@rizom/ops 0.2.0-alpha.80 → 0.2.0-alpha.82
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/brains-ops.js +2 -1
- package/dist/index.js +2 -1
- package/package.json +1 -1
package/dist/brains-ops.js
CHANGED
|
@@ -54,7 +54,7 @@ return `+str.trim()+`;
|
|
|
54
54
|
`).join(`
|
|
55
55
|
`+Y),$.push(Q+"m+"+V9.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=QS()+q+" "+$[0]}function QS(){if(ED.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function YS(...$){return process.stderr.write(U9.formatWithOptions(ED.inspectOpts,...$)+`
|
|
56
56
|
`)}function XS($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function US(){return process.env.DEBUG}function VS($){$.inspectOpts={};let q=Object.keys(ED.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=ED.inspectOpts[q[J]]}V9.exports=zV()(ED);var{formatters:ID}=V9.exports;ID.o=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts).split(`
|
|
57
|
-
`).map((q)=>q.trim()).join(" ")};ID.O=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts)}});var LD=X$((fy,KV)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)KV.exports=jD();else KV.exports=PD()});var CK=X$((Ru,EK)=>{var N9=Object.prototype.hasOwnProperty,IK=Object.prototype.toString,jK=Object.defineProperty,AK=Object.getOwnPropertyDescriptor,ZK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return IK.call(q)==="[object Array]"},BK=function(q){if(!q||IK.call(q)!=="[object Object]")return!1;var J=N9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&N9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||N9.call(q,Q)},SK=function(q,J){if(jK&&J.name==="__proto__")jK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},TK=function(q,J){if(J==="__proto__"){if(!N9.call(q,J))return;else if(AK)return AK(q,J).value}return q[J]};EK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=TK(U,J),Q=TK(q,J),U!==Q){if(M&&Q&&(BK(Q)||(Y=ZK(Q)))){if(Y)Y=!1,X=G&&ZK(G)?G:[];else X=G&&BK(G)?G:{};SK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")SK(U,{name:J,newValue:Q})}}return U}});import{parseArgs as XO}from"util";var UO={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function h9($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function u9($,q){let J=$[q];return typeof J==="string"?J:void 0}function wW($){let{values:q,positionals:J}=XO({args:$,options:UO,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:h9(q,"help"),version:h9(q,"version"),dryRun:h9(q,"dry-run"),pushTo:u9(q,"push-to"),cohort:u9(q,"cohort"),anchorId:u9(q,"anchor-id")}}}var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.80",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as lw,mkdirSync as rw,readFileSync as TU,writeFileSync as IU}from"fs";import{dirname as iw,join as jM}from"path";function p9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function x$($,q,J=""){let G=p9($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function wq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function w8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function iQ($,q){x$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function dQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function N8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function f0($,q){return $<<32-q|$>>>q}function w$($,q){return $<<q|$>>>32-q>>>0}var WO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function MO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function zO($){for(let q=0;q<$.length;q++)$[q]=MO($[q]);return $}var l9=WO?($)=>$:zO,jW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),RO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function cQ($){if(x$($),jW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=RO[$[J]];return q}var Oq={_0:48,_9:57,A:65,F:70,a:97,f:102};function NW($){if($>=Oq._0&&$<=Oq._9)return $-Oq._0;if($>=Oq.A&&$<=Oq.F)return $-(Oq.A-10);if($>=Oq.a&&$<=Oq.f)return $-(Oq.a-10);return}function CG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(jW)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=NW($.charCodeAt(Y)),U=NW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function DO($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function r9($,q=""){if(typeof $==="string")return DO($);return x$($,void 0,q)}function i9(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];x$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function nQ($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function d9($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Nq($=32){C$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var c9=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class n9{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(wq($),x$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),z0(G)}update($){return w8(this),this.iHash.update($),this}digestInto($){w8(this),iQ($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var jq=(()=>{let $=(q,J,G)=>new n9(q,J).update(G).digest();return $.create=(q,J)=>new n9(q,J),$})();function PG($,q,J){if(wq($),J===void 0)J=new Uint8Array($.outputLen);return jq($,J,q)}var o9=Uint8Array.of(0),AW=Uint8Array.of();function a9($,q,J,G=32){wq($),C$(G,"length"),x$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=AW;else x$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=jq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)o9[0]=M+1,V.update(M===0?AW:W).update(J).update(o9).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),z0(W,o9),X.slice(0,G)}var LG=($,q,J,G,Q)=>a9($,PG($,q,J),G,Q);function ZW($,q,J){return $&q^~$&J}function BW($,q,J){return $&q^$&J^q&J}class oQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=N8(this.buffer)}update($){w8(this),x$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=N8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){w8(this),iQ($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=N8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Aq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),h$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),u$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),SW=BigInt(32);function KO($,q=!1){if(q)return{h:Number($&aQ),l:Number($>>SW&aQ)};return{h:Number($>>SW&aQ)|0,l:Number($&aQ)|0}}function TW($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=KO($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var s9=($,q,J)=>$>>>J,t9=($,q,J)=>$<<32-J|q>>>J,TJ=($,q,J)=>$>>>J|q<<32-J,IJ=($,q,J)=>$<<32-J|q>>>J,FG=($,q,J)=>$<<64-J|q>>>J-32,gG=($,q,J)=>$>>>J-32|q<<64-J;function $q($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var IW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),EW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,CW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),PW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,LW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),FW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var OO=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),pq=new Uint32Array(64);class e9 extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)pq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=pq[M-15],D=pq[M-2],R=f0(z,7)^f0(z,18)^z>>>3,w=f0(D,17)^f0(D,19)^D>>>10;pq[M]=w+pq[M-7]+R+pq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=f0(X,6)^f0(X,11)^f0(X,25),D=W+z+ZW(X,U,V)+OO[M]+pq[M]|0,w=(f0(J,2)^f0(J,13)^f0(J,22))+BW(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+w|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){z0(pq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),z0(this.buffer)}}class gW extends e9{A=Aq[0]|0;B=Aq[1]|0;C=Aq[2]|0;D=Aq[3]|0;E=Aq[4]|0;F=Aq[5]|0;G=Aq[6]|0;H=Aq[7]|0;constructor(){super(32)}}class wO extends e9{A=Zq[0]|0;B=Zq[1]|0;C=Zq[2]|0;D=Zq[3]|0;E=Zq[4]|0;F=Zq[5]|0;G=Zq[6]|0;H=Zq[7]|0;constructor(){super(28)}}var _W=(()=>TW(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),NO=(()=>_W[0])(),jO=(()=>_W[1])(),lq=new Uint32Array(80),rq=new Uint32Array(80);class _G extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:w,Hl:N}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=w|0,this.Hl=N|0}process($,q){for(let T=0;T<16;T++,q+=4)lq[T]=$.getUint32(q),rq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=lq[T-15]|0,y=rq[T-15]|0,u=TJ(v,y,1)^TJ(v,y,8)^s9(v,y,7),F=IJ(v,y,1)^IJ(v,y,8)^t9(v,y,7),x=lq[T-2]|0,m=rq[T-2]|0,k=TJ(x,m,19)^FG(x,m,61)^s9(x,m,6),l=IJ(x,m,19)^gG(x,m,61)^t9(x,m,6),_=CW(F,l,rq[T-7],rq[T-16]),E=PW(_,u,k,lq[T-7],lq[T-16]);lq[T]=E|0,rq[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:w,Gl:N,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=TJ(M,z,14)^TJ(M,z,18)^FG(M,z,41),y=IJ(M,z,14)^IJ(M,z,18)^gG(M,z,41),u=M&D^~M&w,F=z&R^~z&N,x=LW(Z,y,F,jO[T],rq[T]),m=FW(x,j,v,u,NO[T],lq[T]),k=x|0,l=TJ(J,G,28)^FG(J,G,34)^FG(J,G,39),_=IJ(J,G,28)^gG(J,G,34)^gG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=w|0,Z=N|0,w=D|0,N=R|0,D=M|0,R=z|0,{h:M,l:z}=$q(V|0,W|0,m|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=IW(k,_,I);J=EW(A,m,l,E),G=A|0}({h:J,l:G}=$q(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=$q(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=$q(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=$q(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=$q(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=$q(this.Fh|0,this.Fl|0,D|0,R|0),{h:w,l:N}=$q(this.Gh|0,this.Gl|0,w|0,N|0),{h:j,l:Z}=$q(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,w,N,j,Z)}roundClean(){z0(lq,rq)}destroy(){this.destroyed=!0,z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class vW extends _G{Ah=u$[0]|0;Al=u$[1]|0;Bh=u$[2]|0;Bl=u$[3]|0;Ch=u$[4]|0;Cl=u$[5]|0;Dh=u$[6]|0;Dl=u$[7]|0;Eh=u$[8]|0;El=u$[9]|0;Fh=u$[10]|0;Fl=u$[11]|0;Gh=u$[12]|0;Gl=u$[13]|0;Hh=u$[14]|0;Hl=u$[15]|0;constructor(){super(64)}}class AO extends _G{Ah=h$[0]|0;Al=h$[1]|0;Bh=h$[2]|0;Bl=h$[3]|0;Ch=h$[4]|0;Cl=h$[5]|0;Dh=h$[6]|0;Dl=h$[7]|0;Eh=h$[8]|0;El=h$[9]|0;Fh=h$[10]|0;Fl=h$[11]|0;Gh=h$[12]|0;Gl=h$[13]|0;Hh=h$[14]|0;Hl=h$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),t$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class ZO extends _G{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class BO extends _G{Ah=t$[0]|0;Al=t$[1]|0;Bh=t$[2]|0;Bl=t$[3]|0;Ch=t$[4]|0;Cl=t$[5]|0;Dh=t$[6]|0;Dl=t$[7]|0;Eh=t$[8]|0;El=t$[9]|0;Fh=t$[10]|0;Fl=t$[11]|0;Gh=t$[12]|0;Gl=t$[13]|0;Hh=t$[14]|0;Hl=t$[15]|0;constructor(){super(32)}}var p$=d9(()=>new gW,c9(1));var sQ=d9(()=>new vW,c9(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function JY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function JX($){if(!JY($))throw Error("Uint8Array expected")}function fW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function xW($){if(typeof $!=="function")throw Error("function expected");return!0}function iq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function bG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function eQ($){if(!Array.isArray($))throw Error("array expected")}function $Y($,q){if(!fW(!0,q))throw Error(`${$}: array of strings expected`)}function GX($,q){if(!fW(!1,q))throw Error(`${$}: array of numbers expected`)}function I0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function E0($){let q=typeof $==="string"?$.split(""):$,J=q.length;$Y("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return eQ(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return eQ(Q),Q.map((Y)=>{iq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function C0($=""){return iq("join",$),{encode:(q)=>{return $Y("join.decode",q),q.join($)},decode:(q)=>{return iq("join.decode",q),q.split($)}}}function GY($,q="="){return bG($),iq("padding",q),{encode(J){$Y("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){$Y("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function hW($){return xW($),{encode:(q)=>q,decode:(q)=>$(q)}}function bW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(eQ($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(bG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,D=z+M;if(!Number.isSafeInteger(D)||z/q!==U||D-M!==z)throw Error("convertRadix: carry overflow");let R=D/J;U=D%J;let w=Math.floor(R);if(Y[W]=w,!Number.isSafeInteger(w)||w*J+U!==D)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!w)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var uW=($,q)=>q===0?$:uW(q,$%q),qY=($,q)=>$+(q-uW($,q)),tQ=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function $X($,q,J,G){if(eQ($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(qY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${qY(q,J)}`);let Q=0,Y=0,X=tQ[q],U=tQ[J]-1,V=[];for(let W of $){if(bG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=tQ[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function SO($){bG($);let q=256;return{encode:(J)=>{if(!JY(J))throw Error("radix.encode input should be Uint8Array");return bW(Array.from(J),q,$)},decode:(J)=>{return GX("radix.decode",J),Uint8Array.from(bW(J,$,q))}}}function g0($,q=!1){if(bG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(qY(8,$)>32||qY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!JY(J))throw Error("radix2.encode input should be Uint8Array");return $X(Array.from(J),8,$,!q)},decode:(J)=>{return GX("radix2.decode",J),Uint8Array.from($X(J,$,8,q))}}}function kW($){return xW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var RL=I0(g0(4),E0("0123456789ABCDEF"),C0("")),DL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),GY(5),C0("")),KL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),C0("")),HL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),GY(5),C0("")),OL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),C0("")),wL=I0(g0(5),E0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),C0(""),hW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),pW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),lW=($,q)=>{iq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},QX=pW?{encode($){return JX($),$.toBase64()},decode($){return lW($,!1)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),GY(6),C0("")),x0=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),C0("")),NL=pW?{encode($){return JX($),$.toBase64({alphabet:"base64url"})},decode($){return lW($,!0)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),GY(6),C0("")),jL=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),C0("")),YX=($)=>I0(SO(58),E0($),C0("")),AL=YX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),ZL=YX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),BL=YX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var qX=I0(E0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),C0("")),mW=[996825010,642813549,513874426,1027748829,705979059];function vG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<mW.length;G++)if((q>>G&1)===1)J^=mW[G];return J}function yW($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=vG(Q)^X>>5}Q=vG(Q);for(let Y=0;Y<G;Y++)Q=vG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=vG(Q)^Y;for(let Y=0;Y<6;Y++)Q=vG(Q);return Q^=J,qX.encode($X([Q%tQ[30]],30,5,!1))}function rW($){let q=$==="bech32"?1:734539939,J=g0(5),G=J.decode,Q=J.encode,Y=kW(G);function X(z,D,R=90){if(iq("bech32.encode prefix",z),JY(D))D=Array.from(D);GX("bech32.encode",D);let w=z.length;if(w===0)throw TypeError(`Invalid prefix length ${w}`);let N=w+7+D.length;if(R!==!1&&N>R)throw TypeError(`Length ${N} exceeds limit ${R}`);let j=z.toLowerCase(),Z=yW(j,D,q);return`${j}1${qX.encode(D)}${Z}`}function U(z,D=90){iq("bech32.decode input",z);let R=z.length;if(R<8||D!==!1&&R>D)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${D})`);let w=z.toLowerCase();if(z!==w&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let N=w.lastIndexOf("1");if(N===0||N===-1)throw Error('Letter "1" must be present between prefix and data only');let j=w.slice(0,N),Z=w.slice(N+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=qX.decode(Z).slice(0,-6),v=yW(j,T,q);if(!Z.endsWith(v))throw Error(`Invalid checksum in ${z}: expected "${v}"`);return{prefix:j,words:T}}let V=kW(U);function W(z){let{prefix:D,words:R}=U(z,!1);return{prefix:D,words:R,bytes:G(R)}}function M(z,D){return X(z,Q(D))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var h0=rW("bech32"),SL=rW("bech32m");var TO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),IO={encode($){return JX($),$.toHex()},decode($){return iq("hex",$),Uint8Array.fromHex($)}},TL=TO?IO:I0(g0(4),E0("0123456789abcdef"),C0(""),hW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function CO($,q,J,G){wq($);let Q=nQ({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(C$(Y,"c"),C$(X,"dkLen"),C$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=r9(q,"password"),W=r9(J,"salt"),M=new Uint8Array(X),z=jq.create($,V),D=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:D}}function PO($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return z0(Q),J}function XX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=CO($,q,J,G),W,M=new Uint8Array(4),z=N8(M),D=new Uint8Array(U.outputLen);for(let R=1,w=0;w<Y;R++,w+=U.outputLen){let N=X.subarray(w,w+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(D),N.set(D.subarray(0,N.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(D).digestInto(D);for(let Z=0;Z<N.length;Z++)N[Z]^=D[Z]}}return PO(U,V,X,W,D)}function iW($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],D=$[q++]^J[G++],R=$[q++]^J[G++],w=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],v=$[q++]^J[G++],y=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,m=V,k=W,l=M,_=z,E=D,I=R,A=w,S=N,P=j,g=Z,L=T,b=v,O=y,f=u;for(let r=0;r<8;r+=2)l^=w$(F+L|0,7),A^=w$(l+F|0,9),L^=w$(A+l|0,13),F^=w$(L+A|0,18),S^=w$(_+x|0,7),b^=w$(S+_|0,9),x^=w$(b+S|0,13),_^=w$(x+b|0,18),O^=w$(P+E|0,7),m^=w$(O+P|0,9),E^=w$(m+O|0,13),P^=w$(E+m|0,18),k^=w$(f+g|0,7),I^=w$(k+f|0,9),g^=w$(I+k|0,13),f^=w$(g+I|0,18),x^=w$(F+k|0,7),m^=w$(x+F|0,9),k^=w$(m+x|0,13),F^=w$(k+m|0,18),E^=w$(_+l|0,7),I^=w$(E+_|0,9),l^=w$(I+E|0,13),_^=w$(l+I|0,18),g^=w$(P+S|0,7),A^=w$(g+P|0,9),S^=w$(A+g|0,13),P^=w$(S+A|0,18),L^=w$(f+O|0,7),b^=w$(L+f|0,9),O^=w$(b+L|0,13),f^=w$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+m|0,Q[Y++]=W+k|0,Q[Y++]=M+l|0,Q[Y++]=z+_|0,Q[Y++]=D+E|0,Q[Y++]=R+I|0,Q[Y++]=w+A|0,Q[Y++]=N+S|0,Q[Y++]=j+P|0,Q[Y++]=Z+g|0,Q[Y++]=T+L|0,Q[Y++]=v+b|0,Q[Y++]=y+O|0,Q[Y++]=u+f|0}function UX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(iW(J,X,$,q,J,Y),U>0)X+=16;iW(J,Y,$,q+=16,J,X)}}function LO($,q,J){let G=nQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(C$(Q,"N"),C$(Y,"r"),C$(X,"p"),C$(U,"dkLen"),C$(V,"asyncTick"),C$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,D=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let w=z*(Q+X+1);if(w>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+w+", maxmem="+W);let N=XX(p$,$,q,{c:1,dkLen:z*X}),j=dQ(N),Z=dQ(new Uint8Array(z*Q)),T=dQ(new Uint8Array(z)),v=()=>{};if(M){let y=2*Q*X,u=Math.max(Math.floor(y/1e4),1),F=0;v=()=>{if(F++,M&&(!(F%u)||F===y))M(F/y)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:D,V:Z,B32:j,B:N,tmp:T,blockMixCb:v,asyncTick:V}}function FO($,q,J,G,Q){let Y=XX(p$,$,J,{c:1,dkLen:q});return z0(J,G,Q),Y}function dW($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:D}=LO($,q,J);l9(W);for(let R=0;R<Y;R++){let w=U*R;for(let N=0;N<U;N++)V[N]=W[w+N];for(let N=0,j=0;N<G-1;N++)UX(V,j,V,j+=U,Q),D();UX(V,(G-1)*U,W,w,Q),D();for(let N=0;N<G;N++){let j=(W[w+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)z[Z]=W[w+Z]^V[j*U+Z];UX(z,0,W,w,Q),D()}}return l9(W),FO($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function gO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function QY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function j8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function _$($,q,J=""){let G=gO($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function VX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function cW($,q,J=!1){_$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!A8($))throw Error("invalid output, must be aligned")}function qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function u0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function _O($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var EJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),vO=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var bO=($)=>{for(let q=0;q<$.length;q++)$[q]=vO($[q]);return $},Bq=EJ?($)=>$:bO;function nW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function oW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function aW($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var sW=($,q)=>{function J(G,...Q){if(_$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];_$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)_$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");_$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,_$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(_$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function kG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(_$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!A8(q))throw Error("invalid output, must be aligned");return q}function tW($,q,J){j8($),j8(q),QY(J);let G=new Uint8Array(16),Q=_O(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function A8($){return $.byteOffset%4===0}function Z8($){return Uint8Array.from(_$($))}var $7=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),kO=(()=>Bq(qq($7("expand 16-byte k"))))(),mO=(()=>Bq(qq($7("expand 32-byte k"))))();function N$($,q){return $<<q|$>>>32-q}var mG=64,yO=16,WX=(()=>4294967295)(),eW=Uint32Array.of();function fO($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(mG),M=qq(W),z=EJ&&A8(Q)&&A8(Y),D=z?qq(Q):eW,R=z?qq(Y):eW;if(!EJ){for(let w=0;w<V;X++){if($(q,J,G,M,X,U),Bq(M),X>=WX)throw Error("arx: counter overflow");let N=Math.min(mG,V-w);for(let j=0,Z;j<N;j++)Z=w+j,Y[Z]=Q[Z]^W[j];w+=N}return}for(let w=0;w<V;X++){if($(q,J,G,M,X,U),X>=WX)throw Error("arx: counter overflow");let N=Math.min(mG,V-w);if(z&&N===mG){let j=w/4;if(w%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<yO;Z++)T=j+Z,R[T]=D[T]^M[Z];w+=mG;continue}for(let j=0,Z;j<N;j++)Z=w+j,Y[Z]=Q[Z]^W[j];w+=N}}function q7($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=nW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return j8(Q),j8(X),QY(Y),QY(J),(U,V,W,M,z=0)=>{_$(U,void 0,"key"),_$(V,void 0,"nonce"),_$(W,void 0,"data");let D=W.length;if(M=kG(D,M,!1),j8(z),z<0||z>=WX)throw Error("arx: counter overflow");let R=[],w=U.length,N,j;if(w===32)R.push(N=Z8(U)),j=mO;else if(w===16&&J)N=new Uint8Array(32),N.set(U),N.set(U,16),j=kO,R.push(N);else throw _$(U,32,"arx key"),Error("invalid key size");if(!EJ||!A8(V))R.push(V=Z8(V));let Z=qq(N);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let y=V.subarray(0,16);if(EJ)G(j,Z,qq(y),Z);else{let u=Bq(Uint32Array.from(j));G(u,Z,qq(y),Z),u0(u),Bq(Z)}V=V.subarray(16)}else if(!EJ)Bq(Z);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let y=new Uint8Array(12);y.set(V,Y?0:12-V.length),V=y,R.push(V)}let v=Bq(qq(V));try{return fO($,j,Z,v,W,M,z,X),M}finally{u0(...R)}}}function l$($,q){return $[q++]&255|($[q++]&255)<<8}class J7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=Z8(_$($,32,"key"));let q=l$($,0),J=l$($,2),G=l$($,4),Q=l$($,6),Y=l$($,8),X=l$($,10),U=l$($,12),V=l$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=l$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],D=Y[6],R=Y[7],w=Y[8],N=Y[9],j=l$($,q+0),Z=l$($,q+2),T=l$($,q+4),v=l$($,q+6),y=l$($,q+8),u=l$($,q+10),F=l$($,q+12),x=l$($,q+14),m=Q[0]+(j&8191),k=Q[1]+((j>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),_=Q[3]+((T>>>7|v<<9)&8191),E=Q[4]+((v>>>4|y<<12)&8191),I=Q[5]+(y>>>1&8191),A=Q[6]+((y>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+m*X+k*(5*N)+l*(5*w)+_*(5*R)+E*(5*D);L=b>>>13,b&=8191,b+=I*(5*z)+A*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+m*U+k*X+l*(5*N)+_*(5*w)+E*(5*R);L=O>>>13,O&=8191,O+=I*(5*D)+A*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let f=L+m*V+k*U+l*X+_*(5*N)+E*(5*w);L=f>>>13,f&=8191,f+=I*(5*R)+A*(5*D)+S*(5*z)+P*(5*M)+g*(5*W),L+=f>>>13,f&=8191;let r=L+m*W+k*V+l*U+_*X+E*(5*N);L=r>>>13,r&=8191,r+=I*(5*w)+A*(5*R)+S*(5*D)+P*(5*z)+g*(5*M),L+=r>>>13,r&=8191;let B=L+m*M+k*W+l*V+_*U+E*X;L=B>>>13,B&=8191,B+=I*(5*N)+A*(5*w)+S*(5*R)+P*(5*D)+g*(5*z),L+=B>>>13,B&=8191;let o=L+m*z+k*M+l*W+_*V+E*U;L=o>>>13,o&=8191,o+=I*X+A*(5*N)+S*(5*w)+P*(5*R)+g*(5*D),L+=o>>>13,o&=8191;let q$=L+m*D+k*z+l*M+_*W+E*V;L=q$>>>13,q$&=8191,q$+=I*U+A*X+S*(5*N)+P*(5*w)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+m*R+k*D+l*z+_*M+E*W;L=Y$>>>13,Y$&=8191,Y$+=I*V+A*U+S*X+P*(5*N)+g*(5*w),L+=Y$>>>13,Y$&=8191;let G$=L+m*w+k*R+l*D+_*z+E*M;L=G$>>>13,G$&=8191,G$+=I*W+A*V+S*U+P*X+g*(5*N),L+=G$>>>13,G$&=8191;let t=L+m*N+k*w+l*R+_*D+E*z;L=t>>>13,t&=8191,t+=I*M+A*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=f,Q[3]=r,Q[4]=B,Q[5]=o,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;u0(J)}update($){VX(this),_$($),$=Z8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,u0(this.h,this.r,this.buffer,this.pad)}digestInto($){VX(this),cW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var G7=aW(32,($)=>new J7($));function xO($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],D=q[2],R=q[3],w=q[4],N=q[5],j=q[6],Z=q[7],T=Q,v=J[0],y=J[1],u=J[2],F=X,x=U,m=V,k=W,l=M,_=z,E=D,I=R,A=w,S=N,P=j,g=Z,L=T,b=v,O=y,f=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=N$(L^F,16),A=A+L|0,l=N$(l^A,12),F=F+l|0,L=N$(L^F,8),A=A+L|0,l=N$(l^A,7),x=x+_|0,b=N$(b^x,16),S=S+b|0,_=N$(_^S,12),x=x+_|0,b=N$(b^x,8),S=S+b|0,_=N$(_^S,7),m=m+E|0,O=N$(O^m,16),P=P+O|0,E=N$(E^P,12),m=m+E|0,O=N$(O^m,8),P=P+O|0,E=N$(E^P,7),k=k+I|0,f=N$(f^k,16),g=g+f|0,I=N$(I^g,12),k=k+I|0,f=N$(f^k,8),g=g+f|0,I=N$(I^g,7),F=F+_|0,f=N$(f^F,16),P=P+f|0,_=N$(_^P,12),F=F+_|0,f=N$(f^F,8),P=P+f|0,_=N$(_^P,7),x=x+E|0,L=N$(L^x,16),g=g+L|0,E=N$(E^g,12),x=x+E|0,L=N$(L^x,8),g=g+L|0,E=N$(E^g,7),m=m+I|0,b=N$(b^m,16),A=A+b|0,I=N$(I^A,12),m=m+I|0,b=N$(b^m,8),A=A+b|0,I=N$(I^A,7),k=k+l|0,O=N$(O^k,16),S=S+O|0,l=N$(l^S,12),k=k+l|0,O=N$(O^k,8),S=S+O|0,l=N$(l^S,7);let r=0;G[r++]=X+F|0,G[r++]=U+x|0,G[r++]=V+m|0,G[r++]=W+k|0,G[r++]=M+l|0,G[r++]=z+_|0,G[r++]=D+E|0,G[r++]=R+I|0,G[r++]=w+A|0,G[r++]=N+S|0,G[r++]=j+P|0,G[r++]=Z+g|0,G[r++]=T+L|0,G[r++]=v+b|0,G[r++]=y+O|0,G[r++]=u+f|0}var hO=q7(xO,{counterRight:!1,counterLength:4,allowShortKeys:!1});var uO=new Uint8Array(16),Q7=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(uO.subarray(J))},pO=new Uint8Array(32);function Y7($,q,J,G,Q){if(Q!