@rizom/ops 0.2.0-alpha.73 → 0.2.0-alpha.74
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -54,7 +54,7 @@ return `+str.trim()+`;
|
|
|
54
54
|
`).join(`
|
|
55
55
|
`+Y),$.push(Q+"m+"+V9.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=$S()+q+" "+$[0]}function $S(){if(TD.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function qS(...$){return process.stderr.write(U9.formatWithOptions(TD.inspectOpts,...$)+`
|
|
56
56
|
`)}function JS($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function GS(){return process.env.DEBUG}function QS($){$.inspectOpts={};let q=Object.keys(TD.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=TD.inspectOpts[q[J]]}V9.exports=MV()(TD);var{formatters:SD}=V9.exports;SD.o=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts).split(`
|
|
57
|
-
`).map((q)=>q.trim()).join(" ")};SD.O=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts)}});var CD=X$((Fm,DV)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)DV.exports=ND();else DV.exports=ED()});var IK=X$((Qu,TK)=>{var w9=Object.prototype.hasOwnProperty,SK=Object.prototype.toString,NK=Object.defineProperty,wK=Object.getOwnPropertyDescriptor,jK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return SK.call(q)==="[object Array]"},AK=function(q){if(!q||SK.call(q)!=="[object Object]")return!1;var J=w9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&w9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||w9.call(q,Q)},ZK=function(q,J){if(NK&&J.name==="__proto__")NK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},BK=function(q,J){if(J==="__proto__"){if(!w9.call(q,J))return;else if(wK)return wK(q,J).value}return q[J]};TK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=BK(U,J),Q=BK(q,J),U!==Q){if(M&&Q&&(AK(Q)||(Y=jK(Q)))){if(Y)Y=!1,X=G&&jK(G)?G:[];else X=G&&AK(G)?G:{};ZK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")ZK(U,{name:J,newValue:Q})}}return U}});import{parseArgs as J6}from"util";var G6={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function x9($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function h9($,q){let J=$[q];return typeof J==="string"?J:void 0}function H7($){let{values:q,positionals:J}=J6({args:$,options:G6,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:x9(q,"help"),version:x9(q,"version"),dryRun:x9(q,"dry-run"),pushTo:h9(q,"push-to"),cohort:h9(q,"cohort"),anchorId:h9(q,"anchor-id")}}}var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.73",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as xN,mkdirSync as hN,readFileSync as SU,writeFileSync as TU}from"fs";import{dirname as uN,join as NM}from"path";function u9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function x$($,q,J=""){let G=u9($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Oq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function N8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function iQ($,q){x$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function dQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function w8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function f0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var Y6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function X6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function U6($){for(let q=0;q<$.length;q++)$[q]=X6($[q]);return $}var p9=Y6?($)=>$:U6,N7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),V6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function cQ($){if(x$($),N7)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=V6[$[J]];return q}var Hq={_0:48,_9:57,A:65,F:70,a:97,f:102};function O7($){if($>=Hq._0&&$<=Hq._9)return $-Hq._0;if($>=Hq.A&&$<=Hq.F)return $-(Hq.A-10);if($>=Hq.a&&$<=Hq.f)return $-(Hq.a-10);return}function CG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(N7)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=O7($.charCodeAt(Y)),U=O7($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function W6($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function l9($,q=""){if(typeof $==="string")return W6($);return x$($,void 0,q)}function r9(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];x$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function nQ($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function i9($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Nq($=32){C$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var d9=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class c9{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Oq($),x$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),z0(G)}update($){return N8(this),this.iHash.update($),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var wq=(()=>{let $=(q,J,G)=>new c9(q,J).update(G).digest();return $.create=(q,J)=>new c9(q,J),$})();function PG($,q,J){if(Oq($),J===void 0)J=new Uint8Array($.outputLen);return wq($,J,q)}var n9=Uint8Array.of(0),w7=Uint8Array.of();function o9($,q,J,G=32){Oq($),C$(G,"length"),x$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=w7;else x$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=wq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)n9[0]=M+1,V.update(M===0?w7:W).update(J).update(n9).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),z0(W,n9),X.slice(0,G)}var LG=($,q,J,G,Q)=>o9($,PG($,q,J),G,Q);function j7($,q,J){return $&q^~$&J}function A7($,q,J){return $&q^$&J^q&J}class oQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=w8(this.buffer)}update($){N8(this),x$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=w8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=w8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var jq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Aq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),h$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),u$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),Z7=BigInt(32);function M6($,q=!1){if(q)return{h:Number($&aQ),l:Number($>>Z7&aQ)};return{h:Number($>>Z7&aQ)|0,l:Number($&aQ)|0}}function B7($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=M6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var a9=($,q,J)=>$>>>J,s9=($,q,J)=>$<<32-J|q>>>J,TJ=($,q,J)=>$>>>J|q<<32-J,IJ=($,q,J)=>$<<32-J|q>>>J,FG=($,q,J)=>$<<64-J|q>>>J-32,gG=($,q,J)=>$>>>J-32|q<<64-J;function $q($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var S7=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),T7=($,q,J,G)=>q+J+G+($/4294967296|0)|0,I7=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),E7=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,C7=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),P7=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var R6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),uq=new Uint32Array(64);class t9 extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)uq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=uq[M-15],D=uq[M-2],R=f0(z,7)^f0(z,18)^z>>>3,N=f0(D,17)^f0(D,19)^D>>>10;uq[M]=N+uq[M-7]+R+uq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=f0(X,6)^f0(X,11)^f0(X,25),D=W+z+j7(X,U,V)+R6[M]+uq[M]|0,N=(f0(J,2)^f0(J,13)^f0(J,22))+A7(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){z0(uq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),z0(this.buffer)}}class L7 extends t9{A=jq[0]|0;B=jq[1]|0;C=jq[2]|0;D=jq[3]|0;E=jq[4]|0;F=jq[5]|0;G=jq[6]|0;H=jq[7]|0;constructor(){super(32)}}class D6 extends t9{A=Aq[0]|0;B=Aq[1]|0;C=Aq[2]|0;D=Aq[3]|0;E=Aq[4]|0;F=Aq[5]|0;G=Aq[6]|0;H=Aq[7]|0;constructor(){super(28)}}var F7=(()=>B7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),K6=(()=>F7[0])(),H6=(()=>F7[1])(),pq=new Uint32Array(80),lq=new Uint32Array(80);class _G extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)pq[T]=$.getUint32(q),lq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=pq[T-15]|0,m=lq[T-15]|0,u=TJ(v,m,1)^TJ(v,m,8)^a9(v,m,7),F=IJ(v,m,1)^IJ(v,m,8)^s9(v,m,7),x=pq[T-2]|0,y=lq[T-2]|0,k=TJ(x,y,19)^FG(x,y,61)^a9(x,y,6),l=IJ(x,y,19)^gG(x,y,61)^s9(x,y,6),_=I7(F,l,lq[T-7],lq[T-16]),E=E7(_,u,k,pq[T-7],pq[T-16]);pq[T]=E|0,lq[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=TJ(M,z,14)^TJ(M,z,18)^FG(M,z,41),m=IJ(M,z,14)^IJ(M,z,18)^gG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=C7(Z,m,F,H6[T],lq[T]),y=P7(x,j,v,u,K6[T],pq[T]),k=x|0,l=TJ(J,G,28)^FG(J,G,34)^FG(J,G,39),_=IJ(J,G,28)^gG(J,G,34)^gG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=$q(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=S7(k,_,I);J=T7(A,y,l,E),G=A|0}({h:J,l:G}=$q(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=$q(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=$q(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=$q(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=$q(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=$q(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=$q(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=$q(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){z0(pq,lq)}destroy(){this.destroyed=!0,z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class g7 extends _G{Ah=u$[0]|0;Al=u$[1]|0;Bh=u$[2]|0;Bl=u$[3]|0;Ch=u$[4]|0;Cl=u$[5]|0;Dh=u$[6]|0;Dl=u$[7]|0;Eh=u$[8]|0;El=u$[9]|0;Fh=u$[10]|0;Fl=u$[11]|0;Gh=u$[12]|0;Gl=u$[13]|0;Hh=u$[14]|0;Hl=u$[15]|0;constructor(){super(64)}}class O6 extends _G{Ah=h$[0]|0;Al=h$[1]|0;Bh=h$[2]|0;Bl=h$[3]|0;Ch=h$[4]|0;Cl=h$[5]|0;Dh=h$[6]|0;Dl=h$[7]|0;Eh=h$[8]|0;El=h$[9]|0;Fh=h$[10]|0;Fl=h$[11]|0;Gh=h$[12]|0;Gl=h$[13]|0;Hh=h$[14]|0;Hl=h$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),t$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class N6 extends _G{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class w6 extends _G{Ah=t$[0]|0;Al=t$[1]|0;Bh=t$[2]|0;Bl=t$[3]|0;Ch=t$[4]|0;Cl=t$[5]|0;Dh=t$[6]|0;Dl=t$[7]|0;Eh=t$[8]|0;El=t$[9]|0;Fh=t$[10]|0;Fl=t$[11]|0;Gh=t$[12]|0;Gl=t$[13]|0;Hh=t$[14]|0;Hl=t$[15]|0;constructor(){super(32)}}var p$=i9(()=>new L7,d9(1));var sQ=i9(()=>new g7,d9(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function JY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function qX($){if(!JY($))throw Error("Uint8Array expected")}function y7($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function m7($){if(typeof $!=="function")throw Error("function expected");return!0}function rq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function bG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function eQ($){if(!Array.isArray($))throw Error("array expected")}function $Y($,q){if(!y7(!0,q))throw Error(`${$}: array of strings expected`)}function JX($,q){if(!y7(!1,q))throw Error(`${$}: array of numbers expected`)}function I0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function E0($){let q=typeof $==="string"?$.split(""):$,J=q.length;$Y("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return eQ(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return eQ(Q),Q.map((Y)=>{rq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function C0($=""){return rq("join",$),{encode:(q)=>{return $Y("join.decode",q),q.join($)},decode:(q)=>{return rq("join.decode",q),q.split($)}}}function GY($,q="="){return bG($),rq("padding",q),{encode(J){$Y("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){$Y("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function f7($){return m7($),{encode:(q)=>q,decode:(q)=>$(q)}}function _7($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(eQ($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(bG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,D=z+M;if(!Number.isSafeInteger(D)||z/q!==U||D-M!==z)throw Error("convertRadix: carry overflow");let R=D/J;U=D%J;let N=Math.floor(R);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var x7=($,q)=>q===0?$:x7(q,$%q),qY=($,q)=>$+(q-x7($,q)),tQ=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function e9($,q,J,G){if(eQ($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(qY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${qY(q,J)}`);let Q=0,Y=0,X=tQ[q],U=tQ[J]-1,V=[];for(let W of $){if(bG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=tQ[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function j6($){bG($);let q=256;return{encode:(J)=>{if(!JY(J))throw Error("radix.encode input should be Uint8Array");return _7(Array.from(J),q,$)},decode:(J)=>{return JX("radix.decode",J),Uint8Array.from(_7(J,$,q))}}}function g0($,q=!1){if(bG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(qY(8,$)>32||qY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!JY(J))throw Error("radix2.encode input should be Uint8Array");return e9(Array.from(J),8,$,!q)},decode:(J)=>{return JX("radix2.decode",J),Uint8Array.from(e9(J,$,8,q))}}}function v7($){return m7($),function(...q){try{return $.apply(null,q)}catch(J){}}}var QL=I0(g0(4),E0("0123456789ABCDEF"),C0("")),YL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),GY(5),C0("")),XL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),C0("")),UL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),GY(5),C0("")),VL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),C0("")),WL=I0(g0(5),E0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),C0(""),f7(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),h7=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),u7=($,q)=>{rq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},GX=h7?{encode($){return qX($),$.toBase64()},decode($){return u7($,!1)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),GY(6),C0("")),x0=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),C0("")),ML=h7?{encode($){return qX($),$.toBase64({alphabet:"base64url"})},decode($){return u7($,!0)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),GY(6),C0("")),zL=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),C0("")),QX=($)=>I0(j6(58),E0($),C0("")),RL=QX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),DL=QX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),KL=QX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var $X=I0(E0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),C0("")),b7=[996825010,642813549,513874426,1027748829,705979059];function vG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<b7.length;G++)if((q>>G&1)===1)J^=b7[G];return J}function k7($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=vG(Q)^X>>5}Q=vG(Q);for(let Y=0;Y<G;Y++)Q=vG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=vG(Q)^Y;for(let Y=0;Y<6;Y++)Q=vG(Q);return Q^=J,$X.encode(e9([Q%tQ[30]],30,5,!1))}function p7($){let q=$==="bech32"?1:734539939,J=g0(5),G=J.decode,Q=J.encode,Y=v7(G);function X(z,D,R=90){if(rq("bech32.encode prefix",z),JY(D))D=Array.from(D);JX("bech32.encode",D);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+D.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),Z=k7(j,D,q);return`${j}1${$X.encode(D)}${Z}`}function U(z,D=90){rq("bech32.decode input",z);let R=z.length;if(R<8||D!==!1&&R>D)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${D})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),Z=N.slice(w+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=$X.decode(Z).slice(0,-6),v=k7(j,T,q);if(!Z.endsWith(v))throw Error(`Invalid checksum in ${z}: expected "${v}"`);return{prefix:j,words:T}}let V=v7(U);function W(z){let{prefix:D,words:R}=U(z,!1);return{prefix:D,words:R,bytes:G(R)}}function M(z,D){return X(z,Q(D))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var h0=p7("bech32"),HL=p7("bech32m");var A6=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Z6={encode($){return qX($),$.toHex()},decode($){return rq("hex",$),Uint8Array.fromHex($)}},OL=A6?Z6:I0(g0(4),E0("0123456789abcdef"),C0(""),f7(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function S6($,q,J,G){Oq($);let Q=nQ({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(C$(Y,"c"),C$(X,"dkLen"),C$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=l9(q,"password"),W=l9(J,"salt"),M=new Uint8Array(X),z=wq.create($,V),D=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:D}}function T6($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return z0(Q),J}function YX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=S6($,q,J,G),W,M=new Uint8Array(4),z=w8(M),D=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(D),w.set(D.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(D).digestInto(D);for(let Z=0;Z<w.length;Z++)w[Z]^=D[Z]}}return T6(U,V,X,W,D)}function l7($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],D=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],v=$[q++]^J[G++],m=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let r=0;r<8;r+=2)l^=N$(F+L|0,7),A^=N$(l+F|0,9),L^=N$(A+l|0,13),F^=N$(L+A|0,18),S^=N$(_+x|0,7),b^=N$(S+_|0,9),x^=N$(b+S|0,13),_^=N$(x+b|0,18),O^=N$(P+E|0,7),y^=N$(O+P|0,9),E^=N$(y+O|0,13),P^=N$(E+y|0,18),k^=N$(f+g|0,7),I^=N$(k+f|0,9),g^=N$(I+k|0,13),f^=N$(g+I|0,18),x^=N$(F+k|0,7),y^=N$(x+F|0,9),k^=N$(y+x|0,13),F^=N$(k+y|0,18),E^=N$(_+l|0,7),I^=N$(E+_|0,9),l^=N$(I+E|0,13),_^=N$(l+I|0,18),g^=N$(P+S|0,7),A^=N$(g+P|0,9),S^=N$(A+g|0,13),P^=N$(S+A|0,18),L^=N$(f+O|0,7),b^=N$(L+f|0,9),O^=N$(b+L|0,13),f^=N$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+y|0,Q[Y++]=W+k|0,Q[Y++]=M+l|0,Q[Y++]=z+_|0,Q[Y++]=D+E|0,Q[Y++]=R+I|0,Q[Y++]=N+A|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=Z+g|0,Q[Y++]=T+L|0,Q[Y++]=v+b|0,Q[Y++]=m+O|0,Q[Y++]=u+f|0}function XX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(l7(J,X,$,q,J,Y),U>0)X+=16;l7(J,Y,$,q+=16,J,X)}}function I6($,q,J){let G=nQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(C$(Q,"N"),C$(Y,"r"),C$(X,"p"),C$(U,"dkLen"),C$(V,"asyncTick"),C$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,D=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let w=YX(p$,$,q,{c:1,dkLen:z*X}),j=dQ(w),Z=dQ(new Uint8Array(z*Q)),T=dQ(new Uint8Array(z)),v=()=>{};if(M){let m=2*Q*X,u=Math.max(Math.floor(m/1e4),1),F=0;v=()=>{if(F++,M&&(!(F%u)||F===m))M(F/m)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:D,V:Z,B32:j,B:w,tmp:T,blockMixCb:v,asyncTick:V}}function E6($,q,J,G,Q){let Y=YX(p$,$,J,{c:1,dkLen:q});return z0(J,G,Q),Y}function r7($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:D}=I6($,q,J);p9(W);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)V[w]=W[N+w];for(let w=0,j=0;w<G-1;w++)XX(V,j,V,j+=U,Q),D();XX(V,(G-1)*U,W,N,Q),D();for(let w=0;w<G;w++){let j=(W[N+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)z[Z]=W[N+Z]^V[j*U+Z];XX(z,0,W,N,Q),D()}}return p9(W),E6($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function C6($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function QY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function j8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function _$($,q,J=""){let G=C6($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function UX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function i7($,q,J=!1){_$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!A8($))throw Error("invalid output, must be aligned")}function qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function u0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function P6($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var EJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),L6=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var F6=($)=>{for(let q=0;q<$.length;q++)$[q]=L6($[q]);return $},Zq=EJ?($)=>$:F6;function d7($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function c7($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function n7($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var o7=($,q)=>{function J(G,...Q){if(_$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];_$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)_$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");_$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,_$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(_$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function kG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(_$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!A8(q))throw Error("invalid output, must be aligned");return q}function a7($,q,J){j8($),j8(q),QY(J);let G=new Uint8Array(16),Q=P6(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function A8($){return $.byteOffset%4===0}function Z8($){return Uint8Array.from(_$($))}var t7=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),g6=(()=>Zq(qq(t7("expand 16-byte k"))))(),_6=(()=>Zq(qq(t7("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var yG=64,v6=16,VX=(()=>4294967295)(),s7=Uint32Array.of();function b6($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(yG),M=qq(W),z=EJ&&A8(Q)&&A8(Y),D=z?qq(Q):s7,R=z?qq(Y):s7;if(!EJ){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Zq(M),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);if(z&&w===yG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<v6;Z++)T=j+Z,R[T]=D[T]^M[Z];N+=yG;continue}for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}}function e7($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=d7({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return j8(Q),j8(X),QY(Y),QY(J),(U,V,W,M,z=0)=>{_$(U,void 0,"key"),_$(V,void 0,"nonce"),_$(W,void 0,"data");let D=W.length;if(M=kG(D,M,!1),j8(z),z<0||z>=VX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=Z8(U)),j=_6;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=g6,R.push(w);else throw _$(U,32,"arx key"),Error("invalid key size");if(!EJ||!A8(V))R.push(V=Z8(V));let Z=qq(w);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let m=V.subarray(0,16);if(EJ)G(j,Z,qq(m),Z);else{let u=Zq(Uint32Array.from(j));G(u,Z,qq(m),Z),u0(u),Zq(Z)}V=V.subarray(16)}else if(!EJ)Zq(Z);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let m=new Uint8Array(12);m.set(V,Y?0:12-V.length),V=m,R.push(V)}let v=Zq(qq(V));try{return b6($,j,Z,v,W,M,z,X),M}finally{u0(...R)}}}function l$($,q){return $[q++]&255|($[q++]&255)<<8}class $W{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=Z8(_$($,32,"key"));let q=l$($,0),J=l$($,2),G=l$($,4),Q=l$($,6),Y=l$($,8),X=l$($,10),U=l$($,12),V=l$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=l$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],D=Y[6],R=Y[7],N=Y[8],w=Y[9],j=l$($,q+0),Z=l$($,q+2),T=l$($,q+4),v=l$($,q+6),m=l$($,q+8),u=l$($,q+10),F=l$($,q+12),x=l$($,q+14),y=Q[0]+(j&8191),k=Q[1]+((j>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),_=Q[3]+((T>>>7|v<<9)&8191),E=Q[4]+((v>>>4|m<<12)&8191),I=Q[5]+(m>>>1&8191),A=Q[6]+((m>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+y*X+k*(5*w)+l*(5*N)+_*(5*R)+E*(5*D);L=b>>>13,b&=8191,b+=I*(5*z)+A*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+y*U+k*X+l*(5*w)+_*(5*N)+E*(5*R);L=O>>>13,O&=8191,O+=I*(5*D)+A*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let f=L+y*V+k*U+l*X+_*(5*w)+E*(5*N);L=f>>>13,f&=8191,f+=I*(5*R)+A*(5*D)+S*(5*z)+P*(5*M)+g*(5*W),L+=f>>>13,f&=8191;let r=L+y*W+k*V+l*U+_*X+E*(5*w);L=r>>>13,r&=8191,r+=I*(5*N)+A*(5*R)+S*(5*D)+P*(5*z)+g*(5*M),L+=r>>>13,r&=8191;let B=L+y*M+k*W+l*V+_*U+E*X;L=B>>>13,B&=8191,B+=I*(5*w)+A*(5*N)+S*(5*R)+P*(5*D)+g*(5*z),L+=B>>>13,B&=8191;let o=L+y*z+k*M+l*W+_*V+E*U;L=o>>>13,o&=8191,o+=I*X+A*(5*w)+S*(5*N)+P*(5*R)+g*(5*D),L+=o>>>13,o&=8191;let q$=L+y*D+k*z+l*M+_*W+E*V;L=q$>>>13,q$&=8191,q$+=I*U+A*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+y*R+k*D+l*z+_*M+E*W;L=Y$>>>13,Y$&=8191,Y$+=I*V+A*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+y*N+k*R+l*D+_*z+E*M;L=G$>>>13,G$&=8191,G$+=I*W+A*V+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let s=L+y*w+k*N+l*R+_*D+E*z;L=s>>>13,s&=8191,s+=I*M+A*W+S*V+P*U+g*X,L+=s>>>13,s&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=f,Q[3]=r,Q[4]=B,Q[5]=o,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=s}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;u0(J)}update($){UX(this),_$($),$=Z8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,u0(this.h,this.r,this.buffer,this.pad)}digestInto($){UX(this),i7($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var qW=n7(32,($)=>new $W($));function k6($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],D=q[2],R=q[3],N=q[4],w=q[5],j=q[6],Z=q[7],T=Q,v=J[0],m=J[1],u=J[2],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),A=A+L|0,l=w$(l^A,12),F=F+l|0,L=w$(L^F,8),A=A+L|0,l=w$(l^A,7),x=x+_|0,b=w$(b^x,16),S=S+b|0,_=w$(_^S,12),x=x+_|0,b=w$(b^x,8),S=S+b|0,_=w$(_^S,7),y=y+E|0,O=w$(O^y,16),P=P+O|0,E=w$(E^P,12),y=y+E|0,O=w$(O^y,8),P=P+O|0,E=w$(E^P,7),k=k+I|0,f=w$(f^k,16),g=g+f|0,I=w$(I^g,12),k=k+I|0,f=w$(f^k,8),g=g+f|0,I=w$(I^g,7),F=F+_|0,f=w$(f^F,16),P=P+f|0,_=w$(_^P,12),F=F+_|0,f=w$(f^F,8),P=P+f|0,_=w$(_^P,7),x=x+E|0,L=w$(L^x,16),g=g+L|0,E=w$(E^g,12),x=x+E|0,L=w$(L^x,8),g=g+L|0,E=w$(E^g,7),y=y+I|0,b=w$(b^y,16),A=A+b|0,I=w$(I^A,12),y=y+I|0,b=w$(b^y,8),A=A+b|0,I=w$(I^A,7),k=k+l|0,O=w$(O^k,16),S=S+O|0,l=w$(l^S,12),k=k+l|0,O=w$(O^k,8),S=S+O|0,l=w$(l^S,7);let r=0;G[r++]=X+F|0,G[r++]=U+x|0,G[r++]=V+y|0,G[r++]=W+k|0,G[r++]=M+l|0,G[r++]=z+_|0,G[r++]=D+E|0,G[r++]=R+I|0,G[r++]=N+A|0,G[r++]=w+S|0,G[r++]=j+P|0,G[r++]=Z+g|0,G[r++]=T+L|0,G[r++]=v+b|0,G[r++]=m+O|0,G[r++]=u+f|0}var y6=e7(k6,{counterRight:!1,counterLength:4,allowShortKeys:!1});var m6=new Uint8Array(16),JW=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(m6.subarray(J))},f6=new Uint8Array(32);function GW($,q,J,G,Q){if(Q!