@rizom/ops 0.2.0-alpha.63 → 0.2.0-alpha.64
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +2 -2
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -54,7 +54,7 @@ return `+str.trim()+`;
|
|
|
54
54
|
`).join(`
|
|
55
55
|
`+Y),$.push(Q+"m+"+_9.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=IT()+q+" "+$[0]}function IT(){if(BD.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function CT(...$){return process.stderr.write(g9.formatWithOptions(BD.inspectOpts,...$)+`
|
|
56
56
|
`)}function PT($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function LT(){return process.env.DEBUG}function FT($){$.inspectOpts={};let q=Object.keys(BD.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=BD.inspectOpts[q[J]]}_9.exports=k7()(BD);var{formatters:ZD}=_9.exports;ZD.o=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts).split(`
|
|
57
|
-
`).map((q)=>q.trim()).join(" ")};ZD.O=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts)}});var ED=X$((jx,h7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)h7.exports=OD();else h7.exports=TD()});var S1=X$((ip,B1)=>{var p9=Object.prototype.hasOwnProperty,Z1=Object.prototype.toString,O1=Object.defineProperty,H1=Object.getOwnPropertyDescriptor,N1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Z1.call(q)==="[object Array]"},w1=function(q){if(!q||Z1.call(q)!=="[object Object]")return!1;var J=p9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&p9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||p9.call(q,Q)},j1=function(q,J){if(O1&&J.name==="__proto__")O1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},A1=function(q,J){if(J==="__proto__"){if(!p9.call(q,J))return;else if(H1)return H1(q,J).value}return q[J]};B1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],W=1,V=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=A1(U,J),Q=A1(q,J),U!==Q){if(M&&Q&&(w1(Q)||(Y=N1(Q)))){if(Y)Y=!1,X=G&&N1(G)?G:[];else X=G&&w1(G)?G:{};j1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")j1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as oH}from"util";var aH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function XX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function UX($,q){let J=$[q];return typeof J==="string"?J:void 0}function nW($){let{values:q,positionals:J}=oH({args:$,options:aH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:XX(q,"help"),version:XX(q,"version"),dryRun:XX(q,"dry-run"),pushTo:UX(q,"push-to"),cohort:UX(q,"cohort"),anchorId:UX(q,"anchor-id")}}}var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.63",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000","test:smoke":"RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as _4,mkdirSync as v4,readFileSync as rU,writeFileSync as dU}from"fs";import{dirname as b4,join as aM}from"path";function WX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u$($,q,J=""){let G=WX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Bq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L$($.outputLen),L$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){u$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function K0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function E8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var tH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function eH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function $6($){for(let q=0;q<$.length;q++)$[q]=eH($[q]);return $}var VX=tH?($)=>$:$6,aW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),q6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function UY($){if(u$($),aW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=q6[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function oW($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function bG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(aW)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=oW($.charCodeAt(Y)),U=oW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function J6($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function MX($,q=""){if(typeof $==="string")return J6($);return u$($,void 0,q)}function zX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function WY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function RX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Sq($=32){L$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var KX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class DX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Bq($),u$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),K0(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),YY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Tq=(()=>{let $=(q,J,G)=>new DX(q,J).update(G).digest();return $.create=(q,J)=>new DX(q,J),$})();function yG($,q,J){if(Bq($),J===void 0)J=new Uint8Array($.outputLen);return Tq($,J,q)}var OX=Uint8Array.of(0),sW=Uint8Array.of();function HX($,q,J,G=32){Bq($),L$(G,"length"),u$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=sW;else u$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Tq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)OX[0]=M+1,W.update(M===0?sW:V).update(J).update(OX).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),K0(V,OX),X.slice(0,G)}var fG=($,q,J,G,Q)=>HX($,yG($,q,J),G,Q);function tW($,q,J){return $&q^~$&J}function eW($,q,J){return $&q^$&J^q&J}class VY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=E8(this.buffer)}update($){T8(this),u$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=E8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,K0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=E8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Iq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var MY=BigInt(4294967295),$5=BigInt(32);function G6($,q=!1){if(q)return{h:Number($&MY),l:Number($>>$5&MY)};return{h:Number($>>$5&MY)|0,l:Number($&MY)|0}}function q5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=G6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var NX=($,q,J)=>$>>>J,wX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,mG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var J5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),G5=($,q,J,G)=>q+J+G+($/4294967296|0)|0,Q5=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),Y5=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,X5=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),U5=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var Y6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class jX extends VY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],K=cq[M-2],R=u0(z,7)^u0(z,18)^z>>>3,N=u0(K,17)^u0(K,19)^K>>>10;cq[M]=N+cq[M-7]+R+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=u0(X,6)^u0(X,11)^u0(X,25),K=V+z+tW(X,U,W)+Y6[M]+cq[M]|0,N=(u0(J,2)^u0(J,13)^u0(J,22))+eW(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){K0(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),K0(this.buffer)}}class W5 extends jX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class X6 extends jX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(28)}}var V5=(()=>q5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),U6=(()=>V5[0])(),W6=(()=>V5[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends VY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,k=oq[T-15]|0,u=FJ(_,k,1)^FJ(_,k,8)^NX(_,k,7),F=gJ(_,k,1)^gJ(_,k,8)^wX(_,k,7),x=nq[T-2]|0,f=oq[T-2]|0,y=FJ(x,f,19)^kG(x,f,61)^NX(x,f,6),l=gJ(x,f,19)^mG(x,f,61)^wX(x,f,6),v=Q5(F,l,oq[T-7],oq[T-16]),I=Y5(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^kG(M,z,41),k=gJ(M,z,14)^gJ(M,z,18)^mG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=X5(A,k,F,W6[T],oq[T]),f=U5(x,j,_,u,U6[T],nq[T]),y=x|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^mG(J,G,34)^mG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Gq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=J5(y,v,E);J=G5(Z,f,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=Gq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Gq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Gq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Gq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){K0(nq,oq)}destroy(){this.destroyed=!0,K0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class M5 extends xG{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(64)}}class V6 extends xG{Ah=p$[0]|0;Al=p$[1]|0;Bh=p$[2]|0;Bl=p$[3]|0;Ch=p$[4]|0;Cl=p$[5]|0;Dh=p$[6]|0;Dl=p$[7]|0;Eh=p$[8]|0;El=p$[9]|0;Fh=p$[10]|0;Fl=p$[11]|0;Gh=p$[12]|0;Gl=p$[13]|0;Hh=p$[14]|0;Hl=p$[15]|0;constructor(){super(48)}}var e$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class M6 extends xG{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(28)}}class z6 extends xG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(32)}}var r$=RX(()=>new W5,KX(1));var zY=RX(()=>new M5,KX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function HY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function BX($){if(!HY($))throw Error("Uint8Array expected")}function O5($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function H5($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function uG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function KY($){if(!Array.isArray($))throw Error("array expected")}function DY($,q){if(!O5(!0,q))throw Error(`${$}: array of strings expected`)}function SX($,q){if(!O5(!1,q))throw Error(`${$}: array of numbers expected`)}function C0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P0($){let q=typeof $==="string"?$.split(""):$,J=q.length;DY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return KY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return KY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L0($=""){return aq("join",$),{encode:(q)=>{return DY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function NY($,q="="){return uG($),aq("padding",q),{encode(J){DY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){DY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function N5($){return H5($),{encode:(q)=>q,decode:(q)=>$(q)}}function z5($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(KY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(uG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,W=!0;for(let V=G;V<X;V++){let M=Y[V],z=q*U,K=z+M;if(!Number.isSafeInteger(K)||z/q!==U||K-M!==z)throw Error("convertRadix: carry overflow");let R=K/J;U=K%J;let N=Math.floor(R);if(Y[V]=N,!Number.isSafeInteger(N)||N*J+U!==K)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var w5=($,q)=>q===0?$:w5(q,$%q),OY=($,q)=>$+(q-w5($,q)),RY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function AX($,q,J,G){if(KY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(OY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${OY(q,J)}`);let Q=0,Y=0,X=RY[q],U=RY[J]-1,W=[];for(let V of $){if(uG(V),V>=X)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)W.push((Q>>Y-J&U)>>>0);let M=RY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)W.push(Q>>>0);return W}function R6($){uG($);let q=256;return{encode:(J)=>{if(!HY(J))throw Error("radix.encode input should be Uint8Array");return z5(Array.from(J),q,$)},decode:(J)=>{return SX("radix.decode",J),Uint8Array.from(z5(J,$,q))}}}function b0($,q=!1){if(uG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(OY(8,$)>32||OY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!HY(J))throw Error("radix2.encode input should be Uint8Array");return AX(Array.from(J),8,$,!q)},decode:(J)=>{return SX("radix2.decode",J),Uint8Array.from(AX(J,$,8,q))}}}function R5($){return H5($),function(...q){try{return $.apply(null,q)}catch(J){}}}var b3=C0(b0(4),P0("0123456789ABCDEF"),L0("")),y3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),NY(5),L0("")),f3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L0("")),k3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),NY(5),L0("")),m3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L0("")),x3=C0(b0(5),P0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L0(""),N5(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),j5=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),A5=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},TX=j5?{encode($){return BX($),$.toBase64()},decode($){return A5($,!1)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),NY(6),L0("")),p0=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L0("")),h3=j5?{encode($){return BX($),$.toBase64({alphabet:"base64url"})},decode($){return A5($,!0)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),NY(6),L0("")),u3=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L0("")),EX=($)=>C0(R6(58),P0($),L0("")),p3=EX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),l3=EX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),r3=EX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var ZX=C0(P0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L0("")),K5=[996825010,642813549,513874426,1027748829,705979059];function hG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<K5.length;G++)if((q>>G&1)===1)J^=K5[G];return J}function D5($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=hG(Q)^X>>5}Q=hG(Q);for(let Y=0;Y<G;Y++)Q=hG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=hG(Q)^Y;for(let Y=0;Y<6;Y++)Q=hG(Q);return Q^=J,ZX.encode(AX([Q%RY[30]],30,5,!1))}function Z5($){let q=$==="bech32"?1:734539939,J=b0(5),G=J.decode,Q=J.encode,Y=R5(G);function X(z,K,R=90){if(aq("bech32.encode prefix",z),HY(K))K=Array.from(K);SX("bech32.encode",K);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+K.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),A=D5(j,K,q);return`${j}1${ZX.encode(K)}${A}`}function U(z,K=90){aq("bech32.decode input",z);let R=z.length;if(R<8||K!==!1&&R>K)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${K})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),A=N.slice(w+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=ZX.decode(A).slice(0,-6),_=D5(j,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:j,words:T}}let W=R5(U);function V(z){let{prefix:K,words:R}=U(z,!1);return{prefix:K,words:R,bytes:G(R)}}function M(z,K){return X(z,Q(K))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l0=Z5("bech32"),d3=Z5("bech32m");var K6=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),D6={encode($){return BX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},i3=K6?D6:C0(b0(4),P0("0123456789abcdef"),L0(""),N5(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function H6($,q,J,G){Bq($);let Q=WY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L$(Y,"c"),L$(X,"dkLen"),L$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let W=MX(q,"password"),V=MX(J,"salt"),M=new Uint8Array(X),z=Tq.create($,W),K=z._cloneInto().update(V);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:K}}function N6($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return K0(Q),J}function IX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:W}=H6($,q,J,G),V,M=new Uint8Array(4),z=E8(M),K=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(V=W._cloneInto(V)).update(M).digestInto(K),w.set(K.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(V).update(K).digestInto(K);for(let A=0;A<w.length;A++)w[A]^=K[A]}}return N6(U,W,X,V,K)}function B5($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],K=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],k=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let d=0;d<8;d+=2)l^=N$(F+L|0,7),Z^=N$(l+F|0,9),L^=N$(Z+l|0,13),F^=N$(L+Z|0,18),S^=N$(v+x|0,7),b^=N$(S+v|0,9),x^=N$(b+S|0,13),v^=N$(x+b|0,18),H^=N$(P+I|0,7),f^=N$(H+P|0,9),I^=N$(f+H|0,13),P^=N$(I+f|0,18),y^=N$(m+g|0,7),E^=N$(y+m|0,9),g^=N$(E+y|0,13),m^=N$(g+E|0,18),x^=N$(F+y|0,7),f^=N$(x+F|0,9),y^=N$(f+x|0,13),F^=N$(y+f|0,18),I^=N$(v+l|0,7),E^=N$(I+v|0,9),l^=N$(E+I|0,13),v^=N$(l+E|0,18),g^=N$(P+S|0,7),Z^=N$(g+P|0,9),S^=N$(Z+g|0,13),P^=N$(S+Z|0,18),L^=N$(m+H|0,7),b^=N$(L+m|0,9),H^=N$(b+L|0,13),m^=N$(H+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=W+f|0,Q[Y++]=V+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=K+I|0,Q[Y++]=R+E|0,Q[Y++]=N+Z|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=k+H|0,Q[Y++]=u+m|0}function CX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(B5(J,X,$,q,J,Y),U>0)X+=16;B5(J,Y,$,q+=16,J,X)}}function w6($,q,J){let G=WY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:W,maxmem:V,onProgress:M}=G;if(L$(Q,"N"),L$(Y,"r"),L$(X,"p"),L$(U,"dkLen"),L$(W,"asyncTick"),L$(V,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,K=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let w=IX(r$,$,q,{c:1,dkLen:z*X}),j=XY(w),A=XY(new Uint8Array(z*Q)),T=XY(new Uint8Array(z)),_=()=>{};if(M){let k=2*Q*X,u=Math.max(Math.floor(k/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===k))M(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:K,V:A,B32:j,B:w,tmp:T,blockMixCb:_,asyncTick:W}}function j6($,q,J,G,Q){let Y=IX(r$,$,J,{c:1,dkLen:q});return K0(J,G,Q),Y}function S5($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V:W,B32:V,B:M,tmp:z,blockMixCb:K}=w6($,q,J);VX(V);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)W[w]=V[N+w];for(let w=0,j=0;w<G-1;w++)CX(W,j,W,j+=U,Q),K();CX(W,(G-1)*U,V,N,Q),K();for(let w=0;w<G;w++){let j=(V[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=V[N+A]^W[j*U+A];CX(z,0,V,N,Q),K()}}return VX(V),j6($,X,M,W,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function A6($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function wY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,q,J=""){let G=A6($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function PX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function T5($,q,J=!1){b$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!C8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function Z6($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),B6=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var S6=($)=>{for(let q=0;q<$.length;q++)$[q]=B6($[q]);return $},Cq=_J?($)=>$:S6;function E5($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function I5($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function C5($,q,J){let G=q,Q=J||(()=>[]),Y=(U,W)=>G(W,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...W)=>G(U,...W),Y}var P5=($,q)=>{function J(G,...Q){if(b$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b$(z,void 0,"output")}},W=!1;return{encrypt(M,z){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,b$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function pG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!C8(q))throw Error("invalid output, must be aligned");return q}function L5($,q,J){I8($),I8(q),wY(J);let G=new Uint8Array(16),Q=Z6(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function C8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b$($))}var g5=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),T6=(()=>Cq(Qq(g5("expand 16-byte k"))))(),E6=(()=>Cq(Qq(g5("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var lG=64,I6=16,LX=(()=>4294967295)(),F5=Uint32Array.of();function C6($,q,J,G,Q,Y,X,U){let W=Q.length,V=new Uint8Array(lG),M=Qq(V),z=_J&&C8(Q)&&C8(Y),K=z?Qq(Q):F5,R=z?Qq(Y):F5;if(!_J){for(let N=0;N<W;X++){if($(q,J,G,M,X,U),Cq(M),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,W-N);for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}return}for(let N=0;N<W;X++){if($(q,J,G,M,X,U),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,W-N);if(z&&w===lG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<I6;A++)T=j+A,R[T]=K[T]^M[A];N+=lG;continue}for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}}function _5($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=E5({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),wY(Y),wY(J),(U,W,V,M,z=0)=>{b$(U,void 0,"key"),b$(W,void 0,"nonce"),b$(V,void 0,"data");let K=V.length;if(M=pG(K,M,!1),I8(z),z<0||z>=LX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=P8(U)),j=E6;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=T6,R.push(w);else throw b$(U,32,"arx key"),Error("invalid key size");if(!_J||!C8(W))R.push(W=P8(W));let A=Qq(w);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=W.subarray(0,16);if(_J)G(j,A,Qq(k),A);else{let u=Cq(Uint32Array.from(j));G(u,A,Qq(k),A),r0(u),Cq(A)}W=W.subarray(16)}else if(!_J)Cq(A);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let k=new Uint8Array(12);k.set(W,Y?0:12-W.length),W=k,R.push(W)}let _=Cq(Qq(W));try{return C6($,j,A,_,V,M,z,X),M}finally{r0(...R)}}}function d$($,q){return $[q++]&255|($[q++]&255)<<8}class v5{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b$($,32,"key"));let q=d$($,0),J=d$($,2),G=d$($,4),Q=d$($,6),Y=d$($,8),X=d$($,10),U=d$($,12),W=d$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=d$($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],W=Y[2],V=Y[3],M=Y[4],z=Y[5],K=Y[6],R=Y[7],N=Y[8],w=Y[9],j=d$($,q+0),A=d$($,q+2),T=d$($,q+4),_=d$($,q+6),k=d$($,q+8),u=d$($,q+10),F=d$($,q+12),x=d$($,q+14),f=Q[0]+(j&8191),y=Q[1]+((j>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|k<<12)&8191),E=Q[5]+(k>>>1&8191),Z=Q[6]+((k>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+f*X+y*(5*w)+l*(5*N)+v*(5*R)+I*(5*K);L=b>>>13,b&=8191,b+=E*(5*z)+Z*(5*M)+S*(5*V)+P*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let H=L+f*U+y*X+l*(5*w)+v*(5*N)+I*(5*R);L=H>>>13,H&=8191,H+=E*(5*K)+Z*(5*z)+S*(5*M)+P*(5*V)+g*(5*W),L+=H>>>13,H&=8191;let m=L+f*W+y*U+l*X+v*(5*w)+I*(5*N);L=m>>>13,m&=8191,m+=E*(5*R)+Z*(5*K)+S*(5*z)+P*(5*M)+g*(5*V),L+=m>>>13,m&=8191;let d=L+f*V+y*W+l*U+v*X+I*(5*w);L=d>>>13,d&=8191,d+=E*(5*N)+Z*(5*R)+S*(5*K)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+f*M+y*V+l*W+v*U+I*X;L=B>>>13,B&=8191,B+=E*(5*w)+Z*(5*N)+S*(5*R)+P*(5*K)+g*(5*z),L+=B>>>13,B&=8191;let a=L+f*z+y*M+l*V+v*W+I*U;L=a>>>13,a&=8191,a+=E*X+Z*(5*w)+S*(5*N)+P*(5*R)+g*(5*K),L+=a>>>13,a&=8191;let q$=L+f*K+y*z+l*M+v*V+I*W;L=q$>>>13,q$&=8191,q$+=E*U+Z*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+f*R+y*K+l*z+v*M+I*V;L=Y$>>>13,Y$&=8191,Y$+=E*W+Z*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+f*N+y*R+l*K+v*z+I*M;L=G$>>>13,G$&=8191,G$+=E*V+Z*W+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let t=L+f*w+y*N+l*R+v*K+I*z;L=t>>>13,t&=8191,t+=E*M+Z*V+S*W+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,H+=L,Q[0]=b,Q[1]=H,Q[2]=m,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r0(J)}update($){PX(this),b$($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r0(this.h,this.r,this.buffer,this.pad)}digestInto($){PX(this),T5($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var b5=C5(32,($)=>new v5($));function P6($,q,J,G,Q,Y=20){let X=$[0],U=$[1],W=$[2],V=$[3],M=q[0],z=q[1],K=q[2],R=q[3],N=q[4],w=q[5],j=q[6],A=q[7],T=Q,_=J[0],k=J[1],u=J[2],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),Z=Z+L|0,l=w$(l^Z,12),F=F+l|0,L=w$(L^F,8),Z=Z+L|0,l=w$(l^Z,7),x=x+v|0,b=w$(b^x,16),S=S+b|0,v=w$(v^S,12),x=x+v|0,b=w$(b^x,8),S=S+b|0,v=w$(v^S,7),f=f+I|0,H=w$(H^f,16),P=P+H|0,I=w$(I^P,12),f=f+I|0,H=w$(H^f,8),P=P+H|0,I=w$(I^P,7),y=y+E|0,m=w$(m^y,16),g=g+m|0,E=w$(E^g,12),y=y+E|0,m=w$(m^y,8),g=g+m|0,E=w$(E^g,7),F=F+v|0,m=w$(m^F,16),P=P+m|0,v=w$(v^P,12),F=F+v|0,m=w$(m^F,8),P=P+m|0,v=w$(v^P,7),x=x+I|0,L=w$(L^x,16),g=g+L|0,I=w$(I^g,12),x=x+I|0,L=w$(L^x,8),g=g+L|0,I=w$(I^g,7),f=f+E|0,b=w$(b^f,16),Z=Z+b|0,E=w$(E^Z,12),f=f+E|0,b=w$(b^f,8),Z=Z+b|0,E=w$(E^Z,7),y=y+l|0,H=w$(H^y,16),S=S+H|0,l=w$(l^S,12),y=y+l|0,H=w$(H^y,8),S=S+H|0,l=w$(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+x|0,G[d++]=W+f|0,G[d++]=V+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=K+I|0,G[d++]=R+E|0,G[d++]=N+Z|0,G[d++]=w+S|0,G[d++]=j+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=k+H|0,G[d++]=u+m|0}var L6=_5(P6,{counterRight:!1,counterLength:4,allowShortKeys:!1});var F6=new Uint8Array(16),y5=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(F6.subarray(J))},g6=new Uint8Array(32);function f5($,q,J,G,Q){if(Q!