==void 0)_$(Q,void 0,"AAD");let Y=$(q,J,pO),X=tW(G.length,Q?Q.length:0,!0),U=G7.create(Y);if(Q)Q7(U,Q);Q7(U,G),U.update(X);let V=U.digest();return u0(Y,X),V}var lO=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=kG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=Y7($,q,J,V,G);return X.set(W,U),u0(W),X},decrypt(Y,X){X=kG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=Y7($,q,J,U,G);if(!oW(V,W))throw u0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),u0(W),X}}},dq=sW({blockSize:64,nonceLength:12,tagLength:16},lO(hO));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function B8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function y$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=B8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function _0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");y$($.outputLen),y$($.blockLen)}function Tq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function j0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function UY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function p0($,q){return $<<32-q|$>>>q}var rO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function iO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function dO($){for(let q=0;q<$.length;q++)$[q]=iO($[q]);return $}var MX=rO?($)=>$:dO,U7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),cO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function CJ($){if(Q$($),U7)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=cO[$[J]];return q}var Sq={_0:48,_9:57,A:65,F:70,a:97,f:102};function X7($){if($>=Sq._0&&$<=Sq._9)return $-Sq._0;if($>=Sq.A&&$<=Sq.F)return $-(Sq.A-10);if($>=Sq.a&&$<=Sq.f)return $-(Sq.a-10);return}function PJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(U7)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=X7($.charCodeAt(Y)),U=X7($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function L$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function S8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function cq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var nq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RX=BigInt(0),zX=BigInt(1);function yG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function V7($){if(typeof $==="bigint"){if(!VY($))throw Error("positive bigint expected, got "+$)}else y$($);return $}function fG($){let q=V7($).toString(16);return q.length&1?"0"+q:q}function W7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?RX:BigInt("0x"+$)}function oq($){return W7(CJ($))}function aq($){return W7(CJ(WY(Q$($)).reverse()))}function T8($,q){y$(q),$=V7($);let J=PJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function xG($,q){return T8($,q).reverse()}function WY($){return Uint8Array.from($)}function sq($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var VY=($)=>typeof $==="bigint"&&RX<=$;function nO($,q,J){return VY($)&&VY(q)&&VY(J)&&q<=$&&$<J}function hG($,q,J,G){if(!nO(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function DX($){let q;for(q=0;$>RX;$>>=zX,q+=1);return q}var uG=($)=>(zX<<BigInt($))-zX;function M7($,q,J){if(y$($,"hashLen"),y$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,L$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},w=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return L$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while(!(T=Z(w())))R();return z(),T}}function LJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function KX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D0=BigInt(0),e$=BigInt(1),FJ=BigInt(2),D7=BigInt(3),K7=BigInt(4),H7=BigInt(5),oO=BigInt(7),O7=BigInt(8),aO=BigInt(9),w7=BigInt(16);function R0($,q){let J=$%q;return J>=D0?J:q+J}function v0($,q,J){let G=$;while(q-- >D0)G*=G,G%=J;return G}function z7($,q){if($===D0)throw Error("invert: expected non-zero number");if(q<=D0)throw Error("invert: expected positive modulus, got "+q);let J=R0($,q),G=q,Q=D0,Y=e$,X=e$,U=D0;while(J!==D0){let W=G/J,M=G%J,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==e$)throw Error("invert: does not exist");return R0(Q,q)}function HX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function N7($,q){let J=($.ORDER+e$)/K7,G=$.pow(q,J);return HX($,G,q),G}function sO($,q){let J=($.ORDER-H7)/O7,G=$.mul(q,FJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,FJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return HX($,U,q),U}function tO($){let q=MY($),J=j7($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+oO)/w7;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),D=U.mul(W,Y),R=U.eql(U.sqr(M),V),w=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(D,z,w);let N=U.eql(U.sqr(M),V),j=U.cmov(W,M,N);return HX(U,j,V),j}}function j7($){if($<D7)throw Error("sqrt is not defined for small field");let q=$-e$,J=0;while(q%FJ===D0)q/=FJ,J++;let G=FJ,Q=MY($);while(R7(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return N7;let Y=Q.pow(G,q),X=(q+e$)/FJ;return function(V,W){if(V.is0(W))return W;if(R7(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),D=V.pow(W,q),R=V.pow(W,X);while(!V.eql(D,V.ONE)){if(V.is0(D))return V.ZERO;let w=1,N=V.sqr(D);while(!V.eql(N,V.ONE))if(w++,N=V.sqr(N),w===M)throw Error("Cannot find square root");let j=e$<<BigInt(M-w-1),Z=V.pow(z,j);M=w,z=V.sqr(Z),D=V.mul(D,z),R=V.mul(R,Z)}return R}}function eO($){if($%K7===D7)return N7;if($%O7===H7)return sO;if($%w7===aO)return tO($);return j7($)}var $6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function OX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=$6.reduce((G,Q)=>{return G[Q]="function",G},q);return LJ($,J),$}function q6($,q,J){if(J<D0)throw Error("invalid exponent, negatives unsupported");if(J===D0)return $.ONE;if(J===e$)return q;let G=$.ONE,Q=q;while(J>D0){if(J&e$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=e$}return G}function pG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function R7($,q){let J=($.ORDER-e$)/FJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function J6($,q){if(q!==void 0)y$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class A7{ORDER;BITS;BYTES;isLE;ZERO=D0;ONE=e$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=D0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=J6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return D0<=$&&$<this.ORDER}is0($){return $===D0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&e$)===e$}neg($){return R0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R0($*$,this.ORDER)}add($,q){return R0($+q,this.ORDER)}sub($,q){return R0($-q,this.ORDER)}mul($,q){return R0($*q,this.ORDER)}pow($,q){return q6(this,$,q)}div($,q){return R0($*z7(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return z7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=eO(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?xG($,this.BYTES):T8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?aq($):oq($);if(X)U=R0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return pG(this,$)}cmov($,q,J){return J?q:$}}function MY($,q={}){return new A7($,q)}function Z7($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function wX($){let q=Z7($);return q+Math.ceil(q/2)}function B7($,q,J=!1){Q$($);let G=$.length,Q=Z7(q),Y=wX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?aq($):oq($),U=R0(X,q-e$)+e$;return J?xG(U,Q):T8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I8=BigInt(0),gJ=BigInt(1);function lG($,q){let J=q.negate();return $?J:q}function ZX($,q){let J=pG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function E7($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function NX($,q){E7($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=uG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function S7($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=gJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var jX=new WeakMap,C7=new WeakMap;function AX($){return C7.get($)||1}function T7($){if($!==I8)throw Error("invalid wNAF")}class BX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>I8){if(q&gJ)J=J.add(G);G=G.double(),q>>=gJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=NX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=NX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=S7(J,X,Y);if(J=U,W)Q=Q.add(lG(z,q[D]));else G=G.add(lG(M,q[V]))}return T7(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=NX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===I8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=S7(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return T7(J),G}getPrecomputes($,q,J){let G=jX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);jX.set(q,G)}}return G}cached($,q,J){let G=AX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=AX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){E7(q,this.bits),C7.set($,q),jX.delete($)}hasCache($){return AX($)!==1}}function P7($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>I8||G>I8){if(J&gJ)Y=Y.add(Q);if(G&gJ)X=X.add(Q);Q=Q.double(),J>>=gJ,G>>=gJ}return{p1:Y,p2:X}}function I7($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return OX(q),q}else return MY($,{isLE:J})}function L7($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>I8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=I7(q.p,J.Fp,G),Y=I7(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function zY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rG=BigInt(0),E8=BigInt(1),RY=BigInt(2);function G6($){return LJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function F7($){let q=G6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||cq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?RY**BigInt(254):RY**BigInt(447),w=U?BigInt(8)*RY**BigInt(251)-E8:BigInt(4)*RY**BigInt(445)-E8,N=R+w+E8,j=(A)=>R0(A,J),Z=T(z);function T(A){return xG(j(A),M)}function v(A){let S=WY(Q$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(aq(S))}function y(A){return aq(Q(WY(Q$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),y(A));if(P===rG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,m=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){hG("u",A,rG,J),hG("scalar",S,R,N);let P=S,g=A,L=E8,b=rG,O=A,f=E8,r=rG;for(let o=BigInt(W-1);o>=rG;o--){let q$=P>>o&E8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,T$=O+f,m$=O-f,M0=j(m$*Y$),e0=j(T$*t),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A=V(M))=>{return Q$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze({keygen:zY(E,x),getSharedSecret:m,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}class SX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(_0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),j0(G)}update($){return Tq(this),this.iHash.update($),this}digestInto($){Tq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var C8=($,q,J)=>new SX($,q).update(J).digest();C8.create=($,q)=>new SX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var g7=($,q)=>($+($>=0?q:-q)/v7)/q;function Q6($,q,J){let[[G,Q],[Y,X]]=q,U=g7(X*$,J),V=g7(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Iq,D=M<Iq;if(z)W=-W;if(D)M=-M;let R=uG(Math.ceil(DX(J)/2))+P8;if(W<Iq||W>=R||M<Iq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:D,k2:M}}function IX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function TX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(yG(J.lowS,"lowS"),yG(J.prehash,"prehash"),J.format!==void 0)IX(J.format);return J}class _7 extends Error{constructor($=""){super($)}}var tq={Err:_7,_tlv:{encode:($,q)=>{let{Err:J}=tq;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=fG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?fG(Q.length/2|128):"";return fG($)+Y+Q+q},decode($,q){let{Err:J}=tq,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=tq;if($<Iq)throw new q("integer: negative integers are not allowed");let J=fG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=tq;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return oq($)}},toSig($){let{Err:q,_int:J,_tlv:G}=tq,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=tq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Iq=BigInt(0),P8=BigInt(1),v7=BigInt(2),DY=BigInt(3),Y6=BigInt(4);function EX($,q={}){let J=L7("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;LJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=k7(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(E,I,A){let{x:S,y:P}=I.toAffine(),g=G.toBytes(S);if(yG(A,"isCompressed"),A){M();let L=!G.isOdd(P);return L$(b7(L),g)}else return L$(Uint8Array.of(4),g,G.toBytes(P))}function D(E){Q$(E,void 0,"Point");let{publicKey:I,publicKeyUncompressed:A}=W,S=E.length,P=E[0],g=E.subarray(1);if(S===I&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=N(L),O;try{O=G.sqrt(b)}catch(B){let o=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+o)}M();let f=G.isOdd(O);if((P&1)===1!==f)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${I} or uncompressed=${A}`)}let R=q.toBytes||z,w=q.fromBytes||D;function N(E){let I=G.sqr(E),A=G.mul(I,E);return G.add(G.add(A,G.mul(E,Y.a)),Y.b)}function j(E,I){let A=G.sqr(I),S=N(E);return G.eql(A,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(Y.a,DY),Y6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function v(E,I,A=!1){if(!G.isValid(I)||A&&G.is0(I))throw Error(`bad point coordinate ${E}`);return I}function y(E){if(!(E instanceof k))throw Error("Weierstrass Point expected")}function u(E){if(!V||!V.basises)throw Error("no endo");return Q6(E,V.basises,Q.ORDER)}let F=KX((E,I)=>{let{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=KX((E)=>{if(E.is0()){if(q.allowInfinityPoint&&!G.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:I,y:A}=E.toAffine();if(!G.isValid(I)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!j(I,A))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function m(E,I,A,S,P){return A=new k(G.mul(A.X,E),A.Y,A.Z),I=lG(S,I),A=lG(P,A),I.add(A)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(E,I,A){this.X=v("x",E),this.Y=v("y",I,!0),this.Z=v("z",A),Object.freeze(this)}static CURVE(){return Y}static fromAffine(E){let{x:I,y:A}=E||{};if(!E||!G.isValid(I)||!G.isValid(A))throw Error("invalid affine point");if(E instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(A))return k.ZERO;return new k(I,A,G.ONE)}static fromBytes(E){let I=k.fromAffine(w(Q$(E,void 0,"point")));return I.assertValidity(),I}static fromHex(E){return k.fromBytes(PJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,I=!0){if(_.createCache(this,E),!I)this.multiply(DY);return this}assertValidity(){x(this)}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){y(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.eql(G.mul(I,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:I}=Y,A=G.mul(I,DY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=G.mul(S,S),r=G.mul(P,P),B=G.mul(g,g),o=G.mul(S,P);return o=G.add(o,o),O=G.mul(S,g),O=G.add(O,O),L=G.mul(E,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(r,b),b=G.add(r,b),b=G.mul(L,b),L=G.mul(o,L),O=G.mul(A,O),B=G.mul(E,B),o=G.sub(f,B),o=G.mul(E,o),o=G.add(o,O),O=G.add(f,f),f=G.add(O,f),f=G.add(f,B),f=G.mul(f,o),b=G.add(b,f),B=G.mul(P,g),B=G.add(B,B),f=G.mul(B,o),L=G.sub(L,f),O=G.mul(B,r),O=G.add(O,O),O=G.add(O,O),new k(L,b,O)}add(E){y(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.ZERO,O=G.ZERO,f=G.ZERO,r=Y.a,B=G.mul(Y.b,DY),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.mul(S,L),G$=G.add(I,A),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(o,q$),G$=G.sub(G$,t),t=G.add(I,S);let O$=G.add(P,L);return t=G.mul(t,O$),O$=G.add(o,Y$),t=G.sub(t,O$),O$=G.add(A,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),f=G.mul(r,t),b=G.mul(B,Y$),f=G.add(b,f),b=G.sub(q$,f),f=G.add(q$,f),O=G.mul(b,f),q$=G.add(o,o),q$=G.add(q$,o),Y$=G.mul(r,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(o,Y$),Y$=G.mul(r,Y$),t=G.add(t,Y$),o=G.mul(q$,t),O=G.add(O,o),o=G.mul(O$,t),b=G.mul(G$,b),b=G.sub(b,o),o=G.mul(G$,q$),f=G.mul(O$,f),f=G.add(f,o),new k(b,O,f)}subtract(E){return this.add(E.negate())}is0(){return this.equals(k.ZERO)}multiply(E){let{endo:I}=q;if(!Q.isValidNot0(E))throw Error("invalid scalar: out of range");let A,S,P=(g)=>_.cached(this,g,(L)=>ZX(k,L));if(I){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(E),{p:f,f:r}=P(L),{p:B,f:o}=P(O);S=r.add(o),A=m(I.beta,f,B,g,b)}else{let{p:g,f:L}=P(E);A=g,S=L}return ZX(k,[A,S])[0]}multiplyUnsafe(E){let{endo:I}=q,A=this;if(!Q.isValid(E))throw Error("invalid scalar: out of range");if(E===Iq||A.is0())return k.ZERO;if(E===P8)return A;if(_.hasCache(this))return this.multiply(E);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(E),{p1:b,p2:O}=P7(k,A,P,L);return m(I.beta,b,O,S,g)}else return _.unsafe(A,E)}toAffine(E){return F(this,E)}isTorsionFree(){let{isTorsionFree:E}=q;if(X===P8)return!0;if(E)return E(k,this);return _.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:E}=q;if(X===P8)return this;if(E)return E(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(E=!0){return yG(E,"isCompressed"),this.assertValidity(),R(k,this,E)}toHex(E=!0){return CJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,_=new BX(k,q.endo?Math.ceil(l/2):l);return k.BASE.precompute(8),k}function b7($){return Uint8Array.of($?2:3)}function k7($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function X6($,q={}){let{Fn:J}=$,G=q.randomBytes||cq,Q=Object.assign(k7($.Fp,J),{seed:wX(J.ORDER)});function Y(R){try{let w=J.fromBytes(R);return J.isValidNot0(w)}catch(w){return!1}}function X(R,w){let{publicKey:N,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(w===!0&&Z!==N)return!1;if(w===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R=G(Q.seed)){return B7(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,w=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(w)}function W(R){let{secretKey:w,publicKey:N,publicKeyUncompressed:j}=Q;if(!B8(R))return;if("_lengths"in J&&J._lengths||w===N)return;let Z=Q$(R,void 0,"key").length;return Z===N||Z===j}function M(R,w,N=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(w)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(w).multiply(j).toBytes(N)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=zY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function CX($,q,J={}){_0(q),LJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||cq,Q=J.hmac||((A,S)=>C8(q,A,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R}=X6($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=U*v7<Y.ORDER;function j(A){let S=U>>P8;return A>S}function Z(A,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function v(A,S){IX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(A,g)}class y{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=w.format){v(A,S);let P;if(S==="der"){let{r:O,s:f}=tq.toSig(Q$(A));return new y(O,f)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=R.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new y(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(PJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new y(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(L$(b7((g&1)===0),b)),f=X.inv(L),r=F(Q$(A,void 0,"msgHash")),B=X.create(-r*f),o=X.create(P*f),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(o));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(A=w.format){if(IX(A),A==="der")return PJ(tq.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(A==="recovered")return T(),L$(Uint8Array.of(this.assertRecovery()),g,L);return L$(g,L)}toHex(A){return CJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=oq(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=uG(V);function m(A){return hG("num < 2^"+V,A,Iq,x),X.toBytes(A)}function k(A,S){return Q$(A,void 0,"message"),S?Q$(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=TX(P,w);A=k(A,L);let O=F(A),f=X.fromBytes(S);if(!X.isValidNot0(f))throw Error("invalid private key");let r=[m(f),m(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;r.push(Q$(Y$,void 0,"extraEntropy"))}let B=L$(...r),o=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Iq)return;let T$=X.create(t*X.create(o+A$*f));if(T$===Iq)return;let m$=(O$.x===A$?0:2)|Number(O$.y&P8),M0=T$;if(g&&j(T$))M0=X.neg(T$),m$^=1;return new y(A$,M0,N?void 0:m$)}return{seed:B,k2sig:q$}}function _(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return M7(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function E(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=TX(g,w);if(P=Q$(P,void 0,"publicKey"),S=k(S,b),!B8(A)){let f=A instanceof y?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+f)}v(A,O);try{let f=y.fromBytes(A,O),r=$.fromBytes(P);if(L&&f.hasHighS())return!1;let{r:B,s:o}=f,q$=F(S),Y$=X.inv(o),G$=X.create(q$*Y$),t=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(r.multiplyUnsafe(t));if(O$.is0())return!1;return X.create(O$.x)===B}catch(f){return!1}}function I(A,S,P={}){let{prehash:g}=TX(P,w);return S=k(S,g),y.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R,Point:$,sign:_,verify:E,recoverPublicKey:I,Signature:y,hash:q})}function m7($,q,J){return $&q^~$&J}function y7($,q,J){return $&q^$&J^q&J}class KY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=UY(this.buffer)}update($){Tq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=UY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Tq(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,j0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=UY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),r$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var HY=BigInt(4294967295),f7=BigInt(32);function U6($,q=!1){if(q)return{h:Number($&HY),l:Number($>>f7&HY)};return{h:Number($>>f7&HY)|0,l:Number($&HY)|0}}function OY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=U6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var PX=($,q,J)=>$>>>J,LX=($,q,J)=>$<<32-J|q>>>J,_J=($,q,J)=>$>>>J|q<<32-J,vJ=($,q,J)=>$<<32-J|q>>>J,iG=($,q,J)=>$<<64-J|q>>>J-32,dG=($,q,J)=>$>>>J-32|q<<64-J;var x7=($,q,J)=>$<<J|q>>>32-J,h7=($,q,J)=>q<<J|$>>>32-J,u7=($,q,J)=>q<<J-32|$>>>64-J,p7=($,q,J)=>$<<J-32|q>>>64-J;function Jq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var l7=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),r7=($,q,J,G)=>q+J+G+($/4294967296|0)|0,i7=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),d7=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,c7=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),n7=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var W6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),eq=new Uint32Array(64);class FX extends KY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)eq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=eq[M-15],D=eq[M-2],R=p0(z,7)^p0(z,18)^z>>>3,w=p0(D,17)^p0(D,19)^D>>>10;eq[M]=w+eq[M-7]+R+eq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=p0(X,6)^p0(X,11)^p0(X,25),D=W+z+m7(X,U,V)+W6[M]+eq[M]|0,w=(p0(J,2)^p0(J,13)^p0(J,22))+y7(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+w|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){j0(eq)}destroy(){this.set(0,0,0,0,0,0,0,0),j0(this.buffer)}}class o7 extends FX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class M6 extends FX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var a7=(()=>OY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),z6=(()=>a7[0])(),R6=(()=>a7[1])(),$J=new Uint32Array(80),qJ=new Uint32Array(80);class cG extends KY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:w,Hl:N}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=w|0,this.Hl=N|0}process($,q){for(let T=0;T<16;T++,q+=4)$J[T]=$.getUint32(q),qJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=$J[T-15]|0,y=qJ[T-15]|0,u=_J(v,y,1)^_J(v,y,8)^PX(v,y,7),F=vJ(v,y,1)^vJ(v,y,8)^LX(v,y,7),x=$J[T-2]|0,m=qJ[T-2]|0,k=_J(x,m,19)^iG(x,m,61)^PX(x,m,6),l=vJ(x,m,19)^dG(x,m,61)^LX(x,m,6),_=i7(F,l,qJ[T-7],qJ[T-16]),E=d7(_,u,k,$J[T-7],$J[T-16]);$J[T]=E|0,qJ[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:w,Gl:N,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=_J(M,z,14)^_J(M,z,18)^iG(M,z,41),y=vJ(M,z,14)^vJ(M,z,18)^dG(M,z,41),u=M&D^~M&w,F=z&R^~z&N,x=c7(Z,y,F,R6[T],qJ[T]),m=n7(x,j,v,u,z6[T],$J[T]),k=x|0,l=_J(J,G,28)^iG(J,G,34)^iG(J,G,39),_=vJ(J,G,28)^dG(J,G,34)^dG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=w|0,Z=N|0,w=D|0,N=R|0,D=M|0,R=z|0,{h:M,l:z}=Jq(V|0,W|0,m|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=l7(k,_,I);J=r7(A,m,l,E),G=A|0}({h:J,l:G}=Jq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Jq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Jq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Jq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Jq(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=Jq(this.Fh|0,this.Fl|0,D|0,R|0),{h:w,l:N}=Jq(this.Gh|0,this.Gl|0,w|0,N|0),{h:j,l:Z}=Jq(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,w,N,j,Z)}roundClean(){j0($J,qJ)}destroy(){j0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class D6 extends cG{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class s7 extends cG{Ah=r$[0]|0;Al=r$[1]|0;Bh=r$[2]|0;Bl=r$[3]|0;Ch=r$[4]|0;Cl=r$[5]|0;Dh=r$[6]|0;Dl=r$[7]|0;Eh=r$[8]|0;El=r$[9]|0;Fh=r$[10]|0;Fl=r$[11]|0;Gh=r$[12]|0;Gl=r$[13]|0;Hh=r$[14]|0;Hl=r$[15]|0;constructor(){super(48)}}var $0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),q0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class K6 extends cG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(28)}}class H6 extends cG{Ah=q0[0]|0;Al=q0[1]|0;Bh=q0[2]|0;Bl=q0[3]|0;Ch=q0[4]|0;Cl=q0[5]|0;Dh=q0[6]|0;Dl=q0[7]|0;Eh=q0[8]|0;El=q0[9]|0;Fh=q0[10]|0;Fl=q0[11]|0;Gh=q0[12]|0;Gl=q0[13]|0;Hh=q0[14]|0;Hl=q0[15]|0;constructor(){super(32)}}var wY=S8(()=>new o7,nq(1));var t7=S8(()=>new s7,nq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O6=BigInt(1),e7=BigInt(2),w6=BigInt(3),N6=BigInt(5),I3=BigInt(8),$5=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function j6($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=$5,U=$*$%Y*$%Y,V=v0(U,e7,Y)*U%Y,W=v0(V,O6,Y)*$%Y,M=v0(W,N6,Y)*W%Y,z=v0(M,q,Y)*M%Y,D=v0(z,J,Y)*z%Y,R=v0(D,G,Y)*D%Y,w=v0(R,Q,Y)*R%Y,N=v0(w,Q,Y)*R%Y,j=v0(N,q,Y)*M%Y;return{pow_p_5_8:v0(j,e7,Y)*$%Y,b2:U}}function A6($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var q5=(()=>{let $=$5;return F7({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=j6(q);return R0(v0(J,w6,$)*G,$)},adjustScalarBytes:A6})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z6=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),B6=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var S6=EX(Z6),gX=CX(S6,wY);var T6=EX(B6),J5=CX(T6,t7);function Q5($,q,J){if(_0($),J===void 0)J=new Uint8Array($.outputLen);return C8($,J,q)}var _X=Uint8Array.of(0),G5=Uint8Array.of();function Y5($,q,J,G=32){_0($),y$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=G5;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=C8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)_X[0]=M+1,V.update(M===0?G5:W).update(J).update(_X).