npm - @rizom/ops - Versions diffs - 0.2.0-alpha.642 → 0.2.0-alpha.643 - Mend

@rizom/ops 0.2.0-alpha.642 → 0.2.0-alpha.643

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -733,7 +733,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var O9,Ove;var LO=x(async()=>{Ae();A9();Un();Op();await I9();O9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),Ove=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{parseArgs as b7}from"util";function St(e){return e}class Dp extends Error{constructor(e){super(e);this.name="CliUsageError"}}function S7(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function x7(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function w7(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function UO(e,t){let r=S7(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=b7({args:e,options:x7(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(w7(s))throw new Dp(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function qO(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>`  ${r.label.padEnd(t)}  ${r.description}`)}function v7(e){return qO(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function _7(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function ZO(e){return qO(Object.entries(e).map(([t,r])=>({label:_7(t,r),description:r.description})))}function MO(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function k7(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function E7(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=k7(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(...ZO(n.flags));return i}function FO(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...v7(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...ZO(e.globalFlags));return t.push(...E7(e.commands)),t.join(`
-`)}function HO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function bt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Ns(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Lp={name:"@rizom/ops",version:"0.2.0-alpha.642",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as eQ,mkdirSync as tQ,readFileSync as pw,writeFileSync as mw}from"fs";import{dirname as rQ,join as eN}from"path";function AS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Pt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function nr(e,t,r=""){let i=AS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function $i(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Pt(e.outputLen),Pt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Xa(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bp(e,t){nr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function jp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Tr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ec(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function On(e,t){return e<<32-t|e>>>t}function rt(e,t){return e<<t|e>>>32-t>>>0}var A7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function T7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function R7(e){for(let t=0;t<e.length;t++)e[t]=T7(e[t]);return e}var TS=A7?(e)=>e:R7,JO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),C7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Up(e){if(nr(e),JO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=C7[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function KO(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function wu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(JO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=KO(e.charCodeAt(o)),a=KO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function O7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function RS(e,t=""){if(typeof e==="string")return O7(e);return nr(e,void 0,t)}function CS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];nr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function qp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function OS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Pi(e=32){Pt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var $S=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class PS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if($i(e),nr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Tr(i)}update(e){return Xa(this),this.iHash.update(e),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ri=(()=>{let e=(t,r,i)=>new PS(t,r).update(i).digest();return e.create=(t,r)=>new PS(t,r),e})();function vu(e,t,r){if($i(e),r===void 0)r=new Uint8Array(e.outputLen);return ri(e,r,t)}var zS=Uint8Array.of(0),VO=Uint8Array.of();function NS(e,t,r,i=32){$i(e),Pt(i,"length"),nr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=VO;else nr(r,void 0,"info");let s=new Uint8Array(o*n),a=ri.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)zS[0]=u+1,c.update(u===0?VO:l).update(r).update(zS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Tr(l,zS),s.slice(0,i)}var bo=(e,t,r,i,n)=>NS(e,vu(e,t,r),i,n);function WO(e,t,r){return e&t^~e&r}function GO(e,t,r){return e&t^e&r^t&r}class Zp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ec(this.buffer)}update(e){Xa(this),nr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ec(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Tr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ec(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Mp=BigInt(4294967295),QO=BigInt(32);function $7(e,t=!1){if(t)return{h:Number(e&Mp),l:Number(e>>QO&Mp)};return{h:Number(e>>QO&Mp)|0,l:Number(e&Mp)|0}}function YO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=$7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var DS=(e,t,r)=>e>>>r,LS=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,_u=(e,t,r)=>e<<64-r|t>>>r-32,ku=(e,t,r)=>e>>>r-32|t<<64-r;function ni(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var XO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),e$=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,t$=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),r$=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,n$=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),i$=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var z7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),So=new Uint32Array(64);class o$ extends Zp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)So[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=So[u-15],p=So[u-2],m=On(f,7)^On(f,18)^f>>>3,b=On(p,17)^On(p,19)^p>>>10;So[u]=b+So[u-7]+m+So[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=On(s,6)^On(s,11)^On(s,25),p=l+f+WO(s,a,c)+z7[u]+So[u]|0,b=(On(r,2)^On(r,13)^On(r,22))+GO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Tr(So)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Tr(this.buffer)}}class s$ extends o${A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var a$=(()=>YO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),N7=(()=>a$[0])(),D7=(()=>a$[1])(),xo=new Uint32Array(80),wo=new Uint32Array(80);class c$ extends Zp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)xo[A]=e.getUint32(t),wo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=xo[A-15]|0,D=wo[A-15]|0,U=Ds(R,D,1)^Ds(R,D,8)^DS(R,D,7),T=Ls(R,D,1)^Ls(R,D,8)^LS(R,D,7),H=xo[A-2]|0,B=wo[A-2]|0,V=Ds(H,B,19)^_u(H,B,61)^DS(H,B,6),te=Ls(H,B,19)^ku(H,B,61)^LS(H,B,6),K=t$(T,te,wo[A-7],wo[A-16]),N=r$(K,U,V,xo[A-7],xo[A-16]);xo[A]=N|0,wo[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Ds(u,f,14)^Ds(u,f,18)^_u(u,f,41),D=Ls(u,f,14)^Ls(u,f,18)^ku(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=n$(k,D,T,D7[A],wo[A]),B=i$(H,S,R,U,N7[A],xo[A]),V=H|0,te=Ds(r,i,28)^_u(r,i,34)^_u(r,i,39),K=Ls(r,i,28)^ku(r,i,34)^ku(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=ni(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=XO(V,K,L);r=e$(I,B,te,N),i=I|0}({h:r,l:i}=ni(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ni(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ni(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ni(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=ni(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=ni(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=ni(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=ni(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Tr(xo,wo)}destroy(){this.destroyed=!0,Tr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class l$ extends c${Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(64)}}var zt=OS(()=>new s$,$S(1));var Fp=OS(()=>new l$,$S(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Wp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function US(e){if(!Wp(e))throw TypeError("Uint8Array expected")}function m$(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function h$(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function vo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Iu(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Kp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Jp(e,t){if(!m$(!0,t))throw TypeError(`${e}: array of strings expected`)}function qS(e,t){if(!m$(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Jp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Kp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Kp(n),n.map((o)=>{vo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return vo("join",e),{encode:(t)=>(Jp("join.decode",t),t.join(e)),decode:(t)=>(vo("join.decode",t),t.split(e))}}function Gp(e,t="="){return Iu(e),vo("padding",t),{encode(r){Jp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Jp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function g$(e){return h$(e),{encode:(t)=>t,decode:(t)=>e(t)}}function u$(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Kp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Iu(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var y$=(e,t)=>t===0?e:y$(t,e%t),Vp=(e,t)=>e+(t-y$(e,t)),Hp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function BS(e,t,r,i){if(Kp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Vp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Vp(t,r)}`);let n=0,o=0,s=Hp[t],a=Hp[r]-1,c=[];for(let l of e){if(Iu(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Hp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function L7(e){Iu(e);let t=256;return{encode:(r)=>{if(!Wp(r))throw TypeError("radix.encode input should be Uint8Array");return u$(Array.from(r),t,e)},decode:(r)=>(qS("radix.decode",r),Uint8Array.from(u$(r,e,t)))}}function hn(e,t=!1){if(Iu(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Vp(8,e)>32||Vp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Wp(r))throw TypeError("radix2.encode input should be Uint8Array");return BS(Array.from(r),8,e,!t)},decode:(r)=>(qS("radix2.decode",r),Uint8Array.from(BS(r,e,8,t)))}}function d$(e){return h$(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var i0e=Object.freeze(Xr(hn(4),en("0123456789ABCDEF"),tn(""))),o0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Gp(5),tn(""))),s0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),a0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Gp(5),tn(""))),c0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),l0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),g$((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),b$=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),B7=/[\t\n\f\r ]/,S$=(e,t)=>{vo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&B7.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},ZS=Object.freeze(b$?{encode(e){return US(e),e.toBase64()},decode(e){return S$(e,!1)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Gp(6),tn(""))),yr=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),u0e=Object.freeze(b$?{encode(e){return US(e),e.toBase64({alphabet:"base64url"})},decode(e){return S$(e,!0)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Gp(6),tn(""))),d0e=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),MS=(e)=>Xr(L7(58),en(e),tn("")),f0e=Object.freeze(MS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),p0e=Object.freeze(MS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),m0e=Object.freeze(MS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var jS=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),f$=[996825010,642813549,513874426,1027748829,705979059];function Eu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<f$.length;i++)if((t>>i&1)===1)r^=f$[i];return r}function p$(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Eu(n)^s>>5}n=Eu(n);for(let o=0;o<i;o++)n=Eu(n)^e.charCodeAt(o)&31;for(let o of t)n=Eu(n)^o;for(let o=0;o<6;o++)n=Eu(n);return n^=r,jS.encode(BS([n%Hp[30]],30,5,!1))}function x$(e){let t=e==="bech32"?1:734539939,r=hn(5),i=r.decode,n=r.encode,o=d$(i);function s(f,p,m=90){if(vo("bech32.encode prefix",f),Wp(p))p=Array.from(p);qS("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let g=b+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let S=f.toLowerCase(),k=p$(S,p,t);return`${S}1${jS.encode(p)}${k}`}function a(f,p=90){vo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=b.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,g),k=b.slice(g+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=jS.decode(k).slice(0,-6),R=p$(S,A,t);if(!k.endsWith(R))throw Error(`Invalid checksum in ${f}: expected "${R}"`);return{prefix:S,words:A}}let c=d$(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(x$("bech32")),h0e=Object.freeze(x$("bech32m"));var j7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),U7={encode(e){return US(e),e.toHex()},decode(e){return vo("hex",e),Uint8Array.fromHex(e)}},g0e=Object.freeze(j7?U7:Xr(hn(4),en("0123456789abcdef"),tn(""),g$((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function Z7(e,t,r,i){$i(e);let n=qp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Pt(o,"c"),Pt(s,"dkLen"),Pt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=RS(t,"password"),l=RS(r,"salt"),u=new Uint8Array(s),f=ri.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function M7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Tr(n),r}function FS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=Z7(e,t,r,i),l,u=new Uint8Array(4),f=ec(u),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let g=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<g.length;k++)g[k]^=p[k]}}return M7(a,c,s,l,p)}function w$(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],g=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],R=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=g,P=S,J=k,j=A,Q=R,E=D,ae=U;for(let fe=0;fe<8;fe+=2)te^=rt(T+j|0,7),I^=rt(te+T|0,9),j^=rt(I+te|0,13),T^=rt(j+I|0,18),z^=rt(K+H|0,7),Q^=rt(z+K|0,9),H^=rt(Q+z|0,13),K^=rt(H+Q|0,18),E^=rt(P+N|0,7),B^=rt(E+P|0,9),N^=rt(B+E|0,13),P^=rt(N+B|0,18),V^=rt(ae+J|0,7),L^=rt(V+ae|0,9),J^=rt(L+V|0,13),ae^=rt(J+L|0,18),H^=rt(T+V|0,7),B^=rt(H+T|0,9),V^=rt(B+H|0,13),T^=rt(V+B|0,18),N^=rt(K+te|0,7),L^=rt(N+K|0,9),te^=rt(L+N|0,13),K^=rt(te+L|0,18),J^=rt(P+z|0,7),I^=rt(J+P|0,9),z^=rt(I+J|0,13),P^=rt(z+I|0,18),j^=rt(ae+E|0,7),Q^=rt(j+ae|0,9),E^=rt(Q+j|0,13),ae^=rt(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=u+te|0,n[o++]=f+K|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=g+z|0,n[o++]=S+P|0,n[o++]=k+J|0,n[o++]=A+j|0,n[o++]=R+Q|0,n[o++]=D+E|0,n[o++]=U+ae|0}function HS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(w$(r,s,e,t,r,o),a>0)s+=16;w$(r,o,e,t+=16,r,s)}}function F7(e,t,r){let i=qp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Pt(n,"N"),Pt(o,"r"),Pt(s,"p"),Pt(a,"dkLen"),Pt(c,"asyncTick"),Pt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let g=FS(zt,e,t,{c:1,dkLen:f*s}),S=jp(g),k=jp(new Uint8Array(f*n)),A=jp(new Uint8Array(f)),R=()=>{};if(u){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;R=()=>{if(T++,u&&(!(T%U)||T===D))u(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:g,tmp:A,blockMixCb:R,asyncTick:c}}function H7(e,t,r,i,n){let o=FS(zt,e,r,{c:1,dkLen:t});return Tr(r,i,n),o}function KS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=F7(e,t,r);TS(l);for(let m=0;m<o;m++){let b=a*m;for(let g=0;g<a;g++)c[g]=l[b+g];for(let g=0,S=0;g<i-1;g++)HS(c,S,c,S+=a,n),p();HS(c,(i-1)*a,l,b,n),p();for(let g=0;g<i;g++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];HS(f,0,l,b,n),p()}}return TS(l),H7(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function K7(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Qp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function tc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=K7(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function JS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function v$(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!rc(e))throw Error("invalid output, must be aligned")}function ii(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function J7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Bs=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),V7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var W7=(e)=>{for(let t=0;t<e.length;t++)e[t]=V7(e[t]);return e},Ni=Bs?(e)=>e:W7;function _$(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function k$(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function E$(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var I$=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Ft(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");Ft(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(Ft(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function Au(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!rc(t))throw Error("invalid output, must be aligned");return t}function A$(e,t,r){tc(e),tc(t),Qp(r);let i=new Uint8Array(16),n=J7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function rc(e){return e.byteOffset%4===0}function nc(e){return Uint8Array.from(Ft(e))}var R$=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),G7=(()=>Ni(ii(R$("expand 16-byte k"))))(),Q7=(()=>Ni(ii(R$("expand 32-byte k"))))();function nt(e,t){return e<<t|e>>>32-t}var Tu=64,Y7=16,VS=(()=>4294967295)(),T$=Uint32Array.of();function X7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Tu),u=ii(l),f=Bs&&rc(n)&&rc(o),p=f?ii(n):T$,m=f?ii(o):T$;if(!Bs){for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),Ni(u),s>=VS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}return}for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),s>=VS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);if(f&&g===Tu){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<Y7;k++)A=S+k,m[A]=p[A]^u[k];b+=Tu;continue}for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}}function C$(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=_$({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return tc(n),tc(s),Qp(o),Qp(r),(a,c,l,u,f=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(u=Au(p,u,!1),tc(f),f<0||f>=VS)throw Error("arx: counter overflow");let m=[],b=a.length,g,S;if(b===32)m.push(g=nc(a)),S=Q7;else if(b===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),S=G7,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Bs||!rc(c))m.push(c=nc(c));let k=ii(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Bs)i(S,k,ii(D),k);else{let U=Ni(Uint32Array.from(S));i(U,k,ii(D),k),$n(U),Ni(k)}c=c.subarray(16)}else if(!Bs)Ni(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let R=Ni(ii(c));try{return X7(e,S,k,R,l,u,f,s),u}finally{$n(...m)}}}function or(e,t){return e[t++]&255|(e[t++]&255)<<8}class O${blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=nc(Ft(e,32,"key"));let t=or(e,0),r=or(e,2),i=or(e,4),n=or(e,6),o=or(e,8),s=or(e,10),a=or(e,12),c=or(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=or(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],b=o[8],g=o[9],S=or(e,t+0),k=or(e,t+2),A=or(e,t+4),R=or(e,t+6),D=or(e,t+8),U=or(e,t+10),T=or(e,t+12),H=or(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),K=n[3]+((A>>>7|R<<9)&8191),N=n[4]+((R>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),J=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*g)+te*(5*b)+K*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*u)+z*(5*l)+P*(5*c)+J*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*g)+K*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*u)+P*(5*l)+J*(5*c),j+=E>>>13,E&=8191;let ae=j+B*c+V*a+te*s+K*(5*g)+N*(5*b);j=ae>>>13,ae&=8191,ae+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*u)+J*(5*l),j+=ae>>>13,ae&=8191;let fe=j+B*l+V*c+te*a+K*s+N*(5*g);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+J*(5*u),j+=fe>>>13,fe&=8191;let C=j+B*u+V*l+te*c+K*a+N*s;j=C>>>13,C&=8191,C+=L*(5*g)+I*(5*b)+z*(5*m)+P*(5*p)+J*(5*f),j+=C>>>13,C&=8191;let xe=j+B*f+V*u+te*l+K*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*g)+z*(5*b)+P*(5*m)+J*(5*p),j+=xe>>>13,xe&=8191;let Te=j+B*p+V*f+te*u+K*l+N*c;j=Te>>>13,Te&=8191,Te+=L*a+I*s+z*(5*g)+P*(5*b)+J*(5*m),j+=Te>>>13,Te&=8191;let Pe=j+B*m+V*p+te*f+K*u+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*g)+J*(5*b),j+=Pe>>>13,Pe&=8191;let $e=j+B*b+V*m+te*p+K*f+N*u;j=$e>>>13,$e&=8191,$e+=L*l+I*c+z*a+P*s+J*(5*g),j+=$e>>>13,$e&=8191;let _e=j+B*g+V*b+te*m+K*p+N*f;j=_e>>>13,_e&=8191,_e+=L*u+I*l+z*c+P*a+J*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=ae,n[3]=fe,n[4]=C,n[5]=xe,n[6]=Te,n[7]=Pe,n[8]=$e,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){JS(this),Ft(e),e=nc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){JS(this),v$(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var $$=E$(32,(e)=>new O$(e));function eW(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],b=t[4],g=t[5],S=t[6],k=t[7],A=n,R=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=g,P=S,J=k,j=A,Q=R,E=D,ae=U;for(let C=0;C<o;C+=2)T=T+te|0,j=nt(j^T,16),I=I+j|0,te=nt(te^I,12),T=T+te|0,j=nt(j^T,8),I=I+j|0,te=nt(te^I,7),H=H+K|0,Q=nt(Q^H,16),z=z+Q|0,K=nt(K^z,12),H=H+K|0,Q=nt(Q^H,8),z=z+Q|0,K=nt(K^z,7),B=B+N|0,E=nt(E^B,16),P=P+E|0,N=nt(N^P,12),B=B+N|0,E=nt(E^B,8),P=P+E|0,N=nt(N^P,7),V=V+L|0,ae=nt(ae^V,16),J=J+ae|0,L=nt(L^J,12),V=V+L|0,ae=nt(ae^V,8),J=J+ae|0,L=nt(L^J,7),T=T+K|0,ae=nt(ae^T,16),P=P+ae|0,K=nt(K^P,12),T=T+K|0,ae=nt(ae^T,8),P=P+ae|0,K=nt(K^P,7),H=H+N|0,j=nt(j^H,16),J=J+j|0,N=nt(N^J,12),H=H+N|0,j=nt(j^H,8),J=J+j|0,N=nt(N^J,7),B=B+L|0,Q=nt(Q^B,16),I=I+Q|0,L=nt(L^I,12),B=B+L|0,Q=nt(Q^B,8),I=I+Q|0,L=nt(L^I,7),V=V+te|0,E=nt(E^V,16),z=z+E|0,te=nt(te^z,12),V=V+te|0,E=nt(E^V,8),z=z+E|0,te=nt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=u+te|0,i[fe++]=f+K|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=g+z|0,i[fe++]=S+P|0,i[fe++]=k+J|0,i[fe++]=A+j|0,i[fe++]=R+Q|0,i[fe++]=D+E|0,i[fe++]=U+ae|0}var tW=C$(eW,{counterRight:!1,counterLength:4,allowShortKeys:!1});var rW=new Uint8Array(16),P$=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(rW.subarray(r))},nW=new Uint8Array(32);function z$(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,nW),s=A$(i.length,n?n.length:0,!0),a=$$.create(o);if(n)P$(a,n);P$(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var iW=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Au(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=z$(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=Au(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=z$(e,t,r,a,i);if(!k$(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),gn=I$({blockSize:64,nonceLength:12,tagLength:16},iW(tW));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Qt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function De(e,t,r=""){let i=ic(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function yn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Qt(e.outputLen),Qt(e.blockLen)}function Li(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Yp(e,t){De(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Xp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Mr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function em(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}var oW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function sW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function aW(e){for(let t=0;t<e.length;t++)e[t]=sW(e[t]);return e}var WS=oW?