==void 0)b$(Q,void 0,"AAD");let Y=$(q,J,g6),X=L5(G.length,Q?Q.length:0,!0),U=b5.create(Y);if(Q)y5(U,Q);y5(U,G),U.update(X);let W=U.digest();return r0(Y,X),W}var _6=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=pG(U+16,X,!1),X.set(Y);let W=X.subarray(0,-16);$(q,J,W,W,1);let V=f5($,q,J,W,G);return X.set(V,U),r0(V),X},decrypt(Y,X){X=pG(Y.length-16,X,!1);let U=Y.subarray(0,-16),W=Y.subarray(-16),V=f5($,q,J,U,G);if(!I5(W,V))throw r0(V),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r0(V),X}}},sq=P5({blockSize:64,nonceLength:12,tagLength:16},_6(L6));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function x$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+W)}return $}function y0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");x$($.outputLen),x$($.blockLen)}function Lq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function jY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function AY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function ZY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d0($,q){return $<<32-q|$>>>q}var v6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function b6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function y6($){for(let q=0;q<$.length;q++)$[q]=b6($[q]);return $}var FX=v6?($)=>$:y6,m5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),f6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q$($),m5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=f6[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function k5($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(m5)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=k5($.charCodeAt(Y)),U=k5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function g$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _X=BigInt(0),gX=BigInt(1);function rG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function x5($){if(typeof $==="bigint"){if(!BY($))throw Error("positive bigint expected, got "+$)}else x$($);return $}function dG($){let q=x5($).toString(16);return q.length&1?"0"+q:q}function h5($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_X:BigInt("0x"+$)}function $J($){return h5(vJ($))}function qJ($){return h5(vJ(SY(Q$($)).reverse()))}function g8($,q){x$(q),$=x5($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function iG($,q){return g8($,q).reverse()}function SY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var BY=($)=>typeof $==="bigint"&&_X<=$;function k6($,q,J){return BY($)&&BY(q)&&BY(J)&&q<=$&&$<J}function cG($,q,J,G){if(!k6(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function vX($){let q;for(q=0;$>_X;$>>=gX,q+=1);return q}var nG=($)=>(gX<<BigInt($))-gX;function u5($,q,J){if(x$($,"hashLen"),x$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,g$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return g$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while(!(T=A(N())))R();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}function bX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O0=BigInt(0),q0=BigInt(1),fJ=BigInt(2),r5=BigInt(3),d5=BigInt(4),i5=BigInt(5),m6=BigInt(7),c5=BigInt(8),x6=BigInt(9),n5=BigInt(16);function D0($,q){let J=$%q;return J>=O0?J:q+J}function f0($,q,J){let G=$;while(q-- >O0)G*=G,G%=J;return G}function p5($,q){if($===O0)throw Error("invert: expected non-zero number");if(q<=O0)throw Error("invert: expected positive modulus, got "+q);let J=D0($,q),G=q,Q=O0,Y=q0,X=q0,U=O0;while(J!==O0){let V=G/J,M=G%J,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==q0)throw Error("invert: does not exist");return D0(Q,q)}function yX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function o5($,q){let J=($.ORDER+q0)/d5,G=$.pow(q,J);return yX($,G,q),G}function h6($,q){let J=($.ORDER-i5)/c5,G=$.mul(q,fJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,fJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return yX($,U,q),U}function u6($){let q=TY($),J=a5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+m6)/n5;return(U,W)=>{let V=U.pow(W,X),M=U.mul(V,G),z=U.mul(V,Q),K=U.mul(V,Y),R=U.eql(U.sqr(M),W),N=U.eql(U.sqr(z),W);V=U.cmov(V,M,R),M=U.cmov(K,z,N);let w=U.eql(U.sqr(M),W),j=U.cmov(V,M,w);return yX(U,j,W),j}}function a5($){if($<r5)throw Error("sqrt is not defined for small field");let q=$-q0,J=0;while(q%fJ===O0)q/=fJ,J++;let G=fJ,Q=TY($);while(l5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return o5;let Y=Q.pow(G,q),X=(q+q0)/fJ;return function(W,V){if(W.is0(V))return V;if(l5(W,V)!==1)throw Error("Cannot find square root");let M=J,z=W.mul(W.ONE,Y),K=W.pow(V,q),R=W.pow(V,X);while(!W.eql(K,W.ONE)){if(W.is0(K))return W.ZERO;let N=1,w=W.sqr(K);while(!W.eql(w,W.ONE))if(N++,w=W.sqr(w),N===M)throw Error("Cannot find square root");let j=q0<<BigInt(M-N-1),A=W.pow(z,j);M=N,z=W.sqr(A),K=W.mul(K,z),R=W.mul(R,A)}return R}}function p6($){if($%d5===r5)return o5;if($%c5===i5)return h6;if($%n5===x6)return u6($);return a5($)}var l6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function fX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=l6.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function r6($,q,J){if(J<O0)throw Error("invalid exponent, negatives unsupported");if(J===O0)return $.ONE;if(J===q0)return q;let G=$.ONE,Q=q;while(J>O0){if(J&q0)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q0}return G}function oG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,W)=>{if($.is0(U))return X;return G[W]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,W)=>{if($.is0(U))return X;return G[W]=$.mul(X,G[W]),$.mul(X,U)},Y),G}function l5($,q){let J=($.ORDER-q0)/fJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function d6($,q){if(q!==void 0)x$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class s5{ORDER;BITS;BYTES;isLE;ZERO=O0;ONE=q0;_lengths;_sqrt;_mod;constructor($,q={}){if($<=O0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=d6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return O0<=$&&$<this.ORDER}is0($){return $===O0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q0)===q0}neg($){return D0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D0($*$,this.ORDER)}add($,q){return D0($+q,this.ORDER)}sub($,q){return D0($-q,this.ORDER)}mul($,q){return D0($*q,this.ORDER)}pow($,q){return r6(this,$,q)}div($,q){return D0($*p5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return p5($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=p6(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?iG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return oG(this,$)}cmov($,q,J){return J?q:$}}function TY($,q={}){return new s5($,q)}function t5($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function kX($){let q=t5($);return q+Math.ceil(q/2)}function e5($,q,J=!1){Q$($);let G=$.length,Q=t5(q),Y=kX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D0(X,q-q0)+q0;return J?iG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),kJ=BigInt(1);function aG($,q){let J=q.negate();return $?J:q}function uX($,q){let J=oG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function GV($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function mX($,q){GV($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=nG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function $V($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=kJ;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var xX=new WeakMap,QV=new WeakMap;function hX($){return QV.get($)||1}function qV($){if($!==_8)throw Error("invalid wNAF")}class pX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&kJ)J=J.add(G);G=G.double(),q>>=kJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=mX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=mX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=$V(J,X,Y);if(J=U,V)Q=Q.add(aG(z,q[K]));else G=G.add(aG(M,q[W]))}return qV(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=mX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=$V(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return qV(J),G}getPrecomputes($,q,J){let G=xX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);xX.set(q,G)}}return G}cached($,q,J){let G=hX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=hX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){GV(q,this.bits),QV.set($,q),xX.delete($)}hasCache($){return hX($)!==1}}function YV($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&kJ)Y=Y.add(Q);if(G&kJ)X=X.add(Q);Q=Q.double(),J>>=kJ,G>>=kJ}return{p1:Y,p2:X}}function JV($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return fX(q),q}else return TY($,{isLE:J})}function XV($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>_8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=JV(q.p,J.Fp,G),Y=JV(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function EY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sG=BigInt(0),v8=BigInt(1),IY=BigInt(2);function i6($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function UV($){let q=i6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X||tq,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?IY**BigInt(254):IY**BigInt(447),N=U?BigInt(8)*IY**BigInt(251)-v8:BigInt(4)*IY**BigInt(445)-v8,w=R+N+v8,j=(Z)=>D0(Z,J),A=T(z);function T(Z){return iG(j(Z),M)}function _(Z){let S=SY(Q$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(qJ(S))}function k(Z){return qJ(Q(SY(Q$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===sG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){cG("u",Z,sG,J),cG("scalar",S,R,w);let P=S,g=Z,L=v8,b=sG,H=Z,m=v8,d=sG;for(let a=BigInt(V-1);a>=sG;a--){let q$=P>>a&v8;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;H=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=W(M))=>{return Q$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze({keygen:EY(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}class lX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z0(G)}update($){return Lq(this),this.iHash.update($),this}digestInto($){Lq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new lX($,q).update(J).digest();b8.create=($,q)=>new lX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WV=($,q)=>($+($>=0?q:-q)/MV)/q;function c6($,q,J){let[[G,Q],[Y,X]]=q,U=WV(X*$,J),W=WV(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<Fq,K=M<Fq;if(z)V=-V;if(K)M=-M;let R=nG(Math.ceil(vX(J)/2))+y8;if(V<Fq||V>=R||M<Fq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:V,k2neg:K,k2:M}}function dX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function rX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(rG(J.lowS,"lowS"),rG(J.prehash,"prehash"),J.format!==void 0)dX(J.format);return J}class VV extends Error{constructor($=""){super($)}}var GJ={Err:VV,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=dG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?dG(Q.length/2|128):"";return dG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Fq)throw new q("integer: negative integers are not allowed");let J=dG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Fq=BigInt(0),y8=BigInt(1),MV=BigInt(2),CY=BigInt(3),n6=BigInt(4);function iX($,q={}){let J=XV("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=RV(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,E,Z){let{x:S,y:P}=E.toAffine(),g=G.toBytes(S);if(rG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g$(zV(L),g)}else return g$(Uint8Array.of(4),g,G.toBytes(P))}function K(I){Q$(I,void 0,"Point");let{publicKey:E,publicKeyUncompressed:Z}=V,S=I.length,P=I[0],g=I.subarray(1);if(S===E&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),H;try{H=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let m=G.isOdd(H);if((P&1)===1!==m)H=G.neg(H);return{x:L,y:H}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),H=G.fromBytes(g.subarray(L,L*2));if(!j(b,H))throw Error("bad point: is not on curve");return{x:b,y:H}}else throw Error(`bad point: got length ${S}, expected compressed=${E} or uncompressed=${Z}`)}let R=q.toBytes||z,N=q.fromBytes||K;function w(I){let E=G.sqr(I),Z=G.mul(E,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function j(I,E){let Z=G.sqr(E),S=w(I);return G.eql(Z,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,CY),n6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,E,Z=!1){if(!G.isValid(E)||Z&&G.is0(E))throw Error(`bad point coordinate ${I}`);return E}function k(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!W||!W.basises)throw Error("no endo");return c6(I,W.basises,Q.ORDER)}let F=bX((I,E)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=bX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:E,y:Z}=I.toAffine();if(!G.isValid(E)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!j(E,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function f(I,E,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),E=aG(S,E),Z=aG(P,Z),E.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,E,Z){this.X=_("x",I),this.Y=_("y",E,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:E,y:Z}=I||{};if(!I||!G.isValid(E)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(Z))return y.ZERO;return new y(E,Z,G.ONE)}static fromBytes(I){let E=y.fromAffine(N(Q$(I,void 0,"point")));return E.assertValidity(),E}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,E=!0){if(v.createCache(this,I),!E)this.multiply(CY);return this}assertValidity(){x(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(E,L),G.mul(P,S)),H=G.eql(G.mul(Z,L),G.mul(g,S));return b&&H}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:E}=Y,Z=G.mul(E,CY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),H=G.mul(S,g),H=G.add(H,H),L=G.mul(I,H),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),H=G.mul(Z,H),B=G.mul(I,B),a=G.sub(m,B),a=G.mul(I,a),a=G.add(a,H),H=G.add(m,m),m=G.add(H,m),m=G.add(m,B),m=G.mul(m,a),b=G.add(b,m),B=G.mul(P,g),B=G.add(B,B),m=G.mul(B,a),L=G.sub(L,m),H=G.mul(B,d),H=G.add(H,H),H=G.add(H,H),new y(L,b,H)}add(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,H=G.ZERO,m=G.ZERO,d=Y.a,B=G.mul(Y.b,CY),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.mul(S,L),G$=G.add(E,Z),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(a,q$),G$=G.sub(G$,t),t=G.add(E,S);let H$=G.add(P,L);return t=G.mul(t,H$),H$=G.add(a,Y$),t=G.sub(t,H$),H$=G.add(Z,S),b=G.add(g,L),H$=G.mul(H$,b),b=G.add(q$,Y$),H$=G.sub(H$,b),m=G.mul(d,t),b=G.mul(B,Y$),m=G.add(b,m),b=G.sub(q$,m),m=G.add(q$,m),H=G.mul(b,m),q$=G.add(a,a),q$=G.add(q$,a),Y$=G.mul(d,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(a,Y$),Y$=G.mul(d,Y$),t=G.add(t,Y$),a=G.mul(q$,t),H=G.add(H,a),a=G.mul(H$,t),b=G.mul(G$,b),b=G.sub(b,a),a=G.mul(G$,q$),m=G.mul(H$,m),m=G.add(m,a),new y(b,H,m)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:E}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>uX(y,L));if(E){let{k1neg:g,k1:L,k2neg:b,k2:H}=u(I),{p:m,f:d}=P(L),{p:B,f:a}=P(H);S=d.add(a),Z=f(E.beta,m,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return uX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:E}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Fq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:H}=YV(y,Z,P,L);return f(E.beta,b,H,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return rG(I,"isCompressed"),this.assertValidity(),R(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new pX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function zV($){return Uint8Array.of($?2:3)}function RV($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function o6($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(RV($.Fp,J),{seed:kX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R=G(Q.seed)){return e5(Q$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!L8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let A=Q$(R,void 0,"key").length;return A===w||A===j}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=EY(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function cX($,q,J={}){y0(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:W}=X,{keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R}=o6($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*MV<Y.ORDER;function j(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){dX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(Z,g)}class k{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:H,s:m}=GJ.toSig(Q$(Z));return new k(H,m)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=R.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new k(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new k(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),H=$.fromBytes(g$(zV((g&1)===0),b)),m=X.inv(L),d=F(Q$(Z,void 0,"msgHash")),B=X.create(-d*m),a=X.create(P*m),q$=$.BASE.multiplyUnsafe(B).add(H.multiplyUnsafe(a));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(Z=N.format){if(dX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g$(Uint8Array.of(this.assertRecovery()),g,L);return g$(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-W;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=nG(W);function f(Z){return cG("num < 2^"+W,Z,Fq,x),X.toBytes(Z)}function y(Z,S){return Q$(Z,void 0,"message"),S?Q$(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=rX(P,N);Z=y(Z,L);let H=F(Z),m=X.fromBytes(S);if(!X.isValidNot0(m))throw Error("invalid private key");let d=[f(m),f(H)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;d.push(Q$(Y$,void 0,"extraEntropy"))}let B=g$(...d),a=H;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),H$=$.BASE.multiply(G$).toAffine(),A$=X.create(H$.x);if(A$===Fq)return;let I$=X.create(t*X.create(a+A$*m));if(I$===Fq)return;let m$=(H$.x===A$?0:2)|Number(H$.y&y8),R0=I$;if(g&&j(I$))R0=X.neg(I$),m$^=1;return new k(A$,R0,w?void 0:m$)}return{seed:B,k2sig:q$}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return u5(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:H}=rX(g,N);if(P=Q$(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let m=Z instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+m)}_(Z,H);try{let m=k.fromBytes(Z,H),d=$.fromBytes(P);if(L&&m.hasHighS())return!1;let{r:B,s:a}=m,q$=F(S),Y$=X.inv(a),G$=X.create(q$*Y$),t=X.create(B*Y$),H$=$.BASE.multiplyUnsafe(G$).add(d.multiplyUnsafe(t));if(H$.is0())return!1;return X.create(H$.x)===B}catch(m){return!1}}function E(Z,S,P={}){let{prehash:g}=rX(P,N);return S=y(S,g),k.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R,Point:$,sign:v,verify:I,recoverPublicKey:E,Signature:k,hash:q})}function KV($,q,J){return $&q^~$&J}function DV($,q,J){return $&q^$&J^q&J}class PY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=ZY(this.buffer)}update($){Lq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=ZY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Lq(this),jY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=ZY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var gq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),_q=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var LY=BigInt(4294967295),OV=BigInt(32);function a6($,q=!1){if(q)return{h:Number($&LY),l:Number($>>OV&LY)};return{h:Number($>>OV&LY)|0,l:Number($&LY)|0}}function FY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=a6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var nX=($,q,J)=>$>>>J,oX=($,q,J)=>$<<32-J|q>>>J,mJ=($,q,J)=>$>>>J|q<<32-J,xJ=($,q,J)=>$<<32-J|q>>>J,tG=($,q,J)=>$<<64-J|q>>>J-32,eG=($,q,J)=>$>>>J-32|q<<64-J;var HV=($,q,J)=>$<<J|q>>>32-J,NV=($,q,J)=>q<<J|$>>>32-J,wV=($,q,J)=>q<<J-32|$>>>64-J,jV=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var AV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),ZV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,BV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),SV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,TV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),EV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var t6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class aX extends PY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],K=QJ[M-2],R=d0(z,7)^d0(z,18)^z>>>3,N=d0(K,17)^d0(K,19)^K>>>10;QJ[M]=N+QJ[M-7]+R+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=d0(X,6)^d0(X,11)^d0(X,25),K=V+z+KV(X,U,W)+t6[M]+QJ[M]|0,N=(d0(J,2)^d0(J,13)^d0(J,22))+DV(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){Z0(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z0(this.buffer)}}class IV extends aX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(32)}}class e6 extends aX{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(28)}}var CV=(()=>FY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),$N=(()=>CV[0])(),qN=(()=>CV[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class $Q extends PY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,k=XJ[T-15]|0,u=mJ(_,k,1)^mJ(_,k,8)^nX(_,k,7),F=xJ(_,k,1)^xJ(_,k,8)^oX(_,k,7),x=YJ[T-2]|0,f=XJ[T-2]|0,y=mJ(x,f,19)^tG(x,f,61)^nX(x,f,6),l=xJ(x,f,19)^eG(x,f,61)^oX(x,f,6),v=BV(F,l,XJ[T-7],XJ[T-16]),I=SV(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=mJ(M,z,14)^mJ(M,z,18)^tG(M,z,41),k=xJ(M,z,14)^xJ(M,z,18)^eG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=TV(A,k,F,qN[T],XJ[T]),f=EV(x,j,_,u,$N[T],YJ[T]),y=x|0,l=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),v=xJ(J,G,28)^eG(J,G,34)^eG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Yq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=AV(y,v,E);J=ZV(Z,f,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=Yq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Yq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Yq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Yq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){Z0(YJ,XJ)}destroy(){Z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class JN extends $Q{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class PV extends $Q{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(48)}}var J0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class GN extends $Q{Ah=J0[0]|0;Al=J0[1]|0;Bh=J0[2]|0;Bl=J0[3]|0;Ch=J0[4]|0;Cl=J0[5]|0;Dh=J0[6]|0;Dl=J0[7]|0;Eh=J0[8]|0;El=J0[9]|0;Fh=J0[10]|0;Fl=J0[11]|0;Gh=J0[12]|0;Gl=J0[13]|0;Hh=J0[14]|0;Hl=J0[15]|0;constructor(){super(28)}}class QN extends $Q{Ah=G0[0]|0;Al=G0[1]|0;Bh=G0[2]|0;Bl=G0[3]|0;Ch=G0[4]|0;Cl=G0[5]|0;Dh=G0[6]|0;Dl=G0[7]|0;Eh=G0[8]|0;El=G0[9]|0;Fh=G0[10]|0;Fl=G0[11]|0;Gh=G0[12]|0;Gl=G0[13]|0;Hh=G0[14]|0;Hl=G0[15]|0;constructor(){super(32)}}var gY=F8(()=>new IV,eq(1));var LV=F8(()=>new PV,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var YN=BigInt(1),FV=BigInt(2),XN=BigInt(3),UN=BigInt(5),cF=BigInt(8),gV=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function WN($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=gV,U=$*$%Y*$%Y,W=f0(U,FV,Y)*U%Y,V=f0(W,YN,Y)*$%Y,M=f0(V,UN,Y)*V%Y,z=f0(M,q,Y)*M%Y,K=f0(z,J,Y)*z%Y,R=f0(K,G,Y)*K%Y,N=f0(R,Q,Y)*R%Y,w=f0(N,Q,Y)*R%Y,j=f0(w,q,Y)*M%Y;return{pow_p_5_8:f0(j,FV,Y)*$%Y,b2:U}}function VN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var _V=(()=>{let $=gV;return UV({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=WN(q);return D0(f0(J,XN,$)*G,$)},adjustScalarBytes:VN})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var MN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),zN=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var RN=iX(MN),sX=cX(RN,gY);var KN=iX(zN),vV=cX(KN,LV);function yV($,q,J){if(y0($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var tX=Uint8Array.of(0),bV=Uint8Array.of();function fV($,q,J,G=32){y0($),x$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=bV;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)tX[0]=M+1,W.update(M===0?bV:V).update(J).update(tX).