npm - @rizom/ops - Versions diffs - 0.2.0-alpha.634 → 0.2.0-alpha.635 - Mend

@rizom/ops 0.2.0-alpha.634 → 0.2.0-alpha.635

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -733,7 +733,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var I9,Eve;var NO=x(async()=>{Re();v9();Un();Op();await w9();I9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),Eve=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{parseArgs as p7}from"util";function St(e){return e}class Dp extends Error{constructor(e){super(e);this.name="CliUsageError"}}function m7(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function h7(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function g7(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function BO(e,t){let r=m7(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=p7({args:e,options:h7(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(g7(s))throw new Dp(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function jO(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>`  ${r.label.padEnd(t)}  ${r.description}`)}function y7(e){return jO(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function b7(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function UO(e){return jO(Object.entries(e).map(([t,r])=>({label:b7(t,r),description:r.description})))}function qO(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function S7(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function x7(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=S7(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(...UO(n.flags));return i}function ZO(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...y7(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...UO(e.globalFlags));return t.push(...x7(e.commands)),t.join(`
-`)}function MO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function bt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Ns(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Lp={name:"@rizom/ops",version:"0.2.0-alpha.634",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as WG,mkdirSync as GG,readFileSync as fw,writeFileSync as pw}from"fs";import{dirname as QG,join as Yz}from"path";function IS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Pt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function nr(e,t,r=""){let i=IS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function $i(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Pt(e.outputLen),Pt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Xa(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bp(e,t){nr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function jp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Tr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ec(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function On(e,t){return e<<32-t|e>>>t}function rt(e,t){return e<<t|e>>>32-t>>>0}var v7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function _7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function k7(e){for(let t=0;t<e.length;t++)e[t]=_7(e[t]);return e}var AS=v7?(e)=>e:k7,HO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),E7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Up(e){if(nr(e),HO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=E7[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function FO(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function wu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(HO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=FO(e.charCodeAt(o)),a=FO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function I7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function TS(e,t=""){if(typeof e==="string")return I7(e);return nr(e,void 0,t)}function RS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];nr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function qp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function CS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Pi(e=32){Pt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var OS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class $S{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if($i(e),nr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Tr(i)}update(e){return Xa(this),this.iHash.update(e),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ri=(()=>{let e=(t,r,i)=>new $S(t,r).update(i).digest();return e.create=(t,r)=>new $S(t,r),e})();function vu(e,t,r){if($i(e),r===void 0)r=new Uint8Array(e.outputLen);return ri(e,r,t)}var PS=Uint8Array.of(0),JO=Uint8Array.of();function zS(e,t,r,i=32){$i(e),Pt(i,"length"),nr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=JO;else nr(r,void 0,"info");let s=new Uint8Array(o*n),a=ri.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)PS[0]=u+1,c.update(u===0?JO:l).update(r).update(PS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Tr(l,PS),s.slice(0,i)}var bo=(e,t,r,i,n)=>zS(e,vu(e,t,r),i,n);function KO(e,t,r){return e&t^~e&r}function VO(e,t,r){return e&t^e&r^t&r}class Zp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ec(this.buffer)}update(e){Xa(this),nr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ec(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Tr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ec(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Mp=BigInt(4294967295),WO=BigInt(32);function A7(e,t=!1){if(t)return{h:Number(e&Mp),l:Number(e>>WO&Mp)};return{h:Number(e>>WO&Mp)|0,l:Number(e&Mp)|0}}function GO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=A7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var NS=(e,t,r)=>e>>>r,DS=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,_u=(e,t,r)=>e<<64-r|t>>>r-32,ku=(e,t,r)=>e>>>r-32|t<<64-r;function ni(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var QO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),YO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,XO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),e$=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,t$=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),r$=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var R7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),So=new Uint32Array(64);class n$ extends Zp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)So[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=So[u-15],p=So[u-2],m=On(f,7)^On(f,18)^f>>>3,b=On(p,17)^On(p,19)^p>>>10;So[u]=b+So[u-7]+m+So[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=On(s,6)^On(s,11)^On(s,25),p=l+f+KO(s,a,c)+R7[u]+So[u]|0,b=(On(r,2)^On(r,13)^On(r,22))+VO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Tr(So)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Tr(this.buffer)}}class i$ extends n${A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var o$=(()=>GO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),C7=(()=>o$[0])(),O7=(()=>o$[1])(),xo=new Uint32Array(80),wo=new Uint32Array(80);class s$ extends Zp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)xo[A]=e.getUint32(t),wo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=xo[A-15]|0,D=wo[A-15]|0,U=Ds(R,D,1)^Ds(R,D,8)^NS(R,D,7),T=Ls(R,D,1)^Ls(R,D,8)^DS(R,D,7),H=xo[A-2]|0,B=wo[A-2]|0,V=Ds(H,B,19)^_u(H,B,61)^NS(H,B,6),te=Ls(H,B,19)^ku(H,B,61)^DS(H,B,6),J=XO(T,te,wo[A-7],wo[A-16]),N=e$(J,U,V,xo[A-7],xo[A-16]);xo[A]=N|0,wo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Ds(u,f,14)^Ds(u,f,18)^_u(u,f,41),D=Ls(u,f,14)^Ls(u,f,18)^ku(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=t$(k,D,T,O7[A],wo[A]),B=r$(H,S,R,U,C7[A],xo[A]),V=H|0,te=Ds(r,i,28)^_u(r,i,34)^_u(r,i,39),J=Ls(r,i,28)^ku(r,i,34)^ku(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=ni(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=QO(V,J,L);r=YO(I,B,te,N),i=I|0}({h:r,l:i}=ni(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ni(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ni(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ni(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=ni(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=ni(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=ni(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=ni(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Tr(xo,wo)}destroy(){this.destroyed=!0,Tr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class a$ extends s${Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(64)}}var zt=CS(()=>new i$,OS(1));var Fp=CS(()=>new a$,OS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Wp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function jS(e){if(!Wp(e))throw TypeError("Uint8Array expected")}function f$(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function p$(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function vo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Iu(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Jp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Kp(e,t){if(!f$(!0,t))throw TypeError(`${e}: array of strings expected`)}function US(e,t){if(!f$(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Kp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Jp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Jp(n),n.map((o)=>{vo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return vo("join",e),{encode:(t)=>(Kp("join.decode",t),t.join(e)),decode:(t)=>(vo("join.decode",t),t.split(e))}}function Gp(e,t="="){return Iu(e),vo("padding",t),{encode(r){Kp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Kp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function m$(e){return p$(e),{encode:(t)=>t,decode:(t)=>e(t)}}function c$(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Jp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Iu(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var h$=(e,t)=>t===0?e:h$(t,e%t),Vp=(e,t)=>e+(t-h$(e,t)),Hp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function LS(e,t,r,i){if(Jp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Vp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Vp(t,r)}`);let n=0,o=0,s=Hp[t],a=Hp[r]-1,c=[];for(let l of e){if(Iu(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Hp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function $7(e){Iu(e);let t=256;return{encode:(r)=>{if(!Wp(r))throw TypeError("radix.encode input should be Uint8Array");return c$(Array.from(r),t,e)},decode:(r)=>(US("radix.decode",r),Uint8Array.from(c$(r,e,t)))}}function hn(e,t=!1){if(Iu(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Vp(8,e)>32||Vp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Wp(r))throw TypeError("radix2.encode input should be Uint8Array");return LS(Array.from(r),8,e,!t)},decode:(r)=>(US("radix2.decode",r),Uint8Array.from(LS(r,e,8,t)))}}function l$(e){return p$(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var Yve=Object.freeze(Xr(hn(4),en("0123456789ABCDEF"),tn(""))),Xve=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Gp(5),tn(""))),e0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),t0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Gp(5),tn(""))),r0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),n0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),m$((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),g$=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),P7=/[\t\n\f\r ]/,y$=(e,t)=>{vo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&P7.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},qS=Object.freeze(g$?{encode(e){return jS(e),e.toBase64()},decode(e){return y$(e,!1)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Gp(6),tn(""))),yr=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),i0e=Object.freeze(g$?{encode(e){return jS(e),e.toBase64({alphabet:"base64url"})},decode(e){return y$(e,!0)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Gp(6),tn(""))),o0e=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),ZS=(e)=>Xr($7(58),en(e),tn("")),s0e=Object.freeze(ZS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),a0e=Object.freeze(ZS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),c0e=Object.freeze(ZS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var BS=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),u$=[996825010,642813549,513874426,1027748829,705979059];function Eu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<u$.length;i++)if((t>>i&1)===1)r^=u$[i];return r}function d$(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Eu(n)^s>>5}n=Eu(n);for(let o=0;o<i;o++)n=Eu(n)^e.charCodeAt(o)&31;for(let o of t)n=Eu(n)^o;for(let o=0;o<6;o++)n=Eu(n);return n^=r,BS.encode(LS([n%Hp[30]],30,5,!1))}function b$(e){let t=e==="bech32"?1:734539939,r=hn(5),i=r.decode,n=r.encode,o=l$(i);function s(f,p,m=90){if(vo("bech32.encode prefix",f),Wp(p))p=Array.from(p);US("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let g=b+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let S=f.toLowerCase(),k=d$(S,p,t);return`${S}1${BS.encode(p)}${k}`}function a(f,p=90){vo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=b.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,g),k=b.slice(g+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=BS.decode(k).slice(0,-6),R=d$(S,A,t);if(!k.endsWith(R))throw Error(`Invalid checksum in ${f}: expected "${R}"`);return{prefix:S,words:A}}let c=l$(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(b$("bech32")),l0e=Object.freeze(b$("bech32m"));var z7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),N7={encode(e){return jS(e),e.toHex()},decode(e){return vo("hex",e),Uint8Array.fromHex(e)}},u0e=Object.freeze(z7?N7:Xr(hn(4),en("0123456789abcdef"),tn(""),m$((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function L7(e,t,r,i){$i(e);let n=qp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Pt(o,"c"),Pt(s,"dkLen"),Pt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=TS(t,"password"),l=TS(r,"salt"),u=new Uint8Array(s),f=ri.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function B7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Tr(n),r}function MS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=L7(e,t,r,i),l,u=new Uint8Array(4),f=ec(u),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let g=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<g.length;k++)g[k]^=p[k]}}return B7(a,c,s,l,p)}function S$(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],g=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],R=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=u,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let fe=0;fe<8;fe+=2)te^=rt(T+j|0,7),I^=rt(te+T|0,9),j^=rt(I+te|0,13),T^=rt(j+I|0,18),z^=rt(J+H|0,7),Q^=rt(z+J|0,9),H^=rt(Q+z|0,13),J^=rt(H+Q|0,18),E^=rt(P+N|0,7),B^=rt(E+P|0,9),N^=rt(B+E|0,13),P^=rt(N+B|0,18),V^=rt(ae+K|0,7),L^=rt(V+ae|0,9),K^=rt(L+V|0,13),ae^=rt(K+L|0,18),H^=rt(T+V|0,7),B^=rt(H+T|0,9),V^=rt(B+H|0,13),T^=rt(V+B|0,18),N^=rt(J+te|0,7),L^=rt(N+J|0,9),te^=rt(L+N|0,13),J^=rt(te+L|0,18),K^=rt(P+z|0,7),I^=rt(K+P|0,9),z^=rt(I+K|0,13),P^=rt(z+I|0,18),j^=rt(ae+E|0,7),Q^=rt(j+ae|0,9),E^=rt(Q+j|0,13),ae^=rt(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=u+te|0,n[o++]=f+J|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=g+z|0,n[o++]=S+P|0,n[o++]=k+K|0,n[o++]=A+j|0,n[o++]=R+Q|0,n[o++]=D+E|0,n[o++]=U+ae|0}function FS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(S$(r,s,e,t,r,o),a>0)s+=16;S$(r,o,e,t+=16,r,s)}}function j7(e,t,r){let i=qp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Pt(n,"N"),Pt(o,"r"),Pt(s,"p"),Pt(a,"dkLen"),Pt(c,"asyncTick"),Pt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let g=MS(zt,e,t,{c:1,dkLen:f*s}),S=jp(g),k=jp(new Uint8Array(f*n)),A=jp(new Uint8Array(f)),R=()=>{};if(u){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;R=()=>{if(T++,u&&(!(T%U)||T===D))u(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:g,tmp:A,blockMixCb:R,asyncTick:c}}function U7(e,t,r,i,n){let o=MS(zt,e,r,{c:1,dkLen:t});return Tr(r,i,n),o}function HS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=j7(e,t,r);AS(l);for(let m=0;m<o;m++){let b=a*m;for(let g=0;g<a;g++)c[g]=l[b+g];for(let g=0,S=0;g<i-1;g++)FS(c,S,c,S+=a,n),p();FS(c,(i-1)*a,l,b,n),p();for(let g=0;g<i;g++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];FS(f,0,l,b,n),p()}}return AS(l),U7(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function q7(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Qp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function tc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=q7(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function JS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function x$(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!rc(e))throw Error("invalid output, must be aligned")}function ii(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Z7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Bs=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),M7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var F7=(e)=>{for(let t=0;t<e.length;t++)e[t]=M7(e[t]);return e},Ni=Bs?(e)=>e:F7;function w$(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function v$(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function _$(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var k$=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Ft(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");Ft(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(Ft(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function Au(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!rc(t))throw Error("invalid output, must be aligned");return t}function E$(e,t,r){tc(e),tc(t),Qp(r);let i=new Uint8Array(16),n=Z7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function rc(e){return e.byteOffset%4===0}function nc(e){return Uint8Array.from(Ft(e))}var A$=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),H7=(()=>Ni(ii(A$("expand 16-byte k"))))(),J7=(()=>Ni(ii(A$("expand 32-byte k"))))();function nt(e,t){return e<<t|e>>>32-t}var Tu=64,K7=16,KS=(()=>4294967295)(),I$=Uint32Array.of();function V7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Tu),u=ii(l),f=Bs&&rc(n)&&rc(o),p=f?ii(n):I$,m=f?ii(o):I$;if(!Bs){for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),Ni(u),s>=KS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}return}for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),s>=KS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);if(f&&g===Tu){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<K7;k++)A=S+k,m[A]=p[A]^u[k];b+=Tu;continue}for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}}function T$(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=w$({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return tc(n),tc(s),Qp(o),Qp(r),(a,c,l,u,f=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(u=Au(p,u,!1),tc(f),f<0||f>=KS)throw Error("arx: counter overflow");let m=[],b=a.length,g,S;if(b===32)m.push(g=nc(a)),S=J7;else if(b===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),S=H7,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Bs||!rc(c))m.push(c=nc(c));let k=ii(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Bs)i(S,k,ii(D),k);else{let U=Ni(Uint32Array.from(S));i(U,k,ii(D),k),$n(U),Ni(k)}c=c.subarray(16)}else if(!Bs)Ni(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let R=Ni(ii(c));try{return V7(e,S,k,R,l,u,f,s),u}finally{$n(...m)}}}function or(e,t){return e[t++]&255|(e[t++]&255)<<8}class R${blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=nc(Ft(e,32,"key"));let t=or(e,0),r=or(e,2),i=or(e,4),n=or(e,6),o=or(e,8),s=or(e,10),a=or(e,12),c=or(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=or(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],b=o[8],g=o[9],S=or(e,t+0),k=or(e,t+2),A=or(e,t+4),R=or(e,t+6),D=or(e,t+8),U=or(e,t+10),T=or(e,t+12),H=or(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),J=n[3]+((A>>>7|R<<9)&8191),N=n[4]+((R>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),K=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*g)+te*(5*b)+J*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*u)+z*(5*l)+P*(5*c)+K*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*g)+J*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*u)+P*(5*l)+K*(5*c),j+=E>>>13,E&=8191;let ae=j+B*c+V*a+te*s+J*(5*g)+N*(5*b);j=ae>>>13,ae&=8191,ae+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*u)+K*(5*l),j+=ae>>>13,ae&=8191;let fe=j+B*l+V*c+te*a+J*s+N*(5*g);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+K*(5*u),j+=fe>>>13,fe&=8191;let C=j+B*u+V*l+te*c+J*a+N*s;j=C>>>13,C&=8191,C+=L*(5*g)+I*(5*b)+z*(5*m)+P*(5*p)+K*(5*f),j+=C>>>13,C&=8191;let xe=j+B*f+V*u+te*l+J*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*g)+z*(5*b)+P*(5*m)+K*(5*p),j+=xe>>>13,xe&=8191;let Ae=j+B*p+V*f+te*u+J*l+N*c;j=Ae>>>13,Ae&=8191,Ae+=L*a+I*s+z*(5*g)+P*(5*b)+K*(5*m),j+=Ae>>>13,Ae&=8191;let Pe=j+B*m+V*p+te*f+J*u+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*g)+K*(5*b),j+=Pe>>>13,Pe&=8191;let $e=j+B*b+V*m+te*p+J*f+N*u;j=$e>>>13,$e&=8191,$e+=L*l+I*c+z*a+P*s+K*(5*g),j+=$e>>>13,$e&=8191;let _e=j+B*g+V*b+te*m+J*p+N*f;j=_e>>>13,_e&=8191,_e+=L*u+I*l+z*c+P*a+K*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=ae,n[3]=fe,n[4]=C,n[5]=xe,n[6]=Ae,n[7]=Pe,n[8]=$e,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){JS(this),Ft(e),e=nc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){JS(this),x$(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var C$=_$(32,(e)=>new R$(e));function W7(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],b=t[4],g=t[5],S=t[6],k=t[7],A=n,R=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=u,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let C=0;C<o;C+=2)T=T+te|0,j=nt(j^T,16),I=I+j|0,te=nt(te^I,12),T=T+te|0,j=nt(j^T,8),I=I+j|0,te=nt(te^I,7),H=H+J|0,Q=nt(Q^H,16),z=z+Q|0,J=nt(J^z,12),H=H+J|0,Q=nt(Q^H,8),z=z+Q|0,J=nt(J^z,7),B=B+N|0,E=nt(E^B,16),P=P+E|0,N=nt(N^P,12),B=B+N|0,E=nt(E^B,8),P=P+E|0,N=nt(N^P,7),V=V+L|0,ae=nt(ae^V,16),K=K+ae|0,L=nt(L^K,12),V=V+L|0,ae=nt(ae^V,8),K=K+ae|0,L=nt(L^K,7),T=T+J|0,ae=nt(ae^T,16),P=P+ae|0,J=nt(J^P,12),T=T+J|0,ae=nt(ae^T,8),P=P+ae|0,J=nt(J^P,7),H=H+N|0,j=nt(j^H,16),K=K+j|0,N=nt(N^K,12),H=H+N|0,j=nt(j^H,8),K=K+j|0,N=nt(N^K,7),B=B+L|0,Q=nt(Q^B,16),I=I+Q|0,L=nt(L^I,12),B=B+L|0,Q=nt(Q^B,8),I=I+Q|0,L=nt(L^I,7),V=V+te|0,E=nt(E^V,16),z=z+E|0,te=nt(te^z,12),V=V+te|0,E=nt(E^V,8),z=z+E|0,te=nt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=u+te|0,i[fe++]=f+J|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=g+z|0,i[fe++]=S+P|0,i[fe++]=k+K|0,i[fe++]=A+j|0,i[fe++]=R+Q|0,i[fe++]=D+E|0,i[fe++]=U+ae|0}var G7=T$(W7,{counterRight:!1,counterLength:4,allowShortKeys:!1});var Q7=new Uint8Array(16),O$=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(Q7.subarray(r))},Y7=new Uint8Array(32);function $$(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,Y7),s=E$(i.length,n?n.length:0,!0),a=C$.create(o);if(n)O$(a,n);O$(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var X7=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Au(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=$$(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=Au(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=$$(e,t,r,a,i);if(!v$(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),gn=k$({blockSize:64,nonceLength:12,tagLength:16},X7(G7));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Qt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function De(e,t,r=""){let i=ic(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function yn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Qt(e.outputLen),Qt(e.blockLen)}function Li(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Yp(e,t){De(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Xp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Zr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function em(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}var eW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function tW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function rW(e){for(let t=0;t<e.length;t++)e[t]=tW(e[t]);return e}var VS=eW?