(e)=>e:aW,D$=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),cW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function js(e){if(De(e),D$)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=cW[e[r]];return t}var Di={_0:48,_9:57,A:65,F:70,a:97,f:102};function N$(e){if(e>=Di._0&&e<=Di._9)return e-Di._0;if(e>=Di.A&&e<=Di.F)return e-(Di.A-10);if(e>=Di.a&&e<=Di.f)return e-(Di.a-10);return}function Us(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(D$)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=N$(e.charCodeAt(o)),a=N$(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Ut(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];De(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function oc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function _o(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ko=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QS=BigInt(0),GS=BigInt(1);function Ru(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function L$(e){if(typeof e==="bigint"){if(!tm(e))throw Error("positive bigint expected, got "+e)}else Qt(e);return e}function Cu(e){let t=L$(e).toString(16);return t.length&1?"0"+t:t}function B$(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?QS:BigInt("0x"+e)}function Eo(e){return B$(js(e))}function Io(e){return B$(js(rm(De(e)).reverse()))}function sc(e,t){Qt(t),e=L$(e);let r=Us(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Ou(e,t){return sc(e,t).reverse()}function rm(e){return Uint8Array.from(e)}function Ao(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var tm=(e)=>typeof e==="bigint"&&QS<=e;function lW(e,t,r){return tm(e)&&tm(t)&&tm(r)&&t<=e&&e<r}function $u(e,t,r,i){if(!lW(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function YS(e){let t;for(t=0;e>QS;e>>=GS,t+=1);return t}var Pu=(e)=>(GS<<BigInt(e))-GS;function j$(e,t,r){if(Qt(e,"hashLen"),Qt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,Ut(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Ut(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function qs(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function XS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),br=BigInt(1),Zs=BigInt(2),Z$=BigInt(3),M$=BigInt(4),F$=BigInt(5),uW=BigInt(7),H$=BigInt(8),dW=BigInt(9),K$=BigInt(16);function Rr(e,t){let r=e%t;return r>=Cr?r:t+r}function bn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function U$(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=Rr(e,t),i=t,n=Cr,o=br,s=br,a=Cr;while(r!==Cr){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==br)throw Error("invert: does not exist");return Rr(n,t)}function ex(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function J$(e,t){let r=(e.ORDER+br)/M$,i=e.pow(t,r);return ex(e,i,t),i}function fW(e,t){let r=(e.ORDER-F$)/H$,i=e.mul(t,Zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Zs),n),a=e.mul(o,e.sub(s,e.ONE));return ex(e,a,t),a}function pW(e){let t=nm(e),r=V$(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+uW)/K$;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,b);let g=a.eql(a.sqr(u),c),S=a.cmov(l,u,g);return ex(a,S,c),S}}function V$(e){if(e<Z$)throw Error("sqrt is not defined for small field");let t=e-br,r=0;while(t%Zs===Cr)t/=Zs,r++;let i=Zs,n=nm(e);while(q$(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return J$;let o=n.pow(i,t),s=(t+br)/Zs;return function(c,l){if(c.is0(l))return l;if(q$(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(b++,g=c.sqr(g),b===u)throw Error("Cannot find square root");let S=br<<BigInt(u-b-1),k=c.pow(f,S);u=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function mW(e){if(e%M$===Z$)return J$;if(e%H$===F$)return fW;if(e%K$===dW)return pW(e);return V$(e)}var hW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function tx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=hW.reduce((i,n)=>(i[n]="function",i),t);return qs(e,r),e}function gW(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===br)return t;let i=e.ONE,n=t;while(r>Cr){if(r&br)i=e.mul(i,n);n=e.sqr(n),r>>=br}return i}function zu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function q$(e,t){let r=(e.ORDER-br)/Zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function yW(e,t){if(t!==void 0)Qt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class W${ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=br;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=yW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Rr(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&br)===br}neg(e){return Rr(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Rr(e*e,this.ORDER)}add(e,t){return Rr(e+t,this.ORDER)}sub(e,t){return Rr(e-t,this.ORDER)}mul(e,t){return Rr(e*t,this.ORDER)}pow(e,t){return gW(this,e,t)}div(e,t){return Rr(e*U$(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return U$(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=mW(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Ou(e,this.BYTES):sc(e,this.BYTES)}fromBytes(e,t=!1){De(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Io(e):Eo(e);if(s)a=Rr(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return zu(this,e)}cmov(e,t,r){return r?t:e}}function nm(e,t={}){return new W$(e,t)}function G$(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function rx(e){let t=G$(e);return t+Math.ceil(t/2)}function Q$(e,t,r=!1){De(e);let i=e.length,n=G$(t),o=rx(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Io(e):Eo(e),a=Rr(s,t-br)+br;return r?Ou(a,n):sc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ac=BigInt(0),Ms=BigInt(1);function Nu(e,t){let r=t.negate();return e?r:t}function sx(e,t){let r=zu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function tP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function nx(e,t){tP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Pu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function Y$(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ms;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var ix=new WeakMap,rP=new WeakMap;function ox(e){return rP.get(e)||1}function X$(e){if(e!==ac)throw Error("invalid wNAF")}class ax{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>ac){if(t&Ms)r=r.add(i);i=i.double(),t>>=Ms}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=nx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=nx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=Y$(r,s,o);if(r=a,l)n=n.add(Nu(f,t[p]));else i=i.add(Nu(u,t[c]))}return X$(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=nx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===ac)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=Y$(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return X$(r),i}getPrecomputes(e,t,r){let i=ix.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);ix.set(t,i)}}return i}cached(e,t,r){let i=ox(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=ox(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){tP(t,this.bits),rP.set(e,t),ix.delete(e)}hasCache(e){return ox(e)!==1}}function nP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>ac||i>ac){if(r&Ms)o=o.add(n);if(i&Ms)s=s.add(n);n=n.double(),r>>=Ms,i>>=Ms}return{p1:o,p2:s}}function eP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return tx(t),t}else return nm(e,{isLE:r})}function iP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>ac))throw Error(`CURVE.${c} must be positive bigint`)}let n=eP(t.p,r.Fp,i),o=eP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function im(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Du=BigInt(0),cc=BigInt(1),om=BigInt(2);function bW(e){return qs(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function oP(e){let t=bW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||_o,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?om**BigInt(254):om**BigInt(447),b=a?BigInt(8)*om**BigInt(251)-cc:BigInt(4)*om**BigInt(445)-cc,g=m+b+cc,S=(I)=>Rr(I,r),k=A(f);function A(I){return Ou(S(I),u)}function R(I){let z=rm(De(I,u,"uCoordinate"));if(a)z[31]&=127;return S(Io(z))}function D(I){return Io(n(rm(De(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Du)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){$u("u",I,Du,r),$u("scalar",z,m,g);let P=z,J=I,j=cc,Q=Du,E=I,ae=cc,fe=Du;for(let xe=BigInt(l-1);xe>=Du;xe--){let Te=P>>xe&cc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(J*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let K={secretKey:u,publicKey:u,seed:u},N=(I=c(u))=>(De(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:im(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}class cx{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(yn(e),De(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Mr(i)}update(e){return Li(this),this.iHash.update(e),this}digestInto(e){Li(this),De(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var lc=(e,t,r)=>new cx(e,t).update(r).digest();lc.create=(e,t)=>new cx(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sP=(e,t)=>(e+(e>=0?t:-t)/cP)/t;function SW(e,t,r){let[[i,n],[o,s]]=t,a=sP(s*e,r),c=sP(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Bi,p=u<Bi;if(f)l=-l;if(p)u=-u;let m=Pu(Math.ceil(YS(r)/2))+uc;if(l<Bi||l>=m||u<Bi||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function ux(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function lx(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Ru(r.lowS,"lowS"),Ru(r.prehash,"prehash"),r.format!==void 0)ux(r.format);return r}class aP extends Error{constructor(e=""){super(e)}}var To={Err:aP,_tlv:{encode:(e,t)=>{let{Err:r}=To;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Cu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Cu(n.length/2|128):"";return Cu(e)+o+n+t},decode(e,t){let{Err:r}=To,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=To;if(e<Bi)throw new t("integer: negative integers are not allowed");let r=Cu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=To;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Eo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=To,n=De(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=To,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Bi=BigInt(0),uc=BigInt(1),cP=BigInt(2),sm=BigInt(3),xW=BigInt(4);function dx(e,t={}){let r=iP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;qs(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=uP(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),J=i.toBytes(z);if(Ru(I,"isCompressed"),I){u();let j=!i.isOdd(P);return Ut(lP(j),J)}else return Ut(Uint8Array.of(4),J,i.toBytes(P))}function p(N){De(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],J=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(J);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=g(j),E;try{E=i.sqrt(Q)}catch(C){let xe=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}u();let ae=i.isOdd(E);if((P&1)===1!==ae)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(J.subarray(0,j)),E=i.fromBytes(J.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function g(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=g(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,sm),xW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function R(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return SW(N,c.basises,n.ORDER)}let T=XS((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=XS((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Nu(z,L),I=Nu(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=R("x",N),this.Y=R("y",L,!0),this.Z=R("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(De(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Us(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(K.createCache(this,N),!L)this.multiply(sm);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(J,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,sm),{X:z,Y:P,Z:J}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(J,J),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,J),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,C),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),C=i.mul(N,C),xe=i.sub(ae,C),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(ae,ae),ae=i.add(E,ae),ae=i.add(ae,C),ae=i.mul(ae,xe),Q=i.add(Q,ae),C=i.mul(P,J),C=i.add(C,C),ae=i.mul(C,xe),j=i.sub(j,ae),E=i.mul(C,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.ZERO,E=i.ZERO,ae=i.ZERO,fe=o.a,C=i.mul(o.b,sm),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.mul(z,j),$e=i.add(L,I),_e=i.add(P,J);$e=i.mul($e,_e),_e=i.add(xe,Te),$e=i.sub($e,_e),_e=i.add(L,z);let We=i.add(P,j);return _e=i.mul(_e,We),We=i.add(xe,Pe),_e=i.sub(_e,We),We=i.add(I,z),Q=i.add(J,j),We=i.mul(We,Q),Q=i.add(Te,Pe),We=i.sub(We,Q),ae=i.mul(fe,_e),Q=i.mul(C,Pe),ae=i.add(Q,ae),Q=i.sub(Te,ae),ae=i.add(Te,ae),E=i.mul(Q,ae),Te=i.add(xe,xe),Te=i.add(Te,xe),Pe=i.mul(fe,Pe),_e=i.mul(C,_e),Te=i.add(Te,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Te,_e),E=i.add(E,xe),xe=i.mul(We,_e),Q=i.mul($e,Q),Q=i.sub(Q,xe),xe=i.mul($e,Te),ae=i.mul(We,ae),ae=i.add(ae,xe),new V(Q,E,ae)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(J)=>K.cached(this,J,(j)=>sx(V,j));if(L){let{k1neg:J,k1:j,k2neg:Q,k2:E}=U(N),{p:ae,f:fe}=P(j),{p:C,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,ae,C,J,Q)}else{let{p:J,f:j}=P(N);I=J,z=j}return sx(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Bi||I.is0())return V.ZERO;if(N===uc)return I;if(K.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:J,k2:j}=U(N),{p1:Q,p2:E}=nP(V,I,P,j);return B(L.beta,Q,E,z,J)}else return K.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===uc)return!0;if(N)return N(V,this);return K.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===uc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return Ru(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return js(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,K=new ax(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function lP(e){return Uint8Array.of(e?2:3)}function uP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function wW(e,t={}){let{Fn:r}=e,i=t.randomBytes||_o,n=Object.assign(uP(e.Fp,r),{seed:rx(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return Q$(De(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n;if(!ic(m))return;if("_lengths"in r&&r._lengths||b===g)return;let k=De(m,void 0,"key").length;return k===g||k===S}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=im(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function fx(e,t,r={}){yn(t),qs(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||_o,n=r.hmac||((I,z)=>lc(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=wW(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*cP<o.ORDER;function S(I){let z=a>>uc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function R(I,z){ux(z);let P=m.signature,J=z==="compact"?P:z==="recovered"?P+1:void 0;return De(I,J)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){R(I,z);let P;if(z==="der"){let{r:E,s:ae}=To.toSig(De(I));return new D(E,ae)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let J=m.signature/2,j=I.subarray(0,J),Q=I.subarray(J,J*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Us(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,J=this.assertRecovery(),j=J===2||J===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Ut(lP((J&1)===0),Q)),ae=s.inv(j),fe=T(De(I,void 0,"msgHash")),C=s.create(-fe*ae),xe=s.create(P*ae),Te=e.BASE.multiplyUnsafe(C).add(E.multiplyUnsafe(xe));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(I=b.format){if(ux(I),I==="der")return Us(To.hexFromSig(this));let{r:z,s:P}=this,J=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Ut(Uint8Array.of(this.assertRecovery()),J,j);return Ut(J,j)}toHex(I){return js(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=Eo(z),J=z.length*8-c;return J>0?P>>BigInt(J):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=Pu(c);function B(I){return $u("num < 2^"+c,I,Bi,H),s.toBytes(I)}function V(I,z){return De(I,void 0,"message"),z?De(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:J,prehash:j,extraEntropy:Q}=lx(P,b);I=V(I,j);let E=T(I),ae=s.fromBytes(z);if(!s.isValidNot0(ae))throw Error("invalid private key");let fe=[B(ae),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(De(Pe,void 0,"extraEntropy"))}let C=Ut(...fe),xe=E;function Te(Pe){let $e=U(Pe);if(!s.isValidNot0($e))return;let _e=s.inv($e),We=e.BASE.multiply($e).toAffine(),Le=s.create(We.x);if(Le===Bi)return;let Xe=s.create(_e*s.create(xe+Le*ae));if(Xe===Bi)return;let dt=(We.x===Le?0:2)|Number(We.y&uc),kt=Xe;if(J&&S(Xe))kt=s.neg(Xe),dt^=1;return new D(Le,kt,g?void 0:dt)}return{seed:C,k2sig:Te}}function K(I,z,P={}){let{seed:J,k2sig:j}=te(I,z,P);return j$(t.outputLen,s.BYTES,n)(J,j).toBytes(P.format)}function N(I,z,P,J={}){let{lowS:j,prehash:Q,format:E}=lx(J,b);if(P=De(P,void 0,"publicKey"),z=V(z,Q),!ic(I)){let ae=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ae)}R(I,E);try{let ae=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&ae.hasHighS())return!1;let{r:C,s:xe}=ae,Te=T(z),Pe=s.inv(xe),$e=s.create(Te*Pe),_e=s.create(C*Pe),We=e.BASE.multiplyUnsafe($e).add(fe.multiplyUnsafe(_e));if(We.is0())return!1;return s.create(We.x)===C}catch(ae){return!1}}function L(I,z,P={}){let{prehash:J}=lx(P,b);return z=V(z,J),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:K,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function dP(e,t,r){return e&t^~e&r}function fP(e,t,r){return e&t^e&r^t&r}class am{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=em(this.buffer)}update(e){Li(this),De(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=em(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Li(this),Yp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Mr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=em(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var ji=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var sr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var cm=BigInt(4294967295),pP=BigInt(32);function vW(e,t=!1){if(t)return{h:Number(e&cm),l:Number(e>>pP&cm)};return{h:Number(e>>pP&cm)|0,l:Number(e&cm)|0}}function lm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=vW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var px=(e,t,r)=>e>>>r,mx=(e,t,r)=>e<<32-r|t>>>r,Fs=(e,t,r)=>e>>>r|t<<32-r,Hs=(e,t,r)=>e<<32-r|t>>>r,Lu=(e,t,r)=>e<<64-r|t>>>r-32,Bu=(e,t,r)=>e>>>r-32|t<<64-r;var mP=(e,t,r)=>e<<r|t>>>32-r,hP=(e,t,r)=>t<<r|e>>>32-r,gP=(e,t,r)=>t<<r-32|e>>>64-r,yP=(e,t,r)=>e<<r-32|t>>>64-r;function oi(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var bP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),SP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,xP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),wP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,vP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),_P=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var kW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ro=new Uint32Array(64);class kP extends am{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)Ro[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=Ro[u-15],p=Ro[u-2],m=Pn(f,7)^Pn(f,18)^f>>>3,b=Pn(p,17)^Pn(p,19)^p>>>10;Ro[u]=b+Ro[u-7]+m+Ro[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+f+dP(s,a,c)+kW[u]+Ro[u]|0,b=(Pn(r,2)^Pn(r,13)^Pn(r,22))+fP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Mr(Ro)}destroy(){this.set(0,0,0,0,0,0,0,0),Mr(this.buffer)}}class EP extends