))throw Error("bad point: is not on curve");return{x:b,y:H}}else throw Error(`bad point: got length ${S}, expected compressed=${E} or uncompressed=${Z}`)}let R=q.toBytes||z,N=q.fromBytes||K;function w(I){let E=G.sqr(I),Z=G.mul(E,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function j(I,E){let Z=G.sqr(E),S=w(I);return G.eql(Z,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,_9),vC),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,E,Z=!1){if(!G.isValid(E)||Z&&G.is0(E))throw Error(`bad point coordinate ${I}`);return E}function k(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!W||!W.basises)throw Error("no endo");return _C(I,W.basises,Q.ORDER)}let F=f7((I,E)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=f7((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:E,y:Z}=I.toAffine();if(!G.isValid(E)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!j(E,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function f(I,E,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),E=fQ(S,E),Z=fQ(P,Z),E.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,E,Z){this.X=_("x",I),this.Y=_("y",E,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:E,y:Z}=I||{};if(!I||!G.isValid(E)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(Z))return y.ZERO;return new y(E,Z,G.ONE)}static fromBytes(I){let E=y.fromAffine(N(Q$(I,void 0,"point")));return E.assertValidity(),E}static fromHex(I){return y.fromBytes(U8(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,E=!0){if(v.createCache(this,I),!E)this.multiply(_9);return this}assertValidity(){x(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(E,L),G.mul(P,S)),H=G.eql(G.mul(Z,L),G.mul(g,S));return b&&H}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:E}=Y,Z=G.mul(E,_9),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),H=G.mul(S,g),H=G.add(H,H),L=G.mul(I,H),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),H=G.mul(Z,H),B=G.mul(I,B),a=G.sub(m,B),a=G.mul(I,a),a=G.add(a,H),H=G.add(m,m),m=G.add(H,m),m=G.add(m,B),m=G.mul(m,a),b=G.add(b,m),B=G.mul(P,g),B=G.add(B,B),m=G.mul(B,a),L=G.sub(L,m),H=G.mul(B,d),H=G.add(H,H),H=G.add(H,H),new y(L,b,H)}add(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,H=G.ZERO,m=G.ZERO,d=Y.a,B=G.mul(Y.b,_9),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.mul(S,L),G$=G.add(E,Z),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(a,q$),G$=G.sub(G$,t),t=G.add(E,S);let H$=G.add(P,L);return t=G.mul(t,H$),H$=G.add(a,Y$),t=G.sub(t,H$),H$=G.add(Z,S),b=G.add(g,L),H$=G.mul(H$,b),b=G.add(q$,Y$),H$=G.sub(H$,b),m=G.mul(d,t),b=G.mul(B,Y$),m=G.add(b,m),b=G.sub(q$,m),m=G.add(q$,m),H=G.mul(b,m),q$=G.add(a,a),q$=G.add(q$,a),Y$=G.mul(d,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(a,Y$),Y$=G.mul(d,Y$),t=G.add(t,Y$),a=G.mul(q$,t),H=G.add(H,a),a=G.mul(H$,t),b=G.mul(G$,b),b=G.sub(b,a),a=G.mul(G$,q$),m=G.mul(H$,m),m=G.add(m,a),new y(b,H,m)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:E}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>l7(y,L));if(E){let{k1neg:g,k1:L,k2neg:b,k2:H}=u(I),{p:m,f:d}=P(L),{p:B,f:a}=P(H);S=d.add(a),Z=f(E.beta,m,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return l7(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:E}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===kq||Z.is0())return y.ZERO;if(I===BG)return Z;if(v.hasCache(this))return this.multiply(I);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:H}=K1(y,Z,P,L);return f(E.beta,b,H,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===BG)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===BG)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return FQ(I,"isCompressed"),this.assertValidity(),R(y,this,I)}toHex(I=!0){return X8(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new r7(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function j1($){return Uint8Array.of($?2:3)}function A1($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function bC($,q={}){let{Fn:J}=$,G=q.randomBytes||OJ,Q=Object.assign(A1($.Fp,J),{seed:x7(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R=G(Q.seed)){return U1(Q$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!HG(R))return;if("_lengths"in J&&J._lengths||N===w)return;let A=Q$(R,void 0,"key").length;return A===w||A===j}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=F9(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function o7($,q,J={}){k0(q),W8(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||OJ,Q=J.hmac||((Z,S)=>ZG(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:W}=X,{keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R}=bC($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*w1<Y.ORDER;function j(Z){let S=U>>BG;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){c7(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(Z,g)}class k{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:H,s:m}=AJ.toSig(Q$(Z));return new k(H,m)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=R.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new k(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(U8(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new k(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),H=$.fromBytes(v$(j1((g&1)===0),b)),m=X.inv(L),d=F(Q$(Z,void 0,"msgHash")),B=X.create(-d*m),a=X.create(P*m),q$=$.BASE.multiplyUnsafe(B).add(H.multiplyUnsafe(a));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(Z=N.format){if(c7(Z),Z==="der")return U8(AJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),v$(Uint8Array.of(this.assertRecovery()),g,L);return v$(g,L)}toHex(Z){return X8(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=NJ(S),g=S.length*8-W;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=bQ(W);function f(Z){return vQ("num < 2^"+W,Z,kq,x),X.toBytes(Z)}function y(Z,S){return Q$(Z,void 0,"message"),S?Q$(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=i7(P,N);Z=y(Z,L);let H=F(Z),m=X.fromBytes(S);if(!X.isValidNot0(m))throw Error("invalid private key");let d=[f(m),f(H)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;d.push(Q$(Y$,void 0,"extraEntropy"))}let B=v$(...d),a=H;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),H$=$.BASE.multiply(G$).toAffine(),A$=X.create(H$.x);if(A$===kq)return;let I$=X.create(t*X.create(a+A$*m));if(I$===kq)return;let m$=(H$.x===A$?0:2)|Number(H$.y&BG),R0=I$;if(g&&j(I$))R0=X.neg(I$),m$^=1;return new k(A$,R0,w?void 0:m$)}return{seed:B,k2sig:q$}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return oD(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:H}=i7(g,N);if(P=Q$(P,void 0,"publicKey"),S=y(S,b),!HG(Z)){let m=Z instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+m)}_(Z,H);try{let m=k.fromBytes(Z,H),d=$.fromBytes(P);if(L&&m.hasHighS())return!1;let{r:B,s:a}=m,q$=F(S),Y$=X.inv(a),G$=X.create(q$*Y$),t=X.create(B*Y$),H$=$.BASE.multiplyUnsafe(G$).add(d.multiplyUnsafe(t));if(H$.is0())return!1;return X.create(H$.x)===B}catch(m){return!1}}function E(Z,S,P={}){let{prehash:g}=i7(P,N);return S=y(S,g),k.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R,Point:$,sign:v,verify:I,recoverPublicKey:E,Signature:k,hash:q})}function Z1($,q,J){return $&q^~$&J}function B1($,q,J){return $&q^$&J^q&J}class v9{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=I9(this.buffer)}update($){fq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=I9($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){fq(this),T9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,T0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=I9($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var mq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),xq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),o$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),a$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var b9=BigInt(4294967295),S1=BigInt(32);function yC($,q=!1){if(q)return{h:Number($&b9),l:Number($>>S1&b9)};return{h:Number($>>S1&b9)|0,l:Number($&b9)|0}}function y9($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=yC($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var a7=($,q,J)=>$>>>J,s7=($,q,J)=>$<<32-J|q>>>J,z8=($,q,J)=>$>>>J|q<<32-J,R8=($,q,J)=>$<<32-J|q>>>J,mQ=($,q,J)=>$<<64-J|q>>>J-32,xQ=($,q,J)=>$>>>J-32|q<<64-J;var T1=($,q,J)=>$<<J|q>>>32-J,E1=($,q,J)=>q<<J|$>>>32-J,I1=($,q,J)=>q<<J-32|$>>>64-J,C1=($,q,J)=>$<<J-32|q>>>64-J;function Kq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var P1=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),L1=($,q,J,G)=>q+J+G+($/4294967296|0)|0,F1=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),g1=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,_1=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),v1=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var kC=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ZJ=new Uint32Array(64);class t7 extends v9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)ZJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=ZJ[M-15],K=ZJ[M-2],R=e0(z,7)^e0(z,18)^z>>>3,N=e0(K,17)^e0(K,19)^K>>>10;ZJ[M]=N+ZJ[M-7]+R+ZJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=e0(X,6)^e0(X,11)^e0(X,25),K=V+z+Z1(X,U,W)+kC[M]+ZJ[M]|0,N=(e0(J,2)^e0(J,13)^e0(J,22))+B1(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){T0(ZJ)}destroy(){this.set(0,0,0,0,0,0,0,0),T0(this.buffer)}}class b1 extends t7{A=mq[0]|0;B=mq[1]|0;C=mq[2]|0;D=mq[3]|0;E=mq[4]|0;F=mq[5]|0;G=mq[6]|0;H=mq[7]|0;constructor(){super(32)}}class mC extends t7{A=xq[0]|0;B=xq[1]|0;C=xq[2]|0;D=xq[3]|0;E=xq[4]|0;F=xq[5]|0;G=xq[6]|0;H=xq[7]|0;constructor(){super(28)}}var y1=(()=>y9(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),xC=(()=>y1[0])(),hC=(()=>y1[1])(),BJ=new Uint32Array(80),SJ=new Uint32Array(80);class hQ extends v9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)BJ[T]=$.getUint32(q),SJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=BJ[T-15]|0,k=SJ[T-15]|0,u=z8(_,k,1)^z8(_,k,8)^a7(_,k,7),F=R8(_,k,1)^R8(_,k,8)^s7(_,k,7),x=BJ[T-2]|0,f=SJ[T-2]|0,y=z8(x,f,19)^mQ(x,f,61)^a7(x,f,6),l=R8(x,f,19)^xQ(x,f,61)^s7(x,f,6),v=F1(F,l,SJ[T-7],SJ[T-16]),I=g1(v,u,y,BJ[T-7],BJ[T-16]);BJ[T]=I|0,SJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=z8(M,z,14)^z8(M,z,18)^mQ(M,z,41),k=R8(M,z,14)^R8(M,z,18)^xQ(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=_1(A,k,F,hC[T],SJ[T]),f=v1(x,j,_,u,xC[T],BJ[T]),y=x|0,l=z8(J,G,28)^mQ(J,G,34)^mQ(J,G,39),v=R8(J,G,28)^xQ(J,G,34)^xQ(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Kq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=P1(y,v,E);J=L1(Z,f,l,I),G=Z|0}({h:J,l:G}=Kq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Kq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Kq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=Kq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=Kq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Kq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Kq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Kq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){T0(BJ,SJ)}destroy(){T0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class uC extends hQ{Ah=a$[0]|0;Al=a$[1]|0;Bh=a$[2]|0;Bl=a$[3]|0;Ch=a$[4]|0;Cl=a$[5]|0;Dh=a$[6]|0;Dl=a$[7]|0;Eh=a$[8]|0;El=a$[9]|0;Fh=a$[10]|0;Fl=a$[11]|0;Gh=a$[12]|0;Gl=a$[13]|0;Hh=a$[14]|0;Hl=a$[15]|0;constructor(){super(64)}}class f1 extends hQ{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(48)}}var V0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),M0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class pC extends hQ{Ah=V0[0]|0;Al=V0[1]|0;Bh=V0[2]|0;Bl=V0[3]|0;Ch=V0[4]|0;Cl=V0[5]|0;Dh=V0[6]|0;Dl=V0[7]|0;Eh=V0[8]|0;El=V0[9]|0;Fh=V0[10]|0;Fl=V0[11]|0;Gh=V0[12]|0;Gl=V0[13]|0;Hh=V0[14]|0;Hl=V0[15]|0;constructor(){super(28)}}class lC extends hQ{Ah=M0[0]|0;Al=M0[1]|0;Bh=M0[2]|0;Bl=M0[3]|0;Ch=M0[4]|0;Cl=M0[5]|0;Dh=M0[6]|0;Dl=M0[7]|0;Eh=M0[8]|0;El=M0[9]|0;Fh=M0[10]|0;Fl=M0[11]|0;Gh=M0[12]|0;Gl=M0[13]|0;Hh=M0[14]|0;Hl=M0[15]|0;constructor(){super(32)}}var f9=NG(()=>new b1,HJ(1));var k1=NG(()=>new f1,HJ(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rC=BigInt(1),m1=BigInt(2),dC=BigInt(3),iC=BigInt(5),er=BigInt(8),x1=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function cC($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=x1,U=$*$%Y*$%Y,W=m0(U,m1,Y)*U%Y,V=m0(W,rC,Y)*$%Y,M=m0(V,iC,Y)*V%Y,z=m0(M,q,Y)*M%Y,K=m0(z,J,Y)*z%Y,R=m0(K,G,Y)*K%Y,N=m0(R,Q,Y)*R%Y,w=m0(N,Q,Y)*R%Y,j=m0(w,q,Y)*M%Y;return{pow_p_5_8:m0(j,m1,Y)*$%Y,b2:U}}function nC($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var h1=(()=>{let $=x1;return O1({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=cC(q);return N0(m0(J,dC,$)*G,$)},adjustScalarBytes:nC})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var oC=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),aC=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var sC=n7(oC),e7=o7(sC,f9);var tC=n7(aC),u1=o7(tC,k1);function l1($,q,J){if(k0($),J===void 0)J=new Uint8Array($.outputLen);return ZG($,J,q)}var $W=Uint8Array.of(0),p1=Uint8Array.of();function r1($,q,J,G=32){k0($),h$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=p1;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=ZG.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)$W[0]=M+1,W.update(M===0?p1:V).update(J).update($W).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),T0(V,$W),X.slice(0,G)}var eC=BigInt(0),uQ=BigInt(1),$P=BigInt(2),qP=BigInt(7),JP=BigInt(256),GP=BigInt(113),c1=[],n1=[],o1=[];for(let $=0,q=uQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],c1.push(2*(5*G+J)),n1.push(($+1)*($+2)/2%64);let Q=eC;for(let Y=0;Y<7;Y++)if(q=(q<<uQ^(q>>qP)*GP)%JP,q&$P)Q^=uQ<<(uQ<<BigInt(Y))-uQ;o1.push(Q)}var a1=y9(o1,!0),QP=a1[0],YP=a1[1],d1=($,q,J)=>J>32?I1($,q,J):T1($,q,J),i1=($,q,J)=>J>32?C1($,q,J):E1($,q,J);function XP($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,W=(X+2)%10,V=J[W],M=J[W+1],z=d1(V,M,1)^J[U],K=i1(V,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=K}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=n1[X],W=d1(Q,Y,U),V=i1(Q,Y,U),M=c1[X];Q=$[M],Y=$[M+1],$[M]=W,$[M+1]=V}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=QP[G],$[1]^=YP[G]}T0(J)}class k9{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,h$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=E9(this.state)}clone(){return this._cloneInto()}keccak(){_7(this.state32),XP(this.state32,this.rounds),_7(this.state32),this.posOut=0,this.pos=0}update($){fq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){fq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return h$($),this.xofInto(new Uint8Array($))}digestInto($){if(T9($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,T0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new k9(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var s1=($,q,J,G={})=>NG(()=>new k9(q,$,J),G);var K8=s1(6,136,32,HJ(8));var t1=s1(6,72,64,HJ(10));var e1=($,q,J,G={})=>NG((Q={})=>new k9(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),$O=e1(31,168,16,HJ(11)),Dq=e1(31,136,32,HJ(12));function qW($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function JO($){return qW($),($&$-1)===0&&$!==0}function JW($,q){qW($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function GO($){return qW($),31-Math.clz32($)}function qO($){let q=$.length;if(q<2||!JO(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=GO(q);for(let G=0;G<q;G++){let Q=JW(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var GW=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,W=GO(J);if(!JO(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)qO(M);for(let z=0,K=1;z<W-X;z++){let R=Q?z+1+X:W-z,N=1<<R,w=N>>1,j=J>>R;for(let A=0;A<J;A+=N)for(let T=0,_=K++;T<w;T++){let k=Y?Q?J-_:_:T*j,u=A+T,F=A+T+w,x=G[k],f=M[F],y=M[u];if(V){let l=$.mul(f,x);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(f,y),M[F]=$.mul($.sub(f,y),x);else M[u]=$.add(y,f),M[F]=$.mul($.sub(y,f),x)}}if(!Q&&U)qO(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Oq=OJ;function m9($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function QO($){return Uint8Array.from($)}function D8($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let W=q[X],V=J(W),M=typeof W==="number"?Q[X]:W.encode(Q[X]);if(Q$(M,V,$),Y.set(M,U),typeof W!