==void 0)_$(Q,void 0,"AAD");let Y=$(q,J,f6),X=a7(G.length,Q?Q.length:0,!0),U=qW.create(Y);if(Q)JW(U,Q);JW(U,G),U.update(X);let V=U.digest();return u0(Y,X),V}var x6=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=kG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=GW($,q,J,V,G);return X.set(W,U),u0(W),X},decrypt(Y,X){X=kG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=GW($,q,J,U,G);if(!c7(V,W))throw u0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),u0(W),X}}},iq=o7({blockSize:64,nonceLength:12,tagLength:16},x6(y6));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function B8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=B8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function _0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Sq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function j0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function UY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function p0($,q){return $<<32-q|$>>>q}var h6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function u6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function p6($){for(let q=0;q<$.length;q++)$[q]=u6($[q]);return $}var WX=h6?($)=>$:p6,YW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),l6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function CJ($){if(Q$($),YW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=l6[$[J]];return q}var Bq={_0:48,_9:57,A:65,F:70,a:97,f:102};function QW($){if($>=Bq._0&&$<=Bq._9)return $-Bq._0;if($>=Bq.A&&$<=Bq.F)return $-(Bq.A-10);if($>=Bq.a&&$<=Bq.f)return $-(Bq.a-10);return}function PJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(YW)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=QW($.charCodeAt(Y)),U=QW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function L$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function S8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function dq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var cq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zX=BigInt(0),MX=BigInt(1);function mG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function XW($){if(typeof $==="bigint"){if(!VY($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function fG($){let q=XW($).toString(16);return q.length&1?"0"+q:q}function UW($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?zX:BigInt("0x"+$)}function nq($){return UW(CJ($))}function oq($){return UW(CJ(WY(Q$($)).reverse()))}function T8($,q){m$(q),$=XW($);let J=PJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function xG($,q){return T8($,q).reverse()}function WY($){return Uint8Array.from($)}function aq($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var VY=($)=>typeof $==="bigint"&&zX<=$;function r6($,q,J){return VY($)&&VY(q)&&VY(J)&&q<=$&&$<J}function hG($,q,J,G){if(!r6(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function RX($){let q;for(q=0;$>zX;$>>=MX,q+=1);return q}var uG=($)=>(MX<<BigInt($))-MX;function VW($,q,J){if(m$($,"hashLen"),m$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,L$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return L$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while(!(T=Z(N())))R();return z(),T}}function LJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function DX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D0=BigInt(0),e$=BigInt(1),FJ=BigInt(2),zW=BigInt(3),RW=BigInt(4),DW=BigInt(5),i6=BigInt(7),KW=BigInt(8),d6=BigInt(9),HW=BigInt(16);function R0($,q){let J=$%q;return J>=D0?J:q+J}function v0($,q,J){let G=$;while(q-- >D0)G*=G,G%=J;return G}function WW($,q){if($===D0)throw Error("invert: expected non-zero number");if(q<=D0)throw Error("invert: expected positive modulus, got "+q);let J=R0($,q),G=q,Q=D0,Y=e$,X=e$,U=D0;while(J!==D0){let W=G/J,M=G%J,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==e$)throw Error("invert: does not exist");return R0(Q,q)}function KX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function OW($,q){let J=($.ORDER+e$)/RW,G=$.pow(q,J);return KX($,G,q),G}function c6($,q){let J=($.ORDER-DW)/KW,G=$.mul(q,FJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,FJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return KX($,U,q),U}function n6($){let q=MY($),J=NW($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+i6)/HW;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),D=U.mul(W,Y),R=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(D,z,N);let w=U.eql(U.sqr(M),V),j=U.cmov(W,M,w);return KX(U,j,V),j}}function NW($){if($<zW)throw Error("sqrt is not defined for small field");let q=$-e$,J=0;while(q%FJ===D0)q/=FJ,J++;let G=FJ,Q=MY($);while(MW(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return OW;let Y=Q.pow(G,q),X=(q+e$)/FJ;return function(V,W){if(V.is0(W))return W;if(MW(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),D=V.pow(W,q),R=V.pow(W,X);while(!V.eql(D,V.ONE)){if(V.is0(D))return V.ZERO;let N=1,w=V.sqr(D);while(!V.eql(w,V.ONE))if(N++,w=V.sqr(w),N===M)throw Error("Cannot find square root");let j=e$<<BigInt(M-N-1),Z=V.pow(z,j);M=N,z=V.sqr(Z),D=V.mul(D,z),R=V.mul(R,Z)}return R}}function o6($){if($%RW===zW)return OW;if($%KW===DW)return c6;if($%HW===d6)return n6($);return NW($)}var a6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function HX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=a6.reduce((G,Q)=>{return G[Q]="function",G},q);return LJ($,J),$}function s6($,q,J){if(J<D0)throw Error("invalid exponent, negatives unsupported");if(J===D0)return $.ONE;if(J===e$)return q;let G=$.ONE,Q=q;while(J>D0){if(J&e$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=e$}return G}function pG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function MW($,q){let J=($.ORDER-e$)/FJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function t6($,q){if(q!==void 0)m$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class wW{ORDER;BITS;BYTES;isLE;ZERO=D0;ONE=e$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=D0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=t6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return D0<=$&&$<this.ORDER}is0($){return $===D0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&e$)===e$}neg($){return R0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R0($*$,this.ORDER)}add($,q){return R0($+q,this.ORDER)}sub($,q){return R0($-q,this.ORDER)}mul($,q){return R0($*q,this.ORDER)}pow($,q){return s6(this,$,q)}div($,q){return R0($*WW(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return WW($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=o6(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?xG($,this.BYTES):T8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?oq($):nq($);if(X)U=R0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return pG(this,$)}cmov($,q,J){return J?q:$}}function MY($,q={}){return new wW($,q)}function jW($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function OX($){let q=jW($);return q+Math.ceil(q/2)}function AW($,q,J=!1){Q$($);let G=$.length,Q=jW(q),Y=OX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?oq($):nq($),U=R0(X,q-e$)+e$;return J?xG(U,Q):T8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I8=BigInt(0),gJ=BigInt(1);function lG($,q){let J=q.negate();return $?J:q}function AX($,q){let J=pG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function TW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function NX($,q){TW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=uG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function ZW($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=gJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var wX=new WeakMap,IW=new WeakMap;function jX($){return IW.get($)||1}function BW($){if($!==I8)throw Error("invalid wNAF")}class ZX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>I8){if(q&gJ)J=J.add(G);G=G.double(),q>>=gJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=NX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=NX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=ZW(J,X,Y);if(J=U,W)Q=Q.add(lG(z,q[D]));else G=G.add(lG(M,q[V]))}return BW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=NX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===I8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=ZW(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return BW(J),G}getPrecomputes($,q,J){let G=wX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);wX.set(q,G)}}return G}cached($,q,J){let G=jX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=jX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){TW(q,this.bits),IW.set($,q),wX.delete($)}hasCache($){return jX($)!==1}}function EW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>I8||G>I8){if(J&gJ)Y=Y.add(Q);if(G&gJ)X=X.add(Q);Q=Q.double(),J>>=gJ,G>>=gJ}return{p1:Y,p2:X}}function SW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return HX(q),q}else return MY($,{isLE:J})}function CW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>I8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=SW(q.p,J.Fp,G),Y=SW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function zY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rG=BigInt(0),E8=BigInt(1),RY=BigInt(2);function e6($){return LJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function PW($){let q=e6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||dq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?RY**BigInt(254):RY**BigInt(447),N=U?BigInt(8)*RY**BigInt(251)-E8:BigInt(4)*RY**BigInt(445)-E8,w=R+N+E8,j=(A)=>R0(A,J),Z=T(z);function T(A){return xG(j(A),M)}function v(A){let S=WY(Q$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(oq(S))}function m(A){return oq(Q(WY(Q$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===rG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){hG("u",A,rG,J),hG("scalar",S,R,w);let P=S,g=A,L=E8,b=rG,O=A,f=E8,r=rG;for(let o=BigInt(W-1);o>=rG;o--){let q$=P>>o&E8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),xq=M0+e0,hq=M0-e0;O=j(xq*xq),f=j(g*j(hq*hq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A=V(M))=>{return Q$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze({keygen:zY(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}class BX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(_0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),j0(G)}update($){return Sq(this),this.iHash.update($),this}digestInto($){Sq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var C8=($,q,J)=>new BX($,q).update(J).digest();C8.create=($,q)=>new BX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var LW=($,q)=>($+($>=0?q:-q)/gW)/q;function $O($,q,J){let[[G,Q],[Y,X]]=q,U=LW(X*$,J),V=LW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Tq,D=M<Tq;if(z)W=-W;if(D)M=-M;let R=uG(Math.ceil(RX(J)/2))+P8;if(W<Tq||W>=R||M<Tq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:D,k2:M}}function TX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function SX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(mG(J.lowS,"lowS"),mG(J.prehash,"prehash"),J.format!==void 0)TX(J.format);return J}class FW extends Error{constructor($=""){super($)}}var sq={Err:FW,_tlv:{encode:($,q)=>{let{Err:J}=sq;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=fG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?fG(Q.length/2|128):"";return fG($)+Y+Q+q},decode($,q){let{Err:J}=sq,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=sq;if($<Tq)throw new q("integer: negative integers are not allowed");let J=fG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=sq;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return nq($)}},toSig($){let{Err:q,_int:J,_tlv:G}=sq,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=sq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Tq=BigInt(0),P8=BigInt(1),gW=BigInt(2),DY=BigInt(3),qO=BigInt(4);function IX($,q={}){let J=CW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;LJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=vW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(E,I,A){let{x:S,y:P}=I.toAffine(),g=G.toBytes(S);if(mG(A,"isCompressed"),A){M();let L=!G.isOdd(P);return L$(_W(L),g)}else return L$(Uint8Array.of(4),g,G.toBytes(P))}function D(E){Q$(E,void 0,"Point");let{publicKey:I,publicKeyUncompressed:A}=W,S=E.length,P=E[0],g=E.subarray(1);if(S===I&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),O;try{O=G.sqrt(b)}catch(B){let o=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+o)}M();let f=G.isOdd(O);if((P&1)===1!==f)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${I} or uncompressed=${A}`)}let R=q.toBytes||z,N=q.fromBytes||D;function w(E){let I=G.sqr(E),A=G.mul(I,E);return G.add(G.add(A,G.mul(E,Y.a)),Y.b)}function j(E,I){let A=G.sqr(I),S=w(E);return G.eql(A,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(Y.a,DY),qO),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function v(E,I,A=!1){if(!G.isValid(I)||A&&G.is0(I))throw Error(`bad point coordinate ${E}`);return I}function m(E){if(!(E instanceof k))throw Error("Weierstrass Point expected")}function u(E){if(!V||!V.basises)throw Error("no endo");return $O(E,V.basises,Q.ORDER)}let F=DX((E,I)=>{let{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=DX((E)=>{if(E.is0()){if(q.allowInfinityPoint&&!G.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:I,y:A}=E.toAffine();if(!G.isValid(I)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!j(I,A))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function y(E,I,A,S,P){return A=new k(G.mul(A.X,E),A.Y,A.Z),I=lG(S,I),A=lG(P,A),I.add(A)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(E,I,A){this.X=v("x",E),this.Y=v("y",I,!0),this.Z=v("z",A),Object.freeze(this)}static CURVE(){return Y}static fromAffine(E){let{x:I,y:A}=E||{};if(!E||!G.isValid(I)||!G.isValid(A))throw Error("invalid affine point");if(E instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(A))return k.ZERO;return new k(I,A,G.ONE)}static fromBytes(E){let I=k.fromAffine(N(Q$(E,void 0,"point")));return I.assertValidity(),I}static fromHex(E){return k.fromBytes(PJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,I=!0){if(_.createCache(this,E),!I)this.multiply(DY);return this}assertValidity(){x(this)}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.eql(G.mul(I,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:I}=Y,A=G.mul(I,DY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=G.mul(S,S),r=G.mul(P,P),B=G.mul(g,g),o=G.mul(S,P);return o=G.add(o,o),O=G.mul(S,g),O=G.add(O,O),L=G.mul(E,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(r,b),b=G.add(r,b),b=G.mul(L,b),L=G.mul(o,L),O=G.mul(A,O),B=G.mul(E,B),o=G.sub(f,B),o=G.mul(E,o),o=G.add(o,O),O=G.add(f,f),f=G.add(O,f),f=G.add(f,B),f=G.mul(f,o),b=G.add(b,f),B=G.mul(P,g),B=G.add(B,B),f=G.mul(B,o),L=G.sub(L,f),O=G.mul(B,r),O=G.add(O,O),O=G.add(O,O),new k(L,b,O)}add(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.ZERO,O=G.ZERO,f=G.ZERO,r=Y.a,B=G.mul(Y.b,DY),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.mul(S,L),G$=G.add(I,A),s=G.add(P,g);G$=G.mul(G$,s),s=G.add(o,q$),G$=G.sub(G$,s),s=G.add(I,S);let O$=G.add(P,L);return s=G.mul(s,O$),O$=G.add(o,Y$),s=G.sub(s,O$),O$=G.add(A,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),f=G.mul(r,s),b=G.mul(B,Y$),f=G.add(b,f),b=G.sub(q$,f),f=G.add(q$,f),O=G.mul(b,f),q$=G.add(o,o),q$=G.add(q$,o),Y$=G.mul(r,Y$),s=G.mul(B,s),q$=G.add(q$,Y$),Y$=G.sub(o,Y$),Y$=G.mul(r,Y$),s=G.add(s,Y$),o=G.mul(q$,s),O=G.add(O,o),o=G.mul(O$,s),b=G.mul(G$,b),b=G.sub(b,o),o=G.mul(G$,q$),f=G.mul(O$,f),f=G.add(f,o),new k(b,O,f)}subtract(E){return this.add(E.negate())}is0(){return this.equals(k.ZERO)}multiply(E){let{endo:I}=q;if(!Q.isValidNot0(E))throw Error("invalid scalar: out of range");let A,S,P=(g)=>_.cached(this,g,(L)=>AX(k,L));if(I){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(E),{p:f,f:r}=P(L),{p:B,f:o}=P(O);S=r.add(o),A=y(I.beta,f,B,g,b)}else{let{p:g,f:L}=P(E);A=g,S=L}return AX(k,[A,S])[0]}multiplyUnsafe(E){let{endo:I}=q,A=this;if(!Q.isValid(E))throw Error("invalid scalar: out of range");if(E===Tq||A.is0())return k.ZERO;if(E===P8)return A;if(_.hasCache(this))return this.multiply(E);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(E),{p1:b,p2:O}=EW(k,A,P,L);return y(I.beta,b,O,S,g)}else return _.unsafe(A,E)}toAffine(E){return F(this,E)}isTorsionFree(){let{isTorsionFree:E}=q;if(X===P8)return!0;if(E)return E(k,this);return _.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:E}=q;if(X===P8)return this;if(E)return E(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(E=!0){return mG(E,"isCompressed"),this.assertValidity(),R(k,this,E)}toHex(E=!0){return CJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,_=new ZX(k,q.endo?Math.ceil(l/2):l);return k.BASE.precompute(8),k}function _W($){return Uint8Array.of($?2:3)}function vW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function JO($,q={}){let{Fn:J}=$,G=q.randomBytes||dq,Q=Object.assign(vW($.Fp,J),{seed:OX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R=G(Q.seed)){return AW(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!B8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let Z=Q$(R,void 0,"key").length;return Z===w||Z===j}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=zY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function EX($,q,J={}){_0(q),LJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||dq,Q=J.hmac||((A,S)=>C8(q,A,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R}=JO($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*gW<Y.ORDER;function j(A){let S=U>>P8;return A>S}function Z(A,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function v(A,S){TX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(A,g)}class m{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=N.format){v(A,S);let P;if(S==="der"){let{r:O,s:f}=sq.toSig(Q$(A));return new m(O,f)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=R.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new m(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(PJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new m(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(L$(_W((g&1)===0),b)),f=X.inv(L),r=F(Q$(A,void 0,"msgHash")),B=X.create(-r*f),o=X.create(P*f),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(o));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(A=N.format){if(TX(A),A==="der")return PJ(sq.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(A==="recovered")return T(),L$(Uint8Array.of(this.assertRecovery()),g,L);return L$(g,L)}toHex(A){return CJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=nq(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=uG(V);function y(A){return hG("num < 2^"+V,A,Tq,x),X.toBytes(A)}function k(A,S){return Q$(A,void 0,"message"),S?Q$(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=SX(P,N);A=k(A,L);let O=F(A),f=X.fromBytes(S);if(!X.isValidNot0(f))throw Error("invalid private key");let r=[y(f),y(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;r.push(Q$(Y$,void 0,"extraEntropy"))}let B=L$(...r),o=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let s=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Tq)return;let T$=X.create(s*X.create(o+A$*f));if(T$===Tq)return;let y$=(O$.x===A$?0:2)|Number(O$.y&P8),M0=T$;if(g&&j(T$))M0=X.neg(T$),y$^=1;return new m(A$,M0,w?void 0:y$)}return{seed:B,k2sig:q$}}function _(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return VW(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function E(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=SX(g,N);if(P=Q$(P,void 0,"publicKey"),S=k(S,b),!B8(A)){let f=A instanceof m?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+f)}v(A,O);try{let f=m.fromBytes(A,O),r=$.fromBytes(P);if(L&&f.hasHighS())return!1;let{r:B,s:o}=f,q$=F(S),Y$=X.inv(o),G$=X.create(q$*Y$),s=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(r.multiplyUnsafe(s));if(O$.is0())return!1;return X.create(O$.x)===B}catch(f){return!1}}function I(A,S,P={}){let{prehash:g}=SX(P,N);return S=k(S,g),m.