(e)=>e:rW,z$=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),nW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function js(e){if(De(e),z$)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=nW[e[r]];return t}var Di={_0:48,_9:57,A:65,F:70,a:97,f:102};function P$(e){if(e>=Di._0&&e<=Di._9)return e-Di._0;if(e>=Di.A&&e<=Di.F)return e-(Di.A-10);if(e>=Di.a&&e<=Di.f)return e-(Di.a-10);return}function Us(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(z$)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=P$(e.charCodeAt(o)),a=P$(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Ut(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];De(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function oc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function _o(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ko=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GS=BigInt(0),WS=BigInt(1);function Ru(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function N$(e){if(typeof e==="bigint"){if(!tm(e))throw Error("positive bigint expected, got "+e)}else Qt(e);return e}function Cu(e){let t=N$(e).toString(16);return t.length&1?"0"+t:t}function D$(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?GS:BigInt("0x"+e)}function Eo(e){return D$(js(e))}function Io(e){return D$(js(rm(De(e)).reverse()))}function sc(e,t){Qt(t),e=N$(e);let r=Us(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Ou(e,t){return sc(e,t).reverse()}function rm(e){return Uint8Array.from(e)}function Ao(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var tm=(e)=>typeof e==="bigint"&&GS<=e;function iW(e,t,r){return tm(e)&&tm(t)&&tm(r)&&t<=e&&e<r}function $u(e,t,r,i){if(!iW(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function QS(e){let t;for(t=0;e>GS;e>>=WS,t+=1);return t}var Pu=(e)=>(WS<<BigInt(e))-WS;function L$(e,t,r){if(Qt(e,"hashLen"),Qt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,Ut(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Ut(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function qs(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function YS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),br=BigInt(1),Zs=BigInt(2),U$=BigInt(3),q$=BigInt(4),Z$=BigInt(5),oW=BigInt(7),M$=BigInt(8),sW=BigInt(9),F$=BigInt(16);function Rr(e,t){let r=e%t;return r>=Cr?r:t+r}function bn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function B$(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=Rr(e,t),i=t,n=Cr,o=br,s=br,a=Cr;while(r!==Cr){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==br)throw Error("invert: does not exist");return Rr(n,t)}function XS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function H$(e,t){let r=(e.ORDER+br)/q$,i=e.pow(t,r);return XS(e,i,t),i}function aW(e,t){let r=(e.ORDER-Z$)/M$,i=e.mul(t,Zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Zs),n),a=e.mul(o,e.sub(s,e.ONE));return XS(e,a,t),a}function cW(e){let t=nm(e),r=J$(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+oW)/F$;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,b);let g=a.eql(a.sqr(u),c),S=a.cmov(l,u,g);return XS(a,S,c),S}}function J$(e){if(e<U$)throw Error("sqrt is not defined for small field");let t=e-br,r=0;while(t%Zs===Cr)t/=Zs,r++;let i=Zs,n=nm(e);while(j$(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return H$;let o=n.pow(i,t),s=(t+br)/Zs;return function(c,l){if(c.is0(l))return l;if(j$(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(b++,g=c.sqr(g),b===u)throw Error("Cannot find square root");let S=br<<BigInt(u-b-1),k=c.pow(f,S);u=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function lW(e){if(e%q$===U$)return H$;if(e%M$===Z$)return aW;if(e%F$===sW)return cW(e);return J$(e)}var uW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function ex(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=uW.reduce((i,n)=>(i[n]="function",i),t);return qs(e,r),e}function dW(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===br)return t;let i=e.ONE,n=t;while(r>Cr){if(r&br)i=e.mul(i,n);n=e.sqr(n),r>>=br}return i}function zu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function j$(e,t){let r=(e.ORDER-br)/Zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function fW(e,t){if(t!==void 0)Qt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class K${ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=br;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=fW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Rr(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&br)===br}neg(e){return Rr(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Rr(e*e,this.ORDER)}add(e,t){return Rr(e+t,this.ORDER)}sub(e,t){return Rr(e-t,this.ORDER)}mul(e,t){return Rr(e*t,this.ORDER)}pow(e,t){return dW(this,e,t)}div(e,t){return Rr(e*B$(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return B$(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=lW(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Ou(e,this.BYTES):sc(e,this.BYTES)}fromBytes(e,t=!1){De(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Io(e):Eo(e);if(s)a=Rr(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return zu(this,e)}cmov(e,t,r){return r?t:e}}function nm(e,t={}){return new K$(e,t)}function V$(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function tx(e){let t=V$(e);return t+Math.ceil(t/2)}function W$(e,t,r=!1){De(e);let i=e.length,n=V$(t),o=tx(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Io(e):Eo(e),a=Rr(s,t-br)+br;return r?Ou(a,n):sc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ac=BigInt(0),Ms=BigInt(1);function Nu(e,t){let r=t.negate();return e?r:t}function ox(e,t){let r=zu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function X$(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function rx(e,t){X$(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Pu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function G$(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ms;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var nx=new WeakMap,eP=new WeakMap;function ix(e){return eP.get(e)||1}function Q$(e){if(e!==ac)throw Error("invalid wNAF")}class sx{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>ac){if(t&Ms)r=r.add(i);i=i.double(),t>>=Ms}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=rx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=rx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=G$(r,s,o);if(r=a,l)n=n.add(Nu(f,t[p]));else i=i.add(Nu(u,t[c]))}return Q$(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=rx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===ac)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=G$(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return Q$(r),i}getPrecomputes(e,t,r){let i=nx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);nx.set(t,i)}}return i}cached(e,t,r){let i=ix(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=ix(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){X$(t,this.bits),eP.set(e,t),nx.delete(e)}hasCache(e){return ix(e)!==1}}function tP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>ac||i>ac){if(r&Ms)o=o.add(n);if(i&Ms)s=s.add(n);n=n.double(),r>>=Ms,i>>=Ms}return{p1:o,p2:s}}function Y$(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return ex(t),t}else return nm(e,{isLE:r})}function rP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>ac))throw Error(`CURVE.${c} must be positive bigint`)}let n=Y$(t.p,r.Fp,i),o=Y$(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function im(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Du=BigInt(0),cc=BigInt(1),om=BigInt(2);function pW(e){return qs(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function nP(e){let t=pW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||_o,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?om**BigInt(254):om**BigInt(447),b=a?BigInt(8)*om**BigInt(251)-cc:BigInt(4)*om**BigInt(445)-cc,g=m+b+cc,S=(I)=>Rr(I,r),k=A(f);function A(I){return Ou(S(I),u)}function R(I){let z=rm(De(I,u,"uCoordinate"));if(a)z[31]&=127;return S(Io(z))}function D(I){return Io(n(rm(De(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Du)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){$u("u",I,Du,r),$u("scalar",z,m,g);let P=z,K=I,j=cc,Q=Du,E=I,ae=cc,fe=Du;for(let xe=BigInt(l-1);xe>=Du;xe--){let Ae=P>>xe&cc;fe^=Ae,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Ae;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:u,publicKey:u,seed:u},N=(I=c(u))=>(De(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:im(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}class ax{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(yn(e),De(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Zr(i)}update(e){return Li(this),this.iHash.update(e),this}digestInto(e){Li(this),De(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var lc=(e,t,r)=>new ax(e,t).update(r).digest();lc.create=(e,t)=>new ax(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var iP=(e,t)=>(e+(e>=0?t:-t)/sP)/t;function mW(e,t,r){let[[i,n],[o,s]]=t,a=iP(s*e,r),c=iP(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Bi,p=u<Bi;if(f)l=-l;if(p)u=-u;let m=Pu(Math.ceil(QS(r)/2))+uc;if(l<Bi||l>=m||u<Bi||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function lx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function cx(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Ru(r.lowS,"lowS"),Ru(r.prehash,"prehash"),r.format!==void 0)lx(r.format);return r}class oP extends Error{constructor(e=""){super(e)}}var To={Err:oP,_tlv:{encode:(e,t)=>{let{Err:r}=To;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Cu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Cu(n.length/2|128):"";return Cu(e)+o+n+t},decode(e,t){let{Err:r}=To,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=To;if(e<Bi)throw new t("integer: negative integers are not allowed");let r=Cu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=To;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Eo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=To,n=De(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=To,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Bi=BigInt(0),uc=BigInt(1),sP=BigInt(2),sm=BigInt(3),hW=BigInt(4);function ux(e,t={}){let r=rP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;qs(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=cP(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),K=i.toBytes(z);if(Ru(I,"isCompressed"),I){u();let j=!i.isOdd(P);return Ut(aP(j),K)}else return Ut(Uint8Array.of(4),K,i.toBytes(P))}function p(N){De(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],K=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(K);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=g(j),E;try{E=i.sqrt(Q)}catch(C){let xe=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}u();let ae=i.isOdd(E);if((P&1)===1!==ae)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(K.subarray(0,j)),E=i.fromBytes(K.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function g(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=g(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,sm),hW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function R(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return mW(N,c.basises,n.ORDER)}let T=YS((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=YS((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Nu(z,L),I=Nu(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=R("x",N),this.Y=R("y",L,!0),this.Z=R("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(De(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Us(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(J.createCache(this,N),!L)this.multiply(sm);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(K,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,sm),{X:z,Y:P,Z:K}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(K,K),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,K),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,C),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),C=i.mul(N,C),xe=i.sub(ae,C),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(ae,ae),ae=i.add(E,ae),ae=i.add(ae,C),ae=i.mul(ae,xe),Q=i.add(Q,ae),C=i.mul(P,K),C=i.add(C,C),ae=i.mul(C,xe),j=i.sub(j,ae),E=i.mul(C,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.ZERO,E=i.ZERO,ae=i.ZERO,fe=o.a,C=i.mul(o.b,sm),xe=i.mul(L,P),Ae=i.mul(I,K),Pe=i.mul(z,j),$e=i.add(L,I),_e=i.add(P,K);$e=i.mul($e,_e),_e=i.add(xe,Ae),$e=i.sub($e,_e),_e=i.add(L,z);let We=i.add(P,j);return _e=i.mul(_e,We),We=i.add(xe,Pe),_e=i.sub(_e,We),We=i.add(I,z),Q=i.add(K,j),We=i.mul(We,Q),Q=i.add(Ae,Pe),We=i.sub(We,Q),ae=i.mul(fe,_e),Q=i.mul(C,Pe),ae=i.add(Q,ae),Q=i.sub(Ae,ae),ae=i.add(Ae,ae),E=i.mul(Q,ae),Ae=i.add(xe,xe),Ae=i.add(Ae,xe),Pe=i.mul(fe,Pe),_e=i.mul(C,_e),Ae=i.add(Ae,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Ae,_e),E=i.add(E,xe),xe=i.mul(We,_e),Q=i.mul($e,Q),Q=i.sub(Q,xe),xe=i.mul($e,Ae),ae=i.mul(We,ae),ae=i.add(ae,xe),new V(Q,E,ae)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(K)=>J.cached(this,K,(j)=>ox(V,j));if(L){let{k1neg:K,k1:j,k2neg:Q,k2:E}=U(N),{p:ae,f:fe}=P(j),{p:C,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,ae,C,K,Q)}else{let{p:K,f:j}=P(N);I=K,z=j}return ox(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Bi||I.is0())return V.ZERO;if(N===uc)return I;if(J.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:K,k2:j}=U(N),{p1:Q,p2:E}=tP(V,I,P,j);return B(L.beta,Q,E,z,K)}else return J.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===uc)return!0;if(N)return N(V,this);return J.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===uc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return Ru(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return js(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,J=new sx(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function aP(e){return Uint8Array.of(e?2:3)}function cP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function gW(e,t={}){let{Fn:r}=e,i=t.randomBytes||_o,n=Object.assign(cP(e.Fp,r),{seed:tx(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return W$(De(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n;if(!ic(m))return;if("_lengths"in r&&r._lengths||b===g)return;let k=De(m,void 0,"key").length;return k===g||k===S}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=im(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function dx(e,t,r={}){yn(t),qs(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||_o,n=r.hmac||((I,z)=>lc(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=gW(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*sP<o.ORDER;function S(I){let z=a>>uc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function R(I,z){lx(z);let P=m.signature,K=z==="compact"?P:z==="recovered"?P+1:void 0;return De(I,K)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){R(I,z);let P;if(z==="der"){let{r:E,s:ae}=To.toSig(De(I));return new D(E,ae)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let K=m.signature/2,j=I.subarray(0,K),Q=I.subarray(K,K*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Us(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,K=this.assertRecovery(),j=K===2||K===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Ut(aP((K&1)===0),Q)),ae=s.inv(j),fe=T(De(I,void 0,"msgHash")),C=s.create(-fe*ae),xe=s.create(P*ae),Ae=e.BASE.multiplyUnsafe(C).add(E.multiplyUnsafe(xe));if(Ae.is0())throw Error("invalid recovery: point at infinify");return Ae.assertValidity(),Ae}hasHighS(){return S(this.s)}toBytes(I=b.format){if(lx(I),I==="der")return Us(To.hexFromSig(this));let{r:z,s:P}=this,K=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Ut(Uint8Array.of(this.assertRecovery()),K,j);return Ut(K,j)}toHex(I){return js(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=Eo(z),K=z.length*8-c;return K>0?P>>BigInt(K):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=Pu(c);function B(I){return $u("num < 2^"+c,I,Bi,H),s.toBytes(I)}function V(I,z){return De(I,void 0,"message"),z?De(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:K,prehash:j,extraEntropy:Q}=cx(P,b);I=V(I,j);let E=T(I),ae=s.fromBytes(z);if(!s.isValidNot0(ae))throw Error("invalid private key");let fe=[B(ae),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(De(Pe,void 0,"extraEntropy"))}let C=Ut(...fe),xe=E;function Ae(Pe){let $e=U(Pe);if(!s.isValidNot0($e))return;let _e=s.inv($e),We=e.BASE.multiply($e).toAffine(),Le=s.create(We.x);if(Le===Bi)return;let Xe=s.create(_e*s.create(xe+Le*ae));if(Xe===Bi)return;let dt=(We.x===Le?0:2)|Number(We.y&uc),kt=Xe;if(K&&S(Xe))kt=s.neg(Xe),dt^=1;return new D(Le,kt,g?void 0:dt)}return{seed:C,k2sig:Ae}}function J(I,z,P={}){let{seed:K,k2sig:j}=te(I,z,P);return L$(t.outputLen,s.BYTES,n)(K,j).toBytes(P.format)}function N(I,z,P,K={}){let{lowS:j,prehash:Q,format:E}=cx(K,b);if(P=De(P,void 0,"publicKey"),z=V(z,Q),!ic(I)){let ae=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ae)}R(I,E);try{let ae=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&ae.hasHighS())return!1;let{r:C,s:xe}=ae,Ae=T(z),Pe=s.inv(xe),$e=s.create(Ae*Pe),_e=s.create(C*Pe),We=e.BASE.multiplyUnsafe($e).add(fe.multiplyUnsafe(_e));if(We.is0())return!1;return s.create(We.x)===C}catch(ae){return!1}}function L(I,z,P={}){let{prehash:K}=cx(P,b);return z=V(z,K),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:J,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function lP(e,t,r){return e&t^~e&r}function uP(e,t,r){return e&t^e&r^t&r}class am{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=em(this.buffer)}update(e){Li(this),De(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=em(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Li(this),Yp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Zr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=em(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var ji=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var sr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var cm=BigInt(4294967295),dP=BigInt(32);function yW(e,t=!1){if(t)return{h:Number(e&cm),l:Number(e>>dP&cm)};return{h:Number(e>>dP&cm)|0,l:Number(e&cm)|0}}function lm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=yW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var fx=(e,t,r)=>e>>>r,px=(e,t,r)=>e<<32-r|t>>>r,Fs=(e,t,r)=>e>>>r|t<<32-r,Hs=(e,t,r)=>e<<32-r|t>>>r,Lu=(e,t,r)=>e<<64-r|t>>>r-32,Bu=(e,t,r)=>e>>>r-32|t<<64-r;var