npm - @rizom/ops - Versions diffs - 0.2.0-alpha.650 → 0.2.0-alpha.652 - Mend

@rizom/ops 0.2.0-alpha.650 → 0.2.0-alpha.652

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -733,7 +733,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var U9,Uve;var qO=x(async()=>{Ae();D9();Un();Pp();await N9();U9=u.object({HCLOUD_TOKEN:u.string().min(1),KAMAL_SSH_PRIVATE_KEY:u.string().min(1)}),Uve=u.object({servers:u.array(u.object({status:u.string(),public_net:u.object({ipv4:u.object({ip:u.string().min(1)})})}))})});import{parseArgs as A7}from"util";function St(e){return e}class Bp extends Error{constructor(e){super(e);this.name="CliUsageError"}}function T7(e,t){let r={...t};for(let i of e)for(let[n,o]of Object.entries(i.flags??{})){let s=r[n];if(s===void 0){r[n]=o;continue}if(s.type!==o.type||s.short!==o.short||s.default!==o.default)throw Error(`Conflicting definitions for flag --${n}: commands must agree on type, short, and default`)}return r}function R7(e){let t={};for(let[r,i]of Object.entries(e))t[r]={type:i.type,...i.short!==void 0?{short:i.short}:{},...i.default!==void 0?{default:i.default}:{}};return t}function C7(e){if(!(e instanceof Error)||!("code"in e))return!1;return e.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||e.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function FO(e,t){let r=T7(t.commands,t.globalFlags??{}),i,n;try{({values:i,positionals:n}=A7({args:e,options:R7(r),allowPositionals:!0,strict:t.strict??!0}))}catch(s){if(C7(s))throw new Bp(s.message.split(". ")[0]??s.message);throw s}if("help"in r&&i.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in r&&i.version===!0)return{command:"version",args:[],flags:{version:!0}};let o={};for(let[s,a]of Object.entries(r)){let c=i[s];if(typeof c==="string"&&a.type==="string")o[s]=c;else if(typeof c==="boolean"&&a.type==="boolean")o[s]=c}return{command:n[0]??"help",args:n.slice(1),flags:o}}function HO(e){let t=e.reduce((r,i)=>Math.max(r,i.label.length),0);return e.map((r)=>`  ${r.label.padEnd(t)}  ${r.description}`)}function O7(e){return HO(e.map((t)=>({label:t.usage?`${t.name} ${t.usage}`:t.name,description:t.description})))}function $7(e,t){let r=t.type==="string"?` ${t.placeholder??"<value>"}`:"",i=t.short!==void 0?`, -${t.short}`:"";return`--${e}${r}${i}`}function JO(e){return HO(Object.entries(e).map(([t,r])=>({label:$7(t,r),description:r.description})))}function KO(e,t){return`Usage: ${e} ${t.name}${t.usage?` ${t.usage}`:""}`}function P7(e){return JSON.stringify(Object.entries(e).map(([t,r])=>[t,r.type,r.short??"",r.description,r.placeholder??"",r.default??""]).sort((t,r)=>String(t[0]).localeCompare(String(r[0]))))}function z7(e){let t=[],r=new Map;for(let n of e){let o=n.flags??{};if(Object.keys(o).length===0)continue;let s=P7(o),a=r.get(s);if(a){a.names.push(n.name);continue}let c={names:[n.name],flags:o};r.set(s,c),t.push(c)}let i=[];for(let n of t)i.push("",`${n.names.join(" / ")} options:`),i.push(...JO(n.flags));return i}function VO(e){let t=[e.intro,"",`Usage: ${e.cliName} ${e.usage??"<command> [args]"}`,"","Commands:",...O7(e.commands)];if(e.globalFlags&&Object.keys(e.globalFlags).length>0)t.push("","Options:",...JO(e.globalFlags));return t.push(...z7(e.commands)),t.join(`
-`)}function WO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function bt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Ns(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var jp={name:"@rizom/ops",version:"0.2.0-alpha.650",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as lQ,mkdirSync as uQ,readFileSync as gw,writeFileSync as yw}from"fs";import{dirname as dQ,join as iN}from"path";function CS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Pt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function nr(e,t,r=""){let i=CS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function $i(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Pt(e.outputLen),Pt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Xa(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Up(e,t){nr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function qp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Rr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ec(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function On(e,t){return e<<32-t|e>>>t}function rt(e,t){return e<<t|e>>>32-t>>>0}var D7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function L7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function B7(e){for(let t=0;t<e.length;t++)e[t]=L7(e[t]);return e}var OS=D7?(e)=>e:B7,QO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),j7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Zp(e){if(nr(e),QO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=j7[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function GO(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function vu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(QO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=GO(e.charCodeAt(o)),a=GO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function U7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function $S(e,t=""){if(typeof e==="string")return U7(e);return nr(e,void 0,t)}function PS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];nr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Mp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function zS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Pi(e=32){Pt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var NS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class DS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if($i(e),nr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Rr(i)}update(e){return Xa(this),this.iHash.update(e),this}digestInto(e){Xa(this),Up(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ri=(()=>{let e=(t,r,i)=>new DS(t,r).update(i).digest();return e.create=(t,r)=>new DS(t,r),e})();function _u(e,t,r){if($i(e),r===void 0)r=new Uint8Array(e.outputLen);return ri(e,r,t)}var LS=Uint8Array.of(0),YO=Uint8Array.of();function BS(e,t,r,i=32){$i(e),Pt(i,"length"),nr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=YO;else nr(r,void 0,"info");let s=new Uint8Array(o*n),a=ri.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let d=0;d<o;d++)LS[0]=d+1,c.update(d===0?YO:l).update(r).update(LS).digestInto(l),s.set(l,n*d),a._cloneInto(c);return a.destroy(),c.destroy(),Rr(l,LS),s.slice(0,i)}var bo=(e,t,r,i,n)=>BS(e,_u(e,t,r),i,n);function XO(e,t,r){return e&t^~e&r}function e$(e,t,r){return e&t^e&r^t&r}class Fp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ec(this.buffer)}update(e){Xa(this),nr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ec(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Xa(this),Up(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Rr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let d=o;d<i;d++)t[d]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ec(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let d=0;d<c;d++)s.setUint32(4*d,l[d],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Hp=BigInt(4294967295),t$=BigInt(32);function q7(e,t=!1){if(t)return{h:Number(e&Hp),l:Number(e>>t$&Hp)};return{h:Number(e>>t$&Hp)|0,l:Number(e&Hp)|0}}function r$(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=q7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var jS=(e,t,r)=>e>>>r,US=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,ku=(e,t,r)=>e<<64-r|t>>>r-32,Eu=(e,t,r)=>e>>>r-32|t<<64-r;function ni(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var n$=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),i$=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,o$=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),s$=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,a$=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),c$=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var M7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),So=new Uint32Array(64);class l$ extends Fp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let d=0;d<16;d++,t+=4)So[d]=e.getUint32(t,!1);for(let d=16;d<64;d++){let f=So[d-15],p=So[d-2],m=On(f,7)^On(f,18)^f>>>3,b=On(p,17)^On(p,19)^p>>>10;So[d]=b+So[d-7]+m+So[d-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let d=0;d<64;d++){let f=On(s,6)^On(s,11)^On(s,25),p=l+f+XO(s,a,c)+M7[d]+So[d]|0,b=(On(r,2)^On(r,13)^On(r,22))+e$(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Rr(So)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Rr(this.buffer)}}class u$ extends l${A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var d$=(()=>r$(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),F7=(()=>d$[0])(),H7=(()=>d$[1])(),xo=new Uint32Array(80),wo=new Uint32Array(80);class f$ extends Fp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:d,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=d|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)xo[A]=e.getUint32(t),wo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=xo[A-15]|0,D=wo[A-15]|0,U=Ds(R,D,1)^Ds(R,D,8)^jS(R,D,7),T=Ls(R,D,1)^Ls(R,D,8)^US(R,D,7),H=xo[A-2]|0,B=wo[A-2]|0,V=Ds(H,B,19)^ku(H,B,61)^jS(H,B,6),te=Ls(H,B,19)^Eu(H,B,61)^US(H,B,6),J=o$(T,te,wo[A-7],wo[A-16]),N=s$(J,U,V,xo[A-7],xo[A-16]);xo[A]=N|0,wo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:d,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Ds(d,f,14)^Ds(d,f,18)^ku(d,f,41),D=Ls(d,f,14)^Ls(d,f,18)^Eu(d,f,41),U=d&p^~d&b,T=f&m^~f&g,H=a$(k,D,T,H7[A],wo[A]),B=c$(H,S,R,U,F7[A],xo[A]),V=H|0,te=Ds(r,i,28)^ku(r,i,34)^ku(r,i,39),J=Ls(r,i,28)^Eu(r,i,34)^Eu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=d|0,m=f|0,{h:d,l:f}=ni(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=n$(V,J,L);r=i$(I,B,te,N),i=I|0}({h:r,l:i}=ni(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ni(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ni(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ni(this.Dh|0,this.Dl|0,c|0,l|0),{h:d,l:f}=ni(this.Eh|0,this.El|0,d|0,f|0),{h:p,l:m}=ni(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=ni(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=ni(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,d,f,p,m,b,g,S,k)}roundClean(){Rr(xo,wo)}destroy(){this.destroyed=!0,Rr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class p$ extends f${Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(64)}}var zt=zS(()=>new u$,NS(1));var Jp=zS(()=>new p$,NS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Qp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function MS(e){if(!Qp(e))throw TypeError("Uint8Array expected")}function b$(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function S$(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function vo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Au(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Vp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Wp(e,t){if(!b$(!0,t))throw TypeError(`${e}: array of strings expected`)}function FS(e,t){if(!b$(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Wp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Vp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Vp(n),n.map((o)=>{vo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return vo("join",e),{encode:(t)=>(Wp("join.decode",t),t.join(e)),decode:(t)=>(vo("join.decode",t),t.split(e))}}function Yp(e,t="="){return Au(e),vo("padding",t),{encode(r){Wp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Wp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function x$(e){return S$(e),{encode:(t)=>t,decode:(t)=>e(t)}}function m$(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Vp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Au(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let d=o[l],f=t*a,p=f+d;if(!Number.isSafeInteger(p)||f/t!==a||p-d!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var w$=(e,t)=>t===0?e:w$(t,e%t),Gp=(e,t)=>e+(t-w$(e,t)),Kp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function qS(e,t,r,i){if(Vp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Gp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Gp(t,r)}`);let n=0,o=0,s=Kp[t],a=Kp[r]-1,c=[];for(let l of e){if(Au(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let d=Kp[o];if(d===void 0)throw Error("invalid carry");n&=d-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function J7(e){Au(e);let t=256;return{encode:(r)=>{if(!Qp(r))throw TypeError("radix.encode input should be Uint8Array");return m$(Array.from(r),t,e)},decode:(r)=>(FS("radix.decode",r),Uint8Array.from(m$(r,e,t)))}}function hn(e,t=!1){if(Au(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Gp(8,e)>32||Gp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Qp(r))throw TypeError("radix2.encode input should be Uint8Array");return qS(Array.from(r),8,e,!t)},decode:(r)=>(FS("radix2.decode",r),Uint8Array.from(qS(r,e,8,t)))}}function h$(e){return S$(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var p0e=Object.freeze(Xr(hn(4),en("0123456789ABCDEF"),tn(""))),m0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Yp(5),tn(""))),h0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),g0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Yp(5),tn(""))),y0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),b0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),x$((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),v$=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),K7=/[\t\n\f\r ]/,_$=(e,t)=>{vo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&K7.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},HS=Object.freeze(v$?{encode(e){return MS(e),e.toBase64()},decode(e){return _$(e,!1)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Yp(6),tn(""))),yr=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),S0e=Object.freeze(v$?{encode(e){return MS(e),e.toBase64({alphabet:"base64url"})},decode(e){return _$(e,!0)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Yp(6),tn(""))),x0e=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),JS=(e)=>Xr(J7(58),en(e),tn("")),w0e=Object.freeze(JS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),v0e=Object.freeze(JS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),_0e=Object.freeze(JS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var ZS=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),g$=[996825010,642813549,513874426,1027748829,705979059];function Iu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<g$.length;i++)if((t>>i&1)===1)r^=g$[i];return r}function y$(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Iu(n)^s>>5}n=Iu(n);for(let o=0;o<i;o++)n=Iu(n)^e.charCodeAt(o)&31;for(let o of t)n=Iu(n)^o;for(let o=0;o<6;o++)n=Iu(n);return n^=r,ZS.encode(qS([n%Kp[30]],30,5,!1))}function k$(e){let t=e==="bech32"?1:734539939,r=hn(5),i=r.decode,n=r.encode,o=h$(i);function s(f,p,m=90){if(vo("bech32.encode prefix",f),Qp(p))p=Array.from(p);FS("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let g=b+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let S=f.toLowerCase(),k=y$(S,p,t);return`${S}1${ZS.encode(p)}${k}`}function a(f,p=90){vo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=b.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,g),k=b.slice(g+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=ZS.decode(k).slice(0,-6),R=y$(S,A,t);if(!k.endsWith(R))throw Error(`Invalid checksum in ${f}: expected "${R}"`);return{prefix:S,words:A}}let c=h$(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function d(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:d,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(k$("bech32")),k0e=Object.freeze(k$("bech32m"));var V7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),W7={encode(e){return MS(e),e.toHex()},decode(e){return vo("hex",e),Uint8Array.fromHex(e)}},E0e=Object.freeze(V7?W7:Xr(hn(4),en("0123456789abcdef"),tn(""),x$((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function Q7(e,t,r,i){$i(e);let n=Mp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Pt(o,"c"),Pt(s,"dkLen"),Pt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=$S(t,"password"),l=$S(r,"salt"),d=new Uint8Array(s),f=ri.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:d,PRF:f,PRFSalt:p}}function Y7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Rr(n),r}function KS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=Q7(e,t,r,i),l,d=new Uint8Array(4),f=ec(d),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let g=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(d).digestInto(p),g.set(p.subarray(0,g.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<g.length;k++)g[k]^=p[k]}}return Y7(a,c,s,l,p)}function E$(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],d=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],g=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],R=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=d,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let fe=0;fe<8;fe+=2)te^=rt(T+j|0,7),I^=rt(te+T|0,9),j^=rt(I+te|0,13),T^=rt(j+I|0,18),z^=rt(J+H|0,7),Q^=rt(z+J|0,9),H^=rt(Q+z|0,13),J^=rt(H+Q|0,18),E^=rt(P+N|0,7),B^=rt(E+P|0,9),N^=rt(B+E|0,13),P^=rt(N+B|0,18),V^=rt(ae+K|0,7),L^=rt(V+ae|0,9),K^=rt(L+V|0,13),ae^=rt(K+L|0,18),H^=rt(T+V|0,7),B^=rt(H+T|0,9),V^=rt(B+H|0,13),T^=rt(V+B|0,18),N^=rt(J+te|0,7),L^=rt(N+J|0,9),te^=rt(L+N|0,13),J^=rt(te+L|0,18),K^=rt(P+z|0,7),I^=rt(K+P|0,9),z^=rt(I+K|0,13),P^=rt(z+I|0,18),j^=rt(ae+E|0,7),Q^=rt(j+ae|0,9),E^=rt(Q+j|0,13),ae^=rt(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=d+te|0,n[o++]=f+J|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=g+z|0,n[o++]=S+P|0,n[o++]=k+K|0,n[o++]=A+j|0,n[o++]=R+Q|0,n[o++]=D+E|0,n[o++]=U+ae|0}function VS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(E$(r,s,e,t,r,o),a>0)s+=16;E$(r,o,e,t+=16,r,s)}}function X7(e,t,r){let i=Mp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:d}=i;if(Pt(n,"N"),Pt(o,"r"),Pt(s,"p"),Pt(a,"dkLen"),Pt(c,"asyncTick"),Pt(l,"maxmem"),d!==void 0&&typeof d!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let g=KS(zt,e,t,{c:1,dkLen:f*s}),S=qp(g),k=qp(new Uint8Array(f*n)),A=qp(new Uint8Array(f)),R=()=>{};if(d){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;R=()=>{if(T++,d&&(!(T%U)||T===D))d(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:g,tmp:A,blockMixCb:R,asyncTick:c}}function eW(e,t,r,i,n){let o=KS(zt,e,r,{c:1,dkLen:t});return Rr(r,i,n),o}function WS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:d,tmp:f,blockMixCb:p}=X7(e,t,r);OS(l);for(let m=0;m<o;m++){let b=a*m;for(let g=0;g<a;g++)c[g]=l[b+g];for(let g=0,S=0;g<i-1;g++)VS(c,S,c,S+=a,n),p();VS(c,(i-1)*a,l,b,n),p();for(let g=0;g<i;g++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];VS(f,0,l,b,n),p()}}return OS(l),eW(e,s,d,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function tW(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Xp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function tc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=tW(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function GS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function I$(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!rc(e))throw Error("invalid output, must be aligned")}function ii(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rW(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Bs=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),nW=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var iW=(e)=>{for(let t=0;t<e.length;t++)e[t]=nW(e[t]);return e},Ni=Bs?(e)=>e:iW;function A$(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function T$(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function R$(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var C$=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let d=n[0];Ft(d,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(d,f)=>{if(f!==void 0){if(d!==2)throw Error("cipher output not supported");Ft(f,void 0,"output")}},c=!1;return{encrypt(d,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(d),a(s.encrypt.length,f),s.encrypt(d,f)},decrypt(d,f){if(Ft(d),o&&d.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(d,f)}}}return Object.assign(r,e),r};function Tu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!rc(t))throw Error("invalid output, must be aligned");return t}function O$(e,t,r){tc(e),tc(t),Xp(r);let i=new Uint8Array(16),n=rW(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function rc(e){return e.byteOffset%4===0}function nc(e){return Uint8Array.from(Ft(e))}var P$=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),oW=(()=>Ni(ii(P$("expand 16-byte k"))))(),sW=(()=>Ni(ii(P$("expand 32-byte k"))))();function nt(e,t){return e<<t|e>>>32-t}var Ru=64,aW=16,QS=(()=>4294967295)(),$$=Uint32Array.of();function cW(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Ru),d=ii(l),f=Bs&&rc(n)&&rc(o),p=f?ii(n):$$,m=f?ii(o):$$;if(!Bs){for(let b=0;b<c;s++){if(e(t,r,i,d,s,a),Ni(d),s>=QS)throw Error("arx: counter overflow");let g=Math.min(Ru,c-b);for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}return}for(let b=0;b<c;s++){if(e(t,r,i,d,s,a),s>=QS)throw Error("arx: counter overflow");let g=Math.min(Ru,c-b);if(f&&g===Ru){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<aW;k++)A=S+k,m[A]=p[A]^d[k];b+=Ru;continue}for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}}function z$(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=A$({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return tc(n),tc(s),Xp(o),Xp(r),(a,c,l,d,f=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(d=Tu(p,d,!1),tc(f),f<0||f>=QS)throw Error("arx: counter overflow");let m=[],b=a.length,g,S;if(b===32)m.push(g=nc(a)),S=sW;else if(b===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),S=oW,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Bs||!rc(c))m.push(c=nc(c));let k=ii(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Bs)i(S,k,ii(D),k);else{let U=Ni(Uint32Array.from(S));i(U,k,ii(D),k),$n(U),Ni(k)}c=c.subarray(16)}else if(!Bs)Ni(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let R=Ni(ii(c));try{return cW(e,S,k,R,l,d,f,s),d}finally{$n(...m)}}}function or(e,t){return e[t++]&255|(e[t++]&255)<<8}class N${blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=nc(Ft(e,32,"key"));let t=or(e,0),r=or(e,2),i=or(e,4),n=or(e,6),o=or(e,8),s=or(e,10),a=or(e,12),c=or(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=or(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],d=o[4],f=o[5],p=o[6],m=o[7],b=o[8],g=o[9],S=or(e,t+0),k=or(e,t+2),A=or(e,t+4),R=or(e,t+6),D=or(e,t+8),U=or(e,t+10),T=or(e,t+12),H=or(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),J=n[3]+((A>>>7|R<<9)&8191),N=n[4]+((R>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),K=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*g)+te*(5*b)+J*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*d)+z*(5*l)+P*(5*c)+K*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*g)+J*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*d)+P*(5*l)+K*(5*c),j+=E>>>13,E&=8191;let ae=j+B*c+V*a+te*s+J*(5*g)+N*(5*b);j=ae>>>13,ae&=8191,ae+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*d)+K*(5*l),j+=ae>>>13,ae&=8191;let fe=j+B*l+V*c+te*a+J*s+N*(5*g);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+K*(5*d),j+=fe>>>13,fe&=8191;let C=j+B*d+V*l+te*c+J*a+N*s;j=C>>>13,C&=8191,C+=L*(5*g)+I*(5*b)+z*(5*m)+P*(5*p)+K*(5*f),j+=C>>>13,C&=8191;let xe=j+B*f+V*d+te*l+J*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*g)+z*(5*b)+P*(5*m)+K*(5*p),j+=xe>>>13,xe&=8191;let Te=j+B*p+V*f+te*d+J*l+N*c;j=Te>>>13,Te&=8191,Te+=L*a+I*s+z*(5*g)+P*(5*b)+K*(5*m),j+=Te>>>13,Te&=8191;let Pe=j+B*m+V*p+te*f+J*d+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*g)+K*(5*b),j+=Pe>>>13,Pe&=8191;let $e=j+B*b+V*m+te*p+J*f+N*d;j=$e>>>13,$e&=8191,$e+=L*l+I*c+z*a+P*s+K*(5*g),j+=$e>>>13,$e&=8191;let _e=j+B*g+V*b+te*m+J*p+N*f;j=_e>>>13,_e&=8191,_e+=L*d+I*l+z*c+P*a+K*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=ae,n[3]=fe,n[4]=C,n[5]=xe,n[6]=Te,n[7]=Pe,n[8]=$e,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){GS(this),Ft(e),e=nc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){GS(this),I$(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var D$=R$(32,(e)=>new N$(e));function lW(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],d=t[0],f=t[1],p=t[2],m=t[3],b=t[4],g=t[5],S=t[6],k=t[7],A=n,R=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=d,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let C=0;C<o;C+=2)T=T+te|0,j=nt(j^T,16),I=I+j|0,te=nt(te^I,12),T=T+te|0,j=nt(j^T,8),I=I+j|0,te=nt(te^I,7),H=H+J|0,Q=nt(Q^H,16),z=z+Q|0,J=nt(J^z,12),H=H+J|0,Q=nt(Q^H,8),z=z+Q|0,J=nt(J^z,7),B=B+N|0,E=nt(E^B,16),P=P+E|0,N=nt(N^P,12),B=B+N|0,E=nt(E^B,8),P=P+E|0,N=nt(N^P,7),V=V+L|0,ae=nt(ae^V,16),K=K+ae|0,L=nt(L^K,12),V=V+L|0,ae=nt(ae^V,8),K=K+ae|0,L=nt(L^K,7),T=T+J|0,ae=nt(ae^T,16),P=P+ae|0,J=nt(J^P,12),T=T+J|0,ae=nt(ae^T,8),P=P+ae|0,J=nt(J^P,7),H=H+N|0,j=nt(j^H,16),K=K+j|0,N=nt(N^K,12),H=H+N|0,j=nt(j^H,8),K=K+j|0,N=nt(N^K,7),B=B+L|0,Q=nt(Q^B,16),I=I+Q|0,L=nt(L^I,12),B=B+L|0,Q=nt(Q^B,8),I=I+Q|0,L=nt(L^I,7),V=V+te|0,E=nt(E^V,16),z=z+E|0,te=nt(te^z,12),V=V+te|0,E=nt(E^V,8),z=z+E|0,te=nt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=d+te|0,i[fe++]=f+J|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=g+z|0,i[fe++]=S+P|0,i[fe++]=k+K|0,i[fe++]=A+j|0,i[fe++]=R+Q|0,i[fe++]=D+E|0,i[fe++]=U+ae|0}var uW=z$(lW,{counterRight:!1,counterLength:4,allowShortKeys:!1});var dW=new Uint8Array(16),L$=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(dW.subarray(r))},fW=new Uint8Array(32);function B$(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,fW),s=O$(i.length,n?n.length:0,!0),a=D$.create(o);if(n)L$(a,n);L$(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var pW=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Tu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=B$(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=Tu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=B$(e,t,r,a,i);if(!T$(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),gn=C$({blockSize:64,nonceLength:12,tagLength:16},pW(uW));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Qt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function De(e,t,r=""){let i=ic(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function yn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Qt(e.outputLen),Qt(e.blockLen)}function Li(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function em(e,t){De(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function tm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Mr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}var mW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function gW(e){for(let t=0;t<e.length;t++)e[t]=hW(e[t]);return e}var YS=mW?