@rizom/ops 0.2.0-alpha.68 → 0.2.0-alpha.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -54,7 +54,7 @@ return `+str.trim()+`;
|
|
|
54
54
|
`).join(`
|
|
55
55
|
`+Y),$.push(Q+"m+"+V9.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=$S()+q+" "+$[0]}function $S(){if(ID.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function qS(...$){return process.stderr.write(U9.formatWithOptions(ID.inspectOpts,...$)+`
|
|
56
56
|
`)}function JS($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function GS(){return process.env.DEBUG}function QS($){$.inspectOpts={};let q=Object.keys(ID.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=ID.inspectOpts[q[J]]}V9.exports=MV()(ID);var{formatters:TD}=V9.exports;TD.o=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts).split(`
|
|
57
|
-
`).map((q)=>q.trim()).join(" ")};TD.O=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts)}});var PD=X$((Pm,DV)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)DV.exports=wD();else DV.exports=CD()});var EK=X$((Ju,IK)=>{var w9=Object.prototype.hasOwnProperty,TK=Object.prototype.toString,wK=Object.defineProperty,jK=Object.getOwnPropertyDescriptor,AK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return TK.call(q)==="[object Array]"},ZK=function(q){if(!q||TK.call(q)!=="[object Object]")return!1;var J=w9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&w9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||w9.call(q,Q)},BK=function(q,J){if(wK&&J.name==="__proto__")wK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},SK=function(q,J){if(J==="__proto__"){if(!w9.call(q,J))return;else if(jK)return jK(q,J).value}return q[J]};IK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=SK(U,J),Q=SK(q,J),U!==Q){if(M&&Q&&(ZK(Q)||(Y=AK(Q)))){if(Y)Y=!1,X=G&&AK(G)?G:[];else X=G&&ZK(G)?G:{};BK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")BK(U,{name:J,newValue:Q})}}return U}});import{parseArgs as JO}from"util";var GO={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function x9($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function h9($,q){let J=$[q];return typeof J==="string"?J:void 0}function OW($){let{values:q,positionals:J}=JO({args:$,options:GO,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:x9(q,"help"),version:x9(q,"version"),dryRun:x9(q,"dry-run"),pushTo:h9(q,"push-to"),cohort:h9(q,"cohort"),anchorId:h9(q,"anchor-id")}}}var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.68",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as xN,mkdirSync as hN,readFileSync as SU,writeFileSync as TU}from"fs";import{dirname as uN,join as wM}from"path";function u9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function x$($,q,J=""){let G=u9($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Nq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function N8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function iQ($,q){x$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function dQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function w8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function f0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var YO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function XO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function UO($){for(let q=0;q<$.length;q++)$[q]=XO($[q]);return $}var p9=YO?($)=>$:UO,wW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),VO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function cQ($){if(x$($),wW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=VO[$[J]];return q}var Oq={_0:48,_9:57,A:65,F:70,a:97,f:102};function NW($){if($>=Oq._0&&$<=Oq._9)return $-Oq._0;if($>=Oq.A&&$<=Oq.F)return $-(Oq.A-10);if($>=Oq.a&&$<=Oq.f)return $-(Oq.a-10);return}function CG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(wW)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=NW($.charCodeAt(Y)),U=NW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function WO($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function l9($,q=""){if(typeof $==="string")return WO($);return x$($,void 0,q)}function r9(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];x$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function nQ($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function i9($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function wq($=32){C$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var d9=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class c9{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Nq($),x$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),z0(G)}update($){return N8(this),this.iHash.update($),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var jq=(()=>{let $=(q,J,G)=>new c9(q,J).update(G).digest();return $.create=(q,J)=>new c9(q,J),$})();function PG($,q,J){if(Nq($),J===void 0)J=new Uint8Array($.outputLen);return jq($,J,q)}var n9=Uint8Array.of(0),jW=Uint8Array.of();function o9($,q,J,G=32){Nq($),C$(G,"length"),x$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=jW;else x$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=jq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)n9[0]=M+1,V.update(M===0?jW:W).update(J).update(n9).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),z0(W,n9),X.slice(0,G)}var LG=($,q,J,G,Q)=>o9($,PG($,q,J),G,Q);function AW($,q,J){return $&q^~$&J}function ZW($,q,J){return $&q^$&J^q&J}class oQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=w8(this.buffer)}update($){N8(this),x$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=w8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=w8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Aq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),h$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),u$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),BW=BigInt(32);function MO($,q=!1){if(q)return{h:Number($&aQ),l:Number($>>BW&aQ)};return{h:Number($>>BW&aQ)|0,l:Number($&aQ)|0}}function SW($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=MO($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var a9=($,q,J)=>$>>>J,s9=($,q,J)=>$<<32-J|q>>>J,IJ=($,q,J)=>$>>>J|q<<32-J,EJ=($,q,J)=>$<<32-J|q>>>J,FG=($,q,J)=>$<<64-J|q>>>J-32,gG=($,q,J)=>$>>>J-32|q<<64-J;function $q($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var TW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),IW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,EW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),CW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,PW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),LW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var RO=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),pq=new Uint32Array(64);class t9 extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)pq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=pq[M-15],D=pq[M-2],R=f0(z,7)^f0(z,18)^z>>>3,N=f0(D,17)^f0(D,19)^D>>>10;pq[M]=N+pq[M-7]+R+pq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=f0(X,6)^f0(X,11)^f0(X,25),D=W+z+AW(X,U,V)+RO[M]+pq[M]|0,N=(f0(J,2)^f0(J,13)^f0(J,22))+ZW(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){z0(pq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),z0(this.buffer)}}class FW extends t9{A=Aq[0]|0;B=Aq[1]|0;C=Aq[2]|0;D=Aq[3]|0;E=Aq[4]|0;F=Aq[5]|0;G=Aq[6]|0;H=Aq[7]|0;constructor(){super(32)}}class DO extends t9{A=Zq[0]|0;B=Zq[1]|0;C=Zq[2]|0;D=Zq[3]|0;E=Zq[4]|0;F=Zq[5]|0;G=Zq[6]|0;H=Zq[7]|0;constructor(){super(28)}}var gW=(()=>SW(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),KO=(()=>gW[0])(),HO=(()=>gW[1])(),lq=new Uint32Array(80),rq=new Uint32Array(80);class _G extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)lq[T]=$.getUint32(q),rq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=lq[T-15]|0,m=rq[T-15]|0,u=IJ(v,m,1)^IJ(v,m,8)^a9(v,m,7),F=EJ(v,m,1)^EJ(v,m,8)^s9(v,m,7),x=lq[T-2]|0,y=rq[T-2]|0,k=IJ(x,y,19)^FG(x,y,61)^a9(x,y,6),l=EJ(x,y,19)^gG(x,y,61)^s9(x,y,6),_=EW(F,l,rq[T-7],rq[T-16]),E=CW(_,u,k,lq[T-7],lq[T-16]);lq[T]=E|0,rq[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=IJ(M,z,14)^IJ(M,z,18)^FG(M,z,41),m=EJ(M,z,14)^EJ(M,z,18)^gG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=PW(Z,m,F,HO[T],rq[T]),y=LW(x,j,v,u,KO[T],lq[T]),k=x|0,l=IJ(J,G,28)^FG(J,G,34)^FG(J,G,39),_=EJ(J,G,28)^gG(J,G,34)^gG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=$q(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=TW(k,_,I);J=IW(A,y,l,E),G=A|0}({h:J,l:G}=$q(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=$q(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=$q(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=$q(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=$q(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=$q(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=$q(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=$q(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){z0(lq,rq)}destroy(){this.destroyed=!0,z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class _W extends _G{Ah=u$[0]|0;Al=u$[1]|0;Bh=u$[2]|0;Bl=u$[3]|0;Ch=u$[4]|0;Cl=u$[5]|0;Dh=u$[6]|0;Dl=u$[7]|0;Eh=u$[8]|0;El=u$[9]|0;Fh=u$[10]|0;Fl=u$[11]|0;Gh=u$[12]|0;Gl=u$[13]|0;Hh=u$[14]|0;Hl=u$[15]|0;constructor(){super(64)}}class OO extends _G{Ah=h$[0]|0;Al=h$[1]|0;Bh=h$[2]|0;Bl=h$[3]|0;Ch=h$[4]|0;Cl=h$[5]|0;Dh=h$[6]|0;Dl=h$[7]|0;Eh=h$[8]|0;El=h$[9]|0;Fh=h$[10]|0;Fl=h$[11]|0;Gh=h$[12]|0;Gl=h$[13]|0;Hh=h$[14]|0;Hl=h$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),t$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class NO extends _G{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class wO extends _G{Ah=t$[0]|0;Al=t$[1]|0;Bh=t$[2]|0;Bl=t$[3]|0;Ch=t$[4]|0;Cl=t$[5]|0;Dh=t$[6]|0;Dl=t$[7]|0;Eh=t$[8]|0;El=t$[9]|0;Fh=t$[10]|0;Fl=t$[11]|0;Gh=t$[12]|0;Gl=t$[13]|0;Hh=t$[14]|0;Hl=t$[15]|0;constructor(){super(32)}}var p$=i9(()=>new FW,d9(1));var sQ=i9(()=>new _W,d9(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function JY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function qX($){if(!JY($))throw Error("Uint8Array expected")}function mW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function fW($){if(typeof $!=="function")throw Error("function expected");return!0}function iq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function bG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function eQ($){if(!Array.isArray($))throw Error("array expected")}function $Y($,q){if(!mW(!0,q))throw Error(`${$}: array of strings expected`)}function JX($,q){if(!mW(!1,q))throw Error(`${$}: array of numbers expected`)}function I0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function E0($){let q=typeof $==="string"?$.split(""):$,J=q.length;$Y("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return eQ(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return eQ(Q),Q.map((Y)=>{iq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function C0($=""){return iq("join",$),{encode:(q)=>{return $Y("join.decode",q),q.join($)},decode:(q)=>{return iq("join.decode",q),q.split($)}}}function GY($,q="="){return bG($),iq("padding",q),{encode(J){$Y("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){$Y("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function xW($){return fW($),{encode:(q)=>q,decode:(q)=>$(q)}}function vW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(eQ($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(bG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,D=z+M;if(!Number.isSafeInteger(D)||z/q!==U||D-M!==z)throw Error("convertRadix: carry overflow");let R=D/J;U=D%J;let N=Math.floor(R);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var hW=($,q)=>q===0?$:hW(q,$%q),qY=($,q)=>$+(q-hW($,q)),tQ=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function e9($,q,J,G){if(eQ($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(qY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${qY(q,J)}`);let Q=0,Y=0,X=tQ[q],U=tQ[J]-1,V=[];for(let W of $){if(bG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=tQ[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function jO($){bG($);let q=256;return{encode:(J)=>{if(!JY(J))throw Error("radix.encode input should be Uint8Array");return vW(Array.from(J),q,$)},decode:(J)=>{return JX("radix.decode",J),Uint8Array.from(vW(J,$,q))}}}function g0($,q=!1){if(bG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(qY(8,$)>32||qY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!JY(J))throw Error("radix2.encode input should be Uint8Array");return e9(Array.from(J),8,$,!q)},decode:(J)=>{return JX("radix2.decode",J),Uint8Array.from(e9(J,$,8,q))}}}function bW($){return fW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var JL=I0(g0(4),E0("0123456789ABCDEF"),C0("")),GL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),GY(5),C0("")),QL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),C0("")),YL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),GY(5),C0("")),XL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),C0("")),UL=I0(g0(5),E0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),C0(""),xW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),uW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),pW=($,q)=>{iq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},GX=uW?{encode($){return qX($),$.toBase64()},decode($){return pW($,!1)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),GY(6),C0("")),x0=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),C0("")),VL=uW?{encode($){return qX($),$.toBase64({alphabet:"base64url"})},decode($){return pW($,!0)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),GY(6),C0("")),WL=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),C0("")),QX=($)=>I0(jO(58),E0($),C0("")),ML=QX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),zL=QX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),RL=QX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var $X=I0(E0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),C0("")),kW=[996825010,642813549,513874426,1027748829,705979059];function vG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<kW.length;G++)if((q>>G&1)===1)J^=kW[G];return J}function yW($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=vG(Q)^X>>5}Q=vG(Q);for(let Y=0;Y<G;Y++)Q=vG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=vG(Q)^Y;for(let Y=0;Y<6;Y++)Q=vG(Q);return Q^=J,$X.encode(e9([Q%tQ[30]],30,5,!1))}function lW($){let q=$==="bech32"?1:734539939,J=g0(5),G=J.decode,Q=J.encode,Y=bW(G);function X(z,D,R=90){if(iq("bech32.encode prefix",z),JY(D))D=Array.from(D);JX("bech32.encode",D);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+D.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),Z=yW(j,D,q);return`${j}1${$X.encode(D)}${Z}`}function U(z,D=90){iq("bech32.decode input",z);let R=z.length;if(R<8||D!==!1&&R>D)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${D})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),Z=N.slice(w+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=$X.decode(Z).slice(0,-6),v=yW(j,T,q);if(!Z.endsWith(v))throw Error(`Invalid checksum in ${z}: expected "${v}"`);return{prefix:j,words:T}}let V=bW(U);function W(z){let{prefix:D,words:R}=U(z,!1);return{prefix:D,words:R,bytes:G(R)}}function M(z,D){return X(z,Q(D))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var h0=lW("bech32"),DL=lW("bech32m");var AO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),ZO={encode($){return qX($),$.toHex()},decode($){return iq("hex",$),Uint8Array.fromHex($)}},KL=AO?ZO:I0(g0(4),E0("0123456789abcdef"),C0(""),xW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function SO($,q,J,G){Nq($);let Q=nQ({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(C$(Y,"c"),C$(X,"dkLen"),C$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=l9(q,"password"),W=l9(J,"salt"),M=new Uint8Array(X),z=jq.create($,V),D=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:D}}function TO($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return z0(Q),J}function YX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=SO($,q,J,G),W,M=new Uint8Array(4),z=w8(M),D=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(D),w.set(D.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(D).digestInto(D);for(let Z=0;Z<w.length;Z++)w[Z]^=D[Z]}}return TO(U,V,X,W,D)}function rW($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],D=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],v=$[q++]^J[G++],m=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let r=0;r<8;r+=2)l^=N$(F+L|0,7),A^=N$(l+F|0,9),L^=N$(A+l|0,13),F^=N$(L+A|0,18),S^=N$(_+x|0,7),b^=N$(S+_|0,9),x^=N$(b+S|0,13),_^=N$(x+b|0,18),O^=N$(P+E|0,7),y^=N$(O+P|0,9),E^=N$(y+O|0,13),P^=N$(E+y|0,18),k^=N$(f+g|0,7),I^=N$(k+f|0,9),g^=N$(I+k|0,13),f^=N$(g+I|0,18),x^=N$(F+k|0,7),y^=N$(x+F|0,9),k^=N$(y+x|0,13),F^=N$(k+y|0,18),E^=N$(_+l|0,7),I^=N$(E+_|0,9),l^=N$(I+E|0,13),_^=N$(l+I|0,18),g^=N$(P+S|0,7),A^=N$(g+P|0,9),S^=N$(A+g|0,13),P^=N$(S+A|0,18),L^=N$(f+O|0,7),b^=N$(L+f|0,9),O^=N$(b+L|0,13),f^=N$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+y|0,Q[Y++]=W+k|0,Q[Y++]=M+l|0,Q[Y++]=z+_|0,Q[Y++]=D+E|0,Q[Y++]=R+I|0,Q[Y++]=N+A|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=Z+g|0,Q[Y++]=T+L|0,Q[Y++]=v+b|0,Q[Y++]=m+O|0,Q[Y++]=u+f|0}function XX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(rW(J,X,$,q,J,Y),U>0)X+=16;rW(J,Y,$,q+=16,J,X)}}function IO($,q,J){let G=nQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(C$(Q,"N"),C$(Y,"r"),C$(X,"p"),C$(U,"dkLen"),C$(V,"asyncTick"),C$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,D=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let w=YX(p$,$,q,{c:1,dkLen:z*X}),j=dQ(w),Z=dQ(new Uint8Array(z*Q)),T=dQ(new Uint8Array(z)),v=()=>{};if(M){let m=2*Q*X,u=Math.max(Math.floor(m/1e4),1),F=0;v=()=>{if(F++,M&&(!(F%u)||F===m))M(F/m)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:D,V:Z,B32:j,B:w,tmp:T,blockMixCb:v,asyncTick:V}}function EO($,q,J,G,Q){let Y=YX(p$,$,J,{c:1,dkLen:q});return z0(J,G,Q),Y}function iW($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:D}=IO($,q,J);p9(W);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)V[w]=W[N+w];for(let w=0,j=0;w<G-1;w++)XX(V,j,V,j+=U,Q),D();XX(V,(G-1)*U,W,N,Q),D();for(let w=0;w<G;w++){let j=(W[N+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)z[Z]=W[N+Z]^V[j*U+Z];XX(z,0,W,N,Q),D()}}return p9(W),EO($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function CO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function QY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function j8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function _$($,q,J=""){let G=CO($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function UX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function dW($,q,J=!1){_$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!A8($))throw Error("invalid output, must be aligned")}function qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function u0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function PO($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var CJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),LO=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var FO=($)=>{for(let q=0;q<$.length;q++)$[q]=LO($[q]);return $},Bq=CJ?($)=>$:FO;function cW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function nW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function oW($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var aW=($,q)=>{function J(G,...Q){if(_$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];_$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)_$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");_$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,_$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(_$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function kG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(_$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!A8(q))throw Error("invalid output, must be aligned");return q}function sW($,q,J){j8($),j8(q),QY(J);let G=new Uint8Array(16),Q=PO(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function A8($){return $.byteOffset%4===0}function Z8($){return Uint8Array.from(_$($))}var eW=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),gO=(()=>Bq(qq(eW("expand 16-byte k"))))(),_O=(()=>Bq(qq(eW("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var yG=64,vO=16,VX=(()=>4294967295)(),tW=Uint32Array.of();function bO($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(yG),M=qq(W),z=CJ&&A8(Q)&&A8(Y),D=z?qq(Q):tW,R=z?qq(Y):tW;if(!CJ){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Bq(M),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);if(z&&w===yG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<vO;Z++)T=j+Z,R[T]=D[T]^M[Z];N+=yG;continue}for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}}function $7($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=cW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return j8(Q),j8(X),QY(Y),QY(J),(U,V,W,M,z=0)=>{_$(U,void 0,"key"),_$(V,void 0,"nonce"),_$(W,void 0,"data");let D=W.length;if(M=kG(D,M,!1),j8(z),z<0||z>=VX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=Z8(U)),j=_O;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=gO,R.push(w);else throw _$(U,32,"arx key"),Error("invalid key size");if(!CJ||!A8(V))R.push(V=Z8(V));let Z=qq(w);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let m=V.subarray(0,16);if(CJ)G(j,Z,qq(m),Z);else{let u=Bq(Uint32Array.from(j));G(u,Z,qq(m),Z),u0(u),Bq(Z)}V=V.subarray(16)}else if(!CJ)Bq(Z);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let m=new Uint8Array(12);m.set(V,Y?0:12-V.length),V=m,R.push(V)}let v=Bq(qq(V));try{return bO($,j,Z,v,W,M,z,X),M}finally{u0(...R)}}}function l$($,q){return $[q++]&255|($[q++]&255)<<8}class q7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=Z8(_$($,32,"key"));let q=l$($,0),J=l$($,2),G=l$($,4),Q=l$($,6),Y=l$($,8),X=l$($,10),U=l$($,12),V=l$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=l$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],D=Y[6],R=Y[7],N=Y[8],w=Y[9],j=l$($,q+0),Z=l$($,q+2),T=l$($,q+4),v=l$($,q+6),m=l$($,q+8),u=l$($,q+10),F=l$($,q+12),x=l$($,q+14),y=Q[0]+(j&8191),k=Q[1]+((j>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),_=Q[3]+((T>>>7|v<<9)&8191),E=Q[4]+((v>>>4|m<<12)&8191),I=Q[5]+(m>>>1&8191),A=Q[6]+((m>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+y*X+k*(5*w)+l*(5*N)+_*(5*R)+E*(5*D);L=b>>>13,b&=8191,b+=I*(5*z)+A*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+y*U+k*X+l*(5*w)+_*(5*N)+E*(5*R);L=O>>>13,O&=8191,O+=I*(5*D)+A*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let f=L+y*V+k*U+l*X+_*(5*w)+E*(5*N);L=f>>>13,f&=8191,f+=I*(5*R)+A*(5*D)+S*(5*z)+P*(5*M)+g*(5*W),L+=f>>>13,f&=8191;let r=L+y*W+k*V+l*U+_*X+E*(5*w);L=r>>>13,r&=8191,r+=I*(5*N)+A*(5*R)+S*(5*D)+P*(5*z)+g*(5*M),L+=r>>>13,r&=8191;let B=L+y*M+k*W+l*V+_*U+E*X;L=B>>>13,B&=8191,B+=I*(5*w)+A*(5*N)+S*(5*R)+P*(5*D)+g*(5*z),L+=B>>>13,B&=8191;let o=L+y*z+k*M+l*W+_*V+E*U;L=o>>>13,o&=8191,o+=I*X+A*(5*w)+S*(5*N)+P*(5*R)+g*(5*D),L+=o>>>13,o&=8191;let q$=L+y*D+k*z+l*M+_*W+E*V;L=q$>>>13,q$&=8191,q$+=I*U+A*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+y*R+k*D+l*z+_*M+E*W;L=Y$>>>13,Y$&=8191,Y$+=I*V+A*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+y*N+k*R+l*D+_*z+E*M;L=G$>>>13,G$&=8191,G$+=I*W+A*V+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let s=L+y*w+k*N+l*R+_*D+E*z;L=s>>>13,s&=8191,s+=I*M+A*W+S*V+P*U+g*X,L+=s>>>13,s&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=f,Q[3]=r,Q[4]=B,Q[5]=o,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=s}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;u0(J)}update($){UX(this),_$($),$=Z8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,u0(this.h,this.r,this.buffer,this.pad)}digestInto($){UX(this),dW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var J7=oW(32,($)=>new q7($));function kO($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],D=q[2],R=q[3],N=q[4],w=q[5],j=q[6],Z=q[7],T=Q,v=J[0],m=J[1],u=J[2],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),A=A+L|0,l=w$(l^A,12),F=F+l|0,L=w$(L^F,8),A=A+L|0,l=w$(l^A,7),x=x+_|0,b=w$(b^x,16),S=S+b|0,_=w$(_^S,12),x=x+_|0,b=w$(b^x,8),S=S+b|0,_=w$(_^S,7),y=y+E|0,O=w$(O^y,16),P=P+O|0,E=w$(E^P,12),y=y+E|0,O=w$(O^y,8),P=P+O|0,E=w$(E^P,7),k=k+I|0,f=w$(f^k,16),g=g+f|0,I=w$(I^g,12),k=k+I|0,f=w$(f^k,8),g=g+f|0,I=w$(I^g,7),F=F+_|0,f=w$(f^F,16),P=P+f|0,_=w$(_^P,12),F=F+_|0,f=w$(f^F,8),P=P+f|0,_=w$(_^P,7),x=x+E|0,L=w$(L^x,16),g=g+L|0,E=w$(E^g,12),x=x+E|0,L=w$(L^x,8),g=g+L|0,E=w$(E^g,7),y=y+I|0,b=w$(b^y,16),A=A+b|0,I=w$(I^A,12),y=y+I|0,b=w$(b^y,8),A=A+b|0,I=w$(I^A,7),k=k+l|0,O=w$(O^k,16),S=S+O|0,l=w$(l^S,12),k=k+l|0,O=w$(O^k,8),S=S+O|0,l=w$(l^S,7);let r=0;G[r++]=X+F|0,G[r++]=U+x|0,G[r++]=V+y|0,G[r++]=W+k|0,G[r++]=M+l|0,G[r++]=z+_|0,G[r++]=D+E|0,G[r++]=R+I|0,G[r++]=N+A|0,G[r++]=w+S|0,G[r++]=j+P|0,G[r++]=Z+g|0,G[r++]=T+L|0,G[r++]=v+b|0,G[r++]=m+O|0,G[r++]=u+f|0}var yO=$7(kO,{counterRight:!1,counterLength:4,allowShortKeys:!1});var mO=new Uint8Array(16),G7=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(mO.subarray(J))},fO=new Uint8Array(32);function Q7($,q,J,G,Q){if(Q!