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),j0(W,_X),X.slice(0,G)}var I6=BigInt(0),nG=BigInt(1),E6=BigInt(2),C6=BigInt(7),P6=BigInt(256),L6=BigInt(113),V5=[],W5=[],M5=[];for(let $=0,q=nG,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],V5.push(2*(5*G+J)),W5.push(($+1)*($+2)/2%64);let Q=I6;for(let Y=0;Y<7;Y++)if(q=(q<<nG^(q>>C6)*L6)%P6,q&E6)Q^=nG<<(nG<<BigInt(Y))-nG;M5.push(Q)}var z5=OY(M5,!0),F6=z5[0],g6=z5[1],X5=($,q,J)=>J>32?u7($,q,J):x7($,q,J),U5=($,q,J)=>J>32?p7($,q,J):h7($,q,J);function _6($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=X5(W,M,1)^J[U],D=U5(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=D}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=W5[X],V=X5(Q,Y,U),W=U5(Q,Y,U),M=V5[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=F6[G],$[1]^=g6[G]}j0(J)}class NY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,y$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=XY(this.state)}clone(){return this._cloneInto()}keccak(){MX(this.state32),_6(this.state32,this.rounds),MX(this.state32),this.posOut=0,this.pos=0}update($){Tq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Tq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return y$($),this.xofInto(new Uint8Array($))}digestInto($){if(YY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,j0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new NY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var R5=($,q,J,G={})=>S8(()=>new NY(q,$,J),G);var bJ=R5(6,136,32,nq(8));var D5=R5(6,72,64,nq(10));var K5=($,q,J,G={})=>S8((Q={})=>new NY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),H5=K5(31,168,16,nq(11)),Gq=K5(31,136,32,nq(12));function vX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function w5($){return vX($),($&$-1)===0&&$!==0}function bX($,q){vX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function N5($){return vX($),31-Math.clz32($)}function O5($){let q=$.length;if(q<2||!w5(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=N5(q);for(let G=0;G<q;G++){let Q=bX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var kX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=N5(J);if(!w5(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)O5(M);for(let z=0,D=1;z<V-X;z++){let R=Q?z+1+X:V-z,w=1<<R,N=w>>1,j=J>>R;for(let Z=0;Z<J;Z+=w)for(let T=0,v=D++;T<N;T++){let y=Y?Q?J-v:v:T*j,u=Z+T,F=Z+T+N,x=G[y],m=M[F],k=M[u];if(W){let l=$.mul(m,x);M[u]=$.add(k,l),M[F]=$.sub(k,l)}else if(Y)M[u]=$.add(m,k),M[F]=$.mul($.sub(m,k),x);else M[u]=$.add(k,m),M[F]=$.mul($.sub(k,m),x)}}if(!Q&&U)O5(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Qq=cq;function jY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function j5($){return Uint8Array.from($)}function kJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function AY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function v$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function mX($){return(1<<$)-1}var h3=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var A5=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,v=G)=>{let y=T%v|0;return(y>=0?y|0:v+y|0)|0},W=(T,v=G)=>{let y=V(T,v)|0;return(y>v>>1?y-v|0:y)|0};function M(){let T=q(J);for(let v=0;v<J;v++){let y=bX(v,X),u=BigInt(Y)**BigInt(y)%BigInt(G);T[v]=Number(u)|0}return T}let z=M(),D={add:(T,v)=>V((T|0)+(v|0))|0,sub:(T,v)=>V((T|0)-(v|0))|0,mul:(T,v)=>V((T|0)*(v|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},w=kX(D,{dit:!1,...R}),N=kX(D,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return w(T)},decode:(T)=>{N(T);for(let v=0;v<T.length;v++)T[v]=V(Q*T[v]);return T}},bitsCoder:(T,v)=>{let y=mX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let m=0,k=0,l=0,_=0;m<F.length;m++){k|=(v.encode(F[m])&y)<<l,l+=T;for(;l>=8;l-=8,k>>=8)x[_++]=k&mX(l)}return x},decode:(F)=>{let x=q(J);for(let m=0,k=0,l=0,_=0;m<F.length;m++){k|=F[m]<<l,l+=8;for(;l>=T;l-=T,k>>=T)x[_++]=v.decode(k&y)}return x}}}}},v6=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),v$(Y,G)}}},Z5=v6(H5);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var J0=256,Pq=3329,b6=3303,k6=17,{mod:sG,nttZetas:m6,NTT:mJ,bitsCoder:y6}=A5({N:J0,Q:Pq,F:b6,ROOT_OF_UNITY:k6,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),yX={512:{N:J0,Q:Pq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:J0,Q:Pq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:J0,Q:Pq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},f6=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+Pq/2)/Pq,decode:(J)=>J*Pq+q>>>$}},oG=($)=>y6($,f6($));function yJ($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]+q[J])}function x6($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]-q[J])}function h6($,q,J,G,Q){let Y=sG(q*G*Q+$*J),X=sG($*G+q*J);return{c0:Y,c1:X}}function ZY($,q){for(let J=0;J<J0/2;J++){let G=m6[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=h6($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function B5($){let q=new Uint16Array(J0);for(let J=0;J<J0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<J0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<Pq)q[J++]=Y;if(J<J0&&X<Pq)q[J++]=X}}return q}function aG($,q,J,G){let Q=$(G*J0/4,q,J),Y=new Uint16Array(J0),X=XY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let D=X[V];for(let R=0;R<32;R++)if(M+=D&1,D>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=sG(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var u6=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=oG(1),M=oG(V),z=oG(U),D=kJ("publicKey",AY(oG(12),q),32),R=AY(oG(12),q),w=kJ("ciphertext",AY(z,q),M),N=kJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:D.bytesLen,cipherText:w.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let Z=new Uint8Array(33);Z.set(j),Z[32]=q;let T=Q(Z),[v,y]=N.decode(T),u=[],F=[];for(let k=0;k<q;k++)u.push(mJ.encode(aG(J,y,k,Y)));let x=G(v);for(let k=0;k<q;k++){let l=mJ.encode(aG(J,y,q+k,Y));for(let _=0;_<q;_++){let E=B5(x.get(_,k));yJ(l,ZY(E,u[_]))}F.push(l)}x.clean();let m={publicKey:D.encode([F,v]),secretKey:R.encode(u)};return v$(v,y,u,F,Z,T),m},encrypt:(j,Z,T)=>{let[v,y]=D.decode(j),u=[];for(let _=0;_<q;_++)u.push(mJ.encode(aG(J,T,_,Y)));let F=G(y),x=new Uint16Array(J0),m=[];for(let _=0;_<q;_++){let E=aG(J,T,q+_,X),I=new Uint16Array(J0);for(let A=0;A<q;A++){let S=B5(F.get(_,A));yJ(I,ZY(S,u[A]))}yJ(E,mJ.decode(I)),m.push(E),yJ(x,ZY(v[_],u[_])),v$(I)}F.clean();let k=aG(J,T,2*q,X);yJ(k,mJ.decode(x));let l=W.decode(Z);return yJ(l,k),v$(v,u,x,k),w.encode([m,l])},decrypt:(j,Z)=>{let[T,v]=w.decode(j),y=R.decode(Z),u=new Uint16Array(J0);for(let F=0;F<q;F++)yJ(u,ZY(y[F],mJ.encode(T[F])));return x6(v,mJ.decode(u)),v$(u,y,T),W.encode(v)}}};function fX($){let q=u6($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=kJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Qq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:D}=q.keygen(M.subarray(0,32)),R=J(z),w=U.encode([D,z,R,M.subarray(32)]);return v$(D,R),{publicKey:z,secretKey:w}},getPublicKey:(M)=>{let[z,D,R,w]=U.decode(M);return Uint8Array.from(D)},encapsulate:(M,z=Qq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let D=M.subarray(0,384*$.K),R=Y.encode(Y.decode(j5(D)));if(!jY(R,D))throw v$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");v$(R);let w=G.create().update(z).update(J(M)).digest(),N=q.encrypt(M,z,w.subarray(32,64));return v$(w.subarray(32)),{cipherText:N,sharedSecret:w.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let D=U.bytesLen-96,R=D+32,w=J(z.subarray(D/2,R));if(!jY(w,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[N,j,Z,T]=U.decode(z),v=q.decrypt(M,N),y=G.create().update(v).update(Z).digest(),u=y.subarray(0,32),F=q.encrypt(j,v,y.subarray(32,64)),x=jY(M,F),m=Q.create({dkLen:32}).update(T).update(M).digest();return v$(v,F,!x?u:m),x?u:m}}}function p6($,q,J){return Gq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var xX={HASH256:bJ,HASH512:D5,KDF:Gq,XOF:Z5,PRF:p6},s3=fX({...xX,...yX[512]}),tG=fX({...xX,...yX[768]}),S5=fX({...xX,...yX[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function l6($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Qq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?aq(X):oq(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function hX($,q=!1){let J=l6($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Qq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return v$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function eG($,q){return kJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function uX($){return(q,J)=>$(q,{dkLen:J})}function r6($,q,...J){let G=eG(J,"seed"),Q=eG(J,"publicKey");if($===void 0)$=G.bytesLen;y$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,D)=>z.keygen(U[D])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Qq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return v$(U),v$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function BY($,q,J,G,...Q){let Y=r6($,J,...Q),X=eG(Q,"cipherText"),U=eG(Q,"publicKey"),V=eG(Q,"msg");if(q===void 0)q=V.bytesLen;return y$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Qq(V.bytesLen)){let z=U.decode(W),D=V.decode(M),R=Q.map((Z,T)=>Z.encapsulate(z[T],D[T])),w=R.map((Z)=>Z.sharedSecret),N=R.map((Z)=>Z.cipherText),j={sharedSecret:G(z,N,w),cipherText:X.encode(N)};return v$(w,N),j},decapsulate(W,M){let z=X.decode(W),{publicKey:D,secretKey:R}=Y.expandDecapsulationKey(M),w=Q.map((N,j)=>N.decapsulate(z[j],R[j]));return G(D,z,w)}}}function T5($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,uX(G),(Y,X,U)=>Q(L$(U[0],U[1],X[1],Y[1],sq($))),q,J)}var VF=T5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",tG,hX(gX,!0),Gq,bJ),WF=T5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",S5,hX(J5,!0),Gq,bJ);function i6($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,uX(G),(Y,X,U)=>{let V=L$(U[0],U[1],X[0],Y[0],X[1],Y[1],sq($)),W=32,M=L$(sq("hybrid_prk"),V),z=Q5(Q,M),D=L$(T8(32,2),sq("shared_secret"),sq("")),R=Y5(Q,z,D,32);return v$(z,D,M,V),R},q,J)}var I5=hX(q5),MF=i6("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",tG,I5,Gq,wY),d6=(()=>BY(32,32,uX(Gq),($,q,J)=>bJ(L$(J[0],J[1],q[1],$[1],sq("\\.//^\\"))),tG,I5))();function c6($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Qq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Qq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return v$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function n6($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=c6(J,Q,Y,G),U=64,V=U+G;return BY(32,32,(W)=>{Q$(W,32);let M=Gq(W,{dkLen:V}),z=M.subarray(0,U),D=M.subarray(U,V);return L$(z,D)},(W,M,z)=>bJ(L$(z[0],z[1],M[1],W[1],sq($))),q,X)}var o6=(()=>n6("MLKEM768-P256",tG,gX,128))();var pX=d6,E5=o6;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>x$($,q,J),rX=C$,L8=cQ,d$=(...$)=>i9(...$),F8=($)=>CG($),g8=p9,_8=($)=>Nq($),TY=BigInt(0),lX=BigInt(1);function Lq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function IY($){if(typeof $==="bigint"){if(!SY($))throw RangeError("positive bigint expected, got "+$)}else rX($);return $}function Yq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function $Q($){let q=IY($).toString(16);return q.length&1?"0"+q:q}function C5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?TY:BigInt("0x"+$)}function fJ($){return C5(cQ($))}function l0($){return C5(cQ(JJ(x$($)).reverse()))}function EY($,q){if(C$(q),q===0)throw RangeError("zero length");$=IY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return CG(J.padStart(q*2,"0"))}function qQ($,q){return EY($,q).reverse()}function P5($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function JJ($){return Uint8Array.from(Z$($))}function CY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var SY=($)=>typeof $==="bigint"&&TY<=$;function a6($,q,J){return SY($)&&SY(q)&&SY(J)&&q<=$&&$<J}function Fq($,q,J,G){if(!a6(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function v8($){if($<TY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>TY;$>>=lX,q+=1);return q}var JQ=($)=>(lX<<BigInt($))-lX;function L5($,q,J){if(C$($,"hashLen"),C$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,d$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},w=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return d$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while((T=Z(w()))===void 0)R();return z(),T}}function b0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var iX=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c$=BigInt(0),I$=BigInt(1),xJ=BigInt(2),v5=BigInt(3),b5=BigInt(4),k5=BigInt(5),s6=BigInt(7),m5=BigInt(8),t6=BigInt(9),y5=BigInt(16);function B$($,q){if(q<=c$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=c$?J:q+J}function k0($,q,J){if(q<c$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >c$)G*=G,G%=J;return G}function F5($,q){if($===c$)throw Error("invert: expected non-zero number");if(q<=c$)throw Error("invert: expected positive modulus, got "+q);let J=B$($,q),G=q,Q=c$,Y=I$,X=I$,U=c$;while(J!==c$){let W=G/J,M=G-J*W,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==I$)throw Error("invert: does not exist");return B$(Q,q)}function dX($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function f5($,q){let J=$,G=(J.ORDER+I$)/b5,Q=J.pow(q,G);return dX(J,Q,q),Q}function e6($,q){let J=$,G=(J.ORDER-k5)/m5,Q=J.mul(q,xJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,xJ),Y),V=J.mul(X,J.sub(U,J.ONE));return dX(J,V,q),V}function $w($){let q=PY($),J=x5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+s6)/y5;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),D=W.mul(M,Q),R=W.mul(M,Y),w=W.eql(W.sqr(z),V),N=W.eql(W.sqr(D),V);M=W.cmov(M,z,w),z=W.cmov(R,D,N);let j=W.eql(W.sqr(z),V),Z=W.cmov(M,z,j);return dX(W,Z,V),Z}}function x5($){if($<v5)throw Error("sqrt is not defined for small field");let q=$-I$,J=0;while(q%xJ===c$)q/=xJ,J++;let G=xJ,Q=PY($);while(g5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return f5;let Y=Q.pow(G,q),X=(q+I$)/xJ;return function(V,W){let M=V;if(M.is0(W))return W;if(g5(M,W)!==1)throw Error("Cannot find square root");let z=J,D=M.mul(M.ONE,Y),R=M.pow(W,q),w=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let N=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(N++,j=M.sqr(j),N===z)throw Error("Cannot find square root");let Z=I$<<BigInt(z-N-1),T=M.pow(D,Z);z=N,D=M.sqr(T),R=M.mul(R,D),w=M.mul(w,T)}return w}}function qw($){if($%b5===v5)return f5;if($%m5===k5)return e6;if($%y5===t6)return $w($);return x5($)}var gq=($,q)=>(B$($,q)&I$)===I$,Jw=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function cX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=Jw.reduce((G,Q)=>{return G[Q]="function",G},q);if(b0($,J),Yq($.BYTES,"BYTES"),Yq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function Gw($,q,J){let G=$;if(J<c$)throw Error("invalid exponent, negatives unsupported");if(J===c$)return G.ONE;if(J===I$)return q;let Q=G.ONE,Y=q;while(J>c$){if(J&I$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=I$}return Q}function GQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function g5($,q){let J=$,G=(J.ORDER-I$)/xJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function Qw($,q){if(q!==void 0)rX(q);if($<=c$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=v8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var _5=new WeakMap;class nX{ORDER;BITS;BYTES;isLE;ZERO=c$;ONE=I$;_lengths;_mod;constructor($,q={}){if($<=I$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=Qw($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return c$<=$&&$<this.ORDER}is0($){return $===c$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I$)===I$}neg($){return B$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return B$($*$,this.ORDER)}add($,q){return B$($+q,this.ORDER)}sub($,q){return B$($-q,this.ORDER)}mul($,q){return B$($*q,this.ORDER)}pow($,q){return Gw(this,$,q)}div($,q){return B$($*F5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return F5($,this.ORDER)}sqrt($){let q=_5.get(this);if(!q)_5.set(this,q=qw(this.ORDER));return q(this,$)}toBytes($){return this.isLE?qQ($,this.BYTES):EY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?l0($):fJ($);if(X)U=B$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return GQ(this,$)}cmov($,q,J){return Lq(J,"condition"),J?q:$}}Object.freeze(nX.prototype);function PY($,q={}){return new nX($,q)}function h5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I$)throw Error("field order must be greater than 1");let q=v8($-I$);return Math.ceil(q/8)}function oX($){let q=h5($);return q+Math.ceil(q/2)}function u5($,q,J=!1){Z$($);let G=$.length,Q=h5(q),Y=Math.max(oX(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?l0($):fJ($),U=B$(X,q-I$)+I$;return J?qQ(U,Q):EY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b8=BigInt(0),hJ=BigInt(1);function QQ($,q){let J=q.negate();return $?J:q}function uJ($,q){let J=GQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function i5($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function aX($,q){i5($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=JQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function p5($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=hJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var sX=new WeakMap,d5=new WeakMap;function tX($){return d5.get($)||1}function l5($){if($!==b8)throw Error("invalid wNAF")}class YQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>b8){if(q&hJ)J=J.add(G);G=G.double(),q>>=hJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=aX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=aX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=p5(J,X,Y);if(J=U,W)Q=Q.add(QQ(z,q[D]));else G=G.add(QQ(M,q[V]))}return l5(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=aX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===b8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=p5(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return l5(J),G}getPrecomputes($,q,J){let G=sX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);sX.set(q,G)}}return G}cached($,q,J){let G=tX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=tX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){i5(q,this.bits),d5.set($,q),sX.delete($)}hasCache($){return tX($)!==1}}function c5($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>b8||G>b8){if(J&hJ)Y=Y.add(Q);if(G&hJ)X=X.add(Q);Q=Q.double(),J>>=hJ,G>>=hJ}return{p1:Y,p2:X}}function r5($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return cX(q),q}else return PY($,{isLE:J})}function LY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>b8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=r5(q.p,J.Fp,G),Y=r5(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function XQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function UQ($,q){if(Yq($),Yq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function Yw($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function Xw($){if(!g8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?CY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function eX($,q,J,G){if(Z$($),Yq(J),q=Xw(q),q.length>255)q=G(d$(CY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=d$(q,UQ(q.length,1)),V=new Uint8Array(Y),W=UQ(J,2),M=Array(X),z=G(d$(V,$,W,UQ(0,1),U));M[0]=G(d$(z,UQ(1,1),U));for(let R=1;R<X;R++){let w=[Yw(z,M[R-1]),UQ(R+1,1),U];M[R]=G(d$(...w))}return d$(...M).slice(0,J)}var n5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o5=($,q)=>($+($>=0?q:-q)/s5)/q;function Uw($,q,J){Fq("scalar",$,Xq,J);let[[G,Q],[Y,X]]=q,U=o5(X*$,J),V=o5(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Xq,D=M<Xq;if(z)W=-W;if(D)M=-M;let R=JQ(Math.ceil(v8(J)/2))+GJ;if(W<Xq||W>=R||M<Xq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:D,k2:M}}function qU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function $U($,q){b0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(Lq(J.lowS,"lowS"),Lq(J.prehash,"prehash"),J.format!==void 0)qU(J.format);return J}class a5 extends Error{constructor($=""){super($)}}var r0={Err:a5,_tlv:{encode:($,q)=>{let{Err:J}=r0;if(Yq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=$Q(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?$Q(Q.length/2|128):"";return $Q($)+Y+Q+q},decode($,q){let{Err:J}=r0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=r0;if(IY($),$<Xq)throw new q("integer: negative integers are not allowed");let J=$Q($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=r0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return fJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=r0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=r0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(r0._tlv);Object.freeze(r0._int);Object.freeze(r0);var Xq=BigInt(0),GJ=BigInt(1),s5=BigInt(2),FY=BigInt(3),Vw=BigInt(4);function t5($,q={}){let J=LY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;b0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=$M(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(_,E,I){if(W&&E.is0())return Uint8Array.of(0);let{x:A,y:S}=E.toAffine(),P=G.toBytes(A);if(Lq(I,"isCompressed"),I){z();let g=!G.isOdd(S);return d$(e5(g),P)}else return d$(Uint8Array.of(4),P,G.toBytes(S))}function R(_){Z$(_,void 0,"Point");let{publicKey:E,publicKeyUncompressed:I}=M,A=_.length,S=_[0],P=_.subarray(1);if(W&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===E&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(r){let B=r instanceof Error?": "+r.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===I&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${E} or uncompressed=${I}`)}let w=q.toBytes===void 0?D:q.toBytes,N=q.fromBytes===void 0?R:q.fromBytes;function j(_){let E=G.sqr(_),I=G.mul(E,_);return G.add(G.add(I,G.mul(_,Y.a)),Y.b)}function Z(_,E){let I=G.sqr(E),A=j(_);return G.eql(I,A)}if(!Z(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,FY),Vw),v=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,v)))throw Error("bad curve params: a or b");function y(_,E,I=!1){if(!G.isValid(E)||I&&G.is0(E))throw Error(`bad point coordinate ${_}`);return E}function u(_){if(!(_ instanceof m))throw Error("Weierstrass Point expected")}function F(_){if(!V||!V.basises)throw Error("no endo");return Uw(_,V.basises,Q.ORDER)}function x(_,E,I,A,S){return I=new m(G.mul(I.X,_),I.Y,I.Z),E=QQ(A,E),I=QQ(S,I),E.add(I)}class m{static BASE=new m(Y.Gx,Y.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(_,E,I){this.X=y("x",_),this.Y=y("y",E,!0),this.Z=y("z",I),Object.freeze(this)}static CURVE(){return Y}static fromAffine(_){let{x:E,y:I}=_||{};if(!_||!G.isValid(E)||!G.isValid(I))throw Error("invalid affine point");if(_ instanceof m)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(I))return m.ZERO;return new m(E,I,G.ONE)}static fromBytes(_){let E=m.fromAffine(N(Z$(_,void 0,"point")));return E.assertValidity(),E}static fromHex(_){return m.fromBytes(F8(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,E=!0){if(l.createCache(this,_),!E)this.multiply(FY);return this}assertValidity(){let _=this;if(_.is0()){if(q.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:E,y:I}=_.toAffine();if(!G.isValid(E)||!G.isValid(I))throw Error("bad point: x or y not field elements");if(!Z(E,I))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.eql(G.mul(E,g),G.mul(S,A)),b=G.eql(G.mul(I,g),G.mul(P,A));return L&&b}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:E}=Y,I=G.mul(E,FY),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),f=G.mul(S,S),r=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(_,b),L=G.mul(I,r),L=G.add(g,L),g=G.sub(f,L),L=G.add(f,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(I,b),r=G.mul(_,r),B=G.sub(O,r),B=G.mul(_,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,r),O=G.mul(O,B),L=G.add(L,O),r=G.mul(S,P),r=G.add(r,r),O=G.mul(r,B),g=G.sub(g,O),b=G.mul(r,f),b=G.add(b,b),b=G.add(b,b),new m(g,L,b)}add(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=Y.a,r=G.mul(Y.b,FY),B=G.mul(E,S),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.add(E,I),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,o),Y$=G.sub(Y$,G$),G$=G.add(E,A);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(I,A),L=G.add(P,g),t=G.mul(t,L),L=G.add(o,q$),t=G.sub(t,L),O=G.mul(f,G$),L=G.mul(r,q$),O=G.add(L,O),L=G.sub(o,O),O=G.add(o,O),b=G.mul(L,O),o=G.add(B,B),o=G.add(o,B),q$=G.mul(f,q$),G$=G.mul(r,G$),o=G.add(o,q$),q$=G.sub(B,q$),q$=G.mul(f,q$),G$=G.add(G$,q$),B=G.mul(o,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,o),O=G.mul(t,O),O=G.add(O,B),new m(L,b,O)}subtract(_){return u(_),this.add(_.negate())}is0(){return this.equals(m.ZERO)}multiply(_){let{endo:E}=q;if(!Q.isValidNot0(_))throw RangeError("invalid scalar: out of range");let I,A,S=(P)=>l.cached(this,P,(g)=>uJ(m,g));if(E){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(_),{p:O,f}=S(g),{p:r,f:B}=S(b);A=f.add(B),I=x(E.beta,O,r,P,L)}else{let{p:P,f:g}=S(_);I=P,A=g}return uJ(m,[I,A])[0]}multiplyUnsafe(_){let{endo:E}=q,I=this,A=_;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Xq||I.is0())return m.ZERO;if(A===GJ)return I;if(l.hasCache(this))return this.multiply(A);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=c5(m,I,P,L);return x(E.beta,b,O,S,g)}else return l.unsafe(I,A)}toAffine(_){let E=this,I=_,{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:_}=q;if(X===GJ)return!0;if(_)return _(m,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:_}=q;if(X===GJ)return this;if(_)return _(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===GJ)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return Lq(_,"isCompressed"),this.assertValidity(),w(m,this,_)}toHex(_=!0){return L8(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let k=Q.BITS,l=new YQ(m,q.endo?Math.ceil(k/2):k);if(k>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}function e5($){return Uint8Array.of($?2:3)}function $M($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function Ww($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?_8:q.randomBytes,Q=Object.assign($M($.Fp,J),{seed:Math.max(oX(J.ORDER),16)});function Y(R){try{let w=J.fromBytes(R);return J.isValidNot0(w)}catch(w){return!1}}function X(R,w){let{publicKey:N,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(w===!0&&Z!==N)return!1;if(w===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,u5(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,w=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(w)}function W(R){let{secretKey:w,publicKey:N,publicKeyUncompressed:j}=Q,Z=J._lengths;if(!g8(R))return;let T=Z$(R,void 0,"key").length,v=T===N||T===j,y=T===w||!!Z?.includes(T);if(v&&y)return;return v}function M(R,w,N=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(w)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(w).multiply(j).toBytes(N)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=XQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function qM($,q,J={}){let G=q;wq(G),b0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?