(e)=>e:gW,U$=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),yW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function js(e){if(De(e),U$)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=yW[e[r]];return t}var Di={_0:48,_9:57,A:65,F:70,a:97,f:102};function j$(e){if(e>=Di._0&&e<=Di._9)return e-Di._0;if(e>=Di.A&&e<=Di.F)return e-(Di.A-10);if(e>=Di.a&&e<=Di.f)return e-(Di.a-10);return}function Us(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(U$)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=j$(e.charCodeAt(o)),a=j$(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Ut(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];De(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function oc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function _o(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ko=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ex=BigInt(0),XS=BigInt(1);function Cu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function q$(e){if(typeof e==="bigint"){if(!nm(e))throw Error("positive bigint expected, got "+e)}else Qt(e);return e}function Ou(e){let t=q$(e).toString(16);return t.length&1?"0"+t:t}function Z$(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?ex:BigInt("0x"+e)}function Eo(e){return Z$(js(e))}function Io(e){return Z$(js(im(De(e)).reverse()))}function sc(e,t){Qt(t),e=q$(e);let r=Us(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function $u(e,t){return sc(e,t).reverse()}function im(e){return Uint8Array.from(e)}function Ao(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var nm=(e)=>typeof e==="bigint"&&ex<=e;function bW(e,t,r){return nm(e)&&nm(t)&&nm(r)&&t<=e&&e<r}function Pu(e,t,r,i){if(!bW(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function tx(e){let t;for(t=0;e>ex;e>>=XS,t+=1);return t}var zu=(e)=>(XS<<BigInt(e))-XS;function M$(e,t,r){if(Qt(e,"hashLen"),Qt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),d=0,f=()=>{c.fill(1),l.fill(0),d=0},p=(...S)=>r(l,Ut(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(d++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Ut(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function qs(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function rx(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Or=BigInt(0),br=BigInt(1),Zs=BigInt(2),J$=BigInt(3),K$=BigInt(4),V$=BigInt(5),SW=BigInt(7),W$=BigInt(8),xW=BigInt(9),G$=BigInt(16);function Cr(e,t){let r=e%t;return r>=Or?r:t+r}function bn(e,t,r){let i=e;while(t-- >Or)i*=i,i%=r;return i}function F$(e,t){if(e===Or)throw Error("invert: expected non-zero number");if(t<=Or)throw Error("invert: expected positive modulus, got "+t);let r=Cr(e,t),i=t,n=Or,o=br,s=br,a=Or;while(r!==Or){let l=i/r,d=i%r,f=n-s*l,p=o-a*l;i=r,r=d,n=s,o=a,s=f,a=p}if(i!==br)throw Error("invert: does not exist");return Cr(n,t)}function nx(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function Q$(e,t){let r=(e.ORDER+br)/K$,i=e.pow(t,r);return nx(e,i,t),i}function wW(e,t){let r=(e.ORDER-V$)/W$,i=e.mul(t,Zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Zs),n),a=e.mul(o,e.sub(s,e.ONE));return nx(e,a,t),a}function vW(e){let t=om(e),r=Y$(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+SW)/G$;return(a,c)=>{let l=a.pow(c,s),d=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(d),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,d,m),d=a.cmov(p,f,b);let g=a.eql(a.sqr(d),c),S=a.cmov(l,d,g);return nx(a,S,c),S}}function Y$(e){if(e<J$)throw Error("sqrt is not defined for small field");let t=e-br,r=0;while(t%Zs===Or)t/=Zs,r++;let i=Zs,n=om(e);while(H$(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return Q$;let o=n.pow(i,t),s=(t+br)/Zs;return function(c,l){if(c.is0(l))return l;if(H$(c,l)!==1)throw Error("Cannot find square root");let d=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(b++,g=c.sqr(g),b===d)throw Error("Cannot find square root");let S=br<<BigInt(d-b-1),k=c.pow(f,S);d=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function _W(e){if(e%K$===J$)return Q$;if(e%W$===V$)return wW;if(e%G$===xW)return vW(e);return Y$(e)}var kW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function ix(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=kW.reduce((i,n)=>(i[n]="function",i),t);return qs(e,r),e}function EW(e,t,r){if(r<Or)throw Error("invalid exponent, negatives unsupported");if(r===Or)return e.ONE;if(r===br)return t;let i=e.ONE,n=t;while(r>Or){if(r&br)i=e.mul(i,n);n=e.sqr(n),r>>=br}return i}function Nu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function H$(e,t){let r=(e.ORDER-br)/Zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function IW(e,t){if(t!==void 0)Qt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class X${ORDER;BITS;BYTES;isLE;ZERO=Or;ONE=br;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Or)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=IW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Cr(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Or<=e&&e<this.ORDER}is0(e){return e===Or}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&br)===br}neg(e){return Cr(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Cr(e*e,this.ORDER)}add(e,t){return Cr(e+t,this.ORDER)}sub(e,t){return Cr(e-t,this.ORDER)}mul(e,t){return Cr(e*t,this.ORDER)}pow(e,t){return EW(this,e,t)}div(e,t){return Cr(e*F$(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return F$(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=_W(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?$u(e,this.BYTES):sc(e,this.BYTES)}fromBytes(e,t=!1){De(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Io(e):Eo(e);if(s)a=Cr(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Nu(this,e)}cmov(e,t,r){return r?t:e}}function om(e,t={}){return new X$(e,t)}function eP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function ox(e){let t=eP(e);return t+Math.ceil(t/2)}function tP(e,t,r=!1){De(e);let i=e.length,n=eP(t),o=ox(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Io(e):Eo(e),a=Cr(s,t-br)+br;return r?$u(a,n):sc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ac=BigInt(0),Ms=BigInt(1);function Du(e,t){let r=t.negate();return e?r:t}function lx(e,t){let r=Nu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function oP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function sx(e,t){oP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=zu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function rP(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ms;let l=t*i,d=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:d,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var ax=new WeakMap,sP=new WeakMap;function cx(e){return sP.get(e)||1}function nP(e){if(e!==ac)throw Error("invalid wNAF")}class ux{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>ac){if(t&Ms)r=r.add(i);i=i.double(),t>>=Ms}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=sx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=sx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:d,isNegF:f,offsetF:p}=rP(r,s,o);if(r=a,l)n=n.add(Du(f,t[p]));else i=i.add(Du(d,t[c]))}return nP(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=sx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===ac)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=rP(r,o,n);if(r=s,c)continue;else{let d=t[a];i=i.add(l?d.negate():d)}}return nP(r),i}getPrecomputes(e,t,r){let i=ax.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);ax.set(t,i)}}return i}cached(e,t,r){let i=cx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=cx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){oP(t,this.bits),sP.set(e,t),ax.delete(e)}hasCache(e){return cx(e)!==1}}function aP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>ac||i>ac){if(r&Ms)o=o.add(n);if(i&Ms)s=s.add(n);n=n.double(),r>>=Ms,i>>=Ms}return{p1:o,p2:s}}function iP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return ix(t),t}else return om(e,{isLE:r})}function cP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>ac))throw Error(`CURVE.${c} must be positive bigint`)}let n=iP(t.p,r.Fp,i),o=iP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function sm(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Lu=BigInt(0),cc=BigInt(1),am=BigInt(2);function AW(e){return qs(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function lP(e){let t=AW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||_o,l=a?255:448,d=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?am**BigInt(254):am**BigInt(447),b=a?BigInt(8)*am**BigInt(251)-cc:BigInt(4)*am**BigInt(445)-cc,g=m+b+cc,S=(I)=>Cr(I,r),k=A(f);function A(I){return $u(S(I),d)}function R(I){let z=im(De(I,d,"uCoordinate"));if(a)z[31]&=127;return S(Io(z))}function D(I){return Io(n(im(De(I,d,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Lu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){Pu("u",I,Lu,r),Pu("scalar",z,m,g);let P=z,K=I,j=cc,Q=Lu,E=I,ae=cc,fe=Lu;for(let xe=BigInt(l-1);xe>=Lu;xe--){let Te=P>>xe&cc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:d,publicKey:d,seed:d},N=(I=c(d))=>(De(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:sm(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}class dx{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(yn(e),De(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Mr(i)}update(e){return Li(this),this.iHash.update(e),this}digestInto(e){Li(this),De(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var lc=(e,t,r)=>new dx(e,t).update(r).digest();lc.create=(e,t)=>new dx(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var uP=(e,t)=>(e+(e>=0?t:-t)/fP)/t;function TW(e,t,r){let[[i,n],[o,s]]=t,a=uP(s*e,r),c=uP(-n*e,r),l=e-a*i-c*o,d=-a*n-c*s,f=l<Bi,p=d<Bi;if(f)l=-l;if(p)d=-d;let m=zu(Math.ceil(tx(r)/2))+uc;if(l<Bi||l>=m||d<Bi||d>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:d}}function px(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function fx(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Cu(r.lowS,"lowS"),Cu(r.prehash,"prehash"),r.format!==void 0)px(r.format);return r}class dP extends Error{constructor(e=""){super(e)}}var To={Err:dP,_tlv:{encode:(e,t)=>{let{Err:r}=To;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Ou(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Ou(n.length/2|128):"";return Ou(e)+o+n+t},decode(e,t){let{Err:r}=To,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=To;if(e<Bi)throw new t("integer: negative integers are not allowed");let r=Ou(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=To;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Eo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=To,n=De(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:d}=i.decode(2,c);if(d.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=To,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Bi=BigInt(0),uc=BigInt(1),fP=BigInt(2),cm=BigInt(3),RW=BigInt(4);function mx(e,t={}){let r=cP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;qs(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=mP(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),K=i.toBytes(z);if(Cu(I,"isCompressed"),I){d();let j=!i.isOdd(P);return Ut(pP(j),K)}else return Ut(Uint8Array.of(4),K,i.toBytes(P))}function p(N){De(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],K=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(K);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=g(j),E;try{E=i.sqrt(Q)}catch(C){let xe=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}d();let ae=i.isOdd(E);if((P&1)===1!==ae)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(K.subarray(0,j)),E=i.fromBytes(K.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function g(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=g(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,cm),RW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function R(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return TW(N,c.basises,n.ORDER)}let T=rx((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=rx((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Du(z,L),I=Du(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=R("x",N),this.Y=R("y",L,!0),this.Z=R("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(De(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Us(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(J.createCache(this,N),!L)this.multiply(cm);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(K,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,cm),{X:z,Y:P,Z:K}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(K,K),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,K),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,C),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),C=i.mul(N,C),xe=i.sub(ae,C),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(ae,ae),ae=i.add(E,ae),ae=i.add(ae,C),ae=i.mul(ae,xe),Q=i.add(Q,ae),C=i.mul(P,K),C=i.add(C,C),ae=i.mul(C,xe),j=i.sub(j,ae),E=i.mul(C,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.ZERO,E=i.ZERO,ae=i.ZERO,fe=o.a,C=i.mul(o.b,cm),xe=i.mul(L,P),Te=i.mul(I,K),Pe=i.mul(z,j),$e=i.add(L,I),_e=i.add(P,K);$e=i.mul($e,_e),_e=i.add(xe,Te),$e=i.sub($e,_e),_e=i.add(L,z);let We=i.add(P,j);return _e=i.mul(_e,We),We=i.add(xe,Pe),_e=i.sub(_e,We),We=i.add(I,z),Q=i.add(K,j),We=i.mul(We,Q),Q=i.add(Te,Pe),We=i.sub(We,Q),ae=i.mul(fe,_e),Q=i.mul(C,Pe),ae=i.add(Q,ae),Q=i.sub(Te,ae),ae=i.add(Te,ae),E=i.mul(Q,ae),Te=i.add(xe,xe),Te=i.add(Te,xe),Pe=i.mul(fe,Pe),_e=i.mul(C,_e),Te=i.add(Te,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Te,_e),E=i.add(E,xe),xe=i.mul(We,_e),Q=i.mul($e,Q),Q=i.sub(Q,xe),xe=i.mul($e,Te),ae=i.mul(We,ae),ae=i.add(ae,xe),new V(Q,E,ae)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(K)=>J.cached(this,K,(j)=>lx(V,j));if(L){let{k1neg:K,k1:j,k2neg:Q,k2:E}=U(N),{p:ae,f:fe}=P(j),{p:C,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,ae,C,K,Q)}else{let{p:K,f:j}=P(N);I=K,z=j}return lx(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Bi||I.is0())return V.ZERO;if(N===uc)return I;if(J.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:K,k2:j}=U(N),{p1:Q,p2:E}=aP(V,I,P,j);return B(L.beta,Q,E,z,K)}else return J.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===uc)return!0;if(N)return N(V,this);return J.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===uc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return Cu(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return js(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,J=new ux(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function pP(e){return Uint8Array.of(e?2:3)}function mP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function CW(e,t={}){let{Fn:r}=e,i=t.randomBytes||_o,n=Object.assign(mP(e.Fp,r),{seed:ox(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return tP(De(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n;if(!ic(m))return;if("_lengths"in r&&r._lengths||b===g)return;let k=De(m,void 0,"key").length;return k===g||k===S}function d(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=sm(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:d,keygen:p,Point:e,utils:f,lengths:n})}function hx(e,t,r={}){yn(t),qs(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||_o,n=r.hmac||((I,z)=>lc(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:d,getSharedSecret:f,utils:p,lengths:m}=CW(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*fP<o.ORDER;function S(I){let z=a>>uc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function R(I,z){px(z);let P=m.signature,K=z==="compact"?P:z==="recovered"?P+1:void 0;return De(I,K)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){R(I,z);let P;if(z==="der"){let{r:E,s:ae}=To.toSig(De(I));return new D(E,ae)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let K=m.signature/2,j=I.subarray(0,K),Q=I.subarray(K,K*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Us(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,K=this.assertRecovery(),j=K===2||K===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Ut(pP((K&1)===0),Q)),ae=s.inv(j),fe=T(De(I,void 0,"msgHash")),C=s.create(-fe*ae),xe=s.create(P*ae),Te=e.BASE.multiplyUnsafe(C).add(E.multiplyUnsafe(xe));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(I=b.format){if(px(I),I==="der")return Us(To.hexFromSig(this));let{r:z,s:P}=this,K=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Ut(Uint8Array.of(this.assertRecovery()),K,j);return Ut(K,j)}toHex(I){return js(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=Eo(z),K=z.length*8-c;return K>0?P>>BigInt(K):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=zu(c);function B(I){return Pu("num < 2^"+c,I,Bi,H),s.toBytes(I)}function V(I,z){return De(I,void 0,"message"),z?De(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:K,prehash:j,extraEntropy:Q}=fx(P,b);I=V(I,j);let E=T(I),ae=s.fromBytes(z);if(!s.isValidNot0(ae))throw Error("invalid private key");let fe=[B(ae),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(De(Pe,void 0,"extraEntropy"))}let C=Ut(...fe),xe=E;function Te(Pe){let $e=U(Pe);if(!s.isValidNot0($e))return;let _e=s.inv($e),We=e.BASE.multiply($e).toAffine(),Le=s.create(We.x);if(Le===Bi)return;let Xe=s.create(_e*s.create(xe+Le*ae));if(Xe===Bi)return;let dt=(We.x===Le?0:2)|Number(We.y&uc),kt=Xe;if(K&&S(Xe))kt=s.neg(Xe),dt^=1;return new D(Le,kt,g?void 0:dt)}return{seed:C,k2sig:Te}}function J(I,z,P={}){let{seed:K,k2sig:j}=te(I,z,P);return M$(t.outputLen,s.BYTES,n)(K,j).toBytes(P.format)}function N(I,z,P,K={}){let{lowS:j,prehash:Q,format:E}=fx(K,b);if(P=De(P,void 0,"publicKey"),z=V(z,Q),!ic(I)){let ae=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ae)}R(I,E);try{let ae=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&ae.hasHighS())return!1;let{r:C,s:xe}=ae,Te=T(z),Pe=s.inv(xe),$e=s.create(Te*Pe),_e=s.create(C*Pe),We=e.BASE.multiplyUnsafe($e).add(fe.multiplyUnsafe(_e));if(We.is0())return!1;return s.create(We.x)===C}catch(ae){return!1}}function L(I,z,P={}){let{prehash:K}=fx(P,b);return z=V(z,K),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:d,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:J,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function hP(e,t,r){return e&t^~e&r}function gP(e,t,r){return e&t^e&r^t&r}class lm{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=rm(this.buffer)}update(e){Li(this),De(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=rm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Li(this),em(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Mr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let d=o;d<i;d++)t[d]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=rm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let d=0;d<c;d++)s.setUint32(4*d,l[d],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var ji=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var sr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var um=BigInt(4294967295),yP=BigInt(32);function OW(e,t=!1){if(t)return{h:Number(e&um),l:Number(e>>yP&um)};return{h:Number(e>>yP&um)|0,l:Number(e&um)|0}}function dm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=OW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var gx=(e,t,r)=>e>>>r,yx=(e,t,r)=>e<<32-r|t>>>r,Fs=(e,t,r)=>e>>>r|t<<32-r,Hs=(e,t,r)=>e<<32-r|t>>>r,Bu=(e,t,r)=>e<<64-r|t>>>r-32,ju=(e,t,r)=>e>>>r-32|t<<64-r;var bP=(e,t,r)=>e<<r|t>>>32-r,SP=(e,t,r)=>t<<r|e>>>32-r,xP=(e,t,r)=>t<<r-32|e>>>64-r,wP=(e,t,r)=>e<<r-32|t>>>64-r;function oi(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var vP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),_P=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,kP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),EP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,IP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),AP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var PW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ro=new Uint32Array(64);class TP extends lm{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let d=0;d<16;d++,t+=4)Ro[d]=e.getUint32(t,!1);for(let d=16;d<64;d++){let f=Ro[d-15],p=Ro[d-2],m=Pn(f,7)^Pn(f,18)^f>>>3,b=Pn(p,17)^Pn(p,19)^p>>>10;Ro[d]=b+Ro[d-7]+m+Ro[d-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let d=0;d<64;d++){let f=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+f+hP(s,a,c)+PW[d]+Ro[d]|0,b=(Pn(r,2)^Pn(r,13)^Pn(r,22))+gP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Mr(Ro)}destroy(){this.set(0,0,0,0,0,0,0,0),Mr(this.buffer)}}class RP extends TP{A=ji[0]|0;B=ji[1]|0;C=ji[2]|0;D=ji[3]|0;E=ji[4]|0;F=ji[5]|0;G=ji[6]|0;H=ji[7]|0;constructor(){super(32)}}var CP=(()=>dm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),zW=(()=>CP[0])(),NW=(()=>CP[1])(),Co=new Uint32Array(80),Oo=new Uint32Array(80);class OP extends lm{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:d,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=d|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Co[A]=e.getUint32(t),Oo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=Co[A-15]|0,D=Oo[A-15]|0,U=Fs(R,D,1)^Fs(R,D,8)^gx(R,D,7),T=Hs(R,D,1)^Hs(R,D,8)^yx(R,D,7),H=Co[A-2]|0,B=Oo[A-2]|0,V=Fs(H,B,19)^Bu(H,B,61)^gx(H,B,6),te=Hs(H,B,19)^ju(H,B,61)^yx(H,B,6),J=kP(T,te,Oo[A-7],Oo[A-16]),N=EP(J,U,V,Co[A-7],Co[A-16]);Co[A]=N|0,Oo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:d,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Fs(d,f,14)^Fs(d,f,18)^Bu(d,f,41),D=Hs(d,f,14)^Hs(d,f,18)^ju(d,f,41),U=d&p^~d&b,T=f&m^~f&g,H=IP(k,D,T,NW[A],Oo[A]),B=AP(H,S,R,U,zW[A],Co[A]),V=H|0,te=Fs(r,i,28)^Bu(r,i,34)^Bu(r,i,39),J=Hs(r,i,28)^ju(r,i,34)^ju(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=d|0,m=f|0,{h:d,l:f}=oi(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=vP(V,J,L);r=_P(I,B,te,N),i=I|0}({h:r,l:i}=oi(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=oi(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=oi(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=oi(this.Dh|0,this.Dl|0,c|0,l|0),{h:d,l:f}=oi(this.Eh|0,this.El|0,d|0,f|0),{h:p,l:m}=oi(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=oi(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=oi(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,d,f,p,m,b,g,S,k)}roundClean(){Mr(Co,Oo)}destroy(){Mr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class $P extends OP{Ah=sr[0]|0;Al=sr[1]|0;Bh=sr[2]|0;Bl=sr[3]|0;Ch=sr[4]|0;Cl=sr[5]|0;Dh=sr[6]|0;Dl=sr[7]|0;Eh=sr[8]|0;El=sr[9]|0;Fh=sr[10]|0;Fl=sr[11]|0;Gh=sr[12]|0;Gl=sr[13]|0;Hh=sr[14]|0;Hl=sr[15]|0;constructor(){super(48)}}var fm=oc(()=>new RP,ko(1));var PP=oc(()=>new $P,ko(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var DW=BigInt(1),zP=BigInt(2),LW=BigInt(3),BW=BigInt(5),T_e=BigInt(8),NP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function jW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=NP,a=e*e%o*e%o,c=bn(a,zP,o)*a%o,l=bn(c,DW,o)*e%o,d=bn(l,BW,o)*l%o,f=bn(d,t,o)*d%o,p=bn(f,r,o)*f%o,m=bn(p,i,o)*p%o,b=bn(m,n,o)*m%o,g=bn(b,n,o)*m%o,S=bn(g,t,o)*d%o;return{pow_p_5_8:bn(S,zP,o)*e%o,b2:a}}function UW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var DP=(()=>{let e=NP;return lP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=jW(t);return Cr(bn(r,LW,e)*i,e)},adjustScalarBytes:UW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),ZW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var MW=mx(qW),bx=hx(MW,fm);var FW=mx(ZW),LP=hx(FW,PP);function jP(e,t,r){if(yn(e),r===void 0)r=new Uint8Array(e.outputLen);return lc(e,r,t)}var Sx=Uint8Array.of(0),BP=Uint8Array.of();function UP(e,t,r,i=32){yn(e),Qt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=BP;else De(r,void 0,"info");let s=new Uint8Array(o*n),a=lc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let d=0;d<o;d++)Sx[0]=d+1,c.update(d===0?BP:l).update(r).update(Sx).digestInto(l),s.set(l,n*d),a._cloneInto(c);return a.destroy(),c.destroy(),Mr(l,Sx),s.slice(0,i)}var HW=BigInt(0),Uu=BigInt(1),JW=BigInt(2),KW=BigInt(7),VW=BigInt(256),WW=BigInt(113),MP=[],FP=[],HP=[];for(let e=0,t=Uu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],MP.push(2*(5*i+r)),FP.push((e+1)*(e+2)/2%64);let n=HW;for(let o=0;o<7;o++)if(t=(t<<Uu^(t>>KW)*WW)%VW,t&JW)n^=Uu<<(Uu<<BigInt(o))-Uu;HP.push(n)}var JP=dm(HP,!0),GW=JP[0],QW=JP[1],qP=(e,t,r)=>r>32?xP(e,t,r):bP(e,t,r),ZP=(e,t,r)=>r>32?wP(e,t,r):SP(e,t,r);function YW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],d=r[c+1],f=qP(l,d,1)^r[a],p=ZP(l,d,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=FP[s],c=qP(n,o,a),l=ZP(n,o,a),d=MP[s];n=e[d],o=e[d+1],e[d]=c,e[d+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=GW[i],e[1]^=QW[i]}Mr(r)}class pm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Qt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=tm(this.state)}clone(){return this._cloneInto()}keccak(){YS(this.state32),YW(this.state32,this.rounds),YS(this.state32),this.posOut=0,this.pos=0}update(e){Li(this),De(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Li(this,!1),De(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Qt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(em(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Mr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new pm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var KP=(e,t,r,i={})=>oc(()=>new pm(t,e,r),i);var Js=KP(6,136,32,ko(8));var VP=KP(6,72,64,ko(10));var WP=(e,t,r,i={})=>oc((n={})=>new pm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),GP=WP(31,168,16,ko(11)),si=WP(31,136,32,ko(12));function xx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function YP(e){return xx(e),(e&e-1)===0&&e!==0}function wx(e,t){xx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function XP(e){return xx(e),31-Math.clz32(e)}function QP(e){let t=e.length;if(t<2||!YP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=XP(t);for(let i=0;i<t;i++){let n=wx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var vx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=XP(r);if(!YP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(d)=>{if(d.