==void 0)_$(Q,void 0,"AAD");let Y=$(q,J,fO),X=sW(G.length,Q?Q.length:0,!0),U=J7.create(Y);if(Q)G7(U,Q);G7(U,G),U.update(X);let V=U.digest();return u0(Y,X),V}var xO=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=kG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=Q7($,q,J,V,G);return X.set(W,U),u0(W),X},decrypt(Y,X){X=kG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=Q7($,q,J,U,G);if(!nW(V,W))throw u0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),u0(W),X}}},dq=aW({blockSize:64,nonceLength:12,tagLength:16},xO(yO));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function B8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=B8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function _0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Tq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function j0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function UY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function p0($,q){return $<<32-q|$>>>q}var hO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function uO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pO($){for(let q=0;q<$.length;q++)$[q]=uO($[q]);return $}var WX=hO?($)=>$:pO,X7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),lO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function PJ($){if(Q$($),X7)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=lO[$[J]];return q}var Sq={_0:48,_9:57,A:65,F:70,a:97,f:102};function Y7($){if($>=Sq._0&&$<=Sq._9)return $-Sq._0;if($>=Sq.A&&$<=Sq.F)return $-(Sq.A-10);if($>=Sq.a&&$<=Sq.f)return $-(Sq.a-10);return}function LJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(X7)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=Y7($.charCodeAt(Y)),U=Y7($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function L$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function S8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function cq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var nq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zX=BigInt(0),MX=BigInt(1);function mG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function U7($){if(typeof $==="bigint"){if(!VY($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function fG($){let q=U7($).toString(16);return q.length&1?"0"+q:q}function V7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?zX:BigInt("0x"+$)}function oq($){return V7(PJ($))}function aq($){return V7(PJ(WY(Q$($)).reverse()))}function T8($,q){m$(q),$=U7($);let J=LJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function xG($,q){return T8($,q).reverse()}function WY($){return Uint8Array.from($)}function sq($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var VY=($)=>typeof $==="bigint"&&zX<=$;function rO($,q,J){return VY($)&&VY(q)&&VY(J)&&q<=$&&$<J}function hG($,q,J,G){if(!rO(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function RX($){let q;for(q=0;$>zX;$>>=MX,q+=1);return q}var uG=($)=>(MX<<BigInt($))-MX;function W7($,q,J){if(m$($,"hashLen"),m$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,L$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return L$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while(!(T=Z(N())))R();return z(),T}}function FJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function DX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D0=BigInt(0),e$=BigInt(1),gJ=BigInt(2),R7=BigInt(3),D7=BigInt(4),K7=BigInt(5),iO=BigInt(7),H7=BigInt(8),dO=BigInt(9),O7=BigInt(16);function R0($,q){let J=$%q;return J>=D0?J:q+J}function v0($,q,J){let G=$;while(q-- >D0)G*=G,G%=J;return G}function M7($,q){if($===D0)throw Error("invert: expected non-zero number");if(q<=D0)throw Error("invert: expected positive modulus, got "+q);let J=R0($,q),G=q,Q=D0,Y=e$,X=e$,U=D0;while(J!==D0){let W=G/J,M=G%J,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==e$)throw Error("invert: does not exist");return R0(Q,q)}function KX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function N7($,q){let J=($.ORDER+e$)/D7,G=$.pow(q,J);return KX($,G,q),G}function cO($,q){let J=($.ORDER-K7)/H7,G=$.mul(q,gJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,gJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return KX($,U,q),U}function nO($){let q=MY($),J=w7($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+iO)/O7;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),D=U.mul(W,Y),R=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(D,z,N);let w=U.eql(U.sqr(M),V),j=U.cmov(W,M,w);return KX(U,j,V),j}}function w7($){if($<R7)throw Error("sqrt is not defined for small field");let q=$-e$,J=0;while(q%gJ===D0)q/=gJ,J++;let G=gJ,Q=MY($);while(z7(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return N7;let Y=Q.pow(G,q),X=(q+e$)/gJ;return function(V,W){if(V.is0(W))return W;if(z7(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),D=V.pow(W,q),R=V.pow(W,X);while(!V.eql(D,V.ONE)){if(V.is0(D))return V.ZERO;let N=1,w=V.sqr(D);while(!V.eql(w,V.ONE))if(N++,w=V.sqr(w),N===M)throw Error("Cannot find square root");let j=e$<<BigInt(M-N-1),Z=V.pow(z,j);M=N,z=V.sqr(Z),D=V.mul(D,z),R=V.mul(R,Z)}return R}}function oO($){if($%D7===R7)return N7;if($%H7===K7)return cO;if($%O7===dO)return nO($);return w7($)}var aO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function HX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=aO.reduce((G,Q)=>{return G[Q]="function",G},q);return FJ($,J),$}function sO($,q,J){if(J<D0)throw Error("invalid exponent, negatives unsupported");if(J===D0)return $.ONE;if(J===e$)return q;let G=$.ONE,Q=q;while(J>D0){if(J&e$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=e$}return G}function pG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function z7($,q){let J=($.ORDER-e$)/gJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function tO($,q){if(q!==void 0)m$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class j7{ORDER;BITS;BYTES;isLE;ZERO=D0;ONE=e$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=D0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=tO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return D0<=$&&$<this.ORDER}is0($){return $===D0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&e$)===e$}neg($){return R0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R0($*$,this.ORDER)}add($,q){return R0($+q,this.ORDER)}sub($,q){return R0($-q,this.ORDER)}mul($,q){return R0($*q,this.ORDER)}pow($,q){return sO(this,$,q)}div($,q){return R0($*M7(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return M7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=oO(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?xG($,this.BYTES):T8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?aq($):oq($);if(X)U=R0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return pG(this,$)}cmov($,q,J){return J?q:$}}function MY($,q={}){return new j7($,q)}function A7($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function OX($){let q=A7($);return q+Math.ceil(q/2)}function Z7($,q,J=!1){Q$($);let G=$.length,Q=A7(q),Y=OX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?aq($):oq($),U=R0(X,q-e$)+e$;return J?xG(U,Q):T8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I8=BigInt(0),_J=BigInt(1);function lG($,q){let J=q.negate();return $?J:q}function AX($,q){let J=pG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function I7($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function NX($,q){I7($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=uG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function B7($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=_J;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var wX=new WeakMap,E7=new WeakMap;function jX($){return E7.get($)||1}function S7($){if($!==I8)throw Error("invalid wNAF")}class ZX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>I8){if(q&_J)J=J.add(G);G=G.double(),q>>=_J}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=NX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=NX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=B7(J,X,Y);if(J=U,W)Q=Q.add(lG(z,q[D]));else G=G.add(lG(M,q[V]))}return S7(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=NX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===I8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=B7(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return S7(J),G}getPrecomputes($,q,J){let G=wX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);wX.set(q,G)}}return G}cached($,q,J){let G=jX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=jX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){I7(q,this.bits),E7.set($,q),wX.delete($)}hasCache($){return jX($)!==1}}function C7($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>I8||G>I8){if(J&_J)Y=Y.add(Q);if(G&_J)X=X.add(Q);Q=Q.double(),J>>=_J,G>>=_J}return{p1:Y,p2:X}}function T7($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return HX(q),q}else return MY($,{isLE:J})}function P7($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>I8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=T7(q.p,J.Fp,G),Y=T7(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function zY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rG=BigInt(0),E8=BigInt(1),RY=BigInt(2);function eO($){return FJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function L7($){let q=eO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||cq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?RY**BigInt(254):RY**BigInt(447),N=U?BigInt(8)*RY**BigInt(251)-E8:BigInt(4)*RY**BigInt(445)-E8,w=R+N+E8,j=(A)=>R0(A,J),Z=T(z);function T(A){return xG(j(A),M)}function v(A){let S=WY(Q$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(aq(S))}function m(A){return aq(Q(WY(Q$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===rG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){hG("u",A,rG,J),hG("scalar",S,R,w);let P=S,g=A,L=E8,b=rG,O=A,f=E8,r=rG;for(let o=BigInt(W-1);o>=rG;o--){let q$=P>>o&E8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A=V(M))=>{return Q$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze({keygen:zY(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}class BX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(_0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),j0(G)}update($){return Tq(this),this.iHash.update($),this}digestInto($){Tq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var C8=($,q,J)=>new BX($,q).update(J).digest();C8.create=($,q)=>new BX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var F7=($,q)=>($+($>=0?q:-q)/_7)/q;function $6($,q,J){let[[G,Q],[Y,X]]=q,U=F7(X*$,J),V=F7(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Iq,D=M<Iq;if(z)W=-W;if(D)M=-M;let R=uG(Math.ceil(RX(J)/2))+P8;if(W<Iq||W>=R||M<Iq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:D,k2:M}}function TX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function SX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(mG(J.lowS,"lowS"),mG(J.prehash,"prehash"),J.format!==void 0)TX(J.format);return J}class g7 extends Error{constructor($=""){super($)}}var tq={Err:g7,_tlv:{encode:($,q)=>{let{Err:J}=tq;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=fG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?fG(Q.length/2|128):"";return fG($)+Y+Q+q},decode($,q){let{Err:J}=tq,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=tq;if($<Iq)throw new q("integer: negative integers are not allowed");let J=fG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=tq;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return oq($)}},toSig($){let{Err:q,_int:J,_tlv:G}=tq,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=tq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Iq=BigInt(0),P8=BigInt(1),_7=BigInt(2),DY=BigInt(3),q6=BigInt(4);function IX($,q={}){let J=P7("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;FJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=b7(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(E,I,A){let{x:S,y:P}=I.toAffine(),g=G.toBytes(S);if(mG(A,"isCompressed"),A){M();let L=!G.isOdd(P);return L$(v7(L),g)}else return L$(Uint8Array.of(4),g,G.toBytes(P))}function D(E){Q$(E,void 0,"Point");let{publicKey:I,publicKeyUncompressed:A}=W,S=E.length,P=E[0],g=E.subarray(1);if(S===I&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),O;try{O=G.sqrt(b)}catch(B){let o=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+o)}M();let f=G.isOdd(O);if((P&1)===1!==f)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${I} or uncompressed=${A}`)}let R=q.toBytes||z,N=q.fromBytes||D;function w(E){let I=G.sqr(E),A=G.mul(I,E);return G.add(G.add(A,G.mul(E,Y.a)),Y.b)}function j(E,I){let A=G.sqr(I),S=w(E);return G.eql(A,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(Y.a,DY),q6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function v(E,I,A=!1){if(!G.isValid(I)||A&&G.is0(I))throw Error(`bad point coordinate ${E}`);return I}function m(E){if(!(E instanceof k))throw Error("Weierstrass Point expected")}function u(E){if(!V||!V.basises)throw Error("no endo");return $6(E,V.basises,Q.ORDER)}let F=DX((E,I)=>{let{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=DX((E)=>{if(E.is0()){if(q.allowInfinityPoint&&!G.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:I,y:A}=E.toAffine();if(!G.isValid(I)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!j(I,A))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function y(E,I,A,S,P){return A=new k(G.mul(A.X,E),A.Y,A.Z),I=lG(S,I),A=lG(P,A),I.add(A)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(E,I,A){this.X=v("x",E),this.Y=v("y",I,!0),this.Z=v("z",A),Object.freeze(this)}static CURVE(){return Y}static fromAffine(E){let{x:I,y:A}=E||{};if(!E||!G.isValid(I)||!G.isValid(A))throw Error("invalid affine point");if(E instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(A))return k.ZERO;return new k(I,A,G.ONE)}static fromBytes(E){let I=k.fromAffine(N(Q$(E,void 0,"point")));return I.assertValidity(),I}static fromHex(E){return k.fromBytes(LJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,I=!0){if(_.createCache(this,E),!I)this.multiply(DY);return this}assertValidity(){x(this)}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.eql(G.mul(I,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:I}=Y,A=G.mul(I,DY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=G.mul(S,S),r=G.mul(P,P),B=G.mul(g,g),o=G.mul(S,P);return o=G.add(o,o),O=G.mul(S,g),O=G.add(O,O),L=G.mul(E,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(r,b),b=G.add(r,b),b=G.mul(L,b),L=G.mul(o,L),O=G.mul(A,O),B=G.mul(E,B),o=G.sub(f,B),o=G.mul(E,o),o=G.add(o,O),O=G.add(f,f),f=G.add(O,f),f=G.add(f,B),f=G.mul(f,o),b=G.add(b,f),B=G.mul(P,g),B=G.add(B,B),f=G.mul(B,o),L=G.sub(L,f),O=G.mul(B,r),O=G.add(O,O),O=G.add(O,O),new k(L,b,O)}add(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.ZERO,O=G.ZERO,f=G.ZERO,r=Y.a,B=G.mul(Y.b,DY),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.mul(S,L),G$=G.add(I,A),s=G.add(P,g);G$=G.mul(G$,s),s=G.add(o,q$),G$=G.sub(G$,s),s=G.add(I,S);let O$=G.add(P,L);return s=G.mul(s,O$),O$=G.add(o,Y$),s=G.sub(s,O$),O$=G.add(A,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),f=G.mul(r,s),b=G.mul(B,Y$),f=G.add(b,f),b=G.sub(q$,f),f=G.add(q$,f),O=G.mul(b,f),q$=G.add(o,o),q$=G.add(q$,o),Y$=G.mul(r,Y$),s=G.mul(B,s),q$=G.add(q$,Y$),Y$=G.sub(o,Y$),Y$=G.mul(r,Y$),s=G.add(s,Y$),o=G.mul(q$,s),O=G.add(O,o),o=G.mul(O$,s),b=G.mul(G$,b),b=G.sub(b,o),o=G.mul(G$,q$),f=G.mul(O$,f),f=G.add(f,o),new k(b,O,f)}subtract(E){return this.add(E.negate())}is0(){return this.equals(k.ZERO)}multiply(E){let{endo:I}=q;if(!Q.isValidNot0(E))throw Error("invalid scalar: out of range");let A,S,P=(g)=>_.cached(this,g,(L)=>AX(k,L));if(I){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(E),{p:f,f:r}=P(L),{p:B,f:o}=P(O);S=r.add(o),A=y(I.beta,f,B,g,b)}else{let{p:g,f:L}=P(E);A=g,S=L}return AX(k,[A,S])[0]}multiplyUnsafe(E){let{endo:I}=q,A=this;if(!Q.isValid(E))throw Error("invalid scalar: out of range");if(E===Iq||A.is0())return k.ZERO;if(E===P8)return A;if(_.hasCache(this))return this.multiply(E);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(E),{p1:b,p2:O}=C7(k,A,P,L);return y(I.beta,b,O,S,g)}else return _.unsafe(A,E)}toAffine(E){return F(this,E)}isTorsionFree(){let{isTorsionFree:E}=q;if(X===P8)return!0;if(E)return E(k,this);return _.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:E}=q;if(X===P8)return this;if(E)return E(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(E=!0){return mG(E,"isCompressed"),this.assertValidity(),R(k,this,E)}toHex(E=!0){return PJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,_=new ZX(k,q.endo?Math.ceil(l/2):l);return k.BASE.precompute(8),k}function v7($){return Uint8Array.of($?2:3)}function b7($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function J6($,q={}){let{Fn:J}=$,G=q.randomBytes||cq,Q=Object.assign(b7($.Fp,J),{seed:OX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R=G(Q.seed)){return Z7(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!B8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let Z=Q$(R,void 0,"key").length;return Z===w||Z===j}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=zY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function EX($,q,J={}){_0(q),FJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||cq,Q=J.hmac||((A,S)=>C8(q,A,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R}=J6($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*_7<Y.ORDER;function j(A){let S=U>>P8;return A>S}function Z(A,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function v(A,S){TX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(A,g)}class m{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=N.format){v(A,S);let P;if(S==="der"){let{r:O,s:f}=tq.toSig(Q$(A));return new m(O,f)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=R.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new m(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(LJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new m(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(L$(v7((g&1)===0),b)),f=X.inv(L),r=F(Q$(A,void 0,"msgHash")),B=X.create(-r*f),o=X.create(P*f),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(o));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(A=N.format){if(TX(A),A==="der")return LJ(tq.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(A==="recovered")return T(),L$(Uint8Array.of(this.assertRecovery()),g,L);return L$(g,L)}toHex(A){return PJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=oq(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=uG(V);function y(A){return hG("num < 2^"+V,A,Iq,x),X.toBytes(A)}function k(A,S){return Q$(A,void 0,"message"),S?Q$(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=SX(P,N);A=k(A,L);let O=F(A),f=X.fromBytes(S);if(!X.isValidNot0(f))throw Error("invalid private key");let r=[y(f),y(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;r.push(Q$(Y$,void 0,"extraEntropy"))}let B=L$(...r),o=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let s=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Iq)return;let T$=X.create(s*X.create(o+A$*f));if(T$===Iq)return;let y$=(O$.x===A$?0:2)|Number(O$.y&P8),M0=T$;if(g&&j(T$))M0=X.neg(T$),y$^=1;return new m(A$,M0,w?void 0:y$)}return{seed:B,k2sig:q$}}function _(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return W7(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function E(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=SX(g,N);if(P=Q$(P,void 0,"publicKey"),S=k(S,b),!B8(A)){let f=A instanceof m?