fP=(e,t,r)=>e<<r|t>>>32-r,pP=(e,t,r)=>t<<r|e>>>32-r,mP=(e,t,r)=>t<<r-32|e>>>64-r,hP=(e,t,r)=>e<<r-32|t>>>64-r;function oi(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var gP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),yP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,bP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),SP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,xP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),wP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var SW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ro=new Uint32Array(64);class vP extends am{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)Ro[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=Ro[u-15],p=Ro[u-2],m=Pn(f,7)^Pn(f,18)^f>>>3,b=Pn(p,17)^Pn(p,19)^p>>>10;Ro[u]=b+Ro[u-7]+m+Ro[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+f+lP(s,a,c)+SW[u]+Ro[u]|0,b=(Pn(r,2)^Pn(r,13)^Pn(r,22))+uP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Zr(Ro)}destroy(){this.set(0,0,0,0,0,0,0,0),Zr(this.buffer)}}class _P extends vP{A=ji[0]|0;B=ji[1]|0;C=ji[2]|0;D=ji[3]|0;E=ji[4]|0;F=ji[5]|0;G=ji[6]|0;H=ji[7]|0;constructor(){super(32)}}var kP=(()=>lm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),xW=(()=>kP[0])(),wW=(()=>kP[1])(),Co=new Uint32Array(80),Oo=new Uint32Array(80);class EP extends am{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Co[A]=e.getUint32(t),Oo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=Co[A-15]|0,D=Oo[A-15]|0,U=Fs(R,D,1)^Fs(R,D,8)^fx(R,D,7),T=Hs(R,D,1)^Hs(R,D,8)^px(R,D,7),H=Co[A-2]|0,B=Oo[A-2]|0,V=Fs(H,B,19)^Lu(H,B,61)^fx(H,B,6),te=Hs(H,B,19)^Bu(H,B,61)^px(H,B,6),J=bP(T,te,Oo[A-7],Oo[A-16]),N=SP(J,U,V,Co[A-7],Co[A-16]);Co[A]=N|0,Oo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Fs(u,f,14)^Fs(u,f,18)^Lu(u,f,41),D=Hs(u,f,14)^Hs(u,f,18)^Bu(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=xP(k,D,T,wW[A],Oo[A]),B=wP(H,S,R,U,xW[A],Co[A]),V=H|0,te=Fs(r,i,28)^Lu(r,i,34)^Lu(r,i,39),J=Hs(r,i,28)^Bu(r,i,34)^Bu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=oi(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=gP(V,J,L);r=yP(I,B,te,N),i=I|0}({h:r,l:i}=oi(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=oi(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=oi(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=oi(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=oi(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=oi(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=oi(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=oi(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Zr(Co,Oo)}destroy(){Zr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class IP extends EP{Ah=sr[0]|0;Al=sr[1]|0;Bh=sr[2]|0;Bl=sr[3]|0;Ch=sr[4]|0;Cl=sr[5]|0;Dh=sr[6]|0;Dl=sr[7]|0;Eh=sr[8]|0;El=sr[9]|0;Fh=sr[10]|0;Fl=sr[11]|0;Gh=sr[12]|0;Gl=sr[13]|0;Hh=sr[14]|0;Hl=sr[15]|0;constructor(){super(48)}}var um=oc(()=>new _P,ko(1));var AP=oc(()=>new IP,ko(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vW=BigInt(1),TP=BigInt(2),_W=BigInt(3),kW=BigInt(5),p_e=BigInt(8),RP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function EW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=RP,a=e*e%o*e%o,c=bn(a,TP,o)*a%o,l=bn(c,vW,o)*e%o,u=bn(l,kW,o)*l%o,f=bn(u,t,o)*u%o,p=bn(f,r,o)*f%o,m=bn(p,i,o)*p%o,b=bn(m,n,o)*m%o,g=bn(b,n,o)*m%o,S=bn(g,t,o)*u%o;return{pow_p_5_8:bn(S,TP,o)*e%o,b2:a}}function IW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var CP=(()=>{let e=RP;return nP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=EW(t);return Rr(bn(r,_W,e)*i,e)},adjustScalarBytes:IW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var AW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var RW=ux(AW),mx=dx(RW,um);var CW=ux(TW),OP=dx(CW,AP);function PP(e,t,r){if(yn(e),r===void 0)r=new Uint8Array(e.outputLen);return lc(e,r,t)}var hx=Uint8Array.of(0),$P=Uint8Array.of();function zP(e,t,r,i=32){yn(e),Qt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=$P;else De(r,void 0,"info");let s=new Uint8Array(o*n),a=lc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)hx[0]=u+1,c.update(u===0?$P:l).update(r).update(hx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Zr(l,hx),s.slice(0,i)}var OW=BigInt(0),ju=BigInt(1),$W=BigInt(2),PW=BigInt(7),zW=BigInt(256),NW=BigInt(113),LP=[],BP=[],jP=[];for(let e=0,t=ju,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],LP.push(2*(5*i+r)),BP.push((e+1)*(e+2)/2%64);let n=OW;for(let o=0;o<7;o++)if(t=(t<<ju^(t>>PW)*NW)%zW,t&$W)n^=ju<<(ju<<BigInt(o))-ju;jP.push(n)}var UP=lm(jP,!0),DW=UP[0],LW=UP[1],NP=(e,t,r)=>r>32?mP(e,t,r):fP(e,t,r),DP=(e,t,r)=>r>32?hP(e,t,r):pP(e,t,r);function BW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=NP(l,u,1)^r[a],p=DP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=BP[s],c=NP(n,o,a),l=DP(n,o,a),u=LP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=DW[i],e[1]^=LW[i]}Zr(r)}class dm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Qt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Xp(this.state)}clone(){return this._cloneInto()}keccak(){VS(this.state32),BW(this.state32,this.rounds),VS(this.state32),this.posOut=0,this.pos=0}update(e){Li(this),De(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Li(this,!1),De(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Qt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Yp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Zr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new dm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var qP=(e,t,r,i={})=>oc(()=>new dm(t,e,r),i);var Js=qP(6,136,32,ko(8));var ZP=qP(6,72,64,ko(10));var MP=(e,t,r,i={})=>oc((n={})=>new dm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),FP=MP(31,168,16,ko(11)),si=MP(31,136,32,ko(12));function gx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function JP(e){return gx(e),(e&e-1)===0&&e!==0}function yx(e,t){gx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function KP(e){return gx(e),31-Math.clz32(e)}function HP(e){let t=e.length;if(t<2||!JP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=KP(t);for(let i=0;i<t;i++){let n=yx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var bx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=KP(r);if(!JP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)HP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,g=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,R=p++;A<g;A++){let D=o?n?r-R:R:A*S,U=k+A,T=k+A+g,H=i[D],B=u[T],V=u[U];if(l){let te=e.mul(B,H);u[U]=e.add(V,te),u[T]=e.sub(V,te)}else if(o)u[U]=e.add(B,V),u[T]=e.mul(e.sub(B,V),H);else u[U]=e.add(V,B),u[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)HP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ai=_o;function fm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function VP(e){return Uint8Array.from(e)}function Ks(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(De(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{De(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function pm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{De(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ht(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function Sx(e){return(1<<e)-1}var T_e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var WP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,R=i)=>{let D=A%R|0;return(D>=0?D|0:R+D|0)|0},l=(A,R=i)=>{let D=c(A,R)|0;return(D>R>>1?D-R|0:D)|0};function u(){let A=t(r);for(let R=0;R<r;R++){let D=yx(R,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[R]=Number(U)|0}return A}let f=u(),p={add:(A,R)=>c((A|0)+(R|0))|0,sub:(A,R)=>c((A|0)-(R|0))|0,mul:(A,R)=>c((A|0)*(R|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=bx(p,{dit:!1,...m}),g=bx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{g(A);for(let R=0;R<A.length;R++)A[R]=c(n*A[R]);return A}},bitsCoder:(A,R)=>{let D=Sx(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=(R.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[J++]=V&Sx(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[J++]=R.decode(V&D)}return H}}}}},jW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ht(o,i)}}},GP=jW(FP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Sr=256,Ui=3329,UW=3303,qW=17,{mod:Zu,nttZetas:ZW,NTT:Vs,bitsCoder:MW}=WP({N:Sr,Q:Ui,F:UW,ROOT_OF_UNITY:qW,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),xx={512:{N:Sr,Q:Ui,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Sr,Q:Ui,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Sr,Q:Ui,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},FW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ui/2)/Ui,decode:(r)=>r*Ui+t>>>e}},Uu=(e)=>MW(e,FW(e));function Ws(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]+t[r])}function HW(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]-t[r])}function JW(e,t,r,i,n){let o=Zu(t*i*n+e*r),s=Zu(e*i+t*r);return{c0:o,c1:s}}function mm(e,t){for(let r=0;r<Sr/2;r++){let i=ZW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=JW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function QP(e){let t=new Uint16Array(Sr);for(let r=0;r<Sr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<Sr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ui)t[r++]=o;if(r<Sr&&s<Ui)t[r++]=s}}return t}function qu(e,t,r,i){let n=e(i*Sr/4,t,r),o=new Uint16Array(Sr),s=Xp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Zu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var KW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Uu(1),u=Uu(c),f=Uu(a),p=Ks("publicKey",pm(Uu(12),t),32),m=pm(Uu(12),t),b=Ks("ciphertext",pm(f,t),u),g=Ks("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{De(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[R,D]=g.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Vs.encode(qu(r,D,V,o)));let H=i(R);for(let V=0;V<t;V++){let te=Vs.encode(qu(r,D,t+V,o));for(let J=0;J<t;J++){let N=QP(H.get(J,V));Ws(te,mm(N,U[J]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,R]),secretKey:m.encode(U)};return Ht(R,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[R,D]=p.decode(S),U=[];for(let J=0;J<t;J++)U.push(Vs.encode(qu(r,A,J,o)));let T=i(D),H=new Uint16Array(Sr),B=[];for(let J=0;J<t;J++){let N=qu(r,A,t+J,s),L=new Uint16Array(Sr);for(let I=0;I<t;I++){let z=QP(T.get(J,I));Ws(L,mm(z,U[I]))}Ws(N,Vs.decode(L)),B.push(N),Ws(H,mm(R[J],U[J])),Ht(L)}T.clean();let V=qu(r,A,2*t,s);Ws(V,Vs.decode(H));let te=l.decode(k);return Ws(te,V),Ht(R,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,R]=b.decode(S),D=m.decode(k),U=new Uint16Array(Sr);for(let T=0;T<t;T++)Ws(U,mm(D[T],Vs.encode(A[T])));return HW(R,Vs.decode(U)),Ht(U,D,A),l.encode(R)}}};function wx(e){let t=KW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ks("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ai(64))=>{De(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),b=a.encode([p,f,m,u.subarray(32)]);return Ht(p,m),{publicKey:f,secretKey:b}},getPublicKey:(u)=>{let[f,p,m,b]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=ai(32))=>{De(u,s.publicKey,"publicKey"),De(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(VP(p)));if(!fm(m,p))throw Ht(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ht(m);let b=i.create().update(f).update(r(u)).digest(),g=t.encrypt(u,f,b.subarray(32,64));return Ht(b.subarray(32)),{cipherText:g,sharedSecret:b.subarray(0,32)}},decapsulate:(u,f)=>{De(f,a.bytesLen,"secretKey"),De(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!fm(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,S,k,A]=a.decode(f),R=t.decrypt(u,g),D=i.create().update(R).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,R,D.subarray(32,64)),H=fm(u,T),B=n.create({dkLen:32}).update(A).update(u).digest();return Ht(R,T,!H?U:B),H?U:B}}}function VW(e,t,r){return si.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var vx={HASH256:Js,HASH512:ZP,KDF:si,XOF:GP,PRF:VW},j_e=wx({...vx,...xx[512]}),Mu=wx({...vx,...xx[768]}),YP=wx({...vx,...xx[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function WW(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ai(r.seed))=>{De(s,r.seed,"seed");let a=o.isLE?Io(s):Eo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function _x(e,t=!1){let r=WW(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ai(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ht(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Fu(e,t){return Ks(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function kx(e){return(t,r)=>e(t,{dkLen:r})}function GW(e,t,...r){let i=Fu(r,"seed"),n=Fu(r,"publicKey");if(e===void 0)e=i.bytesLen;Qt(e);function o(s){De(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ai(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ht(a),Ht(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function hm(e,t,r,i,...n){let o=GW(e,r,...n),s=Fu(n,"cipherText"),a=Fu(n,"publicKey"),c=Fu(n,"msg");if(t===void 0)t=c.bytesLen;return Qt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ai(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),g=m.map((k)=>k.cipherText),S={sharedSecret:i(f,g,b),cipherText:s.encode(g)};return Ht(b,g),S},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),b=n.map((g,S)=>g.decapsulate(f[S],m[S]));return i(p,f,b)}}}function XP(e,t,r,i,n){return yn(i),yn(n),hm(32,32,kx(i),(o,s,a)=>n(Ut(a[0],a[1],s[1],o[1],Ao(e))),t,r)}var G_e=XP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Mu,_x(mx,!0),si,Js),Q_e=XP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",YP,_x(OP,!0),si,Js);function QW(e,t,r,i,n){return yn(i),yn(n),hm(32,32,kx(i),(o,s,a)=>{let c=Ut(a[0],a[1],s[0],o[0],s[1],o[1],Ao(e)),l=32,u=Ut(Ao("hybrid_prk"),c),f=PP(n,u),p=Ut(sc(32,2),Ao("shared_secret"),Ao("")),m=zP(n,f,p,32);return Ht(f,p,u,c),m},t,r)}var ez=_x(CP),Y_e=QW("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Mu,ez,si,um),YW=(()=>hm(32,32,kx(si),(e,t,r)=>Js(Ut(r[0],r[1],t[1],e[1],Ao("\\.//^\\"))),Mu,ez))();function XW(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ai(i)){return De(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ai(i)){De(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ht(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function eG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=XW(r,n,o,i),a=64,c=a+i;return hm(32,32,(l)=>{De(l,32);let u=si(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Ut(f,p)},(l,u,f)=>Js(Ut(f[0],f[1],u[1],l[1],Ao(e))),t,s)}var tG=(()=>eG("MLKEM768-P256",Mu,mx,128))();var gm=YW,tz=tG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ft=(e,t,r)=>nr(e,t,r),Ix=Pt,dc=Up,ar=(...e)=>RS(...e),fc=(e)=>wu(e),pc=IS,mc=(e)=>Pi(e),bm=BigInt(0),Ex=BigInt(1);function qi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!ym(e))throw RangeError("positive bigint expected, got "+e)}else Ix(e);return e}function ci(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Hu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function rz(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?bm:BigInt("0x"+e)}function Gs(e){return rz(Up(e))}function zn(e){return rz(Up($o(nr(e)).reverse()))}function xm(e,t){if(Pt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return wu(r.padStart(t*2,"0"))}function Ju(e,t){return xm(e,t).reverse()}function nz(e,t){if(e=ft(e),t=ft(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(ft(e))}function wm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var ym=(e)=>typeof e==="bigint"&&bm<=e;function rG(e,t,r){return ym(e)&&ym(t)&&ym(r)&&t<=e&&e<r}function Zi(e,t,r,i){if(!rG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function hc(e){if(e<bm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>bm;e>>=Ex,t+=1);return t}var Ku=(e)=>(Ex<<BigInt(e))-Ex;function iz(e,t,r){if(Pt(e,"hashLen"),Pt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,ar(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return ar(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var Ax=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cr=BigInt(0),Tt=BigInt(1),Qs=BigInt(2),cz=BigInt(3),lz=BigInt(4),uz=BigInt(5),nG=BigInt(7),dz=BigInt(8),iG=BigInt(9),fz=BigInt(16);function xt(e,t){if(t<=cr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=cr?r:t+r}function xn(e,t,r){if(t<cr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >cr)i*=i,i%=r;return i}function oz(e,t){if(e===cr)throw Error("invert: expected non-zero number");if(t<=cr)throw Error("invert: expected positive modulus, got "+t);let r=xt(e,t),i=t,n=cr,o=Tt,s=Tt,a=cr;while(r!==cr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==Tt)throw Error("invert: does not exist");return xt(n,t)}function Tx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function pz(e,t){let r=e,i=(r.ORDER+Tt)/lz,n=r.pow(t,i);return Tx(r,n,t),n}function oG(e,t){let r=e,i=(r.ORDER-uz)/dz,n=r.mul(t,Qs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Qs),o),c=r.mul(s,r.sub(a,r.ONE));return Tx(r,c,t),c}function sG(e){let t=vm(e),r=mz(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+nG)/fz;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),b=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,f,b),f=l.cmov(m,p,g);let S=l.eql(l.sqr(f),c),k=l.cmov(u,f,S);return Tx(l,k,c),k}}function mz(e){if(e<cz)throw Error("sqrt is not defined for small field");let t=e-Tt,r=0;while(t%Qs===cr)t/=Qs,r++;let i=Qs,n=vm(e);while(sz(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return pz;let o=n.pow(i,t),s=(t+Tt)/Qs;return function(c,l){let u=c;if(u.is0(l))return l;if(sz(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),b=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,S=u.sqr(m);while(!u.eql(S,u.ONE))if(g++,S=u.sqr(S),g===f)throw Error("Cannot find square root");let k=Tt<<BigInt(f-g-1),A=u.pow(p,k);f=g,p=u.sqr(A),m=u.mul(m,p),b=u.mul(b,A)}return b}}function aG(e){if(e%lz===cz)return pz;if(e%dz===uz)return oG;if(e%fz===iG)return sG(e);return mz(e)}var Mi=(e,t)=>(xt(e,t)&Tt)===Tt,cG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Rx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=cG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),ci(e.BYTES,"BYTES"),ci(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function lG(e,t,r){let i=e;if(r<cr)throw Error("invalid exponent, negatives unsupported");if(r===cr)return i.ONE;if(r===Tt)return t;let n=i.ONE,o=t;while(r>cr){if(r&Tt)n=i.mul(n,o);o=i.sqr(o),r>>=Tt}return n}function Vu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function sz(e,t){let r=e,i=(r.ORDER-Tt)/Qs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function uG(e,t){if(t!==void 0)Ix(t);if(e<=cr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=hc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var az=new WeakMap;class Cx{ORDER;BITS;BYTES;isLE;ZERO=cr;ONE=Tt;_lengths;_mod;constructor(e,t={}){if(e<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=uG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return xt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return cr<=e&&e<this.ORDER}is0(e){return e===cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Tt)===Tt}neg(e){return xt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return xt(e*e,this.ORDER)}add(e,t){return xt(e+t,this.ORDER)}sub(e,t){return xt(e-t,this.ORDER)}mul(e,t){return xt(e*t,this.ORDER)}pow(e,t){return lG(this,e,t)}div(e,t){return xt(e*oz(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return oz(e,this.ORDER)}sqrt(e){let t=az.get(this);if(!t)az.set(this,t=aG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Ju(e,this.BYTES):xm(e,this.BYTES)}fromBytes(e,t=!1){ft(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?zn(e):Gs(e);if(s)a=xt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Vu(this,e)}cmov(e,t,r){return qi(r,"condition"),r?t:e}}Object.freeze(Cx.prototype);function vm(e,t={}){return new Cx(e,t)}function hz(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Tt)throw Error("field order must be greater than 1");let t=hc(e-Tt);return Math.ceil(t/8)}function Ox(e){let t=hz(e);return t+Math.ceil(t/2)}function gz(e,t,r=!1){ft(e);let i=e.length,n=hz(t),o=Math.max(Ox(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?zn(e):Gs(e),a=xt(s,t-Tt)+Tt;return r?Ju(a,n):xm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gc=BigInt(0),Ys=BigInt(1);function Wu(e,t){let r=t.negate();return e?r:t}function Xs(e,t){let r=Vu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function xz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function $x(e,t){xz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Ku(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function yz(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ys;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var Px=new WeakMap,wz=new WeakMap;function zx(e){return wz.get(e)||1}function bz(e){if(e!==gc)throw Error("invalid wNAF")}class Gu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>gc){if(t&Ys)r=r.add(i);i=i.double(),t>>=Ys}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=$x(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=$x(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=yz(r,s,o);if(r=a,l)n=n.add(Wu(f,t[p]));else i=i.add(Wu(u,t[c]))}return bz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=$x(e,this.bits);for(let o=0;o<n.windows;o++){if(r===gc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=yz(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return bz(r),i}getPrecomputes(e,t,r){let i=Px.