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)QP(d);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,g=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,R=p++;A<g;A++){let D=o?n?r-R:R:A*S,U=k+A,T=k+A+g,H=i[D],B=d[T],V=d[U];if(l){let te=e.mul(B,H);d[U]=e.add(V,te),d[T]=e.sub(V,te)}else if(o)d[U]=e.add(B,V),d[T]=e.mul(e.sub(B,V),H);else d[U]=e.add(V,B),d[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)QP(d);return d}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ai=_o;function mm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function ez(e){return Uint8Array.from(e)}function Ks(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),d=typeof c==="number"?n[s]:c.encode(n[s]);if(De(d,l,e),o.set(d,a),typeof c!=="number")d.fill(0);a+=l}return o},decode:(n)=>{De(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function hm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{De(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ht(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function _x(e){return(1<<e)-1}var M_e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var tz=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,R=i)=>{let D=A%R|0;return(D>=0?D|0:R+D|0)|0},l=(A,R=i)=>{let D=c(A,R)|0;return(D>R>>1?D-R|0:D)|0};function d(){let A=t(r);for(let R=0;R<r;R++){let D=wx(R,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[R]=Number(U)|0}return A}let f=d(),p={add:(A,R)=>c((A|0)+(R|0))|0,sub:(A,R)=>c((A|0)-(R|0))|0,mul:(A,R)=>c((A|0)*(R|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=vx(p,{dit:!1,...m}),g=vx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{g(A);for(let R=0;R<A.length;R++)A[R]=c(n*A[R]);return A}},bitsCoder:(A,R)=>{let D=_x(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=(R.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[J++]=V&_x(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[J++]=R.decode(V&D)}return H}}}}},XW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,d)=>(i[n+0]=l,i[n+1]=d,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ht(o,i)}}},rz=XW(GP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Sr=256,Ui=3329,eG=3303,tG=17,{mod:Mu,nttZetas:rG,NTT:Vs,bitsCoder:nG}=tz({N:Sr,Q:Ui,F:eG,ROOT_OF_UNITY:tG,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),kx={512:{N:Sr,Q:Ui,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Sr,Q:Ui,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Sr,Q:Ui,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iG=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ui/2)/Ui,decode:(r)=>r*Ui+t>>>e}},qu=(e)=>nG(e,iG(e));function Ws(e,t){for(let r=0;r<Sr;r++)e[r]=Mu(e[r]+t[r])}function oG(e,t){for(let r=0;r<Sr;r++)e[r]=Mu(e[r]-t[r])}function sG(e,t,r,i,n){let o=Mu(t*i*n+e*r),s=Mu(e*i+t*r);return{c0:o,c1:s}}function gm(e,t){for(let r=0;r<Sr/2;r++){let i=rG[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=sG(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function nz(e){let t=new Uint16Array(Sr);for(let r=0;r<Sr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<Sr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ui)t[r++]=o;if(r<Sr&&s<Ui)t[r++]=s}}return t}function Zu(e,t,r,i){let n=e(i*Sr/4,t,r),o=new Uint16Array(Sr),s=tm(n),a=0;for(let c=0,l=0,d=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(d+=p&1,p>>=1,a+=1,a===i)f=d,d=0;else if(a===2*i)o[l++]=Mu(f-d),d=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var aG=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=qu(1),d=qu(c),f=qu(a),p=Ks("publicKey",hm(qu(12),t),32),m=hm(qu(12),t),b=Ks("ciphertext",hm(f,t),d),g=Ks("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{De(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[R,D]=g.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Vs.encode(Zu(r,D,V,o)));let H=i(R);for(let V=0;V<t;V++){let te=Vs.encode(Zu(r,D,t+V,o));for(let J=0;J<t;J++){let N=nz(H.get(J,V));Ws(te,gm(N,U[J]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,R]),secretKey:m.encode(U)};return Ht(R,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[R,D]=p.decode(S),U=[];for(let J=0;J<t;J++)U.push(Vs.encode(Zu(r,A,J,o)));let T=i(D),H=new Uint16Array(Sr),B=[];for(let J=0;J<t;J++){let N=Zu(r,A,t+J,s),L=new Uint16Array(Sr);for(let I=0;I<t;I++){let z=nz(T.get(J,I));Ws(L,gm(z,U[I]))}Ws(N,Vs.decode(L)),B.push(N),Ws(H,gm(R[J],U[J])),Ht(L)}T.clean();let V=Zu(r,A,2*t,s);Ws(V,Vs.decode(H));let te=l.decode(k);return Ws(te,V),Ht(R,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,R]=b.decode(S),D=m.decode(k),U=new Uint16Array(Sr);for(let T=0;T<t;T++)Ws(U,gm(D[T],Vs.encode(A[T])));return oG(R,Vs.decode(U)),Ht(U,D,A),l.encode(R)}}};function Ex(e){let t=aG(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ks("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(d=ai(64))=>{De(d,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(d.subarray(0,32)),m=r(f),b=a.encode([p,f,m,d.subarray(32)]);return Ht(p,m),{publicKey:f,secretKey:b}},getPublicKey:(d)=>{let[f,p,m,b]=a.decode(d);return Uint8Array.from(p)},encapsulate:(d,f=ai(32))=>{De(d,s.publicKey,"publicKey"),De(f,32,"message");let p=d.subarray(0,384*e.K),m=o.encode(o.decode(ez(p)));if(!mm(m,p))throw Ht(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ht(m);let b=i.create().update(f).update(r(d)).digest(),g=t.encrypt(d,f,b.subarray(32,64));return Ht(b.subarray(32)),{cipherText:g,sharedSecret:b.subarray(0,32)}},decapsulate:(d,f)=>{De(f,a.bytesLen,"secretKey"),De(d,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!mm(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,S,k,A]=a.decode(f),R=t.decrypt(d,g),D=i.create().update(R).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,R,D.subarray(32,64)),H=mm(d,T),B=n.create({dkLen:32}).update(A).update(d).digest();return Ht(R,T,!H?U:B),H?U:B}}}function cG(e,t,r){return si.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var Ix={HASH256:Js,HASH512:VP,KDF:si,XOF:rz,PRF:cG},eke=Ex({...Ix,...kx[512]}),Fu=Ex({...Ix,...kx[768]}),iz=Ex({...Ix,...kx[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lG(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ai(r.seed))=>{De(s,r.seed,"seed");let a=o.isLE?Io(s):Eo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function Ax(e,t=!1){let r=lG(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ai(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ht(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Hu(e,t){return Ks(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function Tx(e){return(t,r)=>e(t,{dkLen:r})}function uG(e,t,...r){let i=Hu(r,"seed"),n=Hu(r,"publicKey");if(e===void 0)e=i.bytesLen;Qt(e);function o(s){De(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),d=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:d}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ai(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ht(a),Ht(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function ym(e,t,r,i,...n){let o=uG(e,r,...n),s=Hu(n,"cipherText"),a=Hu(n,"publicKey"),c=Hu(n,"msg");if(t===void 0)t=c.bytesLen;return Qt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,d=ai(c.bytesLen)){let f=a.decode(l),p=c.decode(d),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),g=m.map((k)=>k.cipherText),S={sharedSecret:i(f,g,b),cipherText:s.encode(g)};return Ht(b,g),S},decapsulate(l,d){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(d),b=n.map((g,S)=>g.decapsulate(f[S],m[S]));return i(p,f,b)}}}function oz(e,t,r,i,n){return yn(i),yn(n),ym(32,32,Tx(i),(o,s,a)=>n(Ut(a[0],a[1],s[1],o[1],Ao(e))),t,r)}var dke=oz("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Fu,Ax(bx,!0),si,Js),fke=oz("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",iz,Ax(LP,!0),si,Js);function dG(e,t,r,i,n){return yn(i),yn(n),ym(32,32,Tx(i),(o,s,a)=>{let c=Ut(a[0],a[1],s[0],o[0],s[1],o[1],Ao(e)),l=32,d=Ut(Ao("hybrid_prk"),c),f=jP(n,d),p=Ut(sc(32,2),Ao("shared_secret"),Ao("")),m=UP(n,f,p,32);return Ht(f,p,d,c),m},t,r)}var sz=Ax(DP),pke=dG("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Fu,sz,si,fm),fG=(()=>ym(32,32,Tx(si),(e,t,r)=>Js(Ut(r[0],r[1],t[1],e[1],Ao("\\.//^\\"))),Fu,sz))();function pG(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let d=0,f=t;;d=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(d,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ai(i)){return De(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ai(i)){De(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),d=e.getPublicKey(c,!1);return Ht(c),{sharedSecret:l,cipherText:d}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function mG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=pG(r,n,o,i),a=64,c=a+i;return ym(32,32,(l)=>{De(l,32);let d=si(l,{dkLen:c}),f=d.subarray(0,a),p=d.subarray(a,c);return Ut(f,p)},(l,d,f)=>Js(Ut(f[0],f[1],d[1],l[1],Ao(e))),t,s)}var hG=(()=>mG("MLKEM768-P256",Fu,bx,128))();var bm=fG,az=hG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ft=(e,t,r)=>nr(e,t,r),Cx=Pt,dc=Zp,ar=(...e)=>PS(...e),fc=(e)=>vu(e),pc=CS,mc=(e)=>Pi(e),xm=BigInt(0),Rx=BigInt(1);function qi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function wm(e){if(typeof e==="bigint"){if(!Sm(e))throw RangeError("positive bigint expected, got "+e)}else Cx(e);return e}function ci(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Ju(e){let t=wm(e).toString(16);return t.length&1?"0"+t:t}function cz(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?xm:BigInt("0x"+e)}function Gs(e){return cz(Zp(e))}function zn(e){return cz(Zp($o(nr(e)).reverse()))}function vm(e,t){if(Pt(t),t===0)throw RangeError("zero length");e=wm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return vu(r.padStart(t*2,"0"))}function Ku(e,t){return vm(e,t).reverse()}function lz(e,t){if(e=ft(e),t=ft(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(ft(e))}function _m(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Sm=(e)=>typeof e==="bigint"&&xm<=e;function gG(e,t,r){return Sm(e)&&Sm(t)&&Sm(r)&&t<=e&&e<r}function Zi(e,t,r,i){if(!gG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function hc(e){if(e<xm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>xm;e>>=Rx,t+=1);return t}var Vu=(e)=>(Rx<<BigInt(e))-Rx;function uz(e,t,r){if(Pt(e,"hashLen"),Pt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),d=0,f=()=>{c.fill(1),l.fill(0),d=0},p=(...S)=>r(l,ar(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(d++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return ar(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var Ox=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cr=BigInt(0),Rt=BigInt(1),Qs=BigInt(2),mz=BigInt(3),hz=BigInt(4),gz=BigInt(5),yG=BigInt(7),yz=BigInt(8),bG=BigInt(9),bz=BigInt(16);function xt(e,t){if(t<=cr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=cr?r:t+r}function xn(e,t,r){if(t<cr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >cr)i*=i,i%=r;return i}function dz(e,t){if(e===cr)throw Error("invert: expected non-zero number");if(t<=cr)throw Error("invert: expected positive modulus, got "+t);let r=xt(e,t),i=t,n=cr,o=Rt,s=Rt,a=cr;while(r!==cr){let l=i/r,d=i-r*l,f=n-s*l,p=o-a*l;i=r,r=d,n=s,o=a,s=f,a=p}if(i!==Rt)throw Error("invert: does not exist");return xt(n,t)}function $x(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function Sz(e,t){let r=e,i=(r.ORDER+Rt)/hz,n=r.pow(t,i);return $x(r,n,t),n}function SG(e,t){let r=e,i=(r.ORDER-gz)/yz,n=r.mul(t,Qs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Qs),o),c=r.mul(s,r.sub(a,r.ONE));return $x(r,c,t),c}function xG(e){let t=km(e),r=xz(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+yG)/bz;return(a,c)=>{let l=a,d=l.pow(c,s),f=l.mul(d,i),p=l.mul(d,n),m=l.mul(d,o),b=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);d=l.cmov(d,f,b),f=l.cmov(m,p,g);let S=l.eql(l.sqr(f),c),k=l.cmov(d,f,S);return $x(l,k,c),k}}function xz(e){if(e<mz)throw Error("sqrt is not defined for small field");let t=e-Rt,r=0;while(t%Qs===cr)t/=Qs,r++;let i=Qs,n=km(e);while(fz(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return Sz;let o=n.pow(i,t),s=(t+Rt)/Qs;return function(c,l){let d=c;if(d.is0(l))return l;if(fz(d,l)!==1)throw Error("Cannot find square root");let f=r,p=d.mul(d.ONE,o),m=d.pow(l,t),b=d.pow(l,s);while(!d.eql(m,d.ONE)){if(d.is0(m))return d.ZERO;let g=1,S=d.sqr(m);while(!d.eql(S,d.ONE))if(g++,S=d.sqr(S),g===f)throw Error("Cannot find square root");let k=Rt<<BigInt(f-g-1),A=d.pow(p,k);f=g,p=d.sqr(A),m=d.mul(m,p),b=d.mul(b,A)}return b}}function wG(e){if(e%hz===mz)return Sz;if(e%yz===gz)return SG;if(e%bz===bG)return xG(e);return xz(e)}var Mi=(e,t)=>(xt(e,t)&Rt)===Rt,vG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Px(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=vG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),ci(e.BYTES,"BYTES"),ci(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Rt)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function _G(e,t,r){let i=e;if(r<cr)throw Error("invalid exponent, negatives unsupported");if(r===cr)return i.ONE;if(r===Rt)return t;let n=i.ONE,o=t;while(r>cr){if(r&Rt)n=i.mul(n,o);o=i.sqr(o),r>>=Rt}return n}function Wu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function fz(e,t){let r=e,i=(r.ORDER-Rt)/Qs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function kG(e,t){if(t!==void 0)Cx(t);if(e<=cr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=hc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var pz=new WeakMap;class zx{ORDER;BITS;BYTES;isLE;ZERO=cr;ONE=Rt;_lengths;_mod;constructor(e,t={}){if(e<=Rt)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=kG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return xt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return cr<=e&&e<this.ORDER}is0(e){return e===cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Rt)===Rt}neg(e){return xt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return xt(e*e,this.ORDER)}add(e,t){return xt(e+t,this.ORDER)}sub(e,t){return xt(e-t,this.ORDER)}mul(e,t){return xt(e*t,this.ORDER)}pow(e,t){return _G(this,e,t)}div(e,t){return xt(e*dz(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return dz(e,this.ORDER)}sqrt(e){let t=pz.get(this);if(!t)pz.set(this,t=wG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Ku(e,this.BYTES):vm(e,this.BYTES)}fromBytes(e,t=!1){ft(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?zn(e):Gs(e);if(s)a=xt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Wu(this,e)}cmov(e,t,r){return qi(r,"condition"),r?t:e}}Object.freeze(zx.prototype);function km(e,t={}){return new zx(e,t)}function wz(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Rt)throw Error("field order must be greater than 1");let t=hc(e-Rt);return Math.ceil(t/8)}function Nx(e){let t=wz(e);return t+Math.ceil(t/2)}function vz(e,t,r=!1){ft(e);let i=e.length,n=wz(t),o=Math.max(Nx(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?zn(e):Gs(e),a=xt(s,t-Rt)+Rt;return r?Ku(a,n):vm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gc=BigInt(0),Ys=BigInt(1);function Gu(e,t){let r=t.negate();return e?r:t}function Xs(e,t){let r=Wu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function Iz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Dx(e,t){Iz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Vu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function _z(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ys;let l=t*i,d=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:d,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var Lx=new WeakMap,Az=new WeakMap;function Bx(e){return Az.get(e)||1}function kz(e){if(e!==gc)throw Error("invalid wNAF")}class Qu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>gc){if(t&Ys)r=r.add(i);i=i.double(),t>>=Ys}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=Dx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=Dx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:d,isNegF:f,offsetF:p}=_z(r,s,o);if(r=a,l)n=n.add(Gu(f,t[p]));else i=i.add(Gu(d,t[c]))}return kz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=Dx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===gc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=_z(r,o,n);if(r=s,c)continue;else{let d=t[a];i=i.add(l?d.negate():d)}}return kz(r),i}getPrecomputes(e,t,r){let i=Lx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);Lx.set(t,i)}}return i}cached(e,t,r){let i=Bx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=Bx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){Iz(t,this.bits),Az.set(e,t),Lx.delete(e)}hasCache(e){return Bx(e)!==1}}function Tz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>gc||i>gc){if(r&Ys)o=o.add(n);if(i&Ys)s=s.add(n);n=n.double(),r>>=Ys,i>>=Ys}return{p1:o,p2:s}}function Ez(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Px(t),t}else return km(e,{isLE:r})}function Em(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>gc))throw Error(`CURVE.${c} must be positive bigint`)}let n=Ez(t.p,r.Fp,i),o=Ez(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Yu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Xu(e,t){if(ci(e),ci(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function EG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function IG(e){if(!pc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?_m(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function jx(e,t,r,i){if(ft(e),ci(r),t=IG(t),t.length>255)t=i(ar(_m("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ar(t,Xu(t.length,1)),c=new Uint8Array(o),l=Xu(r,2),d=Array(s),f=i(ar(c,e,l,Xu(0,1),a));d[0]=i(ar(f,Xu(1,1),a));for(let m=1;m<s;m++){let b=[EG(f,d[m-1]),Xu(m+1,1),a];d[m]=i(ar(...b))}return ar(...d).slice(0,r)}var Rz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cz=(e,t)=>(e+(e>=0?t:-t)/$z)/t;function AG(e,t,r){Zi("scalar",e,li,r);let[[i,n],[o,s]]=t,a=Cz(s*e,r),c=Cz(-n*e,r),l=e-a*i-c*o,d=-a*n-c*s,f=l<li,p=d<li;if(f)l=-l;if(p)d=-d;let m=Vu(Math.ceil(hc(r)/2))+Po;if(l<li||l>=m||d<li||d>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:d}}function qx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Ux(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(qi(r.lowS,"lowS"),qi(r.prehash,"prehash"),r.format!==void 0)qx(r.format);return r}class Oz extends Error{constructor(e=""){super(e)}}var Nn={Err:Oz,_tlv:{encode:(e,t)=>{let{Err:r}=Nn;if(ci(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Ju(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Ju(n.length/2|128):"";return Ju(e)+o+n+t},decode(e,t){let{Err:r}=Nn;t=ft(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Nn;if(wm(e),e<li)throw new t("integer: negative integers are not allowed");let r=Ju(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Nn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Gs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Nn,n=ft(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:d}=i.decode(2,c);if(d.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Nn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Nn._tlv);Object.freeze(Nn._int);Object.freeze(Nn);var li=BigInt(0),Po=BigInt(1),$z=BigInt(2),Im=BigInt(3),TG=BigInt(4);function Pz(e,t={}){let r=Em("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let d=Nz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(J,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(qi(L,"isCompressed"),L){f();let K=!i.isOdd(z);return ar(zz(K),P)}else return ar(Uint8Array.of(4),P,i.toBytes(z))}function m(J){ft(J,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=d,I=J.length,z=J[0],P=J.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let K=i.fromBytes(P);if(!i.isValid(K))throw Error("bad point: is not on curve, wrong x");let j=S(K),Q;try{Q=i.sqrt(j)}catch(fe){let C=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:K,y:Q}}else if(I===L&&z===4){let K=i.BYTES,j=i.fromBytes(P.subarray(0,K)),Q=i.fromBytes(P.subarray(K,K*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function S(J){let N=i.sqr(J),L=i.mul(N,J);return i.add(i.add(L,i.mul(J,o.a)),o.b)}function k(J,N){let L=i.sqr(N),I=S(J);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Im),TG),R=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,R)))throw Error("bad curve params: a or b");function D(J,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${J}`);return N}function U(J){if(!(J instanceof B))throw Error("Weierstrass Point expected")}function T(J){if(!c||!c.basises)throw Error("no endo");return AG(J,c.basises,n.ORDER)}function H(J,N,L,I,z){return L=new B(i.mul(L.X,J),L.Y,L.Z),N=Gu(I,N),L=Gu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(J,N,L){this.X=D("x",J),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(J){let{x:N,y:L}=J||{};if(!J||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(J instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(J){let N=B.fromAffine(g(ft(J,void 0,"point")));return N.assertValidity(),N}static fromHex(J){return B.fromBytes(fc(J))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(J=8,N=!0){if(te.createCache(this,J),!N)this.multiply(Im);return this}assertValidity(){let J=this;if(J.is0()){if(t.allowInfinityPoint&&i.is0(J.X)&&i.eql(J.Y,i.ONE)&&i.is0(J.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=J.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!J.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:J}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(J)}equals(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.eql(i.mul(N,K),i.mul(z,I)),Q=i.eql(i.mul(L,K),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:J,b:N}=o,L=i.mul(N,Im),{X:I,Y:z,Z:P}=this,K=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(I,z);return C=i.add(C,C),Q=i.mul(I,P),Q=i.add(Q,Q),K=i.mul(J,Q),j=i.mul(L,fe),j=i.add(K,j),K=i.sub(ae,j),j=i.add(ae,j),j=i.mul(K,j),K=i.mul(C,K),Q=i.mul(L,Q),fe=i.mul(J,fe),C=i.sub(E,fe),C=i.mul(J,C),C=i.add(C,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,C),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,C),K=i.sub(K,E),Q=i.mul(fe,ae),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(K,j,Q)}add(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=o.a,fe=i.mul(o.b,Im),C=i.mul(N,z),xe=i.mul(L,P),Te=i.mul(I,K),Pe=i.add(N,L),$e=i.add(z,P);Pe=i.mul(Pe,$e),$e=i.add(C,xe),Pe=i.sub(Pe,$e),$e=i.add(N,I);let _e=i.add(z,K);return $e=i.mul($e,_e),_e=i.add(C,Te),$e=i.sub($e,_e),_e=i.add(L,I),j=i.add(P,K),_e=i.mul(_e,j),j=i.add(xe,Te),_e=i.sub(_e,j),E=i.mul(ae,$e),j=i.mul(fe,Te),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(C,C),xe=i.add(xe,C),Te=i.mul(ae,Te),$e=i.mul(fe,$e),xe=i.add(xe,Te),Te=i.sub(C,Te),Te=i.mul(ae,Te),$e=i.add($e,Te),C=i.mul(xe,$e),Q=i.add(Q,C),C=i.mul(_e,$e),j=i.mul(Pe,j),j=i.sub(j,C),C=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,C),new B(j,Q,E)}subtract(J){return U(J),this.add(J.negate())}is0(){return this.equals(B.ZERO)}multiply(J){let{endo:N}=t;if(!n.isValidNot0(J))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(K)=>Xs(B,K));if(N){let{k1neg:P,k1:K,k2neg:j,k2:Q}=T(J),{p:E,f:ae}=z(K),{p:fe,f:C}=z(Q);I=ae.add(C),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:K}=z(J);L=P,I=K}return Xs(B,[L,I])[0]}multiplyUnsafe(J){let{endo:N}=t,L=this,I=J;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===li||L.is0())return B.ZERO;if(I===Po)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:K,k2:j}=T(I),{p1:Q,p2:E}=Tz(B,L,P,j);return H(N.beta,Q,E,z,K)}else return te.unsafe(L,I)}toAffine(J){let N=this,L=J,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:J}=t;if(s===Po)return!0;if(J)return J(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:J}=t;if(s===Po)return this;if(J)return J(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Po)return this.is0();return this.clearCofactor().is0()}toBytes(J=!0){return qi(J,"isCompressed"),this.assertValidity(),b(B,this,J)}toHex(J=!0){return dc(this.toBytes(J))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Qu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function zz(e){return Uint8Array.of(e?2:3)}function Nz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function RG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?mc:t.randomBytes,n=Object.assign(Nz(e.Fp,r),{seed:Math.max(Nx(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,vz(ft(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n,k=r._lengths;if(!pc(m))return;let A=ft(m,void 0,"key").length,R=A===g||A===S,D=A===b||!!k?.includes(A);if(R&&D)return;return R}function d(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Yu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:d,keygen:p,Point:e,utils:f,lengths:n})}function Dz(e,t,r={}){let i=t;$i(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?mc:r.randomBytes,o=r.hmac===void 0?(z,P)=>ri(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:d,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=RG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*$z+Po<s.ORDER;function k(z){let P=c>>Po;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function R(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){qx(P);let K=b.signature,j=P==="compact"?K:P==="recovered"?K+1:void 0;return ft(z,j)}class U{r;s;recovery;constructor(z,P,K){if(this.r=A("r",z),this.s=A("s",P),K!=null){if(R(),![0,1,2,3].includes(K))throw Error("invalid recovery id");this.recovery=K}Object.freeze(this)}static fromBytes(z,P=g.format){D(z,P);let K;if(P==="der"){let{r:ae,s:fe}=Nn.toSig(ft(z));return new U(ae,fe)}if(P==="recovered")K=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),K)}static fromHex(z,P){return this.fromBytes(fc(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:K}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),ae=e.fromBytes(ar(zz((j&1)===0),E)),fe=a.inv(Q),C=H(ft(z,void 0,"msgHash")),xe=a.create(-C*fe),Te=a.create(K*fe),Pe=e.BASE.multiplyUnsafe(xe).add(ae.multiplyUnsafe(Te));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=g.format){if(qx(z),z==="der")return fc(Nn.hexFromSig(this));let{r:P,s:K}=this,j=a.toBytes(P),Q=a.toBytes(K);if(z==="recovered")return R(),ar(Uint8Array.of(this.assertRecovery()),j,Q);return ar(j,Q)}toHex(z){return dc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let K=Gs(P),j=P.length*8-l;return j>0?K>>BigInt(j):K}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Vu(l);function V(z){return Zi("num < 2^"+l,z,li,B),a.toBytes(z)}function te(z,P){return ft(z,void 0,"message"),P?ft(i(z),void 0,"prehashed message"):z}function J(z,P,K){let{lowS:j,prehash:Q,extraEntropy:E}=Ux(K,g);z=te(z,Q);let ae=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let C=[V(fe),V(ae)];if(E!