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+f)}v(A,O);try{let f=m.fromBytes(A,O),r=$.fromBytes(P);if(L&&f.hasHighS())return!1;let{r:B,s:o}=f,q$=F(S),Y$=X.inv(o),G$=X.create(q$*Y$),s=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(r.multiplyUnsafe(s));if(O$.is0())return!1;return X.create(O$.x)===B}catch(f){return!1}}function I(A,S,P={}){let{prehash:g}=SX(P,N);return S=k(S,g),m.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R,Point:$,sign:_,verify:E,recoverPublicKey:I,Signature:m,hash:q})}function k7($,q,J){return $&q^~$&J}function y7($,q,J){return $&q^$&J^q&J}class KY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=UY(this.buffer)}update($){Tq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=UY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Tq(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,j0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=UY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),r$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var HY=BigInt(4294967295),m7=BigInt(32);function G6($,q=!1){if(q)return{h:Number($&HY),l:Number($>>m7&HY)};return{h:Number($>>m7&HY)|0,l:Number($&HY)|0}}function OY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=G6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var CX=($,q,J)=>$>>>J,PX=($,q,J)=>$<<32-J|q>>>J,vJ=($,q,J)=>$>>>J|q<<32-J,bJ=($,q,J)=>$<<32-J|q>>>J,iG=($,q,J)=>$<<64-J|q>>>J-32,dG=($,q,J)=>$>>>J-32|q<<64-J;var f7=($,q,J)=>$<<J|q>>>32-J,x7=($,q,J)=>q<<J|$>>>32-J,h7=($,q,J)=>q<<J-32|$>>>64-J,u7=($,q,J)=>$<<J-32|q>>>64-J;function Jq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var p7=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),l7=($,q,J,G)=>q+J+G+($/4294967296|0)|0,r7=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),i7=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,d7=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),c7=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var Y6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),eq=new Uint32Array(64);class LX extends KY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)eq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=eq[M-15],D=eq[M-2],R=p0(z,7)^p0(z,18)^z>>>3,N=p0(D,17)^p0(D,19)^D>>>10;eq[M]=N+eq[M-7]+R+eq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=p0(X,6)^p0(X,11)^p0(X,25),D=W+z+k7(X,U,V)+Y6[M]+eq[M]|0,N=(p0(J,2)^p0(J,13)^p0(J,22))+y7(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){j0(eq)}destroy(){this.set(0,0,0,0,0,0,0,0),j0(this.buffer)}}class n7 extends LX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class X6 extends LX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var o7=(()=>OY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),U6=(()=>o7[0])(),V6=(()=>o7[1])(),$J=new Uint32Array(80),qJ=new Uint32Array(80);class cG extends KY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)$J[T]=$.getUint32(q),qJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=$J[T-15]|0,m=qJ[T-15]|0,u=vJ(v,m,1)^vJ(v,m,8)^CX(v,m,7),F=bJ(v,m,1)^bJ(v,m,8)^PX(v,m,7),x=$J[T-2]|0,y=qJ[T-2]|0,k=vJ(x,y,19)^iG(x,y,61)^CX(x,y,6),l=bJ(x,y,19)^dG(x,y,61)^PX(x,y,6),_=r7(F,l,qJ[T-7],qJ[T-16]),E=i7(_,u,k,$J[T-7],$J[T-16]);$J[T]=E|0,qJ[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=vJ(M,z,14)^vJ(M,z,18)^iG(M,z,41),m=bJ(M,z,14)^bJ(M,z,18)^dG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=d7(Z,m,F,V6[T],qJ[T]),y=c7(x,j,v,u,U6[T],$J[T]),k=x|0,l=vJ(J,G,28)^iG(J,G,34)^iG(J,G,39),_=bJ(J,G,28)^dG(J,G,34)^dG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=Jq(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=p7(k,_,I);J=l7(A,y,l,E),G=A|0}({h:J,l:G}=Jq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Jq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Jq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Jq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Jq(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=Jq(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=Jq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=Jq(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){j0($J,qJ)}destroy(){j0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class W6 extends cG{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class a7 extends cG{Ah=r$[0]|0;Al=r$[1]|0;Bh=r$[2]|0;Bl=r$[3]|0;Ch=r$[4]|0;Cl=r$[5]|0;Dh=r$[6]|0;Dl=r$[7]|0;Eh=r$[8]|0;El=r$[9]|0;Fh=r$[10]|0;Fl=r$[11]|0;Gh=r$[12]|0;Gl=r$[13]|0;Hh=r$[14]|0;Hl=r$[15]|0;constructor(){super(48)}}var $0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),q0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class M6 extends cG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(28)}}class z6 extends cG{Ah=q0[0]|0;Al=q0[1]|0;Bh=q0[2]|0;Bl=q0[3]|0;Ch=q0[4]|0;Cl=q0[5]|0;Dh=q0[6]|0;Dl=q0[7]|0;Eh=q0[8]|0;El=q0[9]|0;Fh=q0[10]|0;Fl=q0[11]|0;Gh=q0[12]|0;Gl=q0[13]|0;Hh=q0[14]|0;Hl=q0[15]|0;constructor(){super(32)}}var NY=S8(()=>new n7,nq(1));var s7=S8(()=>new a7,nq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var R6=BigInt(1),t7=BigInt(2),D6=BigInt(3),K6=BigInt(5),H3=BigInt(8),e7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function H6($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=e7,U=$*$%Y*$%Y,V=v0(U,t7,Y)*U%Y,W=v0(V,R6,Y)*$%Y,M=v0(W,K6,Y)*W%Y,z=v0(M,q,Y)*M%Y,D=v0(z,J,Y)*z%Y,R=v0(D,G,Y)*D%Y,N=v0(R,Q,Y)*R%Y,w=v0(N,Q,Y)*R%Y,j=v0(w,q,Y)*M%Y;return{pow_p_5_8:v0(j,t7,Y)*$%Y,b2:U}}function O6($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var $5=(()=>{let $=e7;return L7({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=H6(q);return R0(v0(J,D6,$)*G,$)},adjustScalarBytes:O6})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var N6=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),w6=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var j6=IX(N6),FX=EX(j6,NY);var A6=IX(w6),q5=EX(A6,s7);function G5($,q,J){if(_0($),J===void 0)J=new Uint8Array($.outputLen);return C8($,J,q)}var gX=Uint8Array.of(0),J5=Uint8Array.of();function Q5($,q,J,G=32){_0($),m$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=J5;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=C8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)gX[0]=M+1,V.update(M===0?J5:W).update(J).update(gX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),j0(W,gX),X.slice(0,G)}var Z6=BigInt(0),nG=BigInt(1),B6=BigInt(2),S6=BigInt(7),T6=BigInt(256),I6=BigInt(113),U5=[],V5=[],W5=[];for(let $=0,q=nG,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],U5.push(2*(5*G+J)),V5.push(($+1)*($+2)/2%64);let Q=Z6;for(let Y=0;Y<7;Y++)if(q=(q<<nG^(q>>S6)*I6)%T6,q&B6)Q^=nG<<(nG<<BigInt(Y))-nG;W5.push(Q)}var M5=OY(W5,!0),E6=M5[0],C6=M5[1],Y5=($,q,J)=>J>32?h7($,q,J):f7($,q,J),X5=($,q,J)=>J>32?u7($,q,J):x7($,q,J);function P6($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=Y5(W,M,1)^J[U],D=X5(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=D}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=V5[X],V=Y5(Q,Y,U),W=X5(Q,Y,U),M=U5[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=E6[G],$[1]^=C6[G]}j0(J)}class wY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=XY(this.state)}clone(){return this._cloneInto()}keccak(){WX(this.state32),P6(this.state32,this.rounds),WX(this.state32),this.posOut=0,this.pos=0}update($){Tq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Tq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(YY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,j0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new wY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var z5=($,q,J,G={})=>S8(()=>new wY(q,$,J),G);var kJ=z5(6,136,32,nq(8));var R5=z5(6,72,64,nq(10));var D5=($,q,J,G={})=>S8((Q={})=>new wY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),K5=D5(31,168,16,nq(11)),Gq=D5(31,136,32,nq(12));function _X($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function O5($){return _X($),($&$-1)===0&&$!==0}function vX($,q){_X($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function N5($){return _X($),31-Math.clz32($)}function H5($){let q=$.length;if(q<2||!O5(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=N5(q);for(let G=0;G<q;G++){let Q=vX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var bX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=N5(J);if(!O5(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)H5(M);for(let z=0,D=1;z<V-X;z++){let R=Q?z+1+X:V-z,N=1<<R,w=N>>1,j=J>>R;for(let Z=0;Z<J;Z+=N)for(let T=0,v=D++;T<w;T++){let m=Y?Q?J-v:v:T*j,u=Z+T,F=Z+T+w,x=G[m],y=M[F],k=M[u];if(W){let l=$.mul(y,x);M[u]=$.add(k,l),M[F]=$.sub(k,l)}else if(Y)M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),x);else M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),x)}}if(!Q&&U)H5(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Qq=cq;function jY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function w5($){return Uint8Array.from($)}function yJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function AY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function v$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function kX($){return(1<<$)-1}var F3=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var j5=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,v=G)=>{let m=T%v|0;return(m>=0?m|0:v+m|0)|0},W=(T,v=G)=>{let m=V(T,v)|0;return(m>v>>1?m-v|0:m)|0};function M(){let T=q(J);for(let v=0;v<J;v++){let m=vX(v,X),u=BigInt(Y)**BigInt(m)%BigInt(G);T[v]=Number(u)|0}return T}let z=M(),D={add:(T,v)=>V((T|0)+(v|0))|0,sub:(T,v)=>V((T|0)-(v|0))|0,mul:(T,v)=>V((T|0)*(v|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=bX(D,{dit:!1,...R}),w=bX(D,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let v=0;v<T.length;v++)T[v]=V(Q*T[v]);return T}},bitsCoder:(T,v)=>{let m=kX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=(v.encode(F[y])&m)<<l,l+=T;for(;l>=8;l-=8,k>>=8)x[_++]=k&kX(l)}return x},decode:(F)=>{let x=q(J);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=F[y]<<l,l+=8;for(;l>=T;l-=T,k>>=T)x[_++]=v.decode(k&m)}return x}}}}},L6=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),v$(Y,G)}}},A5=L6(K5);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var J0=256,Pq=3329,F6=3303,g6=17,{mod:sG,nttZetas:_6,NTT:mJ,bitsCoder:v6}=j5({N:J0,Q:Pq,F:F6,ROOT_OF_UNITY:g6,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),yX={512:{N:J0,Q:Pq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:J0,Q:Pq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:J0,Q:Pq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},b6=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+Pq/2)/Pq,decode:(J)=>J*Pq+q>>>$}},oG=($)=>v6($,b6($));function fJ($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]+q[J])}function k6($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]-q[J])}function y6($,q,J,G,Q){let Y=sG(q*G*Q+$*J),X=sG($*G+q*J);return{c0:Y,c1:X}}function ZY($,q){for(let J=0;J<J0/2;J++){let G=_6[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=y6($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function Z5($){let q=new Uint16Array(J0);for(let J=0;J<J0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<J0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<Pq)q[J++]=Y;if(J<J0&&X<Pq)q[J++]=X}}return q}function aG($,q,J,G){let Q=$(G*J0/4,q,J),Y=new Uint16Array(J0),X=XY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let D=X[V];for(let R=0;R<32;R++)if(M+=D&1,D>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=sG(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var m6=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=oG(1),M=oG(V),z=oG(U),D=yJ("publicKey",AY(oG(12),q),32),R=AY(oG(12),q),N=yJ("ciphertext",AY(z,q),M),w=yJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let Z=new Uint8Array(33);Z.set(j),Z[32]=q;let T=Q(Z),[v,m]=w.decode(T),u=[],F=[];for(let k=0;k<q;k++)u.push(mJ.encode(aG(J,m,k,Y)));let x=G(v);for(let k=0;k<q;k++){let l=mJ.encode(aG(J,m,q+k,Y));for(let _=0;_<q;_++){let E=Z5(x.get(_,k));fJ(l,ZY(E,u[_]))}F.push(l)}x.clean();let y={publicKey:D.encode([F,v]),secretKey:R.encode(u)};return v$(v,m,u,F,Z,T),y},encrypt:(j,Z,T)=>{let[v,m]=D.decode(j),u=[];for(let _=0;_<q;_++)u.push(mJ.encode(aG(J,T,_,Y)));let F=G(m),x=new Uint16Array(J0),y=[];for(let _=0;_<q;_++){let E=aG(J,T,q+_,X),I=new Uint16Array(J0);for(let A=0;A<q;A++){let S=Z5(F.get(_,A));fJ(I,ZY(S,u[A]))}fJ(E,mJ.decode(I)),y.push(E),fJ(x,ZY(v[_],u[_])),v$(I)}F.clean();let k=aG(J,T,2*q,X);fJ(k,mJ.decode(x));let l=W.decode(Z);return fJ(l,k),v$(v,u,x,k),N.encode([y,l])},decrypt:(j,Z)=>{let[T,v]=N.decode(j),m=R.decode(Z),u=new Uint16Array(J0);for(let F=0;F<q;F++)fJ(u,ZY(m[F],mJ.encode(T[F])));return k6(v,mJ.decode(u)),v$(u,m,T),W.encode(v)}}};function mX($){let q=m6($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=yJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Qq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:D}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([D,z,R,M.subarray(32)]);return v$(D,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,D,R,N]=U.decode(M);return Uint8Array.from(D)},encapsulate:(M,z=Qq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let D=M.subarray(0,384*$.K),R=Y.encode(Y.decode(w5(D)));if(!jY(R,D))throw v$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");v$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return v$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let D=U.bytesLen-96,R=D+32,N=J(z.subarray(D/2,R));if(!jY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,Z,T]=U.decode(z),v=q.decrypt(M,w),m=G.create().update(v).update(Z).digest(),u=m.subarray(0,32),F=q.encrypt(j,v,m.subarray(32,64)),x=jY(M,F),y=Q.create({dkLen:32}).update(T).update(M).digest();return v$(v,F,!x?u:y),x?u:y}}}function f6($,q,J){return Gq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var fX={HASH256:kJ,HASH512:R5,KDF:Gq,XOF:A5,PRF:f6},u3=mX({...fX,...yX[512]}),tG=mX({...fX,...yX[768]}),B5=mX({...fX,...yX[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function x6($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Qq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?aq(X):oq(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function xX($,q=!1){let J=x6($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Qq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return v$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function eG($,q){return yJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function hX($){return(q,J)=>$(q,{dkLen:J})}function h6($,q,...J){let G=eG(J,"seed"),Q=eG(J,"publicKey");if($===void 0)$=G.bytesLen;m$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,D)=>z.keygen(U[D])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Qq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return v$(U),v$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function BY($,q,J,G,...Q){let Y=h6($,J,...Q),X=eG(Q,"cipherText"),U=eG(Q,"publicKey"),V=eG(Q,"msg");if(q===void 0)q=V.bytesLen;return m$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Qq(V.bytesLen)){let z=U.decode(W),D=V.decode(M),R=Q.map((Z,T)=>Z.encapsulate(z[T],D[T])),N=R.map((Z)=>Z.sharedSecret),w=R.map((Z)=>Z.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return v$(N,w),j},decapsulate(W,M){let z=X.decode(W),{publicKey:D,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(D,z,N)}}}function S5($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>Q(L$(U[0],U[1],X[1],Y[1],sq($))),q,J)}var t3=S5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",tG,xX(FX,!0),Gq,kJ),e3=S5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",B5,xX(q5,!0),Gq,kJ);function u6($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>{let V=L$(U[0],U[1],X[0],Y[0],X[1],Y[1],sq($)),W=32,M=L$(sq("hybrid_prk"),V),z=G5(Q,M),D=L$(T8(32,2),sq("shared_secret"),sq("")),R=Q5(Q,z,D,32);return v$(z,D,M,V),R},q,J)}var T5=xX($5),$F=u6("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",tG,T5,Gq,NY),p6=(()=>BY(32,32,hX(Gq),($,q,J)=>kJ(L$(J[0],J[1],q[1],$[1],sq("\\.//^\\"))),tG,T5))();function l6($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Qq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Qq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return v$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function r6($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=l6(J,Q,Y,G),U=64,V=U+G;return BY(32,32,(W)=>{Q$(W,32);let M=Gq(W,{dkLen:V}),z=M.subarray(0,U),D=M.subarray(U,V);return L$(z,D)},(W,M,z)=>kJ(L$(z[0],z[1],M[1],W[1],sq($))),q,X)}var i6=(()=>r6("MLKEM768-P256",tG,FX,128))();var uX=p6,I5=i6;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>x$($,q,J),lX=C$,L8=cQ,d$=(...$)=>r9(...$),F8=($)=>CG($),g8=u9,_8=($)=>wq($),TY=BigInt(0),pX=BigInt(1);function Lq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function IY($){if(typeof $==="bigint"){if(!SY($))throw RangeError("positive bigint expected, got "+$)}else lX($);return $}function Yq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function $Q($){let q=IY($).toString(16);return q.length&1?"0"+q:q}function E5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?TY:BigInt("0x"+$)}function xJ($){return E5(cQ($))}function l0($){return E5(cQ(JJ(x$($)).reverse()))}function EY($,q){if(C$(q),q===0)throw RangeError("zero length");$=IY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return CG(J.padStart(q*2,"0"))}function qQ($,q){return EY($,q).reverse()}function C5($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function JJ($){return Uint8Array.from(Z$($))}function CY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var SY=($)=>typeof $==="bigint"&&TY<=$;function d6($,q,J){return SY($)&&SY(q)&&SY(J)&&q<=$&&$<J}function Fq($,q,J,G){if(!d6(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function v8($){if($<TY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>TY;$>>=pX,q+=1);return q}var JQ=($)=>(pX<<BigInt($))-pX;function P5($,q,J){if(C$($,"hashLen"),C$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,d$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return d$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while((T=Z(N()))===void 0)R();return z(),T}}function b0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var rX=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c$=BigInt(0),I$=BigInt(1),hJ=BigInt(2),_5=BigInt(3),v5=BigInt(4),b5=BigInt(5),c6=BigInt(7),k5=BigInt(8),n6=BigInt(9),y5=BigInt(16);function B$($,q){if(q<=c$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=c$?J:q+J}function k0($,q,J){if(q<c$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >c$)G*=G,G%=J;return G}function L5($,q){if($===c$)throw Error("invert: expected non-zero number");if(q<=c$)throw Error("invert: expected positive modulus, got "+q);let J=B$($,q),G=q,Q=c$,Y=I$,X=I$,U=c$;while(J!==c$){let W=G/J,M=G-J*W,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==I$)throw Error("invert: does not exist");return B$(Q,q)}function iX($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function m5($,q){let J=$,G=(J.ORDER+I$)/v5,Q=J.pow(q,G);return iX(J,Q,q),Q}function o6($,q){let J=$,G=(J.ORDER-b5)/k5,Q=J.mul(q,hJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,hJ),Y),V=J.mul(X,J.sub(U,J.ONE));return iX(J,V,q),V}function a6($){let q=PY($),J=f5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+c6)/y5;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),D=W.mul(M,Q),R=W.mul(M,Y),N=W.eql(W.sqr(z),V),w=W.eql(W.sqr(D),V);M=W.cmov(M,z,N),z=W.cmov(R,D,w);let j=W.eql(W.sqr(z),V),Z=W.cmov(M,z,j);return iX(W,Z,V),Z}}function f5($){if($<_5)throw Error("sqrt is not defined for small field");let q=$-I$,J=0;while(q%hJ===c$)q/=hJ,J++;let G=hJ,Q=PY($);while(F5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return m5;let Y=Q.pow(G,q),X=(q+I$)/hJ;return function(V,W){let M=V;if(M.is0(W))return W;if(F5(M,W)!==1)throw Error("Cannot find square root");let z=J,D=M.mul(M.ONE,Y),R=M.pow(W,q),N=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let Z=I$<<BigInt(z-w-1),T=M.pow(D,Z);z=w,D=M.sqr(T),R=M.mul(R,D),N=M.mul(N,T)}return N}}function s6($){if($%v5===_5)return m5;if($%k5===b5)return o6;if($%y5===n6)return a6($);return f5($)}var gq=($,q)=>(B$($,q)&I$)===I$,t6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function dX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=t6.reduce((G,Q)=>{return G[Q]="function",G},q);if(b0($,J),Yq($.BYTES,"BYTES"),Yq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function e6($,q,J){let G=$;if(J<c$)throw Error("invalid exponent, negatives unsupported");if(J===c$)return G.ONE;if(J===I$)return q;let Q=G.ONE,Y=q;while(J>c$){if(J&I$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=I$}return Q}function GQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function F5($,q){let J=$,G=(J.ORDER-I$)/hJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function $N($,q){if(q!==void 0)lX(q);if($<=c$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=v8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var g5=new WeakMap;class cX{ORDER;BITS;BYTES;isLE;ZERO=c$;ONE=I$;_lengths;_mod;constructor($,q={}){if($<=I$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=$N($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return c$<=$&&$<this.ORDER}is0($){return $===c$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I$)===I$}neg($){return B$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return B$($*$,this.ORDER)}add($,q){return B$($+q,this.ORDER)}sub($,q){return B$($-q,this.ORDER)}mul($,q){return B$($*q,this.ORDER)}pow($,q){return e6(this,$,q)}div($,q){return B$($*L5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return L5($,this.ORDER)}sqrt($){let q=g5.get(this);if(!q)g5.set(this,q=s6(this.ORDER));return q(this,$)}toBytes($){return this.isLE?qQ($,this.BYTES):EY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?l0($):xJ($);if(X)U=B$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return GQ(this,$)}cmov($,q,J){return Lq(J,"condition"),J?q:$}}Object.freeze(cX.prototype);function PY($,q={}){return new cX($,q)}function x5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I$)throw Error("field order must be greater than 1");let q=v8($-I$);return Math.ceil(q/8)}function nX($){let q=x5($);return q+Math.ceil(q/2)}function h5($,q,J=!1){Z$($);let G=$.length,Q=x5(q),Y=Math.max(nX(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?l0($):xJ($),U=B$(X,q-I$)+I$;return J?qQ(U,Q):EY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b8=BigInt(0),uJ=BigInt(1);function QQ($,q){let J=q.negate();return $?J:q}function pJ($,q){let J=GQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function r5($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function oX($,q){r5($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=JQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function u5($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=uJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var aX=new WeakMap,i5=new WeakMap;function sX($){return i5.get($)||1}function p5($){if($!