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),Z0(V,tX),X.slice(0,G)}var DN=BigInt(0),qQ=BigInt(1),ON=BigInt(2),HN=BigInt(7),NN=BigInt(256),wN=BigInt(113),xV=[],hV=[],uV=[];for(let $=0,q=qQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],xV.push(2*(5*G+J)),hV.push(($+1)*($+2)/2%64);let Q=DN;for(let Y=0;Y<7;Y++)if(q=(q<<qQ^(q>>HN)*wN)%NN,q&ON)Q^=qQ<<(qQ<<BigInt(Y))-qQ;uV.push(Q)}var pV=FY(uV,!0),jN=pV[0],AN=pV[1],kV=($,q,J)=>J>32?wV($,q,J):HV($,q,J),mV=($,q,J)=>J>32?jV($,q,J):NV($,q,J);function ZN($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,W=(X+2)%10,V=J[W],M=J[W+1],z=kV(V,M,1)^J[U],K=mV(V,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=K}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=hV[X],W=kV(Q,Y,U),V=mV(Q,Y,U),M=xV[X];Q=$[M],Y=$[M+1],$[M]=W,$[M+1]=V}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=jN[G],$[1]^=AN[G]}Z0(J)}class _Y{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,x$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=AY(this.state)}clone(){return this._cloneInto()}keccak(){FX(this.state32),ZN(this.state32,this.rounds),FX(this.state32),this.posOut=0,this.pos=0}update($){Lq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Lq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return x$($),this.xofInto(new Uint8Array($))}digestInto($){if(jY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new _Y(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var lV=($,q,J,G={})=>F8(()=>new _Y(q,$,J),G);var hJ=lV(6,136,32,eq(8));var rV=lV(6,72,64,eq(10));var dV=($,q,J,G={})=>F8((Q={})=>new _Y(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),iV=dV(31,168,16,eq(11)),Xq=dV(31,136,32,eq(12));function eX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function nV($){return eX($),($&$-1)===0&&$!==0}function $U($,q){eX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function oV($){return eX($),31-Math.clz32($)}function cV($){let q=$.length;if(q<2||!nV(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=oV(q);for(let G=0;G<q;G++){let Q=$U(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var qU=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,W=oV(J);if(!nV(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)cV(M);for(let z=0,K=1;z<W-X;z++){let R=Q?z+1+X:W-z,N=1<<R,w=N>>1,j=J>>R;for(let A=0;A<J;A+=N)for(let T=0,_=K++;T<w;T++){let k=Y?Q?J-_:_:T*j,u=A+T,F=A+T+w,x=G[k],f=M[F],y=M[u];if(V){let l=$.mul(f,x);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(f,y),M[F]=$.mul($.sub(f,y),x);else M[u]=$.add(y,f),M[F]=$.mul($.sub(y,f),x)}}if(!Q&&U)cV(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function vY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function aV($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let W=q[X],V=J(W),M=typeof W==="number"?Q[X]:W.encode(Q[X]);if(Q$(M,V,$),Y.set(M,U),typeof W!=="number")M.fill(0);U+=V}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),W=Q.subarray(0,U);Y.push(typeof X==="number"?W:X.decode(W)),Q=Q.subarray(U)}return Y}}}function bY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function JU($){return(1<<$)-1}var Wg=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var sV=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,W=(T,_=G)=>{let k=T%_|0;return(k>=0?k|0:_+k|0)|0},V=(T,_=G)=>{let k=W(T,_)|0;return(k>_>>1?k-_|0:k)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let k=$U(_,X),u=BigInt(Y)**BigInt(k)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),K={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=qU(K,{dit:!1,...R}),w=qU(K,{dit:!0,...R});return{mod:W,smod:V,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let k=JU(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=(_.encode(F[f])&k)<<l,l+=T;for(;l>=8;l-=8,y>>=8)x[v++]=y&JU(l)}return x},decode:(F)=>{let x=q(J);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=F[f]<<l,l+=8;for(;l>=T;l-=T,y>>=T)x[v++]=_.decode(y&k)}return x}}}}},BN=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,M)=>{return G[Q+0]=V,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return W++,X.xofInto(Y)}},clean:()=>{X.destroy(),y$(Y,G)}}},tV=BN(iV);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q0=256,vq=3329,SN=3303,TN=17,{mod:QQ,nttZetas:EN,NTT:pJ,bitsCoder:IN}=sV({N:Q0,Q:vq,F:SN,ROOT_OF_UNITY:TN,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),GU={512:{N:Q0,Q:vq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q0,Q:vq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q0,Q:vq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},CN=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+vq/2)/vq,decode:(J)=>J*vq+q>>>$}},JQ=($)=>IN($,CN($));function lJ($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]+q[J])}function PN($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]-q[J])}function LN($,q,J,G,Q){let Y=QQ(q*G*Q+$*J),X=QQ($*G+q*J);return{c0:Y,c1:X}}function yY($,q){for(let J=0;J<Q0/2;J++){let G=EN[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=LN($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function eV($){let q=new Uint16Array(Q0);for(let J=0;J<Q0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<vq)q[J++]=Y;if(J<Q0&&X<vq)q[J++]=X}}return q}function GQ($,q,J,G){let Q=$(G*Q0/4,q,J),Y=new Uint16Array(Q0),X=AY(Q),U=0;for(let W=0,V=0,M=0,z=0;W<X.length;W++){let K=X[W];for(let R=0;R<32;R++)if(M+=K&1,K>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[V++]=QQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var FN=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:W}=$,V=JQ(1),M=JQ(W),z=JQ(U),K=uJ("publicKey",bY(JQ(12),q),32),R=bY(JQ(12),q),N=uJ("ciphertext",bY(z,q),M),w=uJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:K.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let A=new Uint8Array(33);A.set(j),A[32]=q;let T=Q(A),[_,k]=w.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(GQ(J,k,y,Y)));let x=G(_);for(let y=0;y<q;y++){let l=pJ.encode(GQ(J,k,q+y,Y));for(let v=0;v<q;v++){let I=eV(x.get(v,y));lJ(l,yY(I,u[v]))}F.push(l)}x.clean();let f={publicKey:K.encode([F,_]),secretKey:R.encode(u)};return y$(_,k,u,F,A,T),f},encrypt:(j,A,T)=>{let[_,k]=K.decode(j),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(GQ(J,T,v,Y)));let F=G(k),x=new Uint16Array(Q0),f=[];for(let v=0;v<q;v++){let I=GQ(J,T,q+v,X),E=new Uint16Array(Q0);for(let Z=0;Z<q;Z++){let S=eV(F.get(v,Z));lJ(E,yY(S,u[Z]))}lJ(I,pJ.decode(E)),f.push(I),lJ(x,yY(_[v],u[v])),y$(E)}F.clean();let y=GQ(J,T,2*q,X);lJ(y,pJ.decode(x));let l=V.decode(A);return lJ(l,y),y$(_,u,x,y),N.encode([f,l])},decrypt:(j,A)=>{let[T,_]=N.decode(j),k=R.decode(A),u=new Uint16Array(Q0);for(let F=0;F<q;F++)lJ(u,yY(k[F],pJ.encode(T[F])));return PN(_,pJ.decode(u)),y$(u,k,T),V.encode(_)}}};function QU($){let q=FN($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:K}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([K,z,R,M.subarray(32)]);return y$(K,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,K,R,N]=U.decode(M);return Uint8Array.from(K)},encapsulate:(M,z=Uq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let K=M.subarray(0,384*$.K),R=Y.encode(Y.decode(aV(K)));if(!vY(R,K))throw y$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");y$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return y$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let K=U.bytesLen-96,R=K+32,N=J(z.subarray(K/2,R));if(!vY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,A,T]=U.decode(z),_=q.decrypt(M,w),k=G.create().update(_).update(A).digest(),u=k.subarray(0,32),F=q.encrypt(j,_,k.subarray(32,64)),x=vY(M,F),f=Q.create({dkLen:32}).update(T).update(M).digest();return y$(_,F,!x?u:f),x?u:f}}}function gN($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var YU={HASH256:hJ,HASH512:rV,KDF:Xq,XOF:tV,PRF:gN},jg=QU({...YU,...GU[512]}),YQ=QU({...YU,...GU[768]}),$M=QU({...YU,...GU[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function _N($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),W=Y.toBytes(Y.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function XU($,q=!1){let J=_N($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function UU($){return(q,J)=>$(q,{dkLen:J})}function vN($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;x$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),W=J.map((z,K)=>z.keygen(U[K])),V=W.map((z)=>z.secretKey),M=W.map((z)=>z.publicKey);return{secretKey:V,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:W}=Y(X),V=Q.encode(U);return y$(U),y$(W),{secretKey:X,publicKey:V}},expandDecapsulationKey:Y,realSeedLen:$}}function fY($,q,J,G,...Q){let Y=vN($,J,...Q),X=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),W=XQ(Q,"msg");if(q===void 0)q=W.bytesLen;return x$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(V,M=Uq(W.bytesLen)){let z=U.decode(V),K=W.decode(M),R=Q.map((A,T)=>A.encapsulate(z[T],K[T])),N=R.map((A)=>A.sharedSecret),w=R.map((A)=>A.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return y$(N,w),j},decapsulate(V,M){let z=X.decode(V),{publicKey:K,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(K,z,N)}}}function qM($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>Q(g$(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var Fg=qM("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YQ,XU(sX,!0),Xq,hJ),gg=qM("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",$M,XU(vV,!0),Xq,hJ);function bN($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>{let W=g$(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),V=32,M=g$(JJ("hybrid_prk"),W),z=yV(Q,M),K=g$(g8(32,2),JJ("shared_secret"),JJ("")),R=fV(Q,z,K,32);return y$(z,K,M,W),R},q,J)}var JM=XU(_V),_g=bN("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YQ,JM,Xq,gY),yN=(()=>fY(32,32,UU(Xq),($,q,J)=>hJ(g$(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),YQ,JM))();function fN($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q$(U,G,"rand");let{secretKey:W}=Y(U),V=this.decapsulate(X,W),M=$.getPublicKey(W,!1);return y$(W),{sharedSecret:V,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function kN($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=fN(J,Q,Y,G),U=64,W=U+G;return fY(32,32,(V)=>{Q$(V,32);let M=Xq(V,{dkLen:W}),z=M.subarray(0,U),K=M.subarray(U,W);return g$(z,K)},(V,M,z)=>hJ(g$(z[0],z[1],M[1],V[1],JJ($))),q,X)}var mN=(()=>kN("MLKEM768-P256",YQ,sX,128))();var WU=yN,GM=mN;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>u$($,q,J),MU=L$,f8=UY,n$=(...$)=>zX(...$),k8=($)=>bG($),m8=WX,x8=($)=>Sq($),mY=BigInt(0),VU=BigInt(1);function bq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function xY($){if(typeof $==="bigint"){if(!kY($))throw RangeError("positive bigint expected, got "+$)}else MU($);return $}function Wq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function UQ($){let q=xY($).toString(16);return q.length&1?"0"+q:q}function QM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?mY:BigInt("0x"+$)}function rJ($){return QM(UY($))}function i0($){return QM(UY(UJ(u$($)).reverse()))}function hY($,q){if(L$(q),q===0)throw RangeError("zero length");$=xY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return bG(J.padStart(q*2,"0"))}function WQ($,q){return hY($,q).reverse()}function YM($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z$($))}function uY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var kY=($)=>typeof $==="bigint"&&mY<=$;function xN($,q,J){return kY($)&&kY(q)&&kY(J)&&q<=$&&$<J}function yq($,q,J,G){if(!xN(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<mY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>mY;$>>=VU,q+=1);return q}var VQ=($)=>(VU<<BigInt($))-VU;function XM($,q,J){if(L$($,"hashLen"),L$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,n$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return n$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while((T=A(N()))===void 0)R();return z(),T}}function k0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}var zU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o$=BigInt(0),C$=BigInt(1),dJ=BigInt(2),MM=BigInt(3),zM=BigInt(4),RM=BigInt(5),hN=BigInt(7),KM=BigInt(8),uN=BigInt(9),DM=BigInt(16);function T$($,q){if(q<=o$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o$?J:q+J}function m0($,q,J){if(q<o$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o$)G*=G,G%=J;return G}function UM($,q){if($===o$)throw Error("invert: expected non-zero number");if(q<=o$)throw Error("invert: expected positive modulus, got "+q);let J=T$($,q),G=q,Q=o$,Y=C$,X=C$,U=o$;while(J!==o$){let V=G/J,M=G-J*V,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==C$)throw Error("invert: does not exist");return T$(Q,q)}function RU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function OM($,q){let J=$,G=(J.ORDER+C$)/zM,Q=J.pow(q,G);return RU(J,Q,q),Q}function pN($,q){let J=$,G=(J.ORDER-RM)/KM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),W=J.mul(X,J.sub(U,J.ONE));return RU(J,W,q),W}function lN($){let q=pY($),J=HM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+hN)/DM;return(U,W)=>{let V=U,M=V.pow(W,X),z=V.mul(M,G),K=V.mul(M,Q),R=V.mul(M,Y),N=V.eql(V.sqr(z),W),w=V.eql(V.sqr(K),W);M=V.cmov(M,z,N),z=V.cmov(R,K,w);let j=V.eql(V.sqr(z),W),A=V.cmov(M,z,j);return RU(V,A,W),A}}function HM($){if($<MM)throw Error("sqrt is not defined for small field");let q=$-C$,J=0;while(q%dJ===o$)q/=dJ,J++;let G=dJ,Q=pY($);while(WM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return OM;let Y=Q.pow(G,q),X=(q+C$)/dJ;return function(W,V){let M=W;if(M.is0(V))return V;if(WM(M,V)!==1)throw Error("Cannot find square root");let z=J,K=M.mul(M.ONE,Y),R=M.pow(V,q),N=M.pow(V,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let A=C$<<BigInt(z-w-1),T=M.pow(K,A);z=w,K=M.sqr(T),R=M.mul(R,K),N=M.mul(N,T)}return N}}function rN($){if($%zM===MM)return OM;if($%KM===RM)return pN;if($%DM===uN)return lN($);return HM($)}var fq=($,q)=>(T$($,q)&C$)===C$,dN=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function KU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=dN.reduce((G,Q)=>{return G[Q]="function",G},q);if(k0($,J),Wq($.BYTES,"BYTES"),Wq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function iN($,q,J){let G=$;if(J<o$)throw Error("invalid exponent, negatives unsupported");if(J===o$)return G.ONE;if(J===C$)return q;let Q=G.ONE,Y=q;while(J>o$){if(J&C$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=C$}return Q}function MQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),X=G.inv(Y);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},X),Q}function WM($,q){let J=$,G=(J.ORDER-C$)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function cN($,q){if(q!==void 0)MU(q);if($<=o$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var VM=new WeakMap;class DU{ORDER;BITS;BYTES;isLE;ZERO=o$;ONE=C$;_lengths;_mod;constructor($,q={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=cN($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o$<=$&&$<this.ORDER}is0($){return $===o$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return T$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T$($*$,this.ORDER)}add($,q){return T$($+q,this.ORDER)}sub($,q){return T$($-q,this.ORDER)}mul($,q){return T$($*q,this.ORDER)}pow($,q){return iN(this,$,q)}div($,q){return T$($*UM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return UM($,this.ORDER)}sqrt($){let q=VM.get(this);if(!q)VM.set(this,q=rN(this.ORDER));return q(this,$)}toBytes($){return this.isLE?WQ($,this.BYTES):hY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i0($):rJ($);if(X)U=T$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return MQ(this,$)}cmov($,q,J){return bq(J,"condition"),J?q:$}}Object.freeze(DU.prototype);function pY($,q={}){return new DU($,q)}function NM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let q=h8($-C$);return Math.ceil(q/8)}function OU($){let q=NM($);return q+Math.ceil(q/2)}function wM($,q,J=!1){Z$($);let G=$.length,Q=NM(q),Y=Math.max(OU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i0($):rJ($),U=T$(X,q-C$)+C$;return J?WQ(U,Q):hY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=MQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function BM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function HU($,q){BM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=VQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function jM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=iJ;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var NU=new WeakMap,SM=new WeakMap;function wU($){return SM.get($)||1}function AM($){if($!==u8)throw Error("invalid wNAF")}class RQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=HU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=HU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=jM(J,X,Y);if(J=U,V)Q=Q.add(zQ(z,q[K]));else G=G.add(zQ(M,q[W]))}return AM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=HU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=jM(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return AM(J),G}getPrecomputes($,q,J){let G=NU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);NU.set(q,G)}}return G}cached($,q,J){let G=wU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=wU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){BM(q,this.bits),SM.set($,q),NU.delete($)}hasCache($){return wU($)!==1}}function TM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function ZM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return KU(q),q}else return pY($,{isLE:J})}function lY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>u8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=ZM(q.p,J.Fp,G),Y=ZM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Wq($),Wq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function nN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function oN($){if(!m8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?uY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function jU($,q,J,G){if(Z$($),Wq(J),q=oN(q),q.length>255)q=G(n$(uY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n$(q,DQ(q.length,1)),W=new Uint8Array(Y),V=DQ(J,2),M=Array(X),z=G(n$(W,$,V,DQ(0,1),U));M[0]=G(n$(z,DQ(1,1),U));for(let R=1;R<X;R++){let N=[nN(z,M[R-1]),DQ(R+1,1),U];M[R]=G(n$(...N))}return n$(...M).slice(0,J)}var EM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IM=($,q)=>($+($>=0?q:-q)/PM)/q;function aN($,q,J){yq("scalar",$,Vq,J);let[[G,Q],[Y,X]]=q,U=IM(X*$,J),W=IM(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<Vq,K=M<Vq;if(z)V=-V;if(K)M=-M;let R=VQ(Math.ceil(h8(J)/2))+WJ;if(V<Vq||V>=R||M<Vq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:V,k2neg:K,k2:M}}function ZU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function AU($,q){k0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(bq(J.lowS,"lowS"),bq(J.prehash,"prehash"),J.format!==void 0)ZU(J.format);return J}class CM extends Error{constructor($=""){super($)}}var c0={Err:CM,_tlv:{encode:($,q)=>{let{Err:J}=c0;if(Wq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=UQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?UQ(Q.length/2|128):"";return UQ($)+Y+Q+q},decode($,q){let{Err:J}=c0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c0;if(xY($),$<Vq)throw new q("integer: negative integers are not allowed");let J=UQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=c0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c0._tlv);Object.freeze(c0._int);Object.freeze(c0);var Vq=BigInt(0),WJ=BigInt(1),PM=BigInt(2),rY=BigInt(3),sN=BigInt(4);function LM($,q={}){let J=lY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;k0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=gM(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function K(v,I,E){if(V&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(bq(E,"isCompressed"),E){z();let g=!G.isOdd(S);return n$(FM(g),P)}else return n$(Uint8Array.of(4),P,G.toBytes(S))}function R(v){Z$(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:E}=M,Z=v.length,S=v[0],P=v.subarray(1);if(V&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let H=G.isOdd(b);if((S&1)===1!