kP{A=ji[0]|0;B=ji[1]|0;C=ji[2]|0;D=ji[3]|0;E=ji[4]|0;F=ji[5]|0;G=ji[6]|0;H=ji[7]|0;constructor(){super(32)}}var IP=(()=>lm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),EW=(()=>IP[0])(),IW=(()=>IP[1])(),Co=new Uint32Array(80),Oo=new Uint32Array(80);class AP extends am{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Co[A]=e.getUint32(t),Oo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=Co[A-15]|0,D=Oo[A-15]|0,U=Fs(R,D,1)^Fs(R,D,8)^px(R,D,7),T=Hs(R,D,1)^Hs(R,D,8)^mx(R,D,7),H=Co[A-2]|0,B=Oo[A-2]|0,V=Fs(H,B,19)^Lu(H,B,61)^px(H,B,6),te=Hs(H,B,19)^Bu(H,B,61)^mx(H,B,6),K=xP(T,te,Oo[A-7],Oo[A-16]),N=wP(K,U,V,Co[A-7],Co[A-16]);Co[A]=N|0,Oo[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Fs(u,f,14)^Fs(u,f,18)^Lu(u,f,41),D=Hs(u,f,14)^Hs(u,f,18)^Bu(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=vP(k,D,T,IW[A],Oo[A]),B=_P(H,S,R,U,EW[A],Co[A]),V=H|0,te=Fs(r,i,28)^Lu(r,i,34)^Lu(r,i,39),K=Hs(r,i,28)^Bu(r,i,34)^Bu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=oi(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=bP(V,K,L);r=SP(I,B,te,N),i=I|0}({h:r,l:i}=oi(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=oi(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=oi(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=oi(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=oi(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=oi(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=oi(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=oi(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Mr(Co,Oo)}destroy(){Mr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class TP extends AP{Ah=sr[0]|0;Al=sr[1]|0;Bh=sr[2]|0;Bl=sr[3]|0;Ch=sr[4]|0;Cl=sr[5]|0;Dh=sr[6]|0;Dl=sr[7]|0;Eh=sr[8]|0;El=sr[9]|0;Fh=sr[10]|0;Fl=sr[11]|0;Gh=sr[12]|0;Gl=sr[13]|0;Hh=sr[14]|0;Hl=sr[15]|0;constructor(){super(48)}}var um=oc(()=>new EP,ko(1));var RP=oc(()=>new TP,ko(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var AW=BigInt(1),CP=BigInt(2),TW=BigInt(3),RW=BigInt(5),S_e=BigInt(8),OP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function CW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=OP,a=e*e%o*e%o,c=bn(a,CP,o)*a%o,l=bn(c,AW,o)*e%o,u=bn(l,RW,o)*l%o,f=bn(u,t,o)*u%o,p=bn(f,r,o)*f%o,m=bn(p,i,o)*p%o,b=bn(m,n,o)*m%o,g=bn(b,n,o)*m%o,S=bn(g,t,o)*u%o;return{pow_p_5_8:bn(S,CP,o)*e%o,b2:a}}function OW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var $P=(()=>{let e=OP;return oP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=CW(t);return Rr(bn(r,TW,e)*i,e)},adjustScalarBytes:OW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $W=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),PW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var zW=dx($W),hx=fx(zW,um);var NW=dx(PW),PP=fx(NW,RP);function NP(e,t,r){if(yn(e),r===void 0)r=new Uint8Array(e.outputLen);return lc(e,r,t)}var gx=Uint8Array.of(0),zP=Uint8Array.of();function DP(e,t,r,i=32){yn(e),Qt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=zP;else De(r,void 0,"info");let s=new Uint8Array(o*n),a=lc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)gx[0]=u+1,c.update(u===0?zP:l).update(r).update(gx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Mr(l,gx),s.slice(0,i)}var DW=BigInt(0),ju=BigInt(1),LW=BigInt(2),BW=BigInt(7),jW=BigInt(256),UW=BigInt(113),jP=[],UP=[],qP=[];for(let e=0,t=ju,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],jP.push(2*(5*i+r)),UP.push((e+1)*(e+2)/2%64);let n=DW;for(let o=0;o<7;o++)if(t=(t<<ju^(t>>BW)*UW)%jW,t&LW)n^=ju<<(ju<<BigInt(o))-ju;qP.push(n)}var ZP=lm(qP,!0),qW=ZP[0],ZW=ZP[1],LP=(e,t,r)=>r>32?gP(e,t,r):mP(e,t,r),BP=(e,t,r)=>r>32?yP(e,t,r):hP(e,t,r);function MW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=LP(l,u,1)^r[a],p=BP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=UP[s],c=LP(n,o,a),l=BP(n,o,a),u=jP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=qW[i],e[1]^=ZW[i]}Mr(r)}class dm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Qt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Xp(this.state)}clone(){return this._cloneInto()}keccak(){WS(this.state32),MW(this.state32,this.rounds),WS(this.state32),this.posOut=0,this.pos=0}update(e){Li(this),De(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Li(this,!1),De(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Qt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Yp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Mr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new dm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var MP=(e,t,r,i={})=>oc(()=>new dm(t,e,r),i);var Ks=MP(6,136,32,ko(8));var FP=MP(6,72,64,ko(10));var HP=(e,t,r,i={})=>oc((n={})=>new dm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),KP=HP(31,168,16,ko(11)),si=HP(31,136,32,ko(12));function yx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function VP(e){return yx(e),(e&e-1)===0&&e!==0}function bx(e,t){yx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function WP(e){return yx(e),31-Math.clz32(e)}function JP(e){let t=e.length;if(t<2||!VP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=WP(t);for(let i=0;i<t;i++){let n=bx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var Sx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=WP(r);if(!VP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)JP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,g=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,R=p++;A<g;A++){let D=o?n?r-R:R:A*S,U=k+A,T=k+A+g,H=i[D],B=u[T],V=u[U];if(l){let te=e.mul(B,H);u[U]=e.add(V,te),u[T]=e.sub(V,te)}else if(o)u[U]=e.add(B,V),u[T]=e.mul(e.sub(B,V),H);else u[U]=e.add(V,B),u[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)JP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ai=_o;function fm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function GP(e){return Uint8Array.from(e)}function Js(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(De(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{De(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function pm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{De(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ht(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function xx(e){return(1<<e)-1}var z_e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var QP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,R=i)=>{let D=A%R|0;return(D>=0?D|0:R+D|0)|0},l=(A,R=i)=>{let D=c(A,R)|0;return(D>R>>1?D-R|0:D)|0};function u(){let A=t(r);for(let R=0;R<r;R++){let D=bx(R,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[R]=Number(U)|0}return A}let f=u(),p={add:(A,R)=>c((A|0)+(R|0))|0,sub:(A,R)=>c((A|0)-(R|0))|0,mul:(A,R)=>c((A|0)*(R|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=Sx(p,{dit:!1,...m}),g=Sx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{g(A);for(let R=0;R<A.length;R++)A[R]=c(n*A[R]);return A}},bitsCoder:(A,R)=>{let D=xx(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=(R.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[K++]=V&xx(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[K++]=R.decode(V&D)}return H}}}}},FW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ht(o,i)}}},YP=FW(KP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Sr=256,Ui=3329,HW=3303,KW=17,{mod:Zu,nttZetas:JW,NTT:Vs,bitsCoder:VW}=QP({N:Sr,Q:Ui,F:HW,ROOT_OF_UNITY:KW,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),wx={512:{N:Sr,Q:Ui,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Sr,Q:Ui,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Sr,Q:Ui,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},WW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ui/2)/Ui,decode:(r)=>r*Ui+t>>>e}},Uu=(e)=>VW(e,WW(e));function Ws(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]+t[r])}function GW(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]-t[r])}function QW(e,t,r,i,n){let o=Zu(t*i*n+e*r),s=Zu(e*i+t*r);return{c0:o,c1:s}}function mm(e,t){for(let r=0;r<Sr/2;r++){let i=JW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=QW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function XP(e){let t=new Uint16Array(Sr);for(let r=0;r<Sr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<Sr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ui)t[r++]=o;if(r<Sr&&s<Ui)t[r++]=s}}return t}function qu(e,t,r,i){let n=e(i*Sr/4,t,r),o=new Uint16Array(Sr),s=Xp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Zu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var YW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Uu(1),u=Uu(c),f=Uu(a),p=Js("publicKey",pm(Uu(12),t),32),m=pm(Uu(12),t),b=Js("ciphertext",pm(f,t),u),g=Js("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{De(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[R,D]=g.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Vs.encode(qu(r,D,V,o)));let H=i(R);for(let V=0;V<t;V++){let te=Vs.encode(qu(r,D,t+V,o));for(let K=0;K<t;K++){let N=XP(H.get(K,V));Ws(te,mm(N,U[K]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,R]),secretKey:m.encode(U)};return Ht(R,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[R,D]=p.decode(S),U=[];for(let K=0;K<t;K++)U.push(Vs.encode(qu(r,A,K,o)));let T=i(D),H=new Uint16Array(Sr),B=[];for(let K=0;K<t;K++){let N=qu(r,A,t+K,s),L=new Uint16Array(Sr);for(let I=0;I<t;I++){let z=XP(T.get(K,I));Ws(L,mm(z,U[I]))}Ws(N,Vs.decode(L)),B.push(N),Ws(H,mm(R[K],U[K])),Ht(L)}T.clean();let V=qu(r,A,2*t,s);Ws(V,Vs.decode(H));let te=l.decode(k);return Ws(te,V),Ht(R,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,R]=b.decode(S),D=m.decode(k),U=new Uint16Array(Sr);for(let T=0;T<t;T++)Ws(U,mm(D[T],Vs.encode(A[T])));return GW(R,Vs.decode(U)),Ht(U,D,A),l.encode(R)}}};function vx(e){let t=YW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Js("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ai(64))=>{De(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),b=a.encode([p,f,m,u.subarray(32)]);return Ht(p,m),{publicKey:f,secretKey:b}},getPublicKey:(u)=>{let[f,p,m,b]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=ai(32))=>{De(u,s.publicKey,"publicKey"),De(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(GP(p)));if(!fm(m,p))throw Ht(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ht(m);let b=i.create().update(f).update(r(u)).digest(),g=t.encrypt(u,f,b.subarray(32,64));return Ht(b.subarray(32)),{cipherText:g,sharedSecret:b.subarray(0,32)}},decapsulate:(u,f)=>{De(f,a.bytesLen,"secretKey"),De(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!fm(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,S,k,A]=a.decode(f),R=t.decrypt(u,g),D=i.create().update(R).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,R,D.subarray(32,64)),H=fm(u,T),B=n.create({dkLen:32}).update(A).update(u).digest();return Ht(R,T,!H?U:B),H?U:B}}}function XW(e,t,r){return si.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var _x={HASH256:Ks,HASH512:FP,KDF:si,XOF:YP,PRF:XW},H_e=vx({..._x,...wx[512]}),Mu=vx({..._x,...wx[768]}),ez=vx({..._x,...wx[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function eG(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ai(r.seed))=>{De(s,r.seed,"seed");let a=o.isLE?Io(s):Eo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function kx(e,t=!1){let r=eG(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ai(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ht(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Fu(e,t){return Js(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function Ex(e){return(t,r)=>e(t,{dkLen:r})}function tG(e,t,...r){let i=Fu(r,"seed"),n=Fu(r,"publicKey");if(e===void 0)e=i.bytesLen;Qt(e);function o(s){De(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ai(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ht(a),Ht(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function hm(e,t,r,i,...n){let o=tG(e,r,...n),s=Fu(n,"cipherText"),a=Fu(n,"publicKey"),c=Fu(n,"msg");if(t===void 0)t=c.bytesLen;return Qt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ai(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),g=m.map((k)=>k.cipherText),S={sharedSecret:i(f,g,b),cipherText:s.encode(g)};return Ht(b,g),S},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),b=n.map((g,S)=>g.decapsulate(f[S],m[S]));return i(p,f,b)}}}function tz(e,t,r,i,n){return yn(i),yn(n),hm(32,32,Ex(i),(o,s,a)=>n(Ut(a[0],a[1],s[1],o[1],Ao(e))),t,r)}var rke=tz("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Mu,kx(hx,!0),si,Ks),nke=tz("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",ez,kx(PP,!0),si,Ks);function rG(e,t,r,i,n){return yn(i),yn(n),hm(32,32,Ex(i),(o,s,a)=>{let c=Ut(a[0],a[1],s[0],o[0],s[1],o[1],Ao(e)),l=32,u=Ut(Ao("hybrid_prk"),c),f=NP(n,u),p=Ut(sc(32,2),Ao("shared_secret"),Ao("")),m=DP(n,f,p,32);return Ht(f,p,u,c),m},t,r)}var rz=kx($P),ike=rG("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Mu,rz,si,um),nG=(()=>hm(32,32,Ex(si),(e,t,r)=>Ks(Ut(r[0],r[1],t[1],e[1],Ao("\\.//^\\"))),Mu,rz))();function iG(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ai(i)){return De(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ai(i)){De(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ht(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function oG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=iG(r,n,o,i),a=64,c=a+i;return hm(32,32,(l)=>{De(l,32);let u=si(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Ut(f,p)},(l,u,f)=>Ks(Ut(f[0],f[1],u[1],l[1],Ao(e))),t,s)}var sG=(()=>oG("MLKEM768-P256",Mu,hx,128))();var gm=nG,nz=sG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ft=(e,t,r)=>nr(e,t,r),Ax=Pt,dc=Up,ar=(...e)=>CS(...e),fc=(e)=>wu(e),pc=AS,mc=(e)=>Pi(e),bm=BigInt(0),Ix=BigInt(1);function qi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!ym(e))throw RangeError("positive bigint expected, got "+e)}else Ax(e);return e}function ci(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Hu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function iz(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?bm:BigInt("0x"+e)}function Gs(e){return iz(Up(e))}function zn(e){return iz(Up($o(nr(e)).reverse()))}function xm(e,t){if(Pt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return wu(r.padStart(t*2,"0"))}function Ku(e,t){return xm(e,t).reverse()}function oz(e,t){if(e=ft(e),t=ft(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(ft(e))}function wm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var ym=(e)=>typeof e==="bigint"&&bm<=e;function aG(e,t,r){return ym(e)&&ym(t)&&ym(r)&&t<=e&&e<r}function Zi(e,t,r,i){if(!aG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function hc(e){if(e<bm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>bm;e>>=Ix,t+=1);return t}var Ju=(e)=>(Ix<<BigInt(e))-Ix;function sz(e,t,r){if(Pt(e,"hashLen"),Pt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,ar(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return ar(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var Tx=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cr=BigInt(0),Tt=BigInt(1),Qs=BigInt(2),uz=BigInt(3),dz=BigInt(4),fz=BigInt(5),cG=BigInt(7),pz=BigInt(8),lG=BigInt(9),mz=BigInt(16);function xt(e,t){if(t<=cr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=cr?r:t+r}function xn(e,t,r){if(t<cr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >cr)i*=i,i%=r;return i}function az(e,t){if(e===cr)throw Error("invert: expected non-zero number");if(t<=cr)throw Error("invert: expected positive modulus, got "+t);let r=xt(e,t),i=t,n=cr,o=Tt,s=Tt,a=cr;while(r!==cr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==Tt)throw Error("invert: does not exist");return xt(n,t)}function Rx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function hz(e,t){let r=e,i=(r.ORDER+Tt)/dz,n=r.pow(t,i);return Rx(r,n,t),n}function uG(e,t){let r=e,i=(r.ORDER-fz)/pz,n=r.mul(t,Qs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Qs),o),c=r.mul(s,r.sub(a,r.ONE));return Rx(r,c,t),c}function dG(e){let t=vm(e),r=gz(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+cG)/mz;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),b=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,f,b),f=l.cmov(m,p,g);let S=l.eql(l.sqr(f),c),k=l.cmov(u,f,S);return Rx(l,k,c),k}}function gz(e){if(e<uz)throw Error("sqrt is not defined for small field");let t=e-Tt,r=0;while(t%Qs===cr)t/=Qs,r++;let i=Qs,n=vm(e);while(cz(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return hz;let o=n.pow(i,t),s=(t+Tt)/Qs;return function(c,l){let u=c;if(u.is0(l))return l;if(cz(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),b=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,S=u.sqr(m);while(!u.eql(S,u.ONE))if(g++,S=u.sqr(S),g===f)throw Error("Cannot find square root");let k=Tt<<BigInt(f-g-1),A=u.pow(p,k);f=g,p=u.sqr(A),m=u.mul(m,p),b=u.mul(b,A)}return b}}function fG(e){if(e%dz===uz)return hz;if(e%pz===fz)return uG;if(e%mz===lG)return dG(e);return gz(e)}var Mi=(e,t)=>(xt(e,t)&Tt)===Tt,pG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Cx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=pG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),ci(e.BYTES,"BYTES"),ci(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function mG(e,t,r){let i=e;if(r<cr)throw Error("invalid exponent, negatives unsupported");if(r===cr)return i.ONE;if(r===Tt)return t;let n=i.ONE,o=t;while(r>cr){if(r&Tt)n=i.mul(n,o);o=i.sqr(o),r>>=Tt}return n}function Vu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function cz(e,t){let r=e,i=(r.ORDER-Tt)/Qs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function hG(e,t){if(t!==void 0)Ax(t);if(e<=cr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=hc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var lz=new WeakMap;class Ox{ORDER;BITS;BYTES;isLE;ZERO=cr;ONE=Tt;_lengths;_mod;constructor(e,t={}){if(e<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=hG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return xt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return cr<=e&&e<this.ORDER}is0(e){return e===cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Tt)===Tt}neg(e){return xt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return xt(e*e,this.ORDER)}add(e,t){return xt(e+t,this.ORDER)}sub(e,t){return xt(e-t,this.ORDER)}mul(e,t){return xt(e*t,this.ORDER)}pow(e,t){return mG(this,e,t)}div(e,t){return xt(e*az(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return az(e,this.ORDER)}sqrt(e){let t=lz.get(this);if(!t)lz.set(this,t=fG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Ku(e,this.BYTES):xm(e,this.BYTES)}fromBytes(e,t=!1){ft(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?zn(e):Gs(e);if(s)a=xt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Vu(this,e)}cmov(e,t,r){return qi(r,"condition"),r?t:e}}Object.freeze(Ox.prototype);function vm(e,t={}){return new Ox(e,t)}function yz(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Tt)throw Error("field order must be greater than 1");let t=hc(e-Tt);return Math.ceil(t/8)}function $x(e){let t=yz(e);return t+Math.ceil(t/2)}function bz(e,t,r=!1){ft(e);let i=e.length,n=yz(t),o=Math.max($x(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?zn(e):Gs(e),a=xt(s,t-Tt)+Tt;return r?Ku(a,n):xm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gc=BigInt(0),Ys=BigInt(1);function Wu(e,t){let r=t.negate();return e?r:t}function Xs(e,t){let r=Vu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function vz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Px(e,t){vz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Ju(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function Sz(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ys;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var zx=new WeakMap,_z=new WeakMap;function Nx(e){return _z.get(e)||1}function xz(e){if(e!==gc)throw Error("invalid wNAF")}class Gu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>gc){if(t&Ys)r=r.add(i);i=i.double(),t>>=Ys}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=Px(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=Px(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=Sz(r,s,o);if(r=a,l)n=n.add(Wu(f,t[p]));else i=i.add(Wu(u,t[c]))}return xz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=Px(e,this.bits);for(let o=0;o<n.windows;o++){if(r===gc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=Sz(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return xz(r),i}getPrecomputes(e,t,r){let i=zx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);zx.set(t,i)}}return i}cached(e,t,r){let i=Nx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=Nx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){vz(t,this.bits),_z.set(e,t),zx.delete(e)}hasCache(e){return Nx(e)!==1}}function kz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>gc||i>gc){if(r&Ys)o=o.add(n);if(i&Ys)s=s.add(n);n=n.double(),r>>=Ys,i>>=Ys}return{p1:o,p2:s}}function wz(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Cx(t),t}else return vm(e,{isLE:r})}function _m(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>gc))throw Error(`CURVE.${c} must be positive bigint`)}let n=wz(t.p,r.Fp,i),o=wz(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Qu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Yu(e,t){if(ci(e),ci(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function gG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function yG(e){if(!pc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?wm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Dx(e,t,r,i){if(ft(e),ci(r),t=yG(t),t.length>255)t=i(ar(wm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ar(t,Yu(t.length,1)),c=new Uint8Array(o),l=Yu(r,2),u=Array(s),f=i(ar(c,e,l,Yu(0,1),a));u[0]=i(ar(f,Yu(1,1),a));for(let m=1;m<s;m++){let b=[gG(f,u[m-1]),Yu(m+1,1),a];u[m]=i(ar(...b))}return ar(...u).slice(0,r)}var Ez="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Iz=(e,t)=>(e+(e>=0?t:-t)/Tz)/t;function bG(e,t,r){Zi("scalar",e,li,r);let[[i,n],[o,s]]=t,a=Iz(s*e,r),c=Iz(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<li,p=u<li;if(f)l=-l;if(p)u=-u;let m=Ju(Math.ceil(hc(r)/2))+Po;if(l<li||l>=m||u<li||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function Bx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Lx(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(qi(r.lowS,"lowS"),qi(r.prehash,"prehash"),r.format!