=="number")M.fill(0);U+=V}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),W=Q.subarray(0,U);Y.push(typeof X==="number"?W:X.decode(W)),Q=Q.subarray(U)}return Y}}}function x9($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function k$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function QW($){return(1<<$)-1}var Dd=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var YO=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,W=(T,_=G)=>{let k=T%_|0;return(k>=0?k|0:_+k|0)|0},V=(T,_=G)=>{let k=W(T,_)|0;return(k>_>>1?k-_|0:k)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let k=JW(_,X),u=BigInt(Y)**BigInt(k)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),K={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=GW(K,{dit:!1,...R}),w=GW(K,{dit:!0,...R});return{mod:W,smod:V,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let k=QW(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=(_.encode(F[f])&k)<<l,l+=T;for(;l>=8;l-=8,y>>=8)x[v++]=y&QW(l)}return x},decode:(F)=>{let x=q(J);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=F[f]<<l,l+=8;for(;l>=T;l-=T,y>>=T)x[v++]=_.decode(y&k)}return x}}}}},UP=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,M)=>{return G[Q+0]=V,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return W++,X.xofInto(Y)}},clean:()=>{X.destroy(),k$(Y,G)}}},XO=UP($O);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var z0=256,hq=3329,WP=3303,VP=17,{mod:rQ,nttZetas:MP,NTT:O8,bitsCoder:zP}=YO({N:z0,Q:hq,F:WP,ROOT_OF_UNITY:VP,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),YW={512:{N:z0,Q:hq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:z0,Q:hq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:z0,Q:hq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},RP=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+hq/2)/hq,decode:(J)=>J*hq+q>>>$}},pQ=($)=>zP($,RP($));function H8($,q){for(let J=0;J<z0;J++)$[J]=rQ($[J]+q[J])}function KP($,q){for(let J=0;J<z0;J++)$[J]=rQ($[J]-q[J])}function DP($,q,J,G,Q){let Y=rQ(q*G*Q+$*J),X=rQ($*G+q*J);return{c0:Y,c1:X}}function h9($,q){for(let J=0;J<z0/2;J++){let G=MP[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=DP($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function UO($){let q=new Uint16Array(z0);for(let J=0;J<z0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<z0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<hq)q[J++]=Y;if(J<z0&&X<hq)q[J++]=X}}return q}function lQ($,q,J,G){let Q=$(G*z0/4,q,J),Y=new Uint16Array(z0),X=E9(Q),U=0;for(let W=0,V=0,M=0,z=0;W<X.length;W++){let K=X[W];for(let R=0;R<32;R++)if(M+=K&1,K>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[V++]=rQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var OP=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:W}=$,V=pQ(1),M=pQ(W),z=pQ(U),K=D8("publicKey",x9(pQ(12),q),32),R=x9(pQ(12),q),N=D8("ciphertext",x9(z,q),M),w=D8("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:K.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let A=new Uint8Array(33);A.set(j),A[32]=q;let T=Q(A),[_,k]=w.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(O8.encode(lQ(J,k,y,Y)));let x=G(_);for(let y=0;y<q;y++){let l=O8.encode(lQ(J,k,q+y,Y));for(let v=0;v<q;v++){let I=UO(x.get(v,y));H8(l,h9(I,u[v]))}F.push(l)}x.clean();let f={publicKey:K.encode([F,_]),secretKey:R.encode(u)};return k$(_,k,u,F,A,T),f},encrypt:(j,A,T)=>{let[_,k]=K.decode(j),u=[];for(let v=0;v<q;v++)u.push(O8.encode(lQ(J,T,v,Y)));let F=G(k),x=new Uint16Array(z0),f=[];for(let v=0;v<q;v++){let I=lQ(J,T,q+v,X),E=new Uint16Array(z0);for(let Z=0;Z<q;Z++){let S=UO(F.get(v,Z));H8(E,h9(S,u[Z]))}H8(I,O8.decode(E)),f.push(I),H8(x,h9(_[v],u[v])),k$(E)}F.clean();let y=lQ(J,T,2*q,X);H8(y,O8.decode(x));let l=V.decode(A);return H8(l,y),k$(_,u,x,y),N.encode([f,l])},decrypt:(j,A)=>{let[T,_]=N.decode(j),k=R.decode(A),u=new Uint16Array(z0);for(let F=0;F<q;F++)H8(u,h9(k[F],O8.encode(T[F])));return KP(_,O8.decode(u)),k$(u,k,T),V.encode(_)}}};function XW($){let q=OP($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=D8("secretKey",X.secretKey,X.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Oq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:K}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([K,z,R,M.subarray(32)]);return k$(K,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,K,R,N]=U.decode(M);return Uint8Array.from(K)},encapsulate:(M,z=Oq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let K=M.subarray(0,384*$.K),R=Y.encode(Y.decode(QO(K)));if(!m9(R,K))throw k$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");k$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return k$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let K=U.bytesLen-96,R=K+32,N=J(z.subarray(K/2,R));if(!m9(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,A,T]=U.decode(z),_=q.decrypt(M,w),k=G.create().update(_).update(A).digest(),u=k.subarray(0,32),F=q.encrypt(j,_,k.subarray(32,64)),x=m9(M,F),f=Q.create({dkLen:32}).update(T).update(M).digest();return k$(_,F,!x?u:f),x?u:f}}}function HP($,q,J){return Dq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var UW={HASH256:K8,HASH512:t1,KDF:Dq,XOF:XO,PRF:HP},Ed=XW({...UW,...YW[512]}),dQ=XW({...UW,...YW[768]}),WO=XW({...UW,...YW[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function NP($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Oq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?wJ(X):NJ(X),W=Y.toBytes(Y.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function WW($,q=!1){let J=NP($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Oq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return k$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function iQ($,q){return D8(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function VW($){return(q,J)=>$(q,{dkLen:J})}function wP($,q,...J){let G=iQ(J,"seed"),Q=iQ(J,"publicKey");if($===void 0)$=G.bytesLen;h$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),W=J.map((z,K)=>z.keygen(U[K])),V=W.map((z)=>z.secretKey),M=W.map((z)=>z.publicKey);return{secretKey:V,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Oq($)){let{publicKey:U,secretKey:W}=Y(X),V=Q.encode(U);return k$(U),k$(W),{secretKey:X,publicKey:V}},expandDecapsulationKey:Y,realSeedLen:$}}function u9($,q,J,G,...Q){let Y=wP($,J,...Q),X=iQ(Q,"cipherText"),U=iQ(Q,"publicKey"),W=iQ(Q,"msg");if(q===void 0)q=W.bytesLen;return h$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(V,M=Oq(W.bytesLen)){let z=U.decode(V),K=W.decode(M),R=Q.map((A,T)=>A.encapsulate(z[T],K[T])),N=R.map((A)=>A.sharedSecret),w=R.map((A)=>A.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return k$(N,w),j},decapsulate(V,M){let z=X.decode(V),{publicKey:K,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(K,z,N)}}}function VO($,q,J,G,Q){return k0(G),k0(Q),u9(32,32,VW(G),(Y,X,U)=>Q(v$(U[0],U[1],X[1],Y[1],jJ($))),q,J)}var fd=VO("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",dQ,WW(e7,!0),Dq,K8),kd=VO("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",WO,WW(u1,!0),Dq,K8);function jP($,q,J,G,Q){return k0(G),k0(Q),u9(32,32,VW(G),(Y,X,U)=>{let W=v$(U[0],U[1],X[0],Y[0],X[1],Y[1],jJ($)),V=32,M=v$(jJ("hybrid_prk"),W),z=l1(Q,M),K=v$(wG(32,2),jJ("shared_secret"),jJ("")),R=r1(Q,z,K,32);return k$(z,K,M,W),R},q,J)}var MO=WW(h1),md=jP("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",dQ,MO,Dq,f9),AP=(()=>u9(32,32,VW(Dq),($,q,J)=>K8(v$(J[0],J[1],q[1],$[1],jJ("\\.//^\\"))),dQ,MO))();function ZP($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Oq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Oq(G)){Q$(U,G,"rand");let{secretKey:W}=Y(U),V=this.decapsulate(X,W),M=$.getPublicKey(W,!1);return k$(W),{sharedSecret:V,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function BP($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=ZP(J,Q,Y,G),U=64,W=U+G;return u9(32,32,(V)=>{Q$(V,32);let M=Dq(V,{dkLen:W}),z=M.subarray(0,U),K=M.subarray(U,W);return v$(z,K)},(V,M,z)=>K8(v$(z[0],z[1],M[1],V[1],jJ($))),q,X)}var SP=(()=>BP("MLKEM768-P256",dQ,e7,128))();var MW=AP,zO=SP;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,q,J)=>r$($,q,J),RW=F$,SG=R9,s$=(...$)=>K7(...$),TG=($)=>AQ($),EG=M7,IG=($)=>Fq($),l9=BigInt(0),zW=BigInt(1);function uq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function r9($){if(typeof $==="bigint"){if(!p9($))throw RangeError("positive bigint expected, got "+$)}else RW($);return $}function Hq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function cQ($){let q=r9($).toString(16);return q.length&1?"0"+q:q}function RO($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?l9:BigInt("0x"+$)}function N8($){return RO(R9($))}function $q($){return RO(R9(TJ(r$($)).reverse()))}function d9($,q){if(F$(q),q===0)throw RangeError("zero length");$=r9($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return AQ(J.padStart(q*2,"0"))}function nQ($,q){return d9($,q).reverse()}function KO($,q){if($=S$($),q=S$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function TJ($){return Uint8Array.from(S$($))}function i9($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var p9=($)=>typeof $==="bigint"&&l9<=$;function TP($,q,J){return p9($)&&p9(q)&&p9(J)&&q<=$&&$<J}function pq($,q,J,G){if(!TP(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function CG($){if($<l9)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>l9;$>>=zW,q+=1);return q}var oQ=($)=>(zW<<BigInt($))-zW;function DO($,q,J){if(F$($,"hashLen"),F$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,s$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return s$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while((T=A(N()))===void 0)R();return z(),T}}function x0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}var KW=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var t$=BigInt(0),P$=BigInt(1),w8=BigInt(2),wO=BigInt(3),jO=BigInt(4),AO=BigInt(5),EP=BigInt(7),ZO=BigInt(8),IP=BigInt(9),BO=BigInt(16);function T$($,q){if(q<=t$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=t$?J:q+J}function h0($,q,J){if(q<t$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >t$)G*=G,G%=J;return G}function OO($,q){if($===t$)throw Error("invert: expected non-zero number");if(q<=t$)throw Error("invert: expected positive modulus, got "+q);let J=T$($,q),G=q,Q=t$,Y=P$,X=P$,U=t$;while(J!==t$){let V=G/J,M=G-J*V,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==P$)throw Error("invert: does not exist");return T$(Q,q)}function DW($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function SO($,q){let J=$,G=(J.ORDER+P$)/jO,Q=J.pow(q,G);return DW(J,Q,q),Q}function CP($,q){let J=$,G=(J.ORDER-AO)/ZO,Q=J.mul(q,w8),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,w8),Y),W=J.mul(X,J.sub(U,J.ONE));return DW(J,W,q),W}function PP($){let q=c9($),J=TO($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+EP)/BO;return(U,W)=>{let V=U,M=V.pow(W,X),z=V.mul(M,G),K=V.mul(M,Q),R=V.mul(M,Y),N=V.eql(V.sqr(z),W),w=V.eql(V.sqr(K),W);M=V.cmov(M,z,N),z=V.cmov(R,K,w);let j=V.eql(V.sqr(z),W),A=V.cmov(M,z,j);return DW(V,A,W),A}}function TO($){if($<wO)throw Error("sqrt is not defined for small field");let q=$-P$,J=0;while(q%w8===t$)q/=w8,J++;let G=w8,Q=c9($);while(HO(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return SO;let Y=Q.pow(G,q),X=(q+P$)/w8;return function(W,V){let M=W;if(M.is0(V))return V;if(HO(M,V)!==1)throw Error("Cannot find square root");let z=J,K=M.mul(M.ONE,Y),R=M.pow(V,q),N=M.pow(V,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let A=P$<<BigInt(z-w-1),T=M.pow(K,A);z=w,K=M.sqr(T),R=M.mul(R,K),N=M.mul(N,T)}return N}}function LP($){if($%jO===wO)return SO;if($%ZO===AO)return CP;if($%BO===IP)return PP($);return TO($)}var lq=($,q)=>(T$($,q)&P$)===P$,FP=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function OW($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=FP.reduce((G,Q)=>{return G[Q]="function",G},q);if(x0($,J),Hq($.BYTES,"BYTES"),Hq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=P$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function gP($,q,J){let G=$;if(J<t$)throw Error("invalid exponent, negatives unsupported");if(J===t$)return G.ONE;if(J===P$)return q;let Q=G.ONE,Y=q;while(J>t$){if(J&P$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=P$}return Q}function aQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),X=G.inv(Y);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},X),Q}function HO($,q){let J=$,G=(J.ORDER-P$)/w8,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function _P($,q){if(q!==void 0)RW(q);if($<=t$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=CG($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var NO=new WeakMap;class HW{ORDER;BITS;BYTES;isLE;ZERO=t$;ONE=P$;_lengths;_mod;constructor($,q={}){if($<=P$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=_P($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return t$<=$&&$<this.ORDER}is0($){return $===t$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&P$)===P$}neg($){return T$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T$($*$,this.ORDER)}add($,q){return T$($+q,this.ORDER)}sub($,q){return T$($-q,this.ORDER)}mul($,q){return T$($*q,this.ORDER)}pow($,q){return gP(this,$,q)}div($,q){return T$($*OO(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return OO($,this.ORDER)}sqrt($){let q=NO.get(this);if(!q)NO.set(this,q=LP(this.ORDER));return q(this,$)}toBytes($){return this.isLE?nQ($,this.BYTES):d9($,this.BYTES)}fromBytes($,q=!1){S$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?$q($):N8($);if(X)U=T$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return aQ(this,$)}cmov($,q,J){return uq(J,"condition"),J?q:$}}Object.freeze(HW.prototype);function c9($,q={}){return new HW($,q)}function EO($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=P$)throw Error("field order must be greater than 1");let q=CG($-P$);return Math.ceil(q/8)}function NW($){let q=EO($);return q+Math.ceil(q/2)}function IO($,q,J=!1){S$($);let G=$.length,Q=EO(q),Y=Math.max(NW(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?$q($):N8($),U=T$(X,q-P$)+P$;return J?nQ(U,Q):d9(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PG=BigInt(0),j8=BigInt(1);function sQ($,q){let J=q.negate();return $?J:q}function A8($,q){let J=aQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function FO($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function wW($,q){FO($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=oQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function CO($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=j8;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var jW=new WeakMap,gO=new WeakMap;function AW($){return gO.get($)||1}function PO($){if($!==PG)throw Error("invalid wNAF")}class tQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>PG){if(q&j8)J=J.add(G);G=G.double(),q>>=j8}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=wW(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=wW($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=CO(J,X,Y);if(J=U,V)Q=Q.add(sQ(z,q[K]));else G=G.add(sQ(M,q[W]))}return PO(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=wW($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===PG)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=CO(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return PO(J),G}getPrecomputes($,q,J){let G=jW.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);jW.set(q,G)}}return G}cached($,q,J){let G=AW($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=AW($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){FO(q,this.bits),gO.set($,q),jW.delete($)}hasCache($){return AW($)!==1}}function _O($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>PG||G>PG){if(J&j8)Y=Y.add(Q);if(G&j8)X=X.add(Q);Q=Q.double(),J>>=j8,G>>=j8}return{p1:Y,p2:X}}function LO($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return OW(q),q}else return c9($,{isLE:J})}function n9($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>PG))throw Error(`CURVE.${W} must be positive bigint`)}let Q=LO(q.p,J.Fp,G),Y=LO(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function eQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function $Y($,q){if(Hq($),Hq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function vP($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function bP($){if(!EG($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?i9($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function ZW($,q,J,G){if(S$($),Hq(J),q=bP(q),q.length>255)q=G(s$(i9("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=s$(q,$Y(q.length,1)),W=new Uint8Array(Y),V=$Y(J,2),M=Array(X),z=G(s$(W,$,V,$Y(0,1),U));M[0]=G(s$(z,$Y(1,1),U));for(let R=1;R<X;R++){let N=[vP(z,M[R-1]),$Y(R+1,1),U];M[R]=G(s$(...N))}return s$(...M).slice(0,J)}var vO="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bO=($,q)=>($+($>=0?q:-q)/fO)/q;function yP($,q,J){pq("scalar",$,Nq,J);let[[G,Q],[Y,X]]=q,U=bO(X*$,J),W=bO(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<Nq,K=M<Nq;if(z)V=-V;if(K)M=-M;let R=oQ(Math.ceil(CG(J)/2))+EJ;if(V<Nq||V>=R||M<Nq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:V,k2neg:K,k2:M}}function SW($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function BW($,q){x0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(uq(J.lowS,"lowS"),uq(J.prehash,"prehash"),J.format!==void 0)SW(J.format);return J}class yO extends Error{constructor($=""){super($)}}var qq={Err:yO,_tlv:{encode:($,q)=>{let{Err:J}=qq;if(Hq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=cQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?cQ(Q.length/2|128):"";return cQ($)+Y+Q+q},decode($,q){let{Err:J}=qq;q=S$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=qq;if(r9($),$<Nq)throw new q("integer: negative integers are not allowed");let J=cQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=qq;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return N8($)}},toSig($){let{Err:q,_int:J,_tlv:G}=qq,Q=S$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=qq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(qq._tlv);Object.freeze(qq._int);Object.freeze(qq);var Nq=BigInt(0),EJ=BigInt(1),fO=BigInt(2),o9=BigInt(3),fP=BigInt(4);function kO($,q={}){let J=n9("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;x0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=xO(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function K(v,I,E){if(V&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(uq(E,"isCompressed"),E){z();let g=!G.isOdd(S);return s$(mO(g),P)}else return s$(Uint8Array.of(4),P,G.toBytes(S))}function R(v){S$(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:E}=M,Z=v.length,S=v[0],P=v.subarray(1);if(V&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let H=G.isOdd(b);if((S&1)===1!