==H)b=G.neg(b);return{x:g,y:b}}else if(Z===E&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${E}`)}let N=q.toBytes===void 0?K:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(v){let I=G.sqr(v),E=G.mul(I,v);return G.add(G.add(E,G.mul(v,Y.a)),Y.b)}function A(v,I){let E=G.sqr(I),Z=j(v);return G.eql(E,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,rY),sN),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function k(v,I,E=!1){if(!G.isValid(I)||E&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof f))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return aN(v,W.basises,Q.ORDER)}function x(v,I,E,Z,S){return E=new f(G.mul(E.X,v),E.Y,E.Z),I=zQ(Z,I),E=zQ(S,E),I.add(E)}class f{static BASE=new f(Y.Gx,Y.Gy,G.ONE);static ZERO=new f(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,E){this.X=k("x",v),this.Y=k("y",I,!0),this.Z=k("z",E),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:E}=v||{};if(!v||!G.isValid(I)||!G.isValid(E))throw Error("invalid affine point");if(v instanceof f)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(E))return f.ZERO;return new f(I,E,G.ONE)}static fromBytes(v){let I=f.fromAffine(w(Z$(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return f.fromBytes(k8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(rY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:E}=v.toAffine();if(!G.isValid(I)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!A(I,E))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(E,g),G.mul(P,Z));return L&&b}negate(){return new f(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,E=G.mul(I,rY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,H=G.mul(Z,Z),m=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(E,d),L=G.add(g,L),g=G.sub(m,L),L=G.add(m,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(E,b),d=G.mul(v,d),B=G.sub(H,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(H,H),H=G.add(b,H),H=G.add(H,d),H=G.mul(H,B),L=G.add(L,H),d=G.mul(S,P),d=G.add(d,d),H=G.mul(d,B),g=G.sub(g,H),b=G.mul(d,m),b=G.add(b,b),b=G.add(b,b),new f(g,L,b)}add(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=Y.a,d=G.mul(Y.b,rY),B=G.mul(I,S),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.add(I,E),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,a),Y$=G.sub(Y$,G$),G$=G.add(I,Z);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(E,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q$),t=G.sub(t,L),H=G.mul(m,G$),L=G.mul(d,q$),H=G.add(L,H),L=G.sub(a,H),H=G.add(a,H),b=G.mul(L,H),a=G.add(B,B),a=G.add(a,B),q$=G.mul(m,q$),G$=G.mul(d,G$),a=G.add(a,q$),q$=G.sub(B,q$),q$=G.mul(m,q$),G$=G.add(G$,q$),B=G.mul(a,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,a),H=G.mul(t,H),H=G.add(H,B),new f(L,b,H)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(f.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let E,Z,S=(P)=>l.cached(this,P,(g)=>cJ(f,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:H,f:m}=S(g),{p:d,f:B}=S(b);Z=m.add(B),E=x(I.beta,H,d,P,L)}else{let{p:P,f:g}=S(v);E=P,Z=g}return cJ(f,[E,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,E=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Vq||E.is0())return f.ZERO;if(Z===WJ)return E;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:H}=TM(f,E,P,L);return x(I.beta,b,H,S,g)}else return l.unsafe(E,Z)}toAffine(v){let I=this,E=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===WJ)return!0;if(v)return v(f,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===WJ)return this;if(v)return v(f,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===WJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return bq(v,"isCompressed"),this.assertValidity(),N(f,this,v)}toHex(v=!0){return f8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new RQ(f,q.endo?Math.ceil(y/2):y);if(y>=8)f.BASE.precompute(8);return Object.freeze(f.prototype),Object.freeze(f),f}function FM($){return Uint8Array.of($?2:3)}function gM($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function tN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?x8:q.randomBytes,Q=Object.assign(gM($.Fp,J),{seed:Math.max(OU(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,wM(Z$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,A=J._lengths;if(!m8(R))return;let T=Z$(R,void 0,"key").length,_=T===w||T===j,k=T===N||!!A?.includes(T);if(_&&k)return;return _}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=KQ(U,W);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function _M($,q,J={}){let G=q;Bq(G),k0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?x8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Tq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N}=tN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=W*PM+WJ<X.ORDER;function A(S){let P=W>>WJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(S,P){ZU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){k(S,P);let g;if(P==="der"){let{r:m,s:d}=c0.toSig(Z$(S));return new u(m,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),H=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(H),g)}static fromHex(S,P){return this.fromBytes(k8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+W:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let H=X.toBytes(b),m=$.fromBytes(n$(FM((L&1)===0),H)),d=U.inv(b),B=x(Z$(S,void 0,"msgHash")),a=U.create(-B*d),q$=U.create(g*d),Y$=$.BASE.multiplyUnsafe(a).add(m.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return A(this.s)}toBytes(S=w.format){if(ZU(S),S==="der")return k8(c0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n$(Uint8Array.of(this.assertRecovery()),L,b);return n$(L,b)}toHex(S){return f8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,f=VQ(V);function y(S){return yq("num < 2^"+V,S,Vq,f),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:H}=AU(g,w);S=l(S,b);let m=x(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(m)];if(H!=null&&H!==!1){let G$=H===!0?Q(N.secretKey):H;B.push(Z$(G$,void 0,"extraEntropy"))}let a=n$(...B),q$=m;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let H$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),I$=U.create(A$.x);if(I$===Vq)return;let m$=U.create(H$*U.create(q$+I$*d));if(m$===Vq)return;let R0=(A$.x===I$?0:2)|Number(A$.y&WJ),Jq=m$;if(L&&A(m$))Jq=U.neg(m$),R0^=1;return new u(I$,Jq,j?void 0:R0)}return{seed:a,k2sig:Y$}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return XM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function E(S,P,g,L={}){let{lowS:b,prehash:H,format:m}=AU(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,H),!m8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}k(S,m);try{let d=u.fromBytes(S,m),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q$}=d,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),H$=U.create(a*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(H$));if(A$.is0())return!1;return U.create(A$.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=AU(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N,Point:$,sign:I,verify:E,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var eN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var $4=LM(eN),p8=_M($4,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VJ=BigInt(0),B0=BigInt(1),BU=BigInt(2),q4=BigInt(8);function J4($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function vM($,q={}){let J=q,G=lY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;k0(J,{},{uvRatio:"function"});let W=BU<<BigInt(Y.BYTES*8)-B0,V=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(A){return{isValid:!1,value:VJ}}}:J.uvRatio;if(!J4(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,A=!1){let T=A?B0:VJ;return yq("coordinate "+w,j,T,W),j}function K(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,B0,V(X.Gx*X.Gy));static ZERO=new R(VJ,B0,B0,VJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,A,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:A}=w||{};return z("x",j),z("y",A),new R(j,A,B0,V(j*A))}static fromBytes(w,j=!1){let A=Q.BYTES,{a:T,d:_}=X;w=UJ(Z$(w,A,"point")),bq(j,"zip215");let k=UJ(w),u=w[A-1];k[A-1]=u&-129;let F=i0(k),x=j?W:Q.ORDER;yq("point.y",F,VJ,x);let f=V(F*F),y=V(f-B0),l=V(_*f-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let E=(I&B0)===B0,Z=(u&128)!==0;if(!j&&I===VJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==E)I=V(-I);return R.fromAffine({x:I,y:F})}static fromHex(w,j=!1){return R.fromBytes(k8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(BU);return this}assertValidity(){let w=this,{a:j,d:A}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:k,T:u}=w,F=V(T*T),x=V(_*_),f=V(k*k),y=V(f*f),l=V(F*j),v=V(f*V(l+x)),I=V(y+V(A*V(F*x)));if(v!==I)throw Error("bad point: equation left != right (1)");let E=V(T*_),Z=V(k*u);if(E!==Z)throw Error("bad point: equation left != right (2)")}equals(w){K(w);let{X:j,Y:A,Z:T}=this,{X:_,Y:k,Z:u}=w,F=V(j*u),x=V(_*T),f=V(A*u),y=V(k*T);return F===x&&f===y}is0(){return this.equals(R.ZERO)}negate(){return new R(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:w}=X,{X:j,Y:A,Z:T}=this,_=V(j*j),k=V(A*A),u=V(BU*V(T*T)),F=V(w*_),x=j+A,f=V(V(x*x)-_-k),y=F+k,l=y-u,v=F-k,I=V(f*l),E=V(y*v),Z=V(f*v),S=V(l*y);return new R(I,E,S,Z)}add(w){K(w);let{a:j,d:A}=X,{X:T,Y:_,Z:k,T:u}=this,{X:F,Y:x,Z:f,T:y}=w,l=V(T*F),v=V(_*x),I=V(u*A*y),E=V(k*f),Z=V((T+_)*(F+x)-l-v),S=E-I,P=E+I,g=V(v-j*l),L=V(Z*S),b=V(P*g),H=V(Z*g),m=V(S*P);return new R(L,b,m,H)}subtract(w){return K(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:A}=N.cached(this,w,(T)=>cJ(R,T));return cJ(R,[j,A])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===VJ)return R.ZERO;if(this.is0()||w===B0)return this;return N.unsafe(this,w,(j)=>cJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,A=w,{X:T,Y:_,Z:k}=j,u=j.is0();if(A==null)A=u?q4:Q.inv(k);let F=V(T*A),x=V(_*A),f=Q.mul(k,A);if(u)return{x:VJ,y:B0};if(f!==B0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===B0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),A=Q.toBytes(j);return A[A.length-1]|=w&B0?128:0,A}toHex(){return f8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new RQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class SU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){zU()}static fromHex($){zU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return f8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var OQ=BigInt(0),l8=BigInt(1),dY=BigInt(2);function G4($){return k0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function bM($){let q=G4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X===void 0?x8:X,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?dY**BigInt(254):dY**BigInt(447),N=U?BigInt(8)*dY**BigInt(251)-l8:BigInt(4)*dY**BigInt(445)-l8,w=R+N+l8,j=(Z)=>T$(Z,J),A=T(z);function T(Z){return WQ(j(Z),M)}function _(Z){let S=UJ(Z$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(i0(S))}function k(Z){return i0(Q(UJ(Z$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===OQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){yq("u",Z,OQ,J),yq("scalar",S,R,w);let P=S,g=Z,L=l8,b=OQ,H=Z,m=l8,d=OQ;for(let a=BigInt(V-1);a>=OQ;a--){let q$=P>>a&l8;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;H=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?W(M):Z,Z$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze(v),Object.freeze(E),Object.freeze({keygen:KQ(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Q4=BigInt(0),kq=BigInt(1),yM=BigInt(2),Y4=BigInt(3),X4=BigInt(5),U4=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),CU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:U4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function mM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,W=m0(U,yM,Y)*U%Y,V=m0(W,kq,Y)*$%Y,M=m0(V,X4,Y)*V%Y,z=m0(M,q,Y)*M%Y,K=m0(z,J,Y)*z%Y,R=m0(K,G,Y)*K%Y,N=m0(R,Q,Y)*R%Y,w=m0(N,Q,Y)*R%Y,j=m0(w,q,Y)*M%Y;return{pow_p_5_8:m0(j,yM,Y)*$%Y,b2:U}}function W4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function PU($,q){let J=oJ,G=T$(q*q*q,J),Q=T$(G*G*q,J),Y=mM($*Q).pow_p_5_8,X=T$($*G*Y,J),U=T$(q*X*X,J),W=X,V=T$(X*TU,J),M=U===$,z=U===T$(-$,J),K=U===T$(-$*TU,J);if(M)X=W;if(z||K)X=V;if(fq(X,J))X=T$(-X,J);return{isValid:M||z,value:X}}var nJ=vM(CU,{uvRatio:PU}),MJ=(()=>nJ.Fp)(),xM=(()=>nJ.Fn)();var iY=(()=>{let $=oJ;return bM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=mM(q);return T$(m0(J,Y4,$)*G,$)},adjustScalarBytes:W4})})();var EU=TU,V4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),M4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),z4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),R4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),fM=($)=>PU(kq,$),K4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),IU=($)=>MJ.create(i0($)&K4);function kM($){let{d:q}=CU,J=oJ,G=(A)=>MJ.create(A),Q=G(EU*$*$),Y=G((Q+kq)*z4),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:W,value:V}=PU(Y,U),M=G(V*$);if(!fq(M,J))M=G(-M);if(!W)V=M;if(!W)X=Q;let z=G(X*(Q-kq)*R4-U),K=V*V,R=G((V+V)*U),N=G(z*V4),w=G(kq-K),j=G(kq+K);return new nJ(G(R*j),G(w*N),G(N*j),G(R*w))}class H0 extends SU{static BASE=(()=>new H0(nJ.BASE))();static ZERO=(()=>new H0(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>xM)();constructor($){super($)}static fromAffine($){return new H0(nJ.fromAffine($))}assertSame($){if(!($ instanceof H0))throw Error("RistrettoPoint expected")}init($){return new H0($)}static fromBytes($){u$($,32);let{a:q,d:J}=CU,G=oJ,Q=(_)=>MJ.create(_),Y=IU($);if(!YM(MJ.toBytes(Y),$)||fq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(kq+q*X),W=Q(kq-q*X),V=Q(U*U),M=Q(W*W),z=Q(q*J*V-M),{isValid:K,value:R}=fM(Q(z*M)),N=Q(R*W),w=Q(R*N*z),j=Q((Y+Y)*N);if(fq(j,G))j=Q(-j);let A=Q(U*w),T=Q(j*A);if(!K||fq(T,G)||A===Q4)throw Error("invalid ristretto255 encoding 2");return new H0(new nJ(j,A,kq,T))}static fromHex($){return H0.fromBytes(bG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(w)=>MJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),W=Y(U*U),{value:V}=fM(Y(X*W)),M=Y(V*X),z=Y(V*U),K=Y(M*z*G),R;if(fq(G*K,Q)){let w=Y(q*EU),j=Y($*EU);$=w,q=j,R=Y(M*M4)}else R=z;if(fq($*K,Q))q=Y(-q);let N=Y((J-q)*R);if(fq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(W)=>MJ.create(W),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(H0.ZERO)}}Object.freeze(H0.BASE);Object.freeze(H0.ZERO);Object.freeze(H0.prototype);Object.freeze(H0);var D4=Object.freeze({Point:H0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=jU($,J,64,zY);return D4.deriveToCurve(G)},hashToScalar($,q={DST:EM}){let J=jU($,q.DST,64,zY);return xM.create(i0(J))},deriveToCurve($){u$($,64);let q=IU($.subarray(0,32)),J=kM(q),G=IU($.subarray(32,64)),Q=kM(G);return new H0(J.add(Q))}});var hM=!1,O4=!1;async function uM($,q){if(O4)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function FU($,q){return await uM(async()=>{let J=LU($)?$:await N4($),G=await crypto.subtle.importKey("raw",w4(q),{name:"X25519"},hM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMult($,q)})}async function gU($){return await uM(async()=>{return FU($,iY.GuBytes)},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMultBase($)})}var H4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function N4($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...H4,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},hM,["deriveBits"])}function LU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function w4($){return $}class pM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),A4(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function A4($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function cY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function lM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function rM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class mq{args;body;constructor($,q){this.args=$,this.body=q}}function _U($){let q=[];q.push(`age-encryption.org/v1
|
|
57
|
+
`).map((q)=>q.trim()).join(" ")};ZD.O=function($){return this.inspectOpts.colors=this.useColors,g9.inspect($,this.inspectOpts)}});var ED=X$((jx,h7)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)h7.exports=OD();else h7.exports=TD()});var S1=X$((ip,B1)=>{var p9=Object.prototype.hasOwnProperty,Z1=Object.prototype.toString,O1=Object.defineProperty,H1=Object.getOwnPropertyDescriptor,N1=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Z1.call(q)==="[object Array]"},w1=function(q){if(!q||Z1.call(q)!=="[object Object]")return!1;var J=p9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&p9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||p9.call(q,Q)},j1=function(q,J){if(O1&&J.name==="__proto__")O1(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},A1=function(q,J){if(J==="__proto__"){if(!p9.call(q,J))return;else if(H1)return H1(q,J).value}return q[J]};B1.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],W=1,V=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},W=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;W<V;++W)if(q=arguments[W],q!=null){for(J in q)if(G=A1(U,J),Q=A1(q,J),U!==Q){if(M&&Q&&(w1(Q)||(Y=N1(Q)))){if(Y)Y=!1,X=G&&N1(G)?G:[];else X=G&&w1(G)?G:{};j1(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")j1(U,{name:J,newValue:Q})}}return U}});import{parseArgs as oH}from"util";var aH={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function XX($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function UX($,q){let J=$[q];return typeof J==="string"?J:void 0}function nW($){let{values:q,positionals:J}=oH({args:$,options:aH,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:XX(q,"help"),version:XX(q,"version"),dryRun:XX(q,"dry-run"),pushTo:UX(q,"push-to"),cohort:UX(q,"cohort"),anchorId:UX(q,"anchor-id")}}}var QY={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.64",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun test --timeout 20000","test:smoke":"RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-templates":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as _4,mkdirSync as v4,readFileSync as rU,writeFileSync as dU}from"fs";import{dirname as b4,join as aM}from"path";function WX($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function L$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function u$($,q,J=""){let G=WX($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function Bq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(L$($.outputLen),L$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function T8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){u$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function K0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function E8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function u0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var tH=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function eH($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function $6($){for(let q=0;q<$.length;q++)$[q]=eH($[q]);return $}var VX=tH?($)=>$:$6,aW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),q6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function UY($){if(u$($),aW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=q6[$[J]];return q}var Zq={_0:48,_9:57,A:65,F:70,a:97,f:102};function oW($){if($>=Zq._0&&$<=Zq._9)return $-Zq._0;if($>=Zq.A&&$<=Zq.F)return $-(Zq.A-10);if($>=Zq.a&&$<=Zq.f)return $-(Zq.a-10);return}function bG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(aW)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=oW($.charCodeAt(Y)),U=oW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function J6($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function MX($,q=""){if(typeof $==="string")return J6($);return u$($,void 0,q)}function zX(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];u$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function WY($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function RX($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Sq($=32){L$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var KX=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class DX{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Bq($),u$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),K0(G)}update($){return T8(this),this.iHash.update($),this}digestInto($){T8(this),YY($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var Tq=(()=>{let $=(q,J,G)=>new DX(q,J).update(G).digest();return $.create=(q,J)=>new DX(q,J),$})();function yG($,q,J){if(Bq($),J===void 0)J=new Uint8Array($.outputLen);return Tq($,J,q)}var OX=Uint8Array.of(0),sW=Uint8Array.of();function HX($,q,J,G=32){Bq($),L$(G,"length"),u$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=sW;else u$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=Tq.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)OX[0]=M+1,W.update(M===0?sW:V).update(J).update(OX).