==void 0)Bx(r.format);return r}class Az extends Error{constructor(e=""){super(e)}}var Nn={Err:Az,_tlv:{encode:(e,t)=>{let{Err:r}=Nn;if(ci(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Hu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Hu(n.length/2|128):"";return Hu(e)+o+n+t},decode(e,t){let{Err:r}=Nn;t=ft(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Nn;if(Sm(e),e<li)throw new t("integer: negative integers are not allowed");let r=Hu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Nn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Gs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Nn,n=ft(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Nn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Nn._tlv);Object.freeze(Nn._int);Object.freeze(Nn);var li=BigInt(0),Po=BigInt(1),Tz=BigInt(2),km=BigInt(3),SG=BigInt(4);function Rz(e,t={}){let r=_m("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=Oz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(K,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(qi(L,"isCompressed"),L){f();let J=!i.isOdd(z);return ar(Cz(J),P)}else return ar(Uint8Array.of(4),P,i.toBytes(z))}function m(K){ft(K,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=u,I=K.length,z=K[0],P=K.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let J=i.fromBytes(P);if(!i.isValid(J))throw Error("bad point: is not on curve, wrong x");let j=S(J),Q;try{Q=i.sqrt(j)}catch(fe){let C=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:J,y:Q}}else if(I===L&&z===4){let J=i.BYTES,j=i.fromBytes(P.subarray(0,J)),Q=i.fromBytes(P.subarray(J,J*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function S(K){let N=i.sqr(K),L=i.mul(N,K);return i.add(i.add(L,i.mul(K,o.a)),o.b)}function k(K,N){let L=i.sqr(N),I=S(K);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,km),SG),R=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,R)))throw Error("bad curve params: a or b");function D(K,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${K}`);return N}function U(K){if(!(K instanceof B))throw Error("Weierstrass Point expected")}function T(K){if(!c||!c.basises)throw Error("no endo");return bG(K,c.basises,n.ORDER)}function H(K,N,L,I,z){return L=new B(i.mul(L.X,K),L.Y,L.Z),N=Wu(I,N),L=Wu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(K,N,L){this.X=D("x",K),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(K){let{x:N,y:L}=K||{};if(!K||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(K instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(K){let N=B.fromAffine(g(ft(K,void 0,"point")));return N.assertValidity(),N}static fromHex(K){return B.fromBytes(fc(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,N=!0){if(te.createCache(this,K),!N)this.multiply(km);return this}assertValidity(){let K=this;if(K.is0()){if(t.allowInfinityPoint&&i.is0(K.X)&&i.eql(K.Y,i.ONE)&&i.is0(K.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=K.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:K}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(K)}equals(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.eql(i.mul(N,J),i.mul(z,I)),Q=i.eql(i.mul(L,J),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:K,b:N}=o,L=i.mul(N,km),{X:I,Y:z,Z:P}=this,J=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(I,z);return C=i.add(C,C),Q=i.mul(I,P),Q=i.add(Q,Q),J=i.mul(K,Q),j=i.mul(L,fe),j=i.add(J,j),J=i.sub(ae,j),j=i.add(ae,j),j=i.mul(J,j),J=i.mul(C,J),Q=i.mul(L,Q),fe=i.mul(K,fe),C=i.sub(E,fe),C=i.mul(K,C),C=i.add(C,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,C),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,C),J=i.sub(J,E),Q=i.mul(fe,ae),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(J,j,Q)}add(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=o.a,fe=i.mul(o.b,km),C=i.mul(N,z),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.add(N,L),$e=i.add(z,P);Pe=i.mul(Pe,$e),$e=i.add(C,xe),Pe=i.sub(Pe,$e),$e=i.add(N,I);let _e=i.add(z,J);return $e=i.mul($e,_e),_e=i.add(C,Te),$e=i.sub($e,_e),_e=i.add(L,I),j=i.add(P,J),_e=i.mul(_e,j),j=i.add(xe,Te),_e=i.sub(_e,j),E=i.mul(ae,$e),j=i.mul(fe,Te),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(C,C),xe=i.add(xe,C),Te=i.mul(ae,Te),$e=i.mul(fe,$e),xe=i.add(xe,Te),Te=i.sub(C,Te),Te=i.mul(ae,Te),$e=i.add($e,Te),C=i.mul(xe,$e),Q=i.add(Q,C),C=i.mul(_e,$e),j=i.mul(Pe,j),j=i.sub(j,C),C=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,C),new B(j,Q,E)}subtract(K){return U(K),this.add(K.negate())}is0(){return this.equals(B.ZERO)}multiply(K){let{endo:N}=t;if(!n.isValidNot0(K))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(J)=>Xs(B,J));if(N){let{k1neg:P,k1:J,k2neg:j,k2:Q}=T(K),{p:E,f:ae}=z(J),{p:fe,f:C}=z(Q);I=ae.add(C),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:J}=z(K);L=P,I=J}return Xs(B,[L,I])[0]}multiplyUnsafe(K){let{endo:N}=t,L=this,I=K;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===li||L.is0())return B.ZERO;if(I===Po)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:J,k2:j}=T(I),{p1:Q,p2:E}=kz(B,L,P,j);return H(N.beta,Q,E,z,J)}else return te.unsafe(L,I)}toAffine(K){let N=this,L=K,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:K}=t;if(s===Po)return!0;if(K)return K(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:K}=t;if(s===Po)return this;if(K)return K(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Po)return this.is0();return this.clearCofactor().is0()}toBytes(K=!0){return qi(K,"isCompressed"),this.assertValidity(),b(B,this,K)}toHex(K=!0){return dc(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Gu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function Cz(e){return Uint8Array.of(e?2:3)}function Oz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function xG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?mc:t.randomBytes,n=Object.assign(Oz(e.Fp,r),{seed:Math.max($x(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,bz(ft(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n,k=r._lengths;if(!pc(m))return;let A=ft(m,void 0,"key").length,R=A===g||A===S,D=A===b||!!k?.includes(A);if(R&&D)return;return R}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Qu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function $z(e,t,r={}){let i=t;$i(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?mc:r.randomBytes,o=r.hmac===void 0?(z,P)=>ri(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=xG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*Tz+Po<s.ORDER;function k(z){let P=c>>Po;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function R(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){Bx(P);let J=b.signature,j=P==="compact"?J:P==="recovered"?J+1:void 0;return ft(z,j)}class U{r;s;recovery;constructor(z,P,J){if(this.r=A("r",z),this.s=A("s",P),J!=null){if(R(),![0,1,2,3].includes(J))throw Error("invalid recovery id");this.recovery=J}Object.freeze(this)}static fromBytes(z,P=g.format){D(z,P);let J;if(P==="der"){let{r:ae,s:fe}=Nn.toSig(ft(z));return new U(ae,fe)}if(P==="recovered")J=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),J)}static fromHex(z,P){return this.fromBytes(fc(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:J}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),ae=e.fromBytes(ar(Cz((j&1)===0),E)),fe=a.inv(Q),C=H(ft(z,void 0,"msgHash")),xe=a.create(-C*fe),Te=a.create(J*fe),Pe=e.BASE.multiplyUnsafe(xe).add(ae.multiplyUnsafe(Te));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=g.format){if(Bx(z),z==="der")return fc(Nn.hexFromSig(this));let{r:P,s:J}=this,j=a.toBytes(P),Q=a.toBytes(J);if(z==="recovered")return R(),ar(Uint8Array.of(this.assertRecovery()),j,Q);return ar(j,Q)}toHex(z){return dc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let J=Gs(P),j=P.length*8-l;return j>0?J>>BigInt(j):J}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Ju(l);function V(z){return Zi("num < 2^"+l,z,li,B),a.toBytes(z)}function te(z,P){return ft(z,void 0,"message"),P?ft(i(z),void 0,"prehashed message"):z}function K(z,P,J){let{lowS:j,prehash:Q,extraEntropy:E}=Lx(J,g);z=te(z,Q);let ae=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let C=[V(fe),V(ae)];if(E!=null&&E!==!1){let $e=E===!0?n(b.secretKey):E;C.push(ft($e,void 0,"extraEntropy"))}let xe=ar(...C),Te=ae;function Pe($e){let _e=T($e);if(!a.isValidNot0(_e))return;let We=a.inv(_e),Le=e.BASE.multiply(_e).toAffine(),Xe=a.create(Le.x);if(Xe===li)return;let dt=a.create(We*a.create(Te+Xe*fe));if(dt===li)return;let kt=(Le.x===Xe?0:2)|Number(Le.y&Po),jt=dt;if(j&&k(dt))jt=a.neg(dt),kt^=1;return new U(Xe,jt,S?void 0:kt)}return{seed:xe,k2sig:Pe}}function N(z,P,J={}){let{seed:j,k2sig:Q}=K(z,P,J);return sz(i.outputLen,a.BYTES,o)(j,Q).toBytes(J.format)}function L(z,P,J,j={}){let{lowS:Q,prehash:E,format:ae}=Lx(j,g);if(J=ft(J,void 0,"publicKey"),P=te(P,E),!pc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,ae);try{let fe=U.fromBytes(z,ae),C=e.fromBytes(J);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Te}=fe,Pe=H(P),$e=a.inv(Te),_e=a.create(Pe*$e),We=a.create(xe*$e),Le=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(We));if(Le.is0())return!1;return a.create(Le.x)===xe}catch(fe){return!1}}function I(z,P,J={}){let{prehash:j}=Lx(J,g);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var vG=Rz(wG),yc=$z(vG,zt);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zo=BigInt(0),Fr=BigInt(1),jx=BigInt(2),_G=BigInt(8);function kG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function Pz(e,t={}){let r=t,i=_m("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=jx<<BigInt(o.BYTES*8)-Fr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,S))}}catch(k){return{isValid:!1,value:zo}}}:r.uvRatio;if(!kG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,S,k=!1){let A=k?Fr:zo;return Zi("coordinate "+g,S,A,c),S}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Fr,l(s.Gx*s.Gy));static ZERO=new m(zo,Fr,Fr,zo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,S,k,A){this.X=f("x",g),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=g||{};return f("x",S),f("y",k),new m(S,k,Fr,l(S*k))}static fromBytes(g,S=!1){let k=n.BYTES,{a:A,d:R}=s;g=$o(ft(g,k,"point")),qi(S,"zip215");let D=$o(g),U=g[k-1];D[k-1]=U&-129;let T=zn(D),H=S?c:n.ORDER;Zi("point.y",T,zo,H);let B=l(T*T),V=l(B-Fr),te=l(R*B-A),{isValid:K,value:N}=u(V,te);if(!K)throw Error("bad point: invalid y coordinate");let L=(N&Fr)===Fr,I=(U&128)!==0;if(!S&&N===zo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(g,S=!1){return m.fromBytes(fc(g),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,S=!0){if(b.createCache(this,g),!S)this.multiply(jx);return this}assertValidity(){let g=this,{a:S,d:k}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:R,Z:D,T:U}=g,T=l(A*A),H=l(R*R),B=l(D*D),V=l(B*B),te=l(T*S),K=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(K!==N)throw Error("bad point: equation left != right (1)");let L=l(A*R),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:S,Y:k,Z:A}=this,{X:R,Y:D,Z:U}=g,T=l(S*U),H=l(R*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:S,Y:k,Z:A}=this,R=l(S*S),D=l(k*k),U=l(jx*l(A*A)),T=l(g*R),H=S+k,B=l(l(H*H)-R-D),V=T+D,te=V-U,K=T-D,N=l(B*te),L=l(V*K),I=l(B*K),z=l(te*V);return new m(N,L,z,I)}add(g){p(g);let{a:S,d:k}=s,{X:A,Y:R,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=g,te=l(A*T),K=l(R*H),N=l(U*k*V),L=l(D*B),I=l((A+R)*(T+H)-te-K),z=L-N,P=L+N,J=l(K-S*te),j=l(I*z),Q=l(P*J),E=l(I*J),ae=l(z*P);return new m(j,Q,ae,E)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,g,(A)=>Xs(m,A));return Xs(m,[S,k])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===zo)return m.ZERO;if(this.is0()||g===Fr)return this;return b.unsafe(this,g,(S)=>Xs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(g){let S=this,k=g,{X:A,Y:R,Z:D}=S,U=S.is0();if(k==null)k=U?_G:n.inv(D);let T=l(A*k),H=l(R*k),B=n.mul(D,k);if(U)return{x:zo,y:Fr};if(B!==Fr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Fr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=g&Fr?128:0,k}toHex(){return dc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Gu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Ux{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){Tx()}static fromHex(e){Tx()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return dc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Xu=BigInt(0),bc=BigInt(1),Em=BigInt(2);function EG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function zz(e){let t=EG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?mc:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Em**BigInt(254):Em**BigInt(447),b=a?BigInt(8)*Em**BigInt(251)-bc:BigInt(4)*Em**BigInt(445)-bc,g=m+b+bc,S=(I)=>xt(I,r),k=A(f);function A(I){return Ku(S(I),u)}function R(I){let z=$o(ft(I,u,"uCoordinate"));if(a)z[31]&=127;return S(zn(z))}function D(I){return zn(n($o(ft(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Xu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){Zi("u",I,Xu,r),Zi("scalar",z,m,g);let P=z,J=I,j=bc,Q=Xu,E=I,ae=bc,fe=Xu;for(let xe=BigInt(l-1);xe>=Xu;xe--){let Te=P>>xe&bc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(J*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let K={secretKey:u,publicKey:u,seed:u},N=(I)=>(I=I===void 0?c(u):I,ft(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(K),Object.freeze(L),Object.freeze({keygen:Qu(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IG=BigInt(0),Fi=BigInt(1),Nz=BigInt(2),AG=BigInt(3),TG=BigInt(5),RG=BigInt(8),ta=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Fx=(()=>({p:ta,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:RG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Bz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=ta,a=e*e%o*e%o,c=xn(a,Nz,o)*a%o,l=xn(c,Fi,o)*e%o,u=xn(l,TG,o)*l%o,f=xn(u,t,o)*u%o,p=xn(f,r,o)*f%o,m=xn(p,i,o)*p%o,b=xn(m,n,o)*m%o,g=xn(b,n,o)*m%o,S=xn(g,t,o)*u%o;return{pow_p_5_8:xn(S,Nz,o)*e%o,b2:a}}function CG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var qx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Hx(e,t){let r=ta,i=xt(t*t*t,r),n=xt(i*i*t,r),o=Bz(e*n).pow_p_5_8,s=xt(e*i*o,r),a=xt(t*s*s,r),c=s,l=xt(s*qx,r),u=a===e,f=a===xt(-e,r),p=a===xt(-e*qx,r);if(u)s=c;if(f||p)s=l;if(Mi(s,r))s=xt(-s,r);return{isValid:u||f,value:s}}var ea=Pz(Fx,{uvRatio:Hx}),No=(()=>ea.Fp)(),jz=(()=>ea.Fn)();var Im=(()=>{let e=ta;return zz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Bz(t);return xt(xn(r,AG,e)*i,e)},adjustScalarBytes:CG})})();var Zx=qx,OG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),$G=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),PG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),zG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Dz=(e)=>Hx(Fi,e),NG=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Mx=(e)=>No.create(zn(e)&NG);function Lz(e){let{d:t}=Fx,r=ta,i=(k)=>No.create(k),n=i(Zx*e*e),o=i((n+Fi)*PG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Hx(o,a),u=i(l*e);if(!Mi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Fi)*zG-a),p=l*l,m=i((l+l)*a),b=i(f*OG),g=i(Fi-p),S=i(Fi+p);return new ea(i(m*S),i(g*b),i(b*S),i(m*g))}class Or extends Ux{static BASE=(()=>new Or(ea.BASE))();static ZERO=(()=>new Or(ea.ZERO))();static Fp=(()=>No)();static Fn=(()=>jz)();constructor(e){super(e)}static fromAffine(e){return new Or(ea.fromAffine(e))}assertSame(e){if(!(e instanceof Or))throw Error("RistrettoPoint expected")}init(e){return new Or(e)}static fromBytes(e){nr(e,32);let{a:t,d:r}=Fx,i=ta,n=(R)=>No.create(R),o=Mx(e);if(!oz(No.toBytes(o),e)||Mi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Fi+t*s),c=n(Fi-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=Dz(n(f*u)),b=n(m*c),g=n(m*b*f),S=n((o+o)*b);if(Mi(S,i))S=n(-S);let k=n(a*g),A=n(S*k);if(!p||Mi(A,i)||k===IG)throw Error("invalid ristretto255 encoding 2");return new Or(new ea(S,k,Fi,A))}static fromHex(e){return Or.fromBytes(wu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=ta,o=(g)=>No.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=Dz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(Mi(i*p,n)){let g=o(t*Zx),S=o(e*Zx);e=g,t=S,m=o(u*$G)}else m=f;if(Mi(e*p,n))t=o(-t);let b=o((r-t)*m);if(Mi(b,n))b=o(-b);return No.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>No.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Or.ZERO)}}Object.freeze(Or.BASE);Object.freeze(Or.ZERO);Object.freeze(Or.prototype);Object.freeze(Or);var DG=Object.freeze({Point:Or,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Dx(e,r,64,Fp);return DG.deriveToCurve(i)},hashToScalar(e,t={DST:Ez}){let r=Dx(e,t.DST,64,Fp);return jz.create(zn(r))},deriveToCurve(e){nr(e,64);let t=Mx(e.subarray(0,32)),r=Lz(t),i=Mx(e.subarray(32,64)),n=Lz(i);return new Or(r.add(n))}});var Uz=!1,LG=!1;async function qz(e,t){if(LG)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Am(e,t){return await qz(async()=>{let r=Kx(e)?e:await jG(e),i=await crypto.subtle.importKey("raw",UG(t),{name:"X25519"},Uz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Kx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMult(e,t)})}async function ed(e){return await qz(async()=>Am(e,Im.GuBytes),()=>{if(Kx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMultBase(e)})}var BG=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function jG(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...BG,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},Uz,["deriveBits"])}function Kx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function UG(e){return e}class Jx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),ZG(ra(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=ra(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:ra(this.transcript)}}}function ZG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function ra(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Sc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Tm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Vx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Zz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function Mz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=ra(i),s=o.subarray(0,t),a=Sc(e,o.subarray(t));return{data:s,rest:a}}class ui{args;body;constructor(e,t){this.args=e,this.body=t}}async function MG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=yr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=ra(i);return{s:new ui(r,n)}}async function Fz(e){let t=new Jx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await MG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=yr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Sc(e,a)}}}function Wx(e){let t=[];t.push(`age-encryption.org/v1