_8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>jq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:w}=Ww($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*s5+GJ<X.ORDER;function Z(S){let P=V>>GJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function v(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function y(S,P){qU(P);let g=w.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(v(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=N.format){y(S,P);let g;if(P==="der"){let{r:f,s:r}=r0.toSig(Z$(S));return new u(f,r)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=w.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(F8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),f=$.fromBytes(d$(e5((L&1)===0),O)),r=U.inv(b),B=x(Z$(S,void 0,"msgHash")),o=U.create(-B*r),q$=U.create(g*r),Y$=$.BASE.multiplyUnsafe(o).add(f.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return Z(this.s)}toBytes(S=N.format){if(qU(S),S==="der")return F8(r0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return v(),d$(Uint8Array.of(this.assertRecovery()),L,b);return d$(L,b)}toHex(S){return L8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=fJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,m=JQ(W);function k(S){return Fq("num < 2^"+W,S,Xq,m),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function _(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=$U(g,N);S=l(S,b);let f=x(S),r=U.fromBytes(P);if(!U.isValidNot0(r))throw Error("invalid private key");let B=[k(r),k(f)];if(O!=null&&O!==!1){let G$=O===!0?Q(w.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let o=d$(...B),q$=f;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let O$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),T$=U.create(A$.x);if(T$===Xq)return;let m$=U.create(O$*U.create(q$+T$*r));if(m$===Xq)return;let M0=(A$.x===T$?0:2)|Number(A$.y&GJ),e0=m$;if(L&&Z(m$))e0=U.neg(m$),M0^=1;return new u(T$,e0,j?void 0:M0)}return{seed:o,k2sig:Y$}}function E(S,P,g={}){let{seed:L,k2sig:b}=_(S,P,g);return L5(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function I(S,P,g,L={}){let{lowS:b,prehash:O,format:f}=$U(L,N);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!g8(S)){let r=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+r)}y(S,f);try{let r=u.fromBytes(S,f),B=$.fromBytes(g);if(b&&r.hasHighS())return!1;let{r:o,s:q$}=r,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),O$=U.create(o*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===o}catch(r){return!1}}function A(S,P,g={}){let{prehash:L}=$U(g,N);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:w,Point:$,sign:E,verify:I,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mw=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var zw=t5(Mw),k8=qM(zw,p$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QJ=BigInt(0),A0=BigInt(1),JU=BigInt(2),Rw=BigInt(8);function Dw($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function JM($,q={}){let J=q,G=LY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;b0(J,{},{uvRatio:"function"});let V=JU<<BigInt(Y.BYTES*8)-A0,W=(N)=>Q.create(N),M=J.uvRatio===void 0?(N,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(N,j))}}catch(Z){return{isValid:!1,value:QJ}}}:J.uvRatio;if(!Dw(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(N,j,Z=!1){let T=Z?A0:QJ;return Fq("coordinate "+N,j,T,V),j}function D(N){if(!(N instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,A0,W(X.Gx*X.Gy));static ZERO=new R(QJ,A0,A0,QJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(N,j,Z,T){this.X=z("x",N),this.Y=z("y",j),this.Z=z("z",Z,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(N){if(N instanceof R)throw Error("extended point not allowed");let{x:j,y:Z}=N||{};return z("x",j),z("y",Z),new R(j,Z,A0,W(j*Z))}static fromBytes(N,j=!1){let Z=Q.BYTES,{a:T,d:v}=X;N=JJ(Z$(N,Z,"point")),Lq(j,"zip215");let y=JJ(N),u=N[Z-1];y[Z-1]=u&-129;let F=l0(y),x=j?V:Q.ORDER;Fq("point.y",F,QJ,x);let m=W(F*F),k=W(m-A0),l=W(v*m-T),{isValid:_,value:E}=M(k,l);if(!_)throw Error("bad point: invalid y coordinate");let I=(E&A0)===A0,A=(u&128)!==0;if(!j&&E===QJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==I)E=W(-E);return R.fromAffine({x:E,y:F})}static fromHex(N,j=!1){return R.fromBytes(F8(N),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,j=!0){if(w.createCache(this,N),!j)this.multiply(JU);return this}assertValidity(){let N=this,{a:j,d:Z}=X;if(N.is0())throw Error("bad point: ZERO");let{X:T,Y:v,Z:y,T:u}=N,F=W(T*T),x=W(v*v),m=W(y*y),k=W(m*m),l=W(F*j),_=W(m*W(l+x)),E=W(k+W(Z*W(F*x)));if(_!==E)throw Error("bad point: equation left != right (1)");let I=W(T*v),A=W(y*u);if(I!==A)throw Error("bad point: equation left != right (2)")}equals(N){D(N);let{X:j,Y:Z,Z:T}=this,{X:v,Y:y,Z:u}=N,F=W(j*u),x=W(v*T),m=W(Z*u),k=W(y*T);return F===x&&m===k}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:N}=X,{X:j,Y:Z,Z:T}=this,v=W(j*j),y=W(Z*Z),u=W(JU*W(T*T)),F=W(N*v),x=j+Z,m=W(W(x*x)-v-y),k=F+y,l=k-u,_=F-y,E=W(m*l),I=W(k*_),A=W(m*_),S=W(l*k);return new R(E,I,S,A)}add(N){D(N);let{a:j,d:Z}=X,{X:T,Y:v,Z:y,T:u}=this,{X:F,Y:x,Z:m,T:k}=N,l=W(T*F),_=W(v*x),E=W(u*Z*k),I=W(y*m),A=W((T+v)*(F+x)-l-_),S=I-E,P=I+E,g=W(_-j*l),L=W(A*S),b=W(P*g),O=W(A*g),f=W(S*P);return new R(L,b,f,O)}subtract(N){return D(N),this.add(N.negate())}multiply(N){if(!Y.isValidNot0(N))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:Z}=w.cached(this,N,(T)=>uJ(R,T));return uJ(R,[j,Z])[0]}multiplyUnsafe(N){if(!Y.isValid(N))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(N===QJ)return R.ZERO;if(this.is0()||N===A0)return this;return w.unsafe(this,N,(j)=>uJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return w.unsafe(this,X.n).is0()}toAffine(N){let j=this,Z=N,{X:T,Y:v,Z:y}=j,u=j.is0();if(Z==null)Z=u?Rw:Q.inv(y);let F=W(T*Z),x=W(v*Z),m=Q.mul(y,Z);if(u)return{x:QJ,y:A0};if(m!==A0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===A0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:N,y:j}=this.toAffine(),Z=Q.toBytes(j);return Z[Z.length-1]|=N&A0?128:0,Z}toHex(){return L8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let w=new YQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class GU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){iX()}static fromHex($){iX()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return L8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VQ=BigInt(0),m8=BigInt(1),gY=BigInt(2);function Kw($){return b0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function GM($){let q=Kw($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?_8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?gY**BigInt(254):gY**BigInt(447),w=U?BigInt(8)*gY**BigInt(251)-m8:BigInt(4)*gY**BigInt(445)-m8,N=R+w+m8,j=(A)=>B$(A,J),Z=T(z);function T(A){return qQ(j(A),M)}function v(A){let S=JJ(Z$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(l0(S))}function y(A){return l0(Q(JJ(Z$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),y(A));if(P===VQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,m=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){Fq("u",A,VQ,J),Fq("scalar",S,R,N);let P=S,g=A,L=m8,b=VQ,O=A,f=m8,r=VQ;for(let o=BigInt(W-1);o>=VQ;o--){let q$=P>>o&m8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,T$=O+f,m$=O-f,M0=j(m$*Y$),e0=j(T$*t),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A)=>{return A=A===void 0?V(M):A,Z$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze(_),Object.freeze(I),Object.freeze({keygen:XQ(E,x),getSharedSecret:m,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Hw=BigInt(0),_q=BigInt(1),QM=BigInt(2),Ow=BigInt(3),ww=BigInt(5),Nw=BigInt(8),lJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),UU=(()=>({p:lJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:Nw,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function UM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=lJ,U=$*$%Y*$%Y,V=k0(U,QM,Y)*U%Y,W=k0(V,_q,Y)*$%Y,M=k0(W,ww,Y)*W%Y,z=k0(M,q,Y)*M%Y,D=k0(z,J,Y)*z%Y,R=k0(D,G,Y)*D%Y,w=k0(R,Q,Y)*R%Y,N=k0(w,Q,Y)*R%Y,j=k0(N,q,Y)*M%Y;return{pow_p_5_8:k0(j,QM,Y)*$%Y,b2:U}}function jw($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var QU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function VU($,q){let J=lJ,G=B$(q*q*q,J),Q=B$(G*G*q,J),Y=UM($*Q).pow_p_5_8,X=B$($*G*Y,J),U=B$(q*X*X,J),V=X,W=B$(X*QU,J),M=U===$,z=U===B$(-$,J),D=U===B$(-$*QU,J);if(M)X=V;if(z||D)X=W;if(gq(X,J))X=B$(-X,J);return{isValid:M||z,value:X}}var pJ=JM(UU,{uvRatio:VU}),YJ=(()=>pJ.Fp)(),VM=(()=>pJ.Fn)();var _Y=(()=>{let $=lJ;return GM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=UM(q);return B$(k0(J,Ow,$)*G,$)},adjustScalarBytes:jw})})();var YU=QU,Aw=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Zw=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),Bw=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Sw=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),YM=($)=>VU(_q,$),Tw=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),XU=($)=>YJ.create(l0($)&Tw);function XM($){let{d:q}=UU,J=lJ,G=(Z)=>YJ.create(Z),Q=G(YU*$*$),Y=G((Q+_q)*Bw),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=VU(Y,U),M=G(W*$);if(!gq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-_q)*Sw-U),D=W*W,R=G((W+W)*U),w=G(z*Aw),N=G(_q-D),j=G(_q+D);return new pJ(G(R*j),G(N*w),G(w*j),G(R*N))}class K0 extends GU{static BASE=(()=>new K0(pJ.BASE))();static ZERO=(()=>new K0(pJ.ZERO))();static Fp=(()=>YJ)();static Fn=(()=>VM)();constructor($){super($)}static fromAffine($){return new K0(pJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){x$($,32);let{a:q,d:J}=UU,G=lJ,Q=(v)=>YJ.create(v),Y=XU($);if(!P5(YJ.toBytes(Y),$)||gq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(_q+q*X),V=Q(_q-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:D,value:R}=YM(Q(z*M)),w=Q(R*V),N=Q(R*w*z),j=Q((Y+Y)*w);if(gq(j,G))j=Q(-j);let Z=Q(U*N),T=Q(j*Z);if(!D||gq(T,G)||Z===Hw)throw Error("invalid ristretto255 encoding 2");return new K0(new pJ(j,Z,_q,T))}static fromHex($){return K0.fromBytes(CG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=lJ,Y=(N)=>YJ.create(N),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=YM(Y(X*V)),M=Y(W*X),z=Y(W*U),D=Y(M*z*G),R;if(gq(G*D,Q)){let N=Y(q*YU),j=Y($*YU);$=N,q=j,R=Y(M*Zw)}else R=z;if(gq($*D,Q))q=Y(-q);let w=Y((J-q)*R);if(gq(w,Q))w=Y(-w);return YJ.toBytes(w)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>YJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var Iw=Object.freeze({Point:K0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=eX($,J,64,sQ);return Iw.deriveToCurve(G)},hashToScalar($,q={DST:n5}){let J=eX($,q.DST,64,sQ);return VM.create(l0(J))},deriveToCurve($){x$($,64);let q=XU($.subarray(0,32)),J=XM(q),G=XU($.subarray(32,64)),Q=XM(G);return new K0(J.add(Q))}});var WM=!1,Ew=!1;async function MM($,q){if(Ew)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function MU($,q){return await MM(async()=>{let J=WU($)?$:await Pw($),G=await crypto.subtle.importKey("raw",Lw(q),{name:"X25519"},WM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(WU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMult($,q)})}async function zU($){return await MM(async()=>{return MU($,_Y.GuBytes)},()=>{if(WU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMultBase($)})}var Cw=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function Pw($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...Cw,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},WM,["deriveBits"])}function WU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function Lw($){return $}class zM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),gw(WQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=WQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:WQ(this.transcript)}}}function gw($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function WQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function vY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function RM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function DM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class vq{args;body;constructor($,q){this.args=$,this.body=q}}function RU($){let q=[];q.push(`age-encryption.org/v1
|
|
57
|
+
`).map((q)=>q.trim()).join(" ")};ID.O=function($){return this.inspectOpts.colors=this.useColors,U9.inspect($,this.inspectOpts)}});var LD=X$((fy,KV)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)KV.exports=jD();else KV.exports=PD()});var CK=X$((Ru,EK)=>{var N9=Object.prototype.hasOwnProperty,IK=Object.prototype.toString,jK=Object.defineProperty,AK=Object.getOwnPropertyDescriptor,ZK=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return IK.call(q)==="[object Array]"},BK=function(q){if(!q||IK.call(q)!=="[object Object]")return!1;var J=N9.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&N9.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||N9.call(q,Q)},SK=function(q,J){if(jK&&J.name==="__proto__")jK(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},TK=function(q,J){if(J==="__proto__"){if(!N9.call(q,J))return;else if(AK)return AK(q,J).value}return q[J]};EK.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=TK(U,J),Q=TK(q,J),U!==Q){if(M&&Q&&(BK(Q)||(Y=ZK(Q)))){if(Y)Y=!1,X=G&&ZK(G)?G:[];else X=G&&BK(G)?G:{};SK(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")SK(U,{name:J,newValue:Q})}}return U}});import{parseArgs as XO}from"util";var UO={help:{type:"boolean",short:"h"},version:{type:"boolean",short:"v"},"dry-run":{type:"boolean"},"push-to":{type:"string"},cohort:{type:"string"},"anchor-id":{type:"string"}};function h9($,q){let J=$[q];return typeof J==="boolean"?J:void 0}function u9($,q){let J=$[q];return typeof J==="string"?J:void 0}function wW($){let{values:q,positionals:J}=XO({args:$,options:UO,allowPositionals:!0});if(q.help)return{command:"help",args:[],flags:{help:!0}};if(q.version)return{command:"version",args:[],flags:{version:!0}};return{command:J[0]??"help",args:J.slice(1),flags:{help:h9(q,"help"),version:h9(q,"version"),dryRun:h9(q,"dry-run"),pushTo:u9(q,"push-to"),cohort:u9(q,"cohort"),anchorId:u9(q,"anchor-id")}}}var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.82",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};import{existsSync as lw,mkdirSync as rw,readFileSync as TU,writeFileSync as IU}from"fs";import{dirname as iw,join as jM}from"path";function p9($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function C$($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function x$($,q,J=""){let G=p9($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function wq($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(C$($.outputLen),C$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function w8($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function iQ($,q){x$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function dQ($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function z0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function N8($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function f0($,q){return $<<32-q|$>>>q}function w$($,q){return $<<q|$>>>32-q>>>0}var WO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function MO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function zO($){for(let q=0;q<$.length;q++)$[q]=MO($[q]);return $}var l9=WO?($)=>$:zO,jW=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),RO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function cQ($){if(x$($),jW)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=RO[$[J]];return q}var Oq={_0:48,_9:57,A:65,F:70,a:97,f:102};function NW($){if($>=Oq._0&&$<=Oq._9)return $-Oq._0;if($>=Oq.A&&$<=Oq.F)return $-(Oq.A-10);if($>=Oq.a&&$<=Oq.f)return $-(Oq.a-10);return}function CG($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(jW)try{return Uint8Array.fromHex($)}catch(Q){if(Q instanceof SyntaxError)throw RangeError(Q.message);throw Q}let q=$.length,J=q/2;if(q%2)throw RangeError("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=NW($.charCodeAt(Y)),U=NW($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw RangeError('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function DO($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function r9($,q=""){if(typeof $==="string")return DO($);return x$($,void 0,q)}function i9(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];x$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function nQ($,q){if(q!==void 0&&{}.toString.call(q)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,q)}function d9($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function Nq($=32){C$($,"bytesLength");let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return q.getRandomValues(new Uint8Array($))}var c9=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class n9{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,q){if(wq($),x$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),z0(G)}update($){return w8(this),this.iHash.update($),this}digestInto($){w8(this),iQ($,this),this.finished=!0;let q=$.subarray(0,this.outputLen);this.iHash.digestInto(q),this.oHash.update(q),this.oHash.digestInto(q),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var jq=(()=>{let $=(q,J,G)=>new n9(q,J).update(G).digest();return $.create=(q,J)=>new n9(q,J),$})();function PG($,q,J){if(wq($),J===void 0)J=new Uint8Array($.outputLen);return jq($,J,q)}var o9=Uint8Array.of(0),AW=Uint8Array.of();function a9($,q,J,G=32){wq($),C$(G,"length"),x$(q,void 0,"prk");let Q=$.outputLen;if(q.length<Q)throw Error('"prk" must be at least HashLen octets');if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=AW;else x$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=jq.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)o9[0]=M+1,V.update(M===0?AW:W).update(J).update(o9).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),z0(W,o9),X.slice(0,G)}var LG=($,q,J,G,Q)=>a9($,PG($,q,J),G,Q);function ZW($,q,J){return $&q^~$&J}function BW($,q,J){return $&q^$&J^q&J}class oQ{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=N8(this.buffer)}update($){w8(this),x$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=N8($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){w8(this),iQ($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,z0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=N8($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Aq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Zq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),h$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),u$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var aQ=BigInt(4294967295),SW=BigInt(32);function KO($,q=!1){if(q)return{h:Number($&aQ),l:Number($>>SW&aQ)};return{h:Number($>>SW&aQ)|0,l:Number($&aQ)|0}}function TW($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=KO($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var s9=($,q,J)=>$>>>J,t9=($,q,J)=>$<<32-J|q>>>J,TJ=($,q,J)=>$>>>J|q<<32-J,IJ=($,q,J)=>$<<32-J|q>>>J,FG=($,q,J)=>$<<64-J|q>>>J-32,gG=($,q,J)=>$>>>J-32|q<<64-J;function $q($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var IW=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),EW=($,q,J,G)=>q+J+G+($/4294967296|0)|0,CW=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),PW=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,LW=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),FW=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var OO=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),pq=new Uint32Array(64);class e9 extends oQ{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)pq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=pq[M-15],D=pq[M-2],R=f0(z,7)^f0(z,18)^z>>>3,w=f0(D,17)^f0(D,19)^D>>>10;pq[M]=w+pq[M-7]+R+pq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=f0(X,6)^f0(X,11)^f0(X,25),D=W+z+ZW(X,U,V)+OO[M]+pq[M]|0,w=(f0(J,2)^f0(J,13)^f0(J,22))+BW(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+w|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){z0(pq)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),z0(this.buffer)}}class gW extends e9{A=Aq[0]|0;B=Aq[1]|0;C=Aq[2]|0;D=Aq[3]|0;E=Aq[4]|0;F=Aq[5]|0;G=Aq[6]|0;H=Aq[7]|0;constructor(){super(32)}}class wO extends e9{A=Zq[0]|0;B=Zq[1]|0;C=Zq[2]|0;D=Zq[3]|0;E=Zq[4]|0;F=Zq[5]|0;G=Zq[6]|0;H=Zq[7]|0;constructor(){super(28)}}var _W=(()=>TW(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),NO=(()=>_W[0])(),jO=(()=>_W[1])(),lq=new Uint32Array(80),rq=new Uint32Array(80);class _G extends oQ{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:w,Hl:N}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=w|0,this.Hl=N|0}process($,q){for(let T=0;T<16;T++,q+=4)lq[T]=$.getUint32(q),rq[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=lq[T-15]|0,y=rq[T-15]|0,u=TJ(v,y,1)^TJ(v,y,8)^s9(v,y,7),F=IJ(v,y,1)^IJ(v,y,8)^t9(v,y,7),x=lq[T-2]|0,m=rq[T-2]|0,k=TJ(x,m,19)^FG(x,m,61)^s9(x,m,6),l=IJ(x,m,19)^gG(x,m,61)^t9(x,m,6),_=CW(F,l,rq[T-7],rq[T-16]),E=PW(_,u,k,lq[T-7],lq[T-16]);lq[T]=E|0,rq[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:w,Gl:N,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=TJ(M,z,14)^TJ(M,z,18)^FG(M,z,41),y=IJ(M,z,14)^IJ(M,z,18)^gG(M,z,41),u=M&D^~M&w,F=z&R^~z&N,x=LW(Z,y,F,jO[T],rq[T]),m=FW(x,j,v,u,NO[T],lq[T]),k=x|0,l=TJ(J,G,28)^FG(J,G,34)^FG(J,G,39),_=IJ(J,G,28)^gG(J,G,34)^gG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=w|0,Z=N|0,w=D|0,N=R|0,D=M|0,R=z|0,{h:M,l:z}=$q(V|0,W|0,m|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=IW(k,_,I);J=EW(A,m,l,E),G=A|0}({h:J,l:G}=$q(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=$q(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=$q(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=$q(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=$q(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=$q(this.Fh|0,this.Fl|0,D|0,R|0),{h:w,l:N}=$q(this.Gh|0,this.Gl|0,w|0,N|0),{h:j,l:Z}=$q(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,w,N,j,Z)}roundClean(){z0(lq,rq)}destroy(){this.destroyed=!0,z0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class vW extends _G{Ah=u$[0]|0;Al=u$[1]|0;Bh=u$[2]|0;Bl=u$[3]|0;Ch=u$[4]|0;Cl=u$[5]|0;Dh=u$[6]|0;Dl=u$[7]|0;Eh=u$[8]|0;El=u$[9]|0;Fh=u$[10]|0;Fl=u$[11]|0;Gh=u$[12]|0;Gl=u$[13]|0;Hh=u$[14]|0;Hl=u$[15]|0;constructor(){super(64)}}class AO extends _G{Ah=h$[0]|0;Al=h$[1]|0;Bh=h$[2]|0;Bl=h$[3]|0;Ch=h$[4]|0;Cl=h$[5]|0;Dh=h$[6]|0;Dl=h$[7]|0;Eh=h$[8]|0;El=h$[9]|0;Fh=h$[10]|0;Fl=h$[11]|0;Gh=h$[12]|0;Gl=h$[13]|0;Hh=h$[14]|0;Hl=h$[15]|0;constructor(){super(48)}}var s$=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),t$=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class ZO extends _G{Ah=s$[0]|0;Al=s$[1]|0;Bh=s$[2]|0;Bl=s$[3]|0;Ch=s$[4]|0;Cl=s$[5]|0;Dh=s$[6]|0;Dl=s$[7]|0;Eh=s$[8]|0;El=s$[9]|0;Fh=s$[10]|0;Fl=s$[11]|0;Gh=s$[12]|0;Gl=s$[13]|0;Hh=s$[14]|0;Hl=s$[15]|0;constructor(){super(28)}}class BO extends _G{Ah=t$[0]|0;Al=t$[1]|0;Bh=t$[2]|0;Bl=t$[3]|0;Ch=t$[4]|0;Cl=t$[5]|0;Dh=t$[6]|0;Dl=t$[7]|0;Eh=t$[8]|0;El=t$[9]|0;Fh=t$[10]|0;Fl=t$[11]|0;Gh=t$[12]|0;Gl=t$[13]|0;Hh=t$[14]|0;Hl=t$[15]|0;constructor(){super(32)}}var p$=d9(()=>new gW,c9(1));var sQ=d9(()=>new vW,c9(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function JY($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function JX($){if(!JY($))throw Error("Uint8Array expected")}function fW($,q){if(!Array.isArray(q))return!1;if(q.length===0)return!0;if($)return q.every((J)=>typeof J==="string");else return q.every((J)=>Number.isSafeInteger(J))}function xW($){if(typeof $!=="function")throw Error("function expected");return!0}function iq($,q){if(typeof q!=="string")throw Error(`${$}: string expected`);return!0}function bG($){if(!Number.isSafeInteger($))throw Error(`invalid integer: ${$}`)}function eQ($){if(!Array.isArray($))throw Error("array expected")}function $Y($,q){if(!fW(!0,q))throw Error(`${$}: array of strings expected`)}function GX($,q){if(!fW(!1,q))throw Error(`${$}: array of numbers expected`)}function I0(...$){let q=(Y)=>Y,J=(Y,X)=>(U)=>Y(X(U)),G=$.map((Y)=>Y.encode).reduceRight(J,q),Q=$.map((Y)=>Y.decode).reduce(J,q);return{encode:G,decode:Q}}function E0($){let q=typeof $==="string"?$.split(""):$,J=q.length;$Y("alphabet",q);let G=new Map(q.map((Q,Y)=>[Q,Y]));return{encode:(Q)=>{return eQ(Q),Q.map((Y)=>{if(!Number.isSafeInteger(Y)||Y<0||Y>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Y}". Allowed: ${$}`);return q[Y]})},decode:(Q)=>{return eQ(Q),Q.map((Y)=>{iq("alphabet.decode",Y);let X=G.get(Y);if(X===void 0)throw Error(`Unknown letter: "${Y}". Allowed: ${$}`);return X})}}}function C0($=""){return iq("join",$),{encode:(q)=>{return $Y("join.decode",q),q.join($)},decode:(q)=>{return iq("join.decode",q),q.split($)}}}function GY($,q="="){return bG($),iq("padding",q),{encode(J){$Y("padding.encode",J);while(J.length*$%8)J.push(q);return J},decode(J){$Y("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===q;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function hW($){return xW($),{encode:(q)=>q,decode:(q)=>$(q)}}function bW($,q,J){if(q<2)throw Error(`convertRadix: invalid from=${q}, base cannot be less than 2`);if(J<2)throw Error(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(eQ($),!$.length)return[];let G=0,Q=[],Y=Array.from($,(U)=>{if(bG(U),U<0||U>=q)throw Error(`invalid integer: ${U}`);return U}),X=Y.length;while(!0){let U=0,V=!0;for(let W=G;W<X;W++){let M=Y[W],z=q*U,D=z+M;if(!Number.isSafeInteger(D)||z/q!==U||D-M!==z)throw Error("convertRadix: carry overflow");let R=D/J;U=D%J;let w=Math.floor(R);if(Y[W]=w,!Number.isSafeInteger(w)||w*J+U!==D)throw Error("convertRadix: carry overflow");if(!V)continue;else if(!w)G=W;else V=!1}if(Q.push(U),V)break}for(let U=0;U<$.length-1&&$[U]===0;U++)Q.push(0);return Q.reverse()}var uW=($,q)=>q===0?