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),K0(V,OX),X.slice(0,G)}var fG=($,q,J,G,Q)=>HX($,yG($,q,J),G,Q);function tW($,q,J){return $&q^~$&J}function eW($,q,J){return $&q^$&J^q&J}class VY{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=E8(this.buffer)}update($){T8(this),u$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=E8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){T8(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,K0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=E8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Iq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),p$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),l$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var MY=BigInt(4294967295),$5=BigInt(32);function G6($,q=!1){if(q)return{h:Number($&MY),l:Number($>>$5&MY)};return{h:Number($>>$5&MY)|0,l:Number($&MY)|0}}function q5($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=G6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var NX=($,q,J)=>$>>>J,wX=($,q,J)=>$<<32-J|q>>>J,FJ=($,q,J)=>$>>>J|q<<32-J,gJ=($,q,J)=>$<<32-J|q>>>J,kG=($,q,J)=>$<<64-J|q>>>J-32,mG=($,q,J)=>$>>>J-32|q<<64-J;function Gq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var J5=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),G5=($,q,J,G)=>q+J+G+($/4294967296|0)|0,Q5=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),Y5=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,X5=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),U5=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var Y6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),cq=new Uint32Array(64);class jX extends VY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)cq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=cq[M-15],K=cq[M-2],R=u0(z,7)^u0(z,18)^z>>>3,N=u0(K,17)^u0(K,19)^K>>>10;cq[M]=N+cq[M-7]+R+cq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=u0(X,6)^u0(X,11)^u0(X,25),K=V+z+tW(X,U,W)+Y6[M]+cq[M]|0,N=(u0(J,2)^u0(J,13)^u0(J,22))+eW(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){K0(cq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),K0(this.buffer)}}class W5 extends jX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class X6 extends jX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(28)}}var V5=(()=>q5(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),U6=(()=>V5[0])(),W6=(()=>V5[1])(),nq=new Uint32Array(80),oq=new Uint32Array(80);class xG extends VY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)nq[T]=$.getUint32(q),oq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=nq[T-15]|0,k=oq[T-15]|0,u=FJ(_,k,1)^FJ(_,k,8)^NX(_,k,7),F=gJ(_,k,1)^gJ(_,k,8)^wX(_,k,7),x=nq[T-2]|0,f=oq[T-2]|0,y=FJ(x,f,19)^kG(x,f,61)^NX(x,f,6),l=gJ(x,f,19)^mG(x,f,61)^wX(x,f,6),v=Q5(F,l,oq[T-7],oq[T-16]),I=Y5(v,u,y,nq[T-7],nq[T-16]);nq[T]=I|0,oq[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=FJ(M,z,14)^FJ(M,z,18)^kG(M,z,41),k=gJ(M,z,14)^gJ(M,z,18)^mG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=X5(A,k,F,W6[T],oq[T]),f=U5(x,j,_,u,U6[T],nq[T]),y=x|0,l=FJ(J,G,28)^kG(J,G,34)^kG(J,G,39),v=gJ(J,G,28)^mG(J,G,34)^mG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Gq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=J5(y,v,E);J=G5(Z,f,l,I),G=Z|0}({h:J,l:G}=Gq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Gq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Gq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=Gq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=Gq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Gq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Gq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Gq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){K0(nq,oq)}destroy(){this.destroyed=!0,K0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class M5 extends xG{Ah=l$[0]|0;Al=l$[1]|0;Bh=l$[2]|0;Bl=l$[3]|0;Ch=l$[4]|0;Cl=l$[5]|0;Dh=l$[6]|0;Dl=l$[7]|0;Eh=l$[8]|0;El=l$[9]|0;Fh=l$[10]|0;Fl=l$[11]|0;Gh=l$[12]|0;Gl=l$[13]|0;Hh=l$[14]|0;Hl=l$[15]|0;constructor(){super(64)}}class V6 extends xG{Ah=p$[0]|0;Al=p$[1]|0;Bh=p$[2]|0;Bl=p$[3]|0;Ch=p$[4]|0;Cl=p$[5]|0;Dh=p$[6]|0;Dl=p$[7]|0;Eh=p$[8]|0;El=p$[9]|0;Fh=p$[10]|0;Fl=p$[11]|0;Gh=p$[12]|0;Gl=p$[13]|0;Hh=p$[14]|0;Hl=p$[15]|0;constructor(){super(48)}}var e$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),$0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class M6 extends xG{Ah=e$[0]|0;Al=e$[1]|0;Bh=e$[2]|0;Bl=e$[3]|0;Ch=e$[4]|0;Cl=e$[5]|0;Dh=e$[6]|0;Dl=e$[7]|0;Eh=e$[8]|0;El=e$[9]|0;Fh=e$[10]|0;Fl=e$[11]|0;Gh=e$[12]|0;Gl=e$[13]|0;Hh=e$[14]|0;Hl=e$[15]|0;constructor(){super(28)}}class z6 extends xG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(32)}}var r$=RX(()=>new W5,KX(1));var zY=RX(()=>new M5,KX(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function HY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function BX($){if(!HY($))throw Error("Uint8Array expected")}function O5($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function H5($){if(typeof $!=="function")throw Error("function expected");return!0}function aq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function uG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function KY($){if(!Array.isArray($))throw Error("array expected")}function DY($,q){if(!O5(!0,q))throw Error(`${$}: array of strings expected`)}function SX($,q){if(!O5(!1,q))throw Error(`${$}: array of numbers expected`)}function C0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function P0($){let q=typeof $==="string"?$.split(""):$,J=q.length;DY("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return KY(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return KY(Q),Q.map((Y)=>{aq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function L0($=""){return aq("join",$),{encode:(q)=>{return DY("join.decode",q),q.join($)},decode:(q)=>{return aq("join.decode",q),q.split($)}}}function NY($,q="="){return uG($),aq("padding",q),{encode(J){DY("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){DY("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function N5($){return H5($),{encode:(q)=>q,decode:(q)=>$(q)}}function z5($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(KY($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(uG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,W=!0;for(let V=G;V<X;V++){let M=Y[V],z=q*U,K=z+M;if(!Number.isSafeInteger(K)||z/q!==U||K-M!==z)throw Error("convertRadix: carry overflow");let R=K/J;U=K%J;let N=Math.floor(R);if(Y[V]=N,!Number.isSafeInteger(N)||N*J+U!==K)throw Error("convertRadix: carry overflow");if(!W)continue;else if(!N)G=V;else W=!1}if(Q.push(U),W)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var w5=($,q)=>q===0?$:w5(q,$%q),OY=($,q)=>$+(q-w5($,q)),RY=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function AX($,q,J,G){if(KY($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(OY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${OY(q,J)}`);let Q=0,Y=0,X=RY[q],U=RY[J]-1,W=[];for(let V of $){if(uG(V),V>=X)throw Error(`convertRadix2: invalid data word=${V} from=${q}`);if(Q=Q<<q|V,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)W.push((Q>>Y-J&U)>>>0);let M=RY[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)W.push(Q>>>0);return W}function R6($){uG($);let q=256;return{encode:(J)=>{if(!HY(J))throw Error("radix.encode input should be Uint8Array");return z5(Array.from(J),q,$)},decode:(J)=>{return SX("radix.decode",J),Uint8Array.from(z5(J,$,q))}}}function b0($,q=!1){if(uG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(OY(8,$)>32||OY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!HY(J))throw Error("radix2.encode input should be Uint8Array");return AX(Array.from(J),8,$,!q)},decode:(J)=>{return SX("radix2.decode",J),Uint8Array.from(AX(J,$,8,q))}}}function R5($){return H5($),function(...q){try{return $.apply(null,q)}catch(J){}}}var b3=C0(b0(4),P0("0123456789ABCDEF"),L0("")),y3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),NY(5),L0("")),f3=C0(b0(5),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),L0("")),k3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),NY(5),L0("")),m3=C0(b0(5),P0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),L0("")),x3=C0(b0(5),P0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),L0(""),N5(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),j5=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),A5=($,q)=>{aq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},TX=j5?{encode($){return BX($),$.toBase64()},decode($){return A5($,!1)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),NY(6),L0("")),p0=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),L0("")),h3=j5?{encode($){return BX($),$.toBase64({alphabet:"base64url"})},decode($){return A5($,!0)}}:C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),NY(6),L0("")),u3=C0(b0(6),P0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),L0("")),EX=($)=>C0(R6(58),P0($),L0("")),p3=EX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),l3=EX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),r3=EX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var ZX=C0(P0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),L0("")),K5=[996825010,642813549,513874426,1027748829,705979059];function hG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<K5.length;G++)if((q>>G&1)===1)J^=K5[G];return J}function D5($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=hG(Q)^X>>5}Q=hG(Q);for(let Y=0;Y<G;Y++)Q=hG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=hG(Q)^Y;for(let Y=0;Y<6;Y++)Q=hG(Q);return Q^=J,ZX.encode(AX([Q%RY[30]],30,5,!1))}function Z5($){let q=$==="bech32"?1:734539939,J=b0(5),G=J.decode,Q=J.encode,Y=R5(G);function X(z,K,R=90){if(aq("bech32.encode prefix",z),HY(K))K=Array.from(K);SX("bech32.encode",K);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+K.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),A=D5(j,K,q);return`${j}1${ZX.encode(K)}${A}`}function U(z,K=90){aq("bech32.decode input",z);let R=z.length;if(R<8||K!==!1&&R>K)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${K})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),A=N.slice(w+1);if(A.length<6)throw Error("Data must be at least 6 characters long");let T=ZX.decode(A).slice(0,-6),_=D5(j,T,q);if(!A.endsWith(_))throw Error(`Invalid checksum in ${z}: expected "${_}"`);return{prefix:j,words:T}}let W=R5(U);function V(z){let{prefix:K,words:R}=U(z,!1);return{prefix:K,words:R,bytes:G(R)}}function M(z,K){return X(z,Q(K))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:V,decodeUnsafe:W,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var l0=Z5("bech32"),d3=Z5("bech32m");var K6=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),D6={encode($){return BX($),$.toHex()},decode($){return aq("hex",$),Uint8Array.fromHex($)}},i3=K6?D6:C0(b0(4),P0("0123456789abcdef"),L0(""),N5(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function H6($,q,J,G){Bq($);let Q=WY({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(L$(Y,"c"),L$(X,"dkLen"),L$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let W=MX(q,"password"),V=MX(J,"salt"),M=new Uint8Array(X),z=Tq.create($,W),K=z._cloneInto().update(V);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:K}}function N6($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return K0(Q),J}function IX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:W}=H6($,q,J,G),V,M=new Uint8Array(4),z=E8(M),K=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(V=W._cloneInto(V)).update(M).digestInto(K),w.set(K.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(V).update(K).digestInto(K);for(let A=0;A<w.length;A++)w[A]^=K[A]}}return N6(U,W,X,V,K)}function B5($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],W=$[q++]^J[G++],V=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],K=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],A=$[q++]^J[G++],T=$[q++]^J[G++],_=$[q++]^J[G++],k=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let d=0;d<8;d+=2)l^=N$(F+L|0,7),Z^=N$(l+F|0,9),L^=N$(Z+l|0,13),F^=N$(L+Z|0,18),S^=N$(v+x|0,7),b^=N$(S+v|0,9),x^=N$(b+S|0,13),v^=N$(x+b|0,18),H^=N$(P+I|0,7),f^=N$(H+P|0,9),I^=N$(f+H|0,13),P^=N$(I+f|0,18),y^=N$(m+g|0,7),E^=N$(y+m|0,9),g^=N$(E+y|0,13),m^=N$(g+E|0,18),x^=N$(F+y|0,7),f^=N$(x+F|0,9),y^=N$(f+x|0,13),F^=N$(y+f|0,18),I^=N$(v+l|0,7),E^=N$(I+v|0,9),l^=N$(E+I|0,13),v^=N$(l+E|0,18),g^=N$(P+S|0,7),Z^=N$(g+P|0,9),S^=N$(Z+g|0,13),P^=N$(S+Z|0,18),L^=N$(m+H|0,7),b^=N$(L+m|0,9),H^=N$(b+L|0,13),m^=N$(H+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=W+f|0,Q[Y++]=V+y|0,Q[Y++]=M+l|0,Q[Y++]=z+v|0,Q[Y++]=K+I|0,Q[Y++]=R+E|0,Q[Y++]=N+Z|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=A+g|0,Q[Y++]=T+L|0,Q[Y++]=_+b|0,Q[Y++]=k+H|0,Q[Y++]=u+m|0}function CX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(B5(J,X,$,q,J,Y),U>0)X+=16;B5(J,Y,$,q+=16,J,X)}}function w6($,q,J){let G=WY({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:W,maxmem:V,onProgress:M}=G;if(L$(Q,"N"),L$(Y,"r"),L$(X,"p"),L$(U,"dkLen"),L$(W,"asyncTick"),L$(V,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,K=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>V)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+V);let w=IX(r$,$,q,{c:1,dkLen:z*X}),j=XY(w),A=XY(new Uint8Array(z*Q)),T=XY(new Uint8Array(z)),_=()=>{};if(M){let k=2*Q*X,u=Math.max(Math.floor(k/1e4),1),F=0;_=()=>{if(F++,M&&(!(F%u)||F===k))M(F/k)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:K,V:A,B32:j,B:w,tmp:T,blockMixCb:_,asyncTick:W}}function j6($,q,J,G,Q){let Y=IX(r$,$,J,{c:1,dkLen:q});return K0(J,G,Q),Y}function S5($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V:W,B32:V,B:M,tmp:z,blockMixCb:K}=w6($,q,J);VX(V);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)W[w]=V[N+w];for(let w=0,j=0;w<G-1;w++)CX(W,j,W,j+=U,Q),K();CX(W,(G-1)*U,V,N,Q),K();for(let w=0;w<G;w++){let j=(V[N+U-16]&G-1)>>>0;for(let A=0;A<U;A++)z[A]=V[N+A]^W[j*U+A];CX(z,0,V,N,Q),K()}}return VX(V),j6($,X,M,W,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function A6($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function wY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function I8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function b$($,q,J=""){let G=A6($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`,V=X+"expected Uint8Array"+U+", got "+W;if(!G)throw TypeError(V);throw RangeError(V)}return $}function PX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function T5($,q,J=!1){b$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!C8($))throw Error("invalid output, must be aligned")}function Qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function r0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function Z6($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var _J=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),B6=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var S6=($)=>{for(let q=0;q<$.length;q++)$[q]=B6($[q]);return $},Cq=_J?($)=>$:S6;function E5($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function I5($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function C5($,q,J){let G=q,Q=J||(()=>[]),Y=(U,W)=>G(W,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...W)=>G(U,...W),Y}var P5=($,q)=>{function J(G,...Q){if(b$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];b$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)b$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");b$(z,void 0,"output")}},W=!1;return{encrypt(M,z){if(W)throw Error("cannot encrypt() twice with same key + nonce");return W=!0,b$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(b$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function pG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(b$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!C8(q))throw Error("invalid output, must be aligned");return q}function L5($,q,J){I8($),I8(q),wY(J);let G=new Uint8Array(16),Q=Z6(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function C8($){return $.byteOffset%4===0}function P8($){return Uint8Array.from(b$($))}var g5=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),T6=(()=>Cq(Qq(g5("expand 16-byte k"))))(),E6=(()=>Cq(Qq(g5("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var lG=64,I6=16,LX=(()=>4294967295)(),F5=Uint32Array.of();function C6($,q,J,G,Q,Y,X,U){let W=Q.length,V=new Uint8Array(lG),M=Qq(V),z=_J&&C8(Q)&&C8(Y),K=z?Qq(Q):F5,R=z?Qq(Y):F5;if(!_J){for(let N=0;N<W;X++){if($(q,J,G,M,X,U),Cq(M),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,W-N);for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}return}for(let N=0;N<W;X++){if($(q,J,G,M,X,U),X>=LX)throw Error("arx: counter overflow");let w=Math.min(lG,W-N);if(z&&w===lG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let A=0,T;A<I6;A++)T=j+A,R[T]=K[T]^M[A];N+=lG;continue}for(let j=0,A;j<w;j++)A=N+j,Y[A]=Q[A]^V[j];N+=w}}function _5($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=E5({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return I8(Q),I8(X),wY(Y),wY(J),(U,W,V,M,z=0)=>{b$(U,void 0,"key"),b$(W,void 0,"nonce"),b$(V,void 0,"data");let K=V.length;if(M=pG(K,M,!1),I8(z),z<0||z>=LX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=P8(U)),j=E6;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=T6,R.push(w);else throw b$(U,32,"arx key"),Error("invalid key size");if(!_J||!C8(W))R.push(W=P8(W));let A=Qq(w);if(G){if(W.length!==24)throw Error("arx: extended nonce must be 24 bytes");let k=W.subarray(0,16);if(_J)G(j,A,Qq(k),A);else{let u=Cq(Uint32Array.from(j));G(u,A,Qq(k),A),r0(u),Cq(A)}W=W.subarray(16)}else if(!_J)Cq(A);let T=16-Q;if(T!==W.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let k=new Uint8Array(12);k.set(W,Y?0:12-W.length),W=k,R.push(W)}let _=Cq(Qq(W));try{return C6($,j,A,_,V,M,z,X),M}finally{r0(...R)}}}function d$($,q){return $[q++]&255|($[q++]&255)<<8}class v5{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=P8(b$($,32,"key"));let q=d$($,0),J=d$($,2),G=d$($,4),Q=d$($,6),Y=d$($,8),X=d$($,10),U=d$($,12),W=d$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|W<<8)&8191,this.r[9]=W>>>5&127;for(let V=0;V<8;V++)this.pad[V]=d$($,16+2*V)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],W=Y[2],V=Y[3],M=Y[4],z=Y[5],K=Y[6],R=Y[7],N=Y[8],w=Y[9],j=d$($,q+0),A=d$($,q+2),T=d$($,q+4),_=d$($,q+6),k=d$($,q+8),u=d$($,q+10),F=d$($,q+12),x=d$($,q+14),f=Q[0]+(j&8191),y=Q[1]+((j>>>13|A<<3)&8191),l=Q[2]+((A>>>10|T<<6)&8191),v=Q[3]+((T>>>7|_<<9)&8191),I=Q[4]+((_>>>4|k<<12)&8191),E=Q[5]+(k>>>1&8191),Z=Q[6]+((k>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+f*X+y*(5*w)+l*(5*N)+v*(5*R)+I*(5*K);L=b>>>13,b&=8191,b+=E*(5*z)+Z*(5*M)+S*(5*V)+P*(5*W)+g*(5*U),L+=b>>>13,b&=8191;let H=L+f*U+y*X+l*(5*w)+v*(5*N)+I*(5*R);L=H>>>13,H&=8191,H+=E*(5*K)+Z*(5*z)+S*(5*M)+P*(5*V)+g*(5*W),L+=H>>>13,H&=8191;let m=L+f*W+y*U+l*X+v*(5*w)+I*(5*N);L=m>>>13,m&=8191,m+=E*(5*R)+Z*(5*K)+S*(5*z)+P*(5*M)+g*(5*V),L+=m>>>13,m&=8191;let d=L+f*V+y*W+l*U+v*X+I*(5*w);L=d>>>13,d&=8191,d+=E*(5*N)+Z*(5*R)+S*(5*K)+P*(5*z)+g*(5*M),L+=d>>>13,d&=8191;let B=L+f*M+y*V+l*W+v*U+I*X;L=B>>>13,B&=8191,B+=E*(5*w)+Z*(5*N)+S*(5*R)+P*(5*K)+g*(5*z),L+=B>>>13,B&=8191;let a=L+f*z+y*M+l*V+v*W+I*U;L=a>>>13,a&=8191,a+=E*X+Z*(5*w)+S*(5*N)+P*(5*R)+g*(5*K),L+=a>>>13,a&=8191;let q$=L+f*K+y*z+l*M+v*V+I*W;L=q$>>>13,q$&=8191,q$+=E*U+Z*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+f*R+y*K+l*z+v*M+I*V;L=Y$>>>13,Y$&=8191,Y$+=E*W+Z*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+f*N+y*R+l*K+v*z+I*M;L=G$>>>13,G$&=8191,G$+=E*V+Z*W+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let t=L+f*w+y*N+l*R+v*K+I*z;L=t>>>13,t&=8191,t+=E*M+Z*V+S*W+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,H+=L,Q[0]=b,Q[1]=H,Q[2]=m,Q[3]=d,Q[4]=B,Q[5]=a,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;r0(J)}update($){PX(this),b$($),$=P8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,r0(this.h,this.r,this.buffer,this.pad)}digestInto($){PX(this),T5($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var b5=C5(32,($)=>new v5($));function P6($,q,J,G,Q,Y=20){let X=$[0],U=$[1],W=$[2],V=$[3],M=q[0],z=q[1],K=q[2],R=q[3],N=q[4],w=q[5],j=q[6],A=q[7],T=Q,_=J[0],k=J[1],u=J[2],F=X,x=U,f=W,y=V,l=M,v=z,I=K,E=R,Z=N,S=w,P=j,g=A,L=T,b=_,H=k,m=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),Z=Z+L|0,l=w$(l^Z,12),F=F+l|0,L=w$(L^F,8),Z=Z+L|0,l=w$(l^Z,7),x=x+v|0,b=w$(b^x,16),S=S+b|0,v=w$(v^S,12),x=x+v|0,b=w$(b^x,8),S=S+b|0,v=w$(v^S,7),f=f+I|0,H=w$(H^f,16),P=P+H|0,I=w$(I^P,12),f=f+I|0,H=w$(H^f,8),P=P+H|0,I=w$(I^P,7),y=y+E|0,m=w$(m^y,16),g=g+m|0,E=w$(E^g,12),y=y+E|0,m=w$(m^y,8),g=g+m|0,E=w$(E^g,7),F=F+v|0,m=w$(m^F,16),P=P+m|0,v=w$(v^P,12),F=F+v|0,m=w$(m^F,8),P=P+m|0,v=w$(v^P,7),x=x+I|0,L=w$(L^x,16),g=g+L|0,I=w$(I^g,12),x=x+I|0,L=w$(L^x,8),g=g+L|0,I=w$(I^g,7),f=f+E|0,b=w$(b^f,16),Z=Z+b|0,E=w$(E^Z,12),f=f+E|0,b=w$(b^f,8),Z=Z+b|0,E=w$(E^Z,7),y=y+l|0,H=w$(H^y,16),S=S+H|0,l=w$(l^S,12),y=y+l|0,H=w$(H^y,8),S=S+H|0,l=w$(l^S,7);let d=0;G[d++]=X+F|0,G[d++]=U+x|0,G[d++]=W+f|0,G[d++]=V+y|0,G[d++]=M+l|0,G[d++]=z+v|0,G[d++]=K+I|0,G[d++]=R+E|0,G[d++]=N+Z|0,G[d++]=w+S|0,G[d++]=j+P|0,G[d++]=A+g|0,G[d++]=T+L|0,G[d++]=_+b|0,G[d++]=k+H|0,G[d++]=u+m|0}var L6=_5(P6,{counterRight:!1,counterLength:4,allowShortKeys:!1});var F6=new Uint8Array(16),y5=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(F6.subarray(J))},g6=new Uint8Array(32);function f5($,q,J,G,Q){if(Q!==void 0)b$(Q,void 0,"AAD");let Y=$(q,J,g6),X=L5(G.length,Q?Q.length:0,!0),U=b5.create(Y);if(Q)y5(U,Q);y5(U,G),U.update(X);let W=U.digest();return r0(Y,X),W}var _6=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=pG(U+16,X,!1),X.set(Y);let W=X.subarray(0,-16);$(q,J,W,W,1);let V=f5($,q,J,W,G);return X.set(V,U),r0(V),X},decrypt(Y,X){X=pG(Y.length-16,X,!1);let U=Y.subarray(0,-16),W=Y.subarray(-16),V=f5($,q,J,U,G);if(!I5(W,V))throw r0(V),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),r0(V),X}}},sq=P5({blockSize:64,nonceLength:12,tagLength:16},_6(L6));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function L8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function x$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=L8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",W=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+W)}return $}function y0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");x$($.outputLen),x$($.blockLen)}function Lq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function jY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function AY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function Z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function ZY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function d0($,q){return $<<32-q|$>>>q}var v6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function b6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function y6($){for(let q=0;q<$.length;q++)$[q]=b6($[q]);return $}var FX=v6?($)=>$:y6,m5=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),f6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function vJ($){if(Q$($),m5)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=f6[$[J]];return q}var Pq={_0:48,_9:57,A:65,F:70,a:97,f:102};function k5($){if($>=Pq._0&&$<=Pq._9)return $-Pq._0;if($>=Pq.A&&$<=Pq.F)return $-(Pq.A-10);if($>=Pq.a&&$<=Pq.f)return $-(Pq.a-10);return}function bJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(m5)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=k5($.charCodeAt(Y)),U=k5($.charCodeAt(Y+1));if(X===void 0||U===void 0){let W=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+W+'" at index '+Y)}G[Q]=X*16+U}return G}function g$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function F8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function tq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var eq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _X=BigInt(0),gX=BigInt(1);function rG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function x5($){if(typeof $==="bigint"){if(!BY($))throw Error("positive bigint expected, got "+$)}else x$($);return $}function dG($){let q=x5($).toString(16);return q.length&1?"0"+q:q}function h5($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?_X:BigInt("0x"+$)}function $J($){return h5(vJ($))}function qJ($){return h5(vJ(SY(Q$($)).reverse()))}function g8($,q){x$(q),$=x5($);let J=bJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function iG($,q){return g8($,q).reverse()}function SY($){return Uint8Array.from($)}function JJ($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var BY=($)=>typeof $==="bigint"&&_X<=$;function k6($,q,J){return BY($)&&BY(q)&&BY(J)&&q<=$&&$<J}function cG($,q,J,G){if(!k6(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function vX($){let q;for(q=0;$>_X;$>>=gX,q+=1);return q}var nG=($)=>(gX<<BigInt($))-gX;function u5($,q,J){if(x$($,"hashLen"),x$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,g$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return g$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while(!