+`)}function HO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function bt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Ns(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var Lp={name:"@rizom/ops",version:"0.2.0-alpha.643",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as eQ,mkdirSync as tQ,readFileSync as pw,writeFileSync as mw}from"fs";import{dirname as rQ,join as eN}from"path";function AS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Pt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function nr(e,t,r=""){let i=AS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function $i(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Pt(e.outputLen),Pt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Xa(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Bp(e,t){nr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function jp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Tr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ec(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function On(e,t){return e<<32-t|e>>>t}function rt(e,t){return e<<t|e>>>32-t>>>0}var A7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function T7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function R7(e){for(let t=0;t<e.length;t++)e[t]=T7(e[t]);return e}var TS=A7?(e)=>e:R7,JO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),C7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Up(e){if(nr(e),JO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=C7[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function KO(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function wu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(JO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=KO(e.charCodeAt(o)),a=KO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function O7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function RS(e,t=""){if(typeof e==="string")return O7(e);return nr(e,void 0,t)}function CS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];nr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function qp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function OS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Pi(e=32){Pt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var $S=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class PS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if($i(e),nr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Tr(i)}update(e){return Xa(this),this.iHash.update(e),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ri=(()=>{let e=(t,r,i)=>new PS(t,r).update(i).digest();return e.create=(t,r)=>new PS(t,r),e})();function vu(e,t,r){if($i(e),r===void 0)r=new Uint8Array(e.outputLen);return ri(e,r,t)}var zS=Uint8Array.of(0),VO=Uint8Array.of();function NS(e,t,r,i=32){$i(e),Pt(i,"length"),nr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=VO;else nr(r,void 0,"info");let s=new Uint8Array(o*n),a=ri.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)zS[0]=u+1,c.update(u===0?VO:l).update(r).update(zS).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Tr(l,zS),s.slice(0,i)}var bo=(e,t,r,i,n)=>NS(e,vu(e,t,r),i,n);function WO(e,t,r){return e&t^~e&r}function GO(e,t,r){return e&t^e&r^t&r}class Zp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ec(this.buffer)}update(e){Xa(this),nr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ec(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Xa(this),Bp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Tr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ec(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Mp=BigInt(4294967295),QO=BigInt(32);function $7(e,t=!1){if(t)return{h:Number(e&Mp),l:Number(e>>QO&Mp)};return{h:Number(e>>QO&Mp)|0,l:Number(e&Mp)|0}}function YO(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=$7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var DS=(e,t,r)=>e>>>r,LS=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,_u=(e,t,r)=>e<<64-r|t>>>r-32,ku=(e,t,r)=>e>>>r-32|t<<64-r;function ni(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var XO=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),e$=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,t$=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),r$=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,n$=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),i$=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var z7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),So=new Uint32Array(64);class o$ extends Zp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)So[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=So[u-15],p=So[u-2],m=On(f,7)^On(f,18)^f>>>3,b=On(p,17)^On(p,19)^p>>>10;So[u]=b+So[u-7]+m+So[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=On(s,6)^On(s,11)^On(s,25),p=l+f+WO(s,a,c)+z7[u]+So[u]|0,b=(On(r,2)^On(r,13)^On(r,22))+GO(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Tr(So)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Tr(this.buffer)}}class s$ extends o${A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var a$=(()=>YO(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),N7=(()=>a$[0])(),D7=(()=>a$[1])(),xo=new Uint32Array(80),wo=new Uint32Array(80);class c$ extends Zp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)xo[A]=e.getUint32(t),wo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=xo[A-15]|0,D=wo[A-15]|0,U=Ds(R,D,1)^Ds(R,D,8)^DS(R,D,7),T=Ls(R,D,1)^Ls(R,D,8)^LS(R,D,7),H=xo[A-2]|0,B=wo[A-2]|0,V=Ds(H,B,19)^_u(H,B,61)^DS(H,B,6),te=Ls(H,B,19)^ku(H,B,61)^LS(H,B,6),K=t$(T,te,wo[A-7],wo[A-16]),N=r$(K,U,V,xo[A-7],xo[A-16]);xo[A]=N|0,wo[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Ds(u,f,14)^Ds(u,f,18)^_u(u,f,41),D=Ls(u,f,14)^Ls(u,f,18)^ku(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=n$(k,D,T,D7[A],wo[A]),B=i$(H,S,R,U,N7[A],xo[A]),V=H|0,te=Ds(r,i,28)^_u(r,i,34)^_u(r,i,39),K=Ls(r,i,28)^ku(r,i,34)^ku(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=ni(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=XO(V,K,L);r=e$(I,B,te,N),i=I|0}({h:r,l:i}=ni(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ni(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ni(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ni(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=ni(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=ni(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=ni(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=ni(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Tr(xo,wo)}destroy(){this.destroyed=!0,Tr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class l$ extends c${Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(64)}}var zt=OS(()=>new s$,$S(1));var Fp=OS(()=>new l$,$S(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Wp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function US(e){if(!Wp(e))throw TypeError("Uint8Array expected")}function m$(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function h$(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function vo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Iu(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Kp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Jp(e,t){if(!m$(!0,t))throw TypeError(`${e}: array of strings expected`)}function qS(e,t){if(!m$(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Jp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Kp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Kp(n),n.map((o)=>{vo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return vo("join",e),{encode:(t)=>(Jp("join.decode",t),t.join(e)),decode:(t)=>(vo("join.decode",t),t.split(e))}}function Gp(e,t="="){return Iu(e),vo("padding",t),{encode(r){Jp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Jp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function g$(e){return h$(e),{encode:(t)=>t,decode:(t)=>e(t)}}function u$(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Kp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Iu(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let u=o[l],f=t*a,p=f+u;if(!Number.isSafeInteger(p)||f/t!==a||p-u!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var y$=(e,t)=>t===0?e:y$(t,e%t),Vp=(e,t)=>e+(t-y$(e,t)),Hp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function BS(e,t,r,i){if(Kp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Vp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Vp(t,r)}`);let n=0,o=0,s=Hp[t],a=Hp[r]-1,c=[];for(let l of e){if(Iu(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let u=Hp[o];if(u===void 0)throw Error("invalid carry");n&=u-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function L7(e){Iu(e);let t=256;return{encode:(r)=>{if(!Wp(r))throw TypeError("radix.encode input should be Uint8Array");return u$(Array.from(r),t,e)},decode:(r)=>(qS("radix.decode",r),Uint8Array.from(u$(r,e,t)))}}function hn(e,t=!1){if(Iu(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Vp(8,e)>32||Vp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Wp(r))throw TypeError("radix2.encode input should be Uint8Array");return BS(Array.from(r),8,e,!t)},decode:(r)=>(qS("radix2.decode",r),Uint8Array.from(BS(r,e,8,t)))}}function d$(e){return h$(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var i0e=Object.freeze(Xr(hn(4),en("0123456789ABCDEF"),tn(""))),o0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Gp(5),tn(""))),s0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),a0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Gp(5),tn(""))),c0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),l0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),g$((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),b$=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),B7=/[\t\n\f\r ]/,S$=(e,t)=>{vo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&B7.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},ZS=Object.freeze(b$?{encode(e){return US(e),e.toBase64()},decode(e){return S$(e,!1)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Gp(6),tn(""))),yr=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),u0e=Object.freeze(b$?{encode(e){return US(e),e.toBase64({alphabet:"base64url"})},decode(e){return S$(e,!0)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Gp(6),tn(""))),d0e=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),MS=(e)=>Xr(L7(58),en(e),tn("")),f0e=Object.freeze(MS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),p0e=Object.freeze(MS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),m0e=Object.freeze(MS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var jS=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),f$=[996825010,642813549,513874426,1027748829,705979059];function Eu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<f$.length;i++)if((t>>i&1)===1)r^=f$[i];return r}function p$(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Eu(n)^s>>5}n=Eu(n);for(let o=0;o<i;o++)n=Eu(n)^e.charCodeAt(o)&31;for(let o of t)n=Eu(n)^o;for(let o=0;o<6;o++)n=Eu(n);return n^=r,jS.encode(BS([n%Hp[30]],30,5,!1))}function x$(e){let t=e==="bech32"?1:734539939,r=hn(5),i=r.decode,n=r.encode,o=d$(i);function s(f,p,m=90){if(vo("bech32.encode prefix",f),Wp(p))p=Array.from(p);qS("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let g=b+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let S=f.toLowerCase(),k=p$(S,p,t);return`${S}1${jS.encode(p)}${k}`}function a(f,p=90){vo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=b.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,g),k=b.slice(g+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=jS.decode(k).slice(0,-6),R=p$(S,A,t);if(!k.endsWith(R))throw Error(`Invalid checksum in ${f}: expected "${R}"`);return{prefix:S,words:A}}let c=d$(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function u(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:u,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(x$("bech32")),h0e=Object.freeze(x$("bech32m"));var j7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),U7={encode(e){return US(e),e.toHex()},decode(e){return vo("hex",e),Uint8Array.fromHex(e)}},g0e=Object.freeze(j7?U7:Xr(hn(4),en("0123456789abcdef"),tn(""),g$((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function Z7(e,t,r,i){$i(e);let n=qp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Pt(o,"c"),Pt(s,"dkLen"),Pt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=RS(t,"password"),l=RS(r,"salt"),u=new Uint8Array(s),f=ri.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:u,PRF:f,PRFSalt:p}}function M7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Tr(n),r}function FS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=Z7(e,t,r,i),l,u=new Uint8Array(4),f=ec(u),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let g=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(u).digestInto(p),g.set(p.subarray(0,g.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<g.length;k++)g[k]^=p[k]}}return M7(a,c,s,l,p)}function w$(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],u=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],g=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],R=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=g,P=S,J=k,j=A,Q=R,E=D,ae=U;for(let fe=0;fe<8;fe+=2)te^=rt(T+j|0,7),I^=rt(te+T|0,9),j^=rt(I+te|0,13),T^=rt(j+I|0,18),z^=rt(K+H|0,7),Q^=rt(z+K|0,9),H^=rt(Q+z|0,13),K^=rt(H+Q|0,18),E^=rt(P+N|0,7),B^=rt(E+P|0,9),N^=rt(B+E|0,13),P^=rt(N+B|0,18),V^=rt(ae+J|0,7),L^=rt(V+ae|0,9),J^=rt(L+V|0,13),ae^=rt(J+L|0,18),H^=rt(T+V|0,7),B^=rt(H+T|0,9),V^=rt(B+H|0,13),T^=rt(V+B|0,18),N^=rt(K+te|0,7),L^=rt(N+K|0,9),te^=rt(L+N|0,13),K^=rt(te+L|0,18),J^=rt(P+z|0,7),I^=rt(J+P|0,9),z^=rt(I+J|0,13),P^=rt(z+I|0,18),j^=rt(ae+E|0,7),Q^=rt(j+ae|0,9),E^=rt(Q+j|0,13),ae^=rt(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=u+te|0,n[o++]=f+K|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=g+z|0,n[o++]=S+P|0,n[o++]=k+J|0,n[o++]=A+j|0,n[o++]=R+Q|0,n[o++]=D+E|0,n[o++]=U+ae|0}function HS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(w$(r,s,e,t,r,o),a>0)s+=16;w$(r,o,e,t+=16,r,s)}}function F7(e,t,r){let i=qp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:u}=i;if(Pt(n,"N"),Pt(o,"r"),Pt(s,"p"),Pt(a,"dkLen"),Pt(c,"asyncTick"),Pt(l,"maxmem"),u!==void 0&&typeof u!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let g=FS(zt,e,t,{c:1,dkLen:f*s}),S=jp(g),k=jp(new Uint8Array(f*n)),A=jp(new Uint8Array(f)),R=()=>{};if(u){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;R=()=>{if(T++,u&&(!(T%U)||T===D))u(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:g,tmp:A,blockMixCb:R,asyncTick:c}}function H7(e,t,r,i,n){let o=FS(zt,e,r,{c:1,dkLen:t});return Tr(r,i,n),o}function KS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:u,tmp:f,blockMixCb:p}=F7(e,t,r);TS(l);for(let m=0;m<o;m++){let b=a*m;for(let g=0;g<a;g++)c[g]=l[b+g];for(let g=0,S=0;g<i-1;g++)HS(c,S,c,S+=a,n),p();HS(c,(i-1)*a,l,b,n),p();for(let g=0;g<i;g++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];HS(f,0,l,b,n),p()}}return TS(l),H7(e,s,u,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function K7(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Qp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function tc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=K7(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function JS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function v$(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!rc(e))throw Error("invalid output, must be aligned")}function ii(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function J7(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Bs=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),V7=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var W7=(e)=>{for(let t=0;t<e.length;t++)e[t]=V7(e[t]);return e},Ni=Bs?(e)=>e:W7;function _$(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function k$(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function E$(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var I$=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let u=n[0];Ft(u,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(u,f)=>{if(f!==void 0){if(u!==2)throw Error("cipher output not supported");Ft(f,void 0,"output")}},c=!1;return{encrypt(u,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(u),a(s.encrypt.length,f),s.encrypt(u,f)},decrypt(u,f){if(Ft(u),o&&u.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(u,f)}}}return Object.assign(r,e),r};function Au(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!rc(t))throw Error("invalid output, must be aligned");return t}function A$(e,t,r){tc(e),tc(t),Qp(r);let i=new Uint8Array(16),n=J7(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function rc(e){return e.byteOffset%4===0}function nc(e){return Uint8Array.from(Ft(e))}var R$=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),G7=(()=>Ni(ii(R$("expand 16-byte k"))))(),Q7=(()=>Ni(ii(R$("expand 32-byte k"))))();function nt(e,t){return e<<t|e>>>32-t}var Tu=64,Y7=16,VS=(()=>4294967295)(),T$=Uint32Array.of();function X7(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Tu),u=ii(l),f=Bs&&rc(n)&&rc(o),p=f?ii(n):T$,m=f?ii(o):T$;if(!Bs){for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),Ni(u),s>=VS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}return}for(let b=0;b<c;s++){if(e(t,r,i,u,s,a),s>=VS)throw Error("arx: counter overflow");let g=Math.min(Tu,c-b);if(f&&g===Tu){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<Y7;k++)A=S+k,m[A]=p[A]^u[k];b+=Tu;continue}for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}}function C$(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=_$({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return tc(n),tc(s),Qp(o),Qp(r),(a,c,l,u,f=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(u=Au(p,u,!1),tc(f),f<0||f>=VS)throw Error("arx: counter overflow");let m=[],b=a.length,g,S;if(b===32)m.push(g=nc(a)),S=Q7;else if(b===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),S=G7,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Bs||!rc(c))m.push(c=nc(c));let k=ii(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Bs)i(S,k,ii(D),k);else{let U=Ni(Uint32Array.from(S));i(U,k,ii(D),k),$n(U),Ni(k)}c=c.subarray(16)}else if(!Bs)Ni(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let R=Ni(ii(c));try{return X7(e,S,k,R,l,u,f,s),u}finally{$n(...m)}}}function or(e,t){return e[t++]&255|(e[t++]&255)<<8}class O${blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=nc(Ft(e,32,"key"));let t=or(e,0),r=or(e,2),i=or(e,4),n=or(e,6),o=or(e,8),s=or(e,10),a=or(e,12),c=or(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=or(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],u=o[4],f=o[5],p=o[6],m=o[7],b=o[8],g=o[9],S=or(e,t+0),k=or(e,t+2),A=or(e,t+4),R=or(e,t+6),D=or(e,t+8),U=or(e,t+10),T=or(e,t+12),H=or(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),K=n[3]+((A>>>7|R<<9)&8191),N=n[4]+((R>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),J=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*g)+te*(5*b)+K*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*u)+z*(5*l)+P*(5*c)+J*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*g)+K*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*u)+P*(5*l)+J*(5*c),j+=E>>>13,E&=8191;let ae=j+B*c+V*a+te*s+K*(5*g)+N*(5*b);j=ae>>>13,ae&=8191,ae+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*u)+J*(5*l),j+=ae>>>13,ae&=8191;let fe=j+B*l+V*c+te*a+K*s+N*(5*g);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+J*(5*u),j+=fe>>>13,fe&=8191;let C=j+B*u+V*l+te*c+K*a+N*s;j=C>>>13,C&=8191,C+=L*(5*g)+I*(5*b)+z*(5*m)+P*(5*p)+J*(5*f),j+=C>>>13,C&=8191;let xe=j+B*f+V*u+te*l+K*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*g)+z*(5*b)+P*(5*m)+J*(5*p),j+=xe>>>13,xe&=8191;let Te=j+B*p+V*f+te*u+K*l+N*c;j=Te>>>13,Te&=8191,Te+=L*a+I*s+z*(5*g)+P*(5*b)+J*(5*m),j+=Te>>>13,Te&=8191;let Pe=j+B*m+V*p+te*f+K*u+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*g)+J*(5*b),j+=Pe>>>13,Pe&=8191;let $e=j+B*b+V*m+te*p+K*f+N*u;j=$e>>>13,$e&=8191,$e+=L*l+I*c+z*a+P*s+J*(5*g),j+=$e>>>13,$e&=8191;let _e=j+B*g+V*b+te*m+K*p+N*f;j=_e>>>13,_e&=8191,_e+=L*u+I*l+z*c+P*a+J*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=ae,n[3]=fe,n[4]=C,n[5]=xe,n[6]=Te,n[7]=Pe,n[8]=$e,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){JS(this),Ft(e),e=nc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){JS(this),v$(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var $$=E$(32,(e)=>new O$(e));function eW(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],u=t[0],f=t[1],p=t[2],m=t[3],b=t[4],g=t[5],S=t[6],k=t[7],A=n,R=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=u,K=f,N=p,L=m,I=b,z=g,P=S,J=k,j=A,Q=R,E=D,ae=U;for(let C=0;C<o;C+=2)T=T+te|0,j=nt(j^T,16),I=I+j|0,te=nt(te^I,12),T=T+te|0,j=nt(j^T,8),I=I+j|0,te=nt(te^I,7),H=H+K|0,Q=nt(Q^H,16),z=z+Q|0,K=nt(K^z,12),H=H+K|0,Q=nt(Q^H,8),z=z+Q|0,K=nt(K^z,7),B=B+N|0,E=nt(E^B,16),P=P+E|0,N=nt(N^P,12),B=B+N|0,E=nt(E^B,8),P=P+E|0,N=nt(N^P,7),V=V+L|0,ae=nt(ae^V,16),J=J+ae|0,L=nt(L^J,12),V=V+L|0,ae=nt(ae^V,8),J=J+ae|0,L=nt(L^J,7),T=T+K|0,ae=nt(ae^T,16),P=P+ae|0,K=nt(K^P,12),T=T+K|0,ae=nt(ae^T,8),P=P+ae|0,K=nt(K^P,7),H=H+N|0,j=nt(j^H,16),J=J+j|0,N=nt(N^J,12),H=H+N|0,j=nt(j^H,8),J=J+j|0,N=nt(N^J,7),B=B+L|0,Q=nt(Q^B,16),I=I+Q|0,L=nt(L^I,12),B=B+L|0,Q=nt(Q^B,8),I=I+Q|0,L=nt(L^I,7),V=V+te|0,E=nt(E^V,16),z=z+E|0,te=nt(te^z,12),V=V+te|0,E=nt(E^V,8),z=z+E|0,te=nt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=u+te|0,i[fe++]=f+K|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=g+z|0,i[fe++]=S+P|0,i[fe++]=k+J|0,i[fe++]=A+j|0,i[fe++]=R+Q|0,i[fe++]=D+E|0,i[fe++]=U+ae|0}var tW=C$(eW,{counterRight:!1,counterLength:4,allowShortKeys:!1});var rW=new Uint8Array(16),P$=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(rW.subarray(r))},nW=new Uint8Array(32);function z$(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,nW),s=A$(i.length,n?n.length:0,!0),a=$$.create(o);if(n)P$(a,n);P$(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var iW=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Au(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=z$(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=Au(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=z$(e,t,r,a,i);if(!k$(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),gn=I$({blockSize:64,nonceLength:12,tagLength:16},iW(tW));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Qt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function De(e,t,r=""){let i=ic(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function yn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Qt(e.outputLen),Qt(e.blockLen)}function Li(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Yp(e,t){De(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function Xp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Mr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function em(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}var oW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function sW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function aW(e){for(let t=0;t<e.length;t++)e[t]=sW(e[t]);return e}var WS=oW?