==H)b=G.neg(b);return{x:g,y:b}}else if(Z===E&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${E}`)}let N=q.toBytes===void 0?K:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(v){let I=G.sqr(v),E=G.mul(I,v);return G.add(G.add(E,G.mul(v,Y.a)),Y.b)}function A(v,I){let E=G.sqr(I),Z=j(v);return G.eql(E,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,o9),fP),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function k(v,I,E=!1){if(!G.isValid(I)||E&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof f))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return yP(v,W.basises,Q.ORDER)}function x(v,I,E,Z,S){return E=new f(G.mul(E.X,v),E.Y,E.Z),I=sQ(Z,I),E=sQ(S,E),I.add(E)}class f{static BASE=new f(Y.Gx,Y.Gy,G.ONE);static ZERO=new f(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,E){this.X=k("x",v),this.Y=k("y",I,!0),this.Z=k("z",E),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:E}=v||{};if(!v||!G.isValid(I)||!G.isValid(E))throw Error("invalid affine point");if(v instanceof f)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(E))return f.ZERO;return new f(I,E,G.ONE)}static fromBytes(v){let I=f.fromAffine(w(S$(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return f.fromBytes(TG(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(o9);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:E}=v.toAffine();if(!G.isValid(I)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!A(I,E))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(E,g),G.mul(P,Z));return L&&b}negate(){return new f(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,E=G.mul(I,o9),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,H=G.mul(Z,Z),m=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(E,d),L=G.add(g,L),g=G.sub(m,L),L=G.add(m,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(E,b),d=G.mul(v,d),B=G.sub(H,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(H,H),H=G.add(b,H),H=G.add(H,d),H=G.mul(H,B),L=G.add(L,H),d=G.mul(S,P),d=G.add(d,d),H=G.mul(d,B),g=G.sub(g,H),b=G.mul(d,m),b=G.add(b,b),b=G.add(b,b),new f(g,L,b)}add(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=Y.a,d=G.mul(Y.b,o9),B=G.mul(I,S),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.add(I,E),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,a),Y$=G.sub(Y$,G$),G$=G.add(I,Z);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(E,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q$),t=G.sub(t,L),H=G.mul(m,G$),L=G.mul(d,q$),H=G.add(L,H),L=G.sub(a,H),H=G.add(a,H),b=G.mul(L,H),a=G.add(B,B),a=G.add(a,B),q$=G.mul(m,q$),G$=G.mul(d,G$),a=G.add(a,q$),q$=G.sub(B,q$),q$=G.mul(m,q$),G$=G.add(G$,q$),B=G.mul(a,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,a),H=G.mul(t,H),H=G.add(H,B),new f(L,b,H)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(f.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let E,Z,S=(P)=>l.cached(this,P,(g)=>A8(f,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:H,f:m}=S(g),{p:d,f:B}=S(b);Z=m.add(B),E=x(I.beta,H,d,P,L)}else{let{p:P,f:g}=S(v);E=P,Z=g}return A8(f,[E,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,E=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Nq||E.is0())return f.ZERO;if(Z===EJ)return E;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:H}=_O(f,E,P,L);return x(I.beta,b,H,S,g)}else return l.unsafe(E,Z)}toAffine(v){let I=this,E=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===EJ)return!0;if(v)return v(f,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===EJ)return this;if(v)return v(f,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===EJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return uq(v,"isCompressed"),this.assertValidity(),N(f,this,v)}toHex(v=!0){return SG(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new tQ(f,q.endo?Math.ceil(y/2):y);if(y>=8)f.BASE.precompute(8);return Object.freeze(f.prototype),Object.freeze(f),f}function mO($){return Uint8Array.of($?2:3)}function xO($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function kP($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?IG:q.randomBytes,Q=Object.assign(xO($.Fp,J),{seed:Math.max(NW(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,IO(S$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,A=J._lengths;if(!EG(R))return;let T=S$(R,void 0,"key").length,_=T===w||T===j,k=T===N||!!A?.includes(T);if(_&&k)return;return _}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=eQ(U,W);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function hO($,q,J={}){let G=q;Lq(G),x0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?IG:J.randomBytes,Y=J.hmac===void 0?(S,P)=>gq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N}=kP($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=W*fO+EJ<X.ORDER;function A(S){let P=W>>EJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(S,P){SW(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return S$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){k(S,P);let g;if(P==="der"){let{r:m,s:d}=qq.toSig(S$(S));return new u(m,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),H=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(H),g)}static fromHex(S,P){return this.fromBytes(TG(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+W:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let H=X.toBytes(b),m=$.fromBytes(s$(mO((L&1)===0),H)),d=U.inv(b),B=x(S$(S,void 0,"msgHash")),a=U.create(-B*d),q$=U.create(g*d),Y$=$.BASE.multiplyUnsafe(a).add(m.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return A(this.s)}toBytes(S=w.format){if(SW(S),S==="der")return TG(qq.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),s$(Uint8Array.of(this.assertRecovery()),L,b);return s$(L,b)}toHex(S){return SG(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=N8(P),L=P.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,f=oQ(V);function y(S){return pq("num < 2^"+V,S,Nq,f),U.toBytes(S)}function l(S,P){return S$(S,void 0,"message"),P?S$(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:H}=BW(g,w);S=l(S,b);let m=x(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(m)];if(H!=null&&H!==!1){let G$=H===!0?Q(N.secretKey):H;B.push(S$(G$,void 0,"extraEntropy"))}let a=s$(...B),q$=m;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let H$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),I$=U.create(A$.x);if(I$===Nq)return;let m$=U.create(H$*U.create(q$+I$*d));if(m$===Nq)return;let R0=(A$.x===I$?0:2)|Number(A$.y&EJ),Jq=m$;if(L&&A(m$))Jq=U.neg(m$),R0^=1;return new u(I$,Jq,j?void 0:R0)}return{seed:a,k2sig:Y$}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return DO(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function E(S,P,g,L={}){let{lowS:b,prehash:H,format:m}=BW(L,w);if(g=S$(g,void 0,"publicKey"),P=l(P,H),!EG(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}k(S,m);try{let d=u.fromBytes(S,m),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q$}=d,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),H$=U.create(a*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(H$));if(A$.is0())return!1;return U.create(A$.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=BW(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N,Point:$,sign:I,verify:E,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mP=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var xP=kO(mP),LG=hO(xP,c$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IJ=BigInt(0),E0=BigInt(1),TW=BigInt(2),hP=BigInt(8);function uP($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function uO($,q={}){let J=q,G=n9("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;x0(J,{},{uvRatio:"function"});let W=TW<<BigInt(Y.BYTES*8)-E0,V=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(A){return{isValid:!1,value:IJ}}}:J.uvRatio;if(!uP(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,A=!1){let T=A?E0:IJ;return pq("coordinate "+w,j,T,W),j}function K(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,E0,V(X.Gx*X.Gy));static ZERO=new R(IJ,E0,E0,IJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,A,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:A}=w||{};return z("x",j),z("y",A),new R(j,A,E0,V(j*A))}static fromBytes(w,j=!1){let A=Q.BYTES,{a:T,d:_}=X;w=TJ(S$(w,A,"point")),uq(j,"zip215");let k=TJ(w),u=w[A-1];k[A-1]=u&-129;let F=$q(k),x=j?W:Q.ORDER;pq("point.y",F,IJ,x);let f=V(F*F),y=V(f-E0),l=V(_*f-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let E=(I&E0)===E0,Z=(u&128)!==0;if(!j&&I===IJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==E)I=V(-I);return R.fromAffine({x:I,y:F})}static fromHex(w,j=!1){return R.fromBytes(TG(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(TW);return this}assertValidity(){let w=this,{a:j,d:A}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:k,T:u}=w,F=V(T*T),x=V(_*_),f=V(k*k),y=V(f*f),l=V(F*j),v=V(f*V(l+x)),I=V(y+V(A*V(F*x)));if(v!==I)throw Error("bad point: equation left != right (1)");let E=V(T*_),Z=V(k*u);if(E!==Z)throw Error("bad point: equation left != right (2)")}equals(w){K(w);let{X:j,Y:A,Z:T}=this,{X:_,Y:k,Z:u}=w,F=V(j*u),x=V(_*T),f=V(A*u),y=V(k*T);return F===x&&f===y}is0(){return this.equals(R.ZERO)}negate(){return new R(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:w}=X,{X:j,Y:A,Z:T}=this,_=V(j*j),k=V(A*A),u=V(TW*V(T*T)),F=V(w*_),x=j+A,f=V(V(x*x)-_-k),y=F+k,l=y-u,v=F-k,I=V(f*l),E=V(y*v),Z=V(f*v),S=V(l*y);return new R(I,E,S,Z)}add(w){K(w);let{a:j,d:A}=X,{X:T,Y:_,Z:k,T:u}=this,{X:F,Y:x,Z:f,T:y}=w,l=V(T*F),v=V(_*x),I=V(u*A*y),E=V(k*f),Z=V((T+_)*(F+x)-l-v),S=E-I,P=E+I,g=V(v-j*l),L=V(Z*S),b=V(P*g),H=V(Z*g),m=V(S*P);return new R(L,b,m,H)}subtract(w){return K(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:A}=N.cached(this,w,(T)=>A8(R,T));return A8(R,[j,A])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===IJ)return R.ZERO;if(this.is0()||w===E0)return this;return N.unsafe(this,w,(j)=>A8(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,A=w,{X:T,Y:_,Z:k}=j,u=j.is0();if(A==null)A=u?hP:Q.inv(k);let F=V(T*A),x=V(_*A),f=Q.mul(k,A);if(u)return{x:IJ,y:E0};if(f!==E0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===E0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),A=Q.toBytes(j);return A[A.length-1]|=w&E0?128:0,A}toHex(){return SG(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new tQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class EW{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){KW()}static fromHex($){KW()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return SG(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qY=BigInt(0),FG=BigInt(1),a9=BigInt(2);function pP($){return x0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function pO($){let q=pP($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X===void 0?IG:X,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?a9**BigInt(254):a9**BigInt(447),N=U?BigInt(8)*a9**BigInt(251)-FG:BigInt(4)*a9**BigInt(445)-FG,w=R+N+FG,j=(Z)=>T$(Z,J),A=T(z);function T(Z){return nQ(j(Z),M)}function _(Z){let S=TJ(S$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j($q(S))}function k(Z){return $q(Q(TJ(S$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===qY)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){pq("u",Z,qY,J),pq("scalar",S,R,w);let P=S,g=Z,L=FG,b=qY,H=Z,m=FG,d=qY;for(let a=BigInt(V-1);a>=qY;a--){let q$=P>>a&FG;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),iq=R0+Jq,cq=R0-Jq;H=j(iq*iq),m=j(g*j(cq*cq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?W(M):Z,S$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze(v),Object.freeze(E),Object.freeze({keygen:eQ(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lP=BigInt(0),rq=BigInt(1),lO=BigInt(2),rP=BigInt(3),dP=BigInt(5),iP=BigInt(8),B8=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),LW=(()=>({p:B8,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:iP,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function iO($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=B8,U=$*$%Y*$%Y,W=h0(U,lO,Y)*U%Y,V=h0(W,rq,Y)*$%Y,M=h0(V,dP,Y)*V%Y,z=h0(M,q,Y)*M%Y,K=h0(z,J,Y)*z%Y,R=h0(K,G,Y)*K%Y,N=h0(R,Q,Y)*R%Y,w=h0(N,Q,Y)*R%Y,j=h0(w,q,Y)*M%Y;return{pow_p_5_8:h0(j,lO,Y)*$%Y,b2:U}}function cP($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var IW=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function FW($,q){let J=B8,G=T$(q*q*q,J),Q=T$(G*G*q,J),Y=iO($*Q).pow_p_5_8,X=T$($*G*Y,J),U=T$(q*X*X,J),W=X,V=T$(X*IW,J),M=U===$,z=U===T$(-$,J),K=U===T$(-$*IW,J);if(M)X=W;if(z||K)X=V;if(lq(X,J))X=T$(-X,J);return{isValid:M||z,value:X}}var Z8=uO(LW,{uvRatio:FW}),CJ=(()=>Z8.Fp)(),cO=(()=>Z8.Fn)();var s9=(()=>{let $=B8;return pO({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=iO(q);return T$(h0(J,rP,$)*G,$)},adjustScalarBytes:cP})})();var CW=IW,nP=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),oP=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),aP=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),sP=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),rO=($)=>FW(rq,$),tP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),PW=($)=>CJ.create($q($)&tP);function dO($){let{d:q}=LW,J=B8,G=(A)=>CJ.create(A),Q=G(CW*$*$),Y=G((Q+rq)*aP),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:W,value:V}=FW(Y,U),M=G(V*$);if(!lq(M,J))M=G(-M);if(!W)V=M;if(!W)X=Q;let z=G(X*(Q-rq)*sP-U),K=V*V,R=G((V+V)*U),N=G(z*nP),w=G(rq-K),j=G(rq+K);return new Z8(G(R*j),G(w*N),G(N*j),G(R*w))}class j0 extends EW{static BASE=(()=>new j0(Z8.BASE))();static ZERO=(()=>new j0(Z8.ZERO))();static Fp=(()=>CJ)();static Fn=(()=>cO)();constructor($){super($)}static fromAffine($){return new j0(Z8.fromAffine($))}assertSame($){if(!($ instanceof j0))throw Error("RistrettoPoint expected")}init($){return new j0($)}static fromBytes($){r$($,32);let{a:q,d:J}=LW,G=B8,Q=(_)=>CJ.create(_),Y=PW($);if(!KO(CJ.toBytes(Y),$)||lq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(rq+q*X),W=Q(rq-q*X),V=Q(U*U),M=Q(W*W),z=Q(q*J*V-M),{isValid:K,value:R}=rO(Q(z*M)),N=Q(R*W),w=Q(R*N*z),j=Q((Y+Y)*N);if(lq(j,G))j=Q(-j);let A=Q(U*w),T=Q(j*A);if(!K||lq(T,G)||A===lP)throw Error("invalid ristretto255 encoding 2");return new j0(new Z8(j,A,rq,T))}static fromHex($){return j0.fromBytes(AQ($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=B8,Y=(w)=>CJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),W=Y(U*U),{value:V}=rO(Y(X*W)),M=Y(V*X),z=Y(V*U),K=Y(M*z*G),R;if(lq(G*K,Q)){let w=Y(q*CW),j=Y($*CW);$=w,q=j,R=Y(M*oP)}else R=z;if(lq($*K,Q))q=Y(-q);let N=Y((J-q)*R);if(lq(N,Q))N=Y(-N);return CJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(W)=>CJ.create(W),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(j0.ZERO)}}Object.freeze(j0.BASE);Object.freeze(j0.ZERO);Object.freeze(j0.prototype);Object.freeze(j0);var eP=Object.freeze({Point:j0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=ZW($,J,64,H9);return eP.deriveToCurve(G)},hashToScalar($,q={DST:vO}){let J=ZW($,q.DST,64,H9);return cO.create($q(J))},deriveToCurve($){r$($,64);let q=PW($.subarray(0,32)),J=dO(q),G=PW($.subarray(32,64)),Q=dO(G);return new j0(J.add(Q))}});var nO=!1,$L=!1;async function oO($,q){if($L)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function _W($,q){return await oO(async()=>{let J=gW($)?$:await JL($),G=await crypto.subtle.importKey("raw",GL(q),{name:"X25519"},nO,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(gW($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return s9.scalarMult($,q)})}async function vW($){return await oO(async()=>{return _W($,s9.GuBytes)},()=>{if(gW($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return s9.scalarMultBase($)})}var qL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function JL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...qL,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},nO,["deriveBits"])}function gW($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function GL($){return $}class aO{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),YL(JY($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=JY($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:JY(this.transcript)}}}function YL($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function JY($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function t9($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function sO($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function tO($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class dq{args;body;constructor($,q){this.args=$,this.body=q}}function bW($){let q=[];q.push(`age-encryption.org/v1