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);Px.set(t,i)}}return i}cached(e,t,r){let i=zx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=zx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){xz(t,this.bits),wz.set(e,t),Px.delete(e)}hasCache(e){return zx(e)!==1}}function vz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>gc||i>gc){if(r&Ys)o=o.add(n);if(i&Ys)s=s.add(n);n=n.double(),r>>=Ys,i>>=Ys}return{p1:o,p2:s}}function Sz(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Rx(t),t}else return vm(e,{isLE:r})}function _m(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>gc))throw Error(`CURVE.${c} must be positive bigint`)}let n=Sz(t.p,r.Fp,i),o=Sz(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Qu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Yu(e,t){if(ci(e),ci(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function dG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function fG(e){if(!pc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?wm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Nx(e,t,r,i){if(ft(e),ci(r),t=fG(t),t.length>255)t=i(ar(wm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ar(t,Yu(t.length,1)),c=new Uint8Array(o),l=Yu(r,2),u=Array(s),f=i(ar(c,e,l,Yu(0,1),a));u[0]=i(ar(f,Yu(1,1),a));for(let m=1;m<s;m++){let b=[dG(f,u[m-1]),Yu(m+1,1),a];u[m]=i(ar(...b))}return ar(...u).slice(0,r)}var _z="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var kz=(e,t)=>(e+(e>=0?t:-t)/Iz)/t;function pG(e,t,r){Zi("scalar",e,li,r);let[[i,n],[o,s]]=t,a=kz(s*e,r),c=kz(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<li,p=u<li;if(f)l=-l;if(p)u=-u;let m=Ku(Math.ceil(hc(r)/2))+Po;if(l<li||l>=m||u<li||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function Lx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Dx(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(qi(r.lowS,"lowS"),qi(r.prehash,"prehash"),r.format!==void 0)Lx(r.format);return r}class Ez extends Error{constructor(e=""){super(e)}}var Nn={Err:Ez,_tlv:{encode:(e,t)=>{let{Err:r}=Nn;if(ci(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Hu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Hu(n.length/2|128):"";return Hu(e)+o+n+t},decode(e,t){let{Err:r}=Nn;t=ft(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Nn;if(Sm(e),e<li)throw new t("integer: negative integers are not allowed");let r=Hu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Nn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Gs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Nn,n=ft(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Nn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Nn._tlv);Object.freeze(Nn._int);Object.freeze(Nn);var li=BigInt(0),Po=BigInt(1),Iz=BigInt(2),km=BigInt(3),mG=BigInt(4);function Az(e,t={}){let r=_m("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=Rz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(J,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(qi(L,"isCompressed"),L){f();let K=!i.isOdd(z);return ar(Tz(K),P)}else return ar(Uint8Array.of(4),P,i.toBytes(z))}function m(J){ft(J,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=u,I=J.length,z=J[0],P=J.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let K=i.fromBytes(P);if(!i.isValid(K))throw Error("bad point: is not on curve, wrong x");let j=S(K),Q;try{Q=i.sqrt(j)}catch(fe){let C=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:K,y:Q}}else if(I===L&&z===4){let K=i.BYTES,j=i.fromBytes(P.subarray(0,K)),Q=i.fromBytes(P.subarray(K,K*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function S(J){let N=i.sqr(J),L=i.mul(N,J);return i.add(i.add(L,i.mul(J,o.a)),o.b)}function k(J,N){let L=i.sqr(N),I=S(J);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,km),mG),R=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,R)))throw Error("bad curve params: a or b");function D(J,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${J}`);return N}function U(J){if(!(J instanceof B))throw Error("Weierstrass Point expected")}function T(J){if(!c||!c.basises)throw Error("no endo");return pG(J,c.basises,n.ORDER)}function H(J,N,L,I,z){return L=new B(i.mul(L.X,J),L.Y,L.Z),N=Wu(I,N),L=Wu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(J,N,L){this.X=D("x",J),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(J){let{x:N,y:L}=J||{};if(!J||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(J instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(J){let N=B.fromAffine(g(ft(J,void 0,"point")));return N.assertValidity(),N}static fromHex(J){return B.fromBytes(fc(J))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(J=8,N=!0){if(te.createCache(this,J),!N)this.multiply(km);return this}assertValidity(){let J=this;if(J.is0()){if(t.allowInfinityPoint&&i.is0(J.X)&&i.eql(J.Y,i.ONE)&&i.is0(J.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=J.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!J.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:J}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(J)}equals(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.eql(i.mul(N,K),i.mul(z,I)),Q=i.eql(i.mul(L,K),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:J,b:N}=o,L=i.mul(N,km),{X:I,Y:z,Z:P}=this,K=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(I,z);return C=i.add(C,C),Q=i.mul(I,P),Q=i.add(Q,Q),K=i.mul(J,Q),j=i.mul(L,fe),j=i.add(K,j),K=i.sub(ae,j),j=i.add(ae,j),j=i.mul(K,j),K=i.mul(C,K),Q=i.mul(L,Q),fe=i.mul(J,fe),C=i.sub(E,fe),C=i.mul(J,C),C=i.add(C,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,C),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,C),K=i.sub(K,E),Q=i.mul(fe,ae),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(K,j,Q)}add(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=o.a,fe=i.mul(o.b,km),C=i.mul(N,z),xe=i.mul(L,P),Ae=i.mul(I,K),Pe=i.add(N,L),$e=i.add(z,P);Pe=i.mul(Pe,$e),$e=i.add(C,xe),Pe=i.sub(Pe,$e),$e=i.add(N,I);let _e=i.add(z,K);return $e=i.mul($e,_e),_e=i.add(C,Ae),$e=i.sub($e,_e),_e=i.add(L,I),j=i.add(P,K),_e=i.mul(_e,j),j=i.add(xe,Ae),_e=i.sub(_e,j),E=i.mul(ae,$e),j=i.mul(fe,Ae),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(C,C),xe=i.add(xe,C),Ae=i.mul(ae,Ae),$e=i.mul(fe,$e),xe=i.add(xe,Ae),Ae=i.sub(C,Ae),Ae=i.mul(ae,Ae),$e=i.add($e,Ae),C=i.mul(xe,$e),Q=i.add(Q,C),C=i.mul(_e,$e),j=i.mul(Pe,j),j=i.sub(j,C),C=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,C),new B(j,Q,E)}subtract(J){return U(J),this.add(J.negate())}is0(){return this.equals(B.ZERO)}multiply(J){let{endo:N}=t;if(!n.isValidNot0(J))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(K)=>Xs(B,K));if(N){let{k1neg:P,k1:K,k2neg:j,k2:Q}=T(J),{p:E,f:ae}=z(K),{p:fe,f:C}=z(Q);I=ae.add(C),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:K}=z(J);L=P,I=K}return Xs(B,[L,I])[0]}multiplyUnsafe(J){let{endo:N}=t,L=this,I=J;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===li||L.is0())return B.ZERO;if(I===Po)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:K,k2:j}=T(I),{p1:Q,p2:E}=vz(B,L,P,j);return H(N.beta,Q,E,z,K)}else return te.unsafe(L,I)}toAffine(J){let N=this,L=J,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:J}=t;if(s===Po)return!0;if(J)return J(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:J}=t;if(s===Po)return this;if(J)return J(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Po)return this.is0();return this.clearCofactor().is0()}toBytes(J=!0){return qi(J,"isCompressed"),this.assertValidity(),b(B,this,J)}toHex(J=!0){return dc(this.toBytes(J))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Gu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function Tz(e){return Uint8Array.of(e?2:3)}function Rz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function hG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?mc:t.randomBytes,n=Object.assign(Rz(e.Fp,r),{seed:Math.max(Ox(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,gz(ft(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n,k=r._lengths;if(!pc(m))return;let A=ft(m,void 0,"key").length,R=A===g||A===S,D=A===b||!!k?.includes(A);if(R&&D)return;return R}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Qu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function Cz(e,t,r={}){let i=t;$i(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?mc:r.randomBytes,o=r.hmac===void 0?(z,P)=>ri(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=hG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*Iz+Po<s.ORDER;function k(z){let P=c>>Po;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function R(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){Lx(P);let K=b.signature,j=P==="compact"?K:P==="recovered"?K+1:void 0;return ft(z,j)}class U{r;s;recovery;constructor(z,P,K){if(this.r=A("r",z),this.s=A("s",P),K!=null){if(R(),![0,1,2,3].includes(K))throw Error("invalid recovery id");this.recovery=K}Object.freeze(this)}static fromBytes(z,P=g.format){D(z,P);let K;if(P==="der"){let{r:ae,s:fe}=Nn.toSig(ft(z));return new U(ae,fe)}if(P==="recovered")K=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),K)}static fromHex(z,P){return this.fromBytes(fc(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:K}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),ae=e.fromBytes(ar(Tz((j&1)===0),E)),fe=a.inv(Q),C=H(ft(z,void 0,"msgHash")),xe=a.create(-C*fe),Ae=a.create(K*fe),Pe=e.BASE.multiplyUnsafe(xe).add(ae.multiplyUnsafe(Ae));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=g.format){if(Lx(z),z==="der")return fc(Nn.hexFromSig(this));let{r:P,s:K}=this,j=a.toBytes(P),Q=a.toBytes(K);if(z==="recovered")return R(),ar(Uint8Array.of(this.assertRecovery()),j,Q);return ar(j,Q)}toHex(z){return dc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let K=Gs(P),j=P.length*8-l;return j>0?K>>BigInt(j):K}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Ku(l);function V(z){return Zi("num < 2^"+l,z,li,B),a.toBytes(z)}function te(z,P){return ft(z,void 0,"message"),P?ft(i(z),void 0,"prehashed message"):z}function J(z,P,K){let{lowS:j,prehash:Q,extraEntropy:E}=Dx(K,g);z=te(z,Q);let ae=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let C=[V(fe),V(ae)];if(E!=null&&E!==!1){let $e=E===!0?n(b.secretKey):E;C.push(ft($e,void 0,"extraEntropy"))}let xe=ar(...C),Ae=ae;function Pe($e){let _e=T($e);if(!a.isValidNot0(_e))return;let We=a.inv(_e),Le=e.BASE.multiply(_e).toAffine(),Xe=a.create(Le.x);if(Xe===li)return;let dt=a.create(We*a.create(Ae+Xe*fe));if(dt===li)return;let kt=(Le.x===Xe?0:2)|Number(Le.y&Po),jt=dt;if(j&&k(dt))jt=a.neg(dt),kt^=1;return new U(Xe,jt,S?void 0:kt)}return{seed:xe,k2sig:Pe}}function N(z,P,K={}){let{seed:j,k2sig:Q}=J(z,P,K);return iz(i.outputLen,a.BYTES,o)(j,Q).toBytes(K.format)}function L(z,P,K,j={}){let{lowS:Q,prehash:E,format:ae}=Dx(j,g);if(K=ft(K,void 0,"publicKey"),P=te(P,E),!pc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,ae);try{let fe=U.fromBytes(z,ae),C=e.fromBytes(K);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Ae}=fe,Pe=H(P),$e=a.inv(Ae),_e=a.create(Pe*$e),We=a.create(xe*$e),Le=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(We));if(Le.is0())return!1;return a.create(Le.x)===xe}catch(fe){return!1}}function I(z,P,K={}){let{prehash:j}=Dx(K,g);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var yG=Az(gG),yc=Cz(yG,zt);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zo=BigInt(0),Mr=BigInt(1),Bx=BigInt(2),bG=BigInt(8);function SG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function Oz(e,t={}){let r=t,i=_m("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=Bx<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,S))}}catch(k){return{isValid:!1,value:zo}}}:r.uvRatio;if(!SG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,S,k=!1){let A=k?Mr:zo;return Zi("coordinate "+g,S,A,c),S}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new m(zo,Mr,Mr,zo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,S,k,A){this.X=f("x",g),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=g||{};return f("x",S),f("y",k),new m(S,k,Mr,l(S*k))}static fromBytes(g,S=!1){let k=n.BYTES,{a:A,d:R}=s;g=$o(ft(g,k,"point")),qi(S,"zip215");let D=$o(g),U=g[k-1];D[k-1]=U&-129;let T=zn(D),H=S?c:n.ORDER;Zi("point.y",T,zo,H);let B=l(T*T),V=l(B-Mr),te=l(R*B-A),{isValid:J,value:N}=u(V,te);if(!J)throw Error("bad point: invalid y coordinate");let L=(N&Mr)===Mr,I=(U&128)!==0;if(!S&&N===zo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(g,S=!1){return m.fromBytes(fc(g),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,S=!0){if(b.createCache(this,g),!S)this.multiply(Bx);return this}assertValidity(){let g=this,{a:S,d:k}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:R,Z:D,T:U}=g,T=l(A*A),H=l(R*R),B=l(D*D),V=l(B*B),te=l(T*S),J=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(J!==N)throw Error("bad point: equation left != right (1)");let L=l(A*R),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:S,Y:k,Z:A}=this,{X:R,Y:D,Z:U}=g,T=l(S*U),H=l(R*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:S,Y:k,Z:A}=this,R=l(S*S),D=l(k*k),U=l(Bx*l(A*A)),T=l(g*R),H=S+k,B=l(l(H*H)-R-D),V=T+D,te=V-U,J=T-D,N=l(B*te),L=l(V*J),I=l(B*J),z=l(te*V);return new m(N,L,z,I)}add(g){p(g);let{a:S,d:k}=s,{X:A,Y:R,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=g,te=l(A*T),J=l(R*H),N=l(U*k*V),L=l(D*B),I=l((A+R)*(T+H)-te-J),z=L-N,P=L+N,K=l(J-S*te),j=l(I*z),Q=l(P*K),E=l(I*K),ae=l(z*P);return new m(j,Q,ae,E)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,g,(A)=>Xs(m,A));return Xs(m,[S,k])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===zo)return m.ZERO;if(this.is0()||g===Mr)return this;return b.unsafe(this,g,(S)=>Xs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(g){let S=this,k=g,{X:A,Y:R,Z:D}=S,U=S.is0();if(k==null)k=U?bG:n.inv(D);let T=l(A*k),H=l(R*k),B=n.mul(D,k);if(U)return{x:zo,y:Mr};if(B!==Mr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=g&Mr?128:0,k}toHex(){return dc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Gu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class jx{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){Ax()}static fromHex(e){Ax()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return dc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Xu=BigInt(0),bc=BigInt(1),Em=BigInt(2);function xG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function $z(e){let t=xG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?mc:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Em**BigInt(254):Em**BigInt(447),b=a?BigInt(8)*Em**BigInt(251)-bc:BigInt(4)*Em**BigInt(445)-bc,g=m+b+bc,S=(I)=>xt(I,r),k=A(f);function A(I){return Ju(S(I),u)}function R(I){let z=$o(ft(I,u,"uCoordinate"));if(a)z[31]&=127;return S(zn(z))}function D(I){return zn(n($o(ft(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Xu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){Zi("u",I,Xu,r),Zi("scalar",z,m,g);let P=z,K=I,j=bc,Q=Xu,E=I,ae=bc,fe=Xu;for(let xe=BigInt(l-1);xe>=Xu;xe--){let Ae=P>>xe&bc;fe^=Ae,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Ae;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:u,publicKey:u,seed:u},N=(I)=>(I=I===void 0?c(u):I,ft(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(J),Object.freeze(L),Object.freeze({keygen:Qu(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wG=BigInt(0),Fi=BigInt(1),Pz=BigInt(2),vG=BigInt(3),_G=BigInt(5),kG=BigInt(8),ta=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Mx=(()=>({p:ta,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:kG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Dz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=ta,a=e*e%o*e%o,c=xn(a,Pz,o)*a%o,l=xn(c,Fi,o)*e%o,u=xn(l,_G,o)*l%o,f=xn(u,t,o)*u%o,p=xn(f,r,o)*f%o,m=xn(p,i,o)*p%o,b=xn(m,n,o)*m%o,g=xn(b,n,o)*m%o,S=xn(g,t,o)*u%o;return{pow_p_5_8:xn(S,Pz,o)*e%o,b2:a}}function EG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Ux=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Fx(e,t){let r=ta,i=xt(t*t*t,r),n=xt(i*i*t,r),o=Dz(e*n).pow_p_5_8,s=xt(e*i*o,r),a=xt(t*s*s,r),c=s,l=xt(s*Ux,r),u=a===e,f=a===xt(-e,r),p=a===xt(-e*Ux,r);if(u)s=c;if(f||p)s=l;if(Mi(s,r))s=xt(-s,r);return{isValid:u||f,value:s}}var ea=Oz(Mx,{uvRatio:Fx}),No=(()=>ea.Fp)(),Lz=(()=>ea.Fn)();var Im=(()=>{let e=ta;return $z({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Dz(t);return xt(xn(r,vG,e)*i,e)},adjustScalarBytes:EG})})();var qx=Ux,IG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),AG=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),TG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),RG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),zz=(e)=>Fx(Fi,e),CG=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Zx=(e)=>No.create(zn(e)&CG);function Nz(e){let{d:t}=Mx,r=ta,i=(k)=>No.create(k),n=i(qx*e*e),o=i((n+Fi)*TG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Fx(o,a),u=i(l*e);if(!Mi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Fi)*RG-a),p=l*l,m=i((l+l)*a),b=i(f*IG),g=i(Fi-p),S=i(Fi+p);return new ea(i(m*S),i(g*b),i(b*S),i(m*g))}class Or extends jx{static BASE=(()=>new Or(ea.BASE))();static ZERO=(()=>new Or(ea.ZERO))();static Fp=(()=>No)();static Fn=(()=>Lz)();constructor(e){super(e)}static fromAffine(e){return new Or(ea.fromAffine(e))}assertSame(e){if(!(e instanceof Or))throw Error("RistrettoPoint expected")}init(e){return new Or(e)}static fromBytes(e){nr(e,32);let{a:t,d:r}=Mx,i=ta,n=(R)=>No.create(R),o=Zx(e);if(!nz(No.toBytes(o),e)||Mi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Fi+t*s),c=n(Fi-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=zz(n(f*u)),b=n(m*c),g=n(m*b*f),S=n((o+o)*b);if(Mi(S,i))S=n(-S);let k=n(a*g),A=n(S*k);if(!p||Mi(A,i)||k===wG)throw Error("invalid ristretto255 encoding 2");return new Or(new ea(S,k,Fi,A))}static fromHex(e){return Or.fromBytes(wu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=ta,o=(g)=>No.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=zz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(Mi(i*p,n)){let g=o(t*qx),S=o(e*qx);e=g,t=S,m=o(u*AG)}else m=f;if(Mi(e*p,n))t=o(-t);let b=o((r-t)*m);if(Mi(b,n))b=o(-b);return No.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>No.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Or.ZERO)}}Object.freeze(Or.BASE);Object.freeze(Or.ZERO);Object.freeze(Or.prototype);Object.freeze(Or);var OG=Object.freeze({Point:Or,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Nx(e,r,64,Fp);return OG.deriveToCurve(i)},hashToScalar(e,t={DST:_z}){let r=Nx(e,t.DST,64,Fp);return Lz.create(zn(r))},deriveToCurve(e){nr(e,64);let t=Zx(e.subarray(0,32)),r=Nz(t),i=Zx(e.subarray(32,64)),n=Nz(i);return new Or(r.add(n))}});var Bz=!1,$G=!1;async function jz(e,t){if($G)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Am(e,t){return await jz(async()=>{let r=Hx(e)?e:await zG(e),i=await crypto.subtle.importKey("raw",NG(t),{name:"X25519"},Bz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Hx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMult(e,t)})}async function ed(e){return await jz(async()=>Am(e,Im.GuBytes),()=>{if(Hx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMultBase(e)})}var PG=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function zG(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...PG,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},Bz,["deriveBits"])}function Hx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function NG(e){return e}class Jx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),LG(ra(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=ra(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:ra(this.transcript)}}}function LG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function ra(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Sc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Tm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Kx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Uz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function qz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=ra(i),s=o.subarray(0,t),a=Sc(e,o.subarray(t));return{data:s,rest:a}}class ui{args;body;constructor(e,t){this.args=e,this.body=t}}async function BG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=yr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=ra(i);return{s:new ui(r,n)}}async function Zz(e){let t=new Jx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await BG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=yr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Sc(e,a)}}}function Vx(e){let t=[];t.push(`age-encryption.org/v1