$:uW(q,$%q),qY=($,q)=>$+(q-uW($,q)),tQ=(()=>{let $=[];for(let q=0;q<40;q++)$.push(2**q);return $})();function $X($,q,J,G){if(eQ($),q<=0||q>32)throw Error(`convertRadix2: wrong from=${q}`);if(J<=0||J>32)throw Error(`convertRadix2: wrong to=${J}`);if(qY(q,J)>32)throw Error(`convertRadix2: carry overflow from=${q} to=${J} carryBits=${qY(q,J)}`);let Q=0,Y=0,X=tQ[q],U=tQ[J]-1,V=[];for(let W of $){if(bG(W),W>=X)throw Error(`convertRadix2: invalid data word=${W} from=${q}`);if(Q=Q<<q|W,Y+q>32)throw Error(`convertRadix2: carry overflow pos=${Y} from=${q}`);Y+=q;for(;Y>=J;Y-=J)V.push((Q>>Y-J&U)>>>0);let M=tQ[Y];if(M===void 0)throw Error("invalid carry");Q&=M-1}if(Q=Q<<J-Y&U,!G&&Y>=q)throw Error("Excess padding");if(!G&&Q>0)throw Error(`Non-zero padding: ${Q}`);if(G&&Y>0)V.push(Q>>>0);return V}function SO($){bG($);let q=256;return{encode:(J)=>{if(!JY(J))throw Error("radix.encode input should be Uint8Array");return bW(Array.from(J),q,$)},decode:(J)=>{return GX("radix.decode",J),Uint8Array.from(bW(J,$,q))}}}function g0($,q=!1){if(bG($),$<=0||$>32)throw Error("radix2: bits should be in (0..32]");if(qY(8,$)>32||qY($,8)>32)throw Error("radix2: carry overflow");return{encode:(J)=>{if(!JY(J))throw Error("radix2.encode input should be Uint8Array");return $X(Array.from(J),8,$,!q)},decode:(J)=>{return GX("radix2.decode",J),Uint8Array.from($X(J,$,8,q))}}}function kW($){return xW($),function(...q){try{return $.apply(null,q)}catch(J){}}}var RL=I0(g0(4),E0("0123456789ABCDEF"),C0("")),DL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),GY(5),C0("")),KL=I0(g0(5),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),C0("")),HL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),GY(5),C0("")),OL=I0(g0(5),E0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),C0("")),wL=I0(g0(5),E0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),C0(""),hW(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1"))),pW=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),lW=($,q)=>{iq("base64",$);let J=q?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,G=q?"base64url":"base64";if($.length>0&&!J.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:G,lastChunkHandling:"strict"})},QX=pW?{encode($){return JX($),$.toBase64()},decode($){return lW($,!1)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),GY(6),C0("")),x0=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),C0("")),NL=pW?{encode($){return JX($),$.toBase64({alphabet:"base64url"})},decode($){return lW($,!0)}}:I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),GY(6),C0("")),jL=I0(g0(6),E0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),C0("")),YX=($)=>I0(SO(58),E0($),C0("")),AL=YX("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"),ZL=YX("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ"),BL=YX("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");var qX=I0(E0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),C0("")),mW=[996825010,642813549,513874426,1027748829,705979059];function vG($){let q=$>>25,J=($&33554431)<<5;for(let G=0;G<mW.length;G++)if((q>>G&1)===1)J^=mW[G];return J}function yW($,q,J=1){let G=$.length,Q=1;for(let Y=0;Y<G;Y++){let X=$.charCodeAt(Y);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);Q=vG(Q)^X>>5}Q=vG(Q);for(let Y=0;Y<G;Y++)Q=vG(Q)^$.charCodeAt(Y)&31;for(let Y of q)Q=vG(Q)^Y;for(let Y=0;Y<6;Y++)Q=vG(Q);return Q^=J,qX.encode($X([Q%tQ[30]],30,5,!1))}function rW($){let q=$==="bech32"?1:734539939,J=g0(5),G=J.decode,Q=J.encode,Y=kW(G);function X(z,D,R=90){if(iq("bech32.encode prefix",z),JY(D))D=Array.from(D);GX("bech32.encode",D);let w=z.length;if(w===0)throw TypeError(`Invalid prefix length ${w}`);let N=w+7+D.length;if(R!==!1&&N>R)throw TypeError(`Length ${N} exceeds limit ${R}`);let j=z.toLowerCase(),Z=yW(j,D,q);return`${j}1${qX.encode(D)}${Z}`}function U(z,D=90){iq("bech32.decode input",z);let R=z.length;if(R<8||D!==!1&&R>D)throw TypeError(`invalid string length: ${R} (${z}). Expected (8..${D})`);let w=z.toLowerCase();if(z!==w&&z!==z.toUpperCase())throw Error("String must be lowercase or uppercase");let N=w.lastIndexOf("1");if(N===0||N===-1)throw Error('Letter "1" must be present between prefix and data only');let j=w.slice(0,N),Z=w.slice(N+1);if(Z.length<6)throw Error("Data must be at least 6 characters long");let T=qX.decode(Z).slice(0,-6),v=yW(j,T,q);if(!Z.endsWith(v))throw Error(`Invalid checksum in ${z}: expected "${v}"`);return{prefix:j,words:T}}let V=kW(U);function W(z){let{prefix:D,words:R}=U(z,!1);return{prefix:D,words:R,bytes:G(R)}}function M(z,D){return X(z,Q(D))}return{encode:X,decode:U,encodeFromBytes:M,decodeToBytes:W,decodeUnsafe:V,fromWords:G,fromWordsUnsafe:Y,toWords:Q}}var h0=rW("bech32"),SL=rW("bech32m");var TO=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),IO={encode($){return JX($),$.toHex()},decode($){return iq("hex",$),Uint8Array.fromHex($)}},TL=TO?IO:I0(g0(4),E0("0123456789abcdef"),C0(""),hW(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()}));function CO($,q,J,G){wq($);let Q=nQ({dkLen:32,asyncTick:10},G),{c:Y,dkLen:X,asyncTick:U}=Q;if(C$(Y,"c"),C$(X,"dkLen"),C$(U,"asyncTick"),Y<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let V=r9(q,"password"),W=r9(J,"salt"),M=new Uint8Array(X),z=jq.create($,V),D=z._cloneInto().update(W);return{c:Y,dkLen:X,asyncTick:U,DK:M,PRF:z,PRFSalt:D}}function PO($,q,J,G,Q){if($.destroy(),q.destroy(),G)G.destroy();return z0(Q),J}function XX($,q,J,G){let{c:Q,dkLen:Y,DK:X,PRF:U,PRFSalt:V}=CO($,q,J,G),W,M=new Uint8Array(4),z=N8(M),D=new Uint8Array(U.outputLen);for(let R=1,w=0;w<Y;R++,w+=U.outputLen){let N=X.subarray(w,w+U.outputLen);z.setInt32(0,R,!1),(W=V._cloneInto(W)).update(M).digestInto(D),N.set(D.subarray(0,N.length));for(let j=1;j<Q;j++){U._cloneInto(W).update(D).digestInto(D);for(let Z=0;Z<N.length;Z++)N[Z]^=D[Z]}}return PO(U,V,X,W,D)}function iW($,q,J,G,Q,Y){let X=$[q++]^J[G++],U=$[q++]^J[G++],V=$[q++]^J[G++],W=$[q++]^J[G++],M=$[q++]^J[G++],z=$[q++]^J[G++],D=$[q++]^J[G++],R=$[q++]^J[G++],w=$[q++]^J[G++],N=$[q++]^J[G++],j=$[q++]^J[G++],Z=$[q++]^J[G++],T=$[q++]^J[G++],v=$[q++]^J[G++],y=$[q++]^J[G++],u=$[q++]^J[G++],F=X,x=U,m=V,k=W,l=M,_=z,E=D,I=R,A=w,S=N,P=j,g=Z,L=T,b=v,O=y,f=u;for(let r=0;r<8;r+=2)l^=w$(F+L|0,7),A^=w$(l+F|0,9),L^=w$(A+l|0,13),F^=w$(L+A|0,18),S^=w$(_+x|0,7),b^=w$(S+_|0,9),x^=w$(b+S|0,13),_^=w$(x+b|0,18),O^=w$(P+E|0,7),m^=w$(O+P|0,9),E^=w$(m+O|0,13),P^=w$(E+m|0,18),k^=w$(f+g|0,7),I^=w$(k+f|0,9),g^=w$(I+k|0,13),f^=w$(g+I|0,18),x^=w$(F+k|0,7),m^=w$(x+F|0,9),k^=w$(m+x|0,13),F^=w$(k+m|0,18),E^=w$(_+l|0,7),I^=w$(E+_|0,9),l^=w$(I+E|0,13),_^=w$(l+I|0,18),g^=w$(P+S|0,7),A^=w$(g+P|0,9),S^=w$(A+g|0,13),P^=w$(S+A|0,18),L^=w$(f+O|0,7),b^=w$(L+f|0,9),O^=w$(b+L|0,13),f^=w$(O+b|0,18);Q[Y++]=X+F|0,Q[Y++]=U+x|0,Q[Y++]=V+m|0,Q[Y++]=W+k|0,Q[Y++]=M+l|0,Q[Y++]=z+_|0,Q[Y++]=D+E|0,Q[Y++]=R+I|0,Q[Y++]=w+A|0,Q[Y++]=N+S|0,Q[Y++]=j+P|0,Q[Y++]=Z+g|0,Q[Y++]=T+L|0,Q[Y++]=v+b|0,Q[Y++]=y+O|0,Q[Y++]=u+f|0}function UX($,q,J,G,Q){let Y=G+0,X=G+16*Q;for(let U=0;U<16;U++)J[X+U]=$[q+(2*Q-1)*16+U];for(let U=0;U<Q;U++,Y+=16,q+=16){if(iW(J,X,$,q,J,Y),U>0)X+=16;iW(J,Y,$,q+=16,J,X)}}function LO($,q,J){let G=nQ({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:Q,r:Y,p:X,dkLen:U,asyncTick:V,maxmem:W,onProgress:M}=G;if(C$(Q,"N"),C$(Y,"r"),C$(X,"p"),C$(U,"dkLen"),C$(V,"asyncTick"),C$(W,"maxmem"),M!==void 0&&typeof M!=="function")throw Error("progressCb must be a function");let z=128*Y,D=z/4,R=Math.pow(2,32);if(Q<=1||(Q&Q-1)!==0||Q>R)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(R-1)*32/z)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(U<1||U>(R-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let w=z*(Q+X+1);if(w>W)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+w+", maxmem="+W);let N=XX(p$,$,q,{c:1,dkLen:z*X}),j=dQ(N),Z=dQ(new Uint8Array(z*Q)),T=dQ(new Uint8Array(z)),v=()=>{};if(M){let y=2*Q*X,u=Math.max(Math.floor(y/1e4),1),F=0;v=()=>{if(F++,M&&(!(F%u)||F===y))M(F/y)}}return{N:Q,r:Y,p:X,dkLen:U,blockSize32:D,V:Z,B32:j,B:N,tmp:T,blockMixCb:v,asyncTick:V}}function FO($,q,J,G,Q){let Y=XX(p$,$,J,{c:1,dkLen:q});return z0(J,G,Q),Y}function dW($,q,J){let{N:G,r:Q,p:Y,dkLen:X,blockSize32:U,V,B32:W,B:M,tmp:z,blockMixCb:D}=LO($,q,J);l9(W);for(let R=0;R<Y;R++){let w=U*R;for(let N=0;N<U;N++)V[N]=W[w+N];for(let N=0,j=0;N<G-1;N++)UX(V,j,V,j+=U,Q),D();UX(V,(G-1)*U,W,w,Q),D();for(let N=0;N<G;N++){let j=(W[w+U-16]&G-1)>>>0;for(let Z=0;Z<U;Z++)z[Z]=W[w+Z]^V[j*U+Z];UX(z,0,W,w,Q),D()}}return l9(W),FO($,X,M,V,z)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function gO($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function QY($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function j8($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function _$($,q,J=""){let G=gO($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`,W=X+"expected Uint8Array"+U+", got "+V;if(!G)throw TypeError(W);throw RangeError(W)}return $}function VX($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function cW($,q,J=!1){_$($,void 0,"output");let G=q.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!A8($))throw Error("invalid output, must be aligned")}function qq($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function u0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function _O($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var EJ=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),vO=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var bO=($)=>{for(let q=0;q<$.length;q++)$[q]=vO($[q]);return $},Bq=EJ?($)=>$:bO;function nW($,q){if(q==null||typeof q!=="object")throw Error("options must be defined");return Object.assign($,q)}function oW($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function aW($,q,J){let G=q,Q=J||(()=>[]),Y=(U,V)=>G(V,...Q(U)).update(U).digest(),X=G(new Uint8Array($),...Q(new Uint8Array(0)));return Y.outputLen=X.outputLen,Y.blockLen=X.blockLen,Y.create=(U,...V)=>G(U,...V),Y}var sW=($,q)=>{function J(G,...Q){if(_$(G,void 0,"key"),$.nonceLength!==void 0){let M=Q[0];_$(M,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Y=$.tagLength;if(Y&&Q[1]!==void 0)_$(Q[1],void 0,"AAD");let X=q(G,...Q),U=(M,z)=>{if(z!==void 0){if(M!==2)throw Error("cipher output not supported");_$(z,void 0,"output")}},V=!1;return{encrypt(M,z){if(V)throw Error("cannot encrypt() twice with same key + nonce");return V=!0,_$(M),U(X.encrypt.length,z),X.encrypt(M,z)},decrypt(M,z){if(_$(M),Y&&M.length<Y)throw Error('"ciphertext" expected length bigger than tagLength='+Y);return U(X.decrypt.length,z),X.decrypt(M,z)}}}return Object.assign(J,$),J};function kG($,q,J=!0){if(q===void 0)return new Uint8Array($);if(_$(q,void 0,"output"),q.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+q.length);if(J&&!A8(q))throw Error("invalid output, must be aligned");return q}function tW($,q,J){j8($),j8(q),QY(J);let G=new Uint8Array(16),Q=_O(G);return Q.setBigUint64(0,BigInt(q),J),Q.setBigUint64(8,BigInt($),J),G}function A8($){return $.byteOffset%4===0}function Z8($){return Uint8Array.from(_$($))}var $7=($)=>Uint8Array.from($.split(""),(q)=>q.charCodeAt(0)),kO=(()=>Bq(qq($7("expand 16-byte k"))))(),mO=(()=>Bq(qq($7("expand 32-byte k"))))();function N$($,q){return $<<q|$>>>32-q}var mG=64,yO=16,WX=(()=>4294967295)(),eW=Uint32Array.of();function fO($,q,J,G,Q,Y,X,U){let V=Q.length,W=new Uint8Array(mG),M=qq(W),z=EJ&&A8(Q)&&A8(Y),D=z?qq(Q):eW,R=z?qq(Y):eW;if(!EJ){for(let w=0;w<V;X++){if($(q,J,G,M,X,U),Bq(M),X>=WX)throw Error("arx: counter overflow");let N=Math.min(mG,V-w);for(let j=0,Z;j<N;j++)Z=w+j,Y[Z]=Q[Z]^W[j];w+=N}return}for(let w=0;w<V;X++){if($(q,J,G,M,X,U),X>=WX)throw Error("arx: counter overflow");let N=Math.min(mG,V-w);if(z&&N===mG){let j=w/4;if(w%4!==0)throw Error("arx: invalid block position");for(let Z=0,T;Z<yO;Z++)T=j+Z,R[T]=D[T]^M[Z];w+=mG;continue}for(let j=0,Z;j<N;j++)Z=w+j,Y[Z]=Q[Z]^W[j];w+=N}}function q7($,q){let{allowShortKeys:J,extendNonceFn:G,counterLength:Q,counterRight:Y,rounds:X}=nW({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},q);if(typeof $!=="function")throw Error("core must be a function");return j8(Q),j8(X),QY(Y),QY(J),(U,V,W,M,z=0)=>{_$(U,void 0,"key"),_$(V,void 0,"nonce"),_$(W,void 0,"data");let D=W.length;if(M=kG(D,M,!1),j8(z),z<0||z>=WX)throw Error("arx: counter overflow");let R=[],w=U.length,N,j;if(w===32)R.push(N=Z8(U)),j=mO;else if(w===16&&J)N=new Uint8Array(32),N.set(U),N.set(U,16),j=kO,R.push(N);else throw _$(U,32,"arx key"),Error("invalid key size");if(!EJ||!A8(V))R.push(V=Z8(V));let Z=qq(N);if(G){if(V.length!==24)throw Error("arx: extended nonce must be 24 bytes");let y=V.subarray(0,16);if(EJ)G(j,Z,qq(y),Z);else{let u=Bq(Uint32Array.from(j));G(u,Z,qq(y),Z),u0(u),Bq(Z)}V=V.subarray(16)}else if(!EJ)Bq(Z);let T=16-Q;if(T!==V.length)throw Error(`arx: nonce must be ${T} or 16 bytes`);if(T!==12){let y=new Uint8Array(12);y.set(V,Y?0:12-V.length),V=y,R.push(V)}let v=Bq(qq(V));try{return fO($,j,Z,v,W,M,z,X),M}finally{u0(...R)}}}function l$($,q){return $[q++]&255|($[q++]&255)<<8}class J7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=Z8(_$($,32,"key"));let q=l$($,0),J=l$($,2),G=l$($,4),Q=l$($,6),Y=l$($,8),X=l$($,10),U=l$($,12),V=l$($,14);this.r[0]=q&8191,this.r[1]=(q>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|Q<<9)&8191,this.r[4]=(Q>>>4|Y<<12)&255,this.r[5]=Y>>>1&8190,this.r[6]=(Y>>>14|X<<2)&8191,this.r[7]=(X>>>11|U<<5)&8065,this.r[8]=(U>>>8|V<<8)&8191,this.r[9]=V>>>5&127;for(let W=0;W<8;W++)this.pad[W]=l$($,16+2*W)}process($,q,J=!1){let G=J?0:2048,{h:Q,r:Y}=this,X=Y[0],U=Y[1],V=Y[2],W=Y[3],M=Y[4],z=Y[5],D=Y[6],R=Y[7],w=Y[8],N=Y[9],j=l$($,q+0),Z=l$($,q+2),T=l$($,q+4),v=l$($,q+6),y=l$($,q+8),u=l$($,q+10),F=l$($,q+12),x=l$($,q+14),m=Q[0]+(j&8191),k=Q[1]+((j>>>13|Z<<3)&8191),l=Q[2]+((Z>>>10|T<<6)&8191),_=Q[3]+((T>>>7|v<<9)&8191),E=Q[4]+((v>>>4|y<<12)&8191),I=Q[5]+(y>>>1&8191),A=Q[6]+((y>>>14|u<<2)&8191),S=Q[7]+((u>>>11|F<<5)&8191),P=Q[8]+((F>>>8|x<<8)&8191),g=Q[9]+(x>>>5|G),L=0,b=L+m*X+k*(5*N)+l*(5*w)+_*(5*R)+E*(5*D);L=b>>>13,b&=8191,b+=I*(5*z)+A*(5*M)+S*(5*W)+P*(5*V)+g*(5*U),L+=b>>>13,b&=8191;let O=L+m*U+k*X+l*(5*N)+_*(5*w)+E*(5*R);L=O>>>13,O&=8191,O+=I*(5*D)+A*(5*z)+S*(5*M)+P*(5*W)+g*(5*V),L+=O>>>13,O&=8191;let f=L+m*V+k*U+l*X+_*(5*N)+E*(5*w);L=f>>>13,f&=8191,f+=I*(5*R)+A*(5*D)+S*(5*z)+P*(5*M)+g*(5*W),L+=f>>>13,f&=8191;let r=L+m*W+k*V+l*U+_*X+E*(5*N);L=r>>>13,r&=8191,r+=I*(5*w)+A*(5*R)+S*(5*D)+P*(5*z)+g*(5*M),L+=r>>>13,r&=8191;let B=L+m*M+k*W+l*V+_*U+E*X;L=B>>>13,B&=8191,B+=I*(5*N)+A*(5*w)+S*(5*R)+P*(5*D)+g*(5*z),L+=B>>>13,B&=8191;let o=L+m*z+k*M+l*W+_*V+E*U;L=o>>>13,o&=8191,o+=I*X+A*(5*N)+S*(5*w)+P*(5*R)+g*(5*D),L+=o>>>13,o&=8191;let q$=L+m*D+k*z+l*M+_*W+E*V;L=q$>>>13,q$&=8191,q$+=I*U+A*X+S*(5*N)+P*(5*w)+g*(5*R),L+=q$>>>13,q$&=8191;let Y$=L+m*R+k*D+l*z+_*M+E*W;L=Y$>>>13,Y$&=8191,Y$+=I*V+A*U+S*X+P*(5*N)+g*(5*w),L+=Y$>>>13,Y$&=8191;let G$=L+m*w+k*R+l*D+_*z+E*M;L=G$>>>13,G$&=8191,G$+=I*W+A*V+S*U+P*X+g*(5*N),L+=G$>>>13,G$&=8191;let t=L+m*N+k*w+l*R+_*D+E*z;L=t>>>13,t&=8191,t+=I*M+A*W+S*V+P*U+g*X,L+=t>>>13,t&=8191,L=(L<<2)+L|0,L=L+b|0,b=L&8191,L=L>>>13,O+=L,Q[0]=b,Q[1]=O,Q[2]=f,Q[3]=r,Q[4]=B,Q[5]=o,Q[6]=q$,Q[7]=Y$,Q[8]=G$,Q[9]=t}finalize(){let{h:$,pad:q}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let Q=(G^1)-1;for(let X=0;X<10;X++)J[X]&=Q;Q=~Q;for(let X=0;X<10;X++)$[X]=$[X]&Q|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Y=$[0]+q[0];$[0]=Y&65535;for(let X=1;X<8;X++)Y=($[X]+q[X]|0)+(Y>>>16)|0,$[X]=Y&65535;u0(J)}update($){VX(this),_$($),$=Z8($);let{buffer:q,blockLen:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(J-this.pos,G-Q);if(Y===J){for(;J<=G-Q;Q+=J)this.process($,Q);continue}if(q.set($.subarray(Q,Q+Y),this.pos),this.pos+=Y,Q+=Y,this.pos===J)this.process(q,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,u0(this.h,this.r,this.buffer,this.pad)}digestInto($){VX(this),cW($,this),this.finished=!0;let{buffer:q,h:J}=this,{pos:G}=this;if(G){q[G++]=1;for(;G<16;G++)q[G]=0;this.process(q,0,!0)}this.finalize();let Q=0;for(let Y=0;Y<8;Y++)$[Q++]=J[Y]>>>0,$[Q++]=J[Y]>>>8}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}}var G7=aW(32,($)=>new J7($));function xO($,q,J,G,Q,Y=20){let X=$[0],U=$[1],V=$[2],W=$[3],M=q[0],z=q[1],D=q[2],R=q[3],w=q[4],N=q[5],j=q[6],Z=q[7],T=Q,v=J[0],y=J[1],u=J[2],F=X,x=U,m=V,k=W,l=M,_=z,E=D,I=R,A=w,S=N,P=j,g=Z,L=T,b=v,O=y,f=u;for(let B=0;B<Y;B+=2)F=F+l|0,L=N$(L^F,16),A=A+L|0,l=N$(l^A,12),F=F+l|0,L=N$(L^F,8),A=A+L|0,l=N$(l^A,7),x=x+_|0,b=N$(b^x,16),S=S+b|0,_=N$(_^S,12),x=x+_|0,b=N$(b^x,8),S=S+b|0,_=N$(_^S,7),m=m+E|0,O=N$(O^m,16),P=P+O|0,E=N$(E^P,12),m=m+E|0,O=N$(O^m,8),P=P+O|0,E=N$(E^P,7),k=k+I|0,f=N$(f^k,16),g=g+f|0,I=N$(I^g,12),k=k+I|0,f=N$(f^k,8),g=g+f|0,I=N$(I^g,7),F=F+_|0,f=N$(f^F,16),P=P+f|0,_=N$(_^P,12),F=F+_|0,f=N$(f^F,8),P=P+f|0,_=N$(_^P,7),x=x+E|0,L=N$(L^x,16),g=g+L|0,E=N$(E^g,12),x=x+E|0,L=N$(L^x,8),g=g+L|0,E=N$(E^g,7),m=m+I|0,b=N$(b^m,16),A=A+b|0,I=N$(I^A,12),m=m+I|0,b=N$(b^m,8),A=A+b|0,I=N$(I^A,7),k=k+l|0,O=N$(O^k,16),S=S+O|0,l=N$(l^S,12),k=k+l|0,O=N$(O^k,8),S=S+O|0,l=N$(l^S,7);let r=0;G[r++]=X+F|0,G[r++]=U+x|0,G[r++]=V+m|0,G[r++]=W+k|0,G[r++]=M+l|0,G[r++]=z+_|0,G[r++]=D+E|0,G[r++]=R+I|0,G[r++]=w+A|0,G[r++]=N+S|0,G[r++]=j+P|0,G[r++]=Z+g|0,G[r++]=T+L|0,G[r++]=v+b|0,G[r++]=y+O|0,G[r++]=u+f|0}var hO=q7(xO,{counterRight:!1,counterLength:4,allowShortKeys:!1});var uO=new Uint8Array(16),Q7=($,q)=>{$.update(q);let J=q.length%16;if(J)$.update(uO.subarray(J))},pO=new Uint8Array(32);function Y7($,q,J,G,Q){if(Q!==void 0)_$(Q,void 0,"AAD");let Y=$(q,J,pO),X=tW(G.length,Q?Q.length:0,!0),U=G7.create(Y);if(Q)Q7(U,Q);Q7(U,G),U.update(X);let V=U.digest();return u0(Y,X),V}var lO=($)=>(q,J,G)=>{return{encrypt(Y,X){let U=Y.length;X=kG(U+16,X,!1),X.set(Y);let V=X.subarray(0,-16);$(q,J,V,V,1);let W=Y7($,q,J,V,G);return X.set(W,U),u0(W),X},decrypt(Y,X){X=kG(Y.length-16,X,!1);let U=Y.subarray(0,-16),V=Y.subarray(-16),W=Y7($,q,J,U,G);if(!oW(V,W))throw u0(W),Error("invalid tag");return X.set(Y.subarray(0,-16)),$(q,J,X,X,1),u0(W),X}}},dq=sW({blockSize:64,nonceLength:12,tagLength:16},lO(hO));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function B8($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function y$($,q=""){if(!Number.isSafeInteger($)||$<0){let J=q&&`"${q}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Q$($,q,J=""){let G=B8($),Q=$?.length,Y=q!==void 0;if(!G||Y&&Q!==q){let X=J&&`"${J}" `,U=Y?` of length ${q}`:"",V=G?`length=${Q}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+U+", got "+V)}return $}function _0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");y$($.outputLen),y$($.blockLen)}function Tq($,q=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(q&&$.finished)throw Error("Hash#digest() has already been called")}function YY($,q){Q$($,void 0,"digestInto() output");let J=q.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function XY($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function j0(...$){for(let q=0;q<$.length;q++)$[q].fill(0)}function UY($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function p0($,q){return $<<32-q|$>>>q}var rO=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function iO($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function dO($){for(let q=0;q<$.length;q++)$[q]=iO($[q]);return $}var MX=rO?($)=>$:dO,U7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),cO=Array.from({length:256},($,q)=>q.toString(16).padStart(2,"0"));function CJ($){if(Q$($),U7)return $.toHex();let q="";for(let J=0;J<$.length;J++)q+=cO[$[J]];return q}var Sq={_0:48,_9:57,A:65,F:70,a:97,f:102};function X7($){if($>=Sq._0&&$<=Sq._9)return $-Sq._0;if($>=Sq.A&&$<=Sq.F)return $-(Sq.A-10);if($>=Sq.a&&$<=Sq.f)return $-(Sq.a-10);return}function PJ($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(U7)return Uint8Array.fromHex($);let q=$.length,J=q/2;if(q%2)throw Error("hex string expected, got unpadded hex of length "+q);let G=new Uint8Array(J);for(let Q=0,Y=0;Q<J;Q++,Y+=2){let X=X7($.charCodeAt(Y)),U=X7($.charCodeAt(Y+1));if(X===void 0||U===void 0){let V=$[Y]+$[Y+1];throw Error('hex string expected, got non-hex character "'+V+'" at index '+Y)}G[Q]=X*16+U}return G}function L$(...$){let q=0;for(let G=0;G<$.length;G++){let Q=$[G];Q$(Q),q+=Q.length}let J=new Uint8Array(q);for(let G=0,Q=0;G<$.length;G++){let Y=$[G];J.set(Y,Q),Q+=Y.length}return J}function S8($,q={}){let J=(Q,Y)=>$(Y).update(Q).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(Q)=>$(Q),Object.assign(J,q),Object.freeze(J)}function cq($=32){let q=typeof globalThis==="object"?globalThis.crypto:null;if(typeof q?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return q.getRandomValues(new Uint8Array($))}var nq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var RX=BigInt(0),zX=BigInt(1);function yG($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function V7($){if(typeof $==="bigint"){if(!VY($))throw Error("positive bigint expected, got "+$)}else y$($);return $}function fG($){let q=V7($).toString(16);return q.length&1?"0"+q:q}function W7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?RX:BigInt("0x"+$)}function oq($){return W7(CJ($))}function aq($){return W7(CJ(WY(Q$($)).reverse()))}function T8($,q){y$(q),$=V7($);let J=PJ($.toString(16).padStart(q*2,"0"));if(J.length!==q)throw Error("number too large");return J}function xG($,q){return T8($,q).reverse()}function WY($){return Uint8Array.from($)}function sq($){return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var VY=($)=>typeof $==="bigint"&&RX<=$;function nO($,q,J){return VY($)&&VY(q)&&VY(J)&&q<=$&&$<J}function hG($,q,J,G){if(!nO(q,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function DX($){let q;for(q=0;$>RX;$>>=zX,q+=1);return q}var uG=($)=>(zX<<BigInt($))-zX;function M7($,q,J){if(y$($,"hashLen"),y$(q,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,L$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},w=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return L$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while(!(T=Z(w())))R();return z(),T}}function LJ($,q={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Y,X,U){let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw Error(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}function KX($){let q=new WeakMap;return(J,...G)=>{let Q=q.get(J);if(Q!==void 0)return Q;let Y=$(J,...G);return q.set(J,Y),Y}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var D0=BigInt(0),e$=BigInt(1),FJ=BigInt(2),D7=BigInt(3),K7=BigInt(4),H7=BigInt(5),oO=BigInt(7),O7=BigInt(8),aO=BigInt(9),w7=BigInt(16);function R0($,q){let J=$%q;return J>=D0?J:q+J}function v0($,q,J){let G=$;while(q-- >D0)G*=G,G%=J;return G}function z7($,q){if($===D0)throw Error("invert: expected non-zero number");if(q<=D0)throw Error("invert: expected positive modulus, got "+q);let J=R0($,q),G=q,Q=D0,Y=e$,X=e$,U=D0;while(J!==D0){let W=G/J,M=G%J,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==e$)throw Error("invert: does not exist");return R0(Q,q)}function HX($,q,J){if(!$.eql($.sqr(q),J))throw Error("Cannot find square root")}function N7($,q){let J=($.ORDER+e$)/K7,G=$.pow(q,J);return HX($,G,q),G}function sO($,q){let J=($.ORDER-H7)/O7,G=$.mul(q,FJ),Q=$.pow(G,J),Y=$.mul(q,Q),X=$.mul($.mul(Y,FJ),Q),U=$.mul(Y,$.sub(X,$.ONE));return HX($,U,q),U}function tO($){let q=MY($),J=j7($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+oO)/w7;return(U,V)=>{let W=U.pow(V,X),M=U.mul(W,G),z=U.mul(W,Q),D=U.mul(W,Y),R=U.eql(U.sqr(M),V),w=U.eql(U.sqr(z),V);W=U.cmov(W,M,R),M=U.cmov(D,z,w);let N=U.eql(U.sqr(M),V),j=U.cmov(W,M,N);return HX(U,j,V),j}}function j7($){if($<D7)throw Error("sqrt is not defined for small field");let q=$-e$,J=0;while(q%FJ===D0)q/=FJ,J++;let G=FJ,Q=MY($);while(R7(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return N7;let Y=Q.pow(G,q),X=(q+e$)/FJ;return function(V,W){if(V.is0(W))return W;if(R7(V,W)!==1)throw Error("Cannot find square root");let M=J,z=V.mul(V.ONE,Y),D=V.pow(W,q),R=V.pow(W,X);while(!V.eql(D,V.ONE)){if(V.is0(D))return V.ZERO;let w=1,N=V.sqr(D);while(!V.eql(N,V.ONE))if(w++,N=V.sqr(N),w===M)throw Error("Cannot find square root");let j=e$<<BigInt(M-w-1),Z=V.pow(z,j);M=w,z=V.sqr(Z),D=V.mul(D,z),R=V.mul(R,Z)}return R}}function eO($){if($%K7===D7)return N7;if($%O7===H7)return sO;if($%w7===aO)return tO($);return j7($)}var $6=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function OX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=$6.reduce((G,Q)=>{return G[Q]="function",G},q);return LJ($,J),$}function q6($,q,J){if(J<D0)throw Error("invalid exponent, negatives unsupported");if(J===D0)return $.ONE;if(J===e$)return q;let G=$.ONE,Q=q;while(J>D0){if(J&e$)G=$.mul(G,Q);Q=$.sqr(Q),J>>=e$}return G}function pG($,q,J=!1){let G=Array(q.length).fill(J?$.ZERO:void 0),Q=q.reduce((X,U,V)=>{if($.is0(U))return X;return G[V]=X,$.mul(X,U)},$.ONE),Y=$.inv(Q);return q.reduceRight((X,U,V)=>{if($.is0(U))return X;return G[V]=$.mul(X,G[V]),$.mul(X,U)},Y),G}function R7($,q){let J=($.ORDER-e$)/FJ,G=$.pow(q,J),Q=$.eql(G,$.ONE),Y=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!Q&&!Y&&!X)throw Error("invalid Legendre symbol result");return Q?1:Y?0:-1}function J6($,q){if(q!==void 0)y$(q);let J=q!==void 0?q:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class A7{ORDER;BITS;BYTES;isLE;ZERO=D0;ONE=e$;_lengths;_sqrt;_mod;constructor($,q={}){if($<=D0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")this.sqrt=q.sqrt;if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=q.allowedLengths?.slice();if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=J6($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,this._sqrt=void 0,Object.preventExtensions(this)}create($){return R0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return D0<=$&&$<this.ORDER}is0($){return $===D0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&e$)===e$}neg($){return R0(-$,this.ORDER)}eql($,q){return $===q}sqr($){return R0($*$,this.ORDER)}add($,q){return R0($+q,this.ORDER)}sub($,q){return R0($-q,this.ORDER)}mul($,q){return R0($*q,this.ORDER)}pow($,q){return q6(this,$,q)}div($,q){return R0($*z7(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return z7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=eO(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?xG($,this.BYTES):T8($,this.BYTES)}fromBytes($,q=!1){Q$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?aq($):oq($);if(X)U=R0(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return pG(this,$)}cmov($,q,J){return J?q:$}}function MY($,q={}){return new A7($,q)}function Z7($){if(typeof $!=="bigint")throw Error("field order must be bigint");let q=$.toString(2).length;return Math.ceil(q/8)}function wX($){let q=Z7($);return q+Math.ceil(q/2)}function B7($,q,J=!1){Q$($);let G=$.length,Q=Z7(q),Y=wX(q);if(G<16||G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?aq($):oq($),U=R0(X,q-e$)+e$;return J?xG(U,Q):T8(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var I8=BigInt(0),gJ=BigInt(1);function lG($,q){let J=q.negate();return $?J:q}function ZX($,q){let J=pG($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function E7($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function NX($,q){E7($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=uG($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function S7($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=gJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var jX=new WeakMap,C7=new WeakMap;function AX($){return C7.get($)||1}function T7($){if($!