(T=A(N())))R();return z(),T}}function yJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}function bX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O0=BigInt(0),q0=BigInt(1),fJ=BigInt(2),r5=BigInt(3),d5=BigInt(4),i5=BigInt(5),m6=BigInt(7),c5=BigInt(8),x6=BigInt(9),n5=BigInt(16);function D0($,q){let J=$%q;return J>=O0?J:q+J}function f0($,q,J){let G=$;while(q-- >O0)G*=G,G%=J;return G}function p5($,q){if($===O0)throw Error("invert: expected non-zero number");if(q<=O0)throw Error("invert: expected positive modulus, got "+q);let J=D0($,q),G=q,Q=O0,Y=q0,X=q0,U=O0;while(J!==O0){let V=G/J,M=G%J,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==q0)throw Error("invert: does not exist");return D0(Q,q)}function yX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function o5($,q){let J=($.ORDER+q0)/d5,G=$.pow(q,J);return yX($,G,q),G}function h6($,q){let J=($.ORDER-i5)/c5,G=$.mul(q,fJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,fJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return yX($,U,q),U}function u6($){let q=TY($),J=a5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+m6)/n5;return(U,W)=>{let V=U.pow(W,X),M=U.mul(V,G),z=U.mul(V,Q),K=U.mul(V,Y),R=U.eql(U.sqr(M),W),N=U.eql(U.sqr(z),W);V=U.cmov(V,M,R),M=U.cmov(K,z,N);let w=U.eql(U.sqr(M),W),j=U.cmov(V,M,w);return yX(U,j,W),j}}function a5($){if($<r5)throw Error("sqrt is not defined for small field");let q=$-q0,J=0;while(q%fJ===O0)q/=fJ,J++;let G=fJ,Q=TY($);while(l5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return o5;let Y=Q.pow(G,q),X=(q+q0)/fJ;return function(W,V){if(W.is0(V))return V;if(l5(W,V)!==1)throw Error("Cannot find square root");let M=J,z=W.mul(W.ONE,Y),K=W.pow(V,q),R=W.pow(V,X);while(!W.eql(K,W.ONE)){if(W.is0(K))return W.ZERO;let N=1,w=W.sqr(K);while(!W.eql(w,W.ONE))if(N++,w=W.sqr(w),N===M)throw Error("Cannot find square root");let j=q0<<BigInt(M-N-1),A=W.pow(z,j);M=N,z=W.sqr(A),K=W.mul(K,z),R=W.mul(R,A)}return R}}function p6($){if($%d5===r5)return o5;if($%c5===i5)return h6;if($%n5===x6)return u6($);return a5($)}var l6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function fX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=l6.reduce((G,Q)=>{return G[Q]="function",G},q);return yJ($,J),$}function r6($,q,J){if(J<O0)throw Error("invalid exponent, negatives unsupported");if(J===O0)return $.ONE;if(J===q0)return q;let G=$.ONE,Q=q;while(J>O0){if(J&q0)G=$.mul(G,Q);Q=$.sqr(Q),J>>=q0}return G}function oG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,W)=>{if($.is0(U))return X;return G[W]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,W)=>{if($.is0(U))return X;return G[W]=$.mul(X,G[W]),$.mul(X,U)},Y),G}function l5($,q){let J=($.ORDER-q0)/fJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function d6($,q){if(q!==void 0)x$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class s5{ORDER;BITS;BYTES;isLE;ZERO=O0;ONE=q0;_lengths;_sqrt;_mod;constructor($,q={}){if($<=O0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=d6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return D0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return O0<=$&&$<this.ORDER}is0($){return $===O0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&q0)===q0}neg($){return D0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return D0($*$,this.ORDER)}add($,q){return D0($+q,this.ORDER)}sub($,q){return D0($-q,this.ORDER)}mul($,q){return D0($*q,this.ORDER)}pow($,q){return r6(this,$,q)}div($,q){return D0($*p5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return p5($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=p6(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?iG($,this.BYTES):g8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?qJ($):$J($);if(X)U=D0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return oG(this,$)}cmov($,q,J){return J?q:$}}function TY($,q={}){return new s5($,q)}function t5($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function kX($){let q=t5($);return q+Math.ceil(q/2)}function e5($,q,J=!1){Q$($);let G=$.length,Q=t5(q),Y=kX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?qJ($):$J($),U=D0(X,q-q0)+q0;return J?iG(U,Q):g8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var _8=BigInt(0),kJ=BigInt(1);function aG($,q){let J=q.negate();return $?J:q}function uX($,q){let J=oG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function GV($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function mX($,q){GV($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=nG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function $V($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=kJ;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var xX=new WeakMap,QV=new WeakMap;function hX($){return QV.get($)||1}function qV($){if($!==_8)throw Error("invalid wNAF")}class pX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>_8){if(q&kJ)J=J.add(G);G=G.double(),q>>=kJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=mX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=mX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=$V(J,X,Y);if(J=U,V)Q=Q.add(aG(z,q[K]));else G=G.add(aG(M,q[W]))}return qV(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=mX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===_8)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=$V(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return qV(J),G}getPrecomputes($,q,J){let G=xX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);xX.set(q,G)}}return G}cached($,q,J){let G=hX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=hX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){GV(q,this.bits),QV.set($,q),xX.delete($)}hasCache($){return hX($)!==1}}function YV($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>_8||G>_8){if(J&kJ)Y=Y.add(Q);if(G&kJ)X=X.add(Q);Q=Q.double(),J>>=kJ,G>>=kJ}return{p1:Y,p2:X}}function JV($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return fX(q),q}else return TY($,{isLE:J})}function XV($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>_8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=JV(q.p,J.Fp,G),Y=JV(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function EY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sG=BigInt(0),v8=BigInt(1),IY=BigInt(2);function i6($){return yJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function UV($){let q=i6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X||tq,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?IY**BigInt(254):IY**BigInt(447),N=U?BigInt(8)*IY**BigInt(251)-v8:BigInt(4)*IY**BigInt(445)-v8,w=R+N+v8,j=(Z)=>D0(Z,J),A=T(z);function T(Z){return iG(j(Z),M)}function _(Z){let S=SY(Q$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(qJ(S))}function k(Z){return qJ(Q(SY(Q$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===sG)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){cG("u",Z,sG,J),cG("scalar",S,R,w);let P=S,g=Z,L=v8,b=sG,H=Z,m=v8,d=sG;for(let a=BigInt(V-1);a>=sG;a--){let q$=P>>a&v8;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;H=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z=W(M))=>{return Q$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze({keygen:EY(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}class lX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(y0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),Z0(G)}update($){return Lq(this),this.iHash.update($),this}digestInto($){Lq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var b8=($,q,J)=>new lX($,q).update(J).digest();b8.create=($,q)=>new lX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var WV=($,q)=>($+($>=0?q:-q)/MV)/q;function c6($,q,J){let[[G,Q],[Y,X]]=q,U=WV(X*$,J),W=WV(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<Fq,K=M<Fq;if(z)V=-V;if(K)M=-M;let R=nG(Math.ceil(vX(J)/2))+y8;if(V<Fq||V>=R||M<Fq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:V,k2neg:K,k2:M}}function dX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function rX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(rG(J.lowS,"lowS"),rG(J.prehash,"prehash"),J.format!==void 0)dX(J.format);return J}class VV extends Error{constructor($=""){super($)}}var GJ={Err:VV,_tlv:{encode:($,q)=>{let{Err:J}=GJ;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=dG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?dG(Q.length/2|128):"";return dG($)+Y+Q+q},decode($,q){let{Err:J}=GJ,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=GJ;if($<Fq)throw new q("integer: negative integers are not allowed");let J=dG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=GJ;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return $J($)}},toSig($){let{Err:q,_int:J,_tlv:G}=GJ,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=GJ,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Fq=BigInt(0),y8=BigInt(1),MV=BigInt(2),CY=BigInt(3),n6=BigInt(4);function iX($,q={}){let J=XV("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;yJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let V=RV(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(I,E,Z){let{x:S,y:P}=E.toAffine(),g=G.toBytes(S);if(rG(Z,"isCompressed"),Z){M();let L=!G.isOdd(P);return g$(zV(L),g)}else return g$(Uint8Array.of(4),g,G.toBytes(P))}function K(I){Q$(I,void 0,"Point");let{publicKey:E,publicKeyUncompressed:Z}=V,S=I.length,P=I[0],g=I.subarray(1);if(S===E&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),H;try{H=G.sqrt(b)}catch(B){let a=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+a)}M();let m=G.isOdd(H);if((P&1)===1!==m)H=G.neg(H);return{x:L,y:H}}else if(S===Z&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),H=G.fromBytes(g.subarray(L,L*2));if(!j(b,H))throw Error("bad point: is not on curve");return{x:b,y:H}}else throw Error(`bad point: got length ${S}, expected compressed=${E} or uncompressed=${Z}`)}let R=q.toBytes||z,N=q.fromBytes||K;function w(I){let E=G.sqr(I),Z=G.mul(E,I);return G.add(G.add(Z,G.mul(I,Y.a)),Y.b)}function j(I,E){let Z=G.sqr(E),S=w(I);return G.eql(Z,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let A=G.mul(G.pow(Y.a,CY),n6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(A,T)))throw Error("bad curve params: a or b");function _(I,E,Z=!1){if(!G.isValid(E)||Z&&G.is0(E))throw Error(`bad point coordinate ${I}`);return E}function k(I){if(!(I instanceof y))throw Error("Weierstrass Point expected")}function u(I){if(!W||!W.basises)throw Error("no endo");return c6(I,W.basises,Q.ORDER)}let F=bX((I,E)=>{let{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=bX((I)=>{if(I.is0()){if(q.allowInfinityPoint&&!G.is0(I.Y))return;throw Error("bad point: ZERO")}let{x:E,y:Z}=I.toAffine();if(!G.isValid(E)||!G.isValid(Z))throw Error("bad point: x or y not field elements");if(!j(E,Z))throw Error("bad point: equation left != right");if(!I.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function f(I,E,Z,S,P){return Z=new y(G.mul(Z.X,I),Z.Y,Z.Z),E=aG(S,E),Z=aG(P,Z),E.add(Z)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(I,E,Z){this.X=_("x",I),this.Y=_("y",E,!0),this.Z=_("z",Z),Object.freeze(this)}static CURVE(){return Y}static fromAffine(I){let{x:E,y:Z}=I||{};if(!I||!G.isValid(E)||!G.isValid(Z))throw Error("invalid affine point");if(I instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(Z))return y.ZERO;return new y(E,Z,G.ONE)}static fromBytes(I){let E=y.fromAffine(N(Q$(I,void 0,"point")));return E.assertValidity(),E}static fromHex(I){return y.fromBytes(bJ(I))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(I=8,E=!0){if(v.createCache(this,I),!E)this.multiply(CY);return this}assertValidity(){x(this)}hasEvenY(){let{y:I}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(I)}equals(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.eql(G.mul(E,L),G.mul(P,S)),H=G.eql(G.mul(Z,L),G.mul(g,S));return b&&H}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:I,b:E}=Y,Z=G.mul(E,CY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=G.mul(S,S),d=G.mul(P,P),B=G.mul(g,g),a=G.mul(S,P);return a=G.add(a,a),H=G.mul(S,g),H=G.add(H,H),L=G.mul(I,H),b=G.mul(Z,B),b=G.add(L,b),L=G.sub(d,b),b=G.add(d,b),b=G.mul(L,b),L=G.mul(a,L),H=G.mul(Z,H),B=G.mul(I,B),a=G.sub(m,B),a=G.mul(I,a),a=G.add(a,H),H=G.add(m,m),m=G.add(H,m),m=G.add(m,B),m=G.mul(m,a),b=G.add(b,m),B=G.mul(P,g),B=G.add(B,B),m=G.mul(B,a),L=G.sub(L,m),H=G.mul(B,d),H=G.add(H,H),H=G.add(H,H),new y(L,b,H)}add(I){k(I);let{X:E,Y:Z,Z:S}=this,{X:P,Y:g,Z:L}=I,b=G.ZERO,H=G.ZERO,m=G.ZERO,d=Y.a,B=G.mul(Y.b,CY),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.mul(S,L),G$=G.add(E,Z),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(a,q$),G$=G.sub(G$,t),t=G.add(E,S);let H$=G.add(P,L);return t=G.mul(t,H$),H$=G.add(a,Y$),t=G.sub(t,H$),H$=G.add(Z,S),b=G.add(g,L),H$=G.mul(H$,b),b=G.add(q$,Y$),H$=G.sub(H$,b),m=G.mul(d,t),b=G.mul(B,Y$),m=G.add(b,m),b=G.sub(q$,m),m=G.add(q$,m),H=G.mul(b,m),q$=G.add(a,a),q$=G.add(q$,a),Y$=G.mul(d,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(a,Y$),Y$=G.mul(d,Y$),t=G.add(t,Y$),a=G.mul(q$,t),H=G.add(H,a),a=G.mul(H$,t),b=G.mul(G$,b),b=G.sub(b,a),a=G.mul(G$,q$),m=G.mul(H$,m),m=G.add(m,a),new y(b,H,m)}subtract(I){return this.add(I.negate())}is0(){return this.equals(y.ZERO)}multiply(I){let{endo:E}=q;if(!Q.isValidNot0(I))throw Error("invalid scalar: out of range");let Z,S,P=(g)=>v.cached(this,g,(L)=>uX(y,L));if(E){let{k1neg:g,k1:L,k2neg:b,k2:H}=u(I),{p:m,f:d}=P(L),{p:B,f:a}=P(H);S=d.add(a),Z=f(E.beta,m,B,g,b)}else{let{p:g,f:L}=P(I);Z=g,S=L}return uX(y,[Z,S])[0]}multiplyUnsafe(I){let{endo:E}=q,Z=this;if(!Q.isValid(I))throw Error("invalid scalar: out of range");if(I===Fq||Z.is0())return y.ZERO;if(I===y8)return Z;if(v.hasCache(this))return this.multiply(I);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(I),{p1:b,p2:H}=YV(y,Z,P,L);return f(E.beta,b,H,S,g)}else return v.unsafe(Z,I)}toAffine(I){return F(this,I)}isTorsionFree(){let{isTorsionFree:I}=q;if(X===y8)return!0;if(I)return I(y,this);return v.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:I}=q;if(X===y8)return this;if(I)return I(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(I=!0){return rG(I,"isCompressed"),this.assertValidity(),R(y,this,I)}toHex(I=!0){return vJ(this.toBytes(I))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,v=new pX(y,q.endo?Math.ceil(l/2):l);return y.BASE.precompute(8),y}function zV($){return Uint8Array.of($?2:3)}function RV($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function o6($,q={}){let{Fn:J}=$,G=q.randomBytes||tq,Q=Object.assign(RV($.Fp,J),{seed:kX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R=G(Q.seed)){return e5(Q$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!L8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let A=Q$(R,void 0,"key").length;return A===w||A===j}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=EY(U,W);return Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function cX($,q,J={}){y0(q),yJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||tq,Q=J.hmac||((Z,S)=>b8(q,Z,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:W}=X,{keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R}=o6($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*MV<Y.ORDER;function j(Z){let S=U>>y8;return Z>S}function A(Z,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${Z}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function _(Z,S){dX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(Z,g)}class k{r;s;recovery;constructor(Z,S,P){if(this.r=A("r",Z),this.s=A("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(Z,S=N.format){_(Z,S);let P;if(S==="der"){let{r:H,s:m}=GJ.toSig(Q$(Z));return new k(H,m)}if(S==="recovered")P=Z[0],S="compact",Z=Z.subarray(1);let g=R.signature/2,L=Z.subarray(0,g),b=Z.subarray(g,g*2);return new k(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(Z,S){return this.fromBytes(bJ(Z),S)}assertRecovery(){let{recovery:Z}=this;if(Z==null)throw Error("invalid recovery id: must be present");return Z}addRecoveryBit(Z){return new k(this.r,this.s,Z)}recoverPublicKey(Z){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),H=$.fromBytes(g$(zV((g&1)===0),b)),m=X.inv(L),d=F(Q$(Z,void 0,"msgHash")),B=X.create(-d*m),a=X.create(P*m),q$=$.BASE.multiplyUnsafe(B).add(H.multiplyUnsafe(a));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(Z=N.format){if(dX(Z),Z==="der")return bJ(GJ.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(Z==="recovered")return T(),g$(Uint8Array.of(this.assertRecovery()),g,L);return g$(g,L)}toHex(Z){return vJ(this.toBytes(Z))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=$J(S),g=S.length*8-W;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=nG(W);function f(Z){return cG("num < 2^"+W,Z,Fq,x),X.toBytes(Z)}function y(Z,S){return Q$(Z,void 0,"message"),S?Q$(q(Z),void 0,"prehashed message"):Z}function l(Z,S,P){let{lowS:g,prehash:L,extraEntropy:b}=rX(P,N);Z=y(Z,L);let H=F(Z),m=X.fromBytes(S);if(!X.isValidNot0(m))throw Error("invalid private key");let d=[f(m),f(H)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;d.push(Q$(Y$,void 0,"extraEntropy"))}let B=g$(...d),a=H;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),H$=$.BASE.multiply(G$).toAffine(),A$=X.create(H$.x);if(A$===Fq)return;let I$=X.create(t*X.create(a+A$*m));if(I$===Fq)return;let m$=(H$.x===A$?0:2)|Number(H$.y&y8),R0=I$;if(g&&j(I$))R0=X.neg(I$),m$^=1;return new k(A$,R0,w?void 0:m$)}return{seed:B,k2sig:q$}}function v(Z,S,P={}){let{seed:g,k2sig:L}=l(Z,S,P);return u5(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function I(Z,S,P,g={}){let{lowS:L,prehash:b,format:H}=rX(g,N);if(P=Q$(P,void 0,"publicKey"),S=y(S,b),!L8(Z)){let m=Z instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+m)}_(Z,H);try{let m=k.fromBytes(Z,H),d=$.fromBytes(P);if(L&&m.hasHighS())return!1;let{r:B,s:a}=m,q$=F(S),Y$=X.inv(a),G$=X.create(q$*Y$),t=X.create(B*Y$),H$=$.BASE.multiplyUnsafe(G$).add(d.multiplyUnsafe(t));if(H$.is0())return!1;return X.create(H$.x)===B}catch(m){return!1}}function E(Z,S,P={}){let{prehash:g}=rX(P,N);return S=y(S,g),k.fromBytes(Z,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:V,getPublicKey:M,getSharedSecret:z,utils:K,lengths:R,Point:$,sign:v,verify:I,recoverPublicKey:E,Signature:k,hash:q})}function KV($,q,J){return $&q^~$&J}function DV($,q,J){return $&q^$&J^q&J}class PY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=ZY(this.buffer)}update($){Lq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=ZY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Lq(this),jY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,Z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=ZY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let W=U/4,V=this.get();if(W>V.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<W;M++)X.setUint32(4*M,V[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var gq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),_q=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),i$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),c$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var LY=BigInt(4294967295),OV=BigInt(32);function a6($,q=!1){if(q)return{h:Number($&LY),l:Number($>>OV&LY)};return{h:Number($>>OV&LY)|0,l:Number($&LY)|0}}function FY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=a6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var nX=($,q,J)=>$>>>J,oX=($,q,J)=>$<<32-J|q>>>J,mJ=($,q,J)=>$>>>J|q<<32-J,xJ=($,q,J)=>$<<32-J|q>>>J,tG=($,q,J)=>$<<64-J|q>>>J-32,eG=($,q,J)=>$>>>J-32|q<<64-J;var HV=($,q,J)=>$<<J|q>>>32-J,NV=($,q,J)=>q<<J|$>>>32-J,wV=($,q,J)=>q<<J-32|$>>>64-J,jV=($,q,J)=>$<<J-32|q>>>64-J;function Yq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var AV=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),ZV=($,q,J,G)=>q+J+G+($/4294967296|0)|0,BV=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),SV=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,TV=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),EV=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var t6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),QJ=new Uint32Array(64);class aX extends PY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)QJ[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=QJ[M-15],K=QJ[M-2],R=d0(z,7)^d0(z,18)^z>>>3,N=d0(K,17)^d0(K,19)^K>>>10;QJ[M]=N+QJ[M-7]+R+QJ[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:W,H:V}=this;for(let M=0;M<64;M++){let z=d0(X,6)^d0(X,11)^d0(X,25),K=V+z+KV(X,U,W)+t6[M]+QJ[M]|0,N=(d0(J,2)^d0(J,13)^d0(J,22))+DV(J,G,Q)|0;V=W,W=U,U=X,X=Y+K|0,Y=Q,Q=G,G=J,J=K+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,W=W+this.G|0,V=V+this.H|0,this.set(J,G,Q,Y,X,U,W,V)}roundClean(){Z0(QJ)}destroy(){this.set(0,0,0,0,0,0,0,0),Z0(this.buffer)}}class IV extends aX{A=gq[0]|0;B=gq[1]|0;C=gq[2]|0;D=gq[3]|0;E=gq[4]|0;F=gq[5]|0;G=gq[6]|0;H=gq[7]|0;constructor(){super(32)}}class e6 extends aX{A=_q[0]|0;B=_q[1]|0;C=_q[2]|0;D=_q[3]|0;E=_q[4]|0;F=_q[5]|0;G=_q[6]|0;H=_q[7]|0;constructor(){super(28)}}var CV=(()=>FY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),$N=(()=>CV[0])(),qN=(()=>CV[1])(),YJ=new Uint32Array(80),XJ=new Uint32Array(80);class $Q extends PY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:W,El:V,Fh:M,Fl:z,Gh:K,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w]}set($,q,J,G,Q,Y,X,U,W,V,M,z,K,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=W|0,this.El=V|0,this.Fh=M|0,this.Fl=z|0,this.Gh=K|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)YJ[T]=$.getUint32(q),XJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let _=YJ[T-15]|0,k=XJ[T-15]|0,u=mJ(_,k,1)^mJ(_,k,8)^nX(_,k,7),F=xJ(_,k,1)^xJ(_,k,8)^oX(_,k,7),x=YJ[T-2]|0,f=XJ[T-2]|0,y=mJ(x,f,19)^tG(x,f,61)^nX(x,f,6),l=xJ(x,f,19)^eG(x,f,61)^oX(x,f,6),v=BV(F,l,XJ[T-7],XJ[T-16]),I=SV(v,u,y,YJ[T-7],YJ[T-16]);YJ[T]=I|0,XJ[T]=v|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:W,Dl:V,Eh:M,El:z,Fh:K,Fl:R,Gh:N,Gl:w,Hh:j,Hl:A}=this;for(let T=0;T<80;T++){let _=mJ(M,z,14)^mJ(M,z,18)^tG(M,z,41),k=xJ(M,z,14)^xJ(M,z,18)^eG(M,z,41),u=M&K^~M&N,F=z&R^~z&w,x=TV(A,k,F,qN[T],XJ[T]),f=EV(x,j,_,u,$N[T],YJ[T]),y=x|0,l=mJ(J,G,28)^tG(J,G,34)^tG(J,G,39),v=xJ(J,G,28)^eG(J,G,34)^eG(J,G,39),I=J&Q^J&X^Q&X,E=G&Y^G&U^Y&U;j=N|0,A=w|0,N=K|0,w=R|0,K=M|0,R=z|0,{h:M,l:z}=Yq(W|0,V|0,f|0,y|0),W=X|0,V=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let Z=AV(y,v,E);J=ZV(Z,f,l,I),G=Z|0}({h:J,l:G}=Yq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Yq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Yq(this.Ch|0,this.Cl|0,X|0,U|0),{h:W,l:V}=Yq(this.Dh|0,this.Dl|0,W|0,V|0),{h:M,l:z}=Yq(this.Eh|0,this.El|0,M|0,z|0),{h:K,l:R}=Yq(this.Fh|0,this.Fl|0,K|0,R|0),{h:N,l:w}=Yq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:A}=Yq(this.Hh|0,this.Hl|0,j|0,A|0),this.set(J,G,Q,Y,X,U,W,V,M,z,K,R,N,w,j,A)}roundClean(){Z0(YJ,XJ)}destroy(){Z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class