=null&&E!==!1){let $e=E===!0?n(b.secretKey):E;C.push(ft($e,void 0,"extraEntropy"))}let xe=ar(...C),Te=ae;function Pe($e){let _e=T($e);if(!a.isValidNot0(_e))return;let We=a.inv(_e),Le=e.BASE.multiply(_e).toAffine(),Xe=a.create(Le.x);if(Xe===li)return;let dt=a.create(We*a.create(Te+Xe*fe));if(dt===li)return;let kt=(Le.x===Xe?0:2)|Number(Le.y&Po),jt=dt;if(j&&k(dt))jt=a.neg(dt),kt^=1;return new U(Xe,jt,S?void 0:kt)}return{seed:xe,k2sig:Pe}}function N(z,P,K={}){let{seed:j,k2sig:Q}=J(z,P,K);return uz(i.outputLen,a.BYTES,o)(j,Q).toBytes(K.format)}function L(z,P,K,j={}){let{lowS:Q,prehash:E,format:ae}=Ux(j,g);if(K=ft(K,void 0,"publicKey"),P=te(P,E),!pc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,ae);try{let fe=U.fromBytes(z,ae),C=e.fromBytes(K);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Te}=fe,Pe=H(P),$e=a.inv(Te),_e=a.create(Pe*$e),We=a.create(xe*$e),Le=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(We));if(Le.is0())return!1;return a.create(Le.x)===xe}catch(fe){return!1}}function I(z,P,K={}){let{prehash:j}=Ux(K,g);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:d,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var CG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var OG=Pz(CG),yc=Dz(OG,zt);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zo=BigInt(0),Fr=BigInt(1),Zx=BigInt(2),$G=BigInt(8);function PG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function Lz(e,t={}){let r=t,i=Em("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=Zx<<BigInt(o.BYTES*8)-Fr,l=(g)=>n.create(g),d=r.uvRatio===void 0?(g,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,S))}}catch(k){return{isValid:!1,value:zo}}}:r.uvRatio;if(!PG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,S,k=!1){let A=k?Fr:zo;return Zi("coordinate "+g,S,A,c),S}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Fr,l(s.Gx*s.Gy));static ZERO=new m(zo,Fr,Fr,zo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,S,k,A){this.X=f("x",g),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=g||{};return f("x",S),f("y",k),new m(S,k,Fr,l(S*k))}static fromBytes(g,S=!1){let k=n.BYTES,{a:A,d:R}=s;g=$o(ft(g,k,"point")),qi(S,"zip215");let D=$o(g),U=g[k-1];D[k-1]=U&-129;let T=zn(D),H=S?c:n.ORDER;Zi("point.y",T,zo,H);let B=l(T*T),V=l(B-Fr),te=l(R*B-A),{isValid:J,value:N}=d(V,te);if(!J)throw Error("bad point: invalid y coordinate");let L=(N&Fr)===Fr,I=(U&128)!==0;if(!S&&N===zo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(g,S=!1){return m.fromBytes(fc(g),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,S=!0){if(b.createCache(this,g),!S)this.multiply(Zx);return this}assertValidity(){let g=this,{a:S,d:k}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:R,Z:D,T:U}=g,T=l(A*A),H=l(R*R),B=l(D*D),V=l(B*B),te=l(T*S),J=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(J!==N)throw Error("bad point: equation left != right (1)");let L=l(A*R),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:S,Y:k,Z:A}=this,{X:R,Y:D,Z:U}=g,T=l(S*U),H=l(R*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:S,Y:k,Z:A}=this,R=l(S*S),D=l(k*k),U=l(Zx*l(A*A)),T=l(g*R),H=S+k,B=l(l(H*H)-R-D),V=T+D,te=V-U,J=T-D,N=l(B*te),L=l(V*J),I=l(B*J),z=l(te*V);return new m(N,L,z,I)}add(g){p(g);let{a:S,d:k}=s,{X:A,Y:R,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=g,te=l(A*T),J=l(R*H),N=l(U*k*V),L=l(D*B),I=l((A+R)*(T+H)-te-J),z=L-N,P=L+N,K=l(J-S*te),j=l(I*z),Q=l(P*K),E=l(I*K),ae=l(z*P);return new m(j,Q,ae,E)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,g,(A)=>Xs(m,A));return Xs(m,[S,k])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===zo)return m.ZERO;if(this.is0()||g===Fr)return this;return b.unsafe(this,g,(S)=>Xs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(g){let S=this,k=g,{X:A,Y:R,Z:D}=S,U=S.is0();if(k==null)k=U?$G:n.inv(D);let T=l(A*k),H=l(R*k),B=n.mul(D,k);if(U)return{x:zo,y:Fr};if(B!==Fr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Fr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=g&Fr?128:0,k}toHex(){return dc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Qu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Mx{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){Ox()}static fromHex(e){Ox()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return dc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ed=BigInt(0),bc=BigInt(1),Am=BigInt(2);function zG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function Bz(e){let t=zG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?mc:s,l=a?255:448,d=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Am**BigInt(254):Am**BigInt(447),b=a?BigInt(8)*Am**BigInt(251)-bc:BigInt(4)*Am**BigInt(445)-bc,g=m+b+bc,S=(I)=>xt(I,r),k=A(f);function A(I){return Ku(S(I),d)}function R(I){let z=$o(ft(I,d,"uCoordinate"));if(a)z[31]&=127;return S(zn(z))}function D(I){return zn(n($o(ft(I,d,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===ed)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){Zi("u",I,ed,r),Zi("scalar",z,m,g);let P=z,K=I,j=bc,Q=ed,E=I,ae=bc,fe=ed;for(let xe=BigInt(l-1);xe>=ed;xe--){let Te=P>>xe&bc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:d,publicKey:d,seed:d},N=(I)=>(I=I===void 0?c(d):I,ft(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(J),Object.freeze(L),Object.freeze({keygen:Yu(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var NG=BigInt(0),Fi=BigInt(1),jz=BigInt(2),DG=BigInt(3),LG=BigInt(5),BG=BigInt(8),ta=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Kx=(()=>({p:ta,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:BG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Zz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=ta,a=e*e%o*e%o,c=xn(a,jz,o)*a%o,l=xn(c,Fi,o)*e%o,d=xn(l,LG,o)*l%o,f=xn(d,t,o)*d%o,p=xn(f,r,o)*f%o,m=xn(p,i,o)*p%o,b=xn(m,n,o)*m%o,g=xn(b,n,o)*m%o,S=xn(g,t,o)*d%o;return{pow_p_5_8:xn(S,jz,o)*e%o,b2:a}}function jG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Fx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Vx(e,t){let r=ta,i=xt(t*t*t,r),n=xt(i*i*t,r),o=Zz(e*n).pow_p_5_8,s=xt(e*i*o,r),a=xt(t*s*s,r),c=s,l=xt(s*Fx,r),d=a===e,f=a===xt(-e,r),p=a===xt(-e*Fx,r);if(d)s=c;if(f||p)s=l;if(Mi(s,r))s=xt(-s,r);return{isValid:d||f,value:s}}var ea=Lz(Kx,{uvRatio:Vx}),No=(()=>ea.Fp)(),Mz=(()=>ea.Fn)();var Tm=(()=>{let e=ta;return Bz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Zz(t);return xt(xn(r,DG,e)*i,e)},adjustScalarBytes:jG})})();var Hx=Fx,UG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),qG=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),ZG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),MG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Uz=(e)=>Vx(Fi,e),FG=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Jx=(e)=>No.create(zn(e)&FG);function qz(e){let{d:t}=Kx,r=ta,i=(k)=>No.create(k),n=i(Hx*e*e),o=i((n+Fi)*ZG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Vx(o,a),d=i(l*e);if(!Mi(d,r))d=i(-d);if(!c)l=d;if(!c)s=n;let f=i(s*(n-Fi)*MG-a),p=l*l,m=i((l+l)*a),b=i(f*UG),g=i(Fi-p),S=i(Fi+p);return new ea(i(m*S),i(g*b),i(b*S),i(m*g))}class $r extends Mx{static BASE=(()=>new $r(ea.BASE))();static ZERO=(()=>new $r(ea.ZERO))();static Fp=(()=>No)();static Fn=(()=>Mz)();constructor(e){super(e)}static fromAffine(e){return new $r(ea.fromAffine(e))}assertSame(e){if(!(e instanceof $r))throw Error("RistrettoPoint expected")}init(e){return new $r(e)}static fromBytes(e){nr(e,32);let{a:t,d:r}=Kx,i=ta,n=(R)=>No.create(R),o=Jx(e);if(!lz(No.toBytes(o),e)||Mi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Fi+t*s),c=n(Fi-t*s),l=n(a*a),d=n(c*c),f=n(t*r*l-d),{isValid:p,value:m}=Uz(n(f*d)),b=n(m*c),g=n(m*b*f),S=n((o+o)*b);if(Mi(S,i))S=n(-S);let k=n(a*g),A=n(S*k);if(!p||Mi(A,i)||k===NG)throw Error("invalid ristretto255 encoding 2");return new $r(new ea(S,k,Fi,A))}static fromHex(e){return $r.fromBytes(vu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=ta,o=(g)=>No.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=Uz(o(s*c)),d=o(l*s),f=o(l*a),p=o(d*f*i),m;if(Mi(i*p,n)){let g=o(t*Hx),S=o(e*Hx);e=g,t=S,m=o(d*qG)}else m=f;if(Mi(e*p,n))t=o(-t);let b=o((r-t)*m);if(Mi(b,n))b=o(-b);return No.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>No.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals($r.ZERO)}}Object.freeze($r.BASE);Object.freeze($r.ZERO);Object.freeze($r.prototype);Object.freeze($r);var HG=Object.freeze({Point:$r,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=jx(e,r,64,Jp);return HG.deriveToCurve(i)},hashToScalar(e,t={DST:Rz}){let r=jx(e,t.DST,64,Jp);return Mz.create(zn(r))},deriveToCurve(e){nr(e,64);let t=Jx(e.subarray(0,32)),r=qz(t),i=Jx(e.subarray(32,64)),n=qz(i);return new $r(r.add(n))}});var Fz=!1,JG=!1;async function Hz(e,t){if(JG)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Rm(e,t){return await Hz(async()=>{let r=Wx(e)?e:await VG(e),i=await crypto.subtle.importKey("raw",WG(t),{name:"X25519"},Fz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Wx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Tm.scalarMult(e,t)})}async function td(e){return await Hz(async()=>Rm(e,Tm.GuBytes),()=>{if(Wx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Tm.scalarMultBase(e)})}var KG=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function VG(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...KG,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},Fz,["deriveBits"])}function Wx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function WG(e){return e}class Gx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),QG(ra(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=ra(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:ra(this.transcript)}}}function QG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function ra(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Sc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Cm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Qx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Jz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function Kz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=ra(i),s=o.subarray(0,t),a=Sc(e,o.subarray(t));return{data:s,rest:a}}class ui{args;body;constructor(e,t){this.args=e,this.body=t}}async function YG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=yr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=ra(i);return{s:new ui(r,n)}}async function Vz(e){let t=new Gx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await YG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=yr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Sc(e,a)}}}function Yx(e){let t=[];t.push(`age-encryption.org/v1
+`)}function WO(e){let t=new Map;for(let r of e){if(t.has(r.name))throw Error(`Duplicate command name: ${r.name}`);t.set(r.name,r)}return t}function bt(e,t){let r=e[t];return typeof r==="string"?r:void 0}function Ns(e,t){let r=e[t];return typeof r==="boolean"?r:void 0}var jp={name:"@rizom/ops",version:"0.2.0-alpha.652",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as lQ,mkdirSync as uQ,readFileSync as gw,writeFileSync as yw}from"fs";import{dirname as dQ,join as iN}from"path";function CS(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Pt(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(`${r}expected number, got ${typeof e}`)}if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw RangeError(`${r}expected integer >= 0, got ${e}`)}}function nr(e,t,r=""){let i=CS(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function $i(e){if(typeof e!=="function"||typeof e.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(Pt(e.outputLen),Pt(e.blockLen),e.outputLen<1)throw Error('"outputLen" must be >= 1');if(e.blockLen<1)throw Error('"blockLen" must be >= 1')}function Xa(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Up(e,t){nr(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw RangeError('"digestInto() output" expected to be of length >='+r)}function qp(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Rr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function ec(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function On(e,t){return e<<32-t|e>>>t}function rt(e,t){return e<<t|e>>>32-t>>>0}var D7=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function L7(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function B7(e){for(let t=0;t<e.length;t++)e[t]=L7(e[t]);return e}var OS=D7?(e)=>e:B7,QO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),j7=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Zp(e){if(nr(e),QO)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=j7[e[r]];return t}var Oi={_0:48,_9:57,A:65,F:70,a:97,f:102};function GO(e){if(e>=Oi._0&&e<=Oi._9)return e-Oi._0;if(e>=Oi.A&&e<=Oi.F)return e-(Oi.A-10);if(e>=Oi.a&&e<=Oi.f)return e-(Oi.a-10);return}function vu(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);if(QO)try{return Uint8Array.fromHex(e)}catch(n){if(n instanceof SyntaxError)throw RangeError(n.message);throw n}let t=e.length,r=t/2;if(t%2)throw RangeError("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=GO(e.charCodeAt(o)),a=GO(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw RangeError('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function U7(e){if(typeof e!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode(e))}function $S(e,t=""){if(typeof e==="string")return U7(e);return nr(e,void 0,t)}function PS(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];nr(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function Mp(e,t){if(t!==void 0&&{}.toString.call(t)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign(e,t)}function zS(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.canXOF=i.canXOF,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function Pi(e=32){Pt(e,"bytesLength");let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if(e>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${e}`);return t.getRandomValues(new Uint8Array(e))}var NS=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});class DS{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if($i(e),nr(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Rr(i)}update(e){return Xa(this),this.iHash.update(e),this}digestInto(e){Xa(this),Up(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var ri=(()=>{let e=(t,r,i)=>new DS(t,r).update(i).digest();return e.create=(t,r)=>new DS(t,r),e})();function _u(e,t,r){if($i(e),r===void 0)r=new Uint8Array(e.outputLen);return ri(e,r,t)}var LS=Uint8Array.of(0),YO=Uint8Array.of();function BS(e,t,r,i=32){$i(e),Pt(i,"length"),nr(t,void 0,"prk");let n=e.outputLen;if(t.length<n)throw Error('"prk" must be at least HashLen octets');if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=YO;else nr(r,void 0,"info");let s=new Uint8Array(o*n),a=ri.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let d=0;d<o;d++)LS[0]=d+1,c.update(d===0?YO:l).update(r).update(LS).digestInto(l),s.set(l,n*d),a._cloneInto(c);return a.destroy(),c.destroy(),Rr(l,LS),s.slice(0,i)}var bo=(e,t,r,i,n)=>BS(e,_u(e,t,r),i,n);function XO(e,t,r){return e&t^~e&r}function e$(e,t,r){return e&t^e&r^t&r}class Fp{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ec(this.buffer)}update(e){Xa(this),nr(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=ec(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Xa(this),Up(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Rr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let d=o;d<i;d++)t[d]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=ec(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let d=0;d<c;d++)s.setUint32(4*d,l[d],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var zi=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var ir=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var Hp=BigInt(4294967295),t$=BigInt(32);function q7(e,t=!1){if(t)return{h:Number(e&Hp),l:Number(e>>t$&Hp)};return{h:Number(e>>t$&Hp)|0,l:Number(e&Hp)|0}}function r$(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=q7(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var jS=(e,t,r)=>e>>>r,US=(e,t,r)=>e<<32-r|t>>>r,Ds=(e,t,r)=>e>>>r|t<<32-r,Ls=(e,t,r)=>e<<32-r|t>>>r,ku=(e,t,r)=>e<<64-r|t>>>r-32,Eu=(e,t,r)=>e>>>r-32|t<<64-r;function ni(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var n$=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),i$=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,o$=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),s$=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,a$=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),c$=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var M7=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),So=new Uint32Array(64);class l$ extends Fp{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let d=0;d<16;d++,t+=4)So[d]=e.getUint32(t,!1);for(let d=16;d<64;d++){let f=So[d-15],p=So[d-2],m=On(f,7)^On(f,18)^f>>>3,b=On(p,17)^On(p,19)^p>>>10;So[d]=b+So[d-7]+m+So[d-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let d=0;d<64;d++){let f=On(s,6)^On(s,11)^On(s,25),p=l+f+XO(s,a,c)+M7[d]+So[d]|0,b=(On(r,2)^On(r,13)^On(r,22))+e$(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Rr(So)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),Rr(this.buffer)}}class u$ extends l${A=zi[0]|0;B=zi[1]|0;C=zi[2]|0;D=zi[3]|0;E=zi[4]|0;F=zi[5]|0;G=zi[6]|0;H=zi[7]|0;constructor(){super(32)}}var d$=(()=>r$(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),F7=(()=>d$[0])(),H7=(()=>d$[1])(),xo=new Uint32Array(80),wo=new Uint32Array(80);class f$ extends Fp{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:d,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=d|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)xo[A]=e.getUint32(t),wo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=xo[A-15]|0,D=wo[A-15]|0,U=Ds(R,D,1)^Ds(R,D,8)^jS(R,D,7),T=Ls(R,D,1)^Ls(R,D,8)^US(R,D,7),H=xo[A-2]|0,B=wo[A-2]|0,V=Ds(H,B,19)^ku(H,B,61)^jS(H,B,6),te=Ls(H,B,19)^Eu(H,B,61)^US(H,B,6),J=o$(T,te,wo[A-7],wo[A-16]),N=s$(J,U,V,xo[A-7],xo[A-16]);xo[A]=N|0,wo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:d,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Ds(d,f,14)^Ds(d,f,18)^ku(d,f,41),D=Ls(d,f,14)^Ls(d,f,18)^Eu(d,f,41),U=d&p^~d&b,T=f&m^~f&g,H=a$(k,D,T,H7[A],wo[A]),B=c$(H,S,R,U,F7[A],xo[A]),V=H|0,te=Ds(r,i,28)^ku(r,i,34)^ku(r,i,39),J=Ls(r,i,28)^Eu(r,i,34)^Eu(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=d|0,m=f|0,{h:d,l:f}=ni(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=n$(V,J,L);r=i$(I,B,te,N),i=I|0}({h:r,l:i}=ni(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=ni(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=ni(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=ni(this.Dh|0,this.Dl|0,c|0,l|0),{h:d,l:f}=ni(this.Eh|0,this.El|0,d|0,f|0),{h:p,l:m}=ni(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=ni(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=ni(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,d,f,p,m,b,g,S,k)}roundClean(){Rr(xo,wo)}destroy(){this.destroyed=!0,Rr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class p$ extends f${Ah=ir[0]|0;Al=ir[1]|0;Bh=ir[2]|0;Bl=ir[3]|0;Ch=ir[4]|0;Cl=ir[5]|0;Dh=ir[6]|0;Dl=ir[7]|0;Eh=ir[8]|0;El=ir[9]|0;Fh=ir[10]|0;Fl=ir[11]|0;Gh=ir[12]|0;Gl=ir[13]|0;Hh=ir[14]|0;Hl=ir[15]|0;constructor(){super(64)}}var zt=zS(()=>new u$,NS(1));var Jp=zS(()=>new p$,NS(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Qp(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function MS(e){if(!Qp(e))throw TypeError("Uint8Array expected")}function b$(e,t){if(!Array.isArray(t))return!1;if(t.length===0)return!0;if(e)return t.every((r)=>typeof r==="string");else return t.every((r)=>Number.isSafeInteger(r))}function S$(e){if(typeof e!=="function")throw TypeError("function expected");return!0}function vo(e,t){if(typeof t!=="string")throw TypeError(`${e}: string expected`);return!0}function Au(e){if(typeof e!=="number")throw TypeError(`number expected, got ${typeof e}`);if(!Number.isSafeInteger(e))throw RangeError(`invalid integer: ${e}`)}function Vp(e){if(!Array.isArray(e))throw TypeError("array expected")}function Wp(e,t){if(!b$(!0,t))throw TypeError(`${e}: array of strings expected`)}function FS(e,t){if(!b$(!1,t))throw TypeError(`${e}: array of numbers expected`)}function Xr(...e){let t=(o)=>o,r=(o,s)=>(a)=>o(s(a)),i=e.map((o)=>o.encode).reduceRight(r,t),n=e.map((o)=>o.decode).reduce(r,t);return{encode:i,decode:n}}function en(e){let t=typeof e==="string"?e.split(""):e,r=t.length;Wp("alphabet",t);let i=new Map(t.map((n,o)=>[n,o]));return{encode:(n)=>(Vp(n),n.map((o)=>{if(!Number.isSafeInteger(o)||o<0||o>=r)throw Error(`alphabet.encode: digit index outside alphabet "${o}". Allowed: ${e}`);return t[o]})),decode:(n)=>(Vp(n),n.map((o)=>{vo("alphabet.decode",o);let s=i.get(o);if(s===void 0)throw Error(`Unknown letter: "${o}". Allowed: ${e}`);return s}))}}function tn(e=""){return vo("join",e),{encode:(t)=>(Wp("join.decode",t),t.join(e)),decode:(t)=>(vo("join.decode",t),t.split(e))}}function Yp(e,t="="){return Au(e),vo("padding",t),{encode(r){Wp("padding.encode",r);while(r.length*e%8)r.push(t);return r},decode(r){Wp("padding.decode",r);let i=r.length;if(i*e%8)throw Error("padding: invalid, string should have whole number of bytes");for(;i>0&&r[i-1]===t;i--)if((i-1)*e%8===0)throw Error("padding: invalid, string has too much padding");return r.slice(0,i)}}}function x$(e){return S$(e),{encode:(t)=>t,decode:(t)=>e(t)}}function m$(e,t,r){if(t<2)throw RangeError(`convertRadix: invalid from=${t}, base cannot be less than 2`);if(r<2)throw RangeError(`convertRadix: invalid to=${r}, base cannot be less than 2`);if(Vp(e),!e.length)return[];let i=0,n=[],o=Array.from(e,(a)=>{if(Au(a),a<0||a>=t)throw Error(`invalid integer: ${a}`);return a}),s=o.length;while(!0){let a=0,c=!0;for(let l=i;l<s;l++){let d=o[l],f=t*a,p=f+d;if(!Number.isSafeInteger(p)||f/t!==a||p-d!==f)throw Error("convertRadix: carry overflow");let m=p/r;a=p%r;let b=Math.floor(m);if(o[l]=b,!Number.isSafeInteger(b)||b*r+a!==p)throw Error("convertRadix: carry overflow");if(!c)continue;else if(!b)i=l;else c=!1}if(n.push(a),c)break}for(let a=0;a<e.length-1&&e[a]===0;a++)n.push(0);return n.reverse()}var w$=(e,t)=>t===0?e:w$(t,e%t),Gp=(e,t)=>e+(t-w$(e,t)),Kp=(()=>{let e=[];for(let t=0;t<40;t++)e.push(2**t);return e})();function qS(e,t,r,i){if(Vp(e),t<=0||t>32)throw RangeError(`convertRadix2: wrong from=${t}`);if(r<=0||r>32)throw RangeError(`convertRadix2: wrong to=${r}`);if(Gp(t,r)>32)throw Error(`convertRadix2: carry overflow from=${t} to=${r} carryBits=${Gp(t,r)}`);let n=0,o=0,s=Kp[t],a=Kp[r]-1,c=[];for(let l of e){if(Au(l),l>=s)throw Error(`convertRadix2: invalid data word=${l} from=${t}`);if(n=n<<t|l,o+t>32)throw Error(`convertRadix2: carry overflow pos=${o} from=${t}`);o+=t;for(;o>=r;o-=r)c.push((n>>o-r&a)>>>0);let d=Kp[o];if(d===void 0)throw Error("invalid carry");n&=d-1}if(n=n<<r-o&a,!i&&o>=t)throw Error("Excess padding");if(!i&&n>0)throw Error(`Non-zero padding: ${n}`);if(i&&o>0)c.push(n>>>0);return c}function J7(e){Au(e);let t=256;return{encode:(r)=>{if(!Qp(r))throw TypeError("radix.encode input should be Uint8Array");return m$(Array.from(r),t,e)},decode:(r)=>(FS("radix.decode",r),Uint8Array.from(m$(r,e,t)))}}function hn(e,t=!1){if(Au(e),e<=0||e>32)throw RangeError("radix2: bits should be in (0..32]");if(Gp(8,e)>32||Gp(e,8)>32)throw RangeError("radix2: carry overflow");return{encode:(r)=>{if(!Qp(r))throw TypeError("radix2.encode input should be Uint8Array");return qS(Array.from(r),8,e,!t)},decode:(r)=>(FS("radix2.decode",r),Uint8Array.from(qS(r,e,8,t)))}}function h$(e){return S$(e),function(...t){try{return e.apply(null,t)}catch(r){}}}var p0e=Object.freeze(Xr(hn(4),en("0123456789ABCDEF"),tn(""))),m0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),Yp(5),tn(""))),h0e=Object.freeze(Xr(hn(5),en("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),tn(""))),g0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),Yp(5),tn(""))),y0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHIJKLMNOPQRSTUV"),tn(""))),b0e=Object.freeze(Xr(hn(5),en("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),tn(""),x$((e)=>e.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),v$=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),K7=/[\t\n\f\r ]/,_$=(e,t)=>{vo("base64",e);let r=t?"base64url":"base64";if(e.length>0&&K7.test(e))throw Error("invalid base64");return Uint8Array.fromBase64(e,{alphabet:r,lastChunkHandling:"strict"})},HS=Object.freeze(v$?{encode(e){return MS(e),e.toBase64()},decode(e){return _$(e,!1)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Yp(6),tn(""))),yr=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),tn(""))),S0e=Object.freeze(v$?{encode(e){return MS(e),e.toBase64({alphabet:"base64url"})},decode(e){return _$(e,!0)}}:Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),Yp(6),tn(""))),x0e=Object.freeze(Xr(hn(6),en("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),tn(""))),JS=(e)=>Xr(J7(58),en(e),tn("")),w0e=Object.freeze(JS("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),v0e=Object.freeze(JS("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),_0e=Object.freeze(JS("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var ZS=Xr(en("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),tn("")),g$=[996825010,642813549,513874426,1027748829,705979059];function Iu(e){let t=e>>25,r=(e&33554431)<<5;for(let i=0;i<g$.length;i++)if((t>>i&1)===1)r^=g$[i];return r}function y$(e,t,r=1){let i=e.length,n=1;for(let o=0;o<i;o++){let s=e.charCodeAt(o);if(s<33||s>126)throw Error(`Invalid prefix (${e})`);n=Iu(n)^s>>5}n=Iu(n);for(let o=0;o<i;o++)n=Iu(n)^e.charCodeAt(o)&31;for(let o of t)n=Iu(n)^o;for(let o=0;o<6;o++)n=Iu(n);return n^=r,ZS.encode(qS([n%Kp[30]],30,5,!1))}function k$(e){let t=e==="bech32"?1:734539939,r=hn(5),i=r.decode,n=r.encode,o=h$(i);function s(f,p,m=90){if(vo("bech32.encode prefix",f),Qp(p))p=Array.from(p);FS("bech32.encode",p);let b=f.length;if(b===0)throw TypeError(`Invalid prefix length ${b}`);let g=b+7+p.length;if(m!