==b8)throw Error("invalid wNAF")}class YQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>b8){if(q&uJ)J=J.add(G);G=G.double(),q>>=uJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=oX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=oX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=u5(J,X,Y);if(J=U,W)Q=Q.add(QQ(z,q[D]));else G=G.add(QQ(M,q[V]))}return p5(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=oX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===b8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=u5(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return p5(J),G}getPrecomputes($,q,J){let G=aX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);aX.set(q,G)}}return G}cached($,q,J){let G=sX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=sX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){r5(q,this.bits),i5.set($,q),aX.delete($)}hasCache($){return sX($)!==1}}function d5($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>b8||G>b8){if(J&uJ)Y=Y.add(Q);if(G&uJ)X=X.add(Q);Q=Q.double(),J>>=uJ,G>>=uJ}return{p1:Y,p2:X}}function l5($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return dX(q),q}else return PY($,{isLE:J})}function LY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>b8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=l5(q.p,J.Fp,G),Y=l5(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function XQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function UQ($,q){if(Yq($),Yq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function qN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function JN($){if(!g8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?CY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function tX($,q,J,G){if(Z$($),Yq(J),q=JN(q),q.length>255)q=G(d$(CY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=d$(q,UQ(q.length,1)),V=new Uint8Array(Y),W=UQ(J,2),M=Array(X),z=G(d$(V,$,W,UQ(0,1),U));M[0]=G(d$(z,UQ(1,1),U));for(let R=1;R<X;R++){let N=[qN(z,M[R-1]),UQ(R+1,1),U];M[R]=G(d$(...N))}return d$(...M).slice(0,J)}var c5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var n5=($,q)=>($+($>=0?q:-q)/a5)/q;function GN($,q,J){Fq("scalar",$,Xq,J);let[[G,Q],[Y,X]]=q,U=n5(X*$,J),V=n5(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Xq,D=M<Xq;if(z)W=-W;if(D)M=-M;let R=JQ(Math.ceil(v8(J)/2))+GJ;if(W<Xq||W>=R||M<Xq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:D,k2:M}}function $U($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function eX($,q){b0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(Lq(J.lowS,"lowS"),Lq(J.prehash,"prehash"),J.format!==void 0)$U(J.format);return J}class o5 extends Error{constructor($=""){super($)}}var r0={Err:o5,_tlv:{encode:($,q)=>{let{Err:J}=r0;if(Yq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=$Q(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?$Q(Q.length/2|128):"";return $Q($)+Y+Q+q},decode($,q){let{Err:J}=r0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=r0;if(IY($),$<Xq)throw new q("integer: negative integers are not allowed");let J=$Q($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=r0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return xJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=r0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=r0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(r0._tlv);Object.freeze(r0._int);Object.freeze(r0);var Xq=BigInt(0),GJ=BigInt(1),a5=BigInt(2),FY=BigInt(3),QN=BigInt(4);function s5($,q={}){let J=LY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;b0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=e5(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(_,E,I){if(W&&E.is0())return Uint8Array.of(0);let{x:A,y:S}=E.toAffine(),P=G.toBytes(A);if(Lq(I,"isCompressed"),I){z();let g=!G.isOdd(S);return d$(t5(g),P)}else return d$(Uint8Array.of(4),P,G.toBytes(S))}function R(_){Z$(_,void 0,"Point");let{publicKey:E,publicKeyUncompressed:I}=M,A=_.length,S=_[0],P=_.subarray(1);if(W&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===E&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(r){let B=r instanceof Error?": "+r.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===I&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${E} or uncompressed=${I}`)}let N=q.toBytes===void 0?D:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(_){let E=G.sqr(_),I=G.mul(E,_);return G.add(G.add(I,G.mul(_,Y.a)),Y.b)}function Z(_,E){let I=G.sqr(E),A=j(_);return G.eql(I,A)}if(!Z(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,FY),QN),v=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,v)))throw Error("bad curve params: a or b");function m(_,E,I=!1){if(!G.isValid(E)||I&&G.is0(E))throw Error(`bad point coordinate ${_}`);return E}function u(_){if(!(_ instanceof y))throw Error("Weierstrass Point expected")}function F(_){if(!V||!V.basises)throw Error("no endo");return GN(_,V.basises,Q.ORDER)}function x(_,E,I,A,S){return I=new y(G.mul(I.X,_),I.Y,I.Z),E=QQ(A,E),I=QQ(S,I),E.add(I)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(_,E,I){this.X=m("x",_),this.Y=m("y",E,!0),this.Z=m("z",I),Object.freeze(this)}static CURVE(){return Y}static fromAffine(_){let{x:E,y:I}=_||{};if(!_||!G.isValid(E)||!G.isValid(I))throw Error("invalid affine point");if(_ instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(I))return y.ZERO;return new y(E,I,G.ONE)}static fromBytes(_){let E=y.fromAffine(w(Z$(_,void 0,"point")));return E.assertValidity(),E}static fromHex(_){return y.fromBytes(F8(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,E=!0){if(l.createCache(this,_),!E)this.multiply(FY);return this}assertValidity(){let _=this;if(_.is0()){if(q.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:E,y:I}=_.toAffine();if(!G.isValid(E)||!G.isValid(I))throw Error("bad point: x or y not field elements");if(!Z(E,I))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.eql(G.mul(E,g),G.mul(S,A)),b=G.eql(G.mul(I,g),G.mul(P,A));return L&&b}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:E}=Y,I=G.mul(E,FY),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),f=G.mul(S,S),r=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(_,b),L=G.mul(I,r),L=G.add(g,L),g=G.sub(f,L),L=G.add(f,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(I,b),r=G.mul(_,r),B=G.sub(O,r),B=G.mul(_,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,r),O=G.mul(O,B),L=G.add(L,O),r=G.mul(S,P),r=G.add(r,r),O=G.mul(r,B),g=G.sub(g,O),b=G.mul(r,f),b=G.add(b,b),b=G.add(b,b),new y(g,L,b)}add(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=Y.a,r=G.mul(Y.b,FY),B=G.mul(E,S),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.add(E,I),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,o),Y$=G.sub(Y$,G$),G$=G.add(E,A);let s=G.add(S,g);return G$=G.mul(G$,s),s=G.add(B,q$),G$=G.sub(G$,s),s=G.add(I,A),L=G.add(P,g),s=G.mul(s,L),L=G.add(o,q$),s=G.sub(s,L),O=G.mul(f,G$),L=G.mul(r,q$),O=G.add(L,O),L=G.sub(o,O),O=G.add(o,O),b=G.mul(L,O),o=G.add(B,B),o=G.add(o,B),q$=G.mul(f,q$),G$=G.mul(r,G$),o=G.add(o,q$),q$=G.sub(B,q$),q$=G.mul(f,q$),G$=G.add(G$,q$),B=G.mul(o,G$),b=G.add(b,B),B=G.mul(s,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,o),O=G.mul(s,O),O=G.add(O,B),new y(L,b,O)}subtract(_){return u(_),this.add(_.negate())}is0(){return this.equals(y.ZERO)}multiply(_){let{endo:E}=q;if(!Q.isValidNot0(_))throw RangeError("invalid scalar: out of range");let I,A,S=(P)=>l.cached(this,P,(g)=>pJ(y,g));if(E){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(_),{p:O,f}=S(g),{p:r,f:B}=S(b);A=f.add(B),I=x(E.beta,O,r,P,L)}else{let{p:P,f:g}=S(_);I=P,A=g}return pJ(y,[I,A])[0]}multiplyUnsafe(_){let{endo:E}=q,I=this,A=_;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Xq||I.is0())return y.ZERO;if(A===GJ)return I;if(l.hasCache(this))return this.multiply(A);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=d5(y,I,P,L);return x(E.beta,b,O,S,g)}else return l.unsafe(I,A)}toAffine(_){let E=this,I=_,{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:_}=q;if(X===GJ)return!0;if(_)return _(y,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:_}=q;if(X===GJ)return this;if(_)return _(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===GJ)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return Lq(_,"isCompressed"),this.assertValidity(),N(y,this,_)}toHex(_=!0){return L8(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let k=Q.BITS,l=new YQ(y,q.endo?Math.ceil(k/2):k);if(k>=8)y.BASE.precompute(8);return Object.freeze(y.prototype),Object.freeze(y),y}function t5($){return Uint8Array.of($?2:3)}function e5($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function YN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?_8:q.randomBytes,Q=Object.assign(e5($.Fp,J),{seed:Math.max(nX(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,h5(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,Z=J._lengths;if(!g8(R))return;let T=Z$(R,void 0,"key").length,v=T===w||T===j,m=T===N||!!Z?.includes(T);if(v&&m)return;return v}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=XQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function $M($,q,J={}){let G=q;Nq(G),b0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?_8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>jq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N}=YN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*a5+GJ<X.ORDER;function Z(S){let P=V>>GJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function v(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function m(S,P){$U(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(v(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){m(S,P);let g;if(P==="der"){let{r:f,s:r}=r0.toSig(Z$(S));return new u(f,r)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(F8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),f=$.fromBytes(d$(t5((L&1)===0),O)),r=U.inv(b),B=x(Z$(S,void 0,"msgHash")),o=U.create(-B*r),q$=U.create(g*r),Y$=$.BASE.multiplyUnsafe(o).add(f.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return Z(this.s)}toBytes(S=w.format){if($U(S),S==="der")return F8(r0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return v(),d$(Uint8Array.of(this.assertRecovery()),L,b);return d$(L,b)}toHex(S){return L8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=xJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,y=JQ(W);function k(S){return Fq("num < 2^"+W,S,Xq,y),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function _(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=eX(g,w);S=l(S,b);let f=x(S),r=U.fromBytes(P);if(!U.isValidNot0(r))throw Error("invalid private key");let B=[k(r),k(f)];if(O!=null&&O!==!1){let G$=O===!0?Q(N.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let o=d$(...B),q$=f;function Y$(G$){let s=F(G$);if(!U.isValidNot0(s))return;let O$=U.inv(s),A$=$.BASE.multiply(s).toAffine(),T$=U.create(A$.x);if(T$===Xq)return;let y$=U.create(O$*U.create(q$+T$*r));if(y$===Xq)return;let M0=(A$.x===T$?0:2)|Number(A$.y&GJ),e0=y$;if(L&&Z(y$))e0=U.neg(y$),M0^=1;return new u(T$,e0,j?void 0:M0)}return{seed:o,k2sig:Y$}}function E(S,P,g={}){let{seed:L,k2sig:b}=_(S,P,g);return P5(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function I(S,P,g,L={}){let{lowS:b,prehash:O,format:f}=eX(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!g8(S)){let r=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+r)}m(S,f);try{let r=u.fromBytes(S,f),B=$.fromBytes(g);if(b&&r.hasHighS())return!1;let{r:o,s:q$}=r,Y$=x(P),G$=U.inv(q$),s=U.create(Y$*G$),O$=U.create(o*G$),A$=$.BASE.multiplyUnsafe(s).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===o}catch(r){return!1}}function A(S,P,g={}){let{prehash:L}=eX(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N,Point:$,sign:E,verify:I,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var XN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var UN=s5(XN),k8=$M(UN,p$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QJ=BigInt(0),A0=BigInt(1),qU=BigInt(2),VN=BigInt(8);function WN($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function qM($,q={}){let J=q,G=LY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;b0(J,{},{uvRatio:"function"});let V=qU<<BigInt(Y.BYTES*8)-A0,W=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(Z){return{isValid:!1,value:QJ}}}:J.uvRatio;if(!WN(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,Z=!1){let T=Z?A0:QJ;return Fq("coordinate "+w,j,T,V),j}function D(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,A0,W(X.Gx*X.Gy));static ZERO=new R(QJ,A0,A0,QJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,Z,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",Z,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:Z}=w||{};return z("x",j),z("y",Z),new R(j,Z,A0,W(j*Z))}static fromBytes(w,j=!1){let Z=Q.BYTES,{a:T,d:v}=X;w=JJ(Z$(w,Z,"point")),Lq(j,"zip215");let m=JJ(w),u=w[Z-1];m[Z-1]=u&-129;let F=l0(m),x=j?V:Q.ORDER;Fq("point.y",F,QJ,x);let y=W(F*F),k=W(y-A0),l=W(v*y-T),{isValid:_,value:E}=M(k,l);if(!_)throw Error("bad point: invalid y coordinate");let I=(E&A0)===A0,A=(u&128)!==0;if(!j&&E===QJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==I)E=W(-E);return R.fromAffine({x:E,y:F})}static fromHex(w,j=!1){return R.fromBytes(F8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(qU);return this}assertValidity(){let w=this,{a:j,d:Z}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:v,Z:m,T:u}=w,F=W(T*T),x=W(v*v),y=W(m*m),k=W(y*y),l=W(F*j),_=W(y*W(l+x)),E=W(k+W(Z*W(F*x)));if(_!==E)throw Error("bad point: equation left != right (1)");let I=W(T*v),A=W(m*u);if(I!==A)throw Error("bad point: equation left != right (2)")}equals(w){D(w);let{X:j,Y:Z,Z:T}=this,{X:v,Y:m,Z:u}=w,F=W(j*u),x=W(v*T),y=W(Z*u),k=W(m*T);return F===x&&y===k}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:w}=X,{X:j,Y:Z,Z:T}=this,v=W(j*j),m=W(Z*Z),u=W(qU*W(T*T)),F=W(w*v),x=j+Z,y=W(W(x*x)-v-m),k=F+m,l=k-u,_=F-m,E=W(y*l),I=W(k*_),A=W(y*_),S=W(l*k);return new R(E,I,S,A)}add(w){D(w);let{a:j,d:Z}=X,{X:T,Y:v,Z:m,T:u}=this,{X:F,Y:x,Z:y,T:k}=w,l=W(T*F),_=W(v*x),E=W(u*Z*k),I=W(m*y),A=W((T+v)*(F+x)-l-_),S=I-E,P=I+E,g=W(_-j*l),L=W(A*S),b=W(P*g),O=W(A*g),f=W(S*P);return new R(L,b,f,O)}subtract(w){return D(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:Z}=N.cached(this,w,(T)=>pJ(R,T));return pJ(R,[j,Z])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===QJ)return R.ZERO;if(this.is0()||w===A0)return this;return N.unsafe(this,w,(j)=>pJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,Z=w,{X:T,Y:v,Z:m}=j,u=j.is0();if(Z==null)Z=u?VN:Q.inv(m);let F=W(T*Z),x=W(v*Z),y=Q.mul(m,Z);if(u)return{x:QJ,y:A0};if(y!==A0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===A0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),Z=Q.toBytes(j);return Z[Z.length-1]|=w&A0?128:0,Z}toHex(){return L8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new YQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class JU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){rX()}static fromHex($){rX()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return L8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VQ=BigInt(0),y8=BigInt(1),gY=BigInt(2);function MN($){return b0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function JM($){let q=MN($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?_8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?gY**BigInt(254):gY**BigInt(447),N=U?BigInt(8)*gY**BigInt(251)-y8:BigInt(4)*gY**BigInt(445)-y8,w=R+N+y8,j=(A)=>B$(A,J),Z=T(z);function T(A){return qQ(j(A),M)}function v(A){let S=JJ(Z$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(l0(S))}function m(A){return l0(Q(JJ(Z$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===VQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){Fq("u",A,VQ,J),Fq("scalar",S,R,w);let P=S,g=A,L=y8,b=VQ,O=A,f=y8,r=VQ;for(let o=BigInt(W-1);o>=VQ;o--){let q$=P>>o&y8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A)=>{return A=A===void 0?V(M):A,Z$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze(_),Object.freeze(I),Object.freeze({keygen:XQ(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zN=BigInt(0),_q=BigInt(1),GM=BigInt(2),RN=BigInt(3),DN=BigInt(5),KN=BigInt(8),rJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),XU=(()=>({p:rJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:KN,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function XM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=rJ,U=$*$%Y*$%Y,V=k0(U,GM,Y)*U%Y,W=k0(V,_q,Y)*$%Y,M=k0(W,DN,Y)*W%Y,z=k0(M,q,Y)*M%Y,D=k0(z,J,Y)*z%Y,R=k0(D,G,Y)*D%Y,N=k0(R,Q,Y)*R%Y,w=k0(N,Q,Y)*R%Y,j=k0(w,q,Y)*M%Y;return{pow_p_5_8:k0(j,GM,Y)*$%Y,b2:U}}function HN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var GU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function UU($,q){let J=rJ,G=B$(q*q*q,J),Q=B$(G*G*q,J),Y=XM($*Q).pow_p_5_8,X=B$($*G*Y,J),U=B$(q*X*X,J),V=X,W=B$(X*GU,J),M=U===$,z=U===B$(-$,J),D=U===B$(-$*GU,J);if(M)X=V;if(z||D)X=W;if(gq(X,J))X=B$(-X,J);return{isValid:M||z,value:X}}var lJ=qM(XU,{uvRatio:UU}),YJ=(()=>lJ.Fp)(),UM=(()=>lJ.Fn)();var _Y=(()=>{let $=rJ;return JM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=XM(q);return B$(k0(J,RN,$)*G,$)},adjustScalarBytes:HN})})();var QU=GU,ON=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),NN=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),wN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),jN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),QM=($)=>UU(_q,$),AN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),YU=($)=>YJ.create(l0($)&AN);function YM($){let{d:q}=XU,J=rJ,G=(Z)=>YJ.create(Z),Q=G(QU*$*$),Y=G((Q+_q)*wN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=UU(Y,U),M=G(W*$);if(!gq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-_q)*jN-U),D=W*W,R=G((W+W)*U),N=G(z*ON),w=G(_q-D),j=G(_q+D);return new lJ(G(R*j),G(w*N),G(N*j),G(R*w))}class K0 extends JU{static BASE=(()=>new K0(lJ.BASE))();static ZERO=(()=>new K0(lJ.ZERO))();static Fp=(()=>YJ)();static Fn=(()=>UM)();constructor($){super($)}static fromAffine($){return new K0(lJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){x$($,32);let{a:q,d:J}=XU,G=rJ,Q=(v)=>YJ.create(v),Y=YU($);if(!C5(YJ.toBytes(Y),$)||gq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(_q+q*X),V=Q(_q-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:D,value:R}=QM(Q(z*M)),N=Q(R*V),w=Q(R*N*z),j=Q((Y+Y)*N);if(gq(j,G))j=Q(-j);let Z=Q(U*w),T=Q(j*Z);if(!D||gq(T,G)||Z===zN)throw Error("invalid ristretto255 encoding 2");return new K0(new lJ(j,Z,_q,T))}static fromHex($){return K0.fromBytes(CG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=rJ,Y=(w)=>YJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=QM(Y(X*V)),M=Y(W*X),z=Y(W*U),D=Y(M*z*G),R;if(gq(G*D,Q)){let w=Y(q*QU),j=Y($*QU);$=w,q=j,R=Y(M*NN)}else R=z;if(gq($*D,Q))q=Y(-q);let N=Y((J-q)*R);if(gq(N,Q))N=Y(-N);return YJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>YJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var ZN=Object.freeze({Point:K0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=tX($,J,64,sQ);return ZN.deriveToCurve(G)},hashToScalar($,q={DST:c5}){let J=tX($,q.DST,64,sQ);return UM.create(l0(J))},deriveToCurve($){x$($,64);let q=YU($.subarray(0,32)),J=YM(q),G=YU($.subarray(32,64)),Q=YM(G);return new K0(J.add(Q))}});var VM=!1,BN=!1;async function WM($,q){if(BN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function WU($,q){return await WM(async()=>{let J=VU($)?$:await TN($),G=await crypto.subtle.importKey("raw",IN(q),{name:"X25519"},VM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMult($,q)})}async function MU($){return await WM(async()=>{return WU($,_Y.GuBytes)},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMultBase($)})}var SN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function TN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...SN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},VM,["deriveBits"])}function VU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function IN($){return $}class MM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),CN(WQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=WQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:WQ(this.transcript)}}}function CN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function WQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function vY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function zM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function RM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class vq{args;body;constructor($,q){this.args=$,this.body=q}}function zU($){let q=[];q.push(`age-encryption.org/v1
|
|
57
|
+