JN extends $Q{Ah=c$[0]|0;Al=c$[1]|0;Bh=c$[2]|0;Bl=c$[3]|0;Ch=c$[4]|0;Cl=c$[5]|0;Dh=c$[6]|0;Dl=c$[7]|0;Eh=c$[8]|0;El=c$[9]|0;Fh=c$[10]|0;Fl=c$[11]|0;Gh=c$[12]|0;Gl=c$[13]|0;Hh=c$[14]|0;Hl=c$[15]|0;constructor(){super(64)}}class PV extends $Q{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(48)}}var J0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),G0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class GN extends $Q{Ah=J0[0]|0;Al=J0[1]|0;Bh=J0[2]|0;Bl=J0[3]|0;Ch=J0[4]|0;Cl=J0[5]|0;Dh=J0[6]|0;Dl=J0[7]|0;Eh=J0[8]|0;El=J0[9]|0;Fh=J0[10]|0;Fl=J0[11]|0;Gh=J0[12]|0;Gl=J0[13]|0;Hh=J0[14]|0;Hl=J0[15]|0;constructor(){super(28)}}class QN extends $Q{Ah=G0[0]|0;Al=G0[1]|0;Bh=G0[2]|0;Bl=G0[3]|0;Ch=G0[4]|0;Cl=G0[5]|0;Dh=G0[6]|0;Dl=G0[7]|0;Eh=G0[8]|0;El=G0[9]|0;Fh=G0[10]|0;Fl=G0[11]|0;Gh=G0[12]|0;Gl=G0[13]|0;Hh=G0[14]|0;Hl=G0[15]|0;constructor(){super(32)}}var gY=F8(()=>new IV,eq(1));var LV=F8(()=>new PV,eq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var YN=BigInt(1),FV=BigInt(2),XN=BigInt(3),UN=BigInt(5),cF=BigInt(8),gV=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function WN($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=gV,U=$*$%Y*$%Y,W=f0(U,FV,Y)*U%Y,V=f0(W,YN,Y)*$%Y,M=f0(V,UN,Y)*V%Y,z=f0(M,q,Y)*M%Y,K=f0(z,J,Y)*z%Y,R=f0(K,G,Y)*K%Y,N=f0(R,Q,Y)*R%Y,w=f0(N,Q,Y)*R%Y,j=f0(w,q,Y)*M%Y;return{pow_p_5_8:f0(j,FV,Y)*$%Y,b2:U}}function VN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var _V=(()=>{let $=gV;return UV({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=WN(q);return D0(f0(J,XN,$)*G,$)},adjustScalarBytes:VN})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var MN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),zN=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var RN=iX(MN),sX=cX(RN,gY);var KN=iX(zN),vV=cX(KN,LV);function yV($,q,J){if(y0($),J===void 0)J=new Uint8Array($.outputLen);return b8($,J,q)}var tX=Uint8Array.of(0),bV=Uint8Array.of();function fV($,q,J,G=32){y0($),x$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=bV;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=b8.create($,q),W=U._cloneInto(),V=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)tX[0]=M+1,W.update(M===0?bV:V).update(J).update(tX).digestInto(V),X.set(V,Q*M),U._cloneInto(W);return U.destroy(),W.destroy(),Z0(V,tX),X.slice(0,G)}var DN=BigInt(0),qQ=BigInt(1),ON=BigInt(2),HN=BigInt(7),NN=BigInt(256),wN=BigInt(113),xV=[],hV=[],uV=[];for(let $=0,q=qQ,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],xV.push(2*(5*G+J)),hV.push(($+1)*($+2)/2%64);let Q=DN;for(let Y=0;Y<7;Y++)if(q=(q<<qQ^(q>>HN)*wN)%NN,q&ON)Q^=qQ<<(qQ<<BigInt(Y))-qQ;uV.push(Q)}var pV=FY(uV,!0),jN=pV[0],AN=pV[1],kV=($,q,J)=>J>32?wV($,q,J):HV($,q,J),mV=($,q,J)=>J>32?jV($,q,J):NV($,q,J);function ZN($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,W=(X+2)%10,V=J[W],M=J[W+1],z=kV(V,M,1)^J[U],K=mV(V,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=K}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=hV[X],W=kV(Q,Y,U),V=mV(Q,Y,U),M=xV[X];Q=$[M],Y=$[M+1],$[M]=W,$[M+1]=V}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=jN[G],$[1]^=AN[G]}Z0(J)}class _Y{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,x$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=AY(this.state)}clone(){return this._cloneInto()}keccak(){FX(this.state32),ZN(this.state32,this.rounds),FX(this.state32),this.posOut=0,this.pos=0}update($){Lq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Lq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return x$($),this.xofInto(new Uint8Array($))}digestInto($){if(jY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Z0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new _Y(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var lV=($,q,J,G={})=>F8(()=>new _Y(q,$,J),G);var hJ=lV(6,136,32,eq(8));var rV=lV(6,72,64,eq(10));var dV=($,q,J,G={})=>F8((Q={})=>new _Y(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),iV=dV(31,168,16,eq(11)),Xq=dV(31,136,32,eq(12));function eX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function nV($){return eX($),($&$-1)===0&&$!==0}function $U($,q){eX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function oV($){return eX($),31-Math.clz32($)}function cV($){let q=$.length;if(q<2||!nV(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=oV(q);for(let G=0;G<q;G++){let Q=$U(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var qU=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,W=oV(J);if(!nV(J))throw Error("FFT: Polynomial size should be power of two");let V=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)cV(M);for(let z=0,K=1;z<W-X;z++){let R=Q?z+1+X:W-z,N=1<<R,w=N>>1,j=J>>R;for(let A=0;A<J;A+=N)for(let T=0,_=K++;T<w;T++){let k=Y?Q?J-_:_:T*j,u=A+T,F=A+T+w,x=G[k],f=M[F],y=M[u];if(V){let l=$.mul(f,x);M[u]=$.add(y,l),M[F]=$.sub(y,l)}else if(Y)M[u]=$.add(f,y),M[F]=$.mul($.sub(f,y),x);else M[u]=$.add(y,f),M[F]=$.mul($.sub(y,f),x)}}if(!Q&&U)cV(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Uq=tq;function vY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function aV($){return Uint8Array.from($)}function uJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let W=q[X],V=J(W),M=typeof W==="number"?Q[X]:W.encode(Q[X]);if(Q$(M,V,$),Y.set(M,U),typeof W!=="number")M.fill(0);U+=V}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),W=Q.subarray(0,U);Y.push(typeof X==="number"?W:X.decode(W)),Q=Q.subarray(U)}return Y}}}function bY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function y$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function JU($){return(1<<$)-1}var Wg=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var sV=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,W=(T,_=G)=>{let k=T%_|0;return(k>=0?k|0:_+k|0)|0},V=(T,_=G)=>{let k=W(T,_)|0;return(k>_>>1?k-_|0:k)|0};function M(){let T=q(J);for(let _=0;_<J;_++){let k=$U(_,X),u=BigInt(Y)**BigInt(k)%BigInt(G);T[_]=Number(u)|0}return T}let z=M(),K={add:(T,_)=>W((T|0)+(_|0))|0,sub:(T,_)=>W((T|0)-(_|0))|0,mul:(T,_)=>W((T|0)*(_|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=qU(K,{dit:!1,...R}),w=qU(K,{dit:!0,...R});return{mod:W,smod:V,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let _=0;_<T.length;_++)T[_]=W(Q*T[_]);return T}},bitsCoder:(T,_)=>{let k=JU(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=(_.encode(F[f])&k)<<l,l+=T;for(;l>=8;l-=8,y>>=8)x[v++]=y&JU(l)}return x},decode:(F)=>{let x=q(J);for(let f=0,y=0,l=0,v=0;f<F.length;f++){y|=F[f]<<l,l+=8;for(;l>=T;l-=T,y>>=T)x[v++]=_.decode(y&k)}return x}}}}},BN=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,W=0;return{stats:()=>({calls:U,xofs:W}),get:(V,M)=>{return G[Q+0]=V,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return W++,X.xofInto(Y)}},clean:()=>{X.destroy(),y$(Y,G)}}},tV=BN(iV);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Q0=256,vq=3329,SN=3303,TN=17,{mod:QQ,nttZetas:EN,NTT:pJ,bitsCoder:IN}=sV({N:Q0,Q:vq,F:SN,ROOT_OF_UNITY:TN,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),GU={512:{N:Q0,Q:vq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Q0,Q:vq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Q0,Q:vq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},CN=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+vq/2)/vq,decode:(J)=>J*vq+q>>>$}},JQ=($)=>IN($,CN($));function lJ($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]+q[J])}function PN($,q){for(let J=0;J<Q0;J++)$[J]=QQ($[J]-q[J])}function LN($,q,J,G,Q){let Y=QQ(q*G*Q+$*J),X=QQ($*G+q*J);return{c0:Y,c1:X}}function yY($,q){for(let J=0;J<Q0/2;J++){let G=EN[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=LN($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function eV($){let q=new Uint16Array(Q0);for(let J=0;J<Q0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<Q0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<vq)q[J++]=Y;if(J<Q0&&X<vq)q[J++]=X}}return q}function GQ($,q,J,G){let Q=$(G*Q0/4,q,J),Y=new Uint16Array(Q0),X=AY(Q),U=0;for(let W=0,V=0,M=0,z=0;W<X.length;W++){let K=X[W];for(let R=0;R<32;R++)if(M+=K&1,K>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[V++]=QQ(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var FN=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:W}=$,V=JQ(1),M=JQ(W),z=JQ(U),K=uJ("publicKey",bY(JQ(12),q),32),R=bY(JQ(12),q),N=uJ("ciphertext",bY(z,q),M),w=uJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:K.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let A=new Uint8Array(33);A.set(j),A[32]=q;let T=Q(A),[_,k]=w.decode(T),u=[],F=[];for(let y=0;y<q;y++)u.push(pJ.encode(GQ(J,k,y,Y)));let x=G(_);for(let y=0;y<q;y++){let l=pJ.encode(GQ(J,k,q+y,Y));for(let v=0;v<q;v++){let I=eV(x.get(v,y));lJ(l,yY(I,u[v]))}F.push(l)}x.clean();let f={publicKey:K.encode([F,_]),secretKey:R.encode(u)};return y$(_,k,u,F,A,T),f},encrypt:(j,A,T)=>{let[_,k]=K.decode(j),u=[];for(let v=0;v<q;v++)u.push(pJ.encode(GQ(J,T,v,Y)));let F=G(k),x=new Uint16Array(Q0),f=[];for(let v=0;v<q;v++){let I=GQ(J,T,q+v,X),E=new Uint16Array(Q0);for(let Z=0;Z<q;Z++){let S=eV(F.get(v,Z));lJ(E,yY(S,u[Z]))}lJ(I,pJ.decode(E)),f.push(I),lJ(x,yY(_[v],u[v])),y$(E)}F.clean();let y=GQ(J,T,2*q,X);lJ(y,pJ.decode(x));let l=V.decode(A);return lJ(l,y),y$(_,u,x,y),N.encode([f,l])},decrypt:(j,A)=>{let[T,_]=N.decode(j),k=R.decode(A),u=new Uint16Array(Q0);for(let F=0;F<q;F++)lJ(u,yY(k[F],pJ.encode(T[F])));return PN(_,pJ.decode(u)),y$(u,k,T),V.encode(_)}}};function QU($){let q=FN($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=uJ("secretKey",X.secretKey,X.publicKey,32,32),W=32,V=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Uq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:K}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([K,z,R,M.subarray(32)]);return y$(K,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,K,R,N]=U.decode(M);return Uint8Array.from(K)},encapsulate:(M,z=Uq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let K=M.subarray(0,384*$.K),R=Y.encode(Y.decode(aV(K)));if(!vY(R,K))throw y$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");y$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return y$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let K=U.bytesLen-96,R=K+32,N=J(z.subarray(K/2,R));if(!vY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,A,T]=U.decode(z),_=q.decrypt(M,w),k=G.create().update(_).update(A).digest(),u=k.subarray(0,32),F=q.encrypt(j,_,k.subarray(32,64)),x=vY(M,F),f=Q.create({dkLen:32}).update(T).update(M).digest();return y$(_,F,!x?u:f),x?u:f}}}function gN($,q,J){return Xq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var YU={HASH256:hJ,HASH512:rV,KDF:Xq,XOF:tV,PRF:gN},jg=QU({...YU,...GU[512]}),YQ=QU({...YU,...GU[768]}),$M=QU({...YU,...GU[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function _N($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Uq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?qJ(X):$J(X),W=Y.toBytes(Y.create(U));return{secretKey:W,publicKey:$.getPublicKey(W)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function XU($,q=!1){let J=_N($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Uq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return y$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function XQ($,q){return uJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function UU($){return(q,J)=>$(q,{dkLen:J})}function vN($,q,...J){let G=XQ(J,"seed"),Q=XQ(J,"publicKey");if($===void 0)$=G.bytesLen;x$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),W=J.map((z,K)=>z.keygen(U[K])),V=W.map((z)=>z.secretKey),M=W.map((z)=>z.publicKey);return{secretKey:V,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Uq($)){let{publicKey:U,secretKey:W}=Y(X),V=Q.encode(U);return y$(U),y$(W),{secretKey:X,publicKey:V}},expandDecapsulationKey:Y,realSeedLen:$}}function fY($,q,J,G,...Q){let Y=vN($,J,...Q),X=XQ(Q,"cipherText"),U=XQ(Q,"publicKey"),W=XQ(Q,"msg");if(q===void 0)q=W.bytesLen;return x$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:W.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(V,M=Uq(W.bytesLen)){let z=U.decode(V),K=W.decode(M),R=Q.map((A,T)=>A.encapsulate(z[T],K[T])),N=R.map((A)=>A.sharedSecret),w=R.map((A)=>A.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return y$(N,w),j},decapsulate(V,M){let z=X.decode(V),{publicKey:K,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(K,z,N)}}}function qM($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>Q(g$(U[0],U[1],X[1],Y[1],JJ($))),q,J)}var Fg=qM("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",YQ,XU(sX,!0),Xq,hJ),gg=qM("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",$M,XU(vV,!0),Xq,hJ);function bN($,q,J,G,Q){return y0(G),y0(Q),fY(32,32,UU(G),(Y,X,U)=>{let W=g$(U[0],U[1],X[0],Y[0],X[1],Y[1],JJ($)),V=32,M=g$(JJ("hybrid_prk"),W),z=yV(Q,M),K=g$(g8(32,2),JJ("shared_secret"),JJ("")),R=fV(Q,z,K,32);return y$(z,K,M,W),R},q,J)}var JM=XU(_V),_g=bN("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",YQ,JM,Xq,gY),yN=(()=>fY(32,32,UU(Xq),($,q,J)=>hJ(g$(J[0],J[1],q[1],$[1],JJ("\\.//^\\"))),YQ,JM))();function fN($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let W=Q.toBytes(Q.create(U)),V=$.getPublicKey(W,!1);return{secretKey:W,publicKey:V}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Uq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Uq(G)){Q$(U,G,"rand");let{secretKey:W}=Y(U),V=this.decapsulate(X,W),M=$.getPublicKey(W,!1);return y$(W),{sharedSecret:V,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function kN($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=fN(J,Q,Y,G),U=64,W=U+G;return fY(32,32,(V)=>{Q$(V,32);let M=Xq(V,{dkLen:W}),z=M.subarray(0,U),K=M.subarray(U,W);return g$(z,K)},(V,M,z)=>hJ(g$(z[0],z[1],M[1],V[1],JJ($))),q,X)}var mN=(()=>kN("MLKEM768-P256",YQ,sX,128))();var WU=yN,GM=mN;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>u$($,q,J),MU=L$,f8=UY,n$=(...$)=>zX(...$),k8=($)=>bG($),m8=WX,x8=($)=>Sq($),mY=BigInt(0),VU=BigInt(1);function bq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function xY($){if(typeof $==="bigint"){if(!kY($))throw RangeError("positive bigint expected, got "+$)}else MU($);return $}function Wq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function UQ($){let q=xY($).toString(16);return q.length&1?"0"+q:q}function QM($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?mY:BigInt("0x"+$)}function rJ($){return QM(UY($))}function i0($){return QM(UY(UJ(u$($)).reverse()))}function hY($,q){if(L$(q),q===0)throw RangeError("zero length");$=xY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return bG(J.padStart(q*2,"0"))}function WQ($,q){return hY($,q).reverse()}function YM($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function UJ($){return Uint8Array.from(Z$($))}function uY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var kY=($)=>typeof $==="bigint"&&mY<=$;function xN($,q,J){return kY($)&&kY(q)&&kY(J)&&q<=$&&$<J}function yq($,q,J,G){if(!xN(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function h8($){if($<mY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>mY;$>>=VU,q+=1);return q}var VQ=($)=>(VU<<BigInt($))-VU;function XM($,q,J){if(L$($,"hashLen"),L$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,W=G($),V=G($),M=0,z=()=>{W.fill(1),V.fill(0),M=0},K=(...j)=>J(V,n$(W,...j)),R=(j=Q)=>{if(V=K(Y,j),W=K(),j.length===0)return;V=K(X,j),W=K()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,A=[];while(j<q){W=K();let T=W.slice();A.push(T),j+=W.length}return n$(...A)};return(j,A)=>{z(),R(j);let T=void 0;while((T=A(N()))===void 0)R();return z(),T}}function k0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let W=$[Y];if(U&&W===void 0)return;let V=typeof W;if(V!==X||W===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${V}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,W])=>G(U,W,X));Q(q,!1),Q(J,!0)}var zU=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o$=BigInt(0),C$=BigInt(1),dJ=BigInt(2),MM=BigInt(3),zM=BigInt(4),RM=BigInt(5),hN=BigInt(7),KM=BigInt(8),uN=BigInt(9),DM=BigInt(16);function T$($,q){if(q<=o$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=o$?J:q+J}function m0($,q,J){if(q<o$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >o$)G*=G,G%=J;return G}function UM($,q){if($===o$)throw Error("invert: expected non-zero number");if(q<=o$)throw Error("invert: expected positive modulus, got "+q);let J=T$($,q),G=q,Q=o$,Y=C$,X=C$,U=o$;while(J!==o$){let V=G/J,M=G-J*V,z=Q-X*V,K=Y-U*V;G=J,J=M,Q=X,Y=U,X=z,U=K}if(G!==C$)throw Error("invert: does not exist");return T$(Q,q)}function RU($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function OM($,q){let J=$,G=(J.ORDER+C$)/zM,Q=J.pow(q,G);return RU(J,Q,q),Q}function pN($,q){let J=$,G=(J.ORDER-RM)/KM,Q=J.mul(q,dJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,dJ),Y),W=J.mul(X,J.sub(U,J.ONE));return RU(J,W,q),W}function lN($){let q=pY($),J=HM($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+hN)/DM;return(U,W)=>{let V=U,M=V.pow(W,X),z=V.mul(M,G),K=V.mul(M,Q),R=V.mul(M,Y),N=V.eql(V.sqr(z),W),w=V.eql(V.sqr(K),W);M=V.cmov(M,z,N),z=V.cmov(R,K,w);let j=V.eql(V.sqr(z),W),A=V.cmov(M,z,j);return RU(V,A,W),A}}function HM($){if($<MM)throw Error("sqrt is not defined for small field");let q=$-C$,J=0;while(q%dJ===o$)q/=dJ,J++;let G=dJ,Q=pY($);while(WM(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return OM;let Y=Q.pow(G,q),X=(q+C$)/dJ;return function(W,V){let M=W;if(M.is0(V))return V;if(WM(M,V)!==1)throw Error("Cannot find square root");let z=J,K=M.mul(M.ONE,Y),R=M.pow(V,q),N=M.pow(V,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let A=C$<<BigInt(z-w-1),T=M.pow(K,A);z=w,K=M.sqr(T),R=M.mul(R,K),N=M.mul(N,T)}return N}}function rN($){if($%zM===MM)return OM;if($%KM===RM)return pN;if($%DM===uN)return lN($);return HM($)}var fq=($,q)=>(T$($,q)&C$)===C$,dN=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function KU($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=dN.reduce((G,Q)=>{return G[Q]="function",G},q);if(k0($,J),Wq($.BYTES,"BYTES"),Wq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=C$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function iN($,q,J){let G=$;if(J<o$)throw Error("invalid exponent, negatives unsupported");if(J===o$)return G.ONE;if(J===C$)return q;let Q=G.ONE,Y=q;while(J>o$){if(J&C$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=C$}return Q}function MQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,W,V)=>{if(G.is0(W))return U;return Q[V]=U,G.mul(U,W)},G.ONE),X=G.inv(Y);return q.reduceRight((U,W,V)=>{if(G.is0(W))return U;return Q[V]=G.mul(U,Q[V]),G.mul(U,W)},X),Q}function WM($,q){let J=$,G=(J.ORDER-C$)/dJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function cN($,q){if(q!==void 0)MU(q);if($<=o$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=h8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var VM=new WeakMap;class DU{ORDER;BITS;BYTES;isLE;ZERO=o$;ONE=C$;_lengths;_mod;constructor($,q={}){if($<=C$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=cN($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return T$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return o$<=$&&$<this.ORDER}is0($){return $===o$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&C$)===C$}neg($){return T$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return T$($*$,this.ORDER)}add($,q){return T$($+q,this.ORDER)}sub($,q){return T$($-q,this.ORDER)}mul($,q){return T$($*q,this.ORDER)}pow($,q){return iN(this,$,q)}div($,q){return T$($*UM(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return UM($,this.ORDER)}sqrt($){let q=VM.get(this);if(!q)VM.set(this,q=rN(this.ORDER));return q(this,$)}toBytes($){return this.isLE?WQ($,this.BYTES):hY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let W=new Uint8Array(G);W.set($,Q?0:W.length-$.length),$=W}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?i0($):rJ($);if(X)U=T$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return MQ(this,$)}cmov($,q,J){return bq(J,"condition"),J?q:$}}Object.freeze(DU.prototype);function pY($,q={}){return new DU($,q)}function NM($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=C$)throw Error("field order must be greater than 1");let q=h8($-C$);return Math.ceil(q/8)}function OU($){let q=NM($);return q+Math.ceil(q/2)}function wM($,q,J=!1){Z$($);let G=$.length,Q=NM(q),Y=Math.max(OU(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?i0($):rJ($),U=T$(X,q-C$)+C$;return J?WQ(U,Q):hY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var u8=BigInt(0),iJ=BigInt(1);function zQ($,q){let J=q.negate();return $?J:q}function cJ($,q){let J=MQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function BM($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function HU($,q){BM($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=VQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function jM($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),W=$>>X;if(U>G)U-=Y,W+=iJ;let V=q*G,M=V+Math.abs(U)-1,z=U===0,K=U<0,R=q%2!==0;return{nextN:W,offset:M,isZero:z,isNeg:K,isNegF:R,offsetF:V}}var NU=new WeakMap,SM=new WeakMap;function wU($){return SM.get($)||1}function AM($){if($!==u8)throw Error("invalid wNAF")}class RQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>u8){if(q&iJ)J=J.add(G);G=G.double(),q>>=iJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=HU(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let W=1;W<G;W++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=HU($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:W,isZero:V,isNeg:M,isNegF:z,offsetF:K}=jM(J,X,Y);if(J=U,V)Q=Q.add(zQ(z,q[K]));else G=G.add(zQ(M,q[W]))}return AM(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=HU($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===u8)break;let{nextN:X,offset:U,isZero:W,isNeg:V}=jM(J,Y,Q);if(J=X,W)continue;else{let M=q[U];G=G.add(V?M.negate():M)}}return AM(J),G}getPrecomputes($,q,J){let G=NU.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);NU.set(q,G)}}return G}cached($,q,J){let G=wU($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=wU($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){BM(q,this.bits),SM.set($,q),NU.delete($)}hasCache($){return wU($)!==1}}function TM($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>u8||G>u8){if(J&iJ)Y=Y.add(Q);if(G&iJ)X=X.add(Q);Q=Q.double(),J>>=iJ,G>>=iJ}return{p1:Y,p2:X}}function ZM($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return KU(q),q}else return pY($,{isLE:J})}function lY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let W of["p","n","h"]){let V=q[W];if(!(typeof V==="bigint"&&V>u8))throw Error(`CURVE.