+`)}function MO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function bt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Ns(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Lp={name:"@rizom/ops",version:"0.2.0-alpha.635",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as WG,mkdirSync as GG,readFileSync as fw,writeFileSync as pw}from"fs";import{dirname as QG,join as Yz}from"path";function IS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Pt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function nr(e,t,r=""){let i=IS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function $i(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Pt(e.outputLen),Pt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Xa(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bp(e,t){nr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function jp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Tr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ec(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function On(e,t){return e<<32-t|e>>>t}function rt(e,t){return e<<t|e>>>32-t>>>0}var v7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function _7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function k7(e){for(let t=0;t<e.length;t++)e[t]=_7(e[t]);return e}var AS=v7?(e)=>e:k7,HO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),E7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Up(e){if(nr(e),HO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=E7[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function FO(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function wu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(HO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=FO(e.charCodeAt(o)),a=FO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function I7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function TS(e,t=""){if(typeof e==="string")return I7(e);return nr(e,void 0,t)}function RS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];nr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function qp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function CS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Pi(e=32){Pt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var OS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class $S{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if($i(e),nr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Tr(i)}update(e){return Xa(this),this.iHash.update(e),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ri=(()=>{let e=(t,r,i)=>new $S(t,r).update(i).digest();return e.create=(t,r)=>new $S(t,r),e})();function vu(e,t,r){if($i(e),r===void 0)r=new Uint8Array(e.outputLen);return ri(e,r,t)}var PS=Uint8Array.of(0),JO=Uint8Array.of();function zS(e,t,r,i=32){$i(e),Pt(i,"length"),nr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=JO;else nr(r,void 0,"info");let s=new Uint8Array(o*n),a=ri.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)PS[0]=u+1,c.update(u===0?JO:l).update(r).update(PS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Tr(l,PS),s.slice(0,i)}var bo=(e,t,r,i,n)=>zS(e,vu(e,t,r),i,n);function KO(e,t,r){return e&t^~e&r}function VO(e,t,r){return e&t^e&r^t&r}class Zp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ec(this.buffer)}update(e){Xa(this),nr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ec(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Tr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ec(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Mp=BigInt(4294967295),WO=BigInt(32);function A7(e,t=!1){if(t)return{h:Number(e&Mp),l:Number(e>>WO&Mp)};return{h:Number(e>>WO&Mp)|0,l:Number(e&Mp)|0}}function GO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=A7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var NS=(e,t,r)=>e>>>r,DS=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,_u=(e,t,r)=>e<<64-r|t>>>r-32,ku=(e,t,r)=>e>>>r-32|t<<64-r;function ni(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var QO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),YO=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,XO=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),e$=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,t$=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),r$=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var R7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),So=new Uint32Array(64);class n$ extends Zp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)So[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=So[u-15],p=So[u-2],m=On(f,7)^On(f,18)^f>>>3,b=On(p,17)^On(p,19)^p>>>10;So[u]=b+So[u-7]+m+So[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=On(s,6)^On(s,11)^On(s,25),p=l+f+KO(s,a,c)+R7[u]+So[u]|0,b=(On(r,2)^On(r,13)^On(r,22))+VO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Tr(So)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Tr(this.buffer)}}class i$ extends n${A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var o$=(()=>GO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),C7=(()=>o$[0])(),O7=(()=>o$[1])(),xo=new Uint32Array(80),wo=new Uint32Array(80);class s$ extends Zp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)xo[A]=e.getUint32(t),wo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=xo[A-15]|0,D=wo[A-15]|0,U=Ds(R,D,1)^Ds(R,D,8)^NS(R,D,7),T=Ls(R,D,1)^Ls(R,D,8)^DS(R,D,7),H=xo[A-2]|0,B=wo[A-2]|0,V=Ds(H,B,19)^_u(H,B,61)^NS(H,B,6),te=Ls(H,B,19)^ku(H,B,61)^DS(H,B,6),J=XO(T,te,wo[A-7],wo[A-16]),N=e$(J,U,V,xo[A-7],xo[A-16]);xo[A]=N|0,wo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Ds(u,f,14)^Ds(u,f,18)^_u(u,f,41),D=Ls(u,f,14)^Ls(u,f,18)^ku(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=t$(k,D,T,O7[A],wo[A]),B=r$(H,S,R,U,C7[A],xo[A]),V=H|0,te=Ds(r,i,28)^_u(r,i,34)^_u(r,i,39),J=Ls(r,i,28)^ku(r,i,34)^ku(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=ni(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=QO(V,J,L);r=YO(I,B,te,N),i=I|0}({h:r,l:i}=ni(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ni(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ni(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ni(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=ni(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=ni(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=ni(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=ni(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Tr(xo,wo)}destroy(){this.destroyed=!0,Tr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class a$ extends s${Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(64)}}var zt=CS(()=>new i$,OS(1));var Fp=CS(()=>new a$,OS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Wp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function jS(e){if(!Wp(e))throw TypeError("Uint8Array expected")}function f$(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function p$(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function vo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Iu(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Jp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Kp(e,t){if(!f$(!0,t))throw TypeError(`${e}: array of strings expected`)}function US(e,t){if(!f$(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Kp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Jp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Jp(n),n.map((o)=>{vo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return vo("join",e),{encode:(t)=>(Kp("join.decode",t),t.join(e)),decode:(t)=>(vo("join.decode",t),t.split(e))}}function Gp(e,t="="){return Iu(e),vo("padding",t),{encode(r){Kp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Kp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function m$(e){return p$(e),{encode:(t)=>t,decode:(t)=>e(t)}}function c$(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Jp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Iu(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var h$=(e,t)=>t===0?e:h$(t,e%t),Vp=(e,t)=>e+(t-h$(e,t)),Hp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function LS(e,t,r,i){if(Jp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Vp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Vp(t,r)}`);let n=0,o=0,s=Hp[t],a=Hp[r]-1,c=[];for(let l of e){if(Iu(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Hp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function $7(e){Iu(e);let t=256;return{encode:(r)=>{if(!Wp(r))throw TypeError("radix.encode input should be Uint8Array");return c$(Array.from(r),t,e)},decode:(r)=>(US("radix.decode",r),Uint8Array.from(c$(r,e,t)))}}function hn(e,t=!1){if(Iu(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Vp(8,e)>32||Vp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Wp(r))throw TypeError("radix2.encode input should be Uint8Array");return LS(Array.from(r),8,e,!t)},decode:(r)=>(US("radix2.decode",r),Uint8Array.from(LS(r,e,8,t)))}}function l$(e){return p$(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var Yve=Object.freeze(Xr(hn(4),en("0123456789ABCDEF"),tn(""))),Xve=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Gp(5),tn(""))),e0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),t0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Gp(5),tn(""))),r0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),n0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),m$((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),g$=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),P7=/[\t\n\f\r ]/,y$=(e,t)=>{vo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&P7.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},qS=Object.freeze(g$?{encode(e){return jS(e),e.toBase64()},decode(e){return y$(e,!1)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Gp(6),tn(""))),yr=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),i0e=Object.freeze(g$?{encode(e){return jS(e),e.toBase64({alphabet:"base64url"})},decode(e){return y$(e,!0)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Gp(6),tn(""))),o0e=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),ZS=(e)=>Xr($7(58),en(e),tn("")),s0e=Object.freeze(ZS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),a0e=Object.freeze(ZS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),c0e=Object.freeze(ZS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var BS=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),u$=[996825010,642813549,513874426,1027748829,705979059];function Eu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<u$.length;i++)if((t>>i&1)===1)r^=u$[i];return r}function d$(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Eu(n)^s>>5}n=Eu(n);for(let o=0;o<i;o++)n=Eu(n)^e.charCodeAt(o)&31;for(let o of t)n=Eu(n)^o;for(let o=0;o<6;o++)n=Eu(n);return n^=r,BS.encode(LS([n%Hp[30]],30,5,!1))}function b$(e){let t=e==="bech32"?1:734539939,r=hn(5),i=r.decode,n=r.encode,o=l$(i);function s(f,p,m=90){if(vo("bech32.encode prefix",f),Wp(p))p=Array.from(p);US("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let g=b+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let S=f.toLowerCase(),k=d$(S,p,t);return`${S}1${BS.encode(p)}${k}`}function a(f,p=90){vo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=b.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,g),k=b.slice(g+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=BS.decode(k).slice(0,-6),R=d$(S,A,t);if(!k.endsWith(R))throw Error(`Invalid checksum in ${f}: expected "${R}"`);return{prefix:S,words:A}}let c=l$(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(b$("bech32")),l0e=Object.freeze(b$("bech32m"));var z7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),N7={encode(e){return jS(e),e.toHex()},decode(e){return vo("hex",e),Uint8Array.fromHex(e)}},u0e=Object.freeze(z7?N7:Xr(hn(4),en("0123456789abcdef"),tn(""),m$((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function L7(e,t,r,i){$i(e);let n=qp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Pt(o,"c"),Pt(s,"dkLen"),Pt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=TS(t,"password"),l=TS(r,"salt"),u=new Uint8Array(s),f=ri.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function B7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Tr(n),r}function MS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=L7(e,t,r,i),l,u=new Uint8Array(4),f=ec(u),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let g=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<g.length;k++)g[k]^=p[k]}}return B7(a,c,s,l,p)}function S$(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],g=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],R=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=u,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let fe=0;fe<8;fe+=2)te^=rt(T+j|0,7),I^=rt(te+T|0,9),j^=rt(I+te|0,13),T^=rt(j+I|0,18),z^=rt(J+H|0,7),Q^=rt(z+J|0,9),H^=rt(Q+z|0,13),J^=rt(H+Q|0,18),E^=rt(P+N|0,7),B^=rt(E+P|0,9),N^=rt(B+E|0,13),P^=rt(N+B|0,18),V^=rt(ae+K|0,7),L^=rt(V+ae|0,9),K^=rt(L+V|0,13),ae^=rt(K+L|0,18),H^=rt(T+V|0,7),B^=rt(H+T|0,9),V^=rt(B+H|0,13),T^=rt(V+B|0,18),N^=rt(J+te|0,7),L^=rt(N+J|0,9),te^=rt(L+N|0,13),J^=rt(te+L|0,18),K^=rt(P+z|0,7),I^=rt(K+P|0,9),z^=rt(I+K|0,13),P^=rt(z+I|0,18),j^=rt(ae+E|0,7),Q^=rt(j+ae|0,9),E^=rt(Q+j|0,13),ae^=rt(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=u+te|0,n[o++]=f+J|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=g+z|0,n[o++]=S+P|0,n[o++]=k+K|0,n[o++]=A+j|0,n[o++]=R+Q|0,n[o++]=D+E|0,n[o++]=U+ae|0}function FS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(S$(r,s,e,t,r,o),a>0)s+=16;S$(r,o,e,t+=16,r,s)}}function j7(e,t,r){let i=qp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Pt(n,"N"),Pt(o,"r"),Pt(s,"p"),Pt(a,"dkLen"),Pt(c,"asyncTick"),Pt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let g=MS(zt,e,t,{c:1,dkLen:f*s}),S=jp(g),k=jp(new Uint8Array(f*n)),A=jp(new Uint8Array(f)),R=()=>{};if(u){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;R=()=>{if(T++,u&&(!(T%U)||T===D))u(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:g,tmp:A,blockMixCb:R,asyncTick:c}}function U7(e,t,r,i,n){let o=MS(zt,e,r,{c:1,dkLen:t});return Tr(r,i,n),o}function HS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=j7(e,t,r);AS(l);for(let m=0;m<o;m++){let b=a*m;for(let g=0;g<a;g++)c[g]=l[b+g];for(let g=0,S=0;g<i-1;g++)FS(c,S,c,S+=a,n),p();FS(c,(i-1)*a,l,b,n),p();for(let g=0;g<i;g++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];FS(f,0,l,b,n),p()}}return AS(l),U7(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function q7(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Qp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function tc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=q7(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function JS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function x$(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!rc(e))throw Error("invalid output, must be aligned")}function ii(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Z7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Bs=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),M7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var F7=(e)=>{for(let t=0;t<e.length;t++)e[t]=M7(e[t]);return e},Ni=Bs?(e)=>e:F7;function w$(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function v$(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function _$(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var k$=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Ft(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");Ft(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(Ft(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function Au(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!rc(t))throw Error("invalid output, must be aligned");return t}function E$(e,t,r){tc(e),tc(t),Qp(r);let i=new Uint8Array(16),n=Z7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function rc(e){return e.byteOffset%4===0}function nc(e){return Uint8Array.from(Ft(e))}var A$=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),H7=(()=>Ni(ii(A$("expand 16-byte k"))))(),J7=(()=>Ni(ii(A$("expand 32-byte k"))))();function nt(e,t){return e<<t|e>>>32-t}var Tu=64,K7=16,KS=(()=>4294967295)(),I$=Uint32Array.of();function V7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Tu),u=ii(l),f=Bs&&rc(n)&&rc(o),p=f?ii(n):I$,m=f?ii(o):I$;if(!Bs){for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),Ni(u),s>=KS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}return}for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),s>=KS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);if(f&&g===Tu){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<K7;k++)A=S+k,m[A]=p[A]^u[k];b+=Tu;continue}for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}}function T$(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=w$({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return tc(n),tc(s),Qp(o),Qp(r),(a,c,l,u,f=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(u=Au(p,u,!1),tc(f),f<0||f>=KS)throw Error("arx: counter overflow");let m=[],b=a.length,g,S;if(b===32)m.push(g=nc(a)),S=J7;else if(b===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),S=H7,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Bs||!rc(c))m.push(c=nc(c));let k=ii(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Bs)i(S,k,ii(D),k);else{let U=Ni(Uint32Array.from(S));i(U,k,ii(D),k),$n(U),Ni(k)}c=c.subarray(16)}else if(!Bs)Ni(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let R=Ni(ii(c));try{return V7(e,S,k,R,l,u,f,s),u}finally{$n(...m)}}}function or(e,t){return e[t++]&255|(e[t++]&255)<<8}class R${blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=nc(Ft(e,32,"key"));let t=or(e,0),r=or(e,2),i=or(e,4),n=or(e,6),o=or(e,8),s=or(e,10),a=or(e,12),c=or(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=or(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],b=o[8],g=o[9],S=or(e,t+0),k=or(e,t+2),A=or(e,t+4),R=or(e,t+6),D=or(e,t+8),U=or(e,t+10),T=or(e,t+12),H=or(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),J=n[3]+((A>>>7|R<<9)&8191),N=n[4]+((R>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),K=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*g)+te*(5*b)+J*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*u)+z*(5*l)+P*(5*c)+K*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*g)+J*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*u)+P*(5*l)+K*(5*c),j+=E>>>13,E&=8191;let ae=j+B*c+V*a+te*s+J*(5*g)+N*(5*b);j=ae>>>13,ae&=8191,ae+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*u)+K*(5*l),j+=ae>>>13,ae&=8191;let fe=j+B*l+V*c+te*a+J*s+N*(5*g);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+K*(5*u),j+=fe>>>13,fe&=8191;let C=j+B*u+V*l+te*c+J*a+N*s;j=C>>>13,C&=8191,C+=L*(5*g)+I*(5*b)+z*(5*m)+P*(5*p)+K*(5*f),j+=C>>>13,C&=8191;let xe=j+B*f+V*u+te*l+J*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*g)+z*(5*b)+P*(5*m)+K*(5*p),j+=xe>>>13,xe&=8191;let Ae=j+B*p+V*f+te*u+J*l+N*c;j=Ae>>>13,Ae&=8191,Ae+=L*a+I*s+z*(5*g)+P*(5*b)+K*(5*m),j+=Ae>>>13,Ae&=8191;let Pe=j+B*m+V*p+te*f+J*u+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*g)+K*(5*b),j+=Pe>>>13,Pe&=8191;let $e=j+B*b+V*m+te*p+J*f+N*u;j=$e>>>13,$e&=8191,$e+=L*l+I*c+z*a+P*s+K*(5*g),j+=$e>>>13,$e&=8191;let _e=j+B*g+V*b+te*m+J*p+N*f;j=_e>>>13,_e&=8191,_e+=L*u+I*l+z*c+P*a+K*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=ae,n[3]=fe,n[4]=C,n[5]=xe,n[6]=Ae,n[7]=Pe,n[8]=$e,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){JS(this),Ft(e),e=nc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){JS(this),x$(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var C$=_$(32,(e)=>new R$(e));function W7(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],b=t[4],g=t[5],S=t[6],k=t[7],A=n,R=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=u,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let C=0;C<o;C+=2)T=T+te|0,j=nt(j^T,16),I=I+j|0,te=nt(te^I,12),T=T+te|0,j=nt(j^T,8),I=I+j|0,te=nt(te^I,7),H=H+J|0,Q=nt(Q^H,16),z=z+Q|0,J=nt(J^z,12),H=H+J|0,Q=nt(Q^H,8),z=z+Q|0,J=nt(J^z,7),B=B+N|0,E=nt(E^B,16),P=P+E|0,N=nt(N^P,12),B=B+N|0,E=nt(E^B,8),P=P+E|0,N=nt(N^P,7),V=V+L|0,ae=nt(ae^V,16),K=K+ae|0,L=nt(L^K,12),V=V+L|0,ae=nt(ae^V,8),K=K+ae|0,L=nt(L^K,7),T=T+J|0,ae=nt(ae^T,16),P=P+ae|0,J=nt(J^P,12),T=T+J|0,ae=nt(ae^T,8),P=P+ae|0,J=nt(J^P,7),H=H+N|0,j=nt(j^H,16),K=K+j|0,N=nt(N^K,12),H=H+N|0,j=nt(j^H,8),K=K+j|0,N=nt(N^K,7),B=B+L|0,Q=nt(Q^B,16),I=I+Q|0,L=nt(L^I,12),B=B+L|0,Q=nt(Q^B,8),I=I+Q|0,L=nt(L^I,7),V=V+te|0,E=nt(E^V,16),z=z+E|0,te=nt(te^z,12),V=V+te|0,E=nt(E^V,8),z=z+E|0,te=nt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=u+te|0,i[fe++]=f+J|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=g+z|0,i[fe++]=S+P|0,i[fe++]=k+K|0,i[fe++]=A+j|0,i[fe++]=R+Q|0,i[fe++]=D+E|0,i[fe++]=U+ae|0}var G7=T$(W7,{counterRight:!1,counterLength:4,allowShortKeys:!1});var Q7=new Uint8Array(16),O$=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(Q7.subarray(r))},Y7=new Uint8Array(32);function $$(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,Y7),s=E$(i.length,n?n.length:0,!0),a=C$.create(o);if(n)O$(a,n);O$(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var X7=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Au(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=$$(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=Au(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=$$(e,t,r,a,i);if(!v$(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),gn=k$({blockSize:64,nonceLength:12,tagLength:16},X7(G7));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Qt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function De(e,t,r=""){let i=ic(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function yn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Qt(e.outputLen),Qt(e.blockLen)}function Li(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Yp(e,t){De(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Xp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Zr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function em(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}var eW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function tW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function rW(e){for(let t=0;t<e.length;t++)e[t]=tW(e[t]);return e}var VS=eW?