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R,Point:$,sign:_,verify:E,recoverPublicKey:I,Signature:m,hash:q})}function bW($,q,J){return $&q^~$&J}function kW($,q,J){return $&q^$&J^q&J}class KY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=UY(this.buffer)}update($){Sq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=UY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Sq(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,j0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=UY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Iq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Eq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),r$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var HY=BigInt(4294967295),yW=BigInt(32);function GO($,q=!1){if(q)return{h:Number($&HY),l:Number($>>yW&HY)};return{h:Number($>>yW&HY)|0,l:Number($&HY)|0}}function OY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=GO($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var CX=($,q,J)=>$>>>J,PX=($,q,J)=>$<<32-J|q>>>J,_J=($,q,J)=>$>>>J|q<<32-J,vJ=($,q,J)=>$<<32-J|q>>>J,iG=($,q,J)=>$<<64-J|q>>>J-32,dG=($,q,J)=>$>>>J-32|q<<64-J;var mW=($,q,J)=>$<<J|q>>>32-J,fW=($,q,J)=>q<<J|$>>>32-J,xW=($,q,J)=>q<<J-32|$>>>64-J,hW=($,q,J)=>$<<J-32|q>>>64-J;function Jq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var uW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),pW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,lW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),rW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,iW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),dW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var YO=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),tq=new Uint32Array(64);class LX extends KY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)tq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=tq[M-15],D=tq[M-2],R=p0(z,7)^p0(z,18)^z>>>3,N=p0(D,17)^p0(D,19)^D>>>10;tq[M]=N+tq[M-7]+R+tq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=p0(X,6)^p0(X,11)^p0(X,25),D=W+z+bW(X,U,V)+YO[M]+tq[M]|0,N=(p0(J,2)^p0(J,13)^p0(J,22))+kW(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){j0(tq)}destroy(){this.set(0,0,0,0,0,0,0,0),j0(this.buffer)}}class cW extends LX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(32)}}class XO extends LX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(28)}}var nW=(()=>OY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),UO=(()=>nW[0])(),VO=(()=>nW[1])(),eq=new Uint32Array(80),$J=new Uint32Array(80);class cG extends KY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)eq[T]=$.getUint32(q),$J[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=eq[T-15]|0,m=$J[T-15]|0,u=_J(v,m,1)^_J(v,m,8)^CX(v,m,7),F=vJ(v,m,1)^vJ(v,m,8)^PX(v,m,7),x=eq[T-2]|0,y=$J[T-2]|0,k=_J(x,y,19)^iG(x,y,61)^CX(x,y,6),l=vJ(x,y,19)^dG(x,y,61)^PX(x,y,6),_=lW(F,l,$J[T-7],$J[T-16]),E=rW(_,u,k,eq[T-7],eq[T-16]);eq[T]=E|0,$J[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=_J(M,z,14)^_J(M,z,18)^iG(M,z,41),m=vJ(M,z,14)^vJ(M,z,18)^dG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=iW(Z,m,F,VO[T],$J[T]),y=dW(x,j,v,u,UO[T],eq[T]),k=x|0,l=_J(J,G,28)^iG(J,G,34)^iG(J,G,39),_=vJ(J,G,28)^dG(J,G,34)^dG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=Jq(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=uW(k,_,I);J=pW(A,y,l,E),G=A|0}({h:J,l:G}=Jq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Jq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Jq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Jq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Jq(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=Jq(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=Jq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=Jq(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){j0(eq,$J)}destroy(){j0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class WO extends cG{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class oW extends cG{Ah=r$[0]|0;Al=r$[1]|0;Bh=r$[2]|0;Bl=r$[3]|0;Ch=r$[4]|0;Cl=r$[5]|0;Dh=r$[6]|0;Dl=r$[7]|0;Eh=r$[8]|0;El=r$[9]|0;Fh=r$[10]|0;Fl=r$[11]|0;Gh=r$[12]|0;Gl=r$[13]|0;Hh=r$[14]|0;Hl=r$[15]|0;constructor(){super(48)}}var $0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),q0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class MO extends cG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(28)}}class zO extends cG{Ah=q0[0]|0;Al=q0[1]|0;Bh=q0[2]|0;Bl=q0[3]|0;Ch=q0[4]|0;Cl=q0[5]|0;Dh=q0[6]|0;Dl=q0[7]|0;Eh=q0[8]|0;El=q0[9]|0;Fh=q0[10]|0;Fl=q0[11]|0;Gh=q0[12]|0;Gl=q0[13]|0;Hh=q0[14]|0;Hl=q0[15]|0;constructor(){super(32)}}var NY=S8(()=>new cW,cq(1));var aW=S8(()=>new oW,cq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RO=BigInt(1),sW=BigInt(2),DO=BigInt(3),KO=BigInt(5),N3=BigInt(8),tW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function HO($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=tW,U=$*$%Y*$%Y,V=v0(U,sW,Y)*U%Y,W=v0(V,RO,Y)*$%Y,M=v0(W,KO,Y)*W%Y,z=v0(M,q,Y)*M%Y,D=v0(z,J,Y)*z%Y,R=v0(D,G,Y)*D%Y,N=v0(R,Q,Y)*R%Y,w=v0(N,Q,Y)*R%Y,j=v0(w,q,Y)*M%Y;return{pow_p_5_8:v0(j,sW,Y)*$%Y,b2:U}}function OO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var eW=(()=>{let $=tW;return PW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=HO(q);return R0(v0(J,DO,$)*G,$)},adjustScalarBytes:OO})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var NO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),wO=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var jO=IX(NO),FX=EX(jO,NY);var AO=IX(wO),$5=EX(AO,aW);function J5($,q,J){if(_0($),J===void 0)J=new Uint8Array($.outputLen);return C8($,J,q)}var gX=Uint8Array.of(0),q5=Uint8Array.of();function G5($,q,J,G=32){_0($),m$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=q5;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=C8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)gX[0]=M+1,V.update(M===0?q5:W).update(J).update(gX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),j0(W,gX),X.slice(0,G)}var ZO=BigInt(0),nG=BigInt(1),BO=BigInt(2),SO=BigInt(7),TO=BigInt(256),IO=BigInt(113),X5=[],U5=[],V5=[];for(let $=0,q=nG,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],X5.push(2*(5*G+J)),U5.push(($+1)*($+2)/2%64);let Q=ZO;for(let Y=0;Y<7;Y++)if(q=(q<<nG^(q>>SO)*IO)%TO,q&BO)Q^=nG<<(nG<<BigInt(Y))-nG;V5.push(Q)}var W5=OY(V5,!0),EO=W5[0],CO=W5[1],Q5=($,q,J)=>J>32?xW($,q,J):mW($,q,J),Y5=($,q,J)=>J>32?hW($,q,J):fW($,q,J);function PO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=Q5(W,M,1)^J[U],D=Y5(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=D}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=U5[X],V=Q5(Q,Y,U),W=Y5(Q,Y,U),M=X5[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=EO[G],$[1]^=CO[G]}j0(J)}class wY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=XY(this.state)}clone(){return this._cloneInto()}keccak(){WX(this.state32),PO(this.state32,this.rounds),WX(this.state32),this.posOut=0,this.pos=0}update($){Sq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Sq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(YY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,j0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new wY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var M5=($,q,J,G={})=>S8(()=>new wY(q,$,J),G);var bJ=M5(6,136,32,cq(8));var z5=M5(6,72,64,cq(10));var R5=($,q,J,G={})=>S8((Q={})=>new wY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),D5=R5(31,168,16,cq(11)),Gq=R5(31,136,32,cq(12));function _X($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function H5($){return _X($),($&$-1)===0&&$!==0}function vX($,q){_X($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function O5($){return _X($),31-Math.clz32($)}function K5($){let q=$.length;if(q<2||!H5(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=O5(q);for(let G=0;G<q;G++){let Q=vX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var bX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=O5(J);if(!H5(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)K5(M);for(let z=0,D=1;z<V-X;z++){let R=Q?z+1+X:V-z,N=1<<R,w=N>>1,j=J>>R;for(let Z=0;Z<J;Z+=N)for(let T=0,v=D++;T<w;T++){let m=Y?Q?J-v:v:T*j,u=Z+T,F=Z+T+w,x=G[m],y=M[F],k=M[u];if(W){let l=$.mul(y,x);M[u]=$.add(k,l),M[F]=$.sub(k,l)}else if(Y)M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),x);else M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),x)}}if(!Q&&U)K5(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Qq=dq;function jY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function N5($){return Uint8Array.from($)}function kJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function AY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function v$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function kX($){return(1<<$)-1}var _3=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var w5=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,v=G)=>{let m=T%v|0;return(m>=0?m|0:v+m|0)|0},W=(T,v=G)=>{let m=V(T,v)|0;return(m>v>>1?m-v|0:m)|0};function M(){let T=q(J);for(let v=0;v<J;v++){let m=vX(v,X),u=BigInt(Y)**BigInt(m)%BigInt(G);T[v]=Number(u)|0}return T}let z=M(),D={add:(T,v)=>V((T|0)+(v|0))|0,sub:(T,v)=>V((T|0)-(v|0))|0,mul:(T,v)=>V((T|0)*(v|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=bX(D,{dit:!1,...R}),w=bX(D,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let v=0;v<T.length;v++)T[v]=V(Q*T[v]);return T}},bitsCoder:(T,v)=>{let m=kX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=(v.encode(F[y])&m)<<l,l+=T;for(;l>=8;l-=8,k>>=8)x[_++]=k&kX(l)}return x},decode:(F)=>{let x=q(J);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=F[y]<<l,l+=8;for(;l>=T;l-=T,k>>=T)x[_++]=v.decode(k&m)}return x}}}}},LO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),v$(Y,G)}}},j5=LO(D5);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var J0=256,Cq=3329,FO=3303,gO=17,{mod:sG,nttZetas:_O,NTT:yJ,bitsCoder:vO}=w5({N:J0,Q:Cq,F:FO,ROOT_OF_UNITY:gO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),yX={512:{N:J0,Q:Cq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:J0,Q:Cq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:J0,Q:Cq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},bO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+Cq/2)/Cq,decode:(J)=>J*Cq+q>>>$}},oG=($)=>vO($,bO($));function mJ($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]+q[J])}function kO($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]-q[J])}function yO($,q,J,G,Q){let Y=sG(q*G*Q+$*J),X=sG($*G+q*J);return{c0:Y,c1:X}}function ZY($,q){for(let J=0;J<J0/2;J++){let G=_O[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=yO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function A5($){let q=new Uint16Array(J0);for(let J=0;J<J0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<J0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<Cq)q[J++]=Y;if(J<J0&&X<Cq)q[J++]=X}}return q}function aG($,q,J,G){let Q=$(G*J0/4,q,J),Y=new Uint16Array(J0),X=XY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let D=X[V];for(let R=0;R<32;R++)if(M+=D&1,D>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=sG(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var mO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=oG(1),M=oG(V),z=oG(U),D=kJ("publicKey",AY(oG(12),q),32),R=AY(oG(12),q),N=kJ("ciphertext",AY(z,q),M),w=kJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let Z=new Uint8Array(33);Z.set(j),Z[32]=q;let T=Q(Z),[v,m]=w.decode(T),u=[],F=[];for(let k=0;k<q;k++)u.push(yJ.encode(aG(J,m,k,Y)));let x=G(v);for(let k=0;k<q;k++){let l=yJ.encode(aG(J,m,q+k,Y));for(let _=0;_<q;_++){let E=A5(x.get(_,k));mJ(l,ZY(E,u[_]))}F.push(l)}x.clean();let y={publicKey:D.encode([F,v]),secretKey:R.encode(u)};return v$(v,m,u,F,Z,T),y},encrypt:(j,Z,T)=>{let[v,m]=D.decode(j),u=[];for(let _=0;_<q;_++)u.push(yJ.encode(aG(J,T,_,Y)));let F=G(m),x=new Uint16Array(J0),y=[];for(let _=0;_<q;_++){let E=aG(J,T,q+_,X),I=new Uint16Array(J0);for(let A=0;A<q;A++){let S=A5(F.get(_,A));mJ(I,ZY(S,u[A]))}mJ(E,yJ.decode(I)),y.push(E),mJ(x,ZY(v[_],u[_])),v$(I)}F.clean();let k=aG(J,T,2*q,X);mJ(k,yJ.decode(x));let l=W.decode(Z);return mJ(l,k),v$(v,u,x,k),N.encode([y,l])},decrypt:(j,Z)=>{let[T,v]=N.decode(j),m=R.decode(Z),u=new Uint16Array(J0);for(let F=0;F<q;F++)mJ(u,ZY(m[F],yJ.encode(T[F])));return kO(v,yJ.decode(u)),v$(u,m,T),W.encode(v)}}};function mX($){let q=mO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=kJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Qq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:D}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([D,z,R,M.subarray(32)]);return v$(D,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,D,R,N]=U.decode(M);return Uint8Array.from(D)},encapsulate:(M,z=Qq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let D=M.subarray(0,384*$.K),R=Y.encode(Y.decode(N5(D)));if(!jY(R,D))throw v$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");v$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return v$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let D=U.bytesLen-96,R=D+32,N=J(z.subarray(D/2,R));if(!jY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,Z,T]=U.decode(z),v=q.decrypt(M,w),m=G.create().update(v).update(Z).digest(),u=m.subarray(0,32),F=q.encrypt(j,v,m.subarray(32,64)),x=jY(M,F),y=Q.create({dkLen:32}).update(T).update(M).digest();return v$(v,F,!x?u:y),x?u:y}}}function fO($,q,J){return Gq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var fX={HASH256:bJ,HASH512:z5,KDF:Gq,XOF:j5,PRF:fO},l3=mX({...fX,...yX[512]}),tG=mX({...fX,...yX[768]}),Z5=mX({...fX,...yX[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function xO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Qq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?oq(X):nq(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function xX($,q=!1){let J=xO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Qq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return v$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function eG($,q){return kJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function hX($){return(q,J)=>$(q,{dkLen:J})}function hO($,q,...J){let G=eG(J,"seed"),Q=eG(J,"publicKey");if($===void 0)$=G.bytesLen;m$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,D)=>z.keygen(U[D])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Qq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return v$(U),v$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function BY($,q,J,G,...Q){let Y=hO($,J,...Q),X=eG(Q,"cipherText"),U=eG(Q,"publicKey"),V=eG(Q,"msg");if(q===void 0)q=V.bytesLen;return m$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Qq(V.bytesLen)){let z=U.decode(W),D=V.decode(M),R=Q.map((Z,T)=>Z.encapsulate(z[T],D[T])),N=R.map((Z)=>Z.sharedSecret),w=R.map((Z)=>Z.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return v$(N,w),j},decapsulate(W,M){let z=X.decode(W),{publicKey:D,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(D,z,N)}}}function B5($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>Q(L$(U[0],U[1],X[1],Y[1],aq($))),q,J)}var $F=B5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",tG,xX(FX,!0),Gq,bJ),qF=B5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",Z5,xX($5,!0),Gq,bJ);function uO($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>{let V=L$(U[0],U[1],X[0],Y[0],X[1],Y[1],aq($)),W=32,M=L$(aq("hybrid_prk"),V),z=J5(Q,M),D=L$(T8(32,2),aq("shared_secret"),aq("")),R=G5(Q,z,D,32);return v$(z,D,M,V),R},q,J)}var S5=xX(eW),JF=uO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",tG,S5,Gq,NY),pO=(()=>BY(32,32,hX(Gq),($,q,J)=>bJ(L$(J[0],J[1],q[1],$[1],aq("\\.//^\\"))),tG,S5))();function lO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Qq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Qq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return v$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function rO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=lO(J,Q,Y,G),U=64,V=U+G;return BY(32,32,(W)=>{Q$(W,32);let M=Gq(W,{dkLen:V}),z=M.subarray(0,U),D=M.subarray(U,V);return L$(z,D)},(W,M,z)=>bJ(L$(z[0],z[1],M[1],W[1],aq($))),q,X)}var iO=(()=>rO("MLKEM768-P256",tG,FX,128))();var uX=pO,T5=iO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>x$($,q,J),lX=C$,L8=cQ,d$=(...$)=>r9(...$),F8=($)=>CG($),g8=u9,_8=($)=>Nq($),TY=BigInt(0),pX=BigInt(1);function Pq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function IY($){if(typeof $==="bigint"){if(!SY($))throw RangeError("positive bigint expected, got "+$)}else lX($);return $}function Yq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function $Q($){let q=IY($).toString(16);return q.length&1?"0"+q:q}function I5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?TY:BigInt("0x"+$)}function fJ($){return I5(cQ($))}function l0($){return I5(cQ(qJ(x$($)).reverse()))}function EY($,q){if(C$(q),q===0)throw RangeError("zero length");$=IY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return CG(J.padStart(q*2,"0"))}function qQ($,q){return EY($,q).reverse()}function E5($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function qJ($){return Uint8Array.from(Z$($))}function CY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var SY=($)=>typeof $==="bigint"&&TY<=$;function dO($,q,J){return SY($)&&SY(q)&&SY(J)&&q<=$&&$<J}function Lq($,q,J,G){if(!dO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function v8($){if($<TY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>TY;$>>=pX,q+=1);return q}var JQ=($)=>(pX<<BigInt($))-pX;function C5($,q,J){if(C$($,"hashLen"),C$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,d$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return d$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while((T=Z(N()))===void 0)R();return z(),T}}function b0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var rX=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c$=BigInt(0),I$=BigInt(1),xJ=BigInt(2),g5=BigInt(3),_5=BigInt(4),v5=BigInt(5),cO=BigInt(7),b5=BigInt(8),nO=BigInt(9),k5=BigInt(16);function B$($,q){if(q<=c$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=c$?J:q+J}function k0($,q,J){if(q<c$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >c$)G*=G,G%=J;return G}function P5($,q){if($===c$)throw Error("invert: expected non-zero number");if(q<=c$)throw Error("invert: expected positive modulus, got "+q);let J=B$($,q),G=q,Q=c$,Y=I$,X=I$,U=c$;while(J!==c$){let W=G/J,M=G-J*W,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==I$)throw Error("invert: does not exist");return B$(Q,q)}function iX($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function y5($,q){let J=$,G=(J.ORDER+I$)/_5,Q=J.pow(q,G);return iX(J,Q,q),Q}function oO($,q){let J=$,G=(J.ORDER-v5)/b5,Q=J.mul(q,xJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,xJ),Y),V=J.mul(X,J.sub(U,J.ONE));return iX(J,V,q),V}function aO($){let q=PY($),J=m5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+cO)/k5;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),D=W.mul(M,Q),R=W.mul(M,Y),N=W.eql(W.sqr(z),V),w=W.eql(W.sqr(D),V);M=W.cmov(M,z,N),z=W.cmov(R,D,w);let j=W.eql(W.sqr(z),V),Z=W.cmov(M,z,j);return iX(W,Z,V),Z}}function m5($){if($<g5)throw Error("sqrt is not defined for small field");let q=$-I$,J=0;while(q%xJ===c$)q/=xJ,J++;let G=xJ,Q=PY($);while(L5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return y5;let Y=Q.pow(G,q),X=(q+I$)/xJ;return function(V,W){let M=V;if(M.is0(W))return W;if(L5(M,W)!==1)throw Error("Cannot find square root");let z=J,D=M.mul(M.ONE,Y),R=M.pow(W,q),N=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let Z=I$<<BigInt(z-w-1),T=M.pow(D,Z);z=w,D=M.sqr(T),R=M.mul(R,D),N=M.mul(N,T)}return N}}function sO($){if($%_5===g5)return y5;if($%b5===v5)return oO;if($%k5===nO)return aO($);return m5($)}var Fq=($,q)=>(B$($,q)&I$)===I$,tO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function dX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=tO.reduce((G,Q)=>{return G[Q]="function",G},q);if(b0($,J),Yq($.BYTES,"BYTES"),Yq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function eO($,q,J){let G=$;if(J<c$)throw Error("invalid exponent, negatives unsupported");if(J===c$)return G.ONE;if(J===I$)return q;let Q=G.ONE,Y=q;while(J>c$){if(J&I$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=I$}return Q}function GQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function L5($,q){let J=$,G=(J.ORDER-I$)/xJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function $N($,q){if(q!==void 0)lX(q);if($<=c$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=v8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var F5=new WeakMap;class cX{ORDER;BITS;BYTES;isLE;ZERO=c$;ONE=I$;_lengths;_mod;constructor($,q={}){if($<=I$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=$N($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return c$<=$&&$<this.ORDER}is0($){return $===c$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I$)===I$}neg($){return B$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return B$($*$,this.ORDER)}add($,q){return B$($+q,this.ORDER)}sub($,q){return B$($-q,this.ORDER)}mul($,q){return B$($*q,this.ORDER)}pow($,q){return eO(this,$,q)}div($,q){return B$($*P5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return P5($,this.ORDER)}sqrt($){let q=F5.get(this);if(!q)F5.set(this,q=sO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?qQ($,this.BYTES):EY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?l0($):fJ($);if(X)U=B$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return GQ(this,$)}cmov($,q,J){return Pq(J,"condition"),J?q:$}}Object.freeze(cX.prototype);function PY($,q={}){return new cX($,q)}function f5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I$)throw Error("field order must be greater than 1");let q=v8($-I$);return Math.ceil(q/8)}function nX($){let q=f5($);return q+Math.ceil(q/2)}function x5($,q,J=!1){Z$($);let G=$.length,Q=f5(q),Y=Math.max(nX(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?l0($):fJ($),U=B$(X,q-I$)+I$;return J?qQ(U,Q):EY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b8=BigInt(0),hJ=BigInt(1);function QQ($,q){let J=q.negate();return $?J:q}function uJ($,q){let J=GQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function l5($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function oX($,q){l5($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=JQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function h5($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=hJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var aX=new WeakMap,r5=new WeakMap;function sX($){return r5.get($)||1}function u5($){if($!==b8)throw Error("invalid wNAF")}class YQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>b8){if(q&hJ)J=J.add(G);G=G.double(),q>>=hJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=oX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=oX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=h5(J,X,Y);if(J=U,W)Q=Q.add(QQ(z,q[D]));else G=G.add(QQ(M,q[V]))}return u5(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=oX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===b8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=h5(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return u5(J),G}getPrecomputes($,q,J){let G=aX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);aX.set(q,G)}}return G}cached($,q,J){let G=sX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=sX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){l5(q,this.bits),r5.set($,q),aX.delete($)}hasCache($){return sX($)!