`).map((q)=>q.trim()).join(" ")};TD.O=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts)}});var PD=X$((Pm,DV)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)DV.exports=wD();else DV.exports=CD()});var EK=X$((Ju,IK)=>{var w9=Object.prototype.hasOwnProperty,TK=Object.prototype.toString,wK=Object.defineProperty,jK=Object.getOwnPropertyDescriptor,AK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return TK.call(q)==="[object Array]"},ZK=function(q){if(!q||TK.call(q)!=="[object Object]")return!1;var J=w9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&w9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||w9.call(q,Q)},BK=function(q,J){if(wK&&J.name==="__proto__")wK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},SK=function(q,J){if(J==="__proto__"){if(!w9.call(q,J))return;else if(jK)return jK(q,J).value}return q[J]};IK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=SK(U,J),Q=SK(q,J),U!==Q){if(M&&Q&&(ZK(Q)||(Y=AK(Q)))){if(Y)Y=!1,X=G&&AK(G)?G:[];else X=G&&ZK(G)?G:{};BK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")BK(U,{name:J,newValue:Q})}}return U}});import{parseArgs as JO}from"util";var GO={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function x9($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function h9($,q){let J=$[q];return typeof J==="string"?J:void 0}function OW($){let{values:q,positionals:J}=JO({args:$,options:GO,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:x9(q,"help"),version:x9(q,"version"),dryRun:x9(q,"dry-run"),pushTo:h9(q,"push-to"),cohort:h9(q,"cohort"),anchorId:h9(q,"anchor-id")}}}var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.69",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as xN,mkdirSync as hN,readFileSync as SU,writeFileSync as TU}from"fs";import{dirname as uN,join as wM}from"path";function u9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function x$($,q,J=""){let G=u9($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Nq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function N8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function iQ($,q){x$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function dQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function w8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function f0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var YO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function XO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function UO($){for(let q=0;q<$.length;q++)$[q]=XO($[q]);return $}var p9=YO?($)=>$:UO,wW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),VO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function cQ($){if(x$($),wW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=VO[$[J]];return q}var Oq={_0:48,_9:57,A:65,F:70,a:97,f:102};function NW($){if($>=Oq._0&&$<=Oq._9)return $-Oq._0;if($>=Oq.A&&$<=Oq.F)return $-(Oq.A-10);if($>=Oq.a&&$<=Oq.f)return $-(Oq.a-10);return}function CG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(wW)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=NW($.charCodeAt(Y)),U=NW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function WO($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function l9($,q=""){if(typeof $==="string")return WO($);return x$($,void 0,q)}function r9(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];x$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function nQ($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function i9($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function wq($=32){C$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var d9=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class c9{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Nq($),x$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),z0(G)}update($){return N8(this),this.iHash.update($),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var jq=(()=>{let $=(q,J,G)=>new c9(q,J).update(G).digest();return $.create=(q,J)=>new c9(q,J),$})();function PG($,q,J){if(Nq($),J===void 0)J=new Uint8Array($.outputLen);return jq($,J,q)}var n9=Uint8Array.of(0),jW=Uint8Array.of();function o9($,q,J,G=32){Nq($),C$(G,"length"),x$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=jW;else x$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=jq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)n9[0]=M+1,V.update(M===0?jW:W).update(J).update(n9).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),z0(W,n9),X.slice(0,G)}var LG=($,q,J,G,Q)=>o9($,PG($,q,J),G,Q);function AW($,q,J){return $&q^~$&J}function ZW($,q,J){return $&q^$&J^q&J}class oQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=w8(this.buffer)}update($){N8(this),x$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=w8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=w8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Aq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),h$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),u$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),BW=BigInt(32);function MO($,q=!1){if(q)return{h:Number($&aQ),l:Number($>>BW&aQ)};return{h:Number($>>BW&aQ)|0,l:Number($&aQ)|0}}function SW($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=MO($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var a9=($,q,J)=>$>>>J,s9=($,q,J)=>$<<32-J|q>>>J,IJ=($,q,J)=>$>>>J|q<<32-J,EJ=($,q,J)=>$<<32-J|q>>>J,FG=($,q,J)=>$<<64-J|q>>>J-32,gG=($,q,J)=>$>>>J-32|q<<64-J;function $q($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var TW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),IW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,EW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),CW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,PW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),LW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var RO=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),pq=new Uint32Array(64);class t9 extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)pq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=pq[M-15],D=pq[M-2],R=f0(z,7)^f0(z,18)^z>>>3,N=f0(D,17)^f0(D,19)^D>>>10;pq[M]=N+pq[M-7]+R+pq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=f0(X,6)^f0(X,11)^f0(X,25),D=W+z+AW(X,U,V)+RO[M]+pq[M]|0,N=(f0(J,2)^f0(J,13)^f0(J,22))+ZW(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){z0(pq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),z0(this.buffer)}}class FW extends t9{A=Aq[0]|0;B=Aq[1]|0;C=Aq[2]|0;D=Aq[3]|0;E=Aq[4]|0;F=Aq[5]|0;G=Aq[6]|0;H=Aq[7]|0;constructor(){super(32)}}class DO extends t9{A=Zq[0]|0;B=Zq[1]|0;C=Zq[2]|0;D=Zq[3]|0;E=Zq[4]|0;F=Zq[5]|0;G=Zq[6]|0;H=Zq[7]|0;constructor(){super(28)}}var gW=(()=>SW(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),KO=(()=>gW[0])(),HO=(()=>gW[1])(),lq=new Uint32Array(80),rq=new Uint32Array(80);class _G extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)lq[T]=$.getUint32(q),rq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=lq[T-15]|0,m=rq[T-15]|0,u=IJ(v,m,1)^IJ(v,m,8)^a9(v,m,7),F=EJ(v,m,1)^EJ(v,m,8)^s9(v,m,7),x=lq[T-2]|0,y=rq[T-2]|0,k=IJ(x,y,19)^FG(x,y,61)^a9(x,y,6),l=EJ(x,y,19)^gG(x,y,61)^s9(x,y,6),_=EW(F,l,rq[T-7],rq[T-16]),E=CW(_,u,k,lq[T-7],lq[T-16]);lq[T]=E|0,rq[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=IJ(M,z,14)^IJ(M,z,18)^FG(M,z,41),m=EJ(M,z,14)^EJ(M,z,18)^gG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=PW(Z,m,F,HO[T],rq[T]),y=LW(x,j,v,u,KO[T],lq[T]),k=x|0,l=IJ(J,G,28)^FG(J,G,34)^FG(J,G,39),_=EJ(J,G,28)^gG(J,G,34)^gG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=$q(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=TW(k,_,I);J=IW(A,y,l,E),G=A|0}({h:J,l:G}=$q(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=$q(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=$q(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=$q(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=$q(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=$q(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=$q(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=$q(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){z0(lq,rq)}destroy(){this.destroyed=!0,z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class _W extends _G{Ah=u$[0]|0;Al=u$[1]|0;Bh=u$[2]|0;Bl=u$[3]|0;Ch=u$[4]|0;Cl=u$[5]|0;Dh=u$[6]|0;Dl=u$[7]|0;Eh=u$[8]|0;El=u$[9]|0;Fh=u$[10]|0;Fl=u$[11]|0;Gh=u$[12]|0;Gl=u$[13]|0;Hh=u$[14]|0;Hl=u$[15]|0;constructor(){super(64)}}class OO extends _G{Ah=h$[0]|0;Al=h$[1]|0;Bh=h$[2]|0;Bl=h$[3]|0;Ch=h$[4]|0;Cl=h$[5]|0;Dh=h$[6]|0;Dl=h$[7]|0;Eh=h$[8]|0;El=h$[9]|0;Fh=h$[10]|0;Fl=h$[11]|0;Gh=h$[12]|0;Gl=h$[13]|0;Hh=h$[14]|0;Hl=h$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),t$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class NO extends _G{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class wO extends _G{Ah=t$[0]|0;Al=t$[1]|0;Bh=t$[2]|0;Bl=t$[3]|0;Ch=t$[4]|0;Cl=t$[5]|0;Dh=t$[6]|0;Dl=t$[7]|0;Eh=t$[8]|0;El=t$[9]|0;Fh=t$[10]|0;Fl=t$[11]|0;Gh=t$[12]|0;Gl=t$[13]|0;Hh=t$[14]|0;Hl=t$[15]|0;constructor(){super(32)}}var p$=i9(()=>new FW,d9(1));var sQ=i9(()=>new _W,d9(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function JY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function qX($){if(!JY($))throw Error("Uint8Array expected")}function mW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function fW($){if(typeof $!=="function")throw Error("function expected");return!0}function iq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function bG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function eQ($){if(!Array.isArray($))throw Error("array expected")}function $Y($,q){if(!mW(!0,q))throw Error(`${$}: array of strings expected`)}function JX($,q){if(!mW(!1,q))throw Error(`${$}: array of numbers expected`)}function I0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function E0($){let q=typeof $==="string"?$.split(""):$,J=q.length;$Y("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return eQ(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return eQ(Q),Q.map((Y)=>{iq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function C0($=""){return iq("join",$),{encode:(q)=>{return $Y("join.decode",q),q.join($)},decode:(q)=>{return iq("join.decode",q),q.split($)}}}function GY($,q="="){return bG($),iq("padding",q),{encode(J){$Y("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){$Y("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function xW($){return fW($),{encode:(q)=>q,decode:(q)=>$(q)}}function vW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(eQ($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(bG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,D=z+M;if(!Number.isSafeInteger(D)||z/q!==U||D-M!==z)throw Error("convertRadix: carry overflow");let R=D/J;U=D%J;let N=Math.floor(R);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var hW=($,q)=>q===0?$:hW(q,$%q),qY=($,q)=>$+(q-hW($,q)),tQ=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function e9($,q,J,G){if(eQ($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(qY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${qY(q,J)}`);let Q=0,Y=0,X=tQ[q],U=tQ[J]-1,V=[];for(let W of $){if(bG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=tQ[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function jO($){bG($);let q=256;return{encode:(J)=>{if(!JY(J))throw Error("radix.encode input should be Uint8Array");return vW(Array.from(J),q,$)},decode:(J)=>{return JX("radix.decode",J),Uint8Array.from(vW(J,$,q))}}}function g0($,q=!1){if(bG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(qY(8,$)>32||qY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!JY(J))throw Error("radix2.encode input should be Uint8Array");return e9(Array.from(J),8,$,!q)},decode:(J)=>{return JX("radix2.decode",J),Uint8Array.from(e9(J,$,8,q))}}}function bW($){return fW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var JL=I0(g0(4),E0("0123456789ABCDEF"),C0("")),GL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),GY(5),C0("")),QL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),C0("")),YL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),GY(5),C0("")),XL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),C0("")),UL=I0(g0(5),E0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),C0(""),xW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),uW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),pW=($,q)=>{iq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},GX=uW?{encode($){return qX($),$.toBase64()},decode($){return pW($,!1)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),GY(6),C0("")),x0=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),C0("")),VL=uW?{encode($){return qX($),$.toBase64({alphabet:"base64url"})},decode($){return pW($,!0)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),GY(6),C0("")),WL=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),C0("")),QX=($)=>I0(jO(58),E0($),C0("")),ML=QX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),zL=QX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),RL=QX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var $X=I0(E0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),C0("")),kW=[996825010,642813549,513874426,1027748829,705979059];function vG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<kW.length;G++)if((q>>G&1)===1)J^=kW[G];return J}function yW($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=vG(Q)^X>>5}Q=vG(Q);for(let Y=0;Y<G;Y++)Q=vG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=vG(Q)^Y;for(let Y=0;Y<6;Y++)Q=vG(Q);return Q^=J,$X.encode(e9([Q%tQ[30]],30,5,!1))}function lW($){let q=$==="bech32"?1:734539939,J=g0(5),G=J.decode,Q=J.encode,Y=bW(G);function X(z,D,R=90){if(iq("bech32.encode prefix",z),JY(D))D=Array.from(D);JX("bech32.encode",D);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+D.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),Z=yW(j,D,q);return`${j}1${$X.encode(D)}${Z}`}function U(z,D=90){iq("bech32.decode input",z);let R=z.length;if(R<8||D!==!1&&R>D)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${D})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),Z=N.slice(w+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=$X.decode(Z).slice(0,-6),v=yW(j,T,q);if(!Z.endsWith(v))throw Error(`Invalid checksum in ${z}: expected "${v}"`);return{prefix:j,words:T}}let V=bW(U);function W(z){let{prefix:D,words:R}=U(z,!1);return{prefix:D,words:R,bytes:G(R)}}function M(z,D){return X(z,Q(D))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var h0=lW("bech32"),DL=lW("bech32m");var AO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),ZO={encode($){return qX($),$.toHex()},decode($){return iq("hex",$),Uint8Array.fromHex($)}},KL=AO?ZO:I0(g0(4),E0("0123456789abcdef"),C0(""),xW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function SO($,q,J,G){Nq($);let Q=nQ({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(C$(Y,"c"),C$(X,"dkLen"),C$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=l9(q,"password"),W=l9(J,"salt"),M=new Uint8Array(X),z=jq.create($,V),D=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:D}}function TO($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return z0(Q),J}function YX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=SO($,q,J,G),W,M=new Uint8Array(4),z=w8(M),D=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(D),w.set(D.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(D).digestInto(D);for(let Z=0;Z<w.length;Z++)w[Z]^=D[Z]}}return TO(U,V,X,W,D)}function rW($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],D=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],v=$[q++]^J[G++],m=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let r=0;r<8;r+=2)l^=N$(F+L|0,7),A^=N$(l+F|0,9),L^=N$(A+l|0,13),F^=N$(L+A|0,18),S^=N$(_+x|0,7),b^=N$(S+_|0,9),x^=N$(b+S|0,13),_^=N$(x+b|0,18),O^=N$(P+E|0,7),y^=N$(O+P|0,9),E^=N$(y+O|0,13),P^=N$(E+y|0,18),k^=N$(f+g|0,7),I^=N$(k+f|0,9),g^=N$(I+k|0,13),f^=N$(g+I|0,18),x^=N$(F+k|0,7),y^=N$(x+F|0,9),k^=N$(y+x|0,13),F^=N$(k+y|0,18),E^=N$(_+l|0,7),I^=N$(E+_|0,9),l^=N$(I+E|0,13),_^=N$(l+I|0,18),g^=N$(P+S|0,7),A^=N$(g+P|0,9),S^=N$(A+g|0,13),P^=N$(S+A|0,18),L^=N$(f+O|0,7),b^=N$(L+f|0,9),O^=N$(b+L|0,13),f^=N$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+y|0,Q[Y++]=W+k|0,Q[Y++]=M+l|0,Q[Y++]=z+_|0,Q[Y++]=D+E|0,Q[Y++]=R+I|0,Q[Y++]=N+A|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=Z+g|0,Q[Y++]=T+L|0,Q[Y++]=v+b|0,Q[Y++]=m+O|0,Q[Y++]=u+f|0}function XX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(rW(J,X,$,q,J,Y),U>0)X+=16;rW(J,Y,$,q+=16,J,X)}}function IO($,q,J){let G=nQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(C$(Q,"N"),C$(Y,"r"),C$(X,"p"),C$(U,"dkLen"),C$(V,"asyncTick"),C$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,D=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let w=YX(p$,$,q,{c:1,dkLen:z*X}),j=dQ(w),Z=dQ(new Uint8Array(z*Q)),T=dQ(new Uint8Array(z)),v=()=>{};if(M){let m=2*Q*X,u=Math.max(Math.floor(m/1e4),1),F=0;v=()=>{if(F++,M&&(!(F%u)||F===m))M(F/m)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:D,V:Z,B32:j,B:w,tmp:T,blockMixCb:v,asyncTick:V}}function EO($,q,J,G,Q){let Y=YX(p$,$,J,{c:1,dkLen:q});return z0(J,G,Q),Y}function iW($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:D}=IO($,q,J);p9(W);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)V[w]=W[N+w];for(let w=0,j=0;w<G-1;w++)XX(V,j,V,j+=U,Q),D();XX(V,(G-1)*U,W,N,Q),D();for(let w=0;w<G;w++){let j=(W[N+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)z[Z]=W[N+Z]^V[j*U+Z];XX(z,0,W,N,Q),D()}}return p9(W),EO($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function CO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function QY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function j8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function _$($,q,J=""){let G=CO($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function UX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function dW($,q,J=!1){_$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!A8($))throw Error("invalid output, must be aligned")}function qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function u0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function PO($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var CJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),LO=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var FO=($)=>{for(let q=0;q<$.length;q++)$[q]=LO($[q]);return $},Bq=CJ?($)=>$:FO;function cW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function nW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function oW($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var aW=($,q)=>{function J(G,...Q){if(_$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];_$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)_$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");_$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,_$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(_$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function kG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(_$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!A8(q))throw Error("invalid output, must be aligned");return q}function sW($,q,J){j8($),j8(q),QY(J);let G=new Uint8Array(16),Q=PO(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function A8($){return $.byteOffset%4===0}function Z8($){return Uint8Array.from(_$($))}var eW=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),gO=(()=>Bq(qq(eW("expand 16-byte k"))))(),_O=(()=>Bq(qq(eW("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var yG=64,vO=16,VX=(()=>4294967295)(),tW=Uint32Array.of();function bO($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(yG),M=qq(W),z=CJ&&A8(Q)&&A8(Y),D=z?qq(Q):tW,R=z?qq(Y):tW;if(!CJ){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Bq(M),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);if(z&&w===yG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<vO;Z++)T=j+Z,R[T]=D[T]^M[Z];N+=yG;continue}for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}}function $7($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=cW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return j8(Q),j8(X),QY(Y),QY(J),(U,V,W,M,z=0)=>{_$(U,void 0,"key"),_$(V,void 0,"nonce"),_$(W,void 0,"data");let D=W.length;if(M=kG(D,M,!1),j8(z),z<0||z>=VX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=Z8(U)),j=_O;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=gO,R.push(w);else throw _$(U,32,"arx key"),Error("invalid key size");if(!CJ||!A8(V))R.push(V=Z8(V));let Z=qq(w);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let m=V.subarray(0,16);if(CJ)G(j,Z,qq(m),Z);else{let u=Bq(Uint32Array.from(j));G(u,Z,qq(m),Z),u0(u),Bq(Z)}V=V.subarray(16)}else if(!CJ)Bq(Z);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let m=new Uint8Array(12);m.set(V,Y?0:12-V.length),V=m,R.push(V)}let v=Bq(qq(V));try{return bO($,j,Z,v,W,M,z,X),M}finally{u0(...R)}}}function l$($,q){return $[q++]&255|($[q++]&255)<<8}class q7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=Z8(_$($,32,"key"));let q=l$($,0),J=l$($,2),G=l$($,4),Q=l$($,6),Y=l$($,8),X=l$($,10),U=l$($,12),V=l$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=l$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],D=Y[6],R=Y[7],N=Y[8],w=Y[9],j=l$($,q+0),Z=l$($,q+2),T=l$($,q+4),v=l$($,q+6),m=l$($,q+8),u=l$($,q+10),F=l$($,q+12),x=l$($,q+14),y=Q[0]+(j&8191),k=Q[1]+((j>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),_=Q[3]+((T>>>7|v<<9)&8191),E=Q[4]+((v>>>4|m<<12)&8191),I=Q[5]+(m>>>1&8191),A=Q[6]+((m>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+y*X+k*(5*w)+l*(5*N)+_*(5*R)+E*(5*D);L=b>>>13,b&=8191,b+=I*(5*z)+A*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+y*U+k*X+l*(5*w)+_*(5*N)+E*(5*R);L=O>>>13,O&=8191,O+=I*(5*D)+A*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let f=L+y*V+k*U+l*X+_*(5*w)+E*(5*N);L=f>>>13,f&=8191,f+=I*(5*R)+A*(5*D)+S*(5*z)+P*(5*M)+g*(5*W),L+=f>>>13,f&=8191;let r=L+y*W+k*V+l*U+_*X+E*(5*w);L=r>>>13,r&=8191,r+=I*(5*N)+A*(5*R)+S*(5*D)+P*(5*z)+g*(5*M),L+=r>>>13,r&=8191;let B=L+y*M+k*W+l*V+_*U+E*X;L=B>>>13,B&=8191,B+=I*(5*w)+A*(5*N)+S*(5*R)+P*(5*D)+g*(5*z),L+=B>>>13,B&=8191;let o=L+y*z+k*M+l*W+_*V+E*U;L=o>>>13,o&=8191,o+=I*X+A*(5*w)+S*(5*N)+P*(5*R)+g*(5*D),L+=o>>>13,o&=8191;let q$=L+y*D+k*z+l*M+_*W+E*V;L=q$>>>13,q$&=8191,q$+=I*U+A*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+y*R+k*D+l*z+_*M+E*W;L=Y$>>>13,Y$&=8191,Y$+=I*V+A*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+y*N+k*R+l*D+_*z+E*M;L=G$>>>13,G$&=8191,G$+=I*W+A*V+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let s=L+y*w+k*N+l*R+_*D+E*z;L=s>>>13,s&=8191,s+=I*M+A*W+S*V+P*U+g*X,L+=s>>>13,s&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=f,Q[3]=r,Q[4]=B,Q[5]=o,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=s}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;u0(J)}update($){UX(this),_$($),$=Z8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,u0(this.h,this.r,this.buffer,this.pad)}digestInto($){UX(this),dW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var J7=oW(32,($)=>new q7($));function kO($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],D=q[2],R=q[3],N=q[4],w=q[5],j=q[6],Z=q[7],T=Q,v=J[0],m=J[1],u=J[2],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),A=A+L|0,l=w$(l^A,12),F=F+l|0,L=w$(L^F,8),A=A+L|0,l=w$(l^A,7),x=x+_|0,b=w$(b^x,16),S=S+b|0,_=w$(_^S,12),x=x+_|0,b=w$(b^x,8),S=S+b|0,_=w$(_^S,7),y=y+E|0,O=w$(O^y,16),P=P+O|0,E=w$(E^P,12),y=y+E|0,O=w$(O^y,8),P=P+O|0,E=w$(E^P,7),k=k+I|0,f=w$(f^k,16),g=g+f|0,I=w$(I^g,12),k=k+I|0,f=w$(f^k,8),g=g+f|0,I=w$(I^g,7),F=F+_|0,f=w$(f^F,16),P=P+f|0,_=w$(_^P,12),F=F+_|0,f=w$(f^F,8),P=P+f|0,_=w$(_^P,7),x=x+E|0,L=w$(L^x,16),g=g+L|0,E=w$(E^g,12),x=x+E|0,L=w$(L^x,8),g=g+L|0,E=w$(E^g,7),y=y+I|0,b=w$(b^y,16),A=A+b|0,I=w$(I^A,12),y=y+I|0,b=w$(b^y,8),A=A+b|0,I=w$(I^A,7),k=k+l|0,O=w$(O^k,16),S=S+O|0,l=w$(l^S,12),k=k+l|0,O=w$(O^k,8),S=S+O|0,l=w$(l^S,7);let r=0;G[r++]=X+F|0,G[r++]=U+x|0,G[r++]=V+y|0,G[r++]=W+k|0,G[r++]=M+l|0,G[r++]=z+_|0,G[r++]=D+E|0,G[r++]=R+I|0,G[r++]=N+A|0,G[r++]=w+S|0,G[r++]=j+P|0,G[r++]=Z+g|0,G[r++]=T+L|0,G[r++]=v+b|0,G[r++]=m+O|0,G[r++]=u+f|0}var yO=$7(kO,{counterRight:!1,counterLength:4,allowShortKeys:!1});var mO=new Uint8Array(16),G7=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(mO.subarray(J))},fO=new Uint8Array(32);function Q7($,q,J,G,Q){if(Q!