==!1&&g>m)throw TypeError(`Length ${g} exceeds limit ${m}`);let S=f.toLowerCase(),k=y$(S,p,t);return`${S}1${ZS.encode(p)}${k}`}function a(f,p=90){vo("bech32.decode input",f);let m=f.length;if(m<8||p!==!1&&m>p)throw TypeError(`invalid string length: ${m} (${f}). Expected (8..${p})`);let b=f.toLowerCase();if(f!==b&&f!==f.toUpperCase())throw Error("String must be lowercase or uppercase");let g=b.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let S=b.slice(0,g),k=b.slice(g+1);if(k.length<6)throw Error("Data must be at least 6 characters long");let A=ZS.decode(k).slice(0,-6),R=y$(S,A,t);if(!k.endsWith(R))throw Error(`Invalid checksum in ${f}: expected "${R}"`);return{prefix:S,words:A}}let c=h$(a);function l(f){let{prefix:p,words:m}=a(f,!1);return{prefix:p,words:m,bytes:i(m)}}function d(f,p){return s(f,n(p))}return{encode:s,decode:a,encodeFromBytes:d,decodeToBytes:l,decodeUnsafe:c,fromWords:i,fromWordsUnsafe:o,toWords:n}}var rn=Object.freeze(k$("bech32")),k0e=Object.freeze(k$("bech32m"));var V7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),W7={encode(e){return MS(e),e.toHex()},decode(e){return vo("hex",e),Uint8Array.fromHex(e)}},E0e=Object.freeze(V7?W7:Xr(hn(4),en("0123456789abcdef"),tn(""),x$((e)=>{if(typeof e!=="string"||e.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof e} with length ${e.length}`);return e.toLowerCase()})));function Q7(e,t,r,i){$i(e);let n=Mp({dkLen:32,asyncTick:10},i),{c:o,dkLen:s,asyncTick:a}=n;if(Pt(o,"c"),Pt(s,"dkLen"),Pt(a,"asyncTick"),o<1)throw Error("iterations (c) must be >= 1");if(s<1)throw Error('"dkLen" must be >= 1');if(s>4294967295*e.outputLen)throw Error("derived key too long");let c=$S(t,"password"),l=$S(r,"salt"),d=new Uint8Array(s),f=ri.create(e,c),p=f._cloneInto().update(l);return{c:o,dkLen:s,asyncTick:a,DK:d,PRF:f,PRFSalt:p}}function Y7(e,t,r,i,n){if(e.destroy(),t.destroy(),i)i.destroy();return Rr(n),r}function KS(e,t,r,i){let{c:n,dkLen:o,DK:s,PRF:a,PRFSalt:c}=Q7(e,t,r,i),l,d=new Uint8Array(4),f=ec(d),p=new Uint8Array(a.outputLen);for(let m=1,b=0;b<o;m++,b+=a.outputLen){let g=s.subarray(b,b+a.outputLen);f.setInt32(0,m,!1),(l=c._cloneInto(l)).update(d).digestInto(p),g.set(p.subarray(0,g.length));for(let S=1;S<n;S++){a._cloneInto(l).update(p).digestInto(p);for(let k=0;k<g.length;k++)g[k]^=p[k]}}return Y7(a,c,s,l,p)}function E$(e,t,r,i,n,o){let s=e[t++]^r[i++],a=e[t++]^r[i++],c=e[t++]^r[i++],l=e[t++]^r[i++],d=e[t++]^r[i++],f=e[t++]^r[i++],p=e[t++]^r[i++],m=e[t++]^r[i++],b=e[t++]^r[i++],g=e[t++]^r[i++],S=e[t++]^r[i++],k=e[t++]^r[i++],A=e[t++]^r[i++],R=e[t++]^r[i++],D=e[t++]^r[i++],U=e[t++]^r[i++],T=s,H=a,B=c,V=l,te=d,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let fe=0;fe<8;fe+=2)te^=rt(T+j|0,7),I^=rt(te+T|0,9),j^=rt(I+te|0,13),T^=rt(j+I|0,18),z^=rt(J+H|0,7),Q^=rt(z+J|0,9),H^=rt(Q+z|0,13),J^=rt(H+Q|0,18),E^=rt(P+N|0,7),B^=rt(E+P|0,9),N^=rt(B+E|0,13),P^=rt(N+B|0,18),V^=rt(ae+K|0,7),L^=rt(V+ae|0,9),K^=rt(L+V|0,13),ae^=rt(K+L|0,18),H^=rt(T+V|0,7),B^=rt(H+T|0,9),V^=rt(B+H|0,13),T^=rt(V+B|0,18),N^=rt(J+te|0,7),L^=rt(N+J|0,9),te^=rt(L+N|0,13),J^=rt(te+L|0,18),K^=rt(P+z|0,7),I^=rt(K+P|0,9),z^=rt(I+K|0,13),P^=rt(z+I|0,18),j^=rt(ae+E|0,7),Q^=rt(j+ae|0,9),E^=rt(Q+j|0,13),ae^=rt(E+Q|0,18);n[o++]=s+T|0,n[o++]=a+H|0,n[o++]=c+B|0,n[o++]=l+V|0,n[o++]=d+te|0,n[o++]=f+J|0,n[o++]=p+N|0,n[o++]=m+L|0,n[o++]=b+I|0,n[o++]=g+z|0,n[o++]=S+P|0,n[o++]=k+K|0,n[o++]=A+j|0,n[o++]=R+Q|0,n[o++]=D+E|0,n[o++]=U+ae|0}function VS(e,t,r,i,n){let o=i+0,s=i+16*n;for(let a=0;a<16;a++)r[s+a]=e[t+(2*n-1)*16+a];for(let a=0;a<n;a++,o+=16,t+=16){if(E$(r,s,e,t,r,o),a>0)s+=16;E$(r,o,e,t+=16,r,s)}}function X7(e,t,r){let i=Mp({dkLen:32,asyncTick:10,maxmem:1073742848},r),{N:n,r:o,p:s,dkLen:a,asyncTick:c,maxmem:l,onProgress:d}=i;if(Pt(n,"N"),Pt(o,"r"),Pt(s,"p"),Pt(a,"dkLen"),Pt(c,"asyncTick"),Pt(l,"maxmem"),d!==void 0&&typeof d!=="function")throw Error("progressCb must be a function");let f=128*o,p=f/4,m=Math.pow(2,32);if(n<=1||(n&n-1)!==0||n>m)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(s<1||s>(m-1)*32/f)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(a<1||a>(m-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let b=f*(n+s+1);if(b>l)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+b+", maxmem="+l);let g=KS(zt,e,t,{c:1,dkLen:f*s}),S=qp(g),k=qp(new Uint8Array(f*n)),A=qp(new Uint8Array(f)),R=()=>{};if(d){let D=2*n*s,U=Math.max(Math.floor(D/1e4),1),T=0;R=()=>{if(T++,d&&(!(T%U)||T===D))d(T/D)}}return{N:n,r:o,p:s,dkLen:a,blockSize32:p,V:k,B32:S,B:g,tmp:A,blockMixCb:R,asyncTick:c}}function eW(e,t,r,i,n){let o=KS(zt,e,r,{c:1,dkLen:t});return Rr(r,i,n),o}function WS(e,t,r){let{N:i,r:n,p:o,dkLen:s,blockSize32:a,V:c,B32:l,B:d,tmp:f,blockMixCb:p}=X7(e,t,r);OS(l);for(let m=0;m<o;m++){let b=a*m;for(let g=0;g<a;g++)c[g]=l[b+g];for(let g=0,S=0;g<i-1;g++)VS(c,S,c,S+=a,n),p();VS(c,(i-1)*a,l,b,n),p();for(let g=0;g<i;g++){let S=(l[b+a-16]&i-1)>>>0;for(let k=0;k<a;k++)f[k]=l[b+k]^c[S*a+k];VS(f,0,l,b,n),p()}}return OS(l),eW(e,s,d,c,f)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function tW(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in e&&e.BYTES_PER_ELEMENT===1}function Xp(e){if(typeof e!=="boolean")throw TypeError(`boolean expected, not ${e}`)}function tc(e){if(typeof e!=="number")throw TypeError("number expected, got "+typeof e);if(!Number.isSafeInteger(e)||e<0)throw RangeError("positive integer expected, got "+e)}function Ft(e,t,r=""){let i=tW(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`,l=s+"expected Uint8Array"+a+", got "+c;if(!i)throw TypeError(l);throw RangeError(l)}return e}function GS(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function I$(e,t,r=!1){Ft(e,void 0,"output");let i=t.outputLen;if(e.length<i)throw RangeError("digestInto() expects output buffer of length at least "+i);if(r&&!rc(e))throw Error("invalid output, must be aligned")}function ii(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function $n(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rW(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}var Bs=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),nW=(e)=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;var iW=(e)=>{for(let t=0;t<e.length;t++)e[t]=nW(e[t]);return e},Ni=Bs?(e)=>e:iW;function A$(e,t){if(t==null||typeof t!=="object")throw Error("options must be defined");return Object.assign(e,t)}function T$(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function R$(e,t,r){let i=t,n=r||(()=>[]),o=(a,c)=>i(c,...n(a)).update(a).digest(),s=i(new Uint8Array(e),...n(new Uint8Array(0)));return o.outputLen=s.outputLen,o.blockLen=s.blockLen,o.create=(a,...c)=>i(a,...c),o}var C$=(e,t)=>{function r(i,...n){if(Ft(i,void 0,"key"),e.nonceLength!==void 0){let d=n[0];Ft(d,e.varSizeNonce?void 0:e.nonceLength,"nonce")}let o=e.tagLength;if(o&&n[1]!==void 0)Ft(n[1],void 0,"AAD");let s=t(i,...n),a=(d,f)=>{if(f!==void 0){if(d!==2)throw Error("cipher output not supported");Ft(f,void 0,"output")}},c=!1;return{encrypt(d,f){if(c)throw Error("cannot encrypt() twice with same key + nonce");return c=!0,Ft(d),a(s.encrypt.length,f),s.encrypt(d,f)},decrypt(d,f){if(Ft(d),o&&d.length<o)throw Error('"ciphertext" expected length bigger than tagLength='+o);return a(s.decrypt.length,f),s.decrypt(d,f)}}}return Object.assign(r,e),r};function Tu(e,t,r=!0){if(t===void 0)return new Uint8Array(e);if(Ft(t,void 0,"output"),t.length!==e)throw Error('"output" expected Uint8Array of length '+e+", got: "+t.length);if(r&&!rc(t))throw Error("invalid output, must be aligned");return t}function O$(e,t,r){tc(e),tc(t),Xp(r);let i=new Uint8Array(16),n=rW(i);return n.setBigUint64(0,BigInt(t),r),n.setBigUint64(8,BigInt(e),r),i}function rc(e){return e.byteOffset%4===0}function nc(e){return Uint8Array.from(Ft(e))}var P$=(e)=>Uint8Array.from(e.split(""),(t)=>t.charCodeAt(0)),oW=(()=>Ni(ii(P$("expand 16-byte k"))))(),sW=(()=>Ni(ii(P$("expand 32-byte k"))))();function nt(e,t){return e<<t|e>>>32-t}var Ru=64,aW=16,QS=(()=>4294967295)(),$$=Uint32Array.of();function cW(e,t,r,i,n,o,s,a){let c=n.length,l=new Uint8Array(Ru),d=ii(l),f=Bs&&rc(n)&&rc(o),p=f?ii(n):$$,m=f?ii(o):$$;if(!Bs){for(let b=0;b<c;s++){if(e(t,r,i,d,s,a),Ni(d),s>=QS)throw Error("arx: counter overflow");let g=Math.min(Ru,c-b);for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}return}for(let b=0;b<c;s++){if(e(t,r,i,d,s,a),s>=QS)throw Error("arx: counter overflow");let g=Math.min(Ru,c-b);if(f&&g===Ru){let S=b/4;if(b%4!==0)throw Error("arx: invalid block position");for(let k=0,A;k<aW;k++)A=S+k,m[A]=p[A]^d[k];b+=Ru;continue}for(let S=0,k;S<g;S++)k=b+S,o[k]=n[k]^l[S];b+=g}}function z$(e,t){let{allowShortKeys:r,extendNonceFn:i,counterLength:n,counterRight:o,rounds:s}=A$({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},t);if(typeof e!=="function")throw Error("core must be a function");return tc(n),tc(s),Xp(o),Xp(r),(a,c,l,d,f=0)=>{Ft(a,void 0,"key"),Ft(c,void 0,"nonce"),Ft(l,void 0,"data");let p=l.length;if(d=Tu(p,d,!1),tc(f),f<0||f>=QS)throw Error("arx: counter overflow");let m=[],b=a.length,g,S;if(b===32)m.push(g=nc(a)),S=sW;else if(b===16&&r)g=new Uint8Array(32),g.set(a),g.set(a,16),S=oW,m.push(g);else throw Ft(a,32,"arx key"),Error("invalid key size");if(!Bs||!rc(c))m.push(c=nc(c));let k=ii(g);if(i){if(c.length!==24)throw Error("arx: extended nonce must be 24 bytes");let D=c.subarray(0,16);if(Bs)i(S,k,ii(D),k);else{let U=Ni(Uint32Array.from(S));i(U,k,ii(D),k),$n(U),Ni(k)}c=c.subarray(16)}else if(!Bs)Ni(k);let A=16-n;if(A!==c.length)throw Error(`arx: nonce must be ${A} or 16 bytes`);if(A!==12){let D=new Uint8Array(12);D.set(c,o?0:12-c.length),c=D,m.push(c)}let R=Ni(ii(c));try{return cW(e,S,k,R,l,d,f,s),d}finally{$n(...m)}}}function or(e,t){return e[t++]&255|(e[t++]&255)<<8}class N${blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor(e){e=nc(Ft(e,32,"key"));let t=or(e,0),r=or(e,2),i=or(e,4),n=or(e,6),o=or(e,8),s=or(e,10),a=or(e,12),c=or(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|r<<3)&8191,this.r[2]=(r>>>10|i<<6)&7939,this.r[3]=(i>>>7|n<<9)&8191,this.r[4]=(n>>>4|o<<12)&255,this.r[5]=o>>>1&8190,this.r[6]=(o>>>14|s<<2)&8191,this.r[7]=(s>>>11|a<<5)&8065,this.r[8]=(a>>>8|c<<8)&8191,this.r[9]=c>>>5&127;for(let l=0;l<8;l++)this.pad[l]=or(e,16+2*l)}process(e,t,r=!1){let i=r?0:2048,{h:n,r:o}=this,s=o[0],a=o[1],c=o[2],l=o[3],d=o[4],f=o[5],p=o[6],m=o[7],b=o[8],g=o[9],S=or(e,t+0),k=or(e,t+2),A=or(e,t+4),R=or(e,t+6),D=or(e,t+8),U=or(e,t+10),T=or(e,t+12),H=or(e,t+14),B=n[0]+(S&8191),V=n[1]+((S>>>13|k<<3)&8191),te=n[2]+((k>>>10|A<<6)&8191),J=n[3]+((A>>>7|R<<9)&8191),N=n[4]+((R>>>4|D<<12)&8191),L=n[5]+(D>>>1&8191),I=n[6]+((D>>>14|U<<2)&8191),z=n[7]+((U>>>11|T<<5)&8191),P=n[8]+((T>>>8|H<<8)&8191),K=n[9]+(H>>>5|i),j=0,Q=j+B*s+V*(5*g)+te*(5*b)+J*(5*m)+N*(5*p);j=Q>>>13,Q&=8191,Q+=L*(5*f)+I*(5*d)+z*(5*l)+P*(5*c)+K*(5*a),j+=Q>>>13,Q&=8191;let E=j+B*a+V*s+te*(5*g)+J*(5*b)+N*(5*m);j=E>>>13,E&=8191,E+=L*(5*p)+I*(5*f)+z*(5*d)+P*(5*l)+K*(5*c),j+=E>>>13,E&=8191;let ae=j+B*c+V*a+te*s+J*(5*g)+N*(5*b);j=ae>>>13,ae&=8191,ae+=L*(5*m)+I*(5*p)+z*(5*f)+P*(5*d)+K*(5*l),j+=ae>>>13,ae&=8191;let fe=j+B*l+V*c+te*a+J*s+N*(5*g);j=fe>>>13,fe&=8191,fe+=L*(5*b)+I*(5*m)+z*(5*p)+P*(5*f)+K*(5*d),j+=fe>>>13,fe&=8191;let C=j+B*d+V*l+te*c+J*a+N*s;j=C>>>13,C&=8191,C+=L*(5*g)+I*(5*b)+z*(5*m)+P*(5*p)+K*(5*f),j+=C>>>13,C&=8191;let xe=j+B*f+V*d+te*l+J*c+N*a;j=xe>>>13,xe&=8191,xe+=L*s+I*(5*g)+z*(5*b)+P*(5*m)+K*(5*p),j+=xe>>>13,xe&=8191;let Te=j+B*p+V*f+te*d+J*l+N*c;j=Te>>>13,Te&=8191,Te+=L*a+I*s+z*(5*g)+P*(5*b)+K*(5*m),j+=Te>>>13,Te&=8191;let Pe=j+B*m+V*p+te*f+J*d+N*l;j=Pe>>>13,Pe&=8191,Pe+=L*c+I*a+z*s+P*(5*g)+K*(5*b),j+=Pe>>>13,Pe&=8191;let $e=j+B*b+V*m+te*p+J*f+N*d;j=$e>>>13,$e&=8191,$e+=L*l+I*c+z*a+P*s+K*(5*g),j+=$e>>>13,$e&=8191;let _e=j+B*g+V*b+te*m+J*p+N*f;j=_e>>>13,_e&=8191,_e+=L*d+I*l+z*c+P*a+K*s,j+=_e>>>13,_e&=8191,j=(j<<2)+j|0,j=j+Q|0,Q=j&8191,j=j>>>13,E+=j,n[0]=Q,n[1]=E,n[2]=ae,n[3]=fe,n[4]=C,n[5]=xe,n[6]=Te,n[7]=Pe,n[8]=$e,n[9]=_e}finalize(){let{h:e,pad:t}=this,r=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let s=2;s<10;s++)e[s]+=i,i=e[s]>>>13,e[s]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,r[0]=e[0]+5,i=r[0]>>>13,r[0]&=8191;for(let s=1;s<10;s++)r[s]=e[s]+i,i=r[s]>>>13,r[s]&=8191;r[9]-=8192;let n=(i^1)-1;for(let s=0;s<10;s++)r[s]&=n;n=~n;for(let s=0;s<10;s++)e[s]=e[s]&n|r[s];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let o=e[0]+t[0];e[0]=o&65535;for(let s=1;s<8;s++)o=(e[s]+t[s]|0)+(o>>>16)|0,e[s]=o&65535;$n(r)}update(e){GS(this),Ft(e),e=nc(e);let{buffer:t,blockLen:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(r-this.pos,i-n);if(o===r){for(;r<=i-n;n+=r)this.process(e,n);continue}if(t.set(e.subarray(n,n+o),this.pos),this.pos+=o,n+=o,this.pos===r)this.process(t,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,$n(this.h,this.r,this.buffer,this.pad)}digestInto(e){GS(this),I$(e,this),this.finished=!0;let{buffer:t,h:r}=this,{pos:i}=this;if(i){t[i++]=1;for(;i<16;i++)t[i]=0;this.process(t,0,!0)}this.finalize();let n=0;for(let o=0;o<8;o++)e[n++]=r[o]>>>0,e[n++]=r[o]>>>8}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}}var D$=R$(32,(e)=>new N$(e));function lW(e,t,r,i,n,o=20){let s=e[0],a=e[1],c=e[2],l=e[3],d=t[0],f=t[1],p=t[2],m=t[3],b=t[4],g=t[5],S=t[6],k=t[7],A=n,R=r[0],D=r[1],U=r[2],T=s,H=a,B=c,V=l,te=d,J=f,N=p,L=m,I=b,z=g,P=S,K=k,j=A,Q=R,E=D,ae=U;for(let C=0;C<o;C+=2)T=T+te|0,j=nt(j^T,16),I=I+j|0,te=nt(te^I,12),T=T+te|0,j=nt(j^T,8),I=I+j|0,te=nt(te^I,7),H=H+J|0,Q=nt(Q^H,16),z=z+Q|0,J=nt(J^z,12),H=H+J|0,Q=nt(Q^H,8),z=z+Q|0,J=nt(J^z,7),B=B+N|0,E=nt(E^B,16),P=P+E|0,N=nt(N^P,12),B=B+N|0,E=nt(E^B,8),P=P+E|0,N=nt(N^P,7),V=V+L|0,ae=nt(ae^V,16),K=K+ae|0,L=nt(L^K,12),V=V+L|0,ae=nt(ae^V,8),K=K+ae|0,L=nt(L^K,7),T=T+J|0,ae=nt(ae^T,16),P=P+ae|0,J=nt(J^P,12),T=T+J|0,ae=nt(ae^T,8),P=P+ae|0,J=nt(J^P,7),H=H+N|0,j=nt(j^H,16),K=K+j|0,N=nt(N^K,12),H=H+N|0,j=nt(j^H,8),K=K+j|0,N=nt(N^K,7),B=B+L|0,Q=nt(Q^B,16),I=I+Q|0,L=nt(L^I,12),B=B+L|0,Q=nt(Q^B,8),I=I+Q|0,L=nt(L^I,7),V=V+te|0,E=nt(E^V,16),z=z+E|0,te=nt(te^z,12),V=V+te|0,E=nt(E^V,8),z=z+E|0,te=nt(te^z,7);let fe=0;i[fe++]=s+T|0,i[fe++]=a+H|0,i[fe++]=c+B|0,i[fe++]=l+V|0,i[fe++]=d+te|0,i[fe++]=f+J|0,i[fe++]=p+N|0,i[fe++]=m+L|0,i[fe++]=b+I|0,i[fe++]=g+z|0,i[fe++]=S+P|0,i[fe++]=k+K|0,i[fe++]=A+j|0,i[fe++]=R+Q|0,i[fe++]=D+E|0,i[fe++]=U+ae|0}var uW=z$(lW,{counterRight:!1,counterLength:4,allowShortKeys:!1});var dW=new Uint8Array(16),L$=(e,t)=>{e.update(t);let r=t.length%16;if(r)e.update(dW.subarray(r))},fW=new Uint8Array(32);function B$(e,t,r,i,n){if(n!==void 0)Ft(n,void 0,"AAD");let o=e(t,r,fW),s=O$(i.length,n?n.length:0,!0),a=D$.create(o);if(n)L$(a,n);L$(a,i),a.update(s);let c=a.digest();return $n(o,s),c}var pW=(e)=>(t,r,i)=>({encrypt(o,s){let a=o.length;s=Tu(a+16,s,!1),s.set(o);let c=s.subarray(0,-16);e(t,r,c,c,1);let l=B$(e,t,r,c,i);return s.set(l,a),$n(l),s},decrypt(o,s){s=Tu(o.length-16,s,!1);let a=o.subarray(0,-16),c=o.subarray(-16),l=B$(e,t,r,a,i);if(!T$(c,l))throw $n(l),Error("invalid tag");return s.set(o.subarray(0,-16)),e(t,r,s,s,1),$n(l),s}}),gn=C$({blockSize:64,nonceLength:12,tagLength:16},pW(uW));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name==="Uint8Array"}function Qt(e,t=""){if(!Number.isSafeInteger(e)||e<0){let r=t&&`"${t}" `;throw Error(`${r}expected integer >= 0, got ${e}`)}}function De(e,t,r=""){let i=ic(e),n=e?.length,o=t!==void 0;if(!i||o&&n!==t){let s=r&&`"${r}" `,a=o?` of length ${t}`:"",c=i?`length=${n}`:`type=${typeof e}`;throw Error(s+"expected Uint8Array"+a+", got "+c)}return e}function yn(e){if(typeof e!=="function"||typeof e.create!=="function")throw Error("Hash must wrapped by utils.createHasher");Qt(e.outputLen),Qt(e.blockLen)}function Li(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function em(e,t){De(e,void 0,"digestInto() output");let r=t.outputLen;if(e.length<r)throw Error('"digestInto() output" expected to be of length >='+r)}function tm(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function Mr(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function rm(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Pn(e,t){return e<<32-t|e>>>t}var mW=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function hW(e){return e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255}function gW(e){for(let t=0;t<e.length;t++)e[t]=hW(e[t]);return e}var YS=mW?(e)=>e:gW,U$=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),yW=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function js(e){if(De(e),U$)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=yW[e[r]];return t}var Di={_0:48,_9:57,A:65,F:70,a:97,f:102};function j$(e){if(e>=Di._0&&e<=Di._9)return e-Di._0;if(e>=Di.A&&e<=Di.F)return e-(Di.A-10);if(e>=Di.a&&e<=Di.f)return e-(Di.a-10);return}function Us(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);if(U$)return Uint8Array.fromHex(e);let t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);let i=new Uint8Array(r);for(let n=0,o=0;n<r;n++,o+=2){let s=j$(e.charCodeAt(o)),a=j$(e.charCodeAt(o+1));if(s===void 0||a===void 0){let c=e[o]+e[o+1];throw Error('hex string expected, got non-hex character "'+c+'" at index '+o)}i[n]=s*16+a}return i}function Ut(...e){let t=0;for(let i=0;i<e.length;i++){let n=e[i];De(n),t+=n.length}let r=new Uint8Array(t);for(let i=0,n=0;i<e.length;i++){let o=e[i];r.set(o,n),n+=o.length}return r}function oc(e,t={}){let r=(n,o)=>e(o).update(n).digest(),i=e(void 0);return r.outputLen=i.outputLen,r.blockLen=i.blockLen,r.create=(n)=>e(n),Object.assign(r,t),Object.freeze(r)}function _o(e=32){let t=typeof globalThis==="object"?globalThis.crypto:null;if(typeof t?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return t.getRandomValues(new Uint8Array(e))}var ko=(e)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ex=BigInt(0),XS=BigInt(1);function Cu(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw Error(r+"expected boolean, got type="+typeof e)}return e}function q$(e){if(typeof e==="bigint"){if(!nm(e))throw Error("positive bigint expected, got "+e)}else Qt(e);return e}function Ou(e){let t=q$(e).toString(16);return t.length&1?"0"+t:t}function Z$(e){if(typeof e!=="string")throw Error("hex string expected, got "+typeof e);return e===""?ex:BigInt("0x"+e)}function Eo(e){return Z$(js(e))}function Io(e){return Z$(js(im(De(e)).reverse()))}function sc(e,t){Qt(t),e=q$(e);let r=Us(e.toString(16).padStart(t*2,"0"));if(r.length!==t)throw Error("number too large");return r}function $u(e,t){return sc(e,t).reverse()}function im(e){return Uint8Array.from(e)}function Ao(e){return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw Error(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var nm=(e)=>typeof e==="bigint"&&ex<=e;function bW(e,t,r){return nm(e)&&nm(t)&&nm(r)&&t<=e&&e<r}function Pu(e,t,r,i){if(!bW(t,r,i))throw Error("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function tx(e){let t;for(t=0;e>ex;e>>=XS,t+=1);return t}var zu=(e)=>(XS<<BigInt(e))-XS;function M$(e,t,r){if(Qt(e,"hashLen"),Qt(t,"qByteLen"),typeof r!=="function")throw Error("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),d=0,f=()=>{c.fill(1),l.fill(0),d=0},p=(...S)=>r(l,Ut(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(d++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return Ut(...k)};return(S,k)=>{f(),m(S);let A=void 0;while(!(A=k(b())))m();return f(),A}}function qs(e,t={},r={}){if(!e||typeof e!=="object")throw Error("expected valid options object");function i(o,s,a){let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw Error(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}function rx(e){let t=new WeakMap;return(r,...i)=>{let n=t.get(r);if(n!==void 0)return n;let o=e(r,...i);return t.set(r,o),o}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Or=BigInt(0),br=BigInt(1),Zs=BigInt(2),J$=BigInt(3),K$=BigInt(4),V$=BigInt(5),SW=BigInt(7),W$=BigInt(8),xW=BigInt(9),G$=BigInt(16);function Cr(e,t){let r=e%t;return r>=Or?r:t+r}function bn(e,t,r){let i=e;while(t-- >Or)i*=i,i%=r;return i}function F$(e,t){if(e===Or)throw Error("invert: expected non-zero number");if(t<=Or)throw Error("invert: expected positive modulus, got "+t);let r=Cr(e,t),i=t,n=Or,o=br,s=br,a=Or;while(r!==Or){let l=i/r,d=i%r,f=n-s*l,p=o-a*l;i=r,r=d,n=s,o=a,s=f,a=p}if(i!==br)throw Error("invert: does not exist");return Cr(n,t)}function nx(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function Q$(e,t){let r=(e.ORDER+br)/K$,i=e.pow(t,r);return nx(e,i,t),i}function wW(e,t){let r=(e.ORDER-V$)/W$,i=e.mul(t,Zs),n=e.pow(i,r),o=e.mul(t,n),s=e.mul(e.mul(o,Zs),n),a=e.mul(o,e.sub(s,e.ONE));return nx(e,a,t),a}function vW(e){let t=om(e),r=Y$(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+SW)/G$;return(a,c)=>{let l=a.pow(c,s),d=a.mul(l,i),f=a.mul(l,n),p=a.mul(l,o),m=a.eql(a.sqr(d),c),b=a.eql(a.sqr(f),c);l=a.cmov(l,d,m),d=a.cmov(p,f,b);let g=a.eql(a.sqr(d),c),S=a.cmov(l,d,g);return nx(a,S,c),S}}function Y$(e){if(e<J$)throw Error("sqrt is not defined for small field");let t=e-br,r=0;while(t%Zs===Or)t/=Zs,r++;let i=Zs,n=om(e);while(H$(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return Q$;let o=n.pow(i,t),s=(t+br)/Zs;return function(c,l){if(c.is0(l))return l;if(H$(c,l)!==1)throw Error("Cannot find square root");let d=r,f=c.mul(c.ONE,o),p=c.pow(l,t),m=c.pow(l,s);while(!c.eql(p,c.ONE)){if(c.is0(p))return c.ZERO;let b=1,g=c.sqr(p);while(!c.eql(g,c.ONE))if(b++,g=c.sqr(g),b===d)throw Error("Cannot find square root");let S=br<<BigInt(d-b-1),k=c.pow(f,S);d=b,f=c.sqr(k),p=c.mul(p,f),m=c.mul(m,k)}return m}}function _W(e){if(e%K$===J$)return Q$;if(e%W$===V$)return wW;if(e%G$===xW)return vW(e);return Y$(e)}var kW=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function ix(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=kW.reduce((i,n)=>(i[n]="function",i),t);return qs(e,r),e}function EW(e,t,r){if(r<Or)throw Error("invalid exponent, negatives unsupported");if(r===Or)return e.ONE;if(r===br)return t;let i=e.ONE,n=t;while(r>Or){if(r&br)i=e.mul(i,n);n=e.sqr(n),r>>=br}return i}function Nu(e,t,r=!1){let i=Array(t.length).fill(r?e.ZERO:void 0),n=t.reduce((s,a,c)=>{if(e.is0(a))return s;return i[c]=s,e.mul(s,a)},e.ONE),o=e.inv(n);return t.reduceRight((s,a,c)=>{if(e.is0(a))return s;return i[c]=e.mul(s,i[c]),e.mul(s,a)},o),i}function H$(e,t){let r=(e.ORDER-br)/Zs,i=e.pow(t,r),n=e.eql(i,e.ONE),o=e.eql(i,e.ZERO),s=e.eql(i,e.neg(e.ONE));if(!n&&!o&&!s)throw Error("invalid Legendre symbol result");return n?1:o?0:-1}function IW(e,t){if(t!==void 0)Qt(t);let r=t!==void 0?t:e.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}class X${ORDER;BITS;BYTES;isLE;ZERO=Or;ONE=br;_lengths;_sqrt;_mod;constructor(e,t={}){if(e<=Or)throw Error("invalid field: expected ORDER > 0, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")this.sqrt=t.sqrt;if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=t.allowedLengths?.slice();if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=IW(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Cr(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof e);return Or<=e&&e<this.ORDER}is0(e){return e===Or}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&br)===br}neg(e){return Cr(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return Cr(e*e,this.ORDER)}add(e,t){return Cr(e+t,this.ORDER)}sub(e,t){return Cr(e-t,this.ORDER)}mul(e,t){return Cr(e*t,this.ORDER)}pow(e,t){return EW(this,e,t)}div(e,t){return Cr(e*F$(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return F$(e,this.ORDER)}sqrt(e){if(!this._sqrt)this._sqrt=_W(this.ORDER);return this._sqrt(this,e)}toBytes(e){return this.isLE?$u(e,this.BYTES):sc(e,this.BYTES)}fromBytes(e,t=!1){De(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?Io(e):Eo(e);if(s)a=Cr(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Nu(this,e)}cmov(e,t,r){return r?t:e}}function om(e,t={}){return new X$(e,t)}function eP(e){if(typeof e!=="bigint")throw Error("field order must be bigint");let t=e.toString(2).length;return Math.ceil(t/8)}function ox(e){let t=eP(e);return t+Math.ceil(t/2)}function tP(e,t,r=!1){De(e);let i=e.length,n=eP(t),o=ox(t);if(i<16||i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?Io(e):Eo(e),a=Cr(s,t-br)+br;return r?$u(a,n):sc(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ac=BigInt(0),Ms=BigInt(1);function Du(e,t){let r=t.negate();return e?r:t}function lx(e,t){let r=Nu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function oP(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function sx(e,t){oP(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=zu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function rP(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ms;let l=t*i,d=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:d,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var ax=new WeakMap,sP=new WeakMap;function cx(e){return sP.get(e)||1}function nP(e){if(e!==ac)throw Error("invalid wNAF")}class ux{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>ac){if(t&Ms)r=r.add(i);i=i.double(),t>>=Ms}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=sx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=sx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:d,isNegF:f,offsetF:p}=rP(r,s,o);if(r=a,l)n=n.add(Du(f,t[p]));else i=i.add(Du(d,t[c]))}return nP(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=sx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===ac)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=rP(r,o,n);if(r=s,c)continue;else{let d=t[a];i=i.add(l?d.negate():d)}}return nP(r),i}getPrecomputes(e,t,r){let i=ax.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);ax.set(t,i)}}return i}cached(e,t,r){let i=cx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=cx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){oP(t,this.bits),sP.set(e,t),ax.delete(e)}hasCache(e){return cx(e)!==1}}function aP(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>ac||i>ac){if(r&Ms)o=o.add(n);if(i&Ms)s=s.add(n);n=n.double(),r>>=Ms,i>>=Ms}return{p1:o,p2:s}}function iP(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return ix(t),t}else return om(e,{isLE:r})}function cP(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>ac))throw Error(`CURVE.