(e)=>e:rW,z$=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),nW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function js(e){if(De(e),z$)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=nW[e[r]];return t}var Di={_0:48,_9:57,A:65,F:70,a:97,f:102};function P$(e){if(e>=Di._0&&e<=Di._9)return e-Di._0;if(e>=Di.A&&e<=Di.F)return e-(Di.A-10);if(e>=Di.a&&e<=Di.f)return e-(Di.a-10);return}function Us(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(z$)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=P$(e.charCodeAt(o)),a=P$(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Ut(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];De(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function oc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function _o(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ko=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GS=BigInt(0),WS=BigInt(1);function Ru(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function N$(e){if(typeof e==="bigint"){if(!tm(e))throw Error("positive bigint expected, got "+e)}else Qt(e);return e}function Cu(e){let t=N$(e).toString(16);return t.length&1?"0"+t:t}function D$(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?GS:BigInt("0x"+e)}function Eo(e){return D$(js(e))}function Io(e){return D$(js(rm(De(e)).reverse()))}function sc(e,t){Qt(t),e=N$(e);let r=Us(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Ou(e,t){return sc(e,t).reverse()}function rm(e){return Uint8Array.from(e)}function Ao(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var tm=(e)=>typeof e==="bigint"&&GS<=e;function iW(e,t,r){return tm(e)&&tm(t)&&tm(r)&&t<=e&&e<r}function $u(e,t,r,i){if(!iW(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function QS(e){let t;for(t=0;e>GS;e>>=WS,t+=1);return t}var Pu=(e)=>(WS<<BigInt(e))-WS;function L$(e,t,r){if(Qt(e,"hashLen"),Qt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,Ut(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Ut(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function qs(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function YS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),br=BigInt(1),Zs=BigInt(2),U$=BigInt(3),q$=BigInt(4),Z$=BigInt(5),oW=BigInt(7),M$=BigInt(8),sW=BigInt(9),F$=BigInt(16);function Rr(e,t){let r=e%t;return r>=Cr?r:t+r}function bn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function B$(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=Rr(e,t),i=t,n=Cr,o=br,s=br,a=Cr;while(r!==Cr){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==br)throw Error("invert: does not exist");return Rr(n,t)}function XS(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function H$(e,t){let r=(e.ORDER+br)/q$,i=e.pow(t,r);return XS(e,i,t),i}function aW(e,t){let r=(e.ORDER-Z$)/M$,i=e.mul(t,Zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Zs),n),a=e.mul(o,e.sub(s,e.ONE));return XS(e,a,t),a}function cW(e){let t=nm(e),r=J$(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+oW)/F$;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,b);let g=a.eql(a.sqr(u),c),S=a.cmov(l,u,g);return XS(a,S,c),S}}function J$(e){if(e<U$)throw Error("sqrt is not defined for small field");let t=e-br,r=0;while(t%Zs===Cr)t/=Zs,r++;let i=Zs,n=nm(e);while(j$(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return H$;let o=n.pow(i,t),s=(t+br)/Zs;return function(c,l){if(c.is0(l))return l;if(j$(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(b++,g=c.sqr(g),b===u)throw Error("Cannot find square root");let S=br<<BigInt(u-b-1),k=c.pow(f,S);u=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function lW(e){if(e%q$===U$)return H$;if(e%M$===Z$)return aW;if(e%F$===sW)return cW(e);return J$(e)}var uW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function ex(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=uW.reduce((i,n)=>(i[n]="function",i),t);return qs(e,r),e}function dW(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===br)return t;let i=e.ONE,n=t;while(r>Cr){if(r&br)i=e.mul(i,n);n=e.sqr(n),r>>=br}return i}function zu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function j$(e,t){let r=(e.ORDER-br)/Zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function fW(e,t){if(t!==void 0)Qt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class K${ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=br;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=fW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Rr(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&br)===br}neg(e){return Rr(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Rr(e*e,this.ORDER)}add(e,t){return Rr(e+t,this.ORDER)}sub(e,t){return Rr(e-t,this.ORDER)}mul(e,t){return Rr(e*t,this.ORDER)}pow(e,t){return dW(this,e,t)}div(e,t){return Rr(e*B$(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return B$(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=lW(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Ou(e,this.BYTES):sc(e,this.BYTES)}fromBytes(e,t=!1){De(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Io(e):Eo(e);if(s)a=Rr(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return zu(this,e)}cmov(e,t,r){return r?t:e}}function nm(e,t={}){return new K$(e,t)}function V$(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function tx(e){let t=V$(e);return t+Math.ceil(t/2)}function W$(e,t,r=!1){De(e);let i=e.length,n=V$(t),o=tx(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Io(e):Eo(e),a=Rr(s,t-br)+br;return r?Ou(a,n):sc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ac=BigInt(0),Ms=BigInt(1);function Nu(e,t){let r=t.negate();return e?r:t}function ox(e,t){let r=zu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function X$(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function rx(e,t){X$(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Pu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function G$(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ms;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var nx=new WeakMap,eP=new WeakMap;function ix(e){return eP.get(e)||1}function Q$(e){if(e!==ac)throw Error("invalid wNAF")}class sx{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>ac){if(t&Ms)r=r.add(i);i=i.double(),t>>=Ms}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=rx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=rx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=G$(r,s,o);if(r=a,l)n=n.add(Nu(f,t[p]));else i=i.add(Nu(u,t[c]))}return Q$(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=rx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===ac)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=G$(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return Q$(r),i}getPrecomputes(e,t,r){let i=nx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);nx.set(t,i)}}return i}cached(e,t,r){let i=ix(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=ix(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){X$(t,this.bits),eP.set(e,t),nx.delete(e)}hasCache(e){return ix(e)!==1}}function tP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>ac||i>ac){if(r&Ms)o=o.add(n);if(i&Ms)s=s.add(n);n=n.double(),r>>=Ms,i>>=Ms}return{p1:o,p2:s}}function Y$(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return ex(t),t}else return nm(e,{isLE:r})}function rP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>ac))throw Error(`CURVE.${c} must be positive bigint`)}let n=Y$(t.p,r.Fp,i),o=Y$(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function im(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Du=BigInt(0),cc=BigInt(1),om=BigInt(2);function pW(e){return qs(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function nP(e){let t=pW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||_o,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?om**BigInt(254):om**BigInt(447),b=a?BigInt(8)*om**BigInt(251)-cc:BigInt(4)*om**BigInt(445)-cc,g=m+b+cc,S=(I)=>Rr(I,r),k=A(f);function A(I){return Ou(S(I),u)}function R(I){let z=rm(De(I,u,"uCoordinate"));if(a)z[31]&=127;return S(Io(z))}function D(I){return Io(n(rm(De(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Du)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){$u("u",I,Du,r),$u("scalar",z,m,g);let P=z,K=I,j=cc,Q=Du,E=I,ae=cc,fe=Du;for(let xe=BigInt(l-1);xe>=Du;xe--){let Ae=P>>xe&cc;fe^=Ae,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Ae;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:u,publicKey:u,seed:u},N=(I=c(u))=>(De(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:im(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}class ax{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(yn(e),De(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Zr(i)}update(e){return Li(this),this.iHash.update(e),this}digestInto(e){Li(this),De(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var lc=(e,t,r)=>new ax(e,t).update(r).digest();lc.create=(e,t)=>new ax(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var iP=(e,t)=>(e+(e>=0?t:-t)/sP)/t;function mW(e,t,r){let[[i,n],[o,s]]=t,a=iP(s*e,r),c=iP(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Bi,p=u<Bi;if(f)l=-l;if(p)u=-u;let m=Pu(Math.ceil(QS(r)/2))+uc;if(l<Bi||l>=m||u<Bi||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function lx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function cx(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Ru(r.lowS,"lowS"),Ru(r.prehash,"prehash"),r.format!==void 0)lx(r.format);return r}class oP extends Error{constructor(e=""){super(e)}}var To={Err:oP,_tlv:{encode:(e,t)=>{let{Err:r}=To;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Cu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Cu(n.length/2|128):"";return Cu(e)+o+n+t},decode(e,t){let{Err:r}=To,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=To;if(e<Bi)throw new t("integer: negative integers are not allowed");let r=Cu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=To;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Eo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=To,n=De(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=To,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Bi=BigInt(0),uc=BigInt(1),sP=BigInt(2),sm=BigInt(3),hW=BigInt(4);function ux(e,t={}){let r=rP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;qs(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=cP(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),K=i.toBytes(z);if(Ru(I,"isCompressed"),I){u();let j=!i.isOdd(P);return Ut(aP(j),K)}else return Ut(Uint8Array.of(4),K,i.toBytes(P))}function p(N){De(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],K=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(K);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=g(j),E;try{E=i.sqrt(Q)}catch(C){let xe=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}u();let ae=i.isOdd(E);if((P&1)===1!==ae)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(K.subarray(0,j)),E=i.fromBytes(K.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function g(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=g(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,sm),hW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function R(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return mW(N,c.basises,n.ORDER)}let T=YS((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=YS((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Nu(z,L),I=Nu(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=R("x",N),this.Y=R("y",L,!0),this.Z=R("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(De(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Us(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(J.createCache(this,N),!L)this.multiply(sm);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(K,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,sm),{X:z,Y:P,Z:K}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(K,K),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,K),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,C),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),C=i.mul(N,C),xe=i.sub(ae,C),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(ae,ae),ae=i.add(E,ae),ae=i.add(ae,C),ae=i.mul(ae,xe),Q=i.add(Q,ae),C=i.mul(P,K),C=i.add(C,C),ae=i.mul(C,xe),j=i.sub(j,ae),E=i.mul(C,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.ZERO,E=i.ZERO,ae=i.ZERO,fe=o.a,C=i.mul(o.b,sm),xe=i.mul(L,P),Ae=i.mul(I,K),Pe=i.mul(z,j),$e=i.add(L,I),_e=i.add(P,K);$e=i.mul($e,_e),_e=i.add(xe,Ae),$e=i.sub($e,_e),_e=i.add(L,z);let We=i.add(P,j);return _e=i.mul(_e,We),We=i.add(xe,Pe),_e=i.sub(_e,We),We=i.add(I,z),Q=i.add(K,j),We=i.mul(We,Q),Q=i.add(Ae,Pe),We=i.sub(We,Q),ae=i.mul(fe,_e),Q=i.mul(C,Pe),ae=i.add(Q,ae),Q=i.sub(Ae,ae),ae=i.add(Ae,ae),E=i.mul(Q,ae),Ae=i.add(xe,xe),Ae=i.add(Ae,xe),Pe=i.mul(fe,Pe),_e=i.mul(C,_e),Ae=i.add(Ae,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Ae,_e),E=i.add(E,xe),xe=i.mul(We,_e),Q=i.mul($e,Q),Q=i.sub(Q,xe),xe=i.mul($e,Ae),ae=i.mul(We,ae),ae=i.add(ae,xe),new V(Q,E,ae)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(K)=>J.cached(this,K,(j)=>ox(V,j));if(L){let{k1neg:K,k1:j,k2neg:Q,k2:E}=U(N),{p:ae,f:fe}=P(j),{p:C,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,ae,C,K,Q)}else{let{p:K,f:j}=P(N);I=K,z=j}return ox(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Bi||I.is0())return V.ZERO;if(N===uc)return I;if(J.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:K,k2:j}=U(N),{p1:Q,p2:E}=tP(V,I,P,j);return B(L.beta,Q,E,z,K)}else return J.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===uc)return!0;if(N)return N(V,this);return J.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===uc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return Ru(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return js(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,J=new sx(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function aP(e){return Uint8Array.of(e?2:3)}function cP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function gW(e,t={}){let{Fn:r}=e,i=t.randomBytes||_o,n=Object.assign(cP(e.Fp,r),{seed:tx(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return W$(De(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n;if(!ic(m))return;if("_lengths"in r&&r._lengths||b===g)return;let k=De(m,void 0,"key").length;return k===g||k===S}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=im(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function dx(e,t,r={}){yn(t),qs(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||_o,n=r.hmac||((I,z)=>lc(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=gW(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*sP<o.ORDER;function S(I){let z=a>>uc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function R(I,z){lx(z);let P=m.signature,K=z==="compact"?P:z==="recovered"?P+1:void 0;return De(I,K)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){R(I,z);let P;if(z==="der"){let{r:E,s:ae}=To.toSig(De(I));return new D(E,ae)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let K=m.signature/2,j=I.subarray(0,K),Q=I.subarray(K,K*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Us(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,K=this.assertRecovery(),j=K===2||K===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Ut(aP((K&1)===0),Q)),ae=s.inv(j),fe=T(De(I,void 0,"msgHash")),C=s.create(-fe*ae),xe=s.create(P*ae),Ae=e.BASE.multiplyUnsafe(C).add(E.multiplyUnsafe(xe));if(Ae.is0())throw Error("invalid recovery: point at infinify");return Ae.assertValidity(),Ae}hasHighS(){return S(this.s)}toBytes(I=b.format){if(lx(I),I==="der")return Us(To.hexFromSig(this));let{r:z,s:P}=this,K=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Ut(Uint8Array.of(this.assertRecovery()),K,j);return Ut(K,j)}toHex(I){return js(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=Eo(z),K=z.length*8-c;return K>0?P>>BigInt(K):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=Pu(c);function B(I){return $u("num < 2^"+c,I,Bi,H),s.toBytes(I)}function V(I,z){return De(I,void 0,"message"),z?De(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:K,prehash:j,extraEntropy:Q}=cx(P,b);I=V(I,j);let E=T(I),ae=s.fromBytes(z);if(!s.isValidNot0(ae))throw Error("invalid private key");let fe=[B(ae),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(De(Pe,void 0,"extraEntropy"))}let C=Ut(...fe),xe=E;function Ae(Pe){let $e=U(Pe);if(!s.isValidNot0($e))return;let _e=s.inv($e),We=e.BASE.multiply($e).toAffine(),Le=s.create(We.x);if(Le===Bi)return;let Xe=s.create(_e*s.create(xe+Le*ae));if(Xe===Bi)return;let dt=(We.x===Le?0:2)|Number(We.y&uc),kt=Xe;if(K&&S(Xe))kt=s.neg(Xe),dt^=1;return new D(Le,kt,g?void 0:dt)}return{seed:C,k2sig:Ae}}function J(I,z,P={}){let{seed:K,k2sig:j}=te(I,z,P);return L$(t.outputLen,s.BYTES,n)(K,j).toBytes(P.format)}function N(I,z,P,K={}){let{lowS:j,prehash:Q,format:E}=cx(K,b);if(P=De(P,void 0,"publicKey"),z=V(z,Q),!ic(I)){let ae=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ae)}R(I,E);try{let ae=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&ae.hasHighS())return!1;let{r:C,s:xe}=ae,Ae=T(z),Pe=s.inv(xe),$e=s.create(Ae*Pe),_e=s.create(C*Pe),We=e.BASE.multiplyUnsafe($e).add(fe.multiplyUnsafe(_e));if(We.is0())return!1;return s.create(We.x)===C}catch(ae){return!1}}function L(I,z,P={}){let{prehash:K}=cx(P,b);return z=V(z,K),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:J,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function lP(e,t,r){return e&t^~e&r}function uP(e,t,r){return e&t^e&r^t&r}class am{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=em(this.buffer)}update(e){Li(this),De(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=em(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Li(this),Yp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Zr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=em(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var ji=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var sr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var cm=BigInt(4294967295),dP=BigInt(32);function yW(e,t=!1){if(t)return{h:Number(e&cm),l:Number(e>>dP&cm)};return{h:Number(e>>dP&cm)|0,l:Number(e&cm)|0}}function lm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=yW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var fx=(e,t,r)=>e>>>r,px=(e,t,r)=>e<<32-r|t>>>r,Fs=(e,t,r)=>e>>>r|t<<32-r,Hs=(e,t,r)=>e<<32-r|t>>>r,Lu=(e,t,r)=>e<<64-r|t>>>r-32,Bu=(e,t,r)=>e>>>r-32|t<<64-r;var fP=(e,t,r)=>e<<r|t>>>32-r,pP=(e,t,r)=>t<<r|e>>>32-r,mP=(e,t,r)=>t<<r-32|e>>>64-r,hP=(e,t,r)=>e<<r-32|t>>>64-r;function oi(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var gP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),yP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,bP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),SP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,xP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),wP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var SW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ro=new Uint32Array(64);class vP extends am{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)Ro[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=Ro[u-15],p=Ro[u-2],m=Pn(f,7)^Pn(f,18)^f>>>3,b=Pn(p,17)^Pn(p,19)^p>>>10;Ro[u]=b+Ro[u-7]+m+Ro[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+f+lP(s,a,c)+SW[u]+Ro[u]|0,b=(Pn(r,2)^Pn(r,13)^Pn(r,22))+uP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Zr(Ro)}destroy(){this.set(0,0,0,0,0,0,0,0),Zr(this.buffer)}}class _P extends vP{A=ji[0]|0;B=ji[1]|0;C=ji[2]|0;D=ji[3]|0;E=ji[4]|0;F=ji[5]|0;G=ji[6]|0;H=ji[7]|0;constructor(){super(32)}}var kP=(()=>lm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),xW=(()=>kP[0])(),wW=(()=>kP[1])(),Co=new Uint32Array(80),Oo=new Uint32Array(80);class EP extends am{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Co[A]=e.getUint32(t),Oo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=Co[A-15]|0,D=Oo[A-15]|0,U=Fs(R,D,1)^Fs(R,D,8)^fx(R,D,7),T=Hs(R,D,1)^Hs(R,D,8)^px(R,D,7),H=Co[A-2]|0,B=Oo[A-2]|0,V=Fs(H,B,19)^Lu(H,B,61)^fx(H,B,6),te=Hs(H,B,19)^Bu(H,B,61)^px(H,B,6),J=bP(T,te,Oo[A-7],Oo[A-16]),N=SP(J,U,V,Co[A-7],Co[A-16]);Co[A]=N|0,Oo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Fs(u,f,14)^Fs(u,f,18)^Lu(u,f,41),D=Hs(u,f,14)^Hs(u,f,18)^Bu(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=xP(k,D,T,wW[A],Oo[A]),B=wP(H,S,R,U,xW[A],Co[A]),V=H|0,te=Fs(r,i,28)^Lu(r,i,34)^Lu(r,i,39),J=Hs(r,i,28)^Bu(r,i,34)^Bu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=oi(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=gP(V,J,L);r=yP(I,B,te,N),i=I|0}({h:r,l:i}=oi(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=oi(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=oi(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=oi(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=oi(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=oi(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=oi(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=oi(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Zr(Co,Oo)}destroy(){Zr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class IP extends EP{Ah=sr[0]|0;Al=sr[1]|0;Bh=sr[2]|0;Bl=sr[3]|0;Ch=sr[4]|0;Cl=sr[5]|0;Dh=sr[6]|0;Dl=sr[7]|0;Eh=sr[8]|0;El=sr[9]|0;Fh=sr[10]|0;Fl=sr[11]|0;Gh=sr[12]|0;Gl=sr[13]|0;Hh=sr[14]|0;Hl=sr[15]|0;constructor(){super(48)}}var um=oc(()=>new _P,ko(1));var AP=oc(()=>new IP,ko(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var vW=BigInt(1),TP=BigInt(2),_W=BigInt(3),kW=BigInt(5),p_e=BigInt(8),RP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function EW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=RP,a=e*e%o*e%o,c=bn(a,TP,o)*a%o,l=bn(c,vW,o)*e%o,u=bn(l,kW,o)*l%o,f=bn(u,t,o)*u%o,p=bn(f,r,o)*f%o,m=bn(p,i,o)*p%o,b=bn(m,n,o)*m%o,g=bn(b,n,o)*m%o,S=bn(g,t,o)*u%o;return{pow_p_5_8:bn(S,TP,o)*e%o,b2:a}}function IW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var CP=(()=>{let e=RP;return nP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=EW(t);return Rr(bn(r,_W,e)*i,e)},adjustScalarBytes:IW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var AW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),TW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var RW=ux(AW),mx=dx(RW,um);var CW=ux(TW),OP=dx(CW,AP);function PP(e,t,r){if(yn(e),r===void 0)r=new Uint8Array(e.outputLen);return lc(e,r,t)}var hx=Uint8Array.of(0),$P=Uint8Array.of();function zP(e,t,r,i=32){yn(e),Qt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=$P;else De(r,void 0,"info");let s=new Uint8Array(o*n),a=lc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)hx[0]=u+1,c.update(u===0?