==1}}function i5($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>b8||G>b8){if(J&hJ)Y=Y.add(Q);if(G&hJ)X=X.add(Q);Q=Q.double(),J>>=hJ,G>>=hJ}return{p1:Y,p2:X}}function p5($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return dX(q),q}else return PY($,{isLE:J})}function LY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>b8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=p5(q.p,J.Fp,G),Y=p5(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function XQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function UQ($,q){if(Yq($),Yq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function qN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function JN($){if(!g8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?CY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function tX($,q,J,G){if(Z$($),Yq(J),q=JN(q),q.length>255)q=G(d$(CY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=d$(q,UQ(q.length,1)),V=new Uint8Array(Y),W=UQ(J,2),M=Array(X),z=G(d$(V,$,W,UQ(0,1),U));M[0]=G(d$(z,UQ(1,1),U));for(let R=1;R<X;R++){let N=[qN(z,M[R-1]),UQ(R+1,1),U];M[R]=G(d$(...N))}return d$(...M).slice(0,J)}var d5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c5=($,q)=>($+($>=0?q:-q)/o5)/q;function GN($,q,J){Lq("scalar",$,Xq,J);let[[G,Q],[Y,X]]=q,U=c5(X*$,J),V=c5(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Xq,D=M<Xq;if(z)W=-W;if(D)M=-M;let R=JQ(Math.ceil(v8(J)/2))+JJ;if(W<Xq||W>=R||M<Xq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:D,k2:M}}function $U($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function eX($,q){b0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(Pq(J.lowS,"lowS"),Pq(J.prehash,"prehash"),J.format!==void 0)$U(J.format);return J}class n5 extends Error{constructor($=""){super($)}}var r0={Err:n5,_tlv:{encode:($,q)=>{let{Err:J}=r0;if(Yq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=$Q(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?$Q(Q.length/2|128):"";return $Q($)+Y+Q+q},decode($,q){let{Err:J}=r0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=r0;if(IY($),$<Xq)throw new q("integer: negative integers are not allowed");let J=$Q($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=r0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return fJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=r0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=r0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(r0._tlv);Object.freeze(r0._int);Object.freeze(r0);var Xq=BigInt(0),JJ=BigInt(1),o5=BigInt(2),FY=BigInt(3),QN=BigInt(4);function a5($,q={}){let J=LY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;b0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=t5(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(_,E,I){if(W&&E.is0())return Uint8Array.of(0);let{x:A,y:S}=E.toAffine(),P=G.toBytes(A);if(Pq(I,"isCompressed"),I){z();let g=!G.isOdd(S);return d$(s5(g),P)}else return d$(Uint8Array.of(4),P,G.toBytes(S))}function R(_){Z$(_,void 0,"Point");let{publicKey:E,publicKeyUncompressed:I}=M,A=_.length,S=_[0],P=_.subarray(1);if(W&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===E&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(r){let B=r instanceof Error?": "+r.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===I&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${E} or uncompressed=${I}`)}let N=q.toBytes===void 0?D:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(_){let E=G.sqr(_),I=G.mul(E,_);return G.add(G.add(I,G.mul(_,Y.a)),Y.b)}function Z(_,E){let I=G.sqr(E),A=j(_);return G.eql(I,A)}if(!Z(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,FY),QN),v=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,v)))throw Error("bad curve params: a or b");function m(_,E,I=!1){if(!G.isValid(E)||I&&G.is0(E))throw Error(`bad point coordinate ${_}`);return E}function u(_){if(!(_ instanceof y))throw Error("Weierstrass Point expected")}function F(_){if(!V||!V.basises)throw Error("no endo");return GN(_,V.basises,Q.ORDER)}function x(_,E,I,A,S){return I=new y(G.mul(I.X,_),I.Y,I.Z),E=QQ(A,E),I=QQ(S,I),E.add(I)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(_,E,I){this.X=m("x",_),this.Y=m("y",E,!0),this.Z=m("z",I),Object.freeze(this)}static CURVE(){return Y}static fromAffine(_){let{x:E,y:I}=_||{};if(!_||!G.isValid(E)||!G.isValid(I))throw Error("invalid affine point");if(_ instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(I))return y.ZERO;return new y(E,I,G.ONE)}static fromBytes(_){let E=y.fromAffine(w(Z$(_,void 0,"point")));return E.assertValidity(),E}static fromHex(_){return y.fromBytes(F8(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,E=!0){if(l.createCache(this,_),!E)this.multiply(FY);return this}assertValidity(){let _=this;if(_.is0()){if(q.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:E,y:I}=_.toAffine();if(!G.isValid(E)||!G.isValid(I))throw Error("bad point: x or y not field elements");if(!Z(E,I))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.eql(G.mul(E,g),G.mul(S,A)),b=G.eql(G.mul(I,g),G.mul(P,A));return L&&b}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:E}=Y,I=G.mul(E,FY),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),f=G.mul(S,S),r=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(_,b),L=G.mul(I,r),L=G.add(g,L),g=G.sub(f,L),L=G.add(f,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(I,b),r=G.mul(_,r),B=G.sub(O,r),B=G.mul(_,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,r),O=G.mul(O,B),L=G.add(L,O),r=G.mul(S,P),r=G.add(r,r),O=G.mul(r,B),g=G.sub(g,O),b=G.mul(r,f),b=G.add(b,b),b=G.add(b,b),new y(g,L,b)}add(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=Y.a,r=G.mul(Y.b,FY),B=G.mul(E,S),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.add(E,I),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,o),Y$=G.sub(Y$,G$),G$=G.add(E,A);let s=G.add(S,g);return G$=G.mul(G$,s),s=G.add(B,q$),G$=G.sub(G$,s),s=G.add(I,A),L=G.add(P,g),s=G.mul(s,L),L=G.add(o,q$),s=G.sub(s,L),O=G.mul(f,G$),L=G.mul(r,q$),O=G.add(L,O),L=G.sub(o,O),O=G.add(o,O),b=G.mul(L,O),o=G.add(B,B),o=G.add(o,B),q$=G.mul(f,q$),G$=G.mul(r,G$),o=G.add(o,q$),q$=G.sub(B,q$),q$=G.mul(f,q$),G$=G.add(G$,q$),B=G.mul(o,G$),b=G.add(b,B),B=G.mul(s,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,o),O=G.mul(s,O),O=G.add(O,B),new y(L,b,O)}subtract(_){return u(_),this.add(_.negate())}is0(){return this.equals(y.ZERO)}multiply(_){let{endo:E}=q;if(!Q.isValidNot0(_))throw RangeError("invalid scalar: out of range");let I,A,S=(P)=>l.cached(this,P,(g)=>uJ(y,g));if(E){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(_),{p:O,f}=S(g),{p:r,f:B}=S(b);A=f.add(B),I=x(E.beta,O,r,P,L)}else{let{p:P,f:g}=S(_);I=P,A=g}return uJ(y,[I,A])[0]}multiplyUnsafe(_){let{endo:E}=q,I=this,A=_;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Xq||I.is0())return y.ZERO;if(A===JJ)return I;if(l.hasCache(this))return this.multiply(A);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=i5(y,I,P,L);return x(E.beta,b,O,S,g)}else return l.unsafe(I,A)}toAffine(_){let E=this,I=_,{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:_}=q;if(X===JJ)return!0;if(_)return _(y,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:_}=q;if(X===JJ)return this;if(_)return _(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===JJ)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return Pq(_,"isCompressed"),this.assertValidity(),N(y,this,_)}toHex(_=!0){return L8(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let k=Q.BITS,l=new YQ(y,q.endo?Math.ceil(k/2):k);if(k>=8)y.BASE.precompute(8);return Object.freeze(y.prototype),Object.freeze(y),y}function s5($){return Uint8Array.of($?2:3)}function t5($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function YN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?_8:q.randomBytes,Q=Object.assign(t5($.Fp,J),{seed:Math.max(nX(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,x5(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,Z=J._lengths;if(!g8(R))return;let T=Z$(R,void 0,"key").length,v=T===w||T===j,m=T===N||!!Z?.includes(T);if(v&&m)return;return v}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=XQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function e5($,q,J={}){let G=q;Oq(G),b0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?_8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>wq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N}=YN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*o5+JJ<X.ORDER;function Z(S){let P=V>>JJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function v(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function m(S,P){$U(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(v(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){m(S,P);let g;if(P==="der"){let{r:f,s:r}=r0.toSig(Z$(S));return new u(f,r)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(F8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),f=$.fromBytes(d$(s5((L&1)===0),O)),r=U.inv(b),B=x(Z$(S,void 0,"msgHash")),o=U.create(-B*r),q$=U.create(g*r),Y$=$.BASE.multiplyUnsafe(o).add(f.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return Z(this.s)}toBytes(S=w.format){if($U(S),S==="der")return F8(r0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return v(),d$(Uint8Array.of(this.assertRecovery()),L,b);return d$(L,b)}toHex(S){return L8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=fJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,y=JQ(W);function k(S){return Lq("num < 2^"+W,S,Xq,y),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function _(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=eX(g,w);S=l(S,b);let f=x(S),r=U.fromBytes(P);if(!U.isValidNot0(r))throw Error("invalid private key");let B=[k(r),k(f)];if(O!=null&&O!==!1){let G$=O===!0?Q(N.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let o=d$(...B),q$=f;function Y$(G$){let s=F(G$);if(!U.isValidNot0(s))return;let O$=U.inv(s),A$=$.BASE.multiply(s).toAffine(),T$=U.create(A$.x);if(T$===Xq)return;let y$=U.create(O$*U.create(q$+T$*r));if(y$===Xq)return;let M0=(A$.x===T$?0:2)|Number(A$.y&JJ),e0=y$;if(L&&Z(y$))e0=U.neg(y$),M0^=1;return new u(T$,e0,j?void 0:M0)}return{seed:o,k2sig:Y$}}function E(S,P,g={}){let{seed:L,k2sig:b}=_(S,P,g);return C5(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function I(S,P,g,L={}){let{lowS:b,prehash:O,format:f}=eX(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!g8(S)){let r=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+r)}m(S,f);try{let r=u.fromBytes(S,f),B=$.fromBytes(g);if(b&&r.hasHighS())return!1;let{r:o,s:q$}=r,Y$=x(P),G$=U.inv(q$),s=U.create(Y$*G$),O$=U.create(o*G$),A$=$.BASE.multiplyUnsafe(s).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===o}catch(r){return!1}}function A(S,P,g={}){let{prehash:L}=eX(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N,Point:$,sign:E,verify:I,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var XN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var UN=a5(XN),k8=e5(UN,p$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GJ=BigInt(0),A0=BigInt(1),qU=BigInt(2),VN=BigInt(8);function WN($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function $M($,q={}){let J=q,G=LY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;b0(J,{},{uvRatio:"function"});let V=qU<<BigInt(Y.BYTES*8)-A0,W=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(Z){return{isValid:!1,value:GJ}}}:J.uvRatio;if(!WN(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,Z=!1){let T=Z?A0:GJ;return Lq("coordinate "+w,j,T,V),j}function D(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,A0,W(X.Gx*X.Gy));static ZERO=new R(GJ,A0,A0,GJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,Z,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",Z,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:Z}=w||{};return z("x",j),z("y",Z),new R(j,Z,A0,W(j*Z))}static fromBytes(w,j=!1){let Z=Q.BYTES,{a:T,d:v}=X;w=qJ(Z$(w,Z,"point")),Pq(j,"zip215");let m=qJ(w),u=w[Z-1];m[Z-1]=u&-129;let F=l0(m),x=j?V:Q.ORDER;Lq("point.y",F,GJ,x);let y=W(F*F),k=W(y-A0),l=W(v*y-T),{isValid:_,value:E}=M(k,l);if(!_)throw Error("bad point: invalid y coordinate");let I=(E&A0)===A0,A=(u&128)!==0;if(!j&&E===GJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==I)E=W(-E);return R.fromAffine({x:E,y:F})}static fromHex(w,j=!1){return R.fromBytes(F8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(qU);return this}assertValidity(){let w=this,{a:j,d:Z}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:v,Z:m,T:u}=w,F=W(T*T),x=W(v*v),y=W(m*m),k=W(y*y),l=W(F*j),_=W(y*W(l+x)),E=W(k+W(Z*W(F*x)));if(_!==E)throw Error("bad point: equation left != right (1)");let I=W(T*v),A=W(m*u);if(I!==A)throw Error("bad point: equation left != right (2)")}equals(w){D(w);let{X:j,Y:Z,Z:T}=this,{X:v,Y:m,Z:u}=w,F=W(j*u),x=W(v*T),y=W(Z*u),k=W(m*T);return F===x&&y===k}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:w}=X,{X:j,Y:Z,Z:T}=this,v=W(j*j),m=W(Z*Z),u=W(qU*W(T*T)),F=W(w*v),x=j+Z,y=W(W(x*x)-v-m),k=F+m,l=k-u,_=F-m,E=W(y*l),I=W(k*_),A=W(y*_),S=W(l*k);return new R(E,I,S,A)}add(w){D(w);let{a:j,d:Z}=X,{X:T,Y:v,Z:m,T:u}=this,{X:F,Y:x,Z:y,T:k}=w,l=W(T*F),_=W(v*x),E=W(u*Z*k),I=W(m*y),A=W((T+v)*(F+x)-l-_),S=I-E,P=I+E,g=W(_-j*l),L=W(A*S),b=W(P*g),O=W(A*g),f=W(S*P);return new R(L,b,f,O)}subtract(w){return D(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:Z}=N.cached(this,w,(T)=>uJ(R,T));return uJ(R,[j,Z])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===GJ)return R.ZERO;if(this.is0()||w===A0)return this;return N.unsafe(this,w,(j)=>uJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,Z=w,{X:T,Y:v,Z:m}=j,u=j.is0();if(Z==null)Z=u?VN:Q.inv(m);let F=W(T*Z),x=W(v*Z),y=Q.mul(m,Z);if(u)return{x:GJ,y:A0};if(y!==A0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===A0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),Z=Q.toBytes(j);return Z[Z.length-1]|=w&A0?128:0,Z}toHex(){return L8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new YQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class JU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){rX()}static fromHex($){rX()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return L8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VQ=BigInt(0),y8=BigInt(1),gY=BigInt(2);function MN($){return b0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function qM($){let q=MN($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?_8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?gY**BigInt(254):gY**BigInt(447),N=U?BigInt(8)*gY**BigInt(251)-y8:BigInt(4)*gY**BigInt(445)-y8,w=R+N+y8,j=(A)=>B$(A,J),Z=T(z);function T(A){return qQ(j(A),M)}function v(A){let S=qJ(Z$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(l0(S))}function m(A){return l0(Q(qJ(Z$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===VQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){Lq("u",A,VQ,J),Lq("scalar",S,R,w);let P=S,g=A,L=y8,b=VQ,O=A,f=y8,r=VQ;for(let o=BigInt(W-1);o>=VQ;o--){let q$=P>>o&y8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),xq=M0+e0,hq=M0-e0;O=j(xq*xq),f=j(g*j(hq*hq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A)=>{return A=A===void 0?V(M):A,Z$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze(_),Object.freeze(I),Object.freeze({keygen:XQ(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zN=BigInt(0),gq=BigInt(1),JM=BigInt(2),RN=BigInt(3),DN=BigInt(5),KN=BigInt(8),lJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),XU=(()=>({p:lJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:KN,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function YM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=lJ,U=$*$%Y*$%Y,V=k0(U,JM,Y)*U%Y,W=k0(V,gq,Y)*$%Y,M=k0(W,DN,Y)*W%Y,z=k0(M,q,Y)*M%Y,D=k0(z,J,Y)*z%Y,R=k0(D,G,Y)*D%Y,N=k0(R,Q,Y)*R%Y,w=k0(N,Q,Y)*R%Y,j=k0(w,q,Y)*M%Y;return{pow_p_5_8:k0(j,JM,Y)*$%Y,b2:U}}function HN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var GU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function UU($,q){let J=lJ,G=B$(q*q*q,J),Q=B$(G*G*q,J),Y=YM($*Q).pow_p_5_8,X=B$($*G*Y,J),U=B$(q*X*X,J),V=X,W=B$(X*GU,J),M=U===$,z=U===B$(-$,J),D=U===B$(-$*GU,J);if(M)X=V;if(z||D)X=W;if(Fq(X,J))X=B$(-X,J);return{isValid:M||z,value:X}}var pJ=$M(XU,{uvRatio:UU}),QJ=(()=>pJ.Fp)(),XM=(()=>pJ.Fn)();var _Y=(()=>{let $=lJ;return qM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=YM(q);return B$(k0(J,RN,$)*G,$)},adjustScalarBytes:HN})})();var QU=GU,ON=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),NN=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),wN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),jN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),GM=($)=>UU(gq,$),AN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),YU=($)=>QJ.create(l0($)&AN);function QM($){let{d:q}=XU,J=lJ,G=(Z)=>QJ.create(Z),Q=G(QU*$*$),Y=G((Q+gq)*wN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=UU(Y,U),M=G(W*$);if(!Fq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-gq)*jN-U),D=W*W,R=G((W+W)*U),N=G(z*ON),w=G(gq-D),j=G(gq+D);return new pJ(G(R*j),G(w*N),G(N*j),G(R*w))}class K0 extends JU{static BASE=(()=>new K0(pJ.BASE))();static ZERO=(()=>new K0(pJ.ZERO))();static Fp=(()=>QJ)();static Fn=(()=>XM)();constructor($){super($)}static fromAffine($){return new K0(pJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){x$($,32);let{a:q,d:J}=XU,G=lJ,Q=(v)=>QJ.create(v),Y=YU($);if(!E5(QJ.toBytes(Y),$)||Fq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(gq+q*X),V=Q(gq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:D,value:R}=GM(Q(z*M)),N=Q(R*V),w=Q(R*N*z),j=Q((Y+Y)*N);if(Fq(j,G))j=Q(-j);let Z=Q(U*w),T=Q(j*Z);if(!D||Fq(T,G)||Z===zN)throw Error("invalid ristretto255 encoding 2");return new K0(new pJ(j,Z,gq,T))}static fromHex($){return K0.fromBytes(CG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=lJ,Y=(w)=>QJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=GM(Y(X*V)),M=Y(W*X),z=Y(W*U),D=Y(M*z*G),R;if(Fq(G*D,Q)){let w=Y(q*QU),j=Y($*QU);$=w,q=j,R=Y(M*NN)}else R=z;if(Fq($*D,Q))q=Y(-q);let N=Y((J-q)*R);if(Fq(N,Q))N=Y(-N);return QJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>QJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var ZN=Object.freeze({Point:K0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=tX($,J,64,sQ);return ZN.deriveToCurve(G)},hashToScalar($,q={DST:d5}){let J=tX($,q.DST,64,sQ);return XM.create(l0(J))},deriveToCurve($){x$($,64);let q=YU($.subarray(0,32)),J=QM(q),G=YU($.subarray(32,64)),Q=QM(G);return new K0(J.add(Q))}});var UM=!1,BN=!1;async function VM($,q){if(BN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function WU($,q){return await VM(async()=>{let J=VU($)?$:await TN($),G=await crypto.subtle.importKey("raw",IN(q),{name:"X25519"},UM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMult($,q)})}async function MU($){return await VM(async()=>{return WU($,_Y.GuBytes)},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMultBase($)})}var SN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function TN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...SN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},UM,["deriveBits"])}function VU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function IN($){return $}class WM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),CN(WQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=WQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:WQ(this.transcript)}}}function CN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function WQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function vY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function MM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function zM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class _q{args;body;constructor($,q){this.args=$,this.body=q}}function zU($){let q=[];q.push(`age-encryption.org/v1
|
|
57
|
+