+`)}async function $D($,q){try{return await qD($,q,{flag:"wx"}),!0}catch(J){if(gI(J))return!1;throw J}}async function FI($){try{return await BI($),!0}catch{return!1}}function gI($){return JD($,"EEXIST")}function _I($){return JD($,"ENOENT")}function JD($,q){return typeof $==="object"&&$!==null&&"code"in $&&$.code===q}function vI($){return $.split("-").filter((q)=>q.length>0).map((q)=>`${q[0]?.toUpperCase()??""}${q.slice(1)}`).join(" ")}async function X7($,q,J,G={}){let{registry:Q,users:Y}=await sK($,q);await VG($,Q,Y,J,G)}async function U7($,q,J={}){let{registry:G,users:Q}=await tK($);await VG($,G,Q,q,J)}import{parseArgs as bI}from"util";var yI={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function W7($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function V7($,q){let J=$[q];return typeof J==="string"?J:void 0}function fI($){let{values:q,positionals:J}=bI({args:$,options:yI,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:W7(q,"help"),version:W7(q,"version"),dryRun:W7(q,"dry-run"),pushTo:V7(q,"push-to"),cohort:V7(q,"cohort"),anchorId:V7(q,"anchor-id")}}}import{existsSync as HL,mkdirSync as NL,readFileSync as iW,writeFileSync as cW}from"fs";import{dirname as wL,join as QH}from"path";function M7($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function F$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function r$($,q,J=""){let G=M7($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Lq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(F$($.outputLen),F$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function zG($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function M9($,q){r$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function z9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function H0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function RG($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function o0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var kI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function mI($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function xI($){for(let q=0;q<$.length;q++)$[q]=mI($[q]);return $}var z7=kI?($)=>$:xI,QD=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),hI=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function R9($){if(r$($),QD)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=hI[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function GD($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function AQ($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(QD)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=GD($.charCodeAt(Y)),U=GD($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function uI($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function R7($,q=""){if(typeof $==="string")return uI($);return r$($,void 0,q)}function K7(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];r$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function K9($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function D7($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Fq($=32){F$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var O7=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class H7{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Lq($),r$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),H0(G)}update($){return zG(this),this.iHash.update($),this}digestInto($){zG(this),M9($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var gq=(()=>{let $=(q,J,G)=>new H7(q,J).update(G).digest();return $.create=(q,J)=>new H7(q,J),$})();function ZQ($,q,J){if(Lq($),J===void 0)J=new Uint8Array($.outputLen);return gq($,J,q)}var N7=Uint8Array.of(0),YD=Uint8Array.of();function w7($,q,J,G=32){Lq($),F$(G,"length"),r$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=YD;else r$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=gq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)N7[0]=M+1,W.update(M===0?YD:V).update(J).update(N7).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),H0(V,N7),X.slice(0,G)}var BQ=($,q,J,G,Q)=>w7($,ZQ($,q,J),G,Q);function XD($,q,J){return $&q^~$&J}function UD($,q,J){return $&q^$&J^q&J}class D9{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=RG(this.buffer)}update($){zG(this),r$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=RG($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){zG(this),M9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,H0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=RG($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var _q=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),vq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),d$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var O9=BigInt(4294967295),WD=BigInt(32);function pI($,q=!1){if(q)return{h:Number($&O9),l:Number($>>WD&O9)};return{h:Number($>>WD&O9)|0,l:Number($&O9)|0}}function VD($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=pI($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var j7=($,q,J)=>$>>>J,A7=($,q,J)=>$<<32-J|q>>>J,G8=($,q,J)=>$>>>J|q<<32-J,Q8=($,q,J)=>$<<32-J|q>>>J,SQ=($,q,J)=>$<<64-J|q>>>J-32,TQ=($,q,J)=>$>>>J-32|q<<64-J;function zq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var MD=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),zD=($,q,J,G)=>q+J+G+($/4294967296|0)|0,RD=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),KD=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,DD=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),OD=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var rI=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),MJ=new Uint32Array(64);class Z7 extends D9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)MJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=MJ[M-15],K=MJ[M-2],R=o0(z,7)^o0(z,18)^z>>>3,N=o0(K,17)^o0(K,19)^K>>>10;MJ[M]=N+MJ[M-7]+R+MJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=o0(X,6)^o0(X,11)^o0(X,25),K=V+z+XD(X,U,W)+rI[M]+MJ[M]|0,N=(o0(J,2)^o0(J,13)^o0(J,22))+UD(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){H0(MJ)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),H0(this.buffer)}}class HD extends Z7{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(32)}}class dI extends Z7{A=vq[0]|0;B=vq[1]|0;C=vq[2]|0;D=vq[3]|0;E=vq[4]|0;F=vq[5]|0;G=vq[6]|0;H=vq[7]|0;constructor(){super(28)}}var ND=(()=>VD(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),iI=(()=>ND[0])(),cI=(()=>ND[1])(),zJ=new Uint32Array(80),RJ=new Uint32Array(80);class EQ extends D9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)zJ[T]=$.getUint32(q),RJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=zJ[T-15]|0,k=RJ[T-15]|0,u=G8(_,k,1)^G8(_,k,8)^j7(_,k,7),F=Q8(_,k,1)^Q8(_,k,8)^A7(_,k,7),x=zJ[T-2]|0,f=RJ[T-2]|0,y=G8(x,f,19)^SQ(x,f,61)^j7(x,f,6),l=Q8(x,f,19)^TQ(x,f,61)^A7(x,f,6),v=RD(F,l,RJ[T-7],RJ[T-16]),I=KD(v,u,y,zJ[T-7],zJ[T-16]);zJ[T]=I|0,RJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=G8(M,z,14)^G8(M,z,18)^SQ(M,z,41),k=Q8(M,z,14)^Q8(M,z,18)^TQ(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=DD(A,k,F,cI[T],RJ[T]),f=OD(x,j,_,u,iI[T],zJ[T]),y=x|0,l=G8(J,G,28)^SQ(J,G,34)^SQ(J,G,39),v=Q8(J,G,28)^TQ(J,G,34)^TQ(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=zq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=MD(y,v,E);J=zD(Z,f,l,I),G=Z|0}({h:J,l:G}=zq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=zq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=zq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=zq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=zq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=zq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=zq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=zq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){H0(zJ,RJ)}destroy(){this.destroyed=!0,H0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class wD extends EQ{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class nI extends EQ{Ah=d$[0]|0;Al=d$[1]|0;Bh=d$[2]|0;Bl=d$[3]|0;Ch=d$[4]|0;Cl=d$[5]|0;Dh=d$[6]|0;Dl=d$[7]|0;Eh=d$[8]|0;El=d$[9]|0;Fh=d$[10]|0;Fl=d$[11]|0;Gh=d$[12]|0;Gl=d$[13]|0;Hh=d$[14]|0;Hl=d$[15]|0;constructor(){super(48)}}var X0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),U0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class oI extends EQ{Ah=X0[0]|0;Al=X0[1]|0;Bh=X0[2]|0;Bl=X0[3]|0;Ch=X0[4]|0;Cl=X0[5]|0;Dh=X0[6]|0;Dl=X0[7]|0;Eh=X0[8]|0;El=X0[9]|0;Fh=X0[10]|0;Fl=X0[11]|0;Gh=X0[12]|0;Gl=X0[13]|0;Hh=X0[14]|0;Hl=X0[15]|0;constructor(){super(28)}}class aI extends EQ{Ah=U0[0]|0;Al=U0[1]|0;Bh=U0[2]|0;Bl=U0[3]|0;Ch=U0[4]|0;Cl=U0[5]|0;Dh=U0[6]|0;Dl=U0[7]|0;Eh=U0[8]|0;El=U0[9]|0;Fh=U0[10]|0;Fl=U0[11]|0;Gh=U0[12]|0;Gl=U0[13]|0;Hh=U0[14]|0;Hl=U0[15]|0;constructor(){super(32)}}var c$=D7(()=>new HD,O7(1));var H9=D7(()=>new wD,O7(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Z9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function T7($){if(!Z9($))throw Error("Uint8Array expected")}function SD($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function TD($){if(typeof $!=="function")throw Error("function expected");return!0}function KJ($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function CQ($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function w9($){if(!Array.isArray($))throw Error("array expected")}function j9($,q){if(!SD(!0,q))throw Error(`${$}: array of strings expected`)}function E7($,q){if(!SD(!1,q))throw Error(`${$}: array of numbers expected`)}function g0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function _0($){let q=typeof $==="string"?$.split(""):$,J=q.length;j9("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return w9(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return w9(Q),Q.map((Y)=>{KJ("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function v0($=""){return KJ("join",$),{encode:(q)=>{return j9("join.decode",q),q.join($)},decode:(q)=>{return KJ("join.decode",q),q.split($)}}}function B9($,q="="){return CQ($),KJ("padding",q),{encode(J){j9("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){j9("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function ED($){return TD($),{encode:(q)=>q,decode:(q)=>$(q)}}function jD($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(w9($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(CQ(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,W=!0;for(let V=G;V<X;V++){let M=Y[V],z=q*U,K=z+M;if(!Number.isSafeInteger(K)||z/q!==U||K-M!==z)throw Error("convertRadix: carry overflow");let R=K/J;U=K%J;let N=Math.floor(R);if(Y[V]=N,!Number.isSafeInteger(N)||N*J+U!==K)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var ID=($,q)=>q===0?$:ID(q,$%q),A9=($,q)=>$+(q-ID($,q)),N9=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function B7($,q,J,G){if(w9($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(A9(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${A9(q,J)}`);let Q=0,Y=0,X=N9[q],U=N9[J]-1,W=[];for(let V of $){if(CQ(V),V>=X)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)W.push((Q>>Y-J&U)>>>0);let M=N9[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)W.push(Q>>>0);return W}function sI($){CQ($);let q=256;return{encode:(J)=>{if(!Z9(J))throw Error("radix.encode input should be Uint8Array");return jD(Array.from(J),q,$)},decode:(J)=>{return E7("radix.decode",J),Uint8Array.from(jD(J,$,q))}}}function f0($,q=!1){if(CQ($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(A9(8,$)>32||A9($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!Z9(J))throw Error("radix2.encode input should be Uint8Array");return B7(Array.from(J),8,$,!q)},decode:(J)=>{return E7("radix2.decode",J),Uint8Array.from(B7(J,$,8,q))}}}function AD($){return TD($),function(...q){try{return $.apply(null,q)}catch(J){}}}var ul=g0(f0(4),_0("0123456789ABCDEF"),v0("")),pl=g0(f0(5),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),B9(5),v0("")),ll=g0(f0(5),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),v0("")),rl=g0(f0(5),_0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),B9(5),v0("")),dl=g0(f0(5),_0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),v0("")),il=g0(f0(5),_0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),v0(""),ED(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),CD=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),PD=($,q)=>{KJ("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},I7=CD?{encode($){return T7($),$.toBase64()},decode($){return PD($,!1)}}:g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),B9(6),v0("")),a0=g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),v0("")),cl=CD?{encode($){return T7($),$.toBase64({alphabet:"base64url"})},decode($){return PD($,!0)}}:g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),B9(6),v0("")),nl=g0(f0(6),_0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),v0("")),C7=($)=>g0(sI(58),_0($),v0("")),ol=C7("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),al=C7("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),sl=C7("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var S7=g0(_0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),v0("")),ZD=[996825010,642813549,513874426,1027748829,705979059];function IQ($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<ZD.length;G++)if((q>>G&1)===1)J^=ZD[G];return J}function BD($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=IQ(Q)^X>>5}Q=IQ(Q);for(let Y=0;Y<G;Y++)Q=IQ(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=IQ(Q)^Y;for(let Y=0;Y<6;Y++)Q=IQ(Q);return Q^=J,S7.encode(B7([Q%N9[30]],30,5,!1))}function LD($){let q=$==="bech32"?1:734539939,J=f0(5),G=J.decode,Q=J.encode,Y=AD(G);function X(z,K,R=90){if(KJ("bech32.encode prefix",z),Z9(K))K=Array.from(K);E7("bech32.encode",K);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+K.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),A=BD(j,K,q);return`${j}1${S7.encode(K)}${A}`}function U(z,K=90){KJ("bech32.decode input",z);let R=z.length;if(R<8||K!==!1&&R>K)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${K})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),A=N.slice(w+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=S7.decode(A).slice(0,-6),_=BD(j,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:j,words:T}}let W=AD(U);function V(z){let{prefix:K,words:R}=U(z,!1);return{prefix:K,words:R,bytes:G(R)}}function M(z,K){return X(z,Q(K))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var s0=LD("bech32"),tl=LD("bech32m");var tI=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),eI={encode($){return T7($),$.toHex()},decode($){return KJ("hex",$),Uint8Array.fromHex($)}},el=tI?eI:g0(f0(4),_0("0123456789abcdef"),v0(""),ED(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function qC($,q,J,G){Lq($);let Q=K9({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(F$(Y,"c"),F$(X,"dkLen"),F$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let W=R7(q,"password"),V=R7(J,"salt"),M=new Uint8Array(X),z=gq.create($,W),K=z._cloneInto().update(V);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:K}}function JC($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return H0(Q),J}function P7($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:W}=qC($,q,J,G),V,M=new Uint8Array(4),z=RG(M),K=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(V=W._cloneInto(V)).update(M).digestInto(K),w.set(K.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(V).update(K).digestInto(K);for(let A=0;A<w.length;A++)w[A]^=K[A]}}return JC(U,W,X,V,K)}function FD($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],K=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],k=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let d=0;d<8;d+=2)l^=N$(F+L|0,7),Z^=N$(l+F|0,9),L^=N$(Z+l|0,13),F^=N$(L+Z|0,18),S^=N$(v+x|0,7),b^=N$(S+v|0,9),x^=N$(b+S|0,13),v^=N$(x+b|0,18),H^=N$(P+I|0,7),f^=N$(H+P|0,9),I^=N$(f+H|0,13),P^=N$(I+f|0,18),y^=N$(m+g|0,7),E^=N$(y+m|0,9),g^=N$(E+y|0,13),m^=N$(g+E|0,18),x^=N$(F+y|0,7),f^=N$(x+F|0,9),y^=N$(f+x|0,13),F^=N$(y+f|0,18),I^=N$(v+l|0,7),E^=N$(I+v|0,9),l^=N$(E+I|0,13),v^=N$(l+E|0,18),g^=N$(P+S|0,7),Z^=N$(g+P|0,9),S^=N$(Z+g|0,13),P^=N$(S+Z|0,18),L^=N$(m+H|0,7),b^=N$(L+m|0,9),H^=N$(b+L|0,13),m^=N$(H+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=W+f|0,Q[Y++]=V+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=K+I|0,Q[Y++]=R+E|0,Q[Y++]=N+Z|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=k+H|0,Q[Y++]=u+m|0}function L7($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(FD(J,X,$,q,J,Y),U>0)X+=16;FD(J,Y,$,q+=16,J,X)}}function GC($,q,J){let G=K9({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:W,maxmem:V,onProgress:M}=G;if(F$(Q,"N"),F$(Y,"r"),F$(X,"p"),F$(U,"dkLen"),F$(W,"asyncTick"),F$(V,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,K=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let w=P7(c$,$,q,{c:1,dkLen:z*X}),j=z9(w),A=z9(new Uint8Array(z*Q)),T=z9(new Uint8Array(z)),_=()=>{};if(M){let k=2*Q*X,u=Math.max(Math.floor(k/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===k))M(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:K,V:A,B32:j,B:w,tmp:T,blockMixCb:_,asyncTick:W}}function QC($,q,J,G,Q){let Y=P7(c$,$,J,{c:1,dkLen:q});return H0(J,G,Q),Y}function gD($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V:W,B32:V,B:M,tmp:z,blockMixCb:K}=GC($,q,J);z7(V);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)W[w]=V[N+w];for(let w=0,j=0;w<G-1;w++)L7(W,j,W,j+=U,Q),K();L7(W,(G-1)*U,V,N,Q),K();for(let w=0;w<G;w++){let j=(V[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=V[N+A]^W[j*U+A];L7(z,0,V,N,Q),K()}}return z7(V),QC($,X,M,W,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function YC($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function S9($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function KG($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function f$($,q,J=""){let G=YC($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function F7($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function _D($,q,J=!1){f$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!DG($))throw Error("invalid output, must be aligned")}function Rq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function t0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function XC($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var Y8=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),UC=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var WC=($)=>{for(let q=0;q<$.length;q++)$[q]=UC($[q]);return $},bq=Y8?