==void 0)_$(Q,void 0,"AAD");let Y=$(q,J,fO),X=sW(G.length,Q?Q.length:0,!0),U=J7.create(Y);if(Q)G7(U,Q);G7(U,G),U.update(X);let V=U.digest();return u0(Y,X),V}var xO=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=kG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=Q7($,q,J,V,G);return X.set(W,U),u0(W),X},decrypt(Y,X){X=kG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=Q7($,q,J,U,G);if(!nW(V,W))throw u0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),u0(W),X}}},dq=aW({blockSize:64,nonceLength:12,tagLength:16},xO(yO));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function B8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=B8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function _0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Tq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function j0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function UY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function p0($,q){return $<<32-q|$>>>q}var hO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function uO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function pO($){for(let q=0;q<$.length;q++)$[q]=uO($[q]);return $}var WX=hO?($)=>$:pO,X7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),lO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function PJ($){if(Q$($),X7)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=lO[$[J]];return q}var Sq={_0:48,_9:57,A:65,F:70,a:97,f:102};function Y7($){if($>=Sq._0&&$<=Sq._9)return $-Sq._0;if($>=Sq.A&&$<=Sq.F)return $-(Sq.A-10);if($>=Sq.a&&$<=Sq.f)return $-(Sq.a-10);return}function LJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(X7)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=Y7($.charCodeAt(Y)),U=Y7($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function L$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function S8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function cq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var nq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zX=BigInt(0),MX=BigInt(1);function mG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function U7($){if(typeof $==="bigint"){if(!VY($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function fG($){let q=U7($).toString(16);return q.length&1?"0"+q:q}function V7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?zX:BigInt("0x"+$)}function oq($){return V7(PJ($))}function aq($){return V7(PJ(WY(Q$($)).reverse()))}function T8($,q){m$(q),$=U7($);let J=LJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function xG($,q){return T8($,q).reverse()}function WY($){return Uint8Array.from($)}function sq($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var VY=($)=>typeof $==="bigint"&&zX<=$;function rO($,q,J){return VY($)&&VY(q)&&VY(J)&&q<=$&&$<J}function hG($,q,J,G){if(!rO(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function RX($){let q;for(q=0;$>zX;$>>=MX,q+=1);return q}var uG=($)=>(MX<<BigInt($))-MX;function W7($,q,J){if(m$($,"hashLen"),m$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,L$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return L$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while(!(T=Z(N())))R();return z(),T}}function FJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function DX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D0=BigInt(0),e$=BigInt(1),gJ=BigInt(2),R7=BigInt(3),D7=BigInt(4),K7=BigInt(5),iO=BigInt(7),H7=BigInt(8),dO=BigInt(9),O7=BigInt(16);function R0($,q){let J=$%q;return J>=D0?J:q+J}function v0($,q,J){let G=$;while(q-- >D0)G*=G,G%=J;return G}function M7($,q){if($===D0)throw Error("invert: expected non-zero number");if(q<=D0)throw Error("invert: expected positive modulus, got "+q);let J=R0($,q),G=q,Q=D0,Y=e$,X=e$,U=D0;while(J!==D0){let W=G/J,M=G%J,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==e$)throw Error("invert: does not exist");return R0(Q,q)}function KX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function N7($,q){let J=($.ORDER+e$)/D7,G=$.pow(q,J);return KX($,G,q),G}function cO($,q){let J=($.ORDER-K7)/H7,G=$.mul(q,gJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,gJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return KX($,U,q),U}function nO($){let q=MY($),J=w7($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+iO)/O7;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),D=U.mul(W,Y),R=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(D,z,N);let w=U.eql(U.sqr(M),V),j=U.cmov(W,M,w);return KX(U,j,V),j}}function w7($){if($<R7)throw Error("sqrt is not defined for small field");let q=$-e$,J=0;while(q%gJ===D0)q/=gJ,J++;let G=gJ,Q=MY($);while(z7(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return N7;let Y=Q.pow(G,q),X=(q+e$)/gJ;return function(V,W){if(V.is0(W))return W;if(z7(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),D=V.pow(W,q),R=V.pow(W,X);while(!V.eql(D,V.ONE)){if(V.is0(D))return V.ZERO;let N=1,w=V.sqr(D);while(!V.eql(w,V.ONE))if(N++,w=V.sqr(w),N===M)throw Error("Cannot find square root");let j=e$<<BigInt(M-N-1),Z=V.pow(z,j);M=N,z=V.sqr(Z),D=V.mul(D,z),R=V.mul(R,Z)}return R}}function oO($){if($%D7===R7)return N7;if($%H7===K7)return cO;if($%O7===dO)return nO($);return w7($)}var aO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function HX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=aO.reduce((G,Q)=>{return G[Q]="function",G},q);return FJ($,J),$}function sO($,q,J){if(J<D0)throw Error("invalid exponent, negatives unsupported");if(J===D0)return $.ONE;if(J===e$)return q;let G=$.ONE,Q=q;while(J>D0){if(J&e$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=e$}return G}function pG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function z7($,q){let J=($.ORDER-e$)/gJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function tO($,q){if(q!==void 0)m$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class j7{ORDER;BITS;BYTES;isLE;ZERO=D0;ONE=e$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=D0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=tO($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return D0<=$&&$<this.ORDER}is0($){return $===D0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&e$)===e$}neg($){return R0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R0($*$,this.ORDER)}add($,q){return R0($+q,this.ORDER)}sub($,q){return R0($-q,this.ORDER)}mul($,q){return R0($*q,this.ORDER)}pow($,q){return sO(this,$,q)}div($,q){return R0($*M7(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return M7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=oO(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?xG($,this.BYTES):T8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?aq($):oq($);if(X)U=R0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return pG(this,$)}cmov($,q,J){return J?q:$}}function MY($,q={}){return new j7($,q)}function A7($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function OX($){let q=A7($);return q+Math.ceil(q/2)}function Z7($,q,J=!1){Q$($);let G=$.length,Q=A7(q),Y=OX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?aq($):oq($),U=R0(X,q-e$)+e$;return J?xG(U,Q):T8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I8=BigInt(0),_J=BigInt(1);function lG($,q){let J=q.negate();return $?J:q}function AX($,q){let J=pG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function I7($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function NX($,q){I7($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=uG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function B7($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=_J;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var wX=new WeakMap,E7=new WeakMap;function jX($){return E7.get($)||1}function S7($){if($!==I8)throw Error("invalid wNAF")}class ZX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>I8){if(q&_J)J=J.add(G);G=G.double(),q>>=_J}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=NX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=NX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=B7(J,X,Y);if(J=U,W)Q=Q.add(lG(z,q[D]));else G=G.add(lG(M,q[V]))}return S7(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=NX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===I8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=B7(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return S7(J),G}getPrecomputes($,q,J){let G=wX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);wX.set(q,G)}}return G}cached($,q,J){let G=jX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=jX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){I7(q,this.bits),E7.set($,q),wX.delete($)}hasCache($){return jX($)!==1}}function C7($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>I8||G>I8){if(J&_J)Y=Y.add(Q);if(G&_J)X=X.add(Q);Q=Q.double(),J>>=_J,G>>=_J}return{p1:Y,p2:X}}function T7($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return HX(q),q}else return MY($,{isLE:J})}function P7($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>I8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=T7(q.p,J.Fp,G),Y=T7(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function zY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rG=BigInt(0),E8=BigInt(1),RY=BigInt(2);function eO($){return FJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function L7($){let q=eO($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||cq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?RY**BigInt(254):RY**BigInt(447),N=U?BigInt(8)*RY**BigInt(251)-E8:BigInt(4)*RY**BigInt(445)-E8,w=R+N+E8,j=(A)=>R0(A,J),Z=T(z);function T(A){return xG(j(A),M)}function v(A){let S=WY(Q$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(aq(S))}function m(A){return aq(Q(WY(Q$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===rG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){hG("u",A,rG,J),hG("scalar",S,R,w);let P=S,g=A,L=E8,b=rG,O=A,f=E8,r=rG;for(let o=BigInt(W-1);o>=rG;o--){let q$=P>>o&E8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A=V(M))=>{return Q$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze({keygen:zY(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}class BX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(_0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),j0(G)}update($){return Tq(this),this.iHash.update($),this}digestInto($){Tq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var C8=($,q,J)=>new BX($,q).update(J).digest();C8.create=($,q)=>new BX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var F7=($,q)=>($+($>=0?q:-q)/_7)/q;function $6($,q,J){let[[G,Q],[Y,X]]=q,U=F7(X*$,J),V=F7(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Iq,D=M<Iq;if(z)W=-W;if(D)M=-M;let R=uG(Math.ceil(RX(J)/2))+P8;if(W<Iq||W>=R||M<Iq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:D,k2:M}}function TX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function SX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(mG(J.lowS,"lowS"),mG(J.prehash,"prehash"),J.format!==void 0)TX(J.format);return J}class g7 extends Error{constructor($=""){super($)}}var tq={Err:g7,_tlv:{encode:($,q)=>{let{Err:J}=tq;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=fG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?fG(Q.length/2|128):"";return fG($)+Y+Q+q},decode($,q){let{Err:J}=tq,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=tq;if($<Iq)throw new q("integer: negative integers are not allowed");let J=fG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=tq;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return oq($)}},toSig($){let{Err:q,_int:J,_tlv:G}=tq,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=tq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Iq=BigInt(0),P8=BigInt(1),_7=BigInt(2),DY=BigInt(3),q6=BigInt(4);function IX($,q={}){let J=P7("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;FJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=b7(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(E,I,A){let{x:S,y:P}=I.toAffine(),g=G.toBytes(S);if(mG(A,"isCompressed"),A){M();let L=!G.isOdd(P);return L$(v7(L),g)}else return L$(Uint8Array.of(4),g,G.toBytes(P))}function D(E){Q$(E,void 0,"Point");let{publicKey:I,publicKeyUncompressed:A}=W,S=E.length,P=E[0],g=E.subarray(1);if(S===I&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),O;try{O=G.sqrt(b)}catch(B){let o=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+o)}M();let f=G.isOdd(O);if((P&1)===1!==f)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${I} or uncompressed=${A}`)}let R=q.toBytes||z,N=q.fromBytes||D;function w(E){let I=G.sqr(E),A=G.mul(I,E);return G.add(G.add(A,G.mul(E,Y.a)),Y.b)}function j(E,I){let A=G.sqr(I),S=w(E);return G.eql(A,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(Y.a,DY),q6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function v(E,I,A=!1){if(!G.isValid(I)||A&&G.is0(I))throw Error(`bad point coordinate ${E}`);return I}function m(E){if(!(E instanceof k))throw Error("Weierstrass Point expected")}function u(E){if(!V||!V.basises)throw Error("no endo");return $6(E,V.basises,Q.ORDER)}let F=DX((E,I)=>{let{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=DX((E)=>{if(E.is0()){if(q.allowInfinityPoint&&!G.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:I,y:A}=E.toAffine();if(!G.isValid(I)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!j(I,A))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function y(E,I,A,S,P){return A=new k(G.mul(A.X,E),A.Y,A.Z),I=lG(S,I),A=lG(P,A),I.add(A)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(E,I,A){this.X=v("x",E),this.Y=v("y",I,!0),this.Z=v("z",A),Object.freeze(this)}static CURVE(){return Y}static fromAffine(E){let{x:I,y:A}=E||{};if(!E||!G.isValid(I)||!G.isValid(A))throw Error("invalid affine point");if(E instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(A))return k.ZERO;return new k(I,A,G.ONE)}static fromBytes(E){let I=k.fromAffine(N(Q$(E,void 0,"point")));return I.assertValidity(),I}static fromHex(E){return k.fromBytes(LJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,I=!0){if(_.createCache(this,E),!I)this.multiply(DY);return this}assertValidity(){x(this)}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.eql(G.mul(I,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:I}=Y,A=G.mul(I,DY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=G.mul(S,S),r=G.mul(P,P),B=G.mul(g,g),o=G.mul(S,P);return o=G.add(o,o),O=G.mul(S,g),O=G.add(O,O),L=G.mul(E,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(r,b),b=G.add(r,b),b=G.mul(L,b),L=G.mul(o,L),O=G.mul(A,O),B=G.mul(E,B),o=G.sub(f,B),o=G.mul(E,o),o=G.add(o,O),O=G.add(f,f),f=G.add(O,f),f=G.add(f,B),f=G.mul(f,o),b=G.add(b,f),B=G.mul(P,g),B=G.add(B,B),f=G.mul(B,o),L=G.sub(L,f),O=G.mul(B,r),O=G.add(O,O),O=G.add(O,O),new k(L,b,O)}add(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.ZERO,O=G.ZERO,f=G.ZERO,r=Y.a,B=G.mul(Y.b,DY),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.mul(S,L),G$=G.add(I,A),s=G.add(P,g);G$=G.mul(G$,s),s=G.add(o,q$),G$=G.sub(G$,s),s=G.add(I,S);let O$=G.add(P,L);return s=G.mul(s,O$),O$=G.add(o,Y$),s=G.sub(s,O$),O$=G.add(A,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),f=G.mul(r,s),b=G.mul(B,Y$),f=G.add(b,f),b=G.sub(q$,f),f=G.add(q$,f),O=G.mul(b,f),q$=G.add(o,o),q$=G.add(q$,o),Y$=G.mul(r,Y$),s=G.mul(B,s),q$=G.add(q$,Y$),Y$=G.sub(o,Y$),Y$=G.mul(r,Y$),s=G.add(s,Y$),o=G.mul(q$,s),O=G.add(O,o),o=G.mul(O$,s),b=G.mul(G$,b),b=G.sub(b,o),o=G.mul(G$,q$),f=G.mul(O$,f),f=G.add(f,o),new k(b,O,f)}subtract(E){return this.add(E.negate())}is0(){return this.equals(k.ZERO)}multiply(E){let{endo:I}=q;if(!Q.isValidNot0(E))throw Error("invalid scalar: out of range");let A,S,P=(g)=>_.cached(this,g,(L)=>AX(k,L));if(I){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(E),{p:f,f:r}=P(L),{p:B,f:o}=P(O);S=r.add(o),A=y(I.beta,f,B,g,b)}else{let{p:g,f:L}=P(E);A=g,S=L}return AX(k,[A,S])[0]}multiplyUnsafe(E){let{endo:I}=q,A=this;if(!Q.isValid(E))throw Error("invalid scalar: out of range");if(E===Iq||A.is0())return k.ZERO;if(E===P8)return A;if(_.hasCache(this))return this.multiply(E);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(E),{p1:b,p2:O}=C7(k,A,P,L);return y(I.beta,b,O,S,g)}else return _.unsafe(A,E)}toAffine(E){return F(this,E)}isTorsionFree(){let{isTorsionFree:E}=q;if(X===P8)return!0;if(E)return E(k,this);return _.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:E}=q;if(X===P8)return this;if(E)return E(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(E=!0){return mG(E,"isCompressed"),this.assertValidity(),R(k,this,E)}toHex(E=!0){return PJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,_=new ZX(k,q.endo?Math.ceil(l/2):l);return k.BASE.precompute(8),k}function v7($){return Uint8Array.of($?2:3)}function b7($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function J6($,q={}){let{Fn:J}=$,G=q.randomBytes||cq,Q=Object.assign(b7($.Fp,J),{seed:OX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R=G(Q.seed)){return Z7(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!B8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let Z=Q$(R,void 0,"key").length;return Z===w||Z===j}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=zY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function EX($,q,J={}){_0(q),FJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||cq,Q=J.hmac||((A,S)=>C8(q,A,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R}=J6($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*_7<Y.ORDER;function j(A){let S=U>>P8;return A>S}function Z(A,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function v(A,S){TX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(A,g)}class m{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=N.format){v(A,S);let P;if(S==="der"){let{r:O,s:f}=tq.toSig(Q$(A));return new m(O,f)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=R.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new m(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(LJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new m(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(L$(v7((g&1)===0),b)),f=X.inv(L),r=F(Q$(A,void 0,"msgHash")),B=X.create(-r*f),o=X.create(P*f),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(o));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(A=N.format){if(TX(A),A==="der")return LJ(tq.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(A==="recovered")return T(),L$(Uint8Array.of(this.assertRecovery()),g,L);return L$(g,L)}toHex(A){return PJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=oq(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=uG(V);function y(A){return hG("num < 2^"+V,A,Iq,x),X.toBytes(A)}function k(A,S){return Q$(A,void 0,"message"),S?Q$(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=SX(P,N);A=k(A,L);let O=F(A),f=X.fromBytes(S);if(!X.isValidNot0(f))throw Error("invalid private key");let r=[y(f),y(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;r.push(Q$(Y$,void 0,"extraEntropy"))}let B=L$(...r),o=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let s=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Iq)return;let T$=X.create(s*X.create(o+A$*f));if(T$===Iq)return;let y$=(O$.x===A$?0:2)|Number(O$.y&P8),M0=T$;if(g&&j(T$))M0=X.neg(T$),y$^=1;return new m(A$,M0,w?void 0:y$)}return{seed:B,k2sig:q$}}function _(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return W7(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function E(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=SX(g,N);if(P=Q$(P,void 0,"publicKey"),S=k(S,b),!B8(A)){let f=A instanceof m?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+f)}v(A,O);try{let f=m.fromBytes(A,O),r=$.fromBytes(P);if(L&&f.hasHighS())return!1;let{r:B,s:o}=f,q$=F(S),Y$=X.inv(o),G$=X.create(q$*Y$),s=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(r.multiplyUnsafe(s));if(O$.is0())return!1;return X.create(O$.x)===B}catch(f){return!1}}function I(A,S,P={}){let{prehash:g}=SX(P,N);return S=k(S,g),m.