`).map((q)=>q.trim()).join(" ")};SD.O=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts)}});var CD=X$((Fm,DV)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)DV.exports=ND();else DV.exports=ED()});var IK=X$((Qu,TK)=>{var w9=Object.prototype.hasOwnProperty,SK=Object.prototype.toString,NK=Object.defineProperty,wK=Object.getOwnPropertyDescriptor,jK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return SK.call(q)==="[object Array]"},AK=function(q){if(!q||SK.call(q)!=="[object Object]")return!1;var J=w9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&w9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||w9.call(q,Q)},ZK=function(q,J){if(NK&&J.name==="__proto__")NK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},BK=function(q,J){if(J==="__proto__"){if(!w9.call(q,J))return;else if(wK)return wK(q,J).value}return q[J]};TK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=BK(U,J),Q=BK(q,J),U!==Q){if(M&&Q&&(AK(Q)||(Y=jK(Q)))){if(Y)Y=!1,X=G&&jK(G)?G:[];else X=G&&AK(G)?G:{};ZK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")ZK(U,{name:J,newValue:Q})}}return U}});import{parseArgs as J6}from"util";var G6={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function x9($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function h9($,q){let J=$[q];return typeof J==="string"?J:void 0}function H7($){let{values:q,positionals:J}=J6({args:$,options:G6,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:x9(q,"help"),version:x9(q,"version"),dryRun:x9(q,"dry-run"),pushTo:h9(q,"push-to"),cohort:h9(q,"cohort"),anchorId:h9(q,"anchor-id")}}}var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.74",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as xN,mkdirSync as hN,readFileSync as SU,writeFileSync as TU}from"fs";import{dirname as uN,join as NM}from"path";function u9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function x$($,q,J=""){let G=u9($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function Oq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function N8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function iQ($,q){x$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function dQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function w8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function f0($,q){return $<<32-q|$>>>q}function N$($,q){return $<<q|$>>>32-q>>>0}var Y6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function X6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function U6($){for(let q=0;q<$.length;q++)$[q]=X6($[q]);return $}var p9=Y6?($)=>$:U6,N7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),V6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function cQ($){if(x$($),N7)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=V6[$[J]];return q}var Hq={_0:48,_9:57,A:65,F:70,a:97,f:102};function O7($){if($>=Hq._0&&$<=Hq._9)return $-Hq._0;if($>=Hq.A&&$<=Hq.F)return $-(Hq.A-10);if($>=Hq.a&&$<=Hq.f)return $-(Hq.a-10);return}function CG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(N7)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=O7($.charCodeAt(Y)),U=O7($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function W6($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function l9($,q=""){if(typeof $==="string")return W6($);return x$($,void 0,q)}function r9(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];x$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function nQ($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function i9($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Nq($=32){C$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var d9=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class c9{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(Oq($),x$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),z0(G)}update($){return N8(this),this.iHash.update($),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var wq=(()=>{let $=(q,J,G)=>new c9(q,J).update(G).digest();return $.create=(q,J)=>new c9(q,J),$})();function PG($,q,J){if(Oq($),J===void 0)J=new Uint8Array($.outputLen);return wq($,J,q)}var n9=Uint8Array.of(0),w7=Uint8Array.of();function o9($,q,J,G=32){Oq($),C$(G,"length"),x$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=w7;else x$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=wq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)n9[0]=M+1,V.update(M===0?w7:W).update(J).update(n9).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),z0(W,n9),X.slice(0,G)}var LG=($,q,J,G,Q)=>o9($,PG($,q,J),G,Q);function j7($,q,J){return $&q^~$&J}function A7($,q,J){return $&q^$&J^q&J}class oQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=w8(this.buffer)}update($){N8(this),x$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=w8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){N8(this),iQ($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=w8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var jq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Aq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),h$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),u$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),Z7=BigInt(32);function M6($,q=!1){if(q)return{h:Number($&aQ),l:Number($>>Z7&aQ)};return{h:Number($>>Z7&aQ)|0,l:Number($&aQ)|0}}function B7($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=M6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var a9=($,q,J)=>$>>>J,s9=($,q,J)=>$<<32-J|q>>>J,TJ=($,q,J)=>$>>>J|q<<32-J,IJ=($,q,J)=>$<<32-J|q>>>J,FG=($,q,J)=>$<<64-J|q>>>J-32,gG=($,q,J)=>$>>>J-32|q<<64-J;function $q($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var S7=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),T7=($,q,J,G)=>q+J+G+($/4294967296|0)|0,I7=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),E7=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,C7=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),P7=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var R6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),uq=new Uint32Array(64);class t9 extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)uq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=uq[M-15],D=uq[M-2],R=f0(z,7)^f0(z,18)^z>>>3,N=f0(D,17)^f0(D,19)^D>>>10;uq[M]=N+uq[M-7]+R+uq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=f0(X,6)^f0(X,11)^f0(X,25),D=W+z+j7(X,U,V)+R6[M]+uq[M]|0,N=(f0(J,2)^f0(J,13)^f0(J,22))+A7(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){z0(uq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),z0(this.buffer)}}class L7 extends t9{A=jq[0]|0;B=jq[1]|0;C=jq[2]|0;D=jq[3]|0;E=jq[4]|0;F=jq[5]|0;G=jq[6]|0;H=jq[7]|0;constructor(){super(32)}}class D6 extends t9{A=Aq[0]|0;B=Aq[1]|0;C=Aq[2]|0;D=Aq[3]|0;E=Aq[4]|0;F=Aq[5]|0;G=Aq[6]|0;H=Aq[7]|0;constructor(){super(28)}}var F7=(()=>B7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),K6=(()=>F7[0])(),H6=(()=>F7[1])(),pq=new Uint32Array(80),lq=new Uint32Array(80);class _G extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)pq[T]=$.getUint32(q),lq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=pq[T-15]|0,m=lq[T-15]|0,u=TJ(v,m,1)^TJ(v,m,8)^a9(v,m,7),F=IJ(v,m,1)^IJ(v,m,8)^s9(v,m,7),x=pq[T-2]|0,y=lq[T-2]|0,k=TJ(x,y,19)^FG(x,y,61)^a9(x,y,6),l=IJ(x,y,19)^gG(x,y,61)^s9(x,y,6),_=I7(F,l,lq[T-7],lq[T-16]),E=E7(_,u,k,pq[T-7],pq[T-16]);pq[T]=E|0,lq[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=TJ(M,z,14)^TJ(M,z,18)^FG(M,z,41),m=IJ(M,z,14)^IJ(M,z,18)^gG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=C7(Z,m,F,H6[T],lq[T]),y=P7(x,j,v,u,K6[T],pq[T]),k=x|0,l=TJ(J,G,28)^FG(J,G,34)^FG(J,G,39),_=IJ(J,G,28)^gG(J,G,34)^gG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=$q(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=S7(k,_,I);J=T7(A,y,l,E),G=A|0}({h:J,l:G}=$q(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=$q(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=$q(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=$q(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=$q(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=$q(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=$q(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=$q(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){z0(pq,lq)}destroy(){this.destroyed=!0,z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class g7 extends _G{Ah=u$[0]|0;Al=u$[1]|0;Bh=u$[2]|0;Bl=u$[3]|0;Ch=u$[4]|0;Cl=u$[5]|0;Dh=u$[6]|0;Dl=u$[7]|0;Eh=u$[8]|0;El=u$[9]|0;Fh=u$[10]|0;Fl=u$[11]|0;Gh=u$[12]|0;Gl=u$[13]|0;Hh=u$[14]|0;Hl=u$[15]|0;constructor(){super(64)}}class O6 extends _G{Ah=h$[0]|0;Al=h$[1]|0;Bh=h$[2]|0;Bl=h$[3]|0;Ch=h$[4]|0;Cl=h$[5]|0;Dh=h$[6]|0;Dl=h$[7]|0;Eh=h$[8]|0;El=h$[9]|0;Fh=h$[10]|0;Fl=h$[11]|0;Gh=h$[12]|0;Gl=h$[13]|0;Hh=h$[14]|0;Hl=h$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),t$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class N6 extends _G{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class w6 extends _G{Ah=t$[0]|0;Al=t$[1]|0;Bh=t$[2]|0;Bl=t$[3]|0;Ch=t$[4]|0;Cl=t$[5]|0;Dh=t$[6]|0;Dl=t$[7]|0;Eh=t$[8]|0;El=t$[9]|0;Fh=t$[10]|0;Fl=t$[11]|0;Gh=t$[12]|0;Gl=t$[13]|0;Hh=t$[14]|0;Hl=t$[15]|0;constructor(){super(32)}}var p$=i9(()=>new L7,d9(1));var sQ=i9(()=>new g7,d9(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function JY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function qX($){if(!JY($))throw Error("Uint8Array expected")}function y7($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function m7($){if(typeof $!=="function")throw Error("function expected");return!0}function rq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function bG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function eQ($){if(!Array.isArray($))throw Error("array expected")}function $Y($,q){if(!y7(!0,q))throw Error(`${$}: array of strings expected`)}function JX($,q){if(!y7(!1,q))throw Error(`${$}: array of numbers expected`)}function I0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function E0($){let q=typeof $==="string"?$.split(""):$,J=q.length;$Y("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return eQ(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return eQ(Q),Q.map((Y)=>{rq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function C0($=""){return rq("join",$),{encode:(q)=>{return $Y("join.decode",q),q.join($)},decode:(q)=>{return rq("join.decode",q),q.split($)}}}function GY($,q="="){return bG($),rq("padding",q),{encode(J){$Y("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){$Y("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function f7($){return m7($),{encode:(q)=>q,decode:(q)=>$(q)}}function _7($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(eQ($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(bG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,D=z+M;if(!Number.isSafeInteger(D)||z/q!==U||D-M!==z)throw Error("convertRadix: carry overflow");let R=D/J;U=D%J;let N=Math.floor(R);if(Y[W]=N,!Number.isSafeInteger(N)||N*J+U!==D)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!N)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var x7=($,q)=>q===0?$:x7(q,$%q),qY=($,q)=>$+(q-x7($,q)),tQ=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function e9($,q,J,G){if(eQ($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(qY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${qY(q,J)}`);let Q=0,Y=0,X=tQ[q],U=tQ[J]-1,V=[];for(let W of $){if(bG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=tQ[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function j6($){bG($);let q=256;return{encode:(J)=>{if(!JY(J))throw Error("radix.encode input should be Uint8Array");return _7(Array.from(J),q,$)},decode:(J)=>{return JX("radix.decode",J),Uint8Array.from(_7(J,$,q))}}}function g0($,q=!1){if(bG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(qY(8,$)>32||qY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!JY(J))throw Error("radix2.encode input should be Uint8Array");return e9(Array.from(J),8,$,!q)},decode:(J)=>{return JX("radix2.decode",J),Uint8Array.from(e9(J,$,8,q))}}}function v7($){return m7($),function(...q){try{return $.apply(null,q)}catch(J){}}}var QL=I0(g0(4),E0("0123456789ABCDEF"),C0("")),YL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),GY(5),C0("")),XL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),C0("")),UL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),GY(5),C0("")),VL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),C0("")),WL=I0(g0(5),E0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),C0(""),f7(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),h7=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),u7=($,q)=>{rq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},GX=h7?{encode($){return qX($),$.toBase64()},decode($){return u7($,!1)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),GY(6),C0("")),x0=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),C0("")),ML=h7?{encode($){return qX($),$.toBase64({alphabet:"base64url"})},decode($){return u7($,!0)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),GY(6),C0("")),zL=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),C0("")),QX=($)=>I0(j6(58),E0($),C0("")),RL=QX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),DL=QX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),KL=QX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var $X=I0(E0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),C0("")),b7=[996825010,642813549,513874426,1027748829,705979059];function vG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<b7.length;G++)if((q>>G&1)===1)J^=b7[G];return J}function k7($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=vG(Q)^X>>5}Q=vG(Q);for(let Y=0;Y<G;Y++)Q=vG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=vG(Q)^Y;for(let Y=0;Y<6;Y++)Q=vG(Q);return Q^=J,$X.encode(e9([Q%tQ[30]],30,5,!1))}function p7($){let q=$==="bech32"?1:734539939,J=g0(5),G=J.decode,Q=J.encode,Y=v7(G);function X(z,D,R=90){if(rq("bech32.encode prefix",z),JY(D))D=Array.from(D);JX("bech32.encode",D);let N=z.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let w=N+7+D.length;if(R!==!1&&w>R)throw TypeError(`Length ${w} exceeds limit ${R}`);let j=z.toLowerCase(),Z=k7(j,D,q);return`${j}1${$X.encode(D)}${Z}`}function U(z,D=90){rq("bech32.decode input",z);let R=z.length;if(R<8||D!==!1&&R>D)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${D})`);let N=z.toLowerCase();if(z!==N&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let w=N.lastIndexOf("1");if(w===0||w===-1)throw Error('Letter "1" must be present between prefix and data only');let j=N.slice(0,w),Z=N.slice(w+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=$X.decode(Z).slice(0,-6),v=k7(j,T,q);if(!Z.endsWith(v))throw Error(`Invalid checksum in ${z}: expected "${v}"`);return{prefix:j,words:T}}let V=v7(U);function W(z){let{prefix:D,words:R}=U(z,!1);return{prefix:D,words:R,bytes:G(R)}}function M(z,D){return X(z,Q(D))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var h0=p7("bech32"),HL=p7("bech32m");var A6=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),Z6={encode($){return qX($),$.toHex()},decode($){return rq("hex",$),Uint8Array.fromHex($)}},OL=A6?Z6:I0(g0(4),E0("0123456789abcdef"),C0(""),f7(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function S6($,q,J,G){Oq($);let Q=nQ({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(C$(Y,"c"),C$(X,"dkLen"),C$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=l9(q,"password"),W=l9(J,"salt"),M=new Uint8Array(X),z=wq.create($,V),D=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:D}}function T6($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return z0(Q),J}function YX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=S6($,q,J,G),W,M=new Uint8Array(4),z=w8(M),D=new Uint8Array(U.outputLen);for(let R=1,N=0;N<Y;R++,N+=U.outputLen){let w=X.subarray(N,N+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(D),w.set(D.subarray(0,w.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(D).digestInto(D);for(let Z=0;Z<w.length;Z++)w[Z]^=D[Z]}}return T6(U,V,X,W,D)}function l7($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],D=$[q++]^J[G++],R=$[q++]^J[G++],N=$[q++]^J[G++],w=$[q++]^J[G++],j=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],v=$[q++]^J[G++],m=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let r=0;r<8;r+=2)l^=N$(F+L|0,7),A^=N$(l+F|0,9),L^=N$(A+l|0,13),F^=N$(L+A|0,18),S^=N$(_+x|0,7),b^=N$(S+_|0,9),x^=N$(b+S|0,13),_^=N$(x+b|0,18),O^=N$(P+E|0,7),y^=N$(O+P|0,9),E^=N$(y+O|0,13),P^=N$(E+y|0,18),k^=N$(f+g|0,7),I^=N$(k+f|0,9),g^=N$(I+k|0,13),f^=N$(g+I|0,18),x^=N$(F+k|0,7),y^=N$(x+F|0,9),k^=N$(y+x|0,13),F^=N$(k+y|0,18),E^=N$(_+l|0,7),I^=N$(E+_|0,9),l^=N$(I+E|0,13),_^=N$(l+I|0,18),g^=N$(P+S|0,7),A^=N$(g+P|0,9),S^=N$(A+g|0,13),P^=N$(S+A|0,18),L^=N$(f+O|0,7),b^=N$(L+f|0,9),O^=N$(b+L|0,13),f^=N$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+y|0,Q[Y++]=W+k|0,Q[Y++]=M+l|0,Q[Y++]=z+_|0,Q[Y++]=D+E|0,Q[Y++]=R+I|0,Q[Y++]=N+A|0,Q[Y++]=w+S|0,Q[Y++]=j+P|0,Q[Y++]=Z+g|0,Q[Y++]=T+L|0,Q[Y++]=v+b|0,Q[Y++]=m+O|0,Q[Y++]=u+f|0}function XX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(l7(J,X,$,q,J,Y),U>0)X+=16;l7(J,Y,$,q+=16,J,X)}}function I6($,q,J){let G=nQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(C$(Q,"N"),C$(Y,"r"),C$(X,"p"),C$(U,"dkLen"),C$(V,"asyncTick"),C$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,D=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=z*(Q+X+1);if(N>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+W);let w=YX(p$,$,q,{c:1,dkLen:z*X}),j=dQ(w),Z=dQ(new Uint8Array(z*Q)),T=dQ(new Uint8Array(z)),v=()=>{};if(M){let m=2*Q*X,u=Math.max(Math.floor(m/1e4),1),F=0;v=()=>{if(F++,M&&(!(F%u)||F===m))M(F/m)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:D,V:Z,B32:j,B:w,tmp:T,blockMixCb:v,asyncTick:V}}function E6($,q,J,G,Q){let Y=YX(p$,$,J,{c:1,dkLen:q});return z0(J,G,Q),Y}function r7($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:D}=I6($,q,J);p9(W);for(let R=0;R<Y;R++){let N=U*R;for(let w=0;w<U;w++)V[w]=W[N+w];for(let w=0,j=0;w<G-1;w++)XX(V,j,V,j+=U,Q),D();XX(V,(G-1)*U,W,N,Q),D();for(let w=0;w<G;w++){let j=(W[N+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)z[Z]=W[N+Z]^V[j*U+Z];XX(z,0,W,N,Q),D()}}return p9(W),E6($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function C6($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function QY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function j8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function _$($,q,J=""){let G=C6($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function UX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function i7($,q,J=!1){_$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!A8($))throw Error("invalid output, must be aligned")}function qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function u0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function P6($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var EJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),L6=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var F6=($)=>{for(let q=0;q<$.length;q++)$[q]=L6($[q]);return $},Zq=EJ?($)=>$:F6;function d7($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function c7($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function n7($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var o7=($,q)=>{function J(G,...Q){if(_$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];_$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)_$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");_$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,_$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(_$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function kG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(_$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!A8(q))throw Error("invalid output, must be aligned");return q}function a7($,q,J){j8($),j8(q),QY(J);let G=new Uint8Array(16),Q=P6(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function A8($){return $.byteOffset%4===0}function Z8($){return Uint8Array.from(_$($))}var t7=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),g6=(()=>Zq(qq(t7("expand 16-byte k"))))(),_6=(()=>Zq(qq(t7("expand 32-byte k"))))();function w$($,q){return $<<q|$>>>32-q}var yG=64,v6=16,VX=(()=>4294967295)(),s7=Uint32Array.of();function b6($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(yG),M=qq(W),z=EJ&&A8(Q)&&A8(Y),D=z?qq(Q):s7,R=z?qq(Y):s7;if(!EJ){for(let N=0;N<V;X++){if($(q,J,G,M,X,U),Zq(M),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}return}for(let N=0;N<V;X++){if($(q,J,G,M,X,U),X>=VX)throw Error("arx: counter overflow");let w=Math.min(yG,V-N);if(z&&w===yG){let j=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<v6;Z++)T=j+Z,R[T]=D[T]^M[Z];N+=yG;continue}for(let j=0,Z;j<w;j++)Z=N+j,Y[Z]=Q[Z]^W[j];N+=w}}function e7($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=d7({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return j8(Q),j8(X),QY(Y),QY(J),(U,V,W,M,z=0)=>{_$(U,void 0,"key"),_$(V,void 0,"nonce"),_$(W,void 0,"data");let D=W.length;if(M=kG(D,M,!1),j8(z),z<0||z>=VX)throw Error("arx: counter overflow");let R=[],N=U.length,w,j;if(N===32)R.push(w=Z8(U)),j=_6;else if(N===16&&J)w=new Uint8Array(32),w.set(U),w.set(U,16),j=g6,R.push(w);else throw _$(U,32,"arx key"),Error("invalid key size");if(!EJ||!A8(V))R.push(V=Z8(V));let Z=qq(w);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let m=V.subarray(0,16);if(EJ)G(j,Z,qq(m),Z);else{let u=Zq(Uint32Array.from(j));G(u,Z,qq(m),Z),u0(u),Zq(Z)}V=V.subarray(16)}else if(!EJ)Zq(Z);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let m=new Uint8Array(12);m.set(V,Y?0:12-V.length),V=m,R.push(V)}let v=Zq(qq(V));try{return b6($,j,Z,v,W,M,z,X),M}finally{u0(...R)}}}function l$($,q){return $[q++]&255|($[q++]&255)<<8}class $W{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=Z8(_$($,32,"key"));let q=l$($,0),J=l$($,2),G=l$($,4),Q=l$($,6),Y=l$($,8),X=l$($,10),U=l$($,12),V=l$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=l$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],D=Y[6],R=Y[7],N=Y[8],w=Y[9],j=l$($,q+0),Z=l$($,q+2),T=l$($,q+4),v=l$($,q+6),m=l$($,q+8),u=l$($,q+10),F=l$($,q+12),x=l$($,q+14),y=Q[0]+(j&8191),k=Q[1]+((j>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),_=Q[3]+((T>>>7|v<<9)&8191),E=Q[4]+((v>>>4|m<<12)&8191),I=Q[5]+(m>>>1&8191),A=Q[6]+((m>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+y*X+k*(5*w)+l*(5*N)+_*(5*R)+E*(5*D);L=b>>>13,b&=8191,b+=I*(5*z)+A*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+y*U+k*X+l*(5*w)+_*(5*N)+E*(5*R);L=O>>>13,O&=8191,O+=I*(5*D)+A*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let f=L+y*V+k*U+l*X+_*(5*w)+E*(5*N);L=f>>>13,f&=8191,f+=I*(5*R)+A*(5*D)+S*(5*z)+P*(5*M)+g*(5*W),L+=f>>>13,f&=8191;let r=L+y*W+k*V+l*U+_*X+E*(5*w);L=r>>>13,r&=8191,r+=I*(5*N)+A*(5*R)+S*(5*D)+P*(5*z)+g*(5*M),L+=r>>>13,r&=8191;let B=L+y*M+k*W+l*V+_*U+E*X;L=B>>>13,B&=8191,B+=I*(5*w)+A*(5*N)+S*(5*R)+P*(5*D)+g*(5*z),L+=B>>>13,B&=8191;let o=L+y*z+k*M+l*W+_*V+E*U;L=o>>>13,o&=8191,o+=I*X+A*(5*w)+S*(5*N)+P*(5*R)+g*(5*D),L+=o>>>13,o&=8191;let q$=L+y*D+k*z+l*M+_*W+E*V;L=q$>>>13,q$&=8191,q$+=I*U+A*X+S*(5*w)+P*(5*N)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+y*R+k*D+l*z+_*M+E*W;L=Y$>>>13,Y$&=8191,Y$+=I*V+A*U+S*X+P*(5*w)+g*(5*N),L+=Y$>>>13,Y$&=8191;let G$=L+y*N+k*R+l*D+_*z+E*M;L=G$>>>13,G$&=8191,G$+=I*W+A*V+S*U+P*X+g*(5*w),L+=G$>>>13,G$&=8191;let s=L+y*w+k*N+l*R+_*D+E*z;L=s>>>13,s&=8191,s+=I*M+A*W+S*V+P*U+g*X,L+=s>>>13,s&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=f,Q[3]=r,Q[4]=B,Q[5]=o,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=s}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;u0(J)}update($){UX(this),_$($),$=Z8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,u0(this.h,this.r,this.buffer,this.pad)}digestInto($){UX(this),i7($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var qW=n7(32,($)=>new $W($));function k6($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],D=q[2],R=q[3],N=q[4],w=q[5],j=q[6],Z=q[7],T=Q,v=J[0],m=J[1],u=J[2],F=X,x=U,y=V,k=W,l=M,_=z,E=D,I=R,A=N,S=w,P=j,g=Z,L=T,b=v,O=m,f=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=w$(L^F,16),A=A+L|0,l=w$(l^A,12),F=F+l|0,L=w$(L^F,8),A=A+L|0,l=w$(l^A,7),x=x+_|0,b=w$(b^x,16),S=S+b|0,_=w$(_^S,12),x=x+_|0,b=w$(b^x,8),S=S+b|0,_=w$(_^S,7),y=y+E|0,O=w$(O^y,16),P=P+O|0,E=w$(E^P,12),y=y+E|0,O=w$(O^y,8),P=P+O|0,E=w$(E^P,7),k=k+I|0,f=w$(f^k,16),g=g+f|0,I=w$(I^g,12),k=k+I|0,f=w$(f^k,8),g=g+f|0,I=w$(I^g,7),F=F+_|0,f=w$(f^F,16),P=P+f|0,_=w$(_^P,12),F=F+_|0,f=w$(f^F,8),P=P+f|0,_=w$(_^P,7),x=x+E|0,L=w$(L^x,16),g=g+L|0,E=w$(E^g,12),x=x+E|0,L=w$(L^x,8),g=g+L|0,E=w$(E^g,7),y=y+I|0,b=w$(b^y,16),A=A+b|0,I=w$(I^A,12),y=y+I|0,b=w$(b^y,8),A=A+b|0,I=w$(I^A,7),k=k+l|0,O=w$(O^k,16),S=S+O|0,l=w$(l^S,12),k=k+l|0,O=w$(O^k,8),S=S+O|0,l=w$(l^S,7);let r=0;G[r++]=X+F|0,G[r++]=U+x|0,G[r++]=V+y|0,G[r++]=W+k|0,G[r++]=M+l|0,G[r++]=z+_|0,G[r++]=D+E|0,G[r++]=R+I|0,G[r++]=N+A|0,G[r++]=w+S|0,G[r++]=j+P|0,G[r++]=Z+g|0,G[r++]=T+L|0,G[r++]=v+b|0,G[r++]=m+O|0,G[r++]=u+f|0}var y6=e7(k6,{counterRight:!1,counterLength:4,allowShortKeys:!1});var m6=new Uint8Array(16),JW=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(m6.subarray(J))},f6=new Uint8Array(32);function GW($,q,J,G,Q){if(Q!==void 0)_$(Q,void 0,"AAD");let Y=$(q,J,f6),X=a7(G.length,Q?Q.length:0,!0),U=qW.create(Y);if(Q)JW(U,Q);JW(U,G),U.update(X);let V=U.digest();return u0(Y,X),V}var x6=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=kG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=GW($,q,J,V,G);return X.set(W,U),u0(W),X},decrypt(Y,X){X=kG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=GW($,q,J,U,G);if(!c7(V,W))throw u0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),u0(W),X}}},iq=o7({blockSize:64,nonceLength:12,tagLength:16},x6(y6));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function B8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function m$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=B8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function _0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");m$($.outputLen),m$($.blockLen)}function Sq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function j0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function UY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function p0($,q){return $<<32-q|$>>>q}var h6=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function u6($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function p6($){for(let q=0;q<$.length;q++)$[q]=u6($[q]);return $}var WX=h6?