($)=>$:WC;function vD($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function bD($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function yD($,q,J){let G=q,Q=J||(()=>[]),Y=(U,W)=>G(W,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...W)=>G(U,...W),Y}var fD=($,q)=>{function J(G,...Q){if(f$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];f$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)f$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");f$(z,void 0,"output")}},W=!1;return{encrypt(M,z){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,f$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(f$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function PQ($,q,J=!0){if(q===void 0)return new Uint8Array($);if(f$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!DG(q))throw Error("invalid output, must be aligned");return q}function kD($,q,J){KG($),KG(q),S9(J);let G=new Uint8Array(16),Q=XC(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function DG($){return $.byteOffset%4===0}function OG($){return Uint8Array.from(f$($))}var xD=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),VC=(()=>bq(Rq(xD("expand 16-byte k"))))(),MC=(()=>bq(Rq(xD("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var LQ=64,zC=16,g7=(()=>4294967295)(),mD=Uint32Array.of();function RC($,q,J,G,Q,Y,X,U){let W=Q.length,V=new Uint8Array(LQ),M=Rq(V),z=Y8&&DG(Q)&&DG(Y),K=z?Rq(Q):mD,R=z?Rq(Y):mD;if(!Y8){for(let N=0;N<W;X++){if($(q,J,G,M,X,U),bq(M),X>=g7)throw Error("arx: counter overflow");let w=Math.min(LQ,W-N);for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}return}for(let N=0;N<W;X++){if($(q,J,G,M,X,U),X>=g7)throw Error("arx: counter overflow");let w=Math.min(LQ,W-N);if(z&&w===LQ){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<zC;A++)T=j+A,R[T]=K[T]^M[A];N+=LQ;continue}for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}}function hD($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=vD({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return KG(Q),KG(X),S9(Y),S9(J),(U,W,V,M,z=0)=>{f$(U,void 0,"key"),f$(W,void 0,"nonce"),f$(V,void 0,"data");let K=V.length;if(M=PQ(K,M,!1),KG(z),z<0||z>=g7)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=OG(U)),j=MC;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=VC,R.push(w);else throw f$(U,32,"arx key"),Error("invalid key size");if(!Y8||!DG(W))R.push(W=OG(W));let A=Rq(w);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=W.subarray(0,16);if(Y8)G(j,A,Rq(k),A);else{let u=bq(Uint32Array.from(j));G(u,A,Rq(k),A),t0(u),bq(A)}W=W.subarray(16)}else if(!Y8)bq(A);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let k=new Uint8Array(12);k.set(W,Y?0:12-W.length),W=k,R.push(W)}let _=bq(Rq(W));try{return RC($,j,A,_,V,M,z,X),M}finally{t0(...R)}}}function n$($,q){return $[q++]&255|($[q++]&255)<<8}class uD{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=OG(f$($,32,"key"));let q=n$($,0),J=n$($,2),G=n$($,4),Q=n$($,6),Y=n$($,8),X=n$($,10),U=n$($,12),W=n$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=n$($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],W=Y[2],V=Y[3],M=Y[4],z=Y[5],K=Y[6],R=Y[7],N=Y[8],w=Y[9],j=n$($,q+0),A=n$($,q+2),T=n$($,q+4),_=n$($,q+6),k=n$($,q+8),u=n$($,q+10),F=n$($,q+12),x=n$($,q+14),f=Q[0]+(j&8191),y=Q[1]+((j>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|k<<12)&8191),E=Q[5]+(k>>>1&8191),Z=Q[6]+((k>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+f*X+y*(5*w)+l*(5*N)+v*(5*R)+I*(5*K);L=b>>>13,b&=8191,b+=E*(5*z)+Z*(5*M)+S*(5*V)+P*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let H=L+f*U+y*X+l*(5*w)+v*(5*N)+I*(5*R);L=H>>>13,H&=8191,H+=E*(5*K)+Z*(5*z)+S*(5*M)+P*(5*V)+g*(5*W),L+=H>>>13,H&=8191;let m=L+f*W+y*U+l*X+v*(5*w)+I*(5*N);L=m>>>13,m&=8191,m+=E*(5*R)+Z*(5*K)+S*(5*z)+P*(5*M)+g*(5*V),L+=m>>>13,m&=8191;let d=L+f*V+y*W+l*U+v*X+I*(5*w);L=d>>>13,d&=8191,d+=E*(5*N)+Z*(5*R)+S*(5*K)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+f*M+y*V+l*W+v*U+I*X;L=B>>>13,B&=8191,B+=E*(5*w)+Z*(5*N)+S*(5*R)+P*(5*K)+g*(5*z),L+=B>>>13,B&=8191;let a=L+f*z+y*M+l*V+v*W+I*U;L=a>>>13,a&=8191,a+=E*X+Z*(5*w)+S*(5*N)+P*(5*R)+g*(5*K),L+=a>>>13,a&=8191;let q$=L+f*K+y*z+l*M+v*V+I*W;L=q$>>>13,q$&=8191,q$+=E*U+Z*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+f*R+y*K+l*z+v*M+I*V;L=Y$>>>13,Y$&=8191,Y$+=E*W+Z*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+f*N+y*R+l*K+v*z+I*M;L=G$>>>13,G$&=8191,G$+=E*V+Z*W+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let t=L+f*w+y*N+l*R+v*K+I*z;L=t>>>13,t&=8191,t+=E*M+Z*V+S*W+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,H+=L,Q[0]=b,Q[1]=H,Q[2]=m,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;t0(J)}update($){F7(this),f$($),$=OG($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,t0(this.h,this.r,this.buffer,this.pad)}digestInto($){F7(this),_D($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var pD=yD(32,($)=>new uD($));function KC($,q,J,G,Q,Y=20){let X=$[0],U=$[1],W=$[2],V=$[3],M=q[0],z=q[1],K=q[2],R=q[3],N=q[4],w=q[5],j=q[6],A=q[7],T=Q,_=J[0],k=J[1],u=J[2],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),Z=Z+L|0,l=w$(l^Z,12),F=F+l|0,L=w$(L^F,8),Z=Z+L|0,l=w$(l^Z,7),x=x+v|0,b=w$(b^x,16),S=S+b|0,v=w$(v^S,12),x=x+v|0,b=w$(b^x,8),S=S+b|0,v=w$(v^S,7),f=f+I|0,H=w$(H^f,16),P=P+H|0,I=w$(I^P,12),f=f+I|0,H=w$(H^f,8),P=P+H|0,I=w$(I^P,7),y=y+E|0,m=w$(m^y,16),g=g+m|0,E=w$(E^g,12),y=y+E|0,m=w$(m^y,8),g=g+m|0,E=w$(E^g,7),F=F+v|0,m=w$(m^F,16),P=P+m|0,v=w$(v^P,12),F=F+v|0,m=w$(m^F,8),P=P+m|0,v=w$(v^P,7),x=x+I|0,L=w$(L^x,16),g=g+L|0,I=w$(I^g,12),x=x+I|0,L=w$(L^x,8),g=g+L|0,I=w$(I^g,7),f=f+E|0,b=w$(b^f,16),Z=Z+b|0,E=w$(E^Z,12),f=f+E|0,b=w$(b^f,8),Z=Z+b|0,E=w$(E^Z,7),y=y+l|0,H=w$(H^y,16),S=S+H|0,l=w$(l^S,12),y=y+l|0,H=w$(H^y,8),S=S+H|0,l=w$(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+x|0,G[d++]=W+f|0,G[d++]=V+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=K+I|0,G[d++]=R+E|0,G[d++]=N+Z|0,G[d++]=w+S|0,G[d++]=j+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=k+H|0,G[d++]=u+m|0}var DC=hD(KC,{counterRight:!1,counterLength:4,allowShortKeys:!1});var OC=new Uint8Array(16),lD=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(OC.subarray(J))},HC=new Uint8Array(32);function rD($,q,J,G,Q){if(Q!==void 0)f$(Q,void 0,"AAD");let Y=$(q,J,HC),X=kD(G.length,Q?Q.length:0,!0),U=pD.create(Y);if(Q)lD(U,Q);lD(U,G),U.update(X);let W=U.digest();return t0(Y,X),W}var NC=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=PQ(U+16,X,!1),X.set(Y);let W=X.subarray(0,-16);$(q,J,W,W,1);let V=rD($,q,J,W,G);return X.set(V,U),t0(V),X},decrypt(Y,X){X=PQ(Y.length-16,X,!1);let U=Y.subarray(0,-16),W=Y.subarray(-16),V=rD($,q,J,U,G);if(!bD(W,V))throw t0(V),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),t0(V),X}}},DJ=fD({blockSize:64,nonceLength:12,tagLength:16},NC(DC));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function HG($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function h$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=HG($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+W)}return $}function k0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");h$($.outputLen),h$($.blockLen)}function fq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function T9($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function E9($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function T0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function I9($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function e0($,q){return $<<32-q|$>>>q}var wC=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function jC($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function AC($){for(let q=0;q<$.length;q++)$[q]=jC($[q]);return $}var _7=wC?($)=>$:AC,iD=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),ZC=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function X8($){if(Q$($),iD)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=ZC[$[J]];return q}var yq={_0:48,_9:57,A:65,F:70,a:97,f:102};function dD($){if($>=yq._0&&$<=yq._9)return $-yq._0;if($>=yq.A&&$<=yq.F)return $-(yq.A-10);if($>=yq.a&&$<=yq.f)return $-(yq.a-10);return}function U8($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(iD)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=dD($.charCodeAt(Y)),U=dD($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function v$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function NG($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function OJ($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var HJ=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b7=BigInt(0),v7=BigInt(1);function FQ($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function cD($){if(typeof $==="bigint"){if(!C9($))throw Error("positive bigint expected, got "+$)}else h$($);return $}function gQ($){let q=cD($).toString(16);return q.length&1?"0"+q:q}function nD($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?b7:BigInt("0x"+$)}function NJ($){return nD(X8($))}function wJ($){return nD(X8(P9(Q$($)).reverse()))}function wG($,q){h$(q),$=cD($);let J=U8($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function _Q($,q){return wG($,q).reverse()}function P9($){return Uint8Array.from($)}function jJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var C9=($)=>typeof $==="bigint"&&b7<=$;function BC($,q,J){return C9($)&&C9(q)&&C9(J)&&q<=$&&$<J}function vQ($,q,J,G){if(!BC(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function y7($){let q;for(q=0;$>b7;$>>=v7,q+=1);return q}var bQ=($)=>(v7<<BigInt($))-v7;function oD($,q,J){if(h$($,"hashLen"),h$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,v$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return v$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while(!(T=A(N())))R();return z(),T}}function W8($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}function f7($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var w0=BigInt(0),W0=BigInt(1),V8=BigInt(2),tD=BigInt(3),eD=BigInt(4),$1=BigInt(5),SC=BigInt(7),q1=BigInt(8),TC=BigInt(9),J1=BigInt(16);function N0($,q){let J=$%q;return J>=w0?J:q+J}function m0($,q,J){let G=$;while(q-- >w0)G*=G,G%=J;return G}function aD($,q){if($===w0)throw Error("invert: expected non-zero number");if(q<=w0)throw Error("invert: expected positive modulus, got "+q);let J=N0($,q),G=q,Q=w0,Y=W0,X=W0,U=w0;while(J!==w0){let V=G/J,M=G%J,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==W0)throw Error("invert: does not exist");return N0(Q,q)}function k7($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function G1($,q){let J=($.ORDER+W0)/eD,G=$.pow(q,J);return k7($,G,q),G}function EC($,q){let J=($.ORDER-$1)/q1,G=$.mul(q,V8),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,V8),Q),U=$.mul(Y,$.sub(X,$.ONE));return k7($,U,q),U}function IC($){let q=L9($),J=Q1($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+SC)/J1;return(U,W)=>{let V=U.pow(W,X),M=U.mul(V,G),z=U.mul(V,Q),K=U.mul(V,Y),R=U.eql(U.sqr(M),W),N=U.eql(U.sqr(z),W);V=U.cmov(V,M,R),M=U.cmov(K,z,N);let w=U.eql(U.sqr(M),W),j=U.cmov(V,M,w);return k7(U,j,W),j}}function Q1($){if($<tD)throw Error("sqrt is not defined for small field");let q=$-W0,J=0;while(q%V8===w0)q/=V8,J++;let G=V8,Q=L9($);while(sD(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return G1;let Y=Q.pow(G,q),X=(q+W0)/V8;return function(W,V){if(W.is0(V))return V;if(sD(W,V)!==1)throw Error("Cannot find square root");let M=J,z=W.mul(W.ONE,Y),K=W.pow(V,q),R=W.pow(V,X);while(!W.eql(K,W.ONE)){if(W.is0(K))return W.ZERO;let N=1,w=W.sqr(K);while(!W.eql(w,W.ONE))if(N++,w=W.sqr(w),N===M)throw Error("Cannot find square root");let j=W0<<BigInt(M-N-1),A=W.pow(z,j);M=N,z=W.sqr(A),K=W.mul(K,z),R=W.mul(R,A)}return R}}function CC($){if($%eD===tD)return G1;if($%q1===$1)return EC;if($%J1===TC)return IC($);return Q1($)}var PC=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function m7($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=PC.reduce((G,Q)=>{return G[Q]="function",G},q);return W8($,J),$}function LC($,q,J){if(J<w0)throw Error("invalid exponent, negatives unsupported");if(J===w0)return $.ONE;if(J===W0)return q;let G=$.ONE,Q=q;while(J>w0){if(J&W0)G=$.mul(G,Q);Q=$.sqr(Q),J>>=W0}return G}function yQ($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,W)=>{if($.is0(U))return X;return G[W]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,W)=>{if($.is0(U))return X;return G[W]=$.mul(X,G[W]),$.mul(X,U)},Y),G}function sD($,q){let J=($.ORDER-W0)/V8,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function FC($,q){if(q!==void 0)h$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class Y1{ORDER;BITS;BYTES;isLE;ZERO=w0;ONE=W0;_lengths;_sqrt;_mod;constructor($,q={}){if($<=w0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=FC($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return N0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return w0<=$&&$<this.ORDER}is0($){return $===w0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&W0)===W0}neg($){return N0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return N0($*$,this.ORDER)}add($,q){return N0($+q,this.ORDER)}sub($,q){return N0($-q,this.ORDER)}mul($,q){return N0($*q,this.ORDER)}pow($,q){return LC(this,$,q)}div($,q){return N0($*aD(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return aD($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=CC(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?_Q($,this.BYTES):wG($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?wJ($):NJ($);if(X)U=N0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return yQ(this,$)}cmov($,q,J){return J?q:$}}function L9($,q={}){return new Y1($,q)}function X1($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function x7($){let q=X1($);return q+Math.ceil(q/2)}function U1($,q,J=!1){Q$($);let G=$.length,Q=X1(q),Y=x7(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?wJ($):NJ($),U=N0(X,q-W0)+W0;return J?_Q(U,Q):wG(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var jG=BigInt(0),M8=BigInt(1);function fQ($,q){let J=q.negate();return $?J:q}function l7($,q){let J=yQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function z1($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function h7($,q){z1($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=bQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function W1($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=M8;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var u7=new WeakMap,R1=new WeakMap;function p7($){return R1.get($)||1}function V1($){if($!==jG)throw Error("invalid wNAF")}class r7{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>jG){if(q&M8)J=J.add(G);G=G.double(),q>>=M8}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=h7(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=h7($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=W1(J,X,Y);if(J=U,V)Q=Q.add(fQ(z,q[K]));else G=G.add(fQ(M,q[W]))}return V1(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=h7($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===jG)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=W1(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return V1(J),G}getPrecomputes($,q,J){let G=u7.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);u7.set(q,G)}}return G}cached($,q,J){let G=p7($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=p7($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){z1(q,this.bits),R1.set($,q),u7.delete($)}hasCache($){return p7($)!==1}}function K1($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>jG||G>jG){if(J&M8)Y=Y.add(Q);if(G&M8)X=X.add(Q);Q=Q.double(),J>>=M8,G>>=M8}return{p1:Y,p2:X}}function M1($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return m7(q),q}else return L9($,{isLE:J})}function D1($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>jG))throw Error(`CURVE.${W} must be positive bigint`)}let Q=M1(q.p,J.Fp,G),Y=M1(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function F9($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var kQ=BigInt(0),AG=BigInt(1),g9=BigInt(2);function gC($){return W8($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function O1($){let q=gC($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X||OJ,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?g9**BigInt(254):g9**BigInt(447),N=U?BigInt(8)*g9**BigInt(251)-AG:BigInt(4)*g9**BigInt(445)-AG,w=R+N+AG,j=(Z)=>N0(Z,J),A=T(z);function T(Z){return _Q(j(Z),M)}function _(Z){let S=P9(Q$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(wJ(S))}function k(Z){return wJ(Q(P9(Q$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===kQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){vQ("u",Z,kQ,J),vQ("scalar",S,R,w);let P=S,g=Z,L=AG,b=kQ,H=Z,m=AG,d=kQ;for(let a=BigInt(V-1);a>=kQ;a--){let q$=P>>a&AG;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),iq=R0+Jq,cq=R0-Jq;H=j(iq*iq),m=j(g*j(cq*cq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=W(M))=>{return Q$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze({keygen:F9(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}class d7{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(k0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),T0(G)}update($){return fq(this),this.iHash.update($),this}digestInto($){fq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ZG=($,q,J)=>new d7($,q).update(J).digest();ZG.create=($,q)=>new d7($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var H1=($,q)=>($+($>=0?q:-q)/w1)/q;function _C($,q,J){let[[G,Q],[Y,X]]=q,U=H1(X*$,J),W=H1(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<kq,K=M<kq;if(z)V=-V;if(K)M=-M;let R=bQ(Math.ceil(y7(J)/2))+BG;if(V<kq||V>=R||M<kq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:V,k2neg:K,k2:M}}function c7($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function i7($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(FQ(J.lowS,"lowS"),FQ(J.prehash,"prehash"),J.format!