${c} must be positive bigint`)}let n=iP(t.p,r.Fp,i),o=iP(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function sm(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Lu=BigInt(0),cc=BigInt(1),am=BigInt(2);function AW(e){return qs(e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...e})}function lP(e){let t=AW(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s||_o,l=a?255:448,d=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?am**BigInt(254):am**BigInt(447),b=a?BigInt(8)*am**BigInt(251)-cc:BigInt(4)*am**BigInt(445)-cc,g=m+b+cc,S=(I)=>Cr(I,r),k=A(f);function A(I){return $u(S(I),d)}function R(I){let z=im(De(I,d,"uCoordinate"));if(a)z[31]&=127;return S(Io(z))}function D(I){return Io(n(im(De(I,d,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===Lu)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){Pu("u",I,Lu,r),Pu("scalar",z,m,g);let P=z,K=I,j=cc,Q=Lu,E=I,ae=cc,fe=Lu;for(let xe=BigInt(l-1);xe>=Lu;xe--){let Te=P>>xe&cc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:d,publicKey:d,seed:d},N=(I=c(d))=>(De(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze({keygen:sm(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}class dx{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor(e,t){if(yn(e),De(t,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,i=new Uint8Array(r);i.set(t.length>r?e.create().update(t).digest():t);for(let n=0;n<i.length;n++)i[n]^=54;this.iHash.update(i),this.oHash=e.create();for(let n=0;n<i.length;n++)i[n]^=106;this.oHash.update(i),Mr(i)}update(e){return Li(this),this.iHash.update(e),this}digestInto(e){Li(this),De(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:o,outputLen:s}=this;return e=e,e.finished=i,e.destroyed=n,e.blockLen=o,e.outputLen=s,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var lc=(e,t,r)=>new dx(e,t).update(r).digest();lc.create=(e,t)=>new dx(e,t);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var uP=(e,t)=>(e+(e>=0?t:-t)/fP)/t;function TW(e,t,r){let[[i,n],[o,s]]=t,a=uP(s*e,r),c=uP(-n*e,r),l=e-a*i-c*o,d=-a*n-c*s,f=l<Bi,p=d<Bi;if(f)l=-l;if(p)d=-d;let m=zu(Math.ceil(tx(r)/2))+uc;if(l<Bi||l>=m||d<Bi||d>=m)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:f,k1:l,k2neg:p,k2:d}}function px(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function fx(e,t){let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(Cu(r.lowS,"lowS"),Cu(r.prehash,"prehash"),r.format!==void 0)px(r.format);return r}class dP extends Error{constructor(e=""){super(e)}}var To={Err:dP,_tlv:{encode:(e,t)=>{let{Err:r}=To;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Ou(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Ou(n.length/2|128):"";return Ou(e)+o+n+t},decode(e,t){let{Err:r}=To,i=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=To;if(e<Bi)throw new t("integer: negative integers are not allowed");let r=Ou(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=To;if(e[0]&128)throw new t("invalid signature integer: negative");if(e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Eo(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=To,n=De(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:d}=i.decode(2,c);if(d.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=To,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}},Bi=BigInt(0),uc=BigInt(1),fP=BigInt(2),cm=BigInt(3),RW=BigInt(4);function mx(e,t={}){let r=cP("weierstrass",e,t),{Fp:i,Fn:n}=r,o=r.CURVE,{h:s,n:a}=o;qs(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let l=mP(i,n);function d(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function f(N,L,I){let{x:z,y:P}=L.toAffine(),K=i.toBytes(z);if(Cu(I,"isCompressed"),I){d();let j=!i.isOdd(P);return Ut(pP(j),K)}else return Ut(Uint8Array.of(4),K,i.toBytes(P))}function p(N){De(N,void 0,"Point");let{publicKey:L,publicKeyUncompressed:I}=l,z=N.length,P=N[0],K=N.subarray(1);if(z===L&&(P===2||P===3)){let j=i.fromBytes(K);if(!i.isValid(j))throw Error("bad point: is not on curve, wrong x");let Q=g(j),E;try{E=i.sqrt(Q)}catch(C){let xe=C instanceof Error?": "+C.message:"";throw Error("bad point: is not on curve, sqrt error"+xe)}d();let ae=i.isOdd(E);if((P&1)===1!==ae)E=i.neg(E);return{x:j,y:E}}else if(z===I&&P===4){let j=i.BYTES,Q=i.fromBytes(K.subarray(0,j)),E=i.fromBytes(K.subarray(j,j*2));if(!S(Q,E))throw Error("bad point: is not on curve");return{x:Q,y:E}}else throw Error(`bad point: got length ${z}, expected compressed=${L} or uncompressed=${I}`)}let m=t.toBytes||f,b=t.fromBytes||p;function g(N){let L=i.sqr(N),I=i.mul(L,N);return i.add(i.add(I,i.mul(N,o.a)),o.b)}function S(N,L){let I=i.sqr(L),z=g(N);return i.eql(I,z)}if(!S(o.Gx,o.Gy))throw Error("bad curve params: generator point");let k=i.mul(i.pow(o.a,cm),RW),A=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(k,A)))throw Error("bad curve params: a or b");function R(N,L,I=!1){if(!i.isValid(L)||I&&i.is0(L))throw Error(`bad point coordinate ${N}`);return L}function D(N){if(!(N instanceof V))throw Error("Weierstrass Point expected")}function U(N){if(!c||!c.basises)throw Error("no endo");return TW(N,c.basises,n.ORDER)}let T=rx((N,L)=>{let{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}),H=rx((N)=>{if(N.is0()){if(t.allowInfinityPoint&&!i.is0(N.Y))return;throw Error("bad point: ZERO")}let{x:L,y:I}=N.toAffine();if(!i.isValid(L)||!i.isValid(I))throw Error("bad point: x or y not field elements");if(!S(L,I))throw Error("bad point: equation left != right");if(!N.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function B(N,L,I,z,P){return I=new V(i.mul(I.X,N),I.Y,I.Z),L=Du(z,L),I=Du(P,I),L.add(I)}class V{static BASE=new V(o.Gx,o.Gy,i.ONE);static ZERO=new V(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(N,L,I){this.X=R("x",N),this.Y=R("y",L,!0),this.Z=R("z",I),Object.freeze(this)}static CURVE(){return o}static fromAffine(N){let{x:L,y:I}=N||{};if(!N||!i.isValid(L)||!i.isValid(I))throw Error("invalid affine point");if(N instanceof V)throw Error("projective point not allowed");if(i.is0(L)&&i.is0(I))return V.ZERO;return new V(L,I,i.ONE)}static fromBytes(N){let L=V.fromAffine(b(De(N,void 0,"point")));return L.assertValidity(),L}static fromHex(N){return V.fromBytes(Us(N))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,L=!0){if(J.createCache(this,N),!L)this.multiply(cm);return this}assertValidity(){H(this)}hasEvenY(){let{y:N}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(N)}equals(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.eql(i.mul(L,j),i.mul(P,z)),E=i.eql(i.mul(I,j),i.mul(K,z));return Q&&E}negate(){return new V(this.X,i.neg(this.Y),this.Z)}double(){let{a:N,b:L}=o,I=i.mul(L,cm),{X:z,Y:P,Z:K}=this,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(K,K),xe=i.mul(z,P);return xe=i.add(xe,xe),E=i.mul(z,K),E=i.add(E,E),j=i.mul(N,E),Q=i.mul(I,C),Q=i.add(j,Q),j=i.sub(fe,Q),Q=i.add(fe,Q),Q=i.mul(j,Q),j=i.mul(xe,j),E=i.mul(I,E),C=i.mul(N,C),xe=i.sub(ae,C),xe=i.mul(N,xe),xe=i.add(xe,E),E=i.add(ae,ae),ae=i.add(E,ae),ae=i.add(ae,C),ae=i.mul(ae,xe),Q=i.add(Q,ae),C=i.mul(P,K),C=i.add(C,C),ae=i.mul(C,xe),j=i.sub(j,ae),E=i.mul(C,fe),E=i.add(E,E),E=i.add(E,E),new V(j,Q,E)}add(N){D(N);let{X:L,Y:I,Z:z}=this,{X:P,Y:K,Z:j}=N,Q=i.ZERO,E=i.ZERO,ae=i.ZERO,fe=o.a,C=i.mul(o.b,cm),xe=i.mul(L,P),Te=i.mul(I,K),Pe=i.mul(z,j),$e=i.add(L,I),_e=i.add(P,K);$e=i.mul($e,_e),_e=i.add(xe,Te),$e=i.sub($e,_e),_e=i.add(L,z);let We=i.add(P,j);return _e=i.mul(_e,We),We=i.add(xe,Pe),_e=i.sub(_e,We),We=i.add(I,z),Q=i.add(K,j),We=i.mul(We,Q),Q=i.add(Te,Pe),We=i.sub(We,Q),ae=i.mul(fe,_e),Q=i.mul(C,Pe),ae=i.add(Q,ae),Q=i.sub(Te,ae),ae=i.add(Te,ae),E=i.mul(Q,ae),Te=i.add(xe,xe),Te=i.add(Te,xe),Pe=i.mul(fe,Pe),_e=i.mul(C,_e),Te=i.add(Te,Pe),Pe=i.sub(xe,Pe),Pe=i.mul(fe,Pe),_e=i.add(_e,Pe),xe=i.mul(Te,_e),E=i.add(E,xe),xe=i.mul(We,_e),Q=i.mul($e,Q),Q=i.sub(Q,xe),xe=i.mul($e,Te),ae=i.mul(We,ae),ae=i.add(ae,xe),new V(Q,E,ae)}subtract(N){return this.add(N.negate())}is0(){return this.equals(V.ZERO)}multiply(N){let{endo:L}=t;if(!n.isValidNot0(N))throw Error("invalid scalar: out of range");let I,z,P=(K)=>J.cached(this,K,(j)=>lx(V,j));if(L){let{k1neg:K,k1:j,k2neg:Q,k2:E}=U(N),{p:ae,f:fe}=P(j),{p:C,f:xe}=P(E);z=fe.add(xe),I=B(L.beta,ae,C,K,Q)}else{let{p:K,f:j}=P(N);I=K,z=j}return lx(V,[I,z])[0]}multiplyUnsafe(N){let{endo:L}=t,I=this;if(!n.isValid(N))throw Error("invalid scalar: out of range");if(N===Bi||I.is0())return V.ZERO;if(N===uc)return I;if(J.hasCache(this))return this.multiply(N);if(L){let{k1neg:z,k1:P,k2neg:K,k2:j}=U(N),{p1:Q,p2:E}=aP(V,I,P,j);return B(L.beta,Q,E,z,K)}else return J.unsafe(I,N)}toAffine(N){return T(this,N)}isTorsionFree(){let{isTorsionFree:N}=t;if(s===uc)return!0;if(N)return N(V,this);return J.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:N}=t;if(s===uc)return this;if(N)return N(V,this);return this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(N=!0){return Cu(N,"isCompressed"),this.assertValidity(),m(V,this,N)}toHex(N=!0){return js(this.toBytes(N))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let te=n.BITS,J=new ux(V,t.endo?Math.ceil(te/2):te);return V.BASE.precompute(8),V}function pP(e){return Uint8Array.of(e?2:3)}function mP(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function CW(e,t={}){let{Fn:r}=e,i=t.randomBytes||_o,n=Object.assign(mP(e.Fp,r),{seed:ox(r.ORDER)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m=i(n.seed)){return tP(De(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n;if(!ic(m))return;if("_lengths"in r&&r._lengths||b===g)return;let k=De(m,void 0,"key").length;return k===g||k===S}function d(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=sm(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:d,keygen:p,Point:e,utils:f,lengths:n})}function hx(e,t,r={}){yn(t),qs(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let i=r.randomBytes||_o,n=r.hmac||((I,z)=>lc(t,I,z)),{Fp:o,Fn:s}=e,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:d,getSharedSecret:f,utils:p,lengths:m}=CW(e,r),b={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},g=a*fP<o.ORDER;function S(I){let z=a>>uc;return I>z}function k(I,z){if(!s.isValidNot0(z))throw Error(`invalid signature ${I}: out of range 1..Point.Fn.ORDER`);return z}function A(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function R(I,z){px(z);let P=m.signature,K=z==="compact"?P:z==="recovered"?P+1:void 0;return De(I,K)}class D{r;s;recovery;constructor(I,z,P){if(this.r=k("r",I),this.s=k("s",z),P!=null){if(A(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(I,z=b.format){R(I,z);let P;if(z==="der"){let{r:E,s:ae}=To.toSig(De(I));return new D(E,ae)}if(z==="recovered")P=I[0],z="compact",I=I.subarray(1);let K=m.signature/2,j=I.subarray(0,K),Q=I.subarray(K,K*2);return new D(s.fromBytes(j),s.fromBytes(Q),P)}static fromHex(I,z){return this.fromBytes(Us(I),z)}assertRecovery(){let{recovery:I}=this;if(I==null)throw Error("invalid recovery id: must be present");return I}addRecoveryBit(I){return new D(this.r,this.s,I)}recoverPublicKey(I){let{r:z,s:P}=this,K=this.assertRecovery(),j=K===2||K===3?z+a:z;if(!o.isValid(j))throw Error("invalid recovery id: sig.r+curve.n != R.x");let Q=o.toBytes(j),E=e.fromBytes(Ut(pP((K&1)===0),Q)),ae=s.inv(j),fe=T(De(I,void 0,"msgHash")),C=s.create(-fe*ae),xe=s.create(P*ae),Te=e.BASE.multiplyUnsafe(C).add(E.multiplyUnsafe(xe));if(Te.is0())throw Error("invalid recovery: point at infinify");return Te.assertValidity(),Te}hasHighS(){return S(this.s)}toBytes(I=b.format){if(px(I),I==="der")return Us(To.hexFromSig(this));let{r:z,s:P}=this,K=s.toBytes(z),j=s.toBytes(P);if(I==="recovered")return A(),Ut(Uint8Array.of(this.assertRecovery()),K,j);return Ut(K,j)}toHex(I){return js(this.toBytes(I))}}let U=r.bits2int||function(z){if(z.length>8192)throw Error("input is too large");let P=Eo(z),K=z.length*8-c;return K>0?P>>BigInt(K):P},T=r.bits2int_modN||function(z){return s.create(U(z))},H=zu(c);function B(I){return Pu("num < 2^"+c,I,Bi,H),s.toBytes(I)}function V(I,z){return De(I,void 0,"message"),z?De(t(I),void 0,"prehashed message"):I}function te(I,z,P){let{lowS:K,prehash:j,extraEntropy:Q}=fx(P,b);I=V(I,j);let E=T(I),ae=s.fromBytes(z);if(!s.isValidNot0(ae))throw Error("invalid private key");let fe=[B(ae),B(E)];if(Q!=null&&Q!==!1){let Pe=Q===!0?i(m.secretKey):Q;fe.push(De(Pe,void 0,"extraEntropy"))}let C=Ut(...fe),xe=E;function Te(Pe){let $e=U(Pe);if(!s.isValidNot0($e))return;let _e=s.inv($e),We=e.BASE.multiply($e).toAffine(),Le=s.create(We.x);if(Le===Bi)return;let Xe=s.create(_e*s.create(xe+Le*ae));if(Xe===Bi)return;let dt=(We.x===Le?0:2)|Number(We.y&uc),kt=Xe;if(K&&S(Xe))kt=s.neg(Xe),dt^=1;return new D(Le,kt,g?void 0:dt)}return{seed:C,k2sig:Te}}function J(I,z,P={}){let{seed:K,k2sig:j}=te(I,z,P);return M$(t.outputLen,s.BYTES,n)(K,j).toBytes(P.format)}function N(I,z,P,K={}){let{lowS:j,prehash:Q,format:E}=fx(K,b);if(P=De(P,void 0,"publicKey"),z=V(z,Q),!ic(I)){let ae=I instanceof D?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+ae)}R(I,E);try{let ae=D.fromBytes(I,E),fe=e.fromBytes(P);if(j&&ae.hasHighS())return!1;let{r:C,s:xe}=ae,Te=T(z),Pe=s.inv(xe),$e=s.create(Te*Pe),_e=s.create(C*Pe),We=e.BASE.multiplyUnsafe($e).add(fe.multiplyUnsafe(_e));if(We.is0())return!1;return s.create(We.x)===C}catch(ae){return!1}}function L(I,z,P={}){let{prehash:K}=fx(P,b);return z=V(z,K),D.fromBytes(I,"recovered").recoverPublicKey(z).toBytes()}return Object.freeze({keygen:l,getPublicKey:d,getSharedSecret:f,utils:p,lengths:m,Point:e,sign:J,verify:N,recoverPublicKey:L,Signature:D,hash:t})}function hP(e,t,r){return e&t^~e&r}function gP(e,t,r){return e&t^e&r^t&r}class lm{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(e,t,r,i){this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.buffer=new Uint8Array(e),this.view=rm(this.buffer)}update(e){Li(this),De(e);let{view:t,buffer:r,blockLen:i}=this,n=e.length;for(let o=0;o<n;){let s=Math.min(i-this.pos,n-o);if(s===i){let a=rm(e);for(;i<=n-o;o+=i)this.process(a,o);continue}if(r.set(e.subarray(o,o+s),this.pos),this.pos+=s,o+=s,this.pos===i)this.process(t,0),this.pos=0}return this.length+=e.length,this.roundClean(),this}digestInto(e){Li(this),em(e,this),this.finished=!0;let{buffer:t,view:r,blockLen:i,isLE:n}=this,{pos:o}=this;if(t[o++]=128,Mr(this.buffer.subarray(o)),this.padOffset>i-o)this.process(r,0),o=0;for(let d=o;d<i;d++)t[d]=0;r.setBigUint64(i-8,BigInt(this.length*8),n),this.process(r,0);let s=rm(e),a=this.outputLen;if(a%4)throw Error("_sha2: outputLen must be aligned to 32bit");let c=a/4,l=this.get();if(c>l.length)throw Error("_sha2: outputLen bigger than state");for(let d=0;d<c;d++)s.setUint32(4*d,l[d],n)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||=new this.constructor,e.set(...this.get());let{blockLen:t,buffer:r,length:i,finished:n,destroyed:o,pos:s}=this;if(e.destroyed=o,e.finished=n,e.length=i,e.pos=s,i%t)e.buffer.set(r);return e}clone(){return this._cloneInto()}}var ji=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var sr=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]);var um=BigInt(4294967295),yP=BigInt(32);function OW(e,t=!1){if(t)return{h:Number(e&um),l:Number(e>>yP&um)};return{h:Number(e>>yP&um)|0,l:Number(e&um)|0}}function dm(e,t=!1){let r=e.length,i=new Uint32Array(r),n=new Uint32Array(r);for(let o=0;o<r;o++){let{h:s,l:a}=OW(e[o],t);[i[o],n[o]]=[s,a]}return[i,n]}var gx=(e,t,r)=>e>>>r,yx=(e,t,r)=>e<<32-r|t>>>r,Fs=(e,t,r)=>e>>>r|t<<32-r,Hs=(e,t,r)=>e<<32-r|t>>>r,Bu=(e,t,r)=>e<<64-r|t>>>r-32,ju=(e,t,r)=>e>>>r-32|t<<64-r;var bP=(e,t,r)=>e<<r|t>>>32-r,SP=(e,t,r)=>t<<r|e>>>32-r,xP=(e,t,r)=>t<<r-32|e>>>64-r,wP=(e,t,r)=>e<<r-32|t>>>64-r;function oi(e,t,r,i){let n=(t>>>0)+(i>>>0);return{h:e+r+(n/4294967296|0)|0,l:n|0}}var vP=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),_P=(e,t,r,i)=>t+r+i+(e/4294967296|0)|0,kP=(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),EP=(e,t,r,i,n)=>t+r+i+n+(e/4294967296|0)|0,IP=(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0),AP=(e,t,r,i,n,o)=>t+r+i+n+o+(e/4294967296|0)|0;var PW=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ro=new Uint32Array(64);class TP extends lm{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:t,C:r,D:i,E:n,F:o,G:s,H:a}=this;return[e,t,r,i,n,o,s,a]}set(e,t,r,i,n,o,s,a){this.A=e|0,this.B=t|0,this.C=r|0,this.D=i|0,this.E=n|0,this.F=o|0,this.G=s|0,this.H=a|0}process(e,t){for(let d=0;d<16;d++,t+=4)Ro[d]=e.getUint32(t,!1);for(let d=16;d<64;d++){let f=Ro[d-15],p=Ro[d-2],m=Pn(f,7)^Pn(f,18)^f>>>3,b=Pn(p,17)^Pn(p,19)^p>>>10;Ro[d]=b+Ro[d-7]+m+Ro[d-16]|0}let{A:r,B:i,C:n,D:o,E:s,F:a,G:c,H:l}=this;for(let d=0;d<64;d++){let f=Pn(s,6)^Pn(s,11)^Pn(s,25),p=l+f+hP(s,a,c)+PW[d]+Ro[d]|0,b=(Pn(r,2)^Pn(r,13)^Pn(r,22))+gP(r,i,n)|0;l=c,c=a,a=s,s=o+p|0,o=n,n=i,i=r,r=p+b|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,o=o+this.D|0,s=s+this.E|0,a=a+this.F|0,c=c+this.G|0,l=l+this.H|0,this.set(r,i,n,o,s,a,c,l)}roundClean(){Mr(Ro)}destroy(){this.set(0,0,0,0,0,0,0,0),Mr(this.buffer)}}class RP extends TP{A=ji[0]|0;B=ji[1]|0;C=ji[2]|0;D=ji[3]|0;E=ji[4]|0;F=ji[5]|0;G=ji[6]|0;H=ji[7]|0;constructor(){super(32)}}var CP=(()=>dm(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e)=>BigInt(e))))(),zW=(()=>CP[0])(),NW=(()=>CP[1])(),Co=new Uint32Array(80),Oo=new Uint32Array(80);class OP extends lm{constructor(e){super(128,e,16,!1)}get(){let{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:o,Dh:s,Dl:a,Eh:c,El:l,Fh:d,Fl:f,Gh:p,Gl:m,Hh:b,Hl:g}=this;return[e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g]}set(e,t,r,i,n,o,s,a,c,l,d,f,p,m,b,g){this.Ah=e|0,this.Al=t|0,this.Bh=r|0,this.Bl=i|0,this.Ch=n|0,this.Cl=o|0,this.Dh=s|0,this.Dl=a|0,this.Eh=c|0,this.El=l|0,this.Fh=d|0,this.Fl=f|0,this.Gh=p|0,this.Gl=m|0,this.Hh=b|0,this.Hl=g|0}process(e,t){for(let A=0;A<16;A++,t+=4)Co[A]=e.getUint32(t),Oo[A]=e.getUint32(t+=4);for(let A=16;A<80;A++){let R=Co[A-15]|0,D=Oo[A-15]|0,U=Fs(R,D,1)^Fs(R,D,8)^gx(R,D,7),T=Hs(R,D,1)^Hs(R,D,8)^yx(R,D,7),H=Co[A-2]|0,B=Oo[A-2]|0,V=Fs(H,B,19)^Bu(H,B,61)^gx(H,B,6),te=Hs(H,B,19)^ju(H,B,61)^yx(H,B,6),J=kP(T,te,Oo[A-7],Oo[A-16]),N=EP(J,U,V,Co[A-7],Co[A-16]);Co[A]=N|0,Oo[A]=J|0}let{Ah:r,Al:i,Bh:n,Bl:o,Ch:s,Cl:a,Dh:c,Dl:l,Eh:d,El:f,Fh:p,Fl:m,Gh:b,Gl:g,Hh:S,Hl:k}=this;for(let A=0;A<80;A++){let R=Fs(d,f,14)^Fs(d,f,18)^Bu(d,f,41),D=Hs(d,f,14)^Hs(d,f,18)^ju(d,f,41),U=d&p^~d&b,T=f&m^~f&g,H=IP(k,D,T,NW[A],Oo[A]),B=AP(H,S,R,U,zW[A],Co[A]),V=H|0,te=Fs(r,i,28)^Bu(r,i,34)^Bu(r,i,39),J=Hs(r,i,28)^ju(r,i,34)^ju(r,i,39),N=r&n^r&s^n&s,L=i&o^i&a^o&a;S=b|0,k=g|0,b=p|0,g=m|0,p=d|0,m=f|0,{h:d,l:f}=oi(c|0,l|0,B|0,V|0),c=s|0,l=a|0,s=n|0,a=o|0,n=r|0,o=i|0;let I=vP(V,J,L);r=_P(I,B,te,N),i=I|0}({h:r,l:i}=oi(this.Ah|0,this.Al|0,r|0,i|0)),{h:n,l:o}=oi(this.Bh|0,this.Bl|0,n|0,o|0),{h:s,l:a}=oi(this.Ch|0,this.Cl|0,s|0,a|0),{h:c,l}=oi(this.Dh|0,this.Dl|0,c|0,l|0),{h:d,l:f}=oi(this.Eh|0,this.El|0,d|0,f|0),{h:p,l:m}=oi(this.Fh|0,this.Fl|0,p|0,m|0),{h:b,l:g}=oi(this.Gh|0,this.Gl|0,b|0,g|0),{h:S,l:k}=oi(this.Hh|0,this.Hl|0,S|0,k|0),this.set(r,i,n,o,s,a,c,l,d,f,p,m,b,g,S,k)}roundClean(){Mr(Co,Oo)}destroy(){Mr(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class $P extends OP{Ah=sr[0]|0;Al=sr[1]|0;Bh=sr[2]|0;Bl=sr[3]|0;Ch=sr[4]|0;Cl=sr[5]|0;Dh=sr[6]|0;Dl=sr[7]|0;Eh=sr[8]|0;El=sr[9]|0;Fh=sr[10]|0;Fl=sr[11]|0;Gh=sr[12]|0;Gl=sr[13]|0;Hh=sr[14]|0;Hl=sr[15]|0;constructor(){super(48)}}var fm=oc(()=>new RP,ko(1));var PP=oc(()=>new $P,ko(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var DW=BigInt(1),zP=BigInt(2),LW=BigInt(3),BW=BigInt(5),T_e=BigInt(8),NP=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function jW(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=NP,a=e*e%o*e%o,c=bn(a,zP,o)*a%o,l=bn(c,DW,o)*e%o,d=bn(l,BW,o)*l%o,f=bn(d,t,o)*d%o,p=bn(f,r,o)*f%o,m=bn(p,i,o)*p%o,b=bn(m,n,o)*m%o,g=bn(b,n,o)*m%o,S=bn(g,t,o)*d%o;return{pow_p_5_8:bn(S,zP,o)*e%o,b2:a}}function UW(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var DP=(()=>{let e=NP;return lP({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=jW(t);return Cr(bn(r,LW,e)*i,e)},adjustScalarBytes:UW})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var qW=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),ZW=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var MW=mx(qW),bx=hx(MW,fm);var FW=mx(ZW),LP=hx(FW,PP);function jP(e,t,r){if(yn(e),r===void 0)r=new Uint8Array(e.outputLen);return lc(e,r,t)}var Sx=Uint8Array.of(0),BP=Uint8Array.of();function UP(e,t,r,i=32){yn(e),Qt(i,"length");let n=e.outputLen;if(i>255*n)throw Error("Length must be <= 255*HashLen");let o=Math.ceil(i/n);if(r===void 0)r=BP;else De(r,void 0,"info");let s=new Uint8Array(o*n),a=lc.create(e,t),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let d=0;d<o;d++)Sx[0]=d+1,c.update(d===0?BP:l).update(r).update(Sx).digestInto(l),s.set(l,n*d),a._cloneInto(c);return a.destroy(),c.destroy(),Mr(l,Sx),s.slice(0,i)}var HW=BigInt(0),Uu=BigInt(1),JW=BigInt(2),KW=BigInt(7),VW=BigInt(256),WW=BigInt(113),MP=[],FP=[],HP=[];for(let e=0,t=Uu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],MP.push(2*(5*i+r)),FP.push((e+1)*(e+2)/2%64);let n=HW;for(let o=0;o<7;o++)if(t=(t<<Uu^(t>>KW)*WW)%VW,t&JW)n^=Uu<<(Uu<<BigInt(o))-Uu;HP.push(n)}var JP=dm(HP,!0),GW=JP[0],QW=JP[1],qP=(e,t,r)=>r>32?xP(e,t,r):bP(e,t,r),ZP=(e,t,r)=>r>32?wP(e,t,r):SP(e,t,r);function YW(e,t=24){let r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let s=0;s<10;s++)r[s]=e[s]^e[s+10]^e[s+20]^e[s+30]^e[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,l=r[c],d=r[c+1],f=qP(l,d,1)^r[a],p=ZP(l,d,1)^r[a+1];for(let m=0;m<50;m+=10)e[s+m]^=f,e[s+m+1]^=p}let n=e[2],o=e[3];for(let s=0;s<24;s++){let a=FP[s],c=qP(n,o,a),l=ZP(n,o,a),d=MP[s];n=e[d],o=e[d+1],e[d]=c,e[d+1]=l}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)r[a]=e[s+a];for(let a=0;a<10;a++)e[s+a]^=~r[(a+2)%10]&r[(a+4)%10]}e[0]^=GW[i],e[1]^=QW[i]}Mr(r)}class pm{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor(e,t,r,i=!1,n=24){if(this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,Qt(r,"outputLen"),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=tm(this.state)}clone(){return this._cloneInto()}keccak(){YS(this.state32),YW(this.state32,this.rounds),YS(this.state32),this.posOut=0,this.pos=0}update(e){Li(this),De(e);let{blockLen:t,state:r}=this,i=e.length;for(let n=0;n<i;){let o=Math.min(t-this.pos,i-n);for(let s=0;s<o;s++)r[this.pos++]^=e[n++];if(this.pos===t)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:t,pos:r,blockLen:i}=this;if(e[r]^=t,(t&128)!==0&&r===i-1)this.keccak();e[i-1]^=128,this.keccak()}writeInto(e){Li(this,!1),De(e),this.finish();let t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){if(this.posOut>=r)this.keccak();let o=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+o),i),this.posOut+=o,i+=o}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Qt(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(em(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,Mr(this.state)}_cloneInto(e){let{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:o}=this;return e||=new pm(t,r,i,o,n),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=o,e.destroyed=this.destroyed,e}}var KP=(e,t,r,i={})=>oc(()=>new pm(t,e,r),i);var Js=KP(6,136,32,ko(8));var VP=KP(6,72,64,ko(10));var WP=(e,t,r,i={})=>oc((n={})=>new pm(t,e,n.dkLen===void 0?r:n.dkLen,!0),i),GP=WP(31,168,16,ko(11)),si=WP(31,136,32,ko(12));function xx(e){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error("wrong u32 integer:"+e);return e}function YP(e){return xx(e),(e&e-1)===0&&e!==0}function wx(e,t){xx(e);let r=0;for(let i=0;i<t;i++,e>>>=1)r=r<<1|e&1;return r}function XP(e){return xx(e),31-Math.clz32(e)}function QP(e){let t=e.length;if(t<2||!YP(t))throw Error("n must be a power of 2 and greater than 1. Got "+t);let r=XP(t);for(let i=0;i<t;i++){let n=wx(i,r);if(i<n){let o=e[i];e[i]=e[n],e[n]=o}}return e}var vx=(e,t)=>{let{N:r,roots:i,dit:n,invertButterflies:o=!1,skipStages:s=0,brp:a=!0}=t,c=XP(r);if(!YP(r))throw Error("FFT: Polynomial size should be power of two");let l=n!==o;return(d)=>{if(d.length!==r)throw Error("FFT: wrong Polynomial length");if(n&&a)QP(d);for(let f=0,p=1;f<c-s;f++){let m=n?f+1+s:c-f,b=1<<m,g=b>>1,S=r>>m;for(let k=0;k<r;k+=b)for(let A=0,R=p++;A<g;A++){let D=o?n?r-R:R:A*S,U=k+A,T=k+A+g,H=i[D],B=d[T],V=d[U];if(l){let te=e.mul(B,H);d[U]=e.add(V,te),d[T]=e.sub(V,te)}else if(o)d[U]=e.add(B,V),d[T]=e.mul(e.sub(B,V),H);else d[U]=e.add(V,B),d[T]=e.mul(e.sub(V,B),H)}}if(!n&&a)QP(d);return d}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var ai=_o;function mm(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function ez(e){return Uint8Array.from(e)}function Ks(e,...t){let r=(n)=>typeof n==="number"?n:n.bytesLen,i=t.reduce((n,o)=>n+r(o),0);return{bytesLen:i,encode:(n)=>{let o=new Uint8Array(i);for(let s=0,a=0;s<t.length;s++){let c=t[s],l=r(c),d=typeof c==="number"?n[s]:c.encode(n[s]);if(De(d,l,e),o.set(d,a),typeof c!=="number")d.fill(0);a+=l}return o},decode:(n)=>{De(n,i,e);let o=[];for(let s of t){let a=r(s),c=n.subarray(0,a);o.push(typeof s==="number"?c:s.decode(c)),n=n.subarray(a)}return o}}}function hm(e,t){let r=t*e.bytesLen;return{bytesLen:r,encode:(i)=>{if(i.length!