($)=>$:p6,YW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),l6=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function CJ($){if(Q$($),YW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=l6[$[J]];return q}var Bq={_0:48,_9:57,A:65,F:70,a:97,f:102};function QW($){if($>=Bq._0&&$<=Bq._9)return $-Bq._0;if($>=Bq.A&&$<=Bq.F)return $-(Bq.A-10);if($>=Bq.a&&$<=Bq.f)return $-(Bq.a-10);return}function PJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(YW)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=QW($.charCodeAt(Y)),U=QW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function L$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function S8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function dq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var cq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zX=BigInt(0),MX=BigInt(1);function mG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function XW($){if(typeof $==="bigint"){if(!VY($))throw Error("positive bigint expected, got "+$)}else m$($);return $}function fG($){let q=XW($).toString(16);return q.length&1?"0"+q:q}function UW($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?zX:BigInt("0x"+$)}function nq($){return UW(CJ($))}function oq($){return UW(CJ(WY(Q$($)).reverse()))}function T8($,q){m$(q),$=XW($);let J=PJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function xG($,q){return T8($,q).reverse()}function WY($){return Uint8Array.from($)}function aq($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var VY=($)=>typeof $==="bigint"&&zX<=$;function r6($,q,J){return VY($)&&VY(q)&&VY(J)&&q<=$&&$<J}function hG($,q,J,G){if(!r6(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function RX($){let q;for(q=0;$>zX;$>>=MX,q+=1);return q}var uG=($)=>(MX<<BigInt($))-MX;function VW($,q,J){if(m$($,"hashLen"),m$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,L$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return L$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while(!(T=Z(N())))R();return z(),T}}function LJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function DX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D0=BigInt(0),e$=BigInt(1),FJ=BigInt(2),zW=BigInt(3),RW=BigInt(4),DW=BigInt(5),i6=BigInt(7),KW=BigInt(8),d6=BigInt(9),HW=BigInt(16);function R0($,q){let J=$%q;return J>=D0?J:q+J}function v0($,q,J){let G=$;while(q-- >D0)G*=G,G%=J;return G}function WW($,q){if($===D0)throw Error("invert: expected non-zero number");if(q<=D0)throw Error("invert: expected positive modulus, got "+q);let J=R0($,q),G=q,Q=D0,Y=e$,X=e$,U=D0;while(J!==D0){let W=G/J,M=G%J,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==e$)throw Error("invert: does not exist");return R0(Q,q)}function KX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function OW($,q){let J=($.ORDER+e$)/RW,G=$.pow(q,J);return KX($,G,q),G}function c6($,q){let J=($.ORDER-DW)/KW,G=$.mul(q,FJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,FJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return KX($,U,q),U}function n6($){let q=MY($),J=NW($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+i6)/HW;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),D=U.mul(W,Y),R=U.eql(U.sqr(M),V),N=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(D,z,N);let w=U.eql(U.sqr(M),V),j=U.cmov(W,M,w);return KX(U,j,V),j}}function NW($){if($<zW)throw Error("sqrt is not defined for small field");let q=$-e$,J=0;while(q%FJ===D0)q/=FJ,J++;let G=FJ,Q=MY($);while(MW(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return OW;let Y=Q.pow(G,q),X=(q+e$)/FJ;return function(V,W){if(V.is0(W))return W;if(MW(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),D=V.pow(W,q),R=V.pow(W,X);while(!V.eql(D,V.ONE)){if(V.is0(D))return V.ZERO;let N=1,w=V.sqr(D);while(!V.eql(w,V.ONE))if(N++,w=V.sqr(w),N===M)throw Error("Cannot find square root");let j=e$<<BigInt(M-N-1),Z=V.pow(z,j);M=N,z=V.sqr(Z),D=V.mul(D,z),R=V.mul(R,Z)}return R}}function o6($){if($%RW===zW)return OW;if($%KW===DW)return c6;if($%HW===d6)return n6($);return NW($)}var a6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function HX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=a6.reduce((G,Q)=>{return G[Q]="function",G},q);return LJ($,J),$}function s6($,q,J){if(J<D0)throw Error("invalid exponent, negatives unsupported");if(J===D0)return $.ONE;if(J===e$)return q;let G=$.ONE,Q=q;while(J>D0){if(J&e$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=e$}return G}function pG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function MW($,q){let J=($.ORDER-e$)/FJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function t6($,q){if(q!==void 0)m$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class wW{ORDER;BITS;BYTES;isLE;ZERO=D0;ONE=e$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=D0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=t6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return D0<=$&&$<this.ORDER}is0($){return $===D0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&e$)===e$}neg($){return R0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R0($*$,this.ORDER)}add($,q){return R0($+q,this.ORDER)}sub($,q){return R0($-q,this.ORDER)}mul($,q){return R0($*q,this.ORDER)}pow($,q){return s6(this,$,q)}div($,q){return R0($*WW(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return WW($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=o6(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?xG($,this.BYTES):T8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?oq($):nq($);if(X)U=R0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return pG(this,$)}cmov($,q,J){return J?q:$}}function MY($,q={}){return new wW($,q)}function jW($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function OX($){let q=jW($);return q+Math.ceil(q/2)}function AW($,q,J=!1){Q$($);let G=$.length,Q=jW(q),Y=OX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?oq($):nq($),U=R0(X,q-e$)+e$;return J?xG(U,Q):T8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I8=BigInt(0),gJ=BigInt(1);function lG($,q){let J=q.negate();return $?J:q}function AX($,q){let J=pG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function TW($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function NX($,q){TW($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=uG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function ZW($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=gJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var wX=new WeakMap,IW=new WeakMap;function jX($){return IW.get($)||1}function BW($){if($!==I8)throw Error("invalid wNAF")}class ZX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>I8){if(q&gJ)J=J.add(G);G=G.double(),q>>=gJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=NX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=NX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=ZW(J,X,Y);if(J=U,W)Q=Q.add(lG(z,q[D]));else G=G.add(lG(M,q[V]))}return BW(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=NX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===I8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=ZW(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return BW(J),G}getPrecomputes($,q,J){let G=wX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);wX.set(q,G)}}return G}cached($,q,J){let G=jX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=jX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){TW(q,this.bits),IW.set($,q),wX.delete($)}hasCache($){return jX($)!==1}}function EW($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>I8||G>I8){if(J&gJ)Y=Y.add(Q);if(G&gJ)X=X.add(Q);Q=Q.double(),J>>=gJ,G>>=gJ}return{p1:Y,p2:X}}function SW($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return HX(q),q}else return MY($,{isLE:J})}function CW($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>I8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=SW(q.p,J.Fp,G),Y=SW(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function zY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rG=BigInt(0),E8=BigInt(1),RY=BigInt(2);function e6($){return LJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function PW($){let q=e6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||dq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?RY**BigInt(254):RY**BigInt(447),N=U?BigInt(8)*RY**BigInt(251)-E8:BigInt(4)*RY**BigInt(445)-E8,w=R+N+E8,j=(A)=>R0(A,J),Z=T(z);function T(A){return xG(j(A),M)}function v(A){let S=WY(Q$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(oq(S))}function m(A){return oq(Q(WY(Q$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===rG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){hG("u",A,rG,J),hG("scalar",S,R,w);let P=S,g=A,L=E8,b=rG,O=A,f=E8,r=rG;for(let o=BigInt(W-1);o>=rG;o--){let q$=P>>o&E8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),xq=M0+e0,hq=M0-e0;O=j(xq*xq),f=j(g*j(hq*hq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A=V(M))=>{return Q$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze({keygen:zY(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}class BX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(_0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),j0(G)}update($){return Sq(this),this.iHash.update($),this}digestInto($){Sq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var C8=($,q,J)=>new BX($,q).update(J).digest();C8.create=($,q)=>new BX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var LW=($,q)=>($+($>=0?q:-q)/gW)/q;function $O($,q,J){let[[G,Q],[Y,X]]=q,U=LW(X*$,J),V=LW(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Tq,D=M<Tq;if(z)W=-W;if(D)M=-M;let R=uG(Math.ceil(RX(J)/2))+P8;if(W<Tq||W>=R||M<Tq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:D,k2:M}}function TX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function SX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(mG(J.lowS,"lowS"),mG(J.prehash,"prehash"),J.format!==void 0)TX(J.format);return J}class FW extends Error{constructor($=""){super($)}}var sq={Err:FW,_tlv:{encode:($,q)=>{let{Err:J}=sq;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=fG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?fG(Q.length/2|128):"";return fG($)+Y+Q+q},decode($,q){let{Err:J}=sq,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=sq;if($<Tq)throw new q("integer: negative integers are not allowed");let J=fG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=sq;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return nq($)}},toSig($){let{Err:q,_int:J,_tlv:G}=sq,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=sq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Tq=BigInt(0),P8=BigInt(1),gW=BigInt(2),DY=BigInt(3),qO=BigInt(4);function IX($,q={}){let J=CW("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;LJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=vW(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(E,I,A){let{x:S,y:P}=I.toAffine(),g=G.toBytes(S);if(mG(A,"isCompressed"),A){M();let L=!G.isOdd(P);return L$(_W(L),g)}else return L$(Uint8Array.of(4),g,G.toBytes(P))}function D(E){Q$(E,void 0,"Point");let{publicKey:I,publicKeyUncompressed:A}=W,S=E.length,P=E[0],g=E.subarray(1);if(S===I&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=w(L),O;try{O=G.sqrt(b)}catch(B){let o=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+o)}M();let f=G.isOdd(O);if((P&1)===1!==f)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${I} or uncompressed=${A}`)}let R=q.toBytes||z,N=q.fromBytes||D;function w(E){let I=G.sqr(E),A=G.mul(I,E);return G.add(G.add(A,G.mul(E,Y.a)),Y.b)}function j(E,I){let A=G.sqr(I),S=w(E);return G.eql(A,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(Y.a,DY),qO),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function v(E,I,A=!1){if(!G.isValid(I)||A&&G.is0(I))throw Error(`bad point coordinate ${E}`);return I}function m(E){if(!(E instanceof k))throw Error("Weierstrass Point expected")}function u(E){if(!V||!V.basises)throw Error("no endo");return $O(E,V.basises,Q.ORDER)}let F=DX((E,I)=>{let{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=DX((E)=>{if(E.is0()){if(q.allowInfinityPoint&&!G.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:I,y:A}=E.toAffine();if(!G.isValid(I)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!j(I,A))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function y(E,I,A,S,P){return A=new k(G.mul(A.X,E),A.Y,A.Z),I=lG(S,I),A=lG(P,A),I.add(A)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(E,I,A){this.X=v("x",E),this.Y=v("y",I,!0),this.Z=v("z",A),Object.freeze(this)}static CURVE(){return Y}static fromAffine(E){let{x:I,y:A}=E||{};if(!E||!G.isValid(I)||!G.isValid(A))throw Error("invalid affine point");if(E instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(A))return k.ZERO;return new k(I,A,G.ONE)}static fromBytes(E){let I=k.fromAffine(N(Q$(E,void 0,"point")));return I.assertValidity(),I}static fromHex(E){return k.fromBytes(PJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,I=!0){if(_.createCache(this,E),!I)this.multiply(DY);return this}assertValidity(){x(this)}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.eql(G.mul(I,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:I}=Y,A=G.mul(I,DY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=G.mul(S,S),r=G.mul(P,P),B=G.mul(g,g),o=G.mul(S,P);return o=G.add(o,o),O=G.mul(S,g),O=G.add(O,O),L=G.mul(E,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(r,b),b=G.add(r,b),b=G.mul(L,b),L=G.mul(o,L),O=G.mul(A,O),B=G.mul(E,B),o=G.sub(f,B),o=G.mul(E,o),o=G.add(o,O),O=G.add(f,f),f=G.add(O,f),f=G.add(f,B),f=G.mul(f,o),b=G.add(b,f),B=G.mul(P,g),B=G.add(B,B),f=G.mul(B,o),L=G.sub(L,f),O=G.mul(B,r),O=G.add(O,O),O=G.add(O,O),new k(L,b,O)}add(E){m(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.ZERO,O=G.ZERO,f=G.ZERO,r=Y.a,B=G.mul(Y.b,DY),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.mul(S,L),G$=G.add(I,A),s=G.add(P,g);G$=G.mul(G$,s),s=G.add(o,q$),G$=G.sub(G$,s),s=G.add(I,S);let O$=G.add(P,L);return s=G.mul(s,O$),O$=G.add(o,Y$),s=G.sub(s,O$),O$=G.add(A,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),f=G.mul(r,s),b=G.mul(B,Y$),f=G.add(b,f),b=G.sub(q$,f),f=G.add(q$,f),O=G.mul(b,f),q$=G.add(o,o),q$=G.add(q$,o),Y$=G.mul(r,Y$),s=G.mul(B,s),q$=G.add(q$,Y$),Y$=G.sub(o,Y$),Y$=G.mul(r,Y$),s=G.add(s,Y$),o=G.mul(q$,s),O=G.add(O,o),o=G.mul(O$,s),b=G.mul(G$,b),b=G.sub(b,o),o=G.mul(G$,q$),f=G.mul(O$,f),f=G.add(f,o),new k(b,O,f)}subtract(E){return this.add(E.negate())}is0(){return this.equals(k.ZERO)}multiply(E){let{endo:I}=q;if(!Q.isValidNot0(E))throw Error("invalid scalar: out of range");let A,S,P=(g)=>_.cached(this,g,(L)=>AX(k,L));if(I){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(E),{p:f,f:r}=P(L),{p:B,f:o}=P(O);S=r.add(o),A=y(I.beta,f,B,g,b)}else{let{p:g,f:L}=P(E);A=g,S=L}return AX(k,[A,S])[0]}multiplyUnsafe(E){let{endo:I}=q,A=this;if(!Q.isValid(E))throw Error("invalid scalar: out of range");if(E===Tq||A.is0())return k.ZERO;if(E===P8)return A;if(_.hasCache(this))return this.multiply(E);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(E),{p1:b,p2:O}=EW(k,A,P,L);return y(I.beta,b,O,S,g)}else return _.unsafe(A,E)}toAffine(E){return F(this,E)}isTorsionFree(){let{isTorsionFree:E}=q;if(X===P8)return!0;if(E)return E(k,this);return _.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:E}=q;if(X===P8)return this;if(E)return E(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(E=!0){return mG(E,"isCompressed"),this.assertValidity(),R(k,this,E)}toHex(E=!0){return CJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,_=new ZX(k,q.endo?Math.ceil(l/2):l);return k.BASE.precompute(8),k}function _W($){return Uint8Array.of($?2:3)}function vW($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function JO($,q={}){let{Fn:J}=$,G=q.randomBytes||dq,Q=Object.assign(vW($.Fp,J),{seed:OX(J.ORDER)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R=G(Q.seed)){return AW(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q;if(!B8(R))return;if("_lengths"in J&&J._lengths||N===w)return;let Z=Q$(R,void 0,"key").length;return Z===w||Z===j}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=zY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function EX($,q,J={}){_0(q),LJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||dq,Q=J.hmac||((A,S)=>C8(q,A,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R}=JO($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},w=U*gW<Y.ORDER;function j(A){let S=U>>P8;return A>S}function Z(A,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(w)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function v(A,S){TX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(A,g)}class m{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=N.format){v(A,S);let P;if(S==="der"){let{r:O,s:f}=sq.toSig(Q$(A));return new m(O,f)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=R.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new m(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(PJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new m(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(L$(_W((g&1)===0),b)),f=X.inv(L),r=F(Q$(A,void 0,"msgHash")),B=X.create(-r*f),o=X.create(P*f),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(o));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(A=N.format){if(TX(A),A==="der")return PJ(sq.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(A==="recovered")return T(),L$(Uint8Array.of(this.assertRecovery()),g,L);return L$(g,L)}toHex(A){return CJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=nq(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=uG(V);function y(A){return hG("num < 2^"+V,A,Tq,x),X.toBytes(A)}function k(A,S){return Q$(A,void 0,"message"),S?Q$(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=SX(P,N);A=k(A,L);let O=F(A),f=X.fromBytes(S);if(!X.isValidNot0(f))throw Error("invalid private key");let r=[y(f),y(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;r.push(Q$(Y$,void 0,"extraEntropy"))}let B=L$(...r),o=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let s=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Tq)return;let T$=X.create(s*X.create(o+A$*f));if(T$===Tq)return;let y$=(O$.x===A$?0:2)|Number(O$.y&P8),M0=T$;if(g&&j(T$))M0=X.neg(T$),y$^=1;return new m(A$,M0,w?void 0:y$)}return{seed:B,k2sig:q$}}function _(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return VW(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function E(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=SX(g,N);if(P=Q$(P,void 0,"publicKey"),S=k(S,b),!B8(A)){let f=A instanceof m?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+f)}v(A,O);try{let f=m.fromBytes(A,O),r=$.fromBytes(P);if(L&&f.hasHighS())return!1;let{r:B,s:o}=f,q$=F(S),Y$=X.inv(o),G$=X.create(q$*Y$),s=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(r.multiplyUnsafe(s));if(O$.is0())return!1;return X.create(O$.x)===B}catch(f){return!1}}function I(A,S,P={}){let{prehash:g}=SX(P,N);return S=k(S,g),m.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R,Point:$,sign:_,verify:E,recoverPublicKey:I,Signature:m,hash:q})}function bW($,q,J){return $&q^~$&J}function kW($,q,J){return $&q^$&J^q&J}class KY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=UY(this.buffer)}update($){Sq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=UY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Sq(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,j0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=UY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Iq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Eq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),r$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var HY=BigInt(4294967295),yW=BigInt(32);function GO($,q=!1){if(q)return{h:Number($&HY),l:Number($>>yW&HY)};return{h:Number($>>yW&HY)|0,l:Number($&HY)|0}}function OY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=GO($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var CX=($,q,J)=>$>>>J,PX=($,q,J)=>$<<32-J|q>>>J,_J=($,q,J)=>$>>>J|q<<32-J,vJ=($,q,J)=>$<<32-J|q>>>J,iG=($,q,J)=>$<<64-J|q>>>J-32,dG=($,q,J)=>$>>>J-32|q<<64-J;var mW=($,q,J)=>$<<J|q>>>32-J,fW=($,q,J)=>q<<J|$>>>32-J,xW=($,q,J)=>q<<J-32|$>>>64-J,hW=($,q,J)=>$<<J-32|q>>>64-J;function Jq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var uW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),pW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,lW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),rW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,iW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),dW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var YO=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),tq=new Uint32Array(64);class LX extends KY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)tq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=tq[M-15],D=tq[M-2],R=p0(z,7)^p0(z,18)^z>>>3,N=p0(D,17)^p0(D,19)^D>>>10;tq[M]=N+tq[M-7]+R+tq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=p0(X,6)^p0(X,11)^p0(X,25),D=W+z+bW(X,U,V)+YO[M]+tq[M]|0,N=(p0(J,2)^p0(J,13)^p0(J,22))+kW(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+N|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){j0(tq)}destroy(){this.set(0,0,0,0,0,0,0,0),j0(this.buffer)}}class cW extends LX{A=Iq[0]|0;B=Iq[1]|0;C=Iq[2]|0;D=Iq[3]|0;E=Iq[4]|0;F=Iq[5]|0;G=Iq[6]|0;H=Iq[7]|0;constructor(){super(32)}}class XO extends LX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(28)}}var nW=(()=>OY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),UO=(()=>nW[0])(),VO=(()=>nW[1])(),eq=new Uint32Array(80),$J=new Uint32Array(80);class cG extends KY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:N,Hl:w}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,N,w){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=N|0,this.Hl=w|0}process($,q){for(let T=0;T<16;T++,q+=4)eq[T]=$.getUint32(q),$J[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=eq[T-15]|0,m=$J[T-15]|0,u=_J(v,m,1)^_J(v,m,8)^CX(v,m,7),F=vJ(v,m,1)^vJ(v,m,8)^PX(v,m,7),x=eq[T-2]|0,y=$J[T-2]|0,k=_J(x,y,19)^iG(x,y,61)^CX(x,y,6),l=vJ(x,y,19)^dG(x,y,61)^PX(x,y,6),_=lW(F,l,$J[T-7],$J[T-16]),E=rW(_,u,k,eq[T-7],eq[T-16]);eq[T]=E|0,$J[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:N,Gl:w,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=_J(M,z,14)^_J(M,z,18)^iG(M,z,41),m=vJ(M,z,14)^vJ(M,z,18)^dG(M,z,41),u=M&D^~M&N,F=z&R^~z&w,x=iW(Z,m,F,VO[T],$J[T]),y=dW(x,j,v,u,UO[T],eq[T]),k=x|0,l=_J(J,G,28)^iG(J,G,34)^iG(J,G,39),_=vJ(J,G,28)^dG(J,G,34)^dG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=N|0,Z=w|0,N=D|0,w=R|0,D=M|0,R=z|0,{h:M,l:z}=Jq(V|0,W|0,y|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=uW(k,_,I);J=pW(A,y,l,E),G=A|0}({h:J,l:G}=Jq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Jq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Jq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Jq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Jq(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=Jq(this.Fh|0,this.Fl|0,D|0,R|0),{h:N,l:w}=Jq(this.Gh|0,this.Gl|0,N|0,w|0),{h:j,l:Z}=Jq(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,N,w,j,Z)}roundClean(){j0(eq,$J)}destroy(){j0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class WO extends cG{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class oW extends cG{Ah=r$[0]|0;Al=r$[1]|0;Bh=r$[2]|0;Bl=r$[3]|0;Ch=r$[4]|0;Cl=r$[5]|0;Dh=r$[6]|0;Dl=r$[7]|0;Eh=r$[8]|0;El=r$[9]|0;Fh=r$[10]|0;Fl=r$[11]|0;Gh=r$[12]|0;Gl=r$[13]|0;Hh=r$[14]|0;Hl=r$[15]|0;constructor(){super(48)}}var $0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),q0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class MO extends cG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(28)}}class zO extends cG{Ah=q0[0]|0;Al=q0[1]|0;Bh=q0[2]|0;Bl=q0[3]|0;Ch=q0[4]|0;Cl=q0[5]|0;Dh=q0[6]|0;Dl=q0[7]|0;Eh=q0[8]|0;El=q0[9]|0;Fh=q0[10]|0;Fl=q0[11]|0;Gh=q0[12]|0;Gl=q0[13]|0;Hh=q0[14]|0;Hl=q0[15]|0;constructor(){super(32)}}var NY=S8(()=>new cW,cq(1));var aW=S8(()=>new oW,cq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RO=BigInt(1),sW=BigInt(2),DO=BigInt(3),KO=BigInt(5),N3=BigInt(8),tW=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function HO($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=tW,U=$*$%Y*$%Y,V=v0(U,sW,Y)*U%Y,W=v0(V,RO,Y)*$%Y,M=v0(W,KO,Y)*W%Y,z=v0(M,q,Y)*M%Y,D=v0(z,J,Y)*z%Y,R=v0(D,G,Y)*D%Y,N=v0(R,Q,Y)*R%Y,w=v0(N,Q,Y)*R%Y,j=v0(w,q,Y)*M%Y;return{pow_p_5_8:v0(j,sW,Y)*$%Y,b2:U}}function OO($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var eW=(()=>{let $=tW;return PW({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=HO(q);return R0(v0(J,DO,$)*G,$)},adjustScalarBytes:OO})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var NO=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),wO=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var jO=IX(NO),FX=EX(jO,NY);var AO=IX(wO),$5=EX(AO,aW);function J5($,q,J){if(_0($),J===void 0)J=new Uint8Array($.outputLen);return C8($,J,q)}var gX=Uint8Array.of(0),q5=Uint8Array.of();function G5($,q,J,G=32){_0($),m$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=q5;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=C8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)gX[0]=M+1,V.update(M===0?q5:W).update(J).update(gX).