==void 0)c7(J.format);return J}class N1 extends Error{constructor($=""){super($)}}var AJ={Err:N1,_tlv:{encode:($,q)=>{let{Err:J}=AJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=gQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?gQ(Q.length/2|128):"";return gQ($)+Y+Q+q},decode($,q){let{Err:J}=AJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=AJ;if($<kq)throw new q("integer: negative integers are not allowed");let J=gQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=AJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return NJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=AJ,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=AJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},kq=BigInt(0),BG=BigInt(1),w1=BigInt(2),_9=BigInt(3),vC=BigInt(4);function n7($,q={}){let J=D1("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;W8(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=A1(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,E,Z){let{x:S,y:P}=E.toAffine(),g=G.toBytes(S);if(FQ(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return v$(j1(L),g)}else return v$(Uint8Array.of(4),g,G.toBytes(P))}function K(I){Q$(I,void 0,"Point");let{publicKey:E,publicKeyUncompressed:Z}=V,S=I.length,P=I[0],g=I.subarray(1);if(S===E&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),H;try{H=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let m=G.isOdd(H);if((P&1)===1!==m)H=G.neg(H);return{x:L,y:H}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),H=G.fromBytes(g.subarray(L,L*2));if(!j(b,H))throw Error("bad point: is not on curve");return{x:b,y:H}}else throw Error(`bad point: got length ${S}, expected compressed=${E} or uncompressed=${Z}`)}let R=q.toBytes||z,N=q.fromBytes||K;function w(I){let E=G.sqr(I),Z=G.mul(E,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function j(I,E){let Z=G.sqr(E),S=w(I);return G.eql(Z,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,_9),vC),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,E,Z=!1){if(!G.isValid(E)||Z&&G.is0(E))throw Error(`bad point coordinate ${I}`);return E}function k(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!W||!W.basises)throw Error("no endo");return _C(I,W.basises,Q.ORDER)}let F=f7((I,E)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=f7((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:E,y:Z}=I.toAffine();if(!G.isValid(E)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!j(E,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function f(I,E,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),E=fQ(S,E),Z=fQ(P,Z),E.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,E,Z){this.X=_("x",I),this.Y=_("y",E,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:E,y:Z}=I||{};if(!I||!G.isValid(E)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(Z))return y.ZERO;return new y(E,Z,G.ONE)}static fromBytes(I){let E=y.fromAffine(N(Q$(I,void 0,"point")));return E.assertValidity(),E}static fromHex(I){return y.fromBytes(U8(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,E=!0){if(v.createCache(this,I),!E)this.multiply(_9);return this}assertValidity(){x(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(E,L),G.mul(P,S)),H=G.eql(G.mul(Z,L),G.mul(g,S));return b&&H}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:E}=Y,Z=G.mul(E,_9),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),H=G.mul(S,g),H=G.add(H,H),L=G.mul(I,H),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),H=G.mul(Z,H),B=G.mul(I,B),a=G.sub(m,B),a=G.mul(I,a),a=G.add(a,H),H=G.add(m,m),m=G.add(H,m),m=G.add(m,B),m=G.mul(m,a),b=G.add(b,m),B=G.mul(P,g),B=G.add(B,B),m=G.mul(B,a),L=G.sub(L,m),H=G.mul(B,d),H=G.add(H,H),H=G.add(H,H),new y(L,b,H)}add(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,H=G.ZERO,m=G.ZERO,d=Y.a,B=G.mul(Y.b,_9),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.mul(S,L),G$=G.add(E,Z),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(a,q$),G$=G.sub(G$,t),t=G.add(E,S);let H$=G.add(P,L);return t=G.mul(t,H$),H$=G.add(a,Y$),t=G.sub(t,H$),H$=G.add(Z,S),b=G.add(g,L),H$=G.mul(H$,b),b=G.add(q$,Y$),H$=G.sub(H$,b),m=G.mul(d,t),b=G.mul(B,Y$),m=G.add(b,m),b=G.sub(q$,m),m=G.add(q$,m),H=G.mul(b,m),q$=G.add(a,a),q$=G.add(q$,a),Y$=G.mul(d,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(a,Y$),Y$=G.mul(d,Y$),t=G.add(t,Y$),a=G.mul(q$,t),H=G.add(H,a),a=G.mul(H$,t),b=G.mul(G$,b),b=G.sub(b,a),a=G.mul(G$,q$),m=G.mul(H$,m),m=G.add(m,a),new y(b,H,m)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:E}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>l7(y,L));if(E){let{k1neg:g,k1:L,k2neg:b,k2:H}=u(I),{p:m,f:d}=P(L),{p:B,f:a}=P(H);S=d.add(a),Z=f(E.beta,m,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return l7(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:E}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===kq||Z.is0())return y.ZERO;if(I===BG)return Z;if(v.hasCache(this))return this.multiply(I);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:H}=K1(y,Z,P,L);return f(E.beta,b,H,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===BG)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===BG)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return FQ(I,"isCompressed"),this.assertValidity(),R(y,this,I)}toHex(I=!0){return X8(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new r7(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function j1($){return Uint8Array.of($?2:3)}function A1($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function bC($,q={}){let{Fn:J}=$,G=q.randomBytes||OJ,Q=Object.assign(A1($.Fp,J),{seed:x7(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R=G(Q.seed)){return U1(Q$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!HG(R))return;if("_lengths"in J&&J._lengths||N===w)return;let A=Q$(R,void 0,"key").length;return A===w||A===j}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=F9(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function o7($,q,J={}){k0(q),W8(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||OJ,Q=J.hmac||((Z,S)=>ZG(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:W}=X,{keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R}=bC($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*w1<Y.ORDER;function j(Z){let S=U>>BG;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){c7(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(Z,g)}class k{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:H,s:m}=AJ.toSig(Q$(Z));return new k(H,m)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=R.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new k(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(U8(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new k(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),H=$.fromBytes(v$(j1((g&1)===0),b)),m=X.inv(L),d=F(Q$(Z,void 0,"msgHash")),B=X.create(-d*m),a=X.create(P*m),q$=$.BASE.multiplyUnsafe(B).add(H.multiplyUnsafe(a));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(Z=N.format){if(c7(Z),Z==="der")return U8(AJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),v$(Uint8Array.of(this.assertRecovery()),g,L);return v$(g,L)}toHex(Z){return X8(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=NJ(S),g=S.length*8-W;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=bQ(W);function f(Z){return vQ("num < 2^"+W,Z,kq,x),X.toBytes(Z)}function y(Z,S){return Q$(Z,void 0,"message"),S?Q$(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=i7(P,N);Z=y(Z,L);let H=F(Z),m=X.fromBytes(S);if(!X.isValidNot0(m))throw Error("invalid private key");let d=[f(m),f(H)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;d.push(Q$(Y$,void 0,"extraEntropy"))}let B=v$(...d),a=H;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),H$=$.BASE.multiply(G$).toAffine(),A$=X.create(H$.x);if(A$===kq)return;let I$=X.create(t*X.create(a+A$*m));if(I$===kq)return;let m$=(H$.x===A$?0:2)|Number(H$.y&BG),R0=I$;if(g&&j(I$))R0=X.neg(I$),m$^=1;return new k(A$,R0,w?void 0:m$)}return{seed:B,k2sig:q$}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return oD(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:H}=i7(g,N);if(P=Q$(P,void 0,"publicKey"),S=y(S,b),!HG(Z)){let m=Z instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+m)}_(Z,H);try{let m=k.fromBytes(Z,H),d=$.fromBytes(P);if(L&&m.hasHighS())return!1;let{r:B,s:a}=m,q$=F(S),Y$=X.inv(a),G$=X.create(q$*Y$),t=X.create(B*Y$),H$=$.BASE.multiplyUnsafe(G$).add(d.multiplyUnsafe(t));if(H$.is0())return!1;return X.create(H$.x)===B}catch(m){return!1}}function E(Z,S,P={}){let{prehash:g}=i7(P,N);return S=y(S,g),k.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R,Point:$,sign:v,verify:I,recoverPublicKey:E,Signature:k,hash:q})}function Z1($,q,J){return $&q^~$&J}function B1($,q,J){return $&q^$&J^q&J}class v9{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=I9(this.buffer)}update($){fq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=I9($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){fq(this),T9($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,T0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=I9($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var mq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),xq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),o$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),a$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var b9=BigInt(4294967295),S1=BigInt(32);function yC($,q=!1){if(q)return{h:Number($&b9),l:Number($>>S1&b9)};return{h:Number($>>S1&b9)|0,l:Number($&b9)|0}}function y9($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=yC($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var a7=($,q,J)=>$>>>J,s7=($,q,J)=>$<<32-J|q>>>J,z8=($,q,J)=>$>>>J|q<<32-J,R8=($,q,J)=>$<<32-J|q>>>J,mQ=($,q,J)=>$<<64-J|q>>>J-32,xQ=($,q,J)=>$>>>J-32|q<<64-J;var T1=($,q,J)=>$<<J|q>>>32-J,E1=($,q,J)=>q<<J|$>>>32-J,I1=($,q,J)=>q<<J-32|$>>>64-J,C1=($,q,J)=>$<<J-32|q>>>64-J;function Kq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var P1=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),L1=($,q,J,G)=>q+J+G+($/4294967296|0)|0,F1=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),g1=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,_1=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),v1=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var kC=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ZJ=new Uint32Array(64);class t7 extends v9{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)ZJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=ZJ[M-15],K=ZJ[M-2],R=e0(z,7)^e0(z,18)^z>>>3,N=e0(K,17)^e0(K,19)^K>>>10;ZJ[M]=N+ZJ[M-7]+R+ZJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=e0(X,6)^e0(X,11)^e0(X,25),K=V+z+Z1(X,U,W)+kC[M]+ZJ[M]|0,N=(e0(J,2)^e0(J,13)^e0(J,22))+B1(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){T0(ZJ)}destroy(){this.set(0,0,0,0,0,0,0,0),T0(this.buffer)}}class b1 extends t7{A=mq[0]|0;B=mq[1]|0;C=mq[2]|0;D=mq[3]|0;E=mq[4]|0;F=mq[5]|0;G=mq[6]|0;H=mq[7]|0;constructor(){super(32)}}class mC extends t7{A=xq[0]|0;B=xq[1]|0;C=xq[2]|0;D=xq[3]|0;E=xq[4]|0;F=xq[5]|0;G=xq[6]|0;H=xq[7]|0;constructor(){super(28)}}var y1=(()=>y9(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),xC=(()=>y1[0])(),hC=(()=>y1[1])(),BJ=new Uint32Array(80),SJ=new Uint32Array(80);class hQ extends v9{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)BJ[T]=$.getUint32(q),SJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=BJ[T-15]|0,k=SJ[T-15]|0,u=z8(_,k,1)^z8(_,k,8)^a7(_,k,7),F=R8(_,k,1)^R8(_,k,8)^s7(_,k,7),x=BJ[T-2]|0,f=SJ[T-2]|0,y=z8(x,f,19)^mQ(x,f,61)^a7(x,f,6),l=R8(x,f,19)^xQ(x,f,61)^s7(x,f,6),v=F1(F,l,SJ[T-7],SJ[T-16]),I=g1(v,u,y,BJ[T-7],BJ[T-16]);BJ[T]=I|0,SJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=z8(M,z,14)^z8(M,z,18)^mQ(M,z,41),k=R8(M,z,14)^R8(M,z,18)^xQ(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=_1(A,k,F,hC[T],SJ[T]),f=v1(x,j,_,u,xC[T],BJ[T]),y=x|0,l=z8(J,G,28)^mQ(J,G,34)^mQ(J,G,39),v=R8(J,G,28)^xQ(J,G,34)^xQ(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Kq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=P1(y,v,E);J=L1(Z,f,l,I),G=Z|0}({h:J,l:G}=Kq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Kq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Kq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=Kq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=Kq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Kq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Kq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Kq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){T0(BJ,SJ)}destroy(){T0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class uC extends hQ{Ah=a$[0]|0;Al=a$[1]|0;Bh=a$[2]|0;Bl=a$[3]|0;Ch=a$[4]|0;Cl=a$[5]|0;Dh=a$[6]|0;Dl=a$[7]|0;Eh=a$[8]|0;El=a$[9]|0;Fh=a$[10]|0;Fl=a$[11]|0;Gh=a$[12]|0;Gl=a$[13]|0;Hh=a$[14]|0;Hl=a$[15]|0;constructor(){super(64)}}class f1 extends hQ{Ah=o$[0]|0;Al=o$[1]|0;Bh=o$[2]|0;Bl=o$[3]|0;Ch=o$[4]|0;Cl=o$[5]|0;Dh=o$[6]|0;Dl=o$[7]|0;Eh=o$[8]|0;El=o$[9]|0;Fh=o$[10]|0;Fl=o$[11]|0;Gh=o$[12]|0;Gl=o$[13]|0;Hh=o$[14]|0;Hl=o$[15]|0;constructor(){super(48)}}var V0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),M0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class pC extends hQ{Ah=V0[0]|0;Al=V0[1]|0;Bh=V0[2]|0;Bl=V0[3]|0;Ch=V0[4]|0;Cl=V0[5]|0;Dh=V0[6]|0;Dl=V0[7]|0;Eh=V0[8]|0;El=V0[9]|0;Fh=V0[10]|0;Fl=V0[11]|0;Gh=V0[12]|0;Gl=V0[13]|0;Hh=V0[14]|0;Hl=V0[15]|0;constructor(){super(28)}}class lC extends hQ{Ah=M0[0]|0;Al=M0[1]|0;Bh=M0[2]|0;Bl=M0[3]|0;Ch=M0[4]|0;Cl=M0[5]|0;Dh=M0[6]|0;Dl=M0[7]|0;Eh=M0[8]|0;El=M0[9]|0;Fh=M0[10]|0;Fl=M0[11]|0;Gh=M0[12]|0;Gl=M0[13]|0;Hh=M0[14]|0;Hl=M0[15]|0;constructor(){super(32)}}var f9=NG(()=>new b1,HJ(1));var k1=NG(()=>new f1,HJ(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rC=BigInt(1),m1=BigInt(2),dC=BigInt(3),iC=BigInt(5),$d=BigInt(8),x1=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function cC($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=x1,U=$*$%Y*$%Y,W=m0(U,m1,Y)*U%Y,V=m0(W,rC,Y)*$%Y,M=m0(V,iC,Y)*V%Y,z=m0(M,q,Y)*M%Y,K=m0(z,J,Y)*z%Y,R=m0(K,G,Y)*K%Y,N=m0(R,Q,Y)*R%Y,w=m0(N,Q,Y)*R%Y,j=m0(w,q,Y)*M%Y;return{pow_p_5_8:m0(j,m1,Y)*$%Y,b2:U}}function nC($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var h1=(()=>{let $=x1;return O1({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=cC(q);return N0(m0(J,dC,$)*G,$)},adjustScalarBytes:nC})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var oC=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),aC=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var sC=n7(oC),e7=o7(sC,f9);var tC=n7(aC),u1=o7(tC,k1);function l1($,q,J){if(k0($),J===void 0)J=new Uint8Array($.outputLen);return ZG($,J,q)}var $W=Uint8Array.of(0),p1=Uint8Array.of();function r1($,q,J,G=32){k0($),h$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=p1;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=ZG.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)$W[0]=M+1,W.update(M===0?p1:V).update(J).update($W).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),T0(V,$W),X.slice(0,G)}var eC=BigInt(0),uQ=BigInt(1),$P=BigInt(2),qP=BigInt(7),JP=BigInt(256),GP=BigInt(113),c1=[],n1=[],o1=[];for(let $=0,q=uQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],c1.push(2*(5*G+J)),n1.push(($+1)*($+2)/2%64);let Q=eC;for(let Y=0;Y<7;Y++)if(q=(q<<uQ^(q>>qP)*GP)%JP,q&$P)Q^=uQ<<(uQ<<BigInt(Y))-uQ;o1.push(Q)}var a1=y9(o1,!0),QP=a1[0],YP=a1[1],d1=($,q,J)=>J>32?I1($,q,J):T1($,q,J),i1=($,q,J)=>J>32?C1($,q,J):E1($,q,J);function XP($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,W=(X+2)%10,V=J[W],M=J[W+1],z=d1(V,M,1)^J[U],K=i1(V,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=K}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=n1[X],W=d1(Q,Y,U),V=i1(Q,Y,U),M=c1[X];Q=$[M],Y=$[M+1],$[M]=W,$[M+1]=V}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=QP[G],$[1]^=YP[G]}T0(J)}class k9{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,h$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=E9(this.state)}clone(){return this._cloneInto()}keccak(){_7(this.state32),XP(this.state32,this.rounds),_7(this.state32),this.posOut=0,this.pos=0}update($){fq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){fq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return h$($),this.xofInto(new Uint8Array($))}digestInto($){if(T9($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,T0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new k9(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var s1=($,q,J,G={})=>NG(()=>new k9(q,$,J),G);var K8=s1(6,136,32,HJ(8));var t1=s1(6,72,64,HJ(10));var e1=($,q,J,G={})=>NG((Q={})=>new k9(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),$O=e1(31,168,16,HJ(11)),Dq=e1(31,136,32,HJ(12));function qW($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function JO($){return qW($),($&$-1)===0&&$!==0}function JW($,q){qW($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function GO($){return qW($),31-Math.clz32($)}function qO($){let q=$.length;if(q<2||!JO(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=GO(q);for(let G=0;G<q;G++){let Q=JW(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var GW=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,W=GO(J);if(!JO(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)qO(M);for(let z=0,K=1;z<W-X;z++){let R=Q?z+1+X:W-z,N=1<<R,w=N>>1,j=J>>R;for(let A=0;A<J;A+=N)for(let T=0,_=K++;T<w;T++){let k=Y?Q?J-_:_:T*j,u=A+T,F=A+T+w,x=G[k],f=M[F],y=M[u];if(V){let l=$.mul(f,x);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(f,y),M[F]=$.mul($.sub(f,y),x);else M[u]=$.add(y,f),M[F]=$.mul($.sub(y,f),x)}}if(!Q&&U)qO(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Oq=OJ;function m9($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function QO($){return Uint8Array.from($)}function D8($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let W=q[X],V=J(W),M=typeof W==="number"?Q[X]:W.encode(Q[X]);if(Q$(M,V,$),Y.set(M,U),typeof W!