==I8)throw Error("invalid wNAF")}class BX{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>I8){if(q&gJ)J=J.add(G);G=G.double(),q>>=gJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=NX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=NX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=S7(J,X,Y);if(J=U,W)Q=Q.add(lG(z,q[D]));else G=G.add(lG(M,q[V]))}return T7(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=NX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===I8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=S7(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return T7(J),G}getPrecomputes($,q,J){let G=jX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);jX.set(q,G)}}return G}cached($,q,J){let G=AX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=AX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){E7(q,this.bits),C7.set($,q),jX.delete($)}hasCache($){return AX($)!==1}}function P7($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>I8||G>I8){if(J&gJ)Y=Y.add(Q);if(G&gJ)X=X.add(Q);Q=Q.double(),J>>=gJ,G>>=gJ}return{p1:Y,p2:X}}function I7($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return OX(q),q}else return MY($,{isLE:J})}function L7($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>I8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=I7(q.p,J.Fp,G),Y=I7(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function zY($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var rG=BigInt(0),E8=BigInt(1),RY=BigInt(2);function G6($){return LJ($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function F7($){let q=G6($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X||cq,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?RY**BigInt(254):RY**BigInt(447),w=U?BigInt(8)*RY**BigInt(251)-E8:BigInt(4)*RY**BigInt(445)-E8,N=R+w+E8,j=(A)=>R0(A,J),Z=T(z);function T(A){return xG(j(A),M)}function v(A){let S=WY(Q$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(aq(S))}function y(A){return aq(Q(WY(Q$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),y(A));if(P===rG)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,m=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){hG("u",A,rG,J),hG("scalar",S,R,N);let P=S,g=A,L=E8,b=rG,O=A,f=E8,r=rG;for(let o=BigInt(W-1);o>=rG;o--){let q$=P>>o&E8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,T$=O+f,m$=O-f,M0=j(m$*Y$),e0=j(T$*t),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A=V(M))=>{return Q$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze({keygen:zY(E,x),getSharedSecret:m,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}class SX{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,q){if(_0($),Q$(q,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(q.length>J?$.create().update(q).digest():q);for(let Q=0;Q<G.length;Q++)G[Q]^=54;this.iHash.update(G),this.oHash=$.create();for(let Q=0;Q<G.length;Q++)G[Q]^=106;this.oHash.update(G),j0(G)}update($){return Tq(this),this.iHash.update($),this}digestInto($){Tq(this),Q$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:q,iHash:J,finished:G,destroyed:Q,blockLen:Y,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=Q,$.blockLen=Y,$.outputLen=X,$.oHash=q._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var C8=($,q,J)=>new SX($,q).update(J).digest();C8.create=($,q)=>new SX($,q);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var g7=($,q)=>($+($>=0?q:-q)/v7)/q;function Q6($,q,J){let[[G,Q],[Y,X]]=q,U=g7(X*$,J),V=g7(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Iq,D=M<Iq;if(z)W=-W;if(D)M=-M;let R=uG(Math.ceil(DX(J)/2))+P8;if(W<Iq||W>=R||M<Iq||M>=R)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:z,k1:W,k2neg:D,k2:M}}function IX($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function TX($,q){let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(yG(J.lowS,"lowS"),yG(J.prehash,"prehash"),J.format!==void 0)IX(J.format);return J}class _7 extends Error{constructor($=""){super($)}}var tq={Err:_7,_tlv:{encode:($,q)=>{let{Err:J}=tq;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=fG(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?fG(Q.length/2|128):"";return fG($)+Y+Q+q},decode($,q){let{Err:J}=tq,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=tq;if($<Iq)throw new q("integer: negative integers are not allowed");let J=fG($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=tq;if($[0]&128)throw new q("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return oq($)}},toSig($){let{Err:q,_int:J,_tlv:G}=tq,Q=Q$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=tq,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}},Iq=BigInt(0),P8=BigInt(1),v7=BigInt(2),DY=BigInt(3),Y6=BigInt(4);function EX($,q={}){let J=L7("weierstrass",$,q),{Fp:G,Fn:Q}=J,Y=J.CURVE,{h:X,n:U}=Y;LJ(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let W=k7(G,Q);function M(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function z(E,I,A){let{x:S,y:P}=I.toAffine(),g=G.toBytes(S);if(yG(A,"isCompressed"),A){M();let L=!G.isOdd(P);return L$(b7(L),g)}else return L$(Uint8Array.of(4),g,G.toBytes(P))}function D(E){Q$(E,void 0,"Point");let{publicKey:I,publicKeyUncompressed:A}=W,S=E.length,P=E[0],g=E.subarray(1);if(S===I&&(P===2||P===3)){let L=G.fromBytes(g);if(!G.isValid(L))throw Error("bad point: is not on curve, wrong x");let b=N(L),O;try{O=G.sqrt(b)}catch(B){let o=B instanceof Error?": "+B.message:"";throw Error("bad point: is not on curve, sqrt error"+o)}M();let f=G.isOdd(O);if((P&1)===1!==f)O=G.neg(O);return{x:L,y:O}}else if(S===A&&P===4){let L=G.BYTES,b=G.fromBytes(g.subarray(0,L)),O=G.fromBytes(g.subarray(L,L*2));if(!j(b,O))throw Error("bad point: is not on curve");return{x:b,y:O}}else throw Error(`bad point: got length ${S}, expected compressed=${I} or uncompressed=${A}`)}let R=q.toBytes||z,w=q.fromBytes||D;function N(E){let I=G.sqr(E),A=G.mul(I,E);return G.add(G.add(A,G.mul(E,Y.a)),Y.b)}function j(E,I){let A=G.sqr(I),S=N(E);return G.eql(A,S)}if(!j(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let Z=G.mul(G.pow(Y.a,DY),Y6),T=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(Z,T)))throw Error("bad curve params: a or b");function v(E,I,A=!1){if(!G.isValid(I)||A&&G.is0(I))throw Error(`bad point coordinate ${E}`);return I}function y(E){if(!(E instanceof k))throw Error("Weierstrass Point expected")}function u(E){if(!V||!V.basises)throw Error("no endo");return Q6(E,V.basises,Q.ORDER)}let F=KX((E,I)=>{let{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}),x=KX((E)=>{if(E.is0()){if(q.allowInfinityPoint&&!G.is0(E.Y))return;throw Error("bad point: ZERO")}let{x:I,y:A}=E.toAffine();if(!G.isValid(I)||!G.isValid(A))throw Error("bad point: x or y not field elements");if(!j(I,A))throw Error("bad point: equation left != right");if(!E.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function m(E,I,A,S,P){return A=new k(G.mul(A.X,E),A.Y,A.Z),I=lG(S,I),A=lG(P,A),I.add(A)}class k{static BASE=new k(Y.Gx,Y.Gy,G.ONE);static ZERO=new k(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(E,I,A){this.X=v("x",E),this.Y=v("y",I,!0),this.Z=v("z",A),Object.freeze(this)}static CURVE(){return Y}static fromAffine(E){let{x:I,y:A}=E||{};if(!E||!G.isValid(I)||!G.isValid(A))throw Error("invalid affine point");if(E instanceof k)throw Error("projective point not allowed");if(G.is0(I)&&G.is0(A))return k.ZERO;return new k(I,A,G.ONE)}static fromBytes(E){let I=k.fromAffine(w(Q$(E,void 0,"point")));return I.assertValidity(),I}static fromHex(E){return k.fromBytes(PJ(E))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(E=8,I=!0){if(_.createCache(this,E),!I)this.multiply(DY);return this}assertValidity(){x(this)}hasEvenY(){let{y:E}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(E)}equals(E){y(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.eql(G.mul(I,L),G.mul(P,S)),O=G.eql(G.mul(A,L),G.mul(g,S));return b&&O}negate(){return new k(this.X,G.neg(this.Y),this.Z)}double(){let{a:E,b:I}=Y,A=G.mul(I,DY),{X:S,Y:P,Z:g}=this,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=G.mul(S,S),r=G.mul(P,P),B=G.mul(g,g),o=G.mul(S,P);return o=G.add(o,o),O=G.mul(S,g),O=G.add(O,O),L=G.mul(E,O),b=G.mul(A,B),b=G.add(L,b),L=G.sub(r,b),b=G.add(r,b),b=G.mul(L,b),L=G.mul(o,L),O=G.mul(A,O),B=G.mul(E,B),o=G.sub(f,B),o=G.mul(E,o),o=G.add(o,O),O=G.add(f,f),f=G.add(O,f),f=G.add(f,B),f=G.mul(f,o),b=G.add(b,f),B=G.mul(P,g),B=G.add(B,B),f=G.mul(B,o),L=G.sub(L,f),O=G.mul(B,r),O=G.add(O,O),O=G.add(O,O),new k(L,b,O)}add(E){y(E);let{X:I,Y:A,Z:S}=this,{X:P,Y:g,Z:L}=E,b=G.ZERO,O=G.ZERO,f=G.ZERO,r=Y.a,B=G.mul(Y.b,DY),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.mul(S,L),G$=G.add(I,A),t=G.add(P,g);G$=G.mul(G$,t),t=G.add(o,q$),G$=G.sub(G$,t),t=G.add(I,S);let O$=G.add(P,L);return t=G.mul(t,O$),O$=G.add(o,Y$),t=G.sub(t,O$),O$=G.add(A,S),b=G.add(g,L),O$=G.mul(O$,b),b=G.add(q$,Y$),O$=G.sub(O$,b),f=G.mul(r,t),b=G.mul(B,Y$),f=G.add(b,f),b=G.sub(q$,f),f=G.add(q$,f),O=G.mul(b,f),q$=G.add(o,o),q$=G.add(q$,o),Y$=G.mul(r,Y$),t=G.mul(B,t),q$=G.add(q$,Y$),Y$=G.sub(o,Y$),Y$=G.mul(r,Y$),t=G.add(t,Y$),o=G.mul(q$,t),O=G.add(O,o),o=G.mul(O$,t),b=G.mul(G$,b),b=G.sub(b,o),o=G.mul(G$,q$),f=G.mul(O$,f),f=G.add(f,o),new k(b,O,f)}subtract(E){return this.add(E.negate())}is0(){return this.equals(k.ZERO)}multiply(E){let{endo:I}=q;if(!Q.isValidNot0(E))throw Error("invalid scalar: out of range");let A,S,P=(g)=>_.cached(this,g,(L)=>ZX(k,L));if(I){let{k1neg:g,k1:L,k2neg:b,k2:O}=u(E),{p:f,f:r}=P(L),{p:B,f:o}=P(O);S=r.add(o),A=m(I.beta,f,B,g,b)}else{let{p:g,f:L}=P(E);A=g,S=L}return ZX(k,[A,S])[0]}multiplyUnsafe(E){let{endo:I}=q,A=this;if(!Q.isValid(E))throw Error("invalid scalar: out of range");if(E===Iq||A.is0())return k.ZERO;if(E===P8)return A;if(_.hasCache(this))return this.multiply(E);if(I){let{k1neg:S,k1:P,k2neg:g,k2:L}=u(E),{p1:b,p2:O}=P7(k,A,P,L);return m(I.beta,b,O,S,g)}else return _.unsafe(A,E)}toAffine(E){return F(this,E)}isTorsionFree(){let{isTorsionFree:E}=q;if(X===P8)return!0;if(E)return E(k,this);return _.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:E}=q;if(X===P8)return this;if(E)return E(k,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(E=!0){return yG(E,"isCompressed"),this.assertValidity(),R(k,this,E)}toHex(E=!0){return CJ(this.toBytes(E))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let l=Q.BITS,_=new BX(k,q.endo?Math.ceil(l/2):l);return k.BASE.precompute(8),k}function b7($){return Uint8Array.of($?2:3)}function k7($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function X6($,q={}){let{Fn:J}=$,G=q.randomBytes||cq,Q=Object.assign(k7($.Fp,J),{seed:wX(J.ORDER)});function Y(R){try{let w=J.fromBytes(R);return J.isValidNot0(w)}catch(w){return!1}}function X(R,w){let{publicKey:N,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(w===!0&&Z!==N)return!1;if(w===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R=G(Q.seed)){return B7(Q$(R,Q.seed,"seed"),J.ORDER)}function V(R,w=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(w)}function W(R){let{secretKey:w,publicKey:N,publicKeyUncompressed:j}=Q;if(!B8(R))return;if("_lengths"in J&&J._lengths||w===N)return;let Z=Q$(R,void 0,"key").length;return Z===N||Z===j}function M(R,w,N=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(w)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(w).multiply(j).toBytes(N)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=zY(U,V);return Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function CX($,q,J={}){_0(q),LJ(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||cq,Q=J.hmac||((A,S)=>C8(q,A,S)),{Fp:Y,Fn:X}=$,{ORDER:U,BITS:V}=X,{keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R}=X6($,J),w={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},N=U*v7<Y.ORDER;function j(A){let S=U>>P8;return A>S}function Z(A,S){if(!X.isValidNot0(S))throw Error(`invalid signature ${A}: out of range 1..Point.Fn.ORDER`);return S}function T(){if(N)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function v(A,S){IX(S);let P=R.signature,g=S==="compact"?P:S==="recovered"?P+1:void 0;return Q$(A,g)}class y{r;s;recovery;constructor(A,S,P){if(this.r=Z("r",A),this.s=Z("s",S),P!=null){if(T(),![0,1,2,3].includes(P))throw Error("invalid recovery id");this.recovery=P}Object.freeze(this)}static fromBytes(A,S=w.format){v(A,S);let P;if(S==="der"){let{r:O,s:f}=tq.toSig(Q$(A));return new y(O,f)}if(S==="recovered")P=A[0],S="compact",A=A.subarray(1);let g=R.signature/2,L=A.subarray(0,g),b=A.subarray(g,g*2);return new y(X.fromBytes(L),X.fromBytes(b),P)}static fromHex(A,S){return this.fromBytes(PJ(A),S)}assertRecovery(){let{recovery:A}=this;if(A==null)throw Error("invalid recovery id: must be present");return A}addRecoveryBit(A){return new y(this.r,this.s,A)}recoverPublicKey(A){let{r:S,s:P}=this,g=this.assertRecovery(),L=g===2||g===3?S+U:S;if(!Y.isValid(L))throw Error("invalid recovery id: sig.r+curve.n != R.x");let b=Y.toBytes(L),O=$.fromBytes(L$(b7((g&1)===0),b)),f=X.inv(L),r=F(Q$(A,void 0,"msgHash")),B=X.create(-r*f),o=X.create(P*f),q$=$.BASE.multiplyUnsafe(B).add(O.multiplyUnsafe(o));if(q$.is0())throw Error("invalid recovery: point at infinify");return q$.assertValidity(),q$}hasHighS(){return j(this.s)}toBytes(A=w.format){if(IX(A),A==="der")return PJ(tq.hexFromSig(this));let{r:S,s:P}=this,g=X.toBytes(S),L=X.toBytes(P);if(A==="recovered")return T(),L$(Uint8Array.of(this.assertRecovery()),g,L);return L$(g,L)}toHex(A){return CJ(this.toBytes(A))}}let u=J.bits2int||function(S){if(S.length>8192)throw Error("input is too large");let P=oq(S),g=S.length*8-V;return g>0?P>>BigInt(g):P},F=J.bits2int_modN||function(S){return X.create(u(S))},x=uG(V);function m(A){return hG("num < 2^"+V,A,Iq,x),X.toBytes(A)}function k(A,S){return Q$(A,void 0,"message"),S?Q$(q(A),void 0,"prehashed message"):A}function l(A,S,P){let{lowS:g,prehash:L,extraEntropy:b}=TX(P,w);A=k(A,L);let O=F(A),f=X.fromBytes(S);if(!X.isValidNot0(f))throw Error("invalid private key");let r=[m(f),m(O)];if(b!=null&&b!==!1){let Y$=b===!0?G(R.secretKey):b;r.push(Q$(Y$,void 0,"extraEntropy"))}let B=L$(...r),o=O;function q$(Y$){let G$=u(Y$);if(!X.isValidNot0(G$))return;let t=X.inv(G$),O$=$.BASE.multiply(G$).toAffine(),A$=X.create(O$.x);if(A$===Iq)return;let T$=X.create(t*X.create(o+A$*f));if(T$===Iq)return;let m$=(O$.x===A$?0:2)|Number(O$.y&P8),M0=T$;if(g&&j(T$))M0=X.neg(T$),m$^=1;return new y(A$,M0,N?void 0:m$)}return{seed:B,k2sig:q$}}function _(A,S,P={}){let{seed:g,k2sig:L}=l(A,S,P);return M7(q.outputLen,X.BYTES,Q)(g,L).toBytes(P.format)}function E(A,S,P,g={}){let{lowS:L,prehash:b,format:O}=TX(g,w);if(P=Q$(P,void 0,"publicKey"),S=k(S,b),!B8(A)){let f=A instanceof y?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+f)}v(A,O);try{let f=y.fromBytes(A,O),r=$.fromBytes(P);if(L&&f.hasHighS())return!1;let{r:B,s:o}=f,q$=F(S),Y$=X.inv(o),G$=X.create(q$*Y$),t=X.create(B*Y$),O$=$.BASE.multiplyUnsafe(G$).add(r.multiplyUnsafe(t));if(O$.is0())return!1;return X.create(O$.x)===B}catch(f){return!1}}function I(A,S,P={}){let{prehash:g}=TX(P,w);return S=k(S,g),y.fromBytes(A,"recovered").recoverPublicKey(S).toBytes()}return Object.freeze({keygen:W,getPublicKey:M,getSharedSecret:z,utils:D,lengths:R,Point:$,sign:_,verify:E,recoverPublicKey:I,Signature:y,hash:q})}function m7($,q,J){return $&q^~$&J}function y7($,q,J){return $&q^$&J^q&J}class KY{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,q,J,G){this.blockLen=$,this.outputLen=q,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=UY(this.buffer)}update($){Tq(this),Q$($);let{view:q,buffer:J,blockLen:G}=this,Q=$.length;for(let Y=0;Y<Q;){let X=Math.min(G-this.pos,Q-Y);if(X===G){let U=UY($);for(;G<=Q-Y;Y+=G)this.process(U,Y);continue}if(J.set($.subarray(Y,Y+X),this.pos),this.pos+=X,Y+=X,this.pos===G)this.process(q,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){Tq(this),YY($,this),this.finished=!0;let{buffer:q,view:J,blockLen:G,isLE:Q}=this,{pos:Y}=this;if(q[Y++]=128,j0(this.buffer.subarray(Y)),this.padOffset>G-Y)this.process(J,0),Y=0;for(let M=Y;M<G;M++)q[M]=0;J.setBigUint64(G-8,BigInt(this.length*8),Q),this.process(J,0);let X=UY($),U=this.outputLen;if(U%4)throw Error("_sha2: outputLen must be aligned to 32bit");let V=U/4,W=this.get();if(V>W.length)throw Error("_sha2: outputLen bigger than state");for(let M=0;M<V;M++)X.setUint32(4*M,W[M],Q)}digest(){let{buffer:$,outputLen:q}=this;this.digestInto($);let J=$.slice(0,q);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:q,buffer:J,length:G,finished:Q,destroyed:Y,pos:X}=this;if($.destroyed=Y,$.finished=Q,$.length=G,$.pos=X,G%q)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var Eq=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Cq=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),r$=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),i$=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var HY=BigInt(4294967295),f7=BigInt(32);function U6($,q=!1){if(q)return{h:Number($&HY),l:Number($>>f7&HY)};return{h:Number($>>f7&HY)|0,l:Number($&HY)|0}}function OY($,q=!1){let J=$.length,G=new Uint32Array(J),Q=new Uint32Array(J);for(let Y=0;Y<J;Y++){let{h:X,l:U}=U6($[Y],q);[G[Y],Q[Y]]=[X,U]}return[G,Q]}var PX=($,q,J)=>$>>>J,LX=($,q,J)=>$<<32-J|q>>>J,_J=($,q,J)=>$>>>J|q<<32-J,vJ=($,q,J)=>$<<32-J|q>>>J,iG=($,q,J)=>$<<64-J|q>>>J-32,dG=($,q,J)=>$>>>J-32|q<<64-J;var x7=($,q,J)=>$<<J|q>>>32-J,h7=($,q,J)=>q<<J|$>>>32-J,u7=($,q,J)=>q<<J-32|$>>>64-J,p7=($,q,J)=>$<<J-32|q>>>64-J;function Jq($,q,J,G){let Q=(q>>>0)+(G>>>0);return{h:$+J+(Q/4294967296|0)|0,l:Q|0}}var l7=($,q,J)=>($>>>0)+(q>>>0)+(J>>>0),r7=($,q,J,G)=>q+J+G+($/4294967296|0)|0,i7=($,q,J,G)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0),d7=($,q,J,G,Q)=>q+J+G+Q+($/4294967296|0)|0,c7=($,q,J,G,Q)=>($>>>0)+(q>>>0)+(J>>>0)+(G>>>0)+(Q>>>0),n7=($,q,J,G,Q,Y)=>q+J+G+Q+Y+($/4294967296|0)|0;var W6=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),eq=new Uint32Array(64);class FX extends KY{constructor($){super(64,$,8,!1)}get(){let{A:$,B:q,C:J,D:G,E:Q,F:Y,G:X,H:U}=this;return[$,q,J,G,Q,Y,X,U]}set($,q,J,G,Q,Y,X,U){this.A=$|0,this.B=q|0,this.C=J|0,this.D=G|0,this.E=Q|0,this.F=Y|0,this.G=X|0,this.H=U|0}process($,q){for(let M=0;M<16;M++,q+=4)eq[M]=$.getUint32(q,!1);for(let M=16;M<64;M++){let z=eq[M-15],D=eq[M-2],R=p0(z,7)^p0(z,18)^z>>>3,w=p0(D,17)^p0(D,19)^D>>>10;eq[M]=w+eq[M-7]+R+eq[M-16]|0}let{A:J,B:G,C:Q,D:Y,E:X,F:U,G:V,H:W}=this;for(let M=0;M<64;M++){let z=p0(X,6)^p0(X,11)^p0(X,25),D=W+z+m7(X,U,V)+W6[M]+eq[M]|0,w=(p0(J,2)^p0(J,13)^p0(J,22))+y7(J,G,Q)|0;W=V,V=U,U=X,X=Y+D|0,Y=Q,Q=G,G=J,J=D+w|0}J=J+this.A|0,G=G+this.B|0,Q=Q+this.C|0,Y=Y+this.D|0,X=X+this.E|0,U=U+this.F|0,V=V+this.G|0,W=W+this.H|0,this.set(J,G,Q,Y,X,U,V,W)}roundClean(){j0(eq)}destroy(){this.set(0,0,0,0,0,0,0,0),j0(this.buffer)}}class o7 extends FX{A=Eq[0]|0;B=Eq[1]|0;C=Eq[2]|0;D=Eq[3]|0;E=Eq[4]|0;F=Eq[5]|0;G=Eq[6]|0;H=Eq[7]|0;constructor(){super(32)}}class M6 extends FX{A=Cq[0]|0;B=Cq[1]|0;C=Cq[2]|0;D=Cq[3]|0;E=Cq[4]|0;F=Cq[5]|0;G=Cq[6]|0;H=Cq[7]|0;constructor(){super(28)}}var a7=(()=>OY(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),z6=(()=>a7[0])(),R6=(()=>a7[1])(),$J=new Uint32Array(80),qJ=new Uint32Array(80);class cG extends KY{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:q,Bh:J,Bl:G,Ch:Q,Cl:Y,Dh:X,Dl:U,Eh:V,El:W,Fh:M,Fl:z,Gh:D,Gl:R,Hh:w,Hl:N}=this;return[$,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N]}set($,q,J,G,Q,Y,X,U,V,W,M,z,D,R,w,N){this.Ah=$|0,this.Al=q|0,this.Bh=J|0,this.Bl=G|0,this.Ch=Q|0,this.Cl=Y|0,this.Dh=X|0,this.Dl=U|0,this.Eh=V|0,this.El=W|0,this.Fh=M|0,this.Fl=z|0,this.Gh=D|0,this.Gl=R|0,this.Hh=w|0,this.Hl=N|0}process($,q){for(let T=0;T<16;T++,q+=4)$J[T]=$.getUint32(q),qJ[T]=$.getUint32(q+=4);for(let T=16;T<80;T++){let v=$J[T-15]|0,y=qJ[T-15]|0,u=_J(v,y,1)^_J(v,y,8)^PX(v,y,7),F=vJ(v,y,1)^vJ(v,y,8)^LX(v,y,7),x=$J[T-2]|0,m=qJ[T-2]|0,k=_J(x,m,19)^iG(x,m,61)^PX(x,m,6),l=vJ(x,m,19)^dG(x,m,61)^LX(x,m,6),_=i7(F,l,qJ[T-7],qJ[T-16]),E=d7(_,u,k,$J[T-7],$J[T-16]);$J[T]=E|0,qJ[T]=_|0}let{Ah:J,Al:G,Bh:Q,Bl:Y,Ch:X,Cl:U,Dh:V,Dl:W,Eh:M,El:z,Fh:D,Fl:R,Gh:w,Gl:N,Hh:j,Hl:Z}=this;for(let T=0;T<80;T++){let v=_J(M,z,14)^_J(M,z,18)^iG(M,z,41),y=vJ(M,z,14)^vJ(M,z,18)^dG(M,z,41),u=M&D^~M&w,F=z&R^~z&N,x=c7(Z,y,F,R6[T],qJ[T]),m=n7(x,j,v,u,z6[T],$J[T]),k=x|0,l=_J(J,G,28)^iG(J,G,34)^iG(J,G,39),_=vJ(J,G,28)^dG(J,G,34)^dG(J,G,39),E=J&Q^J&X^Q&X,I=G&Y^G&U^Y&U;j=w|0,Z=N|0,w=D|0,N=R|0,D=M|0,R=z|0,{h:M,l:z}=Jq(V|0,W|0,m|0,k|0),V=X|0,W=U|0,X=Q|0,U=Y|0,Q=J|0,Y=G|0;let A=l7(k,_,I);J=r7(A,m,l,E),G=A|0}({h:J,l:G}=Jq(this.Ah|0,this.Al|0,J|0,G|0)),{h:Q,l:Y}=Jq(this.Bh|0,this.Bl|0,Q|0,Y|0),{h:X,l:U}=Jq(this.Ch|0,this.Cl|0,X|0,U|0),{h:V,l:W}=Jq(this.Dh|0,this.Dl|0,V|0,W|0),{h:M,l:z}=Jq(this.Eh|0,this.El|0,M|0,z|0),{h:D,l:R}=Jq(this.Fh|0,this.Fl|0,D|0,R|0),{h:w,l:N}=Jq(this.Gh|0,this.Gl|0,w|0,N|0),{h:j,l:Z}=Jq(this.Hh|0,this.Hl|0,j|0,Z|0),this.set(J,G,Q,Y,X,U,V,W,M,z,D,R,w,N,j,Z)}roundClean(){j0($J,qJ)}destroy(){j0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class D6 extends cG{Ah=i$[0]|0;Al=i$[1]|0;Bh=i$[2]|0;Bl=i$[3]|0;Ch=i$[4]|0;Cl=i$[5]|0;Dh=i$[6]|0;Dl=i$[7]|0;Eh=i$[8]|0;El=i$[9]|0;Fh=i$[10]|0;Fl=i$[11]|0;Gh=i$[12]|0;Gl=i$[13]|0;Hh=i$[14]|0;Hl=i$[15]|0;constructor(){super(64)}}class s7 extends cG{Ah=r$[0]|0;Al=r$[1]|0;Bh=r$[2]|0;Bl=r$[3]|0;Ch=r$[4]|0;Cl=r$[5]|0;Dh=r$[6]|0;Dl=r$[7]|0;Eh=r$[8]|0;El=r$[9]|0;Fh=r$[10]|0;Fl=r$[11]|0;Gh=r$[12]|0;Gl=r$[13]|0;Hh=r$[14]|0;Hl=r$[15]|0;constructor(){super(48)}}var $0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),q0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class K6 extends cG{Ah=$0[0]|0;Al=$0[1]|0;Bh=$0[2]|0;Bl=$0[3]|0;Ch=$0[4]|0;Cl=$0[5]|0;Dh=$0[6]|0;Dl=$0[7]|0;Eh=$0[8]|0;El=$0[9]|0;Fh=$0[10]|0;Fl=$0[11]|0;Gh=$0[12]|0;Gl=$0[13]|0;Hh=$0[14]|0;Hl=$0[15]|0;constructor(){super(28)}}class H6 extends cG{Ah=q0[0]|0;Al=q0[1]|0;Bh=q0[2]|0;Bl=q0[3]|0;Ch=q0[4]|0;Cl=q0[5]|0;Dh=q0[6]|0;Dl=q0[7]|0;Eh=q0[8]|0;El=q0[9]|0;Fh=q0[10]|0;Fl=q0[11]|0;Gh=q0[12]|0;Gl=q0[13]|0;Hh=q0[14]|0;Hl=q0[15]|0;constructor(){super(32)}}var wY=S8(()=>new o7,nq(1));var t7=S8(()=>new s7,nq(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O6=BigInt(1),e7=BigInt(2),w6=BigInt(3),N6=BigInt(5),I3=BigInt(8),$5=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function j6($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=$5,U=$*$%Y*$%Y,V=v0(U,e7,Y)*U%Y,W=v0(V,O6,Y)*$%Y,M=v0(W,N6,Y)*W%Y,z=v0(M,q,Y)*M%Y,D=v0(z,J,Y)*z%Y,R=v0(D,G,Y)*D%Y,w=v0(R,Q,Y)*R%Y,N=v0(w,Q,Y)*R%Y,j=v0(N,q,Y)*M%Y;return{pow_p_5_8:v0(j,e7,Y)*$%Y,b2:U}}function A6($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var q5=(()=>{let $=$5;return F7({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=j6(q);return R0(v0(J,w6,$)*G,$)},adjustScalarBytes:A6})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z6=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),B6=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var S6=EX(Z6),gX=CX(S6,wY);var T6=EX(B6),J5=CX(T6,t7);function Q5($,q,J){if(_0($),J===void 0)J=new Uint8Array($.outputLen);return C8($,J,q)}var _X=Uint8Array.of(0),G5=Uint8Array.of();function Y5($,q,J,G=32){_0($),y$(G,"length");let Q=$.outputLen;if(G>255*Q)throw Error("Length must be <= 255*HashLen");let Y=Math.ceil(G/Q);if(J===void 0)J=G5;else Q$(J,void 0,"info");let X=new Uint8Array(Y*Q),U=C8.create($,q),V=U._cloneInto(),W=new Uint8Array(U.outputLen);for(let M=0;M<Y;M++)_X[0]=M+1,V.update(M===0?G5:W).update(J).update(_X).digestInto(W),X.set(W,Q*M),U._cloneInto(V);return U.destroy(),V.destroy(),j0(W,_X),X.slice(0,G)}var I6=BigInt(0),nG=BigInt(1),E6=BigInt(2),C6=BigInt(7),P6=BigInt(256),L6=BigInt(113),V5=[],W5=[],M5=[];for(let $=0,q=nG,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],V5.push(2*(5*G+J)),W5.push(($+1)*($+2)/2%64);let Q=I6;for(let Y=0;Y<7;Y++)if(q=(q<<nG^(q>>C6)*L6)%P6,q&E6)Q^=nG<<(nG<<BigInt(Y))-nG;M5.push(Q)}var z5=OY(M5,!0),F6=z5[0],g6=z5[1],X5=($,q,J)=>J>32?u7($,q,J):x7($,q,J),U5=($,q,J)=>J>32?p7($,q,J):h7($,q,J);function _6($,q=24){let J=new Uint32Array(10);for(let G=24-q;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let U=(X+8)%10,V=(X+2)%10,W=J[V],M=J[V+1],z=X5(W,M,1)^J[U],D=U5(W,M,1)^J[U+1];for(let R=0;R<50;R+=10)$[X+R]^=z,$[X+R+1]^=D}let Q=$[2],Y=$[3];for(let X=0;X<24;X++){let U=W5[X],V=X5(Q,Y,U),W=U5(Q,Y,U),M=V5[X];Q=$[M],Y=$[M+1],$[M]=V,$[M+1]=W}for(let X=0;X<50;X+=10){for(let U=0;U<10;U++)J[U]=$[X+U];for(let U=0;U<10;U++)$[X+U]^=~J[(U+2)%10]&J[(U+4)%10]}$[0]^=F6[G],$[1]^=g6[G]}j0(J)}class NY{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,q,J,G=!1,Q=24){if(this.blockLen=$,this.suffix=q,this.outputLen=J,this.enableXOF=G,this.rounds=Q,y$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=XY(this.state)}clone(){return this._cloneInto()}keccak(){MX(this.state32),_6(this.state32,this.rounds),MX(this.state32),this.posOut=0,this.pos=0}update($){Tq(this),Q$($);let{blockLen:q,state:J}=this,G=$.length;for(let Q=0;Q<G;){let Y=Math.min(q-this.pos,G-Q);for(let X=0;X<Y;X++)J[this.pos++]^=$[Q++];if(this.pos===q)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:q,pos:J,blockLen:G}=this;if($[J]^=q,(q&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){Tq(this,!1),Q$($),this.finish();let q=this.state,{blockLen:J}=this;for(let G=0,Q=$.length;G<Q;){if(this.posOut>=J)this.keccak();let Y=Math.min(J-this.posOut,Q-G);$.set(q.subarray(this.posOut,this.posOut+Y),G),this.posOut+=Y,G+=Y}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return y$($),this.xofInto(new Uint8Array($))}digestInto($){if(YY($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,j0(this.state)}_cloneInto($){let{blockLen:q,suffix:J,outputLen:G,rounds:Q,enableXOF:Y}=this;return $||=new NY(q,J,G,Y,Q),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=Q,$.suffix=J,$.outputLen=G,$.enableXOF=Y,$.destroyed=this.destroyed,$}}var R5=($,q,J,G={})=>S8(()=>new NY(q,$,J),G);var bJ=R5(6,136,32,nq(8));var D5=R5(6,72,64,nq(10));var K5=($,q,J,G={})=>S8((Q={})=>new NY(q,$,Q.dkLen===void 0?J:Q.dkLen,!0),G),H5=K5(31,168,16,nq(11)),Gq=K5(31,136,32,nq(12));function vX($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function w5($){return vX($),($&$-1)===0&&$!==0}function bX($,q){vX($);let J=0;for(let G=0;G<q;G++,$>>>=1)J=J<<1|$&1;return J}function N5($){return vX($),31-Math.clz32($)}function O5($){let q=$.length;if(q<2||!w5(q))throw Error("n must be a power of 2 and greater than 1. Got "+q);let J=N5(q);for(let G=0;G<q;G++){let Q=bX(G,J);if(G<Q){let Y=$[G];$[G]=$[Q],$[Q]=Y}}return $}var kX=($,q)=>{let{N:J,roots:G,dit:Q,invertButterflies:Y=!1,skipStages:X=0,brp:U=!0}=q,V=N5(J);if(!w5(J))throw Error("FFT: Polynomial size should be power of two");let W=Q!==Y;return(M)=>{if(M.length!==J)throw Error("FFT: wrong Polynomial length");if(Q&&U)O5(M);for(let z=0,D=1;z<V-X;z++){let R=Q?z+1+X:V-z,w=1<<R,N=w>>1,j=J>>R;for(let Z=0;Z<J;Z+=w)for(let T=0,v=D++;T<N;T++){let y=Y?Q?J-v:v:T*j,u=Z+T,F=Z+T+N,x=G[y],m=M[F],k=M[u];if(W){let l=$.mul(m,x);M[u]=$.add(k,l),M[F]=$.sub(k,l)}else if(Y)M[u]=$.add(m,k),M[F]=$.mul($.sub(m,k),x);else M[u]=$.add(k,m),M[F]=$.mul($.sub(k,m),x)}}if(!Q&&U)O5(M);return M}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var Qq=cq;function jY($,q){if($.