(e)=>e:aW,D$=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),cW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function js(e){if(De(e),D$)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=cW[e[r]];return t}var Di={_0:48,_9:57,A:65,F:70,a:97,f:102};function N$(e){if(e>=Di._0&&e<=Di._9)return e-Di._0;if(e>=Di.A&&e<=Di.F)return e-(Di.A-10);if(e>=Di.a&&e<=Di.f)return e-(Di.a-10);return}function Us(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(D$)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=N$(e.charCodeAt(o)),a=N$(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Ut(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];De(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function oc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function _o(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ko=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QS=BigInt(0),GS=BigInt(1);function Ru(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function L$(e){if(typeof e==="bigint"){if(!tm(e))throw Error("positive bigint expected, got "+e)}else Qt(e);return e}function Cu(e){let t=L$(e).toString(16);return t.length&1?"0"+t:t}function B$(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?QS:BigInt("0x"+e)}function Eo(e){return B$(js(e))}function Io(e){return B$(js(rm(De(e)).reverse()))}function sc(e,t){Qt(t),e=L$(e);let r=Us(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function Ou(e,t){return sc(e,t).reverse()}function rm(e){return Uint8Array.from(e)}function Ao(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var tm=(e)=>typeof e==="bigint"&&QS<=e;function lW(e,t,r){return tm(e)&&tm(t)&&tm(r)&&t<=e&&e<r}function $u(e,t,r,i){if(!lW(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function YS(e){let t;for(t=0;e>QS;e>>=GS,t+=1);return t}var Pu=(e)=>(GS<<BigInt(e))-GS;function j$(e,t,r){if(Qt(e,"hashLen"),Qt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,Ut(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Ut(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function qs(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function XS(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cr=BigInt(0),br=BigInt(1),Zs=BigInt(2),Z$=BigInt(3),M$=BigInt(4),F$=BigInt(5),uW=BigInt(7),H$=BigInt(8),dW=BigInt(9),K$=BigInt(16);function Rr(e,t){let r=e%t;return r>=Cr?r:t+r}function bn(e,t,r){let i=e;while(t-- >Cr)i*=i,i%=r;return i}function U$(e,t){if(e===Cr)throw Error("invert: expected non-zero number");if(t<=Cr)throw Error("invert: expected positive modulus, got "+t);let r=Rr(e,t),i=t,n=Cr,o=br,s=br,a=Cr;while(r!==Cr){let l=i/r,u=i%r,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==br)throw Error("invert: does not exist");return Rr(n,t)}function ex(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function J$(e,t){let r=(e.ORDER+br)/M$,i=e.pow(t,r);return ex(e,i,t),i}function fW(e,t){let r=(e.ORDER-F$)/H$,i=e.mul(t,Zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Zs),n),a=e.mul(o,e.sub(s,e.ONE));return ex(e,a,t),a}function pW(e){let t=nm(e),r=V$(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+uW)/K$;return(a,c)=>{let l=a.pow(c,s),u=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(u),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,u,m),u=a.cmov(p,f,b);let g=a.eql(a.sqr(u),c),S=a.cmov(l,u,g);return ex(a,S,c),S}}function V$(e){if(e<Z$)throw Error("sqrt is not defined for small field");let t=e-br,r=0;while(t%Zs===Cr)t/=Zs,r++;let i=Zs,n=nm(e);while(q$(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return J$;let o=n.pow(i,t),s=(t+br)/Zs;return function(c,l){if(c.is0(l))return l;if(q$(c,l)!==1)throw Error("Cannot find square root");let u=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(b++,g=c.sqr(g),b===u)throw Error("Cannot find square root");let S=br<<BigInt(u-b-1),k=c.pow(f,S);u=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function mW(e){if(e%M$===Z$)return J$;if(e%H$===F$)return fW;if(e%K$===dW)return pW(e);return V$(e)}var hW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function tx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=hW.reduce((i,n)=>(i[n]="function",i),t);return qs(e,r),e}function gW(e,t,r){if(r<Cr)throw Error("invalid exponent, negatives unsupported");if(r===Cr)return e.ONE;if(r===br)return t;let i=e.ONE,n=t;while(r>Cr){if(r&br)i=e.mul(i,n);n=e.sqr(n),r>>=br}return i}function zu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function q$(e,t){let r=(e.ORDER-br)/Zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function yW(e,t){if(t!==void 0)Qt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class W${ORDER;BITS;BYTES;isLE;ZERO=Cr;ONE=br;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Cr)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=yW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Rr(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Cr<=e&&e<this.ORDER}is0(e){return e===Cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&br)===br}neg(e){return Rr(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Rr(e*e,this.ORDER)}add(e,t){return Rr(e+t,this.ORDER)}sub(e,t){return Rr(e-t,this.ORDER)}mul(e,t){return Rr(e*t,this.ORDER)}pow(e,t){return gW(this,e,t)}div(e,t){return Rr(e*U$(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return U$(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=mW(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?Ou(e,this.BYTES):sc(e,this.BYTES)}fromBytes(e,t=!1){De(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Io(e):Eo(e);if(s)a=Rr(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return zu(this,e)}cmov(e,t,r){return r?t:e}}function nm(e,t={}){return new W$(e,t)}function G$(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function rx(e){let t=G$(e);return t+Math.ceil(t/2)}function Q$(e,t,r=!1){De(e);let i=e.length,n=G$(t),o=rx(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Io(e):Eo(e),a=Rr(s,t-br)+br;return r?Ou(a,n):sc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ac=BigInt(0),Ms=BigInt(1);function Nu(e,t){let r=t.negate();return e?r:t}function sx(e,t){let r=zu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function tP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function nx(e,t){tP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Pu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function Y$(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ms;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var ix=new WeakMap,rP=new WeakMap;function ox(e){return rP.get(e)||1}function X$(e){if(e!==ac)throw Error("invalid wNAF")}class ax{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>ac){if(t&Ms)r=r.add(i);i=i.double(),t>>=Ms}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=nx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=nx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=Y$(r,s,o);if(r=a,l)n=n.add(Nu(f,t[p]));else i=i.add(Nu(u,t[c]))}return X$(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=nx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===ac)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=Y$(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return X$(r),i}getPrecomputes(e,t,r){let i=ix.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);ix.set(t,i)}}return i}cached(e,t,r){let i=ox(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=ox(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){tP(t,this.bits),rP.set(e,t),ix.delete(e)}hasCache(e){return ox(e)!==1}}function nP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>ac||i>ac){if(r&Ms)o=o.add(n);if(i&Ms)s=s.add(n);n=n.double(),r>>=Ms,i>>=Ms}return{p1:o,p2:s}}function eP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return tx(t),t}else return nm(e,{isLE:r})}function iP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>ac))throw Error(`CURVE.${c} must be positive bigint`)}let n=eP(t.p,r.Fp,i),o=eP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function im(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Du=BigInt(0),cc=BigInt(1),om=BigInt(2);function bW(e){return qs(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function oP(e){let t=bW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||_o,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?om**BigInt(254):om**BigInt(447),b=a?BigInt(8)*om**BigInt(251)-cc:BigInt(4)*om**BigInt(445)-cc,g=m+b+cc,S=(I)=>Rr(I,r),k=A(f);function A(I){return Ou(S(I),u)}function R(I){let z=rm(De(I,u,"uCoordinate"));if(a)z[31]&=127;return S(Io(z))}function D(I){return Io(n(rm(De(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Du)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){$u("u",I,Du,r),$u("scalar",z,m,g);let P=z,J=I,j=cc,Q=Du,E=I,ae=cc,fe=Du;for(let xe=BigInt(l-1);xe>=Du;xe--){let Te=P>>xe&cc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(J*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let K={secretKey:u,publicKey:u,seed:u},N=(I=c(u))=>(De(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:im(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}class cx{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(yn(e),De(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Mr(i)}update(e){return Li(this),this.iHash.update(e),this}digestInto(e){Li(this),De(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var lc=(e,t,r)=>new cx(e,t).update(r).digest();lc.create=(e,t)=>new cx(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var sP=(e,t)=>(e+(e>=0?t:-t)/cP)/t;function SW(e,t,r){let[[i,n],[o,s]]=t,a=sP(s*e,r),c=sP(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<Bi,p=u<Bi;if(f)l=-l;if(p)u=-u;let m=Pu(Math.ceil(YS(r)/2))+uc;if(l<Bi||l>=m||u<Bi||u>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:u}}function ux(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function lx(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Ru(r.lowS,"lowS"),Ru(r.prehash,"prehash"),r.format!==void 0)ux(r.format);return r}class aP extends Error{constructor(e=""){super(e)}}var To={Err:aP,_tlv:{encode:(e,t)=>{let{Err:r}=To;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Cu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Cu(n.length/2|128):"";return Cu(e)+o+n+t},decode(e,t){let{Err:r}=To,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=To;if(e<Bi)throw new t("integer: negative integers are not allowed");let r=Cu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=To;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Eo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=To,n=De(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=To,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Bi=BigInt(0),uc=BigInt(1),cP=BigInt(2),sm=BigInt(3),xW=BigInt(4);function dx(e,t={}){let r=iP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;qs(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=uP(i,n);function u(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),J=i.toBytes(z);if(Ru(I,"isCompressed"),I){u();let j=!i.isOdd(P);return Ut(lP(j),J)}else return Ut(Uint8Array.of(4),J,i.toBytes(P))}function p(N){De(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],J=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(J);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=g(j),E;try{E=i.sqrt(Q)}catch(C){let xe=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}u();let ae=i.isOdd(E);if((P&1)===1!==ae)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(J.subarray(0,j)),E=i.fromBytes(J.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function g(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=g(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,sm),xW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function R(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return SW(N,c.basises,n.ORDER)}let T=XS((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=XS((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Nu(z,L),I=Nu(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=R("x",N),this.Y=R("y",L,!0),this.Z=R("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(De(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Us(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(K.createCache(this,N),!L)this.multiply(sm);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(J,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,sm),{X:z,Y:P,Z:J}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(J,J),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,J),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,C),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),C=i.mul(N,C),xe=i.sub(ae,C),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(ae,ae),ae=i.add(E,ae),ae=i.add(ae,C),ae=i.mul(ae,xe),Q=i.add(Q,ae),C=i.mul(P,J),C=i.add(C,C),ae=i.mul(C,xe),j=i.sub(j,ae),E=i.mul(C,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:J,Z:j}=N,Q=i.ZERO,E=i.ZERO,ae=i.ZERO,fe=o.a,C=i.mul(o.b,sm),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.mul(z,j),$e=i.add(L,I),_e=i.add(P,J);$e=i.mul($e,_e),_e=i.add(xe,Te),$e=i.sub($e,_e),_e=i.add(L,z);let We=i.add(P,j);return _e=i.mul(_e,We),We=i.add(xe,Pe),_e=i.sub(_e,We),We=i.add(I,z),Q=i.add(J,j),We=i.mul(We,Q),Q=i.add(Te,Pe),We=i.sub(We,Q),ae=i.mul(fe,_e),Q=i.mul(C,Pe),ae=i.add(Q,ae),Q=i.sub(Te,ae),ae=i.add(Te,ae),E=i.mul(Q,ae),Te=i.add(xe,xe),Te=i.add(Te,xe),Pe=i.mul(fe,Pe),_e=i.mul(C,_e),Te=i.add(Te,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Te,_e),E=i.add(E,xe),xe=i.mul(We,_e),Q=i.mul($e,Q),Q=i.sub(Q,xe),xe=i.mul($e,Te),ae=i.mul(We,ae),ae=i.add(ae,xe),new V(Q,E,ae)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(J)=>K.cached(this,J,(j)=>sx(V,j));if(L){let{k1neg:J,k1:j,k2neg:Q,k2:E}=U(N),{p:ae,f:fe}=P(j),{p:C,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,ae,C,J,Q)}else{let{p:J,f:j}=P(N);I=J,z=j}return sx(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Bi||I.is0())return V.ZERO;if(N===uc)return I;if(K.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:J,k2:j}=U(N),{p1:Q,p2:E}=nP(V,I,P,j);return B(L.beta,Q,E,z,J)}else return K.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===uc)return!0;if(N)return N(V,this);return K.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===uc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return Ru(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return js(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,K=new ax(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function lP(e){return Uint8Array.of(e?2:3)}function uP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function wW(e,t={}){let{Fn:r}=e,i=t.randomBytes||_o,n=Object.assign(uP(e.Fp,r),{seed:rx(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return Q$(De(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n;if(!ic(m))return;if("_lengths"in r&&r._lengths||b===g)return;let k=De(m,void 0,"key").length;return k===g||k===S}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=im(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function fx(e,t,r={}){yn(t),qs(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||_o,n=r.hmac||((I,z)=>lc(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m}=wW(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*cP<o.ORDER;function S(I){let z=a>>uc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function R(I,z){ux(z);let P=m.signature,J=z==="compact"?P:z==="recovered"?P+1:void 0;return De(I,J)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){R(I,z);let P;if(z==="der"){let{r:E,s:ae}=To.toSig(De(I));return new D(E,ae)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let J=m.signature/2,j=I.subarray(0,J),Q=I.subarray(J,J*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Us(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,J=this.assertRecovery(),j=J===2||J===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Ut(lP((J&1)===0),Q)),ae=s.inv(j),fe=T(De(I,void 0,"msgHash")),C=s.create(-fe*ae),xe=s.create(P*ae),Te=e.BASE.multiplyUnsafe(C).add(E.multiplyUnsafe(xe));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(I=b.format){if(ux(I),I==="der")return Us(To.hexFromSig(this));let{r:z,s:P}=this,J=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Ut(Uint8Array.of(this.assertRecovery()),J,j);return Ut(J,j)}toHex(I){return js(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=Eo(z),J=z.length*8-c;return J>0?P>>BigInt(J):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=Pu(c);function B(I){return $u("num < 2^"+c,I,Bi,H),s.toBytes(I)}function V(I,z){return De(I,void 0,"message"),z?De(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:J,prehash:j,extraEntropy:Q}=lx(P,b);I=V(I,j);let E=T(I),ae=s.fromBytes(z);if(!s.isValidNot0(ae))throw Error("invalid private key");let fe=[B(ae),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(De(Pe,void 0,"extraEntropy"))}let C=Ut(...fe),xe=E;function Te(Pe){let $e=U(Pe);if(!s.isValidNot0($e))return;let _e=s.inv($e),We=e.BASE.multiply($e).toAffine(),Le=s.create(We.x);if(Le===Bi)return;let Xe=s.create(_e*s.create(xe+Le*ae));if(Xe===Bi)return;let dt=(We.x===Le?0:2)|Number(We.y&uc),kt=Xe;if(J&&S(Xe))kt=s.neg(Xe),dt^=1;return new D(Le,kt,g?void 0:dt)}return{seed:C,k2sig:Te}}function K(I,z,P={}){let{seed:J,k2sig:j}=te(I,z,P);return j$(t.outputLen,s.BYTES,n)(J,j).toBytes(P.format)}function N(I,z,P,J={}){let{lowS:j,prehash:Q,format:E}=lx(J,b);if(P=De(P,void 0,"publicKey"),z=V(z,Q),!ic(I)){let ae=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ae)}R(I,E);try{let ae=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&ae.hasHighS())return!1;let{r:C,s:xe}=ae,Te=T(z),Pe=s.inv(xe),$e=s.create(Te*Pe),_e=s.create(C*Pe),We=e.BASE.multiplyUnsafe($e).add(fe.multiplyUnsafe(_e));if(We.is0())return!1;return s.create(We.x)===C}catch(ae){return!1}}function L(I,z,P={}){let{prehash:J}=lx(P,b);return z=V(z,J),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:u,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:K,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function dP(e,t,r){return e&t^~e&r}function fP(e,t,r){return e&t^e&r^t&r}class am{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=em(this.buffer)}update(e){Li(this),De(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=em(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Li(this),Yp(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Mr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let u=o;u<i;u++)t[u]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=em(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let u=0;u<c;u++)s.setUint32(4*u,l[u],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var ji=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var sr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var cm=BigInt(4294967295),pP=BigInt(32);function vW(e,t=!1){if(t)return{h:Number(e&cm),l:Number(e>>pP&cm)};return{h:Number(e>>pP&cm)|0,l:Number(e&cm)|0}}function lm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=vW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var px=(e,t,r)=>e>>>r,mx=(e,t,r)=>e<<32-r|t>>>r,Fs=(e,t,r)=>e>>>r|t<<32-r,Hs=(e,t,r)=>e<<32-r|t>>>r,Lu=(e,t,r)=>e<<64-r|t>>>r-32,Bu=(e,t,r)=>e>>>r-32|t<<64-r;var mP=(e,t,r)=>e<<r|t>>>32-r,hP=(e,t,r)=>t<<r|e>>>32-r,gP=(e,t,r)=>t<<r-32|e>>>64-r,yP=(e,t,r)=>e<<r-32|t>>>64-r;function oi(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var bP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),SP=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,xP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),wP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,vP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),_P=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var kW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ro=new Uint32Array(64);class kP extends am{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let u=0;u<16;u++,t+=4)Ro[u]=e.getUint32(t,!1);for(let u=16;u<64;u++){let f=Ro[u-15],p=Ro[u-2],m=Pn(f,7)^Pn(f,18)^f>>>3,b=Pn(p,17)^Pn(p,19)^p>>>10;Ro[u]=b+Ro[u-7]+m+Ro[u-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let u=0;u<64;u++){let f=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+f+dP(s,a,c)+kW[u]+Ro[u]|0,b=(Pn(r,2)^Pn(r,13)^Pn(r,22))+fP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Mr(Ro)}destroy(){this.set(0,0,0,0,0,0,0,0),Mr(this.buffer)}}class EP extends kP{A=ji[0]|0;B=ji[1]|0;C=ji[2]|0;D=ji[3]|0;E=ji[4]|0;F=ji[5]|0;G=ji[6]|0;H=ji[7]|0;constructor(){super(32)}}var IP=(()=>lm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),EW=(()=>IP[0])(),IW=(()=>IP[1])(),Co=new Uint32Array(80),Oo=new Uint32Array(80);class AP extends am{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:u,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,u,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=u|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Co[A]=e.getUint32(t),Oo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=Co[A-15]|0,D=Oo[A-15]|0,U=Fs(R,D,1)^Fs(R,D,8)^px(R,D,7),T=Hs(R,D,1)^Hs(R,D,8)^mx(R,D,7),H=Co[A-2]|0,B=Oo[A-2]|0,V=Fs(H,B,19)^Lu(H,B,61)^px(H,B,6),te=Hs(H,B,19)^Bu(H,B,61)^mx(H,B,6),K=xP(T,te,Oo[A-7],Oo[A-16]),N=wP(K,U,V,Co[A-7],Co[A-16]);Co[A]=N|0,Oo[A]=K|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:u,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Fs(u,f,14)^Fs(u,f,18)^Lu(u,f,41),D=Hs(u,f,14)^Hs(u,f,18)^Bu(u,f,41),U=u&p^~u&b,T=f&m^~f&g,H=vP(k,D,T,IW[A],Oo[A]),B=_P(H,S,R,U,EW[A],Co[A]),V=H|0,te=Fs(r,i,28)^Lu(r,i,34)^Lu(r,i,39),K=Hs(r,i,28)^Bu(r,i,34)^Bu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=u|0,m=f|0,{h:u,l:f}=oi(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=bP(V,K,L);r=SP(I,B,te,N),i=I|0}({h:r,l:i}=oi(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=oi(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=oi(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=oi(this.Dh|0,this.Dl|0,c|0,l|0),{h:u,l:f}=oi(this.Eh|0,this.El|0,u|0,f|0),{h:p,l:m}=oi(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=oi(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=oi(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,u,f,p,m,b,g,S,k)}roundClean(){Mr(Co,Oo)}destroy(){Mr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class TP extends AP{Ah=sr[0]|0;Al=sr[1]|0;Bh=sr[2]|0;Bl=sr[3]|0;Ch=sr[4]|0;Cl=sr[5]|0;Dh=sr[6]|0;Dl=sr[7]|0;Eh=sr[8]|0;El=sr[9]|0;Fh=sr[10]|0;Fl=sr[11]|0;Gh=sr[12]|0;Gl=sr[13]|0;Hh=sr[14]|0;Hl=sr[15]|0;constructor(){super(48)}}var um=oc(()=>new EP,ko(1));var RP=oc(()=>new TP,ko(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var AW=BigInt(1),CP=BigInt(2),TW=BigInt(3),RW=BigInt(5),S_e=BigInt(8),OP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function CW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=OP,a=e*e%o*e%o,c=bn(a,CP,o)*a%o,l=bn(c,AW,o)*e%o,u=bn(l,RW,o)*l%o,f=bn(u,t,o)*u%o,p=bn(f,r,o)*f%o,m=bn(p,i,o)*p%o,b=bn(m,n,o)*m%o,g=bn(b,n,o)*m%o,S=bn(g,t,o)*u%o;return{pow_p_5_8:bn(S,CP,o)*e%o,b2:a}}function OW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var $P=(()=>{let e=OP;return oP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=CW(t);return Rr(bn(r,TW,e)*i,e)},adjustScalarBytes:OW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var $W=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),PW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var zW=dx($W),hx=fx(zW,um);var NW=dx(PW),PP=fx(NW,RP);function NP(e,t,r){if(yn(e),r===void 0)r=new Uint8Array(e.outputLen);return lc(e,r,t)}var gx=Uint8Array.of(0),zP=Uint8Array.of();function DP(e,t,r,i=32){yn(e),Qt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=zP;else De(r,void 0,"info");let s=new Uint8Array(o*n),a=lc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let u=0;u<o;u++)gx[0]=u+1,c.update(u===0?zP:l).update(r).update(gx).digestInto(l),s.set(l,n*u),a._cloneInto(c);return a.destroy(),c.destroy(),Mr(l,gx),s.slice(0,i)}var DW=BigInt(0),ju=BigInt(1),LW=BigInt(2),BW=BigInt(7),jW=BigInt(256),UW=BigInt(113),jP=[],UP=[],qP=[];for(let e=0,t=ju,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],jP.push(2*(5*i+r)),UP.push((e+1)*(e+2)/2%64);let n=DW;for(let o=0;o<7;o++)if(t=(t<<ju^(t>>BW)*UW)%jW,t&LW)n^=ju<<(ju<<BigInt(o))-ju;qP.push(n)}var ZP=lm(qP,!0),qW=ZP[0],ZW=ZP[1],LP=(e,t,r)=>r>32?gP(e,t,r):mP(e,t,r),BP=(e,t,r)=>r>32?yP(e,t,r):hP(e,t,r);function MW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],u=r[c+1],f=LP(l,u,1)^r[a],p=BP(l,u,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=UP[s],c=LP(n,o,a),l=BP(n,o,a),u=jP[s];n=e[u],o=e[u+1],e[u]=c,e[u+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=qW[i],e[1]^=ZW[i]}Mr(r)}class dm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Qt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=Xp(this.state)}clone(){return this._cloneInto()}keccak(){WS(this.state32),MW(this.state32,this.rounds),WS(this.state32),this.posOut=0,this.pos=0}update(e){Li(this),De(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Li(this,!1),De(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Qt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Yp(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Mr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new dm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var MP=(e,t,r,i={})=>oc(()=>new dm(t,e,r),i);var Ks=MP(6,136,32,ko(8));var FP=MP(6,72,64,ko(10));var HP=(e,t,r,i={})=>oc((n={})=>new dm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),KP=HP(31,168,16,ko(11)),si=HP(31,136,32,ko(12));function yx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function VP(e){return yx(e),(e&e-1)===0&&e!