${W} must be positive bigint`)}let Q=ZM(q.p,J.Fp,G),Y=ZM(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let W of U)if(!Q.isValid(q[W]))throw Error(`CURVE.${W} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function KQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function DQ($,q){if(Wq($),Wq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function nN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function oN($){if(!m8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?uY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function jU($,q,J,G){if(Z$($),Wq(J),q=oN(q),q.length>255)q=G(n$(uY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=n$(q,DQ(q.length,1)),W=new Uint8Array(Y),V=DQ(J,2),M=Array(X),z=G(n$(W,$,V,DQ(0,1),U));M[0]=G(n$(z,DQ(1,1),U));for(let R=1;R<X;R++){let N=[nN(z,M[R-1]),DQ(R+1,1),U];M[R]=G(n$(...N))}return n$(...M).slice(0,J)}var EM="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IM=($,q)=>($+($>=0?q:-q)/PM)/q;function aN($,q,J){yq("scalar",$,Vq,J);let[[G,Q],[Y,X]]=q,U=IM(X*$,J),W=IM(-Q*$,J),V=$-U*G-W*Y,M=-U*Q-W*X,z=V<Vq,K=M<Vq;if(z)V=-V;if(K)M=-M;let R=VQ(Math.ceil(h8(J)/2))+WJ;if(V<Vq||V>=R||M<Vq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:V,k2neg:K,k2:M}}function ZU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function AU($,q){k0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(bq(J.lowS,"lowS"),bq(J.prehash,"prehash"),J.format!==void 0)ZU(J.format);return J}class CM extends Error{constructor($=""){super($)}}var c0={Err:CM,_tlv:{encode:($,q)=>{let{Err:J}=c0;if(Wq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=UQ(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?UQ(Q.length/2|128):"";return UQ($)+Y+Q+q},decode($,q){let{Err:J}=c0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let W=Q&127;if(!W)throw new J("tlv.decode(long): indefinite length not supported");if(W>4)throw new J("tlv.decode(long): byte length is too big");let V=q.subarray(G,G+W);if(V.length!==W)throw new J("tlv.decode: length bytes not complete");if(V[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of V)X=X<<8|M;if(G+=W,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=c0;if(xY($),$<Vq)throw new q("integer: negative integers are not allowed");let J=UQ($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=c0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return rJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=c0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:W}=G.decode(2,Y),{v:V,l:M}=G.decode(2,W);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(V)}},hexFromSig($){let{_tlv:q,_int:J}=c0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(c0._tlv);Object.freeze(c0._int);Object.freeze(c0);var Vq=BigInt(0),WJ=BigInt(1),PM=BigInt(2),rY=BigInt(3),sN=BigInt(4);function LM($,q={}){let J=lY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;k0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:W,allowInfinityPoint:V}=q;if(W){if(!G.is0(Y.a)||typeof W.beta!=="bigint"||!Array.isArray(W.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=gM(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function K(v,I,E){if(V&&I.is0())return Uint8Array.of(0);let{x:Z,y:S}=I.toAffine(),P=G.toBytes(Z);if(bq(E,"isCompressed"),E){z();let g=!G.isOdd(S);return n$(FM(g),P)}else return n$(Uint8Array.of(4),P,G.toBytes(S))}function R(v){Z$(v,void 0,"Point");let{publicKey:I,publicKeyUncompressed:E}=M,Z=v.length,S=v[0],P=v.subarray(1);if(V&&Z===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(Z===I&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(d){let B=d instanceof Error?": "+d.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let H=G.isOdd(b);if((S&1)===1!==H)b=G.neg(b);return{x:g,y:b}}else if(Z===E&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!A(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${Z}, expected compressed=${I} or uncompressed=${E}`)}let N=q.toBytes===void 0?K:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(v){let I=G.sqr(v),E=G.mul(I,v);return G.add(G.add(E,G.mul(v,Y.a)),Y.b)}function A(v,I){let E=G.sqr(I),Z=j(v);return G.eql(E,Z)}if(!A(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,rY),sN),_=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,_)))throw Error("bad curve params: a or b");function k(v,I,E=!1){if(!G.isValid(I)||E&&G.is0(I))throw Error(`bad point coordinate ${v}`);return I}function u(v){if(!(v instanceof f))throw Error("Weierstrass Point expected")}function F(v){if(!W||!W.basises)throw Error("no endo");return aN(v,W.basises,Q.ORDER)}function x(v,I,E,Z,S){return E=new f(G.mul(E.X,v),E.Y,E.Z),I=zQ(Z,I),E=zQ(S,E),I.add(E)}class f{static BASE=new f(Y.Gx,Y.Gy,G.ONE);static ZERO=new f(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(v,I,E){this.X=k("x",v),this.Y=k("y",I,!0),this.Z=k("z",E),Object.freeze(this)}static CURVE(){return Y}static fromAffine(v){let{x:I,y:E}=v||{};if(!v||!G.isValid(I)||!G.isValid(E))throw Error("invalid affine point");if(v instanceof f)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(E))return f.ZERO;return new f(I,E,G.ONE)}static fromBytes(v){let I=f.fromAffine(w(Z$(v,void 0,"point")));return I.assertValidity(),I}static fromHex(v){return f.fromBytes(k8(v))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(v=8,I=!0){if(l.createCache(this,v),!I)this.multiply(rY);return this}assertValidity(){let v=this;if(v.is0()){if(q.allowInfinityPoint&&G.is0(v.X)&&G.eql(v.Y,G.ONE)&&G.is0(v.Z))return;throw Error("bad point: ZERO")}let{x:I,y:E}=v.toAffine();if(!G.isValid(I)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!A(I,E))throw Error("bad point: equation left != right");if(!v.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:v}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(v)}equals(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.eql(G.mul(I,g),G.mul(S,Z)),b=G.eql(G.mul(E,g),G.mul(P,Z));return L&&b}negate(){return new f(this.X,G.neg(this.Y),this.Z)}double(){let{a:v,b:I}=Y,E=G.mul(I,rY),{X:Z,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,H=G.mul(Z,Z),m=G.mul(S,S),d=G.mul(P,P),B=G.mul(Z,S);return B=G.add(B,B),b=G.mul(Z,P),b=G.add(b,b),g=G.mul(v,b),L=G.mul(E,d),L=G.add(g,L),g=G.sub(m,L),L=G.add(m,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(E,b),d=G.mul(v,d),B=G.sub(H,d),B=G.mul(v,B),B=G.add(B,b),b=G.add(H,H),H=G.add(b,H),H=G.add(H,d),H=G.mul(H,B),L=G.add(L,H),d=G.mul(S,P),d=G.add(d,d),H=G.mul(d,B),g=G.sub(g,H),b=G.mul(d,m),b=G.add(b,b),b=G.add(b,b),new f(g,L,b)}add(v){u(v);let{X:I,Y:E,Z}=this,{X:S,Y:P,Z:g}=v,L=G.ZERO,b=G.ZERO,H=G.ZERO,m=Y.a,d=G.mul(Y.b,rY),B=G.mul(I,S),a=G.mul(E,P),q$=G.mul(Z,g),Y$=G.add(I,E),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,a),Y$=G.sub(Y$,G$),G$=G.add(I,Z);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(E,Z),L=G.add(P,g),t=G.mul(t,L),L=G.add(a,q$),t=G.sub(t,L),H=G.mul(m,G$),L=G.mul(d,q$),H=G.add(L,H),L=G.sub(a,H),H=G.add(a,H),b=G.mul(L,H),a=G.add(B,B),a=G.add(a,B),q$=G.mul(m,q$),G$=G.mul(d,G$),a=G.add(a,q$),q$=G.sub(B,q$),q$=G.mul(m,q$),G$=G.add(G$,q$),B=G.mul(a,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,a),H=G.mul(t,H),H=G.add(H,B),new f(L,b,H)}subtract(v){return u(v),this.add(v.negate())}is0(){return this.equals(f.ZERO)}multiply(v){let{endo:I}=q;if(!Q.isValidNot0(v))throw RangeError("invalid scalar: out of range");let E,Z,S=(P)=>l.cached(this,P,(g)=>cJ(f,g));if(I){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(v),{p:H,f:m}=S(g),{p:d,f:B}=S(b);Z=m.add(B),E=x(I.beta,H,d,P,L)}else{let{p:P,f:g}=S(v);E=P,Z=g}return cJ(f,[E,Z])[0]}multiplyUnsafe(v){let{endo:I}=q,E=this,Z=v;if(!Q.isValid(Z))throw RangeError("invalid scalar: out of range");if(Z===Vq||E.is0())return f.ZERO;if(Z===WJ)return E;if(l.hasCache(this))return this.multiply(Z);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(Z),{p1:b,p2:H}=TM(f,E,P,L);return x(I.beta,b,H,S,g)}else return l.unsafe(E,Z)}toAffine(v){let I=this,E=v,{X:Z,Y:S,Z:P}=I;if(G.eql(P,G.ONE))return{x:Z,y:S};let g=I.is0();if(E==null)E=g?G.ONE:G.inv(P);let L=G.mul(Z,E),b=G.mul(S,E),H=G.mul(P,E);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(H,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:v}=q;if(X===WJ)return!0;if(v)return v(f,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:v}=q;if(X===WJ)return this;if(v)return v(f,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===WJ)return this.is0();return this.clearCofactor().is0()}toBytes(v=!0){return bq(v,"isCompressed"),this.assertValidity(),N(f,this,v)}toHex(v=!0){return f8(this.toBytes(v))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let y=Q.BITS,l=new RQ(f,q.endo?Math.ceil(y/2):y);if(y>=8)f.BASE.precompute(8);return Object.freeze(f.prototype),Object.freeze(f),f}function FM($){return Uint8Array.of($?2:3)}function gM($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function tN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?x8:q.randomBytes,Q=Object.assign(gM($.Fp,J),{seed:Math.max(OU(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let A=R.length;if(N===!0&&A!==w)return!1;if(N===!1&&A!==j)return!1;return!!$.fromBytes(R)}catch(A){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,wM(Z$(R,Q.seed,"seed"),J.ORDER)}function W(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function V(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,A=J._lengths;if(!m8(R))return;let T=Z$(R,void 0,"key").length,_=T===w||T===j,k=T===N||!!A?.includes(T);if(_&&k)return;return _}function M(R,N,w=!0){if(V(R)===!0)throw Error("first arg must be private key");if(V(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},K=KQ(U,W);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:W,getSharedSecret:M,keygen:K,Point:$,utils:z,lengths:Q})}function _M($,q,J={}){let G=q;Bq(G),k0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?x8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>Tq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:W,BITS:V}=U,{keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N}=tN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=W*PM+WJ<X.ORDER;function A(S){let P=W>>WJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function _(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function k(S,P){ZU(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(_(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){k(S,P);let g;if(P==="der"){let{r:m,s:d}=c0.toSig(Z$(S));return new u(m,d)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),H=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(H),g)}static fromHex(S,P){return this.fromBytes(k8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+W:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let H=X.toBytes(b),m=$.fromBytes(n$(FM((L&1)===0),H)),d=U.inv(b),B=x(Z$(S,void 0,"msgHash")),a=U.create(-B*d),q$=U.create(g*d),Y$=$.BASE.multiplyUnsafe(a).add(m.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return A(this.s)}toBytes(S=w.format){if(ZU(S),S==="der")return k8(c0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return _(),n$(Uint8Array.of(this.assertRecovery()),L,b);return n$(L,b)}toHex(S){return f8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=rJ(P),L=P.length*8-V;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,f=VQ(V);function y(S){return yq("num < 2^"+V,S,Vq,f),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function v(S,P,g){let{lowS:L,prehash:b,extraEntropy:H}=AU(g,w);S=l(S,b);let m=x(S),d=U.fromBytes(P);if(!U.isValidNot0(d))throw Error("invalid private key");let B=[y(d),y(m)];if(H!=null&&H!==!1){let G$=H===!0?Q(N.secretKey):H;B.push(Z$(G$,void 0,"extraEntropy"))}let a=n$(...B),q$=m;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let H$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),I$=U.create(A$.x);if(I$===Vq)return;let m$=U.create(H$*U.create(q$+I$*d));if(m$===Vq)return;let R0=(A$.x===I$?0:2)|Number(A$.y&WJ),Jq=m$;if(L&&A(m$))Jq=U.neg(m$),R0^=1;return new u(I$,Jq,j?void 0:R0)}return{seed:a,k2sig:Y$}}function I(S,P,g={}){let{seed:L,k2sig:b}=v(S,P,g);return XM(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function E(S,P,g,L={}){let{lowS:b,prehash:H,format:m}=AU(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,H),!m8(S)){let d=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+d)}k(S,m);try{let d=u.fromBytes(S,m),B=$.fromBytes(g);if(b&&d.hasHighS())return!1;let{r:a,s:q$}=d,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),H$=U.create(a*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(H$));if(A$.is0())return!1;return U.create(A$.x)===a}catch(d){return!1}}function Z(S,P,g={}){let{prehash:L}=AU(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:K,utils:R,lengths:N,Point:$,sign:I,verify:E,recoverPublicKey:Z,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var eN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var $4=LM(eN),p8=_M($4,r$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VJ=BigInt(0),B0=BigInt(1),BU=BigInt(2),q4=BigInt(8);function J4($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function vM($,q={}){let J=q,G=lY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;k0(J,{},{uvRatio:"function"});let W=BU<<BigInt(Y.BYTES*8)-B0,V=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(A){return{isValid:!1,value:VJ}}}:J.uvRatio;if(!J4(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,A=!1){let T=A?B0:VJ;return yq("coordinate "+w,j,T,W),j}function K(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,B0,V(X.Gx*X.Gy));static ZERO=new R(VJ,B0,B0,VJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,A,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",A,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:A}=w||{};return z("x",j),z("y",A),new R(j,A,B0,V(j*A))}static fromBytes(w,j=!1){let A=Q.BYTES,{a:T,d:_}=X;w=UJ(Z$(w,A,"point")),bq(j,"zip215");let k=UJ(w),u=w[A-1];k[A-1]=u&-129;let F=i0(k),x=j?W:Q.ORDER;yq("point.y",F,VJ,x);let f=V(F*F),y=V(f-B0),l=V(_*f-T),{isValid:v,value:I}=M(y,l);if(!v)throw Error("bad point: invalid y coordinate");let E=(I&B0)===B0,Z=(u&128)!==0;if(!j&&I===VJ&&Z)throw Error("bad point: x=0 and x_0=1");if(Z!==E)I=V(-I);return R.fromAffine({x:I,y:F})}static fromHex(w,j=!1){return R.fromBytes(k8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(BU);return this}assertValidity(){let w=this,{a:j,d:A}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:_,Z:k,T:u}=w,F=V(T*T),x=V(_*_),f=V(k*k),y=V(f*f),l=V(F*j),v=V(f*V(l+x)),I=V(y+V(A*V(F*x)));if(v!==I)throw Error("bad point: equation left != right (1)");let E=V(T*_),Z=V(k*u);if(E!==Z)throw Error("bad point: equation left != right (2)")}equals(w){K(w);let{X:j,Y:A,Z:T}=this,{X:_,Y:k,Z:u}=w,F=V(j*u),x=V(_*T),f=V(A*u),y=V(k*T);return F===x&&f===y}is0(){return this.equals(R.ZERO)}negate(){return new R(V(-this.X),this.Y,this.Z,V(-this.T))}double(){let{a:w}=X,{X:j,Y:A,Z:T}=this,_=V(j*j),k=V(A*A),u=V(BU*V(T*T)),F=V(w*_),x=j+A,f=V(V(x*x)-_-k),y=F+k,l=y-u,v=F-k,I=V(f*l),E=V(y*v),Z=V(f*v),S=V(l*y);return new R(I,E,S,Z)}add(w){K(w);let{a:j,d:A}=X,{X:T,Y:_,Z:k,T:u}=this,{X:F,Y:x,Z:f,T:y}=w,l=V(T*F),v=V(_*x),I=V(u*A*y),E=V(k*f),Z=V((T+_)*(F+x)-l-v),S=E-I,P=E+I,g=V(v-j*l),L=V(Z*S),b=V(P*g),H=V(Z*g),m=V(S*P);return new R(L,b,m,H)}subtract(w){return K(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:A}=N.cached(this,w,(T)=>cJ(R,T));return cJ(R,[j,A])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===VJ)return R.ZERO;if(this.is0()||w===B0)return this;return N.unsafe(this,w,(j)=>cJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,A=w,{X:T,Y:_,Z:k}=j,u=j.is0();if(A==null)A=u?q4:Q.inv(k);let F=V(T*A),x=V(_*A),f=Q.mul(k,A);if(u)return{x:VJ,y:B0};if(f!==B0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===B0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),A=Q.toBytes(j);return A[A.length-1]|=w&B0?128:0,A}toHex(){return f8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new RQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class SU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){zU()}static fromHex($){zU()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return f8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var OQ=BigInt(0),l8=BigInt(1),dY=BigInt(2);function G4($){return k0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function bM($){let q=G4($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let W=X===void 0?x8:X,V=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),K=U?BigInt(121665):BigInt(39081),R=U?dY**BigInt(254):dY**BigInt(447),N=U?BigInt(8)*dY**BigInt(251)-l8:BigInt(4)*dY**BigInt(445)-l8,w=R+N+l8,j=(Z)=>T$(Z,J),A=T(z);function T(Z){return WQ(j(Z),M)}function _(Z){let S=UJ(Z$(Z,M,"uCoordinate"));if(U)S[31]&=127;return j(i0(S))}function k(Z){return i0(Q(UJ(Z$(Z,M,"scalar"))))}function u(Z,S){let P=l(_(S),k(Z));if(P===OQ)throw Error("invalid private or public key received");return T(P)}function F(Z){return u(Z,A)}let x=F,f=u;function y(Z,S,P){let g=j(Z*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(Z,S){yq("u",Z,OQ,J),yq("scalar",S,R,w);let P=S,g=Z,L=l8,b=OQ,H=Z,m=l8,d=OQ;for(let a=BigInt(V-1);a>=OQ;a--){let q$=P>>a&l8;d^=q$,{x_2:L,x_3:H}=y(d,L,H),{x_2:b,x_3:m}=y(d,b,m),d=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,H$=j(t*t),A$=G$-H$,I$=H+m,m$=H-m,R0=j(m$*Y$),Jq=j(I$*t),dq=R0+Jq,iq=R0-Jq;H=j(dq*dq),m=j(g*j(iq*iq)),L=j(G$*H$),b=j(A$*(G$+j(K*A$)))}({x_2:L,x_3:H}=y(d,L,H)),{x_2:b,x_3:m}=y(d,b,m);let B=Y(b);return j(L*B)}let v={secretKey:M,publicKey:M,seed:M},I=(Z)=>{return Z=Z===void 0?W(M):Z,Z$(Z,v.seed,"seed"),Z},E={randomSecretKey:I};return Object.freeze(v),Object.freeze(E),Object.freeze({keygen:KQ(I,x),getSharedSecret:f,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:E,GuBytes:A.slice(),lengths:v})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Q4=BigInt(0),kq=BigInt(1),yM=BigInt(2),Y4=BigInt(3),X4=BigInt(5),U4=BigInt(8),oJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),CU=(()=>({p:oJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:U4,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function mM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=oJ,U=$*$%Y*$%Y,W=m0(U,yM,Y)*U%Y,V=m0(W,kq,Y)*$%Y,M=m0(V,X4,Y)*V%Y,z=m0(M,q,Y)*M%Y,K=m0(z,J,Y)*z%Y,R=m0(K,G,Y)*K%Y,N=m0(R,Q,Y)*R%Y,w=m0(N,Q,Y)*R%Y,j=m0(w,q,Y)*M%Y;return{pow_p_5_8:m0(j,yM,Y)*$%Y,b2:U}}function W4($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var TU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function PU($,q){let J=oJ,G=T$(q*q*q,J),Q=T$(G*G*q,J),Y=mM($*Q).pow_p_5_8,X=T$($*G*Y,J),U=T$(q*X*X,J),W=X,V=T$(X*TU,J),M=U===$,z=U===T$(-$,J),K=U===T$(-$*TU,J);if(M)X=W;if(z||K)X=V;if(fq(X,J))X=T$(-X,J);return{isValid:M||z,value:X}}var nJ=vM(CU,{uvRatio:PU}),MJ=(()=>nJ.Fp)(),xM=(()=>nJ.Fn)();var iY=(()=>{let $=oJ;return bM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=mM(q);return T$(m0(J,Y4,$)*G,$)},adjustScalarBytes:W4})})();var EU=TU,V4=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),M4=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),z4=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),R4=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),fM=($)=>PU(kq,$),K4=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),IU=($)=>MJ.create(i0($)&K4);function kM($){let{d:q}=CU,J=oJ,G=(A)=>MJ.create(A),Q=G(EU*$*$),Y=G((Q+kq)*z4),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:W,value:V}=PU(Y,U),M=G(V*$);if(!fq(M,J))M=G(-M);if(!W)V=M;if(!W)X=Q;let z=G(X*(Q-kq)*R4-U),K=V*V,R=G((V+V)*U),N=G(z*V4),w=G(kq-K),j=G(kq+K);return new nJ(G(R*j),G(w*N),G(N*j),G(R*w))}class H0 extends SU{static BASE=(()=>new H0(nJ.BASE))();static ZERO=(()=>new H0(nJ.ZERO))();static Fp=(()=>MJ)();static Fn=(()=>xM)();constructor($){super($)}static fromAffine($){return new H0(nJ.fromAffine($))}assertSame($){if(!($ instanceof H0))throw Error("RistrettoPoint expected")}init($){return new H0($)}static fromBytes($){u$($,32);let{a:q,d:J}=CU,G=oJ,Q=(_)=>MJ.create(_),Y=IU($);if(!YM(MJ.toBytes(Y),$)||fq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(kq+q*X),W=Q(kq-q*X),V=Q(U*U),M=Q(W*W),z=Q(q*J*V-M),{isValid:K,value:R}=fM(Q(z*M)),N=Q(R*W),w=Q(R*N*z),j=Q((Y+Y)*N);if(fq(j,G))j=Q(-j);let A=Q(U*w),T=Q(j*A);if(!K||fq(T,G)||A===Q4)throw Error("invalid ristretto255 encoding 2");return new H0(new nJ(j,A,kq,T))}static fromHex($){return H0.fromBytes(bG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=oJ,Y=(w)=>MJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),W=Y(U*U),{value:V}=fM(Y(X*W)),M=Y(V*X),z=Y(V*U),K=Y(M*z*G),R;if(fq(G*K,Q)){let w=Y(q*EU),j=Y($*EU);$=w,q=j,R=Y(M*M4)}else R=z;if(fq($*K,Q))q=Y(-q);let N=Y((J-q)*R);if(fq(N,Q))N=Y(-N);return MJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(W)=>MJ.create(W),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(H0.ZERO)}}Object.freeze(H0.BASE);Object.freeze(H0.ZERO);Object.freeze(H0.prototype);Object.freeze(H0);var D4=Object.freeze({Point:H0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=jU($,J,64,zY);return D4.deriveToCurve(G)},hashToScalar($,q={DST:EM}){let J=jU($,q.DST,64,zY);return xM.create(i0(J))},deriveToCurve($){u$($,64);let q=IU($.subarray(0,32)),J=kM(q),G=IU($.subarray(32,64)),Q=kM(G);return new H0(J.add(Q))}});var hM=!1,O4=!1;async function uM($,q){if(O4)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function FU($,q){return await uM(async()=>{let J=LU($)?$:await N4($),G=await crypto.subtle.importKey("raw",w4(q),{name:"X25519"},hM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMult($,q)})}async function gU($){return await uM(async()=>{return FU($,iY.GuBytes)},()=>{if(LU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return iY.scalarMultBase($)})}var H4=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function N4($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...H4,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},hM,["deriveBits"])}function LU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function w4($){return $}class pM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),A4(HQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=HQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:HQ(this.transcript)}}}function A4($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function HQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function cY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function lM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function rM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class mq{args;body;constructor($,q){this.args=$,this.body=q}}function _U($){let q=[];q.push(`age-encryption.org/v1
|
|
58
58
|
`);for(let J of $){q.push("-> "+J.args.join(" ")+`
|
|
59
59
|
`);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(p0.encode(J.body.subarray(G,Q))+`
|
|
60
60
|
`)}if(J.body.length%48===0)q.push(`
|