$P:l).update(r).update(hx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Zr(l,hx),s.slice(0,i)}var OW=BigInt(0),ju=BigInt(1),$W=BigInt(2),PW=BigInt(7),zW=BigInt(256),NW=BigInt(113),LP=[],BP=[],jP=[];for(let e=0,t=ju,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],LP.push(2*(5*i+r)),BP.push((e+1)*(e+2)/2%64);let n=OW;for(let o=0;o<7;o++)if(t=(t<<ju^(t>>PW)*NW)%zW,t&$W)n^=ju<<(ju<<BigInt(o))-ju;jP.push(n)}var UP=lm(jP,!0),DW=UP[0],LW=UP[1],NP=(e,t,r)=>r>32?mP(e,t,r):fP(e,t,r),DP=(e,t,r)=>r>32?hP(e,t,r):pP(e,t,r);function BW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=NP(l,u,1)^r[a],p=DP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=BP[s],c=NP(n,o,a),l=DP(n,o,a),u=LP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=DW[i],e[1]^=LW[i]}Zr(r)}class dm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Qt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Xp(this.state)}clone(){return this._cloneInto()}keccak(){VS(this.state32),BW(this.state32,this.rounds),VS(this.state32),this.posOut=0,this.pos=0}update(e){Li(this),De(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Li(this,!1),De(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Qt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Yp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Zr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new dm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var qP=(e,t,r,i={})=>oc(()=>new dm(t,e,r),i);var Js=qP(6,136,32,ko(8));var ZP=qP(6,72,64,ko(10));var MP=(e,t,r,i={})=>oc((n={})=>new dm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),FP=MP(31,168,16,ko(11)),si=MP(31,136,32,ko(12));function gx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function JP(e){return gx(e),(e&e-1)===0&&e!==0}function yx(e,t){gx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function KP(e){return gx(e),31-Math.clz32(e)}function HP(e){let t=e.length;if(t<2||!JP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=KP(t);for(let i=0;i<t;i++){let n=yx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var bx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=KP(r);if(!JP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)HP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,g=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,R=p++;A<g;A++){let D=o?n?r-R:R:A*S,U=k+A,T=k+A+g,H=i[D],B=u[T],V=u[U];if(l){let te=e.mul(B,H);u[U]=e.add(V,te),u[T]=e.sub(V,te)}else if(o)u[U]=e.add(B,V),u[T]=e.mul(e.sub(B,V),H);else u[U]=e.add(V,B),u[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)HP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ai=_o;function fm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function VP(e){return Uint8Array.from(e)}function Ks(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(De(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{De(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function pm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{De(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ht(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function Sx(e){return(1<<e)-1}var T_e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var WP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,R=i)=>{let D=A%R|0;return(D>=0?D|0:R+D|0)|0},l=(A,R=i)=>{let D=c(A,R)|0;return(D>R>>1?D-R|0:D)|0};function u(){let A=t(r);for(let R=0;R<r;R++){let D=yx(R,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[R]=Number(U)|0}return A}let f=u(),p={add:(A,R)=>c((A|0)+(R|0))|0,sub:(A,R)=>c((A|0)-(R|0))|0,mul:(A,R)=>c((A|0)*(R|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=bx(p,{dit:!1,...m}),g=bx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{g(A);for(let R=0;R<A.length;R++)A[R]=c(n*A[R]);return A}},bitsCoder:(A,R)=>{let D=Sx(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=(R.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[J++]=V&Sx(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[J++]=R.decode(V&D)}return H}}}}},jW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ht(o,i)}}},GP=jW(FP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Sr=256,Ui=3329,UW=3303,qW=17,{mod:Zu,nttZetas:ZW,NTT:Vs,bitsCoder:MW}=WP({N:Sr,Q:Ui,F:UW,ROOT_OF_UNITY:qW,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),xx={512:{N:Sr,Q:Ui,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Sr,Q:Ui,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Sr,Q:Ui,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},FW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ui/2)/Ui,decode:(r)=>r*Ui+t>>>e}},Uu=(e)=>MW(e,FW(e));function Ws(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]+t[r])}function HW(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]-t[r])}function JW(e,t,r,i,n){let o=Zu(t*i*n+e*r),s=Zu(e*i+t*r);return{c0:o,c1:s}}function mm(e,t){for(let r=0;r<Sr/2;r++){let i=ZW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=JW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function QP(e){let t=new Uint16Array(Sr);for(let r=0;r<Sr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<Sr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ui)t[r++]=o;if(r<Sr&&s<Ui)t[r++]=s}}return t}function qu(e,t,r,i){let n=e(i*Sr/4,t,r),o=new Uint16Array(Sr),s=Xp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Zu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var KW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Uu(1),u=Uu(c),f=Uu(a),p=Ks("publicKey",pm(Uu(12),t),32),m=pm(Uu(12),t),b=Ks("ciphertext",pm(f,t),u),g=Ks("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{De(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[R,D]=g.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Vs.encode(qu(r,D,V,o)));let H=i(R);for(let V=0;V<t;V++){let te=Vs.encode(qu(r,D,t+V,o));for(let J=0;J<t;J++){let N=QP(H.get(J,V));Ws(te,mm(N,U[J]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,R]),secretKey:m.encode(U)};return Ht(R,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[R,D]=p.decode(S),U=[];for(let J=0;J<t;J++)U.push(Vs.encode(qu(r,A,J,o)));let T=i(D),H=new Uint16Array(Sr),B=[];for(let J=0;J<t;J++){let N=qu(r,A,t+J,s),L=new Uint16Array(Sr);for(let I=0;I<t;I++){let z=QP(T.get(J,I));Ws(L,mm(z,U[I]))}Ws(N,Vs.decode(L)),B.push(N),Ws(H,mm(R[J],U[J])),Ht(L)}T.clean();let V=qu(r,A,2*t,s);Ws(V,Vs.decode(H));let te=l.decode(k);return Ws(te,V),Ht(R,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,R]=b.decode(S),D=m.decode(k),U=new Uint16Array(Sr);for(let T=0;T<t;T++)Ws(U,mm(D[T],Vs.encode(A[T])));return HW(R,Vs.decode(U)),Ht(U,D,A),l.encode(R)}}};function wx(e){let t=KW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ks("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ai(64))=>{De(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),b=a.encode([p,f,m,u.subarray(32)]);return Ht(p,m),{publicKey:f,secretKey:b}},getPublicKey:(u)=>{let[f,p,m,b]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=ai(32))=>{De(u,s.publicKey,"publicKey"),De(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(VP(p)));if(!fm(m,p))throw Ht(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ht(m);let b=i.create().update(f).update(r(u)).digest(),g=t.encrypt(u,f,b.subarray(32,64));return Ht(b.subarray(32)),{cipherText:g,sharedSecret:b.subarray(0,32)}},decapsulate:(u,f)=>{De(f,a.bytesLen,"secretKey"),De(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!fm(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,S,k,A]=a.decode(f),R=t.decrypt(u,g),D=i.create().update(R).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,R,D.subarray(32,64)),H=fm(u,T),B=n.create({dkLen:32}).update(A).update(u).digest();return Ht(R,T,!H?U:B),H?U:B}}}function VW(e,t,r){return si.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var vx={HASH256:Js,HASH512:ZP,KDF:si,XOF:GP,PRF:VW},j_e=wx({...vx,...xx[512]}),Mu=wx({...vx,...xx[768]}),YP=wx({...vx,...xx[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function WW(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ai(r.seed))=>{De(s,r.seed,"seed");let a=o.isLE?Io(s):Eo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function _x(e,t=!1){let r=WW(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ai(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ht(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Fu(e,t){return Ks(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function kx(e){return(t,r)=>e(t,{dkLen:r})}function GW(e,t,...r){let i=Fu(r,"seed"),n=Fu(r,"publicKey");if(e===void 0)e=i.bytesLen;Qt(e);function o(s){De(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ai(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ht(a),Ht(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function hm(e,t,r,i,...n){let o=GW(e,r,...n),s=Fu(n,"cipherText"),a=Fu(n,"publicKey"),c=Fu(n,"msg");if(t===void 0)t=c.bytesLen;return Qt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ai(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),g=m.map((k)=>k.cipherText),S={sharedSecret:i(f,g,b),cipherText:s.encode(g)};return Ht(b,g),S},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),b=n.map((g,S)=>g.decapsulate(f[S],m[S]));return i(p,f,b)}}}function XP(e,t,r,i,n){return yn(i),yn(n),hm(32,32,kx(i),(o,s,a)=>n(Ut(a[0],a[1],s[1],o[1],Ao(e))),t,r)}var G_e=XP("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Mu,_x(mx,!0),si,Js),Q_e=XP("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",YP,_x(OP,!0),si,Js);function QW(e,t,r,i,n){return yn(i),yn(n),hm(32,32,kx(i),(o,s,a)=>{let c=Ut(a[0],a[1],s[0],o[0],s[1],o[1],Ao(e)),l=32,u=Ut(Ao("hybrid_prk"),c),f=PP(n,u),p=Ut(sc(32,2),Ao("shared_secret"),Ao("")),m=zP(n,f,p,32);return Ht(f,p,u,c),m},t,r)}var ez=_x(CP),Y_e=QW("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Mu,ez,si,um),YW=(()=>hm(32,32,kx(si),(e,t,r)=>Js(Ut(r[0],r[1],t[1],e[1],Ao("\\.//^\\"))),Mu,ez))();function XW(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ai(i)){return De(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ai(i)){De(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ht(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function eG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=XW(r,n,o,i),a=64,c=a+i;return hm(32,32,(l)=>{De(l,32);let u=si(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Ut(f,p)},(l,u,f)=>Js(Ut(f[0],f[1],u[1],l[1],Ao(e))),t,s)}var tG=(()=>eG("MLKEM768-P256",Mu,mx,128))();var gm=YW,tz=tG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ft=(e,t,r)=>nr(e,t,r),Ix=Pt,dc=Up,ar=(...e)=>RS(...e),fc=(e)=>wu(e),pc=IS,mc=(e)=>Pi(e),bm=BigInt(0),Ex=BigInt(1);function qi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!ym(e))throw RangeError("positive bigint expected, got "+e)}else Ix(e);return e}function ci(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Hu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function rz(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?bm:BigInt("0x"+e)}function Gs(e){return rz(Up(e))}function zn(e){return rz(Up($o(nr(e)).reverse()))}function xm(e,t){if(Pt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return wu(r.padStart(t*2,"0"))}function Ju(e,t){return xm(e,t).reverse()}function nz(e,t){if(e=ft(e),t=ft(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(ft(e))}function wm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var ym=(e)=>typeof e==="bigint"&&bm<=e;function rG(e,t,r){return ym(e)&&ym(t)&&ym(r)&&t<=e&&e<r}function Zi(e,t,r,i){if(!rG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function hc(e){if(e<bm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>bm;e>>=Ex,t+=1);return t}var Ku=(e)=>(Ex<<BigInt(e))-Ex;function iz(e,t,r){if(Pt(e,"hashLen"),Pt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,ar(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return ar(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var Ax=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cr=BigInt(0),Tt=BigInt(1),Qs=BigInt(2),cz=BigInt(3),lz=BigInt(4),uz=BigInt(5),nG=BigInt(7),dz=BigInt(8),iG=BigInt(9),fz=BigInt(16);function xt(e,t){if(t<=cr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=cr?r:t+r}function xn(e,t,r){if(t<cr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >cr)i*=i,i%=r;return i}function oz(e,t){if(e===cr)throw Error("invert: expected non-zero number");if(t<=cr)throw Error("invert: expected positive modulus, got "+t);let r=xt(e,t),i=t,n=cr,o=Tt,s=Tt,a=cr;while(r!==cr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==Tt)throw Error("invert: does not exist");return xt(n,t)}function Tx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function pz(e,t){let r=e,i=(r.ORDER+Tt)/lz,n=r.pow(t,i);return Tx(r,n,t),n}function oG(e,t){let r=e,i=(r.ORDER-uz)/dz,n=r.mul(t,Qs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Qs),o),c=r.mul(s,r.sub(a,r.ONE));return Tx(r,c,t),c}function sG(e){let t=vm(e),r=mz(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+nG)/fz;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),b=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,f,b),f=l.cmov(m,p,g);let S=l.eql(l.sqr(f),c),k=l.cmov(u,f,S);return Tx(l,k,c),k}}function mz(e){if(e<cz)throw Error("sqrt is not defined for small field");let t=e-Tt,r=0;while(t%Qs===cr)t/=Qs,r++;let i=Qs,n=vm(e);while(sz(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return pz;let o=n.pow(i,t),s=(t+Tt)/Qs;return function(c,l){let u=c;if(u.is0(l))return l;if(sz(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),b=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,S=u.sqr(m);while(!u.eql(S,u.ONE))if(g++,S=u.sqr(S),g===f)throw Error("Cannot find square root");let k=Tt<<BigInt(f-g-1),A=u.pow(p,k);f=g,p=u.sqr(A),m=u.mul(m,p),b=u.mul(b,A)}return b}}function aG(e){if(e%lz===cz)return pz;if(e%dz===uz)return oG;if(e%fz===iG)return sG(e);return mz(e)}var Mi=(e,t)=>(xt(e,t)&Tt)===Tt,cG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Rx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=cG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),ci(e.BYTES,"BYTES"),ci(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function lG(e,t,r){let i=e;if(r<cr)throw Error("invalid exponent, negatives unsupported");if(r===cr)return i.ONE;if(r===Tt)return t;let n=i.ONE,o=t;while(r>cr){if(r&Tt)n=i.mul(n,o);o=i.sqr(o),r>>=Tt}return n}function Vu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function sz(e,t){let r=e,i=(r.ORDER-Tt)/Qs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function uG(e,t){if(t!==void 0)Ix(t);if(e<=cr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=hc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var az=new WeakMap;class Cx{ORDER;BITS;BYTES;isLE;ZERO=cr;ONE=Tt;_lengths;_mod;constructor(e,t={}){if(e<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=uG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return xt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return cr<=e&&e<this.ORDER}is0(e){return e===cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Tt)===Tt}neg(e){return xt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return xt(e*e,this.ORDER)}add(e,t){return xt(e+t,this.ORDER)}sub(e,t){return xt(e-t,this.ORDER)}mul(e,t){return xt(e*t,this.ORDER)}pow(e,t){return lG(this,e,t)}div(e,t){return xt(e*oz(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return oz(e,this.ORDER)}sqrt(e){let t=az.get(this);if(!t)az.set(this,t=aG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Ju(e,this.BYTES):xm(e,this.BYTES)}fromBytes(e,t=!1){ft(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?zn(e):Gs(e);if(s)a=xt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Vu(this,e)}cmov(e,t,r){return qi(r,"condition"),r?t:e}}Object.freeze(Cx.prototype);function vm(e,t={}){return new Cx(e,t)}function hz(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Tt)throw Error("field order must be greater than 1");let t=hc(e-Tt);return Math.ceil(t/8)}function Ox(e){let t=hz(e);return t+Math.ceil(t/2)}function gz(e,t,r=!1){ft(e);let i=e.length,n=hz(t),o=Math.max(Ox(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?zn(e):Gs(e),a=xt(s,t-Tt)+Tt;return r?Ju(a,n):xm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gc=BigInt(0),Ys=BigInt(1);function Wu(e,t){let r=t.negate();return e?r:t}function Xs(e,t){let r=Vu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function xz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function $x(e,t){xz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Ku(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function yz(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ys;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var Px=new WeakMap,wz=new WeakMap;function zx(e){return wz.get(e)||1}function bz(e){if(e!==gc)throw Error("invalid wNAF")}class Gu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>gc){if(t&Ys)r=r.add(i);i=i.double(),t>>=Ys}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=$x(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=$x(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=yz(r,s,o);if(r=a,l)n=n.add(Wu(f,t[p]));else i=i.add(Wu(u,t[c]))}return bz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=$x(e,this.bits);for(let o=0;o<n.windows;o++){if(r===gc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=yz(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return bz(r),i}getPrecomputes(e,t,r){let i=Px.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);Px.set(t,i)}}return i}cached(e,t,r){let i=zx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=zx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){xz(t,this.bits),wz.set(e,t),Px.delete(e)}hasCache(e){return zx(e)!==1}}function vz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>gc||i>gc){if(r&Ys)o=o.add(n);if(i&Ys)s=s.add(n);n=n.double(),r>>=Ys,i>>=Ys}return{p1:o,p2:s}}function Sz(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Rx(t),t}else return vm(e,{isLE:r})}function _m(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>gc))throw Error(`CURVE.${c} must be positive bigint`)}let n=Sz(t.p,r.Fp,i),o=Sz(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Qu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Yu(e,t){if(ci(e),ci(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function dG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function fG(e){if(!pc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?wm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Nx(e,t,r,i){if(ft(e),ci(r),t=fG(t),t.length>255)t=i(ar(wm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ar(t,Yu(t.length,1)),c=new Uint8Array(o),l=Yu(r,2),u=Array(s),f=i(ar(c,e,l,Yu(0,1),a));u[0]=i(ar(f,Yu(1,1),a));for(let m=1;m<s;m++){let b=[dG(f,u[m-1]),Yu(m+1,1),a];u[m]=i(ar(...b))}return ar(...u).slice(0,r)}var _z="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var kz=(e,t)=>(e+(e>=0?t:-t)/Iz)/t;function pG(e,t,r){Zi("scalar",e,li,r);let[[i,n],[o,s]]=t,a=kz(s*e,r),c=kz(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<li,p=u<li;if(f)l=-l;if(p)u=-u;let m=Ku(Math.ceil(hc(r)/2))+Po;if(l<li||l>=m||u<li||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function Lx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Dx(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(qi(r.lowS,"lowS"),qi(r.prehash,"prehash"),r.format!