==0}function bx(e,t){yx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function WP(e){return yx(e),31-Math.clz32(e)}function JP(e){let t=e.length;if(t<2||!VP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=WP(t);for(let i=0;i<t;i++){let n=bx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var Sx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=WP(r);if(!VP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(u)=>{if(u.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)JP(u);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,g=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,R=p++;A<g;A++){let D=o?n?r-R:R:A*S,U=k+A,T=k+A+g,H=i[D],B=u[T],V=u[U];if(l){let te=e.mul(B,H);u[U]=e.add(V,te),u[T]=e.sub(V,te)}else if(o)u[U]=e.add(B,V),u[T]=e.mul(e.sub(B,V),H);else u[U]=e.add(V,B),u[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)JP(u);return u}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ai=_o;function fm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function GP(e){return Uint8Array.from(e)}function Js(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),u=typeof c==="number"?n[s]:c.encode(n[s]);if(De(u,l,e),o.set(u,a),typeof c!=="number")u.fill(0);a+=l}return o},decode:(n)=>{De(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function pm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{De(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ht(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function xx(e){return(1<<e)-1}var z_e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var QP=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,R=i)=>{let D=A%R|0;return(D>=0?D|0:R+D|0)|0},l=(A,R=i)=>{let D=c(A,R)|0;return(D>R>>1?D-R|0:D)|0};function u(){let A=t(r);for(let R=0;R<r;R++){let D=bx(R,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[R]=Number(U)|0}return A}let f=u(),p={add:(A,R)=>c((A|0)+(R|0))|0,sub:(A,R)=>c((A|0)-(R|0))|0,mul:(A,R)=>c((A|0)*(R|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=Sx(p,{dit:!1,...m}),g=Sx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{g(A);for(let R=0;R<A.length;R++)A[R]=c(n*A[R]);return A}},bitsCoder:(A,R)=>{let D=xx(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=(R.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[K++]=V&xx(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,K=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[K++]=R.decode(V&D)}return H}}}}},FW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,u)=>(i[n+0]=l,i[n+1]=u,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ht(o,i)}}},YP=FW(KP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Sr=256,Ui=3329,HW=3303,KW=17,{mod:Zu,nttZetas:JW,NTT:Vs,bitsCoder:VW}=QP({N:Sr,Q:Ui,F:HW,ROOT_OF_UNITY:KW,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),wx={512:{N:Sr,Q:Ui,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Sr,Q:Ui,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Sr,Q:Ui,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},WW=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ui/2)/Ui,decode:(r)=>r*Ui+t>>>e}},Uu=(e)=>VW(e,WW(e));function Ws(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]+t[r])}function GW(e,t){for(let r=0;r<Sr;r++)e[r]=Zu(e[r]-t[r])}function QW(e,t,r,i,n){let o=Zu(t*i*n+e*r),s=Zu(e*i+t*r);return{c0:o,c1:s}}function mm(e,t){for(let r=0;r<Sr/2;r++){let i=JW[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=QW(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function XP(e){let t=new Uint16Array(Sr);for(let r=0;r<Sr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<Sr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ui)t[r++]=o;if(r<Sr&&s<Ui)t[r++]=s}}return t}function qu(e,t,r,i){let n=e(i*Sr/4,t,r),o=new Uint16Array(Sr),s=Xp(n),a=0;for(let c=0,l=0,u=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(u+=p&1,p>>=1,a+=1,a===i)f=u,u=0;else if(a===2*i)o[l++]=Zu(f-u),u=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var YW=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=Uu(1),u=Uu(c),f=Uu(a),p=Js("publicKey",pm(Uu(12),t),32),m=pm(Uu(12),t),b=Js("ciphertext",pm(f,t),u),g=Js("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{De(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[R,D]=g.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Vs.encode(qu(r,D,V,o)));let H=i(R);for(let V=0;V<t;V++){let te=Vs.encode(qu(r,D,t+V,o));for(let K=0;K<t;K++){let N=XP(H.get(K,V));Ws(te,mm(N,U[K]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,R]),secretKey:m.encode(U)};return Ht(R,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[R,D]=p.decode(S),U=[];for(let K=0;K<t;K++)U.push(Vs.encode(qu(r,A,K,o)));let T=i(D),H=new Uint16Array(Sr),B=[];for(let K=0;K<t;K++){let N=qu(r,A,t+K,s),L=new Uint16Array(Sr);for(let I=0;I<t;I++){let z=XP(T.get(K,I));Ws(L,mm(z,U[I]))}Ws(N,Vs.decode(L)),B.push(N),Ws(H,mm(R[K],U[K])),Ht(L)}T.clean();let V=qu(r,A,2*t,s);Ws(V,Vs.decode(H));let te=l.decode(k);return Ws(te,V),Ht(R,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,R]=b.decode(S),D=m.decode(k),U=new Uint16Array(Sr);for(let T=0;T<t;T++)Ws(U,mm(D[T],Vs.encode(A[T])));return GW(R,Vs.decode(U)),Ht(U,D,A),l.encode(R)}}};function vx(e){let t=YW(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Js("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(u=ai(64))=>{De(u,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(u.subarray(0,32)),m=r(f),b=a.encode([p,f,m,u.subarray(32)]);return Ht(p,m),{publicKey:f,secretKey:b}},getPublicKey:(u)=>{let[f,p,m,b]=a.decode(u);return Uint8Array.from(p)},encapsulate:(u,f=ai(32))=>{De(u,s.publicKey,"publicKey"),De(f,32,"message");let p=u.subarray(0,384*e.K),m=o.encode(o.decode(GP(p)));if(!fm(m,p))throw Ht(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ht(m);let b=i.create().update(f).update(r(u)).digest(),g=t.encrypt(u,f,b.subarray(32,64));return Ht(b.subarray(32)),{cipherText:g,sharedSecret:b.subarray(0,32)}},decapsulate:(u,f)=>{De(f,a.bytesLen,"secretKey"),De(u,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!fm(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,S,k,A]=a.decode(f),R=t.decrypt(u,g),D=i.create().update(R).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,R,D.subarray(32,64)),H=fm(u,T),B=n.create({dkLen:32}).update(A).update(u).digest();return Ht(R,T,!H?U:B),H?U:B}}}function XW(e,t,r){return si.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var _x={HASH256:Ks,HASH512:FP,KDF:si,XOF:YP,PRF:XW},H_e=vx({..._x,...wx[512]}),Mu=vx({..._x,...wx[768]}),ez=vx({..._x,...wx[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function eG(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ai(r.seed))=>{De(s,r.seed,"seed");let a=o.isLE?Io(s):Eo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function kx(e,t=!1){let r=eG(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ai(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ht(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Fu(e,t){return Js(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function Ex(e){return(t,r)=>e(t,{dkLen:r})}function tG(e,t,...r){let i=Fu(r,"seed"),n=Fu(r,"publicKey");if(e===void 0)e=i.bytesLen;Qt(e);function o(s){De(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),u=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:u}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ai(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ht(a),Ht(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function hm(e,t,r,i,...n){let o=tG(e,r,...n),s=Fu(n,"cipherText"),a=Fu(n,"publicKey"),c=Fu(n,"msg");if(t===void 0)t=c.bytesLen;return Qt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,u=ai(c.bytesLen)){let f=a.decode(l),p=c.decode(u),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),g=m.map((k)=>k.cipherText),S={sharedSecret:i(f,g,b),cipherText:s.encode(g)};return Ht(b,g),S},decapsulate(l,u){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(u),b=n.map((g,S)=>g.decapsulate(f[S],m[S]));return i(p,f,b)}}}function tz(e,t,r,i,n){return yn(i),yn(n),hm(32,32,Ex(i),(o,s,a)=>n(Ut(a[0],a[1],s[1],o[1],Ao(e))),t,r)}var rke=tz("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Mu,kx(hx,!0),si,Ks),nke=tz("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",ez,kx(PP,!0),si,Ks);function rG(e,t,r,i,n){return yn(i),yn(n),hm(32,32,Ex(i),(o,s,a)=>{let c=Ut(a[0],a[1],s[0],o[0],s[1],o[1],Ao(e)),l=32,u=Ut(Ao("hybrid_prk"),c),f=NP(n,u),p=Ut(sc(32,2),Ao("shared_secret"),Ao("")),m=DP(n,f,p,32);return Ht(f,p,u,c),m},t,r)}var rz=kx($P),ike=rG("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Mu,rz,si,um),nG=(()=>hm(32,32,Ex(si),(e,t,r)=>Ks(Ut(r[0],r[1],t[1],e[1],Ao("\\.//^\\"))),Mu,rz))();function iG(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let u=0,f=t;;u=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(u,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ai(i)){return De(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ai(i)){De(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),u=e.getPublicKey(c,!1);return Ht(c),{sharedSecret:l,cipherText:u}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function oG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=iG(r,n,o,i),a=64,c=a+i;return hm(32,32,(l)=>{De(l,32);let u=si(l,{dkLen:c}),f=u.subarray(0,a),p=u.subarray(a,c);return Ut(f,p)},(l,u,f)=>Ks(Ut(f[0],f[1],u[1],l[1],Ao(e))),t,s)}var sG=(()=>oG("MLKEM768-P256",Mu,hx,128))();var gm=nG,nz=sG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ft=(e,t,r)=>nr(e,t,r),Ax=Pt,dc=Up,ar=(...e)=>CS(...e),fc=(e)=>wu(e),pc=AS,mc=(e)=>Pi(e),bm=BigInt(0),Ix=BigInt(1);function qi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function Sm(e){if(typeof e==="bigint"){if(!ym(e))throw RangeError("positive bigint expected, got "+e)}else Ax(e);return e}function ci(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Hu(e){let t=Sm(e).toString(16);return t.length&1?"0"+t:t}function iz(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?bm:BigInt("0x"+e)}function Gs(e){return iz(Up(e))}function zn(e){return iz(Up($o(nr(e)).reverse()))}function xm(e,t){if(Pt(t),t===0)throw RangeError("zero length");e=Sm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return wu(r.padStart(t*2,"0"))}function Ku(e,t){return xm(e,t).reverse()}function oz(e,t){if(e=ft(e),t=ft(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(ft(e))}function wm(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var ym=(e)=>typeof e==="bigint"&&bm<=e;function aG(e,t,r){return ym(e)&&ym(t)&&ym(r)&&t<=e&&e<r}function Zi(e,t,r,i){if(!aG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function hc(e){if(e<bm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>bm;e>>=Ix,t+=1);return t}var Ju=(e)=>(Ix<<BigInt(e))-Ix;function sz(e,t,r){if(Pt(e,"hashLen"),Pt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),u=0,f=()=>{c.fill(1),l.fill(0),u=0},p=(...S)=>r(l,ar(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(u++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return ar(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var Tx=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cr=BigInt(0),Tt=BigInt(1),Qs=BigInt(2),uz=BigInt(3),dz=BigInt(4),fz=BigInt(5),cG=BigInt(7),pz=BigInt(8),lG=BigInt(9),mz=BigInt(16);function xt(e,t){if(t<=cr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=cr?r:t+r}function xn(e,t,r){if(t<cr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >cr)i*=i,i%=r;return i}function az(e,t){if(e===cr)throw Error("invert: expected non-zero number");if(t<=cr)throw Error("invert: expected positive modulus, got "+t);let r=xt(e,t),i=t,n=cr,o=Tt,s=Tt,a=cr;while(r!==cr){let l=i/r,u=i-r*l,f=n-s*l,p=o-a*l;i=r,r=u,n=s,o=a,s=f,a=p}if(i!==Tt)throw Error("invert: does not exist");return xt(n,t)}function Rx(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function hz(e,t){let r=e,i=(r.ORDER+Tt)/dz,n=r.pow(t,i);return Rx(r,n,t),n}function uG(e,t){let r=e,i=(r.ORDER-fz)/pz,n=r.mul(t,Qs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Qs),o),c=r.mul(s,r.sub(a,r.ONE));return Rx(r,c,t),c}function dG(e){let t=vm(e),r=gz(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+cG)/mz;return(a,c)=>{let l=a,u=l.pow(c,s),f=l.mul(u,i),p=l.mul(u,n),m=l.mul(u,o),b=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);u=l.cmov(u,f,b),f=l.cmov(m,p,g);let S=l.eql(l.sqr(f),c),k=l.cmov(u,f,S);return Rx(l,k,c),k}}function gz(e){if(e<uz)throw Error("sqrt is not defined for small field");let t=e-Tt,r=0;while(t%Qs===cr)t/=Qs,r++;let i=Qs,n=vm(e);while(cz(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return hz;let o=n.pow(i,t),s=(t+Tt)/Qs;return function(c,l){let u=c;if(u.is0(l))return l;if(cz(u,l)!==1)throw Error("Cannot find square root");let f=r,p=u.mul(u.ONE,o),m=u.pow(l,t),b=u.pow(l,s);while(!u.eql(m,u.ONE)){if(u.is0(m))return u.ZERO;let g=1,S=u.sqr(m);while(!u.eql(S,u.ONE))if(g++,S=u.sqr(S),g===f)throw Error("Cannot find square root");let k=Tt<<BigInt(f-g-1),A=u.pow(p,k);f=g,p=u.sqr(A),m=u.mul(m,p),b=u.mul(b,A)}return b}}function fG(e){if(e%dz===uz)return hz;if(e%pz===fz)return uG;if(e%mz===lG)return dG(e);return gz(e)}var Mi=(e,t)=>(xt(e,t)&Tt)===Tt,pG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Cx(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=pG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),ci(e.BYTES,"BYTES"),ci(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function mG(e,t,r){let i=e;if(r<cr)throw Error("invalid exponent, negatives unsupported");if(r===cr)return i.ONE;if(r===Tt)return t;let n=i.ONE,o=t;while(r>cr){if(r&Tt)n=i.mul(n,o);o=i.sqr(o),r>>=Tt}return n}function Vu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function cz(e,t){let r=e,i=(r.ORDER-Tt)/Qs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function hG(e,t){if(t!==void 0)Ax(t);if(e<=cr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=hc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var lz=new WeakMap;class Ox{ORDER;BITS;BYTES;isLE;ZERO=cr;ONE=Tt;_lengths;_mod;constructor(e,t={}){if(e<=Tt)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=hG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return xt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return cr<=e&&e<this.ORDER}is0(e){return e===cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Tt)===Tt}neg(e){return xt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return xt(e*e,this.ORDER)}add(e,t){return xt(e+t,this.ORDER)}sub(e,t){return xt(e-t,this.ORDER)}mul(e,t){return xt(e*t,this.ORDER)}pow(e,t){return mG(this,e,t)}div(e,t){return xt(e*az(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return az(e,this.ORDER)}sqrt(e){let t=lz.get(this);if(!t)lz.set(this,t=fG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Ku(e,this.BYTES):xm(e,this.BYTES)}fromBytes(e,t=!1){ft(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?zn(e):Gs(e);if(s)a=xt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Vu(this,e)}cmov(e,t,r){return qi(r,"condition"),r?t:e}}Object.freeze(Ox.prototype);function vm(e,t={}){return new Ox(e,t)}function yz(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Tt)throw Error("field order must be greater than 1");let t=hc(e-Tt);return Math.ceil(t/8)}function $x(e){let t=yz(e);return t+Math.ceil(t/2)}function bz(e,t,r=!1){ft(e);let i=e.length,n=yz(t),o=Math.max($x(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?zn(e):Gs(e),a=xt(s,t-Tt)+Tt;return r?Ku(a,n):xm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gc=BigInt(0),Ys=BigInt(1);function Wu(e,t){let r=t.negate();return e?r:t}function Xs(e,t){let r=Vu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function vz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Px(e,t){vz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Ju(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function Sz(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ys;let l=t*i,u=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:u,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var zx=new WeakMap,_z=new WeakMap;function Nx(e){return _z.get(e)||1}function xz(e){if(e!==gc)throw Error("invalid wNAF")}class Gu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>gc){if(t&Ys)r=r.add(i);i=i.double(),t>>=Ys}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=Px(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=Px(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:u,isNegF:f,offsetF:p}=Sz(r,s,o);if(r=a,l)n=n.add(Wu(f,t[p]));else i=i.add(Wu(u,t[c]))}return xz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=Px(e,this.bits);for(let o=0;o<n.windows;o++){if(r===gc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=Sz(r,o,n);if(r=s,c)continue;else{let u=t[a];i=i.add(l?u.negate():u)}}return xz(r),i}getPrecomputes(e,t,r){let i=zx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);zx.set(t,i)}}return i}cached(e,t,r){let i=Nx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=Nx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){vz(t,this.bits),_z.set(e,t),zx.delete(e)}hasCache(e){return Nx(e)!==1}}function kz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>gc||i>gc){if(r&Ys)o=o.add(n);if(i&Ys)s=s.add(n);n=n.double(),r>>=Ys,i>>=Ys}return{p1:o,p2:s}}function wz(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Cx(t),t}else return vm(e,{isLE:r})}function _m(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>gc))throw Error(`CURVE.${c} must be positive bigint`)}let n=wz(t.p,r.Fp,i),o=wz(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Qu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Yu(e,t){if(ci(e),ci(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function gG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function yG(e){if(!pc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?wm(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function Dx(e,t,r,i){if(ft(e),ci(r),t=yG(t),t.length>255)t=i(ar(wm("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ar(t,Yu(t.length,1)),c=new Uint8Array(o),l=Yu(r,2),u=Array(s),f=i(ar(c,e,l,Yu(0,1),a));u[0]=i(ar(f,Yu(1,1),a));for(let m=1;m<s;m++){let b=[gG(f,u[m-1]),Yu(m+1,1),a];u[m]=i(ar(...b))}return ar(...u).slice(0,r)}var Ez="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Iz=(e,t)=>(e+(e>=0?t:-t)/Tz)/t;function bG(e,t,r){Zi("scalar",e,li,r);let[[i,n],[o,s]]=t,a=Iz(s*e,r),c=Iz(-n*e,r),l=e-a*i-c*o,u=-a*n-c*s,f=l<li,p=u<li;if(f)l=-l;if(p)u=-u;let m=Ju(Math.ceil(hc(r)/2))+Po;if(l<li||l>=m||u<li||u>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:u}}function Bx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Lx(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(qi(r.lowS,"lowS"),qi(r.prehash,"prehash"),r.format!==void 0)Bx(r.format);return r}class Az extends Error{constructor(e=""){super(e)}}var Nn={Err:Az,_tlv:{encode:(e,t)=>{let{Err:r}=Nn;if(ci(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Hu(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Hu(n.length/2|128):"";return Hu(e)+o+n+t},decode(e,t){let{Err:r}=Nn;t=ft(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let u of l)s=s<<8|u;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Nn;if(Sm(e),e<li)throw new t("integer: negative integers are not allowed");let r=Hu(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Nn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Gs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Nn,n=ft(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:u}=i.decode(2,c);if(u.