=="number")M.fill(0);U+=V}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),W=Q.subarray(0,U);Y.push(typeof X==="number"?W:X.decode(W)),Q=Q.subarray(U)}return Y}}}function x9($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function k$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function QW($){return(1<<$)-1}var Od=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var YO=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,W=(T,_=G)=>{let k=T%_|0;return(k>=0?k|0:_+k|0)|0},V=(T,_=G)=>{let k=W(T,_)|0;return(k>_>>1?k-_|0:k)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let k=JW(_,X),u=BigInt(Y)**BigInt(k)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),K={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=GW(K,{dit:!1,...R}),w=GW(K,{dit:!0,...R});return{mod:W,smod:V,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let k=QW(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=(_.encode(F[f])&k)<<l,l+=T;for(;l>=8;l-=8,y>>=8)x[v++]=y&QW(l)}return x},decode:(F)=>{let x=q(J);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=F[f]<<l,l+=8;for(;l>=T;l-=T,y>>=T)x[v++]=_.decode(y&k)}return x}}}}},UP=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,M)=>{return G[Q+0]=V,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return W++,X.xofInto(Y)}},clean:()=>{X.destroy(),k$(Y,G)}}},XO=UP($O);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var z0=256,hq=3329,WP=3303,VP=17,{mod:rQ,nttZetas:MP,NTT:O8,bitsCoder:zP}=YO({N:z0,Q:hq,F:WP,ROOT_OF_UNITY:VP,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),YW={512:{N:z0,Q:hq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:z0,Q:hq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:z0,Q:hq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},RP=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+hq/2)/hq,decode:(J)=>J*hq+q>>>$}},pQ=($)=>zP($,RP($));function H8($,q){for(let J=0;J<z0;J++)$[J]=rQ($[J]+q[J])}function KP($,q){for(let J=0;J<z0;J++)$[J]=rQ($[J]-q[J])}function DP($,q,J,G,Q){let Y=rQ(q*G*Q+$*J),X=rQ($*G+q*J);return{c0:Y,c1:X}}function h9($,q){for(let J=0;J<z0/2;J++){let G=MP[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=DP($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function UO($){let q=new Uint16Array(z0);for(let J=0;J<z0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<z0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<hq)q[J++]=Y;if(J<z0&&X<hq)q[J++]=X}}return q}function lQ($,q,J,G){let Q=$(G*z0/4,q,J),Y=new Uint16Array(z0),X=E9(Q),U=0;for(let W=0,V=0,M=0,z=0;W<X.length;W++){let K=X[W];for(let R=0;R<32;R++)if(M+=K&1,K>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[V++]=rQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var OP=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:W}=$,V=pQ(1),M=pQ(W),z=pQ(U),K=D8("publicKey",x9(pQ(12),q),32),R=x9(pQ(12),q),N=D8("ciphertext",x9(z,q),M),w=D8("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:K.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let A=new Uint8Array(33);A.set(j),A[32]=q;let T=Q(A),[_,k]=w.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(O8.encode(lQ(J,k,y,Y)));let x=G(_);for(let y=0;y<q;y++){let l=O8.encode(lQ(J,k,q+y,Y));for(let v=0;v<q;v++){let I=UO(x.get(v,y));H8(l,h9(I,u[v]))}F.push(l)}x.clean();let f={publicKey:K.encode([F,_]),secretKey:R.encode(u)};return k$(_,k,u,F,A,T),f},encrypt:(j,A,T)=>{let[_,k]=K.decode(j),u=[];for(let v=0;v<q;v++)u.push(O8.encode(lQ(J,T,v,Y)));let F=G(k),x=new Uint16Array(z0),f=[];for(let v=0;v<q;v++){let I=lQ(J,T,q+v,X),E=new Uint16Array(z0);for(let Z=0;Z<q;Z++){let S=UO(F.get(v,Z));H8(E,h9(S,u[Z]))}H8(I,O8.decode(E)),f.push(I),H8(x,h9(_[v],u[v])),k$(E)}F.clean();let y=lQ(J,T,2*q,X);H8(y,O8.decode(x));let l=V.decode(A);return H8(l,y),k$(_,u,x,y),N.encode([f,l])},decrypt:(j,A)=>{let[T,_]=N.decode(j),k=R.decode(A),u=new Uint16Array(z0);for(let F=0;F<q;F++)H8(u,h9(k[F],O8.encode(T[F])));return KP(_,O8.decode(u)),k$(u,k,T),V.encode(_)}}};function XW($){let q=OP($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=D8("secretKey",X.secretKey,X.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Oq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:K}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([K,z,R,M.subarray(32)]);return k$(K,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,K,R,N]=U.decode(M);return Uint8Array.from(K)},encapsulate:(M,z=Oq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let K=M.subarray(0,384*$.K),R=Y.encode(Y.decode(QO(K)));if(!m9(R,K))throw k$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");k$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return k$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let K=U.bytesLen-96,R=K+32,N=J(z.subarray(K/2,R));if(!m9(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,A,T]=U.decode(z),_=q.decrypt(M,w),k=G.create().update(_).update(A).digest(),u=k.subarray(0,32),F=q.encrypt(j,_,k.subarray(32,64)),x=m9(M,F),f=Q.create({dkLen:32}).update(T).update(M).digest();return k$(_,F,!x?u:f),x?u:f}}}function HP($,q,J){return Dq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var UW={HASH256:K8,HASH512:t1,KDF:Dq,XOF:XO,PRF:HP},Id=XW({...UW,...YW[512]}),dQ=XW({...UW,...YW[768]}),WO=XW({...UW,...YW[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function NP($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Oq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?wJ(X):NJ(X),W=Y.toBytes(Y.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function WW($,q=!1){let J=NP($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Oq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return k$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function iQ($,q){return D8(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function VW($){return(q,J)=>$(q,{dkLen:J})}function wP($,q,...J){let G=iQ(J,"seed"),Q=iQ(J,"publicKey");if($===void 0)$=G.bytesLen;h$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),W=J.map((z,K)=>z.keygen(U[K])),V=W.map((z)=>z.secretKey),M=W.map((z)=>z.publicKey);return{secretKey:V,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Oq($)){let{publicKey:U,secretKey:W}=Y(X),V=Q.encode(U);return k$(U),k$(W),{secretKey:X,publicKey:V}},expandDecapsulationKey:Y,realSeedLen:$}}function u9($,q,J,G,...Q){let Y=wP($,J,...Q),X=iQ(Q,"cipherText"),U=iQ(Q,"publicKey"),W=iQ(Q,"msg");if(q===void 0)q=W.bytesLen;return h$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(V,M=Oq(W.bytesLen)){let z=U.decode(V),K=W.decode(M),R=Q.map((A,T)=>A.encapsulate(z[T],K[T])),N=R.map((A)=>A.sharedSecret),w=R.map((A)=>A.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return k$(N,w),j},decapsulate(V,M){let z=X.decode(V),{publicKey:K,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(K,z,N)}}}function VO($,q,J,G,Q){return k0(G),k0(Q),u9(32,32,VW(G),(Y,X,U)=>Q(v$(U[0],U[1],X[1],Y[1],jJ($))),q,J)}var kd=VO("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",dQ,WW(e7,!0),Dq,K8),md=VO("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",WO,WW(u1,!0),Dq,K8);function jP($,q,J,G,Q){return k0(G),k0(Q),u9(32,32,VW(G),(Y,X,U)=>{let W=v$(U[0],U[1],X[0],Y[0],X[1],Y[1],jJ($)),V=32,M=v$(jJ("hybrid_prk"),W),z=l1(Q,M),K=v$(wG(32,2),jJ("shared_secret"),jJ("")),R=r1(Q,z,K,32);return k$(z,K,M,W),R},q,J)}var MO=WW(h1),xd=jP("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",dQ,MO,Dq,f9),AP=(()=>u9(32,32,VW(Dq),($,q,J)=>K8(v$(J[0],J[1],q[1],$[1],jJ("\\.//^\\"))),dQ,MO))();function ZP($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Oq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Oq(G)){Q$(U,G,"rand");let{secretKey:W}=Y(U),V=this.decapsulate(X,W),M=$.getPublicKey(W,!1);return k$(W),{sharedSecret:V,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function BP($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=ZP(J,Q,Y,G),U=64,W=U+G;return u9(32,32,(V)=>{Q$(V,32);let M=Dq(V,{dkLen:W}),z=M.subarray(0,U),K=M.subarray(U,W);return v$(z,K)},(V,M,z)=>K8(v$(z[0],z[1],M[1],V[1],jJ($))),q,X)}var SP=(()=>BP("MLKEM768-P256",dQ,e7,128))();var MW=AP,zO=SP;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,q,J)=>r$($,q,J),RW=F$,SG=R9,s$=(...$)=>K7(...$),TG=($)=>AQ($),EG=M7,IG=($)=>Fq($),l9=BigInt(0),zW=BigInt(1);function uq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function r9($){if(typeof $==="bigint"){if(!p9($))throw RangeError("positive bigint expected, got "+$)}else RW($);return $}function Hq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function cQ($){let q=r9($).toString(16);return q.length&1?"0"+q:q}function RO($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?l9:BigInt("0x"+$)}function N8($){return RO(R9($))}function $q($){return RO(R9(TJ(r$($)).reverse()))}function d9($,q){if(F$(q),q===0)throw RangeError("zero length");$=r9($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return AQ(J.padStart(q*2,"0"))}function nQ($,q){return d9($,q).reverse()}function KO($,q){if($=S$($),q=S$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function TJ($){return Uint8Array.from(S$($))}function i9($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var p9=($)=>typeof $==="bigint"&&l9<=$;function TP($,q,J){return p9($)&&p9(q)&&p9(J)&&q<=$&&$<J}function pq($,q,J,G){if(!TP(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function CG($){if($<l9)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>l9;$>>=zW,q+=1);return q}var oQ=($)=>(zW<<BigInt($))-zW;function DO($,q,J){if(F$($,"hashLen"),F$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,s$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return s$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while((T=A(N()))===void 0)R();return z(),T}}function x0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}var KW=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var t$=BigInt(0),P$=BigInt(1),w8=BigInt(2),wO=BigInt(3),jO=BigInt(4),AO=BigInt(5),EP=BigInt(7),ZO=BigInt(8),IP=BigInt(9),BO=BigInt(16);function T$($,q){if(q<=t$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=t$?J:q+J}function h0($,q,J){if(q<t$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >t$)G*=G,G%=J;return G}function OO($,q){if($===t$)throw Error("invert: expected non-zero number");if(q<=t$)throw Error("invert: expected positive modulus, got "+q);let J=T$($,q),G=q,Q=t$,Y=P$,X=P$,U=t$;while(J!==t$){let V=G/J,M=G-J*V,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==P$)throw Error("invert: does not exist");return T$(Q,q)}function DW($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function SO($,q){let J=$,G=(J.ORDER+P$)/jO,Q=J.pow(q,G);return DW(J,Q,q),Q}function CP($,q){let J=$,G=(J.ORDER-AO)/ZO,Q=J.mul(q,w8),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,w8),Y),W=J.mul(X,J.sub(U,J.ONE));return DW(J,W,q),W}function PP($){let q=c9($),J=TO($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+EP)/BO;return(U,W)=>{let V=U,M=V.pow(W,X),z=V.mul(M,G),K=V.mul(M,Q),R=V.mul(M,Y),N=V.eql(V.sqr(z),W),w=V.eql(V.sqr(K),W);M=V.cmov(M,z,N),z=V.cmov(R,K,w);let j=V.eql(V.sqr(z),W),A=V.cmov(M,z,j);return DW(V,A,W),A}}function TO($){if($<wO)throw Error("sqrt is not defined for small field");let q=$-P$,J=0;while(q%w8===t$)q/=w8,J++;let G=w8,Q=c9($);while(HO(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return SO;let Y=Q.pow(G,q),X=(q+P$)/w8;return function(W,V){let M=W;if(M.is0(V))return V;if(HO(M,V)!==1)throw Error("Cannot find square root");let z=J,K=M.mul(M.ONE,Y),R=M.pow(V,q),N=M.pow(V,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let A=P$<<BigInt(z-w-1),T=M.pow(K,A);z=w,K=M.sqr(T),R=M.mul(R,K),N=M.mul(N,T)}return N}}function LP($){if($%jO===wO)return SO;if($%ZO===AO)return CP;if($%BO===IP)return PP($);return TO($)}var lq=($,q)=>(T$($,q)&P$)===P$,FP=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function OW($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=FP.reduce((G,Q)=>{return G[Q]="function",G},q);if(x0($,J),Hq($.BYTES,"BYTES"),Hq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=P$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function gP($,q,J){let G=$;if(J<t$)throw Error("invalid exponent, negatives unsupported");if(J===t$)return G.ONE;if(J===P$)return q;let Q=G.ONE,Y=q;while(J>t$){if(J&P$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=P$}return Q}function aQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),X=G.inv(Y);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},X),Q}function HO($,q){let J=$,G=(J.ORDER-P$)/w8,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function _P($,q){if(q!==void 0)RW(q);if($<=t$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=CG($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var NO=new WeakMap;class HW{ORDER;BITS;BYTES;isLE;ZERO=t$;ONE=P$;_lengths;_mod;constructor($,q={}){if($<=P$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=_P($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return t$<=$&&$<this.ORDER}is0($){return $===t$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&P$)===P$}neg($){return T$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T$($*$,this.ORDER)}add($,q){return T$($+q,this.ORDER)}sub($,q){return T$($-q,this.ORDER)}mul($,q){return T$($*q,this.ORDER)}pow($,q){return gP(this,$,q)}div($,q){return T$($*OO(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return OO($,this.ORDER)}sqrt($){let q=NO.get(this);if(!q)NO.set(this,q=LP(this.ORDER));return q(this,$)}toBytes($){return this.isLE?nQ($,this.BYTES):d9($,this.BYTES)}fromBytes($,q=!1){S$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?$q($):N8($);if(X)U=T$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return aQ(this,$)}cmov($,q,J){return uq(J,"condition"),J?q:$}}Object.freeze(HW.prototype);function c9($,q={}){return new HW($,q)}function EO($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=P$)throw Error("field order must be greater than 1");let q=CG($-P$);return Math.ceil(q/8)}function NW($){let q=EO($);return q+Math.ceil(q/2)}function IO($,q,J=!1){S$($);let G=$.length,Q=EO(q),Y=Math.max(NW(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?$q($):N8($),U=T$(X,q-P$)+P$;return J?nQ(U,Q):d9(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var PG=BigInt(0),j8=BigInt(1);function sQ($,q){let J=q.negate();return $?J:q}function A8($,q){let J=aQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function FO($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function wW($,q){FO($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=oQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function CO($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=j8;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var jW=new WeakMap,gO=new WeakMap;function AW($){return gO.get($)||1}function PO($){if($!==PG)throw Error("invalid wNAF")}class tQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>PG){if(q&j8)J=J.add(G);G=G.double(),q>>=j8}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=wW(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=wW($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=CO(J,X,Y);if(J=U,V)Q=Q.add(sQ(z,q[K]));else G=G.add(sQ(M,q[W]))}return PO(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=wW($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===PG)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=CO(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return PO(J),G}getPrecomputes($,q,J){let G=jW.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);jW.set(q,G)}}return G}cached($,q,J){let G=AW($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=AW($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){FO(q,this.bits),gO.set($,q),jW.delete($)}hasCache($){return AW($)!==1}}function _O($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>PG||G>PG){if(J&j8)Y=Y.add(Q);if(G&j8)X=X.add(Q);Q=Q.double(),J>>=j8,G>>=j8}return{p1:Y,p2:X}}function LO($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return OW(q),q}else return c9($,{isLE:J})}function n9($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>PG))throw Error(`CURVE.${W} must be positive bigint`)}let Q=LO(q.p,J.Fp,G),Y=LO(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function eQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function $Y($,q){if(Hq($),Hq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function vP($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function bP($){if(!EG($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?i9($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function ZW($,q,J,G){if(S$($),Hq(J),q=bP(q),q.length>255)q=G(s$(i9("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=s$(q,$Y(q.length,1)),W=new Uint8Array(Y),V=$Y(J,2),M=Array(X),z=G(s$(W,$,V,$Y(0,1),U));M[0]=G(s$(z,$Y(1,1),U));for(let R=1;R<X;R++){let N=[vP(z,M[R-1]),$Y(R+1,1),U];M[R]=G(s$(...N))}return s$(...M).slice(0,J)}var vO="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var bO=($,q)=>($+($>=0?q:-q)/fO)/q;function yP($,q,J){pq("scalar",$,Nq,J);let[[G,Q],[Y,X]]=q,U=bO(X*$,J),W=bO(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<Nq,K=M<Nq;if(z)V=-V;if(K)M=-M;let R=oQ(Math.ceil(CG(J)/2))+EJ;if(V<Nq||V>=R||M<Nq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:V,k2neg:K,k2:M}}function SW($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function BW($,q){x0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(uq(J.lowS,"lowS"),uq(J.prehash,"prehash"),J.format!