==t)throw Error(`vecCoder.encode: wrong length=${i.length}. Expected: ${t}`);let n=new Uint8Array(r);for(let o=0,s=0;o<i.length;o++){let a=e.encode(i[o]);n.set(a,s),a.fill(0),s+=a.length}return n},decode:(i)=>{De(i,r);let n=[];for(let o=0;o<i.length;o+=e.bytesLen)n.push(e.decode(i.subarray(o,o+e.bytesLen)));return n}}}function Ht(...e){for(let t of e)if(Array.isArray(t))for(let r of t)r.fill(0);else t.fill(0)}function _x(e){return(1<<e)-1}var M_e=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var tz=(e)=>{let{newPoly:t,N:r,Q:i,F:n,ROOT_OF_UNITY:o,brvBits:s,isKyber:a}=e,c=(A,R=i)=>{let D=A%R|0;return(D>=0?D|0:R+D|0)|0},l=(A,R=i)=>{let D=c(A,R)|0;return(D>R>>1?D-R|0:D)|0};function d(){let A=t(r);for(let R=0;R<r;R++){let D=wx(R,s),U=BigInt(o)**BigInt(D)%BigInt(i);A[R]=Number(U)|0}return A}let f=d(),p={add:(A,R)=>c((A|0)+(R|0))|0,sub:(A,R)=>c((A|0)-(R|0))|0,mul:(A,R)=>c((A|0)*(R|0))|0,inv:(A)=>{throw Error("not implemented")}},m={N:r,roots:f,invertButterflies:!0,skipStages:a?1:0,brp:!1},b=vx(p,{dit:!1,...m}),g=vx(p,{dit:!0,...m});return{mod:c,smod:l,nttZetas:f,NTT:{encode:(A)=>b(A),decode:(A)=>{g(A);for(let R=0;R<A.length;R++)A[R]=c(n*A[R]);return A}},bitsCoder:(A,R)=>{let D=_x(A),U=A*(r/8);return{bytesLen:U,encode:(T)=>{let H=new Uint8Array(U);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=(R.encode(T[B])&D)<<te,te+=A;for(;te>=8;te-=8,V>>=8)H[J++]=V&_x(te)}return H},decode:(T)=>{let H=t(r);for(let B=0,V=0,te=0,J=0;B<T.length;B++){V|=T[B]<<te,te+=8;for(;te>=A;te-=A,V>>=A)H[J++]=R.decode(V&D)}return H}}}}},XW=(e)=>(t,r)=>{if(!r)r=e.blockLen;let i=new Uint8Array(t.length+2);i.set(t);let n=t.length,o=new Uint8Array(r),s=e.create({}),a=0,c=0;return{stats:()=>({calls:a,xofs:c}),get:(l,d)=>(i[n+0]=l,i[n+1]=d,s.destroy(),s=e.create({}).update(i),a++,()=>(c++,s.xofInto(o))),clean:()=>{s.destroy(),Ht(o,i)}}},rz=XW(GP);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Sr=256,Ui=3329,eG=3303,tG=17,{mod:Mu,nttZetas:rG,NTT:Vs,bitsCoder:nG}=tz({N:Sr,Q:Ui,F:eG,ROOT_OF_UNITY:tG,newPoly:(e)=>new Uint16Array(e),brvBits:7,isKyber:!0}),kx={512:{N:Sr,Q:Ui,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:Sr,Q:Ui,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:Sr,Q:Ui,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},iG=(e)=>{if(e>=12)return{encode:(r)=>r,decode:(r)=>r};let t=2**(e-1);return{encode:(r)=>((r<<e)+Ui/2)/Ui,decode:(r)=>r*Ui+t>>>e}},qu=(e)=>nG(e,iG(e));function Ws(e,t){for(let r=0;r<Sr;r++)e[r]=Mu(e[r]+t[r])}function oG(e,t){for(let r=0;r<Sr;r++)e[r]=Mu(e[r]-t[r])}function sG(e,t,r,i,n){let o=Mu(t*i*n+e*r),s=Mu(e*i+t*r);return{c0:o,c1:s}}function gm(e,t){for(let r=0;r<Sr/2;r++){let i=rG[64+(r>>1)];if(r&1)i=-i;let{c0:n,c1:o}=sG(e[2*r+0],e[2*r+1],t[2*r+0],t[2*r+1],i);e[2*r+0]=n,e[2*r+1]=o}return e}function nz(e){let t=new Uint16Array(Sr);for(let r=0;r<Sr;){let i=e();if(i.length%3)throw Error("SampleNTT: unaligned block");for(let n=0;r<Sr&&n+3<=i.length;n+=3){let o=(i[n+0]>>0|i[n+1]<<8)&4095,s=(i[n+1]>>4|i[n+2]<<4)&4095;if(o<Ui)t[r++]=o;if(r<Sr&&s<Ui)t[r++]=s}}return t}function Zu(e,t,r,i){let n=e(i*Sr/4,t,r),o=new Uint16Array(Sr),s=tm(n),a=0;for(let c=0,l=0,d=0,f=0;c<s.length;c++){let p=s[c];for(let m=0;m<32;m++)if(d+=p&1,p>>=1,a+=1,a===i)f=d,d=0;else if(a===2*i)o[l++]=Mu(f-d),d=0,a=0}if(a)throw Error(`sampleCBD: leftover bits: ${a}`);return o}var aG=(e)=>{let{K:t,PRF:r,XOF:i,HASH512:n,ETA1:o,ETA2:s,du:a,dv:c}=e,l=qu(1),d=qu(c),f=qu(a),p=Ks("publicKey",hm(qu(12),t),32),m=hm(qu(12),t),b=Ks("ciphertext",hm(f,t),d),g=Ks("seed",32,32);return{secretCoder:m,lengths:{secretKey:m.bytesLen,publicKey:p.bytesLen,cipherText:b.bytesLen},keygen:(S)=>{De(S,32,"seed");let k=new Uint8Array(33);k.set(S),k[32]=t;let A=n(k),[R,D]=g.decode(A),U=[],T=[];for(let V=0;V<t;V++)U.push(Vs.encode(Zu(r,D,V,o)));let H=i(R);for(let V=0;V<t;V++){let te=Vs.encode(Zu(r,D,t+V,o));for(let J=0;J<t;J++){let N=nz(H.get(J,V));Ws(te,gm(N,U[J]))}T.push(te)}H.clean();let B={publicKey:p.encode([T,R]),secretKey:m.encode(U)};return Ht(R,D,U,T,k,A),B},encrypt:(S,k,A)=>{let[R,D]=p.decode(S),U=[];for(let J=0;J<t;J++)U.push(Vs.encode(Zu(r,A,J,o)));let T=i(D),H=new Uint16Array(Sr),B=[];for(let J=0;J<t;J++){let N=Zu(r,A,t+J,s),L=new Uint16Array(Sr);for(let I=0;I<t;I++){let z=nz(T.get(J,I));Ws(L,gm(z,U[I]))}Ws(N,Vs.decode(L)),B.push(N),Ws(H,gm(R[J],U[J])),Ht(L)}T.clean();let V=Zu(r,A,2*t,s);Ws(V,Vs.decode(H));let te=l.decode(k);return Ws(te,V),Ht(R,U,H,V),b.encode([B,te])},decrypt:(S,k)=>{let[A,R]=b.decode(S),D=m.decode(k),U=new Uint16Array(Sr);for(let T=0;T<t;T++)Ws(U,gm(D[T],Vs.encode(A[T])));return oG(R,Vs.decode(U)),Ht(U,D,A),l.encode(R)}}};function Ex(e){let t=aG(e),{HASH256:r,HASH512:i,KDF:n}=e,{secretCoder:o,lengths:s}=t,a=Ks("secretKey",s.secretKey,s.publicKey,32,32),c=32,l=64;return{info:{type:"ml-kem"},lengths:{...s,seed:64,msg:32,msgRand:32,secretKey:a.bytesLen},keygen:(d=ai(64))=>{De(d,64,"seed");let{publicKey:f,secretKey:p}=t.keygen(d.subarray(0,32)),m=r(f),b=a.encode([p,f,m,d.subarray(32)]);return Ht(p,m),{publicKey:f,secretKey:b}},getPublicKey:(d)=>{let[f,p,m,b]=a.decode(d);return Uint8Array.from(p)},encapsulate:(d,f=ai(32))=>{De(d,s.publicKey,"publicKey"),De(f,32,"message");let p=d.subarray(0,384*e.K),m=o.encode(o.decode(ez(p)));if(!mm(m,p))throw Ht(m),Error("ML-KEM.encapsulate: wrong publicKey modulus");Ht(m);let b=i.create().update(f).update(r(d)).digest(),g=t.encrypt(d,f,b.subarray(32,64));return Ht(b.subarray(32)),{cipherText:g,sharedSecret:b.subarray(0,32)}},decapsulate:(d,f)=>{De(f,a.bytesLen,"secretKey"),De(d,s.cipherText,"cipherText");let p=a.bytesLen-96,m=p+32,b=r(f.subarray(p/2,m));if(!mm(b,f.subarray(m,m+32)))throw Error("invalid secretKey: hash check failed");let[g,S,k,A]=a.decode(f),R=t.decrypt(d,g),D=i.create().update(R).update(k).digest(),U=D.subarray(0,32),T=t.encrypt(S,R,D.subarray(32,64)),H=mm(d,T),B=n.create({dkLen:32}).update(A).update(d).digest();return Ht(R,T,!H?U:B),H?U:B}}}function cG(e,t,r){return si.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}var Ix={HASH256:Js,HASH512:VP,KDF:si,XOF:rz,PRF:cG},eke=Ex({...Ix,...kx[512]}),Fu=Ex({...Ix,...kx[768]}),iz=Ex({...Ix,...kx[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lG(e,t=!1){let{lengths:r,keygen:i}=e;if(t){let o=e.Point.Fn;if(!o)throw Error("No Point.Fn");i=(s=ai(r.seed))=>{De(s,r.seed,"seed");let a=o.isLE?Io(s):Eo(s),c=o.toBytes(o.create(a));return{secretKey:c,publicKey:e.getPublicKey(c)}}}return{lengths:{secretKey:r.secretKey,publicKey:r.publicKey,seed:r.seed},keygen:i,getPublicKey:(n)=>e.getPublicKey(n)}}function Ax(e,t=!1){let r=lG(e,t);if(!e.getSharedSecret)throw Error("wrong curve");return{lengths:{...r.lengths,msg:r.lengths.seed,cipherText:r.lengths.publicKey},keygen:r.keygen,getPublicKey:r.getPublicKey,encapsulate(i,n=ai(e.lengths.seed)){let o=this.keygen(n).secretKey,s=this.decapsulate(i,o),a=e.getPublicKey(o);return Ht(o),{sharedSecret:s,cipherText:a}},decapsulate(i,n){let o=e.getSharedSecret(n,i);return e.lengths.publicKeyHasPrefix?o.subarray(1):o}}}function Hu(e,t){return Ks(t,...e.map((r)=>{if(typeof r.lengths[t]!=="number")throw Error("wrong length: "+t);return r.lengths[t]}))}function Tx(e){return(t,r)=>e(t,{dkLen:r})}function uG(e,t,...r){let i=Hu(r,"seed"),n=Hu(r,"publicKey");if(e===void 0)e=i.bytesLen;Qt(e);function o(s){De(s,e);let a=i.decode(t(s,i.bytesLen)),c=r.map((f,p)=>f.keygen(a[p])),l=c.map((f)=>f.secretKey),d=c.map((f)=>f.publicKey);return{secretKey:l,publicKey:d}}return{info:{lengths:{seed:e,publicKey:n.bytesLen,secretKey:e}},getPublicKey(s){return this.keygen(s).publicKey},keygen(s=ai(e)){let{publicKey:a,secretKey:c}=o(s),l=n.encode(a);return Ht(a),Ht(c),{secretKey:s,publicKey:l}},expandDecapsulationKey:o,realSeedLen:e}}function ym(e,t,r,i,...n){let o=uG(e,r,...n),s=Hu(n,"cipherText"),a=Hu(n,"publicKey"),c=Hu(n,"msg");if(t===void 0)t=c.bytesLen;return Qt(t),{lengths:{...o.info.lengths,msg:t,msgRand:c.bytesLen,cipherText:s.bytesLen},getPublicKey:o.getPublicKey,keygen:o.keygen,encapsulate(l,d=ai(c.bytesLen)){let f=a.decode(l),p=c.decode(d),m=n.map((k,A)=>k.encapsulate(f[A],p[A])),b=m.map((k)=>k.sharedSecret),g=m.map((k)=>k.cipherText),S={sharedSecret:i(f,g,b),cipherText:s.encode(g)};return Ht(b,g),S},decapsulate(l,d){let f=s.decode(l),{publicKey:p,secretKey:m}=o.expandDecapsulationKey(d),b=n.map((g,S)=>g.decapsulate(f[S],m[S]));return i(p,f,b)}}}function oz(e,t,r,i,n){return yn(i),yn(n),ym(32,32,Tx(i),(o,s,a)=>n(Ut(a[0],a[1],s[1],o[1],Ao(e))),t,r)}var dke=oz("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",Fu,Ax(bx,!0),si,Js),fke=oz("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",iz,Ax(LP,!0),si,Js);function dG(e,t,r,i,n){return yn(i),yn(n),ym(32,32,Tx(i),(o,s,a)=>{let c=Ut(a[0],a[1],s[0],o[0],s[1],o[1],Ao(e)),l=32,d=Ut(Ao("hybrid_prk"),c),f=jP(n,d),p=Ut(sc(32,2),Ao("shared_secret"),Ao("")),m=UP(n,f,p,32);return Ht(f,p,d,c),m},t,r)}var sz=Ax(DP),pke=dG("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",Fu,sz,si,fm),fG=(()=>ym(32,32,Tx(si),(e,t,r)=>Js(Ut(r[0],r[1],t[1],e[1],Ao("\\.//^\\"))),Fu,sz))();function pG(e,t,r,i){let n=e.Point.Fn;if(!n)throw Error("no Point.Fn");function o(s){let a;for(let d=0,f=t;;d=f,f+=t){if(f>s.length)throw Error("rejection sampling failed");if(a=n.fromBytes(s.subarray(d,f),!0),n.isValidNot0(a))break}let c=n.toBytes(n.create(a)),l=e.getPublicKey(c,!1);return{secretKey:c,publicKey:l}}return{lengths:{secretKey:t,publicKey:r,seed:i,msg:i,cipherText:r},keygen(s=ai(i)){return De(s,i,"seed"),o(s)},getPublicKey(s){return e.getPublicKey(s,!1)},encapsulate(s,a=ai(i)){De(a,i,"rand");let{secretKey:c}=o(a),l=this.decapsulate(s,c),d=e.getPublicKey(c,!1);return Ht(c),{sharedSecret:l,cipherText:d}},decapsulate(s,a){return e.getSharedSecret(a,s).subarray(1)}}}function mG(e,t,r,i){let{secretKey:n,publicKeyUncompressed:o}=r.lengths;if(!n||!o)throw Error("wrong curve");let s=pG(r,n,o,i),a=64,c=a+i;return ym(32,32,(l)=>{De(l,32);let d=si(l,{dkLen:c}),f=d.subarray(0,a),p=d.subarray(a,c);return Ut(f,p)},(l,d,f)=>Js(Ut(f[0],f[1],d[1],l[1],Ao(e))),t,s)}var hG=(()=>mG("MLKEM768-P256",Fu,bx,128))();var bm=fG,az=hG;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ft=(e,t,r)=>nr(e,t,r),Cx=Pt,dc=Zp,ar=(...e)=>PS(...e),fc=(e)=>vu(e),pc=CS,mc=(e)=>Pi(e),xm=BigInt(0),Rx=BigInt(1);function qi(e,t=""){if(typeof e!=="boolean"){let r=t&&`"${t}" `;throw TypeError(r+"expected boolean, got type="+typeof e)}return e}function wm(e){if(typeof e==="bigint"){if(!Sm(e))throw RangeError("positive bigint expected, got "+e)}else Cx(e);return e}function ci(e,t=""){if(typeof e!=="number"){let r=t&&`"${t}" `;throw TypeError(r+"expected number, got type="+typeof e)}if(!Number.isSafeInteger(e)){let r=t&&`"${t}" `;throw RangeError(r+"expected safe integer, got "+e)}}function Ju(e){let t=wm(e).toString(16);return t.length&1?"0"+t:t}function cz(e){if(typeof e!=="string")throw TypeError("hex string expected, got "+typeof e);return e===""?xm:BigInt("0x"+e)}function Gs(e){return cz(Zp(e))}function zn(e){return cz(Zp($o(nr(e)).reverse()))}function vm(e,t){if(Pt(t),t===0)throw RangeError("zero length");e=wm(e);let r=e.toString(16);if(r.length>t*2)throw RangeError("number too large");return vu(r.padStart(t*2,"0"))}function Ku(e,t){return vm(e,t).reverse()}function lz(e,t){if(e=ft(e),t=ft(t),e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}function $o(e){return Uint8Array.from(ft(e))}function _m(e){if(typeof e!=="string")throw TypeError("ascii string expected, got "+typeof e);return Uint8Array.from(e,(t,r)=>{let i=t.charCodeAt(0);if(t.length!==1||i>127)throw RangeError(`string contains non-ASCII character "${e[r]}" with code ${i} at position ${r}`);return i})}var Sm=(e)=>typeof e==="bigint"&&xm<=e;function gG(e,t,r){return Sm(e)&&Sm(t)&&Sm(r)&&t<=e&&e<r}function Zi(e,t,r,i){if(!gG(t,r,i))throw RangeError("expected valid "+e+": "+r+" <= n < "+i+", got "+t)}function hc(e){if(e<xm)throw Error("expected non-negative bigint, got "+e);let t;for(t=0;e>xm;e>>=Rx,t+=1);return t}var Vu=(e)=>(Rx<<BigInt(e))-Rx;function uz(e,t,r){if(Pt(e,"hashLen"),Pt(t,"qByteLen"),typeof r!=="function")throw TypeError("hmacFn must be a function");let i=(S)=>new Uint8Array(S),n=Uint8Array.of(),o=Uint8Array.of(0),s=Uint8Array.of(1),a=1000,c=i(e),l=i(e),d=0,f=()=>{c.fill(1),l.fill(0),d=0},p=(...S)=>r(l,ar(c,...S)),m=(S=n)=>{if(l=p(o,S),c=p(),S.length===0)return;l=p(s,S),c=p()},b=()=>{if(d++>=a)throw Error("drbg: tried max amount of iterations");let S=0,k=[];while(S<t){c=p();let A=c.slice();k.push(A),S+=c.length}return ar(...k)};return(S,k)=>{f(),m(S);let A=void 0;while((A=k(b()))===void 0)m();return f(),A}}function Sn(e,t={},r={}){if(Object.prototype.toString.call(e)!=="[object Object]")throw TypeError("expected valid options object");function i(o,s,a){if(!a&&s!=="function"&&!Object.hasOwn(e,o))throw TypeError(`param "${o}" is invalid: expected own property`);let c=e[o];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw TypeError(`param "${o}" is invalid: expected ${s}, got ${l}`)}let n=(o,s)=>Object.entries(o).forEach(([a,c])=>i(a,c,s));n(t,!1),n(r,!0)}var Ox=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var cr=BigInt(0),Rt=BigInt(1),Qs=BigInt(2),mz=BigInt(3),hz=BigInt(4),gz=BigInt(5),yG=BigInt(7),yz=BigInt(8),bG=BigInt(9),bz=BigInt(16);function xt(e,t){if(t<=cr)throw Error("mod: expected positive modulus, got "+t);let r=e%t;return r>=cr?r:t+r}function xn(e,t,r){if(t<cr)throw Error("pow2: expected non-negative exponent, got "+t);let i=e;while(t-- >cr)i*=i,i%=r;return i}function dz(e,t){if(e===cr)throw Error("invert: expected non-zero number");if(t<=cr)throw Error("invert: expected positive modulus, got "+t);let r=xt(e,t),i=t,n=cr,o=Rt,s=Rt,a=cr;while(r!==cr){let l=i/r,d=i-r*l,f=n-s*l,p=o-a*l;i=r,r=d,n=s,o=a,s=f,a=p}if(i!==Rt)throw Error("invert: does not exist");return xt(n,t)}function $x(e,t,r){let i=e;if(!i.eql(i.sqr(t),r))throw Error("Cannot find square root")}function Sz(e,t){let r=e,i=(r.ORDER+Rt)/hz,n=r.pow(t,i);return $x(r,n,t),n}function SG(e,t){let r=e,i=(r.ORDER-gz)/yz,n=r.mul(t,Qs),o=r.pow(n,i),s=r.mul(t,o),a=r.mul(r.mul(s,Qs),o),c=r.mul(s,r.sub(a,r.ONE));return $x(r,c,t),c}function xG(e){let t=km(e),r=xz(e),i=r(t,t.neg(t.ONE)),n=r(t,i),o=r(t,t.neg(i)),s=(e+yG)/bz;return(a,c)=>{let l=a,d=l.pow(c,s),f=l.mul(d,i),p=l.mul(d,n),m=l.mul(d,o),b=l.eql(l.sqr(f),c),g=l.eql(l.sqr(p),c);d=l.cmov(d,f,b),f=l.cmov(m,p,g);let S=l.eql(l.sqr(f),c),k=l.cmov(d,f,S);return $x(l,k,c),k}}function xz(e){if(e<mz)throw Error("sqrt is not defined for small field");let t=e-Rt,r=0;while(t%Qs===cr)t/=Qs,r++;let i=Qs,n=km(e);while(fz(n,i)===1)if(i++>1000)throw Error("Cannot find square root: probably non-prime P");if(r===1)return Sz;let o=n.pow(i,t),s=(t+Rt)/Qs;return function(c,l){let d=c;if(d.is0(l))return l;if(fz(d,l)!==1)throw Error("Cannot find square root");let f=r,p=d.mul(d.ONE,o),m=d.pow(l,t),b=d.pow(l,s);while(!d.eql(m,d.ONE)){if(d.is0(m))return d.ZERO;let g=1,S=d.sqr(m);while(!d.eql(S,d.ONE))if(g++,S=d.sqr(S),g===f)throw Error("Cannot find square root");let k=Rt<<BigInt(f-g-1),A=d.pow(p,k);f=g,p=d.sqr(A),m=d.mul(m,p),b=d.mul(b,A)}return b}}function wG(e){if(e%hz===mz)return Sz;if(e%yz===gz)return SG;if(e%bz===bG)return xG(e);return xz(e)}var Mi=(e,t)=>(xt(e,t)&Rt)===Rt,vG=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Px(e){let t={ORDER:"bigint",BYTES:"number",BITS:"number"},r=vG.reduce((i,n)=>(i[n]="function",i),t);if(Sn(e,r),ci(e.BYTES,"BYTES"),ci(e.BITS,"BITS"),e.BYTES<1||e.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if(e.ORDER<=Rt)throw Error("invalid field: expected ORDER > 1, got "+e.ORDER);return e}function _G(e,t,r){let i=e;if(r<cr)throw Error("invalid exponent, negatives unsupported");if(r===cr)return i.ONE;if(r===Rt)return t;let n=i.ONE,o=t;while(r>cr){if(r&Rt)n=i.mul(n,o);o=i.sqr(o),r>>=Rt}return n}function Wu(e,t,r=!1){let i=e,n=Array(t.length).fill(r?i.ZERO:void 0),o=t.reduce((a,c,l)=>{if(i.is0(c))return a;return n[l]=a,i.mul(a,c)},i.ONE),s=i.inv(o);return t.reduceRight((a,c,l)=>{if(i.is0(c))return a;return n[l]=i.mul(a,n[l]),i.mul(a,c)},s),n}function fz(e,t){let r=e,i=(r.ORDER-Rt)/Qs,n=r.pow(t,i),o=r.eql(n,r.ONE),s=r.eql(n,r.ZERO),a=r.eql(n,r.neg(r.ONE));if(!o&&!s&&!a)throw Error("invalid Legendre symbol result");return o?1:s?0:-1}function kG(e,t){if(t!==void 0)Cx(t);if(e<=cr)throw Error("invalid n length: expected positive n, got "+e);if(t!==void 0&&t<1)throw Error("invalid n length: expected positive bit length, got "+t);let r=hc(e);if(t!==void 0&&t<r)throw Error(`invalid n length: expected bit length (${r}) >= n.length (${t})`);let i=t!==void 0?t:r,n=Math.ceil(i/8);return{nBitLength:i,nByteLength:n}}var pz=new WeakMap;class zx{ORDER;BITS;BYTES;isLE;ZERO=cr;ONE=Rt;_lengths;_mod;constructor(e,t={}){if(e<=Rt)throw Error("invalid field: expected ORDER > 1, got "+e);let r=void 0;if(this.isLE=!1,t!=null&&typeof t==="object"){if(typeof t.BITS==="number")r=t.BITS;if(typeof t.sqrt==="function")Object.defineProperty(this,"sqrt",{value:t.sqrt,enumerable:!0});if(typeof t.isLE==="boolean")this.isLE=t.isLE;if(t.allowedLengths)this._lengths=Object.freeze(t.allowedLengths.slice());if(typeof t.modFromBytes==="boolean")this._mod=t.modFromBytes}let{nBitLength:i,nByteLength:n}=kG(e,r);if(n>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=i,this.BYTES=n,Object.freeze(this)}create(e){return xt(e,this.ORDER)}isValid(e){if(typeof e!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof e);return cr<=e&&e<this.ORDER}is0(e){return e===cr}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&Rt)===Rt}neg(e){return xt(-e,this.ORDER)}eql(e,t){return e===t}sqr(e){return xt(e*e,this.ORDER)}add(e,t){return xt(e+t,this.ORDER)}sub(e,t){return xt(e-t,this.ORDER)}mul(e,t){return xt(e*t,this.ORDER)}pow(e,t){return _G(this,e,t)}div(e,t){return xt(e*dz(t,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,t){return e+t}subN(e,t){return e-t}mulN(e,t){return e*t}inv(e){return dz(e,this.ORDER)}sqrt(e){let t=pz.get(this);if(!t)pz.set(this,t=wG(this.ORDER));return t(this,e)}toBytes(e){return this.isLE?Ku(e,this.BYTES):vm(e,this.BYTES)}fromBytes(e,t=!1){ft(e);let{_lengths:r,BYTES:i,isLE:n,ORDER:o,_mod:s}=this;if(r){if(e.length<1||!r.includes(e.length)||e.length>i)throw Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let c=new Uint8Array(i);c.set(e,n?0:c.length-e.length),e=c}if(e.length!==i)throw Error("Field.fromBytes: expected "+i+" bytes, got "+e.length);let a=n?zn(e):Gs(e);if(s)a=xt(a,o);if(!t){if(!this.isValid(a))throw Error("invalid field element: outside of range 0..ORDER")}return a}invertBatch(e){return Wu(this,e)}cmov(e,t,r){return qi(r,"condition"),r?t:e}}Object.freeze(zx.prototype);function km(e,t={}){return new zx(e,t)}function wz(e){if(typeof e!=="bigint")throw Error("field order must be bigint");if(e<=Rt)throw Error("field order must be greater than 1");let t=hc(e-Rt);return Math.ceil(t/8)}function Nx(e){let t=wz(e);return t+Math.ceil(t/2)}function vz(e,t,r=!1){ft(e);let i=e.length,n=wz(t),o=Math.max(Nx(t),16);if(i<o||i>1024)throw Error("expected "+o+"-1024 bytes of input, got "+i);let s=r?zn(e):Gs(e),a=xt(s,t-Rt)+Rt;return r?Ku(a,n):vm(a,n)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gc=BigInt(0),Ys=BigInt(1);function Gu(e,t){let r=t.negate();return e?r:t}function Xs(e,t){let r=Wu(e.Fp,t.map((i)=>i.Z));return t.map((i,n)=>e.fromAffine(i.toAffine(r[n])))}function Iz(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function Dx(e,t){Iz(e,t);let r=Math.ceil(t/e)+1,i=2**(e-1),n=2**e,o=Vu(e),s=BigInt(e);return{windows:r,windowSize:i,mask:o,maxNumber:n,shiftBy:s}}function _z(e,t,r){let{windowSize:i,mask:n,maxNumber:o,shiftBy:s}=r,a=Number(e&n),c=e>>s;if(a>i)a-=o,c+=Ys;let l=t*i,d=l+Math.abs(a)-1,f=a===0,p=a<0,m=t%2!==0;return{nextN:c,offset:d,isZero:f,isNeg:p,isNegF:m,offsetF:l}}var Lx=new WeakMap,Az=new WeakMap;function Bx(e){return Az.get(e)||1}function kz(e){if(e!==gc)throw Error("invalid wNAF")}class Qu{BASE;ZERO;Fn;bits;constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let i=e;while(t>gc){if(t&Ys)r=r.add(i);i=i.double(),t>>=Ys}return r}precomputeWindow(e,t){let{windows:r,windowSize:i}=Dx(t,this.bits),n=[],o=e,s=o;for(let a=0;a<r;a++){s=o,n.push(s);for(let c=1;c<i;c++)s=s.add(o),n.push(s);o=s.double()}return n}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let i=this.ZERO,n=this.BASE,o=Dx(e,this.bits);for(let s=0;s<o.windows;s++){let{nextN:a,offset:c,isZero:l,isNeg:d,isNegF:f,offsetF:p}=_z(r,s,o);if(r=a,l)n=n.add(Gu(f,t[p]));else i=i.add(Gu(d,t[c]))}return kz(r),{p:i,f:n}}wNAFUnsafe(e,t,r,i=this.ZERO){let n=Dx(e,this.bits);for(let o=0;o<n.windows;o++){if(r===gc)break;let{nextN:s,offset:a,isZero:c,isNeg:l}=_z(r,o,n);if(r=s,c)continue;else{let d=t[a];i=i.add(l?d.negate():d)}}return kz(r),i}getPrecomputes(e,t,r){let i=Lx.get(t);if(!i){if(i=this.precomputeWindow(t,e),e!==1){if(typeof r==="function")i=r(i);Lx.set(t,i)}}return i}cached(e,t,r){let i=Bx(e);return this.wNAF(i,this.getPrecomputes(i,e,r),t)}unsafe(e,t,r,i){let n=Bx(e);if(n===1)return this._unsafeLadder(e,t,i);return this.wNAFUnsafe(n,this.getPrecomputes(n,e,r),t,i)}createCache(e,t){Iz(t,this.bits),Az.set(e,t),Lx.delete(e)}hasCache(e){return Bx(e)!==1}}function Tz(e,t,r,i){let n=t,o=e.ZERO,s=e.ZERO;while(r>gc||i>gc){if(r&Ys)o=o.add(n);if(i&Ys)s=s.add(n);n=n.double(),r>>=Ys,i>>=Ys}return{p1:o,p2:s}}function Ez(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return Px(t),t}else return km(e,{isLE:r})}function Em(e,t,r={},i){if(i===void 0)i=e==="edwards";if(!t||typeof t!=="object")throw Error(`expected valid ${e} CURVE object`);for(let c of["p","n","h"]){let l=t[c];if(!(typeof l==="bigint"&&l>gc))throw Error(`CURVE.${c} must be positive bigint`)}let n=Ez(t.p,r.Fp,i),o=Ez(t.n,r.Fn,i),a=["Gx","Gy","a",e==="weierstrass"?"b":"d"];for(let c of a)if(!n.isValid(t[c]))throw Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return t=Object.freeze(Object.assign({},t)),{CURVE:t,Fp:n,Fn:o}}function Yu(e,t){return function(i){let n=e(i);return{secretKey:n,publicKey:t(n)}}}function Xu(e,t){if(ci(e),ci(t),t<0||t>4)throw Error("invalid I2OSP length: "+t);if(e<0||e>2**(8*t)-1)throw Error("invalid I2OSP input: "+e);let r=Array.from({length:t}).fill(0);for(let i=t-1;i>=0;i--)r[i]=e&255,e>>>=8;return new Uint8Array(r)}function EG(e,t){let r=new Uint8Array(e.length);for(let i=0;i<e.length;i++)r[i]=e[i]^t[i];return r}function IG(e){if(!pc(e)&&typeof e!=="string")throw Error("DST must be Uint8Array or ascii string");let t=typeof e==="string"?_m(e):e;if(t.length===0)throw Error("DST must be non-empty");return t}function jx(e,t,r,i){if(ft(e),ci(r),t=IG(t),t.length>255)t=i(ar(_m("H2C-OVERSIZE-DST-"),t));let{outputLen:n,blockLen:o}=i,s=Math.ceil(r/n);if(r>65535||s>255)throw Error("expand_message_xmd: invalid lenInBytes");let a=ar(t,Xu(t.length,1)),c=new Uint8Array(o),l=Xu(r,2),d=Array(s),f=i(ar(c,e,l,Xu(0,1),a));d[0]=i(ar(f,Xu(1,1),a));for(let m=1;m<s;m++){let b=[EG(f,d[m-1]),Xu(m+1,1),a];d[m]=i(ar(...b))}return ar(...d).slice(0,r)}var Rz="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Cz=(e,t)=>(e+(e>=0?t:-t)/$z)/t;function AG(e,t,r){Zi("scalar",e,li,r);let[[i,n],[o,s]]=t,a=Cz(s*e,r),c=Cz(-n*e,r),l=e-a*i-c*o,d=-a*n-c*s,f=l<li,p=d<li;if(f)l=-l;if(p)d=-d;let m=Vu(Math.ceil(hc(r)/2))+Po;if(l<li||l>=m||d<li||d>=m)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:f,k1:l,k2neg:p,k2:d}}function qx(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Ux(e,t){Sn(e);let r={};for(let i of Object.keys(t))r[i]=e[i]===void 0?t[i]:e[i];if(qi(r.lowS,"lowS"),qi(r.prehash,"prehash"),r.format!==void 0)qx(r.format);return r}class Oz extends Error{constructor(e=""){super(e)}}var Nn={Err:Oz,_tlv:{encode:(e,t)=>{let{Err:r}=Nn;if(ci(e,"tag"),e<0||e>255)throw new r("tlv.encode: wrong tag");if(typeof t!=="string")throw TypeError('"data" expected string, got type='+typeof t);if(t.length&1)throw new r("tlv.encode: unpadded data");let i=t.length/2,n=Ju(i);if(n.length/2&128)throw new r("tlv.encode: long form length too big");let o=i>127?Ju(n.length/2|128):"";return Ju(e)+o+n+t},decode(e,t){let{Err:r}=Nn;t=ft(t,void 0,"DER data");let i=0;if(e<0||e>255)throw new r("tlv.encode: wrong tag");if(t.length<2||t[i++]!==e)throw new r("tlv.decode: wrong tlv");let n=t[i++],o=!!(n&128),s=0;if(!o)s=n;else{let c=n&127;if(!c)throw new r("tlv.decode(long): indefinite length not supported");if(c>4)throw new r("tlv.decode(long): byte length is too big");let l=t.subarray(i,i+c);if(l.length!==c)throw new r("tlv.decode: length bytes not complete");if(l[0]===0)throw new r("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(i+=c,s<128)throw new r("tlv.decode(long): not minimal encoding")}let a=t.subarray(i,i+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(i+s)}}},_int:{encode(e){let{Err:t}=Nn;if(wm(e),e<li)throw new t("integer: negative integers are not allowed");let r=Ju(e);if(Number.parseInt(r[0],16)&8)r="00"+r;if(r.length&1)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){let{Err:t}=Nn;if(e.length<1)throw new t("invalid signature integer: empty");if(e[0]&128)throw new t("invalid signature integer: negative");if(e.length>1&&e[0]===0&&!(e[1]&128))throw new t("invalid signature integer: unnecessary leading zero");return Gs(e)}},toSig(e){let{Err:t,_int:r,_tlv:i}=Nn,n=ft(e,void 0,"signature"),{v:o,l:s}=i.decode(48,n);if(s.length)throw new t("invalid signature: left bytes after parsing");let{v:a,l:c}=i.decode(2,o),{v:l,l:d}=i.decode(2,c);if(d.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(a),s:r.decode(l)}},hexFromSig(e){let{_tlv:t,_int:r}=Nn,i=t.encode(2,r.encode(e.r)),n=t.encode(2,r.encode(e.s)),o=i+n;return t.encode(48,o)}};Object.freeze(Nn._tlv);Object.freeze(Nn._int);Object.freeze(Nn);var li=BigInt(0),Po=BigInt(1),$z=BigInt(2),Im=BigInt(3),TG=BigInt(4);function Pz(e,t={}){let r=Em("weierstrass",e,t),i=r.Fp,n=r.Fn,o=r.CURVE,{h:s,n:a}=o;Sn(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c,allowInfinityPoint:l}=t;if(c){if(!i.is0(o.a)||typeof c.beta!=="bigint"||!Array.isArray(c.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let d=Nz(i,n);function f(){if(!i.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function p(J,N,L){if(l&&N.is0())return Uint8Array.of(0);let{x:I,y:z}=N.toAffine(),P=i.toBytes(I);if(qi(L,"isCompressed"),L){f();let K=!i.isOdd(z);return ar(zz(K),P)}else return ar(Uint8Array.of(4),P,i.toBytes(z))}function m(J){ft(J,void 0,"Point");let{publicKey:N,publicKeyUncompressed:L}=d,I=J.length,z=J[0],P=J.subarray(1);if(l&&I===1&&z===0)return{x:i.ZERO,y:i.ZERO};if(I===N&&(z===2||z===3)){let K=i.fromBytes(P);if(!i.isValid(K))throw Error("bad point: is not on curve, wrong x");let j=S(K),Q;try{Q=i.sqrt(j)}catch(fe){let C=fe instanceof Error?": "+fe.message:"";throw Error("bad point: is not on curve, sqrt error"+C)}f();let E=i.isOdd(Q);if((z&1)===1!==E)Q=i.neg(Q);return{x:K,y:Q}}else if(I===L&&z===4){let K=i.BYTES,j=i.fromBytes(P.subarray(0,K)),Q=i.fromBytes(P.subarray(K,K*2));if(!k(j,Q))throw Error("bad point: is not on curve");return{x:j,y:Q}}else throw Error(`bad point: got length ${I}, expected compressed=${N} or uncompressed=${L}`)}let b=t.toBytes===void 0?p:t.toBytes,g=t.fromBytes===void 0?m:t.fromBytes;function S(J){let N=i.sqr(J),L=i.mul(N,J);return i.add(i.add(L,i.mul(J,o.a)),o.b)}function k(J,N){let L=i.sqr(N),I=S(J);return i.eql(L,I)}if(!k(o.Gx,o.Gy))throw Error("bad curve params: generator point");let A=i.mul(i.pow(o.a,Im),TG),R=i.mul(i.sqr(o.b),BigInt(27));if(i.is0(i.add(A,R)))throw Error("bad curve params: a or b");function D(J,N,L=!1){if(!i.isValid(N)||L&&i.is0(N))throw Error(`bad point coordinate ${J}`);return N}function U(J){if(!(J instanceof B))throw Error("Weierstrass Point expected")}function T(J){if(!c||!c.basises)throw Error("no endo");return AG(J,c.basises,n.ORDER)}function H(J,N,L,I,z){return L=new B(i.mul(L.X,J),L.Y,L.Z),N=Gu(I,N),L=Gu(z,L),N.add(L)}class B{static BASE=new B(o.Gx,o.Gy,i.ONE);static ZERO=new B(i.ZERO,i.ONE,i.ZERO);static Fp=i;static Fn=n;X;Y;Z;constructor(J,N,L){this.X=D("x",J),this.Y=D("y",N,!0),this.Z=D("z",L),Object.freeze(this)}static CURVE(){return o}static fromAffine(J){let{x:N,y:L}=J||{};if(!J||!i.isValid(N)||!i.isValid(L))throw Error("invalid affine point");if(J instanceof B)throw Error("projective point not allowed");if(i.is0(N)&&i.is0(L))return B.ZERO;return new B(N,L,i.ONE)}static fromBytes(J){let N=B.fromAffine(g(ft(J,void 0,"point")));return N.assertValidity(),N}static fromHex(J){return B.fromBytes(fc(J))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(J=8,N=!0){if(te.createCache(this,J),!N)this.multiply(Im);return this}assertValidity(){let J=this;if(J.is0()){if(t.allowInfinityPoint&&i.is0(J.X)&&i.eql(J.Y,i.ONE)&&i.is0(J.Z))return;throw Error("bad point: ZERO")}let{x:N,y:L}=J.toAffine();if(!i.isValid(N)||!i.isValid(L))throw Error("bad point: x or y not field elements");if(!k(N,L))throw Error("bad point: equation left != right");if(!J.