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R,Point:$,sign:_,verify:E,recoverPublicKey:I,Signature:m,hash:q})}function k7($,q,J){return $&q^~$&J}function y7($,q,J){return $&q^$&J^q&J}class KY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=UY(this.buffer)}update($){Tq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=UY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Tq(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,j0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=UY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),r$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var HY=BigInt(4294967295),m7=BigInt(32);function G6($,q=!1){if(q)return{h:Number($&HY),l:Number($>>m7&HY)};return{h:Number($>>m7&HY)|0,l:Number($&HY)|0}}function OY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=G6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var CX=($,q,J)=>$>>>J,PX=($,q,J)=>$<<32-J|q>>>J,vJ=($,q,J)=>$>>>J|q<<32-J,bJ=($,q,J)=>$<<32-J|q>>>J,iG=($,q,J)=>$<<64-J|q>>>J-32,dG=($,q,J)=>$>>>J-32|q<<64-J;var f7=($,q,J)=>$<<J|q>>>32-J,x7=($,q,J)=>q<<J|$>>>32-J,h7=($,q,J)=>q<<J-32|$>>>64-J,u7=($,q,J)=>$<<J-32|q>>>64-J;function Jq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var p7=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),l7=($,q,J,G)=>q+J+G+($/4294967296|0)|0,r7=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),i7=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,d7=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),c7=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var Y6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),eq=new Uint32Array(64);class LX extends KY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)eq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=eq[M-15],D=eq[M-2],R=p0(z,7)^p0(z,18)^z>>>3,N=p0(D,17)^p0(D,19)^D>>>10;eq[M]=N+eq[M-7]+R+eq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=p0(X,6)^p0(X,11)^p0(X,25),D=W+z+k7(X,U,V)+Y6[M]+eq[M]|0,N=(p0(J,2)^p0(J,13)^p0(J,22))+y7(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){j0(eq)}destroy(){this.set(0,0,0,0,0,0,0,0),j0(this.buffer)}}class n7 extends LX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class X6 extends LX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var o7=(()=>OY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),U6=(()=>o7[0])(),V6=(()=>o7[1])(),$J=new Uint32Array(80),qJ=new Uint32Array(80);class cG extends KY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)$J[T]=$.getUint32(q),qJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=$J[T-15]|0,m=qJ[T-15]|0,u=vJ(v,m,1)^vJ(v,m,8)^CX(v,m,7),F=bJ(v,m,1)^bJ(v,m,8)^PX(v,m,7),x=$J[T-2]|0,y=qJ[T-2]|0,k=vJ(x,y,19)^iG(x,y,61)^CX(x,y,6),l=bJ(x,y,19)^dG(x,y,61)^PX(x,y,6),_=r7(F,l,qJ[T-7],qJ[T-16]),E=i7(_,u,k,$J[T-7],$J[T-16]);$J[T]=E|0,qJ[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=vJ(M,z,14)^vJ(M,z,18)^iG(M,z,41),m=bJ(M,z,14)^bJ(M,z,18)^dG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=d7(Z,m,F,V6[T],qJ[T]),y=c7(x,j,v,u,U6[T],$J[T]),k=x|0,l=vJ(J,G,28)^iG(J,G,34)^iG(J,G,39),_=bJ(J,G,28)^dG(J,G,34)^dG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=Jq(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=p7(k,_,I);J=l7(A,y,l,E),G=A|0}({h:J,l:G}=Jq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Jq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Jq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Jq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Jq(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=Jq(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=Jq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=Jq(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){j0($J,qJ)}destroy(){j0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class W6 extends cG{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class a7 extends cG{Ah=r$[0]|0;Al=r$[1]|0;Bh=r$[2]|0;Bl=r$[3]|0;Ch=r$[4]|0;Cl=r$[5]|0;Dh=r$[6]|0;Dl=r$[7]|0;Eh=r$[8]|0;El=r$[9]|0;Fh=r$[10]|0;Fl=r$[11]|0;Gh=r$[12]|0;Gl=r$[13]|0;Hh=r$[14]|0;Hl=r$[15]|0;constructor(){super(48)}}var $0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),q0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class M6 extends cG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(28)}}class z6 extends cG{Ah=q0[0]|0;Al=q0[1]|0;Bh=q0[2]|0;Bl=q0[3]|0;Ch=q0[4]|0;Cl=q0[5]|0;Dh=q0[6]|0;Dl=q0[7]|0;Eh=q0[8]|0;El=q0[9]|0;Fh=q0[10]|0;Fl=q0[11]|0;Gh=q0[12]|0;Gl=q0[13]|0;Hh=q0[14]|0;Hl=q0[15]|0;constructor(){super(32)}}var NY=S8(()=>new n7,nq(1));var s7=S8(()=>new a7,nq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var R6=BigInt(1),t7=BigInt(2),D6=BigInt(3),K6=BigInt(5),H3=BigInt(8),e7=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function H6($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=e7,U=$*$%Y*$%Y,V=v0(U,t7,Y)*U%Y,W=v0(V,R6,Y)*$%Y,M=v0(W,K6,Y)*W%Y,z=v0(M,q,Y)*M%Y,D=v0(z,J,Y)*z%Y,R=v0(D,G,Y)*D%Y,N=v0(R,Q,Y)*R%Y,w=v0(N,Q,Y)*R%Y,j=v0(w,q,Y)*M%Y;return{pow_p_5_8:v0(j,t7,Y)*$%Y,b2:U}}function O6($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var $5=(()=>{let $=e7;return L7({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=H6(q);return R0(v0(J,D6,$)*G,$)},adjustScalarBytes:O6})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var N6=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),w6=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var j6=IX(N6),FX=EX(j6,NY);var A6=IX(w6),q5=EX(A6,s7);function G5($,q,J){if(_0($),J===void 0)J=new Uint8Array($.outputLen);return C8($,J,q)}var gX=Uint8Array.of(0),J5=Uint8Array.of();function Q5($,q,J,G=32){_0($),m$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=J5;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=C8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)gX[0]=M+1,V.update(M===0?J5:W).update(J).update(gX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),j0(W,gX),X.slice(0,G)}var Z6=BigInt(0),nG=BigInt(1),B6=BigInt(2),S6=BigInt(7),T6=BigInt(256),I6=BigInt(113),U5=[],V5=[],W5=[];for(let $=0,q=nG,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],U5.push(2*(5*G+J)),V5.push(($+1)*($+2)/2%64);let Q=Z6;for(let Y=0;Y<7;Y++)if(q=(q<<nG^(q>>S6)*I6)%T6,q&B6)Q^=nG<<(nG<<BigInt(Y))-nG;W5.push(Q)}var M5=OY(W5,!0),E6=M5[0],C6=M5[1],Y5=($,q,J)=>J>32?h7($,q,J):f7($,q,J),X5=($,q,J)=>J>32?u7($,q,J):x7($,q,J);function P6($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=Y5(W,M,1)^J[U],D=X5(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=D}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=V5[X],V=Y5(Q,Y,U),W=X5(Q,Y,U),M=U5[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=E6[G],$[1]^=C6[G]}j0(J)}class wY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=XY(this.state)}clone(){return this._cloneInto()}keccak(){WX(this.state32),P6(this.state32,this.rounds),WX(this.state32),this.posOut=0,this.pos=0}update($){Tq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Tq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(YY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,j0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new wY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var z5=($,q,J,G={})=>S8(()=>new wY(q,$,J),G);var kJ=z5(6,136,32,nq(8));var R5=z5(6,72,64,nq(10));var D5=($,q,J,G={})=>S8((Q={})=>new wY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),K5=D5(31,168,16,nq(11)),Gq=D5(31,136,32,nq(12));function _X($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function O5($){return _X($),($&$-1)===0&&$!==0}function vX($,q){_X($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function N5($){return _X($),31-Math.clz32($)}function H5($){let q=$.length;if(q<2||!O5(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=N5(q);for(let G=0;G<q;G++){let Q=vX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var bX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=N5(J);if(!O5(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)H5(M);for(let z=0,D=1;z<V-X;z++){let R=Q?z+1+X:V-z,N=1<<R,w=N>>1,j=J>>R;for(let Z=0;Z<J;Z+=N)for(let T=0,v=D++;T<w;T++){let m=Y?Q?J-v:v:T*j,u=Z+T,F=Z+T+w,x=G[m],y=M[F],k=M[u];if(W){let l=$.mul(y,x);M[u]=$.add(k,l),M[F]=$.sub(k,l)}else if(Y)M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),x);else M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),x)}}if(!Q&&U)H5(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Qq=cq;function jY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function w5($){return Uint8Array.from($)}function yJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function AY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function v$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function kX($){return(1<<$)-1}var F3=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var j5=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,v=G)=>{let m=T%v|0;return(m>=0?m|0:v+m|0)|0},W=(T,v=G)=>{let m=V(T,v)|0;return(m>v>>1?m-v|0:m)|0};function M(){let T=q(J);for(let v=0;v<J;v++){let m=vX(v,X),u=BigInt(Y)**BigInt(m)%BigInt(G);T[v]=Number(u)|0}return T}let z=M(),D={add:(T,v)=>V((T|0)+(v|0))|0,sub:(T,v)=>V((T|0)-(v|0))|0,mul:(T,v)=>V((T|0)*(v|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=bX(D,{dit:!1,...R}),w=bX(D,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let v=0;v<T.length;v++)T[v]=V(Q*T[v]);return T}},bitsCoder:(T,v)=>{let m=kX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=(v.encode(F[y])&m)<<l,l+=T;for(;l>=8;l-=8,k>>=8)x[_++]=k&kX(l)}return x},decode:(F)=>{let x=q(J);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=F[y]<<l,l+=8;for(;l>=T;l-=T,k>>=T)x[_++]=v.decode(k&m)}return x}}}}},L6=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),v$(Y,G)}}},A5=L6(K5);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var J0=256,Pq=3329,F6=3303,g6=17,{mod:sG,nttZetas:_6,NTT:mJ,bitsCoder:v6}=j5({N:J0,Q:Pq,F:F6,ROOT_OF_UNITY:g6,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),yX={512:{N:J0,Q:Pq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:J0,Q:Pq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:J0,Q:Pq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},b6=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+Pq/2)/Pq,decode:(J)=>J*Pq+q>>>$}},oG=($)=>v6($,b6($));function fJ($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]+q[J])}function k6($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]-q[J])}function y6($,q,J,G,Q){let Y=sG(q*G*Q+$*J),X=sG($*G+q*J);return{c0:Y,c1:X}}function ZY($,q){for(let J=0;J<J0/2;J++){let G=_6[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=y6($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function Z5($){let q=new Uint16Array(J0);for(let J=0;J<J0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<J0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<Pq)q[J++]=Y;if(J<J0&&X<Pq)q[J++]=X}}return q}function aG($,q,J,G){let Q=$(G*J0/4,q,J),Y=new Uint16Array(J0),X=XY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let D=X[V];for(let R=0;R<32;R++)if(M+=D&1,D>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=sG(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var m6=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=oG(1),M=oG(V),z=oG(U),D=yJ("publicKey",AY(oG(12),q),32),R=AY(oG(12),q),N=yJ("ciphertext",AY(z,q),M),w=yJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let Z=new Uint8Array(33);Z.set(j),Z[32]=q;let T=Q(Z),[v,m]=w.decode(T),u=[],F=[];for(let k=0;k<q;k++)u.push(mJ.encode(aG(J,m,k,Y)));let x=G(v);for(let k=0;k<q;k++){let l=mJ.encode(aG(J,m,q+k,Y));for(let _=0;_<q;_++){let E=Z5(x.get(_,k));fJ(l,ZY(E,u[_]))}F.push(l)}x.clean();let y={publicKey:D.encode([F,v]),secretKey:R.encode(u)};return v$(v,m,u,F,Z,T),y},encrypt:(j,Z,T)=>{let[v,m]=D.decode(j),u=[];for(let _=0;_<q;_++)u.push(mJ.encode(aG(J,T,_,Y)));let F=G(m),x=new Uint16Array(J0),y=[];for(let _=0;_<q;_++){let E=aG(J,T,q+_,X),I=new Uint16Array(J0);for(let A=0;A<q;A++){let S=Z5(F.get(_,A));fJ(I,ZY(S,u[A]))}fJ(E,mJ.decode(I)),y.push(E),fJ(x,ZY(v[_],u[_])),v$(I)}F.clean();let k=aG(J,T,2*q,X);fJ(k,mJ.decode(x));let l=W.decode(Z);return fJ(l,k),v$(v,u,x,k),N.encode([y,l])},decrypt:(j,Z)=>{let[T,v]=N.decode(j),m=R.decode(Z),u=new Uint16Array(J0);for(let F=0;F<q;F++)fJ(u,ZY(m[F],mJ.encode(T[F])));return k6(v,mJ.decode(u)),v$(u,m,T),W.encode(v)}}};function mX($){let q=m6($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=yJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Qq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:D}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([D,z,R,M.subarray(32)]);return v$(D,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,D,R,N]=U.decode(M);return Uint8Array.from(D)},encapsulate:(M,z=Qq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let D=M.subarray(0,384*$.K),R=Y.encode(Y.decode(w5(D)));if(!jY(R,D))throw v$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");v$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return v$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let D=U.bytesLen-96,R=D+32,N=J(z.subarray(D/2,R));if(!jY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,Z,T]=U.decode(z),v=q.decrypt(M,w),m=G.create().update(v).update(Z).digest(),u=m.subarray(0,32),F=q.encrypt(j,v,m.subarray(32,64)),x=jY(M,F),y=Q.create({dkLen:32}).update(T).update(M).digest();return v$(v,F,!x?u:y),x?u:y}}}function f6($,q,J){return Gq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var fX={HASH256:kJ,HASH512:R5,KDF:Gq,XOF:A5,PRF:f6},u3=mX({...fX,...yX[512]}),tG=mX({...fX,...yX[768]}),B5=mX({...fX,...yX[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function x6($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Qq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?aq(X):oq(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function xX($,q=!1){let J=x6($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Qq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return v$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function eG($,q){return yJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function hX($){return(q,J)=>$(q,{dkLen:J})}function h6($,q,...J){let G=eG(J,"seed"),Q=eG(J,"publicKey");if($===void 0)$=G.bytesLen;m$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,D)=>z.keygen(U[D])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Qq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return v$(U),v$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function BY($,q,J,G,...Q){let Y=h6($,J,...Q),X=eG(Q,"cipherText"),U=eG(Q,"publicKey"),V=eG(Q,"msg");if(q===void 0)q=V.bytesLen;return m$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Qq(V.bytesLen)){let z=U.decode(W),D=V.decode(M),R=Q.map((Z,T)=>Z.encapsulate(z[T],D[T])),N=R.map((Z)=>Z.sharedSecret),w=R.map((Z)=>Z.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return v$(N,w),j},decapsulate(W,M){let z=X.decode(W),{publicKey:D,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(D,z,N)}}}function S5($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>Q(L$(U[0],U[1],X[1],Y[1],sq($))),q,J)}var t3=S5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",tG,xX(FX,!0),Gq,kJ),e3=S5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",B5,xX(q5,!0),Gq,kJ);function u6($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>{let V=L$(U[0],U[1],X[0],Y[0],X[1],Y[1],sq($)),W=32,M=L$(sq("hybrid_prk"),V),z=G5(Q,M),D=L$(T8(32,2),sq("shared_secret"),sq("")),R=Q5(Q,z,D,32);return v$(z,D,M,V),R},q,J)}var T5=xX($5),$F=u6("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",tG,T5,Gq,NY),p6=(()=>BY(32,32,hX(Gq),($,q,J)=>kJ(L$(J[0],J[1],q[1],$[1],sq("\\.//^\\"))),tG,T5))();function l6($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Qq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Qq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return v$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function r6($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=l6(J,Q,Y,G),U=64,V=U+G;return BY(32,32,(W)=>{Q$(W,32);let M=Gq(W,{dkLen:V}),z=M.subarray(0,U),D=M.subarray(U,V);return L$(z,D)},(W,M,z)=>kJ(L$(z[0],z[1],M[1],W[1],sq($))),q,X)}var i6=(()=>r6("MLKEM768-P256",tG,FX,128))();var uX=p6,I5=i6;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>x$($,q,J),lX=C$,L8=cQ,d$=(...$)=>r9(...$),F8=($)=>CG($),g8=u9,_8=($)=>wq($),TY=BigInt(0),pX=BigInt(1);function Lq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function IY($){if(typeof $==="bigint"){if(!SY($))throw RangeError("positive bigint expected, got "+$)}else lX($);return $}function Yq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function $Q($){let q=IY($).toString(16);return q.length&1?"0"+q:q}function E5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?TY:BigInt("0x"+$)}function xJ($){return E5(cQ($))}function l0($){return E5(cQ(JJ(x$($)).reverse()))}function EY($,q){if(C$(q),q===0)throw RangeError("zero length");$=IY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return CG(J.padStart(q*2,"0"))}function qQ($,q){return EY($,q).reverse()}function C5($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function JJ($){return Uint8Array.from(Z$($))}function CY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var SY=($)=>typeof $==="bigint"&&TY<=$;function d6($,q,J){return SY($)&&SY(q)&&SY(J)&&q<=$&&$<J}function Fq($,q,J,G){if(!d6(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function v8($){if($<TY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>TY;$>>=pX,q+=1);return q}var JQ=($)=>(pX<<BigInt($))-pX;function P5($,q,J){if(C$($,"hashLen"),C$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,d$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return d$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while((T=Z(N()))===void 0)R();return z(),T}}function b0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var rX=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c$=BigInt(0),I$=BigInt(1),hJ=BigInt(2),_5=BigInt(3),v5=BigInt(4),b5=BigInt(5),c6=BigInt(7),k5=BigInt(8),n6=BigInt(9),y5=BigInt(16);function B$($,q){if(q<=c$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=c$?J:q+J}function k0($,q,J){if(q<c$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >c$)G*=G,G%=J;return G}function L5($,q){if($===c$)throw Error("invert: expected non-zero number");if(q<=c$)throw Error("invert: expected positive modulus, got "+q);let J=B$($,q),G=q,Q=c$,Y=I$,X=I$,U=c$;while(J!==c$){let W=G/J,M=G-J*W,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==I$)throw Error("invert: does not exist");return B$(Q,q)}function iX($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function m5($,q){let J=$,G=(J.ORDER+I$)/v5,Q=J.pow(q,G);return iX(J,Q,q),Q}function o6($,q){let J=$,G=(J.ORDER-b5)/k5,Q=J.mul(q,hJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,hJ),Y),V=J.mul(X,J.sub(U,J.ONE));return iX(J,V,q),V}function a6($){let q=PY($),J=f5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+c6)/y5;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),D=W.mul(M,Q),R=W.mul(M,Y),N=W.eql(W.sqr(z),V),w=W.eql(W.sqr(D),V);M=W.cmov(M,z,N),z=W.cmov(R,D,w);let j=W.eql(W.sqr(z),V),Z=W.cmov(M,z,j);return iX(W,Z,V),Z}}function f5($){if($<_5)throw Error("sqrt is not defined for small field");let q=$-I$,J=0;while(q%hJ===c$)q/=hJ,J++;let G=hJ,Q=PY($);while(F5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return m5;let Y=Q.pow(G,q),X=(q+I$)/hJ;return function(V,W){let M=V;if(M.is0(W))return W;if(F5(M,W)!==1)throw Error("Cannot find square root");let z=J,D=M.mul(M.ONE,Y),R=M.pow(W,q),N=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let Z=I$<<BigInt(z-w-1),T=M.pow(D,Z);z=w,D=M.sqr(T),R=M.mul(R,D),N=M.mul(N,T)}return N}}function s6($){if($%v5===_5)return m5;if($%k5===b5)return o6;if($%y5===n6)return a6($);return f5($)}var gq=($,q)=>(B$($,q)&I$)===I$,t6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function dX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=t6.reduce((G,Q)=>{return G[Q]="function",G},q);if(b0($,J),Yq($.BYTES,"BYTES"),Yq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function e6($,q,J){let G=$;if(J<c$)throw Error("invalid exponent, negatives unsupported");if(J===c$)return G.ONE;if(J===I$)return q;let Q=G.ONE,Y=q;while(J>c$){if(J&I$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=I$}return Q}function GQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function F5($,q){let J=$,G=(J.ORDER-I$)/hJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function $N($,q){if(q!==void 0)lX(q);if($<=c$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=v8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var g5=new WeakMap;class cX{ORDER;BITS;BYTES;isLE;ZERO=c$;ONE=I$;_lengths;_mod;constructor($,q={}){if($<=I$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=$N($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return c$<=$&&$<this.ORDER}is0($){return $===c$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I$)===I$}neg($){return B$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return B$($*$,this.ORDER)}add($,q){return B$($+q,this.ORDER)}sub($,q){return B$($-q,this.ORDER)}mul($,q){return B$($*q,this.ORDER)}pow($,q){return e6(this,$,q)}div($,q){return B$($*L5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return L5($,this.ORDER)}sqrt($){let q=g5.get(this);if(!q)g5.set(this,q=s6(this.ORDER));return q(this,$)}toBytes($){return this.isLE?qQ($,this.BYTES):EY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?l0($):xJ($);if(X)U=B$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return GQ(this,$)}cmov($,q,J){return Lq(J,"condition"),J?q:$}}Object.freeze(cX.prototype);function PY($,q={}){return new cX($,q)}function x5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I$)throw Error("field order must be greater than 1");let q=v8($-I$);return Math.ceil(q/8)}function nX($){let q=x5($);return q+Math.ceil(q/2)}function h5($,q,J=!1){Z$($);let G=$.length,Q=x5(q),Y=Math.max(nX(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?l0($):xJ($),U=B$(X,q-I$)+I$;return J?qQ(U,Q):EY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b8=BigInt(0),uJ=BigInt(1);function QQ($,q){let J=q.negate();return $?J:q}function pJ($,q){let J=GQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function r5($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function oX($,q){r5($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=JQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function u5($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=uJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var aX=new WeakMap,i5=new WeakMap;function sX($){return i5.get($)||1}function p5($){if($!==b8)throw Error("invalid wNAF")}class YQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>b8){if(q&uJ)J=J.add(G);G=G.double(),q>>=uJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=oX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=oX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=u5(J,X,Y);if(J=U,W)Q=Q.add(QQ(z,q[D]));else G=G.add(QQ(M,q[V]))}return p5(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=oX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===b8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=u5(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return p5(J),G}getPrecomputes($,q,J){let G=aX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);aX.set(q,G)}}return G}cached($,q,J){let G=sX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=sX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){r5(q,this.bits),i5.set($,q),aX.delete($)}hasCache($){return sX($)!==1}}function d5($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>b8||G>b8){if(J&uJ)Y=Y.add(Q);if(G&uJ)X=X.add(Q);Q=Q.double(),J>>=uJ,G>>=uJ}return{p1:Y,p2:X}}function l5($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return dX(q),q}else return PY($,{isLE:J})}function LY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>b8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=l5(q.p,J.Fp,G),Y=l5(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function XQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function UQ($,q){if(Yq($),Yq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function qN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function JN($){if(!g8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?CY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function tX($,q,J,G){if(Z$($),Yq(J),q=JN(q),q.length>255)q=G(d$(CY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=d$(q,UQ(q.length,1)),V=new Uint8Array(Y),W=UQ(J,2),M=Array(X),z=G(d$(V,$,W,UQ(0,1),U));M[0]=G(d$(z,UQ(1,1),U));for(let R=1;R<X;R++){let N=[qN(z,M[R-1]),UQ(R+1,1),U];M[R]=G(d$(...N))}return d$(...M).slice(0,J)}var c5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var n5=($,q)=>($+($>=0?q:-q)/a5)/q;function GN($,q,J){Fq("scalar",$,Xq,J);let[[G,Q],[Y,X]]=q,U=n5(X*$,J),V=n5(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Xq,D=M<Xq;if(z)W=-W;if(D)M=-M;let R=JQ(Math.ceil(v8(J)/2))+GJ;if(W<Xq||W>=R||M<Xq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:D,k2:M}}function $U($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function eX($,q){b0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(Lq(J.lowS,"lowS"),Lq(J.prehash,"prehash"),J.format!