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),j0(W,gX),X.slice(0,G)}var ZO=BigInt(0),nG=BigInt(1),BO=BigInt(2),SO=BigInt(7),TO=BigInt(256),IO=BigInt(113),X5=[],U5=[],V5=[];for(let $=0,q=nG,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],X5.push(2*(5*G+J)),U5.push(($+1)*($+2)/2%64);let Q=ZO;for(let Y=0;Y<7;Y++)if(q=(q<<nG^(q>>SO)*IO)%TO,q&BO)Q^=nG<<(nG<<BigInt(Y))-nG;V5.push(Q)}var W5=OY(V5,!0),EO=W5[0],CO=W5[1],Q5=($,q,J)=>J>32?xW($,q,J):mW($,q,J),Y5=($,q,J)=>J>32?hW($,q,J):fW($,q,J);function PO($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=Q5(W,M,1)^J[U],D=Y5(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=D}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=U5[X],V=Q5(Q,Y,U),W=Y5(Q,Y,U),M=X5[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=EO[G],$[1]^=CO[G]}j0(J)}class wY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,m$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=XY(this.state)}clone(){return this._cloneInto()}keccak(){WX(this.state32),PO(this.state32,this.rounds),WX(this.state32),this.posOut=0,this.pos=0}update($){Sq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Sq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return m$($),this.xofInto(new Uint8Array($))}digestInto($){if(YY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,j0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new wY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var M5=($,q,J,G={})=>S8(()=>new wY(q,$,J),G);var bJ=M5(6,136,32,cq(8));var z5=M5(6,72,64,cq(10));var R5=($,q,J,G={})=>S8((Q={})=>new wY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),D5=R5(31,168,16,cq(11)),Gq=R5(31,136,32,cq(12));function _X($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function H5($){return _X($),($&$-1)===0&&$!==0}function vX($,q){_X($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function O5($){return _X($),31-Math.clz32($)}function K5($){let q=$.length;if(q<2||!H5(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=O5(q);for(let G=0;G<q;G++){let Q=vX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var bX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=O5(J);if(!H5(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)K5(M);for(let z=0,D=1;z<V-X;z++){let R=Q?z+1+X:V-z,N=1<<R,w=N>>1,j=J>>R;for(let Z=0;Z<J;Z+=N)for(let T=0,v=D++;T<w;T++){let m=Y?Q?J-v:v:T*j,u=Z+T,F=Z+T+w,x=G[m],y=M[F],k=M[u];if(W){let l=$.mul(y,x);M[u]=$.add(k,l),M[F]=$.sub(k,l)}else if(Y)M[u]=$.add(y,k),M[F]=$.mul($.sub(y,k),x);else M[u]=$.add(k,y),M[F]=$.mul($.sub(k,y),x)}}if(!Q&&U)K5(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Qq=dq;function jY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function N5($){return Uint8Array.from($)}function kJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function AY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function v$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function kX($){return(1<<$)-1}var _3=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var w5=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,v=G)=>{let m=T%v|0;return(m>=0?m|0:v+m|0)|0},W=(T,v=G)=>{let m=V(T,v)|0;return(m>v>>1?m-v|0:m)|0};function M(){let T=q(J);for(let v=0;v<J;v++){let m=vX(v,X),u=BigInt(Y)**BigInt(m)%BigInt(G);T[v]=Number(u)|0}return T}let z=M(),D={add:(T,v)=>V((T|0)+(v|0))|0,sub:(T,v)=>V((T|0)-(v|0))|0,mul:(T,v)=>V((T|0)*(v|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},N=bX(D,{dit:!1,...R}),w=bX(D,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return N(T)},decode:(T)=>{w(T);for(let v=0;v<T.length;v++)T[v]=V(Q*T[v]);return T}},bitsCoder:(T,v)=>{let m=kX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=(v.encode(F[y])&m)<<l,l+=T;for(;l>=8;l-=8,k>>=8)x[_++]=k&kX(l)}return x},decode:(F)=>{let x=q(J);for(let y=0,k=0,l=0,_=0;y<F.length;y++){k|=F[y]<<l,l+=8;for(;l>=T;l-=T,k>>=T)x[_++]=v.decode(k&m)}return x}}}}},LO=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),v$(Y,G)}}},j5=LO(D5);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var J0=256,Cq=3329,FO=3303,gO=17,{mod:sG,nttZetas:_O,NTT:yJ,bitsCoder:vO}=w5({N:J0,Q:Cq,F:FO,ROOT_OF_UNITY:gO,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),yX={512:{N:J0,Q:Cq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:J0,Q:Cq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:J0,Q:Cq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},bO=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+Cq/2)/Cq,decode:(J)=>J*Cq+q>>>$}},oG=($)=>vO($,bO($));function mJ($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]+q[J])}function kO($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]-q[J])}function yO($,q,J,G,Q){let Y=sG(q*G*Q+$*J),X=sG($*G+q*J);return{c0:Y,c1:X}}function ZY($,q){for(let J=0;J<J0/2;J++){let G=_O[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=yO($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function A5($){let q=new Uint16Array(J0);for(let J=0;J<J0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<J0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<Cq)q[J++]=Y;if(J<J0&&X<Cq)q[J++]=X}}return q}function aG($,q,J,G){let Q=$(G*J0/4,q,J),Y=new Uint16Array(J0),X=XY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let D=X[V];for(let R=0;R<32;R++)if(M+=D&1,D>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=sG(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var mO=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=oG(1),M=oG(V),z=oG(U),D=kJ("publicKey",AY(oG(12),q),32),R=AY(oG(12),q),N=kJ("ciphertext",AY(z,q),M),w=kJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:D.bytesLen,cipherText:N.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let Z=new Uint8Array(33);Z.set(j),Z[32]=q;let T=Q(Z),[v,m]=w.decode(T),u=[],F=[];for(let k=0;k<q;k++)u.push(yJ.encode(aG(J,m,k,Y)));let x=G(v);for(let k=0;k<q;k++){let l=yJ.encode(aG(J,m,q+k,Y));for(let _=0;_<q;_++){let E=A5(x.get(_,k));mJ(l,ZY(E,u[_]))}F.push(l)}x.clean();let y={publicKey:D.encode([F,v]),secretKey:R.encode(u)};return v$(v,m,u,F,Z,T),y},encrypt:(j,Z,T)=>{let[v,m]=D.decode(j),u=[];for(let _=0;_<q;_++)u.push(yJ.encode(aG(J,T,_,Y)));let F=G(m),x=new Uint16Array(J0),y=[];for(let _=0;_<q;_++){let E=aG(J,T,q+_,X),I=new Uint16Array(J0);for(let A=0;A<q;A++){let S=A5(F.get(_,A));mJ(I,ZY(S,u[A]))}mJ(E,yJ.decode(I)),y.push(E),mJ(x,ZY(v[_],u[_])),v$(I)}F.clean();let k=aG(J,T,2*q,X);mJ(k,yJ.decode(x));let l=W.decode(Z);return mJ(l,k),v$(v,u,x,k),N.encode([y,l])},decrypt:(j,Z)=>{let[T,v]=N.decode(j),m=R.decode(Z),u=new Uint16Array(J0);for(let F=0;F<q;F++)mJ(u,ZY(m[F],yJ.encode(T[F])));return kO(v,yJ.decode(u)),v$(u,m,T),W.encode(v)}}};function mX($){let q=mO($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=kJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Qq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:D}=q.keygen(M.subarray(0,32)),R=J(z),N=U.encode([D,z,R,M.subarray(32)]);return v$(D,R),{publicKey:z,secretKey:N}},getPublicKey:(M)=>{let[z,D,R,N]=U.decode(M);return Uint8Array.from(D)},encapsulate:(M,z=Qq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let D=M.subarray(0,384*$.K),R=Y.encode(Y.decode(N5(D)));if(!jY(R,D))throw v$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");v$(R);let N=G.create().update(z).update(J(M)).digest(),w=q.encrypt(M,z,N.subarray(32,64));return v$(N.subarray(32)),{cipherText:w,sharedSecret:N.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let D=U.bytesLen-96,R=D+32,N=J(z.subarray(D/2,R));if(!jY(N,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[w,j,Z,T]=U.decode(z),v=q.decrypt(M,w),m=G.create().update(v).update(Z).digest(),u=m.subarray(0,32),F=q.encrypt(j,v,m.subarray(32,64)),x=jY(M,F),y=Q.create({dkLen:32}).update(T).update(M).digest();return v$(v,F,!x?u:y),x?u:y}}}function fO($,q,J){return Gq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var fX={HASH256:bJ,HASH512:z5,KDF:Gq,XOF:j5,PRF:fO},l3=mX({...fX,...yX[512]}),tG=mX({...fX,...yX[768]}),Z5=mX({...fX,...yX[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function xO($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Qq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?oq(X):nq(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function xX($,q=!1){let J=xO($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Qq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return v$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function eG($,q){return kJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function hX($){return(q,J)=>$(q,{dkLen:J})}function hO($,q,...J){let G=eG(J,"seed"),Q=eG(J,"publicKey");if($===void 0)$=G.bytesLen;m$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,D)=>z.keygen(U[D])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Qq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return v$(U),v$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function BY($,q,J,G,...Q){let Y=hO($,J,...Q),X=eG(Q,"cipherText"),U=eG(Q,"publicKey"),V=eG(Q,"msg");if(q===void 0)q=V.bytesLen;return m$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Qq(V.bytesLen)){let z=U.decode(W),D=V.decode(M),R=Q.map((Z,T)=>Z.encapsulate(z[T],D[T])),N=R.map((Z)=>Z.sharedSecret),w=R.map((Z)=>Z.cipherText),j={sharedSecret:G(z,w,N),cipherText:X.encode(w)};return v$(N,w),j},decapsulate(W,M){let z=X.decode(W),{publicKey:D,secretKey:R}=Y.expandDecapsulationKey(M),N=Q.map((w,j)=>w.decapsulate(z[j],R[j]));return G(D,z,N)}}}function B5($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>Q(L$(U[0],U[1],X[1],Y[1],aq($))),q,J)}var $F=B5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",tG,xX(FX,!0),Gq,bJ),qF=B5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",Z5,xX($5,!0),Gq,bJ);function uO($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,hX(G),(Y,X,U)=>{let V=L$(U[0],U[1],X[0],Y[0],X[1],Y[1],aq($)),W=32,M=L$(aq("hybrid_prk"),V),z=J5(Q,M),D=L$(T8(32,2),aq("shared_secret"),aq("")),R=G5(Q,z,D,32);return v$(z,D,M,V),R},q,J)}var S5=xX(eW),JF=uO("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",tG,S5,Gq,NY),pO=(()=>BY(32,32,hX(Gq),($,q,J)=>bJ(L$(J[0],J[1],q[1],$[1],aq("\\.//^\\"))),tG,S5))();function lO($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Qq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Qq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return v$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function rO($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=lO(J,Q,Y,G),U=64,V=U+G;return BY(32,32,(W)=>{Q$(W,32);let M=Gq(W,{dkLen:V}),z=M.subarray(0,U),D=M.subarray(U,V);return L$(z,D)},(W,M,z)=>bJ(L$(z[0],z[1],M[1],W[1],aq($))),q,X)}var iO=(()=>rO("MLKEM768-P256",tG,FX,128))();var uX=pO,T5=iO;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>x$($,q,J),lX=C$,L8=cQ,d$=(...$)=>r9(...$),F8=($)=>CG($),g8=u9,_8=($)=>Nq($),TY=BigInt(0),pX=BigInt(1);function Pq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function IY($){if(typeof $==="bigint"){if(!SY($))throw RangeError("positive bigint expected, got "+$)}else lX($);return $}function Yq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function $Q($){let q=IY($).toString(16);return q.length&1?"0"+q:q}function I5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?TY:BigInt("0x"+$)}function fJ($){return I5(cQ($))}function l0($){return I5(cQ(qJ(x$($)).reverse()))}function EY($,q){if(C$(q),q===0)throw RangeError("zero length");$=IY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return CG(J.padStart(q*2,"0"))}function qQ($,q){return EY($,q).reverse()}function E5($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function qJ($){return Uint8Array.from(Z$($))}function CY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var SY=($)=>typeof $==="bigint"&&TY<=$;function dO($,q,J){return SY($)&&SY(q)&&SY(J)&&q<=$&&$<J}function Lq($,q,J,G){if(!dO(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function v8($){if($<TY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>TY;$>>=pX,q+=1);return q}var JQ=($)=>(pX<<BigInt($))-pX;function C5($,q,J){if(C$($,"hashLen"),C$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,d$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},N=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return d$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while((T=Z(N()))===void 0)R();return z(),T}}function b0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var rX=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c$=BigInt(0),I$=BigInt(1),xJ=BigInt(2),g5=BigInt(3),_5=BigInt(4),v5=BigInt(5),cO=BigInt(7),b5=BigInt(8),nO=BigInt(9),k5=BigInt(16);function B$($,q){if(q<=c$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=c$?J:q+J}function k0($,q,J){if(q<c$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >c$)G*=G,G%=J;return G}function P5($,q){if($===c$)throw Error("invert: expected non-zero number");if(q<=c$)throw Error("invert: expected positive modulus, got "+q);let J=B$($,q),G=q,Q=c$,Y=I$,X=I$,U=c$;while(J!==c$){let W=G/J,M=G-J*W,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==I$)throw Error("invert: does not exist");return B$(Q,q)}function iX($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function y5($,q){let J=$,G=(J.ORDER+I$)/_5,Q=J.pow(q,G);return iX(J,Q,q),Q}function oO($,q){let J=$,G=(J.ORDER-v5)/b5,Q=J.mul(q,xJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,xJ),Y),V=J.mul(X,J.sub(U,J.ONE));return iX(J,V,q),V}function aO($){let q=PY($),J=m5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+cO)/k5;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),D=W.mul(M,Q),R=W.mul(M,Y),N=W.eql(W.sqr(z),V),w=W.eql(W.sqr(D),V);M=W.cmov(M,z,N),z=W.cmov(R,D,w);let j=W.eql(W.sqr(z),V),Z=W.cmov(M,z,j);return iX(W,Z,V),Z}}function m5($){if($<g5)throw Error("sqrt is not defined for small field");let q=$-I$,J=0;while(q%xJ===c$)q/=xJ,J++;let G=xJ,Q=PY($);while(L5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return y5;let Y=Q.pow(G,q),X=(q+I$)/xJ;return function(V,W){let M=V;if(M.is0(W))return W;if(L5(M,W)!==1)throw Error("Cannot find square root");let z=J,D=M.mul(M.ONE,Y),R=M.pow(W,q),N=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let w=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(w++,j=M.sqr(j),w===z)throw Error("Cannot find square root");let Z=I$<<BigInt(z-w-1),T=M.pow(D,Z);z=w,D=M.sqr(T),R=M.mul(R,D),N=M.mul(N,T)}return N}}function sO($){if($%_5===g5)return y5;if($%b5===v5)return oO;if($%k5===nO)return aO($);return m5($)}var Fq=($,q)=>(B$($,q)&I$)===I$,tO=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function dX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=tO.reduce((G,Q)=>{return G[Q]="function",G},q);if(b0($,J),Yq($.BYTES,"BYTES"),Yq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function eO($,q,J){let G=$;if(J<c$)throw Error("invalid exponent, negatives unsupported");if(J===c$)return G.ONE;if(J===I$)return q;let Q=G.ONE,Y=q;while(J>c$){if(J&I$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=I$}return Q}function GQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function L5($,q){let J=$,G=(J.ORDER-I$)/xJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function $N($,q){if(q!==void 0)lX(q);if($<=c$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=v8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var F5=new WeakMap;class cX{ORDER;BITS;BYTES;isLE;ZERO=c$;ONE=I$;_lengths;_mod;constructor($,q={}){if($<=I$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=$N($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return c$<=$&&$<this.ORDER}is0($){return $===c$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I$)===I$}neg($){return B$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return B$($*$,this.ORDER)}add($,q){return B$($+q,this.ORDER)}sub($,q){return B$($-q,this.ORDER)}mul($,q){return B$($*q,this.ORDER)}pow($,q){return eO(this,$,q)}div($,q){return B$($*P5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return P5($,this.ORDER)}sqrt($){let q=F5.get(this);if(!q)F5.set(this,q=sO(this.ORDER));return q(this,$)}toBytes($){return this.isLE?qQ($,this.BYTES):EY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?l0($):fJ($);if(X)U=B$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return GQ(this,$)}cmov($,q,J){return Pq(J,"condition"),J?q:$}}Object.freeze(cX.prototype);function PY($,q={}){return new cX($,q)}function f5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I$)throw Error("field order must be greater than 1");let q=v8($-I$);return Math.ceil(q/8)}function nX($){let q=f5($);return q+Math.ceil(q/2)}function x5($,q,J=!1){Z$($);let G=$.length,Q=f5(q),Y=Math.max(nX(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?l0($):fJ($),U=B$(X,q-I$)+I$;return J?qQ(U,Q):EY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b8=BigInt(0),hJ=BigInt(1);function QQ($,q){let J=q.negate();return $?J:q}function uJ($,q){let J=GQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function l5($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function oX($,q){l5($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=JQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function h5($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=hJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var aX=new WeakMap,r5=new WeakMap;function sX($){return r5.get($)||1}function u5($){if($!==b8)throw Error("invalid wNAF")}class YQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>b8){if(q&hJ)J=J.add(G);G=G.double(),q>>=hJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=oX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=oX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=h5(J,X,Y);if(J=U,W)Q=Q.add(QQ(z,q[D]));else G=G.add(QQ(M,q[V]))}return u5(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=oX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===b8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=h5(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return u5(J),G}getPrecomputes($,q,J){let G=aX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);aX.set(q,G)}}return G}cached($,q,J){let G=sX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=sX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){l5(q,this.bits),r5.set($,q),aX.delete($)}hasCache($){return sX($)!==1}}function i5($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>b8||G>b8){if(J&hJ)Y=Y.add(Q);if(G&hJ)X=X.add(Q);Q=Q.double(),J>>=hJ,G>>=hJ}return{p1:Y,p2:X}}function p5($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return dX(q),q}else return PY($,{isLE:J})}function LY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>b8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=p5(q.p,J.Fp,G),Y=p5(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function XQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function UQ($,q){if(Yq($),Yq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function qN($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function JN($){if(!g8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?CY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function tX($,q,J,G){if(Z$($),Yq(J),q=JN(q),q.length>255)q=G(d$(CY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=d$(q,UQ(q.length,1)),V=new Uint8Array(Y),W=UQ(J,2),M=Array(X),z=G(d$(V,$,W,UQ(0,1),U));M[0]=G(d$(z,UQ(1,1),U));for(let R=1;R<X;R++){let N=[qN(z,M[R-1]),UQ(R+1,1),U];M[R]=G(d$(...N))}return d$(...M).slice(0,J)}var d5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c5=($,q)=>($+($>=0?q:-q)/o5)/q;function GN($,q,J){Lq("scalar",$,Xq,J);let[[G,Q],[Y,X]]=q,U=c5(X*$,J),V=c5(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Xq,D=M<Xq;if(z)W=-W;if(D)M=-M;let R=JQ(Math.ceil(v8(J)/2))+JJ;if(W<Xq||W>=R||M<Xq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:D,k2:M}}function $U($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function eX($,q){b0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(Pq(J.lowS,"lowS"),Pq(J.prehash,"prehash"),J.format!==void 0)$U(J.format);return J}class n5 extends Error{constructor($=""){super($)}}var r0={Err:n5,_tlv:{encode:($,q)=>{let{Err:J}=r0;if(Yq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=$Q(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?