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:J}=this.toAffine();if(!i.isOdd)throw Error("Field doesn't support isOdd");return!i.isOdd(J)}equals(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.eql(i.mul(N,K),i.mul(z,I)),Q=i.eql(i.mul(L,K),i.mul(P,I));return j&&Q}negate(){return new B(this.X,i.neg(this.Y),this.Z)}double(){let{a:J,b:N}=o,L=i.mul(N,Im),{X:I,Y:z,Z:P}=this,K=i.ZERO,j=i.ZERO,Q=i.ZERO,E=i.mul(I,I),ae=i.mul(z,z),fe=i.mul(P,P),C=i.mul(I,z);return C=i.add(C,C),Q=i.mul(I,P),Q=i.add(Q,Q),K=i.mul(J,Q),j=i.mul(L,fe),j=i.add(K,j),K=i.sub(ae,j),j=i.add(ae,j),j=i.mul(K,j),K=i.mul(C,K),Q=i.mul(L,Q),fe=i.mul(J,fe),C=i.sub(E,fe),C=i.mul(J,C),C=i.add(C,Q),Q=i.add(E,E),E=i.add(Q,E),E=i.add(E,fe),E=i.mul(E,C),j=i.add(j,E),fe=i.mul(z,P),fe=i.add(fe,fe),E=i.mul(fe,C),K=i.sub(K,E),Q=i.mul(fe,ae),Q=i.add(Q,Q),Q=i.add(Q,Q),new B(K,j,Q)}add(J){U(J);let{X:N,Y:L,Z:I}=this,{X:z,Y:P,Z:K}=J,j=i.ZERO,Q=i.ZERO,E=i.ZERO,ae=o.a,fe=i.mul(o.b,Im),C=i.mul(N,z),xe=i.mul(L,P),Te=i.mul(I,K),Pe=i.add(N,L),$e=i.add(z,P);Pe=i.mul(Pe,$e),$e=i.add(C,xe),Pe=i.sub(Pe,$e),$e=i.add(N,I);let _e=i.add(z,K);return $e=i.mul($e,_e),_e=i.add(C,Te),$e=i.sub($e,_e),_e=i.add(L,I),j=i.add(P,K),_e=i.mul(_e,j),j=i.add(xe,Te),_e=i.sub(_e,j),E=i.mul(ae,$e),j=i.mul(fe,Te),E=i.add(j,E),j=i.sub(xe,E),E=i.add(xe,E),Q=i.mul(j,E),xe=i.add(C,C),xe=i.add(xe,C),Te=i.mul(ae,Te),$e=i.mul(fe,$e),xe=i.add(xe,Te),Te=i.sub(C,Te),Te=i.mul(ae,Te),$e=i.add($e,Te),C=i.mul(xe,$e),Q=i.add(Q,C),C=i.mul(_e,$e),j=i.mul(Pe,j),j=i.sub(j,C),C=i.mul(Pe,xe),E=i.mul(_e,E),E=i.add(E,C),new B(j,Q,E)}subtract(J){return U(J),this.add(J.negate())}is0(){return this.equals(B.ZERO)}multiply(J){let{endo:N}=t;if(!n.isValidNot0(J))throw RangeError("invalid scalar: out of range");let L,I,z=(P)=>te.cached(this,P,(K)=>Xs(B,K));if(N){let{k1neg:P,k1:K,k2neg:j,k2:Q}=T(J),{p:E,f:ae}=z(K),{p:fe,f:C}=z(Q);I=ae.add(C),L=H(N.beta,E,fe,P,j)}else{let{p:P,f:K}=z(J);L=P,I=K}return Xs(B,[L,I])[0]}multiplyUnsafe(J){let{endo:N}=t,L=this,I=J;if(!n.isValid(I))throw RangeError("invalid scalar: out of range");if(I===li||L.is0())return B.ZERO;if(I===Po)return L;if(te.hasCache(this))return this.multiply(I);if(N){let{k1neg:z,k1:P,k2neg:K,k2:j}=T(I),{p1:Q,p2:E}=Tz(B,L,P,j);return H(N.beta,Q,E,z,K)}else return te.unsafe(L,I)}toAffine(J){let N=this,L=J,{X:I,Y:z,Z:P}=N;if(i.eql(P,i.ONE))return{x:I,y:z};let K=N.is0();if(L==null)L=K?i.ONE:i.inv(P);let j=i.mul(I,L),Q=i.mul(z,L),E=i.mul(P,L);if(K)return{x:i.ZERO,y:i.ZERO};if(!i.eql(E,i.ONE))throw Error("invZ was invalid");return{x:j,y:Q}}isTorsionFree(){let{isTorsionFree:J}=t;if(s===Po)return!0;if(J)return J(B,this);return te.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:J}=t;if(s===Po)return this;if(J)return J(B,this);return this.multiplyUnsafe(s)}isSmallOrder(){if(s===Po)return this.is0();return this.clearCofactor().is0()}toBytes(J=!0){return qi(J,"isCompressed"),this.assertValidity(),b(B,this,J)}toHex(J=!0){return dc(this.toBytes(J))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let V=n.BITS,te=new Qu(B,t.endo?Math.ceil(V/2):V);if(V>=8)B.BASE.precompute(8);return Object.freeze(B.prototype),Object.freeze(B),B}function zz(e){return Uint8Array.of(e?2:3)}function Nz(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function RG(e,t={}){let{Fn:r}=e,i=t.randomBytes===void 0?mc:t.randomBytes,n=Object.assign(Nz(e.Fp,r),{seed:Math.max(Nx(r.ORDER),16)});function o(m){try{let b=r.fromBytes(m);return r.isValidNot0(b)}catch(b){return!1}}function s(m,b){let{publicKey:g,publicKeyUncompressed:S}=n;try{let k=m.length;if(b===!0&&k!==g)return!1;if(b===!1&&k!==S)return!1;return!!e.fromBytes(m)}catch(k){return!1}}function a(m){return m=m===void 0?i(n.seed):m,vz(ft(m,n.seed,"seed"),r.ORDER)}function c(m,b=!0){return e.BASE.multiply(r.fromBytes(m)).toBytes(b)}function l(m){let{secretKey:b,publicKey:g,publicKeyUncompressed:S}=n,k=r._lengths;if(!pc(m))return;let A=ft(m,void 0,"key").length,R=A===g||A===S,D=A===b||!!k?.includes(A);if(R&&D)return;return R}function d(m,b,g=!0){if(l(m)===!0)throw Error("first arg must be private key");if(l(b)===!1)throw Error("second arg must be public key");let S=r.fromBytes(m);return e.fromBytes(b).multiply(S).toBytes(g)}let f={isValidSecretKey:o,isValidPublicKey:s,randomSecretKey:a},p=Yu(a,c);return Object.freeze(f),Object.freeze(n),Object.freeze({getPublicKey:c,getSharedSecret:d,keygen:p,Point:e,utils:f,lengths:n})}function Dz(e,t,r={}){let i=t;$i(i),Sn(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),r=Object.assign({},r);let n=r.randomBytes===void 0?mc:r.randomBytes,o=r.hmac===void 0?(z,P)=>ri(i,z,P):r.hmac,{Fp:s,Fn:a}=e,{ORDER:c,BITS:l}=a,{keygen:d,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b}=RG(e,r),g={prehash:!0,lowS:typeof r.lowS==="boolean"?r.lowS:!0,format:"compact",extraEntropy:!1},S=c*$z+Po<s.ORDER;function k(z){let P=c>>Po;return z>P}function A(z,P){if(!a.isValidNot0(P))throw Error(`invalid signature ${z}: out of range 1..Point.Fn.ORDER`);return P}function R(){if(S)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function D(z,P){qx(P);let K=b.signature,j=P==="compact"?K:P==="recovered"?K+1:void 0;return ft(z,j)}class U{r;s;recovery;constructor(z,P,K){if(this.r=A("r",z),this.s=A("s",P),K!=null){if(R(),![0,1,2,3].includes(K))throw Error("invalid recovery id");this.recovery=K}Object.freeze(this)}static fromBytes(z,P=g.format){D(z,P);let K;if(P==="der"){let{r:ae,s:fe}=Nn.toSig(ft(z));return new U(ae,fe)}if(P==="recovered")K=z[0],P="compact",z=z.subarray(1);let j=b.signature/2,Q=z.subarray(0,j),E=z.subarray(j,j*2);return new U(a.fromBytes(Q),a.fromBytes(E),K)}static fromHex(z,P){return this.fromBytes(fc(z),P)}assertRecovery(){let{recovery:z}=this;if(z==null)throw Error("invalid recovery id: must be present");return z}addRecoveryBit(z){return new U(this.r,this.s,z)}recoverPublicKey(z){let{r:P,s:K}=this,j=this.assertRecovery(),Q=j===2||j===3?P+c:P;if(!s.isValid(Q))throw Error("invalid recovery id: sig.r+curve.n != R.x");let E=s.toBytes(Q),ae=e.fromBytes(ar(zz((j&1)===0),E)),fe=a.inv(Q),C=H(ft(z,void 0,"msgHash")),xe=a.create(-C*fe),Te=a.create(K*fe),Pe=e.BASE.multiplyUnsafe(xe).add(ae.multiplyUnsafe(Te));if(Pe.is0())throw Error("invalid recovery: point at infinify");return Pe.assertValidity(),Pe}hasHighS(){return k(this.s)}toBytes(z=g.format){if(qx(z),z==="der")return fc(Nn.hexFromSig(this));let{r:P,s:K}=this,j=a.toBytes(P),Q=a.toBytes(K);if(z==="recovered")return R(),ar(Uint8Array.of(this.assertRecovery()),j,Q);return ar(j,Q)}toHex(z){return dc(this.toBytes(z))}}Object.freeze(U.prototype),Object.freeze(U);let T=r.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let K=Gs(P),j=P.length*8-l;return j>0?K>>BigInt(j):K}:r.bits2int,H=r.bits2int_modN===void 0?function(P){return a.create(T(P))}:r.bits2int_modN,B=Vu(l);function V(z){return Zi("num < 2^"+l,z,li,B),a.toBytes(z)}function te(z,P){return ft(z,void 0,"message"),P?ft(i(z),void 0,"prehashed message"):z}function J(z,P,K){let{lowS:j,prehash:Q,extraEntropy:E}=Ux(K,g);z=te(z,Q);let ae=H(z),fe=a.fromBytes(P);if(!a.isValidNot0(fe))throw Error("invalid private key");let C=[V(fe),V(ae)];if(E!=null&&E!==!1){let $e=E===!0?n(b.secretKey):E;C.push(ft($e,void 0,"extraEntropy"))}let xe=ar(...C),Te=ae;function Pe($e){let _e=T($e);if(!a.isValidNot0(_e))return;let We=a.inv(_e),Le=e.BASE.multiply(_e).toAffine(),Xe=a.create(Le.x);if(Xe===li)return;let dt=a.create(We*a.create(Te+Xe*fe));if(dt===li)return;let kt=(Le.x===Xe?0:2)|Number(Le.y&Po),jt=dt;if(j&&k(dt))jt=a.neg(dt),kt^=1;return new U(Xe,jt,S?void 0:kt)}return{seed:xe,k2sig:Pe}}function N(z,P,K={}){let{seed:j,k2sig:Q}=J(z,P,K);return uz(i.outputLen,a.BYTES,o)(j,Q).toBytes(K.format)}function L(z,P,K,j={}){let{lowS:Q,prehash:E,format:ae}=Ux(j,g);if(K=ft(K,void 0,"publicKey"),P=te(P,E),!pc(z)){let fe=z instanceof U?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+fe)}D(z,ae);try{let fe=U.fromBytes(z,ae),C=e.fromBytes(K);if(Q&&fe.hasHighS())return!1;let{r:xe,s:Te}=fe,Pe=H(P),$e=a.inv(Te),_e=a.create(Pe*$e),We=a.create(xe*$e),Le=e.BASE.multiplyUnsafe(_e).add(C.multiplyUnsafe(We));if(Le.is0())return!1;return a.create(Le.x)===xe}catch(fe){return!1}}function I(z,P,K={}){let{prehash:j}=Ux(K,g);return P=te(P,j),U.fromBytes(z,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:d,getPublicKey:f,getSharedSecret:p,utils:m,lengths:b,Point:e,sign:N,verify:L,recoverPublicKey:I,Signature:U,hash:i})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var CG=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var OG=Pz(CG),yc=Dz(OG,zt);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zo=BigInt(0),Fr=BigInt(1),Zx=BigInt(2),$G=BigInt(8);function PG(e,t,r,i){let n=e.sqr(r),o=e.sqr(i),s=e.add(e.mul(t.a,n),o),a=e.add(e.ONE,e.mul(t.d,e.mul(n,o)));return e.eql(s,a)}function Lz(e,t={}){let r=t,i=Em("edwards",e,r,r.FpFnLE),{Fp:n,Fn:o}=i,s=i.CURVE,{h:a}=s;Sn(r,{},{uvRatio:"function"});let c=Zx<<BigInt(o.BYTES*8)-Fr,l=(g)=>n.create(g),d=r.uvRatio===void 0?(g,S)=>{try{return{isValid:!0,value:n.sqrt(n.div(g,S))}}catch(k){return{isValid:!1,value:zo}}}:r.uvRatio;if(!PG(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function f(g,S,k=!1){let A=k?Fr:zo;return Zi("coordinate "+g,S,A,c),S}function p(g){if(!(g instanceof m))throw Error("EdwardsPoint expected")}class m{static BASE=new m(s.Gx,s.Gy,Fr,l(s.Gx*s.Gy));static ZERO=new m(zo,Fr,Fr,zo);static Fp=n;static Fn=o;X;Y;Z;T;constructor(g,S,k,A){this.X=f("x",g),this.Y=f("y",S),this.Z=f("z",k,!0),this.T=f("t",A),Object.freeze(this)}static CURVE(){return s}static fromAffine(g){if(g instanceof m)throw Error("extended point not allowed");let{x:S,y:k}=g||{};return f("x",S),f("y",k),new m(S,k,Fr,l(S*k))}static fromBytes(g,S=!1){let k=n.BYTES,{a:A,d:R}=s;g=$o(ft(g,k,"point")),qi(S,"zip215");let D=$o(g),U=g[k-1];D[k-1]=U&-129;let T=zn(D),H=S?c:n.ORDER;Zi("point.y",T,zo,H);let B=l(T*T),V=l(B-Fr),te=l(R*B-A),{isValid:J,value:N}=d(V,te);if(!J)throw Error("bad point: invalid y coordinate");let L=(N&Fr)===Fr,I=(U&128)!==0;if(!S&&N===zo&&I)throw Error("bad point: x=0 and x_0=1");if(I!==L)N=l(-N);return m.fromAffine({x:N,y:T})}static fromHex(g,S=!1){return m.fromBytes(fc(g),S)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,S=!0){if(b.createCache(this,g),!S)this.multiply(Zx);return this}assertValidity(){let g=this,{a:S,d:k}=s;if(g.is0())throw Error("bad point: ZERO");let{X:A,Y:R,Z:D,T:U}=g,T=l(A*A),H=l(R*R),B=l(D*D),V=l(B*B),te=l(T*S),J=l(B*l(te+H)),N=l(V+l(k*l(T*H)));if(J!==N)throw Error("bad point: equation left != right (1)");let L=l(A*R),I=l(D*U);if(L!==I)throw Error("bad point: equation left != right (2)")}equals(g){p(g);let{X:S,Y:k,Z:A}=this,{X:R,Y:D,Z:U}=g,T=l(S*U),H=l(R*A),B=l(k*U),V=l(D*A);return T===H&&B===V}is0(){return this.equals(m.ZERO)}negate(){return new m(l(-this.X),this.Y,this.Z,l(-this.T))}double(){let{a:g}=s,{X:S,Y:k,Z:A}=this,R=l(S*S),D=l(k*k),U=l(Zx*l(A*A)),T=l(g*R),H=S+k,B=l(l(H*H)-R-D),V=T+D,te=V-U,J=T-D,N=l(B*te),L=l(V*J),I=l(B*J),z=l(te*V);return new m(N,L,z,I)}add(g){p(g);let{a:S,d:k}=s,{X:A,Y:R,Z:D,T:U}=this,{X:T,Y:H,Z:B,T:V}=g,te=l(A*T),J=l(R*H),N=l(U*k*V),L=l(D*B),I=l((A+R)*(T+H)-te-J),z=L-N,P=L+N,K=l(J-S*te),j=l(I*z),Q=l(P*K),E=l(I*K),ae=l(z*P);return new m(j,Q,ae,E)}subtract(g){return p(g),this.add(g.negate())}multiply(g){if(!o.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:S,f:k}=b.cached(this,g,(A)=>Xs(m,A));return Xs(m,[S,k])[0]}multiplyUnsafe(g){if(!o.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===zo)return m.ZERO;if(this.is0()||g===Fr)return this;return b.unsafe(this,g,(S)=>Xs(m,S))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return b.unsafe(this,s.n).is0()}toAffine(g){let S=this,k=g,{X:A,Y:R,Z:D}=S,U=S.is0();if(k==null)k=U?$G:n.inv(D);let T=l(A*k),H=l(R*k),B=n.mul(D,k);if(U)return{x:zo,y:Fr};if(B!==Fr)throw Error("invZ was invalid");return{x:T,y:H}}clearCofactor(){if(a===Fr)return this;return this.multiplyUnsafe(a)}toBytes(){let{x:g,y:S}=this.toAffine(),k=n.toBytes(S);return k[k.length-1]|=g&Fr?128:0,k}toHex(){return dc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let b=new Qu(m,o.BITS);if(o.BITS>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}class Mx{static BASE;static ZERO;static Fp;static Fn;ep;constructor(e){this.ep=e}static fromBytes(e){Ox()}static fromHex(e){Ox()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine(e){return this.ep.toAffine(e)}toHex(){return dc(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add(e){return this.assertSame(e),this.init(this.ep.add(e.ep))}subtract(e){return this.assertSame(e),this.init(this.ep.subtract(e.ep))}multiply(e){return this.init(this.ep.multiply(e))}multiplyUnsafe(e){return this.init(this.ep.multiplyUnsafe(e))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute(e,t){return this.ep.precompute(e,t),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var ed=BigInt(0),bc=BigInt(1),Am=BigInt(2);function zG(e){return Sn(e,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...e})}function Bz(e){let t=zG(e),{P:r,type:i,adjustScalarBytes:n,powPminus2:o,randomBytes:s}=t,a=i==="x25519";if(!a&&i!=="x448")throw Error("invalid type");let c=s===void 0?mc:s,l=a?255:448,d=a?32:56,f=a?BigInt(9):BigInt(5),p=a?BigInt(121665):BigInt(39081),m=a?Am**BigInt(254):Am**BigInt(447),b=a?BigInt(8)*Am**BigInt(251)-bc:BigInt(4)*Am**BigInt(445)-bc,g=m+b+bc,S=(I)=>xt(I,r),k=A(f);function A(I){return Ku(S(I),d)}function R(I){let z=$o(ft(I,d,"uCoordinate"));if(a)z[31]&=127;return S(zn(z))}function D(I){return zn(n($o(ft(I,d,"scalar"))))}function U(I,z){let P=te(R(z),D(I));if(P===ed)throw Error("invalid private or public key received");return A(P)}function T(I){return U(I,k)}let H=T,B=U;function V(I,z,P){let K=S(I*(z-P));return z=S(z-K),P=S(P+K),{x_2:z,x_3:P}}function te(I,z){Zi("u",I,ed,r),Zi("scalar",z,m,g);let P=z,K=I,j=bc,Q=ed,E=I,ae=bc,fe=ed;for(let xe=BigInt(l-1);xe>=ed;xe--){let Te=P>>xe&bc;fe^=Te,{x_2:j,x_3:E}=V(fe,j,E),{x_2:Q,x_3:ae}=V(fe,Q,ae),fe=Te;let Pe=j+Q,$e=S(Pe*Pe),_e=j-Q,We=S(_e*_e),Le=$e-We,Xe=E+ae,dt=E-ae,kt=S(dt*Pe),jt=S(Xe*_e),yt=kt+jt,hr=kt-jt;E=S(yt*yt),ae=S(K*S(hr*hr)),j=S($e*We),Q=S(Le*($e+S(p*Le)))}({x_2:j,x_3:E}=V(fe,j,E)),{x_2:Q,x_3:ae}=V(fe,Q,ae);let C=o(Q);return S(j*C)}let J={secretKey:d,publicKey:d,seed:d},N=(I)=>(I=I===void 0?c(d):I,ft(I,J.seed,"seed"),I),L={randomSecretKey:N};return Object.freeze(J),Object.freeze(L),Object.freeze({keygen:Yu(N,H),getSharedSecret:B,getPublicKey:H,scalarMult:U,scalarMultBase:T,utils:L,GuBytes:k.slice(),lengths:J})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var NG=BigInt(0),Fi=BigInt(1),jz=BigInt(2),DG=BigInt(3),LG=BigInt(5),BG=BigInt(8),ta=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),Kx=(()=>({p:ta,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:BG,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function Zz(e){let t=BigInt(10),r=BigInt(20),i=BigInt(40),n=BigInt(80),o=ta,a=e*e%o*e%o,c=xn(a,jz,o)*a%o,l=xn(c,Fi,o)*e%o,d=xn(l,LG,o)*l%o,f=xn(d,t,o)*d%o,p=xn(f,r,o)*f%o,m=xn(p,i,o)*p%o,b=xn(m,n,o)*m%o,g=xn(b,n,o)*m%o,S=xn(g,t,o)*d%o;return{pow_p_5_8:xn(S,jz,o)*e%o,b2:a}}function jG(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}var Fx=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function Vx(e,t){let r=ta,i=xt(t*t*t,r),n=xt(i*i*t,r),o=Zz(e*n).pow_p_5_8,s=xt(e*i*o,r),a=xt(t*s*s,r),c=s,l=xt(s*Fx,r),d=a===e,f=a===xt(-e,r),p=a===xt(-e*Fx,r);if(d)s=c;if(f||p)s=l;if(Mi(s,r))s=xt(-s,r);return{isValid:d||f,value:s}}var ea=Lz(Kx,{uvRatio:Vx}),No=(()=>ea.Fp)(),Mz=(()=>ea.Fn)();var Tm=(()=>{let e=ta;return Bz({P:e,type:"x25519",powPminus2:(t)=>{let{pow_p_5_8:r,b2:i}=Zz(t);return xt(xn(r,DG,e)*i,e)},adjustScalarBytes:jG})})();var Hx=Fx,UG=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),qG=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),ZG=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),MG=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),Uz=(e)=>Vx(Fi,e),FG=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),Jx=(e)=>No.create(zn(e)&FG);function qz(e){let{d:t}=Kx,r=ta,i=(k)=>No.create(k),n=i(Hx*e*e),o=i((n+Fi)*ZG),s=BigInt(-1),a=i((s-t*n)*i(n+t)),{isValid:c,value:l}=Vx(o,a),d=i(l*e);if(!Mi(d,r))d=i(-d);if(!c)l=d;if(!c)s=n;let f=i(s*(n-Fi)*MG-a),p=l*l,m=i((l+l)*a),b=i(f*UG),g=i(Fi-p),S=i(Fi+p);return new ea(i(m*S),i(g*b),i(b*S),i(m*g))}class $r extends Mx{static BASE=(()=>new $r(ea.BASE))();static ZERO=(()=>new $r(ea.ZERO))();static Fp=(()=>No)();static Fn=(()=>Mz)();constructor(e){super(e)}static fromAffine(e){return new $r(ea.fromAffine(e))}assertSame(e){if(!(e instanceof $r))throw Error("RistrettoPoint expected")}init(e){return new $r(e)}static fromBytes(e){nr(e,32);let{a:t,d:r}=Kx,i=ta,n=(R)=>No.create(R),o=Jx(e);if(!lz(No.toBytes(o),e)||Mi(o,i))throw Error("invalid ristretto255 encoding 1");let s=n(o*o),a=n(Fi+t*s),c=n(Fi-t*s),l=n(a*a),d=n(c*c),f=n(t*r*l-d),{isValid:p,value:m}=Uz(n(f*d)),b=n(m*c),g=n(m*b*f),S=n((o+o)*b);if(Mi(S,i))S=n(-S);let k=n(a*g),A=n(S*k);if(!p||Mi(A,i)||k===NG)throw Error("invalid ristretto255 encoding 2");return new $r(new ea(S,k,Fi,A))}static fromHex(e){return $r.fromBytes(vu(e))}toBytes(){let{X:e,Y:t,Z:r,T:i}=this.ep,n=ta,o=(g)=>No.create(g),s=o(o(r+t)*o(r-t)),a=o(e*t),c=o(a*a),{value:l}=Uz(o(s*c)),d=o(l*s),f=o(l*a),p=o(d*f*i),m;if(Mi(i*p,n)){let g=o(t*Hx),S=o(e*Hx);e=g,t=S,m=o(d*qG)}else m=f;if(Mi(e*p,n))t=o(-t);let b=o((r-t)*m);if(Mi(b,n))b=o(-b);return No.toBytes(b)}equals(e){this.assertSame(e);let{X:t,Y:r}=this.ep,{X:i,Y:n}=e.ep,o=(c)=>No.create(c),s=o(t*n)===o(r*i),a=o(r*n)===o(t*i);return s||a}is0(){return this.equals($r.ZERO)}}Object.freeze($r.BASE);Object.freeze($r.ZERO);Object.freeze($r.prototype);Object.freeze($r);var HG=Object.freeze({Point:$r,hashToCurve(e,t){let r=t?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":t.DST,i=jx(e,r,64,Jp);return HG.deriveToCurve(i)},hashToScalar(e,t={DST:Rz}){let r=jx(e,t.DST,64,Jp);return Mz.create(zn(r))},deriveToCurve(e){nr(e,64);let t=Jx(e.subarray(0,32)),r=qz(t),i=Jx(e.subarray(32,64)),n=qz(i);return new $r(r.add(n))}});var Fz=!1,JG=!1;async function Hz(e,t){if(JG)return await t();try{return await e()}catch(r){if(r instanceof ReferenceError||r instanceof DOMException&&r.name==="NotSupportedError")return await t();else throw r}}async function Rm(e,t){return await Hz(async()=>{let r=Wx(e)?e:await VG(e),i=await crypto.subtle.importKey("raw",WG(t),{name:"X25519"},Fz,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:i},r,256))},()=>{if(Wx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Tm.scalarMult(e,t)})}async function td(e){return await Hz(async()=>Rm(e,Tm.GuBytes),()=>{if(Wx(e))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return Tm.scalarMultBase(e)})}var KG=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function VG(e){if(e.length!==32)throw Error("X25519 private key must be 32 bytes");let t=new Uint8Array([...KG,...e]);return crypto.subtle.importKey("pkcs8",t,{name:"X25519"},Fz,["deriveBits"])}function Wx(e){return typeof CryptoKey<"u"&&e instanceof CryptoKey}function WG(e){return e}class Gx{s;transcript=[];buf=new Uint8Array(0);constructor(e){this.s=e.getReader()}async readLine(){let e=[];while(!0){let t=this.buf.indexOf(10);if(t>=0)return e.push(this.buf.subarray(0,t)),this.transcript.push(this.buf.subarray(0,t+1)),this.buf=this.buf.subarray(t+1),QG(ra(e));if(this.buf.length>0)e.push(this.buf),this.transcript.push(this.buf);let r=await this.s.read();if(r.done)return this.buf=ra(e),null;this.buf=r.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:ra(this.transcript)}}}function QG(e){return e.forEach((t)=>{if(t<32||t>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode(e)}function ra(e){let t=e.reduce((n,o)=>n+o.length,0),r=new Uint8Array(t),i=0;for(let n of e)r.set(n,i),i+=n.length;return r}function Sc(e,...t){return e.pipeThrough(new TransformStream({start(r){for(let i of t)r.enqueue(i)}}))}function Cm(e){return new ReadableStream({start(t){t.enqueue(e),t.close()}})}async function Qx(e){if(!(e instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response(e).arrayBuffer())}async function Jz(e){if(!(e instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response(e).text()}async function Kz(e,t){let r=e.getReader(),i=[],n=0;while(n<t){let{done:c,value:l}=await r.read();if(c)throw Error("stream ended before reading "+t.toString()+" bytes");i.push(l),n+=l.length}r.releaseLock();let o=ra(i),s=o.subarray(0,t),a=Sc(e,o.subarray(t));return{data:s,rest:a}}class ui{args;body;constructor(e,t){this.args=e,this.body=t}}async function YG(e){let t=await e.readLine();if(t===null)throw Error("invalid stanza");let r=t.split(" ");if(r.length<2||r.shift()!=="->")return{next:t};for(let o of r)if(o.length===0)throw Error("invalid stanza");let i=[];for(;;){let o=await e.readLine();if(o===null)throw Error("invalid stanza");let s=yr.decode(o);if(s.length>48)throw Error("invalid stanza");if(i.push(s),s.length<48)break}let n=ra(i);return{s:new ui(r,n)}}async function Vz(e){let t=new Gx(e),r=await t.readLine();if(r!=="age-encryption.org/v1")throw Error("invalid version "+(r??"line"));let i=[];for(;;){let{s:n,next:o}=await YG(t);if(n!==void 0){i.push(n);continue}if(!o.startsWith("--- "))throw Error("invalid header");let s=yr.decode(o.slice(4)),{rest:a,transcript:c}=t.close(),l=c.slice(0,c.length-1-o.length+3);return{stanzas:i,headerNoMAC:l,MAC:s,headerSize:c.length,rest:Sc(e,a)}}}function Yx(e){let t=[];t.push(`age-encryption.org/v1
 `);for(let r of e){t.push("-> "+r.args.join(" ")+`
 `);for(let i=0;i<r.body.length;i+=48){let n=i+48;if(n>r.body.length)n=r.body.length;t.push(yr.encode(r.body.subarray(i,n))+`
 `)}if(r.body.length%48===0)t.push(`

package/dist/index.js CHANGED Viewed

@@ -743,7 +743,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),o}async function X9(e,t){let r=await Et(e),i=r.users.find((n)=>n.handle===t);if(!i)throw Error(`Unknown pilot user: ${t}`);return{pilot:r.pilot,user:i}}async function e7(e){let t=await qve(Ri(Zve(),"brains-ops-watchdog-smoke-")),r=Ri(t,"id_ed25519"),i=Ri(t,"known_hosts");try{let n=encodeURIComponent(`brain=${e.target.pilot.contentRepoPrefix}${e.target.user.handle}`),o=await e.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${n}`,{headers:{Authorization:`Bearer ${e.environment.HCLOUD_TOKEN}`}});if(!o.ok)throw Error(`Hetzner server lookup failed with ${o.status}`);let s=Mve.parse(await o.json());if(s.servers.length!==1)throw Error(`Expected one smoke server, found ${s.servers.length}`);let a=s.servers[0];if(a?.status!=="running")throw Error("Smoke server is not running");await vu(r,Kve(e.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await Uve(r,384);let c=await e.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",a.public_net.ipv4.ip]);if(c.exitCode!==0||!c.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await vu(i,c.stdout,{mode:384}),{temporaryRoot:t,sshKeyPath:r,knownHostsPath:i,serverIp:a.public_net.ipv4.ip,commandRunner:e.commandRunner}}catch(n){throw await n$(t,{recursive:!0,force:!0}),n}}async function r$(e,t,r){return e.commandRunner("ssh",[...t7(e),`root@${e.serverIp}`,"bash","-s","--",t,r],{stdin:i$()})}async function Fve(e,t,r){return e.commandRunner("scp",[...t7(e),"-r",`root@${e.serverIp}:${t}/.`,r])}function t7(e){return["-i",e.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${e.knownHostsPath}`]}async function Hve(e){try{return await jve(e),!0}catch{return!1}}async function OS(e,t,r){await Promise.all([vu(Ri(e,`${t}.stdout.log`),r.stdout),vu(Ri(e,`${t}.stderr.log`),r.stderr)])}function Kve(e){return`${e.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var G9,Mve;var PS=x(async()=>{Ae();K9();yn();Bp();await H9();G9=u.object({HCLOUD_TOKEN:u.string().min(1),KAMAL_SSH_PRIVATE_KEY:u.string().min(1)}),Mve=u.object({servers:u.array(u.object({status:u.string(),public_net:u.object({ipv4:u.object({ip:u.string().min(1)})})}))})});import{access as VL,chmod as ME,mkdir as qh,readFile as GL,writeFile as WL}from"fs/promises";import{dirname as YX,join as qc}from"path";import{fileURLToPath as XX}from"url";var Mp={name:"@rizom/ops",version:"0.2.0-alpha.650",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Ls();Uc();var eee=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],FE=new Set([".kamal/hooks/pre-deploy"]),tee=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),ree=XX(new URL("../templates/rover-pilot/",import.meta.url)),nee=[`service: rover
+`}var G9,Mve;var PS=x(async()=>{Ae();K9();yn();Bp();await H9();G9=u.object({HCLOUD_TOKEN:u.string().min(1),KAMAL_SSH_PRIVATE_KEY:u.string().min(1)}),Mve=u.object({servers:u.array(u.object({status:u.string(),public_net:u.object({ipv4:u.object({ip:u.string().min(1)})})}))})});import{access as VL,chmod as ME,mkdir as qh,readFile as GL,writeFile as WL}from"fs/promises";import{dirname as YX,join as qc}from"path";import{fileURLToPath as XX}from"url";var Mp={name:"@rizom/ops",version:"0.2.0-alpha.652",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"@libsql/client":"^0.17.4","age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/contracts":"workspace:*","@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/job-queue":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.4.0",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};Ls();Uc();var eee=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/offboard.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/create-predeploy-backup.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/verify-runtime-image.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],FE=new Set([".kamal/hooks/pre-deploy"]),tee=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),ree=XX(new URL("../templates/rover-pilot/",import.meta.url)),nee=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 servers:

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.650",
+  "version": "0.2.0-alpha.652",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",