==void 0)$U(J.format);return J}class o5 extends Error{constructor($=""){super($)}}var r0={Err:o5,_tlv:{encode:($,q)=>{let{Err:J}=r0;if(Yq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=$Q(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?$Q(Q.length/2|128):"";return $Q($)+Y+Q+q},decode($,q){let{Err:J}=r0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=r0;if(IY($),$<Xq)throw new q("integer: negative integers are not allowed");let J=$Q($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=r0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return xJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=r0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=r0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(r0._tlv);Object.freeze(r0._int);Object.freeze(r0);var Xq=BigInt(0),GJ=BigInt(1),a5=BigInt(2),FY=BigInt(3),QN=BigInt(4);function s5($,q={}){let J=LY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;b0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=e5(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(_,E,I){if(W&&E.is0())return Uint8Array.of(0);let{x:A,y:S}=E.toAffine(),P=G.toBytes(A);if(Lq(I,"isCompressed"),I){z();let g=!G.isOdd(S);return d$(t5(g),P)}else return d$(Uint8Array.of(4),P,G.toBytes(S))}function R(_){Z$(_,void 0,"Point");let{publicKey:E,publicKeyUncompressed:I}=M,A=_.length,S=_[0],P=_.subarray(1);if(W&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===E&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(r){let B=r instanceof Error?": "+r.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===I&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${E} or uncompressed=${I}`)}let N=q.toBytes===void 0?D:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(_){let E=G.sqr(_),I=G.mul(E,_);return G.add(G.add(I,G.mul(_,Y.a)),Y.b)}function Z(_,E){let I=G.sqr(E),A=j(_);return G.eql(I,A)}if(!Z(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,FY),QN),v=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,v)))throw Error("bad curve params: a or b");function m(_,E,I=!1){if(!G.isValid(E)||I&&G.is0(E))throw Error(`bad point coordinate ${_}`);return E}function u(_){if(!(_ instanceof y))throw Error("Weierstrass Point expected")}function F(_){if(!V||!V.basises)throw Error("no endo");return GN(_,V.basises,Q.ORDER)}function x(_,E,I,A,S){return I=new y(G.mul(I.X,_),I.Y,I.Z),E=QQ(A,E),I=QQ(S,I),E.add(I)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(_,E,I){this.X=m("x",_),this.Y=m("y",E,!0),this.Z=m("z",I),Object.freeze(this)}static CURVE(){return Y}static fromAffine(_){let{x:E,y:I}=_||{};if(!_||!G.isValid(E)||!G.isValid(I))throw Error("invalid affine point");if(_ instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(I))return y.ZERO;return new y(E,I,G.ONE)}static fromBytes(_){let E=y.fromAffine(w(Z$(_,void 0,"point")));return E.assertValidity(),E}static fromHex(_){return y.fromBytes(F8(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,E=!0){if(l.createCache(this,_),!E)this.multiply(FY);return this}assertValidity(){let _=this;if(_.is0()){if(q.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:E,y:I}=_.toAffine();if(!G.isValid(E)||!G.isValid(I))throw Error("bad point: x or y not field elements");if(!Z(E,I))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.eql(G.mul(E,g),G.mul(S,A)),b=G.eql(G.mul(I,g),G.mul(P,A));return L&&b}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:E}=Y,I=G.mul(E,FY),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),f=G.mul(S,S),r=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(_,b),L=G.mul(I,r),L=G.add(g,L),g=G.sub(f,L),L=G.add(f,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(I,b),r=G.mul(_,r),B=G.sub(O,r),B=G.mul(_,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,r),O=G.mul(O,B),L=G.add(L,O),r=G.mul(S,P),r=G.add(r,r),O=G.mul(r,B),g=G.sub(g,O),b=G.mul(r,f),b=G.add(b,b),b=G.add(b,b),new y(g,L,b)}add(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=Y.a,r=G.mul(Y.b,FY),B=G.mul(E,S),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.add(E,I),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,o),Y$=G.sub(Y$,G$),G$=G.add(E,A);let s=G.add(S,g);return G$=G.mul(G$,s),s=G.add(B,q$),G$=G.sub(G$,s),s=G.add(I,A),L=G.add(P,g),s=G.mul(s,L),L=G.add(o,q$),s=G.sub(s,L),O=G.mul(f,G$),L=G.mul(r,q$),O=G.add(L,O),L=G.sub(o,O),O=G.add(o,O),b=G.mul(L,O),o=G.add(B,B),o=G.add(o,B),q$=G.mul(f,q$),G$=G.mul(r,G$),o=G.add(o,q$),q$=G.sub(B,q$),q$=G.mul(f,q$),G$=G.add(G$,q$),B=G.mul(o,G$),b=G.add(b,B),B=G.mul(s,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,o),O=G.mul(s,O),O=G.add(O,B),new y(L,b,O)}subtract(_){return u(_),this.add(_.negate())}is0(){return this.equals(y.ZERO)}multiply(_){let{endo:E}=q;if(!Q.isValidNot0(_))throw RangeError("invalid scalar: out of range");let I,A,S=(P)=>l.cached(this,P,(g)=>pJ(y,g));if(E){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(_),{p:O,f}=S(g),{p:r,f:B}=S(b);A=f.add(B),I=x(E.beta,O,r,P,L)}else{let{p:P,f:g}=S(_);I=P,A=g}return pJ(y,[I,A])[0]}multiplyUnsafe(_){let{endo:E}=q,I=this,A=_;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Xq||I.is0())return y.ZERO;if(A===GJ)return I;if(l.hasCache(this))return this.multiply(A);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=d5(y,I,P,L);return x(E.beta,b,O,S,g)}else return l.unsafe(I,A)}toAffine(_){let E=this,I=_,{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:_}=q;if(X===GJ)return!0;if(_)return _(y,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:_}=q;if(X===GJ)return this;if(_)return _(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===GJ)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return Lq(_,"isCompressed"),this.assertValidity(),N(y,this,_)}toHex(_=!0){return L8(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let k=Q.BITS,l=new YQ(y,q.endo?Math.ceil(k/2):k);if(k>=8)y.BASE.precompute(8);return Object.freeze(y.prototype),Object.freeze(y),y}function t5($){return Uint8Array.of($?2:3)}function e5($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function YN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?_8:q.randomBytes,Q=Object.assign(e5($.Fp,J),{seed:Math.max(nX(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,h5(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,Z=J._lengths;if(!g8(R))return;let T=Z$(R,void 0,"key").length,v=T===w||T===j,m=T===N||!!Z?.includes(T);if(v&&m)return;return v}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=XQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function $M($,q,J={}){let G=q;Nq(G),b0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?_8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>jq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N}=YN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*a5+GJ<X.ORDER;function Z(S){let P=V>>GJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function v(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function m(S,P){$U(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(v(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){m(S,P);let g;if(P==="der"){let{r:f,s:r}=r0.toSig(Z$(S));return new u(f,r)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(F8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),f=$.fromBytes(d$(t5((L&1)===0),O)),r=U.inv(b),B=x(Z$(S,void 0,"msgHash")),o=U.create(-B*r),q$=U.create(g*r),Y$=$.BASE.multiplyUnsafe(o).add(f.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return Z(this.s)}toBytes(S=w.format){if($U(S),S==="der")return F8(r0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return v(),d$(Uint8Array.of(this.assertRecovery()),L,b);return d$(L,b)}toHex(S){return L8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=xJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,y=JQ(W);function k(S){return Fq("num < 2^"+W,S,Xq,y),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function _(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=eX(g,w);S=l(S,b);let f=x(S),r=U.fromBytes(P);if(!U.isValidNot0(r))throw Error("invalid private key");let B=[k(r),k(f)];if(O!=null&&O!==!1){let G$=O===!0?Q(N.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let o=d$(...B),q$=f;function Y$(G$){let s=F(G$);if(!U.isValidNot0(s))return;let O$=U.inv(s),A$=$.BASE.multiply(s).toAffine(),T$=U.create(A$.x);if(T$===Xq)return;let y$=U.create(O$*U.create(q$+T$*r));if(y$===Xq)return;let M0=(A$.x===T$?0:2)|Number(A$.y&GJ),e0=y$;if(L&&Z(y$))e0=U.neg(y$),M0^=1;return new u(T$,e0,j?void 0:M0)}return{seed:o,k2sig:Y$}}function E(S,P,g={}){let{seed:L,k2sig:b}=_(S,P,g);return P5(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function I(S,P,g,L={}){let{lowS:b,prehash:O,format:f}=eX(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!g8(S)){let r=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+r)}m(S,f);try{let r=u.fromBytes(S,f),B=$.fromBytes(g);if(b&&r.hasHighS())return!1;let{r:o,s:q$}=r,Y$=x(P),G$=U.inv(q$),s=U.create(Y$*G$),O$=U.create(o*G$),A$=$.BASE.multiplyUnsafe(s).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===o}catch(r){return!1}}function A(S,P,g={}){let{prehash:L}=eX(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N,Point:$,sign:E,verify:I,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var XN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var UN=s5(XN),k8=$M(UN,p$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QJ=BigInt(0),A0=BigInt(1),qU=BigInt(2),VN=BigInt(8);function WN($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function qM($,q={}){let J=q,G=LY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;b0(J,{},{uvRatio:"function"});let V=qU<<BigInt(Y.BYTES*8)-A0,W=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(Z){return{isValid:!1,value:QJ}}}:J.uvRatio;if(!WN(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,Z=!1){let T=Z?A0:QJ;return Fq("coordinate "+w,j,T,V),j}function D(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,A0,W(X.Gx*X.Gy));static ZERO=new R(QJ,A0,A0,QJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,Z,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",Z,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:Z}=w||{};return z("x",j),z("y",Z),new R(j,Z,A0,W(j*Z))}static fromBytes(w,j=!1){let Z=Q.BYTES,{a:T,d:v}=X;w=JJ(Z$(w,Z,"point")),Lq(j,"zip215");let m=JJ(w),u=w[Z-1];m[Z-1]=u&-129;let F=l0(m),x=j?V:Q.ORDER;Fq("point.y",F,QJ,x);let y=W(F*F),k=W(y-A0),l=W(v*y-T),{isValid:_,value:E}=M(k,l);if(!_)throw Error("bad point: invalid y coordinate");let I=(E&A0)===A0,A=(u&128)!==0;if(!j&&E===QJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==I)E=W(-E);return R.fromAffine({x:E,y:F})}static fromHex(w,j=!1){return R.fromBytes(F8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(qU);return this}assertValidity(){let w=this,{a:j,d:Z}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:v,Z:m,T:u}=w,F=W(T*T),x=W(v*v),y=W(m*m),k=W(y*y),l=W(F*j),_=W(y*W(l+x)),E=W(k+W(Z*W(F*x)));if(_!==E)throw Error("bad point: equation left != right (1)");let I=W(T*v),A=W(m*u);if(I!==A)throw Error("bad point: equation left != right (2)")}equals(w){D(w);let{X:j,Y:Z,Z:T}=this,{X:v,Y:m,Z:u}=w,F=W(j*u),x=W(v*T),y=W(Z*u),k=W(m*T);return F===x&&y===k}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:w}=X,{X:j,Y:Z,Z:T}=this,v=W(j*j),m=W(Z*Z),u=W(qU*W(T*T)),F=W(w*v),x=j+Z,y=W(W(x*x)-v-m),k=F+m,l=k-u,_=F-m,E=W(y*l),I=W(k*_),A=W(y*_),S=W(l*k);return new R(E,I,S,A)}add(w){D(w);let{a:j,d:Z}=X,{X:T,Y:v,Z:m,T:u}=this,{X:F,Y:x,Z:y,T:k}=w,l=W(T*F),_=W(v*x),E=W(u*Z*k),I=W(m*y),A=W((T+v)*(F+x)-l-_),S=I-E,P=I+E,g=W(_-j*l),L=W(A*S),b=W(P*g),O=W(A*g),f=W(S*P);return new R(L,b,f,O)}subtract(w){return D(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:Z}=N.cached(this,w,(T)=>pJ(R,T));return pJ(R,[j,Z])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===QJ)return R.ZERO;if(this.is0()||w===A0)return this;return N.unsafe(this,w,(j)=>pJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,Z=w,{X:T,Y:v,Z:m}=j,u=j.is0();if(Z==null)Z=u?VN:Q.inv(m);let F=W(T*Z),x=W(v*Z),y=Q.mul(m,Z);if(u)return{x:QJ,y:A0};if(y!==A0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===A0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),Z=Q.toBytes(j);return Z[Z.length-1]|=w&A0?128:0,Z}toHex(){return L8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new YQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class JU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){rX()}static fromHex($){rX()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return L8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VQ=BigInt(0),y8=BigInt(1),gY=BigInt(2);function MN($){return b0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function JM($){let q=MN($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?_8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?gY**BigInt(254):gY**BigInt(447),N=U?BigInt(8)*gY**BigInt(251)-y8:BigInt(4)*gY**BigInt(445)-y8,w=R+N+y8,j=(A)=>B$(A,J),Z=T(z);function T(A){return qQ(j(A),M)}function v(A){let S=JJ(Z$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(l0(S))}function m(A){return l0(Q(JJ(Z$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===VQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){Fq("u",A,VQ,J),Fq("scalar",S,R,w);let P=S,g=A,L=y8,b=VQ,O=A,f=y8,r=VQ;for(let o=BigInt(W-1);o>=VQ;o--){let q$=P>>o&y8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A)=>{return A=A===void 0?V(M):A,Z$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze(_),Object.freeze(I),Object.freeze({keygen:XQ(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zN=BigInt(0),_q=BigInt(1),GM=BigInt(2),RN=BigInt(3),DN=BigInt(5),KN=BigInt(8),rJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),XU=(()=>({p:rJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:KN,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function XM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=rJ,U=$*$%Y*$%Y,V=k0(U,GM,Y)*U%Y,W=k0(V,_q,Y)*$%Y,M=k0(W,DN,Y)*W%Y,z=k0(M,q,Y)*M%Y,D=k0(z,J,Y)*z%Y,R=k0(D,G,Y)*D%Y,N=k0(R,Q,Y)*R%Y,w=k0(N,Q,Y)*R%Y,j=k0(w,q,Y)*M%Y;return{pow_p_5_8:k0(j,GM,Y)*$%Y,b2:U}}function HN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var GU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function UU($,q){let J=rJ,G=B$(q*q*q,J),Q=B$(G*G*q,J),Y=XM($*Q).pow_p_5_8,X=B$($*G*Y,J),U=B$(q*X*X,J),V=X,W=B$(X*GU,J),M=U===$,z=U===B$(-$,J),D=U===B$(-$*GU,J);if(M)X=V;if(z||D)X=W;if(gq(X,J))X=B$(-X,J);return{isValid:M||z,value:X}}var lJ=qM(XU,{uvRatio:UU}),YJ=(()=>lJ.Fp)(),UM=(()=>lJ.Fn)();var _Y=(()=>{let $=rJ;return JM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=XM(q);return B$(k0(J,RN,$)*G,$)},adjustScalarBytes:HN})})();var QU=GU,ON=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),NN=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),wN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),jN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),QM=($)=>UU(_q,$),AN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),YU=($)=>YJ.create(l0($)&AN);function YM($){let{d:q}=XU,J=rJ,G=(Z)=>YJ.create(Z),Q=G(QU*$*$),Y=G((Q+_q)*wN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=UU(Y,U),M=G(W*$);if(!gq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-_q)*jN-U),D=W*W,R=G((W+W)*U),N=G(z*ON),w=G(_q-D),j=G(_q+D);return new lJ(G(R*j),G(w*N),G(N*j),G(R*w))}class K0 extends JU{static BASE=(()=>new K0(lJ.BASE))();static ZERO=(()=>new K0(lJ.ZERO))();static Fp=(()=>YJ)();static Fn=(()=>UM)();constructor($){super($)}static fromAffine($){return new K0(lJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){x$($,32);let{a:q,d:J}=XU,G=rJ,Q=(v)=>YJ.create(v),Y=YU($);if(!C5(YJ.toBytes(Y),$)||gq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(_q+q*X),V=Q(_q-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:D,value:R}=QM(Q(z*M)),N=Q(R*V),w=Q(R*N*z),j=Q((Y+Y)*N);if(gq(j,G))j=Q(-j);let Z=Q(U*w),T=Q(j*Z);if(!D||gq(T,G)||Z===zN)throw Error("invalid ristretto255 encoding 2");return new K0(new lJ(j,Z,_q,T))}static fromHex($){return K0.fromBytes(CG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=rJ,Y=(w)=>YJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=QM(Y(X*V)),M=Y(W*X),z=Y(W*U),D=Y(M*z*G),R;if(gq(G*D,Q)){let w=Y(q*QU),j=Y($*QU);$=w,q=j,R=Y(M*NN)}else R=z;if(gq($*D,Q))q=Y(-q);let N=Y((J-q)*R);if(gq(N,Q))N=Y(-N);return YJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>YJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var ZN=Object.freeze({Point:K0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=tX($,J,64,sQ);return ZN.deriveToCurve(G)},hashToScalar($,q={DST:c5}){let J=tX($,q.DST,64,sQ);return UM.create(l0(J))},deriveToCurve($){x$($,64);let q=YU($.subarray(0,32)),J=YM(q),G=YU($.subarray(32,64)),Q=YM(G);return new K0(J.add(Q))}});var VM=!1,BN=!1;async function WM($,q){if(BN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function WU($,q){return await WM(async()=>{let J=VU($)?$:await TN($),G=await crypto.subtle.importKey("raw",IN(q),{name:"X25519"},VM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMult($,q)})}async function MU($){return await WM(async()=>{return WU($,_Y.GuBytes)},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMultBase($)})}var SN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function TN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...SN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},VM,["deriveBits"])}function VU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function IN($){return $}class MM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),CN(WQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=WQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:WQ(this.transcript)}}}function CN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function WQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function vY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function zM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function RM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class vq{args;body;constructor($,q){this.args=$,this.body=q}}function zU($){let q=[];q.push(`age-encryption.org/v1
|
|
58
58
|
`);for(let J of $){q.push("-> "+J.args.join(" ")+`
|
|
59
59
|
`);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(x0.encode(J.body.subarray(G,Q))+`
|
|
60
60
|
`)}if(J.body.length%48===0)q.push(`
|
package/dist/index.js
CHANGED
|
@@ -53,7 +53,7 @@ return `+str.trim()+`;
|
|
|
53
53
|
`).join(`
|
|
54
54
|
`+Y),$.push(Q+"m+"+OY.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=RA()+q+" "+$[0]}function RA(){if(FM.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function DA(...$){return process.stderr.write(HY.formatWithOptions(FM.inspectOpts,...$)+`
|
|
55
55
|
`)}function KA($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function HA(){return process.env.DEBUG}function OA($){$.inspectOpts={};let q=Object.keys(FM.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=FM.inspectOpts[q[J]]}OY.exports=SX()(FM);var{formatters:LM}=OY.exports;LM.o=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts).split(`
|
|
56
|
-
`).map((q)=>q.trim()).join(" ")};LM.O=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts)}});var vM=X$((Hv,EX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)EX.exports=SM();else EX.exports=_M()});var gz=X$((py,Fz)=>{var EY=Object.prototype.hasOwnProperty,Lz=Object.prototype.toString,Sz=Object.defineProperty,Tz=Object.getOwnPropertyDescriptor,Iz=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Lz.call(q)==="[object Array]"},Ez=function(q){if(!q||Lz.call(q)!=="[object Object]")return!1;var J=EY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&EY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||EY.call(q,Q)},Cz=function(q,J){if(Sz&&J.name==="__proto__")Sz(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Pz=function(q,J){if(J==="__proto__"){if(!EY.call(q,J))return;else if(Tz)return Tz(q,J).value}return q[J]};Fz.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Pz(U,J),Q=Pz(q,J),U!==Q){if(M&&Q&&(Ez(Q)||(Y=Iz(Q)))){if(Y)Y=!1,X=G&&Iz(G)?G:[];else X=G&&Ez(G)?G:{};Cz(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")Cz(U,{name:J,newValue:Q})}}return U}});import{access as WI,chmod as BU,mkdir as oR,readFile as sR,writeFile as aR}from"fs/promises";import{dirname as MI,join as SU}from"path";import{fileURLToPath as zI}from"url";var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.
|
|
56
|
+
`).map((q)=>q.trim()).join(" ")};LM.O=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts)}});var vM=X$((Hv,EX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)EX.exports=SM();else EX.exports=_M()});var gz=X$((py,Fz)=>{var EY=Object.prototype.hasOwnProperty,Lz=Object.prototype.toString,Sz=Object.defineProperty,Tz=Object.getOwnPropertyDescriptor,Iz=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Lz.call(q)==="[object Array]"},Ez=function(q){if(!q||Lz.call(q)!=="[object Object]")return!1;var J=EY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&EY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||EY.call(q,Q)},Cz=function(q,J){if(Sz&&J.name==="__proto__")Sz(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Pz=function(q,J){if(J==="__proto__"){if(!EY.call(q,J))return;else if(Tz)return Tz(q,J).value}return q[J]};Fz.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Pz(U,J),Q=Pz(q,J),U!==Q){if(M&&Q&&(Ez(Q)||(Y=Iz(Q)))){if(Y)Y=!1,X=G&&Iz(G)?G:[];else X=G&&Ez(G)?G:{};Cz(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")Cz(U,{name:J,newValue:Q})}}return U}});import{access as WI,chmod as BU,mkdir as oR,readFile as sR,writeFile as aR}from"fs/promises";import{dirname as MI,join as SU}from"path";import{fileURLToPath as zI}from"url";var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.69",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var IW=`ARG BUN_VERSION=1.3.10
|
|
57
57
|
FROM oven/bun:\${BUN_VERSION}-slim AS runtime
|
|
58
58
|
|
|
59
59
|
WORKDIR /app
|