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Nn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Nn._tlv);Object.freeze(Nn._int);Object.freeze(Nn);var li=BigInt(0),Po=BigInt(1),Tz=BigInt(2),km=BigInt(3),SG=BigInt(4);function Rz(e,t={}){let r=_m("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let u=Oz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(K,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(qi(L,"isCompressed"),L){f();let J=!i.isOdd(z);return ar(Cz(J),P)}else return ar(Uint8Array.of(4),P,i.toBytes(z))}function m(K){ft(K,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=u,I=K.length,z=K[0],P=K.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let J=i.fromBytes(P);if(!i.isValid(J))throw Error("bad point: is not on curve, wrong x");let j=S(J),Q;try{Q=i.sqrt(j)}catch(fe){let C=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:J,y:Q}}else if(I===L&&z===4){let J=i.BYTES,j=i.fromBytes(P.subarray(0,J)),Q=i.fromBytes(P.subarray(J,J*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function S(K){let N=i.sqr(K),L=i.mul(N,K);return i.add(i.add(L,i.mul(K,o.a)),o.b)}function k(K,N){let L=i.sqr(N),I=S(K);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,km),SG),R=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,R)))throw Error("bad curve params: a or b");function D(K,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${K}`);return N}function U(K){if(!(K instanceof B))throw Error("Weierstrass Point expected")}function T(K){if(!c||!c.basises)throw Error("no endo");return bG(K,c.basises,n.ORDER)}function H(K,N,L,I,z){return L=new B(i.mul(L.X,K),L.Y,L.Z),N=Wu(I,N),L=Wu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(K,N,L){this.X=D("x",K),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(K){let{x:N,y:L}=K||{};if(!K||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(K instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(K){let N=B.fromAffine(g(ft(K,void 0,"point")));return N.assertValidity(),N}static fromHex(K){return B.fromBytes(fc(K))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(K=8,N=!0){if(te.createCache(this,K),!N)this.multiply(km);return this}assertValidity(){let K=this;if(K.is0()){if(t.allowInfinityPoint&&i.is0(K.X)&&i.eql(K.Y,i.ONE)&&i.is0(K.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=K.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!K.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:K}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(K)}equals(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.eql(i.mul(N,J),i.mul(z,I)),Q=i.eql(i.mul(L,J),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:K,b:N}=o,L=i.mul(N,km),{X:I,Y:z,Z:P}=this,J=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(I,z);return C=i.add(C,C),Q=i.mul(I,P),Q=i.add(Q,Q),J=i.mul(K,Q),j=i.mul(L,fe),j=i.add(J,j),J=i.sub(ae,j),j=i.add(ae,j),j=i.mul(J,j),J=i.mul(C,J),Q=i.mul(L,Q),fe=i.mul(K,fe),C=i.sub(E,fe),C=i.mul(K,C),C=i.add(C,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,C),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,C),J=i.sub(J,E),Q=i.mul(fe,ae),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(J,j,Q)}add(K){U(K);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:J}=K,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=o.a,fe=i.mul(o.b,km),C=i.mul(N,z),xe=i.mul(L,P),Te=i.mul(I,J),Pe=i.add(N,L),$e=i.add(z,P);Pe=i.mul(Pe,$e),$e=i.add(C,xe),Pe=i.sub(Pe,$e),$e=i.add(N,I);let _e=i.add(z,J);return $e=i.mul($e,_e),_e=i.add(C,Te),$e=i.sub($e,_e),_e=i.add(L,I),j=i.add(P,J),_e=i.mul(_e,j),j=i.add(xe,Te),_e=i.sub(_e,j),E=i.mul(ae,$e),j=i.mul(fe,Te),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(C,C),xe=i.add(xe,C),Te=i.mul(ae,Te),$e=i.mul(fe,$e),xe=i.add(xe,Te),Te=i.sub(C,Te),Te=i.mul(ae,Te),$e=i.add($e,Te),C=i.mul(xe,$e),Q=i.add(Q,C),C=i.mul(_e,$e),j=i.mul(Pe,j),j=i.sub(j,C),C=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,C),new B(j,Q,E)}subtract(K){return U(K),this.add(K.negate())}is0(){return this.equals(B.ZERO)}multiply(K){let{endo:N}=t;if(!n.isValidNot0(K))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(J)=>Xs(B,J));if(N){let{k1neg:P,k1:J,k2neg:j,k2:Q}=T(K),{p:E,f:ae}=z(J),{p:fe,f:C}=z(Q);I=ae.add(C),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:J}=z(K);L=P,I=J}return Xs(B,[L,I])[0]}multiplyUnsafe(K){let{endo:N}=t,L=this,I=K;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===li||L.is0())return B.ZERO;if(I===Po)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:J,k2:j}=T(I),{p1:Q,p2:E}=kz(B,L,P,j);return H(N.beta,Q,E,z,J)}else return te.unsafe(L,I)}toAffine(K){let N=this,L=K,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let J=N.is0();if(L==null)L=J?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(J)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:K}=t;if(s===Po)return!0;if(K)return K(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:K}=t;if(s===Po)return this;if(K)return K(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Po)return this.is0();return this.clearCofactor().is0()}toBytes(K=!0){return qi(K,"isCompressed"),this.assertValidity(),b(B,this,K)}toHex(K=!0){return dc(this.toBytes(K))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Gu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function Cz(e){return Uint8Array.of(e?2:3)}function Oz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function xG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?mc:t.randomBytes,n=Object.assign(Oz(e.Fp,r),{seed:Math.max($x(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,bz(ft(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n,k=r._lengths;if(!pc(m))return;let A=ft(m,void 0,"key").length,R=A===g||A===S,D=A===b||!!k?.includes(A);if(R&&D)return;return R}function u(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Qu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:u,keygen:p,Point:e,utils:f,lengths:n})}function $z(e,t,r={}){let i=t;$i(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?mc:r.randomBytes,o=r.hmac===void 0?(z,P)=>ri(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=xG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*Tz+Po<s.ORDER;function k(z){let P=c>>Po;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function R(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){Bx(P);let J=b.signature,j=P==="compact"?J:P==="recovered"?J+1:void 0;return ft(z,j)}class U{r;s;recovery;constructor(z,P,J){if(this.r=A("r",z),this.s=A("s",P),J!=null){if(R(),![0,1,2,3].includes(J))throw Error("invalid recovery id");this.recovery=J}Object.freeze(this)}static fromBytes(z,P=g.format){D(z,P);let J;if(P==="der"){let{r:ae,s:fe}=Nn.toSig(ft(z));return new U(ae,fe)}if(P==="recovered")J=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),J)}static fromHex(z,P){return this.fromBytes(fc(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:J}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),ae=e.fromBytes(ar(Cz((j&1)===0),E)),fe=a.inv(Q),C=H(ft(z,void 0,"msgHash")),xe=a.create(-C*fe),Te=a.create(J*fe),Pe=e.BASE.multiplyUnsafe(xe).add(ae.multiplyUnsafe(Te));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=g.format){if(Bx(z),z==="der")return fc(Nn.hexFromSig(this));let{r:P,s:J}=this,j=a.toBytes(P),Q=a.toBytes(J);if(z==="recovered")return R(),ar(Uint8Array.of(this.assertRecovery()),j,Q);return ar(j,Q)}toHex(z){return dc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let J=Gs(P),j=P.length*8-l;return j>0?J>>BigInt(j):J}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Ju(l);function V(z){return Zi("num < 2^"+l,z,li,B),a.toBytes(z)}function te(z,P){return ft(z,void 0,"message"),P?ft(i(z),void 0,"prehashed message"):z}function K(z,P,J){let{lowS:j,prehash:Q,extraEntropy:E}=Lx(J,g);z=te(z,Q);let ae=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let C=[V(fe),V(ae)];if(E!=null&&E!==!1){let $e=E===!0?n(b.secretKey):E;C.push(ft($e,void 0,"extraEntropy"))}let xe=ar(...C),Te=ae;function Pe($e){let _e=T($e);if(!a.isValidNot0(_e))return;let We=a.inv(_e),Le=e.BASE.multiply(_e).toAffine(),Xe=a.create(Le.x);if(Xe===li)return;let dt=a.create(We*a.create(Te+Xe*fe));if(dt===li)return;let kt=(Le.x===Xe?0:2)|Number(Le.y&Po),jt=dt;if(j&&k(dt))jt=a.neg(dt),kt^=1;return new U(Xe,jt,S?void 0:kt)}return{seed:xe,k2sig:Pe}}function N(z,P,J={}){let{seed:j,k2sig:Q}=K(z,P,J);return sz(i.outputLen,a.BYTES,o)(j,Q).toBytes(J.format)}function L(z,P,J,j={}){let{lowS:Q,prehash:E,format:ae}=Lx(j,g);if(J=ft(J,void 0,"publicKey"),P=te(P,E),!pc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,ae);try{let fe=U.fromBytes(z,ae),C=e.fromBytes(J);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Te}=fe,Pe=H(P),$e=a.inv(Te),_e=a.create(Pe*$e),We=a.create(xe*$e),Le=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(We));if(Le.is0())return!1;return a.create(Le.x)===xe}catch(fe){return!1}}function I(z,P,J={}){let{prehash:j}=Lx(J,g);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:u,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var vG=Rz(wG),yc=$z(vG,zt);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zo=BigInt(0),Fr=BigInt(1),jx=BigInt(2),_G=BigInt(8);function kG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function Pz(e,t={}){let r=t,i=_m("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=jx<<BigInt(o.BYTES*8)-Fr,l=(g)=>n.create(g),u=r.uvRatio===void 0?(g,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,S))}}catch(k){return{isValid:!1,value:zo}}}:r.uvRatio;if(!kG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,S,k=!1){let A=k?Fr:zo;return Zi("coordinate "+g,S,A,c),S}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Fr,l(s.Gx*s.Gy));static ZERO=new m(zo,Fr,Fr,zo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,S,k,A){this.X=f("x",g),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=g||{};return f("x",S),f("y",k),new m(S,k,Fr,l(S*k))}static fromBytes(g,S=!1){let k=n.BYTES,{a:A,d:R}=s;g=$o(ft(g,k,"point")),qi(S,"zip215");let D=$o(g),U=g[k-1];D[k-1]=U&-129;let T=zn(D),H=S?c:n.ORDER;Zi("point.y",T,zo,H);let B=l(T*T),V=l(B-Fr),te=l(R*B-A),{isValid:K,value:N}=u(V,te);if(!K)throw Error("bad point: invalid y coordinate");let L=(N&Fr)===Fr,I=(U&128)!==0;if(!S&&N===zo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(g,S=!1){return m.fromBytes(fc(g),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,S=!0){if(b.createCache(this,g),!S)this.multiply(jx);return this}assertValidity(){let g=this,{a:S,d:k}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:R,Z:D,T:U}=g,T=l(A*A),H=l(R*R),B=l(D*D),V=l(B*B),te=l(T*S),K=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(K!==N)throw Error("bad point: equation left != right (1)");let L=l(A*R),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:S,Y:k,Z:A}=this,{X:R,Y:D,Z:U}=g,T=l(S*U),H=l(R*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:S,Y:k,Z:A}=this,R=l(S*S),D=l(k*k),U=l(jx*l(A*A)),T=l(g*R),H=S+k,B=l(l(H*H)-R-D),V=T+D,te=V-U,K=T-D,N=l(B*te),L=l(V*K),I=l(B*K),z=l(te*V);return new m(N,L,z,I)}add(g){p(g);let{a:S,d:k}=s,{X:A,Y:R,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=g,te=l(A*T),K=l(R*H),N=l(U*k*V),L=l(D*B),I=l((A+R)*(T+H)-te-K),z=L-N,P=L+N,J=l(K-S*te),j=l(I*z),Q=l(P*J),E=l(I*J),ae=l(z*P);return new m(j,Q,ae,E)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,g,(A)=>Xs(m,A));return Xs(m,[S,k])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===zo)return m.ZERO;if(this.is0()||g===Fr)return this;return b.unsafe(this,g,(S)=>Xs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(g){let S=this,k=g,{X:A,Y:R,Z:D}=S,U=S.is0();if(k==null)k=U?_G:n.inv(D);let T=l(A*k),H=l(R*k),B=n.mul(D,k);if(U)return{x:zo,y:Fr};if(B!==Fr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Fr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=g&Fr?128:0,k}toHex(){return dc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Gu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Ux{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){Tx()}static fromHex(e){Tx()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return dc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Xu=BigInt(0),bc=BigInt(1),Em=BigInt(2);function EG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function zz(e){let t=EG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?mc:s,l=a?255:448,u=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Em**BigInt(254):Em**BigInt(447),b=a?BigInt(8)*Em**BigInt(251)-bc:BigInt(4)*Em**BigInt(445)-bc,g=m+b+bc,S=(I)=>xt(I,r),k=A(f);function A(I){return Ku(S(I),u)}function R(I){let z=$o(ft(I,u,"uCoordinate"));if(a)z[31]&=127;return S(zn(z))}function D(I){return zn(n($o(ft(I,u,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Xu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let J=S(I*(z-P));return z=S(z-J),P=S(P+J),{x_2:z,x_3:P}}function te(I,z){Zi("u",I,Xu,r),Zi("scalar",z,m,g);let P=z,J=I,j=bc,Q=Xu,E=I,ae=bc,fe=Xu;for(let xe=BigInt(l-1);xe>=Xu;xe--){let Te=P>>xe&bc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(J*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let K={secretKey:u,publicKey:u,seed:u},N=(I)=>(I=I===void 0?c(u):I,ft(I,K.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(K),Object.freeze(L),Object.freeze({keygen:Qu(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:K})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var IG=BigInt(0),Fi=BigInt(1),Nz=BigInt(2),AG=BigInt(3),TG=BigInt(5),RG=BigInt(8),ta=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Fx=(()=>({p:ta,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:RG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Bz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=ta,a=e*e%o*e%o,c=xn(a,Nz,o)*a%o,l=xn(c,Fi,o)*e%o,u=xn(l,TG,o)*l%o,f=xn(u,t,o)*u%o,p=xn(f,r,o)*f%o,m=xn(p,i,o)*p%o,b=xn(m,n,o)*m%o,g=xn(b,n,o)*m%o,S=xn(g,t,o)*u%o;return{pow_p_5_8:xn(S,Nz,o)*e%o,b2:a}}function CG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var qx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Hx(e,t){let r=ta,i=xt(t*t*t,r),n=xt(i*i*t,r),o=Bz(e*n).pow_p_5_8,s=xt(e*i*o,r),a=xt(t*s*s,r),c=s,l=xt(s*qx,r),u=a===e,f=a===xt(-e,r),p=a===xt(-e*qx,r);if(u)s=c;if(f||p)s=l;if(Mi(s,r))s=xt(-s,r);return{isValid:u||f,value:s}}var ea=Pz(Fx,{uvRatio:Hx}),No=(()=>ea.Fp)(),jz=(()=>ea.Fn)();var Im=(()=>{let e=ta;return zz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Bz(t);return xt(xn(r,AG,e)*i,e)},adjustScalarBytes:CG})})();var Zx=qx,OG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),$G=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),PG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),zG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Dz=(e)=>Hx(Fi,e),NG=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Mx=(e)=>No.create(zn(e)&NG);function Lz(e){let{d:t}=Fx,r=ta,i=(k)=>No.create(k),n=i(Zx*e*e),o=i((n+Fi)*PG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Hx(o,a),u=i(l*e);if(!Mi(u,r))u=i(-u);if(!c)l=u;if(!c)s=n;let f=i(s*(n-Fi)*zG-a),p=l*l,m=i((l+l)*a),b=i(f*OG),g=i(Fi-p),S=i(Fi+p);return new ea(i(m*S),i(g*b),i(b*S),i(m*g))}class Or extends Ux{static BASE=(()=>new Or(ea.BASE))();static ZERO=(()=>new Or(ea.ZERO))();static Fp=(()=>No)();static Fn=(()=>jz)();constructor(e){super(e)}static fromAffine(e){return new Or(ea.fromAffine(e))}assertSame(e){if(!(e instanceof Or))throw Error("RistrettoPoint expected")}init(e){return new Or(e)}static fromBytes(e){nr(e,32);let{a:t,d:r}=Fx,i=ta,n=(R)=>No.create(R),o=Mx(e);if(!oz(No.toBytes(o),e)||Mi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Fi+t*s),c=n(Fi-t*s),l=n(a*a),u=n(c*c),f=n(t*r*l-u),{isValid:p,value:m}=Dz(n(f*u)),b=n(m*c),g=n(m*b*f),S=n((o+o)*b);if(Mi(S,i))S=n(-S);let k=n(a*g),A=n(S*k);if(!p||Mi(A,i)||k===IG)throw Error("invalid ristretto255 encoding 2");return new Or(new ea(S,k,Fi,A))}static fromHex(e){return Or.fromBytes(wu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=ta,o=(g)=>No.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=Dz(o(s*c)),u=o(l*s),f=o(l*a),p=o(u*f*i),m;if(Mi(i*p,n)){let g=o(t*Zx),S=o(e*Zx);e=g,t=S,m=o(u*$G)}else m=f;if(Mi(e*p,n))t=o(-t);let b=o((r-t)*m);if(Mi(b,n))b=o(-b);return No.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>No.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals(Or.ZERO)}}Object.freeze(Or.BASE);Object.freeze(Or.ZERO);Object.freeze(Or.prototype);Object.freeze(Or);var DG=Object.freeze({Point:Or,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=Dx(e,r,64,Fp);return DG.deriveToCurve(i)},hashToScalar(e,t={DST:Ez}){let r=Dx(e,t.DST,64,Fp);return jz.create(zn(r))},deriveToCurve(e){nr(e,64);let t=Mx(e.subarray(0,32)),r=Lz(t),i=Mx(e.subarray(32,64)),n=Lz(i);return new Or(r.add(n))}});var Uz=!1,LG=!1;async function qz(e,t){if(LG)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Am(e,t){return await qz(async()=>{let r=Kx(e)?e:await jG(e),i=await crypto.subtle.importKey("raw",UG(t),{name:"X25519"},Uz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Kx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMult(e,t)})}async function ed(e){return await qz(async()=>Am(e,Im.GuBytes),()=>{if(Kx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Im.scalarMultBase(e)})}var BG=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function jG(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...BG,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},Uz,["deriveBits"])}function Kx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function UG(e){return e}class Jx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),ZG(ra(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=ra(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:ra(this.transcript)}}}function ZG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function ra(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Sc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Tm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Vx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Zz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function Mz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=ra(i),s=o.subarray(0,t),a=Sc(e,o.subarray(t));return{data:s,rest:a}}class ui{args;body;constructor(e,t){this.args=e,this.body=t}}async function MG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=yr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=ra(i);return{s:new ui(r,n)}}async function Fz(e){let t=new Jx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await MG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=yr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Sc(e,a)}}}function Wx(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let r of e){t.push("-> "+r.args.join(" ")+`
 `);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(yr.encode(r.body.subarray(i,n))+`
 `)}if(r.body.length%48===0)t.push(`

package/dist/index.js CHANGED Viewed

@@ -743,7 +743,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),o}async function F9(e,t){let r=await Et(e),i=r.users.find((n)=>n.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:r.pilot,user:i}}async function H9(e){let t=await $ve(Ri(Pve(),"brains-ops-watchdog-smoke-")),r=Ri(t,"id_ed25519"),i=Ri(t,"known_hosts");try{let n=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${n}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=zve.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await wu(r,Lve(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await Ove(r,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await wu(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:r,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(n){throw await XO(t,{recursive:!0,force:!0}),n}}async function YO(e,t,r){return e.commandRunner("ssh",[...K9(e),`root@${e.serverIp}`,"bash","-s","--",t,r],{stdin:e$()})}async function Nve(e,t,r){return e.commandRunner("scp",[...K9(e),"-r",`root@${e.serverIp}:${t}/.`,r])}function K9(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function Dve(e){try{return await Cve(e),!0}catch{return!1}}async function TS(e,t,r){await Promise.all([wu(Ri(e,`${t}.stdout.log`),r.stdout),wu(Ri(e,`${t}.stderr.log`),r.stderr)])}function Lve(e){return`${e.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var q9,zve;var CS=x(async()=>{Ae();L9();yn();Dp();await D9();q9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),zve=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{access as UL,chmod as jE,mkdir as Bh,readFile as ZL,writeFile as qL}from"fs/promises";import{dirname as MX,join as Uc}from"path";import{fileURLToPath as FX}from"url";var qp={name:"@rizom/ops",version:"0.2.0-alpha.642",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Ls();jc();var HX=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],UE=new Set([".kamal/hooks/pre-deploy"]),KX=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),JX=FX(new URL("../templates/rover-pilot/",import.meta.url)),VX=[`service: rover
+`}var q9,zve;var CS=x(async()=>{Ae();L9();yn();Dp();await D9();q9=d.object({HCLOUD_TOKEN:d.string().min(1),KAMAL_SSH_PRIVATE_KEY:d.string().min(1)}),zve=d.object({servers:d.array(d.object({status:d.string(),public_net:d.object({ipv4:d.object({ip:d.string().min(1)})})}))})});import{access as UL,chmod as jE,mkdir as Bh,readFile as ZL,writeFile as qL}from"fs/promises";import{dirname as MX,join as Uc}from"path";import{fileURLToPath as FX}from"url";var qp={name:"@rizom/ops",version:"0.2.0-alpha.643",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Ls();jc();var HX=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],UE=new Set([".kamal/hooks/pre-deploy"]),KX=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),JX=FX(new URL("../templates/rover-pilot/",import.meta.url)),VX=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 servers:

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.642",
+  "version": "0.2.0-alpha.643",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",