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function j5($){return Uint8Array.from($)}function kJ($,...q){let J=(Q)=>typeof Q==="number"?Q:Q.bytesLen,G=q.reduce((Q,Y)=>Q+J(Y),0);return{bytesLen:G,encode:(Q)=>{let Y=new Uint8Array(G);for(let X=0,U=0;X<q.length;X++){let V=q[X],W=J(V),M=typeof V==="number"?Q[X]:V.encode(Q[X]);if(Q$(M,W,$),Y.set(M,U),typeof V!=="number")M.fill(0);U+=W}return Y},decode:(Q)=>{Q$(Q,G,$);let Y=[];for(let X of q){let U=J(X),V=Q.subarray(0,U);Y.push(typeof X==="number"?V:X.decode(V)),Q=Q.subarray(U)}return Y}}}function AY($,q){let J=q*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==q)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${q}`);let Q=new Uint8Array(J);for(let Y=0,X=0;Y<G.length;Y++){let U=$.encode(G[Y]);Q.set(U,X),U.fill(0),X+=U.length}return Q},decode:(G)=>{Q$(G,J);let Q=[];for(let Y=0;Y<G.length;Y+=$.bytesLen)Q.push($.decode(G.subarray(Y,Y+$.bytesLen)));return Q}}}function v$(...$){for(let q of $)if(Array.isArray(q))for(let J of q)J.fill(0);else q.fill(0)}function mX($){return(1<<$)-1}var h3=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var A5=($)=>{let{newPoly:q,N:J,Q:G,F:Q,ROOT_OF_UNITY:Y,brvBits:X,isKyber:U}=$,V=(T,v=G)=>{let y=T%v|0;return(y>=0?y|0:v+y|0)|0},W=(T,v=G)=>{let y=V(T,v)|0;return(y>v>>1?y-v|0:y)|0};function M(){let T=q(J);for(let v=0;v<J;v++){let y=bX(v,X),u=BigInt(Y)**BigInt(y)%BigInt(G);T[v]=Number(u)|0}return T}let z=M(),D={add:(T,v)=>V((T|0)+(v|0))|0,sub:(T,v)=>V((T|0)-(v|0))|0,mul:(T,v)=>V((T|0)*(v|0))|0,inv:(T)=>{throw Error("not implemented")}},R={N:J,roots:z,invertButterflies:!0,skipStages:U?1:0,brp:!1},w=kX(D,{dit:!1,...R}),N=kX(D,{dit:!0,...R});return{mod:V,smod:W,nttZetas:z,NTT:{encode:(T)=>{return w(T)},decode:(T)=>{N(T);for(let v=0;v<T.length;v++)T[v]=V(Q*T[v]);return T}},bitsCoder:(T,v)=>{let y=mX(T),u=T*(J/8);return{bytesLen:u,encode:(F)=>{let x=new Uint8Array(u);for(let m=0,k=0,l=0,_=0;m<F.length;m++){k|=(v.encode(F[m])&y)<<l,l+=T;for(;l>=8;l-=8,k>>=8)x[_++]=k&mX(l)}return x},decode:(F)=>{let x=q(J);for(let m=0,k=0,l=0,_=0;m<F.length;m++){k|=F[m]<<l,l+=8;for(;l>=T;l-=T,k>>=T)x[_++]=v.decode(k&y)}return x}}}}},v6=($)=>(q,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(q.length+2);G.set(q);let Q=q.length,Y=new Uint8Array(J),X=$.create({}),U=0,V=0;return{stats:()=>({calls:U,xofs:V}),get:(W,M)=>{return G[Q+0]=W,G[Q+1]=M,X.destroy(),X=$.create({}).update(G),U++,()=>{return V++,X.xofInto(Y)}},clean:()=>{X.destroy(),v$(Y,G)}}},Z5=v6(H5);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var J0=256,Pq=3329,b6=3303,k6=17,{mod:sG,nttZetas:m6,NTT:mJ,bitsCoder:y6}=A5({N:J0,Q:Pq,F:b6,ROOT_OF_UNITY:k6,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),yX={512:{N:J0,Q:Pq,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:J0,Q:Pq,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:J0,Q:Pq,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},f6=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let q=2**($-1);return{encode:(J)=>((J<<$)+Pq/2)/Pq,decode:(J)=>J*Pq+q>>>$}},oG=($)=>y6($,f6($));function yJ($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]+q[J])}function x6($,q){for(let J=0;J<J0;J++)$[J]=sG($[J]-q[J])}function h6($,q,J,G,Q){let Y=sG(q*G*Q+$*J),X=sG($*G+q*J);return{c0:Y,c1:X}}function ZY($,q){for(let J=0;J<J0/2;J++){let G=m6[64+(J>>1)];if(J&1)G=-G;let{c0:Q,c1:Y}=h6($[2*J+0],$[2*J+1],q[2*J+0],q[2*J+1],G);$[2*J+0]=Q,$[2*J+1]=Y}return $}function B5($){let q=new Uint16Array(J0);for(let J=0;J<J0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let Q=0;J<J0&&Q+3<=G.length;Q+=3){let Y=(G[Q+0]>>0|G[Q+1]<<8)&4095,X=(G[Q+1]>>4|G[Q+2]<<4)&4095;if(Y<Pq)q[J++]=Y;if(J<J0&&X<Pq)q[J++]=X}}return q}function aG($,q,J,G){let Q=$(G*J0/4,q,J),Y=new Uint16Array(J0),X=XY(Q),U=0;for(let V=0,W=0,M=0,z=0;V<X.length;V++){let D=X[V];for(let R=0;R<32;R++)if(M+=D&1,D>>=1,U+=1,U===G)z=M,M=0;else if(U===2*G)Y[W++]=sG(z-M),M=0,U=0}if(U)throw Error(`sampleCBD: leftover bits: ${U}`);return Y}var u6=($)=>{let{K:q,PRF:J,XOF:G,HASH512:Q,ETA1:Y,ETA2:X,du:U,dv:V}=$,W=oG(1),M=oG(V),z=oG(U),D=kJ("publicKey",AY(oG(12),q),32),R=AY(oG(12),q),w=kJ("ciphertext",AY(z,q),M),N=kJ("seed",32,32);return{secretCoder:R,lengths:{secretKey:R.bytesLen,publicKey:D.bytesLen,cipherText:w.bytesLen},keygen:(j)=>{Q$(j,32,"seed");let Z=new Uint8Array(33);Z.set(j),Z[32]=q;let T=Q(Z),[v,y]=N.decode(T),u=[],F=[];for(let k=0;k<q;k++)u.push(mJ.encode(aG(J,y,k,Y)));let x=G(v);for(let k=0;k<q;k++){let l=mJ.encode(aG(J,y,q+k,Y));for(let _=0;_<q;_++){let E=B5(x.get(_,k));yJ(l,ZY(E,u[_]))}F.push(l)}x.clean();let m={publicKey:D.encode([F,v]),secretKey:R.encode(u)};return v$(v,y,u,F,Z,T),m},encrypt:(j,Z,T)=>{let[v,y]=D.decode(j),u=[];for(let _=0;_<q;_++)u.push(mJ.encode(aG(J,T,_,Y)));let F=G(y),x=new Uint16Array(J0),m=[];for(let _=0;_<q;_++){let E=aG(J,T,q+_,X),I=new Uint16Array(J0);for(let A=0;A<q;A++){let S=B5(F.get(_,A));yJ(I,ZY(S,u[A]))}yJ(E,mJ.decode(I)),m.push(E),yJ(x,ZY(v[_],u[_])),v$(I)}F.clean();let k=aG(J,T,2*q,X);yJ(k,mJ.decode(x));let l=W.decode(Z);return yJ(l,k),v$(v,u,x,k),w.encode([m,l])},decrypt:(j,Z)=>{let[T,v]=w.decode(j),y=R.decode(Z),u=new Uint16Array(J0);for(let F=0;F<q;F++)yJ(u,ZY(y[F],mJ.encode(T[F])));return x6(v,mJ.decode(u)),v$(u,y,T),W.encode(v)}}};function fX($){let q=u6($),{HASH256:J,HASH512:G,KDF:Q}=$,{secretCoder:Y,lengths:X}=q,U=kJ("secretKey",X.secretKey,X.publicKey,32,32),V=32,W=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:U.bytesLen},keygen:(M=Qq(64))=>{Q$(M,64,"seed");let{publicKey:z,secretKey:D}=q.keygen(M.subarray(0,32)),R=J(z),w=U.encode([D,z,R,M.subarray(32)]);return v$(D,R),{publicKey:z,secretKey:w}},getPublicKey:(M)=>{let[z,D,R,w]=U.decode(M);return Uint8Array.from(D)},encapsulate:(M,z=Qq(32))=>{Q$(M,X.publicKey,"publicKey"),Q$(z,32,"message");let D=M.subarray(0,384*$.K),R=Y.encode(Y.decode(j5(D)));if(!jY(R,D))throw v$(R),Error("ML-KEM.encapsulate: wrong publicKey modulus");v$(R);let w=G.create().update(z).update(J(M)).digest(),N=q.encrypt(M,z,w.subarray(32,64));return v$(w.subarray(32)),{cipherText:N,sharedSecret:w.subarray(0,32)}},decapsulate:(M,z)=>{Q$(z,U.bytesLen,"secretKey"),Q$(M,X.cipherText,"cipherText");let D=U.bytesLen-96,R=D+32,w=J(z.subarray(D/2,R));if(!jY(w,z.subarray(R,R+32)))throw Error("invalid secretKey: hash check failed");let[N,j,Z,T]=U.decode(z),v=q.decrypt(M,N),y=G.create().update(v).update(Z).digest(),u=y.subarray(0,32),F=q.encrypt(j,v,y.subarray(32,64)),x=jY(M,F),m=Q.create({dkLen:32}).update(T).update(M).digest();return v$(v,F,!x?u:m),x?u:m}}}function p6($,q,J){return Gq.create({dkLen:$}).update(q).update(new Uint8Array([J])).digest()}var xX={HASH256:bJ,HASH512:D5,KDF:Gq,XOF:Z5,PRF:p6},s3=fX({...xX,...yX[512]}),tG=fX({...xX,...yX[768]}),S5=fX({...xX,...yX[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function l6($,q=!1){let{lengths:J,keygen:G}=$;if(q){let Y=$.Point.Fn;if(!Y)throw Error("No Point.Fn");G=(X=Qq(J.seed))=>{Q$(X,J.seed,"seed");let U=Y.isLE?aq(X):oq(X),V=Y.toBytes(Y.create(U));return{secretKey:V,publicKey:$.getPublicKey(V)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(Q)=>$.getPublicKey(Q)}}function hX($,q=!1){let J=l6($,q);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,Q=Qq($.lengths.seed)){let Y=this.keygen(Q).secretKey,X=this.decapsulate(G,Y),U=$.getPublicKey(Y);return v$(Y),{sharedSecret:X,cipherText:U}},decapsulate(G,Q){let Y=$.getSharedSecret(Q,G);return $.lengths.publicKeyHasPrefix?Y.subarray(1):Y}}}function eG($,q){return kJ(q,...$.map((J)=>{if(typeof J.lengths[q]!=="number")throw Error("wrong length: "+q);return J.lengths[q]}))}function uX($){return(q,J)=>$(q,{dkLen:J})}function r6($,q,...J){let G=eG(J,"seed"),Q=eG(J,"publicKey");if($===void 0)$=G.bytesLen;y$($);function Y(X){Q$(X,$);let U=G.decode(q(X,G.bytesLen)),V=J.map((z,D)=>z.keygen(U[D])),W=V.map((z)=>z.secretKey),M=V.map((z)=>z.publicKey);return{secretKey:W,publicKey:M}}return{info:{lengths:{seed:$,publicKey:Q.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=Qq($)){let{publicKey:U,secretKey:V}=Y(X),W=Q.encode(U);return v$(U),v$(V),{secretKey:X,publicKey:W}},expandDecapsulationKey:Y,realSeedLen:$}}function BY($,q,J,G,...Q){let Y=r6($,J,...Q),X=eG(Q,"cipherText"),U=eG(Q,"publicKey"),V=eG(Q,"msg");if(q===void 0)q=V.bytesLen;return y$(q),{lengths:{...Y.info.lengths,msg:q,msgRand:V.bytesLen,cipherText:X.bytesLen},getPublicKey:Y.getPublicKey,keygen:Y.keygen,encapsulate(W,M=Qq(V.bytesLen)){let z=U.decode(W),D=V.decode(M),R=Q.map((Z,T)=>Z.encapsulate(z[T],D[T])),w=R.map((Z)=>Z.sharedSecret),N=R.map((Z)=>Z.cipherText),j={sharedSecret:G(z,N,w),cipherText:X.encode(N)};return v$(w,N),j},decapsulate(W,M){let z=X.decode(W),{publicKey:D,secretKey:R}=Y.expandDecapsulationKey(M),w=Q.map((N,j)=>N.decapsulate(z[j],R[j]));return G(D,z,w)}}}function T5($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,uX(G),(Y,X,U)=>Q(L$(U[0],U[1],X[1],Y[1],sq($))),q,J)}var VF=T5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",tG,hX(gX,!0),Gq,bJ),WF=T5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",S5,hX(J5,!0),Gq,bJ);function i6($,q,J,G,Q){return _0(G),_0(Q),BY(32,32,uX(G),(Y,X,U)=>{let V=L$(U[0],U[1],X[0],Y[0],X[1],Y[1],sq($)),W=32,M=L$(sq("hybrid_prk"),V),z=Q5(Q,M),D=L$(T8(32,2),sq("shared_secret"),sq("")),R=Y5(Q,z,D,32);return v$(z,D,M,V),R},q,J)}var I5=hX(q5),MF=i6("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",tG,I5,Gq,wY),d6=(()=>BY(32,32,uX(Gq),($,q,J)=>bJ(L$(J[0],J[1],q[1],$[1],sq("\\.//^\\"))),tG,I5))();function c6($,q,J,G){let Q=$.Point.Fn;if(!Q)throw Error("no Point.Fn");function Y(X){let U;for(let M=0,z=q;;M=z,z+=q){if(z>X.length)throw Error("rejection sampling failed");if(U=Q.fromBytes(X.subarray(M,z),!0),Q.isValidNot0(U))break}let V=Q.toBytes(Q.create(U)),W=$.getPublicKey(V,!1);return{secretKey:V,publicKey:W}}return{lengths:{secretKey:q,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=Qq(G)){return Q$(X,G,"seed"),Y(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,U=Qq(G)){Q$(U,G,"rand");let{secretKey:V}=Y(U),W=this.decapsulate(X,V),M=$.getPublicKey(V,!1);return v$(V),{sharedSecret:W,cipherText:M}},decapsulate(X,U){return $.getSharedSecret(U,X).subarray(1)}}}function n6($,q,J,G){let{secretKey:Q,publicKeyUncompressed:Y}=J.lengths;if(!Q||!Y)throw Error("wrong curve");let X=c6(J,Q,Y,G),U=64,V=U+G;return BY(32,32,(W)=>{Q$(W,32);let M=Gq(W,{dkLen:V}),z=M.subarray(0,U),D=M.subarray(U,V);return L$(z,D)},(W,M,z)=>bJ(L$(z[0],z[1],M[1],W[1],sq($))),q,X)}var o6=(()=>n6("MLKEM768-P256",tG,gX,128))();var pX=d6,E5=o6;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Z$=($,q,J)=>x$($,q,J),rX=C$,L8=cQ,d$=(...$)=>i9(...$),F8=($)=>CG($),g8=p9,_8=($)=>Nq($),TY=BigInt(0),lX=BigInt(1);function Lq($,q=""){if(typeof $!=="boolean"){let J=q&&`"${q}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function IY($){if(typeof $==="bigint"){if(!SY($))throw RangeError("positive bigint expected, got "+$)}else rX($);return $}function Yq($,q=""){if(typeof $!=="number"){let J=q&&`"${q}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=q&&`"${q}" `;throw RangeError(J+"expected safe integer, got "+$)}}function $Q($){let q=IY($).toString(16);return q.length&1?"0"+q:q}function C5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?TY:BigInt("0x"+$)}function fJ($){return C5(cQ($))}function l0($){return C5(cQ(JJ(x$($)).reverse()))}function EY($,q){if(C$(q),q===0)throw RangeError("zero length");$=IY($);let J=$.toString(16);if(J.length>q*2)throw RangeError("number too large");return CG(J.padStart(q*2,"0"))}function qQ($,q){return EY($,q).reverse()}function P5($,q){if($=Z$($),q=Z$(q),$.length!==q.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^q[G];return J===0}function JJ($){return Uint8Array.from(Z$($))}function CY($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(q,J)=>{let G=q.charCodeAt(0);if(q.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var SY=($)=>typeof $==="bigint"&&TY<=$;function a6($,q,J){return SY($)&&SY(q)&&SY(J)&&q<=$&&$<J}function Fq($,q,J,G){if(!a6(q,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+q)}function v8($){if($<TY)throw Error("expected non-negative bigint, got "+$);let q;for(q=0;$>TY;$>>=lX,q+=1);return q}var JQ=($)=>(lX<<BigInt($))-lX;function L5($,q,J){if(C$($,"hashLen"),C$(q,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(j)=>new Uint8Array(j),Q=Uint8Array.of(),Y=Uint8Array.of(0),X=Uint8Array.of(1),U=1000,V=G($),W=G($),M=0,z=()=>{V.fill(1),W.fill(0),M=0},D=(...j)=>J(W,d$(V,...j)),R=(j=Q)=>{if(W=D(Y,j),V=D(),j.length===0)return;W=D(X,j),V=D()},w=()=>{if(M++>=U)throw Error("drbg: tried max amount of iterations");let j=0,Z=[];while(j<q){V=D();let T=V.slice();Z.push(T),j+=V.length}return d$(...Z)};return(j,Z)=>{z(),R(j);let T=void 0;while((T=Z(w()))===void 0)R();return z(),T}}function b0($,q={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Y,X,U){if(!U&&X!=="function"&&!Object.hasOwn($,Y))throw TypeError(`param "${Y}" is invalid: expected own property`);let V=$[Y];if(U&&V===void 0)return;let W=typeof V;if(W!==X||V===null)throw TypeError(`param "${Y}" is invalid: expected ${X}, got ${W}`)}let Q=(Y,X)=>Object.entries(Y).forEach(([U,V])=>G(U,V,X));Q(q,!1),Q(J,!0)}var iX=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var c$=BigInt(0),I$=BigInt(1),xJ=BigInt(2),v5=BigInt(3),b5=BigInt(4),k5=BigInt(5),s6=BigInt(7),m5=BigInt(8),t6=BigInt(9),y5=BigInt(16);function B$($,q){if(q<=c$)throw Error("mod: expected positive modulus, got "+q);let J=$%q;return J>=c$?J:q+J}function k0($,q,J){if(q<c$)throw Error("pow2: expected non-negative exponent, got "+q);let G=$;while(q-- >c$)G*=G,G%=J;return G}function F5($,q){if($===c$)throw Error("invert: expected non-zero number");if(q<=c$)throw Error("invert: expected positive modulus, got "+q);let J=B$($,q),G=q,Q=c$,Y=I$,X=I$,U=c$;while(J!==c$){let W=G/J,M=G-J*W,z=Q-X*W,D=Y-U*W;G=J,J=M,Q=X,Y=U,X=z,U=D}if(G!==I$)throw Error("invert: does not exist");return B$(Q,q)}function dX($,q,J){let G=$;if(!G.eql(G.sqr(q),J))throw Error("Cannot find square root")}function f5($,q){let J=$,G=(J.ORDER+I$)/b5,Q=J.pow(q,G);return dX(J,Q,q),Q}function e6($,q){let J=$,G=(J.ORDER-k5)/m5,Q=J.mul(q,xJ),Y=J.pow(Q,G),X=J.mul(q,Y),U=J.mul(J.mul(X,xJ),Y),V=J.mul(X,J.sub(U,J.ONE));return dX(J,V,q),V}function $w($){let q=PY($),J=x5($),G=J(q,q.neg(q.ONE)),Q=J(q,G),Y=J(q,q.neg(G)),X=($+s6)/y5;return(U,V)=>{let W=U,M=W.pow(V,X),z=W.mul(M,G),D=W.mul(M,Q),R=W.mul(M,Y),w=W.eql(W.sqr(z),V),N=W.eql(W.sqr(D),V);M=W.cmov(M,z,w),z=W.cmov(R,D,N);let j=W.eql(W.sqr(z),V),Z=W.cmov(M,z,j);return dX(W,Z,V),Z}}function x5($){if($<v5)throw Error("sqrt is not defined for small field");let q=$-I$,J=0;while(q%xJ===c$)q/=xJ,J++;let G=xJ,Q=PY($);while(g5(Q,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return f5;let Y=Q.pow(G,q),X=(q+I$)/xJ;return function(V,W){let M=V;if(M.is0(W))return W;if(g5(M,W)!==1)throw Error("Cannot find square root");let z=J,D=M.mul(M.ONE,Y),R=M.pow(W,q),w=M.pow(W,X);while(!M.eql(R,M.ONE)){if(M.is0(R))return M.ZERO;let N=1,j=M.sqr(R);while(!M.eql(j,M.ONE))if(N++,j=M.sqr(j),N===z)throw Error("Cannot find square root");let Z=I$<<BigInt(z-N-1),T=M.pow(D,Z);z=N,D=M.sqr(T),R=M.mul(R,D),w=M.mul(w,T)}return w}}function qw($){if($%b5===v5)return f5;if($%m5===k5)return e6;if($%y5===t6)return $w($);return x5($)}var gq=($,q)=>(B$($,q)&I$)===I$,Jw=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function cX($){let q={ORDER:"bigint",BYTES:"number",BITS:"number"},J=Jw.reduce((G,Q)=>{return G[Q]="function",G},q);if(b0($,J),Yq($.BYTES,"BYTES"),Yq($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=I$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function Gw($,q,J){let G=$;if(J<c$)throw Error("invalid exponent, negatives unsupported");if(J===c$)return G.ONE;if(J===I$)return q;let Q=G.ONE,Y=q;while(J>c$){if(J&I$)Q=G.mul(Q,Y);Y=G.sqr(Y),J>>=I$}return Q}function GQ($,q,J=!1){let G=$,Q=Array(q.length).fill(J?G.ZERO:void 0),Y=q.reduce((U,V,W)=>{if(G.is0(V))return U;return Q[W]=U,G.mul(U,V)},G.ONE),X=G.inv(Y);return q.reduceRight((U,V,W)=>{if(G.is0(V))return U;return Q[W]=G.mul(U,Q[W]),G.mul(U,V)},X),Q}function g5($,q){let J=$,G=(J.ORDER-I$)/xJ,Q=J.pow(q,G),Y=J.eql(Q,J.ONE),X=J.eql(Q,J.ZERO),U=J.eql(Q,J.neg(J.ONE));if(!Y&&!X&&!U)throw Error("invalid Legendre symbol result");return Y?1:X?0:-1}function Qw($,q){if(q!==void 0)rX(q);if($<=c$)throw Error("invalid n length: expected positive n, got "+$);if(q!==void 0&&q<1)throw Error("invalid n length: expected positive bit length, got "+q);let J=v8($);if(q!==void 0&&q<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${q})`);let G=q!==void 0?q:J,Q=Math.ceil(G/8);return{nBitLength:G,nByteLength:Q}}var _5=new WeakMap;class nX{ORDER;BITS;BYTES;isLE;ZERO=c$;ONE=I$;_lengths;_mod;constructor($,q={}){if($<=I$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,q!=null&&typeof q==="object"){if(typeof q.BITS==="number")J=q.BITS;if(typeof q.sqrt==="function")Object.defineProperty(this,"sqrt",{value:q.sqrt,enumerable:!0});if(typeof q.isLE==="boolean")this.isLE=q.isLE;if(q.allowedLengths)this._lengths=Object.freeze(q.allowedLengths.slice());if(typeof q.modFromBytes==="boolean")this._mod=q.modFromBytes}let{nBitLength:G,nByteLength:Q}=Qw($,J);if(Q>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=Q,Object.freeze(this)}create($){return B$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return c$<=$&&$<this.ORDER}is0($){return $===c$}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&I$)===I$}neg($){return B$(-$,this.ORDER)}eql($,q){return $===q}sqr($){return B$($*$,this.ORDER)}add($,q){return B$($+q,this.ORDER)}sub($,q){return B$($-q,this.ORDER)}mul($,q){return B$($*q,this.ORDER)}pow($,q){return Gw(this,$,q)}div($,q){return B$($*F5(q,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,q){return $+q}subN($,q){return $-q}mulN($,q){return $*q}inv($){return F5($,this.ORDER)}sqrt($){let q=_5.get(this);if(!q)_5.set(this,q=qw(this.ORDER));return q(this,$)}toBytes($){return this.isLE?qQ($,this.BYTES):EY($,this.BYTES)}fromBytes($,q=!1){Z$($);let{_lengths:J,BYTES:G,isLE:Q,ORDER:Y,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let V=new Uint8Array(G);V.set($,Q?0:V.length-$.length),$=V}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let U=Q?l0($):fJ($);if(X)U=B$(U,Y);if(!q){if(!this.isValid(U))throw Error("invalid field element: outside of range 0..ORDER")}return U}invertBatch($){return GQ(this,$)}cmov($,q,J){return Lq(J,"condition"),J?q:$}}Object.freeze(nX.prototype);function PY($,q={}){return new nX($,q)}function h5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=I$)throw Error("field order must be greater than 1");let q=v8($-I$);return Math.ceil(q/8)}function oX($){let q=h5($);return q+Math.ceil(q/2)}function u5($,q,J=!1){Z$($);let G=$.length,Q=h5(q),Y=Math.max(oX(q),16);if(G<Y||G>1024)throw Error("expected "+Y+"-1024 bytes of input, got "+G);let X=J?l0($):fJ($),U=B$(X,q-I$)+I$;return J?qQ(U,Q):EY(U,Q)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var b8=BigInt(0),hJ=BigInt(1);function QQ($,q){let J=q.negate();return $?J:q}function uJ($,q){let J=GQ($.Fp,q.map((G)=>G.Z));return q.map((G,Q)=>$.fromAffine(G.toAffine(J[Q])))}function i5($,q){if(!Number.isSafeInteger($)||$<=0||$>q)throw Error("invalid window size, expected [1.."+q+"], got W="+$)}function aX($,q){i5($,q);let J=Math.ceil(q/$)+1,G=2**($-1),Q=2**$,Y=JQ($),X=BigInt($);return{windows:J,windowSize:G,mask:Y,maxNumber:Q,shiftBy:X}}function p5($,q,J){let{windowSize:G,mask:Q,maxNumber:Y,shiftBy:X}=J,U=Number($&Q),V=$>>X;if(U>G)U-=Y,V+=hJ;let W=q*G,M=W+Math.abs(U)-1,z=U===0,D=U<0,R=q%2!==0;return{nextN:V,offset:M,isZero:z,isNeg:D,isNegF:R,offsetF:W}}var sX=new WeakMap,d5=new WeakMap;function tX($){return d5.get($)||1}function l5($){if($!==b8)throw Error("invalid wNAF")}class YQ{BASE;ZERO;Fn;bits;constructor($,q){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=q}_unsafeLadder($,q,J=this.ZERO){let G=$;while(q>b8){if(q&hJ)J=J.add(G);G=G.double(),q>>=hJ}return J}precomputeWindow($,q){let{windows:J,windowSize:G}=aX(q,this.bits),Q=[],Y=$,X=Y;for(let U=0;U<J;U++){X=Y,Q.push(X);for(let V=1;V<G;V++)X=X.add(Y),Q.push(X);Y=X.double()}return Q}wNAF($,q,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,Q=this.BASE,Y=aX($,this.bits);for(let X=0;X<Y.windows;X++){let{nextN:U,offset:V,isZero:W,isNeg:M,isNegF:z,offsetF:D}=p5(J,X,Y);if(J=U,W)Q=Q.add(QQ(z,q[D]));else G=G.add(QQ(M,q[V]))}return l5(J),{p:G,f:Q}}wNAFUnsafe($,q,J,G=this.ZERO){let Q=aX($,this.bits);for(let Y=0;Y<Q.windows;Y++){if(J===b8)break;let{nextN:X,offset:U,isZero:V,isNeg:W}=p5(J,Y,Q);if(J=X,V)continue;else{let M=q[U];G=G.add(W?M.negate():M)}}return l5(J),G}getPrecomputes($,q,J){let G=sX.get(q);if(!G){if(G=this.precomputeWindow(q,$),$!==1){if(typeof J==="function")G=J(G);sX.set(q,G)}}return G}cached($,q,J){let G=tX($);return this.wNAF(G,this.getPrecomputes(G,$,J),q)}unsafe($,q,J,G){let Q=tX($);if(Q===1)return this._unsafeLadder($,q,G);return this.wNAFUnsafe(Q,this.getPrecomputes(Q,$,J),q,G)}createCache($,q){i5(q,this.bits),d5.set($,q),sX.delete($)}hasCache($){return tX($)!==1}}function c5($,q,J,G){let Q=q,Y=$.ZERO,X=$.ZERO;while(J>b8||G>b8){if(J&hJ)Y=Y.add(Q);if(G&hJ)X=X.add(Q);Q=Q.double(),J>>=hJ,G>>=hJ}return{p1:Y,p2:X}}function r5($,q,J){if(q){if(q.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return cX(q),q}else return PY($,{isLE:J})}function LY($,q,J={},G){if(G===void 0)G=$==="edwards";if(!q||typeof q!=="object")throw Error(`expected valid ${$} CURVE object`);for(let V of["p","n","h"]){let W=q[V];if(!(typeof W==="bigint"&&W>b8))throw Error(`CURVE.${V} must be positive bigint`)}let Q=r5(q.p,J.Fp,G),Y=r5(q.n,J.Fn,G),U=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let V of U)if(!Q.isValid(q[V]))throw Error(`CURVE.${V} must be valid field element of CURVE.Fp`);return q=Object.freeze(Object.assign({},q)),{CURVE:q,Fp:Q,Fn:Y}}function XQ($,q){return function(G){let Q=$(G);return{secretKey:Q,publicKey:q(Q)}}}function UQ($,q){if(Yq($),Yq(q),q<0||q>4)throw Error("invalid I2OSP length: "+q);if($<0||$>2**(8*q)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:q}).fill(0);for(let G=q-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function Yw($,q){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^q[G];return J}function Xw($){if(!g8($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let q=typeof $==="string"?CY($):$;if(q.length===0)throw Error("DST must be non-empty");return q}function eX($,q,J,G){if(Z$($),Yq(J),q=Xw(q),q.length>255)q=G(d$(CY("H2C-OVERSIZE-DST-"),q));let{outputLen:Q,blockLen:Y}=G,X=Math.ceil(J/Q);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let U=d$(q,UQ(q.length,1)),V=new Uint8Array(Y),W=UQ(J,2),M=Array(X),z=G(d$(V,$,W,UQ(0,1),U));M[0]=G(d$(z,UQ(1,1),U));for(let R=1;R<X;R++){let w=[Yw(z,M[R-1]),UQ(R+1,1),U];M[R]=G(d$(...w))}return d$(...M).slice(0,J)}var n5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var o5=($,q)=>($+($>=0?q:-q)/s5)/q;function Uw($,q,J){Fq("scalar",$,Xq,J);let[[G,Q],[Y,X]]=q,U=o5(X*$,J),V=o5(-Q*$,J),W=$-U*G-V*Y,M=-U*Q-V*X,z=W<Xq,D=M<Xq;if(z)W=-W;if(D)M=-M;let R=JQ(Math.ceil(v8(J)/2))+GJ;if(W<Xq||W>=R||M<Xq||M>=R)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:z,k1:W,k2neg:D,k2:M}}function qU($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function $U($,q){b0($);let J={};for(let G of Object.keys(q))J[G]=$[G]===void 0?q[G]:$[G];if(Lq(J.lowS,"lowS"),Lq(J.prehash,"prehash"),J.format!==void 0)qU(J.format);return J}class a5 extends Error{constructor($=""){super($)}}var r0={Err:a5,_tlv:{encode:($,q)=>{let{Err:J}=r0;if(Yq($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof q!=="string")throw TypeError('"data" expected string, got type='+typeof q);if(q.length&1)throw new J("tlv.encode: unpadded data");let G=q.length/2,Q=$Q(G);if(Q.length/2&128)throw new J("tlv.encode: long form length too big");let Y=G>127?$Q(Q.length/2|128):"";return $Q($)+Y+Q+q},decode($,q){let{Err:J}=r0;q=Z$(q,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(q.length<2||q[G++]!==$)throw new J("tlv.decode: wrong tlv");let Q=q[G++],Y=!!(Q&128),X=0;if(!Y)X=Q;else{let V=Q&127;if(!V)throw new J("tlv.decode(long): indefinite length not supported");if(V>4)throw new J("tlv.decode(long): byte length is too big");let W=q.subarray(G,G+V);if(W.length!==V)throw new J("tlv.decode: length bytes not complete");if(W[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let M of W)X=X<<8|M;if(G+=V,X<128)throw new J("tlv.decode(long): not minimal encoding")}let U=q.subarray(G,G+X);if(U.length!==X)throw new J("tlv.decode: wrong value length");return{v:U,l:q.subarray(G+X)}}},_int:{encode($){let{Err:q}=r0;if(IY($),$<Xq)throw new q("integer: negative integers are not allowed");let J=$Q($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new q("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:q}=r0;if($.length<1)throw new q("invalid signature integer: empty");if($[0]&128)throw new q("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new q("invalid signature integer: unnecessary leading zero");return fJ($)}},toSig($){let{Err:q,_int:J,_tlv:G}=r0,Q=Z$($,void 0,"signature"),{v:Y,l:X}=G.decode(48,Q);if(X.length)throw new q("invalid signature: left bytes after parsing");let{v:U,l:V}=G.decode(2,Y),{v:W,l:M}=G.decode(2,V);if(M.length)throw new q("invalid signature: left bytes after parsing");return{r:J.decode(U),s:J.decode(W)}},hexFromSig($){let{_tlv:q,_int:J}=r0,G=q.encode(2,J.encode($.r)),Q=q.encode(2,J.encode($.s)),Y=G+Q;return q.encode(48,Y)}};Object.freeze(r0._tlv);Object.freeze(r0._int);Object.freeze(r0);var Xq=BigInt(0),GJ=BigInt(1),s5=BigInt(2),FY=BigInt(3),Vw=BigInt(4);function t5($,q={}){let J=LY("weierstrass",$,q),G=J.Fp,Q=J.Fn,Y=J.CURVE,{h:X,n:U}=Y;b0(q,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:V,allowInfinityPoint:W}=q;if(V){if(!G.is0(Y.a)||typeof V.beta!=="bigint"||!Array.isArray(V.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let M=$M(G,Q);function z(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function D(_,E,I){if(W&&E.is0())return Uint8Array.of(0);let{x:A,y:S}=E.toAffine(),P=G.toBytes(A);if(Lq(I,"isCompressed"),I){z();let g=!G.isOdd(S);return d$(e5(g),P)}else return d$(Uint8Array.of(4),P,G.toBytes(S))}function R(_){Z$(_,void 0,"Point");let{publicKey:E,publicKeyUncompressed:I}=M,A=_.length,S=_[0],P=_.subarray(1);if(W&&A===1&&S===0)return{x:G.ZERO,y:G.ZERO};if(A===E&&(S===2||S===3)){let g=G.fromBytes(P);if(!G.isValid(g))throw Error("bad point: is not on curve, wrong x");let L=j(g),b;try{b=G.sqrt(L)}catch(r){let B=r instanceof Error?": "+r.message:"";throw Error("bad point: is not on curve, sqrt error"+B)}z();let O=G.isOdd(b);if((S&1)===1!