==void 0)Lx(r.format);return r}class Ez extends Error{constructor(e=""){super(e)}}var Nn={Err:Ez,_tlv:{encode:(e,t)=>{let{Err:r}=Nn;if(ci(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Hu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Hu(n.length/2|128):"";return Hu(e)+o+n+t},decode(e,t){let{Err:r}=Nn;t=ft(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Nn;if(Sm(e),e<li)throw new t("integer: negative integers are not allowed");let r=Hu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Nn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Gs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Nn,n=ft(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Nn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Nn._tlv);Object.freeze(Nn._int);Object.freeze(Nn);var li=BigInt(0),Po=BigInt(1),Iz=BigInt(2),km=BigInt(3),mG=BigInt(4);function Az(e,t={}){let r=_m("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=Rz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(J,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(qi(L,"isCompressed"),L){f();let K=!i.isOdd(z);return ar(Tz(K),P)}else return ar(Uint8Array.of(4),P,i.toBytes(z))}function m(J){ft(J,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=u,I=J.length,z=J[0],P=J.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let K=i.fromBytes(P);if(!i.isValid(K))throw Error("bad point: is not on curve, wrong x");let j=S(K),Q;try{Q=i.sqrt(j)}catch(fe){let C=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:K,y:Q}}else if(I===L&&z===4){let K=i.BYTES,j=i.fromBytes(P.subarray(0,K)),Q=i.fromBytes(P.subarray(K,K*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function S(J){let N=i.sqr(J),L=i.mul(N,J);return i.add(i.add(L,i.mul(J,o.a)),o.b)}function k(J,N){let L=i.sqr(N),I=S(J);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,km),mG),R=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,R)))throw Error("bad curve params: a or b");function D(J,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${J}`);return N}function U(J){if(!(J instanceof B))throw Error("Weierstrass Point expected")}function T(J){if(!c||!c.basises)throw Error("no endo");return pG(J,c.basises,n.ORDER)}function H(J,N,L,I,z){return L=new B(i.mul(L.X,J),L.Y,L.Z),N=Wu(I,N),L=Wu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(J,N,L){this.X=D("x",J),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(J){let{x:N,y:L}=J||{};if(!J||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(J instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(J){let N=B.fromAffine(g(ft(J,void 0,"point")));return N.assertValidity(),N}static fromHex(J){return B.fromBytes(fc(J))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(J=8,N=!0){if(te.createCache(this,J),!N)this.multiply(km);return this}assertValidity(){let J=this;if(J.is0()){if(t.allowInfinityPoint&&i.is0(J.X)&&i.eql(J.Y,i.ONE)&&i.is0(J.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=J.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!J.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:J}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(J)}equals(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.eql(i.mul(N,K),i.mul(z,I)),Q=i.eql(i.mul(L,K),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:J,b:N}=o,L=i.mul(N,km),{X:I,Y:z,Z:P}=this,K=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(I,z);return C=i.add(C,C),Q=i.mul(I,P),Q=i.add(Q,Q),K=i.mul(J,Q),j=i.mul(L,fe),j=i.add(K,j),K=i.sub(ae,j),j=i.add(ae,j),j=i.mul(K,j),K=i.mul(C,K),Q=i.mul(L,Q),fe=i.mul(J,fe),C=i.sub(E,fe),C=i.mul(J,C),C=i.add(C,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,C),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,C),K=i.sub(K,E),Q=i.mul(fe,ae),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(K,j,Q)}add(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=o.a,fe=i.mul(o.b,km),C=i.mul(N,z),xe=i.mul(L,P),Ae=i.mul(I,K),Pe=i.add(N,L),$e=i.add(z,P);Pe=i.mul(Pe,$e),$e=i.add(C,xe),Pe=i.sub(Pe,$e),$e=i.add(N,I);let _e=i.add(z,K);return $e=i.mul($e,_e),_e=i.add(C,Ae),$e=i.sub($e,_e),_e=i.add(L,I),j=i.add(P,K),_e=i.mul(_e,j),j=i.add(xe,Ae),_e=i.sub(_e,j),E=i.mul(ae,$e),j=i.mul(fe,Ae),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(C,C),xe=i.add(xe,C),Ae=i.mul(ae,Ae),$e=i.mul(fe,$e),xe=i.add(xe,Ae),Ae=i.sub(C,Ae),Ae=i.mul(ae,Ae),$e=i.add($e,Ae),C=i.mul(xe,$e),Q=i.add(Q,C),C=i.mul(_e,$e),j=i.mul(Pe,j),j=i.sub(j,C),C=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,C),new B(j,Q,E)}subtract(J){return U(J),this.add(J.negate())}is0(){return this.equals(B.ZERO)}multiply(J){let{endo:N}=t;if(!n.isValidNot0(J))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(K)=>Xs(B,K));if(N){let{k1neg:P,k1:K,k2neg:j,k2:Q}=T(J),{p:E,f:ae}=z(K),{p:fe,f:C}=z(Q);I=ae.add(C),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:K}=z(J);L=P,I=K}return Xs(B,[L,I])[0]}multiplyUnsafe(J){let{endo:N}=t,L=this,I=J;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===li||L.is0())return B.ZERO;if(I===Po)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:K,k2:j}=T(I),{p1:Q,p2:E}=vz(B,L,P,j);return H(N.beta,Q,E,z,K)}else return te.unsafe(L,I)}toAffine(J){let N=this,L=J,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:J}=t;if(s===Po)return!0;if(J)return J(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:J}=t;if(s===Po)return this;if(J)return J(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Po)return this.is0();return this.clearCofactor().is0()}toBytes(J=!0){return qi(J,"isCompressed"),this.assertValidity(),b(B,this,J)}toHex(J=!0){return dc(this.toBytes(J))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Gu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function Tz(e){return Uint8Array.of(e?2:3)}function Rz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function hG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?mc:t.randomBytes,n=Object.assign(Rz(e.Fp,r),{seed:Math.max(Ox(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,gz(ft(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n,k=r._lengths;if(!pc(m))return;let A=ft(m,void 0,"key").length,R=A===g||A===S,D=A===b||!!k?.includes(A);if(R&&D)return;return R}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Qu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function Cz(e,t,r={}){let i=t;$i(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?mc:r.randomBytes,o=r.hmac===void 0?(z,P)=>ri(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=hG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*Iz+Po<s.ORDER;function k(z){let P=c>>Po;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function R(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){Lx(P);let K=b.signature,j=P==="compact"?K:P==="recovered"?K+1:void 0;return ft(z,j)}class U{r;s;recovery;constructor(z,P,K){if(this.r=A("r",z),this.s=A("s",P),K!=null){if(R(),![0,1,2,3].includes(K))throw Error("invalid recovery id");this.recovery=K}Object.freeze(this)}static fromBytes(z,P=g.format){D(z,P);let K;if(P==="der"){let{r:ae,s:fe}=Nn.toSig(ft(z));return new U(ae,fe)}if(P==="recovered")K=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),K)}static fromHex(z,P){return this.fromBytes(fc(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:K}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),ae=e.fromBytes(ar(Tz((j&1)===0),E)),fe=a.inv(Q),C=H(ft(z,void 0,"msgHash")),xe=a.create(-C*fe),Ae=a.create(K*fe),Pe=e.BASE.multiplyUnsafe(xe).add(ae.multiplyUnsafe(Ae));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=g.format){if(Lx(z),z==="der")return fc(Nn.hexFromSig(this));let{r:P,s:K}=this,j=a.toBytes(P),Q=a.toBytes(K);if(z==="recovered")return R(),ar(Uint8Array.of(this.assertRecovery()),j,Q);return ar(j,Q)}toHex(z){return dc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let K=Gs(P),j=P.length*8-l;return j>0?K>>BigInt(j):K}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Ku(l);function V(z){return Zi("num < 2^"+l,z,li,B),a.toBytes(z)}function te(z,P){return ft(z,void 0,"message"),P?ft(i(z),void 0,"prehashed message"):z}function J(z,P,K){let{lowS:j,prehash:Q,extraEntropy:E}=Dx(K,g);z=te(z,Q);let ae=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let C=[V(fe),V(ae)];if(E!=null&&E!==!1){let $e=E===!0?n(b.secretKey):E;C.push(ft($e,void 0,"extraEntropy"))}let xe=ar(...C),Ae=ae;function Pe($e){let _e=T($e);if(!a.isValidNot0(_e))return;let We=a.inv(_e),Le=e.BASE.multiply(_e).toAffine(),Xe=a.create(Le.x);if(Xe===li)return;let dt=a.create(We*a.create(Ae+Xe*fe));if(dt===li)return;let kt=(Le.x===Xe?0:2)|Number(Le.y&Po),jt=dt;if(j&&k(dt))jt=a.neg(dt),kt^=1;return new U(Xe,jt,S?void 0:kt)}return{seed:xe,k2sig:Pe}}function N(z,P,K={}){let{seed:j,k2sig:Q}=J(z,P,K);return iz(i.outputLen,a.BYTES,o)(j,Q).toBytes(K.format)}function L(z,P,K,j={}){let{lowS:Q,prehash:E,format:ae}=Dx(j,g);if(K=ft(K,void 0,"publicKey"),P=te(P,E),!pc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,ae);try{let fe=U.fromBytes(z,ae),C=e.fromBytes(K);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Ae}=fe,Pe=H(P),$e=a.inv(Ae),_e=a.create(Pe*$e),We=a.create(xe*$e),Le=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(We));if(Le.is0())return!1;return a.create(Le.x)===xe}catch(fe){return!1}}function I(z,P,K={}){let{prehash:j}=Dx(K,g);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var yG=Az(gG),yc=Cz(yG,zt);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zo=BigInt(0),Mr=BigInt(1),Bx=BigInt(2),bG=BigInt(8);function SG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function Oz(e,t={}){let r=t,i=_m("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=Bx<<BigInt(o.BYTES*8)-Mr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,S))}}catch(k){return{isValid:!1,value:zo}}}:r.uvRatio;if(!SG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,S,k=!1){let A=k?Mr:zo;return Zi("coordinate "+g,S,A,c),S}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Mr,l(s.Gx*s.Gy));static ZERO=new m(zo,Mr,Mr,zo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,S,k,A){this.X=f("x",g),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=g||{};return f("x",S),f("y",k),new m(S,k,Mr,l(S*k))}static fromBytes(g,S=!1){let k=n.BYTES,{a:A,d:R}=s;g=$o(ft(g,k,"point")),qi(S,"zip215");let D=$o(g),U=g[k-1];D[k-1]=U&-129;let T=zn(D),H=S?c:n.ORDER;Zi("point.y",T,zo,H);let B=l(T*T),V=l(B-Mr),te=l(R*B-A),{isValid:J,value:N}=u(V,te);if(!J)throw Error("bad point: invalid y coordinate");let L=(N&Mr)===Mr,I=(U&128)!==0;if(!S&&N===zo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(g,S=!1){return m.fromBytes(fc(g),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,S=!0){if(b.createCache(this,g),!S)this.multiply(Bx);return this}assertValidity(){let g=this,{a:S,d:k}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:R,Z:D,T:U}=g,T=l(A*A),H=l(R*R),B=l(D*D),V=l(B*B),te=l(T*S),J=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(J!==N)throw Error("bad point: equation left != right (1)");let L=l(A*R),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:S,Y:k,Z:A}=this,{X:R,Y:D,Z:U}=g,T=l(S*U),H=l(R*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:S,Y:k,Z:A}=this,R=l(S*S),D=l(k*k),U=l(Bx*l(A*A)),T=l(g*R),H=S+k,B=l(l(H*H)-R-D),V=T+D,te=V-U,J=T-D,N=l(B*te),L=l(V*J),I=l(B*J),z=l(te*V);return new m(N,L,z,I)}add(g){p(g);let{a:S,d:k}=s,{X:A,Y:R,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=g,te=l(A*T),J=l(R*H),N=l(U*k*V),L=l(D*B),I=l((A+R)*(T+H)-te-J),z=L-N,P=L+N,K=l(J-S*te),j=l(I*z),Q=l(P*K),E=l(I*K),ae=l(z*P);return new m(j,Q,ae,E)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,g,(A)=>Xs(m,A));return Xs(m,[S,k])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===zo)return m.ZERO;if(this.is0()||g===Mr)return this;return b.unsafe(this,g,(S)=>Xs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(g){let S=this,k=g,{X:A,Y:R,Z:D}=S,U=S.is0();if(k==null)k=U?bG:n.inv(D);let T=l(A*k),H=l(R*k),B=n.mul(D,k);if(U)return{x:zo,y:Mr};if(B!==Mr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Mr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=g&Mr?128:0,k}toHex(){return dc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Gu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class jx{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){Ax()}static fromHex(e){Ax()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return dc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Xu=BigInt(0),bc=BigInt(1),Em=BigInt(2);function xG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function $z(e){let t=xG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?mc:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Em**BigInt(254):Em**BigInt(447),b=a?BigInt(8)*Em**BigInt(251)-bc:BigInt(4)*Em**BigInt(445)-bc,g=m+b+bc,S=(I)=>xt(I,r),k=A(f);function A(I){return Ju(S(I),u)}function R(I){let z=$o(ft(I,u,"uCoordinate"));if(a)z[31]&=127;return S(zn(z))}function D(I){return zn(n($o(ft(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Xu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){Zi("u",I,Xu,r),Zi("scalar",z,m,g);let P=z,K=I,j=bc,Q=Xu,E=I,ae=bc,fe=Xu;for(let xe=BigInt(l-1);xe>=Xu;xe--){let Ae=P>>xe&bc;fe^=Ae,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Ae;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:u,publicKey:u,seed:u},N=(I)=>(I=I===void 0?c(u):I,ft(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(J),Object.freeze(L),Object.freeze({keygen:Qu(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wG=BigInt(0),Fi=BigInt(1),Pz=BigInt(2),vG=BigInt(3),_G=BigInt(5),kG=BigInt(8),ta=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Mx=(()=>({p:ta,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:kG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Dz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=ta,a=e*e%o*e%o,c=xn(a,Pz,o)*a%o,l=xn(c,Fi,o)*e%o,u=xn(l,_G,o)*l%o,f=xn(u,t,o)*u%o,p=xn(f,r,o)*f%o,m=xn(p,i,o)*p%o,b=xn(m,n,o)*m%o,g=xn(b,n,o)*m%o,S=xn(g,t,o)*u%o;return{pow_p_5_8:xn(S,Pz,o)*e%o,b2:a}}function EG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Ux=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Fx(e,t){let r=ta,i=xt(t*t*t,r),n=xt(i*i*t,r),o=Dz(e*n).pow_p_5_8,s=xt(e*i*o,r),a=xt(t*s*s,r),c=s,l=xt(s*Ux,r),u=a===e,f=a===xt(-e,r),p=a===xt(-e*Ux,r);if(u)s=c;if(f||p)s=l;if(Mi(s,r))s=xt(-s,r);return{isValid:u||f,value:s}}var ea=Oz(Mx,{uvRatio:Fx}),No=(()=>ea.Fp)(),Lz=(()=>ea.Fn)();var Im=(()=>{let e=ta;return $z({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Dz(t);return xt(xn(r,vG,e)*i,e)},adjustScalarBytes:EG})})();var qx=Ux,IG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),AG=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),TG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),RG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),zz=(e)=>Fx(Fi,e),CG=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Zx=(e)=>No.create(zn(e)&CG);function Nz(e){let{d:t}=Mx,r=ta,i=(k)=>No.create(k),n=i(qx*e*e),o=i((n+Fi)*TG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Fx(o,a),u=i(l*e);if(!Mi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Fi)*RG-a),p=l*l,m=i((l+l)*a),b=i(f*IG),g=i(Fi-p),S=i(Fi+p);return new ea(i(m*S),i(g*b),i(b*S),i(m*g))}class Or extends jx{static BASE=(()=>new Or(ea.BASE))();static ZERO=(()=>new Or(ea.ZERO))();static Fp=(()=>No)();static Fn=(()=>Lz)();constructor(e){super(e)}static fromAffine(e){return new Or(ea.fromAffine(e))}assertSame(e){if(!(e instanceof Or))throw Error("RistrettoPoint expected")}init(e){return new Or(e)}static fromBytes(e){nr(e,32);let{a:t,d:r}=Mx,i=ta,n=(R)=>No.create(R),o=Zx(e);if(!nz(No.toBytes(o),e)||Mi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Fi+t*s),c=n(Fi-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=zz(n(f*u)),b=n(m*c),g=n(m*b*f),S=n((o+o)*b);if(Mi(S,i))S=n(-S);let k=n(a*g),A=n(S*k);if(!p||Mi(A,i)||k===wG)throw Error("invalid ristretto255 encoding 2");return new Or(new ea(S,k,Fi,A))}static fromHex(e){return Or.fromBytes(wu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=ta,o=(g)=>No.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=zz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(Mi(i*p,n)){let g=o(t*qx),S=o(e*qx);e=g,t=S,m=o(u*AG)}else m=f;if(Mi(e*p,n))t=o(-t);let b=o((r-t)*m);if(Mi(b,n))b=o(-b);return No.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>No.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Or.ZERO)}}Object.freeze(Or.BASE);Object.freeze(Or.ZERO);Object.freeze(Or.prototype);Object.freeze(Or);var OG=Object.freeze({Point:Or,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Nx(e,r,64,Fp);return OG.deriveToCurve(i)},hashToScalar(e,t={DST:_z}){let r=Nx(e,t.DST,64,Fp);return Lz.create(zn(r))},deriveToCurve(e){nr(e,64);let t=Zx(e.subarray(0,32)),r=Nz(t),i=Zx(e.subarray(32,64)),n=Nz(i);return new Or(r.add(n))}});var Bz=!1,$G=!1;async function jz(e,t){if($G)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Am(e,t){return await jz(async()=>{let r=Hx(e)?e:await zG(e),i=await crypto.subtle.importKey("raw",NG(t),{name:"X25519"},Bz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Hx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMult(e,t)})}async function ed(e){return await jz(async()=>Am(e,Im.GuBytes),()=>{if(Hx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMultBase(e)})}var PG=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function zG(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...PG,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},Bz,["deriveBits"])}function Hx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function NG(e){return e}class Jx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),LG(ra(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=ra(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:ra(this.transcript)}}}function LG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function ra(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Sc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Tm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Kx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Uz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function qz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=ra(i),s=o.subarray(0,t),a=Sc(e,o.subarray(t));return{data:s,rest:a}}class ui{args;body;constructor(e,t){this.args=e,this.body=t}}async function BG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=yr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=ra(i);return{s:new ui(r,n)}}async function Zz(e){let t=new Jx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await BG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=yr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Sc(e,a)}}}function Vx(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let r of e){t.push("-> "+r.args.join(" ")+`
 `);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(yr.encode(r.body.subarray(i,n))+`
 `)}if(r.body.length%48===0)t.push(`

package/dist/index.js CHANGED Viewed

@@ -743,7 +743,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),o}async function j9(e,t){let r=await Et(e),i=r.users.find((n)=>n.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:r.pilot,user:i}}async function U9(e){let t=await Ive(Ri(Ave(),"brains-ops-watchdog-smoke-")),r=Ri(t,"id_ed25519"),i=Ri(t,"known_hosts");try{let n=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${n}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=Tve.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await wu(r,Ove(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await Eve(r,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await wu(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:r,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(n){throw await QO(t,{recursive:!0,force:!0}),n}}async function GO(e,t,r){return e.commandRunner("ssh",[...q9(e),`root@${e.serverIp}`,"bash","-s","--",t,r],{stdin:YO()})}async function Rve(e,t,r){return e.commandRunner("scp",[...q9(e),"-r",`root@${e.serverIp}:${t}/.`,r])}function q9(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function Cve(e){try{return await kve(e),!0}catch{return!1}}async function AS(e,t,r){await Promise.all([wu(Ri(e,`${t}.stdout.log`),r.stdout),wu(Ri(e,`${t}.stderr.log`),r.stderr)])}function Ove(e){return`${e.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var D9,Tve;var RS=x(async()=>{Re();$9();yn();Dp();await O9();D9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),Tve=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{access as g2,chmod as wE,mkdir as Ch,readFile as b2,writeFile as y2}from"fs/promises";import{dirname as wY,join as Lc}from"path";import{fileURLToPath as vY}from"url";var qp={name:"@rizom/ops",version:"0.2.0-alpha.634",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Ls();Dc();var _Y=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],vE=new Set([".kamal/hooks/pre-deploy"]),kY=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),EY=vY(new URL("../templates/rover-pilot/",import.meta.url)),IY=[`service: rover
+`}var D9,Tve;var RS=x(async()=>{Re();$9();yn();Dp();await O9();D9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),Tve=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{access as g2,chmod as wE,mkdir as Ch,readFile as b2,writeFile as y2}from"fs/promises";import{dirname as wY,join as Lc}from"path";import{fileURLToPath as vY}from"url";var qp={name:"@rizom/ops",version:"0.2.0-alpha.635",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Ls();Dc();var _Y=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],vE=new Set([".kamal/hooks/pre-deploy"]),kY=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),EY=vY(new URL("../templates/rover-pilot/",import.meta.url)),IY=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 servers:

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.634",
+  "version": "0.2.0-alpha.635",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",