==void 0)SW(J.format);return J}class yO extends Error{constructor($=""){super($)}}var qq={Err:yO,_tlv:{encode:($,q)=>{let{Err:J}=qq;if(Hq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=cQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?cQ(Q.length/2|128):"";return cQ($)+Y+Q+q},decode($,q){let{Err:J}=qq;q=S$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=qq;if(r9($),$<Nq)throw new q("integer: negative integers are not allowed");let J=cQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=qq;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return N8($)}},toSig($){let{Err:q,_int:J,_tlv:G}=qq,Q=S$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=qq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(qq._tlv);Object.freeze(qq._int);Object.freeze(qq);var Nq=BigInt(0),EJ=BigInt(1),fO=BigInt(2),o9=BigInt(3),fP=BigInt(4);function kO($,q={}){let J=n9("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;x0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=xO(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function K(v,I,E){if(V&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(uq(E,"isCompressed"),E){z();let g=!G.isOdd(S);return s$(mO(g),P)}else return s$(Uint8Array.of(4),P,G.toBytes(S))}function R(v){S$(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:E}=M,Z=v.length,S=v[0],P=v.subarray(1);if(V&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let H=G.isOdd(b);if((S&1)===1!==H)b=G.neg(b);return{x:g,y:b}}else if(Z===E&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${E}`)}let N=q.toBytes===void 0?K:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(v){let I=G.sqr(v),E=G.mul(I,v);return G.add(G.add(E,G.mul(v,Y.a)),Y.b)}function A(v,I){let E=G.sqr(I),Z=j(v);return G.eql(E,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,o9),fP),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function k(v,I,E=!1){if(!G.isValid(I)||E&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof f))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return yP(v,W.basises,Q.ORDER)}function x(v,I,E,Z,S){return E=new f(G.mul(E.X,v),E.Y,E.Z),I=sQ(Z,I),E=sQ(S,E),I.add(E)}class f{static BASE=new f(Y.Gx,Y.Gy,G.ONE);static ZERO=new f(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,E){this.X=k("x",v),this.Y=k("y",I,!0),this.Z=k("z",E),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:E}=v||{};if(!v||!G.isValid(I)||!G.isValid(E))throw Error("invalid affine point");if(v instanceof f)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(E))return f.ZERO;return new f(I,E,G.ONE)}static fromBytes(v){let I=f.fromAffine(w(S$(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return f.fromBytes(TG(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(o9);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:E}=v.toAffine();if(!G.isValid(I)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!A(I,E))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(E,g),G.mul(P,Z));return L&&b}negate(){return new f(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,E=G.mul(I,o9),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,H=G.mul(Z,Z),m=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(E,d),L=G.add(g,L),g=G.sub(m,L),L=G.add(m,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(E,b),d=G.mul(v,d),B=G.sub(H,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(H,H),H=G.add(b,H),H=G.add(H,d),H=G.mul(H,B),L=G.add(L,H),d=G.mul(S,P),d=G.add(d,d),H=G.mul(d,B),g=G.sub(g,H),b=G.mul(d,m),b=G.add(b,b),b=G.add(b,b),new f(g,L,b)}add(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=Y.a,d=G.mul(Y.b,o9),B=G.mul(I,S),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.add(I,E),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,a),Y$=G.sub(Y$,G$),G$=G.add(I,Z);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(E,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q$),t=G.sub(t,L),H=G.mul(m,G$),L=G.mul(d,q$),H=G.add(L,H),L=G.sub(a,H),H=G.add(a,H),b=G.mul(L,H),a=G.add(B,B),a=G.add(a,B),q$=G.mul(m,q$),G$=G.mul(d,G$),a=G.add(a,q$),q$=G.sub(B,q$),q$=G.mul(m,q$),G$=G.add(G$,q$),B=G.mul(a,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,a),H=G.mul(t,H),H=G.add(H,B),new f(L,b,H)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(f.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let E,Z,S=(P)=>l.cached(this,P,(g)=>A8(f,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:H,f:m}=S(g),{p:d,f:B}=S(b);Z=m.add(B),E=x(I.beta,H,d,P,L)}else{let{p:P,f:g}=S(v);E=P,Z=g}return A8(f,[E,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,E=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Nq||E.is0())return f.ZERO;if(Z===EJ)return E;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:H}=_O(f,E,P,L);return x(I.beta,b,H,S,g)}else return l.unsafe(E,Z)}toAffine(v){let I=this,E=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===EJ)return!0;if(v)return v(f,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===EJ)return this;if(v)return v(f,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===EJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return uq(v,"isCompressed"),this.assertValidity(),N(f,this,v)}toHex(v=!0){return SG(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new tQ(f,q.endo?Math.ceil(y/2):y);if(y>=8)f.BASE.precompute(8);return Object.freeze(f.prototype),Object.freeze(f),f}function mO($){return Uint8Array.of($?2:3)}function xO($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function kP($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?IG:q.randomBytes,Q=Object.assign(xO($.Fp,J),{seed:Math.max(NW(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,IO(S$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,A=J._lengths;if(!EG(R))return;let T=S$(R,void 0,"key").length,_=T===w||T===j,k=T===N||!!A?.includes(T);if(_&&k)return;return _}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=eQ(U,W);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function hO($,q,J={}){let G=q;Lq(G),x0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?IG:J.randomBytes,Y=J.hmac===void 0?(S,P)=>gq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N}=kP($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=W*fO+EJ<X.ORDER;function A(S){let P=W>>EJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(S,P){SW(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return S$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){k(S,P);let g;if(P==="der"){let{r:m,s:d}=qq.toSig(S$(S));return new u(m,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),H=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(H),g)}static fromHex(S,P){return this.fromBytes(TG(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+W:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let H=X.toBytes(b),m=$.fromBytes(s$(mO((L&1)===0),H)),d=U.inv(b),B=x(S$(S,void 0,"msgHash")),a=U.create(-B*d),q$=U.create(g*d),Y$=$.BASE.multiplyUnsafe(a).add(m.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return A(this.s)}toBytes(S=w.format){if(SW(S),S==="der")return TG(qq.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),s$(Uint8Array.of(this.assertRecovery()),L,b);return s$(L,b)}toHex(S){return SG(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=N8(P),L=P.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,f=oQ(V);function y(S){return pq("num < 2^"+V,S,Nq,f),U.toBytes(S)}function l(S,P){return S$(S,void 0,"message"),P?S$(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:H}=BW(g,w);S=l(S,b);let m=x(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(m)];if(H!=null&&H!==!1){let G$=H===!0?Q(N.secretKey):H;B.push(S$(G$,void 0,"extraEntropy"))}let a=s$(...B),q$=m;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let H$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),I$=U.create(A$.x);if(I$===Nq)return;let m$=U.create(H$*U.create(q$+I$*d));if(m$===Nq)return;let R0=(A$.x===I$?0:2)|Number(A$.y&EJ),Jq=m$;if(L&&A(m$))Jq=U.neg(m$),R0^=1;return new u(I$,Jq,j?void 0:R0)}return{seed:a,k2sig:Y$}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return DO(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function E(S,P,g,L={}){let{lowS:b,prehash:H,format:m}=BW(L,w);if(g=S$(g,void 0,"publicKey"),P=l(P,H),!EG(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}k(S,m);try{let d=u.fromBytes(S,m),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q$}=d,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),H$=U.create(a*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(H$));if(A$.is0())return!1;return U.create(A$.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=BW(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N,Point:$,sign:I,verify:E,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var mP=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var xP=kO(mP),LG=hO(xP,c$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IJ=BigInt(0),E0=BigInt(1),TW=BigInt(2),hP=BigInt(8);function uP($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function uO($,q={}){let J=q,G=n9("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;x0(J,{},{uvRatio:"function"});let W=TW<<BigInt(Y.BYTES*8)-E0,V=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(A){return{isValid:!1,value:IJ}}}:J.uvRatio;if(!uP(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,A=!1){let T=A?E0:IJ;return pq("coordinate "+w,j,T,W),j}function K(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,E0,V(X.Gx*X.Gy));static ZERO=new R(IJ,E0,E0,IJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,A,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:A}=w||{};return z("x",j),z("y",A),new R(j,A,E0,V(j*A))}static fromBytes(w,j=!1){let A=Q.BYTES,{a:T,d:_}=X;w=TJ(S$(w,A,"point")),uq(j,"zip215");let k=TJ(w),u=w[A-1];k[A-1]=u&-129;let F=$q(k),x=j?W:Q.ORDER;pq("point.y",F,IJ,x);let f=V(F*F),y=V(f-E0),l=V(_*f-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let E=(I&E0)===E0,Z=(u&128)!==0;if(!j&&I===IJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==E)I=V(-I);return R.fromAffine({x:I,y:F})}static fromHex(w,j=!1){return R.fromBytes(TG(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(TW);return this}assertValidity(){let w=this,{a:j,d:A}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:k,T:u}=w,F=V(T*T),x=V(_*_),f=V(k*k),y=V(f*f),l=V(F*j),v=V(f*V(l+x)),I=V(y+V(A*V(F*x)));if(v!==I)throw Error("bad point: equation left != right (1)");let E=V(T*_),Z=V(k*u);if(E!==Z)throw Error("bad point: equation left != right (2)")}equals(w){K(w);let{X:j,Y:A,Z:T}=this,{X:_,Y:k,Z:u}=w,F=V(j*u),x=V(_*T),f=V(A*u),y=V(k*T);return F===x&&f===y}is0(){return this.equals(R.ZERO)}negate(){return new R(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:w}=X,{X:j,Y:A,Z:T}=this,_=V(j*j),k=V(A*A),u=V(TW*V(T*T)),F=V(w*_),x=j+A,f=V(V(x*x)-_-k),y=F+k,l=y-u,v=F-k,I=V(f*l),E=V(y*v),Z=V(f*v),S=V(l*y);return new R(I,E,S,Z)}add(w){K(w);let{a:j,d:A}=X,{X:T,Y:_,Z:k,T:u}=this,{X:F,Y:x,Z:f,T:y}=w,l=V(T*F),v=V(_*x),I=V(u*A*y),E=V(k*f),Z=V((T+_)*(F+x)-l-v),S=E-I,P=E+I,g=V(v-j*l),L=V(Z*S),b=V(P*g),H=V(Z*g),m=V(S*P);return new R(L,b,m,H)}subtract(w){return K(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:A}=N.cached(this,w,(T)=>A8(R,T));return A8(R,[j,A])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===IJ)return R.ZERO;if(this.is0()||w===E0)return this;return N.unsafe(this,w,(j)=>A8(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,A=w,{X:T,Y:_,Z:k}=j,u=j.is0();if(A==null)A=u?hP:Q.inv(k);let F=V(T*A),x=V(_*A),f=Q.mul(k,A);if(u)return{x:IJ,y:E0};if(f!==E0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===E0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),A=Q.toBytes(j);return A[A.length-1]|=w&E0?128:0,A}toHex(){return SG(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new tQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class EW{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){KW()}static fromHex($){KW()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return SG(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qY=BigInt(0),FG=BigInt(1),a9=BigInt(2);function pP($){return x0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function pO($){let q=pP($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X===void 0?IG:X,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?a9**BigInt(254):a9**BigInt(447),N=U?BigInt(8)*a9**BigInt(251)-FG:BigInt(4)*a9**BigInt(445)-FG,w=R+N+FG,j=(Z)=>T$(Z,J),A=T(z);function T(Z){return nQ(j(Z),M)}function _(Z){let S=TJ(S$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j($q(S))}function k(Z){return $q(Q(TJ(S$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===qY)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){pq("u",Z,qY,J),pq("scalar",S,R,w);let P=S,g=Z,L=FG,b=qY,H=Z,m=FG,d=qY;for(let a=BigInt(V-1);a>=qY;a--){let q$=P>>a&FG;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),iq=R0+Jq,cq=R0-Jq;H=j(iq*iq),m=j(g*j(cq*cq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?W(M):Z,S$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze(v),Object.freeze(E),Object.freeze({keygen:eQ(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var lP=BigInt(0),rq=BigInt(1),lO=BigInt(2),rP=BigInt(3),dP=BigInt(5),iP=BigInt(8),B8=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),LW=(()=>({p:B8,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:iP,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function iO($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=B8,U=$*$%Y*$%Y,W=h0(U,lO,Y)*U%Y,V=h0(W,rq,Y)*$%Y,M=h0(V,dP,Y)*V%Y,z=h0(M,q,Y)*M%Y,K=h0(z,J,Y)*z%Y,R=h0(K,G,Y)*K%Y,N=h0(R,Q,Y)*R%Y,w=h0(N,Q,Y)*R%Y,j=h0(w,q,Y)*M%Y;return{pow_p_5_8:h0(j,lO,Y)*$%Y,b2:U}}function cP($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var IW=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function FW($,q){let J=B8,G=T$(q*q*q,J),Q=T$(G*G*q,J),Y=iO($*Q).pow_p_5_8,X=T$($*G*Y,J),U=T$(q*X*X,J),W=X,V=T$(X*IW,J),M=U===$,z=U===T$(-$,J),K=U===T$(-$*IW,J);if(M)X=W;if(z||K)X=V;if(lq(X,J))X=T$(-X,J);return{isValid:M||z,value:X}}var Z8=uO(LW,{uvRatio:FW}),CJ=(()=>Z8.Fp)(),cO=(()=>Z8.Fn)();var s9=(()=>{let $=B8;return pO({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=iO(q);return T$(h0(J,rP,$)*G,$)},adjustScalarBytes:cP})})();var CW=IW,nP=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),oP=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),aP=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),sP=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),rO=($)=>FW(rq,$),tP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),PW=($)=>CJ.create($q($)&tP);function dO($){let{d:q}=LW,J=B8,G=(A)=>CJ.create(A),Q=G(CW*$*$),Y=G((Q+rq)*aP),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:W,value:V}=FW(Y,U),M=G(V*$);if(!lq(M,J))M=G(-M);if(!W)V=M;if(!W)X=Q;let z=G(X*(Q-rq)*sP-U),K=V*V,R=G((V+V)*U),N=G(z*nP),w=G(rq-K),j=G(rq+K);return new Z8(G(R*j),G(w*N),G(N*j),G(R*w))}class j0 extends EW{static BASE=(()=>new j0(Z8.BASE))();static ZERO=(()=>new j0(Z8.ZERO))();static Fp=(()=>CJ)();static Fn=(()=>cO)();constructor($){super($)}static fromAffine($){return new j0(Z8.fromAffine($))}assertSame($){if(!($ instanceof j0))throw Error("RistrettoPoint expected")}init($){return new j0($)}static fromBytes($){r$($,32);let{a:q,d:J}=LW,G=B8,Q=(_)=>CJ.create(_),Y=PW($);if(!KO(CJ.toBytes(Y),$)||lq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(rq+q*X),W=Q(rq-q*X),V=Q(U*U),M=Q(W*W),z=Q(q*J*V-M),{isValid:K,value:R}=rO(Q(z*M)),N=Q(R*W),w=Q(R*N*z),j=Q((Y+Y)*N);if(lq(j,G))j=Q(-j);let A=Q(U*w),T=Q(j*A);if(!K||lq(T,G)||A===lP)throw Error("invalid ristretto255 encoding 2");return new j0(new Z8(j,A,rq,T))}static fromHex($){return j0.fromBytes(AQ($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=B8,Y=(w)=>CJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),W=Y(U*U),{value:V}=rO(Y(X*W)),M=Y(V*X),z=Y(V*U),K=Y(M*z*G),R;if(lq(G*K,Q)){let w=Y(q*CW),j=Y($*CW);$=w,q=j,R=Y(M*oP)}else R=z;if(lq($*K,Q))q=Y(-q);let N=Y((J-q)*R);if(lq(N,Q))N=Y(-N);return CJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(W)=>CJ.create(W),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(j0.ZERO)}}Object.freeze(j0.BASE);Object.freeze(j0.ZERO);Object.freeze(j0.prototype);Object.freeze(j0);var eP=Object.freeze({Point:j0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=ZW($,J,64,H9);return eP.deriveToCurve(G)},hashToScalar($,q={DST:vO}){let J=ZW($,q.DST,64,H9);return cO.create($q(J))},deriveToCurve($){r$($,64);let q=PW($.subarray(0,32)),J=dO(q),G=PW($.subarray(32,64)),Q=dO(G);return new j0(J.add(Q))}});var nO=!1,$L=!1;async function oO($,q){if($L)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function _W($,q){return await oO(async()=>{let J=gW($)?$:await JL($),G=await crypto.subtle.importKey("raw",GL(q),{name:"X25519"},nO,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(gW($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return s9.scalarMult($,q)})}async function vW($){return await oO(async()=>{return _W($,s9.GuBytes)},()=>{if(gW($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return s9.scalarMultBase($)})}var qL=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function JL($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...qL,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},nO,["deriveBits"])}function gW($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function GL($){return $}class aO{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),YL(JY($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=JY($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:JY(this.transcript)}}}function YL($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function JY($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function t9($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function sO($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function tO($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class dq{args;body;constructor($,q){this.args=$,this.body=q}}function bW($){let q=[];q.push(`age-encryption.org/v1
 `);for(let J of $){q.push("-> "+J.args.join(" ")+`
 `);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(a0.encode(J.body.subarray(G,Q))+`
 `)}if(J.body.length%48===0)q.push(`