==O)b=G.neg(b);return{x:g,y:b}}else if(A===I&&S===4){let g=G.BYTES,L=G.fromBytes(P.subarray(0,g)),b=G.fromBytes(P.subarray(g,g*2));if(!Z(L,b))throw Error("bad point: is not on curve");return{x:L,y:b}}else throw Error(`bad point: got length ${A}, expected compressed=${E} or uncompressed=${I}`)}let w=q.toBytes===void 0?D:q.toBytes,N=q.fromBytes===void 0?R:q.fromBytes;function j(_){let E=G.sqr(_),I=G.mul(E,_);return G.add(G.add(I,G.mul(_,Y.a)),Y.b)}function Z(_,E){let I=G.sqr(E),A=j(_);return G.eql(I,A)}if(!Z(Y.Gx,Y.Gy))throw Error("bad curve params: generator point");let T=G.mul(G.pow(Y.a,FY),Vw),v=G.mul(G.sqr(Y.b),BigInt(27));if(G.is0(G.add(T,v)))throw Error("bad curve params: a or b");function y(_,E,I=!1){if(!G.isValid(E)||I&&G.is0(E))throw Error(`bad point coordinate ${_}`);return E}function u(_){if(!(_ instanceof m))throw Error("Weierstrass Point expected")}function F(_){if(!V||!V.basises)throw Error("no endo");return Uw(_,V.basises,Q.ORDER)}function x(_,E,I,A,S){return I=new m(G.mul(I.X,_),I.Y,I.Z),E=QQ(A,E),I=QQ(S,I),E.add(I)}class m{static BASE=new m(Y.Gx,Y.Gy,G.ONE);static ZERO=new m(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=Q;X;Y;Z;constructor(_,E,I){this.X=y("x",_),this.Y=y("y",E,!0),this.Z=y("z",I),Object.freeze(this)}static CURVE(){return Y}static fromAffine(_){let{x:E,y:I}=_||{};if(!_||!G.isValid(E)||!G.isValid(I))throw Error("invalid affine point");if(_ instanceof m)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(I))return m.ZERO;return new m(E,I,G.ONE)}static fromBytes(_){let E=m.fromAffine(N(Z$(_,void 0,"point")));return E.assertValidity(),E}static fromHex(_){return m.fromBytes(F8(_))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(_=8,E=!0){if(l.createCache(this,_),!E)this.multiply(FY);return this}assertValidity(){let _=this;if(_.is0()){if(q.allowInfinityPoint&&G.is0(_.X)&&G.eql(_.Y,G.ONE)&&G.is0(_.Z))return;throw Error("bad point: ZERO")}let{x:E,y:I}=_.toAffine();if(!G.isValid(E)||!G.isValid(I))throw Error("bad point: x or y not field elements");if(!Z(E,I))throw Error("bad point: equation left != right");if(!_.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:_}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(_)}equals(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.eql(G.mul(E,g),G.mul(S,A)),b=G.eql(G.mul(I,g),G.mul(P,A));return L&&b}negate(){return new m(this.X,G.neg(this.Y),this.Z)}double(){let{a:_,b:E}=Y,I=G.mul(E,FY),{X:A,Y:S,Z:P}=this,g=G.ZERO,L=G.ZERO,b=G.ZERO,O=G.mul(A,A),f=G.mul(S,S),r=G.mul(P,P),B=G.mul(A,S);return B=G.add(B,B),b=G.mul(A,P),b=G.add(b,b),g=G.mul(_,b),L=G.mul(I,r),L=G.add(g,L),g=G.sub(f,L),L=G.add(f,L),L=G.mul(g,L),g=G.mul(B,g),b=G.mul(I,b),r=G.mul(_,r),B=G.sub(O,r),B=G.mul(_,B),B=G.add(B,b),b=G.add(O,O),O=G.add(b,O),O=G.add(O,r),O=G.mul(O,B),L=G.add(L,O),r=G.mul(S,P),r=G.add(r,r),O=G.mul(r,B),g=G.sub(g,O),b=G.mul(r,f),b=G.add(b,b),b=G.add(b,b),new m(g,L,b)}add(_){u(_);let{X:E,Y:I,Z:A}=this,{X:S,Y:P,Z:g}=_,L=G.ZERO,b=G.ZERO,O=G.ZERO,f=Y.a,r=G.mul(Y.b,FY),B=G.mul(E,S),o=G.mul(I,P),q$=G.mul(A,g),Y$=G.add(E,I),G$=G.add(S,P);Y$=G.mul(Y$,G$),G$=G.add(B,o),Y$=G.sub(Y$,G$),G$=G.add(E,A);let t=G.add(S,g);return G$=G.mul(G$,t),t=G.add(B,q$),G$=G.sub(G$,t),t=G.add(I,A),L=G.add(P,g),t=G.mul(t,L),L=G.add(o,q$),t=G.sub(t,L),O=G.mul(f,G$),L=G.mul(r,q$),O=G.add(L,O),L=G.sub(o,O),O=G.add(o,O),b=G.mul(L,O),o=G.add(B,B),o=G.add(o,B),q$=G.mul(f,q$),G$=G.mul(r,G$),o=G.add(o,q$),q$=G.sub(B,q$),q$=G.mul(f,q$),G$=G.add(G$,q$),B=G.mul(o,G$),b=G.add(b,B),B=G.mul(t,G$),L=G.mul(Y$,L),L=G.sub(L,B),B=G.mul(Y$,o),O=G.mul(t,O),O=G.add(O,B),new m(L,b,O)}subtract(_){return u(_),this.add(_.negate())}is0(){return this.equals(m.ZERO)}multiply(_){let{endo:E}=q;if(!Q.isValidNot0(_))throw RangeError("invalid scalar: out of range");let I,A,S=(P)=>l.cached(this,P,(g)=>uJ(m,g));if(E){let{k1neg:P,k1:g,k2neg:L,k2:b}=F(_),{p:O,f}=S(g),{p:r,f:B}=S(b);A=f.add(B),I=x(E.beta,O,r,P,L)}else{let{p:P,f:g}=S(_);I=P,A=g}return uJ(m,[I,A])[0]}multiplyUnsafe(_){let{endo:E}=q,I=this,A=_;if(!Q.isValid(A))throw RangeError("invalid scalar: out of range");if(A===Xq||I.is0())return m.ZERO;if(A===GJ)return I;if(l.hasCache(this))return this.multiply(A);if(E){let{k1neg:S,k1:P,k2neg:g,k2:L}=F(A),{p1:b,p2:O}=c5(m,I,P,L);return x(E.beta,b,O,S,g)}else return l.unsafe(I,A)}toAffine(_){let E=this,I=_,{X:A,Y:S,Z:P}=E;if(G.eql(P,G.ONE))return{x:A,y:S};let g=E.is0();if(I==null)I=g?G.ONE:G.inv(P);let L=G.mul(A,I),b=G.mul(S,I),O=G.mul(P,I);if(g)return{x:G.ZERO,y:G.ZERO};if(!G.eql(O,G.ONE))throw Error("invZ was invalid");return{x:L,y:b}}isTorsionFree(){let{isTorsionFree:_}=q;if(X===GJ)return!0;if(_)return _(m,this);return l.unsafe(this,U).is0()}clearCofactor(){let{clearCofactor:_}=q;if(X===GJ)return this;if(_)return _(m,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===GJ)return this.is0();return this.clearCofactor().is0()}toBytes(_=!0){return Lq(_,"isCompressed"),this.assertValidity(),w(m,this,_)}toHex(_=!0){return L8(this.toBytes(_))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let k=Q.BITS,l=new YQ(m,q.endo?Math.ceil(k/2):k);if(k>=8)m.BASE.precompute(8);return Object.freeze(m.prototype),Object.freeze(m),m}function e5($){return Uint8Array.of($?2:3)}function $M($,q){return{secretKey:q.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*q.BYTES}}function Ww($,q={}){let{Fn:J}=$,G=q.randomBytes===void 0?_8:q.randomBytes,Q=Object.assign($M($.Fp,J),{seed:Math.max(oX(J.ORDER),16)});function Y(R){try{let w=J.fromBytes(R);return J.isValidNot0(w)}catch(w){return!1}}function X(R,w){let{publicKey:N,publicKeyUncompressed:j}=Q;try{let Z=R.length;if(w===!0&&Z!==N)return!1;if(w===!1&&Z!==j)return!1;return!!$.fromBytes(R)}catch(Z){return!1}}function U(R){return R=R===void 0?G(Q.seed):R,u5(Z$(R,Q.seed,"seed"),J.ORDER)}function V(R,w=!0){return $.BASE.multiply(J.fromBytes(R)).toBytes(w)}function W(R){let{secretKey:w,publicKey:N,publicKeyUncompressed:j}=Q,Z=J._lengths;if(!g8(R))return;let T=Z$(R,void 0,"key").length,v=T===N||T===j,y=T===w||!!Z?.includes(T);if(v&&y)return;return v}function M(R,w,N=!0){if(W(R)===!0)throw Error("first arg must be private key");if(W(w)===!1)throw Error("second arg must be public key");let j=J.fromBytes(R);return $.fromBytes(w).multiply(j).toBytes(N)}let z={isValidSecretKey:Y,isValidPublicKey:X,randomSecretKey:U},D=XQ(U,V);return Object.freeze(z),Object.freeze(Q),Object.freeze({getPublicKey:V,getSharedSecret:M,keygen:D,Point:$,utils:z,lengths:Q})}function qM($,q,J={}){let G=q;wq(G),b0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let Q=J.randomBytes===void 0?_8:J.randomBytes,Y=J.hmac===void 0?(S,P)=>jq(G,S,P):J.hmac,{Fp:X,Fn:U}=$,{ORDER:V,BITS:W}=U,{keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:w}=Ww($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},j=V*s5+GJ<X.ORDER;function Z(S){let P=V>>GJ;return S>P}function T(S,P){if(!U.isValidNot0(P))throw Error(`invalid signature ${S}: out of range 1..Point.Fn.ORDER`);return P}function v(){if(j)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function y(S,P){qU(P);let g=w.signature,L=P==="compact"?g:P==="recovered"?g+1:void 0;return Z$(S,L)}class u{r;s;recovery;constructor(S,P,g){if(this.r=T("r",S),this.s=T("s",P),g!=null){if(v(),![0,1,2,3].includes(g))throw Error("invalid recovery id");this.recovery=g}Object.freeze(this)}static fromBytes(S,P=N.format){y(S,P);let g;if(P==="der"){let{r:f,s:r}=r0.toSig(Z$(S));return new u(f,r)}if(P==="recovered")g=S[0],P="compact",S=S.subarray(1);let L=w.signature/2,b=S.subarray(0,L),O=S.subarray(L,L*2);return new u(U.fromBytes(b),U.fromBytes(O),g)}static fromHex(S,P){return this.fromBytes(F8(S),P)}assertRecovery(){let{recovery:S}=this;if(S==null)throw Error("invalid recovery id: must be present");return S}addRecoveryBit(S){return new u(this.r,this.s,S)}recoverPublicKey(S){let{r:P,s:g}=this,L=this.assertRecovery(),b=L===2||L===3?P+V:P;if(!X.isValid(b))throw Error("invalid recovery id: sig.r+curve.n != R.x");let O=X.toBytes(b),f=$.fromBytes(d$(e5((L&1)===0),O)),r=U.inv(b),B=x(Z$(S,void 0,"msgHash")),o=U.create(-B*r),q$=U.create(g*r),Y$=$.BASE.multiplyUnsafe(o).add(f.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return Z(this.s)}toBytes(S=N.format){if(qU(S),S==="der")return F8(r0.hexFromSig(this));let{r:P,s:g}=this,L=U.toBytes(P),b=U.toBytes(g);if(S==="recovered")return v(),d$(Uint8Array.of(this.assertRecovery()),L,b);return d$(L,b)}toHex(S){return L8(this.toBytes(S))}}Object.freeze(u.prototype),Object.freeze(u);let F=J.bits2int===void 0?function(P){if(P.length>8192)throw Error("input is too large");let g=fJ(P),L=P.length*8-W;return L>0?g>>BigInt(L):g}:J.bits2int,x=J.bits2int_modN===void 0?function(P){return U.create(F(P))}:J.bits2int_modN,m=JQ(W);function k(S){return Fq("num < 2^"+W,S,Xq,m),U.toBytes(S)}function l(S,P){return Z$(S,void 0,"message"),P?Z$(G(S),void 0,"prehashed message"):S}function _(S,P,g){let{lowS:L,prehash:b,extraEntropy:O}=$U(g,N);S=l(S,b);let f=x(S),r=U.fromBytes(P);if(!U.isValidNot0(r))throw Error("invalid private key");let B=[k(r),k(f)];if(O!=null&&O!==!1){let G$=O===!0?Q(w.secretKey):O;B.push(Z$(G$,void 0,"extraEntropy"))}let o=d$(...B),q$=f;function Y$(G$){let t=F(G$);if(!U.isValidNot0(t))return;let O$=U.inv(t),A$=$.BASE.multiply(t).toAffine(),T$=U.create(A$.x);if(T$===Xq)return;let m$=U.create(O$*U.create(q$+T$*r));if(m$===Xq)return;let M0=(A$.x===T$?0:2)|Number(A$.y&GJ),e0=m$;if(L&&Z(m$))e0=U.neg(m$),M0^=1;return new u(T$,e0,j?void 0:M0)}return{seed:o,k2sig:Y$}}function E(S,P,g={}){let{seed:L,k2sig:b}=_(S,P,g);return L5(G.outputLen,U.BYTES,Y)(L,b).toBytes(g.format)}function I(S,P,g,L={}){let{lowS:b,prehash:O,format:f}=$U(L,N);if(g=Z$(g,void 0,"publicKey"),P=l(P,O),!g8(S)){let r=S instanceof u?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+r)}y(S,f);try{let r=u.fromBytes(S,f),B=$.fromBytes(g);if(b&&r.hasHighS())return!1;let{r:o,s:q$}=r,Y$=x(P),G$=U.inv(q$),t=U.create(Y$*G$),O$=U.create(o*G$),A$=$.BASE.multiplyUnsafe(t).add(B.multiplyUnsafe(O$));if(A$.is0())return!1;return U.create(A$.x)===o}catch(r){return!1}}function A(S,P,g={}){let{prehash:L}=$U(g,N);return P=l(P,L),u.fromBytes(S,"recovered").recoverPublicKey(P).toBytes()}return Object.freeze({keygen:M,getPublicKey:z,getSharedSecret:D,utils:R,lengths:w,Point:$,sign:E,verify:I,recoverPublicKey:A,Signature:u,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Mw=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var zw=t5(Mw),k8=qM(zw,p$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QJ=BigInt(0),A0=BigInt(1),JU=BigInt(2),Rw=BigInt(8);function Dw($,q,J,G){let Q=$.sqr(J),Y=$.sqr(G),X=$.add($.mul(q.a,Q),Y),U=$.add($.ONE,$.mul(q.d,$.mul(Q,Y)));return $.eql(X,U)}function JM($,q={}){let J=q,G=LY("edwards",$,J,J.FpFnLE),{Fp:Q,Fn:Y}=G,X=G.CURVE,{h:U}=X;b0(J,{},{uvRatio:"function"});let V=JU<<BigInt(Y.BYTES*8)-A0,W=(N)=>Q.create(N),M=J.uvRatio===void 0?(N,j)=>{try{return{isValid:!0,value:Q.sqrt(Q.div(N,j))}}catch(Z){return{isValid:!1,value:QJ}}}:J.uvRatio;if(!Dw(Q,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function z(N,j,Z=!1){let T=Z?A0:QJ;return Fq("coordinate "+N,j,T,V),j}function D(N){if(!(N instanceof R))throw Error("EdwardsPoint expected")}class R{static BASE=new R(X.Gx,X.Gy,A0,W(X.Gx*X.Gy));static ZERO=new R(QJ,A0,A0,QJ);static Fp=Q;static Fn=Y;X;Y;Z;T;constructor(N,j,Z,T){this.X=z("x",N),this.Y=z("y",j),this.Z=z("z",Z,!0),this.T=z("t",T),Object.freeze(this)}static CURVE(){return X}static fromAffine(N){if(N instanceof R)throw Error("extended point not allowed");let{x:j,y:Z}=N||{};return z("x",j),z("y",Z),new R(j,Z,A0,W(j*Z))}static fromBytes(N,j=!1){let Z=Q.BYTES,{a:T,d:v}=X;N=JJ(Z$(N,Z,"point")),Lq(j,"zip215");let y=JJ(N),u=N[Z-1];y[Z-1]=u&-129;let F=l0(y),x=j?V:Q.ORDER;Fq("point.y",F,QJ,x);let m=W(F*F),k=W(m-A0),l=W(v*m-T),{isValid:_,value:E}=M(k,l);if(!_)throw Error("bad point: invalid y coordinate");let I=(E&A0)===A0,A=(u&128)!==0;if(!j&&E===QJ&&A)throw Error("bad point: x=0 and x_0=1");if(A!==I)E=W(-E);return R.fromAffine({x:E,y:F})}static fromHex(N,j=!1){return R.fromBytes(F8(N),j)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(N=8,j=!0){if(w.createCache(this,N),!j)this.multiply(JU);return this}assertValidity(){let N=this,{a:j,d:Z}=X;if(N.is0())throw Error("bad point: ZERO");let{X:T,Y:v,Z:y,T:u}=N,F=W(T*T),x=W(v*v),m=W(y*y),k=W(m*m),l=W(F*j),_=W(m*W(l+x)),E=W(k+W(Z*W(F*x)));if(_!==E)throw Error("bad point: equation left != right (1)");let I=W(T*v),A=W(y*u);if(I!==A)throw Error("bad point: equation left != right (2)")}equals(N){D(N);let{X:j,Y:Z,Z:T}=this,{X:v,Y:y,Z:u}=N,F=W(j*u),x=W(v*T),m=W(Z*u),k=W(y*T);return F===x&&m===k}is0(){return this.equals(R.ZERO)}negate(){return new R(W(-this.X),this.Y,this.Z,W(-this.T))}double(){let{a:N}=X,{X:j,Y:Z,Z:T}=this,v=W(j*j),y=W(Z*Z),u=W(JU*W(T*T)),F=W(N*v),x=j+Z,m=W(W(x*x)-v-y),k=F+y,l=k-u,_=F-y,E=W(m*l),I=W(k*_),A=W(m*_),S=W(l*k);return new R(E,I,S,A)}add(N){D(N);let{a:j,d:Z}=X,{X:T,Y:v,Z:y,T:u}=this,{X:F,Y:x,Z:m,T:k}=N,l=W(T*F),_=W(v*x),E=W(u*Z*k),I=W(y*m),A=W((T+v)*(F+x)-l-_),S=I-E,P=I+E,g=W(_-j*l),L=W(A*S),b=W(P*g),O=W(A*g),f=W(S*P);return new R(L,b,f,O)}subtract(N){return D(N),this.add(N.negate())}multiply(N){if(!Y.isValidNot0(N))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:j,f:Z}=w.cached(this,N,(T)=>uJ(R,T));return uJ(R,[j,Z])[0]}multiplyUnsafe(N){if(!Y.isValid(N))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(N===QJ)return R.ZERO;if(this.is0()||N===A0)return this;return w.unsafe(this,N,(j)=>uJ(R,j))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return w.unsafe(this,X.n).is0()}toAffine(N){let j=this,Z=N,{X:T,Y:v,Z:y}=j,u=j.is0();if(Z==null)Z=u?Rw:Q.inv(y);let F=W(T*Z),x=W(v*Z),m=Q.mul(y,Z);if(u)return{x:QJ,y:A0};if(m!==A0)throw Error("invZ was invalid");return{x:F,y:x}}clearCofactor(){if(U===A0)return this;return this.multiplyUnsafe(U)}toBytes(){let{x:N,y:j}=this.toAffine(),Z=Q.toBytes(j);return Z[Z.length-1]|=N&A0?128:0,Z}toHex(){return L8(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let w=new YQ(R,Y.BITS);if(Y.BITS>=8)R.BASE.precompute(8);return Object.freeze(R.prototype),Object.freeze(R),R}class GU{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){iX()}static fromHex($){iX()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return L8(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,q){return this.ep.precompute($,q),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VQ=BigInt(0),m8=BigInt(1),gY=BigInt(2);function Kw($){return b0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function GM($){let q=Kw($),{P:J,type:G,adjustScalarBytes:Q,powPminus2:Y,randomBytes:X}=q,U=G==="x25519";if(!U&&G!=="x448")throw Error("invalid type");let V=X===void 0?_8:X,W=U?255:448,M=U?32:56,z=U?BigInt(9):BigInt(5),D=U?BigInt(121665):BigInt(39081),R=U?gY**BigInt(254):gY**BigInt(447),w=U?BigInt(8)*gY**BigInt(251)-m8:BigInt(4)*gY**BigInt(445)-m8,N=R+w+m8,j=(A)=>B$(A,J),Z=T(z);function T(A){return qQ(j(A),M)}function v(A){let S=JJ(Z$(A,M,"uCoordinate"));if(U)S[31]&=127;return j(l0(S))}function y(A){return l0(Q(JJ(Z$(A,M,"scalar"))))}function u(A,S){let P=l(v(S),y(A));if(P===VQ)throw Error("invalid private or public key received");return T(P)}function F(A){return u(A,Z)}let x=F,m=u;function k(A,S,P){let g=j(A*(S-P));return S=j(S-g),P=j(P+g),{x_2:S,x_3:P}}function l(A,S){Fq("u",A,VQ,J),Fq("scalar",S,R,N);let P=S,g=A,L=m8,b=VQ,O=A,f=m8,r=VQ;for(let o=BigInt(W-1);o>=VQ;o--){let q$=P>>o&m8;r^=q$,{x_2:L,x_3:O}=k(r,L,O),{x_2:b,x_3:f}=k(r,b,f),r=q$;let Y$=L+b,G$=j(Y$*Y$),t=L-b,O$=j(t*t),A$=G$-O$,T$=O+f,m$=O-f,M0=j(m$*Y$),e0=j(T$*t),hq=M0+e0,uq=M0-e0;O=j(hq*hq),f=j(g*j(uq*uq)),L=j(G$*O$),b=j(A$*(G$+j(D*A$)))}({x_2:L,x_3:O}=k(r,L,O)),{x_2:b,x_3:f}=k(r,b,f);let B=Y(b);return j(L*B)}let _={secretKey:M,publicKey:M,seed:M},E=(A)=>{return A=A===void 0?V(M):A,Z$(A,_.seed,"seed"),A},I={randomSecretKey:E};return Object.freeze(_),Object.freeze(I),Object.freeze({keygen:XQ(E,x),getSharedSecret:m,getPublicKey:x,scalarMult:u,scalarMultBase:F,utils:I,GuBytes:Z.slice(),lengths:_})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var Hw=BigInt(0),_q=BigInt(1),QM=BigInt(2),Ow=BigInt(3),ww=BigInt(5),Nw=BigInt(8),lJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),UU=(()=>({p:lJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:Nw,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function UM($){let q=BigInt(10),J=BigInt(20),G=BigInt(40),Q=BigInt(80),Y=lJ,U=$*$%Y*$%Y,V=k0(U,QM,Y)*U%Y,W=k0(V,_q,Y)*$%Y,M=k0(W,ww,Y)*W%Y,z=k0(M,q,Y)*M%Y,D=k0(z,J,Y)*z%Y,R=k0(D,G,Y)*D%Y,w=k0(R,Q,Y)*R%Y,N=k0(w,Q,Y)*R%Y,j=k0(N,q,Y)*M%Y;return{pow_p_5_8:k0(j,QM,Y)*$%Y,b2:U}}function jw($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var QU=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function VU($,q){let J=lJ,G=B$(q*q*q,J),Q=B$(G*G*q,J),Y=UM($*Q).pow_p_5_8,X=B$($*G*Y,J),U=B$(q*X*X,J),V=X,W=B$(X*QU,J),M=U===$,z=U===B$(-$,J),D=U===B$(-$*QU,J);if(M)X=V;if(z||D)X=W;if(gq(X,J))X=B$(-X,J);return{isValid:M||z,value:X}}var pJ=JM(UU,{uvRatio:VU}),YJ=(()=>pJ.Fp)(),VM=(()=>pJ.Fn)();var _Y=(()=>{let $=lJ;return GM({P:$,type:"x25519",powPminus2:(q)=>{let{pow_p_5_8:J,b2:G}=UM(q);return B$(k0(J,Ow,$)*G,$)},adjustScalarBytes:jw})})();var YU=QU,Aw=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Zw=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),Bw=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Sw=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),YM=($)=>VU(_q,$),Tw=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),XU=($)=>YJ.create(l0($)&Tw);function XM($){let{d:q}=UU,J=lJ,G=(Z)=>YJ.create(Z),Q=G(YU*$*$),Y=G((Q+_q)*Bw),X=BigInt(-1),U=G((X-q*Q)*G(Q+q)),{isValid:V,value:W}=VU(Y,U),M=G(W*$);if(!gq(M,J))M=G(-M);if(!V)W=M;if(!V)X=Q;let z=G(X*(Q-_q)*Sw-U),D=W*W,R=G((W+W)*U),w=G(z*Aw),N=G(_q-D),j=G(_q+D);return new pJ(G(R*j),G(N*w),G(w*j),G(R*N))}class K0 extends GU{static BASE=(()=>new K0(pJ.BASE))();static ZERO=(()=>new K0(pJ.ZERO))();static Fp=(()=>YJ)();static Fn=(()=>VM)();constructor($){super($)}static fromAffine($){return new K0(pJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){x$($,32);let{a:q,d:J}=UU,G=lJ,Q=(v)=>YJ.create(v),Y=XU($);if(!P5(YJ.toBytes(Y),$)||gq(Y,G))throw Error("invalid ristretto255 encoding 1");let X=Q(Y*Y),U=Q(_q+q*X),V=Q(_q-q*X),W=Q(U*U),M=Q(V*V),z=Q(q*J*W-M),{isValid:D,value:R}=YM(Q(z*M)),w=Q(R*V),N=Q(R*w*z),j=Q((Y+Y)*w);if(gq(j,G))j=Q(-j);let Z=Q(U*N),T=Q(j*Z);if(!D||gq(T,G)||Z===Hw)throw Error("invalid ristretto255 encoding 2");return new K0(new pJ(j,Z,_q,T))}static fromHex($){return K0.fromBytes(CG($))}toBytes(){let{X:$,Y:q,Z:J,T:G}=this.ep,Q=lJ,Y=(N)=>YJ.create(N),X=Y(Y(J+q)*Y(J-q)),U=Y($*q),V=Y(U*U),{value:W}=YM(Y(X*V)),M=Y(W*X),z=Y(W*U),D=Y(M*z*G),R;if(gq(G*D,Q)){let N=Y(q*YU),j=Y($*YU);$=N,q=j,R=Y(M*Zw)}else R=z;if(gq($*D,Q))q=Y(-q);let w=Y((J-q)*R);if(gq(w,Q))w=Y(-w);return YJ.toBytes(w)}equals($){this.assertSame($);let{X:q,Y:J}=this.ep,{X:G,Y:Q}=$.ep,Y=(V)=>YJ.create(V),X=Y(q*Q)===Y(J*G),U=Y(J*Q)===Y(q*G);return X||U}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var Iw=Object.freeze({Point:K0,hashToCurve($,q){let J=q?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":q.DST,G=eX($,J,64,sQ);return Iw.deriveToCurve(G)},hashToScalar($,q={DST:n5}){let J=eX($,q.DST,64,sQ);return VM.create(l0(J))},deriveToCurve($){x$($,64);let q=XU($.subarray(0,32)),J=XM(q),G=XU($.subarray(32,64)),Q=XM(G);return new K0(J.add(Q))}});var WM=!1,Ew=!1;async function MM($,q){if(Ew)return await q();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await q();else throw J}}async function MU($,q){return await MM(async()=>{let J=WU($)?$:await Pw($),G=await crypto.subtle.importKey("raw",Lw(q),{name:"X25519"},WM,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(WU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMult($,q)})}async function zU($){return await MM(async()=>{return MU($,_Y.GuBytes)},()=>{if(WU($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return _Y.scalarMultBase($)})}var Cw=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function Pw($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let q=new Uint8Array([...Cw,...$]);return crypto.subtle.importKey("pkcs8",q,{name:"X25519"},WM,["deriveBits"])}function WU($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function Lw($){return $}class zM{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let q=this.buf.indexOf(10);if(q>=0)return $.push(this.buf.subarray(0,q)),this.transcript.push(this.buf.subarray(0,q+1)),this.buf=this.buf.subarray(q+1),gw(WQ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=WQ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:WQ(this.transcript)}}}function gw($){return $.forEach((q)=>{if(q<32||q>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function WQ($){let q=$.reduce((Q,Y)=>Q+Y.length,0),J=new Uint8Array(q),G=0;for(let Q of $)J.set(Q,G),G+=Q.length;return J}function vY($,...q){return $.pipeThrough(new TransformStream({start(J){for(let G of q)J.enqueue(G)}}))}function RM($){return new ReadableStream({start(q){q.enqueue($),q.close()}})}async function DM($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}class vq{args;body;constructor($,q){this.args=$,this.body=q}}function RU($){let q=[];q.push(`age-encryption.org/v1
|
|
58
58
|
`);for(let J of $){q.push("-> "+J.args.join(" ")+`
|
|
59
59
|
`);for(let G=0;G<J.body.length;G+=48){let Q=G+48;if(Q>J.body.length)Q=J.body.length;q.push(x0.encode(J.body.subarray(G,Q))+`
|
|
60
60
|
`)}if(J.body.length%48===0)q.push(`
|
|
@@ -147,6 +147,7 @@ env:
|
|
|
147
147
|
- AI_API_KEY
|
|
148
148
|
- GIT_SYNC_TOKEN
|
|
149
149
|
- DISCORD_BOT_TOKEN
|
|
150
|
+
- SETUP_EMAIL_TO
|
|
150
151
|
- SETUP_EMAIL_API_KEY
|
|
151
152
|
- SETUP_EMAIL_FROM
|
|
152
153
|
|
package/dist/index.js
CHANGED
|
@@ -53,7 +53,7 @@ return `+str.trim()+`;
|
|
|
53
53
|
`).join(`
|
|
54
54
|
`+Y),$.push(Q+"m+"+OY.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=OA()+q+" "+$[0]}function OA(){if(_M.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}function wA(...$){return process.stderr.write(HY.formatWithOptions(_M.inspectOpts,...$)+`
|
|
55
55
|
`)}function NA($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function jA(){return process.env.DEBUG}function AA($){$.inspectOpts={};let q=Object.keys(_M.inspectOpts);for(let J=0;J<q.length;J++)$.inspectOpts[q[J]]=_M.inspectOpts[q[J]]}OY.exports=TX()(_M);var{formatters:gM}=OY.exports;gM.o=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts).split(`
|
|
56
|
-
`).map((q)=>q.trim()).join(" ")};gM.O=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts)}});var kM=X$((Iv,CX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)CX.exports=IM();else CX.exports=bM()});var vz=X$((tm,_z)=>{var EY=Object.prototype.hasOwnProperty,gz=Object.prototype.toString,Iz=Object.defineProperty,Ez=Object.getOwnPropertyDescriptor,Cz=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return gz.call(q)==="[object Array]"},Pz=function(q){if(!q||gz.call(q)!=="[object Object]")return!1;var J=EY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&EY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||EY.call(q,Q)},Lz=function(q,J){if(Iz&&J.name==="__proto__")Iz(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Fz=function(q,J){if(J==="__proto__"){if(!EY.call(q,J))return;else if(Ez)return Ez(q,J).value}return q[J]};_z.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Fz(U,J),Q=Fz(q,J),U!==Q){if(M&&Q&&(Pz(Q)||(Y=Cz(Q)))){if(Y)Y=!1,X=G&&Cz(G)?G:[];else X=G&&Pz(G)?G:{};Lz(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")Lz(U,{name:J,newValue:Q})}}return U}});import{access as KI,chmod as ZU,mkdir as sR,readFile as eR,writeFile as tR}from"fs/promises";import{dirname as HI,join as TU}from"path";import{fileURLToPath as OI}from"url";var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.
|
|
56
|
+
`).map((q)=>q.trim()).join(" ")};gM.O=function($){return this.inspectOpts.colors=this.useColors,HY.inspect($,this.inspectOpts)}});var kM=X$((Iv,CX)=>{if(typeof process>"u"||process.type==="renderer"||!1||process.__nwjs)CX.exports=IM();else CX.exports=bM()});var vz=X$((tm,_z)=>{var EY=Object.prototype.hasOwnProperty,gz=Object.prototype.toString,Iz=Object.defineProperty,Ez=Object.getOwnPropertyDescriptor,Cz=function(q){if(typeof Array.isArray==="function")return Array.isArray(q);return gz.call(q)==="[object Array]"},Pz=function(q){if(!q||gz.call(q)!=="[object Object]")return!1;var J=EY.call(q,"constructor"),G=q.constructor&&q.constructor.prototype&&EY.call(q.constructor.prototype,"isPrototypeOf");if(q.constructor&&!J&&!G)return!1;var Q;for(Q in q);return typeof Q>"u"||EY.call(q,Q)},Lz=function(q,J){if(Iz&&J.name==="__proto__")Iz(q,J.name,{enumerable:!0,configurable:!0,value:J.newValue,writable:!0});else q[J.name]=J.newValue},Fz=function(q,J){if(J==="__proto__"){if(!EY.call(q,J))return;else if(Ez)return Ez(q,J).value}return q[J]};_z.exports=function $(){var q,J,G,Q,Y,X,U=arguments[0],V=1,W=arguments.length,M=!1;if(typeof U==="boolean")M=U,U=arguments[1]||{},V=2;if(U==null||typeof U!=="object"&&typeof U!=="function")U={};for(;V<W;++V)if(q=arguments[V],q!=null){for(J in q)if(G=Fz(U,J),Q=Fz(q,J),U!==Q){if(M&&Q&&(Pz(Q)||(Y=Cz(Q)))){if(Y)Y=!1,X=G&&Cz(G)?G:[];else X=G&&Pz(G)?G:{};Lz(U,{name:J,newValue:$(M,X,Q)})}else if(typeof Q<"u")Lz(U,{name:J,newValue:Q})}}return U}});import{access as KI,chmod as ZU,mkdir as sR,readFile as eR,writeFile as tR}from"fs/promises";import{dirname as HI,join as TU}from"path";import{fileURLToPath as OI}from"url";var rQ={name:"@rizom/ops",description:"Operator CLI for managing private brain fleet registry repos",publishConfig:{access:"public"},version:"0.2.0-alpha.82",type:"module",exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{bun:"./dist/deploy.js",types:"./dist/deploy.d.ts",import:"./dist/deploy.js"}},main:"./dist/index.js",types:"./dist/index.d.ts",bin:{"brains-ops":"./dist/brains-ops.js"},files:["dist","templates"],scripts:{build:"bun scripts/build.ts",prepublishOnly:"bun scripts/build.ts",typecheck:"tsc --noEmit",lint:"eslint . --ext .ts","lint:fix":"eslint . --ext .ts --fix",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000"},dependencies:{"age-encryption":"^0.3.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"latest",typescript:"^5.3.3"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},license:"Apache-2.0",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",bugs:"https://github.com/rizom-ai/brains/issues",engines:{bun:">=1.3.3"},keywords:["brains","ops","cli","deploy","fleet","operator"]};var CW=`ARG BUN_VERSION=1.3.10
|
|
57
57
|
FROM oven/bun:\${BUN_VERSION}-slim AS runtime
|
|
58
58
|
|
|
59
59
|
WORKDIR /app
|
|
@@ -130,6 +130,7 @@ env:
|
|
|
130
130
|
- AI_API_KEY
|
|
131
131
|
- GIT_SYNC_TOKEN
|
|
132
132
|
- DISCORD_BOT_TOKEN
|
|
133
|
+
- SETUP_EMAIL_TO
|
|
133
134
|
- SETUP_EMAIL_API_KEY
|
|
134
135
|
- SETUP_EMAIL_FROM
|
|
135
136
|
|