$Q(Q.length/2|128):"";return $Q($)+Y+Q+q},decode($,q){let{Err:J}=r0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=r0;if(IY($),$<Xq)throw new q("integer: negative integers are not allowed");let J=$Q($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=r0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return fJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=r0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=r0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(r0._tlv);Object.freeze(r0._int);Object.freeze(r0);var Xq=BigInt(0),JJ=BigInt(1),o5=BigInt(2),FY=BigInt(3),QN=BigInt(4);function a5($,q={}){let J=LY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;b0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=t5(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(_,E,I){if(W&&E.is0())return Uint8Array.of(0);let{x:A,y:S}=E.toAffine(),P=G.toBytes(A);if(Pq(I,"isCompressed"),I){z();let g=!G.isOdd(S);return d$(s5(g),P)}else return d$(Uint8Array.of(4),P,G.toBytes(S))}function R(_){Z$(_,void 0,"Point");let{publicKey:E,publicKeyUncompressed:I}=M,A=_.length,S=_[0],P=_.subarray(1);if(W&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===E&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(r){let B=r instanceof Error?": "+r.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===I&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${E} or uncompressed=${I}`)}let N=q.toBytes===void 0?D:q.toBytes,w=q.fromBytes===void 0?R:q.fromBytes;function j(_){let E=G.sqr(_),I=G.mul(E,_);return G.add(G.add(I,G.mul(_,Y.a)),Y.b)}function Z(_,E){let I=G.sqr(E),A=j(_);return G.eql(I,A)}if(!Z(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,FY),QN),v=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,v)))throw Error("bad curve params: a or b");function m(_,E,I=!1){if(!G.isValid(E)||I&&G.is0(E))throw Error(`bad point coordinate ${_}`);return E}function u(_){if(!(_ instanceof y))throw Error("Weierstrass Point expected")}function F(_){if(!V||!V.basises)throw Error("no endo");return GN(_,V.basises,Q.ORDER)}function x(_,E,I,A,S){return I=new y(G.mul(I.X,_),I.Y,I.Z),E=QQ(A,E),I=QQ(S,I),E.add(I)}class y{static BASE=new y(Y.Gx,Y.Gy,G.ONE);static ZERO=new y(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(_,E,I){this.X=m("x",_),this.Y=m("y",E,!0),this.Z=m("z",I),Object.freeze(this)}static CURVE(){return Y}static fromAffine(_){let{x:E,y:I}=_||{};if(!_||!G.isValid(E)||!G.isValid(I))throw Error("invalid affine point");if(_ instanceof y)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(I))return y.ZERO;return new y(E,I,G.ONE)}static fromBytes(_){let E=y.fromAffine(w(Z$(_,void 0,"point")));return E.assertValidity(),E}static fromHex(_){return y.fromBytes(F8(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,E=!0){if(l.createCache(this,_),!E)this.multiply(FY);return this}assertValidity(){let _=this;if(_.is0()){if(q.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:E,y:I}=_.toAffine();if(!G.isValid(E)||!G.isValid(I))throw Error("bad point: x or y not field elements");if(!Z(E,I))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.eql(G.mul(E,g),G.mul(S,A)),b=G.eql(G.mul(I,g),G.mul(P,A));return L&&b}negate(){return new y(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:E}=Y,I=G.mul(E,FY),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),f=G.mul(S,S),r=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(_,b),L=G.mul(I,r),L=G.add(g,L),g=G.sub(f,L),L=G.add(f,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(I,b),r=G.mul(_,r),B=G.sub(O,r),B=G.mul(_,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,r),O=G.mul(O,B),L=G.add(L,O),r=G.mul(S,P),r=G.add(r,r),O=G.mul(r,B),g=G.sub(g,O),b=G.mul(r,f),b=G.add(b,b),b=G.add(b,b),new y(g,L,b)}add(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=Y.a,r=G.mul(Y.b,FY),B=G.mul(E,S),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.add(E,I),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,o),Y$=G.sub(Y$,G$),G$=G.add(E,A);let s=G.add(S,g);return G$=G.mul(G$,s),s=G.add(B,q$),G$=G.sub(G$,s),s=G.add(I,A),L=G.add(P,g),s=G.mul(s,L),L=G.add(o,q$),s=G.sub(s,L),O=G.mul(f,G$),L=G.mul(r,q$),O=G.add(L,O),L=G.sub(o,O),O=G.add(o,O),b=G.mul(L,O),o=G.add(B,B),o=G.add(o,B),q$=G.mul(f,q$),G$=G.mul(r,G$),o=G.add(o,q$),q$=G.sub(B,q$),q$=G.mul(f,q$),G$=G.add(G$,q$),B=G.mul(o,G$),b=G.add(b,B),B=G.mul(s,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,o),O=G.mul(s,O),O=G.add(O,B),new y(L,b,O)}subtract(_){return u(_),this.add(_.negate())}is0(){return this.equals(y.ZERO)}multiply(_){let{endo:E}=q;if(!Q.isValidNot0(_))throw RangeError("invalid scalar: out of range");let I,A,S=(P)=>l.cached(this,P,(g)=>uJ(y,g));if(E){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(_),{p:O,f}=S(g),{p:r,f:B}=S(b);A=f.add(B),I=x(E.beta,O,r,P,L)}else{let{p:P,f:g}=S(_);I=P,A=g}return uJ(y,[I,A])[0]}multiplyUnsafe(_){let{endo:E}=q,I=this,A=_;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Xq||I.is0())return y.ZERO;if(A===JJ)return I;if(l.hasCache(this))return this.multiply(A);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=i5(y,I,P,L);return x(E.beta,b,O,S,g)}else return l.unsafe(I,A)}toAffine(_){let E=this,I=_,{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:_}=q;if(X===JJ)return!0;if(_)return _(y,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:_}=q;if(X===JJ)return this;if(_)return _(y,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===JJ)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return Pq(_,"isCompressed"),this.assertValidity(),N(y,this,_)}toHex(_=!0){return L8(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let k=Q.BITS,l=new YQ(y,q.endo?Math.ceil(k/2):k);if(k>=8)y.BASE.precompute(8);return Object.freeze(y.prototype),Object.freeze(y),y}function s5($){return Uint8Array.of($?2:3)}function t5($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function YN($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?_8:q.randomBytes,Q=Object.assign(t5($.Fp,J),{seed:Math.max(nX(J.ORDER),16)});function Y(R){try{let N=J.fromBytes(R);return J.isValidNot0(N)}catch(N){return!1}}function X(R,N){let{publicKey:w,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(N===!0&&Z!==w)return!1;if(N===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,x5(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,N=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(N)}function W(R){let{secretKey:N,publicKey:w,publicKeyUncompressed:j}=Q,Z=J._lengths;if(!g8(R))return;let T=Z$(R,void 0,"key").length,v=T===w||T===j,m=T===N||!!Z?.includes(T);if(v&&m)return;return v}function M(R,N,w=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(N)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(N).multiply(j).toBytes(w)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=XQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function e5($,q,J={}){let G=q;Oq(G),b0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?_8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>wq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N}=YN($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*o5+JJ<X.ORDER;function Z(S){let P=V>>JJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function v(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function m(S,P){$U(P);let g=N.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(v(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=w.format){m(S,P);let g;if(P==="der"){let{r:f,s:r}=r0.toSig(Z$(S));return new u(f,r)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=N.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(F8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),f=$.fromBytes(d$(s5((L&1)===0),O)),r=U.inv(b),B=x(Z$(S,void 0,"msgHash")),o=U.create(-B*r),q$=U.create(g*r),Y$=$.BASE.multiplyUnsafe(o).add(f.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return Z(this.s)}toBytes(S=w.format){if($U(S),S==="der")return F8(r0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return v(),d$(Uint8Array.of(this.assertRecovery()),L,b);return d$(L,b)}toHex(S){return L8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=fJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,y=JQ(W);function k(S){return Lq("num < 2^"+W,S,Xq,y),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function _(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=eX(g,w);S=l(S,b);let f=x(S),r=U.fromBytes(P);if(!U.isValidNot0(r))throw Error("invalid private key");let B=[k(r),k(f)];if(O!=null&&O!==!1){let G$=O===!0?Q(N.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let o=d$(...B),q$=f;function Y$(G$){let s=F(G$);if(!U.isValidNot0(s))return;let O$=U.inv(s),A$=$.BASE.multiply(s).toAffine(),T$=U.create(A$.x);if(T$===Xq)return;let y$=U.create(O$*U.create(q$+T$*r));if(y$===Xq)return;let M0=(A$.x===T$?0:2)|Number(A$.y&JJ),e0=y$;if(L&&Z(y$))e0=U.neg(y$),M0^=1;return new u(T$,e0,j?void 0:M0)}return{seed:o,k2sig:Y$}}function E(S,P,g={}){let{seed:L,k2sig:b}=_(S,P,g);return C5(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function I(S,P,g,L={}){let{lowS:b,prehash:O,format:f}=eX(L,w);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!g8(S)){let r=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+r)}m(S,f);try{let r=u.fromBytes(S,f),B=$.fromBytes(g);if(b&&r.hasHighS())return!1;let{r:o,s:q$}=r,Y$=x(P),G$=U.inv(q$),s=U.create(Y$*G$),O$=U.create(o*G$),A$=$.BASE.multiplyUnsafe(s).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===o}catch(r){return!1}}function A(S,P,g={}){let{prehash:L}=eX(g,w);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:N,Point:$,sign:E,verify:I,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var XN=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var UN=a5(XN),k8=e5(UN,p$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var GJ=BigInt(0),A0=BigInt(1),qU=BigInt(2),VN=BigInt(8);function WN($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function $M($,q={}){let J=q,G=LY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;b0(J,{},{uvRatio:"function"});let V=qU<<BigInt(Y.BYTES*8)-A0,W=(w)=>Q.create(w),M=J.uvRatio===void 0?(w,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(w,j))}}catch(Z){return{isValid:!1,value:GJ}}}:J.uvRatio;if(!WN(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(w,j,Z=!1){let T=Z?A0:GJ;return Lq("coordinate "+w,j,T,V),j}function D(w){if(!(w instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,A0,W(X.Gx*X.Gy));static ZERO=new R(GJ,A0,A0,GJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(w,j,Z,T){this.X=z("x",w),this.Y=z("y",j),this.Z=z("z",Z,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(w){if(w instanceof R)throw Error("extended point not allowed");let{x:j,y:Z}=w||{};return z("x",j),z("y",Z),new R(j,Z,A0,W(j*Z))}static fromBytes(w,j=!1){let Z=Q.BYTES,{a:T,d:v}=X;w=qJ(Z$(w,Z,"point")),Pq(j,"zip215");let m=qJ(w),u=w[Z-1];m[Z-1]=u&-129;let F=l0(m),x=j?V:Q.ORDER;Lq("point.y",F,GJ,x);let y=W(F*F),k=W(y-A0),l=W(v*y-T),{isValid:_,value:E}=M(k,l);if(!_)throw Error("bad point: invalid y coordinate");let I=(E&A0)===A0,A=(u&128)!==0;if(!j&&E===GJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==I)E=W(-E);return R.fromAffine({x:E,y:F})}static fromHex(w,j=!1){return R.fromBytes(F8(w),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(w=8,j=!0){if(N.createCache(this,w),!j)this.multiply(qU);return this}assertValidity(){let w=this,{a:j,d:Z}=X;if(w.is0())throw Error("bad point: ZERO");let{X:T,Y:v,Z:m,T:u}=w,F=W(T*T),x=W(v*v),y=W(m*m),k=W(y*y),l=W(F*j),_=W(y*W(l+x)),E=W(k+W(Z*W(F*x)));if(_!==E)throw Error("bad point: equation left != right (1)");let I=W(T*v),A=W(m*u);if(I!==A)throw Error("bad point: equation left != right (2)")}equals(w){D(w);let{X:j,Y:Z,Z:T}=this,{X:v,Y:m,Z:u}=w,F=W(j*u),x=W(v*T),y=W(Z*u),k=W(m*T);return F===x&&y===k}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:w}=X,{X:j,Y:Z,Z:T}=this,v=W(j*j),m=W(Z*Z),u=W(qU*W(T*T)),F=W(w*v),x=j+Z,y=W(W(x*x)-v-m),k=F+m,l=k-u,_=F-m,E=W(y*l),I=W(k*_),A=W(y*_),S=W(l*k);return new R(E,I,S,A)}add(w){D(w);let{a:j,d:Z}=X,{X:T,Y:v,Z:m,T:u}=this,{X:F,Y:x,Z:y,T:k}=w,l=W(T*F),_=W(v*x),E=W(u*Z*k),I=W(m*y),A=W((T+v)*(F+x)-l-_),S=I-E,P=I+E,g=W(_-j*l),L=W(A*S),b=W(P*g),O=W(A*g),f=W(S*P);return new R(L,b,f,O)}subtract(w){return D(w),this.add(w.negate())}multiply(w){if(!Y.isValidNot0(w))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:Z}=N.cached(this,w,(T)=>uJ(R,T));return uJ(R,[j,Z])[0]}multiplyUnsafe(w){if(!Y.isValid(w))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(w===GJ)return R.ZERO;if(this.is0()||w===A0)return this;return N.unsafe(this,w,(j)=>uJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(w){let j=this,Z=w,{X:T,Y:v,Z:m}=j,u=j.is0();if(Z==null)Z=u?VN:Q.inv(m);let F=W(T*Z),x=W(v*Z),y=Q.mul(m,Z);if(u)return{x:GJ,y:A0};if(y!==A0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===A0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:w,y:j}=this.toAffine(),Z=Q.toBytes(j);return Z[Z.length-1]|=w&A0?128:0,Z}toHex(){return L8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new YQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class JU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){rX()}static fromHex($){rX()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return L8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VQ=BigInt(0),y8=BigInt(1),gY=BigInt(2);function MN($){return b0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function qM($){let q=MN($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?_8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?gY**BigInt(254):gY**BigInt(447),N=U?BigInt(8)*gY**BigInt(251)-y8:BigInt(4)*gY**BigInt(445)-y8,w=R+N+y8,j=(A)=>B$(A,J),Z=T(z);function T(A){return qQ(j(A),M)}function v(A){let S=qJ(Z$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(l0(S))}function m(A){return l0(Q(qJ(Z$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),m(A));if(P===VQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,y=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){Lq("u",A,VQ,J),Lq("scalar",S,R,w);let P=S,g=A,L=y8,b=VQ,O=A,f=y8,r=VQ;for(let o=BigInt(W-1);o>=VQ;o--){let q$=P>>o&y8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),s=L-b,O$=j(s*s),A$=G$-O$,T$=O+f,y$=O-f,M0=j(y$*Y$),e0=j(T$*s),xq=M0+e0,hq=M0-e0;O=j(xq*xq),f=j(g*j(hq*hq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A)=>{return A=A===void 0?V(M):A,Z$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze(_),Object.freeze(I),Object.freeze({keygen:XQ(E,x),getSharedSecret:y,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var zN=BigInt(0),gq=BigInt(1),JM=BigInt(2),RN=BigInt(3),DN=BigInt(5),KN=BigInt(8),lJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),XU=(()=>({p:lJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:KN,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function YM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=lJ,U=$*$%Y*$%Y,V=k0(U,JM,Y)*U%Y,W=k0(V,gq,Y)*$%Y,M=k0(W,DN,Y)*W%Y,z=k0(M,q,Y)*M%Y,D=k0(z,J,Y)*z%Y,R=k0(D,G,Y)*D%Y,N=k0(R,Q,Y)*R%Y,w=k0(N,Q,Y)*R%Y,j=k0(w,q,Y)*M%Y;return{pow_p_5_8:k0(j,JM,Y)*$%Y,b2:U}}function HN($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var GU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function UU($,q){let J=lJ,G=B$(q*q*q,J),Q=B$(G*G*q,J),Y=YM($*Q).pow_p_5_8,X=B$($*G*Y,J),U=B$(q*X*X,J),V=X,W=B$(X*GU,J),M=U===$,z=U===B$(-$,J),D=U===B$(-$*GU,J);if(M)X=V;if(z||D)X=W;if(Fq(X,J))X=B$(-X,J);return{isValid:M||z,value:X}}var pJ=$M(XU,{uvRatio:UU}),QJ=(()=>pJ.Fp)(),XM=(()=>pJ.Fn)();var _Y=(()=>{let $=lJ;return qM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=YM(q);return B$(k0(J,RN,$)*G,$)},adjustScalarBytes:HN})})();var QU=GU,ON=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),NN=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),wN=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),jN=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),GM=($)=>UU(gq,$),AN=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),YU=($)=>QJ.create(l0($)&AN);function QM($){let{d:q}=XU,J=lJ,G=(Z)=>QJ.create(Z),Q=G(QU*$*$),Y=G((Q+gq)*wN),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=UU(Y,U),M=G(W*$);if(!Fq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-gq)*jN-U),D=W*W,R=G((W+W)*U),N=G(z*ON),w=G(gq-D),j=G(gq+D);return new pJ(G(R*j),G(w*N),G(N*j),G(R*w))}class K0 extends JU{static BASE=(()=>new K0(pJ.BASE))();static ZERO=(()=>new K0(pJ.ZERO))();static Fp=(()=>QJ)();static Fn=(()=>XM)();constructor($){super($)}static fromAffine($){return new K0(pJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){x$($,32);let{a:q,d:J}=XU,G=lJ,Q=(v)=>QJ.create(v),Y=YU($);if(!E5(QJ.toBytes(Y),$)||Fq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(gq+q*X),V=Q(gq-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:D,value:R}=GM(Q(z*M)),N=Q(R*V),w=Q(R*N*z),j=Q((Y+Y)*N);if(Fq(j,G))j=Q(-j);let Z=Q(U*w),T=Q(j*Z);if(!D||Fq(T,G)||Z===zN)throw Error("invalid ristretto255 encoding 2");return new K0(new pJ(j,Z,gq,T))}static fromHex($){return K0.fromBytes(CG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=lJ,Y=(w)=>QJ.create(w),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=GM(Y(X*V)),M=Y(W*X),z=Y(W*U),D=Y(M*z*G),R;if(Fq(G*D,Q)){let w=Y(q*QU),j=Y($*QU);$=w,q=j,R=Y(M*NN)}else R=z;if(Fq($*D,Q))q=Y(-q);let N=Y((J-q)*R);if(Fq(N,Q))N=Y(-N);return QJ.toBytes(N)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>QJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var ZN=Object.freeze({Point:K0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=tX($,J,64,sQ);return ZN.deriveToCurve(G)},hashToScalar($,q={DST:d5}){let J=tX($,q.DST,64,sQ);return XM.create(l0(J))},deriveToCurve($){x$($,64);let q=YU($.subarray(0,32)),J=QM(q),G=YU($.subarray(32,64)),Q=QM(G);return new K0(J.add(Q))}});var UM=!1,BN=!1;async function VM($,q){if(BN)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function WU($,q){return await VM(async()=>{let J=VU($)?$:await TN($),G=await crypto.subtle.importKey("raw",IN(q),{name:"X25519"},UM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMult($,q)})}async function MU($){return await VM(async()=>{return WU($,_Y.GuBytes)},()=>{if(VU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMultBase($)})}var SN=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function TN($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...SN,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},UM,["deriveBits"])}function VU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function IN($){return $}class WM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),CN(WQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=WQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:WQ(this.transcript)}}}function CN($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function WQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function vY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function MM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function zM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class _q{args;body;constructor($,q){this.args=$,this.body=q}}function zU($){let q=[];q.push(`age-encryption.org/v1
|
|
58
58
|
`);for(let J of $){q.push("-> "+J.args.join(" ")+`
|
|
59
59
|
`);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(x0.encode(J.body.subarray(G,Q))+`
|
|
60
60
|
`)}if(J.body.length%48===0)q.push(`
|
package/dist/index.js
CHANGED
|
@@ -53,7 +53,7 @@ return `+str.trim()+`;
|
|
|
53
53
|
`).join(`
|
|
54
54
|
`+Y),$.push(Q+"m+"+OY.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=RA()+q+" "+$[0]}function RA(){if(LM.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function DA(...$){return process.stderr.write(HY.formatWithOptions(LM.inspectOpts,...$)+`
|
|
55
55
|
`)}function KA($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function HA(){return process.env.DEBUG}function OA($){$.inspectOpts={};let q=Object.keys(LM.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=LM.inspectOpts[q[J]]}OY.exports=SX()(LM);var{formatters:PM}=OY.exports;PM.o=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts).split(`
|
|
56
|
-
`).map((q)=>q.trim()).join(" ")};PM.O=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts)}});var _M=X$((Nv,EX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)EX.exports=ZM();else EX.exports=gM()});var Fz=X$((ry,Lz)=>{var EY=Object.prototype.hasOwnProperty,Pz=Object.prototype.toString,Zz=Object.defineProperty,Sz=Object.getOwnPropertyDescriptor,Tz=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Pz.call(q)==="[object Array]"},Iz=function(q){if(!q||Pz.call(q)!=="[object Object]")return!1;var J=EY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&EY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||EY.call(q,Q)},Ez=function(q,J){if(Zz&&J.name==="__proto__")Zz(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Cz=function(q,J){if(J==="__proto__"){if(!EY.call(q,J))return;else if(Sz)return Sz(q,J).value}return q[J]};Lz.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Cz(U,J),Q=Cz(q,J),U!==Q){if(M&&Q&&(Iz(Q)||(Y=Tz(Q)))){if(Y)Y=!1,X=G&&Tz(G)?G:[];else X=G&&Iz(G)?G:{};Ez(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")Ez(U,{name:J,newValue:Q})}}return U}});import{access as MI,chmod as BU,mkdir as nR,readFile as aR,writeFile as oR}from"fs/promises";import{dirname as zI,join as SU}from"path";import{fileURLToPath as RI}from"url";var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.
|
|
56
|
+
`).map((q)=>q.trim()).join(" ")};PM.O=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts)}});var _M=X$((Nv,EX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)EX.exports=ZM();else EX.exports=gM()});var Fz=X$((ry,Lz)=>{var EY=Object.prototype.hasOwnProperty,Pz=Object.prototype.toString,Zz=Object.defineProperty,Sz=Object.getOwnPropertyDescriptor,Tz=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return Pz.call(q)==="[object Array]"},Iz=function(q){if(!q||Pz.call(q)!=="[object Object]")return!1;var J=EY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&EY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||EY.call(q,Q)},Ez=function(q,J){if(Zz&&J.name==="__proto__")Zz(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Cz=function(q,J){if(J==="__proto__"){if(!EY.call(q,J))return;else if(Sz)return Sz(q,J).value}return q[J]};Lz.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Cz(U,J),Q=Cz(q,J),U!==Q){if(M&&Q&&(Iz(Q)||(Y=Tz(Q)))){if(Y)Y=!1,X=G&&Tz(G)?G:[];else X=G&&Iz(G)?G:{};Ez(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")Ez(U,{name:J,newValue:Q})}}return U}});import{access as MI,chmod as BU,mkdir as nR,readFile as aR,writeFile as oR}from"fs/promises";import{dirname as zI,join as SU}from"path";import{fileURLToPath as RI}from"url";var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.74",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var T7=`ARG BUN_VERSION=1.3.10
|
|
57
57
|
FROM oven/bun:\${BUN_VERSION}-slim AS runtime
|
|
58
58
|
|
|
59
59
|
WORKDIR /app
|